@object-ui/app-shell 7.0.0 → 7.1.0

package/dist/layout/ConsoleFloatingChatbot.js

@@ -24,6 +24,7 @@ import { useAssistant, requestAssistantReview, emitCanvasInvalidate } from '../a
 import { fetchPendingDraftCount } from '../preview/draftStatus';
 import { getRuntimeConfig } from '../runtime-config';
 import { cloudPricingDeepLink } from '../console/marketplace/marketplaceApi';
+import { shouldShowAgentPicker } from './agentPicker';
 /**
  * Display names for the two built-in platform agents (ADR-0063: `ask` / `build`,
  * bound by surface). The backend ships English labels ("Assistant" / "Builder");
@@ -73,6 +74,9 @@ function buildChatLocale(language, appLabel, agentName, fallbackAgentLabel, obje
                 toolRunning: '运行中',
                 toolAwaitingApproval: '等待确认',
                 toolFailed: '失败',
+                connectionWaiting: '正在等待服务器响应…',
+                connectionStalledLabel: '仍在处理中…',
+                connectionOfflineLabel: '网络已断开，正在重连…',
                 toolDetailsHidden: '已隐藏工具参数和原始结果，仅保留过程摘要。',
                 copy: '复制',
                 copied: '已复制',
@@ -99,6 +103,7 @@ function buildChatLocale(language, appLabel, agentName, fallbackAgentLabel, obje
             planApproveHint: '回复以确认或调整该方案。',
             planApprove: '开始搭建',
             planAdjust: '调整方案',
+            planBuilt: '已搭建',
             planApproveMessage: '就按这个方案搭建吧。',
             planApproveDefaultsMessage: '就按你的合理假设直接搭建，未决问题用默认即可。',
             planAnswer: (question, option) => `关于「${question}」，我选择「${option}」。`,
@@ -128,6 +133,9 @@ function buildChatLocale(language, appLabel, agentName, fallbackAgentLabel, obje
             toolRunning: 'Running',
             toolAwaitingApproval: 'Awaiting approval',
             toolFailed: 'Failed',
+            connectionWaiting: 'Waiting for server…',
+            connectionStalledLabel: 'Still working…',
+            connectionOfflineLabel: 'Connection lost — reconnecting…',
             toolDetailsHidden: 'Tool inputs and raw results are hidden in this view.',
             copy: 'Copy',
             copied: 'Copied',
@@ -154,6 +162,7 @@ function buildChatLocale(language, appLabel, agentName, fallbackAgentLabel, obje
         planApproveHint: 'Reply to approve or adjust this plan.',
         planApprove: 'Build it',
         planAdjust: 'Adjust',
+        planBuilt: 'Built',
         planApproveMessage: 'Looks good — build it as proposed.',
         planApproveDefaultsMessage: 'Build it with your best assumptions; use sensible defaults for the open questions.',
         planAnswer: (question, option) => `For "${question}", go with: ${option}.`,
@@ -321,10 +330,10 @@ function ChatbotInner({ appLabel, appName, objects, agents, agentsLoading, activ
             sendMessage(prompt);
         },
     });
-    // Agent switcher — deliberately hidden by default. End users get the
-    // single agent bound to their app (Studio → metadata_assistant, others
-    // → data_chat) and are never asked to choose. Only surfaces when the
-    // host explicitly opts in AND there is more than one agent to pick.
+    // Agent switcher — Ask ↔ Build (plus any custom agents). Restrained by
+    // design: end users bound to a single agent never see it. `showAgentPicker`
+    // is true when AI development is unlocked (catalog serves both ask & build)
+    // or forced on; it still needs more than one agent to be a real choice.
     const headerExtra = showAgentPicker && agents.length > 1 ? (_jsxs(Select, { value: activeAgent, onValueChange: onAgentChange, disabled: agentsLoading, children: [_jsx(SelectTrigger, { className: "h-7 w-[180px] text-xs", "data-testid": "floating-chatbot-agent-picker", children: _jsx(SelectValue, { placeholder: "Choose agent..." }) }), _jsx(SelectContent, { align: "end", children: agents.map((agent) => (_jsxs(SelectItem, { value: agent.name, className: "text-xs", children: [_jsx("span", { className: "font-medium", children: agent.label }), agent.description ? (_jsx("span", { className: "block text-muted-foreground text-[10px] truncate max-w-[220px]", children: agent.description })) : null] }, agent.name))) })] })) : null;
     // Share-link control. Sits to the left of the panel's built-in
     // fullscreen / close buttons so users can mint a public link without
@@ -423,7 +432,7 @@ function ChatbotInner({ appLabel, appName, objects, agents, agentsLoading, activ
                         });
                         return false;
                     }
-                }, publishDraftsLabel: locale.publishDrafts, nextStepsLabel: locale.nextSteps, planTitleLabel: locale.planTitle, planQuestionsLabel: locale.planQuestions, planAssumptionsLabel: locale.planAssumptions, planApproveHintLabel: locale.planApproveHint, planApproveLabel: locale.planApprove, planAdjustLabel: locale.planAdjust, planApproveMessage: locale.planApproveMessage, planApproveDefaultsMessage: locale.planApproveDefaultsMessage, planAnswerMessage: locale.planAnswer, publishedLabel: locale.published, 
+                }, publishDraftsLabel: locale.publishDrafts, nextStepsLabel: locale.nextSteps, planTitleLabel: locale.planTitle, planQuestionsLabel: locale.planQuestions, planAssumptionsLabel: locale.planAssumptions, planApproveHintLabel: locale.planApproveHint, planApproveLabel: locale.planApprove, planAdjustLabel: locale.planAdjust, planBuiltLabel: locale.planBuilt, planApproveMessage: locale.planApproveMessage, planApproveDefaultsMessage: locale.planApproveDefaultsMessage, planAnswerMessage: locale.planAnswer, publishedLabel: locale.published, 
                 // Self-use "magic moment": when the plan enables it, auto-publish the
                 // drafted app the instant the agent finishes — the success path above
                 // then navigates straight to the live app, so "build" lands the user on
@@ -434,10 +443,18 @@ export default function ConsoleFloatingChatbot({ appLabel, appName, objects, api
     const apiBase = React.useMemo(() => resolveApiBase(apiBaseProp), [apiBaseProp]);
     const env = import.meta.env ?? {};
     const envDefaultAgent = env.VITE_AI_DEFAULT_AGENT;
-    // Power-user / admin escape hatch: force the picker on globally without
-    // touching app metadata.
-    const showAgentPicker = showAgentPickerProp ?? env.VITE_AI_SHOW_AGENT_PICKER === 'true';
     const { agents, isLoading: agentsLoading, error: agentsError } = useAgents({ apiBase });
+    // Reveal the Build/Ask switcher only when AI development is unlocked for this
+    // viewer — the live catalog serves BOTH an `ask` and a `build` agent and
+    // authoring isn't deployment-disabled. Pure end-user apps (only `ask`) stay
+    // clean; builders can flip "ask about my data" ↔ "extend my app" inline. An
+    // explicit prop or `VITE_AI_SHOW_AGENT_PICKER` still forces it. See agentPicker.
+    const showAgentPicker = shouldShowAgentPicker({
+        agents,
+        showAgentPickerProp,
+        envOptIn: env.VITE_AI_SHOW_AGENT_PICKER === 'true',
+        aiStudioEnabled: getRuntimeConfig().features.aiStudio !== false,
+    });
     const [activeAgent, setActiveAgent] = React.useState(undefined);
     React.useEffect(() => {
         if (!activeAgent && agents.length > 0) {

package/dist/layout/ContextSelectors.js

@@ -19,6 +19,16 @@ import { useLocation, useNavigate } from 'react-router-dom';
 import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue, } from '@object-ui/components';
 import { getIcon } from '../utils/getIcon';
 import { resolveI18nLabel } from '../utils';
+// Local/Custom scope sentinel — kept inline (not imported from metadata-admin)
+// so this layout module never forms an import cycle with the metadata-admin
+// views. Mirrors `LOCAL_PACKAGE_ID` in views/metadata-admin/package-scope.ts.
+const LOCAL_SCOPE_ID = 'sys_metadata';
+function localScopeLabel() {
+    const lang = (typeof document !== 'undefined' && document.documentElement?.lang) ||
+        (typeof navigator !== 'undefined' && navigator.language) ||
+        '';
+    return /^zh/i.test(lang) ? '本地 / 自定义（本环境）' : 'Local / Custom (this env)';
+}
 const ALL_SENTINEL = '__all__';
 /** Read a (possibly dotted) property path off a row, e.g. `manifest.id`. */
 function getByPath(row, key) {
@@ -80,43 +90,56 @@ function useSelectorOptions(def) {
     const labelKey = def.optionsSource.labelKey || 'name';
     const filters = def.optionsSource.filter;
     const filterKey = JSON.stringify(filters ?? []);
-    React.useEffect(() => {
-        let cancelled = false;
-        (async () => {
-            try {
-                const res = await fetch(endpoint, {
-                    credentials: 'include',
-                    headers: { Accept: 'application/json' },
-                });
-                if (!res.ok)
-                    return;
-                const json = await res.json();
-                if (cancelled)
-                    return;
-                const rows = extractRows(json);
-                const opts = [];
-                const seen = new Set();
-                for (const row of rows) {
-                    if (!rowPasses(row, filters))
-                        continue;
-                    const value = getByPath(row, valueKey);
-                    if (value == null || typeof value !== 'string' || seen.has(value))
-                        continue;
-                    seen.add(value);
-                    const labelRaw = getByPath(row, labelKey);
-                    opts.push({ value, label: typeof labelRaw === 'string' && labelRaw ? labelRaw : value });
-                }
-                opts.sort((a, b) => a.label.localeCompare(b.label));
-                setOptions(opts);
+    // Stable, re-runnable fetch. Without an explicit refetch the option list is
+    // read once on mount, so a package created elsewhere (PackagesPage) stays
+    // invisible in this dropdown until a full page reload. We refetch on
+    // dropdown-open and on a global `objectui:packages-changed` signal.
+    const load = React.useCallback(async () => {
+        try {
+            const res = await fetch(endpoint, {
+                credentials: 'include',
+                headers: { Accept: 'application/json' },
+            });
+            if (!res.ok)
+                return;
+            const json = await res.json();
+            const rows = extractRows(json);
+            const opts = [];
+            const seen = new Set();
+            for (const row of rows) {
+                if (!rowPasses(row, filters))
+                    continue;
+                const value = getByPath(row, valueKey);
+                if (value == null || typeof value !== 'string' || seen.has(value))
+                    continue;
+                seen.add(value);
+                const labelRaw = getByPath(row, labelKey);
+                opts.push({ value, label: typeof labelRaw === 'string' && labelRaw ? labelRaw : value });
             }
-            catch {
-                /* offline / unauthorized — render with no options */
+            opts.sort((a, b) => a.label.localeCompare(b.label));
+            // The package-scope selector gets a stable "Local / Custom (this env)"
+            // entry for this environment's runtime, DB-authored metadata — it is
+            // never a real package row (`package_id = null` / `sys_metadata`
+            // provenance) yet must always be selectable so org-authored items are
+            // discoverable and editable. The metadata list/get API already treats
+            // `?package=sys_metadata` as exactly this local scope.
+            if (/package/i.test(endpoint) && !opts.some((o) => o.value === LOCAL_SCOPE_ID)) {
+                opts.push({ value: LOCAL_SCOPE_ID, label: localScopeLabel() });
             }
-        })();
-        return () => { cancelled = true; };
+            setOptions(opts);
+        }
+        catch {
+            /* offline / unauthorized — render with no options */
+        }
         // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [endpoint, valueKey, labelKey, filterKey]);
-    return options;
+    React.useEffect(() => {
+        void load();
+        const onChanged = () => { void load(); };
+        window.addEventListener('objectui:packages-changed', onChanged);
+        return () => window.removeEventListener('objectui:packages-changed', onChanged);
+    }, [load]);
+    return { options, refetch: load };
 }
 /**
  * Hook: resolves the active values for an app's context selectors and
@@ -189,7 +212,7 @@ export function useAppContextSelectors(appName, selectors, t) {
     return { contextValues, element };
 }
 function SelectorControl({ def, value, onChange, t, }) {
-    const options = useSelectorOptions(def);
+    const { options, refetch } = useSelectorOptions(def);
     const Icon = getIcon(def.icon);
     const rawLabel = resolveI18nLabel(def.label, t) || def.id;
     const label = rawLabel === 'Package'
@@ -214,5 +237,6 @@ function SelectorControl({ def, value, onChange, t, }) {
         }
     }, [hasConcrete, onChange, options]);
     const current = hasConcrete ? value : '';
-    return (_jsxs(Select, { value: current, onValueChange: onChange, children: [_jsx(SelectTrigger, { "aria-label": label, className: "h-9 w-full gap-2 rounded-md border-sidebar-border/70 bg-sidebar/80 px-2 text-xs font-medium text-sidebar-foreground shadow-none transition-colors hover:bg-sidebar-accent focus:ring-1 focus:ring-sidebar-ring data-[state=open]:bg-sidebar-accent [&>svg]:h-3.5 [&>svg]:w-3.5 [&>svg]:shrink-0", children: _jsxs("div", { className: "flex min-w-0 flex-1 items-center gap-2 overflow-hidden", children: [_jsx("span", { className: "flex h-5 w-5 shrink-0 items-center justify-center rounded border border-sidebar-border/70 bg-sidebar-accent text-sidebar-foreground/70", children: _jsx(Icon, { className: "h-3 w-3" }) }), _jsx(SelectValue, { placeholder: placeholder, className: "truncate" })] }) }), _jsx(SelectContent, { className: "w-[var(--radix-select-trigger-width)]", children: options.map((opt) => (_jsx(SelectItem, { value: opt.value, children: opt.label }, opt.value))) })] }));
+    return (_jsxs(Select, { value: current, onValueChange: onChange, onOpenChange: (open) => { if (open)
+            refetch(); }, children: [_jsx(SelectTrigger, { "aria-label": label, "data-testid": "package-switcher", className: "h-9 w-full gap-2 rounded-md border-sidebar-border/70 bg-sidebar/80 px-2 text-xs font-medium text-sidebar-foreground shadow-none transition-colors hover:bg-sidebar-accent focus:ring-1 focus:ring-sidebar-ring data-[state=open]:bg-sidebar-accent [&>svg]:h-3.5 [&>svg]:w-3.5 [&>svg]:shrink-0", children: _jsxs("div", { className: "flex min-w-0 flex-1 items-center gap-2 overflow-hidden", children: [_jsx("span", { className: "flex h-5 w-5 shrink-0 items-center justify-center rounded border border-sidebar-border/70 bg-sidebar-accent text-sidebar-foreground/70", children: _jsx(Icon, { className: "h-3 w-3" }) }), _jsx(SelectValue, { placeholder: placeholder, className: "truncate" })] }) }), _jsx(SelectContent, { className: "w-[var(--radix-select-trigger-width)]", children: options.map((opt) => (_jsx(SelectItem, { value: opt.value, children: opt.label }, opt.value))) })] }));
 }

package/dist/layout/agentPicker.d.ts

@@ -0,0 +1,56 @@
+/**
+ * agentPicker
+ *
+ * Pure decision logic for the floating assistant's Build/Ask switcher. Kept in
+ * its own module (no React, no chat deps) so it can be unit-tested without
+ * dragging in the heavy chat component graph (FloatingChatbot → streamdown →
+ * shiki → @ai-sdk, ~20MB) that `ConsoleFloatingChatbot` pulls in.
+ * @module
+ */
+import { type AgentDescriptor } from '@object-ui/plugin-chatbot';
+/** Minimal catalog shape the decision needs — just the agent name. */
+type AgentLike = Pick<AgentDescriptor, 'name'>;
+export interface AgentPickerDecisionInput {
+    /** Live agent catalog from `useAgents` (the single source of truth). */
+    agents: AgentLike[];
+    /**
+     * Explicit host override. When defined it wins outright — `true` forces the
+     * switcher on, `false` forces it off — regardless of catalog or env.
+     */
+    showAgentPickerProp?: boolean;
+    /**
+     * `VITE_AI_SHOW_AGENT_PICKER === 'true'` — the power-user / admin global
+     * escape hatch that forces the switcher on without touching app metadata.
+     */
+    envOptIn?: boolean;
+    /**
+     * Whether AI Studio (authoring / "online development") is enabled for this
+     * deployment. When off, the build agent must not be reachable from the panel,
+     * so the auto-reveal is suppressed even if the catalog still serves `build`.
+     * Mirrors `ConsoleLayout`'s `aiStudioEnabled` gate. Defaults to true.
+     */
+    aiStudioEnabled?: boolean;
+}
+/**
+ * True when the live catalog exposes BOTH a data/query (`ask`) and an authoring
+ * (`build`) agent — alias-aware via {@link isAskAgent}/{@link isBuildAgent}, so
+ * a catalog still serving the legacy `data_chat`/`metadata_assistant` ids counts
+ * too. This is the "AI development is unlocked for this viewer" signal, the same
+ * `askAvailable && buildAvailable` notion HomePage uses to surface "Build with AI".
+ */
+export declare function isAiDevUnlocked(agents: AgentLike[]): boolean;
+/**
+ * Decide whether the floating assistant should reveal its Build/Ask switcher.
+ *
+ * Restrained by design (the original "end users shouldn't have to choose" rule):
+ * a pure end-user surface bound to a single `ask` agent never sees it. Precedence:
+ *  1. `showAgentPickerProp` — explicit host override wins (`true`/`false`).
+ *  2. `envOptIn` — `VITE_AI_SHOW_AGENT_PICKER` forces it on globally.
+ *  3. Auto-reveal — AI development is unlocked ({@link isAiDevUnlocked}) AND
+ *     authoring isn't deployment-disabled (`aiStudioEnabled`).
+ *
+ * Returns the *intent* only: the render site still requires more than one agent
+ * (`agents.length > 1`) to draw an actual choice.
+ */
+export declare function shouldShowAgentPicker({ agents, showAgentPickerProp, envOptIn, aiStudioEnabled, }: AgentPickerDecisionInput): boolean;
+export {};

package/dist/layout/agentPicker.js

@@ -0,0 +1,40 @@
+/**
+ * agentPicker
+ *
+ * Pure decision logic for the floating assistant's Build/Ask switcher. Kept in
+ * its own module (no React, no chat deps) so it can be unit-tested without
+ * dragging in the heavy chat component graph (FloatingChatbot → streamdown →
+ * shiki → @ai-sdk, ~20MB) that `ConsoleFloatingChatbot` pulls in.
+ * @module
+ */
+import { isAskAgent, isBuildAgent } from '@object-ui/plugin-chatbot';
+/**
+ * True when the live catalog exposes BOTH a data/query (`ask`) and an authoring
+ * (`build`) agent — alias-aware via {@link isAskAgent}/{@link isBuildAgent}, so
+ * a catalog still serving the legacy `data_chat`/`metadata_assistant` ids counts
+ * too. This is the "AI development is unlocked for this viewer" signal, the same
+ * `askAvailable && buildAvailable` notion HomePage uses to surface "Build with AI".
+ */
+export function isAiDevUnlocked(agents) {
+    return (agents.some((a) => isAskAgent(a.name)) && agents.some((a) => isBuildAgent(a.name)));
+}
+/**
+ * Decide whether the floating assistant should reveal its Build/Ask switcher.
+ *
+ * Restrained by design (the original "end users shouldn't have to choose" rule):
+ * a pure end-user surface bound to a single `ask` agent never sees it. Precedence:
+ *  1. `showAgentPickerProp` — explicit host override wins (`true`/`false`).
+ *  2. `envOptIn` — `VITE_AI_SHOW_AGENT_PICKER` forces it on globally.
+ *  3. Auto-reveal — AI development is unlocked ({@link isAiDevUnlocked}) AND
+ *     authoring isn't deployment-disabled (`aiStudioEnabled`).
+ *
+ * Returns the *intent* only: the render site still requires more than one agent
+ * (`agents.length > 1`) to draw an actual choice.
+ */
+export function shouldShowAgentPicker({ agents, showAgentPickerProp, envOptIn = false, aiStudioEnabled = true, }) {
+    if (showAgentPickerProp !== undefined)
+        return showAgentPickerProp;
+    if (envOptIn)
+        return true;
+    return aiStudioEnabled && isAiDevUnlocked(agents);
+}

package/dist/preview/CommitTimeline.d.ts

@@ -0,0 +1,15 @@
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+export interface CommitTimelineProps {
+    open: boolean;
+    onOpenChange: (open: boolean) => void;
+    packageId: string;
+    /** Called after a successful revert so the host can refresh the app view. */
+    onReverted?: () => void;
+}
+export declare function CommitTimeline({ open, onOpenChange, packageId, onReverted }: CommitTimelineProps): import("react").JSX.Element;

package/dist/preview/CommitTimeline.js

@@ -0,0 +1,82 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+/**
+ * ADR-0067 — the package "Build history" timeline. Lists every commit an AI
+ * build (or edit) landed, newest-first, with "Revert" per apply commit: undo
+ * that change set (artifacts it created are soft-removed; ones it edited are
+ * restored) as a NEW append-only revert commit. This is the history-not-confirm
+ * surface — the user reviews and reverts instead of approving each publish.
+ *
+ * Sibling of DraftChangesPanel (which lists PENDING drafts before a publish);
+ * this lists what already LANDED, and can undo it.
+ */
+import { useCallback, useEffect, useState } from 'react';
+import { GitBranch, Undo2, Loader2 } from 'lucide-react';
+import { toast } from 'sonner';
+import { Badge, Button, Sheet, SheetContent, SheetDescription, SheetHeader, SheetTitle, } from '@object-ui/components';
+import { useObjectTranslation } from '@object-ui/i18n';
+import { fetchCommits, revertCommit } from './commitHistory';
+function relativeTime(iso) {
+    if (!iso)
+        return '';
+    const then = Date.parse(iso);
+    if (Number.isNaN(then))
+        return '';
+    const secs = Math.max(0, Math.round((Date.now() - then) / 1000));
+    if (secs < 60)
+        return `${secs}s`;
+    const mins = Math.round(secs / 60);
+    if (mins < 60)
+        return `${mins}m`;
+    const hrs = Math.round(mins / 60);
+    if (hrs < 24)
+        return `${hrs}h`;
+    return `${Math.round(hrs / 24)}d`;
+}
+export function CommitTimeline({ open, onOpenChange, packageId, onReverted }) {
+    const { t } = useObjectTranslation();
+    const [commits, setCommits] = useState(null);
+    const [error, setError] = useState(null);
+    const [reverting, setReverting] = useState(null);
+    const load = useCallback(async () => {
+        setCommits(null);
+        setError(null);
+        try {
+            setCommits(await fetchCommits(packageId));
+        }
+        catch (e) {
+            setError(e.message);
+        }
+    }, [packageId]);
+    useEffect(() => {
+        if (open)
+            void load();
+    }, [open, load]);
+    const onRevert = async (commitId) => {
+        setReverting(commitId);
+        try {
+            await revertCommit(packageId, commitId);
+            toast.success(t('preview.history.reverted', { defaultValue: 'Reverted — the change has been undone.' }));
+            onReverted?.();
+            await load();
+        }
+        catch (e) {
+            toast.error(`${t('preview.history.revertFailed', { defaultValue: 'Revert failed' })}: ${e.message}`);
+        }
+        finally {
+            setReverting(null);
+        }
+    };
+    return (_jsx(Sheet, { open: open, onOpenChange: onOpenChange, children: _jsxs(SheetContent, { side: "right", className: "w-[420px] sm:max-w-[420px]", "data-testid": "commit-timeline-panel", children: [_jsxs(SheetHeader, { children: [_jsx(SheetTitle, { children: t('preview.history.title', { defaultValue: 'Build history' }) }), _jsx(SheetDescription, { children: t('preview.history.description', {
+                                defaultValue: 'Every change to this app, newest first. Revert any step to undo it — no publish confirmation needed.',
+                            }) })] }), _jsx("div", { className: "mt-4 flex flex-col gap-2 overflow-y-auto px-4 pb-6", children: error ? (_jsxs("p", { className: "text-sm text-destructive", children: [t('preview.history.loadFailed', { defaultValue: 'Could not load history:' }), " ", error] })) : commits === null ? (_jsxs("div", { className: "flex items-center gap-2 text-sm text-muted-foreground", children: [_jsx(Loader2, { className: "h-4 w-4 animate-spin" }), t('preview.history.loading', { defaultValue: 'Loading history…' })] })) : commits.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('preview.history.empty', { defaultValue: 'No history yet for this app.' }) })) : (commits.map((c) => (_jsxs("div", { className: "flex items-start gap-2.5 rounded-md border px-2.5 py-2 text-sm", "data-testid": "commit-row", children: [_jsx(GitBranch, { className: `mt-0.5 h-4 w-4 shrink-0 ${c.operation === 'revert' ? 'text-muted-foreground' : 'text-primary'}` }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("p", { className: "truncate font-medium", children: c.message ??
+                                            (c.operation === 'revert'
+                                                ? t('preview.history.revertLabel', { defaultValue: 'Reverted a change' })
+                                                : t('preview.history.applyLabel', { defaultValue: 'Build change' })) }), _jsxs("p", { className: "mt-0.5 flex flex-wrap items-center gap-1.5 text-xs text-muted-foreground", children: [c.operation === 'revert' ? (_jsx(Badge, { variant: "outline", className: "border-muted-foreground/30", children: t('preview.history.revert', { defaultValue: 'revert' }) })) : null, _jsxs("span", { children: [c.itemCount, " ", t('preview.history.items', { defaultValue: 'item(s)' })] }), c.actor ? _jsxs("span", { children: ["\u00B7 ", c.actor] }) : null, c.createdAt ? _jsxs("span", { children: ["\u00B7 ", relativeTime(c.createdAt)] }) : null] })] }), c.operation === 'apply' ? (_jsx(Button, { size: "sm", variant: "ghost", className: "shrink-0", disabled: reverting !== null, onClick: () => onRevert(c.id), "data-testid": "commit-revert", children: reverting === c.id ? (_jsx(Loader2, { className: "h-3.5 w-3.5 animate-spin" })) : (_jsxs(_Fragment, { children: [_jsx(Undo2, { className: "mr-1 h-3.5 w-3.5" }), t('preview.history.revertAction', { defaultValue: 'Revert' })] })) })) : null] }, c.id)))) })] }) }));
+}

package/dist/preview/UnpublishedAppBar.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 /**
  * ObjectUI
  * Copyright (c) 2024-present ObjectStack Inc.
@@ -20,12 +20,13 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  */
 import { useState } from 'react';
 import { useLocation, useParams } from 'react-router-dom';
-import { EyeOff, Rocket } from 'lucide-react';
+import { EyeOff, History, Rocket } from 'lucide-react';
 import { toast } from 'sonner';
 import { Button } from '@object-ui/components';
 import { useObjectTranslation } from '@object-ui/i18n';
 import { useMetadata } from '../providers/MetadataProvider';
 import { matchAppBySegment } from '../utils/appRoute';
+import { CommitTimeline } from './CommitTimeline';
 import { usePreviewDrafts } from './PreviewModeContext';
 export function UnpublishedAppBar() {
     const preview = usePreviewDrafts();
@@ -34,6 +35,7 @@ export function UnpublishedAppBar() {
     const { apps, refresh } = useMetadata();
     const { t } = useObjectTranslation();
     const [publishing, setPublishing] = useState(false);
+    const [historyOpen, setHistoryOpen] = useState(false);
     // The draft-preview watermark owns the preview tree; never stack both bars.
     if (preview)
         return null;
@@ -43,6 +45,8 @@ export function UnpublishedAppBar() {
     const app = matchAppBySegment(apps ?? [], routeApp);
     if (!app || app.hidden !== true)
         return null;
+    // ADR-0067 — the package this app belongs to keys its commit timeline.
+    const packageId = app?.packageId ?? app?._packageId ?? null;
     const publish = async () => {
         setPublishing(true);
         try {
@@ -71,9 +75,9 @@ export function UnpublishedAppBar() {
             setPublishing(false);
         }
     };
-    return (_jsxs("div", { className: "sticky top-0 z-40 flex items-center gap-3 border-b border-amber-300/70 bg-amber-50 px-4 py-2 text-sm text-amber-900 dark:border-amber-700/60 dark:bg-amber-950/40 dark:text-amber-200", "data-testid": "unpublished-app-bar", children: [_jsx(EyeOff, { className: "h-4 w-4 shrink-0" }), _jsx("p", { className: "min-w-0 flex-1 truncate", children: t('preview.unpublishedBar.message', {
-                    defaultValue: 'Unpublished app — fully functional, but only builders can see it. Publish to make it visible to your users.',
-                }) }), _jsxs(Button, { size: "sm", onClick: publish, disabled: publishing, "data-testid": "unpublished-app-publish", children: [_jsx(Rocket, { className: "mr-1 h-3.5 w-3.5" }), publishing
-                        ? t('preview.unpublishedBar.publishing', { defaultValue: 'Publishing…' })
-                        : t('preview.unpublishedBar.publish', { defaultValue: 'Publish' })] })] }));
+    return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "sticky top-0 z-40 flex items-center gap-3 border-b border-amber-300/70 bg-amber-50 px-4 py-2 text-sm text-amber-900 dark:border-amber-700/60 dark:bg-amber-950/40 dark:text-amber-200", "data-testid": "unpublished-app-bar", children: [_jsx(EyeOff, { className: "h-4 w-4 shrink-0" }), _jsx("p", { className: "min-w-0 flex-1 truncate", children: t('preview.unpublishedBar.message', {
+                            defaultValue: 'Unpublished app — fully functional, but only builders can see it. Publish to make it visible to your users.',
+                        }) }), packageId ? (_jsxs(Button, { size: "sm", variant: "outline", onClick: () => setHistoryOpen(true), "data-testid": "unpublished-app-history", children: [_jsx(History, { className: "mr-1 h-3.5 w-3.5" }), t('preview.history.button', { defaultValue: 'History' })] })) : null, _jsxs(Button, { size: "sm", onClick: publish, disabled: publishing, "data-testid": "unpublished-app-publish", children: [_jsx(Rocket, { className: "mr-1 h-3.5 w-3.5" }), publishing
+                                ? t('preview.unpublishedBar.publishing', { defaultValue: 'Publishing…' })
+                                : t('preview.unpublishedBar.publish', { defaultValue: 'Publish' })] })] }), packageId ? (_jsx(CommitTimeline, { open: historyOpen, onOpenChange: setHistoryOpen, packageId: packageId, onReverted: refresh })) : null] }));
 }

package/dist/preview/commitHistory.d.ts

@@ -0,0 +1,28 @@
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+/**
+ * ADR-0067 — package-scoped commit history reads/writes for the timeline.
+ *
+ * Each AI build (and Studio batch) lands as one revertible COMMIT on top of
+ * the metadata history. The history-not-confirm model: you don't approve each
+ * publish — you review this timeline and revert if a change was wrong. These
+ * helpers read the timeline (`GET /packages/:id/commits`) and revert one
+ * commit (`POST /packages/:id/commits/:cid/revert`). Cookie-authenticated like
+ * every console call; tolerant of the `{ data: ... }` / bare envelope shapes.
+ */
+export interface CommitEntry {
+    id: string;
+    operation: 'apply' | 'revert';
+    message?: string;
+    actor?: string;
+    aiModel?: string;
+    itemCount: number;
+    createdAt?: string;
+}
+export declare function fetchCommits(packageId: string): Promise<CommitEntry[]>;
+export declare function revertCommit(packageId: string, commitId: string): Promise<void>;

package/dist/preview/commitHistory.js

@@ -0,0 +1,48 @@
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+export async function fetchCommits(packageId) {
+    const res = await fetch(`/api/v1/packages/${encodeURIComponent(packageId)}/commits`, {
+        credentials: 'include',
+        headers: { Accept: 'application/json' },
+        cache: 'no-store',
+    });
+    if (!res.ok)
+        throw new Error(`commits HTTP ${res.status}`);
+    const data = (await res.json());
+    const list = Array.isArray(data)
+        ? data
+        : data?.commits ??
+            data?.data?.commits ??
+            [];
+    return (Array.isArray(list) ? list : []).map((raw) => {
+        const c = raw;
+        return {
+            id: String(c.id),
+            operation: c.operation === 'revert' ? 'revert' : 'apply',
+            message: typeof c.message === 'string' ? c.message : undefined,
+            actor: typeof c.actor === 'string' ? c.actor : undefined,
+            aiModel: typeof c.aiModel === 'string' ? c.aiModel : undefined,
+            itemCount: typeof c.itemCount === 'number' ? c.itemCount : 0,
+            createdAt: typeof c.createdAt === 'string' ? c.createdAt : undefined,
+        };
+    });
+}
+export async function revertCommit(packageId, commitId) {
+    const res = await fetch(`/api/v1/packages/${encodeURIComponent(packageId)}/commits/${encodeURIComponent(commitId)}/revert`, {
+        method: 'POST',
+        credentials: 'include',
+        headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
+        body: '{}',
+    });
+    const payload = (await res.json().catch(() => null));
+    const inner = payload?.data ?? payload ?? undefined;
+    if (!res.ok || inner?.success === false) {
+        const err = payload?.error;
+        throw new Error((typeof err === 'object' ? err?.message : err) ?? `HTTP ${res.status}`);
+    }
+}

package/dist/providers/MetadataProvider.js

@@ -459,6 +459,15 @@ export function MetadataProvider({ children, adapter, ttlMs = DEFAULT_TTL_MS })
     // NOT gated to preview-drafts mode: the live world every tree reads changed.
     useEffect(() => {
         return subscribeMetadataRefresh(() => {
+            // The adapter keeps its OWN object-schema cache (getObjectSchema) that the
+            // context refresh below does not touch. A publish/install just changed the
+            // live schema, so drop it too — otherwise create/edit forms (which read
+            // the adapter's getObjectSchema, NOT this context) keep showing the
+            // pre-publish field set until the adapter cache's 5-minute TTL lapses.
+            try {
+                adapterRef.current?.clearCache?.();
+            }
+            catch { /* adapter mid-swap */ }
             void refresh();
         });
     }, [refresh]);

package/dist/views/FlowRunner.d.ts

@@ -1,33 +1,5 @@
-export interface ScreenFieldSpec {
-    name: string;
-    label?: string;
-    type?: string;
-    required?: boolean;
-    options?: Array<{
-        value: unknown;
-        label: string;
-    }>;
-    defaultValue?: unknown;
-    placeholder?: string;
-}
-export interface ScreenSpec {
-    nodeId: string;
-    title?: string;
-    description?: string;
-    fields: ScreenFieldSpec[];
-    /**
-     * `'object-form'` renders the named object's FULL create/edit form — incl.
-     * inline master-detail child grids — as a wizard step (vs. the flat `fields`
-     * list). The form persists the record (and its children, atomically) itself,
-     * then resumes the run with the saved id bound to `idVariable`.
-     */
-    kind?: 'fields' | 'object-form';
-    objectName?: string;
-    mode?: 'create' | 'edit';
-    recordId?: string;
-    defaults?: Record<string, unknown>;
-    idVariable?: string;
-}
+import { type ScreenSpec } from './ScreenView';
+export type { ScreenSpec, ScreenFieldSpec } from './ScreenView';
 export interface ScreenFlowState {
     flowName: string;
     runId: string;