feat(ui): add row-context actions and bodyShape to Action

hotlong · hotlong · commit 27b5ac661c31 · 2026-05-19T15:20:37.000+08:00
diff --git a/apps/cloud/wrangler.toml b/apps/cloud/wrangler.toml
@@ -45,7 +45,7 @@ compatibility_flags = ["nodejs_compat"]
 # rebuild + re-push to ship a new version, then run `wrangler deploy`.
 [[containers]]
 class_name = "CloudContainer"
-image = "registry.cloudflare.com/2846eb40a60f4738e292b90dcd8cce10/objectstack-cloud:0b90abfe"
+image = "registry.cloudflare.com/2846eb40a60f4738e292b90dcd8cce10/objectstack-cloud:a3ab2d4a"
 max_instances = 3
 instance_type = "standard-1"
 
diff --git a/packages/platform-objects/src/identity/sys-invitation.object.ts b/packages/platform-objects/src/identity/sys-invitation.object.ts
@@ -40,6 +40,20 @@ export const SysInvitation = ObjectSchema.create({
         { field: 'role', required: true },
       ],
     },
+    {
+      name: 'cancel_invitation',
+      label: 'Cancel Invitation',
+      icon: 'x-circle',
+      variant: 'danger',
+      mode: 'delete',
+      locations: ['list_item'],
+      type: 'api',
+      target: '/api/v1/auth/organization/cancel-invitation',
+      recordIdParam: 'invitationId',
+      confirmText: 'Cancel this invitation? The recipient will no longer be able to accept it.',
+      successMessage: 'Invitation canceled',
+      refreshAfter: true,
+    },
   ],
 
   listViews: {
diff --git a/packages/platform-objects/src/identity/sys-member.object.ts b/packages/platform-objects/src/identity/sys-member.object.ts
@@ -20,7 +20,42 @@ export const SysMember = ObjectSchema.create({
   description: 'Organization membership records',
   titleFormat: '{user_id} in {organization_id}',
   compactLayout: ['user_id', 'organization_id', 'role'],
-  
+
+  // Row-level actions: better-auth `organization/update-member-role` and
+  // `organization/remove-member`. Generic CRUD is suppressed on better-auth
+  // managed tables, so these are the canonical edit/delete entry points.
+  actions: [
+    {
+      name: 'update_member_role',
+      label: 'Change Role',
+      icon: 'shield',
+      mode: 'edit',
+      locations: ['list_item'],
+      type: 'api',
+      target: '/api/v1/auth/organization/update-member-role',
+      recordIdParam: 'memberId',
+      successMessage: 'Member role updated',
+      refreshAfter: true,
+      params: [
+        { field: 'role', required: true, defaultFromRow: true },
+      ],
+    },
+    {
+      name: 'remove_member',
+      label: 'Remove Member',
+      icon: 'user-minus',
+      variant: 'danger',
+      mode: 'delete',
+      locations: ['list_item'],
+      type: 'api',
+      target: '/api/v1/auth/organization/remove-member',
+      recordIdParam: 'memberIdOrEmail',
+      confirmText: 'Remove this member from the organization? They will lose access to all org resources.',
+      successMessage: 'Member removed',
+      refreshAfter: true,
+    },
+  ],
+
   fields: {
     id: Field.text({
       label: 'Member ID',
diff --git a/packages/platform-objects/src/identity/sys-organization.object.ts b/packages/platform-objects/src/identity/sys-organization.object.ts
@@ -41,6 +41,39 @@ export const SysOrganization = ObjectSchema.create({
         { field: 'logo' },
       ],
     },
+    {
+      name: 'update_organization',
+      label: 'Edit Organization',
+      icon: 'pencil',
+      mode: 'edit',
+      locations: ['list_item'],
+      type: 'api',
+      target: '/api/v1/auth/organization/update',
+      recordIdParam: 'organizationId',
+      // better-auth `organization/update` nests editable fields under `data`.
+      bodyShape: { wrap: 'data' },
+      successMessage: 'Organization updated',
+      refreshAfter: true,
+      params: [
+        { field: 'name', required: true, defaultFromRow: true },
+        { field: 'slug', required: true, defaultFromRow: true },
+        { field: 'logo', defaultFromRow: true },
+      ],
+    },
+    {
+      name: 'delete_organization',
+      label: 'Delete Organization',
+      icon: 'trash-2',
+      variant: 'danger',
+      mode: 'delete',
+      locations: ['list_item'],
+      type: 'api',
+      target: '/api/v1/auth/organization/delete',
+      recordIdParam: 'organizationId',
+      confirmText: 'Delete this organization? All members will lose access immediately. This cannot be undone.',
+      successMessage: 'Organization deleted',
+      refreshAfter: true,
+    },
   ],
 
   listViews: {
diff --git a/packages/platform-objects/src/identity/sys-session.object.ts b/packages/platform-objects/src/identity/sys-session.object.ts
@@ -44,6 +44,22 @@ export const SysSession = ObjectSchema.create({
       successMessage: 'All other sessions revoked',
       refreshAfter: true,
     },
+    {
+      name: 'revoke_session',
+      label: 'Revoke Session',
+      icon: 'log-out',
+      variant: 'danger',
+      mode: 'delete',
+      locations: ['list_item'],
+      type: 'api',
+      target: '/api/v1/auth/revoke-session',
+      // better-auth `revoke-session` keys off the session token, not the id.
+      recordIdParam: 'token',
+      recordIdField: 'token',
+      confirmText: 'Revoke this session? The user will be signed out from that device.',
+      successMessage: 'Session revoked',
+      refreshAfter: true,
+    },
   ],
 
   listViews: {
diff --git a/packages/spec/src/ui/action.zod.ts b/packages/spec/src/ui/action.zod.ts
@@ -55,6 +55,12 @@ export const ActionParamSchema = lazySchema(() => z.object({
   helpText: z.string().optional(),
   /** Default value for the dialog input. */
   defaultValue: z.unknown().optional(),
+  /**
+   * When true, the param's default value is pulled from the current row record
+   * (key = the resolved field name) when the action runs from a list_item
+   * context. Useful for edit dialogs that pre-fill from the selected row.
+   */
+  defaultFromRow: z.boolean().optional(),
 }).refine(
   (p) => Boolean(p.name) || Boolean(p.field),
   { message: 'ActionParam requires either "name" or "field"' },
@@ -190,6 +196,34 @@ export const ActionSchema = lazySchema(() => z.object({
   /** Bulk Operations */
   bulkEnabled: z.boolean().optional().describe('Whether this action can be applied to multiple selected records'),
 
+  /**
+   * Row-context: when the action runs from a list_item location, this body key
+   * receives the row's id (or the field named by `recordIdField`). Defaults to
+   * `id` when omitted but `recordIdField` is set; otherwise no injection.
+   */
+  recordIdParam: z.string().optional().describe('Body key to inject the row id into when running from a list_item context.'),
+  /**
+   * Row field whose value seeds `recordIdParam`. Defaults to `'id'` when
+   * `recordIdParam` is set. Use this when the body key expects a non-id value
+   * (e.g. `token` for `revoke-session`).
+   */
+  recordIdField: z.string().optional().describe('Row field whose value seeds recordIdParam. Defaults to "id".'),
+  /**
+   * Request-body shape. `'flat'` (default) sends collected params at the top
+   * level. `{ wrap: 'data' }` nests the user-collected params under that key
+   * (used by better-auth `organization/update`), while `recordIdParam` and
+   * other top-level keys stay flat.
+   */
+  bodyShape: z.union([
+    z.literal('flat'),
+    z.object({ wrap: z.string() }),
+  ]).optional().describe('Body wrapping: flat (default) or { wrap: key } to nest user-collected params under a key.'),
+  /**
+   * Semantic mode hint — UI / runtime can use this to pick confirm copy,
+   * default variants, success messaging. Pure metadata; no runtime branching.
+   */
+  mode: z.enum(['create', 'edit', 'delete', 'custom']).optional().describe('Semantic mode of the action.'),
+
   /** Execution */
   timeout: z.number().optional().describe('Maximum execution time in milliseconds for the action'),
 
