@object-ui/app-shell 7.1.0 → 7.3.0

package/dist/views/metadata-admin/AssignedUsersSection.js

@@ -0,0 +1,151 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ *
+ * AssignedUsersSection — "Manage Assignments" for a permission set.
+ *
+ * The admin's mental model is "who holds this role / AI seat" — so this is a
+ * people-first list (name + email + remove), not a raw junction table. It reads
+ * `sys_user_permission_set` for the set, resolves each `user_id` to a real
+ * person, and uses the reusable `RecordPickerDialog` to assign more. Server-side
+ * rules on the junction insert (e.g. the AI-seat cap) are caught and shown as a
+ * friendly, localized inline message — not a raw developer error.
+ *
+ * Permission-set-agnostic: every role gets the same UI, and the AI seat
+ * (`ai_seat`) is just one of them. The generic add-by-picker engine (spec
+ * RecordRelatedListProps.add) powers the capability; this is the polished
+ * surface for the high-value case.
+ */
+import * as React from 'react';
+import { Button } from '@object-ui/components';
+import { RecordPickerDialog } from '@object-ui/fields';
+import { useAdapter } from '@object-ui/react';
+import { Plus, X, Users, Loader2, AlertCircle } from 'lucide-react';
+import { detectLocale } from './i18n';
+/** Minimal locale-aware copy (zh vs everything-else) — keeps the surface in the user's language. */
+function useCopy() {
+    const zh = React.useMemo(() => detectLocale().toLowerCase().startsWith('zh'), []);
+    return React.useMemo(() => zh
+        ? {
+            title: '已分配用户',
+            add: '添加用户',
+            remove: '移除',
+            empty: '还没有分配任何用户。点击「添加用户」来分配。',
+            loading: '加载中…',
+            pickTitle: '选择要分配的用户',
+            seatFull: (n) => 'AI 席位已用完(' + n + '/' + n + ')。请先移除一个用户,或在许可证中提升席位上限,再分配新用户。',
+            addFailed: '分配失败,请重试。',
+            countOf: (n) => n + ' 人',
+        }
+        : {
+            title: 'Assigned Users',
+            add: 'Add user',
+            remove: 'Remove',
+            empty: 'No users assigned yet. Click "Add user" to assign.',
+            loading: 'Loading…',
+            pickTitle: 'Select users to assign',
+            seatFull: (n) => 'All ' + n + ' AI seat(s) are in use. Remove a user or raise the license cap before assigning another.',
+            addFailed: 'Failed to assign. Please try again.',
+            countOf: (n) => String(n),
+        }, [zh]);
+}
+const asArray = (res) => Array.isArray(res) ? res : res?.records ?? res?.items ?? res?.data ?? [];
+const personLabel = (u) => u?.full_name || u?.name || u?.display_name || u?.email || String(u?.id ?? '');
+export function AssignedUsersSection({ permissionSetName }) {
+    const adapter = useAdapter();
+    const c = useCopy();
+    const [setId, setSetId] = React.useState(null);
+    const [rows, setRows] = React.useState([]);
+    const [loading, setLoading] = React.useState(true);
+    const [pickerOpen, setPickerOpen] = React.useState(false);
+    const [busy, setBusy] = React.useState(false);
+    const [error, setError] = React.useState(null);
+    const load = React.useCallback(async () => {
+        setLoading(true);
+        try {
+            const sets = asArray(await adapter.find('sys_permission_set', { $filter: { name: permissionSetName }, limit: 1 }));
+            const id = sets[0]?.id ? String(sets[0].id) : null;
+            setSetId(id);
+            if (!id) {
+                setRows([]);
+                return;
+            }
+            const grants = asArray(await adapter.find('sys_user_permission_set', { $filter: { permission_set_id: id }, $top: 500 }));
+            const userIds = [...new Set(grants.map((g) => g.user_id).filter(Boolean).map(String))];
+            const users = userIds.length
+                ? asArray(await adapter.find('sys_user', { $filter: { id: { $in: userIds } }, $top: 500 }))
+                : [];
+            const byId = new Map(users.map((u) => [String(u.id), u]));
+            setRows(grants
+                .filter((g) => g.user_id)
+                .map((g) => {
+                const u = byId.get(String(g.user_id));
+                return {
+                    grantId: String(g.id),
+                    userId: String(g.user_id),
+                    name: u ? personLabel(u) : String(g.user_id),
+                    email: u?.email ?? '',
+                };
+            }));
+        }
+        catch {
+            setRows([]);
+        }
+        finally {
+            setLoading(false);
+        }
+    }, [adapter, permissionSetName]);
+    React.useEffect(() => {
+        void load();
+    }, [load]);
+    const assignedIds = React.useMemo(() => new Set(rows.map((r) => r.userId)), [rows]);
+    const addUsers = React.useCallback(async (records) => {
+        if (!setId)
+            return;
+        setBusy(true);
+        setError(null);
+        try {
+            for (const u of records || []) {
+                const uid = u?.id != null ? String(u.id) : null;
+                if (!uid || assignedIds.has(uid))
+                    continue;
+                await adapter.create('sys_user_permission_set', { permission_set_id: setId, user_id: uid });
+            }
+            await load();
+        }
+        catch (err) {
+            const raw = String(err?.body?.error ?? err?.error ?? err?.message ?? '');
+            const capMatch = raw.match(/(\d+)\s*of\s*(\d+)\s*seat/i);
+            if (/cap reached|seat cap|ai[-_ ]?seat/i.test(raw)) {
+                setError(c.seatFull(capMatch ? Number(capMatch[2]) : rows.length));
+            }
+            else {
+                const cleaned = raw.replace(/^\s*\[[^\]]*\]\s*/, '').trim();
+                setError(cleaned || c.addFailed);
+            }
+        }
+        finally {
+            setBusy(false);
+            setPickerOpen(false);
+        }
+    }, [adapter, setId, assignedIds, load, rows.length, c]);
+    const removeUser = React.useCallback(async (grantId) => {
+        setError(null);
+        try {
+            await adapter.delete('sys_user_permission_set', grantId);
+            await load();
+        }
+        catch {
+            /* keep the row; a failed delete is non-destructive */
+        }
+    }, [adapter, load]);
+    return (_jsxs("div", { className: "px-4 py-4", children: [_jsxs("div", { className: "flex items-center justify-between mb-3", children: [_jsxs("div", { className: "flex items-center gap-2 text-sm font-medium", children: [_jsx(Users, { className: "h-4 w-4 text-muted-foreground" }), _jsx("span", { children: c.title }), !loading && (_jsx("span", { className: "text-xs text-muted-foreground font-normal", children: c.countOf(rows.length) }))] }), _jsxs(Button, { variant: "outline", size: "sm", disabled: busy || !setId, onClick: () => {
+                            setError(null);
+                            setPickerOpen(true);
+                        }, className: "gap-1 h-8 text-xs", children: [busy ? _jsx(Loader2, { className: "h-3.5 w-3.5 animate-spin" }) : _jsx(Plus, { className: "h-3.5 w-3.5" }), c.add] })] }), error && (_jsxs("div", { className: "mb-3 flex items-start gap-2 rounded-md border border-amber-300/60 bg-amber-50 dark:bg-amber-950/30 px-3 py-2 text-xs text-amber-800 dark:text-amber-200", role: "alert", children: [_jsx(AlertCircle, { className: "h-3.5 w-3.5 mt-0.5 shrink-0" }), _jsx("span", { children: error })] })), loading ? (_jsxs("div", { className: "flex items-center gap-2 text-xs text-muted-foreground py-3", children: [_jsx(Loader2, { className: "h-3.5 w-3.5 animate-spin" }), c.loading] })) : rows.length === 0 ? (_jsx("div", { className: "text-xs text-muted-foreground italic py-3", children: c.empty })) : (_jsx("ul", { className: "divide-y rounded-md border", children: rows.map((r) => (_jsxs("li", { className: "flex items-center gap-3 px-3 py-2", children: [_jsx("div", { className: "flex h-7 w-7 items-center justify-center rounded-full bg-primary/10 text-primary text-xs font-medium shrink-0", children: (r.name || '?').slice(0, 1).toUpperCase() }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("div", { className: "text-sm truncate", children: r.name }), r.email && r.email !== r.name && (_jsx("div", { className: "text-xs text-muted-foreground truncate", children: r.email }))] }), _jsx(Button, { variant: "ghost", size: "sm", onClick: () => void removeUser(r.grantId), "aria-label": c.remove, title: c.remove, className: "h-7 w-7 p-0 text-muted-foreground hover:text-destructive shrink-0", children: _jsx(X, { className: "h-4 w-4" }) })] }, r.grantId))) })), setId && (_jsx(RecordPickerDialog, { open: pickerOpen, onOpenChange: (o) => setPickerOpen(o), multiple: true, dataSource: adapter, objectName: "sys_user", title: c.pickTitle, onSelect: () => { }, onSelectRecords: (records) => void addUsers(records) }))] }));
+}
+export default AssignedUsersSection;

package/dist/views/metadata-admin/PackagesPage.d.ts

@@ -14,5 +14,10 @@
  * (see framework `http-dispatcher.handlePackages`).
  */
 import * as React from 'react';
+export declare function CreatePackageDialog({ open, onOpenChange, onCreated, }: {
+    open: boolean;
+    onOpenChange: (v: boolean) => void;
+    onCreated: (id: string) => void;
+}): React.JSX.Element;
 export declare function PackagesPage(): React.JSX.Element;
 export default PackagesPage;

package/dist/views/metadata-admin/PackagesPage.js

@@ -17,7 +17,7 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
  */
 import * as React from 'react';
 import { Link, useLocation } from 'react-router-dom';
-import { Package as PackageIcon, Plus, RefreshCw, Search, Upload, Download, FileUp, Undo2, Power, PowerOff, ExternalLink, AlertTriangle, Trash2, } from 'lucide-react';
+import { Package as PackageIcon, Plus, RefreshCw, Search, Upload, Download, FileUp, Undo2, Power, PowerOff, ExternalLink, AlertTriangle, Trash2, Copy, Inbox, } from 'lucide-react';
 import { Button, Input, Badge, Switch, Label, Separator, Skeleton, Empty, EmptyTitle, EmptyDescription, Table, TableBody, TableCell, TableHead, TableHeader, TableRow, Sheet, SheetContent, SheetHeader, SheetTitle, SheetDescription, Dialog, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, } from '@object-ui/components';
 import { detectLocale, t, tFormat } from './i18n';
 const API = '/api/v1/packages';
@@ -65,7 +65,7 @@ function StatusBadge({ pkg }) {
 /* -------------------------------------------------------------------------- */
 const ID_RE = /^[a-z0-9][a-z0-9._-]{1,254}$/i;
 const VERSION_RE = /^\d+\.\d+\.\d+$/;
-function CreatePackageDialog({ open, onOpenChange, onCreated, }) {
+export function CreatePackageDialog({ open, onOpenChange, onCreated, }) {
     const locale = React.useMemo(() => detectLocale(), []);
     const [id, setId] = React.useState('');
     const [name, setName] = React.useState('');
@@ -242,10 +242,13 @@ function PackageDetailSheet({ pkg, appBase, open, onOpenChange, onChanged, }) {
         const ok = window.confirm(tFormat('engine.packages.detail.deleteConfirm', locale, { name: pkg?.manifest.name || id }));
         if (!ok)
             return;
+        // ADR-0070 D4 (Q3) — let the user keep records (delete structure only).
+        const alsoData = window.confirm(t('engine.packages.detail.deleteKeepData', locale));
+        const qs = alsoData ? '' : '?keepData=true';
         setBusy('delete');
         setMsg(null);
         try {
-            await apiJson(`${API}/${encodeURIComponent(id)}`, { method: 'DELETE' });
+            await apiJson(`${API}/${encodeURIComponent(id)}${qs}`, { method: 'DELETE' });
             onChanged();
             onOpenChange(false);
         }
@@ -256,6 +259,48 @@ function PackageDetailSheet({ pkg, appBase, open, onOpenChange, onChanged, }) {
             setBusy(null);
         }
     };
+    // ADR-0070 D4 — duplicate this base into a NEW writable package (re-namespaced).
+    const duplicateApp = async () => {
+        const target = window.prompt(t('engine.packages.detail.duplicatePrompt', locale), `${id}-copy`);
+        if (!target || !target.trim())
+            return;
+        setBusy('duplicate');
+        setMsg(null);
+        try {
+            await apiJson(`${API}/${encodeURIComponent(id)}/duplicate`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ targetPackageId: target.trim(), targetName: `${pkg?.manifest.name ?? id} (copy)` }),
+            });
+            setMsg({ kind: 'ok', text: t('engine.packages.detail.duplicated', locale) });
+            onChanged();
+        }
+        catch (e) {
+            setMsg({ kind: 'err', text: e?.message ?? 'Duplicate failed' });
+        }
+        finally {
+            setBusy(null);
+        }
+    };
+    // ADR-0070 D5 — adopt every package-less (loose) item in this env INTO this base.
+    const adoptOrphans = async () => {
+        const ok = window.confirm(tFormat('engine.packages.detail.adoptConfirm', locale, { name: pkg?.manifest.name || id }));
+        if (!ok)
+            return;
+        setBusy('adopt');
+        setMsg(null);
+        try {
+            await apiJson(`${API}/${encodeURIComponent(id)}/adopt-orphans`, { method: 'POST' });
+            setMsg({ kind: 'ok', text: t('engine.packages.detail.adopted', locale) });
+            onChanged();
+        }
+        catch (e) {
+            setMsg({ kind: 'err', text: e?.message ?? 'Adopt failed' });
+        }
+        finally {
+            setBusy(null);
+        }
+    };
     const toggleEnable = () => run('toggle', () => apiJson(`${API}/${encodeURIComponent(id)}/${enabled ? 'disable' : 'enable'}`, {
         method: 'PATCH',
     }), enabled ? t('engine.packages.detail.disabled', locale) : t('engine.packages.detail.enabled', locale));
@@ -277,7 +322,7 @@ function PackageDetailSheet({ pkg, appBase, open, onOpenChange, onChanged, }) {
                                                     ? t('engine.packages.detail.publishing', locale)
                                                     : tFormat('engine.packages.detail.publishApp', locale, { count: drafts.length })] }), _jsxs(Button, { size: "sm", variant: "outline", onClick: discardDrafts, disabled: !!busy, children: [_jsx(Undo2, { className: "mr-1.5 h-3.5 w-3.5" }), busy === 'discard-drafts'
                                                     ? t('engine.packages.detail.discarding', locale)
-                                                    : tFormat('engine.packages.detail.discardChanges', locale, { count: drafts.length })] })] })), _jsx("ul", { className: "space-y-1", children: drafts.map((d) => (_jsx("li", { children: _jsxs(Link, { to: `${appBase}/metadata/${encodeURIComponent(d.type)}/${encodeURIComponent(d.name)}?review=1`, className: "inline-flex items-center gap-1.5 text-sm text-primary hover:underline", onClick: () => onOpenChange(false), children: [_jsx(FileUp, { className: "h-3.5 w-3.5" }), _jsx("span", { className: "font-mono text-xs", children: d.type }), _jsx("span", { className: "text-muted-foreground", children: "\u00B7" }), d.name] }) }, `${d.type}/${d.name}`))) })] })] })), _jsx(Separator, { className: "my-4" }), isKernel ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('engine.packages.detail.kernelReadOnly', locale) })) : (_jsxs("div", { className: "space-y-2", children: [_jsx("p", { className: "text-xs font-medium uppercase tracking-wide text-muted-foreground", children: t('engine.packages.detail.actions', locale) }), _jsxs("div", { className: "flex flex-wrap gap-2", children: [_jsxs(Button, { size: "sm", onClick: publish, disabled: !!busy, children: [_jsx(Upload, { className: "mr-1.5 h-3.5 w-3.5" }), busy === 'publish' ? t('engine.packages.detail.publishing', locale) : t('engine.packages.detail.publish', locale)] }), _jsxs(Button, { size: "sm", variant: "outline", onClick: revert, disabled: !!busy, children: [_jsx(Undo2, { className: "mr-1.5 h-3.5 w-3.5" }), t('engine.packages.detail.revert', locale)] }), _jsxs(Button, { size: "sm", variant: "outline", onClick: toggleEnable, disabled: !!busy, children: [enabled ? (_jsx(PowerOff, { className: "mr-1.5 h-3.5 w-3.5" })) : (_jsx(Power, { className: "mr-1.5 h-3.5 w-3.5" })), enabled ? t('engine.packages.detail.disable', locale) : t('engine.packages.detail.enable', locale)] }), _jsxs(Button, { size: "sm", variant: "outline", onClick: exportPkg, disabled: !!busy, children: [_jsx(Download, { className: "mr-1.5 h-3.5 w-3.5" }), busy === 'export' ? t('engine.packages.detail.exporting', locale) : t('engine.packages.detail.export', locale)] }), _jsxs(Button, { size: "sm", variant: "outline", onClick: deleteApp, disabled: !!busy, className: "text-destructive hover:bg-destructive/10 hover:text-destructive", children: [_jsx(Trash2, { className: "mr-1.5 h-3.5 w-3.5" }), busy === 'delete' ? t('engine.packages.detail.deleting', locale) : t('engine.packages.detail.deleteApp', locale)] })] })] })), msg && (_jsx("div", { className: `mt-4 rounded-md border p-2 text-sm ${msg.kind === 'ok'
+                                                    : tFormat('engine.packages.detail.discardChanges', locale, { count: drafts.length })] })] })), _jsx("ul", { className: "space-y-1", children: drafts.map((d) => (_jsx("li", { children: _jsxs(Link, { to: `${appBase}/metadata/${encodeURIComponent(d.type)}/${encodeURIComponent(d.name)}?review=1`, className: "inline-flex items-center gap-1.5 text-sm text-primary hover:underline", onClick: () => onOpenChange(false), children: [_jsx(FileUp, { className: "h-3.5 w-3.5" }), _jsx("span", { className: "font-mono text-xs", children: d.type }), _jsx("span", { className: "text-muted-foreground", children: "\u00B7" }), d.name] }) }, `${d.type}/${d.name}`))) })] })] })), _jsx(Separator, { className: "my-4" }), isKernel ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('engine.packages.detail.kernelReadOnly', locale) })) : (_jsxs("div", { className: "space-y-2", children: [_jsx("p", { className: "text-xs font-medium uppercase tracking-wide text-muted-foreground", children: t('engine.packages.detail.actions', locale) }), _jsxs("div", { className: "flex flex-wrap gap-2", children: [_jsxs(Button, { size: "sm", onClick: publish, disabled: !!busy, children: [_jsx(Upload, { className: "mr-1.5 h-3.5 w-3.5" }), busy === 'publish' ? t('engine.packages.detail.publishing', locale) : t('engine.packages.detail.publish', locale)] }), _jsxs(Button, { size: "sm", variant: "outline", onClick: revert, disabled: !!busy, children: [_jsx(Undo2, { className: "mr-1.5 h-3.5 w-3.5" }), t('engine.packages.detail.revert', locale)] }), _jsxs(Button, { size: "sm", variant: "outline", onClick: toggleEnable, disabled: !!busy, children: [enabled ? (_jsx(PowerOff, { className: "mr-1.5 h-3.5 w-3.5" })) : (_jsx(Power, { className: "mr-1.5 h-3.5 w-3.5" })), enabled ? t('engine.packages.detail.disable', locale) : t('engine.packages.detail.enable', locale)] }), _jsxs(Button, { size: "sm", variant: "outline", onClick: exportPkg, disabled: !!busy, children: [_jsx(Download, { className: "mr-1.5 h-3.5 w-3.5" }), busy === 'export' ? t('engine.packages.detail.exporting', locale) : t('engine.packages.detail.export', locale)] }), _jsxs(Button, { size: "sm", variant: "outline", onClick: duplicateApp, disabled: !!busy, children: [_jsx(Copy, { className: "mr-1.5 h-3.5 w-3.5" }), busy === 'duplicate' ? t('engine.packages.detail.duplicating', locale) : t('engine.packages.detail.duplicate', locale)] }), _jsxs(Button, { size: "sm", variant: "outline", onClick: adoptOrphans, disabled: !!busy, children: [_jsx(Inbox, { className: "mr-1.5 h-3.5 w-3.5" }), busy === 'adopt' ? t('engine.packages.detail.adopting', locale) : t('engine.packages.detail.adoptOrphans', locale)] }), _jsxs(Button, { size: "sm", variant: "outline", onClick: deleteApp, disabled: !!busy, className: "text-destructive hover:bg-destructive/10 hover:text-destructive", children: [_jsx(Trash2, { className: "mr-1.5 h-3.5 w-3.5" }), busy === 'delete' ? t('engine.packages.detail.deleting', locale) : t('engine.packages.detail.deleteApp', locale)] })] })] })), msg && (_jsx("div", { className: `mt-4 rounded-md border p-2 text-sm ${msg.kind === 'ok'
                         ? 'border-emerald-500/40 bg-emerald-500/10 text-emerald-700 dark:text-emerald-400'
                         : 'border-destructive/40 bg-destructive/10 text-destructive'}`, children: msg.text }))] }) }));
 }

package/dist/views/metadata-admin/PermissionMatrixEditor.js

@@ -47,6 +47,7 @@ import { PageShell } from './PageShell';
 import { useMetadataClient, useMetadataTypes } from './useMetadata';
 import { resolveResourceConfig } from './registry';
 import { t as translate, detectLocale } from './i18n';
+import { AssignedUsersSection } from './AssignedUsersSection';
 function getObjectActions(locale) {
     return [
         { key: 'allowCreate', short: 'C', tip: translate('perm.action.create', locale) },
@@ -264,7 +265,7 @@ export function PermissionMatrixEditPage({ type, name }) {
     if (loading) {
         return (_jsx(PageShell, { entry: entry, itemName: name, children: _jsxs("div", { className: "p-6 text-sm text-muted-foreground flex items-center gap-2", children: [_jsx(Loader2, { className: "h-4 w-4 animate-spin" }), " ", t('perm.loading').replace('{name}', name)] }) }));
     }
-    return (_jsxs(PageShell, { entry: entry ?? { type, label: type }, itemName: name, subtitle: draft.isProfile ? t('perm.subtitle.profile') : t('perm.subtitle.set'), stats: stats, actions: _jsxs(_Fragment, { children: [_jsxs(Button, { variant: "ghost", size: "sm", onClick: () => navigate(`./history?type=${encodeURIComponent(type)}`), children: [_jsx(HistoryIcon, { className: "h-4 w-4 mr-1" }), " ", t('engine.edit.history')] }), writable && (_jsxs(Button, { size: "sm", onClick: () => doSave(false), disabled: saving, children: [saving ? (_jsx(Loader2, { className: "h-4 w-4 mr-1 animate-spin" })) : (_jsx(Save, { className: "h-4 w-4 mr-1" })), t('engine.edit.save')] }))] }), children: [_jsxs("div", { className: "flex flex-col h-full overflow-hidden", children: [error && (_jsxs("div", { className: "m-4 rounded-md border border-destructive/40 bg-destructive/5 p-3 text-sm text-destructive flex items-start gap-2", children: [_jsx(AlertTriangle, { className: "h-4 w-4 mt-0.5 shrink-0" }), _jsx("span", { children: error })] })), _jsxs("div", { className: "px-6 py-3 border-b bg-muted/30 flex flex-wrap items-end gap-4", children: [_jsxs("div", { className: "space-y-1", children: [_jsx(Label, { htmlFor: "perm-name", className: "text-xs", children: t('perm.field.name') }), _jsx(Input, { id: "perm-name", value: draft.name, disabled: !writable, onChange: (e) => setDraft((p) => ({ ...p, name: e.target.value })), className: "h-8 w-56" })] }), _jsxs("div", { className: "space-y-1", children: [_jsx(Label, { htmlFor: "perm-label", className: "text-xs", children: t('perm.field.label') }), _jsx(Input, { id: "perm-label", value: draft.label ?? '', disabled: !writable, onChange: (e) => setDraft((p) => ({ ...p, label: e.target.value })), className: "h-8 w-72" })] }), _jsxs("div", { className: "flex items-center gap-2 pb-1", children: [_jsx(Switch, { id: "perm-is-profile", checked: !!draft.isProfile, disabled: !writable, onCheckedChange: (v) => setDraft((p) => ({ ...p, isProfile: !!v })) }), _jsx(Label, { htmlFor: "perm-is-profile", className: "text-xs", children: t('perm.field.isProfile') })] }), !writable && (_jsx(Badge, { variant: "secondary", className: "ml-auto", children: t('perm.readOnly') }))] }), _jsxs("div", { className: "px-6 py-3 border-b flex items-center gap-3", children: [_jsx(Input, { placeholder: t('perm.filter.placeholder'), value: filter, onChange: (e) => setFilter(e.target.value), className: "h-8 w-72" }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Switch, { id: "only-enabled", checked: showOnlyEnabled, onCheckedChange: (v) => setShowOnlyEnabled(!!v) }), _jsx(Label, { htmlFor: "only-enabled", className: "text-xs", children: t('perm.filter.onlyGranted') })] }), _jsxs("span", { className: "text-xs text-muted-foreground ml-auto", children: [filteredObjects.length, " / ", objects.length, " ", t('perm.stat.objectsSuffix')] })] }), _jsx("div", { className: "flex-1 overflow-auto", children: _jsx(PermissionTable, { objects: filteredObjects, draft: draft, expanded: expanded, fieldsByObject: fieldsByObject, writable: writable, objectActions: OBJECT_ACTIONS, t: t, onToggleExpand: toggleExpand, onObjectPerm: updateObjectPerm, onFieldPerm: updateFieldPerm, onBulkSet: bulkSetObject }) })] }), _jsx(Dialog, { open: !!destructive, onOpenChange: (open) => !open && setDestructive(null), children: _jsxs(DialogContent, { children: [_jsxs(DialogHeader, { children: [_jsxs(DialogTitle, { className: "flex items-center gap-2", children: [_jsx(AlertTriangle, { className: "h-4 w-4 text-amber-500" }), " ", t('engine.edit.destructive')] }), _jsx(DialogDescription, { children: t('engine.edit.destructiveHint') })] }), _jsx("ul", { className: "text-sm space-y-1 max-h-64 overflow-auto", children: destructive?.issues.map((i, idx) => (_jsxs("li", { className: "border-l-2 border-amber-500 pl-2", children: [i.kind && _jsx(Badge, { variant: "outline", className: "mr-2", children: i.kind }), i.message ?? JSON.stringify(i)] }, idx))) }), _jsxs(DialogFooter, { children: [_jsx(Button, { variant: "ghost", onClick: () => setDestructive(null), children: t('engine.cancel') }), _jsxs(Button, { variant: "destructive", onClick: () => destructive && doSave(true, destructive.pending), disabled: saving, children: [saving && _jsx(Loader2, { className: "h-4 w-4 mr-1 animate-spin" }), t('engine.edit.forceSave')] })] })] }) })] }));
+    return (_jsxs(PageShell, { entry: entry ?? { type, label: type }, itemName: name, subtitle: draft.isProfile ? t('perm.subtitle.profile') : t('perm.subtitle.set'), stats: stats, actions: _jsxs(_Fragment, { children: [_jsxs(Button, { variant: "ghost", size: "sm", onClick: () => navigate(`./history?type=${encodeURIComponent(type)}`), children: [_jsx(HistoryIcon, { className: "h-4 w-4 mr-1" }), " ", t('engine.edit.history')] }), writable && (_jsxs(Button, { size: "sm", onClick: () => doSave(false), disabled: saving, children: [saving ? (_jsx(Loader2, { className: "h-4 w-4 mr-1 animate-spin" })) : (_jsx(Save, { className: "h-4 w-4 mr-1" })), t('engine.edit.save')] }))] }), children: [_jsxs("div", { className: "flex flex-col h-full overflow-hidden", children: [error && (_jsxs("div", { className: "m-4 rounded-md border border-destructive/40 bg-destructive/5 p-3 text-sm text-destructive flex items-start gap-2", children: [_jsx(AlertTriangle, { className: "h-4 w-4 mt-0.5 shrink-0" }), _jsx("span", { children: error })] })), _jsxs("div", { className: "px-6 py-3 border-b bg-muted/30 flex flex-wrap items-end gap-4", children: [_jsxs("div", { className: "space-y-1", children: [_jsx(Label, { htmlFor: "perm-name", className: "text-xs", children: t('perm.field.name') }), _jsx(Input, { id: "perm-name", value: draft.name, disabled: !writable, onChange: (e) => setDraft((p) => ({ ...p, name: e.target.value })), className: "h-8 w-56" })] }), _jsxs("div", { className: "space-y-1", children: [_jsx(Label, { htmlFor: "perm-label", className: "text-xs", children: t('perm.field.label') }), _jsx(Input, { id: "perm-label", value: draft.label ?? '', disabled: !writable, onChange: (e) => setDraft((p) => ({ ...p, label: e.target.value })), className: "h-8 w-72" })] }), _jsxs("div", { className: "flex items-center gap-2 pb-1", children: [_jsx(Switch, { id: "perm-is-profile", checked: !!draft.isProfile, disabled: !writable, onCheckedChange: (v) => setDraft((p) => ({ ...p, isProfile: !!v })) }), _jsx(Label, { htmlFor: "perm-is-profile", className: "text-xs", children: t('perm.field.isProfile') })] }), !writable && (_jsx(Badge, { variant: "secondary", className: "ml-auto", children: t('perm.readOnly') }))] }), _jsxs("div", { className: "px-6 py-3 border-b flex items-center gap-3", children: [_jsx(Input, { placeholder: t('perm.filter.placeholder'), value: filter, onChange: (e) => setFilter(e.target.value), className: "h-8 w-72" }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Switch, { id: "only-enabled", checked: showOnlyEnabled, onCheckedChange: (v) => setShowOnlyEnabled(!!v) }), _jsx(Label, { htmlFor: "only-enabled", className: "text-xs", children: t('perm.filter.onlyGranted') })] }), _jsxs("span", { className: "text-xs text-muted-foreground ml-auto", children: [filteredObjects.length, " / ", objects.length, " ", t('perm.stat.objectsSuffix')] })] }), _jsx("div", { className: "flex-1 overflow-auto", children: _jsx(PermissionTable, { objects: filteredObjects, draft: draft, expanded: expanded, fieldsByObject: fieldsByObject, writable: writable, objectActions: OBJECT_ACTIONS, t: t, onToggleExpand: toggleExpand, onObjectPerm: updateObjectPerm, onFieldPerm: updateFieldPerm, onBulkSet: bulkSetObject }) }), _jsx("div", { className: "shrink-0 border-t max-h-80 overflow-auto bg-background", children: _jsx(AssignedUsersSection, { permissionSetName: name }) })] }), _jsx(Dialog, { open: !!destructive, onOpenChange: (open) => !open && setDestructive(null), children: _jsxs(DialogContent, { children: [_jsxs(DialogHeader, { children: [_jsxs(DialogTitle, { className: "flex items-center gap-2", children: [_jsx(AlertTriangle, { className: "h-4 w-4 text-amber-500" }), " ", t('engine.edit.destructive')] }), _jsx(DialogDescription, { children: t('engine.edit.destructiveHint') })] }), _jsx("ul", { className: "text-sm space-y-1 max-h-64 overflow-auto", children: destructive?.issues.map((i, idx) => (_jsxs("li", { className: "border-l-2 border-amber-500 pl-2", children: [i.kind && _jsx(Badge, { variant: "outline", className: "mr-2", children: i.kind }), i.message ?? JSON.stringify(i)] }, idx))) }), _jsxs(DialogFooter, { children: [_jsx(Button, { variant: "ghost", onClick: () => setDestructive(null), children: t('engine.cancel') }), _jsxs(Button, { variant: "destructive", onClick: () => destructive && doSave(true, destructive.pending), disabled: saving, children: [saving && _jsx(Loader2, { className: "h-4 w-4 mr-1 animate-spin" }), t('engine.edit.forceSave')] })] })] }) })] }));
 }
 function PermissionTable({ objects, draft, expanded, fieldsByObject, writable, objectActions, t, onToggleExpand, onObjectPerm, onFieldPerm, onBulkSet, }) {
     return (_jsxs("table", { className: "w-full text-sm", children: [_jsx("thead", { className: "sticky top-0 bg-background border-b z-10", children: _jsxs("tr", { children: [_jsx("th", { className: "text-left px-4 py-2 font-medium w-72", children: t('perm.col.object') }), objectActions.map((a) => (_jsx("th", { className: "px-2 py-2 font-medium text-center w-14", title: a.tip, children: a.short }, a.key))), _jsx("th", { className: "px-2 py-2 font-medium w-44 text-right", children: t('perm.col.bulk') })] }) }), _jsxs("tbody", { children: [objects.length === 0 && (_jsx("tr", { children: _jsx("td", { colSpan: objectActions.length + 2, className: "px-4 py-8 text-center text-muted-foreground", children: t('perm.filter.empty') }) })), objects.map((o) => {

package/dist/views/metadata-admin/ResourceEditPage.js

@@ -49,6 +49,7 @@ import { detectLocale, t, tFormat, translateValidationMessage } from './i18n';
 import { JsonSourceEditor } from './JsonSourceEditor';
 import { validateMetadataDraft, hasClientValidator } from './clientValidation';
 import { describeIssuePath } from './issuePath';
+import { buildCreateModeBody } from './createBody';
 // react-resizable-panels' `direction` prop type does not always narrow
 // cleanly in our TS config; cast at the boundary (precedent:
 // packages/components/src/custom/navigation-overlay.tsx).
@@ -311,6 +312,25 @@ function MetadataResourceEditPageImpl({ type, name, createMode, embedded, }) {
     // Issues to DISPLAY (banner + inline). Suppressed on a pristine create form
     // so a blank new item doesn't open covered in required-field errors.
     const displayIssues = React.useMemo(() => (createMode && !createDirty ? [] : issues), [createMode, createDirty, issues]);
+    // Server-computed diagnostics handed to a canvas Preview (e.g. the flow
+    // Problems panel + on-canvas badges). Errors prefer the live client-side Zod
+    // issues when a client validator exists (so they track every keystroke);
+    // warnings stay server-sourced. Mirrors the read-only banner's source
+    // selection, flattened to a path-keyed, severity-tagged list.
+    const previewDiagnostics = React.useMemo(() => {
+        const diag = layered?._diagnostics;
+        const errs = hasClientValidator(type)
+            ? displayIssues.map((i) => ({ path: i.path, message: translateValidationMessage(i.message, locale) }))
+            : (diag?.errors ?? []).map((i) => ({ path: i.path, message: translateValidationMessage(i.message, locale) }));
+        const warns = (diag?.warnings ?? []).map((i) => ({
+            path: i.path,
+            message: translateValidationMessage(i.message, locale),
+        }));
+        return [
+            ...errs.map((e) => ({ path: e.path || undefined, message: e.message, severity: 'error' })),
+            ...warns.map((w) => ({ path: w.path || undefined, message: w.message, severity: 'warning' })),
+        ];
+    }, [layered, displayIssues, type, locale]);
     // Per-item draft pending publish (mode=draft saves land here).
     // When non-null, the editor is "viewing the draft" and we surface
     // Publish / Discard-draft actions.
@@ -853,10 +873,14 @@ function MetadataResourceEditPageImpl({ type, name, createMode, embedded, }) {
             // or `{ list: { data: { object } } }` for view) is present so
             // the saved body satisfies its JSONSchema. User-supplied values
             // always win over the defaults.
+            // Prefer the server's authoritative create seed (from /meta/types — the
+            // single source of truth in @objectstack/spec) over the locally hardcoded
+            // createDefaults, so the create shape can't drift from the spec's required
+            // fields (the dashboard-`layout` / action-`body` 422 family). `createSeed`
+            // is a runtime field absent from the bundled GetMetaTypes type, hence the cast.
+            const specCreateSeed = entry?.createSeed;
             let builtBody = createMode
-                ? (config.createBuildBody
-                    ? config.createBuildBody(draft)
-                    : { ...(config.createDefaults ?? {}), ...draft })
+                ? buildCreateModeBody(config, draft, specCreateSeed)
                 // Edit mode: serialise the editor draft back to the wire shape
                 // (inverse of `toDraft` — e.g. `view` folds the `{ list | form }`
                 // family key back into the ViewItem `config` wrapper).
@@ -958,6 +982,14 @@ function MetadataResourceEditPageImpl({ type, name, createMode, embedded, }) {
                 setDestructiveIssues(Array.isArray(i) ? i : []);
                 setPendingItem(draft);
             }
+            // ADR-0070 D1/D3 — the kernel rejects authoring into a read-only
+            // code/installed package (`writable_package_required`, also HTTP 422,
+            // so this MUST precede the generic invalid_metadata branch below).
+            // Surface an actionable message guiding the author to pick or create a
+            // writable base rather than mangling it into phantom field issues.
+            else if (err?.code === 'writable_package_required') {
+                setError(t('engine.package.writableRequired', locale));
+            }
             // Map schema validation → inline field errors.
             else if (err?.status === 422 || err?.code === 'invalid_metadata' || err?.code === 'invalid_payload') {
                 const i = err?.body?.issues ?? [];
@@ -1448,7 +1480,7 @@ function MetadataResourceEditPageImpl({ type, name, createMode, embedded, }) {
                                                                                 ? t('engine.edit.exitFullscreen', locale)
                                                                                 : t('engine.edit.fullscreen', locale), children: isFullscreen ? (_jsx(Minimize2, { className: "h-3.5 w-3.5" })) : (_jsx(Maximize2, { className: "h-3.5 w-3.5" })) })] })] }), _jsx("div", { className: "flex-1 min-h-0 overflow-auto p-4 bg-[radial-gradient(circle_at_1px_1px,theme(colors.border)_1px,transparent_0)] [background-size:16px_16px] bg-muted/30", children: _jsx(PreviewComponent, { type: type, name: name, draft: draft, baseline: !createMode
                                                                     ? (layered?.effective ?? undefined)
-                                                                    : undefined, editing: editing && !previewOnly, selection: previewOnly ? null : selection, onSelectionChange: setSelection, locale: locale, onPatch: (patch) => handleDraftChange((d) => ({ ...d, ...patch })) }) })] }) }), _jsx(ResizableHandle, { withHandle: true, className: inspectorCollapsed
+                                                                    : undefined, editing: editing && !previewOnly, selection: previewOnly ? null : selection, onSelectionChange: setSelection, locale: locale, diagnostics: previewDiagnostics, onPatch: (patch) => handleDraftChange((d) => ({ ...d, ...patch })) }) })] }) }), _jsx(ResizableHandle, { withHandle: true, className: inspectorCollapsed
                                                     ? 'hidden'
                                                     : 'w-1.5 bg-border/40 hover:bg-primary/40 active:bg-primary/60 transition-colors' }), _jsx(ResizablePanel, { panelRef: inspectorPanelRef, defaultSize: lastInspectorSizeRef.current, minSize: 22, collapsible: true, collapsedSize: 0, onResize: (size) => {
                                                     const pct = size.asPercentage;

package/dist/views/metadata-admin/ResourceListPage.js

@@ -21,10 +21,11 @@ import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue, } from '
 import { Empty, EmptyTitle, EmptyDescription } from '@object-ui/components';
 import { PageShell } from './PageShell';
 import { MetadataTypeActions } from './MetadataTypeActions';
+import { CreatePackageDialog } from './PackagesPage';
 import { useMetadataClient, useMetadataTypes, matchesQuery, } from './useMetadata';
 import { getMetadataResource, resolveResourceConfig, } from './registry';
 import { t, tFormat, translateMetadataType, detectLocale } from './i18n';
-import { buildPackageScopeOptions, LOCAL_PACKAGE_ID } from './package-scope';
+import { buildPackageScopeOptions } from './package-scope';
 /**
  * Derive provenance from item._packageId. The `loadMetaFromDb` path
  * tags objects with the synthetic packageId 'sys_metadata' (see
@@ -184,6 +185,22 @@ function DefaultMetadataList({ type, appName }) {
     const pkgSuffix = activePackage
         ? `?package=${encodeURIComponent(activePackage)}`
         : '';
+    // ADR-0070 D3 — never start a create that would orphan the item. When a real
+    // writable base exists, create into it (defaulting away from the Local/null
+    // scope); when none exists yet, prompt to create a base first.
+    const [showCreateBase, setShowCreateBase] = React.useState(false);
+    const handleCreate = React.useCallback(() => {
+        const bases = projectPackages ?? [];
+        if (projectPackages !== null && bases.length === 0) {
+            setShowCreateBase(true);
+            return;
+        }
+        if (bases.length > 0 && !activePackage) {
+            navigate(`./new?package=${encodeURIComponent(bases[0].id)}`);
+            return;
+        }
+        navigate(`./new${pkgSuffix}`);
+    }, [projectPackages, activePackage, pkgSuffix, navigate]);
     React.useEffect(() => {
         let cancelled = false;
         setLoading(true);
@@ -237,12 +254,10 @@ function DefaultMetadataList({ type, appName }) {
         if (!activePackage)
             return false;
         const pkg = row.item?._packageId;
-        const isLocal = !pkg || pkg === LOCAL_PACKAGE_ID;
-        // Local/Custom scope surfaces this environment's runtime-authored items
-        // (untagged / `sys_metadata` provenance); a code package shows its own.
-        if (activePackage === LOCAL_PACKAGE_ID)
-            return isLocal;
-        return !isLocal && pkg === activePackage;
+        // Only rows tagged with the active writable base match. Untagged /
+        // `sys_metadata`-provenance legacy rows have no scope of their own
+        // (ADR-0070 D5 — the package-less "Local / Custom" scope is removed).
+        return pkg === activePackage;
     }), [items, activePackage, config]);
     // User-driven filters (search query + source provenance) on top of scope.
     const filtered = scopedItems.filter((row) => {
@@ -295,14 +310,14 @@ function DefaultMetadataList({ type, appName }) {
                     },
                 ]
                 : []),
-        ], actions: _jsxs(_Fragment, { children: [_jsx(MetadataTypeActions, { entry: entry, location: "list_toolbar", onAfter: () => setRefreshKey((k) => k + 1) }), _jsx(Button, { variant: "ghost", size: "sm", onClick: () => setRefreshKey((k) => k + 1), title: t('engine.list.refresh', locale), children: _jsx(RefreshCw, { className: "h-4 w-4" }) }), (entry?.allowOrgOverride || entry?.allowRuntimeCreate) && (_jsxs(Button, { size: "sm", variant: config.createFields ? 'default' : 'outline', onClick: () => navigate(`./new${pkgSuffix}`), title: config.createFields
+        ], actions: _jsxs(_Fragment, { children: [_jsx(MetadataTypeActions, { entry: entry, location: "list_toolbar", onAfter: () => setRefreshKey((k) => k + 1) }), _jsx(Button, { variant: "ghost", size: "sm", onClick: () => setRefreshKey((k) => k + 1), title: t('engine.list.refresh', locale), children: _jsx(RefreshCw, { className: "h-4 w-4" }) }), (entry?.allowOrgOverride || entry?.allowRuntimeCreate) && (_jsxs(Button, { size: "sm", variant: config.createFields ? 'default' : 'outline', onClick: handleCreate, title: config.createFields
                         ? tFormat('engine.list.createHint', locale, { type: typeLabel })
-                        : undefined, children: [_jsx(Plus, { className: "h-4 w-4 mr-1" }), t('engine.list.create', locale)] }))] }), children: _jsxs("div", { className: "p-6 space-y-4", children: [_jsxs("div", { className: "flex items-center gap-3 flex-wrap", children: [_jsxs("div", { className: "relative flex-1 min-w-[200px] max-w-md", children: [_jsx(Search, { className: "absolute left-2.5 top-1/2 -translate-y-1/2 h-3.5 w-3.5 text-muted-foreground" }), _jsx(Input, { className: "pl-8", placeholder: t('engine.list.search', locale), value: query, onChange: (e) => setQuery(e.target.value) })] }), _jsxs(Select, { value: sourceFilter, onValueChange: setSourceFilter, children: [_jsx(SelectTrigger, { className: "w-[180px]", children: _jsx(SelectValue, {}) }), _jsxs(SelectContent, { children: [_jsxs(SelectItem, { value: "all", children: [t('engine.list.allSources', locale), " (", sourceCounts.all, ")"] }), _jsxs(SelectItem, { value: "artifact", children: [t('engine.list.source.artifact', locale), " (", sourceCounts.artifact, ")"] }), _jsxs(SelectItem, { value: "runtime", children: [t('engine.list.source.runtime', locale), " (", sourceCounts.runtime, ")"] })] })] })] }), (loading || projectPackages === null) && (_jsxs("div", { className: "text-sm text-muted-foreground", children: [t('engine.edit.loading', locale), " ", type, "\u2026"] })), error && (_jsx("div", { className: "text-sm text-destructive border border-destructive/30 rounded p-3 bg-destructive/5", children: error })), !loading && !error && projectPackages !== null && projectPackages.length === 0 && (_jsxs(Empty, { children: [_jsx(EmptyTitle, { children: "No project packages installed" }), _jsx(EmptyDescription, { children: "Studio only shows metadata that belongs to a project software package. Install or create a project package to manage its metadata here." })] })), !loading && !error && projectPackages !== null && projectPackages.length > 0 && filtered.length === 0 && (_jsxs(Empty, { children: [_jsx(EmptyTitle, { children: scopedItems.length === 0
+                        : undefined, children: [_jsx(Plus, { className: "h-4 w-4 mr-1" }), t('engine.list.create', locale)] }))] }), children: _jsxs("div", { className: "p-6 space-y-4", children: [_jsx(CreatePackageDialog, { open: showCreateBase, onOpenChange: setShowCreateBase, onCreated: (id) => navigate(`./new?package=${encodeURIComponent(id)}`) }), _jsxs("div", { className: "flex items-center gap-3 flex-wrap", children: [_jsxs("div", { className: "relative flex-1 min-w-[200px] max-w-md", children: [_jsx(Search, { className: "absolute left-2.5 top-1/2 -translate-y-1/2 h-3.5 w-3.5 text-muted-foreground" }), _jsx(Input, { className: "pl-8", placeholder: t('engine.list.search', locale), value: query, onChange: (e) => setQuery(e.target.value) })] }), _jsxs(Select, { value: sourceFilter, onValueChange: setSourceFilter, children: [_jsx(SelectTrigger, { className: "w-[180px]", children: _jsx(SelectValue, {}) }), _jsxs(SelectContent, { children: [_jsxs(SelectItem, { value: "all", children: [t('engine.list.allSources', locale), " (", sourceCounts.all, ")"] }), _jsxs(SelectItem, { value: "artifact", children: [t('engine.list.source.artifact', locale), " (", sourceCounts.artifact, ")"] }), _jsxs(SelectItem, { value: "runtime", children: [t('engine.list.source.runtime', locale), " (", sourceCounts.runtime, ")"] })] })] })] }), (loading || projectPackages === null) && (_jsxs("div", { className: "text-sm text-muted-foreground", children: [t('engine.edit.loading', locale), " ", type, "\u2026"] })), error && (_jsx("div", { className: "text-sm text-destructive border border-destructive/30 rounded p-3 bg-destructive/5", children: error })), !loading && !error && projectPackages !== null && projectPackages.length === 0 && (_jsxs(Empty, { children: [_jsx(EmptyTitle, { children: "No project packages installed" }), _jsx(EmptyDescription, { children: "Studio only shows metadata that belongs to a project software package. Install or create a project package to manage its metadata here." })] })), !loading && !error && projectPackages !== null && projectPackages.length > 0 && filtered.length === 0 && (_jsxs(Empty, { children: [_jsx(EmptyTitle, { children: scopedItems.length === 0
                                 ? tFormat('engine.list.emptyType', locale, { type: typeLabel })
                                 : tFormat('engine.list.emptyQuery', locale, { query }) }), _jsx(EmptyDescription, { children: config.emptyStateHint ??
                                 (entry?.allowOrgOverride || entry?.allowRuntimeCreate
                                     ? tFormat('engine.list.createHint', locale, { type: typeLabel })
-                                    : t('engine.list.readOnlyHint', locale)) }), scopedItems.length === 0 && (entry?.allowOrgOverride || entry?.allowRuntimeCreate) && (_jsx("div", { className: "mt-4", children: _jsxs(Button, { onClick: () => navigate(`./new${pkgSuffix}`), children: [_jsx(Plus, { className: "h-4 w-4 mr-1" }), t('engine.list.create', locale)] }) }))] })), !loading && filtered.length > 0 && (_jsx("div", { className: "border rounded-lg overflow-hidden", children: _jsxs("table", { className: "w-full text-sm", children: [_jsx("thead", { className: "bg-muted/40 text-xs uppercase tracking-wider text-muted-foreground", children: _jsxs("tr", { children: [columns.map((c) => (_jsx("th", { className: "px-3 py-2 text-left font-medium", style: c.width ? { width: c.width } : undefined, children: localizeColumnLabel(c) }, c.key))), _jsx("th", { className: "px-3 py-2 text-right font-medium w-[80px]", children: t('engine.list.col.source', locale) })] }) }), _jsx("tbody", { className: "divide-y", children: filtered.map((row, i) => {
+                                    : t('engine.list.readOnlyHint', locale)) }), scopedItems.length === 0 && (entry?.allowOrgOverride || entry?.allowRuntimeCreate) && (_jsx("div", { className: "mt-4", children: _jsxs(Button, { onClick: handleCreate, children: [_jsx(Plus, { className: "h-4 w-4 mr-1" }), t('engine.list.create', locale)] }) }))] })), !loading && filtered.length > 0 && (_jsx("div", { className: "border rounded-lg overflow-hidden", children: _jsxs("table", { className: "w-full text-sm", children: [_jsx("thead", { className: "bg-muted/40 text-xs uppercase tracking-wider text-muted-foreground", children: _jsxs("tr", { children: [columns.map((c) => (_jsx("th", { className: "px-3 py-2 text-left font-medium", style: c.width ? { width: c.width } : undefined, children: localizeColumnLabel(c) }, c.key))), _jsx("th", { className: "px-3 py-2 text-right font-medium w-[80px]", children: t('engine.list.col.source', locale) })] }) }), _jsx("tbody", { className: "divide-y", children: filtered.map((row, i) => {
                                     const pk = config.primaryKey ?? 'name';
                                     const name = String(row.item[pk] ?? `(unnamed-${i})`);
                                     // ADR-0048 — link to this row's OWNING package so the editor

package/dist/views/metadata-admin/StudioHomePage.js

@@ -28,7 +28,7 @@ import { useRecentItems } from '../../context/RecentItemsProvider';
 import { useMetadataClient, useMetadataTypes, useGlobalDiagnostics, } from './useMetadata';
 import { MetadataQuickFind } from './QuickFind';
 import { translateMetadataType, translateMetadataDomain, t, tFormat, detectLocale, } from './i18n';
-import { buildPackageScopeOptions, LOCAL_PACKAGE_ID } from './package-scope';
+import { buildPackageScopeOptions } from './package-scope';
 const HIDDEN_TYPES = new Set(['field', 'package']);
 const DOMAIN_ICONS = {
     data: Database,
@@ -143,10 +143,6 @@ export function StudioHomePage() {
             return false;
         if (!activePackage)
             return false;
-        // Local/Custom scope: show every runtime-creatable type so the user can
-        // start authoring any kind of metadata here, even with zero items yet.
-        if (activePackage === LOCAL_PACKAGE_ID)
-            return e.allowOrgOverride || e.allowRuntimeCreate;
         return (packagesByType[e.type] ?? []).includes(activePackage);
     }), [activePackage, entries, packagesByType]);
     const writable = React.useMemo(() => visible.filter((e) => e.allowOrgOverride || e.allowRuntimeCreate), [visible]);

package/dist/views/metadata-admin/createBody.d.ts

@@ -0,0 +1,26 @@
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+import type { MetadataResourceConfig } from './registry';
+/**
+ * Build the create-mode save body for a new metadata item.
+ *
+ * Prefers the server's authoritative **create seed** (delivered per type on the
+ * `/meta/types` registry entry — the single source of truth in
+ * `@objectstack/spec`) over the locally hardcoded `createDefaults`. This is the
+ * drift-stop for the recurring "the designer emits a minimal shape the spec
+ * rejects, so create→save 422s" family (dashboard `layout`, action `body`):
+ * the structural defaults now come from the same place the spec validates
+ * against, so they cannot diverge. Falls back to `createDefaults` when the
+ * server provides no seed (older server, or canvas-create types whose shape is
+ * built interactively).
+ *
+ * User-supplied draft values always win over the seed's placeholders.
+ * `createBuildBody` (dynamic identity, e.g. a view's qualified name) still takes
+ * precedence — it incorporates user input the static seed cannot.
+ */
+export declare function buildCreateModeBody(config: Pick<MetadataResourceConfig, 'createBuildBody' | 'createDefaults'>, draft: Record<string, unknown>, specCreateSeed: Record<string, unknown> | undefined): Record<string, unknown>;

package/dist/views/metadata-admin/createBody.js

@@ -0,0 +1,30 @@
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+/**
+ * Build the create-mode save body for a new metadata item.
+ *
+ * Prefers the server's authoritative **create seed** (delivered per type on the
+ * `/meta/types` registry entry — the single source of truth in
+ * `@objectstack/spec`) over the locally hardcoded `createDefaults`. This is the
+ * drift-stop for the recurring "the designer emits a minimal shape the spec
+ * rejects, so create→save 422s" family (dashboard `layout`, action `body`):
+ * the structural defaults now come from the same place the spec validates
+ * against, so they cannot diverge. Falls back to `createDefaults` when the
+ * server provides no seed (older server, or canvas-create types whose shape is
+ * built interactively).
+ *
+ * User-supplied draft values always win over the seed's placeholders.
+ * `createBuildBody` (dynamic identity, e.g. a view's qualified name) still takes
+ * precedence — it incorporates user input the static seed cannot.
+ */
+export function buildCreateModeBody(config, draft, specCreateSeed) {
+    if (config.createBuildBody) {
+        return config.createBuildBody(draft);
+    }
+    return { ...(specCreateSeed ?? config.createDefaults ?? {}), ...draft };
+}

package/dist/views/metadata-admin/i18n.js

@@ -181,7 +181,7 @@ const ENGINE_STRINGS_EN = {
     'engine.list.warnCount': '{count} warning(s):',
     'engine.list.allSources': 'All sources',
     'engine.list.allPackages': 'All packages',
-    'engine.package.local': 'Local / Custom (this env)',
+    'engine.package.writableRequired': 'Pick or create a writable base (package) first — this item cannot be authored into a read-only code package.',
     'engine.list.packageFilter': 'Package',
     'engine.list.source.artifact': 'Artifact',
     'engine.list.source.runtime': 'Runtime',
@@ -599,6 +599,15 @@ const ENGINE_STRINGS_EN = {
     'engine.packages.detail.disabled': 'Package disabled.',
     'engine.packages.detail.enabled': 'Package enabled.',
     'engine.packages.detail.exported': 'Package exported.',
+    'engine.packages.detail.duplicate': 'Duplicate',
+    'engine.packages.detail.duplicating': 'Duplicating…',
+    'engine.packages.detail.duplicatePrompt': 'New package id for the duplicate (a fresh writable base):',
+    'engine.packages.detail.duplicated': 'Package duplicated into a new base.',
+    'engine.packages.detail.adoptOrphans': 'Adopt loose items',
+    'engine.packages.detail.adopting': 'Adopting…',
+    'engine.packages.detail.adoptConfirm': 'Move all package-less (loose) metadata in this environment INTO "{name}"? This rebinds orphaned items to this base.',
+    'engine.packages.detail.adopted': 'Loose items adopted into this base.',
+    'engine.packages.detail.deleteKeepData': 'Delete the DATA too?\n\nOK = also drop all records (destructive). Cancel = keep records, delete only the structure.',
     'engine.quickfind.placeholder': "Find metadata types or items… (try 'view', 'account')",
     'engine.quickfind.empty': 'Type to search across all metadata types.',
     'engine.quickfind.title': 'Quick Find',
@@ -798,6 +807,7 @@ const ENGINE_STRINGS_EN = {
     'designer.canvas.askAiGenerate': 'Generate fields with AI',
 };
 const ENGINE_STRINGS_ZH = {
+    'engine.package.writableRequired': '请先选择或新建一个可写的基座（package）——只读的代码包中无法新建该项。',
     'engine.directory.title': '元数据',
     'engine.directory.description': '平台协议共暴露 {count} 个元数据类型（其中 {writable} 个支持运行时覆盖）。点击任意卡片即可浏览、覆盖或创建实例。',
     'engine.directory.search': '搜索元数据类型…',
@@ -867,7 +877,6 @@ const ENGINE_STRINGS_ZH = {
     'engine.list.warnCount': '{count} 个警告：',
     'engine.list.allSources': '全部来源',
     'engine.list.allPackages': '全部软件包',
-    'engine.package.local': '本地 / 自定义（本环境）',
     'engine.list.packageFilter': '软件包',
     'engine.list.source.artifact': '代码包',
     'engine.list.source.runtime': '运行时',
@@ -1284,6 +1293,15 @@ const ENGINE_STRINGS_ZH = {
     'engine.packages.detail.disabled': '软件包已禁用。',
     'engine.packages.detail.enabled': '软件包已启用。',
     'engine.packages.detail.exported': '软件包已导出。',
+    'engine.packages.detail.duplicate': '复制',
+    'engine.packages.detail.duplicating': '复制中…',
+    'engine.packages.detail.duplicatePrompt': '副本的新软件包 id（一个全新的可写基座）：',
+    'engine.packages.detail.duplicated': '软件包已复制为新基座。',
+    'engine.packages.detail.adoptOrphans': '收编散落项',
+    'engine.packages.detail.adopting': '收编中…',
+    'engine.packages.detail.adoptConfirm': '把本环境中所有无软件包（散落）的元数据移动到 "{name}" 吗？这会把孤儿项重新绑定到此基座。',
+    'engine.packages.detail.adopted': '散落项已收编进此基座。',
+    'engine.packages.detail.deleteKeepData': '同时删除数据吗？\n\n确定 = 同时删除所有记录（破坏性）。取消 = 保留记录，仅删除结构。',
     'engine.quickfind.placeholder': '搜索元数据类型或条目…（如：view、account）',
     'engine.quickfind.empty': '输入关键字以搜索所有元数据类型。',
     'engine.quickfind.title': '快速查找',

package/dist/views/metadata-admin/inspectors/DatasetDefaultInspector.d.ts

@@ -18,4 +18,12 @@
  */
 import * as React from 'react';
 import type { MetadataDefaultInspectorProps } from '../default-inspector-registry';
+/**
+ * Patch for a base-object change. A dataset's joins (`include`), `dimensions`,
+ * `measures`, and `filter` all reference the OLD object's fields, so a real
+ * object change re-bases the dataset and clears them — preventing stale field
+ * refs from silently producing broken/ambiguous queries. Selecting the SAME
+ * object is a no-op (only sets `object`).
+ */
+export declare function objectChangePatch(next: string, current: string): Record<string, unknown>;
 export declare function DatasetDefaultInspector({ draft, onPatch, readOnly, name }: MetadataDefaultInspectorProps): React.JSX.Element;