flowbase-cli 0.1.15__tar.gz → 0.1.17__tar.gz

{flowbase_cli-0.1.15 → flowbase_cli-0.1.17}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: flowbase-cli
-Version: 0.1.15
+Version: 0.1.17
 Summary: Command line client for the FlowBase OpenAPI
 Author: DeepFlowAI
 License: Apache-2.0
@@ -76,7 +76,7 @@ flowbase
 ├── docs            list | show | example | operations   Offline endpoint catalog
 ├── guide           Offline product and task guide (--format markdown|json)
 ├── organization    employees | departments
-├── apps            list | get | create | update | set-enabled | delete
+├── apps            list | get | create | update | set-enabled | delete | navigation
 │                   add-objects | remove-object | set-group | reorder-objects
 │                   add-dashboards | remove-dashboard | set-dashboard-group | reorder-members
 ├── groups          create | reorder | update | delete    App groups (under an app)
@@ -88,6 +88,7 @@ flowbase
 ├── approvals       list | get | create | update | reorder | set-enabled | delete
 ├── pages           list | options | get | create | update | set-default | clear-default | delete | restore | evaluate
 ├── dashboards      list | get | create | update | copy | delete | run
+│                   record-view-options | record-view-preview | records
 ├── changes         commit | release | direct-release
 ├── versions        list | show | releases                Read-only history
 ├── environments    restart                              Destructive test-env reset
@@ -138,7 +139,8 @@ Most `update` commands replace a **full snapshot** and accept an optional `baseR
 
 ```bash
 flowbase dashboards get dsh_xxx > current.json      # authoritative snapshot
-# edit current.json: change fields, keep filters/components, use draftRevision as baseRevision
+# Keep only label/description/icon/filters/components; use draftRevision as baseRevision.
+# Edit the desired fields while preserving all other components and filters.
 flowbase dashboards update dsh_xxx --json-file current.json
 ```
 
@@ -160,6 +162,14 @@ flowbase objects cli-edit-policy update obj_xxx --json '{"baseRevision":4,"polic
 
 `records create` returns `{recordId}`; use it with `records get`.
 
+To add existing objects to an application, pass their IDs with `--object-ids`:
+
+```bash
+flowbase apps add-objects app_xxx --object-ids obj_a,obj_b
+```
+
+Use a comma-separated list for multiple objects. Object IDs are not positional arguments. Run `flowbase docs show apps.objects.add` for the endpoint details.
+
 Record `values` keys are **field keys** (`name`), not internal IDs (`fld_...`). IDs are `obj_`/`fld_`/`dsh_`/`wfl_`/`pag_`/`reg_`/`cmp_`-prefixed; see `docs catalogs id-prefixes`.
 
 ### 6.2 Edit and publish configuration on a test environment
@@ -178,6 +188,31 @@ flowbase changes release --message "Ship sales dashboard" --yes
 
 Dashboard component code runs server-side in a sandbox and returns ECharts config / metric / table / markdown. Components and filters are validated on save; use `flowbase dashboards get <id>` to discover component IDs, then `flowbase dashboards run <dashboard_id> <component_id>` to inspect `ok/output/error/logs` in a read-only draft preview (requires metadata:read and records:read). Visual chart rendering still requires the web UI.
 
+App sections and record-view components:
+
+```bash
+flowbase apps get app_xxx
+flowbase docs catalogs app-sections
+flowbase apps navigation app_xxx --json '{"type":"appSection.create","name":"Sales"}' --yes
+flowbase groups create app_xxx --name Orders --section-id sec_xxx
+flowbase apps add-objects app_xxx --object-ids obj_xxx --section-id sec_xxx
+# add-dashboards and add-iframes also accept --section-id.
+flowbase apps navigation app_xxx --json '{"type":"appMember.move","id":"obj_xxx","sectionId":"sec_xxx","groupId":"grp_xxx","expectedSectionId":"sec_xxx","expectedGroupId":null}' --yes
+
+flowbase docs catalogs dashboard-record-views
+flowbase dashboards record-view-options
+flowbase docs example dashboards.record-view-preview --output preview.json
+# Replace placeholder IDs and configure component/filters before previewing.
+flowbase dashboards record-view-preview dsh_xxx --json-file preview.json
+flowbase dashboards records dsh_xxx dcm_xxx --page 1 --query Orders --json '{"filterValues":{}}'
+```
+
+`apps get` preserves section definitions and group/member `sectionId`. Navigation supports section creation, rename, empty-section deletion, full section ordering, group moves and member moves. Moves require explicit source and target positions; use JSON `null` for unassigned/ungrouped. See `app-sections` for all six request bodies. Navigation requires confirmation (`--yes` for automation), and writes only a draft.
+
+Record-view previews and queries require both `metadata:read` and `records:read`, use the current Host's records and draft configuration, and return `mode: draft-preview` plus `draftRevision`. They use API-key visibility rather than an employee's workspace identity; hidden fields stay excluded and hidden filter fields are rejected. Page size is configured on the component (10/20/50). Search is ignored when `showSearch` is false. `dashboards run` is for code components.
+
+For `dashboards update`, construct the body from the latest `get`: preserve `label`, `description`, `icon`, `filters`, and **all** `components`; set `baseRevision` to the returned `draftRevision`. Omit response-only fields. Keep existing component IDs and `recordView` unchanged when editing other properties; omit IDs on new components. Omitting `components` or `filters` clears them.
+
 ### 6.3 Production hotfix
 
 ```bash
@@ -289,3 +324,68 @@ Transport requests time out after 60 seconds. A lost write response has an unkno
 - `flowbase docs catalogs workflow-python`: record creation examples and failed-task retry. `workflows python-runtime OBJECT new` discovers current object bindings; `workflows executions` includes Python attempts, logs and `canRetry`.
 
 Use `records list OBJECT --view-id VIEW --view-layout` for tree/Gantt projections; the default remains a flat list. `records update` accepts `updatedAt` and `planViewId` in its JSON body for version-checked plan edits. Formula validation/trials require both metadata read and record read; workflow retry requires both metadata write and record write and explicit CLI confirmation (`--yes` in automation).
+
+### Reusable iframe configuration (4.11)
+
+`flowbase iframes list|get|create|update|delete` manages environment-specific iframe drafts. Create/update use `--json-file`; fields are `label`, `icon` (default `IconWorld`), `color` (default `#2563EB`), and a complete HTTPS `url` without credentials. Update and delete require `baseRevision` from `iframes get`; deletion also requires confirmation (`--yes` for noninteractive use).
+
+```bash
+flowbase iframes create --json-file iframe.json
+flowbase iframes get ifr_example
+flowbase iframes update ifr_example --json-file iframe-update.json
+flowbase apps add-iframes app_example ifr_example
+flowbase apps set-iframe-group app_example ifr_example --group-id grp_example
+flowbase apps set-iframe-group app_example ifr_example --ungrouped
+flowbase apps reorder-members app_example --json '{"items":[{"type":"iframe","id":"ifr_example"}]}'
+flowbase apps remove-iframe app_example ifr_example --yes
+flowbase iframes delete ifr_example --json '{"baseRevision":12}' --yes
+```
+
+Removal only unlinks one app. Deletion unlinks all apps atomically. Changes follow the existing commit/release/rollback workflow; they do not fetch, proxy or modify the external website. API keys use `metadata:read`/`metadata:write`; browser roles use `iframe.manage` for shared resources and `app.manage` for app associations.
+
+### Custom object views (4.12)
+
+Read `flowbase docs catalogs custom-views` and `flowbase views list OBJECT` first. Save the following as `view.json`, replacing `baseRevision` with the current `draftRevision`:
+
+```json
+{
+  "baseRevision": 4,
+  "name": "Custom overview",
+  "enabled": false,
+  "defaultFieldIds": [],
+  "displayMode": "custom",
+  "custom": {
+    "runtimeVersion": "cv1",
+    "source": "import React from 'react'; export default function View(){return <div>Hello</div>}"
+  }
+}
+```
+
+```bash
+flowbase views create obj_example --json-file view.json
+flowbase views list obj_example
+flowbase views update obj_example viw_example --json-file view.json
+flowbase views set-enabled obj_example viw_example --base-revision 6 --enabled --yes
+```
+
+Use the revision returned by the preceding write, rather than the example numbers. Custom views start disabled; preview in the browser and enable when ready. Updates replace the writable snapshot: preserve `custom.source`, `custom.runtimeVersion`, `displayMode`, filters and other configuration from `views list`, excluding the response-only `id` and `status`. Built-in/custom view types cannot be converted. JSX source is limited to 512 KiB UTF-8; the runtime supports `react`, `three` and `flowbase`. CLI configuration does not execute browser previews.
+
+### Record detail embedded pages (4.13)
+
+`flowbase docs catalogs page-components` documents `recordEmbed`, supported at the top level or inside tabs of a detail Page. Add this component to an existing region column (or a tab's `components`):
+
+```json
+{
+  "kind": "recordEmbed",
+  "label": "External panel",
+  "showTitle": true,
+  "url": "https://example.com/panel",
+  "height": 480,
+  "allowRead": false,
+  "allowedFieldIds": []
+}
+```
+
+Read `flowbase pages get PAGE`, preserve the existing components and IDs, and remove the read-only Page keys listed in `docs catalogs page-components`. Wrap the editable snapshot as `{"baseRevision":4,"page":{...}}`, then use `flowbase pages update PAGE --json-file page.json` (or `pages create --json-file page.json` for a new detail Page). For creation, omit the Page ID and IDs of new regions/components so the server allocates them.
+
+Height must be an integer from 240 to 1600. URLs must use external HTTPS and exclude credentials, identity/context parameters and templates. To permit SDK reads, set `allowRead: true` and select at least one unique active field ID in `allowedFieldIds`; current record/field permissions still apply. The browser SDK is `/sdk/record-embed.v1.js`. The CLI configures the component; rendering and SDK calls run in the browser. `flowbase-user` has no metadata management commands.

{flowbase_cli-0.1.15 → flowbase_cli-0.1.17}/README.md

@@ -67,7 +67,7 @@ flowbase
 ├── docs            list | show | example | operations   Offline endpoint catalog
 ├── guide           Offline product and task guide (--format markdown|json)
 ├── organization    employees | departments
-├── apps            list | get | create | update | set-enabled | delete
+├── apps            list | get | create | update | set-enabled | delete | navigation
 │                   add-objects | remove-object | set-group | reorder-objects
 │                   add-dashboards | remove-dashboard | set-dashboard-group | reorder-members
 ├── groups          create | reorder | update | delete    App groups (under an app)
@@ -79,6 +79,7 @@ flowbase
 ├── approvals       list | get | create | update | reorder | set-enabled | delete
 ├── pages           list | options | get | create | update | set-default | clear-default | delete | restore | evaluate
 ├── dashboards      list | get | create | update | copy | delete | run
+│                   record-view-options | record-view-preview | records
 ├── changes         commit | release | direct-release
 ├── versions        list | show | releases                Read-only history
 ├── environments    restart                              Destructive test-env reset
@@ -129,7 +130,8 @@ Most `update` commands replace a **full snapshot** and accept an optional `baseR
 
 ```bash
 flowbase dashboards get dsh_xxx > current.json      # authoritative snapshot
-# edit current.json: change fields, keep filters/components, use draftRevision as baseRevision
+# Keep only label/description/icon/filters/components; use draftRevision as baseRevision.
+# Edit the desired fields while preserving all other components and filters.
 flowbase dashboards update dsh_xxx --json-file current.json
 ```
 
@@ -151,6 +153,14 @@ flowbase objects cli-edit-policy update obj_xxx --json '{"baseRevision":4,"polic
 
 `records create` returns `{recordId}`; use it with `records get`.
 
+To add existing objects to an application, pass their IDs with `--object-ids`:
+
+```bash
+flowbase apps add-objects app_xxx --object-ids obj_a,obj_b
+```
+
+Use a comma-separated list for multiple objects. Object IDs are not positional arguments. Run `flowbase docs show apps.objects.add` for the endpoint details.
+
 Record `values` keys are **field keys** (`name`), not internal IDs (`fld_...`). IDs are `obj_`/`fld_`/`dsh_`/`wfl_`/`pag_`/`reg_`/`cmp_`-prefixed; see `docs catalogs id-prefixes`.
 
 ### 6.2 Edit and publish configuration on a test environment
@@ -169,6 +179,31 @@ flowbase changes release --message "Ship sales dashboard" --yes
 
 Dashboard component code runs server-side in a sandbox and returns ECharts config / metric / table / markdown. Components and filters are validated on save; use `flowbase dashboards get <id>` to discover component IDs, then `flowbase dashboards run <dashboard_id> <component_id>` to inspect `ok/output/error/logs` in a read-only draft preview (requires metadata:read and records:read). Visual chart rendering still requires the web UI.
 
+App sections and record-view components:
+
+```bash
+flowbase apps get app_xxx
+flowbase docs catalogs app-sections
+flowbase apps navigation app_xxx --json '{"type":"appSection.create","name":"Sales"}' --yes
+flowbase groups create app_xxx --name Orders --section-id sec_xxx
+flowbase apps add-objects app_xxx --object-ids obj_xxx --section-id sec_xxx
+# add-dashboards and add-iframes also accept --section-id.
+flowbase apps navigation app_xxx --json '{"type":"appMember.move","id":"obj_xxx","sectionId":"sec_xxx","groupId":"grp_xxx","expectedSectionId":"sec_xxx","expectedGroupId":null}' --yes
+
+flowbase docs catalogs dashboard-record-views
+flowbase dashboards record-view-options
+flowbase docs example dashboards.record-view-preview --output preview.json
+# Replace placeholder IDs and configure component/filters before previewing.
+flowbase dashboards record-view-preview dsh_xxx --json-file preview.json
+flowbase dashboards records dsh_xxx dcm_xxx --page 1 --query Orders --json '{"filterValues":{}}'
+```
+
+`apps get` preserves section definitions and group/member `sectionId`. Navigation supports section creation, rename, empty-section deletion, full section ordering, group moves and member moves. Moves require explicit source and target positions; use JSON `null` for unassigned/ungrouped. See `app-sections` for all six request bodies. Navigation requires confirmation (`--yes` for automation), and writes only a draft.
+
+Record-view previews and queries require both `metadata:read` and `records:read`, use the current Host's records and draft configuration, and return `mode: draft-preview` plus `draftRevision`. They use API-key visibility rather than an employee's workspace identity; hidden fields stay excluded and hidden filter fields are rejected. Page size is configured on the component (10/20/50). Search is ignored when `showSearch` is false. `dashboards run` is for code components.
+
+For `dashboards update`, construct the body from the latest `get`: preserve `label`, `description`, `icon`, `filters`, and **all** `components`; set `baseRevision` to the returned `draftRevision`. Omit response-only fields. Keep existing component IDs and `recordView` unchanged when editing other properties; omit IDs on new components. Omitting `components` or `filters` clears them.
+
 ### 6.3 Production hotfix
 
 ```bash
@@ -280,3 +315,68 @@ Transport requests time out after 60 seconds. A lost write response has an unkno
 - `flowbase docs catalogs workflow-python`: record creation examples and failed-task retry. `workflows python-runtime OBJECT new` discovers current object bindings; `workflows executions` includes Python attempts, logs and `canRetry`.
 
 Use `records list OBJECT --view-id VIEW --view-layout` for tree/Gantt projections; the default remains a flat list. `records update` accepts `updatedAt` and `planViewId` in its JSON body for version-checked plan edits. Formula validation/trials require both metadata read and record read; workflow retry requires both metadata write and record write and explicit CLI confirmation (`--yes` in automation).
+
+### Reusable iframe configuration (4.11)
+
+`flowbase iframes list|get|create|update|delete` manages environment-specific iframe drafts. Create/update use `--json-file`; fields are `label`, `icon` (default `IconWorld`), `color` (default `#2563EB`), and a complete HTTPS `url` without credentials. Update and delete require `baseRevision` from `iframes get`; deletion also requires confirmation (`--yes` for noninteractive use).
+
+```bash
+flowbase iframes create --json-file iframe.json
+flowbase iframes get ifr_example
+flowbase iframes update ifr_example --json-file iframe-update.json
+flowbase apps add-iframes app_example ifr_example
+flowbase apps set-iframe-group app_example ifr_example --group-id grp_example
+flowbase apps set-iframe-group app_example ifr_example --ungrouped
+flowbase apps reorder-members app_example --json '{"items":[{"type":"iframe","id":"ifr_example"}]}'
+flowbase apps remove-iframe app_example ifr_example --yes
+flowbase iframes delete ifr_example --json '{"baseRevision":12}' --yes
+```
+
+Removal only unlinks one app. Deletion unlinks all apps atomically. Changes follow the existing commit/release/rollback workflow; they do not fetch, proxy or modify the external website. API keys use `metadata:read`/`metadata:write`; browser roles use `iframe.manage` for shared resources and `app.manage` for app associations.
+
+### Custom object views (4.12)
+
+Read `flowbase docs catalogs custom-views` and `flowbase views list OBJECT` first. Save the following as `view.json`, replacing `baseRevision` with the current `draftRevision`:
+
+```json
+{
+  "baseRevision": 4,
+  "name": "Custom overview",
+  "enabled": false,
+  "defaultFieldIds": [],
+  "displayMode": "custom",
+  "custom": {
+    "runtimeVersion": "cv1",
+    "source": "import React from 'react'; export default function View(){return <div>Hello</div>}"
+  }
+}
+```
+
+```bash
+flowbase views create obj_example --json-file view.json
+flowbase views list obj_example
+flowbase views update obj_example viw_example --json-file view.json
+flowbase views set-enabled obj_example viw_example --base-revision 6 --enabled --yes
+```
+
+Use the revision returned by the preceding write, rather than the example numbers. Custom views start disabled; preview in the browser and enable when ready. Updates replace the writable snapshot: preserve `custom.source`, `custom.runtimeVersion`, `displayMode`, filters and other configuration from `views list`, excluding the response-only `id` and `status`. Built-in/custom view types cannot be converted. JSX source is limited to 512 KiB UTF-8; the runtime supports `react`, `three` and `flowbase`. CLI configuration does not execute browser previews.
+
+### Record detail embedded pages (4.13)
+
+`flowbase docs catalogs page-components` documents `recordEmbed`, supported at the top level or inside tabs of a detail Page. Add this component to an existing region column (or a tab's `components`):
+
+```json
+{
+  "kind": "recordEmbed",
+  "label": "External panel",
+  "showTitle": true,
+  "url": "https://example.com/panel",
+  "height": 480,
+  "allowRead": false,
+  "allowedFieldIds": []
+}
+```
+
+Read `flowbase pages get PAGE`, preserve the existing components and IDs, and remove the read-only Page keys listed in `docs catalogs page-components`. Wrap the editable snapshot as `{"baseRevision":4,"page":{...}}`, then use `flowbase pages update PAGE --json-file page.json` (or `pages create --json-file page.json` for a new detail Page). For creation, omit the Page ID and IDs of new regions/components so the server allocates them.
+
+Height must be an integer from 240 to 1600. URLs must use external HTTPS and exclude credentials, identity/context parameters and templates. To permit SDK reads, set `allowRead: true` and select at least one unique active field ID in `allowedFieldIds`; current record/field permissions still apply. The browser SDK is `/sdk/record-embed.v1.js`. The CLI configures the component; rendering and SDK calls run in the browser. `flowbase-user` has no metadata management commands.

{flowbase_cli-0.1.15 → flowbase_cli-0.1.17}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "flowbase-cli"
-version = "0.1.15"
+version = "0.1.17"
 description = "Command line client for the FlowBase OpenAPI"
 readme = "README.md"
 requires-python = ">=3.11"

{flowbase_cli-0.1.15 → flowbase_cli-0.1.17}/src/flowbase_cli/__init__.py

@@ -1,3 +1,3 @@
 """FlowBase OpenAPI CLI."""
 
-__version__ = "0.1.15"
+__version__ = "0.1.17"

{flowbase_cli-0.1.15 → flowbase_cli-0.1.17}/src/flowbase_cli/endpoints.py

@@ -22,6 +22,46 @@ class Endpoint:
 
 
 ENDPOINTS = (
+    Endpoint("apps.navigation", "flowbase_apps_navigation", "POST", "/apps/{app_id}/navigation", "metadata:write", "Edit app sections and navigation positions; read apps get first. See app-sections catalog.", "flowbase apps navigation app_xxx --json-file navigation.json --yes", True, request_body='{"type":"appSection.create","name":"Sales"}'),
+    Endpoint("dashboards.record-view-options", "flowbase_dashboards_record_view_options", "GET", "/dashboards/record-view-options", "metadata:read", "Discover draft objects and fields for record-view components.", "flowbase dashboards record-view-options"),
+    Endpoint("dashboards.record-view-preview", "flowbase_dashboards_record_view_preview", "POST", "/dashboards/{dashboard_id}/record-view-preview", "metadata:read", "Preview an unsaved record-view component; also requires records:read. No writes; current Host data and draft config.", "flowbase dashboards record-view-preview dsh_xxx --json-file preview.json", request_body='{"component":{"type":"record_view","title":"Orders","layout":{"x":0,"y":0,"w":6,"h":10},"recordView":{"objectId":"obj_xxx","match":"all","filters":[],"fieldIds":["fld_xxx"],"pageSize":10,"showSearch":true,"followFilters":true}},"filters":[],"filterValues":{},"page":1,"q":""}'),
+    Endpoint("dashboards.records", "flowbase_dashboards_records", "POST", "/dashboards/{dashboard_id}/components/{component_id}/records", "metadata:read", "Query a saved draft record-view component; also requires records:read. No writes; not employee workspace permissions.", "flowbase dashboards records dsh_xxx dcm_xxx --page 1 --json-file filters.json", request_body='{"filterValues":{},"page":1,"q":""}'),
+    Endpoint("iframes.list", "flowbase_iframes_list", "GET", "/iframes", "metadata:read", "List iframe configuration.", "flowbase iframes list", requires_confirmation=False, request_body=None),
+    Endpoint("iframes.get", "flowbase_iframes_get", "GET", "/iframes/{iframe_id}", "metadata:read", "Get iframe configuration.", "flowbase iframes get", requires_confirmation=False, request_body=None),
+    Endpoint("iframes.create", "flowbase_iframes_create", "POST", "/iframes", "metadata:write", "Create iframe configuration.", "flowbase iframes create", requires_confirmation=False, request_body='{"label": "Help", "url": "https://example.com", "icon": "IconWorld", "color": "#2563EB"}'),
+    Endpoint("iframes.update", "flowbase_iframes_update", "PUT", "/iframes/{iframe_id}", "metadata:write", "Update iframe configuration.", "flowbase iframes update", requires_confirmation=False, request_body='{"label": "Help", "url": "https://example.com", "icon": "IconWorld", "color": "#2563EB", "baseRevision": 0}'),
+    Endpoint("iframes.delete", "flowbase_iframes_delete", "POST", "/iframes/{iframe_id}/delete", "metadata:write", "Delete iframe configuration.", "flowbase iframes delete", requires_confirmation=True, request_body='{"baseRevision": 0}'),
+    Endpoint(
+        "apps.iframes.add",
+        "flowbase_apps_iframes_add",
+        "POST",
+        "/apps/{app_id}/iframes",
+        "metadata:write",
+        "Add iframes to an app (association only).",
+        "flowbase apps add-iframes app_xxx ifr_xxx",
+        request_body='{"iframeIds":["ifr_xxx"]}',
+    ),
+    Endpoint(
+        "apps.iframes.remove",
+        "flowbase_apps_iframes_remove",
+        "DELETE",
+        "/apps/{app_id}/iframes/{iframe_id}",
+        "metadata:write",
+        "Remove a iframe association from an app.",
+        "flowbase apps remove-iframe app_xxx ifr_xxx --yes",
+        True,
+    ),
+    Endpoint(
+        "apps.iframes.set-group",
+        "flowbase_apps_iframes_set_group",
+        "POST",
+        "/apps/{app_id}/iframes/{iframe_id}/group",
+        "metadata:write",
+        "Move an app-linked iframe into a group or ungroup it.",
+        "flowbase apps set-iframe-group app_xxx ifr_xxx --group-id grp_xxx",
+        request_body='{"groupId":"grp_xxx"}',
+    ),
+
     Endpoint('formulas.sources', 'flowbase_formulas_sources', 'GET', '/objects/{object_id}/formula/sources', 'metadata:read', 'Discover scalar formula sources in the draft.', 'flowbase formulas sources obj_xxx'),
     Endpoint('formulas.collections', 'flowbase_formulas_collections', 'GET', '/objects/{object_id}/formula/collections', 'metadata:read', 'Discover collection object and field IDs in the draft.', 'flowbase formulas collections obj_xxx'),
     Endpoint('formulas.validate', 'flowbase_formulas_validate', 'POST', '/objects/{object_id}/formula/validate', 'metadata:read', 'Validate formula or rollup; trial also supported. Requires records:read. No writes.', 'flowbase formulas validate obj_xxx --json-file formula.json', request_body='{"constraints":{"expression":"amount * 2","resultType":"number","scale":2},"samples":{"amount":12.50},"trial":true}'),
@@ -52,7 +92,7 @@ ENDPOINTS = (
         "POST",
         "/apps/{app_id}/groups",
         "metadata:write",
-        "Create an app group draft.",
+        "Create an app group draft; optional sectionId selects a section (omitted means unassigned).",
         "flowbase groups create app_xxx --name Sales --icon IconFolder",
         request_body='{"name":"Sales","icon":"IconFolder"}',
     ),
@@ -258,7 +298,7 @@ ENDPOINTS = (
                  '{"fieldId":"fld_done","operator":"is_true"}'
                  '],"defaultFieldIds":["fld_a","fld_b"],"groupFieldId":null,"displayMode":"table","parentFieldId":null,"gantt":{}}'
              )),
-    Endpoint("views.update", "flowbase_views_update", "PUT", "/objects/{object_id}/views/{view_id}", "metadata:write", "Update a complete view snapshot. Preserve displayMode, parentFieldId and gantt from views.list; omission resets to table.", "flowbase views update obj_xxx viw_xxx --json-file view.json",
+    Endpoint("views.update", "flowbase_views_update", "PUT", "/objects/{object_id}/views/{view_id}", "metadata:write", "Update a complete view snapshot. Preserve displayMode, parentFieldId, gantt and custom from views.list; Read custom-views catalog for JSX configuration; omitted fields use defaults.", "flowbase views update obj_xxx viw_xxx --json-file view.json",
              request_body=(
                  '{"baseRevision":4,"name":"Active","enabled":true,"match":"all",'
                  '"filters":['
@@ -1040,7 +1080,7 @@ APPROVAL_NODE_TYPES = (
 )
 
 FUNCTION_PERMISSIONS = (
-    "workspace.access", "app.manage", "object.manage", "dashboard.manage", "form.manage",
+    "workspace.access", "app.manage", "object.manage", "dashboard.manage", "form.manage", "iframe.manage",
     "version.manage", "org.manage", "system.manage",
 )
 
@@ -1088,7 +1128,7 @@ PAGE_COMPONENTS = {
         ),
         "detailOnlyKinds": (
             "relatedList", "approval", "detailSummary", "stageBar", "tabs",
-            "relatedSummary", "attachmentCard", "noticeBlock",
+            "relatedSummary", "attachmentCard", "noticeBlock", "recordEmbed",
         ),
     },
     "kinds": (
@@ -1207,7 +1247,7 @@ PAGE_COMPONENTS = {
                 "minimumComponents": 1,
                 "allowedChildKinds": (
                     "field", "relatedList", "approval", "stageBar",
-                    "relatedSummary", "attachmentCard", "noticeBlock",
+                    "relatedSummary", "attachmentCard", "noticeBlock", "recordEmbed",
                 ),
             },
             "note": "defaultTabId must reference a tab in this component; tabs cannot be nested.",
@@ -1248,6 +1288,22 @@ PAGE_COMPONENTS = {
                 "titleLengthWhenShown": (1, 50),
             },
         },
+        {
+            "kind": "recordEmbed",
+            "name": "record detail embedded page",
+            "pageTypes": ("detail",),
+            "placement": ("topLevel", "tabs"),
+            "requiredKeys": ("kind", "label", "url"),
+            "optionalKeys": ("id", "showTitle", "height", "allowRead", "allowedFieldIds"),
+            "defaults": {"showTitle": True, "height": 480, "allowRead": False, "allowedFieldIds": []},
+            "constraints": {
+                "labelLength": (1, 80),
+                "height": "integer, 240–1600",
+                "url": "External HTTPS only; no credentials, identity/context parameters, templates, localhost or FlowBase hosts.",
+                "allowedFieldIds": "Unique active field IDs on the Page object; at least one when allowRead=true. Runtime reads also enforce current record and field permissions.",
+            },
+            "runtime": "Browser SDK /sdk/record-embed.v1.js; read-only bridge. CLI authors configuration and does not render or execute the embed.",
+        },
         {
             "kind": "noticeBlock",
             "name": "notice block",
@@ -1323,7 +1379,7 @@ PAGE_RULES = {
             "states": ("visible", "hidden"),
             "targetKinds": (
                 "relatedList", "approval", "detailSummary", "stageBar", "tabs",
-                "relatedSummary", "attachmentCard", "noticeBlock",
+                "relatedSummary", "attachmentCard", "noticeBlock", "recordEmbed",
             ),
             "excludedTargets": ("field", "region", "tab", "button", "systemArea"),
             "sameRuleUniqueTarget": True,
@@ -1337,7 +1393,7 @@ PAGE_RULES = {
 }
 
 RESOURCE_ID_PREFIXES = {
-    "app_": "app", "grp_": "app group", "obj_": "object", "fld_": "field",
+    "app_": "app", "grp_": "app group", "sec_": "app section", "obj_": "object", "fld_": "field",
     "viw_": "view", "wfl_": "workflow", "apr_": "approval flow", "pag_": "custom page",
     "reg_": "page region", "cmp_": "page component",
     "dsh_": "dashboard", "dcm_": "dashboard component", "rol_": "role",
@@ -1542,6 +1598,37 @@ FORMS = {
 }
 
 CATALOGS = {
+    "app-sections": {
+        "read": "apps get APP returns sections and sectionId on groups/objects/dashboards/iframes. Null means unassigned; groups define their members' section.",
+        "write": "apps navigation APP --json-file navigation.json --yes writes one atomic draft operation and returns id/draftRevision. Read current locations first; stale moves fail without changes.",
+        "operations": [
+            {"type": "appSection.create", "name": "Sales"},
+            {"type": "appSection.update", "id": "sec_xxx", "name": "Revenue"},
+            {"type": "appSection.delete", "id": "sec_xxx"},
+            {"type": "appSection.reorder", "sectionIds": ["sec_second", "sec_first"]},
+            {"type": "appGroup.moveToSection", "id": "grp_xxx", "sectionId": "sec_target", "expectedSectionId": None},
+            {"type": "appMember.move", "id": "obj_xxx", "sectionId": "sec_target", "groupId": None, "expectedSectionId": None, "expectedGroupId": None},
+        ],
+        "rules": "Names are trimmed, 1-50 characters, case-insensitively unique; Unassigned/未分栏 are reserved. Only empty sections can be deleted. Reorder supplies all section IDs. Moves require explicit source/target fields, using null for unassigned/ungrouped; target group must belong to target section. Member id may be obj_/dsh_/ifr_.",
+        "add": "groups create and apps add-objects/add-dashboards/add-iframes accept --section-id; omit for unassigned. Existing associations are not moved by add; use navigation.",
+        "order": "Use groups reorder or apps reorder-members for order within a location; preserve the complete app-level order and other sections/groups from apps get.",
+    },
+    "dashboard-record-views": {
+        "discover": "dashboards record-view-options returns draft source object and field IDs; dashboards get returns components and draftRevision.",
+        "component": {"type": "record_view", "title": "Orders", "layout": {"x": 0, "y": 0, "w": 6, "h": 10}, "recordView": {"objectId": "obj_xxx", "match": "all", "filters": [], "fieldIds": ["fld_xxx"], "pageSize": 10, "showSearch": True, "followFilters": True}},
+        "update": "dashboards update is a full snapshot: copy label/description/icon/filters/components from get, preserve all components and their IDs (including code/recordView), set baseRevision from draftRevision. Omit response-only id/key/componentCount/appIds/updatedAt/draftRevision. New components omit id; save allocates it. Omitting components or filters clears them.",
+        "query": "dashboards records DASHBOARD COMPONENT [--query TEXT] [--page N] --json '{\"filterValues\":{}}' queries a saved draft component. dashboards record-view-preview DASHBOARD --json-file preview.json uses unsaved component and filters; docs example dashboards.record-view-preview supplies the body.",
+        "permissions": "Queries require metadata:read and records:read and use current Host data with draft config (mode=draft-preview). API-key identity, not employee workspace access; hidden fields are excluded, hidden filter fields rejected. No writes or app association required.",
+        "rules": "pageSize is 10/20/50; fieldIds are ordered stable field IDs. Fixed all/any conditions intersect dashboard filters and search. showSearch=false ignores q; followFilters=false ignores dashboard filters. Conditions use view-filters catalog. No object-view dependency. Code components use dashboards run.",
+        "response": "columns/records/total/page/pageSize/objectId/title/showSearch/filterValues/conditions/match/mode/draftRevision; resolved absolute dates are returned in filterValues. Iterate until total is covered.",
+    },
+    "custom-views": {
+        "commands": "views list/create/update/set-enabled/delete; create/update accept --json-file.",
+        "example": {"baseRevision": 4, "name": "Custom", "enabled": False, "defaultFieldIds": [], "displayMode": "custom", "custom": {"runtimeVersion": "cv1", "source": "import React from 'react'; export default function View(){return <div>Hello</div>}"}},
+        "update": "Read views.list; preserve custom.source, custom.runtimeVersion, displayMode and the other writable snapshot fields. Use draftRevision as baseRevision; omit response-only id and status from the body.",
+        "constraints": "Custom views start disabled; enable separately after validation. Built-in and custom views cannot convert into each other. custom contains exactly source and runtimeVersion=cv1; source must be nonempty and at most 512 KiB UTF-8.",
+        "runtime": "Sandboxed browser JSX, with react/three/flowbase imports. CLI saves configuration; browser preview/read bridge is not exposed as an API-key CLI command.",
+    },
     "planning": {
         "viewUpdate": "Read views.list, preserve the complete snapshot, then views.update with baseRevision. Omitting displayMode/parentFieldId/gantt resets them to table/null/{}.",
         "tree": {"displayMode": "tree", "parentFieldId": "fld_parent", "gantt": {}},

{flowbase_cli-0.1.15 → flowbase_cli-0.1.17}/src/flowbase_cli/guide.py

@@ -6,6 +6,8 @@ GUIDE = {
     "workflow": [
         "先确认 --host / FLOWBASE_HOST 和 API Key；环境只由 Host 决定。",
         "flowbase apps list；flowbase objects list：发现已有应用和对象，优先复用，不猜测 ID。",
+        "应用分栏先 apps get 和 docs catalogs app-sections；apps navigation --json-file --yes 修改分栏/位置，添加内容和创建分组可指定 --section-id。",
+        "仪表盘记录视图先 dashboards record-view-options 和 docs catalogs dashboard-record-views；record-view-preview 预览未保存配置，records 查询已保存草稿，run 仅运行代码组件。",
         "flowbase objects get <object_id>：读取字段 key、类型、约束和真实选项 ID；关联字段继续读取目标对象。",
         "flowbase docs catalogs authoring；flowbase docs list；flowbase docs show <endpoint_key>：查请求和更新方式。",
         "配置页面前读取 pages options、page-components、page-rules、page-buttons；配置流程前读取 workflow-nodes、workflow-branches 或 approval-rules；配置打印模板前读取 print-templates；配置自定义表单前读取 forms。",

{flowbase_cli-0.1.15 → flowbase_cli-0.1.17}/src/flowbase_cli/main.py

@@ -376,6 +376,9 @@ def _payload_from_args(args: argparse.Namespace, direct: dict[str, Any], require
 
 def handle_apps(args: argparse.Namespace) -> int:
     action = args.apps_action
+    if action == "navigation":
+        body = _payload_from_args(args, {}, ("type",))
+        return run_request(args, "apps.navigation", path_params={"app_id": args.app_id}, body=body)
     if action == "list":
         return run_request(args, "apps.list")
     if action == "get":
@@ -409,7 +412,7 @@ def handle_apps(args: argparse.Namespace) -> int:
             args,
             "apps.objects.add",
             path_params={"app_id": args.app_id},
-            body={"objectIds": ids},
+            body={"objectIds": ids, **({"sectionId": args.section_id} if args.section_id is not None else {})},
         )
     if action == "remove-object":
         return run_request(
@@ -446,7 +449,7 @@ def handle_apps(args: argparse.Namespace) -> int:
             args,
             "apps.dashboards.add",
             path_params={"app_id": args.app_id},
-            body={"dashboardIds": ids},
+            body={"dashboardIds": ids, **({"sectionId": args.section_id} if args.section_id is not None else {})},
         )
     if action == "remove-dashboard":
         return run_request(
@@ -467,6 +470,35 @@ def handle_apps(args: argparse.Namespace) -> int:
             path_params={"app_id": args.app_id, "dashboard_id": args.dashboard_id},
             body=body,
         )
+    if action == "add-iframes":
+        ids = [item.strip() for item in args.iframe_ids if item.strip()]
+        if not ids:
+            raise CliError("Provide at least one iframe ID.")
+        return run_request(
+            args,
+            "apps.iframes.add",
+            path_params={"app_id": args.app_id},
+            body={"iframeIds": ids, **({"sectionId": args.section_id} if args.section_id is not None else {})},
+        )
+    if action == "remove-iframe":
+        return run_request(
+            args,
+            "apps.iframes.remove",
+            path_params={"app_id": args.app_id, "iframe_id": args.iframe_id},
+        )
+    if action == "set-iframe-group":
+        if args.ungrouped:
+            body = {"groupId": None}
+        elif args.group_id is not None:
+            body = {"groupId": args.group_id}
+        else:
+            raise CliError("Provide --group-id or --ungrouped.")
+        return run_request(
+            args,
+            "apps.iframes.set-group",
+            path_params={"app_id": args.app_id, "iframe_id": args.iframe_id},
+            body=body,
+        )
     if action == "reorder-members":
         body = _payload_from_args(args, {}, ("items",))
         if not isinstance(body["items"], list):
@@ -482,6 +514,14 @@ def handle_apps(args: argparse.Namespace) -> int:
 
 def handle_dashboards(args: argparse.Namespace) -> int:
     action = args.dashboards_action
+    if action == "record-view-options":
+        return run_request(args, "dashboards.record-view-options")
+    if action in {"records", "record-view-preview"}:
+        body = _payload_from_args(args, {"q": args.query, "page": args.page}, ("component",) if action == "record-view-preview" else ())
+        path = {"dashboard_id": args.dashboard_id}
+        if action == "records":
+            path["component_id"] = args.component_id
+        return run_request(args, f"dashboards.{action}", path_params=path, body=body)
     if action == "run":
         return run_request(args, "dashboards.run", path_params={"dashboard_id": args.dashboard_id, "component_id": args.component_id}, body=load_json_payload(args.json, args.json_file))
     if action == "list":
@@ -522,6 +562,13 @@ def handle_dashboards(args: argparse.Namespace) -> int:
     )
 
 
+def handle_iframes(args: argparse.Namespace) -> int:
+    action = args.iframes_action
+    params = {"iframe_id": args.iframe_id} if action in ("get", "update", "delete") else None
+    body = load_json_payload(args.json, args.json_file) if action in ("create", "update", "delete") else None
+    return run_request(args, f"iframes.{action}", path_params=params, body=body)
+
+
 def handle_forms(args: argparse.Namespace) -> int:
     action = args.forms_action
     if action == "list":
@@ -560,7 +607,7 @@ def handle_groups(args: argparse.Namespace) -> int:
     action = args.groups_action
     path = {"app_id": args.app_id}
     if action == "create":
-        body = _payload_from_args(args, {"name": args.name, "icon": args.icon}, ("name",))
+        body = _payload_from_args(args, {"name": args.name, "icon": args.icon, "sectionId": args.section_id}, ("name",))
         return run_request(args, "apps.groups.create", path_params=path, body=body)
     if action == "reorder":
         body = _payload_from_args(args, {}, ("groupIds",))
@@ -1100,6 +1147,10 @@ def build_parser() -> argparse.ArgumentParser:
     app_actions.add_parser("list")
     app_get = app_actions.add_parser("get")
     app_get.add_argument("app_id")
+    app_navigation = app_actions.add_parser("navigation", help="Edit sections or move content; see docs catalogs app-sections.")
+    app_navigation.add_argument("app_id")
+    add_json_args(app_navigation, endpoint_key="apps.navigation")
+    add_yes(app_navigation)
     app_create = app_actions.add_parser("create")
     app_create.add_argument("--label")
     app_create.add_argument("--key")
@@ -1126,6 +1177,7 @@ def build_parser() -> argparse.ArgumentParser:
     app_add_objects = app_actions.add_parser("add-objects")
     app_add_objects.add_argument("app_id")
     app_add_objects.add_argument("--object-ids", required=True, help="Comma-separated object IDs.")
+    app_add_objects.add_argument("--section-id", help="Target section; omitted means unassigned.")
     app_remove_object = app_actions.add_parser("remove-object")
     app_remove_object.add_argument("app_id")
     app_remove_object.add_argument("object_id")
@@ -1144,6 +1196,7 @@ def build_parser() -> argparse.ArgumentParser:
     add_json_args(app_reorder_objects, endpoint_key="apps.objects.reorder")
     app_add_dashboards = app_actions.add_parser("add-dashboards")
     app_add_dashboards.add_argument("app_id")
+    app_add_dashboards.add_argument("--section-id", help="Target section; omitted means unassigned.")
     app_add_dashboards.add_argument(
         "dashboard_ids",
         nargs="+",
@@ -1162,6 +1215,27 @@ def build_parser() -> argparse.ArgumentParser:
         action="store_true",
         help="Remove the dashboard from its current group in this app.",
     )
+    app_add_iframes = app_actions.add_parser("add-iframes")
+    app_add_iframes.add_argument("app_id")
+    app_add_iframes.add_argument("--section-id", help="Target section; omitted means unassigned.")
+    app_add_iframes.add_argument(
+        "iframe_ids",
+        nargs="+",
+        help="One or more iframe IDs to associate with the app.",
+    )
+    app_remove_iframe = app_actions.add_parser("remove-iframe")
+    app_remove_iframe.add_argument("app_id")
+    app_remove_iframe.add_argument("iframe_id")
+    add_yes(app_remove_iframe)
+    app_set_iframe_group = app_actions.add_parser("set-iframe-group")
+    app_set_iframe_group.add_argument("app_id")
+    app_set_iframe_group.add_argument("iframe_id")
+    app_set_iframe_group.add_argument("--group-id", help="Target group ID. Omit with --ungrouped.")
+    app_set_iframe_group.add_argument(
+        "--ungrouped",
+        action="store_true",
+        help="Remove the iframe from its current group in this app.",
+    )
     app_reorder_members = app_actions.add_parser("reorder-members")
     app_reorder_members.add_argument("app_id")
     add_json_args(app_reorder_members, endpoint_key="apps.members.reorder")
@@ -1169,6 +1243,15 @@ def build_parser() -> argparse.ArgumentParser:
 
     dashboards = groups.add_parser("dashboards", help="Manage dashboard metadata.")
     dashboard_actions = dashboards.add_subparsers(dest="dashboards_action", required=True)
+    dashboard_actions.add_parser("record-view-options", help="Discover draft objects and fields for record-view components.")
+    for action in ("records", "record-view-preview"):
+        command = dashboard_actions.add_parser(action, help="Read-only draft record-view query; requires metadata:read and records:read.")
+        command.add_argument("dashboard_id")
+        if action == "records":
+            command.add_argument("component_id")
+        command.add_argument("--query", help="Component search text; ignored when showSearch is false.")
+        command.add_argument("--page", type=int, help="Page number, starting at 1.")
+        add_json_args(command, endpoint_key=f"dashboards.{action}")
     dashboard_run = dashboard_actions.add_parser("run", help="Run a saved draft component; requires metadata:read and records:read.")
     dashboard_run.add_argument("dashboard_id")
     dashboard_run.add_argument("component_id")
@@ -1192,6 +1275,18 @@ def build_parser() -> argparse.ArgumentParser:
     add_yes(dashboard_delete)
     dashboards.set_defaults(handler=handle_dashboards)
 
+    iframes = groups.add_parser("iframes", help="Manage reusable iframe configurations.")
+    iframe_actions = iframes.add_subparsers(dest="iframes_action", required=True)
+    for action in ("list", "get", "create", "update", "delete"):
+        command = iframe_actions.add_parser(action)
+        if action in ("get", "update", "delete"):
+            command.add_argument("iframe_id")
+        if action in ("create", "update", "delete"):
+            add_json_args(command, endpoint_key=f"iframes.{action}")
+        if action == "delete":
+            add_yes(command)
+    iframes.set_defaults(handler=handle_iframes)
+
     forms = groups.add_parser("forms", help="Manage custom forms (public collection links).")
     form_actions = forms.add_subparsers(dest="forms_action", required=True)
     form_actions.add_parser("list")
@@ -1229,6 +1324,7 @@ def build_parser() -> argparse.ArgumentParser:
     group_create.add_argument("app_id")
     group_create.add_argument("--name")
     group_create.add_argument("--icon")
+    group_create.add_argument("--section-id", help="Target section; omitted means unassigned.")
     add_json_args(group_create, endpoint_key="apps.groups.create")
     group_reorder = group_actions.add_parser("reorder")
     group_reorder.add_argument("app_id")

{flowbase_cli-0.1.15 → flowbase_cli-0.1.17}/src/flowbase_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: flowbase-cli
-Version: 0.1.15
+Version: 0.1.17
 Summary: Command line client for the FlowBase OpenAPI
 Author: DeepFlowAI
 License: Apache-2.0
@@ -76,7 +76,7 @@ flowbase
 ├── docs            list | show | example | operations   Offline endpoint catalog
 ├── guide           Offline product and task guide (--format markdown|json)
 ├── organization    employees | departments
-├── apps            list | get | create | update | set-enabled | delete
+├── apps            list | get | create | update | set-enabled | delete | navigation
 │                   add-objects | remove-object | set-group | reorder-objects
 │                   add-dashboards | remove-dashboard | set-dashboard-group | reorder-members
 ├── groups          create | reorder | update | delete    App groups (under an app)
@@ -88,6 +88,7 @@ flowbase
 ├── approvals       list | get | create | update | reorder | set-enabled | delete
 ├── pages           list | options | get | create | update | set-default | clear-default | delete | restore | evaluate
 ├── dashboards      list | get | create | update | copy | delete | run
+│                   record-view-options | record-view-preview | records
 ├── changes         commit | release | direct-release
 ├── versions        list | show | releases                Read-only history
 ├── environments    restart                              Destructive test-env reset
@@ -138,7 +139,8 @@ Most `update` commands replace a **full snapshot** and accept an optional `baseR
 
 ```bash
 flowbase dashboards get dsh_xxx > current.json      # authoritative snapshot
-# edit current.json: change fields, keep filters/components, use draftRevision as baseRevision
+# Keep only label/description/icon/filters/components; use draftRevision as baseRevision.
+# Edit the desired fields while preserving all other components and filters.
 flowbase dashboards update dsh_xxx --json-file current.json
 ```
 
@@ -160,6 +162,14 @@ flowbase objects cli-edit-policy update obj_xxx --json '{"baseRevision":4,"polic
 
 `records create` returns `{recordId}`; use it with `records get`.
 
+To add existing objects to an application, pass their IDs with `--object-ids`:
+
+```bash
+flowbase apps add-objects app_xxx --object-ids obj_a,obj_b
+```
+
+Use a comma-separated list for multiple objects. Object IDs are not positional arguments. Run `flowbase docs show apps.objects.add` for the endpoint details.
+
 Record `values` keys are **field keys** (`name`), not internal IDs (`fld_...`). IDs are `obj_`/`fld_`/`dsh_`/`wfl_`/`pag_`/`reg_`/`cmp_`-prefixed; see `docs catalogs id-prefixes`.
 
 ### 6.2 Edit and publish configuration on a test environment
@@ -178,6 +188,31 @@ flowbase changes release --message "Ship sales dashboard" --yes
 
 Dashboard component code runs server-side in a sandbox and returns ECharts config / metric / table / markdown. Components and filters are validated on save; use `flowbase dashboards get <id>` to discover component IDs, then `flowbase dashboards run <dashboard_id> <component_id>` to inspect `ok/output/error/logs` in a read-only draft preview (requires metadata:read and records:read). Visual chart rendering still requires the web UI.
 
+App sections and record-view components:
+
+```bash
+flowbase apps get app_xxx
+flowbase docs catalogs app-sections
+flowbase apps navigation app_xxx --json '{"type":"appSection.create","name":"Sales"}' --yes
+flowbase groups create app_xxx --name Orders --section-id sec_xxx
+flowbase apps add-objects app_xxx --object-ids obj_xxx --section-id sec_xxx
+# add-dashboards and add-iframes also accept --section-id.
+flowbase apps navigation app_xxx --json '{"type":"appMember.move","id":"obj_xxx","sectionId":"sec_xxx","groupId":"grp_xxx","expectedSectionId":"sec_xxx","expectedGroupId":null}' --yes
+
+flowbase docs catalogs dashboard-record-views
+flowbase dashboards record-view-options
+flowbase docs example dashboards.record-view-preview --output preview.json
+# Replace placeholder IDs and configure component/filters before previewing.
+flowbase dashboards record-view-preview dsh_xxx --json-file preview.json
+flowbase dashboards records dsh_xxx dcm_xxx --page 1 --query Orders --json '{"filterValues":{}}'
+```
+
+`apps get` preserves section definitions and group/member `sectionId`. Navigation supports section creation, rename, empty-section deletion, full section ordering, group moves and member moves. Moves require explicit source and target positions; use JSON `null` for unassigned/ungrouped. See `app-sections` for all six request bodies. Navigation requires confirmation (`--yes` for automation), and writes only a draft.
+
+Record-view previews and queries require both `metadata:read` and `records:read`, use the current Host's records and draft configuration, and return `mode: draft-preview` plus `draftRevision`. They use API-key visibility rather than an employee's workspace identity; hidden fields stay excluded and hidden filter fields are rejected. Page size is configured on the component (10/20/50). Search is ignored when `showSearch` is false. `dashboards run` is for code components.
+
+For `dashboards update`, construct the body from the latest `get`: preserve `label`, `description`, `icon`, `filters`, and **all** `components`; set `baseRevision` to the returned `draftRevision`. Omit response-only fields. Keep existing component IDs and `recordView` unchanged when editing other properties; omit IDs on new components. Omitting `components` or `filters` clears them.
+
 ### 6.3 Production hotfix
 
 ```bash
@@ -289,3 +324,68 @@ Transport requests time out after 60 seconds. A lost write response has an unkno
 - `flowbase docs catalogs workflow-python`: record creation examples and failed-task retry. `workflows python-runtime OBJECT new` discovers current object bindings; `workflows executions` includes Python attempts, logs and `canRetry`.
 
 Use `records list OBJECT --view-id VIEW --view-layout` for tree/Gantt projections; the default remains a flat list. `records update` accepts `updatedAt` and `planViewId` in its JSON body for version-checked plan edits. Formula validation/trials require both metadata read and record read; workflow retry requires both metadata write and record write and explicit CLI confirmation (`--yes` in automation).
+
+### Reusable iframe configuration (4.11)
+
+`flowbase iframes list|get|create|update|delete` manages environment-specific iframe drafts. Create/update use `--json-file`; fields are `label`, `icon` (default `IconWorld`), `color` (default `#2563EB`), and a complete HTTPS `url` without credentials. Update and delete require `baseRevision` from `iframes get`; deletion also requires confirmation (`--yes` for noninteractive use).
+
+```bash
+flowbase iframes create --json-file iframe.json
+flowbase iframes get ifr_example
+flowbase iframes update ifr_example --json-file iframe-update.json
+flowbase apps add-iframes app_example ifr_example
+flowbase apps set-iframe-group app_example ifr_example --group-id grp_example
+flowbase apps set-iframe-group app_example ifr_example --ungrouped
+flowbase apps reorder-members app_example --json '{"items":[{"type":"iframe","id":"ifr_example"}]}'
+flowbase apps remove-iframe app_example ifr_example --yes
+flowbase iframes delete ifr_example --json '{"baseRevision":12}' --yes
+```
+
+Removal only unlinks one app. Deletion unlinks all apps atomically. Changes follow the existing commit/release/rollback workflow; they do not fetch, proxy or modify the external website. API keys use `metadata:read`/`metadata:write`; browser roles use `iframe.manage` for shared resources and `app.manage` for app associations.
+
+### Custom object views (4.12)
+
+Read `flowbase docs catalogs custom-views` and `flowbase views list OBJECT` first. Save the following as `view.json`, replacing `baseRevision` with the current `draftRevision`:
+
+```json
+{
+  "baseRevision": 4,
+  "name": "Custom overview",
+  "enabled": false,
+  "defaultFieldIds": [],
+  "displayMode": "custom",
+  "custom": {
+    "runtimeVersion": "cv1",
+    "source": "import React from 'react'; export default function View(){return <div>Hello</div>}"
+  }
+}
+```
+
+```bash
+flowbase views create obj_example --json-file view.json
+flowbase views list obj_example
+flowbase views update obj_example viw_example --json-file view.json
+flowbase views set-enabled obj_example viw_example --base-revision 6 --enabled --yes
+```
+
+Use the revision returned by the preceding write, rather than the example numbers. Custom views start disabled; preview in the browser and enable when ready. Updates replace the writable snapshot: preserve `custom.source`, `custom.runtimeVersion`, `displayMode`, filters and other configuration from `views list`, excluding the response-only `id` and `status`. Built-in/custom view types cannot be converted. JSX source is limited to 512 KiB UTF-8; the runtime supports `react`, `three` and `flowbase`. CLI configuration does not execute browser previews.
+
+### Record detail embedded pages (4.13)
+
+`flowbase docs catalogs page-components` documents `recordEmbed`, supported at the top level or inside tabs of a detail Page. Add this component to an existing region column (or a tab's `components`):
+
+```json
+{
+  "kind": "recordEmbed",
+  "label": "External panel",
+  "showTitle": true,
+  "url": "https://example.com/panel",
+  "height": 480,
+  "allowRead": false,
+  "allowedFieldIds": []
+}
+```
+
+Read `flowbase pages get PAGE`, preserve the existing components and IDs, and remove the read-only Page keys listed in `docs catalogs page-components`. Wrap the editable snapshot as `{"baseRevision":4,"page":{...}}`, then use `flowbase pages update PAGE --json-file page.json` (or `pages create --json-file page.json` for a new detail Page). For creation, omit the Page ID and IDs of new regions/components so the server allocates them.
+
+Height must be an integer from 240 to 1600. URLs must use external HTTPS and exclude credentials, identity/context parameters and templates. To permit SDK reads, set `allowRead: true` and select at least one unique active field ID in `allowedFieldIds`; current record/field permissions still apply. The browser SDK is `/sdk/record-embed.v1.js`. The CLI configures the component; rendering and SDK calls run in the browser. `flowbase-user` has no metadata management commands.

{flowbase_cli-0.1.15 → flowbase_cli-0.1.17}/src/flowbase_cli.egg-info/SOURCES.txt

@@ -11,4 +11,5 @@ src/flowbase_cli.egg-info/entry_points.txt
 src/flowbase_cli.egg-info/top_level.txt
 tests/test_autonomy.py
 tests/test_cli.py
+tests/test_iframes.py
 tests/test_recent_commands.py

{flowbase_cli-0.1.15 → flowbase_cli-0.1.17}/tests/test_cli.py

@@ -261,7 +261,7 @@ class FlowBaseCliTest(unittest.TestCase):
         kinds = {item.get("kind") for item in page_components["kinds"]}
         self.assertEqual(kinds, {
             None, "relatedList", "approval", "detailSummary", "stageBar",
-            "tabs", "relatedSummary", "attachmentCard", "noticeBlock",
+            "tabs", "relatedSummary", "attachmentCard", "noticeBlock", "recordEmbed",
         })
         approval = next(
             item for item in page_components["kinds"] if item.get("kind") == "approval"

flowbase_cli-0.1.17/tests/test_iframes.py

@@ -0,0 +1,30 @@
+"""Iframe CLI uses the same API contracts as browser management."""
+import io
+from unittest.mock import patch
+import pytest
+from flowbase_cli.main import main
+
+
+@pytest.mark.parametrize("args,endpoint,path,body", [
+    (["iframes", "list"], "iframes.list", None, None),
+    (["iframes", "get", "ifr_x"], "iframes.get", {"iframe_id": "ifr_x"}, None),
+    (["iframes", "create", "--json", '{"label":"Help","url":"https://example.com"}'], "iframes.create", None, {"label":"Help","url":"https://example.com"}),
+    (["iframes", "update", "ifr_x", "--json", '{"label":"Help","url":"https://example.com","baseRevision":3}'], "iframes.update", {"iframe_id":"ifr_x"}, {"label":"Help","url":"https://example.com","baseRevision":3}),
+    (["iframes", "delete", "ifr_x", "--yes", "--json", '{"baseRevision":4}'], "iframes.delete", {"iframe_id":"ifr_x"}, {"baseRevision":4}),
+    (["apps", "add-iframes", "app_x", "ifr_x", "ifr_y"], "apps.iframes.add", {"app_id":"app_x"}, {"iframeIds":["ifr_x","ifr_y"]}),
+    (["apps", "remove-iframe", "app_x", "ifr_x", "--yes"], "apps.iframes.remove", {"app_id":"app_x","iframe_id":"ifr_x"}, None),
+    (["apps", "set-iframe-group", "app_x", "ifr_x", "--ungrouped"], "apps.iframes.set-group", {"app_id":"app_x","iframe_id":"ifr_x"}, {"groupId":None}),
+    (["apps", "reorder-members", "app_x", "--json", '{"items":[{"type":"iframe","id":"ifr_x"}]}'], "apps.members.reorder", {"app_id":"app_x"}, {"items":[{"type":"iframe","id":"ifr_x"}]}),
+])
+def test_iframe_cli_request(args, endpoint, path, body):
+    with patch("flowbase_cli.main.OpenApiClient.request", return_value=b"{}") as request, patch("sys.stdout", io.StringIO()):
+        assert main(args) == 0
+    assert request.call_args.args[0] == endpoint
+    assert request.call_args.kwargs["path_params"] == path
+    assert request.call_args.kwargs["body"] == body
+
+
+def test_delete_requires_confirmation():
+    with patch("flowbase_cli.main.OpenApiClient.request") as request, patch("sys.stdin.isatty", return_value=False), patch("sys.stderr", io.StringIO()):
+        assert main(["iframes", "delete", "ifr_x", "--json", '{"baseRevision":0}']) == 1
+    request.assert_not_called()