@object-ui/app-shell 5.0.2 → 5.2.1

package/CHANGELOG.md

@@ -1,5 +1,406 @@
 # @object-ui/app-shell — Changelog
 
+## 5.2.1
+
+### Patch Changes
+
+- 9ccda28: security: force DOMPurify to `^3.4.5` via pnpm override
+
+  Resolves 8 moderate-severity GHSA advisories against the transitive
+  `dompurify@3.2.7` pulled in by `monaco-editor`. Vulnerabilities covered:
+  - SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode
+  - FORBID_TAGS bypassed by function-based ADD_TAGS predicate
+  - Prototype Pollution to XSS via CUSTOM_ELEMENT_HANDLING fallback
+  - ADD_TAGS function-form short-circuit bypass of FORBID_TAGS
+  - ADD_ATTR predicate skipping URI validation
+  - USE_PROFILES prototype pollution enabling event handlers
+  - mutation-XSS via Re-Contextualization
+  - Generic XSS vector
+
+  No API changes; override is transparent to consumers.
+  - @object-ui/types@5.2.1
+  - @object-ui/core@5.2.1
+  - @object-ui/i18n@5.2.1
+  - @object-ui/react@5.2.1
+  - @object-ui/components@5.2.1
+  - @object-ui/fields@5.2.1
+  - @object-ui/layout@5.2.1
+  - @object-ui/data-objectstack@5.2.1
+  - @object-ui/auth@5.2.1
+  - @object-ui/permissions@5.2.1
+  - @object-ui/collaboration@5.2.1
+  - @object-ui/providers@5.2.1
+
+## 5.2.0
+
+### Minor Changes
+
+- 321294c: Cmd-K now shows recently viewed records in its empty state, sourced
+  from the existing cloud-synced `sys_user_preference` adapter (already
+  wired by `RecentItemsProvider` + `useTrackRouteAsRecent` +
+  `RecordDetailView`). Multi-device by construction: open a record on
+  laptop, see it in `⌘K → Recently viewed` on phone.
+  - Group renders only when input is empty (no competition with search).
+  - Limited to the 5 most recent record-type entries.
+  - New i18n key `console.commandPalette.recentRecords` (en + zh seeded;
+    other locales fall back to `defaultValue: "Recently viewed"`).
+
+- b2d1704: feat(cmdk): record search across objects in the Command Palette
+  - New `useRecordSearch` hook in `@object-ui/react` debounces a query, fans out
+    to `dataSource.find(name, { $search, $top })` across candidate objects, and
+    aggregates hits. Race-safe via a monotonic runId; per-object 404s are
+    silently dropped via `Promise.allSettled`.
+  - `CommandPalette` (`@object-ui/app-shell`) now accepts a `dataSource` prop;
+    when supplied, the palette renders a `Records` group at the top with hits
+    scoped to the active app's nav objects. Item `value` embeds the live query
+    so cmdk's client-side filter doesn't hide async results.
+  - Added `console.commandPalette.records` i18n key (`Records` / `记录`).
+
+- 921bd28: Console now honors `App.homePageId` for the bare `/console/apps/:appName`
+  landing route. Previously it always redirected to the first reachable nav
+  item, so CRM-style apps with KPI dashboards still landed users on the
+  first object list (e.g. Leads) rather than the configured home page.
+
+  The new `resolveLandingRoute` looks up the `homePageId` nav item, builds
+  its route (object / view / page / dashboard / report), and falls back to
+  the existing `findFirstRoute` only when no `homePageId` is set or it
+  resolves to a routeless item type.
+
+- 3ebba63: Fix silent blank page on shorthand record deep-links.
+
+  Three related fixes that all addressed the same UX: a user follows a URL
+  shaped `/{object}/{recordId}` and sees a completely blank content area.
+  1. **`useNavigationOverlay` produced the broken URL itself.** When
+     middle-click / Cmd-click opened a gallery card in a new tab and no
+     `onNavigate` was provided, the hook built `/{object}/{id}` — a URL
+     shape that does not match any route in the console route table. The
+     builder now emits the canonical `/{object}/record/{id}`.
+  2. **Shorthand redirect for externally shared links.** Even with the
+     producer fixed, links pasted from email / Slack / older builds
+     still use the shorthand. The console now intercepts
+     `/{:objectName}/:maybeRecordId` and, when the second segment looks
+     like a record id (URL-safe slug ≥ 6 chars, not a reserved keyword),
+     redirects to `/{objectName}/record/{recordId}` preserving query and
+     hash.
+  3. **Visible 404 fallback.** Routes that match nothing at all now
+     render an explicit "Page not found" empty state with a "Go back"
+     action instead of leaving the content area blank. Silent failures
+     are now visible failures.
+
+- a4a0e1d: Add `<PresenceProvider>` abstraction with `useTenantPresence()` and
+  `useRecordPresence(objectName, recordId)` hooks. The default source is a
+  no-op so hooks return `[]` until a host app wires in a realtime
+  transport (WebSocket / SSE). Replaces the two architectural TODOs in
+  `AppHeader` (tenant scope) and `RecordDetailView` (record scope) that
+  were waiting on this abstraction.
+
+  `AppHeader` now falls back to `useTenantPresence()` when the
+  `presenceUsers` prop is omitted, and `RecordDetailView` renders
+  `<PresenceAvatars>` next to the lifecycle badge when other users are
+  viewing the same record. Both code paths render exactly as before when
+  no provider is mounted, so this change is non-visual for existing
+  consumers.
+
+### Patch Changes
+
+- 9997cae: DataSource: add optional `bulkUpdate(resource, ids, patch)` for "same patch, many rows" interactions (Slack "mark all as read", Linear "archive selected"). The ObjectStack adapter routes to `POST /api/v1/data/:object/updateMany` so the client pays one HTTP/auth/RLS round-trip instead of N parallel PATCHes, eliminating mark-all-read jank on inboxes with 50+ unread.
+
+  AppHeader's `markAllRead` now prefers `bulkUpdate`, with a transparent fallback to the per-id loop for adapters that don't implement the helper.
+
+- 0a644f0: feat(app-shell): CommandPalette searching indicator
+
+  When `useRecordSearch` is mid-flight (debounced fetch across objects
+  hasn't returned yet), the palette now surfaces a subtle visual:
+  - A small pulsing primary-coloured dot next to the **Records** group
+    heading, so the user sees that more results may still appear.
+  - A `Searching…` placeholder inside the empty state when the user has
+    typed something but no hits exist yet — replaces the static
+    "No results found." message until the request settles.
+
+  New i18n key `console.commandPalette.searching` (en + zh).
+
+- 5f71924: feat(app-shell): better default toast UX in ConsoleToaster
+
+  `ConsoleToaster` now ships UX-positive defaults that match the Linear
+  / Notion pattern users expect from an enterprise console:
+  - `position="top-right"` — keeps the user's primary work area (centre
+    - bottom) unobstructed.
+  - `closeButton` — every toast has an explicit X so users can dismiss
+    rather than wait the duration out.
+  - `richColors` — type-aware coloured backgrounds (success / error /
+    warning / info) so the kind of message is legible at a glance.
+  - `expand` — toast stack expands on hover so users can read multiple
+    recent toasts without dismissing.
+  - `visibleToasts={4}` — prevents the corner from being overrun.
+  - `duration: 4000` — long enough to read + click an `Undo` action.
+
+  All of these are still overridable via `<ConsoleToaster …>` props.
+
+- 5425608: CRM UX polish pass — calmer enterprise look across detail + kanban.
+  - **plugin-kanban**: column headers now use a 2px muted accent stripe with
+    neutral foreground titles + a quiet grey count pill instead of full
+    rainbow gradient + colored title + colored count. Pipeline boards
+    (Opportunity, Case, Task, Lead) look like Salesforce/Linear instead of
+    a toy. WIP-limit overflow remains destructive-red so urgency stays loud.
+  - **plugin-detail (`record:reference_rail`)**: new `hideEmpty` prop
+    (default true) collapses entries whose total === 0 into a single
+    `+ N empty (Quotes · Products …)` chip at the bottom of the rail.
+    Removes the 4–7 "No records" stack that dominated the aside.
+  - **plugin-detail (`record:path`)**: completed stages now render with an
+    emerald-tinted background + bold green check instead of low-contrast
+    `bg-muted text-muted-foreground` (which read as "light grey on white"
+    and was borderline unreadable).
+  - **app-shell (`RecordDetailView`)**: record-not-found short-circuit.
+    Previously a stale/missing recordId still rendered the page chrome
+    (rail, discussion, breadcrumb with the raw id), making invalid links
+    look like a partially broken page. Now renders a clean centered
+    `Empty` state with database icon + i18n'd "Record not found" copy.
+  - **i18n**: added `detail.showEmptyRelated_{one,other}` and
+    `empty.recordNotFound{,Description}` keys (en + zh).
+
+- 710fbe6: feat(app-shell): notification center animation polish
+
+  InboxPopover now animates every signal that matters for "noticing":
+  - Bell button **bounces once** when total pressure increases (new
+    notification or approval arrives). Tracks previous total via a ref
+    so the very first render — when the server-side counts hydrate —
+    does not trigger a spurious bounce.
+  - Bell badge **zooms in** on every count change (re-keyed on
+    `totalBadge` so each transition is an independent animation).
+  - Per-tab counter badges (Notifications / Approvals) get the same
+    zoom-in treatment on count change.
+  - Notification list rows **fade + slide in from top** with a small
+    staggered delay (capped at 6×20ms so a full list never feels
+    laggy).
+  - Activity rows mirror the same fade/slide pattern.
+  - Empty states (`You're all caught up`, `No recent activity`, `No
+pending approvals`) fade in instead of popping in.
+  - The unread dot (•) is now always rendered but fades its opacity
+    when `is_read` flips, instead of disappearing instantly — gives a
+    smooth "marked read" affordance.
+
+  All animations are wrapped in `motion-safe:` utility variants so
+  users with `prefers-reduced-motion` see the previous (instant) UI.
+  No new dependencies; reuses `tailwindcss-animate` utilities already
+  present in the design system.
+
+- 7c441f5: End-to-end @-mention notifications.
+
+  `@object-ui/plugin-detail` now exports `extractMentions(text, suggestions)`
+  — a small utility that resolves `@<label>` tokens in a comment body to
+  user ids, using the same suggestion list that drives the in-editor
+  dropdown. Handles labels with spaces ("@QA Test"), CJK ("@王小明"),
+  longest-match disambiguation ("Anna Lee" wins over "Anna"), and ignores
+  unknown @-tokens. 9 unit tests.
+
+  `@object-ui/app-shell` `RecordDetailView` now:
+  1. Serializes the resolved mention ids into `sys_comment.mentions`
+     (previously hard-coded `'[]'`, so servers had no idea who was being
+     pinged).
+  2. Fan-outs a `sys_notification` row per mentioned recipient
+     (self-mentions are filtered as noise) with the canonical bell-inbox
+     shape: `type: 'mention'`, `recipient_id`, `actor_name`, `title`,
+     `body` preview (≤140 chars), `source_object`/`source_id`/
+     `source_comment_id`, `is_read: false`, `created_at`.
+
+  The notification write tolerates 404 silently, so deployments without
+  a notification collection degrade to the previous behavior (mention
+  text + highlight, no inbox row). Spec-compliant servers that emit
+  notifications via their own sys_comment after-create hook can ignore
+  the client-side write — the bell de-dupes by id at the polling layer.
+
+- 072cad0: Always seed @-mention suggestions with the current user so the dropdown
+  appears even when the backend has no `sys_user` directory (or the fetch
+  fails). Hosts with a real user roster still get the merged list —
+  current user first, then directory entries de-duped by id.
+
+  Previously, typing `@` in the discussion comment box was a no-op on
+  example backends that don't serve `sys_user`, making the feature look
+  broken. Authors can now at minimum mention themselves; richer rosters
+  are merged in automatically when available.
+
+- 54e3dfb: Remove unused stub renderers from `@object-ui/app-shell`:
+  - `ObjectRenderer` / `ObjectRendererProps`
+  - `DashboardRenderer` / `DashboardRendererProps`
+  - `PageRenderer` / `PageRendererProps`
+  - `FormRenderer` / `FormRendererProps`
+
+  These were placeholder components that never delegated to a real
+  SchemaRenderer — they rendered a literal `"TODO"` string and were not
+  consumed anywhere in the monorepo or in the official Console app.
+  Because they were non-functional, no working production code could
+  have depended on them; this is treated as a patch-level cleanup rather
+  than a semver-major break.
+
+  If you were importing one of the removed stubs (and somehow got past
+  the "TODO" placeholder render), the real renderers ship from the
+  respective plugin packages:
+  - Dashboard → `@object-ui/plugin-dashboard` (`DashboardRenderer`)
+  - Page / Object / Form → `@object-ui/react` (`SchemaRenderer`) +
+    `@object-ui/plugin-form` / `@object-ui/plugin-grid` etc.
+
+- Updated dependencies [de0c5e6]
+- Updated dependencies [9997cae]
+- Updated dependencies [321294c]
+- Updated dependencies [b2d1704]
+- Updated dependencies [0a644f0]
+- Updated dependencies [a3cb88f]
+- Updated dependencies [5425608]
+- Updated dependencies [6c3f018]
+- Updated dependencies [d912a60]
+- Updated dependencies [87bc8ff]
+- Updated dependencies [3ebba63]
+- Updated dependencies [e919433]
+- Updated dependencies [a8d12ec]
+- Updated dependencies [a4a0e1d]
+- Updated dependencies [70b5570]
+- Updated dependencies [aa063db]
+- Updated dependencies [d9c3bae]
+- Updated dependencies [d1442e3]
+- Updated dependencies [7c7400a]
+- Updated dependencies [b703480]
+- Updated dependencies [e7b6eae]
+  - @object-ui/types@5.2.0
+  - @object-ui/data-objectstack@5.2.0
+  - @object-ui/core@5.2.0
+  - @object-ui/i18n@5.2.0
+  - @object-ui/react@5.2.0
+  - @object-ui/fields@5.2.0
+  - @object-ui/components@5.2.0
+  - @object-ui/collaboration@5.2.0
+  - @object-ui/layout@5.2.0
+  - @object-ui/auth@5.2.0
+  - @object-ui/permissions@5.2.0
+  - @object-ui/providers@5.2.0
+
+## 5.1.1
+
+### Patch Changes
+
+- Updated dependencies [8955b9c]
+  - @object-ui/components@5.1.1
+  - @object-ui/fields@5.1.1
+  - @object-ui/layout@5.1.1
+  - @object-ui/types@5.1.1
+  - @object-ui/core@5.1.1
+  - @object-ui/i18n@5.1.1
+  - @object-ui/react@5.1.1
+  - @object-ui/data-objectstack@5.1.1
+  - @object-ui/auth@5.1.1
+  - @object-ui/permissions@5.1.1
+  - @object-ui/collaboration@5.1.1
+  - @object-ui/providers@5.1.1
+
+## 5.1.0
+
+### Minor Changes
+
+- d1ec6a2: Fold inline-edit into the page-header overflow menu (HubSpot/Lightning
+  pattern) and remove the orphan "Edit fields" toolbar row that previously
+  floated between the tab strip and the first detail section.
+  - `@object-ui/app-shell` `RecordDetailView`: injects a new `sys_inline_edit`
+    system action that appears in the ⋯ overflow menu and dispatches a
+    `objectui:record:inline-edit-toggle` window CustomEvent (filtered by
+    recordId + objectName).
+  - `@object-ui/plugin-detail` `DetailView`: listens for that event to
+    toggle inline-edit mode; the in-page toolbar now renders only during
+    active editing / save error / locked states, so the idle layout flows
+    tabs → first section card with no orphan row.
+  - `@object-ui/components` layout containers: extended `KNOWN_LABEL_DICT`
+    with zh-CN + zh-TW translations for common CRM related-list labels
+    (Quotes / Products / Contacts / Accounts / Leads / Opportunities /
+    Cases / Campaigns / Approvals / Documents / Emails / Calls / Meetings
+    / Open Tasks / Closed Tasks), so authored English labels auto-translate
+    in `page:accordion` / `page:tabs` items.
+
+- cf30cc2: Polish Lightning record detail page layout.
+  - `record:details` sections now render with Card chrome by default when a `title` is present, restoring visual grouping that was missing on pages like the opportunity detail page.
+  - Section labels can be translated via the `{ns}.objects.{objectName}._sections.{name}.label` convention. Author each section with a stable `name` (e.g. `info`, `forecast`) and the renderer picks up the locale-specific label automatically. Falls back to the literal `label` when no translation exists.
+  - The `page:header` action toolbar now collapses into a `⋯` overflow menu when more than two actions are present. The first business action stays inline; secondary system actions (Edit / Share / Delete) move into the menu, with destructive styling applied to Delete.
+  - Header action labels resolve via the `{ns}.objects.{objectName}._actions.{name}.label` convention.
+  - Removed the meaningless field-count Badge from collapsible section headers (the `2` chip next to "Description"). Field-count metadata wasn't useful in the header and added visual noise.
+  - Synth-path `sys_delete` now carries `variant: 'destructive'` so the overflow menu can color it appropriately.
+
+- c0b236f: Platform detail/form polish:
+  - **Auto-section grouping**: When an object has no authored `views.form.sections`, the detail page now splits fields into a primary section and a collapsible "More details" section based on a field-type/name heuristic (textarea / markdown / description / notes / remarks). Eliminates the wall-of-fields layout on objects without explicit detail metadata.
+  - **FormSection card chrome**: `FormSection` now accepts `showBorder`. Defaults to `true` for titled sections (Card wrapper) and `false` for untitled sections (flat). Same auto-default already applied to `DetailSection`.
+  - **Origin breadcrumb**: Navigating from a list/kanban into a record now records the source view; the detail page shows a `← <view label>` back-link above the page header.
+  - New i18n key `detail.sectionMoreDetails` (en + zh-CN).
+
+### Patch Changes
+
+- d51a577: feat(platform): Discussion attachments + @mention directory + Reference Rail aside
+  - **Discussion attachments** — `RichTextCommentInput` now accepts an `extraSlot`
+    and a `canSubmitEmpty` flag so hosts can mount the existing
+    `CommentAttachment` composer beneath the editor without forking the toolbar.
+    `RecordActivityTimeline` plumbs the attachments through
+    `DiscussionContext.onUploadAttachments` and submits attachment-only comments.
+  - **@mention directory** — `DiscussionContext` gains a `mentionSuggestions`
+    field; `RecordDetailView` populates it from the host `sys_user` collection so
+    `@` autocomplete in the composer now resolves against real users.
+  - **Reference Rail** — New `record:reference_rail` renderer + a dedicated
+    `aside` region emitted by `buildDefaultPageSchema` whenever a record has
+    ≥ 2 related lists. The rail surfaces a Salesforce/HubSpot-style snapshot
+    of related collections (count badge + top 3 records) on `xl+` viewports.
+  - **Layout** — `PageRenderer`'s structured-layout `<aside>` wrappers now honor
+    `aside.className`, letting schemas attach responsive utilities like
+    `hidden xl:flex` to the rail region.
+
+- 1976691: Fix the drawer "Open as full page" (maximize) button on the record drawer
+  which threw `TypeError: name.indexOf is not a function` and prevented
+  navigation to the dedicated detail page.
+  - `@object-ui/app-shell` `ObjectView`: pass `objectDef.name` (string) — not
+    the whole `objectDef` — into `viewLabel(...)` when computing the
+    `originState.from.label` for both drawer-navigate and list-navigate
+    flows. Two call sites fixed.
+  - `@object-ui/i18n` `useObjectLabel`: harden `stripNamespace` so it
+    tolerates non-string inputs and returns an empty string instead of
+    throwing, providing a safety net for similar future regressions.
+
+- a49f300: feat(detail): per-object Reference Rail opt-out via `objectDef.detail.hideReferenceRail`
+
+  The Record-detail Reference Rail (right-hand related-list summary cards)
+  can now be suppressed on a per-object basis without authoring a full
+  custom `Page`. Catalog-style objects (Product, Task) ship with the rail
+  off by default; hub objects (Account, Opportunity, Contact, Case) keep it
+  on.
+  - `RecordDetailView` now reads `(objectDef as any)?.detail?.hideReferenceRail`
+    and `…?.hideRelatedTab` and threads them to `buildDefaultPageSchema`.
+  - The Reference Rail renderer also accepts entries authored as either a
+    flat `entries` array or nested under `properties.entries`, so explicit
+    `Page` authors can opt-in via the standard spec shape.
+  - See `packages/plugin-detail/README.md` (Reference Rail decision matrix)
+    for the rationale and per-object guidance.
+
+- e9767b0: Remove dead `sys_presence` REST probes from `RecordDetailView` and `AppHeader`. Real-time
+  presence does not belong in a regular REST collection — the feature is being redesigned
+  behind a transport-level `<PresenceProvider>` (see ROADMAP). This change removes the
+  probe (and associated state / unused UI mounts) so the browser no longer makes silently
+  swallowed 404 requests on every record open / app navigation. UI surface area is
+  unchanged for end users (the previous code never rendered viewers when the probe failed).
+- Updated dependencies [bd8447d]
+- Updated dependencies [fbd5052]
+- Updated dependencies [d51a577]
+- Updated dependencies [1976691]
+- Updated dependencies [d1ec6a2]
+- Updated dependencies [cf30cc2]
+- Updated dependencies [5b80cfd]
+- Updated dependencies [49b1760]
+- Updated dependencies [c0b236f]
+- Updated dependencies [d548d6b]
+  - @object-ui/components@5.1.0
+  - @object-ui/react@5.1.0
+  - @object-ui/i18n@5.1.0
+  - @object-ui/types@5.1.0
+  - @object-ui/core@5.1.0
+  - @object-ui/data-objectstack@5.1.0
+  - @object-ui/fields@5.1.0
+  - @object-ui/layout@5.1.0
+  - @object-ui/auth@5.1.0
+  - @object-ui/collaboration@5.1.0
+  - @object-ui/permissions@5.1.0
+  - @object-ui/providers@5.1.0
+
 ## 5.0.2
 
 ### Patch Changes

package/dist/chrome/CommandPalette.d.ts

@@ -11,6 +11,11 @@ interface CommandPaletteProps {
     activeApp: any;
     objects: any[];
     onAppChange: (name: string) => void;
+    /**
+     * Optional data source used to power record search across objects. When
+     * omitted, the palette behaves exactly as before — nav items only.
+     */
+    dataSource?: any;
 }
-export declare function CommandPalette({ apps, activeApp, objects: _objects, onAppChange }: CommandPaletteProps): import("react/jsx-runtime").JSX.Element;
+export declare function CommandPalette({ apps, activeApp, objects, onAppChange, dataSource }: CommandPaletteProps): import("react/jsx-runtime").JSX.Element;
 export {};

package/dist/chrome/CommandPalette.js

@@ -7,17 +7,20 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
  *
  * Uses Shadcn's Command (cmdk) component — keyboard-accessible, fuzzy search.
  */
-import { useEffect, useState, useCallback } from 'react';
+import { useEffect, useState, useCallback, useMemo } from 'react';
 import { useNavigate, useParams } from 'react-router-dom';
 import { CommandDialog, CommandEmpty, CommandGroup, CommandInput, CommandItem, CommandList, CommandSeparator, } from '@object-ui/components';
 import { LayoutDashboard, FileText, BarChart3, Moon, Sun, Monitor, Search, Plus, } from 'lucide-react';
+import { useRecordSearch } from '@object-ui/react';
 import { useTheme } from './ThemeProvider';
 import { useExpressionContext, evaluateVisibility } from '../providers/ExpressionProvider';
 import { useObjectTranslation } from '@object-ui/i18n';
-import { resolveI18nLabel } from '../utils';
+import { resolveI18nLabel, getRecordDisplayName } from '../utils';
 import { getIcon } from '../utils/getIcon';
-export function CommandPalette({ apps, activeApp, objects: _objects, onAppChange }) {
+import { useRecentItems } from '../context/RecentItemsProvider';
+export function CommandPalette({ apps, activeApp, objects, onAppChange, dataSource }) {
     const [open, setOpen] = useState(false);
+    const [inputValue, setInputValue] = useState('');
     const navigate = useNavigate();
     const { appName } = useParams();
     const { setTheme } = useTheme();
@@ -34,6 +37,11 @@ export function CommandPalette({ apps, activeApp, objects: _objects, onAppChange
         document.addEventListener('keydown', down);
         return () => document.removeEventListener('keydown', down);
     }, []);
+    // Reset query when the palette closes so reopening doesn't show stale state.
+    useEffect(() => {
+        if (!open)
+            setInputValue('');
+    }, [open]);
     const baseUrl = `/apps/${appName || activeApp?.name}`;
     const runCommand = useCallback((command) => {
         setOpen(false);
@@ -41,7 +49,35 @@ export function CommandPalette({ apps, activeApp, objects: _objects, onAppChange
     }, []);
     // Extract navigation items from active app, filtering by visibility expressions
     const navItems = flattenNavigation(activeApp?.navigation || []).filter((item) => evaluateVisibility(item.visible ?? item.visibleOn, evaluator));
-    return (_jsxs(CommandDialog, { open: open, onOpenChange: setOpen, children: [_jsx(CommandInput, { placeholder: t('console.commandPalette.placeholder') }), _jsxs(CommandList, { children: [_jsx(CommandEmpty, { children: t('console.commandPalette.noResults') }), navItems.filter(i => i.type === 'object').length > 0 && (_jsx(CommandGroup, { heading: t('console.commandPalette.objects'), children: navItems
+    // Whitelist of object names visible in this app's nav — used as the search
+    // scope so we don't fan out to every object in the tenant.
+    const searchableObjectNames = useMemo(() => navItems
+        .filter((i) => i.type === 'object' && typeof i.objectName === 'string')
+        .map((i) => i.objectName), 
+    // navItems is rebuilt every render (filtered list); use a stable signature.
+    [activeApp?.name, navItems.map((i) => i.objectName || '').join('|')]);
+    const { results: recordHits, isSearching } = useRecordSearch({
+        query: inputValue,
+        objects,
+        dataSource,
+        objectNames: searchableObjectNames,
+        enabled: open && Boolean(dataSource),
+        getDisplayName: getRecordDisplayName,
+    });
+    // Cloud-synced (sys_user_preference) recently-visited records,
+    // surfaced in the empty state so the palette is useful before the
+    // user types anything. Filtered down to record-type entries so we
+    // don't double up with the per-app nav above.
+    const { recentItems } = useRecentItems();
+    const recentRecords = useMemo(() => recentItems.filter((it) => it.type === 'record').slice(0, 5), [recentItems]);
+    const showRecentRecords = open && inputValue.trim().length === 0 && recentRecords.length > 0;
+    return (_jsxs(CommandDialog, { open: open, onOpenChange: setOpen, children: [_jsx(CommandInput, { placeholder: t('console.commandPalette.placeholder'), value: inputValue, onValueChange: setInputValue }), _jsxs(CommandList, { children: [_jsx(CommandEmpty, { children: isSearching ? (_jsxs("span", { className: "inline-flex items-center gap-2 text-muted-foreground", children: [_jsx("span", { "aria-hidden": true, className: "inline-block h-1.5 w-1.5 rounded-full bg-primary motion-safe:animate-pulse" }), t('console.commandPalette.searching', { defaultValue: 'Searching…' })] })) : (t('console.commandPalette.noResults')) }), showRecentRecords && (_jsx(CommandGroup, { heading: t('console.commandPalette.recentRecords', { defaultValue: 'Recently viewed' }), children: recentRecords.map((item) => (_jsxs(CommandItem, { value: `recent ${item.label} ${item.id}`, onSelect: () => runCommand(() => navigate(item.href)), children: [_jsx(Search, { className: "mr-2 h-4 w-4" }), _jsx("span", { className: "truncate", children: item.label })] }, `recent:${item.id}`))) })), recordHits.length > 0 && (_jsx(CommandGroup, { heading: _jsxs("span", { className: "inline-flex items-center gap-2", children: [t('console.commandPalette.records', { defaultValue: 'Records' }), isSearching && (_jsx("span", { "aria-hidden": true, className: "inline-block h-1.5 w-1.5 rounded-full bg-primary motion-safe:animate-pulse" }))] }), children: recordHits.map((hit) => {
+                            const Icon = getIcon(hit.icon);
+                            return (_jsxs(CommandItem, { 
+                                // Embed the live query so cmdk's client-side filter doesn't
+                                // hide async hits that don't textually match the input.
+                                value: `record ${inputValue} ${hit.display} ${hit.objectLabel} ${hit.objectName} ${hit.recordId}`, onSelect: () => runCommand(() => navigate(`${baseUrl}/${hit.objectName}/record/${hit.recordId}`)), children: [_jsx(Icon, { className: "mr-2 h-4 w-4" }), _jsx("span", { className: "truncate", children: hit.display }), _jsx("span", { className: "ml-auto text-xs text-muted-foreground", children: hit.objectLabel })] }, `${hit.objectName}:${hit.recordId}`));
+                        }) })), navItems.filter(i => i.type === 'object').length > 0 && (_jsx(CommandGroup, { heading: t('console.commandPalette.objects'), children: navItems
                             .filter(i => i.type === 'object')
                             .map(item => {
                             const Icon = getIcon(item.icon);

package/dist/chrome/ConsoleToaster.js

@@ -11,13 +11,20 @@ import { CircleCheck, Info, LoaderCircle, OctagonX, TriangleAlert } from 'lucide
 import { useTheme } from './ThemeProvider';
 export function ConsoleToaster(props) {
     const { theme = 'system' } = useTheme();
-    return (_jsx(Sonner, { theme: theme, className: "toaster group", icons: {
+    return (_jsx(Sonner, { theme: theme, className: "toaster group", 
+        // UX defaults chosen for an enterprise console — match the Linear /
+        // Notion pattern users expect. Callers can still override any of
+        // these via the spread `{...props}` below.
+        position: "top-right", closeButton: true, richColors: true, expand: true, visibleToasts: 4, icons: {
             success: _jsx(CircleCheck, { className: "h-4 w-4" }),
             info: _jsx(Info, { className: "h-4 w-4" }),
             warning: _jsx(TriangleAlert, { className: "h-4 w-4" }),
             error: _jsx(OctagonX, { className: "h-4 w-4" }),
             loading: _jsx(LoaderCircle, { className: "h-4 w-4 animate-spin" }),
         }, toastOptions: {
+            // 4s default keeps actionable toasts visible long enough to
+            // click an Undo button without feeling sticky.
+            duration: 4000,
             classNames: {
                 toast: 'group toast group-[.toaster]:bg-background group-[.toaster]:text-foreground group-[.toaster]:border-border group-[.toaster]:shadow-lg',
                 description: 'group-[.toast]:text-muted-foreground',

package/dist/chrome/RouteFader.d.ts

@@ -0,0 +1,32 @@
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+/**
+ * `RouteFader` — light-touch fade-in animation that replays whenever
+ * the route pathname changes.
+ *
+ * Why this implementation choice:
+ *   The textbook approach (`<div key={pathname}>`) would remount every
+ *   page on navigation. That breaks scroll position, loses form state,
+ *   and re-fetches data that didn't need to refetch.
+ *
+ *   Instead we keep the wrapper stable and replay the CSS animation by
+ *   manipulating className directly via a layout effect: strip the
+ *   animation classes, force a reflow, then re-add them. The browser
+ *   restarts the animation against the same DOM node. React's VDOM
+ *   doesn't see the temporary class swap — it's pure DOM choreography
+ *   — so children are never remounted.
+ *
+ *   The animation is gated on `motion-safe:` so users with
+ *   `prefers-reduced-motion: reduce` see hard page swaps.
+ */
+import * as React from 'react';
+export interface RouteFaderProps {
+    children: React.ReactNode;
+    className?: string;
+}
+export declare function RouteFader({ children, className }: RouteFaderProps): import("react/jsx-runtime").JSX.Element;

package/dist/chrome/RouteFader.js

@@ -0,0 +1,52 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+/**
+ * `RouteFader` — light-touch fade-in animation that replays whenever
+ * the route pathname changes.
+ *
+ * Why this implementation choice:
+ *   The textbook approach (`<div key={pathname}>`) would remount every
+ *   page on navigation. That breaks scroll position, loses form state,
+ *   and re-fetches data that didn't need to refetch.
+ *
+ *   Instead we keep the wrapper stable and replay the CSS animation by
+ *   manipulating className directly via a layout effect: strip the
+ *   animation classes, force a reflow, then re-add them. The browser
+ *   restarts the animation against the same DOM node. React's VDOM
+ *   doesn't see the temporary class swap — it's pure DOM choreography
+ *   — so children are never remounted.
+ *
+ *   The animation is gated on `motion-safe:` so users with
+ *   `prefers-reduced-motion: reduce` see hard page swaps.
+ */
+import * as React from 'react';
+import { useLocation } from 'react-router-dom';
+const ANIM_CLASSES = ['motion-safe:animate-in', 'motion-safe:fade-in-0', 'motion-safe:duration-150'];
+export function RouteFader({ children, className }) {
+    const location = useLocation();
+    const ref = React.useRef(null);
+    const prevPath = React.useRef(location.pathname);
+    React.useLayoutEffect(() => {
+        if (prevPath.current === location.pathname)
+            return;
+        prevPath.current = location.pathname;
+        const el = ref.current;
+        if (!el)
+            return;
+        // Drop the animation classes, force a reflow read, then re-add
+        // them. This is the canonical CSS "restart animation" trick.
+        el.classList.remove(...ANIM_CLASSES);
+        // Reading `offsetWidth` forces layout, which is what tells the
+        // browser to flush the previous animation state.
+        // eslint-disable-next-line @typescript-eslint/no-unused-expressions
+        el.offsetWidth;
+        el.classList.add(...ANIM_CLASSES);
+    }, [location.pathname]);
+    return (_jsx("div", { ref: ref, className: [...ANIM_CLASSES, className ?? ''].filter(Boolean).join(' '), children: children }));
+}

package/dist/chrome/index.d.ts

@@ -3,6 +3,8 @@ export { KeyboardShortcutsDialog } from './KeyboardShortcutsDialog';
 export { OnboardingWalkthrough } from './OnboardingWalkthrough';
 export { ConditionalAuthWrapper } from './ConditionalAuthWrapper';
 export { ConsoleToaster } from './ConsoleToaster';
+export { RouteFader } from './RouteFader';
 export { ErrorBoundary } from './ErrorBoundary';
 export { LoadingScreen } from './LoadingScreen';
 export { ThemeProvider, useTheme } from './ThemeProvider';
+export { toastWithUndo, type ToastWithUndoOptions } from './toast-helpers';

package/dist/chrome/index.js

@@ -3,6 +3,8 @@ export { KeyboardShortcutsDialog } from './KeyboardShortcutsDialog';
 export { OnboardingWalkthrough } from './OnboardingWalkthrough';
 export { ConditionalAuthWrapper } from './ConditionalAuthWrapper';
 export { ConsoleToaster } from './ConsoleToaster';
+export { RouteFader } from './RouteFader';
 export { ErrorBoundary } from './ErrorBoundary';
 export { LoadingScreen } from './LoadingScreen';
 export { ThemeProvider, useTheme } from './ThemeProvider';
+export { toastWithUndo } from './toast-helpers';