@objectstack/console 17.0.0 → 17.2.0

package/CHANGELOG.md

@@ -1,5 +1,457 @@
 # @objectstack/console
 
+## 17.2.0
+
+### Minor Changes
+
+- 208bd22: Console (objectui) refreshed to `190fbd01d061`. Frontend changes in this range:
+  
+  Derived from the changesets objectui declared over the range — 113 releasing of 141 changesets added across 141 non-merge commits; omitted: 28 release-nothing changesets, 1 commit carrying no changeset (they ship no package code).
+  
+  - **minor** — Remove the six retired `@objectstack/spec/ui` theme-schema re-exports from `@object-ui/types/zod` — `ColorPaletteSchema`, `TypographySchema`, `BorderRadiusSchema`, `ShadowSchema`,… (objectui `920165d18`)
+  - **minor** — AI build surface gains a standing 「未发布改动」 bar (#5694): while the conversation's bound package has pending drafts, a bar floats above the composer — surviving scrolling — counting… (objectui `8e32da7d8`)
+  - **minor** — `stack` now reads its spacing from `gap` and nothing else — the undeclared `spacing` key it also accepted is gone (objectui#4890). (objectui `dd194635d`)
+  - **minor** — **Breaking (published surface):** remove `options.actor` from `MetadataClient`'s `save`, `reset`, `publish` and `rollback`, and stop emitting the `X-Actor` request header. (objectui `8e00bfd28`)
+  - **minor** — `record:alert` binds the row through `usePredicateRecordContext`, so an author-declared `properties.visible` is actually consulted. (objectui `8a4439081`)
+  - **minor** — Create forms pre-fill the `current_user` defaultValue token with the acting user (#5683). `PermissionContextValue` gains `userId` (from `/me/permissions`; `null` = unknown), and t… (objectui `3c9fca3dc`)
+  - **minor** — The zod `BaseSchema` mirror now accepts everything its TypeScript declaration declares — five keys had drifted narrower (objectui#4605). (objectui `4d73b0788`)
+  - **minor** — `ComponentRendererProps` is now declared once and re-exported, instead of hand-declared a second time in `@object-ui/core` (objectui#4594). (objectui `bf3edfe13`)
+  - **minor** — `ComponentInput` is now declared once and re-exported, instead of restated in three places (objectui#4972). (objectui `d7573b3f4`)
+  - **minor** — The register-meta key `defaultChildren` is retired (objectui#5051). (objectui `fa429cf6f`)
+  - **minor** — Retire `ThemeComponentSchema` (`type: 'theme'`) — a component kind no renderer implemented (objectui#5489). (objectui `78cbdb530`)
+  - **minor** — Pins `@objectstack/spec`, `@objectstack/client`, `@objectstack/formula` and `@objectstack/lint` to `17.1.0`, and adapts the two consumer surfaces the new build moves. (objectui `2d36552d2`)
+  - **minor** — Console Home stops offering the metadata-authoring front door on a deployment whose own runtime config says authoring is not offered there (objectui#5521). (objectui `f4becce90`)
+  - **minor** — **API addition (public-surface widening):** `FileCell` — the compact upload control `@object-ui/fields` exports for line-item grid cells — gains the published optional `error?: st… (objectui `9a1fb4124`)
+  - **minor** — Marketplace-less runtimes now say so instead of erroring: `OS_CLOUD_URL=off` is a first-class disabled state, and the load-failure hint describes the control plane the runtime was… (objectui `20e317cd5`)
+  - **minor** — Bind `record` into the node-level visibility evaluator, and stop a hoisted `properties.visible` swallowing a declared `visibleWhen`. (objectui `c86185eb5`)
+  - **minor** — Dashboard chart widgets no longer render as a blank area when their height class resolves to `auto`. (objectui `6f017e99c`)
+  - **minor** — `ReportView` reads a report's data binding through the one key the contract declares — `dataSource.object`. (objectui `60d452ee0`)
+  - **minor** — Studio's `新建对象` asks for the record-sharing baseline, and an unauthored one is reported before Publish rather than by it. (objectui `7a90afdf9`)
+  - **minor** — `data-table` reads the declared `header`; the producers translate `label` into it. (objectui `e719ebdd9`)
+  - **minor** — The static `table` renderer reads only the declared `TableColumn` contract, and its published reference page teaches that spelling. (objectui `490f48240`)
+  - **minor** — The approval panel identifies the pending approver by name, not by a truncated raw id. (objectui `77f846a8b`)
+  - **minor** — A screen flow's resume result reaches the user — on both outcomes (objectui#5417). (objectui `c40f3b8ca`)
+  - **minor** — Three more secret-field spellings no longer render a secret in clear text on the form's unregistered-widget branch. (objectui `91783c47b`)
+  - **minor** — `object-grid` / `object-form` / `detail-view` resolve their data source the same way, and a block that resolves none says so (objectui `ebce5a367`)
+  - **minor** — `WidgetConfigPanel` reads an inline-locale-map title, and a save no longer destroys the other locales. (objectui `fb96ecb3d`)
+  - **minor** — `objectui check` judges a file's `type` only when the file is recognisable as an ObjectUI schema, and reports how many it declined to judge. (objectui `94021ddba`)
+  - **patch** — `element:record_picker`'s `label` and `placeholder` now resolve the inline per-locale map their contract admits, and their published declarations say so (objectui#5637). (objectui `190fbd01d`)
+  - **patch** — The dev-mode unknown-key warning stops flagging `overrideNotice`, the console's privileged-override safety copy (objectui#5611). (objectui `7138bc129`)
+  - **patch** — Documentation no longer teaches the "JSX/HTML + Tailwind" framing for a page's `source`, which ADR-0080's own 2026-06-30 header amendment (under ADR-0065, Accepted) retracted. obj… (objectui `0b1326d8a`)
+  - **patch** — The form renderer now keeps a `defaultValues` reset off `onChange` and off the `form_change` `onAction` for **every** caller — including one that memoizes the callback (objectui#5… (objectui `485f09669`)
+  - **patch** — Document the `X-Tenant-ID` edge contract that `createAuthenticatedFetch` stamps, and the unstamped-first-request window in which it is not sent (objectui#5279). Documentation only… (objectui `934a53201`)
+  - **patch** — `console.ai.pendingDrafts` — the standing unpublished-changes bar's five strings — now exists in all ten locale packs. It previously existed only in `en` and `zh`, so `ar`, `ru`,… (objectui `1e66879d9`)
+  - **patch** — `README.md`'s "Not a `FormField` key" table said a field-level `className` is "read on exactly one pseudo-field, `type: 'section-divider'`". That quantifier holds only for the ren… (objectui `83ec61881`)
+  - **patch** — Follow-up to #5696: the pending-drafts bar's strings live at `console.ai.pendingDrafts.*` with en+zh locale entries — the i18n call-site key gate and ratchet flagged the original… (objectui `c5200f041`)
+  - **patch** — A RETIRED field-type spelling is now refused — out loud, once — by every field-type predicate in the renderer, not just by the widget road (objectui#4914, maintainer ruling B of 2… (objectui `6c6cee704`)
+  - **patch** — `ActionParamDialog` (the `custom` barrel's published dialog) now resolves each `select` param's options through `@object-ui/core`'s shared option evaluator, so a per-option `visib… (objectui `3b147a367`)
+  - **patch** — The console's `<PageHeader>` spells its secondary line `subtitle`, the same key the other `PageHeader` in this repo uses (objectui#4761). (objectui `029e2fb72`)
+  - **patch** — `AiChatPage`'s public share-link base now resolves through the one console-mount resolver instead of a private copy of it (objectui#4482). (objectui `169f6d29f`)
+  - **patch** — The metadata lock banner can no longer render an amber, padlocked box with no title, and the ADR-0010 §3.6 lock vocabulary is declared once instead of three times (objectui#5024). (objectui `8d37efb44`)
+  - **patch** — `DashboardComponentSchema.dateRange.defaultRange` is now bound to `DateRangeDefaultRange` from `@objectstack/spec/ui` instead of restating it as a hand-written 14-member union (ob… (objectui `f9e4f9139`)
+  - **patch** — `README.md`'s "Schema API / CalendarView" block described a `CalendarViewSchema` that does not exist. Measured against the interface itself (`packages/types/src/complex.ts`) and i… (objectui `76ae7291b`)
+  - **patch** — A cloud-connection bind failure now reads in the user's language whichever clock noticed it (objectui#5054). (objectui `3a58149d8`)
+  - **patch** — The console's cold load no longer asks `/api/v1/runtime/config` or `/auth/me/localization` twice (objectui#5544). (objectui `0e05aac68`)
+  - **patch** — `sanitizeViewOverride` now strips a half-filled `between` from a stored view overlay, instead of handing it back to the merge (objectui#5025, objectstack#8815). (objectui `26ff2d6ac`)
+  - **patch** — `ActionParamDialog`'s "this param carries a reference target" rule now derives from the shared reference-field family instead of the last private copy of it. (objectui `7e811687a`)
+  - **patch** — The two form CONTAINER contracts now have ONE declaration each, derived from `@objectstack/spec`, and the console reads them instead of its own copies. (objectui `71ee4959e`)
+  - **patch** — Both `evaluateExpression` references in the `ExpressionEvaluator.registerFunction` JSDoc are now qualified, so each resolves to the entity it means (objectui#5580). (objectui `8ebd57fc5`)
+  - **patch** — `features.aiStudio` is now read through one `isAiStudioEnabled()` accessor instead of being spelled inline at two call sites (objectui#5577). (objectui `aa3b81062`)
+  - **patch** — `setLocalized`'s published docblock states the single-locale write rule that is actually in force, instead of deferring the multi-locale-authoring question to a closed card (objec… (objectui `b2437a79a`)
+  - **patch** — Dashboard record fields: percent columns now render through the one percent scaling decision instead of a second, drifted copy of it. (objectui `f1c27f037`)
+  - **patch** — Repair five retired lucide icon spellings that reach a record-reading resolver, and pin the names against the runtime `icons` record so the next lucide bump goes red instead of si… (objectui `42887e0e1`)
+  - **patch** — `element:record_picker`'s `emptyText` now resolves the inline per-locale map its contract has admitted since rc.6, and its published declaration says so (objectui#5590). (objectui `fa140b892`)
+  - **patch** — `buildSections` now honours a FormView field's `maxLength` override instead of always taking the object's ceiling (objectui#5595). (objectui `cdda37ae3`)
+  - **patch** — The `I18nLabel` "inverted pin" now watches the premise it claims to watch, and `ui-action.ts` no longer imports a symbol it never uses (objectui#5612, objectui#5613). (objectui `dffd752d8`)
+  - **patch** — `ObjectChart` now depends on the `fieldOptionLabel` resolver directly instead of holding it behind a ref, so a chart re-resolves its groupBy option labels when the resolver genuin… (objectui `6c5ee71c5`)
+  - **patch** — `ViewSwitcher` draws an icon for `chart` and `gantt` views again, and both icon maps in the package now name only spellings lucide still resolves (objectui#5586). (objectui `6b348d278`)
+  - **patch** — The console's standalone form renderer now evaluates conditional field visibility. (objectui `b63a9a332`)
+  - **patch** — The marketplace package detail page decides "you are not an admin" before it fetches, instead of after the load has already failed. (objectui `13413f3ae`)
+  - **patch** — `RecordDetailView`'s param-collection dialog now titles itself from `action.label` alone — the unreachable `|| action?.title` fallback beside it is removed (objectui#5610). (objectui `8c87f0583`)
+  - **patch** — `ActionParam`'s doc block no longer claims that spec 17 narrowed `I18nLabel` to a plain string (objectui#4611). (objectui `4e8622b7b`)
+  - **patch** — Two comment corrections in `ListView.tsx` (objectui#4559, objectui#4966). No runtime behaviour changes and the emitted bundle is byte-identical; the published `.d.ts` does change,… (objectui `d6613a28d`)
+  - **patch** — Corrects the `@deprecated` prescription on `UniquenessValidation` in `packages/types/src/data-protocol.ts`, which pointed authors at spellings the platform no longer accepts (obje… (objectui `3c73d99ed`)
+  - **patch** — `toRenderableSchema`'s header now says the bridge is permanent, instead of instructing callers to remove it (objectui#4622). (objectui `f90b8fb5d`)
+  - **patch** — The console's param-collection dialog now titles itself from `action.label` alone — the unreachable `|| action?.title` fallback beside it is removed (objectui#4282). (objectui `76ceb1e05`)
+  - **patch** — `useObjectChat` no longer rebuilds its `DefaultChatTransport` on every render (objectui#4187). (objectui `a31adc611`)
+  - **patch** — `DashboardRenderer` drops the unreachable `DatasetWidget` fork from its self-contained (card-less) branch, leaving that branch to render `SchemaRenderer` unconditionally (objectui… (objectui `84d2e987f`)
+  - **patch** — Studio's pre-publish security block can now take you to the object it names. (objectui `d15a92d21`)
+  - **patch** — A lookup's inline dropdown renders its columns through the same cell renderer the browse-all picker uses, so one `lookup_columns` declaration cannot produce two answers. (objectui `7a28e1e3f`)
+  - **patch** — The form-field authoring contract now has ONE declaration, and the console reads it instead of its own copy. (objectui `cebdfe7e1`)
+  - **patch** — The `[page:header]` sparse-predicate warning no longer blames `hidden: true` — it states what it actually measured (objectui#5399). (objectui `5a07e67d9`)
+  - **patch** — A host-composed `tree` view is now labelled with the tree icon in `ObjectView`'s view switcher instead of the grid one, and the `tree` / `chart` view types are recorded as host-co… (objectui `cad512fe1`)
+  - **patch** — A widget title stored as an inline per-locale map is editable again in both dashboard authoring surfaces, and a save writes back only the active locale's entry (objectui#5428). (objectui `4db5989ac`)
+  - **patch** — `useObjectLabel` now keeps a stable identity when no i18next instance is bound, so the memoization it advertises holds on the no-provider path too (objectui#5564). (objectui `38a956877`)
+  - **patch** — `PivotTable` no longer re-runs its cross-tabulation memo on every render when it has no rows (objectui#5562). (objectui `0ccbdc1c2`)
+  - **patch** — The marketplace **catalog** page now tells a non-admin that the runtime has no marketplace, instead of telling them they lack permission (objectui#5557). (objectui `d524bde29`)
+  - **patch** — `ExpressionEvaluator.registerFunction` now documents the case-fold it has always performed: the name is stored — and must be called — in UPPER CASE (objectui#5363). (objectui `f2158ec86`)
+  - **patch** — `ObjectSettingsPanel` now calls `isExternalWider` from `owd-sharing.ts` instead of re-declaring `OWD_WIDTH` and the ADR-0090 D11 width comparison inline (objectui#5477). (objectui `3211397b0`)
+  - **patch** — The `ui:grid` renderer now forwards to the DOM by whitelist, so schema keys no longer land on the rendered `<div>` as invalid HTML attributes (objectui#4787). (objectui `b655a9de1`)
+  - **patch** — `record:alert`'s renderer-local `RecordAlertProps` CTA slot (`action.label`) is widened to `string | I18nLabel` in both copies (`properties.*` and the flat compat mirror) in `pack… (objectui `006834856`)
+  - **patch** — The approval step progress bar is a vertical stepper, so long flows stop clipping their tail steps. (objectui `ac73c24b0`)
+  - **patch** — `ObjectDataTable` and `ObjectPivotTable` now use a module-scope frozen empty for "no rows yet" instead of a fresh array literal per render (objectui#4629). (objectui `f24195aeb`)
+  - **patch** — The Approvals Inbox no longer shows a business approver the submitted record's raw row JSON. (objectui `7c0e417b5`)
+  - **patch** — Console builds no longer carry a live Sentry DSN, and `sendDefaultPii` is now opt-in (objectui#5522). (objectui `0935a43be`)
+  - **patch** — `navigateOnSuccess` now honours a mounted host, and says so when its destination is refused (objectui `26a223863`)
+  - **patch** — The marketplace **package detail** page now states that the marketplace is turned off, instead of red-erroring, on a runtime that has none (objectui#5533). (objectui `2573ff434`)
+  - **patch** — fix(approvals): derive approver identities from `positions`, not the retired `user.roles` (objectui#5424) (objectui `7e898368a`)
+  - **patch** — The Console now gates the `/studio/*` routes on the `studio.access` ENTRY capability, not just on the backend's refusal of the writes behind them (objectui#5519). (objectui `7d0143c35`)
+  - **patch** — `registerStudioComponents.tsx` no longer claims a code split it never had: `studio:builder` imports `BuilderLanding` directly instead of through a `lazy()` that deferred nothing. (objectui `7493bff63`)
+  - **patch** — metadata-admin: `FormFieldSpec` declares `dependsOn`, and the widget half reads the same declaration instead of its own copy of it (objectui#5040) (objectui `eba3a6eaa`)
+  - **patch** — A readonly `markdown` / `html` / `richtext` form field now renders its content FORMATTED instead of showing the user its markup source (objectui#5498). (objectui `4bb940b6e`)
+  - **patch** — `ObjectGrid` lowers the deprecated `defaultFilters` through `toFilterNode` instead of byte-copying it onto `$filter` (objectui#4082). (objectui `9e2208544`)
+  - **patch** — Studio's form designer canvas now emits the namespaced `FormField.type` spelling instead of passing `objectDef.fields[x].type` through raw (objectui#4838). (objectui `ca2b4096e`)
+  - **patch** — `objectui validate` now refuses a form field whose widget id names a namespace other than `field:`, matching the verdict `@object-ui/core`'s `validateSchema` has given since objec… (objectui `100547e36`)
+  - **patch** — Studio Interfaces: the nav-leaf binding reads the canonical target key only (objectui `6cc62e225`)
+  - **patch** — `ListView` now resolves the nested `aria.ariaLabel` against the audience's locale instead of casting it to a string (objectui#5134). (objectui `ec9fdaaa5`)
+  - **patch** — The value-fallback label prettifier `humanizeLabel` has one implementation instead of two byte-identical copies. (objectui `cef27e2b1`)
+  - **patch** — `ObjectMapProps.clusterRadius`'s JSDoc said "in pixels"; `clusterMarkers` has always used it as a coordinate-degree grid cell edge (`radius / 2 ** zoom`, divided into the marker's… (objectui `ff7543c5d`)
+  - **patch** — The Approvals Inbox stops remounting every row on every render. (objectui `9b9af8dbb`)
+  - **patch** — Studio's metadata authoring path stops greeting the author with errors they did not cause, English help text in a Chinese console, and a toast on top of the publish button. (objectui `add10d8f9`)
+  - …and 13 more releasing changesets in this range (list capped at 100; see the objectui range below).
+  
+  ⚠️ 1 of these carries a breaking change: 1 by the author's own breaking annotation in the changeset body — objectui declares no `major` inside a launch window (`scripts/check-changeset-no-major.mjs`). Each is marked **BREAKING** in the list above — read them before compiling the release record.
+  
+  **In this console build, declared nowhere** — objectui merged 1 commit in this range with no `.changeset/*.md`. The code is inside the pin above and ships here, but nothing upstream declared it, so it appears in no objectui CHANGELOG and in no entry above. Listed by subject rather than counted, because a count cannot tell a dependency bump from a form-behaviour change (objectstack#6174); the upstream gate that would prevent this is objectui#3387.
+  
+  - _(no changeset)_ chore: release packages (#4655) (objectui `59f61cfb8`)
+  
+  <!-- adr-0087: not-required (no-migration-prescription) The range carries exactly ONE declared-breaking entry, judged on its own upstream changeset rather than as a batch: objectui `8e00bfd28` (objectui#5689) removes `options.actor` from `@object-ui/data-objectstack`'s `MetadataClient` (`save` / `reset` / `publish` / `rollback`) and stops emitting the `X-Actor` request header. It is objectui CATCHING UP to a decision this repo already took and already shipped: objectstack#7941 removed the header limb from the `/meta` write actor resolver, so the recorded actor is the identity the request was authorized as — re-measured at this HEAD in `packages/rest/src/rest-server.ts` (the single `resolveExecCtx`-based producer for every `/meta` route that stamps an `actor`) and pinned by `packages/rest/src/meta-write-actor-identity.test.ts`, whose cases 3 and 4 assert an explicit `X-Actor` does NOT outrank the authenticated identity and is inert on the machine-write path. The retired option was therefore a false affordance that typed cleanly, sent a header this server already ignored, and could not influence the audit or history row — dropping it changes no shipped behaviour and rewrites no stored metadata. Nothing in it is reachable through `@objectstack/console` either, re-measured against `packages/console/package.json` at this HEAD: `files` is `["dist","README.md","CHANGELOG.md"]` and the sole `exports` entry is `./package.json`, so it forwards no `@object-ui/*` module entry point and re-exports none of these types. This diff is `.objectui-sha` plus this changeset and nothing else (the regenerated `packages/console/dist/sdui.manifest.json` is gitignored and the ADR-0082 D4 ratchet reported no new divergence, so neither it nor its baseline is in the diff) — no `packages/spec` schema, authorable metadata key or protocol surface changes in it — so there is no stored-metadata rewrite for `objectstack migrate meta` to prescribe and therefore no ADR-0087 ledger entry to write or to name from THIS bump. This bump adds no ledger entry and claims none. -->
+  
+  objectui range: `9a3daf8d37ad...190fbd01d061`
+
+## 17.1.0
+
+### Minor Changes
+
+- 83fe945: Console (objectui) refreshed to `82a94170c405`. Frontend changes in this range:
+  
+  Derived from the changesets objectui declared over the range — 121 releasing of 166 changesets added across 191 non-merge commits; omitted: 45 release-nothing changesets, 30 commits carrying no changeset (they ship no package code).
+  
+  - **minor** — `ComponentMeta.labelling` grows a third value: `'control' | 'group' | 'display'` (objectui#4857, ruled jointly with objectui#4871 as the single repo-wide vocabulary for "how does… (objectui `167ec42e7`)
+  - **minor** — Publish the five `@objectstack/spec` 17.0.0 keys the renderers already honoured, so authors can discover them (objectui `98eab3681`)
+  - **minor** — `element:text.content` and `element:button.label` declare the inline translation map they already accept (objectui `8b9dc627f`)
+  - **minor** — `ComponentInput.type` can declare a UNION, so a block stops warning about legal writes its own description recommends (objectui `279fb139d`)
+  - **minor** — `AuthInvitation.status` is the closed four-member union it always documented, enforced at the auth client's wire boundary. (objectui `1b21b1aaa`)
+  - **minor** — **Breaking (shipped as `minor`, following the `app-shell` component-key deregistration):** `app-schema-renderer`'s `mobileNavMode` is now declared as the vocabulary the renderer i… (objectui `45f7dcca4`)
+  - **minor** — layout: `flex` and `container` now honour a declared scale value of `0` (objectui `93fe362fc`)
+  - **minor** — **BREAKING** — The fullscreen long-text dialog announces the field's validation state and carries the field's name (objectui `911ceaa05`)
+  - **minor** — **Breaking (shipped as `minor`, following the `page-header` `description` retirement):** `app-shell` is no longer a component key. `registerLayout()` registered `AppShell` under t… (objectui `29167d540`)
+  - **minor** — **BREAKING** — A dashboard header `modal` action's `target` names a PAGE, only — DashboardView's second copy of the prefix convention retires (objectui `c25222758`)
+  - **minor** — **BREAKING** — A `type: 'modal'` action's string `target` names a PAGE, only — the object fallback retires (objectui `171601c02`)
+  - **minor** — **Breaking (shipped as `minor`, see below):** `@object-ui/layout`'s `<PageHeader>` retires the legacy `description` prop. `subtitle` is now the only spelling for the secondary lin… (objectui `f923b7cfa`)
+  - **minor** — **BREAKING** — Settle the two declared-but-unread keys on `AccordionItem`: retire `icon`, wire `disabled` (objectui#4652). (objectui `58b8346be`)
+  - **minor** — **BREAKING** — data-objectstack: retire the four remaining `v3.0.0 Deep Integration` modules — `IntegrationManager`, `SecurityManager`, the studio canvas helpers (`createDefaultCanvasConfig` / `… (objectui `a8411adf1`)
+  - **minor** — A clicked cartesian mark names its own series, and the drill title reads its label (objectui `e05db8826`)
+  - **minor** — Remove `VectorFieldMetadata.indexed` and `VectorFieldMetadata.distance_metric` — both declared keys the ObjectStack spec rejects (objectui `9695da72b`)
+  - **minor** — Remove `BaseFieldMetadata.indexed` — the ObjectStack spec has no field-level index flag (objectui `97abb24a9`)
+  - **minor** — Draw a null second-dimension group instead of carrying its measure invisibly (objectui `af025ee70`)
+  - **minor** — Give a chart bucket an identity distinct from its display label (objectui `9ce096fb0`)
+  - **minor** — Retire the field designer's `Indexed` toggle — the ObjectStack spec has no field-level index flag (objectui `deb157ad0`)
+  - **minor** — Action param `visible`: one dialect answer, and a fault that is fail-open and LOUD (objectui `e1d42519b`)
+  - **minor** — Project every declared `recordIdField`, and refuse an action that names no record (objectui `b1119ece4`)
+  - **minor** — Remove the retired `striped` / `bordered` / `virtualScroll` list-view surface (objectui `f1d4748c6`)
+  - **minor** — **BREAKING** — Settle the two declared-but-unread keys on `ToggleGroupItem`: retire `icon`, wire `disabled` (objectui#4632). (objectui `99bd01542`)
+  - **patch** — docs(plugin-report): rewrite the README export snippets against the real export signatures (objectui `82a94170c`)
+  - **patch** — Docs only: `packages/plugin-gantt/README.md` no longer teaches two identifiers the package does not export, nor a task shape it does not produce (objectui#5012). Each README impor… (objectui `bb3fab62c`)
+  - **patch** — The `span` renderer renders its content again — it reads `children`, the key its own type declares and its producers emit. (objectui `839665643`)
+  - **patch** — A form's declared redirect delay no longer outlives the form that armed it. (objectui `f68018d56`)
+  - **patch** — `CloudConnectionPanel` prefers `error.message` over `error.code` on a bind-poll failure, matching the precedence the same file already applies everywhere else. (objectui `ee4f796d2`)
+  - **patch** — Docs only: `packages/plugin-report/README.md` no longer teaches three exports the package does not have (objectui#5016). Each was judged individually against the entry module's ex… (objectui `f331f5a8b`)
+  - **patch** — `plugin-calendar`'s README no longer documents imports the package does not export. (objectui `e7c5a80a8`)
+  - **patch** — metadata-admin: SchemaForm emits the naming channel each widget DECLARES, and the colour widget splits into two registrations (objectui `dc9d651a2`)
+  - **patch** — `objectui serve` and `objectui build` now locate the project the way `dev` does, instead of looking only in the current directory. (objectui `bbfbc54cb`)
+  - **patch** — `ObjectForm` and `WizardForm` now consume a declared `submitBehavior: { kind: 'redirect' }` the way objectstack#7496 ruled it (objectui#4989): the destination is a **relative** pa… (objectui `ae804eca2`)
+  - **patch** — fix(components): FilterBuilder 的值不再落在列的选项集之外还看不见 (objectui#4874) (objectui `384f30dd7`)
+  - **patch** — The `span` deprecation notice is now reported once per page load, and only to the authoring surface it applies to. (objectui `1c9c34292`)
+  - **patch** — The metadata Audit panel's lock column now shows Chinese for every lock state it can print. (objectui `e71c854ce`)
+  - **patch** — Console list filters: a `between` range is submitted only when both bounds are filled, and six operator labels stop rendering as raw i18n keys. (objectui `a1609a603`)
+  - **patch** — The Public Forms dialog now refuses an out-of-contract `submitBehavior.url` at the moment it is authored, with the contract's own prescription shown next to the field (objectui#49… (objectui `ab9c9709d`)
+  - **patch** — The Studio's overlay-layer badge stops printing the producer's raw scope value (objectui `3d053bb24`)
+  - **patch** — A map view now fits its camera to the records it queried, so a view with data never first-paints an empty viewport. (objectui `25819c42c`)
+  - **patch** — `FormPage`'s post-submit `redirect` behaviour now consumes the destination the way objectstack#7496 ruled it (objectui#4190): as a **relative in-app path**, navigated to with the… (objectui `a34c0b299`)
+  - **patch** — `MetadataClient.layered()` now reads the three-layer view from its declared path, `GET /meta/:type/:name/layers`, instead of flagging the ordinary item read. (objectui `cf4f8a6e4`)
+  - **patch** — Grid and related-list column headers no longer offer a sort on a `formula` column. (objectui `c1ef923cf`)
+  - **patch** — The routed temp app's generated manifest now asks for the same `lucide-react` range this repo installs. (objectui `195b9e4ab`)
+  - **patch** — A scaffolded plugin's generated manifest now asks for the same `@testing-library/jest-dom` range this repo installs. (objectui `195b9e4ab`)
+  - **patch** — Retired field-type spellings can no longer reach an inline editor by delegation — the grid's inline cell editor stops offering a working person picker for `owner`. (objectui `ac2f3324c`)
+  - **patch** — The marketplace plugin trust tier is typed by the spec's own enum, so the install panel can no longer render a raw wire value as a trust label. (objectui `1b21b1aaa`)
+  - **patch** — A write-warning toast now words each strip reason on its own instead of calling everything that is not `readonly_when` "read-only". (objectui `21e45858f`)
+  - **patch** — fix(fields): deliver the host's a11y channels to `slider` and name `signature` (objectui `dad51e5dc`)
+  - **patch** — The retired `owner` field-type spelling stops being blessed by the published contract, and inline edit refuses it the way the record form already does. (objectui `598c89a17`)
+  - **patch** — Inside a pnpm workspace, `objectui dev` / `serve` / `build` now resolve every platform package from workspace source (objectui#3890). (objectui `4102bfcf8`)
+  - **patch** — fix(fields): retire the `owner` field-type alias with a loud tombstone (objectui `e7747f19a`)
+  - **patch** — `div` 的废弃提示按 provenance 收窄:只对 **JSON 作者面**的节点报,不再对 `kind:'html'` tier 自己解析出的节点开火。 (objectui `40d3a3318`)
+  - **patch** — **BREAKING** — fix(fields): grid columns are keyed by the declared `name`, so spec-compliant grid metadata renders populated cells (objectui `800f455f7`)
+  - **patch** — fix(plugin-report): forward the chart chrome and series presentation `ReportChartSchema` declares (objectui#4877) (objectui `5ffcc1432`)
+  - **patch** — fix(plugin-report): route a report's embedded chart through `buildChartSeries` so a NULL category is bucketed (objectui#4878) (objectui `5ffcc1432`)
+  - **patch** — The metadata editor's reset/delete button now renders the verb it executes, decided by the server's own verdict. (objectui `0a3ab5edf`)
+  - **patch** — Publish the authoring surfaces of the four GA `object-*` blocks (objectui `375efb402`)
+  - **patch** — A flow-run failure that arrives as `400 FLOW_FAILED` — and any `404` on the flow route — is now classified as terminal rather than retryable. (objectui `833c90047`)
+  - **patch** — `FilterBuilder` shows the falsy values a row actually holds — a boolean `false` and a number `0` are values, not empty boxes. (objectui `53f23bc33`)
+  - **patch** — `@object-ui/types` stops publishing its `src/` tree (objectui `c9dc811d0`)
+  - **patch** — metadata-admin stops declaring an object "provided by an installed package" when it lives in a writable package (objectui `3b0912bae`)
+  - **patch** — The Studio Interfaces rail opens `action` nav entries instead of greying them out. (objectui `718ca9d45`)
+  - **patch** — 报表内嵌图表的度量显示名按三级回落解析，不再直接印原始 `name` (objectui `6bb39c412`)
+  - **patch** — The designer's colour swatch rows now announce WHAT they colour, and the Dashboard widget inspector's "Color Variant" label no longer points at nothing. (objectui `14f8b7ad5`)
+  - **patch** — Combo charts drill from their marks (objectui `f95434b26`)
+  - **patch** — `FilterBuilder` settles a row's **value** when its field changes, instead of leaving a value the new column's input cannot show. (objectui `be6081548`)
+  - **patch** — `object-gantt` / `object-map` / `object-calendar` no longer drop a sort entry that omits `order`. (objectui `5edc0c522`)
+  - **patch** — `@object-ui/fields` stops publishing its `src/` tree (objectui `65e88e6c2`)
+  - **patch** — A readonly field's replacement display is now named by the field's label and described by its help text. (objectui `7458a418b`)
+  - **patch** — `@object-ui/data-objectstack` stops publishing its `src/` tree (objectui `1ef236e18`)
+  - **patch** — Four packages stop publishing tooling material in their `dist/` (objectui `ad07b65ac`)
+  - **patch** — `mobile.fullscreenLongText` now reaches fields the spec spells `richtext` (objectui#4831). (objectui `3b0370408`)
+  - **patch** — Permission reads no longer throw on a config that omits the required `roles` member. `ObjectPermissionConfig.roles` is declared required, but a config arriving from plain JS or fr… (objectui `61556dce4`)
+  - **patch** — Editable `markdown` / `html` / `richtext` fields now carry the host's `id` and `aria-describedby` on the editor. (objectui `a777058f6`)
+  - **patch** — A `user` field in a form now receives `dataSource` / `dependentValues` / `dependsOnLabels`, like every other reference field. (objectui `ac600e5d2`)
+  - **patch** — SpecBridge's form-view bridge stops reading `defaultSort` and `aria`, two keys spec 17 retired on the FormView carrier (`retiredKey()` tombstones — authoring either is a parse err… (objectui `d374cafa2`)
+  - **patch** — AppShell: drop the unused `Sidebar` import. `AppShell` renders the node the caller passes in the `sidebar` prop and never constructs a `Sidebar` itself, so the import was dead (tr… (objectui `d44279598`)
+  - **patch** — Studio 页面设计器不再为 canonical `page:header` 提供 `icon` 编辑框(objectui#3829) (objectui `183d09b78`)
+  - **patch** — The allow-list of option widgets that are fed the live record is now one exported constant, `CASCADE_OPTION_WIDGET_TYPES`, instead of three private copies. (objectui `bbe8b86e8`)
+  - **patch** — `SidebarNav`'s README example teaches the shape the component actually reads. (objectui `8a9deceea`)
+  - **patch** — A readonly group-labelled field is now DESCRIBED by its own help text, not just named by its label. (objectui `0bffb1848`)
+  - **patch** — The "modal target names no page" diagnostic is one message again, on all three surfaces (objectui `5574ed67d`)
+  - **patch** — `FilterBuilder` settles a row's operator when its **field** changes, instead of leaving an operator the new field's dropdown does not list. (objectui `c4533dc8f`)
+  - **patch** — Fix: a `drawer` form with no `sections` now renders the object's declared `fieldGroups` as sections, matching `ObjectForm` and `ModalForm`. (objectui `9b20dea36`)
+  - **patch** — The form's cascade clear now recognises object-form fields, so a narrowed option list no longer submits a stale value. (objectui `78c0f9ae8`)
+  - **patch** — `DashboardWidgetSchema`: stop re-typing the retired `responsive` key as `any` (objectui `7f96b10e8`)
+  - **patch** — Fix: a `drawer` form with no `sections` now honours the object's field-level conditional rules (`visibleWhen` / `readonlyWhen` / `requiredWhen`) and field `group`. (objectui `469b60493`)
+  - **patch** — The console's embedded index editor no longer offers controls for keys the spec removed. (objectui `9a3d04e4e`)
+  - **patch** — A bulk action dialog's per-option `visibleWhen` predicates now read the dialog's own in-progress param values. (objectui `9aecabe18`)
+  - **patch** — `FilterBuilder` gives the set and range operators an input that matches the value shape the spec accepts, and stops minting the shape it refuses. (objectui `2b5026136`)
+  - **patch** — A create form no longer deadlocks on a `requiredWhen` field that also declares a runtime `defaultValue`. (objectui `d971e51c0`)
+  - **patch** — An action dialog's per-option `visibleWhen` predicates now read the dialog's own in-progress param values. (objectui `2646ccb72`)
+  - **patch** — The config panel footer translates: `ConfigPanelRenderer`'s Save / Discard labels come from the locale pack. (objectui `2e82ab2ae`)
+  - **patch** — The dashboard config sidebar translates: `WidgetConfigPanel` and `DashboardConfigPanel` are wired through `t()`. (objectui `ef0d1502f`)
+  - **patch** — Fix a list filter that silently applied nothing when the first thing you picked was **Is null** or **Is not null**. (objectui `138ab04d5`)
+  - **patch** — Delete two dead i18n namespaces — `configPanel.*` (16 keys) and `renderer.*` (13 keys) — from all ten locale packs. (objectui `f34226ea9`)
+  - **patch** — The list filter builder no longer offers `Is set` / `Is not set`, which its query dialects cannot express. (objectui `616a2a547`)
+  - **patch** — Delete two dead i18n namespaces — `workflow.*` (58 keys) and `publicForm.demo.*` (36 keys) — from all ten locale packs. (objectui `564b60523`)
+  - …and 21 more releasing changesets in this range (list capped at 100; see the objectui range below).
+  
+  ⚠️ 10 of these carry a breaking change: 10 by the author's own breaking annotation in the changeset body — objectui declares no `major` inside a launch window (`scripts/check-changeset-no-major.mjs`). Each is marked **BREAKING** in the list above — read them before compiling the release record.
+  
+  **In this console build, declared nowhere** — objectui merged 30 commits in this range with no `.changeset/*.md`. The code is inside the pin above and ships here, but nothing upstream declared them, so they appear in no objectui CHANGELOG and in no entry above. Listed by subject rather than counted, because a count cannot tell a dependency bump from a form-behaviour change (objectstack#6174); the upstream gate that would prevent this is objectui#3387.
+  
+  - _(no changeset)_ chore(deps-dev): bump the dev-dependencies group across 1 directory with 11 updates (#4948) (objectui `590dd6356`)
+  - _(no changeset)_ chore(deps): bump @objectstack/lint from 17.0.0-rc.6 to 17.0.0 (#4954) (objectui `e609aacc5`)
+  - _(no changeset)_ chore(deps): bump lucide-react from 1.29.0 to 1.31.0 (#4959) (objectui `c1454a2d9`)
+  - _(no changeset)_ chore(deps): bump @objectstack/client from 17.0.0-rc.6 to 17.0.0 (#4960) (objectui `ed3e55c34`)
+  - _(no changeset)_ chore(deps): bump @objectstack/formula from 17.0.0-rc.6 to 17.0.0 (#4955) (objectui `080fa918f`)
+  - _(no changeset)_ chore(deps): bump @objectstack/spec from 17.0.0-rc.6 to 17.0.0 (#4953) (objectui `7484f7f0a`)
+  - _(no changeset)_ chore(deps): bump @sentry/react from 10.69.0 to 10.70.0 (#4957) (objectui `7e3342ea1`)
+  - _(no changeset)_ chore(deps): bump maplibre-gl from 6.2.0 to 6.3.0 (#4956) (objectui `4e35868f1`)
+  - _(no changeset)_ chore(deps-dev): bump rollup-plugin-visualizer from 7.0.1 to 7.1.1 (#4951) (objectui `4e8579f01`)
+  - _(no changeset)_ chore(deps): bump react-hook-form in the react group (#4949) (objectui `33916566e`)
+  - _(no changeset)_ chore(deps): bump the patch-updates group with 8 updates (#4946) (objectui `37e561f49`)
+  - _(no changeset)_ docs(skills): 三份指南改教发布态 style.css 导入,停教扫 node_modules 源码 (#4866) (objectui `5d7a655f6`)
+  - _(no changeset)_ fix(lint): honour the `_` prefix convention in no-unused-vars (#4835) (#4844) (objectui `815cad03d`)
+  - _(no changeset)_ chore(tsconfig): drop six dead compilerOptions.paths entries and guard the table (#4804) (#4825) (objectui `610de765f`)
+  - _(no changeset)_ docs(fields): grid.mdx / location.mdx teach the registered plugin types (#4796) (#4822) (objectui `80aa1ac6f`)
+  - _(no changeset)_ docs(skills): auth-permissions 的 hidden 示例改用 data. 根,并写清表达式作用域 (#4813) (objectui `64553a851`)
+  - _(no changeset)_ test(config): drop four dead vitest alias entries and pin that every target exists (#4802) (objectui `f2dc8fa96`)
+  - _(no changeset)_ docs(skills,docs,site): 教学面停止教 `props` 信封,键提回节点 (#4786) (#4800) (objectui `5a3c06afb`)
+  - _(no changeset)_ docs(skills,site,agents): 教学面改用声明键 columns,停止教未声明的 cols (#4011) (#4785) (objectui `db8184cd9`)
+  - _(no changeset)_ feat(lint): ban OData query params nested under a dead `options` key (objectui#4734) (#4741) (objectui `af460fb6d`)
+  - _(no changeset)_ chore(components): remove unread, unpublished component.yml metadata files (#4732) (objectui `baa89a1ea`)
+  - _(no changeset)_ fix(examples): add required value keys to basic-accordion.json items (#4729) (objectui `099656deb`)
+  - _(no changeset)_ docs(accordion): rewrite Schema block to match the real AccordionSchema/AccordionItem interface (#4727) (objectui `466ce43b5`)
+  - _(no changeset)_ fix(i18n): apply the count reservation per direction, not to shared holes (#4719) (objectui `966235ebe`)
+  - _(no changeset)_ fix(scripts): bound shadcn-sync registry requests with a 10s timeout (#4715) (objectui `21c4e5236`)
+  - _(no changeset)_ fix(examples): pin the two plugin-calendar catalog entries onto their own events (#4627) (#4667) (objectui `aab597df9`)
+  - _(no changeset)_ fix(docs): toggle-group schema teaches selectionType, not type, for selection mode (#4665) (objectui `6d4f5bd59`)
+  - _(no changeset)_ fix(examples,scripts): regenerating the schema catalog stops discarding curated metadata (#4637) (objectui `1111fa1c0`)
+  - _(no changeset)_ docs: bump QUICK_REFERENCE.md Current Release to 17.5.0 (#4643) (objectui `902227752`)
+  - _(no changeset)_ chore: release packages (#4126) (objectui `5bf5d2cb6`)
+  
+  <!-- adr-0087: not-required (no-migration-prescription) All ten declared-breaking entries in this range are TypeScript-declaration or renderer-behaviour changes inside objectui's OWN npm packages, judged one by one against their upstream changesets rather than as a batch: `@object-ui/layout` (`mobileNavMode`'s retired third union member; the `app-shell` component-key deregistration), `@object-ui/app-shell` (a modal action's string `target` losing its object-name fallback), `@object-ui/data-objectstack` (the four remaining `v3.0.0 Deep Integration` modules), `@object-ui/types` + `@object-ui/components` (`AccordionItem.icon` / `ToggleGroupItem.icon` retiring, `disabled` wired on both), and `@object-ui/fields` + `@object-ui/plugin-form` (grid/line-item/master-detail columns keyed by the already-published `name` spelling instead of the never-published `field` read, objectui#3951/PR #4909 — the fix this pin bump exists to pick up). None of them is reachable through `@objectstack/console`, which publishes a frozen prebuilt SPA: its `files` list is `["dist", "README.md", "CHANGELOG.md"]` and its sole `exports` entry is `./package.json`, so it forwards no `@object-ui/*` module entry point and re-exports none of these types or components. The `name`-vs-`field` grid-column spelling is the one entry that touches an AUTHORABLE metadata key, and its spec-side half — `inlineColumns` / `relatedListColumns` now REJECTING the `field` spelling under a strict Zod schema — is objectstack#9227 / PR #9355, a separate, already-accepted PR carrying its own ADR-0087 disposition; that PR is not part of this diff (`packages/spec/src/**` is untouched here) and this bump does not re-answer it. No `packages/spec` schema, authorable metadata key or protocol surface changes in this range, so there is no stored-metadata rewrite for `objectstack migrate meta` to prescribe and therefore no ADR-0087 ledger entry to write or to name from THIS bump. -->
+  
+  objectui range: `665661ab0932...82a94170c405`
+- 7f0cfdb: Console (objectui) refreshed to `9a3daf8d37ad`. Frontend changes in this range:
+  
+  Derived from the changesets objectui declared over the range — 108 releasing of 125 changesets added across 151 non-merge commits; omitted: 17 release-nothing changesets, 27 commits carrying no changeset (they ship no package code).
+  
+  - **minor** — Remove the published optional key `logo` from `AppShellBranding` (`@object-ui/layout`). (objectui `86f633fd9`)
+  - **minor** — Consume the declared nav `runAction` slot; retire the private `?runAction=` string convention (objectui `88085e3a2`)
+  - **minor** — fix(plugin-dashboard): `ObjectDataTable` resolves column identity before it hands columns to the table (objectui `58398ba52`)
+  - **minor** — **Breaking (published API):** `NavigationRenderer` no longer accepts `resolveGroupLabel` or `resolveItemLabel`. If your build just broke on one of these props, delete the prop — i… (objectui `9c60144b5`)
+  - **minor** — fix(plugin-grid): `ObjectGrid` reads the declared column spelling, and only it (objectui `dbbd38a09`)
+  - **minor** — fix(react): `bridgeListView` emits the column spelling the spec declares (objectui `dbbd38a09`)
+  - **minor** — Show the current organization in the console top bar for users with exactly one membership. (objectui `b8ce7dcd2`)
+  - **minor** — `object-view`: a top-level `conditionalFormatting` no longer reaches the kanban view. (objectui `d006ce19e`)
+  - **minor** — Form-field type resolution no longer falls back to `ui`-namespace SDUI node renderers. (objectui `232f61a45`)
+  - **minor** — **BREAKING** — `ObjectMetricWidgetProps` now speaks `@objectstack/spec`'s `I18nLabel` vocabulary on `label`, `trend.label`, `description` and `title`. (objectui `f6fc565b0`)
+  - **minor** — **BREAKING** — BREAKING: `dashboardComponents` is re-keyed from 11 PascalCase component class names to the 8 schema `type` keys the package actually registers (`dashboard`, `metric`, `metric-car… (objectui `4dbcae756`)
+  - **minor** — fix(components): call `FormSchema.onChange` — the declared callback the form renderer never invoked (objectui#4259) (objectui `56735762f`)
+  - **minor** — `ObjectView` and `ListView` now flatten a view's `map` block through a whitelist instead of spreading the whole (untyped) block to the top level. (objectui `0a73b51de`)
+  - **minor** — Align `FieldConstraintsSchema` (the zod face of `FormFieldSchema.validation`) to the public TS contract `FieldValidationRules`. Behaviour change in `objectui validate`: `validatio… (objectui `118419214`)
+  - **minor** — `DatasetReportRenderer` no longer reads `filter` as an alias for `runtimeFilter`. (objectui `a9452711b`)
+  - **minor** — **BREAKING** — Retire the structured `confirm` object on actions (objectui#4314, maintainer ruling 2026-08-17, ADR-0049 enforce-or-remove). `confirmText` is now the one confirm spelling — the on… (objectui `d2ce342fc`)
+  - **minor** — **BREAKING** — `FieldValidationRules.pattern.value` narrows to `RegExp`, and the form renderer reports unrecognized validation rule names loudly (objectui#5099, maintainer ruling 2026-08-18). (objectui `a2a974779`)
+  - **minor** — fix(fields): render the option colour an author declared as an explicit hex, instead of quantizing it to nine palette families (objectui#5141) (objectui `a09bc33ff`)
+  - **minor** — `ObjectMapSchema` declares what ObjectMap reads, and the `map` block outranks the flat spelling (objectui `578e02516`)
+  - **minor** — A form's ruled `submitBehavior.url` redirect can now be performed by the HOST, so a destination stays inside a console mounted at a sub-path (objectui#4989 defect 4). (objectui `8c0d52ece`)
+  - **patch** — Ship explicit extensions on every relative import specifier, so plain Node can load the published entry (objectui `0fd11444a`)
+  - **patch** — A `field:`-prefixed `password` no longer renders as clear text when its widget is not registered (objectui `aff10e283`)
+  - **patch** — DraftChangesPanel addresses `/meta` item routes in the singular (objectui `f2e11ae6f`)
+  - **patch** — Publish relative import specifiers with explicit `.js` extensions so these six packages load under plain Node ESM. (objectui `5458414a7`)
+  - **patch** — A metadata-admin option catalog now carries its own load state, so a picker cannot render a failed catalog as an empty one. (objectui `bdf8cf76e`)
+  - **patch** — Approvals Inbox: stop offering a record link that dead-ends for the viewer it is offered to. Approver routing goes by position while record visibility is a separate gate, so an ap… (objectui `8739c8e0b`)
+  - **patch** — Remove two unreachable renderer registrations, and fail the build on any new same-namespace duplicate. (objectui `2d0bd16d5`)
+  - **patch** — `ObjectGrid`'s inline add-record row now honours `can(object, 'create')` (objectui#5148). (objectui `3e0214c00`)
+  - **patch** — Fix the `GanttViewMode` JSDoc to name all five granularities (objectui#5132). (objectui `449ffe8b9`)
+  - **patch** — The approver membership-tier picker offers the tiers the server accepts, and a stored `delegated_admin` is no longer labelled "(invalid)". (objectui `c7a74c80d`)
+  - **patch** — `cloneAsOverride()` now returns `DeepMutable<T>`, so a Tenant/User override draft type-checks as the mutable value it has always been. (objectui `8477be5d2`)
+  - **patch** — `ObjectView` now forwards the canonical `table.columns` on the non-grid paths, not only on the grid one. (objectui `242660843`)
+  - **patch** — `container`: honour a declared `maxWidth: false` as "no maximum width" (objectui `3fbbea1f3`)
+  - **patch** — Removed the dead `require` condition from `exports["."]` in `@object-ui/types`'s `package.json`. It pointed at `dist/index.cjs`, a file the package's `"build": "tsc"` script (bare… (objectui `3cf4de0bf`)
+  - **patch** — The bulk-action dialog's "this widget needs a DataSource" rule now derives from the shared reference-field family instead of a fourth private copy. (objectui `2533ec557`)
+  - **patch** — A public form's thank-you countdown ("Redirecting in {{seconds}} seconds…") now actually counts down, instead of rendering a number once and leaving it frozen for the whole wait. (objectui `a954b4849`)
+  - **patch** — A report's embedded chart now paints its category dimension's own option colours and renders ordered-sequence charts (funnel/pyramid) in the field's declared picklist order — the… (objectui `cb5a7de2e`)
+  - **patch** — `objectui serve` gains `--no-open`, matching the flag `objectui dev` already ships, and no longer prints a bare `Error: spawn xdg-open ENOENT` stack after its success banner in a… (objectui `82fbc09d8`)
+  - **patch** — `page:header`'s `maxVisible` / `mobileMaxVisible` now honour the contract's value domain instead of a laxer renderer tolerance. (objectui `b8b9af4a2`)
+  - **patch** — Fix two pieces of `ObjectMap` state that stopped tracking their source after mount (objectui#5003): (objectui `687bc0cd4`)
+  - **patch** — `ObjectView` sends a named view's `sort` to the grid slot that can hold it — the declared sort now reaches both the header indicator and `$orderby`. (objectui `e22b9d714`)
+  - **patch** — API Console's endpoint catalog reads the canonical `storage` service slot first, falling back to the deprecated `file-storage` slot while the framework's v17 alias lives (objectui… (objectui `38ba3ddf3`)
+  - **patch** — The Studio Data pillar's form preview no longer rebuilds `ObjectForm`'s `fields` array on every render (#4574). (objectui `bfd4fc70f`)
+  - **patch** — A node writing both `properties` and `props` now gets ONE answer per key, and it is the canonical `properties` one — on both read channels. (objectui `70a774bc4`)
+  - **patch** — API Console's endpoint catalog drops the `workflow` and `feed` entries — 7 endpoint declarations that could never render on any host (objectui `092e2baf3`)
+  - **patch** — `buildChartSeries`' pivot branch preserves key ABSENCE, so a never-projected first dimension still reaches the framework#4033 placeholder. (objectui `31676be93`)
+  - **patch** — Fix the metadata seed cache delivering nothing on the boot right after a first login. (objectui `92b327a67`)
+  - **patch** — The built-in form's `default` fallback branch now enforces a declared `max_length` ceiling. (objectui `97fba31a2`)
+  - **patch** — `ObjectView` forwards the canonical `table` keys — `pagination` / `selection` / `filter` / `sort` now take effect, and the deprecated spellings keep working as aliases. (objectui `20bc99f74`)
+  - **patch** — A view personalization overlay no longer freezes the view it was laid over. `ObjectView`'s `persistViewPatch` sends `{ ...baseViewDef, ...patch }`, so a row written by a mere colu… (objectui `d871f8e05`)
+  - **patch** — Fix `packages/core/README.md`'s Component Registry example, which taught `new ComponentRegistry()` against an exported singleton **instance**, not a class — the built `packages/co… (objectui `41f498bcb`)
+  - **patch** — `predicate.ts`'s `in [...]` membership check now names an element it cannot parse instead of silently discarding the whole set. (objectui `2eb8db848`)
+  - **patch** — A failed field fetch in the metadata-admin `field-selector` picker now reads as a failure, not as "this object has no fields". (objectui `bc2922a82`)
+  - **patch** — A KPI card's sub-caption now translates from its own convention key (objectui `bea374ee7`)
+  - **patch** — Correct the published "works with the `api` data provider" claim for plugin-calendar, which `ObjectCalendar` does not implement. `data.provider: 'api'` reaches `console.warn('API… (objectui `1cd46bd0d`)
+  - **patch** — The built-in form `input` branch now honours a declared ceiling in both authored spellings. (objectui `460c4d0df`)
+  - **patch** — `objectui check` reads `.json` as JSONC, so a `tsconfig.json` no longer fails the run. (objectui `e6a8960f6`)
+  - **patch** — Sign-out now drops the client-side caches that belonged to the session it ends, and the metadata seed cache is keyed by session identity. (objectui `61b097c13`)
+  - **patch** — The metadata editor's option pickers and the Audit tab distinguish a FAILED load from a completed one that found nothing. (objectui `513e614f0`)
+  - **patch** — The `organizations.*` picker locale family (avatar menu / console picker — `mine`, `title`, `heading`, `subtitle`, `searchPlaceholder`, `new`, `current`, `emptyTitle`, `emptyDescr… (objectui `d109a4de1`)
+  - **patch** — Studio 页面设计器不再为 `page:accordion` 提供 `title` 与分区 `value` 编辑框(objectui#5212) (objectui `2d1909b77`)
+  - **patch** — Lookup "recently used" now obeys the field's declared filters. The recents rail re-fetched its rows without merging either `lookupFilters` or the `dependsOn` cascade, so a record… (objectui `6c68b13c9`)
+  - **patch** — Emit explicit file extensions on relative import specifiers, so the published entries can be imported by Node's own ESM resolver. (objectui `af5e292d0`)
+  - **patch** — A notification with no link now opens the full inbox from the bell instead of being consumed silently. (objectui `511fbca40`)
+  - **patch** — The form renderer's built-in `textarea` branch now honours a declared character cap the same way the registered `field:textarea` widget does. (objectui `0ae27f7d1`)
+  - **patch** — Metadata the console caches for one workspace is no longer read back in another. (objectui `8a1b7613e`)
+  - **patch** — The console's post-publish readiness re-check now belongs to the app it ran for. (objectui `37aed9cfb`)
+  - **patch** — An admin override of an approval now looks like one — before the click, and in the timeline afterwards. (objectui `57e668f13`)
+  - **patch** — Grid group headers, compact cards and kanban card badges honour an author-declared option hex, matching the grid cell. (objectui `feb6b161d`)
+  - **patch** — Notification deep links now open the record instead of the app landing page. (objectui `a11dc6f4f`)
+  - **patch** — Fix `record_header` actions dispatching without their record id while the record page is still loading. (objectui `6ca910bdf`)
+  - **patch** — Fix the two remaining `object/api/value` claims that objectui#5019 (PR #5162) left behind — its dispatch was scoped to only the "API Provider" section of `content/docs/plugins/plu… (objectui `084155eab`)
+  - **patch** — A map node's top-level `style` is inline CSS again, not a MapLibre style URL. (objectui `072085deb`)
+  - **patch** — `EmbeddableForm`'s thank-you redirect stops being mount-blind: an in-app destination now goes through the host's injected navigate. (objectui `d7be3bdf3`)
+  - **patch** — The metadata References panel distinguishes a FAILED reference check from a completed one that found nothing. (objectui `47e3407ed`)
+  - **patch** — The `/data` surface's "New" button now reads the whole CRUD affordance matrix, not just the permission. (objectui `2f73fef12`)
+  - **patch** — The object-list page's "New" button and its phone floating "+" now consume `userActions.create` predicates. (objectui `c2dc47719`)
+  - **patch** — The object list's Import button now honours `userActions.import`'s CEL predicates. (objectui `9f23d2b32`)
+  - **patch** — docs(plugin-report): teach the dataset-bound report as the sole authoring shape (objectui `0237208f1`)
+  - **patch** — `dev`, `serve` and `build` accept the documented directory argument from anywhere, and refuse a non-project directory in plain language. (objectui `51e65d423`)
+  - **patch** — `ObjectGrid`'s `editable` schema key now honours the caller's `update` permission. (objectui `b4089beca`)
+  - **patch** — Related-list "+ New" now honours `userActions.create` predicates, and the grid toolbar's inline-edit affordance is gated on `update` permission (objectui#4646, objectui#4647). (objectui `dfc697554`)
+  - **patch** — `record:quick_actions` reads the toolbar's accessible name under the spelling the ARIA contract accepts, and stops advertising an action fallback it never had. (objectui `7dd93c00a`)
+  - **patch** — The plugin-form documentation-site page now teaches the `validation` shape the form renderer actually reads, so a copied example validates instead of only looking as though it doe… (objectui `958d7573a`)
+  - **patch** — Dev builds now shout when an unevaluated `${…}` expression reaches the DOM. (objectui `144ef9b54`)
+  - **patch** — `span` renders the `value` its type and its published doc both declare, with child content winning when both are present. (objectui `787c73862`)
+  - **patch** — `objectui check`: the known-type list is now derived from the component registry instead of being a hand-written copy, which had drifted in both directions at once. (objectui `68d9e282c`)
+  - **patch** — Evaluate expressions written under a node's `properties`, not just under `props` (objectui `0046d8f8c`)
+  - **patch** — 修复相关列表(`RelatedList`)以 spec 规范拼写 `field` 声明的对象列只出表头、单元格全空的问题(objectui#5022)。 (objectui `229b17e36`)
+  - **patch** — `plugin-form` README: the "Integration with Data Sources" section now teaches the adapter's real path instead of two keys no form renderer reads. (objectui `bfb64ee09`)
+  - **patch** — The plugin-view documentation-site page now teaches the keys `ObjectView` actually reads, so a copied example renders instead of coming up empty. (objectui `99d5659df`)
+  - **patch** — fix(components): FilterBuilder 的 lookup 列不再因 `options: []` 被拒掉远程搜索 (objectui#5031) (objectui `93de4f69b`)
+  - **patch** — `object-grid` now declares its `data` input as the object its contract actually accepts, instead of as an array (objectui#5090). (objectui `27c9cbdf7`)
+  - **patch** — metadata-admin: scope the detail drawer's form ids so its labels stop addressing the page form's controls (objectui `3fd9f79c9`)
+  - **patch** — The plugin-grid documentation-site page now spells keys the grid actually reads. (objectui `b29488f3e`)
+  - **patch** — The plugin-view README now documents the keys `ObjectView` actually reads, so a copied example renders instead of coming up empty. (objectui `405d54e4d`)
+  - **patch** — Docs only: `packages/plugin-form/README.md`'s Schema API and Examples now spell the keys the form renderers actually read (objectui#5075). Three connected drifts, judged against t… (objectui `e09f9e898`)
+  - **patch** — metadata-admin 表单:嵌套字段 DOM id 按路径作用域,grid/table 单元格由列头命名 (objectui `fc1511152`)
+  - **patch** — `packages/plugin-dashboard/README.md`: two teaching snippets did not survive being copied. Both were verified against the package's **build artifact** (`dist/index.d.ts`) — export… (objectui `671c0d320`)
+  - **patch** — plugin-grid's README examples now spell keys the grid actually reads. (objectui `9fbb9b52f`)
+  - …and 8 more releasing changesets in this range (list capped at 100; see the objectui range below).
+  
+  ⚠️ 5 of these carry a breaking change: 5 by the author's own breaking annotation in the changeset body — objectui declares no `major` inside a launch window (`scripts/check-changeset-no-major.mjs`). Each is marked **BREAKING** in the list above — read them before compiling the release record.
+  
+  **In this console build, declared nowhere** — objectui merged 27 commits in this range with no `.changeset/*.md`. The code is inside the pin above and ships here, but nothing upstream declared them, so they appear in no objectui CHANGELOG and in no entry above. Listed by subject rather than counted, because a count cannot tell a dependency bump from a form-behaviour change (objectstack#6174); the upstream gate that would prevent this is objectui#3387.
+  
+  - _(no changeset)_ test(scripts): pin QUICK_REFERENCE's Current Release rows by literal equality (#4913) (#5385) (objectui `a20b81d04`)
+  - _(no changeset)_ fix(scripts): doc-snippet gate collects .md under content/docs, and states its scan surface (#5341) (objectui `383f8b486`)
+  - _(no changeset)_ docs(guide): objectstack.config.ts belongs to the server project — link it, do not re-type it (#5332) (objectui `00ddc4215`)
+  - _(no changeset)_ perf(console): keep the lazily-imported @objectstack/lint out of the eager chunk (#5323) (objectui `6d5368ac8`)
+  - _(no changeset)_ fix(ci): the cross-repo closer refuses a foreign PULL REQUEST, fails on a refusal, and gets a harness (#5295) (objectui `278b41f15`)
+  - _(no changeset)_ fix(ci): bound Chromium provisioning so a stalled apt mirror cannot cancel Build & E2E (#5308) (objectui `de4e29a81`)
+  - _(no changeset)_ feat(lint): reject an unpaired getBadgeColorClasses call (#5191) (#5292) (objectui `7260a1ed4`)
+  - _(no changeset)_ docs(plugin-view): re-teach the canonical table keys now that #5102 landed (#5289) (objectui `95cf24168`)
+  - _(no changeset)_ docs(agents): name the compliant sync route in the force-push ban clause (#5239) (#5288) (objectui `12841b617`)
+  - _(no changeset)_ docs(core): teach the real column-hydration shape in report-schema.mdx (#5275) (objectui `b1b0ace9b`)
+  - _(no changeset)_ ci(lint): run the CLI's own check command against this repository (#5273) (objectui `a369c2b76`)
+  - _(no changeset)_ docs(plugin-form): fix pattern.value Type column to RegExp-only (#5267) (objectui `87d9202b1`)
+  - _(no changeset)_ docs: stop teaching imports five published pages do not export (#5260) (objectui `ebbafa59c`)
+  - _(no changeset)_ fix(examples): lowercase hello-world schema node types to registered keys (#5244) (objectui `6b73232d6`)
+  - _(no changeset)_ docs(blocks): teach a validation shape the input node actually declares (#5229) (#5251) (objectui `a40b571e5`)
+  - _(no changeset)_ test(scripts): doc-version-claims 扫描面加上 skills/,四处脚手架字面量入锚 (#4981) (#5084) (objectui `27273fe86`)
+  - _(no changeset)_ docs(skills): skill 入口与 project-setup evals 停教/停评「加 @source 扫 ObjectUI 包」 (#4930) (objectui `7d900dee6`)
+  - _(no changeset)_ docs(skills): 脚手架指南的四处版本字面量改回仓内实测值 (#4981) (#5080) (objectui `2315d2139`)
+  - _(no changeset)_ docs(skills): 「Iteration scopes」整节改写为实测的 data-as-nodes 形态 (#5124) (objectui `675589a6e`)
+  - _(no changeset)_ test(scripts): side-effects 门读全 24 张 vite alias 表,70 → 196 条 (#5158) (#5167) (objectui `a8af6510b`)
+  - _(no changeset)_ feat(scripts): compile documentation snippets against the built types (#5138) (#5161) (objectui `7a1cc6881`)
+  - _(no changeset)_ chore(plugin-editor): 移除被跟踪的 Vite temp-config 冻结产物 (#5159) (objectui `cdac3cc20`)
+  - _(no changeset)_ fix(docs): AGENTS.md heredoc example no longer carries shell-escape residue (#5150) (#5152) (objectui `da6eda06e`)
+  - _(no changeset)_ docs(agents): §9 gains the shared-scratchpad rule — keep commit messages and PR bodies off shared disk (#5135) (objectui `cdfdfe7f6`)
+  - _(no changeset)_ docs(plugin-form): TypeScript Support 块的 import 改指真身 @object-ui/types (#5119) (objectui `8378e9954`)
+  - _(no changeset)_ docs(plugin-dashboard): 文档站页的手动注册段按真实 register 键面重写 (#5104) (objectui `d729ce09e`)
+  - _(no changeset)_ docs(plugins): 三个插件文档页按真实 register 键表重写虚构的 `*Components` 手动注册 (#5085) (objectui `a0f6f0eb5`)
+  
+  <!-- adr-0087: not-required (no-migration-prescription) RE-DERIVED for the grown range `82a94170c405...9a3daf8d37ad` (151 non-merge commits, 108 releasing changesets), not carried over from the previous bump: the range gained exactly two commits — objectui `413629a89` (docs/skills, plus one pin test) and `9a3daf8d3` (objectui#5390, build-config only) — and BOTH ship an empty-frontmatter, release-nothing changeset, so the declared-breaking set did NOT grow with the range. It is still the same FIVE entries, and each is judged again one at a time against its upstream changeset rather than as a batch. All five are TypeScript-declaration, React-prop or export-map changes inside objectui's OWN npm packages. `@object-ui/layout` + `@object-ui/app-shell` + `@object-ui/i18n` (objectui `9c60144b5`): `NavigationRenderer` drops the id-keyed props `resolveGroupLabel` and `resolveItemLabel`, which the renderer's `isCustomized` guard made structurally unreachable; app-navigation localization is already owned by the server-side `/meta` boundary (`translateApp`, `packages/spec/src/system/i18n-resolver.ts`, re-measured present at this HEAD), which this bump does not touch. `@object-ui/plugin-dashboard` (objectui `f6fc565b0`): `ObjectMetricWidgetProps` adopts the `I18nLabel` vocabulary on four members — a WIDENING of a props interface that catches objectui up to a retirement `@objectstack/spec` had already performed at 17.0.0-rc.6 (objectstack#5055); that retirement's ledger answer belongs to it and is not re-answered here. `@object-ui/plugin-dashboard` (objectui `4dbcae756`): `dashboardComponents` is re-keyed to the eight schema `type` keys the package registers — a JS export map's keys, not an authorable metadata key, with zero in-tree consumers measured upstream. `@object-ui/types` + `@object-ui/core` + `@object-ui/plugin-grid` (objectui `d2ce342fc`): the structured `confirm` OBJECT on actions becomes a `?: never` tombstone in objectui's own type. On this repo's side `ActionSchema` is untouched by this diff and still declares `confirm` as a LIVE alias of `confirmText` (`packages/spec/src/ui/action.zod.ts`, re-measured at this HEAD), so the authorable surface an ObjectStack app writes is unchanged and no stored action row needs rewriting; the structured object form was never spec-authorable, and the upstream changeset says so. `@object-ui/types` + `@object-ui/components` (objectui `a2a974779`): `FieldValidationRules.pattern.value` narrows to `RegExp`, which is hand-written-TypeScript-only by construction — JSON metadata cannot hold a RegExp — and the upstream changeset states the metadata route is unaffected, `FieldSchema.pattern` staying a string compiled by `buildValidationRules`. None of the five is reachable through `@objectstack/console` in any case, re-measured against `packages/console/package.json` at this HEAD: it publishes a frozen prebuilt SPA whose `files` list is `["dist", "README.md", "CHANGELOG.md"]` and whose sole `exports` entry is `./package.json`, so it forwards no `@object-ui/*` module entry point and re-exports none of these types, props or maps. This diff is `.objectui-sha` plus this changeset and nothing else — no `packages/spec` schema, authorable metadata key or protocol surface changes in it — so there is no stored-metadata rewrite for `objectstack migrate meta` to prescribe, and therefore no ADR-0087 ledger entry to write or to name from THIS bump. -->
+  
+  objectui range: `82a94170c405...9a3daf8d37ad`
+
+### Patch Changes
+
+- fc89098: fix(devx): the vendored Console SPA bundles THIS tree's `@objectstack/spec`, so a newly declared authorable key is reachable in the Studio designer on the day it lands (#8134)
+  
+  `scripts/build-console.sh` injected only `OBJECTSTACK_CLIENT_DIST`. The console's
+  `@objectstack/spec` therefore always came from objectui's own lockfile, resolved
+  under `pnpm install --frozen-lockfile` — which means the **published** spec, never
+  this workspace's.
+  
+  That made a whole class of change silently unreachable: an authorable key added to
+  `packages/spec` after the last spec publish is accepted and round-tripped by the
+  server, while the Studio designer — bundled against the published spec — rejects it
+  as an unrecognized key and refuses to auto-save. The framework-side card closes
+  green the whole time, because `packages/spec`'s own pins pass. Reaching the key took
+  three ordered cross-repo steps: spec publishes, objectui refreshes its lockfile, the
+  console pin moves.
+  
+  The skew was not hypothetical at the time of this change: **102** schema description
+  strings declared in this tree's `packages/spec` were absent from the
+  `@objectstack/spec@17.0.0` the pinned objectui lockfile installs.
+  
+  `build-console.sh` now exports `OBJECTSTACK_SPEC_DIST` alongside the client
+  injection, mirroring it including its preflight:
+  
+  - a **hook-presence guard** that refuses the build, naming the pin, when the pinned
+    objectui predates the `OBJECTSTACK_SPEC_DIST` hook — an unguarded injection would
+    quietly rebuild the exact silent skew this change exists to end;
+  - a **build guard** that builds `packages/spec` when it is not built, keyed on both
+    `dist/index.mjs` and `json-schema/openapi.json`, because the spec's exports map
+    has one entry (`./openapi.json`) that a different generator produces;
+  - a **bundle assertion** that proves the injection actually landed.
+  
+  The assertion is deliberately not a frozen literal like the client's canary. It
+  derives a witness on every run — a description string this tree's spec has and the
+  vendored one lacks — and pairs it with a control string both carry, so an absent
+  witness is told apart from an unbundled entry. A frozen literal would be carried by
+  the published spec within one release and pass forever while proving nothing, which
+  is the same silent-pass failure this change removes.
+  
+  Consumers see no API change; the shipped console simply matches the framework
+  release it is published with.
+
 ## 17.0.0
 
 ### Minor Changes

package/dist/.objectstack-injection.json

@@ -0,0 +1,13 @@
+{
+  "stampVersion": 1,
+  "generatedBy": "scripts/assert-console-spec-injection.mjs",
+  "packages": [
+    {
+      "name": "@objectstack/spec",
+      "injectedFrom": "/home/runner/work/objectstack/objectstack/packages/spec",
+      "skew": true,
+      "freshWitness": "Dotted config path inside the submitted seed set (`seeds.0.mode`), so an author can jump to the offending key. May be empty for a whole-request finding.",
+      "staleDetector": "2X large border radius (e.g., 1rem)"
+    }
+  ]
+}

package/dist/.objectui-sha

@@ -1 +1 @@
-665661ab093263f39f2e660a295ea615dbcee35a
+190fbd01d0615e2e168faf9e08b8ad7844bc039d

package/dist/assets/AdapterProvider-gULVLpjV.js

@@ -0,0 +1,3 @@
+import{o as e}from"./rolldown-runtime-C0FnF6B9.js";import{b as t,r as n}from"./vendor-react-CsWFRkED.js";import{x as r}from"./infrastructure-BCTDJsqi.js";import{N as i,O as a,et as o,o as s}from"./framework-BwfIhdyz.js";import{r as c}from"./vendor-ui-utils-BFw4cGI6.js";var l=e(t(),1),u=0,d=new Set,f=[];function p(){for(let e of d)try{e(u)}catch{}if(u===0&&f.length>0){let e=f;f=[];for(let t of e)try{t()}catch{}}}function m(){u+=1,p()}function h(){u=Math.max(0,u-1),p()}function g(){return u}function _(){return u===0}function v(e){return d.add(e),()=>{d.delete(e)}}function y(e=1e4){return u===0?Promise.resolve():new Promise(t=>{let n=!1,r=()=>{n||(n=!0,t())};f.push(r),e>0&&typeof setTimeout<`u`&&setTimeout(r,e)})}function b(e){return(async(...t)=>{m();try{return await e(...t)}finally{h()}})}function x(){if(typeof window>`u`)return;let e=window,t=e.__objectui??={};Object.defineProperty(t,"pendingRequests",{get:g,configurable:!0}),Object.defineProperty(t,"idle",{get:_,configurable:!0}),t.whenIdle=y,t.subscribe=v}async function S(e,t,n){let r;try{r=(await e.getObjectSchema(t))?.fields}catch{}return e=>n(t,e,r?.[e]?.label||e)}var C={readonly:(e,t)=>e(`detail.writeStrippedReadonly`,{fields:t,defaultValue:`Read-only, so it did not take effect: {{fields}}`}),readonly_when:(e,t)=>e(`detail.writeStrippedByState`,{fields:t,defaultValue:`Not editable in this record's current state, so it did not take effect: {{fields}}`}),primary_key:(e,t)=>e(`detail.writeStrippedPrimaryKey`,{fields:t,defaultValue:`The record's identifier cannot be changed by a save, so it did not take effect: {{fields}}`})},w=(e,t)=>e(`detail.writeStrippedUnknownReason`,{fields:t,defaultValue:`Not applied by the server: {{fields}}`});function T(e){return C[e]??w}async function E(e,t,n,r,i){let a=new Map;for(let t of e.droppedFields){let e=a.get(t.reason)??[];for(let n of t.fields)e.includes(n)||e.push(n);a.set(t.reason,e)}if(a.size===0)return;let o=n&&e.resource?await S(n,e.resource,r):e=>e,s=[];for(let[e,n]of a){if(n.length===0)continue;let r=n.map(o).join(`, `);s.push(T(e)(t,r))}s.length!==0&&i.warning(t(`detail.writeStrippedTitle`,{defaultValue:`Saved — but some fields did not take effect`}),{description:s.join(`
+`)})}var D=1e4;function O(e){let t=e.where?`[${e.rule}] ${e.where}`:`[${e.rule}]`,n=e.hint?` ${e.hint}`:``;return`${t} — ${e.message}${n}`}function k(e,t,n){!e.advisories||e.advisories.length===0||n.warning(t(`console.saveAdvisoryTitle`,{count:e.advisories.length,defaultValue:`Saved — the authoring check raised {{count}} advisory finding(s)`}),{description:e.advisories.map(O).join(`
+`),duration:D})}var A=n();function j({children:e,adapter:t}){let[n,u]=(0,l.useState)(t??null),{t:d}=i(),f=(0,l.useRef)(d);f.current=d;let{fieldLabel:p}=a(),m=(0,l.useRef)(p);return m.current=p,(0,l.useEffect)(()=>{if(t){u(t);return}let e=!1,n,i;x();async function a(){try{let t=new s({baseUrl:``,fetch:b(r()),autoReconnect:!0,maxReconnectAttempts:5,reconnectDelay:1e3,cache:{maxSize:50,ttl:3e5}});n=t.onWriteWarning(e=>{E(e,f.current,t,m.current,c)}),i=t.onSaveAdvisory(e=>{k(e,f.current,c)}),await t.connect(),e||u(t)}catch(t){e||console.error(`[Console] Failed to initialize:`,t)}}return a(),()=>{e=!0,n?.(),i?.()}},[t]),(0,A.jsx)(o.Provider,{value:n,children:e})}export{k as n,b as r,j as t};

package/dist/assets/AiPendingActionsPage-CyG11hX9.js

@@ -0,0 +1 @@
+import{o as e}from"./rolldown-runtime-C0FnF6B9.js";import{b as t,r as n}from"./vendor-react-CsWFRkED.js";import{n as r}from"./plugin-chatbot-mxoQfkdx.js";var i=e(t(),1),a=n();function o(){let e={BASE_URL:`./`,DEV:!1,MODE:`production`,PROD:!0,SSR:!1,VITE_SERVER_URL:``,VITE_USE_MOCK_SERVER:`false`},t=e.VITE_AI_BASE_URL;return t?t.replace(/\/$/,``):`${(e.VITE_SERVER_URL??``).replace(/\/$/,``)}/api/v1/ai`}function s(){let e=(0,i.useMemo)(()=>o(),[]);return(0,a.jsxs)(`div`,{className:`p-6 max-w-6xl mx-auto`,children:[(0,a.jsxs)(`div`,{className:`mb-4`,children:[(0,a.jsx)(`h1`,{className:`text-2xl font-semibold`,children:`AI Approvals`}),(0,a.jsx)(`p`,{className:`text-sm text-muted-foreground mt-1`,children:`Review actions an AI agent proposed. Approve to execute them server-side; reject to send a reason back to the model so it can revise the next turn.`})]}),(0,a.jsx)(r,{apiBase:e,variant:`card`,title:`Queue`,description:`Polled every 5 seconds. Decisions are recorded under your identity.`})]})}export{s as AiPendingActionsPage,s as default};