@object-ui/app-shell 7.1.0 → 7.3.0

package/dist/console/ai/AiChatPage.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
 // Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
 /**
  * AiChatPage — full-page ChatGPT-style AI surface.
@@ -17,9 +17,9 @@ import { useNavigate, useParams, useSearchParams } from 'react-router-dom';
 import { useAuth } from '@object-ui/auth';
 import { useObjectTranslation } from '@object-ui/i18n';
 import { toast } from 'sonner';
-import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue, Button, ShareDialog, Sheet, SheetContent, SheetDescription, SheetHeader, SheetTitle, cn, } from '@object-ui/components';
-import { PanelLeft, PanelLeftClose, PanelLeftOpen, Share2 } from 'lucide-react';
-import { ChatbotEnhanced, useAgents, useObjectChat, useHitlInChat, resolveDefaultAgentName, PLATFORM_DEFAULT_AGENT, agentRouteName, resolveAgentParam, isBuiltinAgentName, isBuildAgent, isAskAgent, publishHealthFromResponse, detectDraftResult, detectProposedPlan, buildProgressFromDraftReview, } from '@object-ui/plugin-chatbot';
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue, Button, ShareDialog, Sheet, SheetContent, SheetDescription, SheetHeader, SheetTitle, Empty, EmptyTitle, EmptyDescription, cn, } from '@object-ui/components';
+import { Bug, PanelLeft, PanelLeftClose, PanelLeftOpen, Share2 } from 'lucide-react';
+import { ChatbotEnhanced, useAgents, useObjectChat, useAiModels, useHitlInChat, resolveDefaultAgentName, PLATFORM_DEFAULT_AGENT, agentRouteName, resolveAgentParam, isBuiltinAgentName, isBuildAgent, isAskAgent, publishHealthFromResponse, detectDraftResult, detectProposedPlan, buildProgressFromDraftReview, } from '@object-ui/plugin-chatbot';
 import { AppHeader } from '../../layout/AppHeader';
 import { fetchPendingDraftCount } from '../../preview/draftStatus';
 import { emitMetadataRefresh } from '../../assistant/assistantBus';
@@ -30,6 +30,7 @@ import { fetchConversation, sanitizeChatMessagesForCache, useChatConversation, w
 import { useReconcileOnError } from '../../hooks/useReconcileOnError';
 import { ConversationsSidebar } from './ConversationsSidebar';
 import { LiveCanvas } from './LiveCanvas';
+import { BuildDebugDrawer } from './BuildDebugDrawer';
 const DEFAULT_AI_PATH = '/api/v1/ai';
 function partString(part, key) {
     const value = part[key];
@@ -363,6 +364,11 @@ export function AiChatPage({ apiBase: apiBaseProp, defaultAgent: defaultAgentPro
     // existing conversation, and the flag is stripped once the fresh id is
     // mirrored into the URL.
     const forceNewConversation = searchParams.get('new') !== null;
+    // ADR-0070 "Edit with AI": the package the user opened to edit (from the app
+    // list's per-app action). Forwarded to the build agent as `context.packageId`
+    // so its metadata reads scope to that app and edits bind to it from the first
+    // message (the agent seeds it as the conversation's active package).
+    const editPackageId = searchParams.get('package')?.trim() || undefined;
     const navigate = useNavigate();
     const { setContext } = useNavigationContext();
     useEffect(() => {
@@ -371,8 +377,15 @@ export function AiChatPage({ apiBase: apiBaseProp, defaultAgent: defaultAgentPro
     const apiBase = useMemo(() => resolveApiBase(apiBaseProp), [apiBaseProp]);
     const env = import.meta.env ?? {};
     const envDefaultAgent = env.VITE_AI_DEFAULT_AGENT;
-    const { agents, isLoading: agentsLoading, error: agentsError } = useAgents({ apiBase });
+    const { agents, isLoading: agentsLoading, error: agentsError, refetch: refetchAgents } = useAgents({ apiBase });
     const catalogNames = useMemo(() => agents.map((a) => a.name), [agents]);
+    // Catalog resolved with no agent to talk to. The `/ai` route guard already
+    // redirects when discovery reports AI unavailable (Community Edition), so this
+    // is the secondary safety net: a deployment that reports AI enabled but serves
+    // no agent (misconfig), a transient `/agents` failure, or a `VITE_AI_BASE_URL`
+    // server that returns an empty list. Either way, degrade to a graceful state
+    // instead of the agent-less echo chat (autoResponse) that ChatPane falls into.
+    const noAgents = !agentsLoading && agents.length === 0;
     // Is the first path segment an agent? It is when it resolves to one (friendly
     // alias / new id / legacy id). When it doesn't, it's a legacy bare
     // `/ai/:conversationId` link (redirected below). `undefined` = catalog still
@@ -484,6 +497,7 @@ export function AiChatPage({ apiBase: apiBaseProp, defaultAgent: defaultAgentPro
     const [refreshKey, setRefreshKey] = useState(0);
     const [titleHints, setTitleHints] = useState({});
     const [shareOpen, setShareOpen] = useState(false);
+    const [debugOpen, setDebugOpen] = useState(false);
     const [mobileChatsOpen, setMobileChatsOpen] = useState(false);
     const { collapsed: chatsCollapsed, toggle: toggleChatsCollapsed, handleCanvasOpenChange, } = useCollapsibleChatsList();
     // Keyboard shortcuts (ChatGPT/Claude parity): ⌘⇧O new chat, ⌘⇧S toggle list.
@@ -598,13 +612,29 @@ export function AiChatPage({ apiBase: apiBaseProp, defaultAgent: defaultAgentPro
         void t1;
         void t2;
     }, [conversationId]);
-    return (_jsxs("div", { className: "flex h-svh w-full flex-col bg-background", "data-testid": "ai-chat-page", children: [_jsxs("header", { className: "sticky top-0 z-30 flex h-14 w-full shrink-0 items-center gap-2 border-b bg-background/95 px-2 backdrop-blur sm:px-4", children: [_jsx(Button, { variant: "ghost", size: "icon", className: "h-8 w-8 shrink-0 md:hidden", onClick: () => setMobileChatsOpen(true), "aria-label": t('console.ai.openChats'), "data-testid": "ai-chat-mobile-sidebar-trigger", children: _jsx(PanelLeft, { className: "h-4 w-4" }) }), _jsx(Button, { variant: "ghost", size: "icon", className: "hidden h-8 w-8 shrink-0 md:inline-flex", onClick: toggleChatsCollapsed, "aria-label": chatsCollapsed
-                            ? t('console.ai.showChats', { defaultValue: 'Show chats' })
-                            : t('console.ai.hideChats', { defaultValue: 'Hide chats' }), title: chatsCollapsed
-                            ? t('console.ai.showChats', { defaultValue: 'Show chats' })
-                            : t('console.ai.hideChats', { defaultValue: 'Hide chats' }), "data-testid": "ai-chat-collapse-sidebar-trigger", "aria-pressed": chatsCollapsed, children: chatsCollapsed ? _jsx(PanelLeftOpen, { className: "h-4 w-4" }) : _jsx(PanelLeftClose, { className: "h-4 w-4" }) }), _jsx("div", { className: "min-w-0 flex-1", children: _jsx(AppHeader, { variant: "home" }) })] }), _jsx(Sheet, { open: mobileChatsOpen, onOpenChange: setMobileChatsOpen, children: _jsxs(SheetContent, { side: "left", className: "w-[320px] p-0 sm:max-w-[360px]", "data-testid": "ai-chat-mobile-sidebar", children: [_jsxs(SheetHeader, { className: "sr-only", children: [_jsx(SheetTitle, { children: t('console.ai.chats') }), _jsx(SheetDescription, { children: t('console.ai.chatsDescription') })] }), _jsx(ConversationsSidebar, { userId: userId, apiBase: apiBase, activeAgent: activeAgent, refreshKey: refreshKey, titleHints: titleHints, className: "h-full border-r-0", onNavigate: () => setMobileChatsOpen(false) })] }) }), conversationId && (_jsx(ShareDialog, { open: shareOpen, onOpenChange: setShareOpen, objectName: "ai_conversations", recordId: conversationId, recordLabel: "this conversation", apiBase: restApiBase, publicBaseUrl: publicShareBase })), _jsxs("div", { className: "flex min-h-0 flex-1 w-full bg-muted/20", children: [!chatsCollapsed && (_jsx(ConversationsSidebar, { userId: userId, apiBase: apiBase, activeAgent: activeAgent, refreshKey: refreshKey, titleHints: titleHints, className: "hidden w-72 shrink-0 border-r md:flex" })), _jsx("main", { className: "flex min-w-0 flex-1 flex-col", children: _jsx(ChatPane, { agents: agents, agentsLoading: agentsLoading, agentsError: agentsError, activeAgent: activeAgent, chatApi: chatApi, apiBase: apiBase, conversationId: conversationId, initialMessages: initialMessages, onSent: handleSent, onShare: () => setShareOpen(true), onCanvasOpenChange: handleCanvasOpenChange }, `${chatApi ?? 'local'}:${conversationId ?? 'pending'}`) })] })] }));
+    return (_jsxs("div", { className: "flex h-svh w-full flex-col bg-background", "data-testid": "ai-chat-page", children: [_jsxs("header", { className: "sticky top-0 z-30 flex h-14 w-full shrink-0 items-center gap-2 border-b bg-background/95 px-2 backdrop-blur sm:px-4", children: [!noAgents && (_jsxs(_Fragment, { children: [_jsx(Button, { variant: "ghost", size: "icon", className: "h-8 w-8 shrink-0 md:hidden", onClick: () => setMobileChatsOpen(true), "aria-label": t('console.ai.openChats'), "data-testid": "ai-chat-mobile-sidebar-trigger", children: _jsx(PanelLeft, { className: "h-4 w-4" }) }), _jsx(Button, { variant: "ghost", size: "icon", className: "hidden h-8 w-8 shrink-0 md:inline-flex", onClick: toggleChatsCollapsed, "aria-label": chatsCollapsed
+                                    ? t('console.ai.showChats', { defaultValue: 'Show chats' })
+                                    : t('console.ai.hideChats', { defaultValue: 'Hide chats' }), title: chatsCollapsed
+                                    ? t('console.ai.showChats', { defaultValue: 'Show chats' })
+                                    : t('console.ai.hideChats', { defaultValue: 'Hide chats' }), "data-testid": "ai-chat-collapse-sidebar-trigger", "aria-pressed": chatsCollapsed, children: chatsCollapsed ? _jsx(PanelLeftOpen, { className: "h-4 w-4" }) : _jsx(PanelLeftClose, { className: "h-4 w-4" }) })] })), _jsx("div", { className: "min-w-0 flex-1", children: _jsx(AppHeader, { variant: "home" }) })] }), noAgents ? (_jsx(AiUnavailable, { hasError: Boolean(agentsError), onRetry: refetchAgents, onHome: () => navigate('/home'), t: t })) : (_jsxs(_Fragment, { children: [_jsx(Sheet, { open: mobileChatsOpen, onOpenChange: setMobileChatsOpen, children: _jsxs(SheetContent, { side: "left", className: "w-[320px] p-0 sm:max-w-[360px]", "data-testid": "ai-chat-mobile-sidebar", children: [_jsxs(SheetHeader, { className: "sr-only", children: [_jsx(SheetTitle, { children: t('console.ai.chats') }), _jsx(SheetDescription, { children: t('console.ai.chatsDescription') })] }), _jsx(ConversationsSidebar, { userId: userId, apiBase: apiBase, activeAgent: activeAgent, refreshKey: refreshKey, titleHints: titleHints, className: "h-full border-r-0", onNavigate: () => setMobileChatsOpen(false) })] }) }), conversationId && (_jsx(ShareDialog, { open: shareOpen, onOpenChange: setShareOpen, objectName: "ai_conversations", recordId: conversationId, recordLabel: "this conversation", apiBase: restApiBase, publicBaseUrl: publicShareBase })), conversationId && isBuildAgent(activeAgent) && (_jsx(BuildDebugDrawer, { apiBase: apiBase, conversationId: conversationId, open: debugOpen, onOpenChange: setDebugOpen })), _jsxs("div", { className: "flex min-h-0 flex-1 w-full bg-muted/20", children: [!chatsCollapsed && (_jsx(ConversationsSidebar, { userId: userId, apiBase: apiBase, activeAgent: activeAgent, refreshKey: refreshKey, titleHints: titleHints, className: "hidden w-72 shrink-0 border-r md:flex" })), _jsx("main", { className: "flex min-w-0 flex-1 flex-col", children: _jsx(ChatPane, { agents: agents, agentsLoading: agentsLoading, agentsError: agentsError, activeAgent: activeAgent, chatApi: chatApi, apiBase: apiBase, conversationId: conversationId, editPackageId: editPackageId, initialMessages: initialMessages, onSent: handleSent, onShare: () => setShareOpen(true), onDebug: () => setDebugOpen(true), showDebug: isBuildAgent(activeAgent), onCanvasOpenChange: handleCanvasOpenChange }, `${chatApi ?? 'local'}:${conversationId ?? 'pending'}`) })] })] }))] }));
 }
-function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, apiBase, conversationId, initialMessages, onSent, onShare, onCanvasOpenChange, }) {
+/**
+ * Graceful state for `/ai` when the agent catalog resolved empty — shown
+ * instead of an agent-less echo chat. `hasError` distinguishes "AI not enabled
+ * on this deployment" (Community Edition) from "couldn't reach the AI service"
+ * (offline/misconfig), which also offers a retry. Either way there's a way out
+ * (back to home), so the route never dead-ends.
+ */
+function AiUnavailable({ hasError, onRetry, onHome, t, }) {
+    return (_jsx("div", { className: "flex flex-1 items-center justify-center p-6", "data-testid": "ai-unavailable", children: _jsxs(Empty, { children: [_jsx(EmptyTitle, { children: t('console.ai.unavailableTitle', { defaultValue: 'AI assistant unavailable' }) }), _jsx(EmptyDescription, { children: hasError
+                        ? t('console.ai.unavailableError', {
+                            defaultValue: "Couldn't reach the AI service. It may be temporarily offline — try again, or head back home.",
+                        })
+                        : t('console.ai.unavailableDescription', {
+                            defaultValue: "This deployment doesn't have an AI assistant enabled. Everything else works as usual.",
+                        }) }), _jsxs("div", { className: "mt-6 flex flex-col items-center gap-3 sm:flex-row", children: [hasError && (_jsx(Button, { variant: "outline", onClick: onRetry, "data-testid": "ai-unavailable-retry", children: t('console.ai.unavailableRetry', { defaultValue: 'Try again' }) })), _jsx(Button, { onClick: onHome, "data-testid": "ai-unavailable-home", children: t('console.ai.unavailableHome', { defaultValue: 'Back to home' }) })] })] }) }));
+}
+function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, apiBase, conversationId, editPackageId, initialMessages, onSent, onShare, onDebug, showDebug, onCanvasOpenChange, }) {
     const { t } = useObjectTranslation();
     const navigate = useNavigate();
     // The agent dropdown is a LAUNCHER now (not an in-surface mode toggle): it
@@ -669,9 +699,18 @@ function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, ap
     // ADR-0013 D2: reconcile a stream-transport failure instead of blindly
     // retrying. Shared across chat surfaces — see useReconcileOnError.
     const { errorSuppressed, handleChatError, setMessagesRef, resetSuppression } = useReconcileOnError({ chatApi, conversationId });
+    // ADR-0028: plan-filtered selectable AI model on the full-page Build/Ask
+    // surface. The footer <select> in ChatbotEnhanced renders only for 2+ models,
+    // so free / single-model envs see nothing. Mirrors ConsoleFloatingChatbot;
+    // the chosen model rides each request via useObjectChat's `model` below.
+    const { models: aiModels, defaultModelId } = useAiModels({ apiBase });
+    const [selectedModelId, setSelectedModelId] = useState(undefined);
+    const effectiveModelId = selectedModelId ?? defaultModelId;
     const { messages, isLoading, error, sendMessage, stop, reload, clear, setMessages, } = useObjectChat({
         api: chatApi,
         conversationId,
+        // ADR-0028: the user's picked model (or the env default) rides each request.
+        model: effectiveModelId,
         onError: handleChatError,
         body: {
             context: {
@@ -680,6 +719,9 @@ function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, ap
                 // Tell the agent the environment's publish posture so its narration
                 // matches reality (an auto-published build is live, not "to publish").
                 autoPublishAiBuilds: getRuntimeConfig().features.autoPublishAiBuilds,
+                // ADR-0070 "Edit with AI": scope the build agent to the app the user
+                // opened to edit. Cloud seeds it as the conversation's active package.
+                ...(editPackageId ? { packageId: editPackageId } : {}),
             },
         },
         initialMessages: hydrated,
@@ -718,11 +760,15 @@ function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, ap
         sendMessage(content, files);
         onSent(content);
     }, [sendMessage, onSent]);
-    const headerSlot = (_jsxs("div", { className: "flex flex-wrap items-center justify-between gap-2 border-b border-border/50 px-4 pb-2 pt-3 sm:px-6", children: [_jsx("div", { className: "flex min-w-0 flex-1 items-center gap-2", children: showAgentLauncher ? (_jsxs(Select, { value: activeAgent, onValueChange: (name) => navigate(`/ai/${agentRouteName(name)}`), disabled: agentsLoading, children: [_jsx(SelectTrigger, { className: "h-7 w-auto min-w-0 border-0 bg-transparent px-1.5 text-xs shadow-none hover:bg-accent focus:ring-0 focus:ring-offset-0 focus-visible:ring-1 focus-visible:ring-border/80 focus-visible:ring-offset-0 sm:min-w-[160px]", "data-testid": "ai-chat-agent-picker", "aria-label": t('console.ai.switchAssistant', { defaultValue: 'Switch assistant' }), children: _jsx(SelectValue, { placeholder: t('console.ai.chooseAgent', { defaultValue: 'Choose assistant…' }) }) }), _jsx(SelectContent, { align: "start", children: agents.map((agent) => (_jsxs(SelectItem, { value: agent.name, className: "text-xs", children: [_jsx("span", { className: "font-medium", children: localizeAgentLabel(t, agent.name, agent.label) }), agent.description ? (_jsx("span", { className: "block text-muted-foreground text-[10px] truncate max-w-[260px]", children: agent.description })) : null] }, agent.name))) })] })) : (_jsx("span", { className: "truncate text-xs font-medium text-foreground/85", children: activeAgentLabel })) }), _jsx("div", { className: "flex shrink-0 items-center gap-1", children: _jsx(Button, { variant: "ghost", size: "icon", className: "h-7 w-7 text-muted-foreground hover:text-foreground", onClick: onShare, disabled: !conversationId, "aria-label": t('console.ai.share'), "data-testid": "ai-chat-share-button", title: conversationId ? t('console.ai.shareTitle') : t('console.ai.shareDisabledTitle'), children: _jsx(Share2, { className: "h-3.5 w-3.5" }) }) }), agentsError ? (_jsx("span", { className: "basis-full text-[10px] text-amber-700 dark:text-amber-400", title: agentsError.message, children: t('console.ai.offlineDemoMode') })) : null] }));
+    const headerSlot = (_jsxs("div", { className: "flex flex-wrap items-center justify-between gap-2 border-b border-border/50 px-4 pb-2 pt-3 sm:px-6", children: [_jsx("div", { className: "flex min-w-0 flex-1 items-center gap-2", children: showAgentLauncher ? (_jsxs(Select, { value: activeAgent, onValueChange: (name) => navigate(`/ai/${agentRouteName(name)}`), disabled: agentsLoading, children: [_jsx(SelectTrigger, { className: "h-7 w-auto min-w-0 border-0 bg-transparent px-1.5 text-xs shadow-none hover:bg-accent focus:ring-0 focus:ring-offset-0 focus-visible:ring-1 focus-visible:ring-border/80 focus-visible:ring-offset-0 sm:min-w-[160px]", "data-testid": "ai-chat-agent-picker", "aria-label": t('console.ai.switchAssistant', { defaultValue: 'Switch assistant' }), children: _jsx(SelectValue, { placeholder: t('console.ai.chooseAgent', { defaultValue: 'Choose assistant…' }) }) }), _jsx(SelectContent, { align: "start", children: agents.map((agent) => (_jsxs(SelectItem, { value: agent.name, className: "text-xs", children: [_jsx("span", { className: "font-medium", children: localizeAgentLabel(t, agent.name, agent.label) }), agent.description ? (_jsx("span", { className: "block text-muted-foreground text-[10px] truncate max-w-[260px]", children: agent.description })) : null] }, agent.name))) })] })) : (_jsx("span", { className: "truncate text-xs font-medium text-foreground/85", children: activeAgentLabel })) }), _jsxs("div", { className: "flex shrink-0 items-center gap-1", children: [showDebug && onDebug ? (_jsx(Button, { variant: "ghost", size: "icon", className: "h-7 w-7 text-muted-foreground hover:text-foreground", onClick: onDebug, disabled: !conversationId, "aria-label": "Build Doctor", "data-testid": "ai-chat-debug-button", title: conversationId ? 'Build Doctor — what actually landed?' : 'Send a message first', children: _jsx(Bug, { className: "h-3.5 w-3.5" }) })) : null, _jsx(Button, { variant: "ghost", size: "icon", className: "h-7 w-7 text-muted-foreground hover:text-foreground", onClick: onShare, disabled: !conversationId, "aria-label": t('console.ai.share'), "data-testid": "ai-chat-share-button", title: conversationId ? t('console.ai.shareTitle') : t('console.ai.shareDisabledTitle'), children: _jsx(Share2, { className: "h-3.5 w-3.5" }) })] }), agentsError ? (_jsx("span", { className: "basis-full text-[10px] text-amber-700 dark:text-amber-400", title: agentsError.message, children: t('console.ai.offlineDemoMode') })) : null] }));
     return (_jsxs("div", { ref: split.containerRef, className: "relative flex min-h-0 flex-1 px-0", children: [_jsx("div", { "data-chat-column": true, className: canvasApp
                     ? 'flex min-h-0 shrink-0 justify-center'
                     : 'flex min-h-0 flex-1 justify-center', style: canvasApp ? { width: split.width } : undefined, children: _jsx(ChatbotEnhanced, { className: "min-h-0 flex-1 bg-background md:max-w-5xl", onUpgrade: () => window.open(cloudPricingDeepLink(), '_blank', 'noopener,noreferrer'), surface: "plain", maxHeight: "100%", headerSlot: headerSlot, messages: messages, placeholder: activeAgent
-                        ? t('console.ai.askAgent', { agent: activeAgentLabel })
+                        ? agentRouteName(activeAgent) === 'ask'
+                            // The generic "Ask {agent}…" doubles to "Ask Ask…" for the data-query
+                            // agent whose label IS "Ask". Use its purpose-built placeholder instead.
+                            ? t('console.ai.askAnything')
+                            : t('console.ai.askAgent', { agent: activeAgentLabel })
                         : agentsLoading
                             ? t('console.ai.loadingAgents')
                             : t('console.ai.askAnything'), labels: {
@@ -748,7 +794,11 @@ function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, ap
                         stopResponse: t('console.ai.stopResponse'),
                         trace: t('console.ai.trace'),
                         viewTrace: t('console.ai.viewTrace'),
-                    }, suggestions: suggestions, onSendMessage: handleSend, onClear: clear, hideClearBar: true, onStop: isLoading ? stop : undefined, onReload: reload, isLoading: isLoading, error: errorSuppressed ? undefined : error, enableMarkdown: true, onToolApprove: hitl.decide, toolDecisions: hitl.decisions, toolApproveLabel: "Approve & run", toolDenyLabel: "Reject", toolDenyReason: "Operator rejected from chat", 
+                    }, 
+                    // ADR-0028: selectable AI model — ChatbotEnhanced renders the footer
+                    // <select> only when 2+ models are offered (free / single-model envs
+                    // see none). The picked model flows to useObjectChat above.
+                    models: aiModels, selectedModelId: effectiveModelId, onModelChange: setSelectedModelId, suggestions: suggestions, onSendMessage: handleSend, onClear: clear, hideClearBar: true, onStop: isLoading ? stop : undefined, onReload: reload, isLoading: isLoading, error: errorSuppressed ? undefined : error, enableMarkdown: true, onToolApprove: hitl.decide, toolDecisions: hitl.decisions, toolApproveLabel: "Approve & run", toolDenyLabel: "Reject", toolDenyReason: "Operator rejected from chat", 
                     // Build-tree "Open app": jump straight into the app the agent just built.
                     onOpenBuiltApp: (appName, appSegment) => navigate(`/apps/${encodeURIComponent(appSegment ?? appName)}`), openBuiltAppLabel: t('console.ai.openBuiltApp', { defaultValue: 'Open app' }), 
                     // Live lifecycle truth for draft cards: the server's pending count per

package/dist/console/ai/BuildDebugDrawer.d.ts

@@ -0,0 +1,20 @@
+/**
+ * BuildDebugDrawer — self-serve "what actually landed?" panel for a build
+ * conversation. Opens a right-side sheet, calls the admin build-debug endpoint
+ * (see buildDebugApi.ts), and renders the reconciliation: agent-CLAIMED vs LIVE
+ * `sys_metadata`. The headline is the verdict + the two failure modes the chat
+ * can't show — PROPOSED-BUT-ORPHANED (a confirm card no turn applied) and
+ * CLAIMED-BUT-MISSING (said applied, isn't live). Read-only; no DB credentials.
+ *
+ * Distinct from `useReconcileOnError` (ADR-0013 D2 stream-failure recovery) —
+ * this reconciles the BUILD against live metadata, not a transport drop.
+ */
+import React from 'react';
+interface BuildDebugDrawerProps {
+    apiBase: string;
+    conversationId?: string;
+    open: boolean;
+    onOpenChange: (open: boolean) => void;
+}
+export declare function BuildDebugDrawer({ apiBase, conversationId, open, onOpenChange }: BuildDebugDrawerProps): React.JSX.Element;
+export {};

package/dist/console/ai/BuildDebugDrawer.js

@@ -0,0 +1,75 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
+/**
+ * BuildDebugDrawer — self-serve "what actually landed?" panel for a build
+ * conversation. Opens a right-side sheet, calls the admin build-debug endpoint
+ * (see buildDebugApi.ts), and renders the reconciliation: agent-CLAIMED vs LIVE
+ * `sys_metadata`. The headline is the verdict + the two failure modes the chat
+ * can't show — PROPOSED-BUT-ORPHANED (a confirm card no turn applied) and
+ * CLAIMED-BUT-MISSING (said applied, isn't live). Read-only; no DB credentials.
+ *
+ * Distinct from `useReconcileOnError` (ADR-0013 D2 stream-failure recovery) —
+ * this reconciles the BUILD against live metadata, not a transport drop.
+ */
+import { useEffect, useState } from 'react';
+import { Sheet, SheetContent, SheetHeader, SheetTitle, SheetDescription, } from '@object-ui/components';
+import { Bug, CheckCircle2, AlertTriangle, XCircle, Loader2, CircleSlash } from 'lucide-react';
+import { fetchBuildDebug } from './buildDebugApi';
+export function BuildDebugDrawer({ apiBase, conversationId, open, onOpenChange }) {
+    const [report, setReport] = useState(null);
+    const [loading, setLoading] = useState(false);
+    const [error, setError] = useState(null);
+    useEffect(() => {
+        if (!open || !conversationId)
+            return;
+        let cancelled = false;
+        setLoading(true);
+        setError(null);
+        setReport(null);
+        fetchBuildDebug(apiBase, conversationId)
+            .then((r) => {
+            if (cancelled)
+                return;
+            if (!r)
+                setError('Not available — the conversation was not found or you are not authorized.');
+            else
+                setReport(r);
+        })
+            .catch((e) => {
+            if (!cancelled)
+                setError(e instanceof Error ? e.message : String(e));
+        })
+            .finally(() => {
+            if (!cancelled)
+                setLoading(false);
+        });
+        return () => {
+            cancelled = true;
+        };
+    }, [open, conversationId, apiBase]);
+    const rec = report?.reconciliation;
+    const problems = rec ? rec.orphaned.length + rec.missing.length + rec.errors.length : 0;
+    return (_jsx(Sheet, { open: open, onOpenChange: onOpenChange, children: _jsxs(SheetContent, { side: "right", className: "w-full overflow-y-auto sm:max-w-xl", children: [_jsxs(SheetHeader, { children: [_jsxs(SheetTitle, { className: "flex items-center gap-2", children: [_jsx(Bug, { className: "h-4 w-4" }), " Build Doctor"] }), _jsx(SheetDescription, { children: "What the agent claimed vs what is actually live. Read-only diagnostic." })] }), _jsxs("div", { className: "mt-4 space-y-4 text-sm", children: [loading && (_jsxs("div", { className: "flex items-center gap-2 text-muted-foreground", children: [_jsx(Loader2, { className: "h-4 w-4 animate-spin" }), " Reconciling\u2026"] })), error && !loading && (_jsx("div", { className: "rounded-md border border-destructive/30 bg-destructive/10 p-3 text-destructive", children: error })), report && !loading && (_jsxs(_Fragment, { children: [_jsxs("div", { className: "rounded-md border bg-muted/30 p-3 text-xs text-muted-foreground", children: [_jsx("div", { className: "font-medium text-foreground", children: report.title ?? '(untitled)' }), _jsxs("div", { className: "mt-1", children: [report.summary.userTurns, " turn(s) \u00B7 ", report.summary.messages, " msgs \u00B7", ' ', report.summary.totalTokens.toLocaleString(), " tok \u00B7", ' ', (report.summary.llmMs / 1000).toFixed(1), "s LLM", report.summary.models.length ? ` · ${report.summary.models.join(', ')}` : ''] })] }), rec && (_jsxs("div", { className: rec.ok
+                                        ? 'flex items-center gap-2 rounded-md border border-emerald-500/30 bg-emerald-500/10 p-3 text-emerald-700 dark:text-emerald-400'
+                                        : 'flex items-center gap-2 rounded-md border border-destructive/30 bg-destructive/10 p-3 text-destructive', children: [rec.ok ? _jsx(CheckCircle2, { className: "h-4 w-4" }) : _jsx(AlertTriangle, { className: "h-4 w-4" }), _jsx("span", { className: "font-medium", children: rec.ok
+                                                ? `All ${rec.liveCount} attempted change(s) are live — nothing evaporated.`
+                                                : `${problems} discrepancy(ies) — what the chat said doesn't match what's live.` })] })), rec && rec.orphaned.length > 0 && (_jsx(FindingSection, { icon: _jsx(CircleSlash, { className: "h-4 w-4 text-destructive" }), title: "Proposed but never applied", hint: "A confirm card the agent proposed but no later turn applied \u2014 the change silently evaporated.", findings: rec.orphaned, tone: "destructive" })), rec && rec.missing.length > 0 && (_jsx(FindingSection, { icon: _jsx(AlertTriangle, { className: "h-4 w-4 text-amber-600" }), title: "Claimed but missing", hint: "A tool result said it was applied, but the artifact isn't live in sys_metadata.", findings: rec.missing, tone: "amber" })), rec && rec.errors.length > 0 && (_jsx(FindingSection, { icon: _jsx(XCircle, { className: "h-4 w-4 text-destructive" }), title: "Tool errors", hint: "Tool calls that returned an error during the build.", findings: rec.errors, tone: "destructive" })), report.verify && (_jsxs("div", { className: "rounded-md border p-3 text-xs", children: [_jsx("div", { className: "font-medium text-foreground", children: "Build check (verify_build)" }), _jsxs("div", { className: "mt-1 text-muted-foreground", children: ["Your app:", ' ', report.verify.userIssues.length === 0 ? (_jsx("span", { className: "text-emerald-600 dark:text-emerald-400", children: "0 issues" })) : (_jsxs("span", { className: "text-destructive", children: [report.verify.userIssues.length, " issue(s)"] })), report.verify.platformNoise > 0
+                                                    ? ` · ${report.verify.platformNoise} platform sys_* finding(s) hidden`
+                                                    : ''] }), report.verify.userIssues.map((is, i) => (_jsxs("div", { className: "mt-1 text-destructive", children: ["[", is.severity, "] ", is.code, " ", is.artifact ? `${is.artifact.type}:${is.artifact.name}` : ''] }, i)))] })), report.pendingActions.length > 0 && (_jsxs("div", { className: "rounded-md border p-3 text-xs", children: [_jsx("div", { className: "font-medium text-foreground", children: "Pending actions" }), report.pendingActions.map((p, i) => (_jsxs("div", { className: "mt-1 text-muted-foreground", children: [p.tool ?? '?', " \u00B7 ", p.object ?? '-', " \u00B7 ", _jsx("span", { className: "font-mono", children: p.status ?? '-' })] }, i)))] })), _jsxs("details", { className: "rounded-md border p-3 text-xs", children: [_jsxs("summary", { className: "cursor-pointer font-medium text-foreground", children: ["Timeline (", report.timeline.length, ")"] }), _jsx("div", { className: "mt-2 space-y-1 font-mono text-[11px] leading-relaxed", children: report.timeline.map((e, i) => (_jsx(TimelineRow, { entry: e }, i))) })] })] }))] })] }) }));
+}
+function FindingSection({ icon, title, hint, findings, tone, }) {
+    const border = tone === 'destructive' ? 'border-destructive/30' : 'border-amber-500/30';
+    return (_jsxs("div", { className: `rounded-md border ${border} p-3`, children: [_jsxs("div", { className: "flex items-center gap-2 font-medium text-foreground", children: [icon, " ", title, " (", findings.length, ")"] }), _jsx("div", { className: "mt-1 text-xs text-muted-foreground", children: hint }), _jsx("div", { className: "mt-2 space-y-1", children: findings.map((f, i) => (_jsxs("div", { className: "font-mono text-xs", children: [f.t ? `${f.t} · ` : '', f.tool, " \u2192 ", f.artifact.type, ":", f.artifact.name, _jsxs("span", { className: "text-muted-foreground", children: [" (", f.status, ")"] })] }, i))) })] }));
+}
+function TimelineRow({ entry }) {
+    if (entry.kind === 'user') {
+        return (_jsxs("div", { children: [_jsx("span", { className: "text-muted-foreground", children: entry.t }), " \uD83D\uDC64 ", entry.text] }));
+    }
+    if (entry.kind === 'assistant-text') {
+        return (_jsxs("div", { children: [_jsx("span", { className: "text-muted-foreground", children: entry.t }), " \uD83E\uDD16 ", entry.text] }));
+    }
+    if (entry.kind === 'assistant-calls') {
+        return (_jsxs("div", { children: [_jsx("span", { className: "text-muted-foreground", children: entry.t }), " \uD83E\uDD16 \u2192", ' ', entry.calls.map((c) => c.name).join(', ')] }));
+    }
+    return (_jsxs("div", { className: entry.isError ? 'text-destructive' : '', children: [_jsx("span", { className: "text-muted-foreground", children: entry.t }), " \u21B3 ", entry.name, entry.status ? ` (${entry.status})` : ''] }));
+}

package/dist/console/ai/buildDebugApi.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Client for the admin build-debug endpoint
+ * (`GET /api/v1/ai/conversations/:id/debug`, service-ai).
+ *
+ * The chat renders the build agent's self-report, never what actually landed.
+ * This fetches the server-side reconciliation — agent-CLAIMED vs LIVE
+ * `sys_metadata` — so a signed-in admin can diagnose a build that "went wrong"
+ * from the browser, with no DB credentials. Mirrors `fetchConversation`'s
+ * same-origin cookie auth.
+ */
+export interface ArtifactRef {
+    type: string;
+    name: string;
+}
+export interface MutationFinding {
+    t?: string;
+    tool: string;
+    status: string;
+    artifact: ArtifactRef;
+}
+export interface VerifyIssue {
+    severity: string;
+    code: string;
+    artifact?: ArtifactRef;
+}
+export interface VerifySummary {
+    status: string;
+    errors: number;
+    warnings: number;
+    userIssues: VerifyIssue[];
+    platformNoise: number;
+}
+export type TimelineEntry = {
+    t: string;
+    kind: 'user';
+    text: string;
+} | {
+    t: string;
+    kind: 'assistant-text';
+    text: string;
+    model?: string;
+    tokens?: number;
+    ms?: number;
+} | {
+    t: string;
+    kind: 'assistant-calls';
+    calls: Array<{
+        name: string;
+        args: unknown;
+    }>;
+    model?: string;
+    tokens?: number;
+    ms?: number;
+} | {
+    t: string;
+    kind: 'tool-result';
+    name: string;
+    isError: boolean;
+    status?: string;
+    preview: string;
+};
+export interface BuildDebugReport {
+    conversationId: string;
+    title: string | null;
+    summary: {
+        models: string[];
+        userTurns: number;
+        messages: number;
+        totalTokens: number;
+        llmMs: number;
+    };
+    reconciliation: {
+        orphaned: MutationFinding[];
+        missing: MutationFinding[];
+        errors: MutationFinding[];
+        liveCount: number;
+        ok: boolean;
+    };
+    verify: VerifySummary | null;
+    timeline: TimelineEntry[];
+    pendingActions: Array<{
+        tool: string | null;
+        object: string | null;
+        status: string | null;
+        error: string | null;
+        createdAt: string | null;
+    }>;
+}
+/**
+ * Fetch the reconciliation report for a build conversation. Returns null on
+ * 403/404 (not authorized / unknown conversation) so the caller can show an
+ * empty state instead of throwing.
+ */
+export declare function fetchBuildDebug(apiBase: string, conversationId: string): Promise<BuildDebugReport | null>;

package/dist/console/ai/buildDebugApi.js

@@ -0,0 +1,16 @@
+// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
+/**
+ * Fetch the reconciliation report for a build conversation. Returns null on
+ * 403/404 (not authorized / unknown conversation) so the caller can show an
+ * empty state instead of throwing.
+ */
+export async function fetchBuildDebug(apiBase, conversationId) {
+    const res = await fetch(`${apiBase}/conversations/${encodeURIComponent(conversationId)}/debug`, {
+        credentials: 'include',
+    });
+    if (res.status === 404 || res.status === 403 || res.status === 401)
+        return null;
+    if (!res.ok)
+        throw new Error(`GET build debug failed: ${res.status}`);
+    return (await res.json());
+}

package/dist/console/home/HomeLayout.js

@@ -11,20 +11,18 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect } from 'react';
 import { useNavigationContext } from '../../context/NavigationContext';
 import { AppHeader } from '../../layout/AppHeader';
-import { useDiscovery } from '@object-ui/react';
+import { useAiSurfaceEnabled } from '../../hooks/useAiSurface';
 import { useObjectTranslation } from '@object-ui/i18n';
 // Lightweight FAB stub — the heavy chat chunk graph only downloads on
 // first hover/click. See ../../layout/ConsoleChatbotFab.tsx.
 import { ConsoleChatbotFab } from '../../layout/ConsoleChatbotFab';
 export function HomeLayout({ children, userId }) {
     const { setContext } = useNavigationContext();
-    const { isAiEnabled } = useDiscovery();
     const { t } = useObjectTranslation();
-    // Render the chatbot whenever AI is reachable. If the developer has explicitly
-    // configured `VITE_AI_BASE_URL`, trust that opt-in even when discovery
-    // reports AI as disabled (e.g. framework started without `--preset full`).
-    const aiBaseUrlConfigured = Boolean(import.meta.env?.VITE_AI_BASE_URL);
-    const showChatbot = isAiEnabled || aiBaseUrlConfigured;
+    // Render the chatbot only when the server serves AI (or an explicit
+    // `VITE_AI_BASE_URL` opt-in is set) — same runtime signal as the rest of the
+    // console's AI surface. See useAiSurfaceEnabled.
+    const { enabled: showChatbot } = useAiSurfaceEnabled();
     useEffect(() => {
         setContext('home');
     }, [setContext]);

package/dist/console/home/HomePage.js

@@ -31,15 +31,7 @@ import { Empty, EmptyTitle, EmptyDescription, Button } from '@object-ui/componen
 import { Sparkles, ShieldAlert, X, UploadCloud, MessageSquareText } from 'lucide-react';
 import { useMetadataClient } from '../../views/metadata-admin/useMetadata';
 import { usePublishAllDrafts } from '../../preview/usePublishAllDrafts';
-/** Resolve the AI service base, mirroring AiChatPage/ConsoleFloatingChatbot. */
-function resolveAiApiBase() {
-    const env = import.meta.env ?? {};
-    const fromEnv = env.VITE_AI_BASE_URL;
-    if (fromEnv)
-        return fromEnv.replace(/\/$/, '');
-    const serverUrl = env.VITE_SERVER_URL ?? '';
-    return `${serverUrl.replace(/\/$/, '')}/api/v1/ai`;
-}
+import { resolveAiApiBase } from '../../hooks/useAiSurface';
 /**
  * Which AI home CTAs to surface, driven by the live agent catalog (the single
  * source of truth) — gated PER agent, because the community edition can be in

package/dist/console/organizations/CreateWorkspaceDialog.js

@@ -12,6 +12,7 @@ import { Dialog, DialogContent, DialogDescription, DialogFooter, DialogHeader, D
 import { useAuth } from '@object-ui/auth';
 import { useObjectTranslation } from '@object-ui/i18n';
 import { Loader2 } from 'lucide-react';
+import { provisionProductionEnvironment } from './provisionEnvironment';
 /** Convert a display name to a URL-friendly slug */
 function nameToSlug(name) {
     return name
@@ -81,6 +82,19 @@ export function CreateWorkspaceDialog({ open, onOpenChange, onCreated, }) {
         setError(null);
         try {
             const org = await createOrganization({ name: name.trim(), slug: slug.trim() });
+            // Born-with-env: eagerly ensure the new org's production environment so
+            // the user lands in a ready workspace with no onboarding-wizard detour.
+            // `createOrganization` already switched the active org; we also pass
+            // `organizationId` explicitly so the target is unambiguous. Idempotent +
+            // best-effort: a control plane that auto-provisions the env on create
+            // resolves this to `alreadyProvisioned`; a genuine failure falls through
+            // to the onboarding gate (lazy provision on first navigation).
+            try {
+                await provisionProductionEnvironment({ organizationId: org.id });
+            }
+            catch (provisionErr) {
+                console.warn('[CreateWorkspace] eager env provision failed; onboarding gate will provision lazily', provisionErr);
+            }
             onCreated?.(org);
         }
         catch (err) {
@@ -89,7 +103,7 @@ export function CreateWorkspaceDialog({ open, onOpenChange, onCreated, }) {
         finally {
             setIsSubmitting(false);
         }
-    }, [name, slug, createOrganization, onCreated]);
+    }, [name, slug, multiOrgDisabled, t, createOrganization, onCreated]);
     return (_jsx(Dialog, { open: open, onOpenChange: onOpenChange, children: _jsx(DialogContent, { className: "sm:max-w-[425px]", "data-testid": "create-workspace-dialog", children: _jsxs("form", { onSubmit: handleSubmit, children: [_jsxs(DialogHeader, { children: [_jsx(DialogTitle, { children: t('workspace.createTitle', { defaultValue: 'Create a workspace' }) }), _jsx(DialogDescription, { children: t('workspace.createDescription', {
                                     defaultValue: 'A workspace is a shared space for your team to collaborate.',
                                 }) })] }), _jsxs("div", { className: "grid gap-4 py-4", children: [_jsxs("div", { className: "grid gap-2", children: [_jsx(Label, { htmlFor: "workspace-name", children: t('workspace.nameLabel', { defaultValue: 'Workspace name' }) }), _jsx(Input, { id: "workspace-name", placeholder: t('workspace.namePlaceholder', { defaultValue: 'e.g., Acme Inc' }), value: name, onChange: (e) => setName(e.target.value), autoFocus: true, "data-testid": "workspace-name-input" })] }), _jsxs("div", { className: "grid gap-2", children: [_jsx(Label, { htmlFor: "workspace-slug", children: t('workspace.slugLabel', { defaultValue: 'URL slug' }) }), _jsx(Input, { id: "workspace-slug", placeholder: "acme-inc", value: slug, onChange: (e) => {

package/dist/console/organizations/OrganizationsPage.js

@@ -12,7 +12,7 @@ import { Avatar, AvatarImage, AvatarFallback, Button, Input, Empty, EmptyTitle,
 import { Plus, Search, Loader2 } from 'lucide-react';
 import { useAuth } from '@object-ui/auth';
 import { useObjectTranslation } from '@object-ui/i18n';
-import { useNavigate } from 'react-router-dom';
+import { useNavigate, useSearchParams } from 'react-router-dom';
 import { CreateWorkspaceDialog } from './CreateWorkspaceDialog';
 import { resolveHomeUrl } from './resolveHomeUrl';
 function getOrgInitials(name) {
@@ -26,6 +26,14 @@ function getOrgInitials(name) {
 export function OrganizationsPage() {
     const { t } = useObjectTranslation();
     const navigate = useNavigate();
+    // Two deliberate ways to reach this page (vs the auto-skipping post-login
+    // redirect): `?manage=1` (avatar menu "My Organizations") shows the picker;
+    // `?create=1` (avatar menu "Create workspace") additionally opens the create
+    // dialog directly. Both suppress the single-org auto-skip below so a
+    // single-org user can actually reach "New organization" / the dialog.
+    const [searchParams] = useSearchParams();
+    const manageMode = searchParams.get('manage') === '1';
+    const wantsCreate = searchParams.get('create') === '1';
     const { organizations, activeOrganization, isOrganizationsLoading, switchOrganization, getAuthConfig, } = useAuth();
     const [query, setQuery] = useState('');
     const [isCreateOpen, setIsCreateOpen] = useState(false);
@@ -91,16 +99,36 @@ export function OrganizationsPage() {
             return;
         if (isOrganizationsLoading)
             return;
+        if (wantsCreate)
+            return; // came to create — don't bounce
         if (orgList.length !== 1)
             return;
         autoSelectedRef.current = true;
-        void handleSelect(orgList[0]);
+        // Single-org users have no real choice to make. In manage mode (`?manage=1`,
+        // used by the Cloud app "Members" nav and the avatar "My Organizations"
+        // entry), skip the pointless one-item picker and deep-link straight to that
+        // org's member management; otherwise switch into the org and land on home.
+        if (manageMode) {
+            navigate(`/organizations/${orgList[0].slug}/members`, { replace: true });
+        }
+        else {
+            void handleSelect(orgList[0]);
+        }
         // eslint-disable-next-line react-hooks/exhaustive-deps
-    }, [isOrganizationsLoading, orgList.length]);
+    }, [isOrganizationsLoading, orgList.length, manageMode, wantsCreate]);
+    // Open the create dialog when arriving via the header "Create workspace"
+    // entry (`?create=1`). Guarded so closing the dialog doesn't re-open it.
+    const createOpenedRef = useRef(false);
+    useEffect(() => {
+        if (wantsCreate && !createOpenedRef.current) {
+            createOpenedRef.current = true;
+            setIsCreateOpen(true);
+        }
+    }, [wantsCreate]);
     // Show a spinner while we're either still loading, or about to auto-redirect
     // because there's only one org. This prevents the picker from briefly
     // flashing on screen for single-org users.
-    const willAutoSelect = !isOrganizationsLoading && orgList.length === 1;
+    const willAutoSelect = !wantsCreate && !isOrganizationsLoading && orgList.length === 1;
     if (isOrganizationsLoading || willAutoSelect) {
         return (_jsx("div", { className: "flex flex-1 items-center justify-center py-20", children: _jsx(Loader2, { className: "h-5 w-5 animate-spin text-muted-foreground" }) }));
     }

package/dist/console/organizations/manage/OrganizationLayout.js

@@ -45,7 +45,7 @@ export function OrganizationLayout() {
         { to: 'invitations', label: t('organization.tabs.invitations', { defaultValue: 'Invitations' }) },
         { to: 'settings', label: t('organization.tabs.settings', { defaultValue: 'Settings' }) },
     ];
-    return (_jsxs("div", { className: "flex min-h-svh w-full flex-col bg-background", "data-testid": "organization-layout", children: [_jsx("header", { className: "sticky top-0 z-30 flex h-14 w-full shrink-0 items-center gap-2 border-b bg-background px-2 sm:px-4", children: _jsx(AppHeader, { variant: "orgs" }) }), _jsx("div", { className: "border-b", children: _jsxs("div", { className: "mx-auto w-full max-w-5xl px-4 sm:px-6 pt-6", children: [_jsxs("button", { onClick: () => navigate('/organizations'), className: "mb-3 inline-flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground", children: [_jsx(ArrowLeft, { className: "h-3.5 w-3.5" }), t('organization.backToList', { defaultValue: 'Back to organizations' })] }), _jsx("div", { className: "flex items-center justify-between gap-4", children: _jsxs("div", { className: "min-w-0", children: [_jsx("h1", { className: "truncate text-2xl font-bold tracking-tight", children: org.name }), _jsx("p", { className: "text-xs text-muted-foreground", children: org.slug })] }) }), _jsx("nav", { className: "mt-4 flex gap-1 -mb-px", children: tabs.map((tab) => (_jsx(NavLink, { to: tab.to, end: true, className: ({ isActive }) => `border-b-2 px-3 py-2 text-sm font-medium transition-colors ${isActive
+    return (_jsxs("div", { className: "flex min-h-svh w-full flex-col bg-background", "data-testid": "organization-layout", children: [_jsx("header", { className: "sticky top-0 z-30 flex h-14 w-full shrink-0 items-center gap-2 border-b bg-background px-2 sm:px-4", children: _jsx(AppHeader, { variant: "orgs" }) }), _jsx("div", { className: "border-b", children: _jsxs("div", { className: "mx-auto w-full max-w-5xl px-4 sm:px-6 pt-6", children: [(organizations ?? []).length > 1 && (_jsxs("button", { onClick: () => navigate('/organizations'), className: "mb-3 inline-flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground", children: [_jsx(ArrowLeft, { className: "h-3.5 w-3.5" }), t('organization.backToList', { defaultValue: 'Back to organizations' })] })), _jsx("div", { className: "flex items-center justify-between gap-4", children: _jsxs("div", { className: "min-w-0", children: [_jsx("h1", { className: "truncate text-2xl font-bold tracking-tight", children: org.name }), _jsx("p", { className: "text-xs text-muted-foreground", children: org.slug })] }) }), _jsx("nav", { className: "mt-4 flex gap-1 -mb-px", children: tabs.map((tab) => (_jsx(NavLink, { to: tab.to, end: true, className: ({ isActive }) => `border-b-2 px-3 py-2 text-sm font-medium transition-colors ${isActive
                                     ? 'border-primary text-foreground'
                                     : 'border-transparent text-muted-foreground hover:text-foreground'}`, children: tab.label }, tab.to))) })] }) }), _jsx("main", { className: "flex-1 min-w-0 overflow-auto", children: _jsx("div", { className: "mx-auto w-full max-w-5xl px-4 sm:px-6 py-6", children: _jsx(Outlet, { context: { org } }) }) })] }));
 }

package/dist/console/organizations/provisionEnvironment.d.ts

@@ -0,0 +1,53 @@
+/**
+ * provisionEnvironment
+ *
+ * Eagerly ensure a freshly created organization has its **production**
+ * environment so a self-service "create another workspace" lands the user in a
+ * ready console — no onboarding-wizard detour.
+ *
+ * ObjectStack runs a 1-production-environment-per-organization model: an org's
+ * FIRST environment is born as its production env (allowed on every plan,
+ * including free). The cloud control plane exposes this as
+ * `POST /api/v1/cloud/environments`, which only needs a `displayName`; the org
+ * is resolved from `organizationId` (preferred) → the better-auth active org →
+ * the actor's first membership.
+ *
+ * Idempotent + best-effort by contract:
+ *   - Some control planes auto-provision the production env on org create (the
+ *     `auto-default-environment` plugin). This call then races that plugin and
+ *     the loser gets a 403 `PRODUCTION_ENV_LIMIT` / 409 — which is SUCCESS for
+ *     us (the org is already born-with-env), not a failure.
+ *   - On a genuine failure (5xx / network) the caller swallows the error and
+ *     the onboarding gate provisions the env lazily on first navigation.
+ *
+ * @module
+ */
+/** Result of ensuring the org's production environment exists. */
+export interface ProvisionedEnvironment {
+    /** Environment id (control-plane `sys_environment` row), when this call minted it. */
+    id?: string;
+    /** Opaque system hostname, e.g. `os-<shortId>.<rootDomain>` for production. */
+    hostname?: string;
+    /**
+     * True when the org already had its production env (the control plane
+     * provisioned it on create). The born-with-env contract is still satisfied.
+     */
+    alreadyProvisioned?: boolean;
+}
+/**
+ * Ensure the production environment exists for a just-created organization.
+ *
+ * Uses {@link createAuthenticatedFetch} so the request carries the Bearer token
+ * and the active-org `X-Tenant-ID` header; `organizationId` is also sent in the
+ * body so the target org is unambiguous even before the session active-org
+ * switch has propagated. The env is named `Production` to match the
+ * born-with-env convention used by the signup org.
+ *
+ * @throws on a genuine control-plane failure (5xx / network). A 403/409
+ *   "already has its production env" is NOT an error — it resolves to
+ *   `{ alreadyProvisioned: true }`.
+ */
+export declare function provisionProductionEnvironment(opts: {
+    organizationId: string;
+    displayName?: string;
+}): Promise<ProvisionedEnvironment>;