@object-ui/app-shell 5.4.2 → 6.0.1

package/CHANGELOG.md

@@ -1,5 +1,74 @@
 # @object-ui/app-shell — Changelog
 
+## 6.0.1
+
+### Patch Changes
+
+- dbb9a98: cloud
+  - @object-ui/types@6.0.1
+  - @object-ui/core@6.0.1
+  - @object-ui/i18n@6.0.1
+  - @object-ui/react@6.0.1
+  - @object-ui/components@6.0.1
+  - @object-ui/fields@6.0.1
+  - @object-ui/layout@6.0.1
+  - @object-ui/data-objectstack@6.0.1
+  - @object-ui/auth@6.0.1
+  - @object-ui/permissions@6.0.1
+  - @object-ui/collaboration@6.0.1
+  - @object-ui/providers@6.0.1
+
+## 6.0.0
+
+### Major Changes
+
+- 168a4d0: ai
+
+### Patch Changes
+
+- 451bbee: **HITL conversation loop:** `useHitlInChat` now accepts a
+  `continueConversation(prompt, ctx)` callback. After the operator approves
+  or rejects a tool call from inline chat buttons, the hook synthesises a
+  short follow-up user prompt (tagged `[HITL pa_xxx]`, with the executed
+  result or rejection reason) and invokes the callback so the LLM
+  continues the conversation with full awareness of the outcome.
+
+  `ConsoleFloatingChatbot` wires this callback to `useObjectChat`'s
+  `sendMessage`, closing the loop end-to-end. Execution failures stay
+  visible in the inline status badge but do NOT continue automatically —
+  the operator decides next steps.
+
+  No framework changes required. Internal `idMap` now also tracks the
+  tool name so the synthesised prompt is human-readable. New test suite
+  `useHitlInChat.test.tsx` covers approve/reject/failed/no-callback
+  branches.
+
+- Updated dependencies [451bbee]
+  - @object-ui/plugin-chatbot@6.0.0
+  - @object-ui/types@6.0.0
+  - @object-ui/core@6.0.0
+  - @object-ui/i18n@6.0.0
+  - @object-ui/react@6.0.0
+  - @object-ui/components@6.0.0
+  - @object-ui/fields@6.0.0
+  - @object-ui/layout@6.0.0
+  - @object-ui/data-objectstack@6.0.0
+  - @object-ui/auth@6.0.0
+  - @object-ui/permissions@6.0.0
+  - @object-ui/plugin-calendar@6.0.0
+  - @object-ui/plugin-charts@6.0.0
+  - @object-ui/plugin-dashboard@6.0.0
+  - @object-ui/plugin-designer@6.0.0
+  - @object-ui/plugin-detail@6.0.0
+  - @object-ui/plugin-form@6.0.0
+  - @object-ui/plugin-grid@6.0.0
+  - @object-ui/plugin-kanban@6.0.0
+  - @object-ui/plugin-list@6.0.0
+  - @object-ui/plugin-report@6.0.0
+  - @object-ui/plugin-view@6.0.0
+  - @object-ui/collaboration@6.0.0
+  - @object-ui/providers@6.0.0
+
 ## 5.4.2
 
 ### Patch Changes

package/dist/console/home/HomeLayout.js

@@ -8,13 +8,13 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  *
  * @module
  */
-import { useEffect, Suspense, lazy } from 'react';
+import { useEffect } from 'react';
 import { useNavigationContext } from '../../context/NavigationContext';
 import { AppHeader } from '../../layout/AppHeader';
 import { useDiscovery } from '@object-ui/react';
-// Lazy-load the chatbot so its heavy markdown deps stay out of the initial
-// paint until the AI assistant is actually enabled.
-const ConsoleFloatingChatbot = lazy(() => import('../../layout/ConsoleFloatingChatbot'));
+// Lightweight FAB stub — the heavy chat chunk graph only downloads on
+// first hover/click. See ../../layout/ConsoleChatbotFab.tsx.
+import { ConsoleChatbotFab } from '../../layout/ConsoleChatbotFab';
 export function HomeLayout({ children }) {
     const { setContext } = useNavigationContext();
     const { isAiEnabled } = useDiscovery();
@@ -26,5 +26,5 @@ export function HomeLayout({ children }) {
     useEffect(() => {
         setContext('home');
     }, [setContext]);
-    return (_jsxs("div", { className: "flex min-h-svh w-full flex-col bg-background", "data-testid": "home-layout", children: [_jsx("header", { className: "sticky top-0 z-30 flex h-14 w-full shrink-0 items-center gap-2 border-b bg-background px-2 sm:px-4", children: _jsx(AppHeader, { variant: "home" }) }), _jsx("main", { className: "flex-1 min-w-0 overflow-auto pb-20 sm:pb-0", children: children }), showChatbot && (_jsx(Suspense, { fallback: null, children: _jsx(ConsoleFloatingChatbot, { appLabel: "Workspace", objects: [] }) }))] }));
+    return (_jsxs("div", { className: "flex min-h-svh w-full flex-col bg-background", "data-testid": "home-layout", children: [_jsx("header", { className: "sticky top-0 z-30 flex h-14 w-full shrink-0 items-center gap-2 border-b bg-background px-2 sm:px-4", children: _jsx(AppHeader, { variant: "home" }) }), _jsx("main", { className: "flex-1 min-w-0 overflow-auto pb-20 sm:pb-0", children: children }), showChatbot && _jsx(ConsoleChatbotFab, { appLabel: "Workspace", objects: [] })] }));
 }

package/dist/console/marketplace/MarketplacePackagePage.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 /**
  * Marketplace Package Detail Page.
  *
@@ -12,6 +12,7 @@ import { ArrowLeft, ExternalLink, Download, AlertCircle, Package, Trash2 } from
 import { PackageIcon } from './PackageIcon';
 import { MarkdownText } from './MarkdownText';
 import { getMarketplacePackage, installPackage, installLocal, uninstallLocal, listLocalInstalls, listCloudEnvironments, listInstallableOrgIds, cloudInstallDeepLink, } from './marketplaceApi';
+import { getRuntimeConfig } from '../../runtime-config';
 export function MarketplacePackagePage() {
     const navigate = useNavigate();
     const { packageId, appName } = useParams();
@@ -32,6 +33,8 @@ export function MarketplacePackagePage() {
     const [installingLocal, setInstallingLocal] = useState(false);
     const [localResult, setLocalResult] = useState(null);
     useEffect(() => {
+        if (!getRuntimeConfig().features.installLocal)
+            return;
         let cancelled = false;
         (async () => {
             const items = await listLocalInstalls();
@@ -191,10 +194,10 @@ export function MarketplacePackagePage() {
     const pkg = data.package;
     const latestVersion = pkg.latest_version?.version ?? data.versions[0]?.version ?? null;
     const localInstall = localInstalls.find((i) => i.manifestId === pkg.manifest_id) ?? null;
-    return (_jsxs("div", { className: "flex flex-col gap-6 p-4 sm:p-6 max-w-5xl", children: [_jsxs(Button, { variant: "ghost", size: "sm", className: "self-start", onClick: () => navigate(`${basePath}/system/marketplace`), children: [_jsx(ArrowLeft, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Back to marketplace"] }), _jsxs("div", { className: "flex items-start gap-5 flex-wrap rounded-2xl border bg-gradient-to-br from-primary/5 via-background to-background p-6", children: [_jsx(PackageIcon, { iconUrl: pkg.icon_url, displayName: pkg.display_name, manifestId: pkg.manifest_id, className: "h-20 w-20 rounded-2xl shadow-sm ring-1 ring-border", initialClassName: "text-3xl font-bold" }), _jsxs("div", { className: "flex-1 min-w-0", children: [_jsx("h1", { className: "text-3xl font-bold tracking-tight truncate", children: pkg.display_name || pkg.manifest_id }), _jsxs("div", { className: "text-sm text-muted-foreground mt-2 flex flex-wrap items-center gap-2", children: [_jsx("code", { className: "font-mono text-xs px-1.5 py-0.5 rounded bg-muted", children: pkg.manifest_id }), latestVersion && (_jsxs(Badge, { variant: "outline", children: ["v", latestVersion] })), pkg.publisher && pkg.publisher !== 'private' && (_jsx(Badge, { variant: pkg.publisher === 'objectstack' ? 'default' : 'secondary', children: pkg.publisher })), pkg.category && _jsx(Badge, { variant: "outline", children: pkg.category }), pkg.license && _jsx(Badge, { variant: "outline", className: "font-normal", children: pkg.license }), localInstall && (_jsxs(Badge, { variant: "default", className: "bg-green-600 hover:bg-green-600", children: ["Installed \u00B7 v", localInstall.version] }))] }), pkg.description && (_jsx("p", { className: "text-base text-foreground/80 mt-4 max-w-2xl leading-relaxed", children: pkg.description }))] }), _jsxs("div", { className: "flex flex-col gap-2 shrink-0 min-w-[14rem]", children: [_jsxs(Button, { onClick: doInstallLocal, disabled: !latestVersion || installingLocal, size: "lg", children: [_jsx(Download, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), installingLocal
-                                        ? 'Working…'
-                                        : localInstall
-                                            ? `Reinstall to this runtime`
-                                            : 'Install to this runtime'] }), localInstall && (_jsxs(Button, { variant: "outline", onClick: doUninstallLocal, disabled: installingLocal, children: [_jsx(Trash2, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Uninstall from this runtime"] })), _jsxs(Button, { variant: "ghost", onClick: openInstall, disabled: !latestVersion, size: "sm", children: [_jsx(Download, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Install to cloud environment\u2026"] }), pkg.homepage_url && (_jsx("a", { href: pkg.homepage_url, target: "_blank", rel: "noopener noreferrer", children: _jsxs(Button, { variant: "ghost", size: "sm", className: "w-full", children: [_jsx(ExternalLink, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Homepage"] }) })), localResult && (_jsx("div", { className: `rounded-md border p-2 text-xs whitespace-pre-wrap ${localResult.ok ? 'border-green-500/30 bg-green-500/5 text-green-700 dark:text-green-400' : 'border-destructive/30 bg-destructive/5 text-destructive'}`, children: localResult.message }))] })] }), _jsxs("div", { className: "grid gap-4 lg:grid-cols-3", children: [_jsx("div", { className: "lg:col-span-2 space-y-4", children: _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx(CardTitle, { className: "text-base", children: "About" }) }), _jsx(CardContent, { children: pkg.readme ? (_jsx(MarkdownText, { source: pkg.readme })) : (_jsx("p", { className: "text-sm text-muted-foreground", children: "No readme provided." })) })] }) }), _jsx("div", { className: "space-y-4", children: _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx(CardTitle, { className: "text-base", children: "Versions" }) }), _jsx(CardContent, { children: data.versions.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "No approved versions." })) : (_jsx("ul", { className: "space-y-2", children: data.versions.map((v) => (_jsxs("li", { className: "flex items-center justify-between gap-2 text-sm", children: [_jsxs("span", { className: "flex items-center gap-1.5", children: [_jsx(Package, { className: "h-3.5 w-3.5 text-muted-foreground", "aria-hidden": "true" }), _jsxs("code", { className: "font-mono", children: ["v", v.version] }), v.is_prerelease && _jsx(Badge, { variant: "outline", className: "text-xs", children: "pre" })] }), _jsx("span", { className: "text-xs text-muted-foreground", children: v.published_at ? new Date(v.published_at).toLocaleDateString() : '—' })] }, v.id))) })) })] }) })] }), _jsx(Dialog, { open: installOpen, onOpenChange: (o) => { setInstallOpen(o); if (!o)
+    return (_jsxs("div", { className: "flex flex-col gap-6 p-4 sm:p-6 max-w-5xl", children: [_jsxs(Button, { variant: "ghost", size: "sm", className: "self-start", onClick: () => navigate(`${basePath}/system/marketplace`), children: [_jsx(ArrowLeft, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Back to marketplace"] }), _jsxs("div", { className: "flex items-start gap-5 flex-wrap rounded-2xl border bg-gradient-to-br from-primary/5 via-background to-background p-6", children: [_jsx(PackageIcon, { iconUrl: pkg.icon_url, displayName: pkg.display_name, manifestId: pkg.manifest_id, className: "h-20 w-20 rounded-2xl shadow-sm ring-1 ring-border", initialClassName: "text-3xl font-bold" }), _jsxs("div", { className: "flex-1 min-w-0", children: [_jsx("h1", { className: "text-3xl font-bold tracking-tight truncate", children: pkg.display_name || pkg.manifest_id }), _jsxs("div", { className: "text-sm text-muted-foreground mt-2 flex flex-wrap items-center gap-2", children: [_jsx("code", { className: "font-mono text-xs px-1.5 py-0.5 rounded bg-muted", children: pkg.manifest_id }), latestVersion && (_jsxs(Badge, { variant: "outline", children: ["v", latestVersion] })), pkg.publisher && pkg.publisher !== 'private' && (_jsx(Badge, { variant: pkg.publisher === 'objectstack' ? 'default' : 'secondary', children: pkg.publisher })), pkg.category && _jsx(Badge, { variant: "outline", children: pkg.category }), pkg.license && _jsx(Badge, { variant: "outline", className: "font-normal", children: pkg.license }), localInstall && (_jsxs(Badge, { variant: "default", className: "bg-green-600 hover:bg-green-600", children: ["Installed \u00B7 v", localInstall.version] }))] }), pkg.description && (_jsx("p", { className: "text-base text-foreground/80 mt-4 max-w-2xl leading-relaxed", children: pkg.description }))] }), _jsxs("div", { className: "flex flex-col gap-2 shrink-0 min-w-[14rem]", children: [getRuntimeConfig().features.installLocal && (_jsxs(_Fragment, { children: [_jsxs(Button, { onClick: doInstallLocal, disabled: !latestVersion || installingLocal, size: "lg", children: [_jsx(Download, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), installingLocal
+                                                ? 'Working…'
+                                                : localInstall
+                                                    ? `Reinstall to this runtime`
+                                                    : 'Install to this runtime'] }), localInstall && (_jsxs(Button, { variant: "outline", onClick: doUninstallLocal, disabled: installingLocal, children: [_jsx(Trash2, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Uninstall from this runtime"] }))] })), _jsxs(Button, { variant: "ghost", onClick: openInstall, disabled: !latestVersion, size: "sm", children: [_jsx(Download, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Install to cloud environment\u2026"] }), pkg.homepage_url && (_jsx("a", { href: pkg.homepage_url, target: "_blank", rel: "noopener noreferrer", children: _jsxs(Button, { variant: "ghost", size: "sm", className: "w-full", children: [_jsx(ExternalLink, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Homepage"] }) })), localResult && (_jsx("div", { className: `rounded-md border p-2 text-xs whitespace-pre-wrap ${localResult.ok ? 'border-green-500/30 bg-green-500/5 text-green-700 dark:text-green-400' : 'border-destructive/30 bg-destructive/5 text-destructive'}`, children: localResult.message }))] })] }), _jsxs("div", { className: "grid gap-4 lg:grid-cols-3", children: [_jsx("div", { className: "lg:col-span-2 space-y-4", children: _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx(CardTitle, { className: "text-base", children: "About" }) }), _jsx(CardContent, { children: pkg.readme ? (_jsx(MarkdownText, { source: pkg.readme })) : (_jsx("p", { className: "text-sm text-muted-foreground", children: "No readme provided." })) })] }) }), _jsx("div", { className: "space-y-4", children: _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx(CardTitle, { className: "text-base", children: "Versions" }) }), _jsx(CardContent, { children: data.versions.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "No approved versions." })) : (_jsx("ul", { className: "space-y-2", children: data.versions.map((v) => (_jsxs("li", { className: "flex items-center justify-between gap-2 text-sm", children: [_jsxs("span", { className: "flex items-center gap-1.5", children: [_jsx(Package, { className: "h-3.5 w-3.5 text-muted-foreground", "aria-hidden": "true" }), _jsxs("code", { className: "font-mono", children: ["v", v.version] }), v.is_prerelease && _jsx(Badge, { variant: "outline", className: "text-xs", children: "pre" })] }), _jsx("span", { className: "text-xs text-muted-foreground", children: v.published_at ? new Date(v.published_at).toLocaleDateString() : '—' })] }, v.id))) })) })] }) })] }), _jsx(Dialog, { open: installOpen, onOpenChange: (o) => { setInstallOpen(o); if (!o)
                     setInstallResult(null); }, children: _jsxs(DialogContent, { children: [_jsxs(DialogHeader, { children: [_jsxs(DialogTitle, { children: ["Install ", pkg.display_name || pkg.manifest_id] }), _jsx(DialogDescription, { children: "Choose an environment to install this app into. You need to be signed into ObjectStack Cloud." })] }), envsLoading ? (_jsx(Skeleton, { className: "h-10 w-full" })) : envsError ? (_jsxs("div", { className: "rounded-md border border-amber-500/30 bg-amber-500/5 p-3 text-sm space-y-2", children: [_jsxs("div", { className: "flex items-start gap-2", children: [_jsx(AlertCircle, { className: "h-4 w-4 mt-0.5 text-amber-600", "aria-hidden": "true" }), _jsx("div", { className: "flex-1", children: envsError })] }), _jsx("a", { href: cloudInstallDeepLink(pkg.id), target: "_blank", rel: "noopener noreferrer", children: _jsxs(Button, { variant: "outline", size: "sm", className: "w-full", children: [_jsx(ExternalLink, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Open on cloud"] }) })] })) : envs.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "No environments found in your active organization." })) : (_jsxs("div", { className: "space-y-4", children: [_jsxs("div", { className: "space-y-1.5", children: [_jsx(Label, { htmlFor: "env-select", children: "Environment" }), _jsxs(Select, { value: selectedEnv, onValueChange: setSelectedEnv, children: [_jsx(SelectTrigger, { id: "env-select", children: _jsx(SelectValue, { placeholder: "Pick an environment" }) }), _jsx(SelectContent, { children: envs.map((e) => (_jsxs(SelectItem, { value: e.id, children: [e.display_name || e.hostname || e.id, e.plan && _jsxs("span", { className: "text-muted-foreground", children: [" \u00B7 ", e.plan] })] }, e.id))) })] })] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Checkbox, { id: "seed", checked: seedSampleData, onCheckedChange: (c) => setSeedSampleData(c === true) }), _jsx(Label, { htmlFor: "seed", className: "text-sm font-normal cursor-pointer", children: "Include sample data" })] })] })), installResult && (_jsx("div", { className: `rounded-md border p-3 text-sm ${installResult.ok ? 'border-green-500/30 bg-green-500/5 text-green-700' : 'border-destructive/30 bg-destructive/5 text-destructive'}`, children: installResult.message })), _jsxs(DialogFooter, { children: [_jsx(Button, { variant: "outline", onClick: () => setInstallOpen(false), children: "Close" }), !envsError && (_jsx(Button, { onClick: doInstall, disabled: !selectedEnv || installing || installResult?.ok === true, children: installing ? 'Installing…' : 'Install' }))] })] }) })] }));
 }

package/dist/console/marketplace/marketplaceApi.d.ts

@@ -57,6 +57,20 @@ export declare function listMarketplacePackages(params?: {
     offset?: number;
 }): Promise<MarketplaceListResponse>;
 export declare function getMarketplacePackage(id: string): Promise<MarketplaceDetailResponse>;
+/**
+ * Install a package into an environment by calling the cloud's
+ * `install_package` action **directly** (not via the proxy). Requires the
+ * caller's browser to have a valid cloud session cookie — typically
+ * because the user has signed into cloud at least once and the cookie
+ * domain covers this origin. When that's not the case the call fails
+ * with 401; the UI can then surface a "Sign in on cloud" link.
+ *
+ * `cloudBaseUrl` is supplied by the server at boot via
+ * `/api/v1/runtime/config` (see `runtime-config.ts`); we read it through
+ * `getCloudBase()` rather than hardcoding `VITE_CLOUD_URL` or sniffing
+ * `window.location.hostname`. When the runtime *is* the cloud,
+ * `getCloudBase()` returns `''` and we fall back to same-origin.
+ */
 export interface InstallResponse {
     installation?: {
         id: string;

package/dist/console/marketplace/marketplaceApi.js

@@ -12,6 +12,7 @@
  *   cloud/packages/service-cloud/src/routes/marketplace.ts
  *   framework/packages/runtime/src/cloud/marketplace-proxy-plugin.ts
  */
+import { getCloudBase } from '../../runtime-config';
 const SERVER_URL = (import.meta.env.VITE_SERVER_URL || '').replace(/\/$/, '');
 const API_BASE = `${SERVER_URL}/api/v1/marketplace`;
 async function call(path, init) {
@@ -52,21 +53,8 @@ export async function listMarketplacePackages(params = {}) {
 export async function getMarketplacePackage(id) {
     return call(`/packages/${encodeURIComponent(id)}`);
 }
-/**
- * Install a package into an environment by calling the cloud's
- * `install_package` action **directly** (not via the proxy). Requires the
- * caller's browser to have a valid cloud session cookie — typically
- * because the user has signed into cloud at least once and the cookie
- * domain covers this origin. When that's not the case the call fails
- * with 401; the UI can then surface a "Sign in on cloud" link.
- *
- * `cloudBaseUrl` is read from `VITE_CLOUD_URL` if set; otherwise we fall
- * back to relative (assumes same-origin, which is true for cloud-hosted
- * consoles but generally not for tenant runtimes).
- */
-const CLOUD_BASE = (import.meta.env.VITE_CLOUD_URL || '').replace(/\/$/, '');
 export async function installPackage(input) {
-    const base = CLOUD_BASE || SERVER_URL;
+    const base = getCloudBase() || SERVER_URL;
     const res = await fetch(`${base}/api/v1/actions/sys_package/install_package`, {
         method: 'POST',
         credentials: 'include',
@@ -95,7 +83,7 @@ export async function installPackage(input) {
     return (payload?.data ?? payload);
 }
 export async function listCloudEnvironments() {
-    const base = CLOUD_BASE || SERVER_URL;
+    const base = getCloudBase() || SERVER_URL;
     const res = await fetch(`${base}/api/v1/data/sys_environment?limit=200`, {
         credentials: 'include',
         headers: { 'Accept': 'application/json' },
@@ -119,7 +107,7 @@ export async function listCloudEnvironments() {
  * can render a clean "no installable environments" state.
  */
 export async function listInstallableOrgIds() {
-    const base = CLOUD_BASE || SERVER_URL;
+    const base = getCloudBase() || SERVER_URL;
     // sys_member rows are scoped to the caller; better-auth-managed table.
     const url = `${base}/api/v1/data/sys_member?limit=200`;
     let payload = null;
@@ -149,7 +137,7 @@ export async function listInstallableOrgIds() {
     return ids;
 }
 export function cloudInstallDeepLink(packageId) {
-    const base = CLOUD_BASE || 'https://cloud.objectos.app';
+    const base = getCloudBase() || 'https://cloud.objectos.app';
     return `${base}/apps/cloud-control/sys_package/${encodeURIComponent(packageId)}`;
 }
 export async function installLocal(input) {

package/dist/console/organizations/OrganizationsPage.js

@@ -14,6 +14,7 @@ import { useAuth } from '@object-ui/auth';
 import { useObjectTranslation } from '@object-ui/i18n';
 import { useNavigate } from 'react-router-dom';
 import { CreateWorkspaceDialog } from './CreateWorkspaceDialog';
+import { resolveHomeUrl } from './resolveHomeUrl';
 function getOrgInitials(name) {
     return name
         .split(/[\s_-]+/)
@@ -42,9 +43,7 @@ export function OrganizationsPage() {
             if (org.id !== activeOrganization?.id) {
                 await switchOrganization(org.id);
             }
-            const base = import.meta.env.BASE_URL || '/';
-            const normalizedBase = base.endsWith('/') ? base : `${base}/`;
-            window.location.href = `${window.location.origin}${normalizedBase}home`;
+            window.location.href = resolveHomeUrl();
         }
         catch (err) {
             console.error('[OrganizationsPage] Failed to switch:', err);

package/dist/console/organizations/resolveHomeUrl.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Resolve the absolute URL of the console "home" route used after switching
+ * the active organization.
+ *
+ * Earlier versions concatenated `import.meta.env.BASE_URL` to
+ * `window.location.origin` ("`${origin}${base}home`"). That was correct for
+ * apps built with an absolute Vite base (e.g. `base: '/_console/'`), but
+ * silently broken for portable builds that ship with `base: './'` — the
+ * resulting URL `https://host./home` has a trailing-dot host (`host.` is a
+ * fully-qualified-domain marker the browser keeps) AND drops the mount
+ * prefix, landing the user on a 404.
+ *
+ * The fix is to resolve `home` against `document.baseURI`, which already
+ * accounts for any `<base href="...">` injected by the host page. This works
+ * for both `<base href="/_console/">` (tenant deployments) and
+ * `<base href="/">` (root-mount deployments), and also for hosts that omit
+ * `<base>` entirely (falls back to the current document URL's directory).
+ */
+export declare function resolveHomeUrl(baseURI?: string): string;

package/dist/console/organizations/resolveHomeUrl.js

@@ -0,0 +1,21 @@
+/**
+ * Resolve the absolute URL of the console "home" route used after switching
+ * the active organization.
+ *
+ * Earlier versions concatenated `import.meta.env.BASE_URL` to
+ * `window.location.origin` ("`${origin}${base}home`"). That was correct for
+ * apps built with an absolute Vite base (e.g. `base: '/_console/'`), but
+ * silently broken for portable builds that ship with `base: './'` — the
+ * resulting URL `https://host./home` has a trailing-dot host (`host.` is a
+ * fully-qualified-domain marker the browser keeps) AND drops the mount
+ * prefix, landing the user on a 404.
+ *
+ * The fix is to resolve `home` against `document.baseURI`, which already
+ * accounts for any `<base href="...">` injected by the host page. This works
+ * for both `<base href="/_console/">` (tenant deployments) and
+ * `<base href="/">` (root-mount deployments), and also for hosts that omit
+ * `<base>` entirely (falls back to the current document URL's directory).
+ */
+export function resolveHomeUrl(baseURI = document.baseURI) {
+    return new URL('home', baseURI).toString();
+}

package/dist/index.d.ts

@@ -19,6 +19,8 @@ export { ConsoleLayout, AppHeader, AppSidebar, UnifiedSidebar, AppSwitcher, Conn
 export type { ActivityItem } from './layout';
 export { CommandPalette, KeyboardShortcutsDialog, OnboardingWalkthrough, ConditionalAuthWrapper, ConsoleToaster, RouteFader, toastWithUndo, type ToastWithUndoOptions, ErrorBoundary, LoadingScreen, ThemeProvider, useTheme, } from './chrome';
 export { initSentry, captureError, setSentryUser, getSentry } from './observability';
+export { initRuntimeConfig, getRuntimeConfig, getCloudBase, isRuntimeConfigInitialised, resetRuntimeConfigForTesting, } from './runtime-config';
+export type { RuntimeConfig, RuntimeFeatures } from './runtime-config';
 export { ObjectView, RecordDetailView, RecordFormPage, DashboardView, PageView, ReportView, SearchResultsPage, ViewConfigPanel, } from './views';
 export type { RecordFormPageProps } from './views';
 export { useFavorites, useMetadataService, useNavPins, useNavigationSync, NavigationSyncEffect, addNavigationItem, removeNavigationItems, renameNavigationItems, navigationEqual, generateNavId, useResponsiveSidebar, } from './hooks';

package/dist/index.js

@@ -22,6 +22,10 @@ export { ConsoleLayout, AppHeader, AppSidebar, UnifiedSidebar, AppSwitcher, Conn
 export { CommandPalette, KeyboardShortcutsDialog, OnboardingWalkthrough, ConditionalAuthWrapper, ConsoleToaster, RouteFader, toastWithUndo, ErrorBoundary, LoadingScreen, ThemeProvider, useTheme, } from './chrome';
 // Observability — Sentry integration, opt-in via VITE_SENTRY_DSN
 export { initSentry, captureError, setSentryUser, getSentry } from './observability';
+// Runtime configuration pushed by the server at boot. Consumers fetch
+// `/api/v1/runtime/config` via `initRuntimeConfig()` before first render
+// and read upstream cloud URL + capability flags from `getRuntimeConfig()`.
+export { initRuntimeConfig, getRuntimeConfig, getCloudBase, isRuntimeConfigInitialised, resetRuntimeConfigForTesting, } from './runtime-config';
 // Standard inner-SPA views
 export { ObjectView, RecordDetailView, RecordFormPage, DashboardView, PageView, ReportView, SearchResultsPage, ViewConfigPanel, } from './views';
 // Hooks

package/dist/layout/ConsoleChatbotFab.d.ts

@@ -0,0 +1,3 @@
+import type { ConsoleFloatingChatbotProps } from './ConsoleFloatingChatbot';
+export type ConsoleChatbotFabProps = ConsoleFloatingChatbotProps;
+export declare function ConsoleChatbotFab(props: ConsoleChatbotFabProps): import("react/jsx-runtime").JSX.Element;

package/dist/layout/ConsoleChatbotFab.js

@@ -0,0 +1,30 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * ConsoleChatbotFab
+ *
+ * Lightweight FAB proxy for the console's floating AI assistant.
+ *
+ * Before any interaction this component renders a small, zero-dependency
+ * button (~1KB). On first hover/focus it speculatively warms the heavy
+ * chat chunk graph (plugin-chatbot → streamdown → shiki → mermaid →
+ * @ai-sdk, ~20MB); on first click it lazy-mounts `<ConsoleFloatingChatbot
+ * defaultOpen />` which takes over (its own FAB replaces this stub).
+ *
+ * Net effect: every console page-load no longer pays the chat-bundle
+ * cost just for the FAB to be visible — those bytes only download when
+ * the user actually opens (or hovers) the assistant.
+ *
+ * @module
+ */
+import { Suspense, lazy, useState } from 'react';
+const ConsoleFloatingChatbot = lazy(() => import('./ConsoleFloatingChatbot'));
+const prefetchChatbot = () => {
+    void import('./ConsoleFloatingChatbot');
+};
+export function ConsoleChatbotFab(props) {
+    const [armed, setArmed] = useState(false);
+    if (armed) {
+        return (_jsx(Suspense, { fallback: null, children: _jsx(ConsoleFloatingChatbot, { ...props, defaultOpen: true }) }));
+    }
+    return (_jsx("button", { type: "button", "aria-label": `Open ${props.appLabel} assistant`, onClick: () => setArmed(true), onMouseEnter: prefetchChatbot, onFocus: prefetchChatbot, className: "fixed bottom-6 right-6 z-50 flex h-14 w-14 items-center justify-center rounded-full bg-primary text-primary-foreground shadow-lg ring-1 ring-primary/20 transition-transform hover:scale-105 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-primary focus-visible:ring-offset-2", children: _jsxs("svg", { width: "22", height: "22", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: [_jsx("path", { d: "M12 3v3" }), _jsx("path", { d: "M12 18v3" }), _jsx("path", { d: "M5.6 5.6l2.1 2.1" }), _jsx("path", { d: "M16.3 16.3l2.1 2.1" }), _jsx("path", { d: "M3 12h3" }), _jsx("path", { d: "M18 12h3" }), _jsx("path", { d: "M5.6 18.4l2.1-2.1" }), _jsx("path", { d: "M16.3 7.7l2.1-2.1" }), _jsx("circle", { cx: "12", cy: "12", r: "3" })] }) }));
+}

package/dist/layout/ConsoleFloatingChatbot.d.ts

@@ -12,6 +12,8 @@ export interface ConsoleFloatingChatbotProps {
     apiBase?: string;
     /** Default agent name to select on first render. */
     defaultAgent?: string;
+    /** Whether the floating panel should open immediately on mount. */
+    defaultOpen?: boolean;
 }
-export default function ConsoleFloatingChatbot({ appLabel, objects, apiBase: apiBaseProp, defaultAgent: defaultAgentProp, }: ConsoleFloatingChatbotProps): import("react/jsx-runtime").JSX.Element;
+export default function ConsoleFloatingChatbot({ appLabel, objects, apiBase: apiBaseProp, defaultAgent: defaultAgentProp, defaultOpen, }: ConsoleFloatingChatbotProps): import("react/jsx-runtime").JSX.Element;
 export {};

package/dist/layout/ConsoleFloatingChatbot.js

@@ -12,7 +12,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  * @module
  */
 import React from 'react';
-import { FloatingChatbot, useObjectChat, useAgents, } from '@object-ui/plugin-chatbot';
+import { FloatingChatbot, useObjectChat, useAgents, useHitlInChat, } from '@object-ui/plugin-chatbot';
 import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue, } from '@object-ui/components';
 const DEFAULT_AI_PATH = '/api/v1/ai';
 function resolveApiBase(explicit) {
@@ -25,7 +25,7 @@ function resolveApiBase(explicit) {
     const serverUrl = env.VITE_SERVER_URL ?? '';
     return `${serverUrl.replace(/\/$/, '')}${DEFAULT_AI_PATH}`;
 }
-function ChatbotInner({ appLabel, objects, agents, agentsLoading, agentsError, activeAgent, onAgentChange, chatApi, }) {
+function ChatbotInner({ appLabel, objects, agents, agentsLoading, agentsError, activeAgent, onAgentChange, chatApi, apiBase, defaultOpen = false, }) {
     const objectNames = objects.map((o) => o.label || o.name).join(', ');
     const activeAgentLabel = React.useMemo(() => {
         const found = agents.find((a) => a.name === activeAgent);
@@ -59,10 +59,22 @@ function ChatbotInner({ appLabel, objects, agents, agentsLoading, agentsError, a
             : "Thanks for your message! I'm here to help you navigate and manage your data.",
         autoResponseDelay: 600,
     });
+    // HITL bridge — turns the pending-approval tool result envelope from the
+    // framework's action-tools.ts into inline approve/reject buttons that talk
+    // directly to /api/v1/ai/pending-actions/:id/{approve,reject}. After a
+    // successful decision the hook synthesises a short follow-up user message
+    // so the LLM continues the conversation aware of the outcome.
+    const hitl = useHitlInChat({
+        messages: messages,
+        apiBase,
+        continueConversation: (prompt) => {
+            sendMessage(prompt);
+        },
+    });
     const headerExtra = agents.length > 0 ? (_jsxs(Select, { value: activeAgent, onValueChange: onAgentChange, disabled: agentsLoading, children: [_jsx(SelectTrigger, { className: "h-7 w-[180px] text-xs", "data-testid": "floating-chatbot-agent-picker", children: _jsx(SelectValue, { placeholder: "Choose agent..." }) }), _jsx(SelectContent, { align: "end", children: agents.map((agent) => (_jsxs(SelectItem, { value: agent.name, className: "text-xs", children: [_jsx("span", { className: "font-medium", children: agent.label }), agent.description ? (_jsx("span", { className: "block text-muted-foreground text-[10px] truncate max-w-[220px]", children: agent.description })) : null] }, agent.name))) })] })) : null;
     return (_jsx(FloatingChatbot, { floatingConfig: {
             position: 'bottom-right',
-            defaultOpen: false,
+            defaultOpen,
             panelWidth: 420,
             panelHeight: 560,
             title: `${appLabel} Assistant`,
@@ -71,9 +83,9 @@ function ChatbotInner({ appLabel, objects, agents, agentsLoading, agentsError, a
             ? `Ask ${activeAgentLabel}...`
             : agentsLoading
                 ? 'Loading agents...'
-                : 'Ask anything...', onSendMessage: (content) => sendMessage(content), onClear: clear, onStop: isLoading ? stop : undefined, onReload: reload, isLoading: isLoading, error: error, enableMarkdown: true }));
+                : 'Ask anything...', onSendMessage: (content) => sendMessage(content), onClear: clear, onStop: isLoading ? stop : undefined, onReload: reload, isLoading: isLoading, error: error, enableMarkdown: true, onToolApprove: hitl.decide, toolDecisions: hitl.decisions, toolApproveLabel: "Approve & run", toolDenyLabel: "Reject", toolDenyReason: "Operator rejected from chat" }));
 }
-export default function ConsoleFloatingChatbot({ appLabel, objects, apiBase: apiBaseProp, defaultAgent: defaultAgentProp, }) {
+export default function ConsoleFloatingChatbot({ appLabel, objects, apiBase: apiBaseProp, defaultAgent: defaultAgentProp, defaultOpen = false, }) {
     const apiBase = React.useMemo(() => resolveApiBase(apiBaseProp), [apiBaseProp]);
     const env = import.meta.env ?? {};
     const envDefaultAgent = env.VITE_AI_DEFAULT_AGENT;
@@ -92,5 +104,5 @@ export default function ConsoleFloatingChatbot({ appLabel, objects, apiBase: api
     // `key` forces a clean remount whenever the active agent (and therefore the
     // chat API URL) changes — required because `useObjectChat` locks its mode
     // (api vs local) on first render.
-    return (_jsx(ChatbotInner, { appLabel: appLabel, objects: objects, agents: agents, agentsLoading: agentsLoading, agentsError: agentsError, activeAgent: activeAgent, onAgentChange: setActiveAgent, chatApi: chatApi }, chatApi ?? 'local'));
+    return (_jsx(ChatbotInner, { appLabel: appLabel, objects: objects, agents: agents, agentsLoading: agentsLoading, agentsError: agentsError, activeAgent: activeAgent, onAgentChange: setActiveAgent, chatApi: chatApi, apiBase: apiBase, defaultOpen: defaultOpen }, chatApi ?? 'local'));
 }

package/dist/layout/ConsoleLayout.js

@@ -8,12 +8,13 @@ import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-run
  * Sets navigation context to 'app' for app-specific routes.
  * @module
  */
-import { useEffect, Suspense, lazy } from 'react';
+import { useEffect } from 'react';
 import { AppShell } from '@object-ui/layout';
 import { useDiscovery } from '@object-ui/react';
-// Lazy-load the chatbot so its heavy markdown deps (~150 KB) stay out of
-// the initial paint until the AI assistant is actually enabled.
-const ConsoleFloatingChatbot = lazy(() => import('./ConsoleFloatingChatbot'));
+// Lightweight FAB stub — the heavy chat chunk graph (plugin-chatbot,
+// shiki, streamdown, mermaid, @ai-sdk, ~20MB) only downloads on first
+// hover/click. See ConsoleChatbotFab.tsx.
+import { ConsoleChatbotFab } from './ConsoleChatbotFab';
 import { UnifiedSidebar } from './UnifiedSidebar';
 import { AppHeader } from './AppHeader';
 import { MobileViewSwitcherProvider } from './MobileViewSwitcherContext';
@@ -50,5 +51,5 @@ export function ConsoleLayout({ children, activeAppName, activeApp, onAppChange,
                         ? `${resolveI18nLabel(activeApp.label)} — ObjectStack Console`
                         : undefined,
                 }
-                : undefined, children: [_jsx(ConsoleLayoutInner, { children: children }), showChatbot && (_jsx(Suspense, { fallback: null, children: _jsx(ConsoleFloatingChatbot, { appLabel: appLabel, objects: objects }) }))] }) }));
+                : undefined, children: [_jsx(ConsoleLayoutInner, { children: children }), showChatbot && (_jsx(ConsoleChatbotFab, { appLabel: appLabel, objects: objects }))] }) }));
 }

package/dist/runtime-config.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Runtime configuration pushed by the server at boot.
+ *
+ * The SPA fetches `GET /api/v1/runtime/config` once before first paint
+ * (`initRuntimeConfig()`) and exposes the response through a module-level
+ * singleton (`config` + `getRuntimeConfig()`). Modules that need to know
+ * about the upstream cloud URL or capability flags read from here —
+ * NEVER from `window.location.hostname` or Vite-time env vars, since
+ * those don't reflect the runtime the SPA is actually attached to (e.g.
+ * a tenant ObjectOS runtime pointing at a separate cloud control plane).
+ *
+ * Mirrors `apps/studio/src/lib/config.ts` but lives in app-shell because
+ * the Console SPA in `apps/console` consumes app-shell code.
+ *
+ * Server-side: see
+ *   cloud/packages/service-cloud/src/multi-environment-plugins.ts
+ *   cloud/packages/service-cloud/src/single-environment-plugin.ts
+ *   framework/packages/runtime/src/cloud/runtime-config-plugin.ts
+ */
+export interface RuntimeFeatures {
+    /** "Install to this runtime" button is meaningful on this runtime. */
+    installLocal: boolean;
+    /** `/api/v1/marketplace/*` is reachable from this runtime. */
+    marketplace: boolean;
+}
+export interface RuntimeConfig {
+    /**
+     * Upstream cloud base URL — the SPA dispatches install + env listing
+     * directly against this origin. Empty string ⇒ same-origin (i.e. the
+     * runtime we're attached to *is* the cloud).
+     */
+    cloudUrl: string;
+    /** Single-environment runtime (CLI `os serve`, etc.). */
+    singleEnvironment: boolean;
+    defaultOrgId?: string | null;
+    defaultEnvironmentId?: string | null;
+    features: RuntimeFeatures;
+}
+/**
+ * Fetch the server-pushed runtime config and merge it into the singleton.
+ * Must be awaited before first render so consumers see definitive values
+ * on first paint. Safe to call more than once (subsequent calls re-fetch
+ * and re-merge).
+ *
+ * `baseUrl` lets callers in dev (Vite proxy) override the fetch origin.
+ * In production both Console SPA and tenant runtime share an origin so
+ * the default (relative `/api/v1/...`) works.
+ */
+export declare function initRuntimeConfig(baseUrl?: string): Promise<void>;
+/** Read-only accessor. Returns the current snapshot. */
+export declare function getRuntimeConfig(): RuntimeConfig;
+/** Whether `initRuntimeConfig()` has run at least once. */
+export declare function isRuntimeConfigInitialised(): boolean;
+/**
+ * Resolve the upstream cloud base URL the SPA should target. When the
+ * runtime says it *is* the cloud (`cloudUrl: ''`) the SPA stays on the
+ * current origin. Otherwise this returns the server-supplied URL with no
+ * trailing slash.
+ */
+export declare function getCloudBase(): string;
+/** Test/dev helper. */
+export declare function resetRuntimeConfigForTesting(): void;

package/dist/runtime-config.js

@@ -0,0 +1,86 @@
+// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
+const defaults = {
+    cloudUrl: '',
+    singleEnvironment: false,
+    defaultOrgId: null,
+    defaultEnvironmentId: null,
+    features: { installLocal: false, marketplace: true },
+};
+let current = { ...defaults };
+let initialised = false;
+/** Apply a partial update over the singleton. */
+function applyUpdate(patch) {
+    current = {
+        ...current,
+        ...patch,
+        features: {
+            ...current.features,
+            ...(patch.features ?? {}),
+        },
+    };
+}
+/**
+ * Fetch the server-pushed runtime config and merge it into the singleton.
+ * Must be awaited before first render so consumers see definitive values
+ * on first paint. Safe to call more than once (subsequent calls re-fetch
+ * and re-merge).
+ *
+ * `baseUrl` lets callers in dev (Vite proxy) override the fetch origin.
+ * In production both Console SPA and tenant runtime share an origin so
+ * the default (relative `/api/v1/...`) works.
+ */
+export async function initRuntimeConfig(baseUrl = '') {
+    const base = (baseUrl || '').replace(/\/+$/, '');
+    try {
+        const res = await fetch(`${base}/api/v1/runtime/config`, {
+            credentials: 'include',
+            headers: { Accept: 'application/json' },
+        });
+        if (!res.ok)
+            return;
+        const body = (await res.json());
+        if (!body || typeof body !== 'object')
+            return;
+        applyUpdate({
+            cloudUrl: typeof body.cloudUrl === 'string' ? body.cloudUrl.replace(/\/+$/, '') : current.cloudUrl,
+            singleEnvironment: !!body.singleEnvironment,
+            defaultOrgId: body.defaultOrgId ?? current.defaultOrgId ?? null,
+            defaultEnvironmentId: body.defaultEnvironmentId ?? current.defaultEnvironmentId ?? null,
+            features: body.features
+                ? {
+                    installLocal: !!body.features.installLocal,
+                    marketplace: body.features.marketplace !== false,
+                }
+                : current.features,
+        });
+    }
+    catch {
+        // Endpoint missing or network failure ⇒ keep defaults. Older runtimes
+        // pre-dating this endpoint simply behave as before.
+    }
+    finally {
+        initialised = true;
+    }
+}
+/** Read-only accessor. Returns the current snapshot. */
+export function getRuntimeConfig() {
+    return current;
+}
+/** Whether `initRuntimeConfig()` has run at least once. */
+export function isRuntimeConfigInitialised() {
+    return initialised;
+}
+/**
+ * Resolve the upstream cloud base URL the SPA should target. When the
+ * runtime says it *is* the cloud (`cloudUrl: ''`) the SPA stays on the
+ * current origin. Otherwise this returns the server-supplied URL with no
+ * trailing slash.
+ */
+export function getCloudBase() {
+    return current.cloudUrl ?? '';
+}
+/** Test/dev helper. */
+export function resetRuntimeConfigForTesting() {
+    current = { ...defaults, features: { ...defaults.features } };
+    initialised = false;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@object-ui/app-shell",
-  "version": "5.4.2",
+  "version": "6.0.1",
   "type": "module",
   "license": "MIT",
   "description": "Minimal application shell for ObjectUI - framework-agnostic rendering engine",
@@ -28,35 +28,35 @@
     "@sentry/react": "^8.55.2",
     "lucide-react": "^1.16.0",
     "sonner": "^2.0.7",
-    "@object-ui/auth": "5.4.2",
-    "@object-ui/collaboration": "5.4.2",
-    "@object-ui/components": "5.4.2",
-    "@object-ui/core": "5.4.2",
-    "@object-ui/data-objectstack": "5.4.2",
-    "@object-ui/fields": "5.4.2",
-    "@object-ui/i18n": "5.4.2",
-    "@object-ui/layout": "5.4.2",
-    "@object-ui/permissions": "5.4.2",
-    "@object-ui/providers": "5.4.2",
-    "@object-ui/react": "5.4.2",
-    "@object-ui/types": "5.4.2"
+    "@object-ui/auth": "6.0.1",
+    "@object-ui/collaboration": "6.0.1",
+    "@object-ui/components": "6.0.1",
+    "@object-ui/core": "6.0.1",
+    "@object-ui/data-objectstack": "6.0.1",
+    "@object-ui/fields": "6.0.1",
+    "@object-ui/i18n": "6.0.1",
+    "@object-ui/layout": "6.0.1",
+    "@object-ui/permissions": "6.0.1",
+    "@object-ui/providers": "6.0.1",
+    "@object-ui/react": "6.0.1",
+    "@object-ui/types": "6.0.1"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",
     "react-dom": "^18.0.0 || ^19.0.0",
     "react-router-dom": "^6.0.0 || ^7.0.0",
-    "@object-ui/plugin-calendar": "^5.4.2",
-    "@object-ui/plugin-charts": "^5.4.2",
-    "@object-ui/plugin-chatbot": "^5.4.2",
-    "@object-ui/plugin-dashboard": "^5.4.2",
-    "@object-ui/plugin-designer": "^5.4.2",
-    "@object-ui/plugin-detail": "^5.4.2",
-    "@object-ui/plugin-form": "^5.4.2",
-    "@object-ui/plugin-grid": "^5.4.2",
-    "@object-ui/plugin-kanban": "^5.4.2",
-    "@object-ui/plugin-list": "^5.4.2",
-    "@object-ui/plugin-report": "^5.4.2",
-    "@object-ui/plugin-view": "^5.4.2"
+    "@object-ui/plugin-calendar": "^6.0.1",
+    "@object-ui/plugin-charts": "^6.0.1",
+    "@object-ui/plugin-chatbot": "^6.0.1",
+    "@object-ui/plugin-dashboard": "^6.0.1",
+    "@object-ui/plugin-designer": "^6.0.1",
+    "@object-ui/plugin-detail": "^6.0.1",
+    "@object-ui/plugin-form": "^6.0.1",
+    "@object-ui/plugin-grid": "^6.0.1",
+    "@object-ui/plugin-kanban": "^6.0.1",
+    "@object-ui/plugin-list": "^6.0.1",
+    "@object-ui/plugin-report": "^6.0.1",
+    "@object-ui/plugin-view": "^6.0.1"
   },
   "devDependencies": {
     "@types/node": "^25.9.0",