@objectstack/platform-objects 11.6.0 → 11.9.0

package/dist/index.js

@@ -23,7 +23,7 @@ var SysUser = data.ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "email", "email_verified"],
+  highlightFields: ["name", "email", "email_verified"],
   // Custom actions — generic CRUD is suppressed because user accounts are
   // managed by better-auth, but we still need first-class affordances for
   // common operations. Each action delegates to a Console-side named script
@@ -549,7 +549,7 @@ var SysSession = data.ObjectSchema.create({
   nameField: "user_id",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "Session \u2014 {user_id}",
-  compactLayout: ["user_id", "ip_address", "expires_at"],
+  highlightFields: ["user_id", "ip_address", "expires_at"],
   // Custom actions — sessions are managed by better-auth (generic CRUD
   // suppressed). "Sign out other devices" is the high-value self-service
   // affordance every IdP exposes. Maps to better-auth's
@@ -734,7 +734,7 @@ var SysAccount = data.ObjectSchema.create({
   },
   description: "OAuth and authentication provider accounts",
   titleFormat: "{provider_id} - {account_id}",
-  compactLayout: ["provider_id", "user_id", "account_id"],
+  highlightFields: ["provider_id", "user_id", "account_id"],
   // Custom actions — sysadmins routinely need to revoke a user's OAuth
   // link (e.g. when an SSO provider is decommissioned or the user
   // requests it). Better-auth exposes `/unlink-account { providerId,
@@ -925,7 +925,7 @@ var SysVerification = data.ObjectSchema.create({
   },
   description: "Email and phone verification tokens",
   titleFormat: "Verification for {identifier}",
-  compactLayout: ["identifier", "expires_at", "created_at"],
+  highlightFields: ["identifier", "expires_at", "created_at"],
   fields: {
     id: data.Field.text({
       label: "Verification ID",
@@ -997,7 +997,7 @@ var SysOrganization = data.ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "slug"],
+  highlightFields: ["name", "slug"],
   // Custom actions — generic CRUD is suppressed (better-auth-managed),
   // but admins still need to create new orgs from the Setup app.
   actions: [
@@ -1228,7 +1228,7 @@ var SysMember = data.ObjectSchema.create({
   // '{user_id} in {organization_id}' format renders "… in null". User + role
   // identifies the membership in both single- and multi-org deployments.
   titleFormat: "{user_id} ({role})",
-  compactLayout: ["user_id", "organization_id", "role"],
+  highlightFields: ["user_id", "organization_id", "role"],
   // Row-level actions: better-auth `organization/update-member-role` and
   // `organization/remove-member`. Generic CRUD is suppressed on better-auth
   // managed tables, so these are the canonical edit/delete entry points.
@@ -1398,7 +1398,7 @@ var SysInvitation = data.ObjectSchema.create({
   // single-org mode (renders "Invitation to null"), and the recipient email is
   // the more useful identifier in both modes anyway.
   titleFormat: "Invitation for {email}",
-  compactLayout: ["email", "organization_id", "status"],
+  highlightFields: ["email", "organization_id", "status"],
   // Custom actions — generic CRUD is suppressed (better-auth-managed).
   // Mirror the `invite_user` toolbar action from sys_user here so admins
   // landing on the Invitations page get an obvious entry point.
@@ -1621,7 +1621,7 @@ var SysTeam = data.ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "organization_id"],
+  highlightFields: ["name", "organization_id"],
   // Custom actions calling better-auth's team endpoints. Generic CRUD is
   // suppressed (managedBy: 'better-auth'), so these are the canonical
   // entry points for create/update/delete.
@@ -1776,7 +1776,7 @@ var SysTeamMember = data.ObjectSchema.create({
   },
   description: "Team membership records linking users to teams",
   titleFormat: "{user_id} in {team_id}",
-  compactLayout: ["user_id", "team_id", "created_at"],
+  highlightFields: ["user_id", "team_id", "created_at"],
   // Custom actions calling better-auth's team-member endpoints. Generic
   // CRUD is suppressed (managedBy: 'better-auth') so these are the
   // canonical add/remove entry points.
@@ -1869,7 +1869,7 @@ var SysBusinessUnit = data.ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "kind", "parent_business_unit_id", "manager_user_id"],
+  highlightFields: ["name", "kind", "parent_business_unit_id", "manager_user_id"],
   listViews: {
     // Org chart — the hierarchy view. Surfaces the self-referencing
     // `parent_business_unit_id` tree (ADR-0057 D2) as an indented, expand/
@@ -2052,7 +2052,7 @@ var SysBusinessUnitMember = data.ObjectSchema.create({
   managedBy: "platform",
   description: "User assignment to a business unit (matrix-org friendly, effective-dated).",
   titleFormat: "{user_id} in {business_unit_id}",
-  compactLayout: ["user_id", "business_unit_id", "role_in_business_unit", "is_primary"],
+  highlightFields: ["user_id", "business_unit_id", "role_in_business_unit", "is_primary"],
   fields: {
     id: data.Field.text({
       label: "Member ID",
@@ -2144,7 +2144,7 @@ var SysApiKey = data.ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "prefix", "user_id", "expires_at", "revoked"],
+  highlightFields: ["name", "prefix", "user_id", "expires_at", "revoked"],
   // Custom actions — sys_api_key is managed-by 'better-auth' but the
   // `revoked` boolean is a column we control via the data API. These row
   // actions use the generic PATCH /api/v1/sys_api_key/{id} endpoint with
@@ -2333,7 +2333,7 @@ var SysTwoFactor = data.ObjectSchema.create({
   },
   description: "Two-factor authentication credentials",
   titleFormat: "Two-factor for {user_id}",
-  compactLayout: ["user_id", "created_at"],
+  highlightFields: ["user_id", "created_at"],
   listViews: {
     mine: {
       type: "grid",
@@ -2489,7 +2489,7 @@ var SysDeviceCode = data.ObjectSchema.create({
   nameField: "user_code",
   // [ADR-0079] canonical primary-title pointer (single-field titleFormat)
   titleFormat: "{user_code}",
-  compactLayout: ["user_code", "status", "client_id", "expires_at"],
+  highlightFields: ["user_code", "status", "client_id", "expires_at"],
   fields: {
     id: data.Field.text({
       label: "Device Code ID",
@@ -2584,7 +2584,7 @@ var SysUserPreference = data.ObjectSchema.create({
   nameField: "key",
   // [ADR-0079] canonical primary-title pointer (single-field titleFormat)
   titleFormat: "{key}",
-  compactLayout: ["user_id", "key"],
+  highlightFields: ["user_id", "key"],
   listViews: {
     mine: {
       type: "grid",
@@ -2681,7 +2681,7 @@ var SysOauthApplication = data.ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "client_id", "type", "disabled"],
+  highlightFields: ["name", "client_id", "type", "disabled"],
   // Custom actions — all OAuth-application mutations are routed through
   // better-auth's `@better-auth/oauth-provider` endpoints (and a thin
   // ObjectStack-added auth route for the enable/disable toggle) rather
@@ -3081,7 +3081,7 @@ var SysOauthAccessToken = data.ObjectSchema.create({
     docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection"
   },
   description: "Opaque OAuth access tokens issued to client applications",
-  compactLayout: ["client_id", "user_id", "expires_at"],
+  highlightFields: ["client_id", "user_id", "expires_at"],
   fields: {
     id: data.Field.text({
       label: "ID",
@@ -3167,7 +3167,7 @@ var SysOauthRefreshToken = data.ObjectSchema.create({
     docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection"
   },
   description: "Opaque OAuth refresh tokens (linked to a session)",
-  compactLayout: ["client_id", "user_id", "expires_at"],
+  highlightFields: ["client_id", "user_id", "expires_at"],
   fields: {
     id: data.Field.text({
       label: "ID",
@@ -3257,7 +3257,7 @@ var SysOauthConsent = data.ObjectSchema.create({
     docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection"
   },
   description: "User consent records for OAuth client applications",
-  compactLayout: ["client_id", "user_id", "scopes"],
+  highlightFields: ["client_id", "user_id", "scopes"],
   fields: {
     id: data.Field.text({
       label: "ID",
@@ -3325,7 +3325,7 @@ var SysJwks = data.ObjectSchema.create({
     docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection"
   },
   description: "Asymmetric key pairs used to sign and verify issued JWTs",
-  compactLayout: ["id", "created_at", "expires_at"],
+  highlightFields: ["id", "created_at", "expires_at"],
   fields: {
     id: data.Field.text({
       label: "Key ID",
@@ -3398,7 +3398,7 @@ var SysSsoProvider = data.ObjectSchema.create({
   nameField: "provider_id",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{provider_id}",
-  compactLayout: ["provider_id", "issuer", "domain"],
+  highlightFields: ["provider_id", "issuer", "domain"],
   // All mutations go through @better-auth/sso's endpoints under
   // /api/v1/auth/sso/* (register / delete-provider) rather than the generic
   // data layer, so server-side config validation + secret handling run.
@@ -3640,7 +3640,7 @@ var SysScimProvider = data.ObjectSchema.create({
   nameField: "provider_id",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{provider_id}",
-  compactLayout: ["provider_id", "organization_id"],
+  highlightFields: ["provider_id", "organization_id"],
   listViews: {
     all: {
       type: "grid",
@@ -3716,7 +3716,7 @@ var SysNotification = data.ObjectSchema.create({
   nameField: "topic",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{topic}",
-  compactLayout: ["topic", "severity", "source_object", "created_at"],
+  highlightFields: ["topic", "severity", "source_object", "created_at"],
   listViews: {
     recent: {
       type: "grid",
@@ -3824,7 +3824,7 @@ var SysAttachment = data.ObjectSchema.create({
   managedBy: "platform",
   description: "Polymorphic link between a sys_file and any other record",
   titleFormat: "{file_name} \u2192 {parent_object}/{parent_id}",
-  compactLayout: ["created_at", "parent_object", "file_name", "mime_type", "size"],
+  highlightFields: ["created_at", "parent_object", "file_name", "mime_type", "size"],
   fields: {
     id: data.Field.text({
       label: "Attachment ID",
@@ -3944,7 +3944,7 @@ var SysEmail = data.ObjectSchema.create({
   nameField: "subject",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{subject}",
-  compactLayout: ["subject", "to", "status", "sent_at"],
+  highlightFields: ["subject", "to", "status", "sent_at"],
   fields: {
     id: data.Field.text({
       label: "Email ID",
@@ -4094,7 +4094,7 @@ var SysEmailTemplate = data.ObjectSchema.create({
   nameField: "label",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{label}",
-  compactLayout: ["name", "label", "category", "locale", "active"],
+  highlightFields: ["name", "label", "category", "locale", "active"],
   fields: {
     id: data.Field.text({
       label: "ID",
@@ -4232,7 +4232,7 @@ var SysSavedReport = data.ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "object_name", "format", "owner_id", "updated_at"],
+  highlightFields: ["name", "object_name", "format", "owner_id", "updated_at"],
   fields: {
     id: data.Field.text({
       label: "Report ID",
@@ -4320,7 +4320,7 @@ var SysReportSchedule = data.ObjectSchema.create({
   managedBy: "platform",
   description: "Recurring delivery of a sys_saved_report via email",
   titleFormat: "{report_id} \u2192 {recipients}",
-  compactLayout: ["report_id", "recipients", "interval_minutes", "active", "next_run_at"],
+  highlightFields: ["report_id", "recipients", "interval_minutes", "active", "next_run_at"],
   fields: {
     id: data.Field.text({
       label: "Schedule ID",
@@ -4452,7 +4452,7 @@ var SysJob = data.ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "schedule_type", "active", "last_run_at", "last_status"],
+  highlightFields: ["name", "schedule_type", "active", "last_run_at", "last_status"],
   fields: {
     id: data.Field.text({ label: "Job ID", required: true, readonly: true, group: "System" }),
     name: data.Field.text({
@@ -4522,7 +4522,7 @@ var SysJobRun = data.ObjectSchema.create({
   nameField: "job_name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{job_name} @ {started_at}",
-  compactLayout: ["job_name", "status", "started_at", "duration_ms", "attempt"],
+  highlightFields: ["job_name", "status", "started_at", "duration_ms", "attempt"],
   fields: {
     id: data.Field.text({ label: "Run ID", required: true, readonly: true, group: "System" }),
     job_name: data.Field.text({
@@ -4576,7 +4576,7 @@ var SysJobQueue = data.ObjectSchema.create({
   nameField: "queue",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{queue} #{id}",
-  compactLayout: ["queue", "status", "attempts", "scheduled_for", "last_error"],
+  highlightFields: ["queue", "status", "attempts", "scheduled_for", "last_error"],
   fields: {
     id: data.Field.text({ label: "Message ID", required: true, readonly: true, group: "System" }),
     queue: data.Field.text({
@@ -4688,7 +4688,7 @@ var SysImportJob = data.ObjectSchema.create({
   nameField: "object_name",
   // [ADR-0079] canonical primary-title pointer
   titleFormat: "{object_name} import @ {created_at}",
-  compactLayout: ["object_name", "status", "processed_rows", "total_rows", "created_at"],
+  highlightFields: ["object_name", "status", "processed_rows", "total_rows", "created_at"],
   fields: {
     id: data.Field.text({ label: "Job ID", required: true, readonly: true, group: "System" }),
     object_name: data.Field.text({
@@ -4768,7 +4768,7 @@ var SysSetting = data.ObjectSchema.create({
   nameField: "key",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{namespace}.{key}",
-  compactLayout: ["namespace", "key", "scope", "updated_at"],
+  highlightFields: ["namespace", "key", "scope", "updated_at"],
   listViews: {
     by_namespace: {
       type: "grid",
@@ -4918,7 +4918,7 @@ var SysSecret = data.ObjectSchema.create({
   isSystem: true,
   managedBy: "system",
   description: "Cipher store referenced by sys_setting handles. Never holds plaintext.",
-  compactLayout: ["namespace", "key", "kms_key_id", "version", "rotated_at"],
+  highlightFields: ["namespace", "key", "kms_key_id", "version", "rotated_at"],
   listViews: {
     all: {
       type: "grid",
@@ -5009,7 +5009,7 @@ var SysSettingAudit = data.ObjectSchema.create({
   isSystem: true,
   managedBy: "system",
   description: "Append-only audit trail for SettingsService mutations.",
-  compactLayout: ["namespace", "key", "scope", "action", "actor_id", "created_at"],
+  highlightFields: ["namespace", "key", "scope", "action", "actor_id", "created_at"],
   listViews: {
     recent: {
       type: "grid",
@@ -5245,9 +5245,19 @@ var SETUP_NAV_CONTRIBUTIONS = [
       { id: "nav_system_overview", type: "dashboard", label: "System Overview", dashboardName: "system_overview", icon: "activity" }
     ]
   },
-  // No group_apps contribution left here — both marketplace entries moved
-  // out (see header note); the group_apps shell anchor in setup.app.ts is
-  // filled entirely by capability plugins now.
+  {
+    // Package ADMINISTRATION is a platform/operator concern (ADR-0084:
+    // packages are Operate, out of the builder) — so its home is Setup, not
+    // the application builder. The console binds `developer:packages` to the
+    // existing package-management page. Building/creating apps is a separate
+    // journey (Home cover → /studio); this entry is for install/inspect/admin.
+    app: "setup",
+    group: "group_apps",
+    priority: BASE_PRIORITY,
+    items: [
+      { id: "nav_packages", type: "component", label: "Packages", componentRef: "developer:packages", icon: "package" }
+    ]
+  },
   {
     app: "setup",
     group: "group_people_org",
@@ -5391,6 +5401,19 @@ var STUDIO_APP = {
       label: "Overview",
       icon: "layout-dashboard",
       children: [
+        {
+          // The application builder's front door (ADR-0080/0084): pick or
+          // create a writable base package, then design in the full-screen
+          // pillar builder (/studio/:packageId/:tab). The console binds
+          // `studio:builder` to the BuilderLanding page — this makes the
+          // builder reachable from login (Home → Studio → App Builder)
+          // instead of being a URL-only surface.
+          id: "nav_app_builder",
+          type: "component",
+          label: "App Builder",
+          componentRef: "studio:builder",
+          icon: "hammer"
+        },
         {
           id: "nav_metadata_directory",
           type: "component",