@object-ui/app-shell 5.0.2 → 5.2.1

package/dist/console/marketplace/MarketplacePage.js

@@ -0,0 +1,94 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Marketplace Page — browse approved, marketplace-listed packages.
+ *
+ * Card-grid catalog of public packages, fetched from the tenant runtime's
+ * `/api/v1/marketplace/packages` proxy (which forwards to the configured
+ * cloud control plane). Click-through opens the package detail page.
+ */
+import { useEffect, useMemo, useState } from 'react';
+import { useNavigate, useParams } from 'react-router-dom';
+import { Card, CardContent, CardHeader, CardTitle, CardDescription, Badge, Input, Button, Skeleton, } from '@object-ui/components';
+import { Package, Search, RefreshCcw, Store, AlertCircle, CheckCircle2, Settings } from 'lucide-react';
+import { PackageIcon } from './PackageIcon';
+import { listMarketplacePackages, listLocalInstalls, } from './marketplaceApi';
+function formatRelative(iso) {
+    if (!iso)
+        return '';
+    const d = new Date(iso);
+    if (Number.isNaN(d.getTime()))
+        return '';
+    const days = Math.floor((Date.now() - d.getTime()) / 86400000);
+    if (days < 1)
+        return 'today';
+    if (days < 30)
+        return `${days}d ago`;
+    if (days < 365)
+        return `${Math.floor(days / 30)}mo ago`;
+    return `${Math.floor(days / 365)}y ago`;
+}
+export function MarketplacePage() {
+    const navigate = useNavigate();
+    const { appName } = useParams();
+    const basePath = appName ? `/apps/${appName}` : '';
+    const [items, setItems] = useState([]);
+    const [loading, setLoading] = useState(true);
+    const [error, setError] = useState(null);
+    const [query, setQuery] = useState('');
+    const [category, setCategory] = useState('');
+    const [installed, setInstalled] = useState([]);
+    const installedByManifestId = useMemo(() => {
+        const m = new Map();
+        for (const e of installed)
+            m.set(e.manifestId, e);
+        return m;
+    }, [installed]);
+    const load = async () => {
+        setLoading(true);
+        setError(null);
+        try {
+            const [resp, installs] = await Promise.all([
+                listMarketplacePackages({ limit: 100 }),
+                listLocalInstalls(),
+            ]);
+            setItems(resp.items ?? []);
+            setInstalled(installs);
+        }
+        catch (e) {
+            setError(e?.message ?? String(e));
+            setItems([]);
+        }
+        finally {
+            setLoading(false);
+        }
+    };
+    useEffect(() => { void load(); }, []);
+    const categories = useMemo(() => {
+        const s = new Set();
+        for (const it of items) {
+            if (it.category)
+                s.add(it.category);
+        }
+        return Array.from(s).sort();
+    }, [items]);
+    const filtered = useMemo(() => {
+        const q = query.trim().toLowerCase();
+        return items.filter((it) => {
+            if (category && it.category !== category)
+                return false;
+            if (!q)
+                return true;
+            const hay = `${it.display_name} ${it.manifest_id} ${it.description ?? ''}`.toLowerCase();
+            return hay.includes(q);
+        });
+    }, [items, query, category]);
+    return (_jsxs("div", { className: "flex flex-col gap-6 p-4 sm:p-6", children: [_jsxs("div", { className: "flex items-start justify-between gap-4 flex-wrap", children: [_jsxs("div", { className: "min-w-0", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Store, { className: "h-6 w-6 text-primary", "aria-hidden": "true" }), _jsx("h1", { className: "text-xl sm:text-2xl font-bold tracking-tight", children: "App Marketplace" })] }), _jsx("p", { className: "text-sm text-muted-foreground mt-1", children: "Browse approved apps published to the ObjectStack catalog. Click an app to view details and install it into one of your environments." })] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsxs(Button, { variant: "outline", size: "sm", onClick: () => navigate(`${basePath}/system/marketplace/installed`), children: [_jsx(Settings, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Installed", installed.length > 0 ? ` (${installed.length})` : ''] }), _jsxs(Button, { variant: "outline", size: "sm", onClick: () => void load(), disabled: loading, children: [_jsx(RefreshCcw, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Refresh"] })] })] }), _jsxs("div", { className: "flex flex-col sm:flex-row gap-3", children: [_jsxs("div", { className: "relative flex-1", children: [_jsx(Search, { className: "absolute left-3 top-1/2 -translate-y-1/2 h-4 w-4 text-muted-foreground", "aria-hidden": "true" }), _jsx(Input, { value: query, onChange: (e) => setQuery(e.target.value), placeholder: "Search apps by name or manifest ID\u2026", className: "pl-9", "aria-label": "Search marketplace apps" })] }), categories.length > 0 && (_jsxs("div", { className: "flex flex-wrap gap-1.5", children: [_jsx(Button, { size: "sm", variant: category === '' ? 'default' : 'outline', onClick: () => setCategory(''), children: "All" }), categories.map((cat) => (_jsx(Button, { size: "sm", variant: category === cat ? 'default' : 'outline', onClick: () => setCategory(cat), children: cat }, cat)))] }))] }), error && (_jsxs("div", { className: "flex items-start gap-3 rounded-md border border-destructive/30 bg-destructive/5 p-4 text-sm", children: [_jsx(AlertCircle, { className: "h-4 w-4 mt-0.5 text-destructive", "aria-hidden": "true" }), _jsxs("div", { children: [_jsx("div", { className: "font-medium text-destructive", children: "Failed to load marketplace" }), _jsx("div", { className: "text-muted-foreground mt-1", children: error }), _jsxs("div", { className: "text-xs text-muted-foreground mt-2", children: ["Check that this runtime is configured with ", _jsx("code", { className: "font-mono", children: "OS_CLOUD_URL" }), " pointing at a reachable ObjectStack Cloud."] })] })] })), loading && items.length === 0 ? (_jsx("div", { className: "grid gap-4 sm:grid-cols-2 lg:grid-cols-3", children: Array.from({ length: 6 }).map((_, i) => (_jsxs(Card, { children: [_jsxs(CardHeader, { className: "pb-2", children: [_jsx(Skeleton, { className: "h-10 w-10 rounded-lg mb-2" }), _jsx(Skeleton, { className: "h-5 w-3/4" }), _jsx(Skeleton, { className: "h-4 w-1/2 mt-1" })] }), _jsx(CardContent, { children: _jsx(Skeleton, { className: "h-12 w-full" }) })] }, i))) })) : filtered.length === 0 ? (_jsx("div", { className: "text-center py-12 text-sm text-muted-foreground", children: items.length === 0 ? 'No apps have been approved for the marketplace yet.' : 'No apps match your filters.' })) : (_jsx("div", { className: "grid gap-4 sm:grid-cols-2 lg:grid-cols-3", children: filtered.map((pkg) => {
+                    const localEntry = installedByManifestId.get(pkg.manifest_id);
+                    return (_jsxs(Card, { className: "cursor-pointer transition-colors hover:bg-accent/50 flex flex-col", onClick: () => navigate(`${basePath}/system/marketplace/${pkg.id}`), role: "link", tabIndex: 0, onKeyDown: (e) => {
+                            if (e.key === 'Enter' || e.key === ' ') {
+                                e.preventDefault();
+                                navigate(`${basePath}/system/marketplace/${pkg.id}`);
+                            }
+                        }, "data-testid": `marketplace-card-${pkg.manifest_id}`, children: [_jsxs(CardHeader, { className: "flex flex-row items-start gap-3 pb-2", children: [_jsx(PackageIcon, { iconUrl: pkg.icon_url, displayName: pkg.display_name, manifestId: pkg.manifest_id }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx(CardTitle, { className: "text-base truncate", children: pkg.display_name || pkg.manifest_id }), _jsx(CardDescription, { className: "text-xs truncate", children: _jsx("code", { className: "font-mono", children: pkg.manifest_id }) })] }), pkg.publisher && pkg.publisher !== 'private' && (_jsx(Badge, { variant: pkg.publisher === 'objectstack' ? 'default' : 'secondary', className: "shrink-0", children: pkg.publisher }))] }), _jsxs(CardContent, { className: "flex-1 flex flex-col gap-2", children: [_jsx("p", { className: "text-sm text-muted-foreground line-clamp-2", children: pkg.description || 'No description provided.' }), _jsxs("div", { className: "flex items-center gap-2 mt-auto pt-2 flex-wrap", children: [localEntry && (_jsxs(Badge, { variant: "default", className: "text-xs bg-green-600 hover:bg-green-600", children: [_jsx(CheckCircle2, { className: "h-3 w-3 mr-1", "aria-hidden": "true" }), "Installed v", localEntry.version] })), pkg.latest_version?.version && (_jsxs(Badge, { variant: "outline", className: "text-xs", children: [_jsx(Package, { className: "h-3 w-3 mr-1", "aria-hidden": "true" }), "v", pkg.latest_version.version] })), pkg.category && (_jsx(Badge, { variant: "outline", className: "text-xs", children: pkg.category })), pkg.latest_version?.published_at && (_jsx("span", { className: "text-xs text-muted-foreground ml-auto", children: formatRelative(pkg.latest_version.published_at) }))] })] })] }, pkg.id));
+                }) }))] }));
+}

package/dist/console/marketplace/PackageIcon.d.ts

@@ -0,0 +1,19 @@
+/**
+ * PackageIcon — square icon tile for marketplace packages.
+ *
+ * Renders the package's `icon_url` when present, falling back to the
+ * first letter of the display name (or manifest id) on missing-URL,
+ * load-error, or empty URL. The fallback also covers the common
+ * case where cloud rows point at icon assets that don't yet exist
+ * on the configured CDN.
+ */
+export interface PackageIconProps {
+    iconUrl?: string | null;
+    displayName?: string | null;
+    manifestId?: string | null;
+    /** Tailwind size classes — caller controls outer dimensions. */
+    className?: string;
+    /** Text size for the initial-letter fallback. */
+    initialClassName?: string;
+}
+export declare function PackageIcon({ iconUrl, displayName, manifestId, className, initialClassName, }: PackageIconProps): import("react/jsx-runtime").JSX.Element;

package/dist/console/marketplace/PackageIcon.js

@@ -0,0 +1,17 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+/**
+ * PackageIcon — square icon tile for marketplace packages.
+ *
+ * Renders the package's `icon_url` when present, falling back to the
+ * first letter of the display name (or manifest id) on missing-URL,
+ * load-error, or empty URL. The fallback also covers the common
+ * case where cloud rows point at icon assets that don't yet exist
+ * on the configured CDN.
+ */
+import { useState } from 'react';
+export function PackageIcon({ iconUrl, displayName, manifestId, className = 'h-10 w-10', initialClassName = 'text-base font-semibold', }) {
+    const [broken, setBroken] = useState(false);
+    const initial = ((displayName ?? manifestId ?? '?').trim()[0] ?? '?').toUpperCase();
+    const showImg = !!iconUrl && !broken;
+    return (_jsx("div", { className: `flex shrink-0 items-center justify-center rounded-lg bg-primary/10 text-primary overflow-hidden ${className}`, children: showImg ? (_jsx("img", { src: iconUrl, alt: "", className: `${className} object-cover`, onError: () => setBroken(true), loading: "lazy" })) : (_jsx("span", { className: initialClassName, children: initial })) }));
+}

package/dist/console/marketplace/marketplaceApi.d.ts

@@ -0,0 +1,122 @@
+/**
+ * Marketplace REST helper.
+ *
+ * Thin fetch wrapper around the tenant runtime's marketplace proxy
+ * (`/api/v1/marketplace/*`). The proxy forwards to the configured
+ * cloud control plane (`OS_CLOUD_URL`) — only browse endpoints are
+ * exposed. Install is performed against the cloud action endpoint
+ * directly (via `installPackage()` below), which requires the user
+ * to have a cloud session.
+ *
+ * See:
+ *   cloud/packages/service-cloud/src/routes/marketplace.ts
+ *   framework/packages/runtime/src/cloud/marketplace-proxy-plugin.ts
+ */
+export interface MarketplacePackageSummary {
+    id: string;
+    manifest_id: string;
+    display_name: string;
+    description?: string | null;
+    category?: string | null;
+    tags?: string | null;
+    icon_url?: string | null;
+    homepage_url?: string | null;
+    license?: string | null;
+    publisher?: string | null;
+    is_starter?: boolean;
+    created_at?: string;
+    updated_at?: string;
+    latest_version: MarketplacePackageVersion | null;
+}
+export interface MarketplacePackageDetail extends MarketplacePackageSummary {
+    readme?: string | null;
+}
+export interface MarketplacePackageVersion {
+    id: string;
+    version: string;
+    status?: string;
+    is_prerelease?: boolean;
+    published_at?: string | null;
+    listing_status?: string;
+    reviewed_at?: string | null;
+}
+export interface MarketplaceListResponse {
+    items: MarketplacePackageSummary[];
+    total: number;
+    limit: number;
+    offset: number;
+}
+export interface MarketplaceDetailResponse {
+    package: MarketplacePackageDetail;
+    versions: MarketplacePackageVersion[];
+}
+export declare function listMarketplacePackages(params?: {
+    q?: string;
+    category?: string;
+    limit?: number;
+    offset?: number;
+}): Promise<MarketplaceListResponse>;
+export declare function getMarketplacePackage(id: string): Promise<MarketplaceDetailResponse>;
+export interface InstallResponse {
+    installation?: {
+        id: string;
+        environment_id: string;
+        package_id: string;
+        version: string;
+    };
+    message?: string;
+    [k: string]: any;
+}
+export declare function installPackage(input: {
+    packageId: string;
+    environmentId: string;
+    seedSampleData?: boolean;
+}): Promise<InstallResponse>;
+/**
+ * Helper: list environments visible to the current cloud user (active
+ * organisation). Used to populate the install dialog's environment picker.
+ * Calls cloud directly — same auth model as `installPackage`.
+ */
+export interface CloudEnvironment {
+    id: string;
+    display_name?: string;
+    hostname?: string;
+    organization_id?: string;
+    plan?: string;
+    status?: string;
+}
+export declare function listCloudEnvironments(): Promise<CloudEnvironment[]>;
+/**
+ * List orgs in which the current cloud user has an `owner` or `admin`
+ * role on `sys_member`. Used to filter the install dialog's env picker
+ * — only envs whose `organization_id` is in this set are installable
+ * (the backend enforces the same gate; this is the UX mirror).
+ *
+ * Returns an empty set on 401 / network failure so the install dialog
+ * can render a clean "no installable environments" state.
+ */
+export declare function listInstallableOrgIds(): Promise<Set<string>>;
+export declare function cloudInstallDeepLink(packageId: string): string;
+export interface LocalInstallEntry {
+    packageId: string;
+    versionId: string;
+    manifestId: string;
+    version: string;
+    installedAt: string;
+    installedBy: string | null;
+}
+export interface LocalInstallResult {
+    manifestId: string;
+    version: string;
+    versionId: string;
+    installedAt: string;
+    hotLoaded: boolean;
+    upgradedFrom: string | null;
+    note?: string;
+}
+export declare function installLocal(input: {
+    packageId: string;
+    versionId?: string;
+}): Promise<LocalInstallResult>;
+export declare function listLocalInstalls(): Promise<LocalInstallEntry[]>;
+export declare function uninstallLocal(manifestId: string): Promise<void>;

package/dist/console/marketplace/marketplaceApi.js

@@ -0,0 +1,207 @@
+/**
+ * Marketplace REST helper.
+ *
+ * Thin fetch wrapper around the tenant runtime's marketplace proxy
+ * (`/api/v1/marketplace/*`). The proxy forwards to the configured
+ * cloud control plane (`OS_CLOUD_URL`) — only browse endpoints are
+ * exposed. Install is performed against the cloud action endpoint
+ * directly (via `installPackage()` below), which requires the user
+ * to have a cloud session.
+ *
+ * See:
+ *   cloud/packages/service-cloud/src/routes/marketplace.ts
+ *   framework/packages/runtime/src/cloud/marketplace-proxy-plugin.ts
+ */
+const SERVER_URL = (import.meta.env.VITE_SERVER_URL || '').replace(/\/$/, '');
+const API_BASE = `${SERVER_URL}/api/v1/marketplace`;
+async function call(path, init) {
+    const res = await fetch(`${API_BASE}${path}`, {
+        credentials: 'omit',
+        headers: { 'Accept': 'application/json', ...(init?.headers || {}) },
+        ...init,
+    });
+    let payload = null;
+    try {
+        payload = await res.json();
+    }
+    catch { /* empty body */ }
+    if (!res.ok) {
+        const code = payload?.error?.code ?? payload?.code ?? `HTTP_${res.status}`;
+        const message = payload?.error?.message ?? payload?.error ?? res.statusText;
+        const err = new Error(typeof message === 'string' ? message : `${code}`);
+        err.code = code;
+        err.status = res.status;
+        throw err;
+    }
+    // Cloud helpers return `{ success: true, data: ... }`; unwrap when present.
+    return (payload?.data ?? payload);
+}
+export async function listMarketplacePackages(params = {}) {
+    const usp = new URLSearchParams();
+    if (params.q)
+        usp.set('q', params.q);
+    if (params.category)
+        usp.set('category', params.category);
+    if (params.limit != null)
+        usp.set('limit', String(params.limit));
+    if (params.offset != null)
+        usp.set('offset', String(params.offset));
+    const qs = usp.toString();
+    return call(`/packages${qs ? `?${qs}` : ''}`);
+}
+export async function getMarketplacePackage(id) {
+    return call(`/packages/${encodeURIComponent(id)}`);
+}
+/**
+ * Install a package into an environment by calling the cloud's
+ * `install_package` action **directly** (not via the proxy). Requires the
+ * caller's browser to have a valid cloud session cookie — typically
+ * because the user has signed into cloud at least once and the cookie
+ * domain covers this origin. When that's not the case the call fails
+ * with 401; the UI can then surface a "Sign in on cloud" link.
+ *
+ * `cloudBaseUrl` is read from `VITE_CLOUD_URL` if set; otherwise we fall
+ * back to relative (assumes same-origin, which is true for cloud-hosted
+ * consoles but generally not for tenant runtimes).
+ */
+const CLOUD_BASE = (import.meta.env.VITE_CLOUD_URL || '').replace(/\/$/, '');
+export async function installPackage(input) {
+    const base = CLOUD_BASE || SERVER_URL;
+    const res = await fetch(`${base}/api/v1/actions/sys_package/install_package`, {
+        method: 'POST',
+        credentials: 'include',
+        headers: { 'Accept': 'application/json', 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            recordId: input.packageId,
+            params: {
+                environment_id: input.environmentId,
+                seed_sample_data: !!input.seedSampleData,
+            },
+        }),
+    });
+    let payload = null;
+    try {
+        payload = await res.json();
+    }
+    catch { /* empty */ }
+    if (!res.ok) {
+        const code = payload?.code ?? payload?.error?.code ?? `HTTP_${res.status}`;
+        const message = payload?.error ?? payload?.message ?? res.statusText;
+        const err = new Error(typeof message === 'string' ? message : `${code}`);
+        err.code = code;
+        err.status = res.status;
+        throw err;
+    }
+    return (payload?.data ?? payload);
+}
+export async function listCloudEnvironments() {
+    const base = CLOUD_BASE || SERVER_URL;
+    const res = await fetch(`${base}/api/v1/data/sys_environment?limit=200`, {
+        credentials: 'include',
+        headers: { 'Accept': 'application/json' },
+    });
+    if (!res.ok) {
+        const err = new Error(`HTTP_${res.status}`);
+        err.status = res.status;
+        throw err;
+    }
+    const payload = await res.json().catch(() => ({}));
+    const rows = payload?.data ?? payload?.items ?? payload ?? [];
+    return Array.isArray(rows) ? rows : [];
+}
+/**
+ * List orgs in which the current cloud user has an `owner` or `admin`
+ * role on `sys_member`. Used to filter the install dialog's env picker
+ * — only envs whose `organization_id` is in this set are installable
+ * (the backend enforces the same gate; this is the UX mirror).
+ *
+ * Returns an empty set on 401 / network failure so the install dialog
+ * can render a clean "no installable environments" state.
+ */
+export async function listInstallableOrgIds() {
+    const base = CLOUD_BASE || SERVER_URL;
+    // sys_member rows are scoped to the caller; better-auth-managed table.
+    const url = `${base}/api/v1/data/sys_member?limit=200`;
+    let payload = null;
+    try {
+        const res = await fetch(url, {
+            credentials: 'include',
+            headers: { 'Accept': 'application/json' },
+        });
+        if (!res.ok)
+            return new Set();
+        payload = await res.json().catch(() => ({}));
+    }
+    catch {
+        return new Set();
+    }
+    const rows = payload?.data ?? payload?.items ?? payload ?? [];
+    if (!Array.isArray(rows))
+        return new Set();
+    const ids = new Set();
+    for (const row of rows) {
+        const role = String(row?.role ?? '').toLowerCase();
+        const orgId = row?.organization_id ?? row?.organizationId;
+        if (orgId && (role === 'owner' || role === 'admin')) {
+            ids.add(String(orgId));
+        }
+    }
+    return ids;
+}
+export function cloudInstallDeepLink(packageId) {
+    const base = CLOUD_BASE || 'https://cloud.objectos.app';
+    return `${base}/apps/cloud-control/sys_package/${encodeURIComponent(packageId)}`;
+}
+export async function installLocal(input) {
+    const res = await fetch(`${API_BASE}/install-local`, {
+        method: 'POST',
+        credentials: 'include',
+        headers: { 'Accept': 'application/json', 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            packageId: input.packageId,
+            ...(input.versionId ? { versionId: input.versionId } : {}),
+        }),
+    });
+    let payload = null;
+    try {
+        payload = await res.json();
+    }
+    catch { /* empty */ }
+    if (!res.ok) {
+        const code = payload?.error?.code ?? `HTTP_${res.status}`;
+        const message = payload?.error?.message ?? res.statusText;
+        const err = new Error(typeof message === 'string' ? message : `${code}`);
+        err.code = code;
+        err.status = res.status;
+        throw err;
+    }
+    return (payload?.data ?? payload);
+}
+export async function listLocalInstalls() {
+    try {
+        const res = await fetch(`${API_BASE}/install-local`, {
+            credentials: 'include',
+            headers: { 'Accept': 'application/json' },
+        });
+        if (!res.ok)
+            return [];
+        const payload = await res.json().catch(() => ({}));
+        const items = payload?.data?.items ?? payload?.items ?? [];
+        return Array.isArray(items) ? items : [];
+    }
+    catch {
+        return [];
+    }
+}
+export async function uninstallLocal(manifestId) {
+    const res = await fetch(`${API_BASE}/install-local/${encodeURIComponent(manifestId)}`, {
+        method: 'DELETE',
+        credentials: 'include',
+        headers: { 'Accept': 'application/json' },
+    });
+    if (!res.ok) {
+        const payload = await res.json().catch(() => ({}));
+        const message = payload?.error?.message ?? res.statusText;
+        throw new Error(typeof message === 'string' ? message : `HTTP_${res.status}`);
+    }
+}

package/dist/index.d.ts

@@ -5,23 +5,19 @@
  * Framework-agnostic rendering engine for third-party integration
  */
 export { AppShell } from './components/AppShell';
-export { ObjectRenderer } from './components/ObjectRenderer';
-export { DashboardRenderer } from './components/DashboardRenderer';
-export { PageRenderer } from './components/PageRenderer';
-export { FormRenderer } from './components/FormRenderer';
 export { AdapterProvider, useAdapter } from './providers/AdapterProvider';
 export { MetadataProvider, useMetadata, useMetadataItem } from './providers/MetadataProvider';
 export { ExpressionProvider, useExpressionContext, evaluateVisibility } from './providers/ExpressionProvider';
 export { useObjectActions } from './hooks/useObjectActions';
 export { useRecentItems } from './hooks/useRecentItems';
-export type { AppShellProps, ObjectRendererProps, DashboardRendererProps, PageRendererProps, FormRendererProps, } from './types';
+export type { AppShellProps, } from './types';
 export type { MetadataState, MetadataContextValue, MetadataTypeStatus, } from './providers/MetadataProvider';
 export type { ExpressionContextValue, } from './providers/ExpressionProvider';
 export type { RecentItem, } from './hooks/useRecentItems';
 export { ConsoleShell, ConnectedShell, RequireOrganization, AuthenticatedRoute, RootRedirect, SystemRedirect, LoadingFallback, } from './console/ConsoleShell';
 export { ConsoleLayout, AppHeader, AppSidebar, UnifiedSidebar, AppSwitcher, ConnectionStatus, ActivityFeed, LocaleSwitcher, ModeToggle, AuthPageLayout, } from './layout';
 export type { ActivityItem } from './layout';
-export { CommandPalette, KeyboardShortcutsDialog, OnboardingWalkthrough, ConditionalAuthWrapper, ConsoleToaster, ErrorBoundary, LoadingScreen, ThemeProvider, useTheme, } from './chrome';
+export { CommandPalette, KeyboardShortcutsDialog, OnboardingWalkthrough, ConditionalAuthWrapper, ConsoleToaster, RouteFader, toastWithUndo, type ToastWithUndoOptions, ErrorBoundary, LoadingScreen, ThemeProvider, useTheme, } from './chrome';
 export { ObjectView, RecordDetailView, RecordFormPage, DashboardView, PageView, ReportView, SearchResultsPage, ViewConfigPanel, } from './views';
 export type { RecordFormPageProps } from './views';
 export { useFavorites, useMetadataService, useNavPins, useNavigationSync, NavigationSyncEffect, addNavigationItem, removeNavigationItems, renameNavigationItems, navigationEqual, generateNavId, useResponsiveSidebar, } from './hooks';
@@ -29,6 +25,9 @@ export type { FavoriteItem } from './hooks';
 export { NavigationProvider, useNavigationContext, FavoritesProvider, RecentItemsProvider, UserStateAdaptersProvider, useUserStateAdapter, useAttachUserStateAdapters, } from './context';
 export type { UserDataAdapter, UserStateKind } from './context';
 export { AppContent as DefaultAppContent } from './console/AppContent';
+export { MarketplacePage } from './console/marketplace/MarketplacePage';
+export { MarketplacePackagePage } from './console/marketplace/MarketplacePackagePage';
+export { MarketplaceInstalledPage } from './console/marketplace/MarketplaceInstalledPage';
 export { LoginPage as DefaultLoginPage } from './console/auth/LoginPage';
 export { RegisterPage as DefaultRegisterPage } from './console/auth/RegisterPage';
 export { ForgotPasswordPage as DefaultForgotPasswordPage } from './console/auth/ForgotPasswordPage';

package/dist/index.js

@@ -6,10 +6,6 @@
  */
 // Components
 export { AppShell } from './components/AppShell';
-export { ObjectRenderer } from './components/ObjectRenderer';
-export { DashboardRenderer } from './components/DashboardRenderer';
-export { PageRenderer } from './components/PageRenderer';
-export { FormRenderer } from './components/FormRenderer';
 // Providers
 export { AdapterProvider, useAdapter } from './providers/AdapterProvider';
 export { MetadataProvider, useMetadata, useMetadataItem } from './providers/MetadataProvider';
@@ -23,7 +19,7 @@ export { ConsoleShell, ConnectedShell, RequireOrganization, AuthenticatedRoute,
 // Layout chrome
 export { ConsoleLayout, AppHeader, AppSidebar, UnifiedSidebar, AppSwitcher, ConnectionStatus, ActivityFeed, LocaleSwitcher, ModeToggle, AuthPageLayout, } from './layout';
 // Top-level chrome (dialogs, providers, error boundaries)
-export { CommandPalette, KeyboardShortcutsDialog, OnboardingWalkthrough, ConditionalAuthWrapper, ConsoleToaster, ErrorBoundary, LoadingScreen, ThemeProvider, useTheme, } from './chrome';
+export { CommandPalette, KeyboardShortcutsDialog, OnboardingWalkthrough, ConditionalAuthWrapper, ConsoleToaster, RouteFader, toastWithUndo, ErrorBoundary, LoadingScreen, ThemeProvider, useTheme, } from './chrome';
 // Standard inner-SPA views
 export { ObjectView, RecordDetailView, RecordFormPage, DashboardView, PageView, ReportView, SearchResultsPage, ViewConfigPanel, } from './views';
 // Hooks
@@ -32,6 +28,9 @@ export { useFavorites, useMetadataService, useNavPins, useNavigationSync, Naviga
 export { NavigationProvider, useNavigationContext, FavoritesProvider, RecentItemsProvider, UserStateAdaptersProvider, useUserStateAdapter, useAttachUserStateAdapters, } from './context';
 // Default page implementations (consumers can partial-override slots)
 export { AppContent as DefaultAppContent } from './console/AppContent';
+export { MarketplacePage } from './console/marketplace/MarketplacePage';
+export { MarketplacePackagePage } from './console/marketplace/MarketplacePackagePage';
+export { MarketplaceInstalledPage } from './console/marketplace/MarketplaceInstalledPage';
 export { LoginPage as DefaultLoginPage } from './console/auth/LoginPage';
 export { RegisterPage as DefaultRegisterPage } from './console/auth/RegisterPage';
 export { ForgotPasswordPage as DefaultForgotPasswordPage } from './console/auth/ForgotPasswordPage';

package/dist/layout/AppHeader.js

@@ -22,7 +22,7 @@ import { SidebarTrigger, Button, DropdownMenu, DropdownMenuTrigger, DropdownMenu
 import { Search, HelpCircle, ChevronDown, Check, Lock, Settings, LogOut, User as UserIcon, Boxes, } from 'lucide-react';
 import { useState, useEffect, useCallback, useRef } from 'react';
 import { useOffline } from '@object-ui/react';
-import { PresenceAvatars } from '@object-ui/collaboration';
+import { PresenceAvatars, useTenantPresence } from '@object-ui/collaboration';
 import { ModeToggle } from './ModeToggle';
 import { LocaleSwitcher } from './LocaleSwitcher';
 import { ConnectionStatus } from './ConnectionStatus';
@@ -58,14 +58,12 @@ export function AppHeader({ variant, appName, objects, connectionState, presence
     const { apps: metadataApps, dashboards: metadataDashboards, pages: metadataPages, reports: metadataReports } = useMetadata();
     const { currentAppName, recordTitle } = useNavigationContext();
     const mobileSwitcher = useMobileViewSwitcher();
-    const [apiPresenceUsers, setApiPresenceUsers] = useState(null);
     const [apiActivities, setApiActivities] = useState(null);
     /** M10.8: in-header notifications. Polled from sys_notification scoped to current user. */
     const [notifications, setNotifications] = useState([]);
     // Once the server returns 404 for these collections we stop retrying for
     // the lifetime of the page — they're optional features and re-requesting
     // on every navigation creates console noise + wasted round trips.
-    const presenceUnavailableRef = useRef(false);
     const activityUnavailableRef = useRef(false);
     const notificationsUnavailableRef = useRef(false);
     /** M11.C15: pending approvals count for the topbar shortcut. */
@@ -79,29 +77,21 @@ export function AppHeader({ variant, appName, objects, connectionState, presence
         // registered on the server. Either signal means the feature is
         // unavailable — disable it for the rest of the page.
         const isMissingResource = (err) => err?.httpStatus === 404 || err?.status === 404 || err?.code === 'object_not_found';
-        const presenceP = presenceUnavailableRef.current
-            ? Promise.resolve({ data: [] })
-            : dataSource.find('sys_presence').catch((err) => {
-                if (isMissingResource(err))
-                    presenceUnavailableRef.current = true;
-                return { data: [] };
-            });
-        const activityP = activityUnavailableRef.current
-            ? Promise.resolve({ data: [] })
-            : dataSource
+        // Tenant-wide presence ("who else is online?") is intentionally NOT
+        // probed here. Presence is real-time ephemeral state that does not
+        // belong in a regular REST collection. The feature is staged behind a
+        // transport-level provider (<PresenceProvider>) which is not yet
+        // wired — see ROADMAP for the realtime plan.
+        if (activityUnavailableRef.current)
+            return;
+        try {
+            const activityResult = await dataSource
                 .find('sys_activity', { $orderby: { timestamp: 'desc' }, $top: 20 })
                 .catch((err) => {
                 if (isMissingResource(err))
                     activityUnavailableRef.current = true;
                 return { data: [] };
             });
-        try {
-            const [presenceResult, activityResult] = await Promise.all([presenceP, activityP]);
-            if (presenceResult.data?.length) {
-                const users = presenceResult.data.filter((u) => typeof u.userId === 'string');
-                if (users.length)
-                    setApiPresenceUsers(users);
-            }
             if (activityResult.data?.length) {
                 const items = activityResult.data.filter((a) => typeof a.type === 'string');
                 if (items.length)
@@ -275,9 +265,23 @@ export function AppHeader({ variant, appName, objects, connectionState, presence
         if (!dataSource)
             return;
         const now = new Date().toISOString();
+        const ids = unread.map(n => n.id);
+        // Prefer the bulk endpoint — one HTTP/auth/RLS round-trip instead of
+        // N parallel PATCHes, which previously caused noticeable hitching
+        // (Slack-style "mark all read" jank) on inboxes with 50+ unread.
+        // Fall back to the per-id loop on adapters that don't implement it.
+        const ds = dataSource;
+        if (typeof ds.bulkUpdate === 'function') {
+            try {
+                await ds.bulkUpdate('sys_notification', ids, { is_read: true, read_at: now });
+                return;
+            }
+            catch { /* fall through to per-id loop */ }
+        }
         await Promise.all(unread.map(n => dataSource.update('sys_notification', n.id, { is_read: true, read_at: now }).catch(() => { })));
     }, [dataSource, notifications]);
-    const activeUsers = presenceUsers ?? apiPresenceUsers ?? EMPTY_PRESENCE_USERS;
+    const tenantPresence = useTenantPresence();
+    const activeUsers = presenceUsers ?? (tenantPresence.length > 0 ? tenantPresence : EMPTY_PRESENCE_USERS);
     const activeActivities = activities ?? apiActivities ?? [];
     const orgList = organizations ?? [];
     const hasOrgSection = isOrganizationsLoading || orgList.length > 0 || !!activeOrganization;