@object-ui/app-shell 7.0.0 → 7.2.0

package/dist/layout/ContextSelectors.js

@@ -19,6 +19,16 @@ import { useLocation, useNavigate } from 'react-router-dom';
 import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue, } from '@object-ui/components';
 import { getIcon } from '../utils/getIcon';
 import { resolveI18nLabel } from '../utils';
+// Local/Custom scope sentinel — kept inline (not imported from metadata-admin)
+// so this layout module never forms an import cycle with the metadata-admin
+// views. Mirrors `LOCAL_PACKAGE_ID` in views/metadata-admin/package-scope.ts.
+const LOCAL_SCOPE_ID = 'sys_metadata';
+function localScopeLabel() {
+    const lang = (typeof document !== 'undefined' && document.documentElement?.lang) ||
+        (typeof navigator !== 'undefined' && navigator.language) ||
+        '';
+    return /^zh/i.test(lang) ? '本地 / 自定义（本环境）' : 'Local / Custom (this env)';
+}
 const ALL_SENTINEL = '__all__';
 /** Read a (possibly dotted) property path off a row, e.g. `manifest.id`. */
 function getByPath(row, key) {
@@ -80,43 +90,56 @@ function useSelectorOptions(def) {
     const labelKey = def.optionsSource.labelKey || 'name';
     const filters = def.optionsSource.filter;
     const filterKey = JSON.stringify(filters ?? []);
-    React.useEffect(() => {
-        let cancelled = false;
-        (async () => {
-            try {
-                const res = await fetch(endpoint, {
-                    credentials: 'include',
-                    headers: { Accept: 'application/json' },
-                });
-                if (!res.ok)
-                    return;
-                const json = await res.json();
-                if (cancelled)
-                    return;
-                const rows = extractRows(json);
-                const opts = [];
-                const seen = new Set();
-                for (const row of rows) {
-                    if (!rowPasses(row, filters))
-                        continue;
-                    const value = getByPath(row, valueKey);
-                    if (value == null || typeof value !== 'string' || seen.has(value))
-                        continue;
-                    seen.add(value);
-                    const labelRaw = getByPath(row, labelKey);
-                    opts.push({ value, label: typeof labelRaw === 'string' && labelRaw ? labelRaw : value });
-                }
-                opts.sort((a, b) => a.label.localeCompare(b.label));
-                setOptions(opts);
+    // Stable, re-runnable fetch. Without an explicit refetch the option list is
+    // read once on mount, so a package created elsewhere (PackagesPage) stays
+    // invisible in this dropdown until a full page reload. We refetch on
+    // dropdown-open and on a global `objectui:packages-changed` signal.
+    const load = React.useCallback(async () => {
+        try {
+            const res = await fetch(endpoint, {
+                credentials: 'include',
+                headers: { Accept: 'application/json' },
+            });
+            if (!res.ok)
+                return;
+            const json = await res.json();
+            const rows = extractRows(json);
+            const opts = [];
+            const seen = new Set();
+            for (const row of rows) {
+                if (!rowPasses(row, filters))
+                    continue;
+                const value = getByPath(row, valueKey);
+                if (value == null || typeof value !== 'string' || seen.has(value))
+                    continue;
+                seen.add(value);
+                const labelRaw = getByPath(row, labelKey);
+                opts.push({ value, label: typeof labelRaw === 'string' && labelRaw ? labelRaw : value });
             }
-            catch {
-                /* offline / unauthorized — render with no options */
+            opts.sort((a, b) => a.label.localeCompare(b.label));
+            // The package-scope selector gets a stable "Local / Custom (this env)"
+            // entry for this environment's runtime, DB-authored metadata — it is
+            // never a real package row (`package_id = null` / `sys_metadata`
+            // provenance) yet must always be selectable so org-authored items are
+            // discoverable and editable. The metadata list/get API already treats
+            // `?package=sys_metadata` as exactly this local scope.
+            if (/package/i.test(endpoint) && !opts.some((o) => o.value === LOCAL_SCOPE_ID)) {
+                opts.push({ value: LOCAL_SCOPE_ID, label: localScopeLabel() });
             }
-        })();
-        return () => { cancelled = true; };
+            setOptions(opts);
+        }
+        catch {
+            /* offline / unauthorized — render with no options */
+        }
         // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [endpoint, valueKey, labelKey, filterKey]);
-    return options;
+    React.useEffect(() => {
+        void load();
+        const onChanged = () => { void load(); };
+        window.addEventListener('objectui:packages-changed', onChanged);
+        return () => window.removeEventListener('objectui:packages-changed', onChanged);
+    }, [load]);
+    return { options, refetch: load };
 }
 /**
  * Hook: resolves the active values for an app's context selectors and
@@ -189,7 +212,7 @@ export function useAppContextSelectors(appName, selectors, t) {
     return { contextValues, element };
 }
 function SelectorControl({ def, value, onChange, t, }) {
-    const options = useSelectorOptions(def);
+    const { options, refetch } = useSelectorOptions(def);
     const Icon = getIcon(def.icon);
     const rawLabel = resolveI18nLabel(def.label, t) || def.id;
     const label = rawLabel === 'Package'
@@ -214,5 +237,6 @@ function SelectorControl({ def, value, onChange, t, }) {
         }
     }, [hasConcrete, onChange, options]);
     const current = hasConcrete ? value : '';
-    return (_jsxs(Select, { value: current, onValueChange: onChange, children: [_jsx(SelectTrigger, { "aria-label": label, className: "h-9 w-full gap-2 rounded-md border-sidebar-border/70 bg-sidebar/80 px-2 text-xs font-medium text-sidebar-foreground shadow-none transition-colors hover:bg-sidebar-accent focus:ring-1 focus:ring-sidebar-ring data-[state=open]:bg-sidebar-accent [&>svg]:h-3.5 [&>svg]:w-3.5 [&>svg]:shrink-0", children: _jsxs("div", { className: "flex min-w-0 flex-1 items-center gap-2 overflow-hidden", children: [_jsx("span", { className: "flex h-5 w-5 shrink-0 items-center justify-center rounded border border-sidebar-border/70 bg-sidebar-accent text-sidebar-foreground/70", children: _jsx(Icon, { className: "h-3 w-3" }) }), _jsx(SelectValue, { placeholder: placeholder, className: "truncate" })] }) }), _jsx(SelectContent, { className: "w-[var(--radix-select-trigger-width)]", children: options.map((opt) => (_jsx(SelectItem, { value: opt.value, children: opt.label }, opt.value))) })] }));
+    return (_jsxs(Select, { value: current, onValueChange: onChange, onOpenChange: (open) => { if (open)
+            refetch(); }, children: [_jsx(SelectTrigger, { "aria-label": label, "data-testid": "package-switcher", className: "h-9 w-full gap-2 rounded-md border-sidebar-border/70 bg-sidebar/80 px-2 text-xs font-medium text-sidebar-foreground shadow-none transition-colors hover:bg-sidebar-accent focus:ring-1 focus:ring-sidebar-ring data-[state=open]:bg-sidebar-accent [&>svg]:h-3.5 [&>svg]:w-3.5 [&>svg]:shrink-0", children: _jsxs("div", { className: "flex min-w-0 flex-1 items-center gap-2 overflow-hidden", children: [_jsx("span", { className: "flex h-5 w-5 shrink-0 items-center justify-center rounded border border-sidebar-border/70 bg-sidebar-accent text-sidebar-foreground/70", children: _jsx(Icon, { className: "h-3 w-3" }) }), _jsx(SelectValue, { placeholder: placeholder, className: "truncate" })] }) }), _jsx(SelectContent, { className: "w-[var(--radix-select-trigger-width)]", children: options.map((opt) => (_jsx(SelectItem, { value: opt.value, children: opt.label }, opt.value))) })] }));
 }

package/dist/layout/agentPicker.d.ts

@@ -0,0 +1,56 @@
+/**
+ * agentPicker
+ *
+ * Pure decision logic for the floating assistant's Build/Ask switcher. Kept in
+ * its own module (no React, no chat deps) so it can be unit-tested without
+ * dragging in the heavy chat component graph (FloatingChatbot → streamdown →
+ * shiki → @ai-sdk, ~20MB) that `ConsoleFloatingChatbot` pulls in.
+ * @module
+ */
+import { type AgentDescriptor } from '@object-ui/plugin-chatbot';
+/** Minimal catalog shape the decision needs — just the agent name. */
+type AgentLike = Pick<AgentDescriptor, 'name'>;
+export interface AgentPickerDecisionInput {
+    /** Live agent catalog from `useAgents` (the single source of truth). */
+    agents: AgentLike[];
+    /**
+     * Explicit host override. When defined it wins outright — `true` forces the
+     * switcher on, `false` forces it off — regardless of catalog or env.
+     */
+    showAgentPickerProp?: boolean;
+    /**
+     * `VITE_AI_SHOW_AGENT_PICKER === 'true'` — the power-user / admin global
+     * escape hatch that forces the switcher on without touching app metadata.
+     */
+    envOptIn?: boolean;
+    /**
+     * Whether AI Studio (authoring / "online development") is enabled for this
+     * deployment. When off, the build agent must not be reachable from the panel,
+     * so the auto-reveal is suppressed even if the catalog still serves `build`.
+     * Mirrors `ConsoleLayout`'s `aiStudioEnabled` gate. Defaults to true.
+     */
+    aiStudioEnabled?: boolean;
+}
+/**
+ * True when the live catalog exposes BOTH a data/query (`ask`) and an authoring
+ * (`build`) agent — alias-aware via {@link isAskAgent}/{@link isBuildAgent}, so
+ * a catalog still serving the legacy `data_chat`/`metadata_assistant` ids counts
+ * too. This is the "AI development is unlocked for this viewer" signal, the same
+ * `askAvailable && buildAvailable` notion HomePage uses to surface "Build with AI".
+ */
+export declare function isAiDevUnlocked(agents: AgentLike[]): boolean;
+/**
+ * Decide whether the floating assistant should reveal its Build/Ask switcher.
+ *
+ * Restrained by design (the original "end users shouldn't have to choose" rule):
+ * a pure end-user surface bound to a single `ask` agent never sees it. Precedence:
+ *  1. `showAgentPickerProp` — explicit host override wins (`true`/`false`).
+ *  2. `envOptIn` — `VITE_AI_SHOW_AGENT_PICKER` forces it on globally.
+ *  3. Auto-reveal — AI development is unlocked ({@link isAiDevUnlocked}) AND
+ *     authoring isn't deployment-disabled (`aiStudioEnabled`).
+ *
+ * Returns the *intent* only: the render site still requires more than one agent
+ * (`agents.length > 1`) to draw an actual choice.
+ */
+export declare function shouldShowAgentPicker({ agents, showAgentPickerProp, envOptIn, aiStudioEnabled, }: AgentPickerDecisionInput): boolean;
+export {};

package/dist/layout/agentPicker.js

@@ -0,0 +1,40 @@
+/**
+ * agentPicker
+ *
+ * Pure decision logic for the floating assistant's Build/Ask switcher. Kept in
+ * its own module (no React, no chat deps) so it can be unit-tested without
+ * dragging in the heavy chat component graph (FloatingChatbot → streamdown →
+ * shiki → @ai-sdk, ~20MB) that `ConsoleFloatingChatbot` pulls in.
+ * @module
+ */
+import { isAskAgent, isBuildAgent } from '@object-ui/plugin-chatbot';
+/**
+ * True when the live catalog exposes BOTH a data/query (`ask`) and an authoring
+ * (`build`) agent — alias-aware via {@link isAskAgent}/{@link isBuildAgent}, so
+ * a catalog still serving the legacy `data_chat`/`metadata_assistant` ids counts
+ * too. This is the "AI development is unlocked for this viewer" signal, the same
+ * `askAvailable && buildAvailable` notion HomePage uses to surface "Build with AI".
+ */
+export function isAiDevUnlocked(agents) {
+    return (agents.some((a) => isAskAgent(a.name)) && agents.some((a) => isBuildAgent(a.name)));
+}
+/**
+ * Decide whether the floating assistant should reveal its Build/Ask switcher.
+ *
+ * Restrained by design (the original "end users shouldn't have to choose" rule):
+ * a pure end-user surface bound to a single `ask` agent never sees it. Precedence:
+ *  1. `showAgentPickerProp` — explicit host override wins (`true`/`false`).
+ *  2. `envOptIn` — `VITE_AI_SHOW_AGENT_PICKER` forces it on globally.
+ *  3. Auto-reveal — AI development is unlocked ({@link isAiDevUnlocked}) AND
+ *     authoring isn't deployment-disabled (`aiStudioEnabled`).
+ *
+ * Returns the *intent* only: the render site still requires more than one agent
+ * (`agents.length > 1`) to draw an actual choice.
+ */
+export function shouldShowAgentPicker({ agents, showAgentPickerProp, envOptIn = false, aiStudioEnabled = true, }) {
+    if (showAgentPickerProp !== undefined)
+        return showAgentPickerProp;
+    if (envOptIn)
+        return true;
+    return aiStudioEnabled && isAiDevUnlocked(agents);
+}

package/dist/preview/CommitTimeline.d.ts

@@ -0,0 +1,15 @@
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+export interface CommitTimelineProps {
+    open: boolean;
+    onOpenChange: (open: boolean) => void;
+    packageId: string;
+    /** Called after a successful revert so the host can refresh the app view. */
+    onReverted?: () => void;
+}
+export declare function CommitTimeline({ open, onOpenChange, packageId, onReverted }: CommitTimelineProps): import("react").JSX.Element;

package/dist/preview/CommitTimeline.js

@@ -0,0 +1,82 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+/**
+ * ADR-0067 — the package "Build history" timeline. Lists every commit an AI
+ * build (or edit) landed, newest-first, with "Revert" per apply commit: undo
+ * that change set (artifacts it created are soft-removed; ones it edited are
+ * restored) as a NEW append-only revert commit. This is the history-not-confirm
+ * surface — the user reviews and reverts instead of approving each publish.
+ *
+ * Sibling of DraftChangesPanel (which lists PENDING drafts before a publish);
+ * this lists what already LANDED, and can undo it.
+ */
+import { useCallback, useEffect, useState } from 'react';
+import { GitBranch, Undo2, Loader2 } from 'lucide-react';
+import { toast } from 'sonner';
+import { Badge, Button, Sheet, SheetContent, SheetDescription, SheetHeader, SheetTitle, } from '@object-ui/components';
+import { useObjectTranslation } from '@object-ui/i18n';
+import { fetchCommits, revertCommit } from './commitHistory';
+function relativeTime(iso) {
+    if (!iso)
+        return '';
+    const then = Date.parse(iso);
+    if (Number.isNaN(then))
+        return '';
+    const secs = Math.max(0, Math.round((Date.now() - then) / 1000));
+    if (secs < 60)
+        return `${secs}s`;
+    const mins = Math.round(secs / 60);
+    if (mins < 60)
+        return `${mins}m`;
+    const hrs = Math.round(mins / 60);
+    if (hrs < 24)
+        return `${hrs}h`;
+    return `${Math.round(hrs / 24)}d`;
+}
+export function CommitTimeline({ open, onOpenChange, packageId, onReverted }) {
+    const { t } = useObjectTranslation();
+    const [commits, setCommits] = useState(null);
+    const [error, setError] = useState(null);
+    const [reverting, setReverting] = useState(null);
+    const load = useCallback(async () => {
+        setCommits(null);
+        setError(null);
+        try {
+            setCommits(await fetchCommits(packageId));
+        }
+        catch (e) {
+            setError(e.message);
+        }
+    }, [packageId]);
+    useEffect(() => {
+        if (open)
+            void load();
+    }, [open, load]);
+    const onRevert = async (commitId) => {
+        setReverting(commitId);
+        try {
+            await revertCommit(packageId, commitId);
+            toast.success(t('preview.history.reverted', { defaultValue: 'Reverted — the change has been undone.' }));
+            onReverted?.();
+            await load();
+        }
+        catch (e) {
+            toast.error(`${t('preview.history.revertFailed', { defaultValue: 'Revert failed' })}: ${e.message}`);
+        }
+        finally {
+            setReverting(null);
+        }
+    };
+    return (_jsx(Sheet, { open: open, onOpenChange: onOpenChange, children: _jsxs(SheetContent, { side: "right", className: "w-[420px] sm:max-w-[420px]", "data-testid": "commit-timeline-panel", children: [_jsxs(SheetHeader, { children: [_jsx(SheetTitle, { children: t('preview.history.title', { defaultValue: 'Build history' }) }), _jsx(SheetDescription, { children: t('preview.history.description', {
+                                defaultValue: 'Every change to this app, newest first. Revert any step to undo it — no publish confirmation needed.',
+                            }) })] }), _jsx("div", { className: "mt-4 flex flex-col gap-2 overflow-y-auto px-4 pb-6", children: error ? (_jsxs("p", { className: "text-sm text-destructive", children: [t('preview.history.loadFailed', { defaultValue: 'Could not load history:' }), " ", error] })) : commits === null ? (_jsxs("div", { className: "flex items-center gap-2 text-sm text-muted-foreground", children: [_jsx(Loader2, { className: "h-4 w-4 animate-spin" }), t('preview.history.loading', { defaultValue: 'Loading history…' })] })) : commits.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('preview.history.empty', { defaultValue: 'No history yet for this app.' }) })) : (commits.map((c) => (_jsxs("div", { className: "flex items-start gap-2.5 rounded-md border px-2.5 py-2 text-sm", "data-testid": "commit-row", children: [_jsx(GitBranch, { className: `mt-0.5 h-4 w-4 shrink-0 ${c.operation === 'revert' ? 'text-muted-foreground' : 'text-primary'}` }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("p", { className: "truncate font-medium", children: c.message ??
+                                            (c.operation === 'revert'
+                                                ? t('preview.history.revertLabel', { defaultValue: 'Reverted a change' })
+                                                : t('preview.history.applyLabel', { defaultValue: 'Build change' })) }), _jsxs("p", { className: "mt-0.5 flex flex-wrap items-center gap-1.5 text-xs text-muted-foreground", children: [c.operation === 'revert' ? (_jsx(Badge, { variant: "outline", className: "border-muted-foreground/30", children: t('preview.history.revert', { defaultValue: 'revert' }) })) : null, _jsxs("span", { children: [c.itemCount, " ", t('preview.history.items', { defaultValue: 'item(s)' })] }), c.actor ? _jsxs("span", { children: ["\u00B7 ", c.actor] }) : null, c.createdAt ? _jsxs("span", { children: ["\u00B7 ", relativeTime(c.createdAt)] }) : null] })] }), c.operation === 'apply' ? (_jsx(Button, { size: "sm", variant: "ghost", className: "shrink-0", disabled: reverting !== null, onClick: () => onRevert(c.id), "data-testid": "commit-revert", children: reverting === c.id ? (_jsx(Loader2, { className: "h-3.5 w-3.5 animate-spin" })) : (_jsxs(_Fragment, { children: [_jsx(Undo2, { className: "mr-1 h-3.5 w-3.5" }), t('preview.history.revertAction', { defaultValue: 'Revert' })] })) })) : null] }, c.id)))) })] }) }));
+}

package/dist/preview/DraftPreviewBar.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 /**
  * ObjectUI
  * Copyright (c) 2024-present ObjectStack Inc.
@@ -16,7 +16,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useState } from 'react';
 import { useLocation, useNavigate } from 'react-router-dom';
 import { Eye, X, Rocket, GitCompareArrows } from 'lucide-react';
-import { Button } from '@object-ui/components';
+import { Button, cn } from '@object-ui/components';
 import { useObjectTranslation } from '@object-ui/i18n';
 import { usePreviewDrafts, markPreviewExit, PREVIEW_QUERY_FLAG } from './PreviewModeContext';
 import { usePublishAllDrafts } from './usePublishAllDrafts';
@@ -78,9 +78,22 @@ export function DraftPreviewBar() {
         }
         catch { /* ignore */ } }, 300);
     };
-    return (_jsxs("div", { className: "sticky top-0 z-40 flex items-center gap-3 border-b border-amber-300/70 bg-amber-50 px-4 py-2 text-sm text-amber-900 dark:border-amber-700/60 dark:bg-amber-950/40 dark:text-amber-200", "data-testid": "draft-preview-bar", children: [_jsx(Eye, { className: "h-4 w-4 shrink-0" }), _jsx("p", { className: "min-w-0 flex-1 truncate", children: t('preview.draftBar.message', {
-                    defaultValue: 'Draft preview — you are seeing unpublished changes. Nothing here is live until you publish.',
-                }) }), _jsxs(Button, { size: "sm", variant: "outline", onClick: () => setChangesOpen(true), "data-testid": "draft-preview-changes", children: [_jsx(GitCompareArrows, { className: "mr-1 h-3.5 w-3.5" }), t('preview.draftBar.changes', { defaultValue: 'Changes' }), typeof pendingCount === 'number' ? ` (${pendingCount})` : ''] }), _jsxs(Button, { size: "sm", onClick: publish, disabled: publishing, "data-testid": "draft-preview-publish", children: [_jsx(Rocket, { className: "mr-1 h-3.5 w-3.5" }), publishing
-                        ? t('preview.draftBar.publishing', { defaultValue: 'Publishing…' })
-                        : t('preview.draftBar.publish', { defaultValue: 'Publish' })] }), _jsx(DraftChangesPanel, { open: changesOpen, onOpenChange: setChangesOpen }), _jsxs(Button, { size: "sm", variant: "outline", onClick: exit, "data-testid": "draft-preview-exit", children: [_jsx(X, { className: "mr-1 h-3.5 w-3.5" }), t('preview.draftBar.exit', { defaultValue: 'Exit preview' })] })] }));
+    // Under the auto-publish posture (and any time a draft preview is opened with
+    // nothing staged) there are zero pending drafts. Claiming "nothing is live
+    // until you publish" and offering a Publish button then is both false and a
+    // no-op, so the bar drops the publish affordance and softens to a neutral
+    // preview indicator. An UNKNOWN count (null — still loading or the fetch
+    // failed) keeps the publish path: we only relax when we KNOW the count is zero.
+    const noChanges = pendingCount === 0;
+    return (_jsxs("div", { className: cn('sticky top-0 z-40 flex items-center gap-3 border-b px-4 py-2 text-sm', noChanges
+            ? 'border-slate-200 bg-slate-50 text-slate-700 dark:border-slate-700/60 dark:bg-slate-900/40 dark:text-slate-300'
+            : 'border-amber-300/70 bg-amber-50 text-amber-900 dark:border-amber-700/60 dark:bg-amber-950/40 dark:text-amber-200'), "data-testid": "draft-preview-bar", children: [_jsx(Eye, { className: "h-4 w-4 shrink-0" }), _jsx("p", { className: "min-w-0 flex-1 truncate", children: noChanges
+                    ? t('preview.draftBar.messageClean', {
+                        defaultValue: 'Draft preview — no unpublished changes; everything here is already live.',
+                    })
+                    : t('preview.draftBar.message', {
+                        defaultValue: 'Draft preview — you are seeing unpublished changes. Nothing here is live until you publish.',
+                    }) }), !noChanges && (_jsxs(_Fragment, { children: [_jsxs(Button, { size: "sm", variant: "outline", onClick: () => setChangesOpen(true), "data-testid": "draft-preview-changes", children: [_jsx(GitCompareArrows, { className: "mr-1 h-3.5 w-3.5" }), t('preview.draftBar.changes', { defaultValue: 'Changes' }), typeof pendingCount === 'number' ? ` (${pendingCount})` : ''] }), _jsxs(Button, { size: "sm", onClick: publish, disabled: publishing, "data-testid": "draft-preview-publish", children: [_jsx(Rocket, { className: "mr-1 h-3.5 w-3.5" }), publishing
+                                ? t('preview.draftBar.publishing', { defaultValue: 'Publishing…' })
+                                : t('preview.draftBar.publish', { defaultValue: 'Publish' })] }), _jsx(DraftChangesPanel, { open: changesOpen, onOpenChange: setChangesOpen })] })), _jsxs(Button, { size: "sm", variant: "outline", onClick: exit, "data-testid": "draft-preview-exit", children: [_jsx(X, { className: "mr-1 h-3.5 w-3.5" }), t('preview.draftBar.exit', { defaultValue: 'Exit preview' })] })] }));
 }

package/dist/preview/UnpublishedAppBar.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 /**
  * ObjectUI
  * Copyright (c) 2024-present ObjectStack Inc.
@@ -20,12 +20,13 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  */
 import { useState } from 'react';
 import { useLocation, useParams } from 'react-router-dom';
-import { EyeOff, Rocket } from 'lucide-react';
+import { EyeOff, History, Rocket } from 'lucide-react';
 import { toast } from 'sonner';
 import { Button } from '@object-ui/components';
 import { useObjectTranslation } from '@object-ui/i18n';
 import { useMetadata } from '../providers/MetadataProvider';
 import { matchAppBySegment } from '../utils/appRoute';
+import { CommitTimeline } from './CommitTimeline';
 import { usePreviewDrafts } from './PreviewModeContext';
 export function UnpublishedAppBar() {
     const preview = usePreviewDrafts();
@@ -34,6 +35,7 @@ export function UnpublishedAppBar() {
     const { apps, refresh } = useMetadata();
     const { t } = useObjectTranslation();
     const [publishing, setPublishing] = useState(false);
+    const [historyOpen, setHistoryOpen] = useState(false);
     // The draft-preview watermark owns the preview tree; never stack both bars.
     if (preview)
         return null;
@@ -43,6 +45,8 @@ export function UnpublishedAppBar() {
     const app = matchAppBySegment(apps ?? [], routeApp);
     if (!app || app.hidden !== true)
         return null;
+    // ADR-0067 — the package this app belongs to keys its commit timeline.
+    const packageId = app?.packageId ?? app?._packageId ?? null;
     const publish = async () => {
         setPublishing(true);
         try {
@@ -71,9 +75,9 @@ export function UnpublishedAppBar() {
             setPublishing(false);
         }
     };
-    return (_jsxs("div", { className: "sticky top-0 z-40 flex items-center gap-3 border-b border-amber-300/70 bg-amber-50 px-4 py-2 text-sm text-amber-900 dark:border-amber-700/60 dark:bg-amber-950/40 dark:text-amber-200", "data-testid": "unpublished-app-bar", children: [_jsx(EyeOff, { className: "h-4 w-4 shrink-0" }), _jsx("p", { className: "min-w-0 flex-1 truncate", children: t('preview.unpublishedBar.message', {
-                    defaultValue: 'Unpublished app — fully functional, but only builders can see it. Publish to make it visible to your users.',
-                }) }), _jsxs(Button, { size: "sm", onClick: publish, disabled: publishing, "data-testid": "unpublished-app-publish", children: [_jsx(Rocket, { className: "mr-1 h-3.5 w-3.5" }), publishing
-                        ? t('preview.unpublishedBar.publishing', { defaultValue: 'Publishing…' })
-                        : t('preview.unpublishedBar.publish', { defaultValue: 'Publish' })] })] }));
+    return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "sticky top-0 z-40 flex items-center gap-3 border-b border-amber-300/70 bg-amber-50 px-4 py-2 text-sm text-amber-900 dark:border-amber-700/60 dark:bg-amber-950/40 dark:text-amber-200", "data-testid": "unpublished-app-bar", children: [_jsx(EyeOff, { className: "h-4 w-4 shrink-0" }), _jsx("p", { className: "min-w-0 flex-1 truncate", children: t('preview.unpublishedBar.message', {
+                            defaultValue: 'Unpublished app — fully functional, but only builders can see it. Publish to make it visible to your users.',
+                        }) }), packageId ? (_jsxs(Button, { size: "sm", variant: "outline", onClick: () => setHistoryOpen(true), "data-testid": "unpublished-app-history", children: [_jsx(History, { className: "mr-1 h-3.5 w-3.5" }), t('preview.history.button', { defaultValue: 'History' })] })) : null, _jsxs(Button, { size: "sm", onClick: publish, disabled: publishing, "data-testid": "unpublished-app-publish", children: [_jsx(Rocket, { className: "mr-1 h-3.5 w-3.5" }), publishing
+                                ? t('preview.unpublishedBar.publishing', { defaultValue: 'Publishing…' })
+                                : t('preview.unpublishedBar.publish', { defaultValue: 'Publish' })] })] }), packageId ? (_jsx(CommitTimeline, { open: historyOpen, onOpenChange: setHistoryOpen, packageId: packageId, onReverted: refresh })) : null] }));
 }

package/dist/preview/commitHistory.d.ts

@@ -0,0 +1,28 @@
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+/**
+ * ADR-0067 — package-scoped commit history reads/writes for the timeline.
+ *
+ * Each AI build (and Studio batch) lands as one revertible COMMIT on top of
+ * the metadata history. The history-not-confirm model: you don't approve each
+ * publish — you review this timeline and revert if a change was wrong. These
+ * helpers read the timeline (`GET /packages/:id/commits`) and revert one
+ * commit (`POST /packages/:id/commits/:cid/revert`). Cookie-authenticated like
+ * every console call; tolerant of the `{ data: ... }` / bare envelope shapes.
+ */
+export interface CommitEntry {
+    id: string;
+    operation: 'apply' | 'revert';
+    message?: string;
+    actor?: string;
+    aiModel?: string;
+    itemCount: number;
+    createdAt?: string;
+}
+export declare function fetchCommits(packageId: string): Promise<CommitEntry[]>;
+export declare function revertCommit(packageId: string, commitId: string): Promise<void>;

package/dist/preview/commitHistory.js

@@ -0,0 +1,48 @@
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+export async function fetchCommits(packageId) {
+    const res = await fetch(`/api/v1/packages/${encodeURIComponent(packageId)}/commits`, {
+        credentials: 'include',
+        headers: { Accept: 'application/json' },
+        cache: 'no-store',
+    });
+    if (!res.ok)
+        throw new Error(`commits HTTP ${res.status}`);
+    const data = (await res.json());
+    const list = Array.isArray(data)
+        ? data
+        : data?.commits ??
+            data?.data?.commits ??
+            [];
+    return (Array.isArray(list) ? list : []).map((raw) => {
+        const c = raw;
+        return {
+            id: String(c.id),
+            operation: c.operation === 'revert' ? 'revert' : 'apply',
+            message: typeof c.message === 'string' ? c.message : undefined,
+            actor: typeof c.actor === 'string' ? c.actor : undefined,
+            aiModel: typeof c.aiModel === 'string' ? c.aiModel : undefined,
+            itemCount: typeof c.itemCount === 'number' ? c.itemCount : 0,
+            createdAt: typeof c.createdAt === 'string' ? c.createdAt : undefined,
+        };
+    });
+}
+export async function revertCommit(packageId, commitId) {
+    const res = await fetch(`/api/v1/packages/${encodeURIComponent(packageId)}/commits/${encodeURIComponent(commitId)}/revert`, {
+        method: 'POST',
+        credentials: 'include',
+        headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
+        body: '{}',
+    });
+    const payload = (await res.json().catch(() => null));
+    const inner = payload?.data ?? payload ?? undefined;
+    if (!res.ok || inner?.success === false) {
+        const err = payload?.error;
+        throw new Error((typeof err === 'object' ? err?.message : err) ?? `HTTP ${res.status}`);
+    }
+}

package/dist/providers/ExpressionProvider.js

@@ -20,14 +20,19 @@ import { PredicateScopeProvider } from '@object-ui/react';
 const ExprCtx = createContext(null);
 export function ExpressionProvider({ children, user = {}, app = {}, data = {}, features = {} }) {
     const value = useMemo(() => {
-        const context = { user, app, data, features };
+        // ADR-0068: expose the SAME user object under the canonical `current_user`
+        // plus the back-compat `user` alias and the server-RLS-parity `ctx.user`
+        // alias, so a predicate authored against any one form evaluates identically
+        // on client, server-formula, and server-RLS.
+        const context = { current_user: user, user, ctx: { user }, app, data, features };
         const evaluator = new ExpressionEvaluator(context);
         return { user, app, data, features, evaluator };
     }, [user, app, data, features]);
     // Also feed the predicate scope used by useCondition/useExpression in
     // @object-ui/react so action visibility predicates (e.g. on toolbar
     // buttons) can see deployment-level flags like features.multiOrgEnabled.
-    const scope = useMemo(() => ({ user, app, data, features }), [user, app, data, features]);
+    // Mirror the canonical `current_user`/`user`/`ctx.user` aliases here too.
+    const scope = useMemo(() => ({ current_user: user, user, ctx: { user }, app, data, features }), [user, app, data, features]);
     return (_jsx(ExprCtx.Provider, { value: value, children: _jsx(PredicateScopeProvider, { scope: scope, children: children }) }));
 }
 /**
@@ -39,7 +44,8 @@ export function useExpressionContext() {
     if (!ctx) {
         // Return a safe default so components can be used outside the provider
         const fallback = { user: {}, app: {}, data: {}, features: {} };
-        return { ...fallback, evaluator: new ExpressionEvaluator(fallback) };
+        const evalContext = { current_user: {}, ctx: { user: {} }, ...fallback };
+        return { ...fallback, evaluator: new ExpressionEvaluator(evalContext) };
     }
     return ctx;
 }

package/dist/providers/MetadataProvider.js

@@ -459,6 +459,15 @@ export function MetadataProvider({ children, adapter, ttlMs = DEFAULT_TTL_MS })
     // NOT gated to preview-drafts mode: the live world every tree reads changed.
     useEffect(() => {
         return subscribeMetadataRefresh(() => {
+            // The adapter keeps its OWN object-schema cache (getObjectSchema) that the
+            // context refresh below does not touch. A publish/install just changed the
+            // live schema, so drop it too — otherwise create/edit forms (which read
+            // the adapter's getObjectSchema, NOT this context) keep showing the
+            // pre-publish field set until the adapter cache's 5-minute TTL lapses.
+            try {
+                adapterRef.current?.clearCache?.();
+            }
+            catch { /* adapter mid-swap */ }
             void refresh();
         });
     }, [refresh]);

package/dist/utils/index.d.ts

@@ -1,8 +1,8 @@
 /**
  * Utility functions for ObjectStack Console
  */
-export { resolveRecordFormTarget, } from './recordFormNavigation';
-export type { ObjectDefinitionForNavigation, RecordFormTarget, } from './recordFormNavigation';
+export { resolveRecordFormTarget, resolveFormViewLayout, } from './recordFormNavigation';
+export type { ObjectDefinitionForNavigation, RecordFormTarget, ObjectDefinitionForFormView, FormViewDefinition, FormViewModalLayout, } from './recordFormNavigation';
 export { deriveRelatedLists } from './deriveRelatedLists';
 export type { DerivedRelatedList } from './deriveRelatedLists';
 export { preferLocal } from './preferLocal';

package/dist/utils/index.js

@@ -1,7 +1,7 @@
 /**
  * Utility functions for ObjectStack Console
  */
-export { resolveRecordFormTarget, } from './recordFormNavigation';
+export { resolveRecordFormTarget, resolveFormViewLayout, } from './recordFormNavigation';
 export { deriveRelatedLists } from './deriveRelatedLists';
 export { preferLocal } from './preferLocal';
 export { appRouteSegment, matchAppBySegment } from './appRoute';