@objectstack/console 16.1.0 → 17.0.0-rc.1

package/CHANGELOG.md

@@ -0,0 +1,1096 @@
+# @objectstack/console
+
+## 17.0.0-rc.1
+
+### Minor Changes
+
+- 302e972: Console (objectui) refreshed to `7d9734d5e321`. Frontend changes in this range:
+
+  - feat(core): say which column identity key won, out loud (#3104 PR3) (#3124)
+  - fix(detail): Attachments become a peer tab with a live count badge, and their copy is translated (objectstack#4358) (#3123)
+  - fix(console,app-shell): readable reassign hand-off + "System" label for svc:\* audit actors (objectstack#4365, objectstack#4366) (#3121)
+  - fix(fields): lookup multi-value hydration batches via $in and shows loading instead of the empty placeholder (#3108) (#3120)
+  - fix(list,grid,detail,tree,core): every column resolver reads one key (#3104 PR2) (#3122)
+  - fix(core,list): 列身份归一到 ingestion chokepoint — 一列一个身份 (#3104 PR1) (#3119)
+  - fix(detail): a related list has one sorting semantics instead of two (#3106) (#3113)
+  - feat(components,grid,list): a column-header sort orders the whole list, not the page you can see (#3106) (#3112)
+  - fix(data-objectstack): a string `$orderby` reaches the server as a sort, not a list of character indices (#3106) (#3109)
+  - fix(types,core): the `*Validation` five derive from spec 17, and the engine stops disagreeing with the server (#3103) (#3107)
+  - fix(app-shell): lookup-param helpText only renders when the param actually degraded to a raw-id input (#3094) (#3095)
+  - fix(form): numeric/boolean option values survive selection typed (#3090 PR3b) (#3100)
+  - fix(list,detail): sorting a lookup column stops ordering by an invisible key (#3096) (#3102)
+  - feat(flow-designer): the script node's form authors what the executor runs (framework#4278) (#3099)
+  - fix(form): declare the runtime field metadata slot, ban the spec FormField misimport (#3090 PR3a) (#3097)
+  - fix(console): LocalizationFetchProvider retries a transient /me/localization failure (#3098)
+  - fix(app-shell,i18n): drop the developer-voiced default form subtitle (#3093)
+  - fix(form): spec-vocabulary fields stop crashing the standalone form; every surface names the boundary (#3090) (#3092)
+  - fix(form): harden the spec↔runtime form-field chokepoint, derive SelectOption, complete FormFieldSchema (#3090) (#3091)
+  - fix(types,layout): navigation metadata stops losing the spec fields the renderer already honours (objectstack#4115) (#3088)
+
+  objectui range: `bebaebd39ace...7d9734d5e321`
+
+- 4580597: Console (objectui) refreshed to `96ee72e85439`. Frontend changes in this range:
+
+  - fix(console): render the redaction notice on the enveloped resolve body (objectstack#3983) (#2980)
+  - feat(sdui): guard the public contract against silent drift (#2979)
+  - fix(sdui): lazy public blocks reach a kind:'react' page scope; ReactRunner keeps its errors (#2976)
+  - fix(list,data): bridge every spec view operator onto the filter AST (#2901) (#2974)
+  - fix(errors): error-code branches survive the framework's ADR-0112 rename (objectstack#3841) (#2977)
+  - fix(fields): a select no longer wipes itself when its value outruns its options (#2968) (#2969)
+  - fix(approvals): decision outputs reach both decision surfaces (#2955) (#2961)
+
+  objectui range: `e651c936870e...96ee72e85439`
+
+- eb9230c: Console (objectui) refreshed to `a136322f8723`. Frontend changes in this range:
+
+  - fix(app-shell)!: a modal action is client-side only — drop the server fallthrough (objectstack#3959) (#2973)
+  - fix(app-shell)!: the server-action URL identifies an action by `name`, not `target` (ADR-0110 D1) (#2970)
+  - fix(form): a server rejection that names fields now marks those fields (#2966)
+  - fix(actions): one source for the /actions envelope rule, and redirectUrl finally works (#2967)
+  - fix(actions): apply the ADR-0066 D4 capability gate on every action surface (framework#3923) (#2965)
+  - fix(detail): multi-value lookup is selectable in inline edit (#2957)
+  - fix(actions): a failed server action no longer reports as success (green toast) (#2963)
+  - fix(fields): the criteria builder stops calling an empty criteria "All records" (#2962)
+  - feat(report): carry a report's `order` into the dataset selection (framework#3916) (#2964)
+  - feat(views): the list toolbar speaks one vocabulary — `userActions` (#2890) (#2948)
+
+  objectui range: `4a4829d0ef39...a136322f8723`
+
+  **Release-critical for v17.** The previous pin (`4a4829d0ef39`) predates the
+  ADR-0110 D1 client fix, so the console it builds still posts `action.target`
+  to `/api/v1/actions/:object/:action`. Against a v17 server — which resolves
+  the declaration by `name` and refuses an unresolvable one (D3) — every
+  target-bound script action would return 404 from the shipped console. The
+  lockstep the ADR called for is enforced by THIS pin, not by merging the
+  objectui PR, so v17 must not ship without this bump.
+
+- 29e5a0e: Console (objectui) refreshed to `bebaebd39ace`. Frontend changes in this range:
+
+  - fix(console): marketplace read cloud errors seven different ways — two break on the conversion, two are broken today (cloud#944) (#3086)
+  - feat(console): settings validation errors render against the fields that caused them (objectstack#4224 follow-up) (#3083)
+  - fix(notifications): the config, position and action variant are read instead of forked or ignored (#3014 follow-up) (#3085)
+  - fix(data-objectstack,core): an object filter no longer depends on whether the query expands a lookup (#3084)
+  - fix(app-shell): a published configSchema can no longer delete a node's sibling-block editors (objectstack#4045) (#3082)
+  - fix(view,list,core): a view's filter no longer disappears, or arrives as a predicate on columns that don't exist (#3081)
+  - fix(console): read the SETTINGS_LOCKED key from `error.details`, tolerating both shapes (objectstack#4224) (#3079)
+  - fix(list,data-objectstack,types): exporting a searched list no longer downloads the unsearched superset (#3078)
+  - fix(types,app-shell): one ObjectPermission, and the preview stops hiding three of its fields (objectstack#4115) (#3077)
+  - fix(notifications): the spec `icon` is read instead of stored and ignored (#3014 follow-up) (#3076)
+  - fix(plugin-grid): bulk-action params render the shared form field widgets — lookup errors get Retry, sys_user params get the PeoplePicker (#3064, ADR-0059) (#3073)
+  - feat(app-shell): the console mounts the notification surfaces (#3014 follow-up) (#3075)
+  - fix(data-objectstack): a view's own filter no longer vanishes when the user adds one (#3072)
+  - feat(notifications): each spec displayType gets its own presentation (#3014) (#3071)
+  - fix(grid): evaluate a bulk action's `visible` per selected record (#3067) (#3070)
+  - feat(sdui): curate the page:_, element:_ and action:\* families into the public contract (#3069)
+  - fix(list,i18n): a 400 from the server no longer reads as "check your connection" (#3066)
+  - feat(page,element): declare inputs for the eight configurable page:_/element:_ blocks (#3065)
+  - fix(app-shell,plugin-grid,i18n): autonumber/readonly fields become match-only import targets so "update if the record number exists" works (#3061)
+  - fix(types): Page/App/Dashboard validate the spec's own fields instead of passing them through (objectstack#4115 group C) (#3063)
+  - fix(plugin-form,i18n): form edit saves send If-Match and surface 409 conflicts instead of silently overwriting (#3060)
+  - fix(console): 403 blamed on the network, ⌘K search capped at 8 objects, nav gating fields inert (#3044)
+  - fix(grid): a bulk delete / by-name action clears the row checkboxes too (#3056) (#3058)
+  - fix(types,detail): derive five spec-named symbols instead of forking them (objectstack#4115) (#3057)
+  - fix(grid): drop the `bulkEnabled` derivation — the spec key is a tombstone (#3002) (#3053)
+  - fix(permissions,console): retry a transient /me/permissions failure instead of stranding the app on its loading state (#3050) (#3052)
+  - fix(test-setup): stop shadowing ten real registrations, and declare page:header's inputs (#3051)
+  - fix(scripts): --check reports real divergence instead of calling all 46 components "modified" (#3049)
+  - fix(view): the chart view gets a label and an icon in the view switcher (#2916) (#3040)
+  - feat(form): SplitForm honours the spec's new `FormSection.pane` (#3041)
+  - fix(types,layout): nav item type 'component' joins NavigationItemType and its zod enum (#2918) (#3039)
+  - fix(registry): prefix every namespaced key exactly once, in every namespace (#3037)
+  - fix(scripts): shadcn-sync refuses to silently delete local edits, and compiles the package after it writes (#3035)
+  - fix(scripts): shadcn-sync rewrites the registry paths Shadcn actually serves, and refuses to write a file when it cannot (#3033)
+  - fix(grid,types): an object-declared bulk action runs over the selected records (#3002) (#3031)
+  - fix(form): a wizard with `allowSkip` no longer submits past the fields you skipped (#3030)
+  - fix(components): resizable is a diverged file, not a synced one — stop the sync from breaking the build, and finish the v4 migration in it (#3029)
+  - feat(studio): a page button created in Studio can be given an action (#2997) (#3028)
+  - feat(record): declare inputs for the seven configurable record:\* blocks, and curate six (#3027)
+  - feat(eslint): ban dynamic imports in test hooks, and convert the last 33 sites (#3026)
+
+  objectui range: `96ee72e85439...bebaebd39ace`
+
+- bec0f9a: Console (objectui) backfill for `2cb8d78e24ad...c6cfdf1288b6` — the one refresh in
+  the v17 window that landed with no changeset.
+
+  `scripts/bump-objectui.sh` emits a `@objectstack/console` changeset on every bump
+  precisely so a SHA move leaves a trace (see `docs/releases-maintenance.md`). One
+  bump in this window did not, so 25 commits — including two breaking ones — were
+  absent from the release history and from the curated v17 page. This entry records
+  them after the fact; it declares no new SHA move (`.objectui-sha` already points
+  past this range at `4a4829d0ef39`).
+
+  Frontend changes in this range:
+
+  - feat(react)!: trim dead device/preference delegates from useClientNotifications (objectstack#3612 companion) (#2862)
+  - feat(types)!: drop the ObjectStack/ObjectOS/ObjectQL/ObjectUI Capabilities re-exports (#2860)
+  - feat: gate detail/form edit & delete on the server's effective operation set (framework#3546) (#2832)
+  - feat(app-shell): approver values become record lookups (framework#3508) (#2834)
+  - feat(console): group tenancy posture affordances — org switcher as write context + org attribution (ADR-0105 Phase 1) (#2858)
+  - feat(console): i18n the system-settings hub (objectui#2851 P2) (#2859)
+  - fix(dashboard,charts): resolve `{current_user_id}` in widget filters (framework#3574) (#2857)
+  - fix(grid): validate email format in the import preview (objectstack#3566) (#2840)
+  - fix(fields): consistent image-field rendering + click-to-zoom (#2836) (#2837)
+  - fix(app-shell): stop the flow-node repeater from committing during render (#2838) (#2839)
+
+  Plus 15 dependency bumps, three of them major for the Console's own build:
+  `maplibre-gl` 5→6, `chalk` 5→6, `jsdom` 29→30 (dev).
+
+  objectui range: `2cb8d78e24ad...c6cfdf1288b6`
+
+### Patch Changes
+
+- 2e836de: chore(packaging): CHANGELOG.md ships in every npm tarball (#4261)
+
+  The AGENTS.md post-task checklist requires breaking changesets to carry their
+  FROM → TO migration because "this text ships to consumers as `CHANGELOG.md`
+  inside the npm package and is what an upgrading agent greps after the tombstone
+  error." That delivery path was severed for 68 of the 69 publishable packages:
+  npm packs `package.json` / `README*` / `LICENSE*` unconditionally but — unlike
+  older npm versions — not `CHANGELOG.md`, and the canonical
+  `"files": ["dist", "README.md"]` whitelist never named it. Measured on npm
+  10.9.7: `npm pack --dry-run` on `@objectstack/types` shipped 3 files while its
+  70KB `CHANGELOG.md` stayed behind. Only `@objectstack/spec` listed it
+  explicitly.
+
+  The tombstone-error scenario is precisely the one where the repo is out of
+  reach — the upgrading agent has `node_modules` and nothing else — so the
+  migration text has to ride in the tarball. Every publishable package now
+  declares `CHANGELOG.md` in `files`, and the canonical whitelist is
+  `["dist", "README.md", "CHANGELOG.md"]`.
+
+  The other half is the gate: `check:published-files` gains a fifth invariant,
+  COMPLETE — a whitelist that fails to cover `CHANGELOG.md` fails the
+  always-required lint job, so the next package cannot silently sever the path
+  again. `@objectstack/spec`'s per-package EXTRA_ENTRIES exemption dissolves
+  into the canonical set.
+
+  Consumer-visible change: one more file per install (the package's changelog,
+  e.g. 70.8KB for `@objectstack/types`), and `grep -r "removed key"
+node_modules/@objectstack/*/CHANGELOG.md` now finds the migration it was
+  promised.
+
+- 60110bb: Console (objectui) backfill for `96ee72e85439...bebaebd39ace` — the 27 fix
+  commits that refresh's changeset did not enumerate.
+
+  `scripts/bump-objectui.sh` emits a `@objectstack/console` changeset on every
+  bump precisely so a SHA move leaves a trace (see `docs/releases-maintenance.md`),
+  and the `console-bebaebd39ace.md` entry it wrote covers only the tail of its own
+  range: the range holds **94** first-parent commits, the enumeration lists 40,
+  and its oldest entry is #3026. Everything that merged earlier inside the same
+  range went unrecorded — in the release history and in the curated v17 page.
+  This is the second instance of the failure `console-c6cfdf1288b6-backfill.md`
+  records; it declares no SHA move (`.objectui-sha` already points at
+  `7d9734d5e321`, past this range).
+
+  The 27 are all `fix`, hence `patch`. Several are data-loss fixes an upgrading
+  Console user feels immediately:
+
+  - fix(form): a tabbed/sectioned modal keeps every tab's values (#2959, #2153) (#2987)
+  - fix(form): a split form keeps BOTH panels' values (#2153) (#3012)
+  - fix(form): a defaultValues change no longer discards the field being filled (#2982) (#2991)
+  - fix(components): apply new form defaultValues in the commit that renders them (#3001)
+  - fix(plugin-form): block page unload while a modal/drawer form has unsaved input (#2998)
+  - fix(plugin-form): swapping recordId no longer leaves the previous record on screen (#3005)
+  - fix(plugin-form): a wizard that ends on a field-less review step can finish (#2986)
+  - fix(form): a tabbed/split form honours the form view's own `columns` (#3018)
+  - fix(console): a flow or action that failed under HTTP 200 stops reporting success (#2958) (#2995)
+  - fix(grid): a legacy string row action runs instead of green-toasting a no-op (#2960) (#2996)
+  - fix(spec-parity): render the six Tier-1 spec values right instead of silently wrong (#2941) (#2993)
+  - fix(spec-parity): the Tier-2 spec values render instead of validating into nothing (#2942) (#3008)
+  - fix(spec-parity): the Tier-3 spec values render instead of red-boxing (#2943) (#3011)
+  - fix(view,components): the spec→FilterBuilder operator table covers the whole view vocabulary (#2945) (#2989)
+  - fix(view): the spec→FilterBuilder map follows the four operators #2942 added (#3022)
+  - fix(charts): a spec `series[].type` draws, and a spec-shape `series` plots at all (#2945) (#3004)
+  - fix(charts): say so when rows carry no category key, instead of drawing an empty axis (#3007)
+  - fix(analytics): a missing analytics capability no longer renders as an empty KPI (objectstack#3891) (#2981)
+  - fix(chatbot): read the agent catalog in the declared envelope too (objectstack#4053) (#2992)
+  - fix(sdui): a react page keeps its state; a source that exports nothing fails loudly (#2984)
+  - fix(sdui): a kind:'html' page can use lazily-registered blocks, and recovers when one registers late (#2988)
+  - fix(sdui): stop the react page's "no adapter yet" fallback churning its provider context (#3000)
+  - fix(sdui): the curated contract lists record:line_items, the tag that actually resolves (#3006)
+  - fix(record): register the record:\* blocks under one key, prefixed once (#3023)
+  - fix(plugin-list,plugin-grid): drop undeliverable formats from the export menu (#2999)
+  - fix(components): a stacked resizable group gets a divider, not a 1px sliver (#3024)
+  - fix(components,app-shell): the last two `direction` props follow v4's rename to `orientation` (#3025)
+
+  Also in the range and deliberately not listed here: the refactor/chore/test/
+  build/ci PRs the bump script's fix/feat filter excludes by design — including
+  three breaking-flagged refactors already reflected in the spec-side work
+  (#2990 the `execute` alias deleted from the action runner, objectstack#3856;
+  #3003 action sub-vocabularies derived from spec, and #3020 authoring types
+  become input types, both objectstack#4074).
+
+  objectui range: `96ee72e85439...bebaebd39ace`
+
+- 6fd0786: Console (objectui) refreshed to `e651c936870e`. Frontend changes in this range:
+
+  - fix(app-shell): unwrap the declared response envelope on the datasource page and the api-action runner (objectstack#3843) (#2972)
+  - fix(actions): read objectstack#3962's single-wrapped /actions responses (#2971)
+
+  objectui range: `a136322f8723...e651c936870e`
+
+## 17.0.0-rc.0
+
+### Minor Changes
+
+- 8607a55: Console (objectui) refreshed to `1bb77aa24514`. Frontend changes in this range:
+
+  - fix(flow-runner): honor a screen field's `visibleWhen` — render and validation (framework#3528) (#2899)
+  - fix(i18n): unconditional Chinese in the chatbot confirm card and field inspector (#2884, #2885) (#2900)
+  - fix(actions): one precedence for `target`/`execute`, and stop mislabeling server-side `body` (#2896) (#2895)
+  - fix(i18n): close the last three zh-branch gaps (#2871, part 3) (#2898)
+  - feat(grid): compute all eleven spec column summary aggregations (#2890)
+  - feat(console): make `delegated_admin` reachable and narrow both role pickers (framework#3697) (#2891)
+  - fix(app-shell): localize the two DeclaredActionsBar strings that bypassed i18n (#2762 P0-3) (#2894)
+  - fix(i18n): delete the four `pick({en,zh})` clones (#2871, part 2) (#2893)
+  - fix(views): the five per-view-type configs speak the spec vocabulary (#2231 phase 3) (#2892)
+  - feat(grid): gate list row Edit/Delete and bulk delete on the effective operation set (objectstack#3720) (#2889)
+  - feat(charts): honor `ChartAxis.stepSize`, `ChartConfig.description` and `.height` (framework#3752) (#2888)
+  - fix(i18n): retire four hand-rolled zh/en branches (#2871, part 1) (#2887)
+  - feat(charts): ObjectChart honors the spec `ChartConfig` author shape (#2880) (#2883)
+  - fix(hooks): stop calling translation hooks inside try/catch (#2879) (#2881)
+  - fix(charts): a fieldless `count` aggregate keyed its value column `undefined` (framework#3701) (#2878)
+  - fix(i18n): make `en` the complete source of truth for grid import and set-password (#2872 b/c) (#2877)
+  - fix(auth): localize the ADR-0069 remediation gate and the auth split-panel (#2870) (#2875)
+  - fix(metadata-admin): drop the SkillPreview "Required Permissions" panel (framework#3686) (#2874)
+  - feat(console): scoped-invitation placement — invite straight into a unit and positions (framework ADR-0105 D8) (#2868)
+  - fix(attachments): read the storage service's new error envelope so gated downloads keep their friendly copy (objectstack#3675) (#2869)
+  - fix(fls): wire real per-caller FLS into import targets and grid columns, drop dead field.permissions shape (objectstack#3661) (#2866)
+  - fix(page,field): consume the spec's type/label/maxLength keys (framework#1878 §3 recheck) (#2867)
+  - fix(cloud-connection): localize the Cloud Connection panel (objectstack#3589 follow-up) (#2865)
+  - fix(dashboard,charts): send widget query options to the server, order funnel stages by the pipeline (#2864)
+  - fix(action): honor the spec disabled predicate on every action-rendering surface (#1885 follow-through) (#2863)
+
+  objectui range: `09c6a177bb4a...1bb77aa24514`
+
+- b96c11b: Console (objectui) refreshed to `2cb8d78e24ad`. Frontend changes in this range:
+
+  - fix(console): dispatch flow actions from every surface + cover the screen-flow round trip (framework#3528) (#2833)
+  - feat(approvals): typed output pickers, quick-path guard, expression completion (framework#3447, #2829) (#2831)
+  - fix(console): make a paused screen flow completable, and stop the runner from tearing down its host (framework#3528) (#2830)
+  - feat(fields): adopt the file-as-reference value shape — ObjectStack ADR-0104 D3 wave 2 (PR-7) (#2828)
+  - fix(console): resolve a modal action's `target` as a page, not an object (#3530) (#2826)
+  - feat(approvals): dynamic decision-output fields + expression approver editing (framework#3447 P2) (#2827)
+  - feat: render the server's effective API operation set (#3391 PR-4) (#2823)
+  - fix(console): approval timeline attachment chip shows its name and opens (#2820) (#2821)
+  - fix(i18n): localize FileField upload widget + approvals snapshot field labels (#2819)
+  - feat(report)!: drop SpecReportColumn/SpecReportGrouping re-exports + retire the legacy ReportViewer chart fallback (#3463) (#2816)
+  - feat(plugin-grid): "Import as historical data" option in the Import Wizard (framework #3479) (#2815)
+  - feat(app-shell): toast when a save silently dropped read-only fields (framework #3431/#3455) (#2814)
+  - fix(app-shell): remove never-firing `record-change` option from the flow trigger picker (#3427) (#2812)
+  - fix(form): scroll+focus the first errored field on invalid submit (#2793) (#2813)
+  - feat(approvals): label pending-approver chips with their group (objectui#2807) (#2811)
+  - feat(approvals): label pending-approver chips with their group (objectui#2807) (#2811)
+  - fix(approvals): surface the admin override for a stuck request in the inbox (#3424) (#2810)
+  - feat(studio): first-class notify flow node in the Studio palette + inspector (#2808)
+  - feat(app-shell): Studio flow start node offers a "Record created or updated" trigger (#3427) (#2809)
+  - fix: read spec-canonical keys for dashboard header title and field length rules (#2806)
+  - fix(kanban): surface off-column records in an Uncategorized lane (#2792) (#2804)
+  - fix(approvals): Approval Center density + amount emphasis (#2762 P2) (#2805)
+  - fix(i18n): 补齐记录详情审批按钮与弹窗的国际化文案 (#2791)
+  - fix(approvals): Approval Center triage + drawer readability pass (#2762 P1-2/3/4/5, P2) (#2803)
+  - feat(app-shell): surface step warnings in the Flow Runs panel (#3407) (#2802)
+  - feat(studio): surface the enable.searchable toggle in ObjectSettingsPanel (#2800) (#2801)
+  - feat(app-shell): localize the automations flow designer & inspector (en-US + zh-CN) (#2796)
+  - feat(form): consume spec-aligned FormView buttons/defaults in ObjectForm (#2790)
+  - fix(approvals): Approval Center UX pass — badge nowrap, approve confirm, progress bar, localized declared actions (#2762) (#2789)
+  - feat(app-shell): group/coalesce repeat notifications in the message center (#2765) (#2788)
+  - fix(app-shell): 首页与消息中心的未国际化文案 (#2787)
+  - fix(app-shell): give inline `lookup` action params a real record picker (#3405) (#2786)
+  - fix(app-shell): map raw sys_activity rows in the inbox Activity tab (#2781) (#2782)
+  - fix(app-shell): i18n the "Switch Object" breadcrumb dropdown label (#2783)
+  - fix(data-table): keep right-pinned action column header sticky on horizontal scroll (#2785)
+  - fix(app-shell): keep list-origin back link when switching detail tabs (#2775)
+
+  objectui range: `cf2d56e32a11...2cb8d78e24ad`
+
+- d69918d: Console (objectui) refreshed to `4a4829d0ef39`. Frontend changes in this range:
+
+  - fix(fields): emit the spec's `$notContains`, and keep `secret` out of inline edit (#2901) (#2940)
+  - fix(detail): distinguish "in approval (editable)" from locked, and stop losing write warnings (#2914)
+  - fix(types): zod example teaches the Zod 4 `.issues` accessor, and `examples/` is type-checked (#2919) (#2939)
+  - fix(plugin-grid,plugin-form,cli,+2): type-check the last five unchecked packages, and fix the two runtime bugs hiding there (#2919) (#2936)
+  - fix(views): ListView reads the spec-canonical `filter` (#2890) (#2935)
+  - fix(console,runner): render the approvals inbox against one ticking clock, and lint both packages (#2927) (#2930)
+  - feat(lint): run ESLint on PRs, and cover every package (#2923) (#2928)
+  - feat(setup): the datasource list shows the real connect verdict, with the operator-facing reason (framework#3827) (#2926)
+  - fix(fields,core,detail): make the sharing-rule dialog usable — i18n, a picker that lists people, and permission-aware CTAs (#2920)
+  - fix(detail): the approval band honors the node's `lockRecord` instead of assuming every approval locks (#2902) (#2906)
+  - fix(console): the API console lists the whole AI family, and the tool preview stops linking to a 404 (framework#3718) (#2925)
+  - fix(runner): type-check the package at all, fix the hidden DataSource violation (#2917) (#2922)
+  - fix(console): the API console's AI group lists the routes that exist (framework#3718) (#2921)
+  - fix(plugin-map): drop the `maplibre-gl@6` default import + gate type-check in CI (#2911) (#2915)
+  - fix(i18n): compose the AI-model diagnostics summary client-side (#2886) (#2912)
+  - fix(flow-designer): read approver value sources off the schema instead of mirroring them (framework#3508 follow-up) (#2910)
+  - feat(i18n): complete the locale backfill — all ten packs reach full key parity (#2872) (#2909)
+  - fix(list): show real match total in record-count bar under server pagination (#2873)
+  - fix(i18n): the change card's Confirm button sent text the cloud gate rejects, + parity ratchet (#2905)
+  - feat(i18n): translate the four highest-traffic namespaces into the eight trailing locales (#2872 part a) (#2903)
+
+  objectui range: `1bb77aa24514...4a4829d0ef39`
+
+### Patch Changes
+
+- 6ba3788: Console (objectui) refreshed to `09c6a177bb4a`. Frontend changes in this range:
+
+  - fix(grid): localize import result errors (objectstack#3566) (#2861)
+
+  objectui range: `c6cfdf1288b6...09c6a177bb4a`
+
+## 16.1.0
+
+### Minor Changes
+
+- 7b07417: Console (objectui) refreshed to `cf2d56e32a11`. Frontend changes in this range:
+
+  - fix(list): keep injected owner_id out of auto-generated list columns (#2777) (#2779)
+  - feat(search): surface record hits on the full search page + i18n group labels (#2776)
+  - fix(i18n): apply globalActions label overlays on record-detail action bars (#2770)
+  - fix(command-palette): surface record search hits from /api/v1/search (#3371) (#2772)
+  - fix(SchemaForm): render sort repeater rows for union schemas (objectstack#3379) (#2771)
+
+  objectui range: `9a5f016f7d5c...cf2d56e32a11`
+
+## 16.0.0
+
+### Minor Changes
+
+- bfa3c3f: Console (objectui) refreshed to `3b2e4d98d904`. Frontend changes in this range:
+
+  - fix(list): route remaining system-field groupings through shared classifier (#2706)
+  - feat(console): user-import wizard defaults to the `auto` password policy (tracks framework#3236) (#2701)
+  - feat(flow-designer): schema-driven keyValue + numberList mapping (#3304) (#2708)
+
+  objectui range: `0318118e02fd...3b2e4d98d904`
+
+- 39b56d0: Console (objectui) refreshed to `94d4876df090`. Frontend changes in this range:
+
+  - feat(dashboard): Studio authors the ADR-0021 dataset shape only (framework#3251) (#2703)
+  - feat(app-shell): render ActionParamDialog params through the shared form field-widget renderer (#2700, ADR-0059) (#2704)
+  - feat(app-shell): distinguish writable system objects from engine-owned in badge + empty-state (ADR-0103 / #3220) (#2705)
+  - fix(list): keep injected owner_id out of leading auto-derived list columns (#2702)
+  - feat(flow-designer): #2670 Phase 3 — nested container node selection + schema-driven editing (#2699)
+  - feat(approvals-inbox): retire hardcoded secondary buttons for server-declared actions (#2697)
+
+  objectui range: `fd45313b4d00...94d4876df090`
+
+- 447465a: Console (objectui) refreshed to `e164196801bd`. Frontend changes in this range:
+
+  - fix(app-shell,plugin-detail): record History tab renders display values, not raw audit payloads (#2691)
+  - fix(plugin-gantt): mirror the row 「→」 slot in the task-list header (#2690)
+  - fix(plugin-detail): #2688 header Record-#id floor + raw audit user id in meta footer (#2689)
+  - feat(plugin-gantt)!: remove the mobile QR share (移动端二维码) context-menu feature (#2687)
+  - feat(plugin-gantt): dependencyTypes switch — hide the type switcher for id-only dependency stores (#2686)
+  - feat(approvals): decision attachments + progress display + deep link + designer sync (#2681)
+  - feat(studio): inline push-down expansion of loop/parallel/try_catch regions on the flow canvas (#2680)
+  - feat(plugin-gantt): ownership-aware reschedule + confirm-first auto-schedule, export fixes, business time zone (#2683)
+  - fix(app-shell): skip resultDialog fields whose path does not resolve (#2674)
+  - feat(studio): visualize loop/parallel/try_catch nested regions on the flow canvas (#2670) (#2675)
+  - feat(plugin-gantt): manual-scheduling summary bars, interaction switches, beforeTaskUpdate veto + tooltip/scrollbar/cursor fixes (#2677)
+  - fix(flow-designer): author the canonical config.schedule the runtime reads (#2671)
+  - feat(report): drill a date-bucket cell into its time range, not a superset (#1752) (#2672)
+  - feat(studio): filter editor for roll-up summary fields (framework#1868) (#2669)
+  - feat(flow-designer): first-class panel for the time-relative trigger (#1874) (#2668)
+  - feat(studio): nest per-iteration / per-region step logs in the flow Runs panel (#2667)
+  - fix(metadata-admin): dashboard label fallback + skill activation editors (#1878) (#2666)
+
+  objectui range: `2e7d7f0f7ee7...e164196801bd`
+
+- a140ff0: Console (objectui) refreshed to `fd45313b4d00`. Frontend changes in this range:
+
+  - feat(app-shell): DeclaredActionsBar — render server-declared object actions on bespoke pages (#2678 P2-4) (#2692)
+  - feat(data): unify master-detail saves behind DataSource.batchTransaction; isolate non-atomic fallback in the adapter (#2679) (#2684)
+
+  objectui range: `e164196801bd...fd45313b4d00`
+
+### Patch Changes
+
+- a276969: Console (objectui) refreshed to `0318118e02fd`. Frontend changes in this range:
+
+  - fix(app-shell): guard ActionParamDialog submit during file upload + map spec `autonumber` (ADR-0059 follow-ups) (#2707)
+
+  objectui range: `94d4876df090...0318118e02fd`
+
+- 47d923c: Console (objectui) refreshed to `2e7d7f0f7ee7`. Frontend changes in this range:
+
+  - feat(evaluator): route CEL-dialect component/action predicates to the canonical engine (#2664)
+  - fix(grid): explain the import wizard's disabled Next and silent downgrade (#2640, #2639) (#2646)
+  - fix(form+detail): single-file children stay inline grids; drop non-spec `attachment` (#2654, #2655) (#2656)
+  - feat(access): localize curated capability labels client-side (#2600 B5 follow-up) (#2657)
+  - feat(access): localize capability picker group headers (#2600 B5, objectui side) (#2653)
+  - fix(access): Studio permission matrix — stop clipping the Bulk column at narrow widths (#2600 B3) (#2652)
+  - feat(access): Studio permission matrix — field-level bulk + filter for wide objects (#2600 B4) (#2651)
+  - feat(access): Studio Explain panel — package-scoped object dropdown instead of free-text api-name (#2600 B2) (#2650)
+  - feat(access): Studio permission matrix — collapse identity + zero-grant capabilities so the matrix hits the first screen (#2600 B1) (#2649)
+  - feat(plugin-list): 列表工具栏增加手动刷新按钮 (#2634) (#2645)
+  - fix(studio): approver Type dropdown drops deprecated `role`, membership-tier picker (#2643)
+  - fix(components): route internal html-page links through the SPA navigation handler (#2642)
+  - feat(discovery): trust only handlerReady/available services (ADR-0076 D12) (#2637)
+  - feat(types)!: adopt @objectstack/spec 15.1.1; drop value-erased spec/ui `…Schema` re-exports (#2589)
+  - feat(console): dev-seeded admin credentials hint on the login page (#2635)
+  - fix(auth): 注册页去掉重复的「or」分隔线(与 #2629 登录页修复对齐) (#2633)
+  - feat(app-shell/react): adapt to framework 15.1 — atomic publish rendering + honest discovery (#2630)
+  - fix(chatbot): plan approval flips the card to a Building… badge immediately (#2632)
+  - fix(app-shell,components): welcome CTA deep-links into the environment create dialog (#2631)
+  - fix(auth): login-page config race + sign-in watchdog — never strand SSO-only users on a password wall (#2629)
+  - feat(types): derive ListViewSchema from @objectstack/spec/ui (#2231) (#2622)
+
+  objectui range: `077e45b4bc55...2e7d7f0f7ee7`
+
+- a791200: Console (objectui) refreshed to `69fa5d163a97`. Frontend changes in this range:
+
+  - fix(app-shell): mark notifications read via the REST surface, not direct receipt writes (#2743)
+
+  objectui range: `af1b0db96e44...69fa5d163a97`
+
+- db34d54: Console (objectui) refreshed to `9a5f016f7d5c`. Frontend changes in this range:
+
+  - feat(flow-designer): nested-array columns in the node property form (#2678 P2-5) (#2761)
+  - fix: redo record-list "Add View" flow — empty-name 405, invisible drafts, canonical naming (#2768)
+  - feat(SchemaForm): field-type-aware operators + values for view filter (#2766)
+  - fix(plugin-charts): draw dashboard chart bars on first paint via isAnimationActive=false (#2756) (#2759)
+  - feat(data-objectstack): gate non-atomic batch fallback on discovery transactionalBatch capability (#2693) (#2755)
+
+  objectui range: `69fa5d163a97...9a5f016f7d5c`
+
+- 1965549: Console (objectui) refreshed to `af1b0db96e44`. Frontend changes in this range:
+
+  - feat(i18n): localize action result dialogs via \_actions.<action>.resultDialog (#2736)
+  - feat(data): thread the host's authenticated fetch into provider:'api' data sources (#2725) (#2732)
+  - feat(managedBy): add explicit `engine-owned` lifecycle bucket (tracks framework ADR-0103 addendum, #3343) (#2739)
+  - feat(fields): CheckboxesField visibleWhen cascading + dependsOn gating (completes option-widget parity) (#2735)
+  - feat(fields): RadioField visibleWhen cascading + dependsOn gating; single-source the option resolver (#2728)
+  - fix(kanban,calendar): surface write failures instead of silently swallowing them (#2716)
+  - fix(plugin-charts): draw dashboard bars on first paint via one settle re-mount (#2727)
+  - feat(dashboard): retire pre-ADR-0021 inline-analytics renderer branches (framework#3320) (#2723)
+  - fix(data-objectstack): type the exportDownload test fetch mock so its type-check passes (#2726)
+  - feat(detail): related lists paginate by default with server-side $top/$skip windows (#2711) (#2722)
+  - fix(approvals-inbox): align participant gating with the server-computed viewer block (#2719)
+  - fix(plugin-view): coerce i18n tab-label helpers to string (TS2322) (#2721)
+  - feat(fields): MultiSelectField per-option visibleWhen cascading + dependsOn gating (#2715) (#2717)
+  - fix(site): make docs build resilient to remote badge fetch failures (#2695) (#2718)
+  - feat(approvals-inbox): retire the approve/reject composer for declared actions with file attachments (#2698) (#2710)
+  - feat(fields): select+multiple → multi-value chip picker; restore fields/core lint gates (#2709)
+
+  objectui range: `3b2e4d98d904...af1b0db96e44`
+
+## 16.0.0-rc.1
+
+### Minor Changes
+
+- bfa3c3f: Console (objectui) refreshed to `3b2e4d98d904`. Frontend changes in this range:
+
+  - fix(list): route remaining system-field groupings through shared classifier (#2706)
+  - feat(console): user-import wizard defaults to the `auto` password policy (tracks framework#3236) (#2701)
+  - feat(flow-designer): schema-driven keyValue + numberList mapping (#3304) (#2708)
+
+  objectui range: `0318118e02fd...3b2e4d98d904`
+
+### Patch Changes
+
+- a276969: Console (objectui) refreshed to `0318118e02fd`. Frontend changes in this range:
+
+  - fix(app-shell): guard ActionParamDialog submit during file upload + map spec `autonumber` (ADR-0059 follow-ups) (#2707)
+
+  objectui range: `94d4876df090...0318118e02fd`
+
+- a791200: Console (objectui) refreshed to `69fa5d163a97`. Frontend changes in this range:
+
+  - fix(app-shell): mark notifications read via the REST surface, not direct receipt writes (#2743)
+
+  objectui range: `af1b0db96e44...69fa5d163a97`
+
+- 1965549: Console (objectui) refreshed to `af1b0db96e44`. Frontend changes in this range:
+
+  - feat(i18n): localize action result dialogs via \_actions.<action>.resultDialog (#2736)
+  - feat(data): thread the host's authenticated fetch into provider:'api' data sources (#2725) (#2732)
+  - feat(managedBy): add explicit `engine-owned` lifecycle bucket (tracks framework ADR-0103 addendum, #3343) (#2739)
+  - feat(fields): CheckboxesField visibleWhen cascading + dependsOn gating (completes option-widget parity) (#2735)
+  - feat(fields): RadioField visibleWhen cascading + dependsOn gating; single-source the option resolver (#2728)
+  - fix(kanban,calendar): surface write failures instead of silently swallowing them (#2716)
+  - fix(plugin-charts): draw dashboard bars on first paint via one settle re-mount (#2727)
+  - feat(dashboard): retire pre-ADR-0021 inline-analytics renderer branches (framework#3320) (#2723)
+  - fix(data-objectstack): type the exportDownload test fetch mock so its type-check passes (#2726)
+  - feat(detail): related lists paginate by default with server-side $top/$skip windows (#2711) (#2722)
+  - fix(approvals-inbox): align participant gating with the server-computed viewer block (#2719)
+  - fix(plugin-view): coerce i18n tab-label helpers to string (TS2322) (#2721)
+  - feat(fields): MultiSelectField per-option visibleWhen cascading + dependsOn gating (#2715) (#2717)
+  - fix(site): make docs build resilient to remote badge fetch failures (#2695) (#2718)
+  - feat(approvals-inbox): retire the approve/reject composer for declared actions with file attachments (#2698) (#2710)
+  - feat(fields): select+multiple → multi-value chip picker; restore fields/core lint gates (#2709)
+
+  objectui range: `3b2e4d98d904...af1b0db96e44`
+
+## 16.0.0-rc.0
+
+### Major Changes
+
+- 39b56d0: Console (objectui) refreshed to `94d4876df090`. Frontend changes in this range:
+
+  - feat(dashboard): Studio authors the ADR-0021 dataset shape only (framework#3251) (#2703)
+  - feat(app-shell): render ActionParamDialog params through the shared form field-widget renderer (#2700, ADR-0059) (#2704)
+  - feat(app-shell): distinguish writable system objects from engine-owned in badge + empty-state (ADR-0103 / #3220) (#2705)
+  - fix(list): keep injected owner_id out of leading auto-derived list columns (#2702)
+  - feat(flow-designer): #2670 Phase 3 — nested container node selection + schema-driven editing (#2699)
+  - feat(approvals-inbox): retire hardcoded secondary buttons for server-declared actions (#2697)
+
+  objectui range: `fd45313b4d00...94d4876df090`
+
+### Minor Changes
+
+- 447465a: Console (objectui) refreshed to `e164196801bd`. Frontend changes in this range:
+
+  - fix(app-shell,plugin-detail): record History tab renders display values, not raw audit payloads (#2691)
+  - fix(plugin-gantt): mirror the row 「→」 slot in the task-list header (#2690)
+  - fix(plugin-detail): #2688 header Record-#id floor + raw audit user id in meta footer (#2689)
+  - feat(plugin-gantt)!: remove the mobile QR share (移动端二维码) context-menu feature (#2687)
+  - feat(plugin-gantt): dependencyTypes switch — hide the type switcher for id-only dependency stores (#2686)
+  - feat(approvals): decision attachments + progress display + deep link + designer sync (#2681)
+  - feat(studio): inline push-down expansion of loop/parallel/try_catch regions on the flow canvas (#2680)
+  - feat(plugin-gantt): ownership-aware reschedule + confirm-first auto-schedule, export fixes, business time zone (#2683)
+  - fix(app-shell): skip resultDialog fields whose path does not resolve (#2674)
+  - feat(studio): visualize loop/parallel/try_catch nested regions on the flow canvas (#2670) (#2675)
+  - feat(plugin-gantt): manual-scheduling summary bars, interaction switches, beforeTaskUpdate veto + tooltip/scrollbar/cursor fixes (#2677)
+  - fix(flow-designer): author the canonical config.schedule the runtime reads (#2671)
+  - feat(report): drill a date-bucket cell into its time range, not a superset (#1752) (#2672)
+  - feat(studio): filter editor for roll-up summary fields (framework#1868) (#2669)
+  - feat(flow-designer): first-class panel for the time-relative trigger (#1874) (#2668)
+  - feat(studio): nest per-iteration / per-region step logs in the flow Runs panel (#2667)
+  - fix(metadata-admin): dashboard label fallback + skill activation editors (#1878) (#2666)
+
+  objectui range: `2e7d7f0f7ee7...e164196801bd`
+
+- a140ff0: Console (objectui) refreshed to `fd45313b4d00`. Frontend changes in this range:
+
+  - feat(app-shell): DeclaredActionsBar — render server-declared object actions on bespoke pages (#2678 P2-4) (#2692)
+  - feat(data): unify master-detail saves behind DataSource.batchTransaction; isolate non-atomic fallback in the adapter (#2679) (#2684)
+
+  objectui range: `e164196801bd...fd45313b4d00`
+
+### Patch Changes
+
+- 47d923c: Console (objectui) refreshed to `2e7d7f0f7ee7`. Frontend changes in this range:
+
+  - feat(evaluator): route CEL-dialect component/action predicates to the canonical engine (#2664)
+  - fix(grid): explain the import wizard's disabled Next and silent downgrade (#2640, #2639) (#2646)
+  - fix(form+detail): single-file children stay inline grids; drop non-spec `attachment` (#2654, #2655) (#2656)
+  - feat(access): localize curated capability labels client-side (#2600 B5 follow-up) (#2657)
+  - feat(access): localize capability picker group headers (#2600 B5, objectui side) (#2653)
+  - fix(access): Studio permission matrix — stop clipping the Bulk column at narrow widths (#2600 B3) (#2652)
+  - feat(access): Studio permission matrix — field-level bulk + filter for wide objects (#2600 B4) (#2651)
+  - feat(access): Studio Explain panel — package-scoped object dropdown instead of free-text api-name (#2600 B2) (#2650)
+  - feat(access): Studio permission matrix — collapse identity + zero-grant capabilities so the matrix hits the first screen (#2600 B1) (#2649)
+  - feat(plugin-list): 列表工具栏增加手动刷新按钮 (#2634) (#2645)
+  - fix(studio): approver Type dropdown drops deprecated `role`, membership-tier picker (#2643)
+  - fix(components): route internal html-page links through the SPA navigation handler (#2642)
+  - feat(discovery): trust only handlerReady/available services (ADR-0076 D12) (#2637)
+  - feat(types)!: adopt @objectstack/spec 15.1.1; drop value-erased spec/ui `…Schema` re-exports (#2589)
+  - feat(console): dev-seeded admin credentials hint on the login page (#2635)
+  - fix(auth): 注册页去掉重复的「or」分隔线(与 #2629 登录页修复对齐) (#2633)
+  - feat(app-shell/react): adapt to framework 15.1 — atomic publish rendering + honest discovery (#2630)
+  - fix(chatbot): plan approval flips the card to a Building… badge immediately (#2632)
+  - fix(app-shell,components): welcome CTA deep-links into the environment create dialog (#2631)
+  - fix(auth): login-page config race + sign-in watchdog — never strand SSO-only users on a password wall (#2629)
+  - feat(types): derive ListViewSchema from @objectstack/spec/ui (#2231) (#2622)
+
+  objectui range: `077e45b4bc55...2e7d7f0f7ee7`
+
+## 15.1.1
+
+## 15.1.0
+
+### Minor Changes
+
+- d14a387: Console (objectui) refreshed to `1d95cd3659d8`. Frontend changes in this range:
+
+  - feat(ai-build): cold-start handoff to Studio — primary CTA + artifact pillar deep links (ADR-0080 D5) (#2623)
+  - fix(detail): render approval-lock band from host signal on request-tracked backends (#2618) (#2619)
+  - feat(grid): built-in row Edit/Delete honor per-record CEL predicates (#2614) (#2617)
+  - fix(form): thread live dependentValues to cascading option fields (#2284) (#2620)
+
+  objectui range: `8918202dcfc2...1d95cd3659d8`
+
+- f531a26: Console (objectui) refreshed to `b8967495be73`. Frontend changes in this range:
+
+  - fix(app-shell): guard unsaved OWD overview rows in the Access rail and Studio header nav (#2600 follow-up) (#2610)
+  - fix(actions): defuse the three action-visibility traps (#2358) (#2611)
+  - fix(studio): confirm before header SPA nav discards unsaved pillar edits (#2600) (#2606)
+  - feat(studio): CEL formula editor with inferred result type; structured summary roll-up editor (#1582) (#2609)
+
+  objectui range: `23d65c396b8c...b8967495be73`
+
+- f531a26: Console (objectui) refreshed to `fb35e4828fdb`. Frontend changes in this range:
+
+  - fix(data-objectstack): emit MutationEvents from batchTransaction and bulk so master-detail saves refresh bound views (#2584)
+  - feat(dashboard-filters): #2578 item-5 enhancements — nested variable merging, metadata-aware default bindings, server-side optionsFrom distinct (#2590)
+  - feat(fields+form+detail): file/image upload cells in inline line-item grids (#2360) (#2585)
+  - feat(app-shell): visual filterBindings editor in the dashboard widget inspector (#2578) (#2586)
+  - fix(detail): highlight strip lookup editor honors ObjectStack `reference` key (#2407) (#2587)
+  - fix(app-shell): guard Studio Access pillar against silently discarding unsaved matrix edits (#2588)
+  - feat(dashboard-filters): #2578 follow-ups — catalog examples, guide tutorial, i18n entries, spec-alignment cleanup (#2581)
+  - fix(detail+fields+app-shell): ADR-0085 #2548 follow-ups — strip title dedupe, group icon/description, currency channel, approvals Bearer (#2577)
+  - feat(dashboard): dashboard-level filters driving multiple charts (framework#2501) (#2576)
+  - feat(page-header): metadata-driven multi-button record header (#2361) (#2574)
+
+  objectui range: `092bd859934f...fb35e4828fdb`
+
+### Patch Changes
+
+- 5ffff3b: Console (objectui) refreshed to `077e45b4bc55`. Frontend changes in this range:
+
+  - fix(auth): OIDC provider sign-in via POST /sign-in/social (better-auth ≥ 1.7) (#2621)
+
+  objectui range: `1d95cd3659d8...077e45b4bc55`
+
+- f531a26: Console (objectui) refreshed to `092bd859934f`. Frontend changes in this range:
+
+  - fix(app-shell): bind current_user.positions into the client predicate scope; align role-gating examples (#1583 / ADR-0058) (#2573)
+  - feat(app-shell): CEL lint + field autocomplete for condition predicates (#1582) (#2567)
+  - fix(detail): gate related lists on the current user's child-object read permission (#2359) (#2565)
+  - feat(flow-designer): connector picker lists dispatchable connectors + marks declarative instances (#2563)
+  - feat(app-shell): Studio CEL editor for list-view conditional formatting (#1584 / #1582) (#2558)
+  - fix(fields): resolve lookup chip display name via referenced object schema, not the autonumber-prone key heuristic (#2357) (#2551)
+  - feat(kanban): accept CEL { condition, style } conditional-formatting rules (#1584 follow-up) (#2550)
+  - fix(plugin-grid): sniff CSV encoding in import wizard (GB18030 fallback) (#2557)
+  - feat(detail): editable record highlights on the shared inline-edit draft (#2549)
+  - fix(spec-bridge/form): #2545 stop dropping spec FormViewSchema keys; normalize legacy groups → sections (#2552)
+  - feat(flow-designer): localize palette headings + cloud-sync recents + guide (#2553)
+  - fix(studio): refresh builder top-bar name after a package rename (#2554)
+  - feat(core): B3 cascading-option guardrail, role-gated demo, ADR + browser e2e (#1583) (#2547)
+  - feat(list): unify conditional formatting + row-action visibility onto the CEL engine (#1584) (#2544)
+  - feat(detail): record-level inline edit — shared InlineEditContext + one atomic Save (#2542)
+  - feat(flow-designer): search box + keyboard nav + recents in the add-node palette (#2543)
+  - feat(kanban): default card fields to object highlightFields (ADR-0085, #2162) (#2541)
+  - fix(types/plugin-grid): #1763 declare spec-canonical bulkActions on ObjectGridSchema (#2539)
+  - fix(attachments): download attachments via authenticated signed URL (framework #2970)
+  - feat(studio): spec-driven package create/edit/view form in a modal (#2535)
+  - fix(permissions/fields): #2926 ④⑧ — FLS fail-open + lookup display_field (#2537)
+  - feat(app-shell): CEL authoring safety for RLS policies — lint, field autocomplete, test-run (#2533)
+  - fix(auth): gate DeviceAuthPage on features.deviceAuthorization (framework#2874 / #2513) (#2536)
+  - fix(app-shell): close view config panel on discard in edit mode (#2320)
+  - feat(metadata-admin): create form-family views through the View create UI (#2531)
+  - fix(app-shell): render action's objectName as an object selector (#2325)
+  - fix(components): exit inline edit mode for injected cell editors (#2534)
+  - fix(attachments): authenticated uploads + friendly denial copy in RecordAttachmentsPanel (#2755) (#2532)
+  - feat(components): page:tabs honors item-level visibleWhen — conditional tabs (framework#2606) (#2516)
+  - feat(metadata-admin): page variable source is a component picker (#2328) (#2523)
+  - fix(studio-design): make object canvas overridable via studio-canvas-preview registry (#2337) (#2527)
+  - fix(metadata-admin): seed flow createDefaults with required `type` (#2525)
+  - fix(metadata-admin): give hook create form a createSchema so object renders as a ref:object picker (#2521)
+  - feat(studio): enforce package namespace prefix at authoring time (framework#2694) (#2524)
+  - fix(app-shell): render View create-form Object field as ref:object picker (#2526)
+  - feat(components): add `variant === 'primary'` tie-break to action:bar ordering (#2339) (#2519)
+  - fix(build): stop TS6059 rootDir errors in dts build across 21 packages (#2520)
+  - fix(app-nav): exclude record-detail pages from the 'page' nav picker (#2333) (#2517)
+  - fix(plugin-report): stop TS6059 rootDir errors in dts build (#2334) (#2518)
+  - feat(flow-designer): add 'position' xRef picker kind for approval approvers / escalateTo (#2778) (#2515)
+
+  objectui range: `cc2156841787...092bd859934f`
+
+- f531a26: Console (objectui) refreshed to `23d65c396b8c`. Frontend changes in this range:
+
+  - fix(i18n): drop try/catch-around-hook in createSafeTranslation / useSafeTranslate (#2605)
+  - fix(app-shell): Studio Access matrix — history opens in-place sheet, breadcrumb stops escaping the pillar (#2599)
+  - fix(data-objectstack): emit mutation events from batchTransaction/bulk so related lists refresh after master-detail saves (#2607)
+  - fix(metadata-admin): follow the live app locale, not just navigator.language (#2602)
+  - feat(detail+fields+components+app-shell): record inline-edit polish (#2572) (#2604)
+  - fix(app-shell+kanban+list): row-predicate CEL authoring advertises runtime-bound roots; kanban binds host scope (#2571 follow-up) (#2603)
+  - fix(plugin-list): spec bare-string sort form crashed ListView (#2578 shape-mismatch audit) (#2601)
+  - fix(app-shell): lock the Access pillar permission matrix in read-only packages (#2570)
+  - fix(fields): localize relative-date humanize via Intl.RelativeTimeFormat (framework#3040) (#2593)
+  - fix(components): pin sticky leading cells at measured header widths (#2592)
+  - fix(app-shell,core): keep error-envelope objects out of toast.error — React #31 page crash (#2579) (#2580)
+  - feat(flow-designer): pick the target node per branch in the Decision Branches editor (#1942) (#2568)
+  - fix(core+data-objectstack+app-shell): canonicalize reference/reference_to at the schema chokepoints (#2407) (#2598)
+  - fix(dashboard-filters): spec-form filter options crashed the dashboard; add guide screenshots (#2578) (#2597)
+  - fix(fields): PeoplePicker cursor resets only on real result changes (de-flakes keyboard test) (#2594)
+  - fix(studio): stop force-opening the new-object dialog on empty packages (#2569)
+  - feat(studio): CEL editor with validate + autocomplete for field conditional rules (#1582) (#2571)
+  - feat(kanban): default lane field honours the ADR-0085 stageField role (#2596)
+  - fix(fields+detail): resolve pre-existing rules-of-hooks violations in cell renderers (#2595)
+
+  objectui range: `fb35e4828fdb...23d65c396b8c`
+
+## 15.0.0
+
+### Patch Changes
+
+- 56e42a6: Console (objectui) refreshed to `cc2156841787`. Frontend changes in this range:
+
+  - fix(studio): restore copilot composer + collapsible properties inspector (#2504)
+  - fix(plugin-grid): default ImportWizard 'run automations & triggers' to ON (framework#2922) (#2503)
+  - feat(app-shell): C2-β — AccessExplainPanel record 粒度渲染 (framework#2920) (#2502)
+  - feat(app-shell): A4 — 权限来源三态徽标 (framework#2920) (#2501)
+  - feat(app-shell): proactive AI usage indicator in the ChatDock (ADR-0057 #8) (#2498)
+  - fix(app-shell): hydration lifts ask-decline builder handoff + changes-proposed cards (#2497)
+  - fix(plugin-chatbot): ask-decline shows a live pending indicator + earlier handoff card (#2458) (#2496)
+
+  objectui range: `60610531013f...cc2156841787`
+
+## 14.8.0
+
+### Patch Changes
+
+- d1b1a94: Console (objectui) refreshed to `60610531013f`. Frontend changes in this range:
+
+  - fix @object-ui/console
+  - fix(plugin-chatbot): build-result summary truncates on mobile instead of overflowing (#2493) (#2495)
+  - feat(grid,list,core,i18n): 导出文件名本地化 + 导入模板中文化修复 (#2491)
+  - fix(app-shell): package-owned permission set delete reads as reset, not delete (ADR-0094) (#2494)
+  - fix(console-ai): Live Canvas is full-screen opt-in preview on mobile, not a broken split (#2481) (#2492)
+  - feat(react,types): read canonical visibleWhen in renderers (ADR-0089) (#2490)
+  - fix(i18n): localize profile page, inline label objects, managed-by badges and record quick actions (#2489)
+  - fix(plugin-gantt): #2482 删除冗余行定位图标;「→」详情按钮改独立操作槽(不压结束列、24px 热区) (#2487)
+  - fix(console-ai): clear plaintext chat cache on logout / user switch (#2485)
+  - fix(plugin-grid): pin the row-actions column right so it survives horizontal scroll (#2486)
+  - feat(console-ai): mobile chat sheet bridges to full-page /ai — cleanly (ADR-0057 UX #2477) (#2483)
+  - fix(plugin-grid): stop row-action buttons clipping in the list actions column (#2484)
+  - fix(plugin-gantt): #2473 抽屉拉真实记录+真实 schema、写回失败 toast、锁定连线菜单禁用 (#2479)
+  - fix(plugin-list): show active search keyword on the toolbar search button (#2472)
+  - fix(console-ai): Studio dock remembers a collapse; folded layout side-by-side at xl (ADR-0057 UX, #2477) (#2478)
+  - feat(console-ai): edit-mode empty state distinct from magic-flow build (ADR-0057 A1.b) (#2476)
+  - fix(console-ai): A1.b switcher hides platform built-in apps (setup/account) (#2474)
+  - feat(console-ai): ChatDock follow-ups — mobile sheet, wide side-by-side, exact collapse landing (ADR-0057 P3) (#2470)
+
+  objectui range: `95835581f1d0...60610531013f`
+
+## 14.7.0
+
+### Minor Changes
+
+- f71339c: Console (objectui) refreshed to `6a741605b1e0`. Frontend changes in this range:
+
+  - feat(fields): pickers for the sharing rule form (object / criteria / recipient) (#2421)
+
+  objectui range: `e7bebe929349...6a741605b1e0`
+
+- 35f6c61: Console (objectui) refreshed to `a44e7b6b28c6`. Frontend changes in this range:
+
+  - fix(form): honor field widget hint on the section-layout path
+  - feat(plugin-gantt): 写后回读服务端重算字段 + 工具栏手动刷新按钮 (#2436 第 6/7 项) (#2442)
+  - fix(plugin-detail,plugin-gantt): 记录抽屉尊重行级锁定——能力由 handler 是否传入决定 (#2436 第 5 项) (#2441)
+  - feat(console-ai): ask→build handoff carries conversation context + live verification (ADR-0057 P4) (#2444)
+  - feat(console-ai): explicit "Open in Builder →" ask→build handoff (ADR-0057 P4) (#2439)
+  - feat(plugin-gantt): 逐任务预警描边 borderColorField(超期红/临期橙) (#2440)
+  - fix(plugin-gantt): 快速筛选树感知——命中任务保留全部祖先链 (#2438)
+  - feat(plugin-gantt): 连线校验——锁定行/分组行落点拒绝、全量成环检测、onBeforeDependencyCreate 否决钩子 (#2437)
+  - feat(plugin-gantt): api 数据源支持读取 + 全部回写（改期/依赖/删除/内联编辑） (#2423)
+  - fix(console-ai): preserve ?package= across the /ai URL mirror (ADR-0057 P1 hardening) (#2422)
+
+  objectui range: `6a741605b1e0...a44e7b6b28c6`
+
+- 956208e: chore(console): refresh vendored `@object-ui/console` SPA to objectui@95835581
+
+  Bumps the pinned `.objectui-sha` from `2f3ab55a` to `95835581` (11 commits) and rebuilds the prebuilt Console SPA shipped in `@objectstack/console`.
+
+  Notable upstream changes pulled in:
+
+  - feat(console-ai): ChatDock — right-docked AI rail, now DEFAULT ON with the flag as a kill-switch (ADR-0057 P3 go-live), FAB launcher, `/ai` maximized dock + Studio right-dock reflow, bind-on-create conversations
+  - feat(plugin-gantt): #2460 interactive batches — row single-click locate / double-click detail, day-snap drag, layout with tray + filters, mobile QR code, lock hints
+  - feat(plugin-gantt): summaryExtent 'self' + tooltip fallback formatting when no schema
+  - fix(plugin-gantt): delete-dialog i18n, dependency candidate search box, exclude group/locked from summary
+  - fix(auth): login silent-failure UX — SSO pending states, redirect-URL contract, OAuth callback error banner
+
+### Patch Changes
+
+- 9f03fdd: Console (objectui) refreshed to `2f3ab55adcbd`. Frontend changes in this range:
+
+  - Create plenty-cities-worry.md
+
+  objectui range: `a44e7b6b28c6...2f3ab55adcbd`
+
+## 14.6.0
+
+### Minor Changes
+
+- 1d4c359: Console (objectui) refreshed to `94d00d41b1bd`. Frontend changes in this range:
+
+  - feat(auth): phone number + password sign-in on the login page (#2418)
+
+  objectui range: `2fb38edbeb12...94d00d41b1bd`
+
+- 1d4c359: Console (objectui) refreshed to `e7bebe929349`. Frontend changes in this range:
+
+  - fix(plugin-gantt): 拖边缘调时长——整高边缘带命中判定，修复 headless 命中不稳 (#2420)
+  - feat(console-ai): unify AI chat — one conversation key + one surface→agent resolver (ADR-0057 P1+P2) (#2414)
+
+  objectui range: `94d00d41b1bd...e7bebe929349`
+
+### Patch Changes
+
+- b42ae3d: Console (objectui) refreshed to `2fb38edbeb12`. Frontend changes in this range:
+
+  - fix(app-shell): propagate action-param `visible` predicate through resolveActionParams (#2419)
+
+  Completes the create-user phone fix: `resolveActionParams` now carries the
+  `visible` CEL predicate through to `ActionParamDialog`, so the `phoneNumber`
+  field is hidden when the `phoneNumber` auth plugin is off
+  (`features.phoneNumber == false`) instead of rendering a field the backend
+  rejects.
+
+  objectui range: `9138e68413f3...2fb38edbeb12`
+
+## 14.5.0
+
+### Minor Changes
+
+- 0719fc7: Console (objectui) refreshed to `839536b1f4c0`. Frontend changes in this range:
+
+  - feat(plugin-detail,app-shell): Edit as primary CTA; enter inline edit by double-clicking a field (#2401) (#2402)
+  - feat(app-shell,plugin-detail): permission sets — Studio designs, Setup assigns (ADR-0056) (#2403)
+
+  objectui range: `787b0e7bd90f...839536b1f4c0`
+
+### Patch Changes
+
+- 6da03ee: Console (objectui) refreshed to `5da9905b30fc`. Frontend changes in this range:
+
+  - fix(plugin-form): honor userActions.edit on managed objects, don't blanket-disable fields (ADR-0092 D4) (#2395)
+
+  objectui range: `6fa8e6aeb67c...5da9905b30fc`
+
+- 0719fc7: Console (objectui) refreshed to `787b0e7bd90f`. Frontend changes in this range:
+
+  - fix(app-shell,components): Setup-app UX — accurate teams empty state + stop form prop leak (#2397)
+  - fix(app-shell): unwrap the {success,data} envelope in apiHandler so resultDialog fields resolve (#2396)
+
+  objectui range: `5da9905b30fc...787b0e7bd90f`
+
+## 14.4.0
+
+## 14.3.0
+
+## 14.2.0
+
+## 14.1.0
+
+## 14.0.0
+
+## 13.0.0
+
+## 12.6.0
+
+## 12.5.0
+
+### Minor Changes
+
+- 12e11b6: remove studio app
+
+## 12.4.0
+
+### Minor Changes
+
+- f66e8af: chore(console): refresh vendored `@object-ui/console` SPA to objectui@6cbccf38
+
+  Bumps the pinned `.objectui-sha` from `ffad2a13` to `6cbccf38` (2 commits) and rebuilds the prebuilt Console SPA shipped in `@objectstack/console`.
+
+  Notable upstream changes pulled in:
+
+  - feat(app-shell,plugin-list): persist list filters per-user across navigation
+  - fix(components,fields): localize form validation, toast client-side failures, fix dark-mode date icon
+
+## 12.3.0
+
+## 12.2.0
+
+## 12.1.0
+
+## 12.0.0
+
+## 11.10.0
+
+### Minor Changes
+
+- 3500820: chore(console): refresh vendored `@object-ui/console` SPA to objectui@09e1b261
+
+  Bumps the pinned `.objectui-sha` from `2cfa36e9` to `09e1b261` (5 commits) and rebuilds the prebuilt Console SPA shipped in `@objectstack/console`.
+
+  Notable upstream changes pulled in:
+
+  - feat(studio): Access pillar — fourth content pillar (permission matrix)
+  - feat(studio): 复制 (duplicate base) on writable packages in the builder landing
+  - feat(fields): default relation pickers to inline "create related record"
+  - fix(plugin-form): hydrate widget types on hand-authored subform columns
+  - fix(fields): show line-item row actions always, not on hover
+
+## 11.9.0
+
+### Minor Changes
+
+- 1a29234: chore(console): refresh vendored `@object-ui/console` SPA to objectui@9aec6817
+
+  Bumps the pinned `.objectui-sha` from `144ab55b` to `9aec6817` (13 commits) and rebuilds the prebuilt Console SPA shipped in `@objectstack/console`.
+
+  Notable upstream changes pulled in:
+
+  - feat(studio): Data pillar Validations + Settings views (builder-ui Phase B)
+  - feat(studio): package switcher + inline new-writable-package in the top bar
+  - feat(home,studio): builder cover on Home + builder→app bridge; builder landing joins the login journey
+  - fix(app-shell): stop double-toasting failed script/modal action errors; don't show recovery-password reminder on SSO-enforced envs or first landing
+  - fix(plugin-grid): keep row selection in sync when bulk-action dialog closes; i18n the bulk-action dialog; readable import preview
+  - fix(form): de-emphasize field labels so fieldGroups hierarchy reads
+
+## 11.8.0
+
+### Minor Changes
+
+- 5c15ccd: Bump the vendored console to objectui@144ab55b2: the ADR-0085 consumer switch (single-source fieldGroups derivation from spec 11.7.0, `stageField: false` stepper suppression, `highlightFields` reads with `compactLayout` fallback, dead `views.*`/`detail.*` reads removed) plus Studio Data rail search.
+
+## 11.7.0
+
+## 11.6.0
+
+### Minor Changes
+
+- e778a93: chore(console): refresh vendored `@object-ui/console` SPA to objectui@d006128c
+
+  Bumps the pinned `.objectui-sha` from `46a12ef9` to `d006128c` (6 commits) and rebuilds the prebuilt Console SPA shipped in `@objectstack/console`.
+
+  Notable upstream changes pulled in:
+
+  - feat(detail): wire object fieldGroups into detail sections; read hints from spec-writable `detail.*` block
+  - fix(form): render object fieldGroups in create/edit modal; auto-layout parity for grouped ObjectForm
+  - fix(grid): refresh list after a bulk/row action succeeds
+  - fix(grid): inline-edit toggle takes effect immediately + staged editor closes on save
+  - fix(components): keep dialog/drawer open when a click closes an open dropdown
+
+### Patch Changes
+
+- b990bc2: 修复 console 产物打包旧版 @objectstack/client 的问题:`build-console.sh` 现在通过 `OBJECTSTACK_CLIENT_DIST` 把本仓库、本版本的 client 注入 console bundle(此前由 objectui lockfile 决定,11.5.0 因此发布了新导入 UI + client 11.2.0,运行时报 "does not support async import jobs")。构建拆为 deps(turbo)+ console 本体(直跑,避开 turbo strict env 剥离环境变量),并新增产物 canary 断言防止旧 client 再次静默发布。
+
+## 11.5.0
+
+### Minor Changes
+
+- cabce27: chore(console): refresh vendored `@object-ui/console` SPA to objectui@1432efe8
+
+  Bumps the pinned `.objectui-sha` from `2b86379` to `1432efe8` (8 commits) and rebuilds the prebuilt Console SPA shipped in `@objectstack/console`.
+
+  Notable upstream changes pulled in:
+
+  - feat(studio): WYSIWYG form-layout designer in the Data pillar
+  - fix(fields): inline lookup editor shows the selected record's name; align inline lookup value resolution with the read cell
+  - fix(grid): BulkActionBar is now the single, i18n'd selection indicator; keep the bulk action bar inside the overflow-hidden container
+  - fix(studio): drop unused index param in ObjectFormDesigner container map
+
+## 11.4.0
+
+## 11.3.0
+
+## 11.2.0
+
+## 11.1.0
+
+## 11.0.0
+
+## 10.3.0
+
+## 10.2.0
+
+## 10.1.0
+
+## 10.0.0
+
+## 9.11.0
+
+## 9.10.0
+
+## 9.9.1
+
+### Patch Changes
+
+- 4f5c9c3: fix form
+
+## 9.9.0
+
+### Minor Changes
+
+- b112416: chore(console): refresh vendored `@object-ui/console` SPA to objectui@e6fd254
+
+  Bumps the pinned `.objectui-sha` from `6d4cc09` to `e6fd254` (14 commits) and rebuilds the prebuilt Console SPA shipped in `@objectstack/console`.
+
+  Notable upstream changes pulled in:
+
+  - feat: book metadata display UI + book-driven documentation portal (ADR-0046 §6)
+  - feat: render object fieldGroups as full-width, collapsible form sections
+  - feat: full object forms (incl. master-detail) inside screen-flow wizard steps
+  - feat: action progress state + Undo affordance, action/flow completion messaging
+  - feat: CEL on action buttons + i18n for sort/filter builders and view/manage-views menus
+  - fix: public share link URL + ShareDialog audiences; grouped-view pagination + shared scrollbar
+  - fix: docs ToC scrolls in JS so `<base href>` no longer bounces to home
+
+## 9.8.0
+
+## 9.7.0
+
+## 9.6.0
+
+## 9.5.1
+
+## 9.5.0
+
+## 9.4.0
+
+## 9.3.0
+
+## 9.2.0
+
+## 9.1.0
+
+## 9.0.1
+
+## 9.0.0
+
+## 8.0.1
+
+## 8.0.0
+
+## 7.9.0
+
+## 7.8.0
+
+## 7.7.0
+
+## 7.6.0
+
+## 7.5.0
+
+## 7.4.1
+
+### Patch Changes
+
+- d7f86db: fix
+
+## 7.4.0
+
+## 7.3.0
+
+## 7.2.1
+
+## 7.2.0
+
+### Minor Changes
+
+- d662c01: fix
+
+## 7.1.0
+
+## 7.0.0
+
+### Patch Changes
+
+- 9496b5b: Vendor `@object-ui/console` as `@objectstack/console`, a new dist-only
+  package shipped at the framework version. A single `pnpm add
+@objectstack/framework` now installs a version-matched Console SPA — no
+  second npm dep to keep in sync.
+
+  The Console source-of-truth remains [`@object-ui/console`](https://github.com/objectstack-ai/objectui).
+  The framework pins it by SHA in `.objectui-sha`; CI's release workflow
+  clones objectui at that SHA, builds the SPA, and publishes the dist as
+  `@objectstack/console`.
+
+  The CLI's `resolveConsolePath()` now prefers `@objectstack/console` and
+  falls back to `@object-ui/console`, so cloud's Docker overlay flow and
+  advanced users who pin `@object-ui/console` directly still take
+  precedence. `@object-ui/console` has been demoted from CLI runtime
+  dependency to dev fallback.