@object-ui/app-shell 6.2.2 → 7.0.0

package/dist/console/marketplace/MarketplacePackagePage.js

@@ -8,15 +8,17 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useState } from 'react';
 import { useNavigate, useParams } from 'react-router-dom';
 import { Button, Badge, Card, CardContent, CardHeader, CardTitle, Skeleton, Dialog, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle, Label, Checkbox, Select, SelectContent, SelectItem, SelectTrigger, SelectValue, DropdownMenu, DropdownMenuTrigger, DropdownMenuContent, DropdownMenuItem, } from '@object-ui/components';
-import { ArrowLeft, ExternalLink, Download, AlertCircle, Package, Trash2, MoreHorizontal, CheckCircle2 } from 'lucide-react';
+import { ArrowLeft, ExternalLink, Download, AlertCircle, Package, Trash2, MoreHorizontal, CheckCircle2, ArrowUpCircle, Database, Loader2 } from 'lucide-react';
 import { useIsWorkspaceAdmin } from '@object-ui/auth';
 import { useObjectTranslation } from '@object-ui/i18n';
 import { PackageIcon } from './PackageIcon';
 import { MarkdownText } from './MarkdownText';
+import { PluginDisclosure } from './PluginDisclosure';
 import { MarketplaceAccessDenied } from './MarketplaceAccessDenied';
 import { localizePackage } from './usePackageL10n';
-import { getMarketplacePackage, installPackage, installLocal, uninstallLocal, listLocalInstalls, listCloudEnvironments, listInstallableOrgIds, cloudInstallDeepLink, } from './marketplaceApi';
+import { getMarketplacePackage, installPackage, installLocal, uninstallLocal, listLocalInstalls, listCloudEnvironments, listInstallableOrgIds, cloudInstallDeepLink, getCloudInstallationInfo, reseedSampleData, purgeSampleData, reseedLocalSampleData, purgeLocalSampleData, } from './marketplaceApi';
 import { getRuntimeConfig } from '../../runtime-config';
+import { emitMetadataRefresh } from '../../assistant/assistantBus';
 import { useMetadata } from '../../providers/MetadataProvider';
 export function MarketplacePackagePage() {
     const navigate = useNavigate();
@@ -33,9 +35,27 @@ export function MarketplacePackagePage() {
     const [envsLoading, setEnvsLoading] = useState(false);
     const [envsError, setEnvsError] = useState(null);
     const [selectedEnv, setSelectedEnv] = useState('');
+    // env id -> installed version, for annotating the picker with each env's
+    // current install state ("Installed v1.0.0" / "Update → v1.0.1"). Lets a
+    // multi-env operator see at a glance where this app already lives and which
+    // copies are out of date before choosing a target.
+    const [envInstallMap, setEnvInstallMap] = useState({});
     const [seedSampleData, setSeedSampleData] = useState(false);
+    // PD4: a code-bearing package requires explicit acknowledgement of its
+    // requested permissions before the install button is enabled.
+    const [acknowledged, setAcknowledged] = useState(false);
     const [installing, setInstalling] = useState(false);
     const [installResult, setInstallResult] = useState(null);
+    // Tracks whether the package has been installed into the current
+    // environment via the cloud install path. Used to flip the primary
+    // CTA from "Install to Cloud" → "Installed" so the user gets
+    // immediate feedback after a successful install. Seeded from the
+    // install response (which echoes the installation row) and from a
+    // boot-time fetch of sys_package_installation for the current env.
+    const [cloudInstalledVersion, setCloudInstalledVersion] = useState(null);
+    const [cloudInstall, setCloudInstall] = useState(null);
+    const [sampleDataBusy, setSampleDataBusy] = useState(null);
+    const [sampleDataMsg, setSampleDataMsg] = useState(null);
     // Local-install state (this runtime's own kernel — separate flow from cloud).
     const [localInstalls, setLocalInstalls] = useState([]);
     const [installingLocal, setInstallingLocal] = useState(false);
@@ -51,6 +71,29 @@ export function MarketplacePackagePage() {
         })();
         return () => { cancelled = true; };
     }, [packageId, localResult]);
+    // Seed cloud-install state so the primary CTA renders as "Installed" on
+    // first paint instead of inviting another install.
+    // NOTE: a tenant runtime (per-subdomain ObjectOS) has NO
+    // `defaultEnvironmentId` — but getCloudInstallationInfo's same-origin
+    // `/cloud-connection/installation` path resolves the env by hostname and
+    // does not need an explicit id (only the cloud-control-plane path needs
+    // one, and it no-ops on an empty id internally). So do NOT gate the probe
+    // on `currentEnvId` — that left the detail CTA stuck on "Install to
+    // cloud…" for every already-installed package in an env console.
+    useEffect(() => {
+        if (!packageId)
+            return;
+        const currentEnvId = getRuntimeConfig().defaultEnvironmentId ?? '';
+        let cancelled = false;
+        (async () => {
+            const info = await getCloudInstallationInfo(packageId, currentEnvId);
+            if (cancelled || !info)
+                return;
+            setCloudInstall(info);
+            setCloudInstalledVersion(info.version);
+        })();
+        return () => { cancelled = true; };
+    }, [packageId]);
     useEffect(() => {
         let cancelled = false;
         (async () => {
@@ -104,6 +147,26 @@ export function MarketplacePackagePage() {
                 return orgId ? adminOrgIds.has(String(orgId)) : false;
             });
             setEnvs(installable);
+            // Annotate each installable env with its current install state (best
+            // effort, parallel; a failed lookup just omits the annotation).
+            setEnvInstallMap({});
+            const pkgId = packageId;
+            if (pkgId)
+                void Promise.all(installable.map(async (env) => {
+                    try {
+                        const info = await getCloudInstallationInfo(pkgId, env.id);
+                        return info ? [env.id, info.version] : null;
+                    }
+                    catch {
+                        return null;
+                    }
+                })).then((pairs) => {
+                    const map = {};
+                    for (const pair of pairs)
+                        if (pair)
+                            map[pair[0]] = pair[1];
+                    setEnvInstallMap(map);
+                });
             if (list.length > 0 && installable.length === 0) {
                 setEnvsError(t('marketplace.install.noPermission'));
             }
@@ -130,7 +193,28 @@ export function MarketplacePackagePage() {
         setInstalling(true);
         setInstallResult(null);
         try {
-            await installPackage({ packageId, environmentId: selectedEnv, seedSampleData });
+            const installResp = await installPackage({ packageId, environmentId: selectedEnv, seedSampleData });
+            // Flip the primary CTA to "Installed" so the user sees the state
+            // change without a page refresh. Response includes the install
+            // row when the cloud handler echoes it; fall back to the package's
+            // latest version when it doesn't.
+            const installedVersion = installResp?.installation?.version
+                ?? data?.package?.latest_version?.version
+                ?? data?.versions?.[0]?.version
+                ?? '';
+            setCloudInstalledVersion(installedVersion || 'installed');
+            // Refresh the installation handle so reseed/purge can target it
+            // without the user having to reload the page.
+            try {
+                const currentEnvId = getRuntimeConfig().defaultEnvironmentId;
+                const envId = currentEnvId || selectedEnv;
+                if (envId) {
+                    const info = await getCloudInstallationInfo(packageId, envId);
+                    if (info)
+                        setCloudInstall(info);
+                }
+            }
+            catch { /* non-fatal */ }
             // Invalidate the metadata cache so the newly-installed app's
             // objects/views/menus are fetched fresh on next access. Without
             // this the user sees the new app in the switcher (the `app` list
@@ -161,6 +245,7 @@ export function MarketplacePackagePage() {
                 }
             }
             setInstallResult({ ok: true, message: t('marketplace.install.success') });
+            emitMetadataRefresh();
         }
         catch (e) {
             setInstallResult({ ok: false, message: e?.message ?? String(e) });
@@ -195,6 +280,7 @@ export function MarketplacePackagePage() {
                     name: data?.package ? localizePackage(data.package, language).displayName : result.manifestId,
                 }),
             });
+            emitMetadataRefresh();
         }
         catch (e) {
             const code = e?.code;
@@ -248,6 +334,124 @@ export function MarketplacePackagePage() {
             setInstallingLocal(false);
         }
     };
+    /**
+     * Re-seed sample data into the cloud environment for this install.
+     * Used when the user forgot to tick "Include sample data" during the
+     * original install. SeedLoaderService upserts by id, so calling this
+     * multiple times is safe.
+     */
+    const doReseedSampleData = async () => {
+        if (!cloudInstall)
+            return;
+        setSampleDataBusy('reseed');
+        setSampleDataMsg(null);
+        try {
+            const r = await reseedSampleData(cloudInstall.installationId);
+            if (r.ok) {
+                setCloudInstall({ ...cloudInstall, withSampleData: true });
+                setSampleDataMsg({
+                    ok: true,
+                    text: t('marketplace.detail.reseedQueued') || 'Sample data will be re-seeded on next environment access.',
+                });
+            }
+            else {
+                setSampleDataMsg({ ok: false, text: r.error || 'Re-seed failed' });
+            }
+        }
+        finally {
+            setSampleDataBusy(null);
+        }
+    };
+    /**
+     * Delete the sample data this package seeded. Use before going live
+     * with a clean production environment. Only records declared in the
+     * package's seed datasets are removed; user-added rows are untouched.
+     */
+    const doPurgeSampleData = async () => {
+        if (!cloudInstall)
+            return;
+        if (!confirm(t('marketplace.detail.purgeConfirm')
+            || 'Delete all sample records seeded by this package? User-added records will NOT be touched.')) {
+            return;
+        }
+        setSampleDataBusy('purge');
+        setSampleDataMsg(null);
+        try {
+            const r = await purgeSampleData(cloudInstall.installationId);
+            if (r.ok) {
+                setCloudInstall({ ...cloudInstall, withSampleData: false });
+                const removed = r.deleted ?? 0;
+                setSampleDataMsg({
+                    ok: true,
+                    text: removed > 0
+                        ? (t('marketplace.detail.purgeSuccess', { count: removed })
+                            || `Removed ${removed} sample record(s).`)
+                        : (t('marketplace.detail.purgeNoData') || 'No sample records found to purge.'),
+                });
+            }
+            else {
+                setSampleDataMsg({ ok: false, text: r.error || 'Purge failed' });
+            }
+        }
+        finally {
+            setSampleDataBusy(null);
+        }
+    };
+    const doReseedLocalSampleData = async () => {
+        if (!localInstall)
+            return;
+        setSampleDataBusy('reseed');
+        setSampleDataMsg(null);
+        try {
+            const r = await reseedLocalSampleData(localInstall.manifestId);
+            setLocalInstalls((prev) => prev.map((i) => i.manifestId === localInstall.manifestId ? { ...i, withSampleData: true } : i));
+            const inserted = r.inserted ?? 0;
+            const updated = r.updated ?? 0;
+            const errored = r.errors ?? 0;
+            const base = t('marketplace.detail.reseedLocalSuccess', { inserted, updated })
+                || `Sample data re-seeded (inserted=${inserted}, updated=${updated}).`;
+            // A reseed can land some rows and fail others (the server only hard-fails
+            // when ZERO rows write). Don't hide the partial failures behind a green
+            // success toast — flag them so the user knows the data is incomplete.
+            setSampleDataMsg(errored > 0
+                ? { ok: false, text: `${base} ${t('marketplace.detail.reseedPartialErrors', { count: errored }) || `(${errored} record(s) failed to write)`}` }
+                : { ok: true, text: base });
+        }
+        catch (err) {
+            setSampleDataMsg({ ok: false, text: err?.message || 'Re-seed failed' });
+        }
+        finally {
+            setSampleDataBusy(null);
+        }
+    };
+    const doPurgeLocalSampleData = async () => {
+        if (!localInstall)
+            return;
+        if (!confirm(t('marketplace.detail.purgeConfirm')
+            || 'Delete all sample records seeded by this package? User-added records will NOT be touched.')) {
+            return;
+        }
+        setSampleDataBusy('purge');
+        setSampleDataMsg(null);
+        try {
+            const r = await purgeLocalSampleData(localInstall.manifestId);
+            setLocalInstalls((prev) => prev.map((i) => i.manifestId === localInstall.manifestId ? { ...i, withSampleData: false } : i));
+            const removed = r.deleted ?? 0;
+            setSampleDataMsg({
+                ok: true,
+                text: removed > 0
+                    ? (t('marketplace.detail.purgeSuccess', { count: removed })
+                        || `Removed ${removed} sample record(s).`)
+                    : (t('marketplace.detail.purgeNoData') || 'No sample records found to purge.'),
+            });
+        }
+        catch (err) {
+            setSampleDataMsg({ ok: false, text: err?.message || 'Purge failed' });
+        }
+        finally {
+            setSampleDataBusy(null);
+        }
+    };
     if (loading) {
         return (_jsxs("div", { className: "mx-auto w-full max-w-6xl flex flex-col gap-6 p-4 sm:p-6", children: [_jsx(Skeleton, { className: "h-8 w-32" }), _jsx(Skeleton, { className: "h-16 w-full" }), _jsx(Skeleton, { className: "h-64 w-full" })] }));
     }
@@ -258,8 +462,16 @@ export function MarketplacePackagePage() {
     const loc = localizePackage(pkg, language);
     const latestVersion = pkg.latest_version?.version ?? data.versions[0]?.version ?? null;
     const localInstall = localInstalls.find((i) => i.manifestId === pkg.manifest_id) ?? null;
+    // PD4 (ADR-0025 §3.11): code-bearing packages must disclose + be acknowledged.
+    const containsCode = !!pkg.latest_version?.contains_code;
+    // ADR-0010 version lifecycle: installed cloud env is on an OLDER version than
+    // the package's latest published → surface an update affordance.
+    const cloudUpdateAvailable = !!cloudInstalledVersion
+        && cloudInstalledVersion !== 'installed'
+        && !!latestVersion
+        && cloudInstalledVersion !== latestVersion;
     const supportsLocal = getRuntimeConfig().features.installLocal;
-    const primaryDisabled = !latestVersion || installingLocal || installing;
+    const primaryDisabled = !latestVersion || installingLocal || installing || (!supportsLocal && !!cloudInstalledVersion && !cloudUpdateAvailable);
     const primaryAction = supportsLocal
         ? {
             label: installingLocal
@@ -270,7 +482,13 @@ export function MarketplacePackagePage() {
             onClick: doInstallLocal,
         }
         : {
-            label: installing ? t('marketplace.action.installing') : t('marketplace.action.installToCloud'),
+            label: installing
+                ? t('marketplace.action.installing')
+                : cloudInstalledVersion
+                    ? (cloudUpdateAvailable
+                        ? t('marketplace.action.updateTo', { defaultValue: 'Update', version: latestVersion })
+                        : t('marketplace.action.installed', { defaultValue: 'Installed' }))
+                    : t('marketplace.action.installToCloud'),
             onClick: openInstall,
         };
     const categoryLabel = pkg.category
@@ -278,8 +496,31 @@ export function MarketplacePackagePage() {
         : null;
     if (!isAdmin)
         return _jsx(MarketplaceAccessDenied, {});
-    return (_jsxs("div", { className: "mx-auto w-full max-w-6xl flex flex-col gap-6 p-4 sm:p-6", children: [_jsxs(Button, { variant: "ghost", size: "sm", className: "self-start -ml-2 text-muted-foreground hover:text-foreground", onClick: () => navigate(`${basePath}/system/marketplace`), children: [_jsx(ArrowLeft, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), t('marketplace.back')] }), _jsxs("div", { className: "flex items-start gap-5 flex-wrap sm:flex-nowrap rounded-2xl border bg-gradient-to-br from-primary/5 via-background to-background p-6 sm:p-8", children: [_jsx(PackageIcon, { iconUrl: pkg.icon_url, displayName: loc.displayName, manifestId: pkg.manifest_id, className: "h-20 w-20 rounded-2xl shadow-sm ring-1 ring-border shrink-0", initialClassName: "text-3xl font-bold" }), _jsxs("div", { className: "flex-1 min-w-0", children: [_jsxs("div", { className: "flex items-center gap-2 flex-wrap", children: [_jsx("h1", { className: "text-2xl sm:text-3xl font-bold tracking-tight truncate", children: loc.displayName || pkg.manifest_id }), pkg.homepage_url && (_jsxs("a", { href: pkg.homepage_url, target: "_blank", rel: "noopener noreferrer", className: "inline-flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground transition-colors", title: t('marketplace.detail.homepage'), children: [_jsx(ExternalLink, { className: "h-3.5 w-3.5", "aria-hidden": "true" }), _jsx("span", { className: "hidden sm:inline", children: t('marketplace.detail.homepage') })] }))] }), _jsxs("div", { className: "text-sm text-muted-foreground mt-2 flex flex-wrap items-center gap-1.5", children: [_jsx("code", { className: "font-mono text-xs px-1.5 py-0.5 rounded bg-muted", children: pkg.manifest_id }), latestVersion && _jsx(Badge, { variant: "outline", children: t('marketplace.versionBadge', { version: latestVersion }) }), pkg.publisher && pkg.publisher !== 'private' && (_jsx(Badge, { variant: pkg.publisher === 'objectstack' ? 'default' : 'secondary', children: pkg.publisher })), categoryLabel && _jsx(Badge, { variant: "outline", children: categoryLabel }), pkg.license && _jsx(Badge, { variant: "outline", className: "font-normal", children: pkg.license }), localInstall && (_jsxs(Badge, { variant: "default", className: "bg-green-600 hover:bg-green-600 gap-1", children: [_jsx(CheckCircle2, { className: "h-3 w-3", "aria-hidden": "true" }), t('marketplace.detail.installedV', { version: localInstall.version })] }))] }), loc.description && (_jsx("p", { className: "text-sm sm:text-base text-foreground/80 mt-3 max-w-2xl leading-relaxed", children: loc.description }))] }), _jsxs("div", { className: "flex items-center gap-2 shrink-0 self-start", children: [_jsxs(Button, { onClick: primaryAction.onClick, disabled: primaryDisabled, size: "lg", className: "min-w-[8rem]", children: [_jsx(Download, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), primaryAction.label] }), localInstall && (_jsxs(DropdownMenu, { children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsx(Button, { variant: "outline", size: "lg", className: "px-2.5", "aria-label": t('marketplace.detail.moreOptions'), children: _jsx(MoreHorizontal, { className: "h-4 w-4", "aria-hidden": "true" }) }) }), _jsx(DropdownMenuContent, { align: "end", className: "w-56", children: _jsxs(DropdownMenuItem, { onSelect: doUninstallLocal, disabled: installingLocal, className: "text-destructive focus:text-destructive", children: [_jsx(Trash2, { className: "h-4 w-4 mr-2", "aria-hidden": "true" }), t('marketplace.detail.uninstallFromRuntime')] }) })] }))] })] }), localResult && (_jsxs("div", { role: "status", className: `flex items-start gap-2 rounded-md border p-3 text-sm whitespace-pre-wrap ${localResult.ok ? 'border-green-500/30 bg-green-500/5 text-green-700 dark:text-green-400' : 'border-destructive/30 bg-destructive/5 text-destructive'}`, children: [localResult.ok ? _jsx(CheckCircle2, { className: "h-4 w-4 mt-0.5 shrink-0", "aria-hidden": "true" }) : _jsx(AlertCircle, { className: "h-4 w-4 mt-0.5 shrink-0", "aria-hidden": "true" }), _jsx("div", { className: "flex-1", children: localResult.message }), _jsx("button", { type: "button", className: "text-xs underline opacity-60 hover:opacity-100", onClick: () => setLocalResult(null), children: t('marketplace.action.dismiss') })] })), _jsxs("div", { className: "grid gap-4 lg:grid-cols-3", children: [_jsx("div", { className: "lg:col-span-2 space-y-4", children: _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx(CardTitle, { className: "text-base", children: t('marketplace.detail.about') }) }), _jsx(CardContent, { children: loc.readme ? (_jsx(MarkdownText, { source: loc.readme })) : (_jsx("p", { className: "text-sm text-muted-foreground", children: t('marketplace.detail.noReadme') })) })] }) }), _jsx("div", { className: "space-y-4", children: _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx(CardTitle, { className: "text-base", children: t('marketplace.detail.versions') }) }), _jsx(CardContent, { children: data.versions.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('marketplace.detail.noApprovedVersions') })) : (_jsx("ul", { className: "space-y-2", children: data.versions.map((v) => (_jsxs("li", { className: "flex items-center justify-between gap-2 text-sm", children: [_jsxs("span", { className: "flex items-center gap-1.5", children: [_jsx(Package, { className: "h-3.5 w-3.5 text-muted-foreground", "aria-hidden": "true" }), _jsxs("code", { className: "font-mono", children: ["v", v.version] }), v.is_prerelease && _jsx(Badge, { variant: "outline", className: "text-xs", children: t('marketplace.detail.prerelease') })] }), _jsx("span", { className: "text-xs text-muted-foreground", children: v.published_at ? new Date(v.published_at).toLocaleDateString() : '—' })] }, v.id))) })) })] }) })] }), _jsx(Dialog, { open: installOpen, onOpenChange: (o) => { setInstallOpen(o); if (!o)
-                    setInstallResult(null); }, children: _jsxs(DialogContent, { children: [_jsxs(DialogHeader, { children: [_jsx(DialogTitle, { children: t('marketplace.install.dialogTitle', { name: loc.displayName || pkg.manifest_id }) }), _jsx(DialogDescription, { children: getRuntimeConfig().defaultEnvironmentId
+    return (_jsxs("div", { className: "mx-auto w-full max-w-6xl flex flex-col gap-6 p-4 sm:p-6", children: [_jsxs(Button, { variant: "ghost", size: "sm", className: "self-start -ml-2 text-muted-foreground hover:text-foreground", onClick: () => navigate(`${basePath}/system/marketplace`), children: [_jsx(ArrowLeft, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), t('marketplace.back')] }), _jsxs("div", { className: "flex items-start gap-5 flex-wrap sm:flex-nowrap rounded-2xl border bg-gradient-to-br from-primary/5 via-background to-background p-6 sm:p-8", children: [_jsx(PackageIcon, { iconUrl: pkg.icon_url, displayName: loc.displayName, manifestId: pkg.manifest_id, className: "h-20 w-20 rounded-2xl shadow-sm ring-1 ring-border shrink-0", initialClassName: "text-3xl font-bold" }), _jsxs("div", { className: "flex-1 min-w-0", children: [_jsxs("div", { className: "flex items-center gap-2 flex-wrap", children: [_jsx("h1", { className: "text-2xl sm:text-3xl font-bold tracking-tight truncate", children: loc.displayName || pkg.manifest_id }), pkg.homepage_url && (_jsxs("a", { href: pkg.homepage_url, target: "_blank", rel: "noopener noreferrer", className: "inline-flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground transition-colors", title: t('marketplace.detail.homepage'), children: [_jsx(ExternalLink, { className: "h-3.5 w-3.5", "aria-hidden": "true" }), _jsx("span", { className: "hidden sm:inline", children: t('marketplace.detail.homepage') })] }))] }), _jsxs("div", { className: "text-sm text-muted-foreground mt-2 flex flex-wrap items-center gap-1.5", children: [_jsx("code", { className: "font-mono text-xs px-1.5 py-0.5 rounded bg-muted", children: pkg.manifest_id }), latestVersion && _jsx(Badge, { variant: "outline", children: t('marketplace.versionBadge', { version: latestVersion }) }), pkg.publisher && pkg.publisher !== 'private' && (_jsx(Badge, { variant: pkg.publisher === 'objectstack' ? 'default' : 'secondary', children: pkg.publisher })), categoryLabel && _jsx(Badge, { variant: "outline", children: categoryLabel }), pkg.license && _jsx(Badge, { variant: "outline", className: "font-normal", children: pkg.license }), localInstall && (_jsxs(Badge, { variant: "default", className: "bg-green-600 hover:bg-green-600 gap-1", children: [_jsx(CheckCircle2, { className: "h-3 w-3", "aria-hidden": "true" }), t('marketplace.detail.installedV', { version: localInstall.version })] })), !localInstall && cloudInstalledVersion && (_jsxs(Badge, { variant: "default", className: "bg-green-600 hover:bg-green-600 gap-1", children: [_jsx(CheckCircle2, { className: "h-3 w-3", "aria-hidden": "true" }), t('marketplace.detail.installedV', { version: cloudInstalledVersion })] })), cloudUpdateAvailable && (_jsxs(Badge, { variant: "default", className: "bg-amber-500 hover:bg-amber-500 gap-1", children: [_jsx(ArrowUpCircle, { className: "h-3 w-3", "aria-hidden": "true" }), t('marketplace.detail.updateAvailable', { defaultValue: 'Update available' }), " \u2192 v", latestVersion] }))] }), loc.description && (_jsx("p", { className: "text-sm sm:text-base text-foreground/80 mt-3 max-w-2xl leading-relaxed", children: loc.description }))] }), _jsxs("div", { className: "flex items-center gap-2 shrink-0 self-start", children: [_jsxs(Button, { onClick: primaryAction.onClick, disabled: primaryDisabled, size: "lg", className: "min-w-[8rem]", children: [_jsx(Download, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), primaryAction.label] }), localInstall && (_jsxs(DropdownMenu, { children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsx(Button, { variant: "outline", size: "lg", className: "px-2.5", "aria-label": t('marketplace.detail.moreOptions'), children: _jsx(MoreHorizontal, { className: "h-4 w-4", "aria-hidden": "true" }) }) }), _jsxs(DropdownMenuContent, { align: "end", className: "w-56", children: [_jsxs(DropdownMenuItem, { onSelect: doReseedLocalSampleData, disabled: sampleDataBusy !== null, children: [sampleDataBusy === 'reseed'
+                                                        ? _jsx(Loader2, { className: "h-4 w-4 mr-2 animate-spin", "aria-hidden": "true" })
+                                                        : _jsx(Database, { className: "h-4 w-4 mr-2", "aria-hidden": "true" }), localInstall.withSampleData
+                                                        ? (t('marketplace.detail.reseedAgain') || 'Re-seed sample data')
+                                                        : (t('marketplace.detail.addSampleData') || 'Add sample data')] }), _jsxs(DropdownMenuItem, { onSelect: doPurgeLocalSampleData, disabled: sampleDataBusy !== null || !localInstall.withSampleData, className: "text-destructive focus:text-destructive", children: [sampleDataBusy === 'purge'
+                                                        ? _jsx(Loader2, { className: "h-4 w-4 mr-2 animate-spin", "aria-hidden": "true" })
+                                                        : _jsx(Trash2, { className: "h-4 w-4 mr-2", "aria-hidden": "true" }), t('marketplace.detail.purgeSampleData') || 'Purge sample data'] }), _jsxs(DropdownMenuItem, { onSelect: doUninstallLocal, disabled: installingLocal, className: "text-destructive focus:text-destructive", children: [_jsx(Trash2, { className: "h-4 w-4 mr-2", "aria-hidden": "true" }), t('marketplace.detail.uninstallFromRuntime')] })] })] })), !localInstall && cloudInstall && !getRuntimeConfig().cloudUrl && (_jsxs(DropdownMenu, { children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsx(Button, { variant: "outline", size: "lg", className: "px-2.5", "aria-label": t('marketplace.detail.moreOptions') || 'More options', children: _jsx(MoreHorizontal, { className: "h-4 w-4", "aria-hidden": "true" }) }) }), _jsxs(DropdownMenuContent, { align: "end", className: "w-56", children: [_jsxs(DropdownMenuItem, { onSelect: doReseedSampleData, disabled: sampleDataBusy !== null, children: [sampleDataBusy === 'reseed'
+                                                        ? _jsx(Loader2, { className: "h-4 w-4 mr-2 animate-spin", "aria-hidden": "true" })
+                                                        : _jsx(Database, { className: "h-4 w-4 mr-2", "aria-hidden": "true" }), cloudInstall.withSampleData
+                                                        ? (t('marketplace.detail.reseedAgain') || 'Re-seed sample data')
+                                                        : (t('marketplace.detail.addSampleData') || 'Add sample data')] }), _jsxs(DropdownMenuItem, { onSelect: doPurgeSampleData, disabled: sampleDataBusy !== null || !cloudInstall.withSampleData, className: "text-destructive focus:text-destructive", children: [sampleDataBusy === 'purge'
+                                                        ? _jsx(Loader2, { className: "h-4 w-4 mr-2 animate-spin", "aria-hidden": "true" })
+                                                        : _jsx(Trash2, { className: "h-4 w-4 mr-2", "aria-hidden": "true" }), t('marketplace.detail.purgeSampleData') || 'Purge sample data'] })] })] }))] })] }), sampleDataMsg && (_jsxs("div", { role: "status", className: `flex items-start gap-2 rounded-md border p-3 text-sm ${sampleDataMsg.ok ? 'border-green-500/30 bg-green-500/5 text-green-700 dark:text-green-400' : 'border-destructive/30 bg-destructive/5 text-destructive'}`, children: [sampleDataMsg.ok ? _jsx(CheckCircle2, { className: "h-4 w-4 mt-0.5 shrink-0", "aria-hidden": "true" }) : _jsx(AlertCircle, { className: "h-4 w-4 mt-0.5 shrink-0", "aria-hidden": "true" }), _jsx("div", { className: "flex-1", children: sampleDataMsg.text }), _jsx("button", { type: "button", className: "text-xs underline opacity-60 hover:opacity-100", onClick: () => setSampleDataMsg(null), children: t('marketplace.action.dismiss') })] })), localResult && (_jsxs("div", { role: "status", className: `flex items-start gap-2 rounded-md border p-3 text-sm whitespace-pre-wrap ${localResult.ok ? 'border-green-500/30 bg-green-500/5 text-green-700 dark:text-green-400' : 'border-destructive/30 bg-destructive/5 text-destructive'}`, children: [localResult.ok ? _jsx(CheckCircle2, { className: "h-4 w-4 mt-0.5 shrink-0", "aria-hidden": "true" }) : _jsx(AlertCircle, { className: "h-4 w-4 mt-0.5 shrink-0", "aria-hidden": "true" }), _jsx("div", { className: "flex-1", children: localResult.message }), _jsx("button", { type: "button", className: "text-xs underline opacity-60 hover:opacity-100", onClick: () => setLocalResult(null), children: t('marketplace.action.dismiss') })] })), _jsxs("div", { className: "grid gap-4 lg:grid-cols-3", children: [_jsx("div", { className: "lg:col-span-2 space-y-4", children: _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx(CardTitle, { className: "text-base", children: t('marketplace.detail.about') }) }), _jsx(CardContent, { children: loc.readme ? (_jsx(MarkdownText, { source: loc.readme })) : (_jsx("p", { className: "text-sm text-muted-foreground", children: t('marketplace.detail.noReadme') })) })] }) }), _jsx("div", { className: "space-y-4", children: _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx(CardTitle, { className: "text-base", children: t('marketplace.detail.versions') }) }), _jsx(CardContent, { children: data.versions.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('marketplace.detail.noApprovedVersions') })) : (_jsx("ul", { className: "space-y-3", children: data.versions.map((v) => (_jsxs("li", { className: "space-y-1 text-sm", children: [_jsxs("div", { className: "flex items-center justify-between gap-2", children: [_jsxs("span", { className: "flex items-center gap-1.5", children: [_jsx(Package, { className: "h-3.5 w-3.5 text-muted-foreground", "aria-hidden": "true" }), _jsxs("code", { className: "font-mono", children: ["v", v.version] }), v.is_prerelease && _jsx(Badge, { variant: "outline", className: "text-xs", children: t('marketplace.detail.prerelease') })] }), _jsx("span", { className: "text-xs text-muted-foreground", children: v.published_at ? new Date(v.published_at).toLocaleDateString() : '\u2014' })] }), v.release_notes && v.release_notes.trim() && (_jsx("p", { className: "whitespace-pre-line pl-5 text-xs text-muted-foreground", children: v.release_notes.trim() }))] }, v.id))) })) })] }) })] }), _jsx(Dialog, { open: installOpen, onOpenChange: (o) => { setInstallOpen(o); if (!o) {
+                    setInstallResult(null);
+                    setAcknowledged(false);
+                } }, children: _jsxs(DialogContent, { children: [_jsxs(DialogHeader, { children: [_jsx(DialogTitle, { children: t('marketplace.install.dialogTitle', { name: loc.displayName || pkg.manifest_id }) }), _jsx(DialogDescription, { children: getRuntimeConfig().defaultEnvironmentId
                                         ? t('marketplace.install.dialogDescCurrent', { host: typeof window !== 'undefined' ? window.location.host : '' })
-                                        : t('marketplace.install.dialogDescPicker') })] }), envsLoading ? (_jsx(Skeleton, { className: "h-10 w-full" })) : envsError ? (_jsxs("div", { className: "rounded-md border border-amber-500/30 bg-amber-500/5 p-3 text-sm space-y-2", children: [_jsxs("div", { className: "flex items-start gap-2", children: [_jsx(AlertCircle, { className: "h-4 w-4 mt-0.5 text-amber-600", "aria-hidden": "true" }), _jsx("div", { className: "flex-1", children: envsError })] }), _jsx("a", { href: cloudInstallDeepLink(pkg.id), target: "_blank", rel: "noopener noreferrer", children: _jsxs(Button, { variant: "outline", size: "sm", className: "w-full", children: [_jsx(ExternalLink, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), t('marketplace.action.openOnCloud')] }) })] })) : getRuntimeConfig().defaultEnvironmentId ? (_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Checkbox, { id: "seed", checked: seedSampleData, onCheckedChange: (c) => setSeedSampleData(c === true) }), _jsx(Label, { htmlFor: "seed", className: "text-sm font-normal cursor-pointer", children: t('marketplace.install.includeSampleData') })] })) : envs.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('marketplace.install.noEnvs') })) : (_jsxs("div", { className: "space-y-4", children: [_jsxs("div", { className: "space-y-1.5", children: [_jsx(Label, { htmlFor: "env-select", children: t('marketplace.install.environment') }), _jsxs(Select, { value: selectedEnv, onValueChange: setSelectedEnv, children: [_jsx(SelectTrigger, { id: "env-select", children: _jsx(SelectValue, { placeholder: t('marketplace.install.environmentPlaceholder') }) }), _jsx(SelectContent, { children: envs.map((e) => (_jsxs(SelectItem, { value: e.id, children: [e.display_name || e.hostname || e.id, e.plan && _jsxs("span", { className: "text-muted-foreground", children: [" \u00B7 ", e.plan] })] }, e.id))) })] })] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Checkbox, { id: "seed", checked: seedSampleData, onCheckedChange: (c) => setSeedSampleData(c === true) }), _jsx(Label, { htmlFor: "seed", className: "text-sm font-normal cursor-pointer", children: t('marketplace.install.includeSampleData') })] })] })), installResult && (_jsx("div", { className: `rounded-md border p-3 text-sm ${installResult.ok ? 'border-green-500/30 bg-green-500/5 text-green-700' : 'border-destructive/30 bg-destructive/5 text-destructive'}`, children: installResult.message })), _jsxs(DialogFooter, { children: [_jsx(Button, { variant: "outline", onClick: () => setInstallOpen(false), children: t('marketplace.action.close') }), !envsError && (_jsx(Button, { onClick: doInstall, disabled: !selectedEnv || installing || installResult?.ok === true, children: installing ? t('marketplace.action.installing') : t('marketplace.action.install') }))] })] }) })] }));
+                                        : t('marketplace.install.dialogDescPicker') })] }), envsLoading ? (_jsx(Skeleton, { className: "h-10 w-full" })) : envsError ? (_jsxs("div", { className: "rounded-md border border-amber-500/30 bg-amber-500/5 p-3 text-sm space-y-2", children: [_jsxs("div", { className: "flex items-start gap-2", children: [_jsx(AlertCircle, { className: "h-4 w-4 mt-0.5 text-amber-600", "aria-hidden": "true" }), _jsx("div", { className: "flex-1", children: envsError })] }), _jsx("a", { href: cloudInstallDeepLink(pkg.id), target: "_blank", rel: "noopener noreferrer", children: _jsxs(Button, { variant: "outline", size: "sm", className: "w-full", children: [_jsx(ExternalLink, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), t('marketplace.action.openOnCloud')] }) })] })) : getRuntimeConfig().defaultEnvironmentId ? (_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Checkbox, { id: "seed", checked: seedSampleData, onCheckedChange: (c) => setSeedSampleData(c === true) }), _jsx(Label, { htmlFor: "seed", className: "text-sm font-normal cursor-pointer", children: t('marketplace.install.includeSampleData') })] })) : envs.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('marketplace.install.noEnvs') })) : (_jsxs("div", { className: "space-y-4", children: [_jsxs("div", { className: "space-y-1.5", children: [_jsx(Label, { htmlFor: "env-select", children: t('marketplace.install.environment') }), _jsxs(Select, { value: selectedEnv, onValueChange: setSelectedEnv, children: [_jsx(SelectTrigger, { id: "env-select", children: _jsx(SelectValue, { placeholder: t('marketplace.install.environmentPlaceholder') }) }), _jsx(SelectContent, { children: envs.map((e) => {
+                                                        const installedHere = envInstallMap[e.id];
+                                                        const hasUpdate = !!installedHere && !!latestVersion
+                                                            && installedHere !== 'installed' && installedHere !== latestVersion;
+                                                        return (_jsxs(SelectItem, { value: e.id, children: [e.display_name || e.hostname || e.id, e.plan && _jsxs("span", { className: "text-muted-foreground", children: [" \u00B7 ", e.plan] }), installedHere && (hasUpdate
+                                                                    ? _jsxs("span", { className: "text-amber-600", children: [" \u00B7 ", t('marketplace.install.updateTo', { defaultValue: 'Update \u2192 v{{version}}', version: latestVersion })] })
+                                                                    : _jsxs("span", { className: "text-muted-foreground", children: [" \u00B7 ", t('marketplace.install.installedVersion', { defaultValue: 'Installed v{{version}}', version: installedHere })] }))] }, e.id));
+                                                    }) })] })] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Checkbox, { id: "seed", checked: seedSampleData, onCheckedChange: (c) => setSeedSampleData(c === true) }), _jsx(Label, { htmlFor: "seed", className: "text-sm font-normal cursor-pointer", children: t('marketplace.install.includeSampleData') })] })] })), containsCode && !envsError && (_jsxs("div", { className: "space-y-3", children: [_jsx(PluginDisclosure, { version: pkg.latest_version }), _jsxs("div", { className: "flex items-start gap-2", children: [_jsx(Checkbox, { id: "ack-perms", checked: acknowledged, onCheckedChange: (c) => setAcknowledged(c === true) }), _jsx(Label, { htmlFor: "ack-perms", className: "text-sm font-normal cursor-pointer leading-snug", children: t('marketplace.disclosure.acknowledge', {
+                                                defaultValue: 'I understand this package runs code and grants the permissions above.',
+                                            }) })] })] })), installResult && (_jsx("div", { className: `rounded-md border p-3 text-sm ${installResult.ok ? 'border-green-500/30 bg-green-500/5 text-green-700' : 'border-destructive/30 bg-destructive/5 text-destructive'}`, children: installResult.message })), _jsxs(DialogFooter, { children: [_jsx(Button, { variant: "outline", onClick: () => setInstallOpen(false), children: t('marketplace.action.close') }), !envsError && (_jsx(Button, { onClick: doInstall, disabled: !selectedEnv || installing || installResult?.ok === true || (containsCode && !acknowledged), children: installing ? t('marketplace.action.installing') : t('marketplace.action.install') }))] })] }) })] }));
 }

package/dist/console/marketplace/MarketplacePage.d.ts

@@ -5,4 +5,4 @@
  * `/api/v1/marketplace/packages` proxy (which forwards to the configured
  * cloud control plane). Click-through opens the package detail page.
  */
-export declare function MarketplacePage(): import("react/jsx-runtime").JSX.Element;
+export declare function MarketplacePage(): import("react").JSX.Element;

package/dist/console/marketplace/MarketplacePage.js

@@ -15,7 +15,9 @@ import { useObjectTranslation } from '@object-ui/i18n';
 import { PackageIcon } from './PackageIcon';
 import { MarketplaceAccessDenied } from './MarketplaceAccessDenied';
 import { localizePackage } from './usePackageL10n';
-import { listMarketplacePackages, listLocalInstalls, } from './marketplaceApi';
+import { listMarketplacePackages, listLocalInstalls, listOrgPackages, listInstalledPackages, installPackage, installLocal, } from './marketplaceApi';
+import { getRuntimeConfig } from '../../runtime-config';
+import { emitMetadataRefresh } from '../../assistant/assistantBus';
 /**
  * Format a published-at timestamp as a localized relative string.
  *
@@ -64,6 +66,12 @@ export function MarketplacePage() {
     const [query, setQuery] = useState('');
     const [category, setCategory] = useState('');
     const [installed, setInstalled] = useState([]);
+    // ADR-0007 step ②: the org's own packages (visibility org/private), shown in
+    // a "Your organization" section and installable inline (no public listing).
+    const [orgItems, setOrgItems] = useState([]);
+    const [orgInstalling, setOrgInstalling] = useState(null);
+    const [orgMsg, setOrgMsg] = useState(null);
+    const [installedIds, setInstalledIds] = useState(new Set());
     const installedByManifestId = useMemo(() => {
         const m = new Map();
         for (const e of installed)
@@ -74,12 +82,21 @@ export function MarketplacePage() {
         setLoading(true);
         setError(null);
         try {
-            const [resp, installs] = await Promise.all([
+            const [resp, installs, org, cloudInstalled] = await Promise.all([
                 listMarketplacePackages({ limit: 100 }),
                 listLocalInstalls(),
+                listOrgPackages(),
+                listInstalledPackages(),
             ]);
             setItems(resp.items ?? []);
             setInstalled(installs);
+            setOrgItems(org.items ?? []);
+            const ids = new Set();
+            for (const e of installs)
+                ids.add(e.manifestId);
+            for (const e of cloudInstalled.items)
+                ids.add(e.manifestId);
+            setInstalledIds(ids);
         }
         catch (e) {
             setError(e?.message ?? String(e));
@@ -90,6 +107,41 @@ export function MarketplacePage() {
         }
     };
     useEffect(() => { void load(); }, []);
+    // Install an org package into the current environment (ADR-0007 step ②).
+    //
+    // Two deployment shapes, two semantically-correct routes:
+    //   - install-local runtimes (single-env / self-hosted, runtime-config
+    //     features.installLocal=true): the runtime OWNS its desired state —
+    //     install merges into ITS kernel via /marketplace/install-local; the
+    //     bound oscc_ credential lets it fetch the org manifest (ADR-0008).
+    //     The control-plane /cloud-connection/install path would 401 here
+    //     (no env→cloud service key) and is the wrong semantics anyway.
+    //   - cloud-managed environments: desired state lives in the control
+    //     plane — /cloud-connection/install resolves the env by hostname.
+    const doOrgInstall = async (pkg) => {
+        setOrgInstalling(pkg.id);
+        setOrgMsg(null);
+        try {
+            if (getRuntimeConfig().features.installLocal) {
+                await installLocal({ packageId: pkg.manifest_id || pkg.id, versionId: 'latest' });
+            }
+            else {
+                await installPackage({ packageId: pkg.id, environmentId: '', seedSampleData: true });
+            }
+            setOrgMsg({ ok: true, text: t('marketplace.org.installed', { defaultValue: `Installed ${pkg.display_name}`, name: pkg.display_name }) });
+            await load();
+            // The install merged a package into the live registry. Pulse every
+            // mounted MetadataProvider so the new app appears in the nav (and its
+            // objects/views resolve) without a manual browser refresh.
+            emitMetadataRefresh();
+        }
+        catch (e) {
+            setOrgMsg({ ok: false, text: e?.message ?? String(e) });
+        }
+        finally {
+            setOrgInstalling(null);
+        }
+    };
     const categories = useMemo(() => {
         const s = new Set();
         for (const it of items) {
@@ -123,7 +175,12 @@ export function MarketplacePage() {
                                         ? t('marketplace.installedCount', { count: installed.length })
                                         : t('marketplace.installed')] }), _jsxs(Button, { variant: "outline", size: "sm", onClick: () => void load(), disabled: loading, children: [_jsx(RefreshCcw, { className: "h-4 w-4 mr-1.5", "aria-hidden": "true" }), t('marketplace.refresh')] })] })] }), _jsxs("div", { className: "flex flex-col sm:flex-row gap-3", children: [_jsxs("div", { className: "relative flex-1", children: [_jsx(Search, { className: "absolute left-3 top-1/2 -translate-y-1/2 h-4 w-4 text-muted-foreground", "aria-hidden": "true" }), _jsx(Input, { value: query, onChange: (e) => setQuery(e.target.value), placeholder: t('marketplace.searchPlaceholder'), className: "pl-9", "aria-label": t('marketplace.searchAria') })] }), categories.length > 0 && (_jsxs("div", { className: "flex flex-wrap gap-1.5", children: [_jsx(Button, { size: "sm", variant: category === '' ? 'default' : 'outline', onClick: () => setCategory(''), children: t('marketplace.all') }), categories.map((cat) => (_jsx(Button, { size: "sm", variant: category === cat ? 'default' : 'outline', onClick: () => setCategory(cat), children: categoryLabel(cat) }, cat)))] }))] }), error && (_jsxs("div", { className: "flex items-start gap-3 rounded-md border border-destructive/30 bg-destructive/5 p-4 text-sm", children: [_jsx(AlertCircle, { className: "h-4 w-4 mt-0.5 text-destructive", "aria-hidden": "true" }), _jsxs("div", { children: [_jsx("div", { className: "font-medium text-destructive", children: t('marketplace.load.failed') }), _jsx("div", { className: "text-muted-foreground mt-1", children: error }), _jsx("div", { className: "text-xs text-muted-foreground mt-2", 
                                 // Hint message contains an inline <code> tag — render translated HTML safely from our own bundle.
-                                dangerouslySetInnerHTML: { __html: t('marketplace.load.failedHint') } })] })] })), loading && items.length === 0 ? (_jsx("div", { className: "grid gap-4 sm:grid-cols-2 lg:grid-cols-3", children: Array.from({ length: 6 }).map((_, i) => (_jsxs(Card, { children: [_jsxs(CardHeader, { className: "pb-2", children: [_jsx(Skeleton, { className: "h-10 w-10 rounded-lg mb-2" }), _jsx(Skeleton, { className: "h-5 w-3/4" }), _jsx(Skeleton, { className: "h-4 w-1/2 mt-1" })] }), _jsx(CardContent, { children: _jsx(Skeleton, { className: "h-12 w-full" }) })] }, i))) })) : filtered.length === 0 ? (_jsx("div", { className: "text-center py-12 text-sm text-muted-foreground", children: items.length === 0 ? t('marketplace.noApprovedYet') : t('marketplace.noMatchFilters') })) : (_jsx("div", { className: "grid gap-4 sm:grid-cols-2 lg:grid-cols-3", children: filtered.map((pkg) => {
+                                dangerouslySetInnerHTML: { __html: t('marketplace.load.failedHint') } })] })] })), orgItems.length > 0 && (_jsxs("section", { className: "flex flex-col gap-3", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Store, { className: "h-5 w-5 text-primary", "aria-hidden": "true" }), _jsx("h2", { className: "text-sm font-semibold", children: t('marketplace.org.heading', { defaultValue: 'Your organization' }) }), _jsx(Badge, { variant: "secondary", className: "text-xs", children: orgItems.length })] }), orgMsg && (_jsx("div", { className: `rounded-md border p-3 text-sm ${orgMsg.ok ? 'border-green-500/30 bg-green-500/5 text-green-700 dark:text-green-400' : 'border-destructive/30 bg-destructive/5 text-destructive'}`, children: orgMsg.text })), _jsx("div", { className: "grid gap-4 sm:grid-cols-2 lg:grid-cols-3", children: orgItems.map((pkg) => {
+                            const isInstalled = installedIds.has(pkg.manifest_id);
+                            return (_jsxs(Card, { className: "flex flex-col", "data-testid": `org-card-${pkg.manifest_id}`, children: [_jsxs(CardHeader, { className: "flex flex-row items-start gap-3 pb-2", children: [_jsx(PackageIcon, { iconUrl: pkg.icon_url, displayName: pkg.display_name, manifestId: pkg.manifest_id }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx(CardTitle, { className: "text-base truncate", children: pkg.display_name }), _jsx(CardDescription, { className: "text-xs truncate", children: _jsx("code", { className: "font-mono", children: pkg.manifest_id }) })] }), pkg.visibility && (_jsx(Badge, { variant: "outline", className: "shrink-0 text-xs", children: pkg.visibility }))] }), _jsxs(CardContent, { className: "flex-1 flex flex-col gap-2", children: [_jsx("p", { className: "text-sm text-muted-foreground line-clamp-2", children: pkg.description || t('marketplace.noDescription') }), _jsxs("div", { className: "flex items-center gap-2 mt-auto pt-2 flex-wrap", children: [pkg.latest_version && (_jsxs(Badge, { variant: "outline", className: "text-xs", children: [_jsx(Package, { className: "h-3 w-3 mr-1", "aria-hidden": "true" }), t('marketplace.versionBadge', { version: pkg.latest_version })] })), _jsx("div", { className: "ml-auto", children: isInstalled ? (_jsxs(Badge, { variant: "default", className: "text-xs bg-green-600 hover:bg-green-600", children: [_jsx(CheckCircle2, { className: "h-3 w-3 mr-1", "aria-hidden": "true" }), t('marketplace.org.installedBadge', { defaultValue: 'Installed' })] })) : (_jsx(Button, { size: "sm", onClick: () => void doOrgInstall(pkg), disabled: orgInstalling === pkg.id, children: orgInstalling === pkg.id
+                                                                ? t('marketplace.org.installing', { defaultValue: 'Installing…' })
+                                                                : t('marketplace.org.install', { defaultValue: 'Install' }) })) })] })] })] }, pkg.id));
+                        }) }), _jsx("div", { className: "border-b pt-2" })] })), loading && items.length === 0 ? (_jsx("div", { className: "grid gap-4 sm:grid-cols-2 lg:grid-cols-3", children: Array.from({ length: 6 }).map((_, i) => (_jsxs(Card, { children: [_jsxs(CardHeader, { className: "pb-2", children: [_jsx(Skeleton, { className: "h-10 w-10 rounded-lg mb-2" }), _jsx(Skeleton, { className: "h-5 w-3/4" }), _jsx(Skeleton, { className: "h-4 w-1/2 mt-1" })] }), _jsx(CardContent, { children: _jsx(Skeleton, { className: "h-12 w-full" }) })] }, i))) })) : filtered.length === 0 ? (_jsx("div", { className: "text-center py-12 text-sm text-muted-foreground", children: items.length === 0 ? t('marketplace.noApprovedYet') : t('marketplace.noMatchFilters') })) : (_jsx("div", { className: "grid gap-4 sm:grid-cols-2 lg:grid-cols-3", children: filtered.map((pkg) => {
                     const localEntry = installedByManifestId.get(pkg.manifest_id);
                     const loc = localizePackage(pkg, language);
                     return (_jsxs(Card, { className: "cursor-pointer transition-colors hover:bg-accent/50 flex flex-col", onClick: () => navigate(`${basePath}/system/marketplace/${pkg.id}`), role: "link", tabIndex: 0, onKeyDown: (e) => {

package/dist/console/marketplace/PackageIcon.d.ts

@@ -16,4 +16,4 @@ export interface PackageIconProps {
     /** Text size for the initial-letter fallback. */
     initialClassName?: string;
 }
-export declare function PackageIcon({ iconUrl, displayName, manifestId, className, initialClassName, }: PackageIconProps): import("react/jsx-runtime").JSX.Element;
+export declare function PackageIcon({ iconUrl, displayName, manifestId, className, initialClassName, }: PackageIconProps): import("react").JSX.Element;

package/dist/console/marketplace/PluginDisclosure.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Plugin permission disclosure (ADR-0025 PD4 §3.5 / §3.11).
+ *
+ * Rendered in the install dialog for a code-bearing package. Shows what the
+ * user is consenting to BEFORE install: that the package contains code, the
+ * trust tier it runs under, whether it is signed / marketplace-reviewed, and
+ * the exact structured permission set it requests. The control plane exposes
+ * verification STATUS only (never raw signatures); see cloud
+ * marketplace.projectVersion.
+ */
+import type { MarketplacePackageVersion } from './marketplaceApi';
+export declare function PluginDisclosure({ version }: {
+    version?: MarketplacePackageVersion | null;
+}): import("react").JSX.Element | null;

package/dist/console/marketplace/PluginDisclosure.js

@@ -0,0 +1,38 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Plugin permission disclosure (ADR-0025 PD4 §3.5 / §3.11).
+ *
+ * Rendered in the install dialog for a code-bearing package. Shows what the
+ * user is consenting to BEFORE install: that the package contains code, the
+ * trust tier it runs under, whether it is signed / marketplace-reviewed, and
+ * the exact structured permission set it requests. The control plane exposes
+ * verification STATUS only (never raw signatures); see cloud
+ * marketplace.projectVersion.
+ */
+import { Badge } from '@object-ui/components';
+import { Boxes, CheckCircle2, Code2, FolderTree, Network, ShieldAlert, ShieldCheck, Webhook } from 'lucide-react';
+import { useObjectTranslation } from '@object-ui/i18n';
+const RUNTIME_FALLBACK = {
+    node: 'In-process · full trust',
+    sandbox: 'Sandboxed',
+    worker: 'Out-of-process',
+};
+function PermissionGroup({ icon: Icon, label, items, }) {
+    if (!items || items.length === 0)
+        return null;
+    return (_jsxs("div", { className: "flex items-start gap-2", children: [_jsx(Icon, { className: "h-3.5 w-3.5 mt-0.5 text-muted-foreground shrink-0", "aria-hidden": "true" }), _jsxs("div", { className: "flex-1 min-w-0", children: [_jsx("div", { className: "text-xs font-medium", children: label }), _jsx("div", { className: "flex flex-wrap gap-1 mt-0.5", children: items.map((it) => (_jsx("code", { className: "font-mono text-[11px] px-1 py-0.5 rounded bg-muted break-all", children: it }, it))) })] })] }));
+}
+export function PluginDisclosure({ version }) {
+    const { t } = useObjectTranslation();
+    if (!version?.contains_code)
+        return null;
+    const perms = version.permissions ?? {};
+    const hasAny = (perms.services?.length ?? 0) +
+        (perms.hooks?.length ?? 0) +
+        (perms.network?.length ?? 0) +
+        (perms.fs?.length ?? 0) >
+        0;
+    return (_jsxs("div", { className: "rounded-md border border-amber-500/30 bg-amber-500/5 p-3 space-y-3 text-sm", children: [_jsxs("div", { className: "flex items-center gap-2 font-medium", children: [_jsx(Code2, { className: "h-4 w-4 text-amber-600 shrink-0", "aria-hidden": "true" }), t('marketplace.disclosure.containsCode', { defaultValue: 'This package contains code' })] }), _jsxs("div", { className: "flex flex-wrap items-center gap-1.5", children: [version.runtime && (_jsx(Badge, { variant: "outline", children: t(`marketplace.disclosure.runtime.${version.runtime}`, {
+                            defaultValue: RUNTIME_FALLBACK[version.runtime] ?? version.runtime,
+                        }) })), version.platform_verified ? (_jsxs(Badge, { variant: "outline", className: "gap-1 border-green-500/40 text-green-700 dark:text-green-400", children: [_jsx(ShieldCheck, { className: "h-3 w-3", "aria-hidden": "true" }), t('marketplace.disclosure.reviewed', { defaultValue: 'Reviewed & approved' })] })) : (_jsxs(Badge, { variant: "outline", className: "gap-1 border-amber-500/40 text-amber-700 dark:text-amber-400", children: [_jsx(ShieldAlert, { className: "h-3 w-3", "aria-hidden": "true" }), t('marketplace.disclosure.unreviewed', { defaultValue: 'Not yet reviewed' })] })), version.signed && (_jsxs(Badge, { variant: "outline", className: "gap-1", children: [_jsx(CheckCircle2, { className: "h-3 w-3", "aria-hidden": "true" }), t('marketplace.disclosure.signed', { defaultValue: 'Signed' })] }))] }), hasAny ? (_jsxs("div", { className: "space-y-2", children: [_jsx("div", { className: "text-xs text-muted-foreground", children: t('marketplace.disclosure.grantsIntro', { defaultValue: 'On install, this package will be granted:' }) }), _jsx(PermissionGroup, { icon: Boxes, label: t('marketplace.disclosure.services', { defaultValue: 'Platform services' }), items: perms.services ?? undefined }), _jsx(PermissionGroup, { icon: Webhook, label: t('marketplace.disclosure.hooks', { defaultValue: 'Lifecycle hooks' }), items: perms.hooks ?? undefined }), _jsx(PermissionGroup, { icon: Network, label: t('marketplace.disclosure.network', { defaultValue: 'Network access' }), items: perms.network ?? undefined }), _jsx(PermissionGroup, { icon: FolderTree, label: t('marketplace.disclosure.fs', { defaultValue: 'Filesystem access' }), items: perms.fs ?? undefined })] })) : (_jsx("div", { className: "text-xs text-muted-foreground", children: t('marketplace.disclosure.noPermissions', { defaultValue: 'Requests no special permissions.' }) }))] }));
+}