@tai42/studio-sdk 10.0.0 → 11.0.0

package/dist/schema-form/union-field.js.map

@@ -1 +1 @@
-{"version":3,"file":"union-field.js","sourceRoot":"","sources":["../../src/schema-form/union-field.tsx"],"names":[],"mappings":";AAQA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAmB,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAG7C;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,MAAkB,EAAE,IAAgB;IAC5D,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrF,QAAQ,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChD,KAAK,QAAQ;YACX,OAAO,EAAE,CAAC;QACZ,KAAK,QAAQ;YACX,OAAO,CAAC,CAAC;QACX,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC;QACf;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EACzB,OAAO,EACP,WAAW,EACX,KAAK,EACL,KAAK,EACL,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,IAAI,EACJ,MAAM,EACN,QAAQ,GAYT;IACC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACzD,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;QACvB,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC,CAAC;IACJ,MAAM,aAAa,GAAG,CAAC,GAAW,EAAQ,EAAE;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,gBAAgB,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAEhG,OAAO,CACL,MAAC,UAAU,IAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,aACjF,KAAC,KAAK,IAAC,KAAK,EAAC,SAAS,YACpB,KAAC,MAAM,IACL,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACxC,WAAW,EAAC,wBAAmB,EAC/B,aAAa,EAAE,aAAa,GAC5B,GACI,EACP,gBAAgB,EAAE,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAC3C,cAAK,SAAS,EAAE,UAAU,YACxB,KAAC,YAAY,IACX,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAC7C,YAAY,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAC7C,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,KAAK,CAAC,aAAa,GACzB,GACE,CACP,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CACzB,KAAC,SAAS,IACR,MAAM,EAAE,MAAM,CAAC,MAAM,EACrB,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,CAAC,KAAK,EACnB,QAAQ,QACR,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,QAAQ,GAClB,CACH,CAAC,CAAC,CAAC,IAAI,IACG,CACd,CAAC;AACJ,CAAC"}
+{"version":3,"file":"union-field.js","sourceRoot":"","sources":["../../src/schema-form/union-field.tsx"],"names":[],"mappings":";AAWA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAsC,MAAM,YAAY,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAG7C,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,MAAkB,EAAE,IAAgB;IAC5D,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,kBAAkB,CACzB,OAAgB,EAChB,MAAoB,EACpB,aAAiC,EACjC,IAAgB;IAEhB,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACrE,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAA4B,EAAE,GAAG,MAAM,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,IAAI,KAAK,aAAa;YAAE,SAAS;QACrC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oFAAoF;AACpF,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI;SACR,KAAK,CAAC,UAAU,CAAC;SACjB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACjC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3D,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAClB,aAAiC,EACjC,QAAiC,EACjC,IAAgB;IAEhB,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAClD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,CAAC,CAAC;QAC9E,IAAI,QAAQ,KAAK,SAAS;YAAE,SAAS;QACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC;QACjE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAClE,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EACzB,OAAO,EACP,WAAW,EACX,KAAK,EACL,KAAK,EACL,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,IAAI,EACJ,MAAM,EACN,QAAQ,GAYT;IACC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACzD,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;QACvB,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC,CAAC;IACJ,MAAM,aAAa,GAAG,CAAC,GAAW,EAAQ,EAAE;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,gBAAgB,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAEhG,OAAO,CAIL,MAAC,UAAU,IAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,KAAK,EAAE,aACvF,KAAC,KAAK,IAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,YAClE,KAAC,MAAM,IACL,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACxC,WAAW,EAAC,wBAAmB,EAC/B,aAAa,EAAE,aAAa,GAC5B,GACI,EACP,gBAAgB,EAAE,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAC3C,cAAK,SAAS,EAAE,UAAU,YACxB,KAAC,YAAY,IACX,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAC7C,YAAY,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAC7C,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,KAAK,CAAC,aAAa,EACzB,YAAY,SACZ,GACE,CACP,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CACzB,KAAC,SAAS,IACR,MAAM,EAAE,MAAM,CAAC,MAAM,EACrB,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,CAAC,KAAK,EACnB,QAAQ,QACR,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,QAAQ,GAClB,CACH,CAAC,CAAC,CAAC,IAAI,IACG,CACd,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tai42/studio-sdk",
-  "version": "10.0.0",
+  "version": "11.0.0",
   "description": "The Studio plugin contract, shared UI components, and hooks that every feature builds on.",
   "license": "Apache-2.0",
   "author": "tai42 <oss@tai42.ai>",
@@ -95,7 +95,7 @@
     "@radix-ui/react-select": "^2.3.2",
     "@radix-ui/react-tabs": "^1.1.16",
     "@radix-ui/react-tooltip": "^1.2.11",
-    "@tai42/api-client": "10.0.0"
+    "@tai42/api-client": "11.0.0"
   },
   "scripts": {
     "build": "tsc -b tsconfig.build.json && node scripts/copy-assets.mjs",

package/src/components/components.css

@@ -984,6 +984,24 @@
     background-image: linear-gradient(var(--tai-color-accent-tint), var(--tai-color-accent-tint));
   }
 
+  /* The HOST-APPLIED provenance mark on plugin-contributed nav (the shell renders
+     it; a plugin cannot suppress or restyle it). A small muted glyph that links to
+     the plugin's marketplace row and brightens on hover/focus. It sits beside a nav
+     row (per-entry, in a core section) or beside a self-named section header. */
+  .tai-plugin-badge {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    flex: none;
+    color: var(--tai-color-text-muted);
+    border-radius: var(--tai-radius-sm);
+  }
+
+  .tai-plugin-badge:hover,
+  .tai-plugin-badge:focus-visible {
+    color: var(--tai-color-text);
+  }
+
   /* Skip-to-content: off-screen until focused, so a keyboard or screen-reader
      user can bypass the sidebar nav and jump straight to the page content
      (WCAG 2.4.1). It is the first focusable element in the shell. */

package/src/components/dirty-guard.tsx

@@ -1,10 +1,11 @@
 /**
- * Unsaved-changes guard for tabbed editors. `Tabs` unmount inactive panels, so a
- * tab switch tears an editor down and drops its edits. One registry closes the gap:
- * editors report dirtiness via {@link useRegisterDirty}; {@link GuardedTabs} holds a
- * switch away from a dirty editor behind a confirm; the same registry arms
- * {@link useNavigationGuard}, so a route navigation confirms through the SAME dialog
- * and a full-page unload raises the native prompt. The dialog is one shared
+ * Unsaved-changes guard for editors that get torn down or navigated away from. One
+ * registry closes the gap: editors report dirtiness via {@link useRegisterDirty}; the
+ * enclosing {@link DirtyGuardBoundary} arms {@link useNavigationGuard} from that
+ * registry, so a route navigation confirms through a shared dialog and a full-page
+ * unload raises the native prompt. {@link GuardedTabs} adds a tab-switch confirm on
+ * top of the same boundary — `Tabs` unmount inactive panels, so a switch away from a
+ * dirty editor is held behind the confirm too. The dialog is one shared
  * {@link ConfirmDialog} driven by a pending-promise resolver, so the guard's
  * `Promise<boolean>` handler and the tab switch both settle against it.
  */
@@ -36,7 +37,16 @@ interface DirtyGuardValue {
 
 const DirtyGuardContext = createContext<DirtyGuardValue | null>(null);
 
-function DirtyGuardProvider({ children }: { readonly children: ReactNode }): ReactNode {
+/**
+ * Boundary that guards navigation away from a region holding a dirty editor. Editors
+ * inside it arm the guard through {@link useRegisterDirty}; while any is dirty a route
+ * navigation (a route-token/plugin navigate, an {@link AppLink}, or a browser
+ * back/forward) confirms through the shared discard dialog, and a full-page unload
+ * raises the native prompt. Use this directly to guard a dirty editor that is a plain
+ * page section (no tabs); {@link GuardedTabs} wraps this same boundary to additionally
+ * guard tab switches.
+ */
+export function DirtyGuardBoundary({ children }: { readonly children: ReactNode }): ReactNode {
   const dirtyIds = useRef<Set<string>>(new Set());
   // Mirror the registry's non-empty state into React so the navigation guard's
   // `when` re-arms as editors go dirty/clean.
@@ -96,9 +106,9 @@ function DirtyGuardProvider({ children }: { readonly children: ReactNode }): Rea
 }
 
 /**
- * Report an editor's dirty state to the enclosing {@link GuardedTabs}. A no-op
- * outside a provider (an editor rendered standalone, e.g. in isolation tests) so
- * the hook is always safe to call.
+ * Report an editor's dirty state to the enclosing {@link DirtyGuardBoundary} (which
+ * {@link GuardedTabs} also provides). A no-op outside a boundary (an editor rendered
+ * standalone, e.g. in isolation tests) so the hook is always safe to call.
  */
 export function useRegisterDirty(dirty: boolean): void {
   const ctx = useContext(DirtyGuardContext);
@@ -135,7 +145,7 @@ function GuardedTabsInner({
 
 /**
  * A drop-in replacement for {@link Tabs} that guards a switch away from a dirty
- * editor. Wraps the tabs in a {@link DirtyGuardProvider}, so an editor rendered in
+ * editor. Wraps the tabs in a {@link DirtyGuardBoundary}, so an editor rendered in
  * any panel can arm the guard through {@link useRegisterDirty}.
  */
 export function GuardedTabs({
@@ -146,8 +156,8 @@ export function GuardedTabs({
   readonly defaultValue?: string;
 }): ReactNode {
   return (
-    <DirtyGuardProvider>
+    <DirtyGuardBoundary>
       <GuardedTabsInner items={items} defaultValue={defaultValue} />
-    </DirtyGuardProvider>
+    </DirtyGuardBoundary>
   );
 }

package/src/components/field.tsx

@@ -155,6 +155,16 @@ export function Field({
             {label}
           </label>
         )}
+        {/* The description sits BETWEEN the label and the control, so it stays
+            adjacent to the label it glosses. After the control it drifts: a
+            group Field can wrap an arbitrarily tall surface (a whole schema
+            form), and a description below that surface reads as a footnote to
+            nothing. */}
+        {description !== undefined ? (
+          <p id={descriptionId} className="tai-field-hint" style={{ margin: 0 }}>
+            {description}
+          </p>
+        ) : null}
         {group ? (
           <div
             role="group"
@@ -167,11 +177,6 @@ export function Field({
         ) : (
           children
         )}
-        {description !== undefined ? (
-          <p id={descriptionId} className="tai-field-hint" style={{ margin: 0 }}>
-            {description}
-          </p>
-        ) : null}
         {/* The icon carries the invalid state alongside the color, never the color
             alone — and it is the ERROR mark: a rejected value is a definite
             negative, not the warning the triangle states. */}

package/src/components/fleet-report.tsx

@@ -9,7 +9,10 @@
  * used by every config-mutation surface) reports a saved change that did not fully
  * propagate and points the operator at the System page to reload; `'reload'` (the
  * System page's own fleet-reload action) drops the "Change saved" framing — nothing
- * was saved, a reload was dispatched — and the self-referential System-page pointer.
+ * was saved, a reload was dispatched — and the self-referential System-page pointer;
+ * `'deregister'` and `'remove'` (detach fan-outs) likewise drop the "Change saved"
+ * framing and points the operator back at re-running the deregister, because a
+ * reload would re-attach the very server being detached — the wrong remediation.
  *
  * A `converged` summary (every worker applied, or a lone-worker local-only change)
  * renders NOTHING — the calling surface shows its own success. A `degraded` summary
@@ -73,26 +76,44 @@ const OUTCOME_STATUS: Record<FleetFailureOutcome, StatusTone> = {
  */
 export interface FleetReportProps {
   readonly summary: FleetReportSummary | null;
-  /** Whose framing the copy takes: a saved config change, or a dispatched reload. */
-  readonly action?: 'save' | 'reload';
+  /**
+   * Whose framing the copy takes: a saved config change (`'save'`), a dispatched
+   * reload (`'reload'`), a connector detach fan-out (`'deregister'`), or a live-registry
+   * tool removal (`'remove'`). All but `'save'` drop the "Change saved" framing;
+   * `'deregister'` and `'remove'` also point remediation back at re-running that
+   * same detach, since a reload would re-attach the detached server or tool.
+   */
+  readonly action?: 'save' | 'reload' | 'deregister' | 'remove';
 }
 
 export function FleetReport({ summary, action = 'save' }: FleetReportProps): ReactNode {
   if (summary === null || summary.status === 'converged') return null;
 
+  // Only a saved config change carries the "Change saved" framing; a reload or a
+  // deregister saved nothing.
+  const savedFraming = action === 'save';
+
   if (summary.status === 'unreachable') {
+    // Where to send the operator once the bus is back: re-run the same op, except a
+    // saved change reloads from the System page.
+    const unreachableRemediation =
+      action === 'deregister'
+        ? 'Re-run the deregister once the bus is back.'
+        : action === 'remove'
+          ? 'Re-run the remove once the bus is back.'
+          : action === 'reload'
+            ? 'Re-run the reload once the bus is back.'
+            : 'Re-run the reload from the System page once the bus is back.';
     return (
       <div role="alert" className="tai-error-state tai-stack tai-stack-2">
         <strong className="tai-status tai-status-err">
           <XCircleIcon />
-          {action === 'reload'
-            ? 'The worker fleet was not reached'
-            : 'Change saved, but the worker fleet was not reached'}
+          {savedFraming
+            ? 'Change saved, but the worker fleet was not reached'
+            : 'The worker fleet was not reached'}
         </strong>
         <p>
-          {action === 'reload'
-            ? 'The worker bus was unreachable, so other workers may still be running the old config. Re-run the reload once the bus is back.'
-            : 'The worker bus was unreachable, so other workers may still be running the old config. Re-run the reload from the System page once the bus is back.'}
+          {`The worker bus was unreachable, so other workers may still be running the old config. ${unreachableRemediation}`}
         </p>
         {/* The bus error is a message, not a listing: it wraps rather than scrolls. */}
         {summary.error !== null ? (
@@ -111,17 +132,27 @@ export function FleetReport({ summary, action = 'save' }: FleetReportProps): Rea
   // worker is the commonest degraded fleet there is.
   const count = summary.failures.length;
   const workers = `${String(count)} worker${count === 1 ? '' : 's'}`;
+  // How the operator converges the stranded workers: re-run the same op, except a
+  // saved change reloads the fleet from the System page.
+  const remediation =
+    action === 'deregister'
+      ? 're-run the deregister'
+      : action === 'remove'
+        ? 're-run the remove'
+        : action === 'reload'
+          ? 're-run the reload'
+          : 'reload the fleet from the System page';
   return (
     <div role="alert" className="tai-warn-state tai-stack tai-stack-2">
       <strong className="tai-status tai-status-warn">
         <AlertTriangleIcon />
-        {action === 'reload'
-          ? `${workers} did not converge`
-          : `Change saved, but ${workers} did not converge`}
+        {savedFraming
+          ? `Change saved, but ${workers} did not converge`
+          : `${workers} did not converge`}
       </strong>
       <p>
         {`${count === 1 ? 'This worker' : 'These workers'} may still be running the old config — ` +
-          (action === 'reload' ? 're-run the reload' : 'reload the fleet from the System page') +
+          remediation +
           ` to converge ${count === 1 ? 'it' : 'them'}.`}
       </p>
       <ul className="tai-stack tai-stack-2">

package/src/components/icons.tsx

@@ -504,6 +504,24 @@ export const GridIcon: IconComponent = (props) => (
   </Icon>
 );
 
+/** Served endpoints: a broadcast node radiating to the tools it serves. */
+export const ServedEndpointsIcon: IconComponent = (props) => (
+  <Icon {...props}>
+    <circle cx="12" cy="12" r="2.5" />
+    <path d="M7.8 7.8a6 6 0 0 0 0 8.4" />
+    <path d="M16.2 7.8a6 6 0 0 1 0 8.4" />
+    <path d="M5 5a9 9 0 0 0 0 14" />
+    <path d="M19 5a9 9 0 0 1 0 14" />
+  </Icon>
+);
+
+/** Plugin: a puzzle piece — the host's provenance mark for plugin-contributed nav. */
+export const PluginIcon: IconComponent = (props) => (
+  <Icon {...props}>
+    <path d="M10 4a2 2 0 0 1 4 0c0 .8.7 1.4 1.5 1.4H18a1 1 0 0 1 1 1v2.6c0 .8.6 1.5 1.4 1.5a2 2 0 0 1 0 4c-.8 0-1.4.7-1.4 1.5V19a1 1 0 0 1-1 1h-2.6c-.8 0-1.4-.6-1.4-1.4a2 2 0 0 0-4 0c0 .8-.6 1.4-1.4 1.4H6a1 1 0 0 1-1-1v-2.5C5 15.7 4.4 15 3.6 15a2 2 0 0 1 0-4c.8 0 1.4-.7 1.4-1.5V6a1 1 0 0 1 1-1h2.5C9.3 5 10 4.4 10 3.6z" />
+  </Icon>
+);
+
 // -- Route mapping -----------------------------------------------------------
 
 /**
@@ -519,6 +537,7 @@ export const NAV_ICONS: Readonly<Record<Exclude<RouteToken, 'login'>, IconCompon
   extensions: ExtensionsIcon,
   templates: TemplatesIcon,
   connectors: ConnectorsIcon,
+  servedEndpoints: ServedEndpointsIcon,
   hooks: HooksIcon,
   storage: StorageIcon,
   scheduling: SchedulingIcon,

package/src/host.ts

@@ -12,4 +12,8 @@ export {
   subscribePluginHost,
   usePluginContributions,
 } from './plugin/host-state';
-export type { PluginLoaderState, PluginContributionsSnapshot } from './plugin/host-state';
+export type {
+  PluginLoaderState,
+  LoadedPlugin,
+  PluginContributionsSnapshot,
+} from './plugin/host-state';

package/src/index.ts

@@ -191,7 +191,7 @@ export { Dialog } from './components/dialog';
 export type { DialogProps } from './components/dialog';
 export { ConfirmDialog } from './components/confirm-dialog';
 export type { ConfirmDialogProps } from './components/confirm-dialog';
-export { GuardedTabs, useRegisterDirty } from './components/dirty-guard';
+export { GuardedTabs, DirtyGuardBoundary, useRegisterDirty } from './components/dirty-guard';
 export { FormDialog } from './components/form-dialog';
 export type { FormDialogProps } from './components/form-dialog';
 export { Drawer } from './components/drawer';
@@ -318,6 +318,8 @@ export {
   ExtensionsIcon,
   TemplatesIcon,
   ConnectorsIcon,
+  ServedEndpointsIcon,
+  PluginIcon,
   HooksIcon,
   StorageIcon,
   SchedulingIcon,

package/src/navigation/context.tsx

@@ -8,6 +8,7 @@ import {
   useRef,
   useState,
   type AriaAttributes,
+  type CSSProperties,
   type MouseEvent,
   type ReactNode,
 } from 'react';
@@ -453,6 +454,10 @@ export interface AppLinkProps<T extends RouteToken> {
   className?: string;
   'aria-label'?: string;
   'aria-current'?: AriaAttributes['aria-current'];
+  /** Native tooltip text (also a sensible non-AT hover hint). */
+  title?: string;
+  /** Inline styles for the anchor. */
+  style?: CSSProperties;
 }
 
 /**
@@ -467,6 +472,8 @@ export function AppLink<T extends RouteToken>({
   className,
   'aria-label': ariaLabel,
   'aria-current': ariaCurrent,
+  title,
+  style,
 }: AppLinkProps<T>): ReactNode {
   const { navigate, resolvePath } = useNavigation();
   const href = resolvePath(to, search);
@@ -482,7 +489,15 @@ export function AppLink<T extends RouteToken>({
   );
   return createElement(
     'a',
-    { href, className, 'aria-label': ariaLabel, 'aria-current': ariaCurrent, onClick },
+    {
+      href,
+      className,
+      'aria-label': ariaLabel,
+      'aria-current': ariaCurrent,
+      title,
+      style,
+      onClick,
+    },
     children,
   );
 }

package/src/navigation/types.ts

@@ -41,6 +41,9 @@ export interface RouteSearchByToken {
     q?: string;
   };
   connectors: { connection?: string };
+  // The Served Endpoints surface (the promoted sub-MCP servers): a curated subset
+  // of tools served on a transport. No search parameters — a flat list + create form.
+  servedEndpoints: Record<string, never>;
   hooks: Record<string, never>;
   templates: { template?: string; q?: string };
   storage: { q?: string };

package/src/plugin/host-state.ts

@@ -16,6 +16,17 @@ import { useSyncExternalStore } from 'react';
 import type { PluginContributions } from './types';
 import { getContributions } from './registry';
 
+/**
+ * Identity of a successfully-loaded plugin, for host chrome that must attribute a
+ * contribution to its origin (e.g. the shell's provenance badge on plugin nav). The
+ * `name` is the same id the registry stamps on every contribution (`pluginId`); the
+ * `version` comes from the plugin's manifest.
+ */
+export interface LoadedPlugin {
+  readonly name: string;
+  readonly version: string;
+}
+
 /**
  * The plugin load pass's public state, mirrored for feature pages to read. It is
  * the shape the app shell's loader store already exposes: `status` gates when the
@@ -26,6 +37,12 @@ export interface PluginLoaderState {
   readonly status: 'idle' | 'loading' | 'ready';
   /** Names of plugins whose bundle imported and registered successfully. */
   readonly loaded: readonly string[];
+  /**
+   * Identity (name + version) of every successfully-loaded plugin, parallel to
+   * `loaded`. The host reads it to attribute a contribution to its plugin — e.g. the
+   * nav provenance badge's "Plugin: name version". Empty before any plugin loads.
+   */
+  readonly plugins: readonly LoadedPlugin[];
   /** Plugin name → loud error message (version mismatch / load failure). */
   readonly errors: Readonly<Record<string, string>>;
   /** A registry-listing failure that is NOT a 401 (surfaced loudly, never hidden). */
@@ -35,6 +52,7 @@ export interface PluginLoaderState {
 const INITIAL_HOST_STATE: PluginLoaderState = {
   status: 'idle',
   loaded: [],
+  plugins: [],
   errors: {},
   registryError: null,
 };

package/src/plugin/types.ts

@@ -142,13 +142,15 @@ export interface RegisteredPage extends PageContribution {
 
 /**
  * The sidebar section a nav entry renders in. A named core section groups the
- * entry there, after that section's core rows; `'Plugins'`, an absent field, or
- * any unrecognised value falls to the Plugins section. The shell tolerates an
- * unknown value at runtime (a bundle newer than this host), so the field is a
- * placement hint, never a hard contract.
+ * entry there, after that section's core rows. An absent field or any value that
+ * is not a live core section renders the entry as a FIRST-CLASS section of its own,
+ * named for the contributing plugin (grouped with that plugin's other such entries),
+ * placed after the core sections. The shell tolerates an unknown value at runtime
+ * (a bundle newer than this host), falling back to that self-named section, so the
+ * field is a placement hint, never a hard contract.
  */
 export type NavEntrySection =
-  'Capabilities' | 'Integrations' | 'Activity' | 'Administration' | 'Plugins';
+  'Capabilities' | 'Connections' | 'Triggers' | 'Activity' | 'Administration';
 
 export interface NavEntryContribution {
   /**
@@ -160,10 +162,18 @@ export interface NavEntryContribution {
   readonly title: string;
   /**
    * Optional target sidebar section (see {@link NavEntrySection}); absent ⇒ the
-   * Plugins section. Additive — an older bundle omits it and stays on the same
-   * plugin API version.
+   * plugin's own self-named section. Additive — an older bundle omits it and stays
+   * on the same plugin API version.
    */
   readonly section?: NavEntrySection;
+  /**
+   * Optional sort weight WITHIN the entry's section (whether a core section or the
+   * plugin's own self-named one): entries render in ascending `order`, and every
+   * entry that omits it sorts AFTER the ordered ones, in registration order. Two
+   * entries with the same `order` keep registration order (a stable sort). Additive —
+   * an older bundle omits it and stays on the same plugin API version.
+   */
+  readonly order?: number;
   /**
    * Optional icon rendered before the title. It must be a square inline SVG that
    * fills its box and draws with `currentColor`; the host constrains the slot,

package/src/schema-form/SecretRefField.tsx

@@ -3,8 +3,9 @@
  * EITHER a reference to an existing env key OR a freshly pasted secret. It knows
  * nothing about the `!ENV ${KEY}` marker syntax or any wire format: it emits a
  * discriminated {@link SecretRef} and the host maps that to whatever it stores
- * (the consumer that mounts this — the McpTab editor — writes an `!ENV ${KEY}`
- * marker for a `key` ref and runs the combined store-then-mark op for a `paste`).
+ * (the consumer that mounts this — the connectors page's McpServersSection —
+ * writes an `!ENV ${KEY}` marker for a `key` ref and runs the combined
+ * store-then-mark op for a `paste`).
  *
  * WRITE-ONLY for a pasted secret: the plaintext lives only in local editor state
  * until the user commits it, at which point it leaves the DOM entirely (held only

package/src/schema-form/default-value.ts

@@ -10,6 +10,10 @@
  *    `default` — an optional object/array is NOT auto-materialized, so its own
  *    required children can't raise spurious errors on a field the user never
  *    opted into.
+ *
+ * `skeletonValueForSchema` is the sibling entry for programmatic reseeds (a
+ * union variant switch): same walk, but required scalars mint their type's
+ * empty value so the committed seed validates against its own schema.
  */
 import { classifySchema } from './classify';
 import type { JsonSchema } from './types';
@@ -30,6 +34,30 @@ function explicitDefault(
  * whole-tool-schema call).
  */
 export function defaultValueForSchema(schema: JsonSchema, root: JsonSchema = schema): unknown {
+  return seedValue(schema, root, false);
+}
+
+/**
+ * A SELF-CONSISTENT skeleton for a schema — the seed a variant switch (or any
+ * other programmatic reseed) commits as the field's new value. Where
+ * {@link defaultValueForSchema} deliberately leaves a required scalar absent so
+ * a fresh form flags it, a committed skeleton must validate against its own
+ * schema, so here EVERY required field with a known empty value is minted:
+ * required strings seed `''`, numbers `0`, booleans `false` — consistently with
+ * the `[]` / `{}` / nested-object seeds the default path already mints. Kinds
+ * with no empty value to name (enum, union, free-form JSON) stay absent either
+ * way: inventing a choice would be a lie the user never made.
+ */
+export function skeletonValueForSchema(schema: JsonSchema, root: JsonSchema = schema): unknown {
+  return seedValue(schema, root, true);
+}
+
+/**
+ * The shared seeding walk. `mintScalars` distinguishes the two entry points
+ * above: `false` leaves value-less required scalars absent; `true` mints their
+ * type's empty value.
+ */
+function seedValue(schema: JsonSchema, root: JsonSchema, mintScalars: boolean): unknown {
   const classified = classifySchema(schema, root);
   const explicit = explicitDefault(schema, classified.schema);
   if (explicit.present) return explicit.value;
@@ -42,7 +70,7 @@ export function defaultValueForSchema(schema: JsonSchema, root: JsonSchema = sch
       const result: Record<string, unknown> = {};
       for (const [name, propSchema] of model.properties) {
         if (model.required.has(name)) {
-          const seeded = defaultValueForSchema(propSchema, root);
+          const seeded = seedValue(propSchema, root, mintScalars);
           if (seeded !== undefined) result[name] = seeded;
           continue;
         }
@@ -56,15 +84,20 @@ export function defaultValueForSchema(schema: JsonSchema, root: JsonSchema = sch
       return [];
     case 'record':
       return {};
-    case 'enum':
     case 'string':
+      return mintScalars ? '' : undefined;
     case 'number':
+      return mintScalars ? 0 : undefined;
     case 'boolean':
+      return mintScalars ? false : undefined;
+    case 'enum':
     case 'union':
     case 'json':
       // A free-form JSON field starts ABSENT (its editor seeds an empty buffer),
       // like the other value-less kinds: an optional one never invents a value,
-      // and a required one is left absent so validation flags it.
+      // and a required one is left absent so validation flags it. These kinds
+      // have no honest empty value even for a minted skeleton — an enum or a
+      // union would need a CHOICE invented on the user's behalf.
       return undefined;
   }
 }

package/src/schema-form/field-node.tsx

@@ -30,6 +30,13 @@ interface FieldNodeProps {
   /** The label to show — a property key, array-item caption, or `undefined` at root. */
   readonly label: string | undefined;
   readonly required: boolean;
+  /**
+   * Append the design system's required marker (a trailing ` *`, the same
+   * convention host forms use on their own labels) to the heading when the
+   * field is required. Opt-in per face: the union variant surface sets it so
+   * the ACTIVE variant's obligations read at a glance.
+   */
+  readonly markRequired?: boolean;
   readonly errors: SchemaFormErrors | undefined;
   readonly idPrefix: string;
 }
@@ -40,9 +47,21 @@ function labelText(explicit: string | undefined, label: string | undefined): str
 
 /** A single schema node, dispatched on its classified model kind. */
 export function FieldNode(props: FieldNodeProps): ReactNode {
-  const { schema, root, value, onChange, path, label, required, errors, idPrefix } = props;
+  const {
+    schema,
+    root,
+    value,
+    onChange,
+    path,
+    label,
+    required,
+    markRequired = false,
+    errors,
+    idPrefix,
+  } = props;
   const classified = classifySchema(schema, root);
-  const heading = labelText(classified.title, label);
+  const base = labelText(classified.title, label);
+  const heading = markRequired && required ? `${base} *` : base;
   const description = classified.description;
   const error = errors?.[path];
   const model = classified.model;

package/src/schema-form/object-fields.tsx

@@ -23,6 +23,7 @@ export function ObjectFields({
   errors,
   idPrefix,
   skip,
+  markRequired = false,
 }: {
   properties: readonly (readonly [string, JsonSchema])[];
   requiredKeys: ReadonlySet<string>;
@@ -33,6 +34,8 @@ export function ObjectFields({
   errors: SchemaFormErrors | undefined;
   idPrefix: string;
   skip: string | undefined;
+  /** Mark each required property's label with the DS required marker. */
+  markRequired?: boolean;
 }): ReactNode {
   const obj = isPlainObject(value) ? value : {};
   return (
@@ -52,6 +55,7 @@ export function ObjectFields({
             path={childPath}
             label={name}
             required={requiredKeys.has(name)}
+            markRequired={markRequired}
             errors={errors}
             idPrefix={idPrefix}
           />