@object-ui/app-shell 7.2.0 → 7.3.0

package/CHANGELOG.md

@@ -1,5 +1,46 @@
 # @object-ui/app-shell — Changelog
 
+## 7.3.0
+
+### Patch Changes
+
+- 17ae00c: feat(studio): remove the "Local / Custom" stopgap scope from the package selector (ADR-0070 D5)
+
+  The package-scope selector no longer offers a synthetic "Local / Custom (this
+  env)" entry (the `package_id = null` / `sys_metadata` orphan bucket from
+  objectui#1946). That was a deliberate stopgap; ADR-0070 makes every
+  runtime-authored item live in a writable **base**, the kernel rejects orphan
+  creates (`writable_package_required`), and legacy orphans are adopted into a
+  base via "Adopt loose items". With no authoring path producing orphans, the
+  bucket has no reason to exist.
+
+  - `buildPackageScopeOptions` now returns only writable bases (drops the appended
+    sentinel); `isLocalScope` / `LOCAL_PACKAGE_ID` / `writableBaseOptions` and the
+    inline `LOCAL_SCOPE_ID` in `ContextSelectors` are removed.
+  - The create-flow and list/home scope filters simplify accordingly (a real base
+    is always the active scope; never the null/local sentinel).
+  - Read-side `sys_metadata` provenance handling (classifying a row as
+    runtime-authored, artifact detection in the editor) is unchanged — the kernel
+    still keeps `null` as a legacy read tag.
+
+  Closes the D5 tail of #2278 (the migration tooling it depended on already
+  shipped).
+
+- Updated dependencies [788dbf9]
+  - @object-ui/fields@7.3.0
+  - @object-ui/types@7.3.0
+  - @object-ui/core@7.3.0
+  - @object-ui/i18n@7.3.0
+  - @object-ui/react@7.3.0
+  - @object-ui/components@7.3.0
+  - @object-ui/layout@7.3.0
+  - @object-ui/data-objectstack@7.3.0
+  - @object-ui/auth@7.3.0
+  - @object-ui/permissions@7.3.0
+  - @object-ui/plugin-editor@7.3.0
+  - @object-ui/collaboration@7.3.0
+  - @object-ui/providers@7.3.0
+
 ## 7.2.0
 
 ### Minor Changes

package/dist/components/ManagedByBadge.js

@@ -27,7 +27,7 @@ const VARIANTS = {
         icon: ShieldAlert,
         short: 'Identity',
         title: 'Managed by the identity provider',
-        body: (display) => `This object's schema is owned by ${display}. Direct edits bypass password hashing, session validation, two-factor checks, and audit hooks. Use the dedicated identity workflows instead (Invite User, Reset Password, Revoke Session, Rotate Key, …).`,
+        body: (display) => `This object's schema is owned by ${display}. Direct edits bypass password hashing, session validation, two-factor checks, and audit hooks. Manage these records through your authentication provider's sign-in, invitation, and security flows instead.`,
         tone: 'border-amber-300/60 bg-amber-50 text-amber-900 hover:bg-amber-100 dark:border-amber-500/40 dark:bg-amber-950/40 dark:text-amber-100',
     },
 };

package/dist/console/ai/AiChatPage.js

@@ -18,8 +18,8 @@ import { useAuth } from '@object-ui/auth';
 import { useObjectTranslation } from '@object-ui/i18n';
 import { toast } from 'sonner';
 import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue, Button, ShareDialog, Sheet, SheetContent, SheetDescription, SheetHeader, SheetTitle, Empty, EmptyTitle, EmptyDescription, cn, } from '@object-ui/components';
-import { PanelLeft, PanelLeftClose, PanelLeftOpen, Share2 } from 'lucide-react';
-import { ChatbotEnhanced, useAgents, useObjectChat, useHitlInChat, resolveDefaultAgentName, PLATFORM_DEFAULT_AGENT, agentRouteName, resolveAgentParam, isBuiltinAgentName, isBuildAgent, isAskAgent, publishHealthFromResponse, detectDraftResult, detectProposedPlan, buildProgressFromDraftReview, } from '@object-ui/plugin-chatbot';
+import { Bug, PanelLeft, PanelLeftClose, PanelLeftOpen, Share2 } from 'lucide-react';
+import { ChatbotEnhanced, useAgents, useObjectChat, useAiModels, useHitlInChat, resolveDefaultAgentName, PLATFORM_DEFAULT_AGENT, agentRouteName, resolveAgentParam, isBuiltinAgentName, isBuildAgent, isAskAgent, publishHealthFromResponse, detectDraftResult, detectProposedPlan, buildProgressFromDraftReview, } from '@object-ui/plugin-chatbot';
 import { AppHeader } from '../../layout/AppHeader';
 import { fetchPendingDraftCount } from '../../preview/draftStatus';
 import { emitMetadataRefresh } from '../../assistant/assistantBus';
@@ -30,6 +30,7 @@ import { fetchConversation, sanitizeChatMessagesForCache, useChatConversation, w
 import { useReconcileOnError } from '../../hooks/useReconcileOnError';
 import { ConversationsSidebar } from './ConversationsSidebar';
 import { LiveCanvas } from './LiveCanvas';
+import { BuildDebugDrawer } from './BuildDebugDrawer';
 const DEFAULT_AI_PATH = '/api/v1/ai';
 function partString(part, key) {
     const value = part[key];
@@ -363,6 +364,11 @@ export function AiChatPage({ apiBase: apiBaseProp, defaultAgent: defaultAgentPro
     // existing conversation, and the flag is stripped once the fresh id is
     // mirrored into the URL.
     const forceNewConversation = searchParams.get('new') !== null;
+    // ADR-0070 "Edit with AI": the package the user opened to edit (from the app
+    // list's per-app action). Forwarded to the build agent as `context.packageId`
+    // so its metadata reads scope to that app and edits bind to it from the first
+    // message (the agent seeds it as the conversation's active package).
+    const editPackageId = searchParams.get('package')?.trim() || undefined;
     const navigate = useNavigate();
     const { setContext } = useNavigationContext();
     useEffect(() => {
@@ -491,6 +497,7 @@ export function AiChatPage({ apiBase: apiBaseProp, defaultAgent: defaultAgentPro
     const [refreshKey, setRefreshKey] = useState(0);
     const [titleHints, setTitleHints] = useState({});
     const [shareOpen, setShareOpen] = useState(false);
+    const [debugOpen, setDebugOpen] = useState(false);
     const [mobileChatsOpen, setMobileChatsOpen] = useState(false);
     const { collapsed: chatsCollapsed, toggle: toggleChatsCollapsed, handleCanvasOpenChange, } = useCollapsibleChatsList();
     // Keyboard shortcuts (ChatGPT/Claude parity): ⌘⇧O new chat, ⌘⇧S toggle list.
@@ -609,7 +616,7 @@ export function AiChatPage({ apiBase: apiBaseProp, defaultAgent: defaultAgentPro
                                     ? t('console.ai.showChats', { defaultValue: 'Show chats' })
                                     : t('console.ai.hideChats', { defaultValue: 'Hide chats' }), title: chatsCollapsed
                                     ? t('console.ai.showChats', { defaultValue: 'Show chats' })
-                                    : t('console.ai.hideChats', { defaultValue: 'Hide chats' }), "data-testid": "ai-chat-collapse-sidebar-trigger", "aria-pressed": chatsCollapsed, children: chatsCollapsed ? _jsx(PanelLeftOpen, { className: "h-4 w-4" }) : _jsx(PanelLeftClose, { className: "h-4 w-4" }) })] })), _jsx("div", { className: "min-w-0 flex-1", children: _jsx(AppHeader, { variant: "home" }) })] }), noAgents ? (_jsx(AiUnavailable, { hasError: Boolean(agentsError), onRetry: refetchAgents, onHome: () => navigate('/home'), t: t })) : (_jsxs(_Fragment, { children: [_jsx(Sheet, { open: mobileChatsOpen, onOpenChange: setMobileChatsOpen, children: _jsxs(SheetContent, { side: "left", className: "w-[320px] p-0 sm:max-w-[360px]", "data-testid": "ai-chat-mobile-sidebar", children: [_jsxs(SheetHeader, { className: "sr-only", children: [_jsx(SheetTitle, { children: t('console.ai.chats') }), _jsx(SheetDescription, { children: t('console.ai.chatsDescription') })] }), _jsx(ConversationsSidebar, { userId: userId, apiBase: apiBase, activeAgent: activeAgent, refreshKey: refreshKey, titleHints: titleHints, className: "h-full border-r-0", onNavigate: () => setMobileChatsOpen(false) })] }) }), conversationId && (_jsx(ShareDialog, { open: shareOpen, onOpenChange: setShareOpen, objectName: "ai_conversations", recordId: conversationId, recordLabel: "this conversation", apiBase: restApiBase, publicBaseUrl: publicShareBase })), _jsxs("div", { className: "flex min-h-0 flex-1 w-full bg-muted/20", children: [!chatsCollapsed && (_jsx(ConversationsSidebar, { userId: userId, apiBase: apiBase, activeAgent: activeAgent, refreshKey: refreshKey, titleHints: titleHints, className: "hidden w-72 shrink-0 border-r md:flex" })), _jsx("main", { className: "flex min-w-0 flex-1 flex-col", children: _jsx(ChatPane, { agents: agents, agentsLoading: agentsLoading, agentsError: agentsError, activeAgent: activeAgent, chatApi: chatApi, apiBase: apiBase, conversationId: conversationId, initialMessages: initialMessages, onSent: handleSent, onShare: () => setShareOpen(true), onCanvasOpenChange: handleCanvasOpenChange }, `${chatApi ?? 'local'}:${conversationId ?? 'pending'}`) })] })] }))] }));
+                                    : t('console.ai.hideChats', { defaultValue: 'Hide chats' }), "data-testid": "ai-chat-collapse-sidebar-trigger", "aria-pressed": chatsCollapsed, children: chatsCollapsed ? _jsx(PanelLeftOpen, { className: "h-4 w-4" }) : _jsx(PanelLeftClose, { className: "h-4 w-4" }) })] })), _jsx("div", { className: "min-w-0 flex-1", children: _jsx(AppHeader, { variant: "home" }) })] }), noAgents ? (_jsx(AiUnavailable, { hasError: Boolean(agentsError), onRetry: refetchAgents, onHome: () => navigate('/home'), t: t })) : (_jsxs(_Fragment, { children: [_jsx(Sheet, { open: mobileChatsOpen, onOpenChange: setMobileChatsOpen, children: _jsxs(SheetContent, { side: "left", className: "w-[320px] p-0 sm:max-w-[360px]", "data-testid": "ai-chat-mobile-sidebar", children: [_jsxs(SheetHeader, { className: "sr-only", children: [_jsx(SheetTitle, { children: t('console.ai.chats') }), _jsx(SheetDescription, { children: t('console.ai.chatsDescription') })] }), _jsx(ConversationsSidebar, { userId: userId, apiBase: apiBase, activeAgent: activeAgent, refreshKey: refreshKey, titleHints: titleHints, className: "h-full border-r-0", onNavigate: () => setMobileChatsOpen(false) })] }) }), conversationId && (_jsx(ShareDialog, { open: shareOpen, onOpenChange: setShareOpen, objectName: "ai_conversations", recordId: conversationId, recordLabel: "this conversation", apiBase: restApiBase, publicBaseUrl: publicShareBase })), conversationId && isBuildAgent(activeAgent) && (_jsx(BuildDebugDrawer, { apiBase: apiBase, conversationId: conversationId, open: debugOpen, onOpenChange: setDebugOpen })), _jsxs("div", { className: "flex min-h-0 flex-1 w-full bg-muted/20", children: [!chatsCollapsed && (_jsx(ConversationsSidebar, { userId: userId, apiBase: apiBase, activeAgent: activeAgent, refreshKey: refreshKey, titleHints: titleHints, className: "hidden w-72 shrink-0 border-r md:flex" })), _jsx("main", { className: "flex min-w-0 flex-1 flex-col", children: _jsx(ChatPane, { agents: agents, agentsLoading: agentsLoading, agentsError: agentsError, activeAgent: activeAgent, chatApi: chatApi, apiBase: apiBase, conversationId: conversationId, editPackageId: editPackageId, initialMessages: initialMessages, onSent: handleSent, onShare: () => setShareOpen(true), onDebug: () => setDebugOpen(true), showDebug: isBuildAgent(activeAgent), onCanvasOpenChange: handleCanvasOpenChange }, `${chatApi ?? 'local'}:${conversationId ?? 'pending'}`) })] })] }))] }));
 }
 /**
  * Graceful state for `/ai` when the agent catalog resolved empty — shown
@@ -627,7 +634,7 @@ function AiUnavailable({ hasError, onRetry, onHome, t, }) {
                             defaultValue: "This deployment doesn't have an AI assistant enabled. Everything else works as usual.",
                         }) }), _jsxs("div", { className: "mt-6 flex flex-col items-center gap-3 sm:flex-row", children: [hasError && (_jsx(Button, { variant: "outline", onClick: onRetry, "data-testid": "ai-unavailable-retry", children: t('console.ai.unavailableRetry', { defaultValue: 'Try again' }) })), _jsx(Button, { onClick: onHome, "data-testid": "ai-unavailable-home", children: t('console.ai.unavailableHome', { defaultValue: 'Back to home' }) })] })] }) }));
 }
-function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, apiBase, conversationId, initialMessages, onSent, onShare, onCanvasOpenChange, }) {
+function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, apiBase, conversationId, editPackageId, initialMessages, onSent, onShare, onDebug, showDebug, onCanvasOpenChange, }) {
     const { t } = useObjectTranslation();
     const navigate = useNavigate();
     // The agent dropdown is a LAUNCHER now (not an in-surface mode toggle): it
@@ -692,9 +699,18 @@ function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, ap
     // ADR-0013 D2: reconcile a stream-transport failure instead of blindly
     // retrying. Shared across chat surfaces — see useReconcileOnError.
     const { errorSuppressed, handleChatError, setMessagesRef, resetSuppression } = useReconcileOnError({ chatApi, conversationId });
+    // ADR-0028: plan-filtered selectable AI model on the full-page Build/Ask
+    // surface. The footer <select> in ChatbotEnhanced renders only for 2+ models,
+    // so free / single-model envs see nothing. Mirrors ConsoleFloatingChatbot;
+    // the chosen model rides each request via useObjectChat's `model` below.
+    const { models: aiModels, defaultModelId } = useAiModels({ apiBase });
+    const [selectedModelId, setSelectedModelId] = useState(undefined);
+    const effectiveModelId = selectedModelId ?? defaultModelId;
     const { messages, isLoading, error, sendMessage, stop, reload, clear, setMessages, } = useObjectChat({
         api: chatApi,
         conversationId,
+        // ADR-0028: the user's picked model (or the env default) rides each request.
+        model: effectiveModelId,
         onError: handleChatError,
         body: {
             context: {
@@ -703,6 +719,9 @@ function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, ap
                 // Tell the agent the environment's publish posture so its narration
                 // matches reality (an auto-published build is live, not "to publish").
                 autoPublishAiBuilds: getRuntimeConfig().features.autoPublishAiBuilds,
+                // ADR-0070 "Edit with AI": scope the build agent to the app the user
+                // opened to edit. Cloud seeds it as the conversation's active package.
+                ...(editPackageId ? { packageId: editPackageId } : {}),
             },
         },
         initialMessages: hydrated,
@@ -741,7 +760,7 @@ function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, ap
         sendMessage(content, files);
         onSent(content);
     }, [sendMessage, onSent]);
-    const headerSlot = (_jsxs("div", { className: "flex flex-wrap items-center justify-between gap-2 border-b border-border/50 px-4 pb-2 pt-3 sm:px-6", children: [_jsx("div", { className: "flex min-w-0 flex-1 items-center gap-2", children: showAgentLauncher ? (_jsxs(Select, { value: activeAgent, onValueChange: (name) => navigate(`/ai/${agentRouteName(name)}`), disabled: agentsLoading, children: [_jsx(SelectTrigger, { className: "h-7 w-auto min-w-0 border-0 bg-transparent px-1.5 text-xs shadow-none hover:bg-accent focus:ring-0 focus:ring-offset-0 focus-visible:ring-1 focus-visible:ring-border/80 focus-visible:ring-offset-0 sm:min-w-[160px]", "data-testid": "ai-chat-agent-picker", "aria-label": t('console.ai.switchAssistant', { defaultValue: 'Switch assistant' }), children: _jsx(SelectValue, { placeholder: t('console.ai.chooseAgent', { defaultValue: 'Choose assistant…' }) }) }), _jsx(SelectContent, { align: "start", children: agents.map((agent) => (_jsxs(SelectItem, { value: agent.name, className: "text-xs", children: [_jsx("span", { className: "font-medium", children: localizeAgentLabel(t, agent.name, agent.label) }), agent.description ? (_jsx("span", { className: "block text-muted-foreground text-[10px] truncate max-w-[260px]", children: agent.description })) : null] }, agent.name))) })] })) : (_jsx("span", { className: "truncate text-xs font-medium text-foreground/85", children: activeAgentLabel })) }), _jsx("div", { className: "flex shrink-0 items-center gap-1", children: _jsx(Button, { variant: "ghost", size: "icon", className: "h-7 w-7 text-muted-foreground hover:text-foreground", onClick: onShare, disabled: !conversationId, "aria-label": t('console.ai.share'), "data-testid": "ai-chat-share-button", title: conversationId ? t('console.ai.shareTitle') : t('console.ai.shareDisabledTitle'), children: _jsx(Share2, { className: "h-3.5 w-3.5" }) }) }), agentsError ? (_jsx("span", { className: "basis-full text-[10px] text-amber-700 dark:text-amber-400", title: agentsError.message, children: t('console.ai.offlineDemoMode') })) : null] }));
+    const headerSlot = (_jsxs("div", { className: "flex flex-wrap items-center justify-between gap-2 border-b border-border/50 px-4 pb-2 pt-3 sm:px-6", children: [_jsx("div", { className: "flex min-w-0 flex-1 items-center gap-2", children: showAgentLauncher ? (_jsxs(Select, { value: activeAgent, onValueChange: (name) => navigate(`/ai/${agentRouteName(name)}`), disabled: agentsLoading, children: [_jsx(SelectTrigger, { className: "h-7 w-auto min-w-0 border-0 bg-transparent px-1.5 text-xs shadow-none hover:bg-accent focus:ring-0 focus:ring-offset-0 focus-visible:ring-1 focus-visible:ring-border/80 focus-visible:ring-offset-0 sm:min-w-[160px]", "data-testid": "ai-chat-agent-picker", "aria-label": t('console.ai.switchAssistant', { defaultValue: 'Switch assistant' }), children: _jsx(SelectValue, { placeholder: t('console.ai.chooseAgent', { defaultValue: 'Choose assistant…' }) }) }), _jsx(SelectContent, { align: "start", children: agents.map((agent) => (_jsxs(SelectItem, { value: agent.name, className: "text-xs", children: [_jsx("span", { className: "font-medium", children: localizeAgentLabel(t, agent.name, agent.label) }), agent.description ? (_jsx("span", { className: "block text-muted-foreground text-[10px] truncate max-w-[260px]", children: agent.description })) : null] }, agent.name))) })] })) : (_jsx("span", { className: "truncate text-xs font-medium text-foreground/85", children: activeAgentLabel })) }), _jsxs("div", { className: "flex shrink-0 items-center gap-1", children: [showDebug && onDebug ? (_jsx(Button, { variant: "ghost", size: "icon", className: "h-7 w-7 text-muted-foreground hover:text-foreground", onClick: onDebug, disabled: !conversationId, "aria-label": "Build Doctor", "data-testid": "ai-chat-debug-button", title: conversationId ? 'Build Doctor — what actually landed?' : 'Send a message first', children: _jsx(Bug, { className: "h-3.5 w-3.5" }) })) : null, _jsx(Button, { variant: "ghost", size: "icon", className: "h-7 w-7 text-muted-foreground hover:text-foreground", onClick: onShare, disabled: !conversationId, "aria-label": t('console.ai.share'), "data-testid": "ai-chat-share-button", title: conversationId ? t('console.ai.shareTitle') : t('console.ai.shareDisabledTitle'), children: _jsx(Share2, { className: "h-3.5 w-3.5" }) })] }), agentsError ? (_jsx("span", { className: "basis-full text-[10px] text-amber-700 dark:text-amber-400", title: agentsError.message, children: t('console.ai.offlineDemoMode') })) : null] }));
     return (_jsxs("div", { ref: split.containerRef, className: "relative flex min-h-0 flex-1 px-0", children: [_jsx("div", { "data-chat-column": true, className: canvasApp
                     ? 'flex min-h-0 shrink-0 justify-center'
                     : 'flex min-h-0 flex-1 justify-center', style: canvasApp ? { width: split.width } : undefined, children: _jsx(ChatbotEnhanced, { className: "min-h-0 flex-1 bg-background md:max-w-5xl", onUpgrade: () => window.open(cloudPricingDeepLink(), '_blank', 'noopener,noreferrer'), surface: "plain", maxHeight: "100%", headerSlot: headerSlot, messages: messages, placeholder: activeAgent
@@ -775,7 +794,11 @@ function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, ap
                         stopResponse: t('console.ai.stopResponse'),
                         trace: t('console.ai.trace'),
                         viewTrace: t('console.ai.viewTrace'),
-                    }, suggestions: suggestions, onSendMessage: handleSend, onClear: clear, hideClearBar: true, onStop: isLoading ? stop : undefined, onReload: reload, isLoading: isLoading, error: errorSuppressed ? undefined : error, enableMarkdown: true, onToolApprove: hitl.decide, toolDecisions: hitl.decisions, toolApproveLabel: "Approve & run", toolDenyLabel: "Reject", toolDenyReason: "Operator rejected from chat", 
+                    }, 
+                    // ADR-0028: selectable AI model — ChatbotEnhanced renders the footer
+                    // <select> only when 2+ models are offered (free / single-model envs
+                    // see none). The picked model flows to useObjectChat above.
+                    models: aiModels, selectedModelId: effectiveModelId, onModelChange: setSelectedModelId, suggestions: suggestions, onSendMessage: handleSend, onClear: clear, hideClearBar: true, onStop: isLoading ? stop : undefined, onReload: reload, isLoading: isLoading, error: errorSuppressed ? undefined : error, enableMarkdown: true, onToolApprove: hitl.decide, toolDecisions: hitl.decisions, toolApproveLabel: "Approve & run", toolDenyLabel: "Reject", toolDenyReason: "Operator rejected from chat", 
                     // Build-tree "Open app": jump straight into the app the agent just built.
                     onOpenBuiltApp: (appName, appSegment) => navigate(`/apps/${encodeURIComponent(appSegment ?? appName)}`), openBuiltAppLabel: t('console.ai.openBuiltApp', { defaultValue: 'Open app' }), 
                     // Live lifecycle truth for draft cards: the server's pending count per

package/dist/console/ai/BuildDebugDrawer.d.ts

@@ -0,0 +1,20 @@
+/**
+ * BuildDebugDrawer — self-serve "what actually landed?" panel for a build
+ * conversation. Opens a right-side sheet, calls the admin build-debug endpoint
+ * (see buildDebugApi.ts), and renders the reconciliation: agent-CLAIMED vs LIVE
+ * `sys_metadata`. The headline is the verdict + the two failure modes the chat
+ * can't show — PROPOSED-BUT-ORPHANED (a confirm card no turn applied) and
+ * CLAIMED-BUT-MISSING (said applied, isn't live). Read-only; no DB credentials.
+ *
+ * Distinct from `useReconcileOnError` (ADR-0013 D2 stream-failure recovery) —
+ * this reconciles the BUILD against live metadata, not a transport drop.
+ */
+import React from 'react';
+interface BuildDebugDrawerProps {
+    apiBase: string;
+    conversationId?: string;
+    open: boolean;
+    onOpenChange: (open: boolean) => void;
+}
+export declare function BuildDebugDrawer({ apiBase, conversationId, open, onOpenChange }: BuildDebugDrawerProps): React.JSX.Element;
+export {};

package/dist/console/ai/BuildDebugDrawer.js

@@ -0,0 +1,75 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
+/**
+ * BuildDebugDrawer — self-serve "what actually landed?" panel for a build
+ * conversation. Opens a right-side sheet, calls the admin build-debug endpoint
+ * (see buildDebugApi.ts), and renders the reconciliation: agent-CLAIMED vs LIVE
+ * `sys_metadata`. The headline is the verdict + the two failure modes the chat
+ * can't show — PROPOSED-BUT-ORPHANED (a confirm card no turn applied) and
+ * CLAIMED-BUT-MISSING (said applied, isn't live). Read-only; no DB credentials.
+ *
+ * Distinct from `useReconcileOnError` (ADR-0013 D2 stream-failure recovery) —
+ * this reconciles the BUILD against live metadata, not a transport drop.
+ */
+import { useEffect, useState } from 'react';
+import { Sheet, SheetContent, SheetHeader, SheetTitle, SheetDescription, } from '@object-ui/components';
+import { Bug, CheckCircle2, AlertTriangle, XCircle, Loader2, CircleSlash } from 'lucide-react';
+import { fetchBuildDebug } from './buildDebugApi';
+export function BuildDebugDrawer({ apiBase, conversationId, open, onOpenChange }) {
+    const [report, setReport] = useState(null);
+    const [loading, setLoading] = useState(false);
+    const [error, setError] = useState(null);
+    useEffect(() => {
+        if (!open || !conversationId)
+            return;
+        let cancelled = false;
+        setLoading(true);
+        setError(null);
+        setReport(null);
+        fetchBuildDebug(apiBase, conversationId)
+            .then((r) => {
+            if (cancelled)
+                return;
+            if (!r)
+                setError('Not available — the conversation was not found or you are not authorized.');
+            else
+                setReport(r);
+        })
+            .catch((e) => {
+            if (!cancelled)
+                setError(e instanceof Error ? e.message : String(e));
+        })
+            .finally(() => {
+            if (!cancelled)
+                setLoading(false);
+        });
+        return () => {
+            cancelled = true;
+        };
+    }, [open, conversationId, apiBase]);
+    const rec = report?.reconciliation;
+    const problems = rec ? rec.orphaned.length + rec.missing.length + rec.errors.length : 0;
+    return (_jsx(Sheet, { open: open, onOpenChange: onOpenChange, children: _jsxs(SheetContent, { side: "right", className: "w-full overflow-y-auto sm:max-w-xl", children: [_jsxs(SheetHeader, { children: [_jsxs(SheetTitle, { className: "flex items-center gap-2", children: [_jsx(Bug, { className: "h-4 w-4" }), " Build Doctor"] }), _jsx(SheetDescription, { children: "What the agent claimed vs what is actually live. Read-only diagnostic." })] }), _jsxs("div", { className: "mt-4 space-y-4 text-sm", children: [loading && (_jsxs("div", { className: "flex items-center gap-2 text-muted-foreground", children: [_jsx(Loader2, { className: "h-4 w-4 animate-spin" }), " Reconciling\u2026"] })), error && !loading && (_jsx("div", { className: "rounded-md border border-destructive/30 bg-destructive/10 p-3 text-destructive", children: error })), report && !loading && (_jsxs(_Fragment, { children: [_jsxs("div", { className: "rounded-md border bg-muted/30 p-3 text-xs text-muted-foreground", children: [_jsx("div", { className: "font-medium text-foreground", children: report.title ?? '(untitled)' }), _jsxs("div", { className: "mt-1", children: [report.summary.userTurns, " turn(s) \u00B7 ", report.summary.messages, " msgs \u00B7", ' ', report.summary.totalTokens.toLocaleString(), " tok \u00B7", ' ', (report.summary.llmMs / 1000).toFixed(1), "s LLM", report.summary.models.length ? ` · ${report.summary.models.join(', ')}` : ''] })] }), rec && (_jsxs("div", { className: rec.ok
+                                        ? 'flex items-center gap-2 rounded-md border border-emerald-500/30 bg-emerald-500/10 p-3 text-emerald-700 dark:text-emerald-400'
+                                        : 'flex items-center gap-2 rounded-md border border-destructive/30 bg-destructive/10 p-3 text-destructive', children: [rec.ok ? _jsx(CheckCircle2, { className: "h-4 w-4" }) : _jsx(AlertTriangle, { className: "h-4 w-4" }), _jsx("span", { className: "font-medium", children: rec.ok
+                                                ? `All ${rec.liveCount} attempted change(s) are live — nothing evaporated.`
+                                                : `${problems} discrepancy(ies) — what the chat said doesn't match what's live.` })] })), rec && rec.orphaned.length > 0 && (_jsx(FindingSection, { icon: _jsx(CircleSlash, { className: "h-4 w-4 text-destructive" }), title: "Proposed but never applied", hint: "A confirm card the agent proposed but no later turn applied \u2014 the change silently evaporated.", findings: rec.orphaned, tone: "destructive" })), rec && rec.missing.length > 0 && (_jsx(FindingSection, { icon: _jsx(AlertTriangle, { className: "h-4 w-4 text-amber-600" }), title: "Claimed but missing", hint: "A tool result said it was applied, but the artifact isn't live in sys_metadata.", findings: rec.missing, tone: "amber" })), rec && rec.errors.length > 0 && (_jsx(FindingSection, { icon: _jsx(XCircle, { className: "h-4 w-4 text-destructive" }), title: "Tool errors", hint: "Tool calls that returned an error during the build.", findings: rec.errors, tone: "destructive" })), report.verify && (_jsxs("div", { className: "rounded-md border p-3 text-xs", children: [_jsx("div", { className: "font-medium text-foreground", children: "Build check (verify_build)" }), _jsxs("div", { className: "mt-1 text-muted-foreground", children: ["Your app:", ' ', report.verify.userIssues.length === 0 ? (_jsx("span", { className: "text-emerald-600 dark:text-emerald-400", children: "0 issues" })) : (_jsxs("span", { className: "text-destructive", children: [report.verify.userIssues.length, " issue(s)"] })), report.verify.platformNoise > 0
+                                                    ? ` · ${report.verify.platformNoise} platform sys_* finding(s) hidden`
+                                                    : ''] }), report.verify.userIssues.map((is, i) => (_jsxs("div", { className: "mt-1 text-destructive", children: ["[", is.severity, "] ", is.code, " ", is.artifact ? `${is.artifact.type}:${is.artifact.name}` : ''] }, i)))] })), report.pendingActions.length > 0 && (_jsxs("div", { className: "rounded-md border p-3 text-xs", children: [_jsx("div", { className: "font-medium text-foreground", children: "Pending actions" }), report.pendingActions.map((p, i) => (_jsxs("div", { className: "mt-1 text-muted-foreground", children: [p.tool ?? '?', " \u00B7 ", p.object ?? '-', " \u00B7 ", _jsx("span", { className: "font-mono", children: p.status ?? '-' })] }, i)))] })), _jsxs("details", { className: "rounded-md border p-3 text-xs", children: [_jsxs("summary", { className: "cursor-pointer font-medium text-foreground", children: ["Timeline (", report.timeline.length, ")"] }), _jsx("div", { className: "mt-2 space-y-1 font-mono text-[11px] leading-relaxed", children: report.timeline.map((e, i) => (_jsx(TimelineRow, { entry: e }, i))) })] })] }))] })] }) }));
+}
+function FindingSection({ icon, title, hint, findings, tone, }) {
+    const border = tone === 'destructive' ? 'border-destructive/30' : 'border-amber-500/30';
+    return (_jsxs("div", { className: `rounded-md border ${border} p-3`, children: [_jsxs("div", { className: "flex items-center gap-2 font-medium text-foreground", children: [icon, " ", title, " (", findings.length, ")"] }), _jsx("div", { className: "mt-1 text-xs text-muted-foreground", children: hint }), _jsx("div", { className: "mt-2 space-y-1", children: findings.map((f, i) => (_jsxs("div", { className: "font-mono text-xs", children: [f.t ? `${f.t} · ` : '', f.tool, " \u2192 ", f.artifact.type, ":", f.artifact.name, _jsxs("span", { className: "text-muted-foreground", children: [" (", f.status, ")"] })] }, i))) })] }));
+}
+function TimelineRow({ entry }) {
+    if (entry.kind === 'user') {
+        return (_jsxs("div", { children: [_jsx("span", { className: "text-muted-foreground", children: entry.t }), " \uD83D\uDC64 ", entry.text] }));
+    }
+    if (entry.kind === 'assistant-text') {
+        return (_jsxs("div", { children: [_jsx("span", { className: "text-muted-foreground", children: entry.t }), " \uD83E\uDD16 ", entry.text] }));
+    }
+    if (entry.kind === 'assistant-calls') {
+        return (_jsxs("div", { children: [_jsx("span", { className: "text-muted-foreground", children: entry.t }), " \uD83E\uDD16 \u2192", ' ', entry.calls.map((c) => c.name).join(', ')] }));
+    }
+    return (_jsxs("div", { className: entry.isError ? 'text-destructive' : '', children: [_jsx("span", { className: "text-muted-foreground", children: entry.t }), " \u21B3 ", entry.name, entry.status ? ` (${entry.status})` : ''] }));
+}

package/dist/console/ai/buildDebugApi.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Client for the admin build-debug endpoint
+ * (`GET /api/v1/ai/conversations/:id/debug`, service-ai).
+ *
+ * The chat renders the build agent's self-report, never what actually landed.
+ * This fetches the server-side reconciliation — agent-CLAIMED vs LIVE
+ * `sys_metadata` — so a signed-in admin can diagnose a build that "went wrong"
+ * from the browser, with no DB credentials. Mirrors `fetchConversation`'s
+ * same-origin cookie auth.
+ */
+export interface ArtifactRef {
+    type: string;
+    name: string;
+}
+export interface MutationFinding {
+    t?: string;
+    tool: string;
+    status: string;
+    artifact: ArtifactRef;
+}
+export interface VerifyIssue {
+    severity: string;
+    code: string;
+    artifact?: ArtifactRef;
+}
+export interface VerifySummary {
+    status: string;
+    errors: number;
+    warnings: number;
+    userIssues: VerifyIssue[];
+    platformNoise: number;
+}
+export type TimelineEntry = {
+    t: string;
+    kind: 'user';
+    text: string;
+} | {
+    t: string;
+    kind: 'assistant-text';
+    text: string;
+    model?: string;
+    tokens?: number;
+    ms?: number;
+} | {
+    t: string;
+    kind: 'assistant-calls';
+    calls: Array<{
+        name: string;
+        args: unknown;
+    }>;
+    model?: string;
+    tokens?: number;
+    ms?: number;
+} | {
+    t: string;
+    kind: 'tool-result';
+    name: string;
+    isError: boolean;
+    status?: string;
+    preview: string;
+};
+export interface BuildDebugReport {
+    conversationId: string;
+    title: string | null;
+    summary: {
+        models: string[];
+        userTurns: number;
+        messages: number;
+        totalTokens: number;
+        llmMs: number;
+    };
+    reconciliation: {
+        orphaned: MutationFinding[];
+        missing: MutationFinding[];
+        errors: MutationFinding[];
+        liveCount: number;
+        ok: boolean;
+    };
+    verify: VerifySummary | null;
+    timeline: TimelineEntry[];
+    pendingActions: Array<{
+        tool: string | null;
+        object: string | null;
+        status: string | null;
+        error: string | null;
+        createdAt: string | null;
+    }>;
+}
+/**
+ * Fetch the reconciliation report for a build conversation. Returns null on
+ * 403/404 (not authorized / unknown conversation) so the caller can show an
+ * empty state instead of throwing.
+ */
+export declare function fetchBuildDebug(apiBase: string, conversationId: string): Promise<BuildDebugReport | null>;

package/dist/console/ai/buildDebugApi.js

@@ -0,0 +1,16 @@
+// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
+/**
+ * Fetch the reconciliation report for a build conversation. Returns null on
+ * 403/404 (not authorized / unknown conversation) so the caller can show an
+ * empty state instead of throwing.
+ */
+export async function fetchBuildDebug(apiBase, conversationId) {
+    const res = await fetch(`${apiBase}/conversations/${encodeURIComponent(conversationId)}/debug`, {
+        credentials: 'include',
+    });
+    if (res.status === 404 || res.status === 403 || res.status === 401)
+        return null;
+    if (!res.ok)
+        throw new Error(`GET build debug failed: ${res.status}`);
+    return (await res.json());
+}

package/dist/console/organizations/OrganizationsPage.js

@@ -99,12 +99,21 @@ export function OrganizationsPage() {
             return;
         if (isOrganizationsLoading)
             return;
-        if (manageMode || wantsCreate)
-            return; // came to manage/create — don't bounce
+        if (wantsCreate)
+            return; // came to create — don't bounce
         if (orgList.length !== 1)
             return;
         autoSelectedRef.current = true;
-        void handleSelect(orgList[0]);
+        // Single-org users have no real choice to make. In manage mode (`?manage=1`,
+        // used by the Cloud app "Members" nav and the avatar "My Organizations"
+        // entry), skip the pointless one-item picker and deep-link straight to that
+        // org's member management; otherwise switch into the org and land on home.
+        if (manageMode) {
+            navigate(`/organizations/${orgList[0].slug}/members`, { replace: true });
+        }
+        else {
+            void handleSelect(orgList[0]);
+        }
         // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [isOrganizationsLoading, orgList.length, manageMode, wantsCreate]);
     // Open the create dialog when arriving via the header "Create workspace"
@@ -119,7 +128,7 @@ export function OrganizationsPage() {
     // Show a spinner while we're either still loading, or about to auto-redirect
     // because there's only one org. This prevents the picker from briefly
     // flashing on screen for single-org users.
-    const willAutoSelect = !manageMode && !wantsCreate && !isOrganizationsLoading && orgList.length === 1;
+    const willAutoSelect = !wantsCreate && !isOrganizationsLoading && orgList.length === 1;
     if (isOrganizationsLoading || willAutoSelect) {
         return (_jsx("div", { className: "flex flex-1 items-center justify-center py-20", children: _jsx(Loader2, { className: "h-5 w-5 animate-spin text-muted-foreground" }) }));
     }

package/dist/console/organizations/manage/OrganizationLayout.js

@@ -45,7 +45,7 @@ export function OrganizationLayout() {
         { to: 'invitations', label: t('organization.tabs.invitations', { defaultValue: 'Invitations' }) },
         { to: 'settings', label: t('organization.tabs.settings', { defaultValue: 'Settings' }) },
     ];
-    return (_jsxs("div", { className: "flex min-h-svh w-full flex-col bg-background", "data-testid": "organization-layout", children: [_jsx("header", { className: "sticky top-0 z-30 flex h-14 w-full shrink-0 items-center gap-2 border-b bg-background px-2 sm:px-4", children: _jsx(AppHeader, { variant: "orgs" }) }), _jsx("div", { className: "border-b", children: _jsxs("div", { className: "mx-auto w-full max-w-5xl px-4 sm:px-6 pt-6", children: [_jsxs("button", { onClick: () => navigate('/organizations'), className: "mb-3 inline-flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground", children: [_jsx(ArrowLeft, { className: "h-3.5 w-3.5" }), t('organization.backToList', { defaultValue: 'Back to organizations' })] }), _jsx("div", { className: "flex items-center justify-between gap-4", children: _jsxs("div", { className: "min-w-0", children: [_jsx("h1", { className: "truncate text-2xl font-bold tracking-tight", children: org.name }), _jsx("p", { className: "text-xs text-muted-foreground", children: org.slug })] }) }), _jsx("nav", { className: "mt-4 flex gap-1 -mb-px", children: tabs.map((tab) => (_jsx(NavLink, { to: tab.to, end: true, className: ({ isActive }) => `border-b-2 px-3 py-2 text-sm font-medium transition-colors ${isActive
+    return (_jsxs("div", { className: "flex min-h-svh w-full flex-col bg-background", "data-testid": "organization-layout", children: [_jsx("header", { className: "sticky top-0 z-30 flex h-14 w-full shrink-0 items-center gap-2 border-b bg-background px-2 sm:px-4", children: _jsx(AppHeader, { variant: "orgs" }) }), _jsx("div", { className: "border-b", children: _jsxs("div", { className: "mx-auto w-full max-w-5xl px-4 sm:px-6 pt-6", children: [(organizations ?? []).length > 1 && (_jsxs("button", { onClick: () => navigate('/organizations'), className: "mb-3 inline-flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground", children: [_jsx(ArrowLeft, { className: "h-3.5 w-3.5" }), t('organization.backToList', { defaultValue: 'Back to organizations' })] })), _jsx("div", { className: "flex items-center justify-between gap-4", children: _jsxs("div", { className: "min-w-0", children: [_jsx("h1", { className: "truncate text-2xl font-bold tracking-tight", children: org.name }), _jsx("p", { className: "text-xs text-muted-foreground", children: org.slug })] }) }), _jsx("nav", { className: "mt-4 flex gap-1 -mb-px", children: tabs.map((tab) => (_jsx(NavLink, { to: tab.to, end: true, className: ({ isActive }) => `border-b-2 px-3 py-2 text-sm font-medium transition-colors ${isActive
                                     ? 'border-primary text-foreground'
                                     : 'border-transparent text-muted-foreground hover:text-foreground'}`, children: tab.label }, tab.to))) })] }) }), _jsx("main", { className: "flex-1 min-w-0 overflow-auto", children: _jsx("div", { className: "mx-auto w-full max-w-5xl px-4 sm:px-6 py-6", children: _jsx(Outlet, { context: { org } }) }) })] }));
 }

package/dist/layout/AppHeader.js

@@ -20,11 +20,12 @@ import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-run
  */
 import { useLocation, useParams, Link, useNavigate } from 'react-router-dom';
 import { Button, DropdownMenu, DropdownMenuTrigger, DropdownMenuContent, DropdownMenuItem, DropdownMenuLabel, DropdownMenuSeparator, DropdownMenuGroup, Avatar, AvatarImage, AvatarFallback, cn, } from '@object-ui/components';
-import { Search, HelpCircle, ChevronDown, Check, Lock, LogOut, Boxes, Plus, Layers, Bot, User, BookOpen, ExternalLink, Keyboard, } from 'lucide-react';
+import { Search, HelpCircle, ChevronDown, Check, Lock, LogOut, Plus, Layers, Bot, User, BookOpen, ExternalLink, Keyboard, } from 'lucide-react';
 import { useState, useEffect, useCallback, useRef } from 'react';
 import { useOffline } from '@object-ui/react';
 import { PresenceAvatars, useTenantPresence } from '@object-ui/collaboration';
 import { ModeToggle } from './ModeToggle';
+import { WorkspaceSwitcher } from './WorkspaceSwitcher';
 import { LocaleSwitcher } from './LocaleSwitcher';
 import { ConnectionStatus } from './ConnectionStatus';
 import { InboxPopover } from './InboxPopover';
@@ -558,7 +559,7 @@ export function AppHeader({ variant, appName, objects, connectionState, presence
         }
     }
     const lastSegmentLabel = extraSegments[extraSegments.length - 1]?.label || appName || '';
-    return (_jsxs("div", { className: "flex items-center justify-between w-full h-full", children: [_jsxs("div", { className: "flex items-center min-w-0 flex-1", children: [_jsx(Link, { to: "/home", className: cn("flex items-center justify-center h-7 w-7 shrink-0 rounded-md bg-primary text-primary-foreground hover:bg-primary/90 transition-colors", isApp && "hidden sm:flex"), title: getProductName(), children: _jsx(Layers, { className: "h-4 w-4" }) }), resolvedVariant === 'home' && (_jsx("span", { className: "hidden sm:inline ml-2 text-sm font-semibold tracking-tight", children: getProductName() })), resolvedVariant === 'orgs' && (_jsxs(_Fragment, { children: [_jsx(PathSep, {}), _jsx("span", { className: "text-sm font-medium text-foreground/80 px-1.5", children: t('organizations.title', { defaultValue: 'Organizations' }) })] })), isApp && (_jsxs(_Fragment, { children: [_jsx(LocalizedSidebarTrigger, { className: "lg:hidden shrink-0 ml-1", "aria-label": t('common.toggleSidebar', { defaultValue: 'Toggle sidebar' }) }), activeAppName && onAppChange ? (_jsxs(_Fragment, { children: [_jsx("span", { className: "hidden sm:flex items-center", children: _jsx(PathSep, {}) }), _jsx("div", { className: "hidden sm:flex items-center", children: _jsx(AppSwitcher, { activeAppName: activeAppName, onAppChange: onAppChange }) })] })) : appName ? (_jsxs(_Fragment, { children: [_jsx("span", { className: "hidden sm:flex items-center", children: _jsx(PathSep, {}) }), _jsx("span", { className: "hidden sm:inline text-sm font-medium text-foreground/80 px-1.5", children: appName })] })) : null, extraSegments.map((seg, i) => {
+    return (_jsxs("div", { className: "flex items-center justify-between w-full h-full", children: [_jsxs("div", { className: "flex items-center min-w-0 flex-1", children: [_jsx(Link, { to: "/home", className: cn("flex items-center justify-center h-7 w-7 shrink-0 rounded-md bg-primary text-primary-foreground hover:bg-primary/90 transition-colors", isApp && "hidden sm:flex"), title: getProductName(), children: _jsx(Layers, { className: "h-4 w-4" }) }), resolvedVariant === 'home' && (_jsx("span", { className: "hidden sm:inline ml-2 text-sm font-semibold tracking-tight", children: getProductName() })), _jsx(WorkspaceSwitcher, {}), resolvedVariant === 'orgs' && (_jsxs(_Fragment, { children: [_jsx(PathSep, {}), _jsx("span", { className: "text-sm font-medium text-foreground/80 px-1.5", children: t('organizations.title', { defaultValue: 'Organizations' }) })] })), isApp && (_jsxs(_Fragment, { children: [_jsx(LocalizedSidebarTrigger, { className: "lg:hidden shrink-0 ml-1", "aria-label": t('common.toggleSidebar', { defaultValue: 'Toggle sidebar' }) }), activeAppName && onAppChange ? (_jsxs(_Fragment, { children: [_jsx("span", { className: "hidden sm:flex items-center", children: _jsx(PathSep, {}) }), _jsx("div", { className: "hidden sm:flex items-center", children: _jsx(AppSwitcher, { activeAppName: activeAppName, onAppChange: onAppChange }) })] })) : appName ? (_jsxs(_Fragment, { children: [_jsx("span", { className: "hidden sm:flex items-center", children: _jsx(PathSep, {}) }), _jsx("span", { className: "hidden sm:inline text-sm font-medium text-foreground/80 px-1.5", children: appName })] })) : null, extraSegments.map((seg, i) => {
                                 const isLast = i === extraSegments.length - 1;
                                 return (_jsxs("span", { className: "hidden sm:flex items-center min-w-0", children: [_jsx(PathSep, {}), seg.siblings && seg.siblings.length > 1 ? (_jsxs(DropdownMenu, { children: [_jsxs(DropdownMenuTrigger, { className: `flex items-center gap-1 rounded-md px-1.5 py-1 text-sm font-medium transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring hover:bg-accent hover:text-foreground ${!isLast ? 'text-foreground/60' : 'text-foreground/80'}`, children: [seg.label, _jsx(ChevronDown, { className: "h-3.5 w-3.5 text-muted-foreground" })] }), _jsxs(DropdownMenuContent, { align: "start", sideOffset: 8, className: "w-56 max-h-72 overflow-y-auto", children: [_jsx(DropdownMenuLabel, { className: "text-xs text-muted-foreground font-normal", children: "Switch Object" }), _jsx(DropdownMenuSeparator, {}), seg.siblings.map((sibling) => (_jsx(DropdownMenuItem, { asChild: true, children: _jsx(Link, { to: sibling.href, className: "w-full", children: sibling.label }) }, sibling.href)))] })] })) : seg.href ? (_jsx(Link, { to: seg.href, className: `rounded-md px-1.5 py-1 text-sm font-medium transition-colors hover:bg-accent hover:text-foreground truncate max-w-[160px] ${isLast ? 'text-foreground/80' : 'text-foreground/60'}`, children: seg.label })) : (_jsx("span", { className: `px-1.5 py-1 text-sm font-medium truncate max-w-[160px] ${isLast ? 'text-foreground/80' : 'text-foreground/60'}`, children: seg.label }))] }, i));
                             }), mobileSwitcher && mobileSwitcher.views.length > 0 ? (mobileSwitcher.views.length > 1 ? (_jsxs(DropdownMenu, { children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsxs("button", { type: "button", className: "sm:hidden flex items-center gap-0.5 min-w-0 ml-1 rounded-md px-1.5 py-1 text-sm font-medium hover:bg-accent active:bg-accent/80 transition-colors", "aria-label": t('topbar.switchView', { defaultValue: 'Switch view' }), children: [_jsx("span", { className: "truncate max-w-[180px]", children: mobileSwitcher.triggerLabel ??
@@ -572,7 +573,7 @@ export function AppHeader({ variant, appName, objects, connectionState, presence
                                         }) })] })) : (_jsx("span", { className: "text-sm font-medium sm:hidden truncate min-w-0 ml-1", children: mobileSwitcher.triggerLabel ?? mobileSwitcher.views[0].label }))) : (_jsx("span", { className: "text-sm font-medium sm:hidden truncate min-w-0 ml-1", children: lastSegmentLabel }))] }))] }), _jsxs("div", { className: "flex items-center gap-0.5 sm:gap-1 shrink-0 [&>*+*[data-topbar-group]]:ml-1 [&>[data-topbar-group]+[data-topbar-group]]:border-l [&>[data-topbar-group]+[data-topbar-group]]:border-border/60 [&>[data-topbar-group]+[data-topbar-group]]:pl-1 sm:[&>[data-topbar-group]+[data-topbar-group]]:pl-2 sm:[&>[data-topbar-group]+[data-topbar-group]]:ml-2", children: [!isOnline && (_jsxs("div", { className: "flex items-center gap-1 px-2 py-1 rounded-full bg-yellow-100 dark:bg-yellow-900/30 text-yellow-800 dark:text-yellow-200 text-xs font-medium", children: [_jsx("span", { className: "h-2 w-2 rounded-full bg-yellow-500 animate-pulse" }), t('topbar.offline', { defaultValue: 'Offline' })] })), isApp && connectionState && _jsx(ConnectionStatus, { state: connectionState }), isApp && activeUsers.length > 0 && (_jsx("div", { className: "hidden md:flex items-center shrink-0", title: t('topbar.usersOnline', { defaultValue: 'Users currently online' }), children: _jsx(PresenceAvatars, { users: activeUsers, size: "sm", maxVisible: 3, showStatus: true }) })), _jsxs("div", { "data-topbar-group": true, className: "flex items-center gap-0.5 sm:gap-1 shrink-0", children: [_jsxs("button", { type: "button", "data-testid": "action:command-palette:open", "aria-label": t('console.search', { defaultValue: 'Search…' }), "aria-keyshortcuts": "Meta+K Control+K", onClick: openCommandPalette, className: "hidden lg:flex relative items-center gap-2 w-48 xl:w-64 h-8 px-3 text-sm rounded-md border bg-muted/50 text-muted-foreground hover:bg-muted transition-colors", children: [_jsx(Search, { className: "h-3.5 w-3.5 shrink-0" }), _jsx("span", { className: "flex-1 text-left text-xs", children: t('console.search', { defaultValue: 'Search…' }) }), _jsxs("kbd", { className: "pointer-events-none inline-flex h-5 items-center gap-0.5 rounded border bg-background px-1.5 text-[10px] font-medium text-muted-foreground", children: [_jsx("span", { className: "text-xs", children: "\u2318" }), "K"] })] }), _jsx(Button, { variant: "ghost", size: "icon", className: "lg:hidden h-8 w-8 shrink-0", "data-testid": "action:command-palette:open-mobile", onClick: openCommandPalette, "aria-label": t('console.search', { defaultValue: 'Search…' }), children: _jsx(Search, { className: "h-4 w-4" }) })] }), _jsxs("div", { "data-topbar-group": true, className: "flex items-center gap-0.5 shrink-0", children: [_jsx(InboxPopover, { notifications: notifications, unreadCount: unreadCount, pendingApprovalsCount: pendingApprovalsCount, activities: activeActivities, onMarkAllRead: markAllRead, onMarkRead: markNotificationRead }), aiEnabled && (_jsx(Button, { variant: "ghost", size: "icon", className: "h-8 w-8 shrink-0", asChild: true, "aria-label": t('topbar.aiAssistant', { defaultValue: 'AI Assistant' }), children: _jsx(Link, { to: "/ai", children: _jsx(Bot, { className: "h-4 w-4" }) }) })), _jsxs(DropdownMenu, { onOpenChange: (open) => { if (open)
                                     void loadHelpDocs(); }, children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsx(Button, { variant: "ghost", size: "icon", className: "h-8 w-8 hidden md:flex shrink-0", "aria-label": t('sidebar.helpTooltip', { defaultValue: 'Help & Documentation' }), children: _jsx(HelpCircle, { className: "h-4 w-4" }) }) }), _jsxs(DropdownMenuContent, { align: "end", className: "min-w-56 rounded-lg", sideOffset: 4, children: [currentAppDocs.length > 0 && currentAppPackageId ? (_jsxs(DropdownMenuItem, { className: "cursor-pointer", onClick: () => navigate(currentAppDocs.length === 1
                                                     ? `/apps/${currentAppPackageId}/docs/${currentAppDocs[0].name}`
-                                                    : `/apps/${currentAppPackageId}/docs`), children: [_jsx(BookOpen, { className: "mr-2 h-4 w-4" }), t('help.appDocs', { defaultValue: "This app's docs" })] })) : null, _jsxs(DropdownMenuItem, { className: "cursor-pointer", onClick: () => navigate('/docs'), children: [_jsx(Layers, { className: "mr-2 h-4 w-4" }), t('help.allDocs', { defaultValue: 'All documentation' })] }), isApp ? (_jsxs(DropdownMenuItem, { className: "cursor-pointer", "data-testid": "action:keyboard-shortcuts:open", onClick: openShortcuts, children: [_jsx(Keyboard, { className: "mr-2 h-4 w-4" }), t('help.keyboardShortcuts', { defaultValue: 'Keyboard shortcuts' })] })) : null, _jsx(DropdownMenuSeparator, {}), _jsx(DropdownMenuItem, { asChild: true, className: "cursor-pointer", children: _jsxs("a", { href: "https://docs.objectstack.ai", target: "_blank", rel: "noopener noreferrer", children: [_jsx(ExternalLink, { className: "mr-2 h-4 w-4" }), t('help.onlineDocs', { defaultValue: 'Online documentation' })] }) })] })] })] }), _jsxs("div", { "data-topbar-group": true, className: "flex items-center gap-0.5 shrink-0", children: ["        ", _jsxs(DropdownMenu, { children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsx(Button, { variant: "ghost", size: "icon", className: "h-8 w-8 shrink-0 rounded-full", children: _jsxs(Avatar, { className: "h-7 w-7 rounded-full", children: [_jsx(AvatarImage, { src: user?.image, alt: user?.name ?? 'User' }), _jsx(AvatarFallback, { className: "rounded-full bg-primary text-primary-foreground text-xs", children: getUserInitials(user) })] }) }) }), _jsxs(DropdownMenuContent, { align: "end", className: "min-w-64 rounded-lg", sideOffset: 4, children: [_jsx(DropdownMenuLabel, { className: "p-0 font-normal", children: _jsxs("div", { className: "flex items-center gap-2 px-2 py-2", children: [_jsxs(Avatar, { className: "h-8 w-8 rounded-lg", children: [_jsx(AvatarImage, { src: user?.image, alt: user?.name ?? 'User' }), _jsx(AvatarFallback, { className: "rounded-lg bg-primary text-primary-foreground", children: getUserInitials(user) })] }), _jsxs("div", { className: "grid flex-1 text-left text-sm leading-tight", children: [_jsx("span", { className: "truncate font-semibold", children: user?.name ?? 'User' }), _jsx("span", { className: "truncate text-xs text-muted-foreground", children: user?.email ?? '' })] })] }) }), _jsx(DropdownMenuSeparator, {}), _jsxs(DropdownMenuGroup, { children: [_jsxs(DropdownMenuItem, { onClick: () => navigate('/apps/account/component/account/profile_card'), className: "cursor-pointer", children: [_jsx(User, { className: "mr-2 h-4 w-4" }), t('user.profile', { defaultValue: 'Profile' })] }), hasOrgSection && (_jsxs(DropdownMenuItem, { onClick: () => navigate('/organizations?manage=1'), className: "cursor-pointer", children: [_jsx(Boxes, { className: "mr-2 h-4 w-4" }), t('organizations.mine', { defaultValue: 'My Organizations' })] })), hasOrgSection && !multiOrgDisabled && (_jsxs(DropdownMenuItem, { onClick: () => navigate('/organizations?create=1'), className: "cursor-pointer", "data-testid": "header-create-workspace", children: [_jsx(Plus, { className: "mr-2 h-4 w-4" }), t('organizations.create', { defaultValue: 'Create workspace' })] })), (metadataApps || [])
+                                                    : `/apps/${currentAppPackageId}/docs`), children: [_jsx(BookOpen, { className: "mr-2 h-4 w-4" }), t('help.appDocs', { defaultValue: "This app's docs" })] })) : null, _jsxs(DropdownMenuItem, { className: "cursor-pointer", onClick: () => navigate('/docs'), children: [_jsx(Layers, { className: "mr-2 h-4 w-4" }), t('help.allDocs', { defaultValue: 'All documentation' })] }), isApp ? (_jsxs(DropdownMenuItem, { className: "cursor-pointer", "data-testid": "action:keyboard-shortcuts:open", onClick: openShortcuts, children: [_jsx(Keyboard, { className: "mr-2 h-4 w-4" }), t('help.keyboardShortcuts', { defaultValue: 'Keyboard shortcuts' })] })) : null, _jsx(DropdownMenuSeparator, {}), _jsx(DropdownMenuItem, { asChild: true, className: "cursor-pointer", children: _jsxs("a", { href: "https://docs.objectstack.ai", target: "_blank", rel: "noopener noreferrer", children: [_jsx(ExternalLink, { className: "mr-2 h-4 w-4" }), t('help.onlineDocs', { defaultValue: 'Online documentation' })] }) })] })] })] }), _jsxs("div", { "data-topbar-group": true, className: "flex items-center gap-0.5 shrink-0", children: ["        ", _jsxs(DropdownMenu, { children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsx(Button, { variant: "ghost", size: "icon", className: "h-8 w-8 shrink-0 rounded-full", children: _jsxs(Avatar, { className: "h-7 w-7 rounded-full", children: [_jsx(AvatarImage, { src: user?.image, alt: user?.name ?? 'User' }), _jsx(AvatarFallback, { className: "rounded-full bg-primary text-primary-foreground text-xs", children: getUserInitials(user) })] }) }) }), _jsxs(DropdownMenuContent, { align: "end", className: "min-w-64 rounded-lg", sideOffset: 4, children: [_jsx(DropdownMenuLabel, { className: "p-0 font-normal", children: _jsxs("div", { className: "flex items-center gap-2 px-2 py-2", children: [_jsxs(Avatar, { className: "h-8 w-8 rounded-lg", children: [_jsx(AvatarImage, { src: user?.image, alt: user?.name ?? 'User' }), _jsx(AvatarFallback, { className: "rounded-lg bg-primary text-primary-foreground", children: getUserInitials(user) })] }), _jsxs("div", { className: "grid flex-1 text-left text-sm leading-tight", children: [_jsx("span", { className: "truncate font-semibold", children: user?.name ?? 'User' }), _jsx("span", { className: "truncate text-xs text-muted-foreground", children: user?.email ?? '' })] })] }) }), _jsx(DropdownMenuSeparator, {}), _jsxs(DropdownMenuGroup, { children: [_jsxs(DropdownMenuItem, { onClick: () => navigate('/apps/account/component/account/profile_card'), className: "cursor-pointer", children: [_jsx(User, { className: "mr-2 h-4 w-4" }), t('user.profile', { defaultValue: 'Profile' })] }), hasOrgSection && !multiOrgDisabled && (_jsxs(DropdownMenuItem, { onClick: () => navigate('/organizations?create=1'), className: "cursor-pointer", "data-testid": "header-create-workspace", children: [_jsx(Plus, { className: "mr-2 h-4 w-4" }), t('organizations.create', { defaultValue: 'Create workspace' })] })), (metadataApps || [])
                                                         .filter((a) => a.active !== false && a.hidden === true && a.name !== 'account')
                                                         .map((app) => {
                                                         const AppIcon = getIcon(app.icon);

package/dist/layout/ConsoleFloatingChatbot.js

@@ -104,8 +104,12 @@ function buildChatLocale(language, appLabel, agentName, fallbackAgentLabel, obje
             planApprove: '开始搭建',
             planAdjust: '调整方案',
             planBuilt: '已搭建',
-            planApproveMessage: '就按这个方案搭建吧。',
-            planApproveDefaultsMessage: '就按你的合理假设直接搭建，未决问题用默认即可。',
+            // These messages the button SENDS must match the cloud confirm gate's
+            // APPROVAL_RE (service-ai-studio confirm-gate.ts) or the agent re-proposes
+            // and "开始搭建" looks inert — the gate anchors Chinese approval on 确认 /
+            // 直接搭建, so a bare "…搭建吧" does NOT match. Keep these 确认-anchored.
+            planApproveMessage: '确认，开始搭建。',
+            planApproveDefaultsMessage: '确认搭建，未决问题按你的合理假设和默认处理。',
             planAnswer: (question, option) => `关于「${question}」，我选择「${option}」。`,
             publishOk: '已发布，对象已生效。',
             publishFailed: '发布失败',

package/dist/layout/ContextSelectors.js

@@ -19,16 +19,6 @@ import { useLocation, useNavigate } from 'react-router-dom';
 import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue, } from '@object-ui/components';
 import { getIcon } from '../utils/getIcon';
 import { resolveI18nLabel } from '../utils';
-// Local/Custom scope sentinel — kept inline (not imported from metadata-admin)
-// so this layout module never forms an import cycle with the metadata-admin
-// views. Mirrors `LOCAL_PACKAGE_ID` in views/metadata-admin/package-scope.ts.
-const LOCAL_SCOPE_ID = 'sys_metadata';
-function localScopeLabel() {
-    const lang = (typeof document !== 'undefined' && document.documentElement?.lang) ||
-        (typeof navigator !== 'undefined' && navigator.language) ||
-        '';
-    return /^zh/i.test(lang) ? '本地 / 自定义（本环境）' : 'Local / Custom (this env)';
-}
 const ALL_SENTINEL = '__all__';
 /** Read a (possibly dotted) property path off a row, e.g. `manifest.id`. */
 function getByPath(row, key) {
@@ -117,15 +107,6 @@ function useSelectorOptions(def) {
                 opts.push({ value, label: typeof labelRaw === 'string' && labelRaw ? labelRaw : value });
             }
             opts.sort((a, b) => a.label.localeCompare(b.label));
-            // The package-scope selector gets a stable "Local / Custom (this env)"
-            // entry for this environment's runtime, DB-authored metadata — it is
-            // never a real package row (`package_id = null` / `sys_metadata`
-            // provenance) yet must always be selectable so org-authored items are
-            // discoverable and editable. The metadata list/get API already treats
-            // `?package=sys_metadata` as exactly this local scope.
-            if (/package/i.test(endpoint) && !opts.some((o) => o.value === LOCAL_SCOPE_ID)) {
-                opts.push({ value: LOCAL_SCOPE_ID, label: localScopeLabel() });
-            }
             setOptions(opts);
         }
         catch {

package/dist/layout/WorkspaceSwitcher.d.ts

@@ -0,0 +1,14 @@
+/**
+ * WorkspaceSwitcher
+ *
+ * Header-left organization (workspace) switcher — the standard place users
+ * expect "which org am I in / switch org" to live (Linear/Vercel/GitHub style).
+ *
+ * - Single-org users (the vast majority): just the org name, NO dropdown. There
+ *   is nothing to switch to, so a one-item menu would be pure friction.
+ * - Multi-org users: the active org name + a dropdown to switch orgs inline
+ *   (full-page reload so the active-org context refreshes app-wide, mirroring
+ *   OrganizationsPage), plus shortcuts to manage members / create a workspace.
+ * - No org context at all: renders nothing.
+ */
+export declare function WorkspaceSwitcher(): import("react").JSX.Element | null;

package/dist/layout/WorkspaceSwitcher.js

@@ -0,0 +1,76 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * WorkspaceSwitcher
+ *
+ * Header-left organization (workspace) switcher — the standard place users
+ * expect "which org am I in / switch org" to live (Linear/Vercel/GitHub style).
+ *
+ * - Single-org users (the vast majority): just the org name, NO dropdown. There
+ *   is nothing to switch to, so a one-item menu would be pure friction.
+ * - Multi-org users: the active org name + a dropdown to switch orgs inline
+ *   (full-page reload so the active-org context refreshes app-wide, mirroring
+ *   OrganizationsPage), plus shortcuts to manage members / create a workspace.
+ * - No org context at all: renders nothing.
+ */
+import { useEffect, useState } from 'react';
+import { useNavigate } from 'react-router-dom';
+import { useAuth } from '@object-ui/auth';
+import { useObjectTranslation } from '@object-ui/i18n';
+import { DropdownMenu, DropdownMenuTrigger, DropdownMenuContent, DropdownMenuItem, DropdownMenuLabel, DropdownMenuSeparator, } from '@object-ui/components';
+import { ChevronsUpDown, Check, Plus, Users } from 'lucide-react';
+import { resolveHomeUrl } from '../console/organizations/resolveHomeUrl';
+function getOrgInitials(name) {
+    return name
+        .split(/[\s_-]+/)
+        .map((w) => w[0])
+        .join('')
+        .toUpperCase()
+        .slice(0, 2);
+}
+function OrgBadge({ name }) {
+    return (_jsx("span", { className: "flex h-5 w-5 shrink-0 items-center justify-center rounded bg-muted text-[10px] font-semibold text-muted-foreground", children: getOrgInitials(name) }));
+}
+export function WorkspaceSwitcher() {
+    const { t } = useObjectTranslation();
+    const navigate = useNavigate();
+    const { organizations, activeOrganization, switchOrganization, getAuthConfig } = useAuth();
+    const [multiOrgDisabled, setMultiOrgDisabled] = useState(false);
+    useEffect(() => {
+        let cancelled = false;
+        getAuthConfig?.()
+            .then((cfg) => {
+            if (!cancelled)
+                setMultiOrgDisabled(cfg?.features?.multiOrgEnabled === false);
+        })
+            .catch(() => {
+            /* leave default — create entry stays available */
+        });
+        return () => {
+            cancelled = true;
+        };
+    }, [getAuthConfig]);
+    const orgList = organizations ?? [];
+    const current = activeOrganization ?? orgList[0] ?? null;
+    // No organization context (e.g. a brand-new user before provisioning) — show
+    // nothing rather than an empty switcher.
+    if (!current)
+        return null;
+    // Single-org: static label, no dropdown.
+    if (orgList.length <= 1) {
+        return (_jsxs("span", { className: "ml-2 hidden max-w-[12rem] items-center gap-1.5 sm:inline-flex", "data-testid": "workspace-name", children: [_jsx(OrgBadge, { name: current.name }), _jsx("span", { className: "truncate text-sm font-medium text-foreground/80", children: current.name })] }));
+    }
+    const handleSwitch = async (org) => {
+        if (org.id === current.id)
+            return;
+        try {
+            await switchOrganization(org.id);
+            // switchOrganization only updates state; reload to home so the new active
+            // org propagates to every data scope app-wide (same as OrganizationsPage).
+            window.location.href = resolveHomeUrl();
+        }
+        catch (err) {
+            console.error('[WorkspaceSwitcher] switch failed', err);
+        }
+    };
+    return (_jsxs(DropdownMenu, { children: [_jsxs(DropdownMenuTrigger, { className: "ml-2 inline-flex max-w-[14rem] items-center gap-1.5 rounded-md px-1.5 py-1 text-sm font-medium text-foreground/80 transition-colors hover:bg-accent hover:text-foreground", "data-testid": "workspace-switcher", children: [_jsx(OrgBadge, { name: current.name }), _jsx("span", { className: "hidden truncate sm:inline", children: current.name }), _jsx(ChevronsUpDown, { className: "h-3.5 w-3.5 shrink-0 text-muted-foreground" })] }), _jsxs(DropdownMenuContent, { align: "start", className: "w-60", children: [_jsx(DropdownMenuLabel, { className: "text-xs text-muted-foreground", children: t('organization.switcher.label', { defaultValue: 'Switch organization' }) }), orgList.map((org) => (_jsxs(DropdownMenuItem, { onClick: () => handleSwitch(org), className: "cursor-pointer gap-2", children: [_jsx(OrgBadge, { name: org.name }), _jsx("span", { className: "flex-1 truncate", children: org.name }), org.id === current.id && _jsx(Check, { className: "h-4 w-4 shrink-0" })] }, org.id))), _jsx(DropdownMenuSeparator, {}), _jsxs(DropdownMenuItem, { onClick: () => navigate(`/organizations/${current.slug}/members`), className: "cursor-pointer gap-2", "data-testid": "workspace-manage-members", children: [_jsx(Users, { className: "h-4 w-4" }), t('organization.switcher.manageMembers', { defaultValue: 'Manage members' })] }), !multiOrgDisabled && (_jsxs(DropdownMenuItem, { onClick: () => navigate('/organizations?create=1'), className: "cursor-pointer gap-2", "data-testid": "workspace-create", children: [_jsx(Plus, { className: "h-4 w-4" }), t('organizations.create', { defaultValue: 'Create workspace' })] }))] })] }));
+}

package/dist/utils/managedByEmptyState.d.ts

@@ -32,5 +32,5 @@ export interface ManagedByEmptyState {
  * `defaultValue` used as the English fallback when a locale lacks the key).
  */
 type TranslateFn = (key: string, options?: Record<string, unknown>) => string;
-export declare function resolveManagedByEmptyState(managedBy: string | undefined | null, t: TranslateFn): ManagedByEmptyState | undefined;
+export declare function resolveManagedByEmptyState(managedBy: string | undefined | null, t: TranslateFn, objectName?: string | null): ManagedByEmptyState | undefined;
 export {};

package/dist/utils/managedByEmptyState.js

@@ -1,4 +1,4 @@
-export function resolveManagedByEmptyState(managedBy, t) {
+export function resolveManagedByEmptyState(managedBy, t, objectName) {
     switch (managedBy) {
         case 'system':
             return {
@@ -17,11 +17,29 @@ export function resolveManagedByEmptyState(managedBy, t) {
                 }),
             };
         case 'better-auth':
+            // `sys_user` is the one identity table with a concrete onboarding
+            // answer, so give it actionable guidance: teammates arrive via an
+            // org-level invite + SSO just-in-time provisioning (ADR-0024 D9), and
+            // app end-users self-register. We deliberately do NOT name the env-level
+            // "Invite User" action — it is multi-org-gated and hidden in single-org —
+            // nor a "Reset Password" toolbar action, which does not exist (cloud#580).
+            // Every other identity table (sessions, accounts, tokens, jwks,
+            // verifications, …) is written purely by auth flows, so keep the generic
+            // copy — naming an invite/signup CTA on a token list would be wrong.
+            if (objectName === 'sys_user') {
+                return {
+                    icon: 'ShieldAlert',
+                    title: t('list.managedBy.betterAuthUser.title', { defaultValue: 'No users yet' }),
+                    message: t('list.managedBy.betterAuthUser.message', {
+                        defaultValue: 'User accounts are provisioned by the authentication provider, not created here. Invite teammates to your organization and they appear automatically on first sign-in (SSO just-in-time provisioning). App end-users arrive when they sign up through your app.',
+                    }),
+                };
+            }
             return {
                 icon: 'ShieldAlert',
                 title: t('list.managedBy.betterAuth.title', { defaultValue: 'No identity records' }),
                 message: t('list.managedBy.betterAuth.message', {
-                    defaultValue: 'Identity rows are managed by the authentication provider. Use the dedicated identity workflows (Invite User, Reset Password, …) to create new entries.',
+                    defaultValue: 'These records are created by the authentication provider — through sign-in, provisioning, and security flows — not added by hand here.',
                 }),
             };
         default:

package/dist/views/ObjectView.js

@@ -1189,7 +1189,7 @@ function ObjectViewInner({ dataSource, objects, onEdit, externalRefreshKey }) {
             virtualScroll: viewDef.virtualScroll ?? listSchema.virtualScroll,
             emptyState: viewEmptyState(objectDef.name, viewDef.name || viewDef.id || '', viewDef.emptyState
                 ?? listSchema.emptyState
-                ?? resolveManagedByEmptyState(objectDef?.managedBy, t)),
+                ?? resolveManagedByEmptyState(objectDef?.managedBy, t, objectDef.name)),
             aria: viewDef.aria ?? listSchema.aria,
             // Propagate filter/sort as default filters/sort for data flow
             ...((() => {

package/dist/views/metadata-admin/ResourceListPage.js

@@ -25,7 +25,7 @@ import { CreatePackageDialog } from './PackagesPage';
 import { useMetadataClient, useMetadataTypes, matchesQuery, } from './useMetadata';
 import { getMetadataResource, resolveResourceConfig, } from './registry';
 import { t, tFormat, translateMetadataType, detectLocale } from './i18n';
-import { buildPackageScopeOptions, LOCAL_PACKAGE_ID, isLocalScope } from './package-scope';
+import { buildPackageScopeOptions } from './package-scope';
 /**
  * Derive provenance from item._packageId. The `loadMetaFromDb` path
  * tags objects with the synthetic packageId 'sys_metadata' (see
@@ -190,13 +190,13 @@ function DefaultMetadataList({ type, appName }) {
     // scope); when none exists yet, prompt to create a base first.
     const [showCreateBase, setShowCreateBase] = React.useState(false);
     const handleCreate = React.useCallback(() => {
-        const realBases = (projectPackages ?? []).filter((p) => !isLocalScope(p.id));
-        if (projectPackages !== null && realBases.length === 0) {
+        const bases = projectPackages ?? [];
+        if (projectPackages !== null && bases.length === 0) {
             setShowCreateBase(true);
             return;
         }
-        if (realBases.length > 0 && (!activePackage || isLocalScope(activePackage))) {
-            navigate(`./new?package=${encodeURIComponent(realBases[0].id)}`);
+        if (bases.length > 0 && !activePackage) {
+            navigate(`./new?package=${encodeURIComponent(bases[0].id)}`);
             return;
         }
         navigate(`./new${pkgSuffix}`);
@@ -254,12 +254,10 @@ function DefaultMetadataList({ type, appName }) {
         if (!activePackage)
             return false;
         const pkg = row.item?._packageId;
-        const isLocal = !pkg || pkg === LOCAL_PACKAGE_ID;
-        // Local/Custom scope surfaces this environment's runtime-authored items
-        // (untagged / `sys_metadata` provenance); a code package shows its own.
-        if (activePackage === LOCAL_PACKAGE_ID)
-            return isLocal;
-        return !isLocal && pkg === activePackage;
+        // Only rows tagged with the active writable base match. Untagged /
+        // `sys_metadata`-provenance legacy rows have no scope of their own
+        // (ADR-0070 D5 — the package-less "Local / Custom" scope is removed).
+        return pkg === activePackage;
     }), [items, activePackage, config]);
     // User-driven filters (search query + source provenance) on top of scope.
     const filtered = scopedItems.filter((row) => {

package/dist/views/metadata-admin/StudioHomePage.js

@@ -28,7 +28,7 @@ import { useRecentItems } from '../../context/RecentItemsProvider';
 import { useMetadataClient, useMetadataTypes, useGlobalDiagnostics, } from './useMetadata';
 import { MetadataQuickFind } from './QuickFind';
 import { translateMetadataType, translateMetadataDomain, t, tFormat, detectLocale, } from './i18n';
-import { buildPackageScopeOptions, LOCAL_PACKAGE_ID } from './package-scope';
+import { buildPackageScopeOptions } from './package-scope';
 const HIDDEN_TYPES = new Set(['field', 'package']);
 const DOMAIN_ICONS = {
     data: Database,
@@ -143,10 +143,6 @@ export function StudioHomePage() {
             return false;
         if (!activePackage)
             return false;
-        // Local/Custom scope: show every runtime-creatable type so the user can
-        // start authoring any kind of metadata here, even with zero items yet.
-        if (activePackage === LOCAL_PACKAGE_ID)
-            return e.allowOrgOverride || e.allowRuntimeCreate;
         return (packagesByType[e.type] ?? []).includes(activePackage);
     }), [activePackage, entries, packagesByType]);
     const writable = React.useMemo(() => visible.filter((e) => e.allowOrgOverride || e.allowRuntimeCreate), [visible]);

package/dist/views/metadata-admin/i18n.js

@@ -181,7 +181,6 @@ const ENGINE_STRINGS_EN = {
     'engine.list.warnCount': '{count} warning(s):',
     'engine.list.allSources': 'All sources',
     'engine.list.allPackages': 'All packages',
-    'engine.package.local': 'Local / Custom (this env)',
     'engine.package.writableRequired': 'Pick or create a writable base (package) first — this item cannot be authored into a read-only code package.',
     'engine.list.packageFilter': 'Package',
     'engine.list.source.artifact': 'Artifact',
@@ -878,7 +877,6 @@ const ENGINE_STRINGS_ZH = {
     'engine.list.warnCount': '{count} 个警告：',
     'engine.list.allSources': '全部来源',
     'engine.list.allPackages': '全部软件包',
-    'engine.package.local': '本地 / 自定义（本环境）',
     'engine.list.packageFilter': '软件包',
     'engine.list.source.artifact': '代码包',
     'engine.list.source.runtime': '运行时',

package/dist/views/metadata-admin/package-scope.d.ts

@@ -1,41 +1,16 @@
 /**
- * Sentinel "package" id for this environment's runtime, DB-authored metadata —
- * items with no code-package binding (`package_id IS NULL`). The metadata
- * list/get API treats `?package=sys_metadata` as exactly that local scope on
- * READ, and a WRITE under it persists `package_id = null` (matching the
- * server's runtime-only provenance, see framework #2252).
+ * Build the Studio package-scope options from the raw `package` metadata list:
+ * the **writable bases** (project-scoped, DB-backed packages) only — the sole
+ * valid authoring destinations (ADR-0070 D2). Code/installed (system|cloud)
+ * packages are filtered out.
  *
- * Why this exists: a self-hosted, metadata-customizable environment is
- * single-tenant — there is no "org" dimension here; the real axis is
- * code-package vs. runtime (DB-authored). Before this scope, the package
- * selector only listed code packages, so metadata authored at runtime
- * (`package_id = null`) was filtered out of every code-package view and became
- * un-navigable (the route redirected to "new"). Surfacing the local scope as a
- * first-class, always-present selector entry makes it discoverable and editable.
- */
-export declare const LOCAL_PACKAGE_ID = "sys_metadata";
-/**
- * Build the Studio package-scope options from the raw `package` metadata list.
- * Filters out system/cloud-scoped packages and appends a stable
- * "Local / Custom (this environment)" scope so runtime metadata authored here
- * is always selectable/visible — even when zero items exist yet.
+ * There is no package-less "Local / Custom" scope: every runtime-authored item
+ * lives in a writable base (ADR-0070 D1/D5 — the kernel rejects orphan creates
+ * with `writable_package_required`, and legacy orphans are adopted into a base),
+ * so the selector never offers an orphan bucket. The kernel keeps `null` /
+ * `sys_metadata` provenance only as a read-side rehydration tag for legacy rows.
  */
 export declare function buildPackageScopeOptions(rawList: unknown[] | null | undefined): {
     id: string;
     name: string;
 }[];
-/**
- * True for the runtime/null "Local / Custom" sentinel scope. Per ADR-0070 D5
- * this is a *migration* surface (move loose items into a base), never a valid
- * create destination — callers gate "create" on a real writable base.
- */
-export declare function isLocalScope(id: string | null | undefined): boolean;
-/**
- * The writable bases (project-scoped DB packages) from the raw package list —
- * the only valid authoring destinations (ADR-0070 D2). Excludes code/installed
- * (system|cloud) packages AND the Local sentinel.
- */
-export declare function writableBaseOptions(rawList: unknown[] | null | undefined): {
-    id: string;
-    name: string;
-}[];

package/dist/views/metadata-admin/package-scope.js

@@ -1,27 +1,16 @@
 // Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
-import { detectLocale, t } from './i18n';
-/**
- * Sentinel "package" id for this environment's runtime, DB-authored metadata —
- * items with no code-package binding (`package_id IS NULL`). The metadata
- * list/get API treats `?package=sys_metadata` as exactly that local scope on
- * READ, and a WRITE under it persists `package_id = null` (matching the
- * server's runtime-only provenance, see framework #2252).
- *
- * Why this exists: a self-hosted, metadata-customizable environment is
- * single-tenant — there is no "org" dimension here; the real axis is
- * code-package vs. runtime (DB-authored). Before this scope, the package
- * selector only listed code packages, so metadata authored at runtime
- * (`package_id = null`) was filtered out of every code-package view and became
- * un-navigable (the route redirected to "new"). Surfacing the local scope as a
- * first-class, always-present selector entry makes it discoverable and editable.
- */
-export const LOCAL_PACKAGE_ID = 'sys_metadata';
 const SYSTEM_SCOPES = new Set(['system', 'cloud']);
 /**
- * Build the Studio package-scope options from the raw `package` metadata list.
- * Filters out system/cloud-scoped packages and appends a stable
- * "Local / Custom (this environment)" scope so runtime metadata authored here
- * is always selectable/visible — even when zero items exist yet.
+ * Build the Studio package-scope options from the raw `package` metadata list:
+ * the **writable bases** (project-scoped, DB-backed packages) only — the sole
+ * valid authoring destinations (ADR-0070 D2). Code/installed (system|cloud)
+ * packages are filtered out.
+ *
+ * There is no package-less "Local / Custom" scope: every runtime-authored item
+ * lives in a writable base (ADR-0070 D1/D5 — the kernel rejects orphan creates
+ * with `writable_package_required`, and legacy orphans are adopted into a base),
+ * so the selector never offers an orphan bucket. The kernel keeps `null` /
+ * `sys_metadata` provenance only as a read-side rehydration tag for legacy rows.
  */
 export function buildPackageScopeOptions(rawList) {
     const rows = (rawList ?? [])
@@ -36,24 +25,5 @@ export function buildPackageScopeOptions(rawList) {
     })
         .filter((p) => p.id && !SYSTEM_SCOPES.has(p.scope));
     rows.sort((a, b) => a.name.localeCompare(b.name));
-    const opts = rows.map((p) => ({ id: p.id, name: p.name }));
-    // Append (never default) so the existing first-code-package default is
-    // preserved; the user opts into the local scope explicitly.
-    return [...opts, { id: LOCAL_PACKAGE_ID, name: t('engine.package.local', detectLocale()) }];
-}
-/**
- * True for the runtime/null "Local / Custom" sentinel scope. Per ADR-0070 D5
- * this is a *migration* surface (move loose items into a base), never a valid
- * create destination — callers gate "create" on a real writable base.
- */
-export function isLocalScope(id) {
-    return !id || id === LOCAL_PACKAGE_ID;
-}
-/**
- * The writable bases (project-scoped DB packages) from the raw package list —
- * the only valid authoring destinations (ADR-0070 D2). Excludes code/installed
- * (system|cloud) packages AND the Local sentinel.
- */
-export function writableBaseOptions(rawList) {
-    return buildPackageScopeOptions(rawList).filter((o) => o.id !== LOCAL_PACKAGE_ID);
+    return rows.map((p) => ({ id: p.id, name: p.name }));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@object-ui/app-shell",
-  "version": "7.2.0",
+  "version": "7.3.0",
   "type": "module",
   "license": "MIT",
   "description": "Minimal application shell for ObjectUI - framework-agnostic rendering engine",
@@ -33,36 +33,36 @@
     "qrcode": "^1.5.4",
     "sonner": "^2.0.7",
     "zod": "^4.4.3",
-    "@object-ui/auth": "7.2.0",
-    "@object-ui/collaboration": "7.2.0",
-    "@object-ui/components": "7.2.0",
-    "@object-ui/core": "7.2.0",
-    "@object-ui/data-objectstack": "7.2.0",
-    "@object-ui/fields": "7.2.0",
-    "@object-ui/i18n": "7.2.0",
-    "@object-ui/layout": "7.2.0",
-    "@object-ui/permissions": "7.2.0",
-    "@object-ui/plugin-editor": "7.2.0",
-    "@object-ui/providers": "7.2.0",
-    "@object-ui/react": "7.2.0",
-    "@object-ui/types": "7.2.0"
+    "@object-ui/auth": "7.3.0",
+    "@object-ui/collaboration": "7.3.0",
+    "@object-ui/components": "7.3.0",
+    "@object-ui/core": "7.3.0",
+    "@object-ui/fields": "7.3.0",
+    "@object-ui/data-objectstack": "7.3.0",
+    "@object-ui/i18n": "7.3.0",
+    "@object-ui/layout": "7.3.0",
+    "@object-ui/permissions": "7.3.0",
+    "@object-ui/plugin-editor": "7.3.0",
+    "@object-ui/providers": "7.3.0",
+    "@object-ui/react": "7.3.0",
+    "@object-ui/types": "7.3.0"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",
     "react-dom": "^18.0.0 || ^19.0.0",
     "react-router-dom": "^6.0.0 || ^7.0.0",
-    "@object-ui/plugin-calendar": "^7.2.0",
-    "@object-ui/plugin-charts": "^7.2.0",
-    "@object-ui/plugin-chatbot": "^7.2.0",
-    "@object-ui/plugin-dashboard": "^7.2.0",
-    "@object-ui/plugin-designer": "^7.2.0",
-    "@object-ui/plugin-detail": "^7.2.0",
-    "@object-ui/plugin-form": "^7.2.0",
-    "@object-ui/plugin-grid": "^7.2.0",
-    "@object-ui/plugin-kanban": "^7.2.0",
-    "@object-ui/plugin-list": "^7.2.0",
-    "@object-ui/plugin-report": "^7.2.0",
-    "@object-ui/plugin-view": "^7.2.0"
+    "@object-ui/plugin-calendar": "^7.3.0",
+    "@object-ui/plugin-chatbot": "^7.3.0",
+    "@object-ui/plugin-charts": "^7.3.0",
+    "@object-ui/plugin-dashboard": "^7.3.0",
+    "@object-ui/plugin-designer": "^7.3.0",
+    "@object-ui/plugin-detail": "^7.3.0",
+    "@object-ui/plugin-form": "^7.3.0",
+    "@object-ui/plugin-kanban": "^7.3.0",
+    "@object-ui/plugin-grid": "^7.3.0",
+    "@object-ui/plugin-list": "^7.3.0",
+    "@object-ui/plugin-report": "^7.3.0",
+    "@object-ui/plugin-view": "^7.3.0"
   },
   "devDependencies": {
     "@types/node": "^26.0.0",
@@ -75,18 +75,18 @@
     "sonner": "^2.0.7",
     "typescript": "^6.0.3",
     "vite": "^8.0.16",
-    "@object-ui/plugin-calendar": "7.2.0",
-    "@object-ui/plugin-charts": "7.2.0",
-    "@object-ui/plugin-chatbot": "7.2.0",
-    "@object-ui/plugin-dashboard": "7.2.0",
-    "@object-ui/plugin-designer": "7.2.0",
-    "@object-ui/plugin-detail": "7.2.0",
-    "@object-ui/plugin-form": "7.2.0",
-    "@object-ui/plugin-grid": "7.2.0",
-    "@object-ui/plugin-kanban": "7.2.0",
-    "@object-ui/plugin-list": "7.2.0",
-    "@object-ui/plugin-report": "7.2.0",
-    "@object-ui/plugin-view": "7.2.0"
+    "@object-ui/plugin-calendar": "7.3.0",
+    "@object-ui/plugin-charts": "7.3.0",
+    "@object-ui/plugin-chatbot": "7.3.0",
+    "@object-ui/plugin-dashboard": "7.3.0",
+    "@object-ui/plugin-designer": "7.3.0",
+    "@object-ui/plugin-detail": "7.3.0",
+    "@object-ui/plugin-form": "7.3.0",
+    "@object-ui/plugin-grid": "7.3.0",
+    "@object-ui/plugin-kanban": "7.3.0",
+    "@object-ui/plugin-list": "7.3.0",
+    "@object-ui/plugin-report": "7.3.0",
+    "@object-ui/plugin-view": "7.3.0"
   },
   "keywords": [
     "objectui",