@object-ui/app-shell 4.2.1 → 4.3.0

package/CHANGELOG.md

@@ -1,5 +1,50 @@
 # @object-ui/app-shell — Changelog
 
+## 4.3.0
+
+### Patch Changes
+
+- 079c3b2: feat(plugin-report): per-block field resolution for joined reports
+
+  Joined report blocks can override `objectName` to query a different
+  object than the container, but the editor was always offering the
+  container's fields — wrong field names, wrong types, broken granularity
+  and chart-axis filtering.
+
+  `ReportConfigPanel` now accepts an optional `getFieldsForObject`
+  resolver. `JoinedBlocksEditor` uses it to source fields for each
+  block based on `block.objectName ?? containerObjectName`, falling
+  back to the static `availableFields` when the resolver returns
+  `undefined` (unknown object).
+
+  `ReportView` wires the resolver against the app's loaded `objects`
+  list and reuses the same parsing path internally to derive its
+  top-level `availableFields`, removing the duplicated schema lookup.
+
+  5 new RTL tests verify the resolver wiring, fallback behaviour,
+  add-block flow, and inline duplicate-name validation (111 plugin-report
+  tests green).
+
+- 154a36c: fix
+- fed4897: fix
+- Updated dependencies [f196cf4]
+- Updated dependencies [ee1cc96]
+- Updated dependencies [0b032be]
+- Updated dependencies [115d36a]
+- Updated dependencies [4e7bc1b]
+- Updated dependencies [8442c05]
+  - @object-ui/i18n@4.3.0
+  - @object-ui/components@4.3.0
+  - @object-ui/fields@4.3.0
+  - @object-ui/react@4.3.0
+  - @object-ui/layout@4.3.0
+  - @object-ui/types@4.3.0
+  - @object-ui/core@4.3.0
+  - @object-ui/data-objectstack@4.3.0
+  - @object-ui/auth@4.3.0
+  - @object-ui/permissions@4.3.0
+  - @object-ui/collaboration@4.3.0
+
 ## 4.2.1
 
 ### Patch Changes

package/dist/components/ManagedByBadge.d.ts

@@ -0,0 +1,10 @@
+export interface ManagedByBadgeProps {
+    /** The `managedBy` flag from the object schema. */
+    managedBy?: string;
+    /** Optional override for the human-readable system name shown in the tooltip. */
+    label?: string;
+    /** Optional extra classes. */
+    className?: string;
+}
+export declare function ManagedByBadge({ managedBy, label, className }: ManagedByBadgeProps): import("react/jsx-runtime").JSX.Element | null;
+export default ManagedByBadge;

package/dist/components/ManagedByBadge.js

@@ -0,0 +1,44 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { ShieldAlert, Settings2, Lock, Archive } from 'lucide-react';
+import { Badge, Tooltip, TooltipTrigger, TooltipContent, TooltipProvider, cn, } from '@object-ui/components';
+const VARIANTS = {
+    config: {
+        icon: Settings2,
+        short: 'Admin config',
+        title: 'Administrator configuration',
+        body: () => 'These rows define how the platform behaves at runtime. Author them here; the runtime data they produce lives in a separate table.',
+        tone: 'border-sky-300/60 bg-sky-50 text-sky-900 hover:bg-sky-100 dark:border-sky-500/40 dark:bg-sky-950/40 dark:text-sky-100',
+    },
+    system: {
+        icon: Lock,
+        short: 'System-managed',
+        title: 'Managed by the platform',
+        body: () => 'Rows here are created automatically when actions run on the source record. The list below is a read-only monitoring surface — row-level actions (Approve, Recall, Resend, …) live on each row.',
+        tone: 'border-slate-300/60 bg-slate-50 text-slate-900 hover:bg-slate-100 dark:border-slate-500/40 dark:bg-slate-950/40 dark:text-slate-100',
+    },
+    'append-only': {
+        icon: Archive,
+        short: 'Read-only · Audit log',
+        title: 'Read-only historical record',
+        body: () => "Immutable audit log. Rows cannot be created, edited, or deleted from the UI — they're written by the platform when events occur. Use Export to download for compliance review.",
+        tone: 'border-zinc-300/60 bg-zinc-50 text-zinc-900 hover:bg-zinc-100 dark:border-zinc-500/40 dark:bg-zinc-950/40 dark:text-zinc-100',
+    },
+    'better-auth': {
+        icon: ShieldAlert,
+        short: 'Identity',
+        title: 'Managed by the identity provider',
+        body: (display) => `This object's schema is owned by ${display}. Direct edits bypass password hashing, session validation, two-factor checks, and audit hooks. Use the dedicated identity workflows instead (Invite User, Reset Password, Revoke Session, Rotate Key, …).`,
+        tone: 'border-amber-300/60 bg-amber-50 text-amber-900 hover:bg-amber-100 dark:border-amber-500/40 dark:bg-amber-950/40 dark:text-amber-100',
+    },
+};
+export function ManagedByBadge({ managedBy, label, className }) {
+    if (!managedBy || managedBy === 'platform')
+        return null;
+    const variant = VARIANTS[managedBy];
+    if (!variant)
+        return null;
+    const Icon = variant.icon;
+    const display = label ?? 'better-auth';
+    return (_jsx(TooltipProvider, { delayDuration: 200, children: _jsxs(Tooltip, { children: [_jsx(TooltipTrigger, { asChild: true, children: _jsxs(Badge, { variant: "outline", "data-testid": "managed-by-badge", "data-bucket": managedBy, className: cn('gap-1 font-normal text-[11px] leading-none py-0.5 px-1.5 cursor-help', variant.tone, className), children: [_jsx(Icon, { className: "h-3 w-3", "aria-hidden": "true" }), _jsx("span", { children: variant.short })] }) }), _jsxs(TooltipContent, { side: "bottom", align: "start", className: "max-w-xs text-xs leading-relaxed", children: [_jsx("p", { className: "font-semibold mb-1", children: variant.title }), _jsx("p", { className: "text-muted-foreground", children: variant.body(display) })] })] }) }));
+}
+export default ManagedByBadge;

package/dist/layout/ActivityFeed.js

@@ -9,7 +9,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  */
 import { useState } from 'react';
 import { Button, Badge, Sheet, SheetContent, SheetHeader, SheetTitle, SheetTrigger, } from '@object-ui/components';
-import { Bell, Plus, Pencil, Trash2, MessageSquare, Filter } from 'lucide-react';
+import { Activity, Plus, Pencil, Trash2, MessageSquare, Filter } from 'lucide-react';
 import { useObjectTranslation } from '@object-ui/i18n';
 const typeConfig = {
     create: { icon: Plus, color: 'text-green-500' },
@@ -57,11 +57,11 @@ export function ActivityFeed({ activities = [], className }) {
         delete: t('layout.activityFeed.typeDelete'),
         comment: t('layout.activityFeed.typeComment'),
     };
-    return (_jsxs(Sheet, { open: open, onOpenChange: setOpen, children: [_jsx(SheetTrigger, { asChild: true, children: _jsxs(Button, { variant: "ghost", size: "icon", className: className ?? 'h-8 w-8', "aria-label": t('layout.activityFeed.ariaLabel'), children: [_jsx(Bell, { className: "h-4 w-4" }), activities.length > 0 && (_jsx("span", { className: "absolute -top-0.5 -right-0.5 h-3.5 w-3.5 rounded-full bg-primary text-[9px] font-bold text-primary-foreground flex items-center justify-center", children: activities.length > 9 ? '9+' : activities.length }))] }) }), _jsxs(SheetContent, { side: "right", className: "w-80 sm:w-96", children: [_jsx(SheetHeader, { children: _jsxs(SheetTitle, { className: "flex items-center justify-between", children: [t('layout.activityFeed.title'), _jsxs(Button, { variant: showFilters ? 'secondary' : 'ghost', size: "sm", className: "h-7 px-2", onClick: () => setShowFilters(!showFilters), children: [_jsx(Filter, { className: "h-3.5 w-3.5 mr-1" }), t('layout.activityFeed.filter')] })] }) }), showFilters && (_jsx("div", { className: "flex flex-wrap gap-1.5 mt-3 px-1", children: Object.keys(typeConfig).map(type => {
+    return (_jsxs(Sheet, { open: open, onOpenChange: setOpen, children: [_jsx(SheetTrigger, { asChild: true, children: _jsxs(Button, { variant: "ghost", size: "icon", className: className ?? 'h-8 w-8', "aria-label": t('layout.activityFeed.ariaLabel'), children: [_jsx(Activity, { className: "h-4 w-4" }), activities.length > 0 && (_jsx("span", { className: "absolute -top-0.5 -right-0.5 h-3.5 w-3.5 rounded-full bg-primary text-[9px] font-bold text-primary-foreground flex items-center justify-center", children: activities.length > 9 ? '9+' : activities.length }))] }) }), _jsxs(SheetContent, { side: "right", className: "w-80 sm:w-96", children: [_jsx(SheetHeader, { children: _jsxs(SheetTitle, { className: "flex items-center justify-between", children: [t('layout.activityFeed.title'), _jsxs(Button, { variant: showFilters ? 'secondary' : 'ghost', size: "sm", className: "h-7 px-2", onClick: () => setShowFilters(!showFilters), children: [_jsx(Filter, { className: "h-3.5 w-3.5 mr-1" }), t('layout.activityFeed.filter')] })] }) }), showFilters && (_jsx("div", { className: "flex flex-wrap gap-1.5 mt-3 px-1", children: Object.keys(typeConfig).map(type => {
                             const { icon: Icon, color } = typeConfig[type];
                             const active = notificationPreferences[type];
                             return (_jsxs(Badge, { variant: active ? 'default' : 'outline', className: "cursor-pointer select-none gap-1", onClick: () => togglePreference(type), children: [_jsx(Icon, { className: `h-3 w-3 ${active ? '' : color}` }), typeLabels[type]] }, type));
-                        }) })), filteredActivities.length === 0 ? (_jsxs("div", { className: "flex flex-col items-center justify-center gap-2 py-16 text-muted-foreground", children: [_jsx(Bell, { className: "h-8 w-8 opacity-40" }), _jsx("p", { className: "text-sm", children: t('layout.activityFeed.empty') })] })) : (_jsx("ul", { className: "mt-4 space-y-1 overflow-y-auto max-h-[calc(100vh-8rem)]", children: filteredActivities.map((item) => {
+                        }) })), filteredActivities.length === 0 ? (_jsxs("div", { className: "flex flex-col items-center justify-center gap-2 py-16 text-muted-foreground", children: [_jsx(Activity, { className: "h-8 w-8 opacity-40" }), _jsx("p", { className: "text-sm", children: t('layout.activityFeed.empty') })] })) : (_jsx("ul", { className: "mt-4 space-y-1 overflow-y-auto max-h-[calc(100vh-8rem)]", children: filteredActivities.map((item) => {
                             const { icon: Icon, color } = typeConfig[item.type];
                             return (_jsxs("li", { className: "flex items-start gap-3 rounded-md px-2 py-2 hover:bg-muted/50 transition-colors", children: [_jsx("span", { className: `mt-0.5 shrink-0 ${color}`, children: _jsx(Icon, { className: "h-4 w-4" }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("p", { className: "text-sm leading-snug", children: item.description }), _jsxs("p", { className: "mt-0.5 text-xs text-muted-foreground", children: [item.user, " \u00B7 ", formatRelativeTime(item.timestamp, t)] })] })] }, item.id));
                         }) }))] })] }));

package/dist/utils/managedByEmptyState.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Derive a context-aware empty-state config for object lists whose
+ * `managedBy` bucket means the user can't create rows directly from
+ * this list view.
+ *
+ * Background: previously the entire affordance story was carried by a
+ * full-width banner pinned to the top of every list/detail/form page.
+ * That violated the principle most enterprise platforms (Salesforce,
+ * ServiceNow, SAP Fiori, Notion, Linear) settled on long ago: hide the
+ * affordance you don't want users to take, and use the *empty state* as
+ * the only place to explain why the list is empty and where new entries
+ * come from.
+ *
+ * This helper returns an `emptyState` payload compatible with the
+ * `ListView` schema (`{ title, message, icon }`). It only fires for the
+ * buckets where the default empty state ("No records yet") would be
+ * misleading; for `platform`/`config` it returns `undefined` so the
+ * caller falls back to the user-defined view-level empty state.
+ *
+ * The bucket → message mapping mirrors `ManagedByBadge` so that the badge
+ * (in the header) and the empty state (in the body) tell a consistent
+ * story without repeating themselves verbatim.
+ */
+export interface ManagedByEmptyState {
+    title: string;
+    message: string;
+    icon: string;
+}
+export declare function resolveManagedByEmptyState(managedBy: string | undefined | null): ManagedByEmptyState | undefined;

package/dist/utils/managedByEmptyState.js

@@ -0,0 +1,24 @@
+export function resolveManagedByEmptyState(managedBy) {
+    switch (managedBy) {
+        case 'system':
+            return {
+                icon: 'Lock',
+                title: 'Nothing here yet',
+                message: 'Entries appear automatically when their source action runs (e.g. Submit for Approval, Share, Invite). Trigger one of those on a source record to create a row.',
+            };
+        case 'append-only':
+            return {
+                icon: 'Archive',
+                title: 'No events recorded',
+                message: 'This is an immutable audit log. Rows are written by the platform when events occur — you can export the history but cannot create entries from here.',
+            };
+        case 'better-auth':
+            return {
+                icon: 'ShieldAlert',
+                title: 'No identity records',
+                message: 'Identity rows are managed by the authentication provider. Use the dedicated identity workflows (Invite User, Reset Password, …) to create new entries.',
+            };
+        default:
+            return undefined;
+    }
+}

package/dist/utils/resolveActionParams.d.ts

@@ -0,0 +1,86 @@
+/**
+ * resolveActionParams — Resolves field-backed action parameters against
+ * runtime object metadata.
+ *
+ * Action params (`packages/spec/src/ui/action.zod.ts ActionParamSchema`) may
+ * either be declared inline (`{ name, label, type, ... }`) or reference an
+ * existing object field via `{ field, objectOverride? }`. Field-backed
+ * params inherit label (i18n via `fieldLabel()`), type, options, validation,
+ * placeholder, and help text from the object's field definition. Inline
+ * properties on a field-backed param act as overrides.
+ *
+ * The resolver flattens each param to the runtime `ActionParamDef` shape
+ * expected by `ActionParamDialog`, so the dialog itself stays agnostic to
+ * field references.
+ */
+import type { ActionParamDef } from '@object-ui/core';
+/**
+ * `ActionParamDialog` switches on raw `FieldType` values
+ * (`text` / `email` / `select` / `textarea` / `number` / `url` / `date` / …),
+ * matching the `FieldType` enum in `@objectstack/spec`. **Do not** route
+ * through `mapFieldTypeToFormType()` here — that helper translates into the
+ * FormField widget vocabulary (`field:select`, …) which the dialog does not
+ * understand.
+ */
+/** Raw param as authored on a schema action (post-zod). */
+export interface RawActionParam {
+    name?: string;
+    field?: string;
+    objectOverride?: string;
+    label?: string;
+    type?: string;
+    required?: boolean;
+    options?: Array<{
+        label: string;
+        value: string;
+    }>;
+    placeholder?: string;
+    helpText?: string;
+    defaultValue?: unknown;
+    /** When true, seed defaultValue from the row record using the field name. */
+    defaultFromRow?: boolean;
+}
+/** Field metadata as exposed by `useMetadata().objects[].fields`. */
+interface RuntimeField {
+    type?: string;
+    label?: string;
+    required?: boolean;
+    placeholder?: string;
+    help?: string;
+    description?: string;
+    options?: Array<{
+        label: string;
+        value: string;
+    } | string>;
+    multiple?: boolean;
+    defaultValue?: unknown;
+}
+interface RuntimeObject {
+    name?: string;
+    fields?: Record<string, RuntimeField>;
+}
+export interface ResolveActionParamsContext {
+    /** Default object name when a param's `objectOverride` is absent. */
+    objectName: string;
+    /** All known runtime objects (`useMetadata().objects`). */
+    objects: RuntimeObject[];
+    /** i18n resolver — `useObjectLabel().fieldLabel`. */
+    fieldLabel: (objectName: string, fieldName: string, fallback: string) => string;
+    /** Optional option-label translator — `useObjectLabel().fieldOptionLabel`. */
+    fieldOptionLabel?: (objectName: string, fieldName: string, optionValue: string, fallback: string) => string;
+    /**
+     * Row record providing default values for params with `defaultFromRow` set.
+     * Used by list_item actions (edit/delete dialogs) so the dialog opens with
+     * the row's current values pre-filled.
+     */
+    row?: Record<string, unknown>;
+}
+/**
+ * Resolve a single raw param against object metadata. Inline params pass
+ * through (with safe defaults); field-backed params inherit from the
+ * referenced field and accept inline overrides on top.
+ */
+export declare function resolveActionParam(param: RawActionParam, ctx: ResolveActionParamsContext): ActionParamDef;
+/** Resolve an array of raw action params. */
+export declare function resolveActionParams(params: RawActionParam[] | undefined, ctx: ResolveActionParamsContext): ActionParamDef[];
+export {};

package/dist/utils/resolveActionParams.js

@@ -0,0 +1,77 @@
+/** Normalise an options entry (allowing bare strings) into label/value pairs. */
+function normaliseOptions(options, objectName, fieldName, optionLabel) {
+    if (!Array.isArray(options) || options.length === 0)
+        return undefined;
+    return options.map((o) => {
+        const raw = typeof o === 'string' ? { label: o, value: o } : o;
+        const label = optionLabel
+            ? optionLabel(objectName, fieldName, raw.value, raw.label)
+            : raw.label;
+        return { label, value: raw.value };
+    });
+}
+/**
+ * Resolve a single raw param against object metadata. Inline params pass
+ * through (with safe defaults); field-backed params inherit from the
+ * referenced field and accept inline overrides on top.
+ */
+export function resolveActionParam(param, ctx) {
+    /** Row-context default: when `defaultFromRow` and a row is present, the
+     *  param's defaultValue is the row's value at the field key (or `name`). */
+    const rowKey = param.field ?? param.name;
+    const rowDefault = param.defaultFromRow && ctx.row && rowKey != null && Object.prototype.hasOwnProperty.call(ctx.row, rowKey)
+        ? ctx.row[rowKey]
+        : undefined;
+    // Inline param — no field reference, just normalise.
+    if (!param.field) {
+        return {
+            name: param.name ?? '',
+            label: param.label ?? param.name ?? '',
+            type: param.type ?? 'text',
+            required: param.required ?? false,
+            options: param.options,
+            placeholder: param.placeholder,
+            helpText: param.helpText,
+            defaultValue: rowDefault ?? param.defaultValue,
+        };
+    }
+    const ownerName = param.objectOverride ?? ctx.objectName;
+    const owner = ctx.objects.find((o) => o?.name === ownerName);
+    const field = owner?.fields?.[param.field];
+    if (!field) {
+        // Reference target missing — fall back to a plain text input so the
+        // action remains usable in environments where the metadata cache is
+        // partial (e.g. tests).
+        return {
+            name: param.name ?? param.field,
+            label: param.label ?? ctx.fieldLabel(ownerName, param.field, param.field),
+            type: param.type ?? 'text',
+            required: param.required ?? false,
+            options: param.options,
+            placeholder: param.placeholder,
+            helpText: param.helpText,
+            defaultValue: rowDefault ?? param.defaultValue,
+        };
+    }
+    const resolvedType = param.type ?? field.type ?? 'text';
+    const resolvedOptions = param.options
+        ?? normaliseOptions(field.options, ownerName, param.field, ctx.fieldOptionLabel);
+    const resolvedLabel = param.label
+        ?? ctx.fieldLabel(ownerName, param.field, field.label ?? param.field);
+    return {
+        name: param.name ?? param.field,
+        label: resolvedLabel,
+        type: resolvedType,
+        required: param.required ?? field.required ?? false,
+        options: resolvedOptions,
+        placeholder: param.placeholder ?? field.placeholder,
+        helpText: param.helpText ?? field.help ?? field.description,
+        defaultValue: rowDefault ?? param.defaultValue ?? field.defaultValue,
+    };
+}
+/** Resolve an array of raw action params. */
+export function resolveActionParams(params, ctx) {
+    if (!Array.isArray(params))
+        return [];
+    return params.map((p) => resolveActionParam(p, ctx));
+}

package/dist/views/ObjectView.js

@@ -26,8 +26,9 @@ import { MetadataPanel, useMetadataInspector } from './MetadataInspector';
 import { ViewConfigPanel } from './ViewConfigPanel';
 import { CreateViewDialog } from './CreateViewDialog';
 import { PageHeader } from '../layout/PageHeader';
-import { ManagedByBanner } from '../components/ManagedByBanner';
+import { ManagedByBadge } from '../components/ManagedByBadge';
 import { resolveCrudAffordances } from '../utils/crudAffordances';
+import { resolveManagedByEmptyState } from '../utils/managedByEmptyState';
 import { useObjectActions } from '../hooks/useObjectActions';
 import { useObjectTranslation, useObjectLabel } from '@object-ui/i18n';
 import { usePermissions } from '@object-ui/permissions';
@@ -37,6 +38,7 @@ import { ActionProvider, useNavigationOverlay, SchemaRenderer } from '@object-ui
 import { toast } from 'sonner';
 import { ActionConfirmDialog } from './ActionConfirmDialog';
 import { ActionParamDialog } from './ActionParamDialog';
+import { resolveActionParams } from '../utils/resolveActionParams';
 /** Map view types to Lucide icons (Airtable-style) */
 const VIEW_TYPE_ICONS = {
     grid: TableIcon,
@@ -346,7 +348,7 @@ export function ObjectView({ dataSource, objects, onEdit, externalRefreshKey })
     const [searchParams, setSearchParams] = useSearchParams();
     const { showDebug } = useMetadataInspector();
     const { t } = useObjectTranslation();
-    const { objectLabel, objectDescription: objectDesc, viewLabel, actionLabel, actionConfirm, actionSuccess } = useObjectLabel();
+    const { objectLabel, objectDescription: objectDesc, viewLabel, actionLabel, actionConfirm, actionSuccess, fieldLabel, fieldOptionLabel } = useObjectLabel();
     // Inline view config panel state (Airtable-style right sidebar)
     const [showViewConfigPanel, setShowViewConfigPanel] = useState(false);
     const [viewConfigPanelMode, setViewConfigPanelMode] = useState('edit');
@@ -483,7 +485,7 @@ export function ObjectView({ dataSource, objects, onEdit, externalRefreshKey })
     // Record count tracking for footer
     const [recordCount, setRecordCount] = useState(undefined);
     // Admin users automatically get design tools (no toggle needed)
-    const { user } = useAuth();
+    const { user, activeOrganization } = useAuth();
     const isAdmin = user?.role === 'admin';
     const { can } = usePermissions();
     // Get Object Definition
@@ -871,11 +873,24 @@ export function ObjectView({ dataSource, objects, onEdit, externalRefreshKey })
             setConfirmState({ open: true, message, options, resolve });
         });
     }, []);
-    const paramCollectionHandler = useCallback((params) => {
+    const paramCollectionHandler = useCallback((params, action) => {
         return new Promise((resolve) => {
-            setParamState({ open: true, params, resolve });
+            // List_item actions stash the row record under params._rowRecord
+            // (see ObjectGrid → onRowAction). Pull it out so resolveActionParams
+            // can pre-fill `defaultFromRow` params from the row's current values.
+            const row = action?.params && !Array.isArray(action.params)
+                ? action.params._rowRecord
+                : undefined;
+            const resolved = resolveActionParams(params, {
+                objectName: objectName || objectDef?.name || '',
+                objects: objects || [],
+                fieldLabel,
+                fieldOptionLabel,
+                row,
+            });
+            setParamState({ open: true, params: resolved, resolve });
         });
-    }, []);
+    }, [objectName, objectDef, objects, fieldLabel, fieldOptionLabel]);
     const handleDeleteView = useCallback(async (vid) => {
         if (!dataSource)
             return;
@@ -1092,10 +1107,78 @@ export function ObjectView({ dataSource, objects, onEdit, externalRefreshKey })
             navigate(url);
         }
     }, [navigate]);
+    // Authenticated fetch for direct backend calls (e.g. flow trigger,
+    // schema actions targeting absolute API paths). Declared before
+    // apiHandler so the latter can close over it.
+    const authFetch = useMemo(() => createAuthenticatedFetch(), []);
     const apiHandler = useCallback(async (action) => {
         try {
             const target = action.target || action.name;
             const params = action.params || {};
+            // Absolute HTTP target (e.g. /api/v1/auth/organization/invite-member,
+            // http://..., https://...) — bypass dataSource and call the API
+            // directly through the authenticated fetch wrapper so:
+            //   - Authorization: Bearer <token> is injected
+            //   - X-Tenant-ID is injected (multi-tenant routing)
+            //   - Same-origin cookies (better-auth.session_token) ride along
+            //
+            // This is the canonical path for schema actions on managed-by
+            // tables (sys_user/invite_user, sys_session/revoke, …) where
+            // generic CRUD does not apply.
+            const targetStr = typeof target === 'string' ? target : '';
+            const isAbsolute = targetStr.startsWith('/') || /^https?:\/\//i.test(targetStr);
+            if (isAbsolute) {
+                const baseUrl = import.meta.env.VITE_SERVER_URL || '';
+                const url = targetStr.startsWith('http') ? targetStr : `${baseUrl}${targetStr}`;
+                // Row context is stashed on params under `_rowRecord` by the
+                // row-action dispatcher (see ObjectGrid → onRowAction). Pull
+                // it out before assembling the request body.
+                const rawParams = { ...params };
+                const rowRecord = rawParams._rowRecord;
+                delete rawParams._rowRecord;
+                // Apply bodyShape: 'flat' (default) keeps user params at top
+                // level; { wrap: 'data' } nests them under that key while
+                // `recordIdParam` / `organizationId` stay flat (better-auth
+                // organization/update semantics).
+                const wrap = action.bodyShape && typeof action.bodyShape === 'object' && action.bodyShape.wrap
+                    ? action.bodyShape.wrap
+                    : undefined;
+                const body = wrap
+                    ? { [wrap]: rawParams }
+                    : { ...rawParams };
+                // Inject row id (or chosen row field) for list_item actions.
+                if (rowRecord && action.recordIdParam) {
+                    const rowField = action.recordIdField || 'id';
+                    const rowValue = rowRecord[rowField];
+                    if (rowValue != null)
+                        body[action.recordIdParam] = rowValue;
+                }
+                // Auto-inject organizationId when the active org is known and
+                // not already set. Most better-auth org-scoped endpoints
+                // accept this shape; harmless for endpoints that ignore it.
+                if (!body.organizationId && activeOrganization?.id) {
+                    body.organizationId = activeOrganization.id;
+                }
+                const res = await authFetch(url, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    credentials: 'include',
+                    body: JSON.stringify(body),
+                });
+                if (!res.ok) {
+                    let detail = `HTTP ${res.status}`;
+                    try {
+                        const j = await res.json();
+                        detail = j?.error || j?.message || detail;
+                    }
+                    catch { /* response body not JSON */ }
+                    return { success: false, error: detail };
+                }
+                const data = await res.json().catch(() => ({}));
+                if (action.refreshAfter !== false)
+                    setRefreshKey(k => k + 1);
+                return { success: true, data, reload: action.refreshAfter !== false };
+            }
             // Generic list-level API handler: update/execute via dataSource
             if (typeof dataSource.execute === 'function') {
                 await dataSource.execute(objectDef.name, target, params);
@@ -1112,9 +1195,7 @@ export function ObjectView({ dataSource, objects, onEdit, externalRefreshKey })
         catch (error) {
             return { success: false, error: error.message };
         }
-    }, [dataSource, objectDef.name]);
-    // Authenticated fetch for direct backend calls (e.g. flow trigger).
-    const authFetch = useMemo(() => createAuthenticatedFetch(), []);
+    }, [dataSource, objectDef.name, authFetch, activeOrganization]);
     // Flow action handler — POST to /api/v1/automation/{name}/trigger.
     // Triggered when an Action with `type: 'flow'` is invoked from list-level
     // locations (list_toolbar, list_item). For list_item the row's recordId is
@@ -1385,6 +1466,17 @@ export function ObjectView({ dataSource, objects, onEdit, externalRefreshKey })
             filterableFields: viewDef.filterableFields ?? listSchema.filterableFields,
             resizable: viewDef.resizable ?? listSchema.resizable,
             rowActions: viewDef.rowActions ?? listSchema.rowActions,
+            /**
+             * Row-context action definitions derived from `objectDef.actions`
+             * filtered by `locations.includes('list_item')`. These are full
+             * `ActionDef` records (with label/icon/variant/params/recordIdParam
+             * /bodyShape) the row menu renders with i18n-correct labels and
+             * dispatches via the action runner; legacy `rowActions: string[]`
+             * remains for back-compat where the action lives elsewhere.
+             */
+            rowActionDefs: (Array.isArray(objectDef?.actions)
+                ? objectDef.actions.filter((a) => Array.isArray(a?.locations) && a.locations.includes('list_item'))
+                : []),
             bulkActions: viewDef.bulkActions ?? listSchema.bulkActions,
             sharing: viewDef.sharing ?? listSchema.sharing,
             addRecord: viewDef.addRecord ?? listSchema.addRecord,
@@ -1394,7 +1486,9 @@ export function ObjectView({ dataSource, objects, onEdit, externalRefreshKey })
             showRecordCount: viewDef.showRecordCount ?? listSchema.showRecordCount,
             allowPrinting: viewDef.allowPrinting ?? listSchema.allowPrinting,
             virtualScroll: viewDef.virtualScroll ?? listSchema.virtualScroll,
-            emptyState: viewDef.emptyState ?? listSchema.emptyState,
+            emptyState: viewDef.emptyState
+                ?? listSchema.emptyState
+                ?? resolveManagedByEmptyState(objectDef?.managedBy),
             aria: viewDef.aria ?? listSchema.aria,
             tabs: listSchema.tabs,
             // Propagate filter/sort as default filters/sort for data flow
@@ -1534,7 +1628,15 @@ export function ObjectView({ dataSource, objects, onEdit, externalRefreshKey })
             }
         },
     }), [objectDef.name, onEdit, activeView?.showSearch, activeView?.showFilters, activeView?.showSort, navigate, viewId, isAdmin]);
-    return (_jsxs(ActionProvider, { context: { objectName: objectDef.name, user: currentUser }, onConfirm: confirmHandler, onToast: toastHandler, onNavigate: navigateHandler, onParamCollection: paramCollectionHandler, handlers: { api: apiHandler, flow: flowHandler, script: serverActionHandler, modal: serverActionHandler }, children: [_jsxs("div", { className: "h-full flex flex-col bg-background min-w-0 overflow-hidden", children: [_jsx(ManagedByBanner, { managedBy: objectDef?.managedBy }), _jsx(PageHeader, { title: objectLabel(objectDef), description: objectDef.description ? objectDesc(objectDef) : undefined, icon: (() => { const I = getIcon(objectDef?.icon); return _jsx(I, { className: "h-4 w-4" }); })(), actions: _jsxs(_Fragment, { children: [affordances.create && can(objectDef.name, 'create') && (_jsxs(Button, { size: "sm", onClick: actions.create, className: "shadow-none gap-1.5 sm:gap-2 h-8 sm:h-9", children: [_jsx(Plus, { className: "h-4 w-4" }), _jsx("span", { className: "hidden sm:inline", children: t('console.objectView.new') })] })), affordances.import && can(objectDef.name, 'create') && (_jsxs(Button, { size: "sm", variant: "outline", onClick: () => setShowImport(true), className: "shadow-none gap-1.5 sm:gap-2 h-8 sm:h-9", title: t('console.objectView.importTitle'), "data-testid": "object-view-import-button", children: [_jsx(Upload, { className: "h-4 w-4" }), _jsx("span", { className: "hidden sm:inline", children: t('console.objectView.import') })] })), objectDef.actions?.some((a) => a.locations?.includes('list_toolbar')) && (_jsx(SchemaRenderer, { schema: {
+    return (_jsxs(ActionProvider, { context: {
+            objectName: objectDef.name,
+            user: currentUser,
+            // Expose active org so `type: 'url'` actions can template
+            // `/organizations/${activeOrganization.slug}/...` etc.
+            activeOrganization: activeOrganization
+                ? { id: activeOrganization.id, slug: activeOrganization.slug, name: activeOrganization.name }
+                : null,
+        }, onConfirm: confirmHandler, onToast: toastHandler, onNavigate: navigateHandler, onParamCollection: paramCollectionHandler, handlers: { api: apiHandler, flow: flowHandler, script: serverActionHandler, modal: serverActionHandler }, children: [_jsxs("div", { className: "h-full flex flex-col bg-background min-w-0 overflow-hidden", children: [_jsx(PageHeader, { title: _jsxs("span", { className: "inline-flex items-center gap-2", children: [_jsx("span", { className: "truncate", children: objectLabel(objectDef) }), _jsx(ManagedByBadge, { managedBy: objectDef?.managedBy })] }), description: objectDef.description ? objectDesc(objectDef) : undefined, icon: (() => { const I = getIcon(objectDef?.icon); return _jsx(I, { className: "h-4 w-4" }); })(), actions: _jsxs(_Fragment, { children: [affordances.create && can(objectDef.name, 'create') && (_jsxs(Button, { size: "sm", onClick: actions.create, className: "shadow-none gap-1.5 sm:gap-2 h-8 sm:h-9", children: [_jsx(Plus, { className: "h-4 w-4" }), _jsx("span", { className: "hidden sm:inline", children: t('console.objectView.new') })] })), affordances.import && can(objectDef.name, 'create') && (_jsxs(Button, { size: "sm", variant: "outline", onClick: () => setShowImport(true), className: "shadow-none gap-1.5 sm:gap-2 h-8 sm:h-9", title: t('console.objectView.importTitle'), "data-testid": "object-view-import-button", children: [_jsx(Upload, { className: "h-4 w-4" }), _jsx("span", { className: "hidden sm:inline", children: t('console.objectView.import') })] })), objectDef.actions?.some((a) => a.locations?.includes('list_toolbar')) && (_jsx(SchemaRenderer, { schema: {
                                         type: 'action:bar',
                                         location: 'list_toolbar',
                                         actions: (objectDef.actions || []).map((a) => ({

package/dist/views/RecordDetailView.js

@@ -17,19 +17,22 @@ import { toast } from 'sonner';
 import { Database, Users } from 'lucide-react';
 import { MetadataPanel, useMetadataInspector } from './MetadataInspector';
 import { SkeletonDetail } from '../skeletons';
-import { ManagedByBanner } from '../components/ManagedByBanner';
+import { ManagedByBadge } from '../components/ManagedByBadge';
 import { resolveCrudAffordances } from '../utils/crudAffordances';
 import { ActionConfirmDialog } from './ActionConfirmDialog';
 import { ActionParamDialog } from './ActionParamDialog';
+import { resolveActionParams } from '../utils/resolveActionParams';
 import { useRecordBreadcrumbTitle } from '../context/NavigationContext';
 import { getRecordDisplayName } from '../utils';
 const FALLBACK_USER = { id: 'current-user', name: 'Demo User' };
 /**
  * Audit field names auto-injected by the framework's `applySystemFields`.
- * Surfaced as a dedicated, collapsed "System Information" section on the
- * record detail page so they don't clutter the primary content but remain
- * discoverable. The inline-edit drawer keeps filtering them out via
- * `DEFAULT_SYSTEM_FIELDS` in `@object-ui/plugin-detail/RecordDetailDrawer`.
+ * Filtered out of the auto-generated body sections — they are rendered
+ * separately as a single subtle one-line `<RecordMetaFooter>` (see
+ * `@object-ui/plugin-detail`) so provenance stays discoverable without a
+ * heavy "System Information" panel. The inline-edit drawer also hides
+ * them via `DEFAULT_SYSTEM_FIELDS` in
+ * `@object-ui/plugin-detail/RecordDetailDrawer`.
  */
 const AUDIT_FIELD_NAMES = new Set(['created_at', 'created_by', 'updated_at', 'updated_by']);
 export function RecordDetailView({ dataSource, objects, onEdit }) {
@@ -38,7 +41,7 @@ export function RecordDetailView({ dataSource, objects, onEdit }) {
     const { user } = useAuth();
     const navigate = useNavigate();
     const { t } = useObjectTranslation();
-    const { objectLabel, viewLabel: _vLabel, sectionLabel, actionLabel, actionConfirm, actionSuccess } = useObjectLabel();
+    const { objectLabel, viewLabel: _vLabel, sectionLabel, actionLabel, actionConfirm, actionSuccess, fieldLabel, fieldOptionLabel } = useObjectLabel();
     const [isLoading, setIsLoading] = useState(true);
     const [feedItems, setFeedItems] = useState([]);
     const [recordViewers, setRecordViewers] = useState([]);
@@ -65,9 +68,15 @@ export function RecordDetailView({ dataSource, objects, onEdit }) {
     }, []);
     const paramCollectionHandler = useCallback((params) => {
         return new Promise((resolve) => {
-            setParamState({ open: true, params, resolve });
+            const resolved = resolveActionParams(params, {
+                objectName: objectName || objectDef?.name || '',
+                objects: objects || [],
+                fieldLabel,
+                fieldOptionLabel,
+            });
+            setParamState({ open: true, params: resolved, resolve });
         });
-    }, []);
+    }, [objectName, objectDef, objects, fieldLabel, fieldOptionLabel]);
     const toastHandler = useCallback((message, options) => {
         if (options?.type === 'error')
             toast.error(message);
@@ -563,32 +572,12 @@ export function RecordDetailView({ dataSource, objects, onEdit }) {
                     }),
                 },
             ];
-        // Append a dedicated, collapsed "System Information" section listing
-        // audit fields (created/updated at/by) when the schema declares them
-        // and no author-defined section has already surfaced them. The framework
-        // auto-injects these as `system: true, readonly: true` via
-        // `applySystemFields`; rendering them here gives users visibility into
-        // record provenance without polluting the primary content area.
-        const fieldsAlreadyShown = new Set(sections.flatMap((s) => (s.fields || []).map((f) => f.name)));
-        const auditFieldsToShow = Array.from(AUDIT_FIELD_NAMES).filter(name => objectDef.fields?.[name] && !fieldsAlreadyShown.has(name));
-        if (auditFieldsToShow.length > 0) {
-            sections.push({
-                title: sectionLabel(objectDef.name, 'system_info', 'System Information'),
-                collapsible: true,
-                defaultCollapsed: true,
-                fields: auditFieldsToShow.map(key => {
-                    const fieldDef = objectDef.fields[key];
-                    const refTarget = fieldDef.reference_to || fieldDef.reference;
-                    return {
-                        name: key,
-                        label: fieldDef.label || key,
-                        type: fieldDef.type || 'text',
-                        readonly: true,
-                        ...(refTarget && { reference_to: refTarget }),
-                    };
-                }),
-            });
-        }
+        // Audit fields (created_at/created_by/updated_at/updated_by) are NOT
+        // appended as a section here — they are surfaced by `<RecordMetaFooter>`
+        // (rendered by DetailView) as a single subtle line below the content,
+        // replacing the old card-style "System Information" panel. The inline-edit
+        // drawer continues to hide them via `DEFAULT_SYSTEM_FIELDS` in
+        // `@object-ui/plugin-detail/RecordDetailDrawer`.
         // Filter actions for record_header location and deduplicate by name
         const recordHeaderActions = (() => {
             const seen = new Set();
@@ -740,7 +729,7 @@ export function RecordDetailView({ dataSource, objects, onEdit }) {
     if (!objectDef) {
         return (_jsx("div", { className: "flex h-full items-center justify-center p-4", children: _jsxs(Empty, { children: [_jsx("div", { className: "mx-auto mb-4 flex h-12 w-12 items-center justify-center rounded-full bg-muted", children: _jsx(Database, { className: "h-6 w-6 text-muted-foreground" }) }), _jsx(EmptyTitle, { children: t('empty.objectNotFound') }), _jsx(EmptyDescription, { children: t('empty.objectNotFoundDescription', { name: objectName }) })] }) }));
     }
-    return (_jsxs("div", { className: "h-full bg-background overflow-hidden flex flex-col relative", children: [_jsx(ManagedByBanner, { managedBy: objectDef?.managedBy }), _jsx("div", { className: "absolute top-2 sm:top-4 right-2 sm:right-4 z-50 flex items-center gap-2", children: recordViewers.length > 0 && (_jsxs("div", { className: "flex items-center gap-1.5", title: t('recordDetail.viewersTooltip'), children: [_jsx(Users, { className: "h-3.5 w-3.5 text-muted-foreground" }), _jsx(PresenceAvatars, { users: recordViewers, size: "sm", maxVisible: 4, showStatus: true })] })) }), _jsxs("div", { className: "flex-1 overflow-hidden flex flex-row", children: [_jsx("div", { className: "flex-1 overflow-auto p-3 sm:p-4 lg:p-6 scroll-pb-48", children: _jsx(ActionProvider, { context: { record: {}, objectName, user: currentUser }, onConfirm: confirmHandler, onToast: toastHandler, onNavigate: navigateHandler, onParamCollection: paramCollectionHandler, handlers: { api: apiHandler, flow: flowHandler, script: serverActionHandler, modal: serverActionHandler }, children: _jsx(DetailView, { schema: detailSchema, dataSource: dataSource, objectLabel: objectLabel({ name: objectDef.name, label: objectDef.label }), onDataLoaded: (record) => {
+    return (_jsxs("div", { className: "h-full bg-background overflow-hidden flex flex-col relative", children: [_jsxs("div", { className: "absolute top-2 sm:top-4 right-2 sm:right-4 z-50 flex items-center gap-2", children: [_jsx(ManagedByBadge, { managedBy: objectDef?.managedBy }), recordViewers.length > 0 && (_jsxs("div", { className: "flex items-center gap-1.5", title: t('recordDetail.viewersTooltip'), children: [_jsx(Users, { className: "h-3.5 w-3.5 text-muted-foreground" }), _jsx(PresenceAvatars, { users: recordViewers, size: "sm", maxVisible: 4, showStatus: true })] }))] }), _jsxs("div", { className: "flex-1 overflow-hidden flex flex-row", children: [_jsx("div", { className: "flex-1 overflow-auto p-3 sm:p-4 lg:p-6 scroll-pb-48", children: _jsx(ActionProvider, { context: { record: {}, objectName, user: currentUser }, onConfirm: confirmHandler, onToast: toastHandler, onNavigate: navigateHandler, onParamCollection: paramCollectionHandler, handlers: { api: apiHandler, flow: flowHandler, script: serverActionHandler, modal: serverActionHandler }, children: _jsx(DetailView, { schema: detailSchema, dataSource: dataSource, objectLabel: objectLabel({ name: objectDef.name, label: objectDef.label }), onDataLoaded: (record) => {
                                     if (!record || typeof record !== 'object')
                                         return;
                                     // Resolve the same way DetailView's header does, so the

package/dist/views/RecordFormPage.js

@@ -39,7 +39,7 @@ import { useMetadata } from '../providers/MetadataProvider';
 import { useAdapter } from '../providers/AdapterProvider';
 import { ExpressionProvider, evaluateVisibility } from '../providers/ExpressionProvider';
 import { SkeletonDetail } from '../skeletons';
-import { ManagedByBanner } from '../components/ManagedByBanner';
+import { ManagedByBadge } from '../components/ManagedByBadge';
 import { useAuth } from '@object-ui/auth';
 import { ExpressionEvaluator } from '@object-ui/core';
 /**
@@ -162,7 +162,7 @@ export function RecordFormPage({ mode }) {
     if (!objectDef) {
         return (_jsx("div", { className: "flex h-full items-center justify-center p-4", children: _jsxs(Empty, { children: [_jsx("div", { className: "mx-auto mb-4 flex h-12 w-12 items-center justify-center rounded-full bg-muted", children: _jsx(Database, { className: "h-6 w-6 text-muted-foreground" }) }), _jsx(EmptyTitle, { children: t('empty.objectNotFound') }), _jsx(EmptyDescription, { children: t('empty.objectNotFoundDescription', { name: objectName }) }), _jsx("div", { className: "mt-4", children: _jsxs(Button, { variant: "outline", onClick: () => navigate(baseUrl), children: [_jsx(ArrowLeft, { className: "mr-2 h-4 w-4" }), t('empty.back')] }) })] }) }));
     }
-    return (_jsx(ExpressionProvider, { user: expressionUser, app: { name: appName }, data: {}, children: _jsxs("div", { className: "flex flex-col h-full overflow-hidden bg-background", "data-testid": "record-form-page", "data-mode": mode, children: [_jsxs("header", { className: "sticky top-0 z-10 flex items-center gap-3 border-b bg-background px-4 py-3 sm:px-6", children: [_jsx(Button, { variant: "ghost", size: "sm", onClick: goBack, "data-testid": "record-form-page-back", "aria-label": t('common.back', { defaultValue: 'Back' }), children: _jsx(ArrowLeft, { className: "h-4 w-4" }) }), _jsxs("nav", { "aria-label": "Breadcrumb", className: "flex items-center gap-2 text-sm text-muted-foreground", children: [_jsx(Link, { to: objectListUrl, className: "hover:text-foreground transition-colors", children: label }), _jsx("span", { "aria-hidden": "true", children: "/" }), _jsx("span", { className: "text-foreground font-medium", "data-testid": "record-form-page-title", children: pageTitle })] })] }), _jsx(ManagedByBanner, { managedBy: objectDef?.managedBy }), _jsx("div", { className: "flex-1 overflow-auto p-4 sm:p-6", children: _jsx("div", { className: "mx-auto max-w-4xl", children: _jsx(ObjectForm, { schema: {
+    return (_jsx(ExpressionProvider, { user: expressionUser, app: { name: appName }, data: {}, children: _jsxs("div", { className: "flex flex-col h-full overflow-hidden bg-background", "data-testid": "record-form-page", "data-mode": mode, children: [_jsxs("header", { className: "sticky top-0 z-10 flex items-center gap-3 border-b bg-background px-4 py-3 sm:px-6", children: [_jsx(Button, { variant: "ghost", size: "sm", onClick: goBack, "data-testid": "record-form-page-back", "aria-label": t('common.back', { defaultValue: 'Back' }), children: _jsx(ArrowLeft, { className: "h-4 w-4" }) }), _jsxs("nav", { "aria-label": "Breadcrumb", className: "flex items-center gap-2 text-sm text-muted-foreground", children: [_jsx(Link, { to: objectListUrl, className: "hover:text-foreground transition-colors", children: label }), _jsx("span", { "aria-hidden": "true", children: "/" }), _jsx("span", { className: "text-foreground font-medium", "data-testid": "record-form-page-title", children: pageTitle }), _jsx(ManagedByBadge, { managedBy: objectDef?.managedBy, className: "ml-1" })] })] }), _jsx("div", { className: "flex-1 overflow-auto p-4 sm:p-6", children: _jsx("div", { className: "mx-auto max-w-4xl", children: _jsx(ObjectForm, { schema: {
                                 type: 'object-form',
                                 formType: 'simple',
                                 objectName: objectDef.name,

package/dist/views/ReportView.js

@@ -38,29 +38,31 @@ export function ReportView({ dataSource }) {
     // State for report runtime data
     const [reportRuntimeData, setReportRuntimeData] = useState([]);
     const [dataLoading, setDataLoading] = useState(false);
+    const getFieldsForObject = useCallback((objName) => {
+        if (!objName || !objects?.length)
+            return undefined;
+        const objDef = objects.find((o) => o.name === objName);
+        if (!objDef?.fields)
+            return undefined;
+        const fields = objDef.fields;
+        if (Array.isArray(fields)) {
+            return fields.map((f) => typeof f === 'string'
+                ? { value: f, label: f, type: 'text' }
+                : { value: f.name, label: f.label || f.name, type: f.type || 'text' });
+        }
+        return Object.entries(fields).map(([name, def]) => ({
+            value: name,
+            label: def.label || name,
+            type: def.type || 'text',
+        }));
+    }, [objects]);
     // Derive available fields from object schema for filter/sort editors
     // Uses live editSchema when available to respond to objectName changes
     const availableFields = useMemo(() => {
         const liveReport = editSchema || reportData;
         const objName = liveReport?.objectName || liveReport?.dataSource?.object || liveReport?.dataSource?.resource;
-        if (objName && objects?.length) {
-            const objDef = objects.find((o) => o.name === objName);
-            if (objDef?.fields) {
-                const fields = objDef.fields;
-                if (Array.isArray(fields)) {
-                    return fields.map((f) => typeof f === 'string'
-                        ? { value: f, label: f, type: 'text' }
-                        : { value: f.name, label: f.label || f.name, type: f.type || 'text' });
-                }
-                return Object.entries(fields).map(([name, def]) => ({
-                    value: name,
-                    label: def.label || name,
-                    type: def.type || 'text',
-                }));
-            }
-        }
-        return FALLBACK_FIELDS;
-    }, [editSchema, reportData, objects]);
+        return getFieldsForObject(objName) ?? FALLBACK_FIELDS;
+    }, [editSchema, reportData, getFieldsForObject]);
     // ---- Save helper --------------------------------------------------------
     const saveSchema = useCallback(async (schema) => {
         try {
@@ -350,5 +352,5 @@ export function ReportView({ dataSource }) {
         allowExport: true,
         loading: dataLoading, // Loading state for data fetching
     };
-    return (_jsxs("div", { className: "flex flex-col h-full overflow-hidden bg-background", children: [_jsxs("div", { className: "flex flex-col sm:flex-row justify-between sm:items-center gap-3 sm:gap-4 p-4 sm:p-6 border-b shrink-0", children: [_jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("h1", { className: "text-lg sm:text-xl md:text-2xl font-bold tracking-tight truncate", children: previewReport.title || previewReport.label || 'Report Viewer' }), previewReport.description && (_jsx("p", { className: "text-sm text-muted-foreground mt-1 line-clamp-2", children: previewReport.description }))] }), _jsx("div", { className: "shrink-0 flex items-center gap-1.5", children: _jsxs("button", { type: "button", onClick: handleOpenConfigPanel, className: "inline-flex items-center gap-1.5 rounded-md border border-input bg-background px-2.5 py-1.5 text-xs font-medium text-muted-foreground shadow-sm hover:bg-accent hover:text-accent-foreground", "data-testid": "report-edit-button", children: [_jsx(Pencil, { className: "h-3.5 w-3.5" }), "Edit"] }) })] }), _jsxs("div", { className: "flex-1 overflow-hidden flex flex-col sm:flex-row relative", children: [_jsx("div", { className: "flex-1 min-w-0 overflow-auto p-4 sm:p-6 lg:p-8 bg-muted/5", children: _jsx("div", { className: "w-full shadow-sm border rounded-lg sm:rounded-xl bg-background overflow-hidden min-h-150", children: _jsx(Suspense, { fallback: _jsx("div", { className: "p-8 text-sm text-muted-foreground", children: "Loading report\u2026" }), children: useSpecRenderer ? (_jsx("div", { className: "p-4 sm:p-6", children: _jsx(ReportRenderer, { schema: previewReport, dataSource: dataSource }) })) : (_jsx(ReportViewer, { schema: viewerSchema })) }) }) }), _jsx(Suspense, { fallback: null, children: _jsx(ReportConfigPanel, { open: configPanelOpen, onClose: handleCloseConfigPanel, config: reportConfig, onSave: handleReportConfigSave, onFieldChange: handleReportFieldChange, availableFields: availableFields }) }), _jsx(MetadataPanel, { open: showDebug, sections: [{ title: 'Report Configuration', data: previewReport }] })] })] }));
+    return (_jsxs("div", { className: "flex flex-col h-full overflow-hidden bg-background", children: [_jsxs("div", { className: "flex flex-col sm:flex-row justify-between sm:items-center gap-3 sm:gap-4 p-4 sm:p-6 border-b shrink-0", children: [_jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("h1", { className: "text-lg sm:text-xl md:text-2xl font-bold tracking-tight truncate", children: previewReport.title || previewReport.label || 'Report Viewer' }), previewReport.description && (_jsx("p", { className: "text-sm text-muted-foreground mt-1 line-clamp-2", children: previewReport.description }))] }), _jsx("div", { className: "shrink-0 flex items-center gap-1.5", children: _jsxs("button", { type: "button", onClick: handleOpenConfigPanel, className: "inline-flex items-center gap-1.5 rounded-md border border-input bg-background px-2.5 py-1.5 text-xs font-medium text-muted-foreground shadow-sm hover:bg-accent hover:text-accent-foreground", "data-testid": "report-edit-button", children: [_jsx(Pencil, { className: "h-3.5 w-3.5" }), "Edit"] }) })] }), _jsxs("div", { className: "flex-1 overflow-hidden flex flex-col sm:flex-row relative", children: [_jsx("div", { className: "flex-1 min-w-0 overflow-auto p-4 sm:p-6 lg:p-8 bg-muted/5", children: _jsx("div", { className: "w-full shadow-sm border rounded-lg sm:rounded-xl bg-background overflow-hidden min-h-150", children: _jsx(Suspense, { fallback: _jsx("div", { className: "p-8 text-sm text-muted-foreground", children: "Loading report\u2026" }), children: useSpecRenderer ? (_jsx("div", { className: "p-4 sm:p-6", children: _jsx(ReportRenderer, { schema: previewReport, dataSource: dataSource }) })) : (_jsx(ReportViewer, { schema: viewerSchema })) }) }) }), _jsx(Suspense, { fallback: null, children: _jsx(ReportConfigPanel, { open: configPanelOpen, onClose: handleCloseConfigPanel, config: reportConfig, onSave: handleReportConfigSave, onFieldChange: handleReportFieldChange, availableFields: availableFields, getFieldsForObject: getFieldsForObject }) }), _jsx(MetadataPanel, { open: showDebug, sections: [{ title: 'Report Configuration', data: previewReport }] })] })] }));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@object-ui/app-shell",
-  "version": "4.2.1",
+  "version": "4.3.0",
   "type": "module",
   "license": "MIT",
   "description": "Minimal application shell for ObjectUI - framework-agnostic rendering engine",
@@ -27,34 +27,34 @@
   "dependencies": {
     "lucide-react": "^1.16.0",
     "sonner": "^2.0.7",
-    "@object-ui/auth": "4.2.1",
-    "@object-ui/collaboration": "4.2.1",
-    "@object-ui/components": "4.2.1",
-    "@object-ui/core": "4.2.1",
-    "@object-ui/data-objectstack": "4.2.1",
-    "@object-ui/fields": "4.2.1",
-    "@object-ui/i18n": "4.2.1",
-    "@object-ui/layout": "4.2.1",
-    "@object-ui/permissions": "4.2.1",
-    "@object-ui/react": "4.2.1",
-    "@object-ui/types": "4.2.1"
+    "@object-ui/auth": "4.3.0",
+    "@object-ui/collaboration": "4.3.0",
+    "@object-ui/components": "4.3.0",
+    "@object-ui/core": "4.3.0",
+    "@object-ui/data-objectstack": "4.3.0",
+    "@object-ui/fields": "4.3.0",
+    "@object-ui/i18n": "4.3.0",
+    "@object-ui/layout": "4.3.0",
+    "@object-ui/permissions": "4.3.0",
+    "@object-ui/react": "4.3.0",
+    "@object-ui/types": "4.3.0"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",
     "react-dom": "^18.0.0 || ^19.0.0",
     "react-router-dom": "^6.0.0 || ^7.0.0",
-    "@object-ui/plugin-calendar": "^4.2.1",
-    "@object-ui/plugin-charts": "^4.2.1",
-    "@object-ui/plugin-chatbot": "^4.2.1",
-    "@object-ui/plugin-dashboard": "^4.2.1",
-    "@object-ui/plugin-designer": "^4.2.1",
-    "@object-ui/plugin-detail": "^4.2.1",
-    "@object-ui/plugin-form": "^4.2.1",
-    "@object-ui/plugin-grid": "^4.2.1",
-    "@object-ui/plugin-kanban": "^4.2.1",
-    "@object-ui/plugin-list": "^4.2.1",
-    "@object-ui/plugin-report": "^4.2.1",
-    "@object-ui/plugin-view": "^4.2.1"
+    "@object-ui/plugin-calendar": "^4.3.0",
+    "@object-ui/plugin-charts": "^4.3.0",
+    "@object-ui/plugin-chatbot": "^4.3.0",
+    "@object-ui/plugin-dashboard": "^4.3.0",
+    "@object-ui/plugin-designer": "^4.3.0",
+    "@object-ui/plugin-detail": "^4.3.0",
+    "@object-ui/plugin-form": "^4.3.0",
+    "@object-ui/plugin-grid": "^4.3.0",
+    "@object-ui/plugin-kanban": "^4.3.0",
+    "@object-ui/plugin-list": "^4.3.0",
+    "@object-ui/plugin-report": "^4.3.0",
+    "@object-ui/plugin-view": "^4.3.0"
   },
   "devDependencies": {
     "@types/node": "^25.9.0",

package/dist/components/ManagedByBanner.d.ts

@@ -1,16 +0,0 @@
-export interface ManagedByBannerProps {
-    /** The `managedBy` flag from the object schema. */
-    managedBy?: string;
-    /** Optional override for the human-readable system name. */
-    label?: string;
-    /** Optional documentation link rendered as "Learn more →". */
-    docHref?: string;
-    /**
-     * Optional human-readable name for the source record / parent workflow
-     * referenced in `system`-bucket banners (e.g. "Opportunity"). When
-     * provided the banner reads "Use the Opportunity record's Submit for
-     * Approval action…" instead of the generic phrasing.
-     */
-    sourceRecordLabel?: string;
-}
-export declare function ManagedByBanner({ managedBy, label, docHref, sourceRecordLabel }: ManagedByBannerProps): import("react/jsx-runtime").JSX.Element | null;

package/dist/components/ManagedByBanner.js

@@ -1,38 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { ShieldAlert, Info, Lock, Archive } from 'lucide-react';
-const VARIANTS = {
-    config: {
-        icon: Info,
-        tone: 'border-sky-300/60 bg-sky-50 text-sky-900 dark:border-sky-500/40 dark:bg-sky-950/40 dark:text-sky-100',
-        title: 'Administrator configuration',
-        body: () => "These rows define how the platform behaves at runtime — they're authored here, but the runtime data they produce lives in a separate table. Changes take effect once a row is marked Active.",
-    },
-    system: {
-        icon: Lock,
-        tone: 'border-slate-300/60 bg-slate-50 text-slate-900 dark:border-slate-500/40 dark:bg-slate-950/40 dark:text-slate-100',
-        title: 'Managed by the platform',
-        body: (_display, src) => `Rows here are created and updated automatically by the platform engine. To start a new one, use the action button on the ${src ?? 'source record'} (e.g. "Submit for Approval", "Share", "Invite"). The list below is the audit / monitoring surface — actions like Approve, Recall, or Resend live on the row.`,
-    },
-    'append-only': {
-        icon: Archive,
-        tone: 'border-zinc-300/60 bg-zinc-50 text-zinc-900 dark:border-zinc-500/40 dark:bg-zinc-950/40 dark:text-zinc-100',
-        title: 'Read-only historical record',
-        body: () => "This is an immutable audit log. Rows cannot be created, edited, or deleted from the UI — they're written by the platform when events occur. Use Export to download for compliance review.",
-    },
-    'better-auth': {
-        icon: ShieldAlert,
-        tone: 'border-amber-300/60 bg-amber-50 text-amber-900 dark:border-amber-500/40 dark:bg-amber-950/40 dark:text-amber-100',
-        title: 'Managed by better-auth',
-        body: (display) => `This object's schema is owned by ${display}. Direct edits here bypass password hashing, session validation, two-factor checks, and audit hooks — and may corrupt account state. Use the dedicated identity workflows instead (Invite User, Reset Password, Revoke Session, Rotate Key, …).`,
-    },
-};
-export function ManagedByBanner({ managedBy, label, docHref, sourceRecordLabel }) {
-    if (!managedBy || managedBy === 'platform')
-        return null;
-    const variant = VARIANTS[managedBy];
-    if (!variant)
-        return null;
-    const display = label ?? managedBy;
-    const Icon = variant.icon;
-    return (_jsxs("div", { role: "note", "data-testid": "managed-by-banner", "data-bucket": managedBy, className: `flex items-start gap-3 border-b px-4 py-2.5 text-sm ${variant.tone}`, children: [_jsx(Icon, { className: "mt-0.5 h-4 w-4 flex-none" }), _jsxs("div", { className: "flex-1", children: [_jsxs("strong", { className: "font-semibold", children: [variant.title, "."] }), ' ', variant.body(display, sourceRecordLabel), docHref && (_jsxs(_Fragment, { children: [' ', _jsx("a", { href: docHref, target: "_blank", rel: "noreferrer", className: "underline underline-offset-2 hover:opacity-80", children: "Learn more \u2192" })] }))] })] }));
-}