@object-ui/app-shell 6.1.0 → 6.2.0

package/CHANGELOG.md

@@ -1,5 +1,115 @@
 # @object-ui/app-shell — Changelog
 
+## 6.2.0
+
+### Minor Changes
+
+- fe3c1d3: Metadata Admin engine — unified UI for all 27 metadata types.
+
+  A generic, schema-driven admin shell that replaces the old per-type
+  bespoke pages with a single registry-driven engine. Admins can now browse,
+  create, override, diff, and roll back every registered metadata type from
+  the Setup app → _All Metadata Types_.
+
+  ### New: `@object-ui/app-shell` views/metadata-admin
+  - **`MetadataDirectoryPage`** — auto-grouped tile directory by domain, with
+    free-text search, domain chips, and a _Writable only_ filter.
+  - **`MetadataResourceListPage` / `MetadataResourceEditPage` / `…CreatePage` / `…HistoryPage`** —
+    generic CRUD shell. Uses the new `/meta/types` schema field to render
+    SchemaForm; uses `?layers=code,overlay,effective` to power a 3-state diff
+    tab; uses `/references` to warn before destructive deletes.
+  - **`MetadataQuickFind`** — Cmd+Shift+M palette searching across types and
+    items.
+  - **`PermissionMatrixEditor`** — Salesforce-style matrix custom editor for
+    `type=permission`. Objects × CRUD/VAMA/lifecycle columns with cascade
+    rules (viewAllRecords ⟹ allowRead, etc.), expandable per-object field
+    R/W subtable, bulk-set (R / CRUD / All / None), filter, _only granted_
+    toggle, destructive-change confirmation, profile switch.
+  - **`DesignerEditorWrapper`** — generic load–edit–save shell that hosts any
+    bespoke designer (`ObjectViewConfigurator`, `DashboardEditor`,
+    `PageCanvasEditor`, …). Handles dirty tracking, Save / Reset / Refresh /
+    History buttons, and the read-only fallback when `allowOrgOverride` is
+    false.
+  - **`i18n.ts`** — bilingual (`en-US`, `zh-CN`) bundle for built-in type
+    labels, domain labels, and engine UI strings, with `detectLocale()` and a
+    `t(key)` helper.
+
+  ### New routing variant
+  - App nav now supports `{ type: 'component', componentRef, params? }` items.
+    `AppContent` resolves them through the existing `ComponentRegistry`.
+  - Built-in components registered: `metadata:directory`, `metadata:resource`,
+    `metadata:object/edit` (FieldsPage), `metadata:permission/edit`
+    (PermissionMatrixEditor), and lazy designer wrappers for view / dashboard
+    / page.
+
+  ### Plugin-designer
+  - Lazy-exported `ObjectManager`, `FieldDesigner`, `ObjectViewConfigurator`,
+    `DashboardEditor`, `PageCanvasEditor`, `MetadataObjectsPage`, and
+    `MetadataFieldsPage` so the engine can mount them on demand.
+
+  The temporary `/dev/meta` route is removed. Setup app navigation flows
+  through the new component routes.
+
+- ca685ab: Add ChatGPT-style AI chat history surface at `/ai` and `/ai/:conversationId`.
+  - New `DefaultAiChatPage` with conversations sidebar (list, create, select, delete) and chat pane on the right.
+  - New `ConversationsSidebar` component and `useConversationList` hook for listing and managing `ai_conversations`.
+  - `useChatConversation` now accepts an optional `activeId` to hydrate a specific conversation (bypassing the localStorage cache), and guards against duplicate conversation creation when sibling state (e.g. selected agent / scope) changes during the same visit.
+  - Deleting the active conversation navigates back to `/ai` so the URL doesn't reference a stale id.
+  - Auto-title new conversations from the first user message (truncated to 40 chars) via `PATCH /api/v1/ai/conversations/:id`; resumed conversations are left alone.
+  - Manual rename in the sidebar: pencil icon opens an inline editor with optimistic update and rollback on server error.
+  - Client-side search input filters the sidebar by title/preview substring.
+
+- 0335ec4: Polish the AI chat surface based on real-world dogfooding feedback.
+
+  **`@object-ui/plugin-chatbot`** — new display helpers shared by `ChatbotEnhanced`:
+  - `unwrapToolResult(value)` peels the MCP-style `{ type: 'text', value: '<json>' }`
+    envelope that backend tools emit (`@objectstack/service-ai`'s data/metadata
+    tools, in particular), and JSON-parses the inner payload. The result panel
+    now renders a structured object tree instead of a doubly-escaped wall of
+    `\\\"objects\\\":[…]`.
+  - `humanizeToolName(name)` converts snake_case / kebab-case / camelCase tool
+    ids into sentence case ("list_objects" → "List objects"), preserving known
+    acronyms (API, ID, SQL, …). Tool-call cards now show the friendly title with
+    the raw id as a small monospace badge for power users.
+  - `summarizeChatError(err)` strips the AI SDK's
+    `"Failed after N attempts. Last error: "` prefix and keeps the first
+    sentence as a headline; the full text is exposed via an optional `details`
+    field so the new error banner can render a "Details" disclosure plus a
+    prominent Retry button instead of a 300-character single-line wall.
+
+  A new `⌘⏎ to send` hint is shown in the prompt footer (hidden on narrow
+  screens). `ToolHeader.title` now accepts `ReactNode` (previously `string`)
+  so wrappers can compose richer titles.
+
+  **`@object-ui/app-shell`** — `AiChatPage`:
+  - Removes the fake "Hello! I'm X" assistant welcome bubble so the empty-state
+    suggestion chips can actually render.
+  - Adds per-agent default suggestion sets (`data_chat`, `metadata_assistant`)
+    with a generic fallback. New conversations open with three actionable
+    starter prompts tailored to the selected agent.
+  - Surfaces agent-fetch failures as an inline warning on the agent picker
+    instead of hijacking the welcome message.
+  - Placeholder text now hints at the first suggestion (e.g. `Ask Data
+Assistant…  (try "系统里有多少个用户？")`).
+
+### Patch Changes
+
+- Updated dependencies [fe3c1d3]
+- Updated dependencies [ec8dcde]
+  - @object-ui/data-objectstack@6.2.0
+  - @object-ui/react@6.2.0
+  - @object-ui/components@6.2.0
+  - @object-ui/fields@6.2.0
+  - @object-ui/layout@6.2.0
+  - @object-ui/plugin-editor@6.2.0
+  - @object-ui/types@6.2.0
+  - @object-ui/core@6.2.0
+  - @object-ui/i18n@6.2.0
+  - @object-ui/auth@6.2.0
+  - @object-ui/permissions@6.2.0
+  - @object-ui/collaboration@6.2.0
+  - @object-ui/providers@6.2.0
+
 ## 6.1.0
 
 ### Patch Changes

package/README.md

@@ -241,12 +241,21 @@ The official ObjectStack adapter lives in `@object-ui/data-objectstack`
 (`createObjectStackUserStateAdapter`).
 
 ```tsx
-import { useFavorites, useRecentItems } from '@object-ui/app-shell';
+import { useFavorites, useRecentItems, useNavPins } from '@object-ui/app-shell';
 
 const { favorites, toggleFavorite, isFavorite } = useFavorites();
 const { recentItems, addRecentItem } = useRecentItems();
+// Sidebar pins live in the same store as Favorites — synced to the backend
+// via the same `UserDataAdapter<FavoriteItem>` when one is attached.
+const { pinnedIds, togglePin, isPinned, applyPins } = useNavPins();
 ```
 
+Nav pins and Favorites share a single `favorites` collection. `FavoriteItem`
+carries optional `type: 'nav'`, `pinned`, and `navId` fields so a single
+adapter syncs both flows. The legacy `objectui-nav-pins` localStorage key is
+migrated on first mount and then removed. Content favorites (20) and nav
+pins (20) each have an independent cap. See the guide below for details.
+
 See [User-Scoped State Persistence](../../content/docs/guide/user-state-persistence.md)
 for the adapter contract, backend schema, and how to plug in your own backend.
 

package/dist/console/AppContent.js

@@ -39,6 +39,7 @@ const PageView = lazy(() => import('../views/PageView').then(m => ({ default: m.
 const ReportView = lazy(() => import('../views/ReportView').then(m => ({ default: m.ReportView })));
 const SearchResultsPage = lazy(() => import('../views/SearchResultsPage').then(m => ({ default: m.SearchResultsPage })));
 const RecordFormPage = lazy(() => import('../views/RecordFormPage').then(m => ({ default: m.RecordFormPage })));
+const ComponentNavView = lazy(() => import('../views/ComponentNavView').then(m => ({ default: m.ComponentNavView })));
 // Designer pages — sourced from @object-ui/plugin-designer so third-party hosts
 // can opt out by not registering these routes.
 const CreateAppPage = lazy(() => import('@object-ui/plugin-designer').then(m => ({ default: m.CreateAppPage })));
@@ -52,8 +53,29 @@ const MarketplacePackagePage = lazy(() => import('./marketplace/MarketplacePacka
 const MarketplaceInstalledPage = lazy(() => import('./marketplace/MarketplaceInstalledPage').then(m => ({ default: m.MarketplaceInstalledPage })));
 export function AppContent({ extraRoutes, extraRoutesNoApp } = {}) {
     const [connectionState, setConnectionState] = useState('disconnected');
-    const { user } = useAuth();
+    const { user, getAuthConfig } = useAuth();
     const dataSource = useAdapter();
+    // Deployment-level feature flags from `/api/v1/auth/config`. Used by
+    // CEL predicates on metadata actions (e.g. `sys_organization`'s
+    // create button is hidden when `multiOrgEnabled === false`). We keep
+    // it empty until the fetch resolves so predicates default to "visible"
+    // and we don't briefly hide UI on slow networks.
+    const [features, setFeatures] = useState({});
+    useEffect(() => {
+        let cancelled = false;
+        getAuthConfig()
+            .then((cfg) => {
+            if (cancelled)
+                return;
+            setFeatures(cfg?.features ?? {});
+        })
+            .catch(() => {
+            /* leave empty — predicates default to visible */
+        });
+        return () => {
+            cancelled = true;
+        };
+    }, [getAuthConfig]);
     const navigate = useNavigate();
     const location = useLocation();
     const { appName } = useParams();
@@ -237,7 +259,7 @@ export function AppContent({ extraRoutes, extraRoutesNoApp } = {}) {
     const expressionUser = user
         ? { name: user.name, email: user.email, role: user.role ?? 'user' }
         : { name: 'Anonymous', email: '', role: 'guest' };
-    return (_jsxs(ExpressionProvider, { user: expressionUser, app: activeApp, data: {}, children: [_jsx(NavigationSyncEffect, {}), _jsxs(ConsoleLayout, { activeAppName: activeApp.name, activeApp: activeApp, onAppChange: handleAppChange, objects: allObjects, connectionState: connectionState, userId: user?.id, children: [_jsx(CommandPalette, { apps: apps, activeApp: activeApp, objects: allObjects, onAppChange: handleAppChange, dataSource: dataSource }), _jsx(KeyboardShortcutsDialog, {}), _jsx(OnboardingWalkthrough, {}), _jsx(ErrorBoundary, { children: _jsx(Suspense, { fallback: _jsx(LoadingScreen, {}), children: _jsx(RouteFader, { children: _jsxs(Routes, { children: [_jsx(Route, { path: "/", element: _jsx(Navigate, { to: resolveLandingRoute(activeApp), replace: true }) }), _jsx(Route, { path: ":objectName", element: _jsx(ObjectView, { dataSource: dataSource, objects: allObjects, onEdit: handleEdit, externalRefreshKey: refreshKey }) }), _jsx(Route, { path: ":objectName/new", element: _jsx(RecordFormPage, { mode: "create" }) }), _jsx(Route, { path: ":objectName/view/:viewId", element: _jsx(ObjectView, { dataSource: dataSource, objects: allObjects, onEdit: handleEdit, externalRefreshKey: refreshKey }) }), _jsx(Route, { path: ":objectName/record/:recordId", element: _jsx(RecordDetailView, { dataSource: dataSource, objects: allObjects, onEdit: handleEdit }, refreshKey) }), _jsx(Route, { path: ":objectName/record/:recordId/edit", element: _jsx(RecordFormPage, { mode: "edit" }) }), _jsx(Route, { path: "dashboard/:dashboardName", element: _jsx(DashboardView, { dataSource: dataSource }) }), _jsx(Route, { path: "report/:reportName", element: _jsx(ReportView, { dataSource: dataSource }) }), _jsx(Route, { path: "page/:pageName", element: _jsx(PageView, {}) }), _jsx(Route, { path: "design/page/:pageName", element: _jsx(PageDesignPage, {}) }), _jsx(Route, { path: "design/dashboard/:dashboardName", element: _jsx(DashboardDesignPage, {}) }), _jsx(Route, { path: "search", element: _jsx(SearchResultsPage, {}) }), _jsx(Route, { path: "create-app", element: _jsx(CreateAppPage, {}) }), _jsx(Route, { path: "edit-app/:editAppName", element: _jsx(EditAppPage, {}) }), _jsx(Route, { path: "system/marketplace", element: _jsx(MarketplacePage, {}) }), _jsx(Route, { path: "system/marketplace/installed", element: _jsx(MarketplaceInstalledPage, {}) }), _jsx(Route, { path: "system/marketplace/:packageId", element: _jsx(MarketplacePackagePage, {}) }), extraRoutes, _jsx(Route, { path: ":objectName/:maybeRecordId", element: _jsx(ShorthandRecordRedirect, {}) }), _jsx(Route, { path: "*", element: _jsx(RouteNotFound, {}) })] }) }) }) }), currentObjectDef && (_jsx(ModalForm, { schema: {
+    return (_jsxs(ExpressionProvider, { user: expressionUser, app: activeApp, data: {}, features: features, children: [_jsx(NavigationSyncEffect, {}), _jsxs(ConsoleLayout, { activeAppName: activeApp.name, activeApp: activeApp, onAppChange: handleAppChange, objects: allObjects, connectionState: connectionState, userId: user?.id, children: [_jsx(CommandPalette, { apps: apps, activeApp: activeApp, objects: allObjects, onAppChange: handleAppChange, dataSource: dataSource }), _jsx(KeyboardShortcutsDialog, {}), _jsx(OnboardingWalkthrough, {}), _jsx(ErrorBoundary, { children: _jsx(Suspense, { fallback: _jsx(LoadingScreen, {}), children: _jsx(RouteFader, { children: _jsxs(Routes, { children: [_jsx(Route, { path: "/", element: _jsx(Navigate, { to: resolveLandingRoute(activeApp), replace: true }) }), _jsx(Route, { path: ":objectName", element: _jsx(ObjectView, { dataSource: dataSource, objects: allObjects, onEdit: handleEdit, externalRefreshKey: refreshKey }) }), _jsx(Route, { path: ":objectName/new", element: _jsx(RecordFormPage, { mode: "create" }) }), _jsx(Route, { path: ":objectName/view/:viewId", element: _jsx(ObjectView, { dataSource: dataSource, objects: allObjects, onEdit: handleEdit, externalRefreshKey: refreshKey }) }), _jsx(Route, { path: ":objectName/record/:recordId", element: _jsx(RecordDetailView, { dataSource: dataSource, objects: allObjects, onEdit: handleEdit }, refreshKey) }), _jsx(Route, { path: ":objectName/record/:recordId/edit", element: _jsx(RecordFormPage, { mode: "edit" }) }), _jsx(Route, { path: "dashboard/:dashboardName", element: _jsx(DashboardView, { dataSource: dataSource }) }), _jsx(Route, { path: "report/:reportName", element: _jsx(ReportView, { dataSource: dataSource }) }), _jsx(Route, { path: "page/:pageName", element: _jsx(PageView, {}) }), _jsx(Route, { path: "component/:ns/:name/*", element: _jsx(ComponentNavView, {}) }), _jsx(Route, { path: "design/page/:pageName", element: _jsx(PageDesignPage, {}) }), _jsx(Route, { path: "design/dashboard/:dashboardName", element: _jsx(DashboardDesignPage, {}) }), _jsx(Route, { path: "search", element: _jsx(SearchResultsPage, {}) }), _jsx(Route, { path: "create-app", element: _jsx(CreateAppPage, {}) }), _jsx(Route, { path: "edit-app/:editAppName", element: _jsx(EditAppPage, {}) }), _jsx(Route, { path: "system/marketplace", element: _jsx(MarketplacePage, {}) }), _jsx(Route, { path: "system/marketplace/installed", element: _jsx(MarketplaceInstalledPage, {}) }), _jsx(Route, { path: "system/marketplace/:packageId", element: _jsx(MarketplacePackagePage, {}) }), extraRoutes, _jsx(Route, { path: ":objectName/:maybeRecordId", element: _jsx(ShorthandRecordRedirect, {}) }), _jsx(Route, { path: "*", element: _jsx(RouteNotFound, {}) })] }) }) }) }), currentObjectDef && (_jsx(ModalForm, { schema: {
                             type: 'object-form',
                             formType: 'modal',
                             objectName: currentObjectDef.name,

package/dist/console/ai/AiChatPage.d.ts

@@ -0,0 +1,8 @@
+export interface AiChatPageProps {
+    /** Override the resolved AI service base URL. */
+    apiBase?: string;
+    /** Default agent to select on first render. */
+    defaultAgent?: string;
+}
+export declare function AiChatPage({ apiBase: apiBaseProp, defaultAgent: defaultAgentProp }?: AiChatPageProps): import("react/jsx-runtime").JSX.Element;
+export default AiChatPage;

package/dist/console/ai/AiChatPage.js

@@ -0,0 +1,188 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
+/**
+ * AiChatPage — full-page ChatGPT-style AI surface.
+ *
+ * Mounted at `/ai` (new chat) and `/ai/:conversationId` (resume an existing
+ * conversation). Left rail lists the signed-in user's `ai_conversations`;
+ * right pane embeds `ChatbotEnhanced` wired to
+ * `POST /api/v1/ai/agents/:name/chat`.
+ *
+ * Auto-persist is handled server-side in `@objectstack/service-ai`: as long
+ * as the request body carries `conversationId`, the user + assistant + tool
+ * turns are appended to `ai_messages` automatically.
+ */
+import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
+import { useNavigate, useParams } from 'react-router-dom';
+import { useAuth } from '@object-ui/auth';
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue, } from '@object-ui/components';
+import { ChatbotEnhanced, useAgents, useObjectChat, useHitlInChat, } from '@object-ui/plugin-chatbot';
+import { AppHeader } from '../../layout/AppHeader';
+import { useNavigationContext } from '../../context/NavigationContext';
+import { useChatConversation } from '../../hooks/useChatConversation';
+import { ConversationsSidebar } from './ConversationsSidebar';
+const DEFAULT_AI_PATH = '/api/v1/ai';
+function resolveApiBase(explicit) {
+    if (explicit)
+        return explicit.replace(/\/$/, '');
+    const env = import.meta.env ?? {};
+    const fromEnv = env.VITE_AI_BASE_URL;
+    if (fromEnv)
+        return fromEnv.replace(/\/$/, '');
+    const serverUrl = env.VITE_SERVER_URL ?? '';
+    return `${serverUrl.replace(/\/$/, '')}${DEFAULT_AI_PATH}`;
+}
+export function AiChatPage({ apiBase: apiBaseProp, defaultAgent: defaultAgentProp } = {}) {
+    const { user } = useAuth();
+    const userId = user?.id;
+    const { conversationId: urlConversationId } = useParams();
+    const navigate = useNavigate();
+    const { setContext } = useNavigationContext();
+    useEffect(() => {
+        setContext('home');
+    }, [setContext]);
+    const apiBase = useMemo(() => resolveApiBase(apiBaseProp), [apiBaseProp]);
+    const env = import.meta.env ?? {};
+    const envDefaultAgent = env.VITE_AI_DEFAULT_AGENT;
+    const { agents, isLoading: agentsLoading, error: agentsError } = useAgents({ apiBase });
+    const [activeAgent, setActiveAgent] = useState(undefined);
+    useEffect(() => {
+        if (!activeAgent && agents.length > 0) {
+            const preferred = defaultAgentProp ?? envDefaultAgent;
+            const match = preferred ? agents.find((a) => a.name === preferred) : undefined;
+            setActiveAgent((match ?? agents[0]).name);
+        }
+    }, [agents, activeAgent, defaultAgentProp, envDefaultAgent]);
+    const chatApi = activeAgent
+        ? `${apiBase}/agents/${encodeURIComponent(activeAgent)}/chat`
+        : undefined;
+    const { conversationId, initialMessages, isLoading: convoLoading } = useChatConversation({
+        userId,
+        scope: activeAgent,
+        apiBase,
+        activeId: urlConversationId,
+    });
+    const [refreshKey, setRefreshKey] = useState(0);
+    // After the hook resolves a real id for a fresh `/ai` visit, mirror it into
+    // the URL so the sidebar's active-row + share/refresh both work.
+    useEffect(() => {
+        if (!urlConversationId && conversationId) {
+            navigate(`/ai/${conversationId}`, { replace: true });
+        }
+    }, [urlConversationId, conversationId, navigate]);
+    const titledRef = useRef(new Set());
+    // A resumed conversation already has history; treat it as already-titled
+    // so we don't clobber the original title on the next user turn.
+    useEffect(() => {
+        if (conversationId && initialMessages.length > 0) {
+            titledRef.current.add(conversationId);
+        }
+    }, [conversationId, initialMessages.length]);
+    const handleSent = useCallback((firstUserMessage) => {
+        // New user turn → bump sidebar list so the row's preview/timestamp refreshes.
+        setRefreshKey((k) => k + 1);
+        // Auto-title the conversation from the first user message. Server only
+        // tracks `title` when we PATCH it; without this every row shows the same
+        // "New conversation" placeholder. We mark `conversationId` as titled in a
+        // ref so subsequent turns don't re-rename and clobber a manual rename.
+        if (!firstUserMessage || !conversationId)
+            return;
+        if (titledRef.current.has(conversationId))
+            return;
+        titledRef.current.add(conversationId);
+        const text = firstUserMessage.trim();
+        if (!text)
+            return;
+        const truncated = text.length > 40 ? `${text.slice(0, 40)}…` : text;
+        fetch(`${apiBase}/conversations/${encodeURIComponent(conversationId)}`, {
+            method: 'PATCH',
+            credentials: 'include',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ title: truncated }),
+        })
+            .then(() => setRefreshKey((k) => k + 1))
+            .catch(() => {
+            // Leave it untitled; user can rename manually.
+            titledRef.current.delete(conversationId);
+        });
+    }, [apiBase, conversationId]);
+    return (_jsxs("div", { className: "flex h-svh w-full flex-col bg-background", "data-testid": "ai-chat-page", children: [_jsx("header", { className: "sticky top-0 z-30 flex h-14 w-full shrink-0 items-center gap-2 border-b bg-background px-2 sm:px-4", children: _jsx(AppHeader, { variant: "home" }) }), _jsxs("div", { className: "flex flex-1 min-h-0 w-full", children: [_jsx(ConversationsSidebar, { userId: userId, apiBase: apiBase, refreshKey: refreshKey, className: "hidden w-72 shrink-0 border-r md:flex" }), _jsx("main", { className: "flex flex-1 min-w-0 flex-col", children: _jsx(ChatPane, { agents: agents, agentsLoading: agentsLoading, agentsError: agentsError, activeAgent: activeAgent, onAgentChange: setActiveAgent, chatApi: chatApi, apiBase: apiBase, conversationId: conversationId, initialMessages: initialMessages, hydrating: convoLoading, onSent: handleSent }, `${chatApi ?? 'local'}:${conversationId ?? 'pending'}`) })] })] }));
+}
+function ChatPane({ agents, agentsLoading, agentsError, activeAgent, onAgentChange, chatApi, apiBase, conversationId, initialMessages, hydrating, onSent, }) {
+    const activeAgentLabel = useMemo(() => {
+        const found = agents.find((a) => a.name === activeAgent);
+        return found?.label ?? activeAgent ?? 'Assistant';
+    }, [agents, activeAgent]);
+    const hydrated = useMemo(() => {
+        return initialMessages.map((m) => ({
+            id: m.id,
+            role: m.role,
+            content: m.parts.map((p) => p.text).join(''),
+        }));
+    }, [initialMessages]);
+    const suggestions = useMemo(() => {
+        if (hydrated.length > 0)
+            return undefined;
+        return buildAgentSuggestions(activeAgent, activeAgentLabel);
+    }, [hydrated.length, activeAgent, activeAgentLabel]);
+    const { messages, isLoading, error, sendMessage, stop, reload, clear, } = useObjectChat({
+        api: chatApi,
+        conversationId,
+        body: {
+            context: {
+                activeApp: 'AI',
+                agentName: activeAgent,
+            },
+        },
+        initialMessages: hydrated,
+        autoResponse: !chatApi,
+        autoResponseText: "Thanks for your message! I'm here to help.",
+        autoResponseDelay: 600,
+    });
+    const hitl = useHitlInChat({
+        messages: messages,
+        apiBase,
+        continueConversation: (prompt) => {
+            sendMessage(prompt);
+        },
+    });
+    const handleSend = useCallback((content, files) => {
+        sendMessage(content, files);
+        onSent(content);
+    }, [sendMessage, onSent]);
+    const headerSlot = agents.length > 0 ? (_jsxs("div", { className: "flex flex-wrap items-center gap-2 px-4 py-2", children: [_jsx("span", { className: "text-xs text-muted-foreground", children: "Agent:" }), _jsxs(Select, { value: activeAgent, onValueChange: onAgentChange, disabled: agentsLoading, children: [_jsx(SelectTrigger, { className: "h-7 w-[220px] text-xs", "data-testid": "ai-chat-agent-picker", children: _jsx(SelectValue, { placeholder: "Choose agent..." }) }), _jsx(SelectContent, { align: "start", children: agents.map((agent) => (_jsxs(SelectItem, { value: agent.name, className: "text-xs", children: [_jsx("span", { className: "font-medium", children: agent.label }), agent.description ? (_jsx("span", { className: "block text-muted-foreground text-[10px] truncate max-w-[260px]", children: agent.description })) : null] }, agent.name))) })] }), hydrating ? (_jsx("span", { className: "text-[10px] text-muted-foreground", children: "Loading history\u2026" })) : null, agentsError ? (_jsx("span", { className: "text-[10px] text-amber-700 dark:text-amber-400", title: agentsError.message, children: "\u26A0 Offline demo mode \u2014 agent list unavailable" })) : null] })) : null;
+    return (_jsx(ChatbotEnhanced, { className: "flex-1 min-h-0 rounded-none border-0", maxHeight: "100%", headerSlot: headerSlot, messages: messages, placeholder: activeAgent
+            ? `Ask ${activeAgentLabel}…  (try “${(suggestions?.[0]) ?? 'How can you help?'}”)`
+            : agentsLoading
+                ? 'Loading agents…'
+                : 'Ask anything…', suggestions: suggestions, onSendMessage: handleSend, onClear: clear, onStop: isLoading ? stop : undefined, onReload: reload, isLoading: isLoading, error: error, enableMarkdown: true, onToolApprove: hitl.decide, toolDecisions: hitl.decisions, toolApproveLabel: "Approve & run", toolDenyLabel: "Reject", toolDenyReason: "Operator rejected from chat", "data-testid": "ai-chat-panel" }));
+}
+const AGENT_SUGGESTIONS = {
+    data_chat: [
+        '系统里有多少个用户？列出他们的邮箱。',
+        '帮我列出最近创建的 5 条记录。',
+        '统计每个对象的记录数。',
+    ],
+    metadata_assistant: [
+        '系统里注册了哪些对象类型？',
+        'sys_user 对象有哪些字段？',
+        '描述一下用户相关的对象关系。',
+    ],
+};
+const GENERIC_SUGGESTIONS = [
+    'What can you help me with?',
+    'List the available data objects.',
+    'Summarize my recent activity.',
+];
+function buildAgentSuggestions(agentName, agentLabel) {
+    if (agentName && AGENT_SUGGESTIONS[agentName]) {
+        return AGENT_SUGGESTIONS[agentName];
+    }
+    const lower = (agentName ?? agentLabel).toLowerCase();
+    if (lower.includes('data'))
+        return AGENT_SUGGESTIONS.data_chat;
+    if (lower.includes('metadata'))
+        return AGENT_SUGGESTIONS.metadata_assistant;
+    return GENERIC_SUGGESTIONS;
+}
+export default AiChatPage;

package/dist/console/ai/ConversationsSidebar.d.ts

@@ -0,0 +1,7 @@
+export interface ConversationsSidebarProps {
+    userId: string | undefined;
+    apiBase: string;
+    className?: string;
+    refreshKey?: number | string;
+}
+export declare function ConversationsSidebar({ userId, apiBase, className, refreshKey, }: ConversationsSidebarProps): import("react/jsx-runtime").JSX.Element;

package/dist/console/ai/ConversationsSidebar.js

@@ -0,0 +1,111 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
+/**
+ * Left sidebar listing the signed-in user's AI conversations. Active row is
+ * derived from `useParams<{ conversationId }>()`; clicking a row navigates to
+ * `/ai/:id`, the "New chat" button navigates to `/ai`.
+ */
+import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
+import { useNavigate, useParams } from 'react-router-dom';
+import { Plus, Trash2, Pencil, MessageSquare, Search, Check, X } from 'lucide-react';
+import { Button, Input, ScrollArea, Empty, EmptyTitle, EmptyDescription, cn, } from '@object-ui/components';
+import { useConversationList } from '../../hooks/useConversationList';
+function formatTimestamp(iso) {
+    if (!iso)
+        return '';
+    const d = new Date(iso);
+    if (Number.isNaN(d.getTime()))
+        return '';
+    const now = Date.now();
+    const diff = now - d.getTime();
+    const min = 60 * 1000;
+    const hour = 60 * min;
+    const day = 24 * hour;
+    if (diff < min)
+        return 'just now';
+    if (diff < hour)
+        return `${Math.floor(diff / min)}m ago`;
+    if (diff < day)
+        return `${Math.floor(diff / hour)}h ago`;
+    if (diff < 7 * day)
+        return `${Math.floor(diff / day)}d ago`;
+    return d.toLocaleDateString();
+}
+export function ConversationsSidebar({ userId, apiBase, className, refreshKey, }) {
+    const navigate = useNavigate();
+    const { conversationId: activeId } = useParams();
+    const { conversations, isLoading, error, remove, rename } = useConversationList({
+        userId,
+        apiBase,
+        refreshKey,
+    });
+    const [filter, setFilter] = useState('');
+    const [renamingId, setRenamingId] = useState(undefined);
+    const visible = useMemo(() => {
+        const q = filter.trim().toLowerCase();
+        if (!q)
+            return conversations;
+        return conversations.filter((c) => {
+            const hay = `${c.title ?? ''} ${c.preview ?? ''}`.toLowerCase();
+            return hay.includes(q);
+        });
+    }, [conversations, filter]);
+    const handleNew = useCallback(() => navigate('/ai'), [navigate]);
+    const handleDelete = useCallback(async (e, id) => {
+        e.stopPropagation();
+        await remove(id);
+        if (id === activeId)
+            navigate('/ai', { replace: true });
+    }, [remove, activeId, navigate]);
+    const handleRenameSubmit = useCallback(async (id, title) => {
+        setRenamingId(undefined);
+        try {
+            await rename(id, title);
+        }
+        catch {
+            // optimistic update already rolled back via refetch in the hook
+        }
+    }, [rename]);
+    return (_jsxs("aside", { className: cn('flex h-full min-h-0 flex-col bg-muted/30', className), "data-testid": "ai-conversations-sidebar", children: [_jsxs("div", { className: "flex shrink-0 flex-col gap-2 border-b px-3 py-2", children: [_jsxs("div", { className: "flex items-center justify-between gap-2", children: [_jsx("span", { className: "text-sm font-medium", children: "Chats" }), _jsxs(Button, { size: "sm", variant: "outline", onClick: handleNew, "data-testid": "ai-new-chat", children: [_jsx(Plus, { className: "h-3.5 w-3.5" }), "New"] })] }), _jsxs("div", { className: "relative", children: [_jsx(Search, { className: "pointer-events-none absolute left-2 top-1/2 h-3.5 w-3.5 -translate-y-1/2 text-muted-foreground" }), _jsx(Input, { value: filter, onChange: (e) => setFilter(e.target.value), placeholder: "Search chats...", className: "h-7 pl-7 text-xs", "data-testid": "ai-conversations-search" })] })] }), _jsx(ScrollArea, { className: "flex-1 min-h-0", children: isLoading && conversations.length === 0 ? (_jsx("div", { className: "px-3 py-4 text-xs text-muted-foreground", children: "Loading\u2026" })) : error ? (_jsx("div", { className: "px-3 py-4 text-xs text-destructive", children: error.message })) : conversations.length === 0 ? (_jsxs(Empty, { className: "px-3 py-8", children: [_jsx(MessageSquare, { className: "h-8 w-8 text-muted-foreground" }), _jsx(EmptyTitle, { children: "No chats yet" }), _jsx(EmptyDescription, { children: "Start a new conversation to see it here." })] })) : visible.length === 0 ? (_jsx("div", { className: "px-3 py-4 text-xs text-muted-foreground", children: "No matching chats." })) : (_jsx("ul", { className: "flex flex-col py-1", children: visible.map((c) => (_jsx(ConversationRow, { conversation: c, active: c.id === activeId, renaming: c.id === renamingId, onSelect: () => navigate(`/ai/${c.id}`), onDelete: (e) => handleDelete(e, c.id), onStartRename: () => setRenamingId(c.id), onCancelRename: () => setRenamingId(undefined), onSubmitRename: (title) => handleRenameSubmit(c.id, title) }, c.id))) })) })] }));
+}
+function ConversationRow({ conversation, active, renaming, onSelect, onDelete, onStartRename, onCancelRename, onSubmitRename, }) {
+    const title = conversation.title?.trim() || conversation.preview?.trim() || 'New conversation';
+    const [draft, setDraft] = useState(title);
+    const inputRef = useRef(null);
+    useEffect(() => {
+        if (renaming) {
+            setDraft(conversation.title?.trim() || conversation.preview?.trim() || '');
+            // Focus the input on next paint so the click that opened it doesn't blur immediately.
+            setTimeout(() => inputRef.current?.select(), 0);
+        }
+    }, [renaming, conversation.title, conversation.preview]);
+    if (renaming) {
+        return (_jsx("li", { children: _jsxs("div", { className: cn('flex w-full items-center gap-1 border-l-2 px-3 py-2', active ? 'border-primary bg-accent' : 'border-transparent'), "data-testid": `ai-conversation-rename-row-${conversation.id}`, children: [_jsx(Input, { ref: inputRef, value: draft, onChange: (e) => setDraft(e.target.value), onKeyDown: (e) => {
+                            if (e.key === 'Enter') {
+                                e.preventDefault();
+                                onSubmitRename(draft);
+                            }
+                            else if (e.key === 'Escape') {
+                                e.preventDefault();
+                                onCancelRename();
+                            }
+                        }, className: "h-7 flex-1 text-sm", "data-testid": `ai-conversation-rename-input-${conversation.id}`, "aria-label": "Rename conversation" }), _jsx(Button, { size: "sm", variant: "ghost", className: "h-7 w-7 p-0", onClick: () => onSubmitRename(draft), "data-testid": `ai-conversation-rename-confirm-${conversation.id}`, "aria-label": "Save rename", children: _jsx(Check, { className: "h-3.5 w-3.5" }) }), _jsx(Button, { size: "sm", variant: "ghost", className: "h-7 w-7 p-0", onClick: onCancelRename, "aria-label": "Cancel rename", children: _jsx(X, { className: "h-3.5 w-3.5" }) })] }) }));
+    }
+    return (_jsx("li", { children: _jsxs("button", { type: "button", onClick: onSelect, className: cn('group flex w-full flex-col gap-0.5 border-l-2 border-transparent px-3 py-2 text-left text-sm transition-colors hover:bg-accent/50', active && 'border-primary bg-accent'), "data-testid": `ai-conversation-row-${conversation.id}`, children: [_jsxs("div", { className: "flex items-start justify-between gap-2", children: [_jsx("span", { className: "line-clamp-1 flex-1 font-medium", children: title }), _jsxs("div", { className: "flex shrink-0 items-center gap-0.5 opacity-0 transition-opacity group-hover:opacity-100", children: [_jsx("span", { role: "button", tabIndex: 0, onClick: (e) => {
+                                        e.stopPropagation();
+                                        onStartRename();
+                                    }, onKeyDown: (e) => {
+                                        if (e.key === 'Enter' || e.key === ' ') {
+                                            e.stopPropagation();
+                                            onStartRename();
+                                        }
+                                    }, className: "hover:text-primary", "data-testid": `ai-conversation-rename-${conversation.id}`, "aria-label": "Rename conversation", children: _jsx(Pencil, { className: "h-3.5 w-3.5" }) }), _jsx("span", { role: "button", tabIndex: 0, onClick: (e) => {
+                                        e.stopPropagation();
+                                        onDelete(e);
+                                    }, onKeyDown: (e) => {
+                                        if (e.key === 'Enter' || e.key === ' ') {
+                                            e.stopPropagation();
+                                            onDelete(e);
+                                        }
+                                    }, className: "hover:text-destructive", "data-testid": `ai-conversation-delete-${conversation.id}`, "aria-label": "Delete conversation", children: _jsx(Trash2, { className: "h-3.5 w-3.5" }) })] })] }), conversation.preview && conversation.preview !== title ? (_jsx("span", { className: "line-clamp-1 text-xs text-muted-foreground", children: conversation.preview })) : null, _jsx("span", { className: "text-[10px] text-muted-foreground", children: formatTimestamp(conversation.updatedAt ?? conversation.createdAt) })] }) }));
+}

package/dist/console/auth/LoginPage.js

@@ -2,15 +2,32 @@ import { jsx as _jsx } from "react/jsx-runtime";
 /**
  * Login Page for ObjectStack Console
  */
+import { useEffect, useState } from 'react';
 import { useNavigate, Link } from 'react-router-dom';
-import { LoginForm } from '@object-ui/auth';
+import { LoginForm, useAuth } from '@object-ui/auth';
 import { useObjectTranslation } from '@object-ui/i18n';
 import { AuthPageLayout } from './AuthPageLayout';
 const RouterLink = ({ href, className, children }) => (_jsx(Link, { to: href, className: className, children: children }));
 export function LoginPage() {
     const navigate = useNavigate();
     const { t } = useObjectTranslation();
-    return (_jsx(AuthPageLayout, { children: _jsx(LoginForm, { onSuccess: () => navigate('/'), registerUrl: "/register", forgotPasswordUrl: "/forgot-password", title: t('auth.login.title'), description: t('auth.login.description'), linkComponent: RouterLink, labels: {
+    const { getAuthConfig } = useAuth();
+    // Hide the "Sign up" link when the deployment has disabled
+    // self-service registration (env `OS_DISABLE_SIGNUP=true` or
+    // `emailAndPassword.disableSignUp` in objectstack.config.ts). We start
+    // undefined so we don't flicker the link on first paint, and pass
+    // `undefined` (LoginForm hides the link) once we know signup is off.
+    const [signUpDisabled, setSignUpDisabled] = useState(undefined);
+    useEffect(() => {
+        let cancelled = false;
+        getAuthConfig()
+            .then(cfg => { if (!cancelled)
+            setSignUpDisabled(cfg?.emailPassword?.disableSignUp === true); })
+            .catch(() => { if (!cancelled)
+            setSignUpDisabled(false); });
+        return () => { cancelled = true; };
+    }, [getAuthConfig]);
+    return (_jsx(AuthPageLayout, { children: _jsx(LoginForm, { onSuccess: () => navigate('/'), registerUrl: signUpDisabled ? undefined : '/register', forgotPasswordUrl: "/forgot-password", title: t('auth.login.title'), description: t('auth.login.description'), linkComponent: RouterLink, labels: {
                 emailLabel: t('auth.login.emailLabel'),
                 emailPlaceholder: t('auth.login.emailPlaceholder'),
                 passwordLabel: t('auth.login.passwordLabel'),

package/dist/console/auth/RegisterPage.js

@@ -2,14 +2,43 @@ import { jsx as _jsx } from "react/jsx-runtime";
 /**
  * Register Page for ObjectStack Console
  */
+import { useEffect, useState } from 'react';
 import { useNavigate, Link } from 'react-router-dom';
-import { RegisterForm } from '@object-ui/auth';
+import { RegisterForm, useAuth } from '@object-ui/auth';
 import { useObjectTranslation } from '@object-ui/i18n';
 import { AuthPageLayout } from './AuthPageLayout';
 const RouterLink = ({ href, className, children }) => (_jsx(Link, { to: href, className: className, children: children }));
 export function RegisterPage() {
     const navigate = useNavigate();
     const { t } = useObjectTranslation();
+    const { getAuthConfig } = useAuth();
+    // Defense-in-depth: even if a user lands on /register directly when
+    // signup is disabled, bounce them to /login. The server-side
+    // `disableSignUp` (set by env `OS_DISABLE_SIGNUP=true` or the
+    // `emailAndPassword.disableSignUp` config option) will still 403 any
+    // submission, but redirecting here avoids a confusing form.
+    const [allowed, setAllowed] = useState(undefined);
+    useEffect(() => {
+        let cancelled = false;
+        getAuthConfig()
+            .then(cfg => {
+            if (cancelled)
+                return;
+            if (cfg?.emailPassword?.disableSignUp === true) {
+                navigate('/login', { replace: true });
+            }
+            else {
+                setAllowed(true);
+            }
+        })
+            .catch(() => { if (!cancelled)
+            setAllowed(true); });
+        return () => { cancelled = true; };
+    }, [getAuthConfig, navigate]);
+    if (allowed !== true) {
+        // Render nothing until we know the flag — prevents a flash of the form.
+        return _jsx(AuthPageLayout, { children: null });
+    }
     return (_jsx(AuthPageLayout, { children: _jsx(RegisterForm, { onSuccess: () => navigate('/'), loginUrl: "/login", title: t('auth.register.title'), description: t('auth.register.description'), linkComponent: RouterLink, labels: {
                 nameLabel: t('auth.register.nameLabel'),
                 namePlaceholder: t('auth.register.namePlaceholder'),

package/dist/console/marketplace/MarketplaceAccessDenied.js

@@ -10,9 +10,11 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { Card, CardContent, Button } from '@object-ui/components';
 import { Lock } from 'lucide-react';
 import { useNavigate, useParams } from 'react-router-dom';
+import { useObjectTranslation } from '@object-ui/i18n';
 export function MarketplaceAccessDenied() {
     const navigate = useNavigate();
     const { appName } = useParams();
+    const { t } = useObjectTranslation();
     const home = appName ? `/apps/${appName}` : '/';
-    return (_jsx("div", { className: "container mx-auto max-w-2xl px-6 py-16", children: _jsx(Card, { children: _jsxs(CardContent, { className: "flex flex-col items-center gap-4 py-12 text-center", children: [_jsx("div", { className: "rounded-full bg-muted p-3", children: _jsx(Lock, { className: "h-6 w-6 text-muted-foreground" }) }), _jsxs("div", { children: [_jsx("h2", { className: "text-lg font-semibold", children: "App Marketplace is admin-only" }), _jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: "You don't have permission to install apps in this environment. Ask an owner or admin of this organization for access." })] }), _jsx(Button, { variant: "outline", onClick: () => navigate(home), children: "Back to home" })] }) }) }));
+    return (_jsx("div", { className: "container mx-auto max-w-2xl px-6 py-16", children: _jsx(Card, { children: _jsxs(CardContent, { className: "flex flex-col items-center gap-4 py-12 text-center", children: [_jsx("div", { className: "rounded-full bg-muted p-3", children: _jsx(Lock, { className: "h-6 w-6 text-muted-foreground" }) }), _jsxs("div", { children: [_jsx("h2", { className: "text-lg font-semibold", children: t('marketplace.accessDenied.title') }), _jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: t('marketplace.accessDenied.description') })] }), _jsx(Button, { variant: "outline", onClick: () => navigate(home), children: t('marketplace.action.backHome') })] }) }) }));
 }