@objectstack/platform-objects 11.6.0 → 11.9.0

package/dist/index.mjs

@@ -21,7 +21,7 @@ var SysUser = ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "email", "email_verified"],
+  highlightFields: ["name", "email", "email_verified"],
   // Custom actions — generic CRUD is suppressed because user accounts are
   // managed by better-auth, but we still need first-class affordances for
   // common operations. Each action delegates to a Console-side named script
@@ -547,7 +547,7 @@ var SysSession = ObjectSchema.create({
   nameField: "user_id",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "Session \u2014 {user_id}",
-  compactLayout: ["user_id", "ip_address", "expires_at"],
+  highlightFields: ["user_id", "ip_address", "expires_at"],
   // Custom actions — sessions are managed by better-auth (generic CRUD
   // suppressed). "Sign out other devices" is the high-value self-service
   // affordance every IdP exposes. Maps to better-auth's
@@ -732,7 +732,7 @@ var SysAccount = ObjectSchema.create({
   },
   description: "OAuth and authentication provider accounts",
   titleFormat: "{provider_id} - {account_id}",
-  compactLayout: ["provider_id", "user_id", "account_id"],
+  highlightFields: ["provider_id", "user_id", "account_id"],
   // Custom actions — sysadmins routinely need to revoke a user's OAuth
   // link (e.g. when an SSO provider is decommissioned or the user
   // requests it). Better-auth exposes `/unlink-account { providerId,
@@ -923,7 +923,7 @@ var SysVerification = ObjectSchema.create({
   },
   description: "Email and phone verification tokens",
   titleFormat: "Verification for {identifier}",
-  compactLayout: ["identifier", "expires_at", "created_at"],
+  highlightFields: ["identifier", "expires_at", "created_at"],
   fields: {
     id: Field.text({
       label: "Verification ID",
@@ -995,7 +995,7 @@ var SysOrganization = ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "slug"],
+  highlightFields: ["name", "slug"],
   // Custom actions — generic CRUD is suppressed (better-auth-managed),
   // but admins still need to create new orgs from the Setup app.
   actions: [
@@ -1226,7 +1226,7 @@ var SysMember = ObjectSchema.create({
   // '{user_id} in {organization_id}' format renders "… in null". User + role
   // identifies the membership in both single- and multi-org deployments.
   titleFormat: "{user_id} ({role})",
-  compactLayout: ["user_id", "organization_id", "role"],
+  highlightFields: ["user_id", "organization_id", "role"],
   // Row-level actions: better-auth `organization/update-member-role` and
   // `organization/remove-member`. Generic CRUD is suppressed on better-auth
   // managed tables, so these are the canonical edit/delete entry points.
@@ -1396,7 +1396,7 @@ var SysInvitation = ObjectSchema.create({
   // single-org mode (renders "Invitation to null"), and the recipient email is
   // the more useful identifier in both modes anyway.
   titleFormat: "Invitation for {email}",
-  compactLayout: ["email", "organization_id", "status"],
+  highlightFields: ["email", "organization_id", "status"],
   // Custom actions — generic CRUD is suppressed (better-auth-managed).
   // Mirror the `invite_user` toolbar action from sys_user here so admins
   // landing on the Invitations page get an obvious entry point.
@@ -1619,7 +1619,7 @@ var SysTeam = ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "organization_id"],
+  highlightFields: ["name", "organization_id"],
   // Custom actions calling better-auth's team endpoints. Generic CRUD is
   // suppressed (managedBy: 'better-auth'), so these are the canonical
   // entry points for create/update/delete.
@@ -1774,7 +1774,7 @@ var SysTeamMember = ObjectSchema.create({
   },
   description: "Team membership records linking users to teams",
   titleFormat: "{user_id} in {team_id}",
-  compactLayout: ["user_id", "team_id", "created_at"],
+  highlightFields: ["user_id", "team_id", "created_at"],
   // Custom actions calling better-auth's team-member endpoints. Generic
   // CRUD is suppressed (managedBy: 'better-auth') so these are the
   // canonical add/remove entry points.
@@ -1867,7 +1867,7 @@ var SysBusinessUnit = ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "kind", "parent_business_unit_id", "manager_user_id"],
+  highlightFields: ["name", "kind", "parent_business_unit_id", "manager_user_id"],
   listViews: {
     // Org chart — the hierarchy view. Surfaces the self-referencing
     // `parent_business_unit_id` tree (ADR-0057 D2) as an indented, expand/
@@ -2050,7 +2050,7 @@ var SysBusinessUnitMember = ObjectSchema.create({
   managedBy: "platform",
   description: "User assignment to a business unit (matrix-org friendly, effective-dated).",
   titleFormat: "{user_id} in {business_unit_id}",
-  compactLayout: ["user_id", "business_unit_id", "role_in_business_unit", "is_primary"],
+  highlightFields: ["user_id", "business_unit_id", "role_in_business_unit", "is_primary"],
   fields: {
     id: Field.text({
       label: "Member ID",
@@ -2142,7 +2142,7 @@ var SysApiKey = ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "prefix", "user_id", "expires_at", "revoked"],
+  highlightFields: ["name", "prefix", "user_id", "expires_at", "revoked"],
   // Custom actions — sys_api_key is managed-by 'better-auth' but the
   // `revoked` boolean is a column we control via the data API. These row
   // actions use the generic PATCH /api/v1/sys_api_key/{id} endpoint with
@@ -2331,7 +2331,7 @@ var SysTwoFactor = ObjectSchema.create({
   },
   description: "Two-factor authentication credentials",
   titleFormat: "Two-factor for {user_id}",
-  compactLayout: ["user_id", "created_at"],
+  highlightFields: ["user_id", "created_at"],
   listViews: {
     mine: {
       type: "grid",
@@ -2487,7 +2487,7 @@ var SysDeviceCode = ObjectSchema.create({
   nameField: "user_code",
   // [ADR-0079] canonical primary-title pointer (single-field titleFormat)
   titleFormat: "{user_code}",
-  compactLayout: ["user_code", "status", "client_id", "expires_at"],
+  highlightFields: ["user_code", "status", "client_id", "expires_at"],
   fields: {
     id: Field.text({
       label: "Device Code ID",
@@ -2582,7 +2582,7 @@ var SysUserPreference = ObjectSchema.create({
   nameField: "key",
   // [ADR-0079] canonical primary-title pointer (single-field titleFormat)
   titleFormat: "{key}",
-  compactLayout: ["user_id", "key"],
+  highlightFields: ["user_id", "key"],
   listViews: {
     mine: {
       type: "grid",
@@ -2679,7 +2679,7 @@ var SysOauthApplication = ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "client_id", "type", "disabled"],
+  highlightFields: ["name", "client_id", "type", "disabled"],
   // Custom actions — all OAuth-application mutations are routed through
   // better-auth's `@better-auth/oauth-provider` endpoints (and a thin
   // ObjectStack-added auth route for the enable/disable toggle) rather
@@ -3079,7 +3079,7 @@ var SysOauthAccessToken = ObjectSchema.create({
     docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection"
   },
   description: "Opaque OAuth access tokens issued to client applications",
-  compactLayout: ["client_id", "user_id", "expires_at"],
+  highlightFields: ["client_id", "user_id", "expires_at"],
   fields: {
     id: Field.text({
       label: "ID",
@@ -3165,7 +3165,7 @@ var SysOauthRefreshToken = ObjectSchema.create({
     docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection"
   },
   description: "Opaque OAuth refresh tokens (linked to a session)",
-  compactLayout: ["client_id", "user_id", "expires_at"],
+  highlightFields: ["client_id", "user_id", "expires_at"],
   fields: {
     id: Field.text({
       label: "ID",
@@ -3255,7 +3255,7 @@ var SysOauthConsent = ObjectSchema.create({
     docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection"
   },
   description: "User consent records for OAuth client applications",
-  compactLayout: ["client_id", "user_id", "scopes"],
+  highlightFields: ["client_id", "user_id", "scopes"],
   fields: {
     id: Field.text({
       label: "ID",
@@ -3323,7 +3323,7 @@ var SysJwks = ObjectSchema.create({
     docsUrl: "https://docs.objectstack.ai/adr/0010-metadata-protection"
   },
   description: "Asymmetric key pairs used to sign and verify issued JWTs",
-  compactLayout: ["id", "created_at", "expires_at"],
+  highlightFields: ["id", "created_at", "expires_at"],
   fields: {
     id: Field.text({
       label: "Key ID",
@@ -3396,7 +3396,7 @@ var SysSsoProvider = ObjectSchema.create({
   nameField: "provider_id",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{provider_id}",
-  compactLayout: ["provider_id", "issuer", "domain"],
+  highlightFields: ["provider_id", "issuer", "domain"],
   // All mutations go through @better-auth/sso's endpoints under
   // /api/v1/auth/sso/* (register / delete-provider) rather than the generic
   // data layer, so server-side config validation + secret handling run.
@@ -3638,7 +3638,7 @@ var SysScimProvider = ObjectSchema.create({
   nameField: "provider_id",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{provider_id}",
-  compactLayout: ["provider_id", "organization_id"],
+  highlightFields: ["provider_id", "organization_id"],
   listViews: {
     all: {
       type: "grid",
@@ -3714,7 +3714,7 @@ var SysNotification = ObjectSchema.create({
   nameField: "topic",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{topic}",
-  compactLayout: ["topic", "severity", "source_object", "created_at"],
+  highlightFields: ["topic", "severity", "source_object", "created_at"],
   listViews: {
     recent: {
       type: "grid",
@@ -3822,7 +3822,7 @@ var SysAttachment = ObjectSchema.create({
   managedBy: "platform",
   description: "Polymorphic link between a sys_file and any other record",
   titleFormat: "{file_name} \u2192 {parent_object}/{parent_id}",
-  compactLayout: ["created_at", "parent_object", "file_name", "mime_type", "size"],
+  highlightFields: ["created_at", "parent_object", "file_name", "mime_type", "size"],
   fields: {
     id: Field.text({
       label: "Attachment ID",
@@ -3942,7 +3942,7 @@ var SysEmail = ObjectSchema.create({
   nameField: "subject",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{subject}",
-  compactLayout: ["subject", "to", "status", "sent_at"],
+  highlightFields: ["subject", "to", "status", "sent_at"],
   fields: {
     id: Field.text({
       label: "Email ID",
@@ -4092,7 +4092,7 @@ var SysEmailTemplate = ObjectSchema.create({
   nameField: "label",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{label}",
-  compactLayout: ["name", "label", "category", "locale", "active"],
+  highlightFields: ["name", "label", "category", "locale", "active"],
   fields: {
     id: Field.text({
       label: "ID",
@@ -4230,7 +4230,7 @@ var SysSavedReport = ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "object_name", "format", "owner_id", "updated_at"],
+  highlightFields: ["name", "object_name", "format", "owner_id", "updated_at"],
   fields: {
     id: Field.text({
       label: "Report ID",
@@ -4318,7 +4318,7 @@ var SysReportSchedule = ObjectSchema.create({
   managedBy: "platform",
   description: "Recurring delivery of a sys_saved_report via email",
   titleFormat: "{report_id} \u2192 {recipients}",
-  compactLayout: ["report_id", "recipients", "interval_minutes", "active", "next_run_at"],
+  highlightFields: ["report_id", "recipients", "interval_minutes", "active", "next_run_at"],
   fields: {
     id: Field.text({
       label: "Schedule ID",
@@ -4450,7 +4450,7 @@ var SysJob = ObjectSchema.create({
   nameField: "name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{name}",
-  compactLayout: ["name", "schedule_type", "active", "last_run_at", "last_status"],
+  highlightFields: ["name", "schedule_type", "active", "last_run_at", "last_status"],
   fields: {
     id: Field.text({ label: "Job ID", required: true, readonly: true, group: "System" }),
     name: Field.text({
@@ -4520,7 +4520,7 @@ var SysJobRun = ObjectSchema.create({
   nameField: "job_name",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{job_name} @ {started_at}",
-  compactLayout: ["job_name", "status", "started_at", "duration_ms", "attempt"],
+  highlightFields: ["job_name", "status", "started_at", "duration_ms", "attempt"],
   fields: {
     id: Field.text({ label: "Run ID", required: true, readonly: true, group: "System" }),
     job_name: Field.text({
@@ -4574,7 +4574,7 @@ var SysJobQueue = ObjectSchema.create({
   nameField: "queue",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{queue} #{id}",
-  compactLayout: ["queue", "status", "attempts", "scheduled_for", "last_error"],
+  highlightFields: ["queue", "status", "attempts", "scheduled_for", "last_error"],
   fields: {
     id: Field.text({ label: "Message ID", required: true, readonly: true, group: "System" }),
     queue: Field.text({
@@ -4686,7 +4686,7 @@ var SysImportJob = ObjectSchema.create({
   nameField: "object_name",
   // [ADR-0079] canonical primary-title pointer
   titleFormat: "{object_name} import @ {created_at}",
-  compactLayout: ["object_name", "status", "processed_rows", "total_rows", "created_at"],
+  highlightFields: ["object_name", "status", "processed_rows", "total_rows", "created_at"],
   fields: {
     id: Field.text({ label: "Job ID", required: true, readonly: true, group: "System" }),
     object_name: Field.text({
@@ -4766,7 +4766,7 @@ var SysSetting = ObjectSchema.create({
   nameField: "key",
   // [ADR-0079] canonical primary-title pointer (mirrors deprecated displayNameField)
   titleFormat: "{namespace}.{key}",
-  compactLayout: ["namespace", "key", "scope", "updated_at"],
+  highlightFields: ["namespace", "key", "scope", "updated_at"],
   listViews: {
     by_namespace: {
       type: "grid",
@@ -4916,7 +4916,7 @@ var SysSecret = ObjectSchema.create({
   isSystem: true,
   managedBy: "system",
   description: "Cipher store referenced by sys_setting handles. Never holds plaintext.",
-  compactLayout: ["namespace", "key", "kms_key_id", "version", "rotated_at"],
+  highlightFields: ["namespace", "key", "kms_key_id", "version", "rotated_at"],
   listViews: {
     all: {
       type: "grid",
@@ -5007,7 +5007,7 @@ var SysSettingAudit = ObjectSchema.create({
   isSystem: true,
   managedBy: "system",
   description: "Append-only audit trail for SettingsService mutations.",
-  compactLayout: ["namespace", "key", "scope", "action", "actor_id", "created_at"],
+  highlightFields: ["namespace", "key", "scope", "action", "actor_id", "created_at"],
   listViews: {
     recent: {
       type: "grid",
@@ -5243,9 +5243,19 @@ var SETUP_NAV_CONTRIBUTIONS = [
       { id: "nav_system_overview", type: "dashboard", label: "System Overview", dashboardName: "system_overview", icon: "activity" }
     ]
   },
-  // No group_apps contribution left here — both marketplace entries moved
-  // out (see header note); the group_apps shell anchor in setup.app.ts is
-  // filled entirely by capability plugins now.
+  {
+    // Package ADMINISTRATION is a platform/operator concern (ADR-0084:
+    // packages are Operate, out of the builder) — so its home is Setup, not
+    // the application builder. The console binds `developer:packages` to the
+    // existing package-management page. Building/creating apps is a separate
+    // journey (Home cover → /studio); this entry is for install/inspect/admin.
+    app: "setup",
+    group: "group_apps",
+    priority: BASE_PRIORITY,
+    items: [
+      { id: "nav_packages", type: "component", label: "Packages", componentRef: "developer:packages", icon: "package" }
+    ]
+  },
   {
     app: "setup",
     group: "group_people_org",
@@ -5389,6 +5399,19 @@ var STUDIO_APP = {
       label: "Overview",
       icon: "layout-dashboard",
       children: [
+        {
+          // The application builder's front door (ADR-0080/0084): pick or
+          // create a writable base package, then design in the full-screen
+          // pillar builder (/studio/:packageId/:tab). The console binds
+          // `studio:builder` to the BuilderLanding page — this makes the
+          // builder reachable from login (Home → Studio → App Builder)
+          // instead of being a URL-only surface.
+          id: "nav_app_builder",
+          type: "component",
+          label: "App Builder",
+          componentRef: "studio:builder",
+          icon: "hammer"
+        },
         {
           id: "nav_metadata_directory",
           type: "component",