@object-ui/app-shell 6.0.3 → 6.1.0

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # @object-ui/app-shell — Changelog
 
+## 6.1.0
+
+### Patch Changes
+
+- Updated dependencies [991b62d]
+  - @object-ui/core@6.1.0
+  - @object-ui/types@6.1.0
+  - @object-ui/components@6.1.0
+  - @object-ui/data-objectstack@6.1.0
+  - @object-ui/fields@6.1.0
+  - @object-ui/layout@6.1.0
+  - @object-ui/react@6.1.0
+  - @object-ui/auth@6.1.0
+  - @object-ui/collaboration@6.1.0
+  - @object-ui/permissions@6.1.0
+  - @object-ui/providers@6.1.0
+  - @object-ui/i18n@6.1.0
+
+## 6.0.4
+
+### Patch Changes
+
+- 76e73fe: Gate App Marketplace pages by `useIsWorkspaceAdmin()`. Non-admin members of
+  the active organization can no longer load the marketplace catalog, package
+  detail, or installed-apps pages — they get an "admin-only" empty state
+  instead. The marketplace nav link in the sidebar was already gated; this
+  closes the direct-URL gap.
+  - @object-ui/types@6.0.4
+  - @object-ui/core@6.0.4
+  - @object-ui/i18n@6.0.4
+  - @object-ui/react@6.0.4
+  - @object-ui/components@6.0.4
+  - @object-ui/fields@6.0.4
+  - @object-ui/layout@6.0.4
+  - @object-ui/data-objectstack@6.0.4
+  - @object-ui/auth@6.0.4
+  - @object-ui/permissions@6.0.4
+  - @object-ui/collaboration@6.0.4
+  - @object-ui/providers@6.0.4
+
 ## 6.0.3
 
 ### Patch Changes

package/dist/console/marketplace/MarketplaceAccessDenied.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Marketplace access guard.
+ *
+ * App Marketplace install actions require owner/admin on the active
+ * organization. Non-admin members shouldn't see the catalog at all —
+ * there's nothing they can do with it. This component renders a
+ * minimal "no access" empty state for the marketplace surface.
+ */
+export declare function MarketplaceAccessDenied(): import("react/jsx-runtime").JSX.Element;

package/dist/console/marketplace/MarketplaceAccessDenied.js

@@ -0,0 +1,18 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Marketplace access guard.
+ *
+ * App Marketplace install actions require owner/admin on the active
+ * organization. Non-admin members shouldn't see the catalog at all —
+ * there's nothing they can do with it. This component renders a
+ * minimal "no access" empty state for the marketplace surface.
+ */
+import { Card, CardContent, Button } from '@object-ui/components';
+import { Lock } from 'lucide-react';
+import { useNavigate, useParams } from 'react-router-dom';
+export function MarketplaceAccessDenied() {
+    const navigate = useNavigate();
+    const { appName } = useParams();
+    const home = appName ? `/apps/${appName}` : '/';
+    return (_jsx("div", { className: "container mx-auto max-w-2xl px-6 py-16", children: _jsx(Card, { children: _jsxs(CardContent, { className: "flex flex-col items-center gap-4 py-12 text-center", children: [_jsx("div", { className: "rounded-full bg-muted p-3", children: _jsx(Lock, { className: "h-6 w-6 text-muted-foreground" }) }), _jsxs("div", { children: [_jsx("h2", { className: "text-lg font-semibold", children: "App Marketplace is admin-only" }), _jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: "You don't have permission to install apps in this environment. Ask an owner or admin of this organization for access." })] }), _jsx(Button, { variant: "outline", onClick: () => navigate(home), children: "Back to home" })] }) }) }));
+}

package/dist/console/marketplace/MarketplaceInstalledPage.js

@@ -19,10 +19,13 @@ import { useEffect, useState } from 'react';
 import { useNavigate, useParams } from 'react-router-dom';
 import { Card, CardContent, CardHeader, CardTitle, Badge, Button, Skeleton, } from '@object-ui/components';
 import { ArrowLeft, RefreshCcw, Store, Trash2, AlertCircle, ExternalLink } from 'lucide-react';
+import { useIsWorkspaceAdmin } from '@object-ui/auth';
 import { listLocalInstalls, uninstallLocal, } from './marketplaceApi';
+import { MarketplaceAccessDenied } from './MarketplaceAccessDenied';
 export function MarketplaceInstalledPage() {
     const navigate = useNavigate();
     const { appName } = useParams();
+    const isAdmin = useIsWorkspaceAdmin();
     const basePath = appName ? `/apps/${appName}` : '';
     const [items, setItems] = useState([]);
     const [loading, setLoading] = useState(true);
@@ -60,5 +63,7 @@ export function MarketplaceInstalledPage() {
             setWorking(null);
         }
     };
+    if (!isAdmin)
+        return _jsx(MarketplaceAccessDenied, {});
     return (_jsxs("div", { className: "flex flex-col gap-6 p-4 sm:p-6 max-w-5xl", children: [_jsxs(Button, { variant: "ghost", size: "sm", className: "self-start", onClick: () => navigate(`${basePath}/system/marketplace`), children: [_jsx(ArrowLeft, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Back to marketplace"] }), _jsxs("div", { className: "flex items-start justify-between gap-4 flex-wrap", children: [_jsxs("div", { children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Store, { className: "h-6 w-6 text-primary", "aria-hidden": "true" }), _jsx("h1", { className: "text-xl sm:text-2xl font-bold tracking-tight", children: "Installed Apps" })] }), _jsxs("p", { className: "text-sm text-muted-foreground mt-1", children: ["Marketplace packages currently installed into this runtime's kernel. Cached manifests live in ", _jsx("code", { className: "font-mono text-xs", children: ".objectstack/installed-packages/" }), " and survive restarts."] })] }), _jsxs(Button, { variant: "outline", size: "sm", onClick: () => void load(), disabled: loading, children: [_jsx(RefreshCcw, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Refresh"] })] }), result && (_jsx("div", { className: `rounded-md border p-3 text-sm ${result.ok ? 'border-green-500/30 bg-green-500/5 text-green-700 dark:text-green-400' : 'border-destructive/30 bg-destructive/5 text-destructive'}`, children: _jsxs("div", { className: "flex items-start gap-2", children: [_jsx(AlertCircle, { className: "h-4 w-4 mt-0.5 shrink-0", "aria-hidden": "true" }), _jsx("div", { children: result.message })] }) })), loading && items.length === 0 ? (_jsx("div", { className: "grid gap-3", children: Array.from({ length: 3 }).map((_, i) => (_jsx(Skeleton, { className: "h-20 w-full" }, i))) })) : items.length === 0 ? (_jsxs("div", { className: "text-center py-12 text-sm text-muted-foreground border rounded-md", children: [_jsx("p", { children: "No marketplace apps installed in this runtime yet." }), _jsx(Button, { variant: "link", className: "mt-2", onClick: () => navigate(`${basePath}/system/marketplace`), children: "Browse the marketplace \u2192" })] })) : (_jsx("div", { className: "grid gap-3", children: items.map((entry) => (_jsxs(Card, { children: [_jsxs(CardHeader, { className: "flex flex-row items-start justify-between gap-3 pb-2", children: [_jsxs("div", { className: "min-w-0", children: [_jsxs(CardTitle, { className: "text-base truncate flex items-center gap-2", children: [entry.manifestId, _jsxs(Badge, { variant: "outline", children: ["v", entry.version] })] }), _jsxs("div", { className: "text-xs text-muted-foreground mt-1 flex flex-wrap gap-x-3 gap-y-1", children: [_jsxs("span", { children: ["Installed ", new Date(entry.installedAt).toLocaleString()] }), entry.installedBy && _jsxs("span", { children: ["by ", entry.installedBy] }), _jsxs("span", { children: ["package ", _jsx("code", { className: "font-mono", children: entry.packageId })] })] })] }), _jsxs("div", { className: "flex items-center gap-2 shrink-0", children: [_jsxs(Button, { variant: "ghost", size: "sm", onClick: () => navigate(`${basePath}/system/marketplace/${entry.packageId}`), children: [_jsx(ExternalLink, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Details"] }), _jsxs(Button, { variant: "outline", size: "sm", onClick: () => void doUninstall(entry), disabled: working === entry.manifestId, children: [_jsx(Trash2, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), working === entry.manifestId ? 'Uninstalling…' : 'Uninstall'] })] })] }), _jsxs(CardContent, { className: "pt-0 text-xs text-muted-foreground", children: ["Cached as ", _jsxs("code", { className: "font-mono", children: [".objectstack/installed-packages/", entry.manifestId.replace(/[^a-zA-Z0-9._-]/g, '_'), ".json"] })] })] }, entry.manifestId))) })), _jsxs("p", { className: "text-xs text-muted-foreground border-t pt-4", children: [_jsx("strong", { children: "Note:" }), " The kernel API is additive only \u2014 uninstall removes the on-disk manifest so the package won't load on next boot, but the running kernel keeps the app registered until you restart the runtime."] })] }));
 }

package/dist/console/marketplace/MarketplacePackagePage.js

@@ -9,14 +9,19 @@ import { useEffect, useState } from 'react';
 import { useNavigate, useParams } from 'react-router-dom';
 import { Button, Badge, Card, CardContent, CardHeader, CardTitle, Skeleton, Dialog, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle, Label, Checkbox, Select, SelectContent, SelectItem, SelectTrigger, SelectValue, DropdownMenu, DropdownMenuTrigger, DropdownMenuContent, DropdownMenuItem, } from '@object-ui/components';
 import { ArrowLeft, ExternalLink, Download, AlertCircle, Package, Trash2, MoreHorizontal, CheckCircle2 } from 'lucide-react';
+import { useIsWorkspaceAdmin } from '@object-ui/auth';
 import { PackageIcon } from './PackageIcon';
 import { MarkdownText } from './MarkdownText';
+import { MarketplaceAccessDenied } from './MarketplaceAccessDenied';
 import { getMarketplacePackage, installPackage, installLocal, uninstallLocal, listLocalInstalls, listCloudEnvironments, listInstallableOrgIds, cloudInstallDeepLink, } from './marketplaceApi';
 import { getRuntimeConfig } from '../../runtime-config';
+import { useMetadata } from '../../providers/MetadataProvider';
 export function MarketplacePackagePage() {
     const navigate = useNavigate();
     const { packageId, appName } = useParams();
+    const isAdmin = useIsWorkspaceAdmin();
     const basePath = appName ? `/apps/${appName}` : '';
+    const { refresh: refreshMetadata } = useMetadata();
     const [data, setData] = useState(null);
     const [loading, setLoading] = useState(true);
     const [error, setError] = useState(null);
@@ -70,6 +75,18 @@ export function MarketplacePackagePage() {
         setInstallOpen(true);
         setInstallResult(null);
         setEnvsError(null);
+        // When the runtime tells us which env we're on (tenant subdomain
+        // like demo.objectos.app), skip the picker entirely — the operator's
+        // domain already identifies the target. Just open the dialog with
+        // the env pre-selected so the sample-data checkbox + Install button
+        // remain in place.
+        const currentEnvId = getRuntimeConfig().defaultEnvironmentId;
+        if (currentEnvId) {
+            setEnvsLoading(false);
+            setSelectedEnv(currentEnvId);
+            setEnvs([]);
+            return;
+        }
         setEnvsLoading(true);
         try {
             const [list, adminOrgIds] = await Promise.all([
@@ -134,9 +151,15 @@ export function MarketplacePackagePage() {
         setLocalResult(null);
         try {
             const result = await installLocal({ packageId });
+            try {
+                await refreshMetadata('app');
+            }
+            catch {
+                // Non-fatal: the install succeeded; the app list will refresh on next navigation.
+            }
             setLocalResult({
                 ok: true,
-                message: `Installed v${result.version} to this runtime. Refresh the console to see "${data?.package?.display_name ?? result.manifestId}" in the app switcher.`,
+                message: `Installed v${result.version} to this runtime. "${data?.package?.display_name ?? result.manifestId}" should now appear in the app switcher.`,
             });
         }
         catch (e) {
@@ -173,6 +196,12 @@ export function MarketplacePackagePage() {
         setLocalResult(null);
         try {
             await uninstallLocal(localInstall.manifestId);
+            try {
+                await refreshMetadata('app');
+            }
+            catch {
+                // Non-fatal.
+            }
             setLocalResult({
                 ok: true,
                 message: `Removed cached manifest for ${localInstall.manifestId}. Restart the runtime to fully unload the app from the running kernel.`,
@@ -209,6 +238,10 @@ export function MarketplacePackagePage() {
             label: installing ? 'Installing…' : 'Install to cloud…',
             onClick: openInstall,
         };
+    if (!isAdmin)
+        return _jsx(MarketplaceAccessDenied, {});
     return (_jsxs("div", { className: "mx-auto w-full max-w-6xl flex flex-col gap-6 p-4 sm:p-6", children: [_jsxs(Button, { variant: "ghost", size: "sm", className: "self-start -ml-2 text-muted-foreground hover:text-foreground", onClick: () => navigate(`${basePath}/system/marketplace`), children: [_jsx(ArrowLeft, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Back to marketplace"] }), _jsxs("div", { className: "flex items-start gap-5 flex-wrap sm:flex-nowrap rounded-2xl border bg-gradient-to-br from-primary/5 via-background to-background p-6 sm:p-8", children: [_jsx(PackageIcon, { iconUrl: pkg.icon_url, displayName: pkg.display_name, manifestId: pkg.manifest_id, className: "h-20 w-20 rounded-2xl shadow-sm ring-1 ring-border shrink-0", initialClassName: "text-3xl font-bold" }), _jsxs("div", { className: "flex-1 min-w-0", children: [_jsxs("div", { className: "flex items-center gap-2 flex-wrap", children: [_jsx("h1", { className: "text-2xl sm:text-3xl font-bold tracking-tight truncate", children: pkg.display_name || pkg.manifest_id }), pkg.homepage_url && (_jsxs("a", { href: pkg.homepage_url, target: "_blank", rel: "noopener noreferrer", className: "inline-flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground transition-colors", title: "Homepage", children: [_jsx(ExternalLink, { className: "h-3.5 w-3.5", "aria-hidden": "true" }), _jsx("span", { className: "hidden sm:inline", children: "Homepage" })] }))] }), _jsxs("div", { className: "text-sm text-muted-foreground mt-2 flex flex-wrap items-center gap-1.5", children: [_jsx("code", { className: "font-mono text-xs px-1.5 py-0.5 rounded bg-muted", children: pkg.manifest_id }), latestVersion && _jsxs(Badge, { variant: "outline", children: ["v", latestVersion] }), pkg.publisher && pkg.publisher !== 'private' && (_jsx(Badge, { variant: pkg.publisher === 'objectstack' ? 'default' : 'secondary', children: pkg.publisher })), pkg.category && _jsx(Badge, { variant: "outline", children: pkg.category }), pkg.license && _jsx(Badge, { variant: "outline", className: "font-normal", children: pkg.license }), localInstall && (_jsxs(Badge, { variant: "default", className: "bg-green-600 hover:bg-green-600 gap-1", children: [_jsx(CheckCircle2, { className: "h-3 w-3", "aria-hidden": "true" }), "Installed \u00B7 v", localInstall.version] }))] }), pkg.description && (_jsx("p", { className: "text-sm sm:text-base text-foreground/80 mt-3 max-w-2xl leading-relaxed", children: pkg.description }))] }), _jsxs("div", { className: "flex items-center gap-2 shrink-0 self-start", children: [_jsxs(Button, { onClick: primaryAction.onClick, disabled: primaryDisabled, size: "lg", className: "min-w-[8rem]", children: [_jsx(Download, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), primaryAction.label] }), localInstall && (_jsxs(DropdownMenu, { children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsx(Button, { variant: "outline", size: "lg", className: "px-2.5", "aria-label": "More install options", children: _jsx(MoreHorizontal, { className: "h-4 w-4", "aria-hidden": "true" }) }) }), _jsx(DropdownMenuContent, { align: "end", className: "w-56", children: _jsxs(DropdownMenuItem, { onSelect: doUninstallLocal, disabled: installingLocal, className: "text-destructive focus:text-destructive", children: [_jsx(Trash2, { className: "h-4 w-4 mr-2", "aria-hidden": "true" }), "Uninstall from this runtime"] }) })] }))] })] }), localResult && (_jsxs("div", { role: "status", className: `flex items-start gap-2 rounded-md border p-3 text-sm whitespace-pre-wrap ${localResult.ok ? 'border-green-500/30 bg-green-500/5 text-green-700 dark:text-green-400' : 'border-destructive/30 bg-destructive/5 text-destructive'}`, children: [localResult.ok ? _jsx(CheckCircle2, { className: "h-4 w-4 mt-0.5 shrink-0", "aria-hidden": "true" }) : _jsx(AlertCircle, { className: "h-4 w-4 mt-0.5 shrink-0", "aria-hidden": "true" }), _jsx("div", { className: "flex-1", children: localResult.message }), _jsx("button", { type: "button", className: "text-xs underline opacity-60 hover:opacity-100", onClick: () => setLocalResult(null), children: "Dismiss" })] })), _jsxs("div", { className: "grid gap-4 lg:grid-cols-3", children: [_jsx("div", { className: "lg:col-span-2 space-y-4", children: _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx(CardTitle, { className: "text-base", children: "About" }) }), _jsx(CardContent, { children: pkg.readme ? (_jsx(MarkdownText, { source: pkg.readme })) : (_jsx("p", { className: "text-sm text-muted-foreground", children: "No readme provided." })) })] }) }), _jsx("div", { className: "space-y-4", children: _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx(CardTitle, { className: "text-base", children: "Versions" }) }), _jsx(CardContent, { children: data.versions.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "No approved versions." })) : (_jsx("ul", { className: "space-y-2", children: data.versions.map((v) => (_jsxs("li", { className: "flex items-center justify-between gap-2 text-sm", children: [_jsxs("span", { className: "flex items-center gap-1.5", children: [_jsx(Package, { className: "h-3.5 w-3.5 text-muted-foreground", "aria-hidden": "true" }), _jsxs("code", { className: "font-mono", children: ["v", v.version] }), v.is_prerelease && _jsx(Badge, { variant: "outline", className: "text-xs", children: "pre" })] }), _jsx("span", { className: "text-xs text-muted-foreground", children: v.published_at ? new Date(v.published_at).toLocaleDateString() : '—' })] }, v.id))) })) })] }) })] }), _jsx(Dialog, { open: installOpen, onOpenChange: (o) => { setInstallOpen(o); if (!o)
-                    setInstallResult(null); }, children: _jsxs(DialogContent, { children: [_jsxs(DialogHeader, { children: [_jsxs(DialogTitle, { children: ["Install ", pkg.display_name || pkg.manifest_id] }), _jsx(DialogDescription, { children: "Choose an environment to install this app into. You need to be signed into ObjectStack Cloud." })] }), envsLoading ? (_jsx(Skeleton, { className: "h-10 w-full" })) : envsError ? (_jsxs("div", { className: "rounded-md border border-amber-500/30 bg-amber-500/5 p-3 text-sm space-y-2", children: [_jsxs("div", { className: "flex items-start gap-2", children: [_jsx(AlertCircle, { className: "h-4 w-4 mt-0.5 text-amber-600", "aria-hidden": "true" }), _jsx("div", { className: "flex-1", children: envsError })] }), _jsx("a", { href: cloudInstallDeepLink(pkg.id), target: "_blank", rel: "noopener noreferrer", children: _jsxs(Button, { variant: "outline", size: "sm", className: "w-full", children: [_jsx(ExternalLink, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Open on cloud"] }) })] })) : envs.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "No environments found in your active organization." })) : (_jsxs("div", { className: "space-y-4", children: [_jsxs("div", { className: "space-y-1.5", children: [_jsx(Label, { htmlFor: "env-select", children: "Environment" }), _jsxs(Select, { value: selectedEnv, onValueChange: setSelectedEnv, children: [_jsx(SelectTrigger, { id: "env-select", children: _jsx(SelectValue, { placeholder: "Pick an environment" }) }), _jsx(SelectContent, { children: envs.map((e) => (_jsxs(SelectItem, { value: e.id, children: [e.display_name || e.hostname || e.id, e.plan && _jsxs("span", { className: "text-muted-foreground", children: [" \u00B7 ", e.plan] })] }, e.id))) })] })] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Checkbox, { id: "seed", checked: seedSampleData, onCheckedChange: (c) => setSeedSampleData(c === true) }), _jsx(Label, { htmlFor: "seed", className: "text-sm font-normal cursor-pointer", children: "Include sample data" })] })] })), installResult && (_jsx("div", { className: `rounded-md border p-3 text-sm ${installResult.ok ? 'border-green-500/30 bg-green-500/5 text-green-700' : 'border-destructive/30 bg-destructive/5 text-destructive'}`, children: installResult.message })), _jsxs(DialogFooter, { children: [_jsx(Button, { variant: "outline", onClick: () => setInstallOpen(false), children: "Close" }), !envsError && (_jsx(Button, { onClick: doInstall, disabled: !selectedEnv || installing || installResult?.ok === true, children: installing ? 'Installing…' : 'Install' }))] })] }) })] }));
+                    setInstallResult(null); }, children: _jsxs(DialogContent, { children: [_jsxs(DialogHeader, { children: [_jsxs(DialogTitle, { children: ["Install ", pkg.display_name || pkg.manifest_id] }), _jsx(DialogDescription, { children: getRuntimeConfig().defaultEnvironmentId
+                                        ? `Install into this environment (${typeof window !== 'undefined' ? window.location.host : ''}).`
+                                        : 'Choose an environment to install this app into. You need to be signed into ObjectStack Cloud.' })] }), envsLoading ? (_jsx(Skeleton, { className: "h-10 w-full" })) : envsError ? (_jsxs("div", { className: "rounded-md border border-amber-500/30 bg-amber-500/5 p-3 text-sm space-y-2", children: [_jsxs("div", { className: "flex items-start gap-2", children: [_jsx(AlertCircle, { className: "h-4 w-4 mt-0.5 text-amber-600", "aria-hidden": "true" }), _jsx("div", { className: "flex-1", children: envsError })] }), _jsx("a", { href: cloudInstallDeepLink(pkg.id), target: "_blank", rel: "noopener noreferrer", children: _jsxs(Button, { variant: "outline", size: "sm", className: "w-full", children: [_jsx(ExternalLink, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Open on cloud"] }) })] })) : getRuntimeConfig().defaultEnvironmentId ? (_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Checkbox, { id: "seed", checked: seedSampleData, onCheckedChange: (c) => setSeedSampleData(c === true) }), _jsx(Label, { htmlFor: "seed", className: "text-sm font-normal cursor-pointer", children: "Include sample data" })] })) : envs.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "No environments found in your active organization." })) : (_jsxs("div", { className: "space-y-4", children: [_jsxs("div", { className: "space-y-1.5", children: [_jsx(Label, { htmlFor: "env-select", children: "Environment" }), _jsxs(Select, { value: selectedEnv, onValueChange: setSelectedEnv, children: [_jsx(SelectTrigger, { id: "env-select", children: _jsx(SelectValue, { placeholder: "Pick an environment" }) }), _jsx(SelectContent, { children: envs.map((e) => (_jsxs(SelectItem, { value: e.id, children: [e.display_name || e.hostname || e.id, e.plan && _jsxs("span", { className: "text-muted-foreground", children: [" \u00B7 ", e.plan] })] }, e.id))) })] })] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Checkbox, { id: "seed", checked: seedSampleData, onCheckedChange: (c) => setSeedSampleData(c === true) }), _jsx(Label, { htmlFor: "seed", className: "text-sm font-normal cursor-pointer", children: "Include sample data" })] })] })), installResult && (_jsx("div", { className: `rounded-md border p-3 text-sm ${installResult.ok ? 'border-green-500/30 bg-green-500/5 text-green-700' : 'border-destructive/30 bg-destructive/5 text-destructive'}`, children: installResult.message })), _jsxs(DialogFooter, { children: [_jsx(Button, { variant: "outline", onClick: () => setInstallOpen(false), children: "Close" }), !envsError && (_jsx(Button, { onClick: doInstall, disabled: !selectedEnv || installing || installResult?.ok === true, children: installing ? 'Installing…' : 'Install' }))] })] }) })] }));
 }

package/dist/console/marketplace/MarketplacePage.js

@@ -10,7 +10,9 @@ import { useEffect, useMemo, useState } from 'react';
 import { useNavigate, useParams } from 'react-router-dom';
 import { Card, CardContent, CardHeader, CardTitle, CardDescription, Badge, Input, Button, Skeleton, } from '@object-ui/components';
 import { Package, Search, RefreshCcw, Store, AlertCircle, CheckCircle2, Settings } from 'lucide-react';
+import { useIsWorkspaceAdmin } from '@object-ui/auth';
 import { PackageIcon } from './PackageIcon';
+import { MarketplaceAccessDenied } from './MarketplaceAccessDenied';
 import { listMarketplacePackages, listLocalInstalls, } from './marketplaceApi';
 function formatRelative(iso) {
     if (!iso)
@@ -30,6 +32,7 @@ function formatRelative(iso) {
 export function MarketplacePage() {
     const navigate = useNavigate();
     const { appName } = useParams();
+    const isAdmin = useIsWorkspaceAdmin();
     const basePath = appName ? `/apps/${appName}` : '';
     const [items, setItems] = useState([]);
     const [loading, setLoading] = useState(true);
@@ -82,6 +85,8 @@ export function MarketplacePage() {
             return hay.includes(q);
         });
     }, [items, query, category]);
+    if (!isAdmin)
+        return _jsx(MarketplaceAccessDenied, {});
     return (_jsxs("div", { className: "flex flex-col gap-6 p-4 sm:p-6", children: [_jsxs("div", { className: "flex items-start justify-between gap-4 flex-wrap", children: [_jsxs("div", { className: "min-w-0", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Store, { className: "h-6 w-6 text-primary", "aria-hidden": "true" }), _jsx("h1", { className: "text-xl sm:text-2xl font-bold tracking-tight", children: "App Marketplace" })] }), _jsx("p", { className: "text-sm text-muted-foreground mt-1", children: "Browse approved apps published to the ObjectStack catalog. Click an app to view details and install it into one of your environments." })] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsxs(Button, { variant: "outline", size: "sm", onClick: () => navigate(`${basePath}/system/marketplace/installed`), children: [_jsx(Settings, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Installed", installed.length > 0 ? ` (${installed.length})` : ''] }), _jsxs(Button, { variant: "outline", size: "sm", onClick: () => void load(), disabled: loading, children: [_jsx(RefreshCcw, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), "Refresh"] })] })] }), _jsxs("div", { className: "flex flex-col sm:flex-row gap-3", children: [_jsxs("div", { className: "relative flex-1", children: [_jsx(Search, { className: "absolute left-3 top-1/2 -translate-y-1/2 h-4 w-4 text-muted-foreground", "aria-hidden": "true" }), _jsx(Input, { value: query, onChange: (e) => setQuery(e.target.value), placeholder: "Search apps by name or manifest ID\u2026", className: "pl-9", "aria-label": "Search marketplace apps" })] }), categories.length > 0 && (_jsxs("div", { className: "flex flex-wrap gap-1.5", children: [_jsx(Button, { size: "sm", variant: category === '' ? 'default' : 'outline', onClick: () => setCategory(''), children: "All" }), categories.map((cat) => (_jsx(Button, { size: "sm", variant: category === cat ? 'default' : 'outline', onClick: () => setCategory(cat), children: cat }, cat)))] }))] }), error && (_jsxs("div", { className: "flex items-start gap-3 rounded-md border border-destructive/30 bg-destructive/5 p-4 text-sm", children: [_jsx(AlertCircle, { className: "h-4 w-4 mt-0.5 text-destructive", "aria-hidden": "true" }), _jsxs("div", { children: [_jsx("div", { className: "font-medium text-destructive", children: "Failed to load marketplace" }), _jsx("div", { className: "text-muted-foreground mt-1", children: error }), _jsxs("div", { className: "text-xs text-muted-foreground mt-2", children: ["By default this runtime points at the public ObjectStack cloud. Check the runtime is online, or override ", _jsx("code", { className: "font-mono", children: "OS_CLOUD_URL" }), " to point at a self-hosted control plane."] })] })] })), loading && items.length === 0 ? (_jsx("div", { className: "grid gap-4 sm:grid-cols-2 lg:grid-cols-3", children: Array.from({ length: 6 }).map((_, i) => (_jsxs(Card, { children: [_jsxs(CardHeader, { className: "pb-2", children: [_jsx(Skeleton, { className: "h-10 w-10 rounded-lg mb-2" }), _jsx(Skeleton, { className: "h-5 w-3/4" }), _jsx(Skeleton, { className: "h-4 w-1/2 mt-1" })] }), _jsx(CardContent, { children: _jsx(Skeleton, { className: "h-12 w-full" }) })] }, i))) })) : filtered.length === 0 ? (_jsx("div", { className: "text-center py-12 text-sm text-muted-foreground", children: items.length === 0 ? 'No apps have been approved for the marketplace yet.' : 'No apps match your filters.' })) : (_jsx("div", { className: "grid gap-4 sm:grid-cols-2 lg:grid-cols-3", children: filtered.map((pkg) => {
                     const localEntry = installedByManifestId.get(pkg.manifest_id);
                     return (_jsxs(Card, { className: "cursor-pointer transition-colors hover:bg-accent/50 flex flex-col", onClick: () => navigate(`${basePath}/system/marketplace/${pkg.id}`), role: "link", tabIndex: 0, onKeyDown: (e) => {

package/dist/views/RecordDetailView.js

@@ -387,6 +387,18 @@ export function RecordDetailView({ dataSource, objects, onEdit, objectNameOverri
             if (shouldRefresh)
                 setActionRefreshKey(k => k + 1);
             const result = json?.data;
+            // ── redirectUrl convention ────────────────────────────────────────
+            // A script-action handler can return `{ redirectUrl: 'https://…' }`
+            // to ask the UI to open the URL in a new tab. Used by the
+            // `sso_as_owner` action on sys_environment to drop the operator
+            // into the env runtime as its admin. Same pattern works for any
+            // future "deep link" style action.
+            if (result && typeof result === 'object' && typeof result.redirectUrl === 'string') {
+                try {
+                    window.open(result.redirectUrl, '_blank', 'noopener,noreferrer');
+                }
+                catch { /* popup blocked — fall through */ }
+            }
             return { success: true, data: result, reload: shouldRefresh };
         }
         catch (error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@object-ui/app-shell",
-  "version": "6.0.3",
+  "version": "6.1.0",
   "type": "module",
   "license": "MIT",
   "description": "Minimal application shell for ObjectUI - framework-agnostic rendering engine",
@@ -28,46 +28,46 @@
     "@sentry/react": "^8.55.2",
     "lucide-react": "^1.16.0",
     "sonner": "^2.0.7",
-    "@object-ui/auth": "6.0.3",
-    "@object-ui/collaboration": "6.0.3",
-    "@object-ui/components": "6.0.3",
-    "@object-ui/core": "6.0.3",
-    "@object-ui/data-objectstack": "6.0.3",
-    "@object-ui/fields": "6.0.3",
-    "@object-ui/i18n": "6.0.3",
-    "@object-ui/layout": "6.0.3",
-    "@object-ui/permissions": "6.0.3",
-    "@object-ui/providers": "6.0.3",
-    "@object-ui/react": "6.0.3",
-    "@object-ui/types": "6.0.3"
+    "@object-ui/auth": "6.1.0",
+    "@object-ui/collaboration": "6.1.0",
+    "@object-ui/components": "6.1.0",
+    "@object-ui/core": "6.1.0",
+    "@object-ui/data-objectstack": "6.1.0",
+    "@object-ui/fields": "6.1.0",
+    "@object-ui/i18n": "6.1.0",
+    "@object-ui/layout": "6.1.0",
+    "@object-ui/permissions": "6.1.0",
+    "@object-ui/providers": "6.1.0",
+    "@object-ui/react": "6.1.0",
+    "@object-ui/types": "6.1.0"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",
     "react-dom": "^18.0.0 || ^19.0.0",
     "react-router-dom": "^6.0.0 || ^7.0.0",
-    "@object-ui/plugin-calendar": "^6.0.3",
-    "@object-ui/plugin-charts": "^6.0.3",
-    "@object-ui/plugin-chatbot": "^6.0.3",
-    "@object-ui/plugin-dashboard": "^6.0.3",
-    "@object-ui/plugin-designer": "^6.0.3",
-    "@object-ui/plugin-detail": "^6.0.3",
-    "@object-ui/plugin-form": "^6.0.3",
-    "@object-ui/plugin-grid": "^6.0.3",
-    "@object-ui/plugin-kanban": "^6.0.3",
-    "@object-ui/plugin-list": "^6.0.3",
-    "@object-ui/plugin-report": "^6.0.3",
-    "@object-ui/plugin-view": "^6.0.3"
+    "@object-ui/plugin-calendar": "^6.1.0",
+    "@object-ui/plugin-charts": "^6.1.0",
+    "@object-ui/plugin-chatbot": "^6.1.0",
+    "@object-ui/plugin-dashboard": "^6.1.0",
+    "@object-ui/plugin-designer": "^6.1.0",
+    "@object-ui/plugin-detail": "^6.1.0",
+    "@object-ui/plugin-form": "^6.1.0",
+    "@object-ui/plugin-grid": "^6.1.0",
+    "@object-ui/plugin-kanban": "^6.1.0",
+    "@object-ui/plugin-list": "^6.1.0",
+    "@object-ui/plugin-report": "^6.1.0",
+    "@object-ui/plugin-view": "^6.1.0"
   },
   "devDependencies": {
-    "@types/node": "^25.9.0",
-    "@types/react": "19.2.14",
+    "@types/node": "^25.9.1",
+    "@types/react": "19.2.15",
     "@types/react-dom": "19.2.3",
     "react": "19.2.6",
     "react-dom": "19.2.6",
     "react-router-dom": "^7.15.0",
     "sonner": "^2.0.7",
     "typescript": "^6.0.3",
-    "vite": "^8.0.13"
+    "vite": "^8.0.14"
   },
   "keywords": [
     "objectui",