feat: Phase B (Element Library & Builder) + Phase C (Sharing, Embedding & Permissions) by Copilot · Pull Request #699 · objectstack-ai/framework

Copilot · 2026-02-16T10:40:26Z

Implements the next two roadmap phases from the Airtable Interface gap analysis.

Phase B: Element Library & Builder (v3.3)

Interactive elements — element:button, element:filter, element:form, element:record_picker with prop schemas, registered in PageComponentType and ComponentPropsMap
BlankPageLayoutSchema — Grid-based free-form canvas positioning (columns, rowHeight, gap, positioned items[]), wired as optional blankLayout on PageSchema
Variable binding — PageVariableSchema gains record_id type and source field; ElementRecordPickerPropsSchema has targetVariable for bidirectional binding
Studio Interface Builder — InterfaceBuilderConfigSchema with snap/zoom/palette/panel settings (studio/interface-builder.zod.ts)

Phase C: Sharing, Embedding & Permissions (v4.0)

SharingConfigSchema — public link, password, domain allowlist, expiration, anonymous access (ui/sharing.zod.ts)
EmbedConfigSchema — iframe origin restrictions, responsive sizing, header/nav visibility
InterfaceSchema — optional sharing and embed fields (assignedRoles already existed)
FormViewSchema — optional sharing for public form sharing

Usage

// Blank page with record picker → variable binding
defineInterface({
  name: 'order_portal',
  label: 'Order Portal',
  sharing: { enabled: true, password: 'secret', expiresAt: '2027-01-01T00:00:00Z' },
  embed: { enabled: true, allowedOrigins: ['https://partner.com'] },
  pages: [{
    name: 'picker_page',
    label: 'Pick Account',
    type: 'blank',
    variables: [
      { name: 'selected_id', type: 'record_id', source: 'acct_picker' },
    ],
    regions: [{
      name: 'main',
      components: [
        { id: 'acct_picker', type: 'element:record_picker',
          properties: { object: 'account', displayField: 'name', targetVariable: 'selected_id' } },
        { id: 'submit', type: 'element:button',
          properties: { label: 'Continue', variant: 'primary' } },
      ],
    }],
    blankLayout: {
      columns: 12,
      items: [
        { componentId: 'acct_picker', x: 0, y: 0, width: 8, height: 2 },
        { componentId: 'submit', x: 0, y: 2, width: 4, height: 1 },
      ],
    },
  }],
});

57 new tests, all 5,541 passing. No CodeQL alerts.

Original prompt

按 roadmap 完成 Phase B: Element Library & Builder (v3.3)

Interactive elements — element:button, element:filter, element:form, element:record_picker
BlankPageLayoutSchema — Free-form canvas composition with grid-based positioning
Record picker variable binding — PageVariableSchema integration with element:record_picker
Studio Interface Builder — Drag-and-drop element placement UI
Phase C: Sharing, Embedding & Permissions (v4.0)

SharingConfigSchema — Public link, password, domain restriction, expiration (src/ui/sharing.zod.ts)
EmbedConfigSchema — iframe embedding with origin restrictions and display options
Per-interface role assignment — assignedRoles on InterfaceSchema
Public form sharing — sharing property on FormViewSchema

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

vercel · 2026-02-16T10:40:32Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
objectstack-play	Ready	Preview, Comment	Feb 16, 2026 2:37pm
spec	Ready	Preview, Comment	Feb 16, 2026 2:37pm

…ing, Embedding & Permissions) Phase B: - Add interactive element schemas: element:button, element:filter, element:form, element:record_picker - Add BlankPageLayoutSchema for free-form canvas with grid-based positioning - Add record_id type and source binding to PageVariableSchema - Add Studio Interface Builder config schema - Register new elements in PageComponentType and ComponentPropsMap Phase C: - Add SharingConfigSchema (public link, password, domain restriction, expiration) - Add EmbedConfigSchema (iframe embedding, origin restrictions, display options) - Add sharing/embed to InterfaceSchema - Add sharing to FormViewSchema for public form sharing - Per-interface role assignment (assignedRoles already existed) Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Copilot

Pull request overview

This pull request implements Phase B (Element Library & Builder) and Phase C (Sharing, Embedding & Permissions) of the Airtable Interface gap analysis roadmap.

Changes:

Phase B adds interactive elements (button, filter, form, record_picker), blank page free-form canvas layout with grid positioning, variable binding for record picker, and Studio Interface Builder configuration
Phase C introduces sharing and embedding schemas with public link, password protection, domain restrictions, expiration, and iframe embedding controls for interfaces and forms

Reviewed changes

Copilot reviewed 12 out of 12 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
packages/spec/src/ui/sharing.zod.ts	New sharing & embedding protocol schemas (SharingConfigSchema, EmbedConfigSchema)
packages/spec/src/ui/sharing.test.ts	Comprehensive test coverage for sharing configurations (114 lines, 2 test suites)
packages/spec/src/ui/view.zod.ts	Added sharing field to FormViewSchema for public form sharing
packages/spec/src/ui/view.test.ts	Tests for FormViewSchema sharing integration (44 lines)
packages/spec/src/ui/interface.zod.ts	Added sharing and embed fields to InterfaceSchema
packages/spec/src/ui/interface.test.ts	Extensive tests for interactive elements, blank layout, variables, and sharing (394 lines, 8 test suites)
packages/spec/src/ui/page.zod.ts	Added interactive element types, PageVariableSchema enhancements (record_id type, source field), BlankPageLayoutSchema for free-form canvas
packages/spec/src/ui/component.zod.ts	Added prop schemas for 4 interactive elements (button, filter, form, record_picker) and ComponentPropsMap registration
packages/spec/src/ui/index.ts	Export sharing.zod module
packages/spec/src/studio/interface-builder.zod.ts	New Studio Interface Builder configuration schemas (snap, zoom, palette, panels)
packages/spec/src/studio/interface-builder.test.ts	Test coverage for Interface Builder schemas (118 lines, 4 test suites)
packages/spec/src/studio/index.ts	Export Interface Builder schemas and types

Copilot · 2026-02-16T17:19:02Z

+  password: z.string().optional().describe('Password required to access shared link'),
+  allowedDomains: z.array(z.string()).optional()
+    .describe('Restrict access to specific email domains (e.g. ["example.com"])'),
+  expiresAt: z.string().optional()


The expiresAt field should use .datetime() validation to ensure proper ISO 8601 format validation. The codebase consistently uses z.string().datetime() for ISO 8601 datetime fields across all other schemas (e.g., identity.zod.ts, audit.zod.ts, conversation.zod.ts). This provides runtime validation that the string is a valid ISO 8601 datetime, preventing invalid values like '2027-13-45' from being accepted.

Change:
expiresAt: z.string().optional()

To:
expiresAt: z.string().datetime().optional()

Suggested change

expiresAt: z.string().optional()

expiresAt: z.string().datetime().optional()

Copilot · 2026-02-16T17:19:03Z

+ */
+export const SharingConfigSchema = z.object({
+  enabled: z.boolean().default(false).describe('Enable public sharing'),
+  publicLink: z.string().optional().describe('Generated public share URL'),


The publicLink field should use .url() validation to ensure it's a valid URL. The codebase consistently uses z.string().url() for URL fields across all other schemas (e.g., webhook.zod.ts line 69, connector/saas.zod.ts line 80, documentation.zod.ts line 51). This provides runtime validation that the string is a properly formatted URL, preventing invalid values like 'not-a-url' from being accepted.

Change:
publicLink: z.string().optional()

To:
publicLink: z.string().url().optional()

Suggested change

publicLink: z.string().optional().describe('Generated public share URL'),

publicLink: z.string().url().optional().describe('Generated public share URL'),

Copilot · 2026-02-16T17:19:03Z

+ */
+export const EmbedConfigSchema = z.object({
+  enabled: z.boolean().default(false).describe('Enable iframe embedding'),
+  allowedOrigins: z.array(z.string()).optional()


The allowedOrigins array should validate that each origin is a valid URL. For security-sensitive CORS/iframe configurations, the codebase pattern is to use simple string arrays (e.g., object-storage.zod.ts line 246, plugin-security-advanced.zod.ts line 552), but given that these are iframe parent origins used for security decisions, consider adding .url() validation to each array element to prevent configuration errors.

Consider changing:
allowedOrigins: z.array(z.string()).optional()

To:
allowedOrigins: z.array(z.string().url()).optional()

This ensures origins are properly formatted URLs (e.g., 'https://example.com') rather than accepting potentially invalid values.

Suggested change

allowedOrigins: z.array(z.string()).optional()

allowedOrigins: z.array(z.string().url()).optional()

Initial plan

a83cfcf

Copilot AI assigned Copilot and hotlong Feb 16, 2026

Copilot started work on behalf of hotlong February 16, 2026 10:57 View session

Copilot AI changed the title ~~[WIP] Add element library and studio interface builder features~~ feat: Phase B (Element Library & Builder) + Phase C (Sharing, Embedding & Permissions) Feb 16, 2026

Copilot AI requested a review from hotlong February 16, 2026 11:10

Copilot finished work on behalf of hotlong February 16, 2026 11:10

vercel bot deployed to Preview – objectstack-play February 16, 2026 14:34 View deployment

vercel bot deployed to Preview – spec February 16, 2026 14:37 View deployment

hotlong approved these changes Feb 16, 2026

View reviewed changes

hotlong marked this pull request as ready for review February 16, 2026 17:14

Copilot AI review requested due to automatic review settings February 16, 2026 17:14

Copilot started reviewing on behalf of hotlong February 16, 2026 17:15 View session

hotlong merged commit 62f0bcf into main Feb 16, 2026
7 checks passed

Copilot AI reviewed Feb 16, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: Phase B (Element Library & Builder) + Phase C (Sharing, Embedding & Permissions)#699

feat: Phase B (Element Library & Builder) + Phase C (Sharing, Embedding & Permissions)#699
hotlong merged 2 commits intomainfrom
copilot/implement-element-library-and-builder

Copilot AI commented Feb 16, 2026 •

edited

Loading

Uh oh!

vercel bot commented Feb 16, 2026 •

edited

Loading

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Feb 16, 2026

Uh oh!

Copilot AI Feb 16, 2026

Uh oh!

Copilot AI Feb 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

	expiresAt: z.string().optional()
	expiresAt: z.string().datetime().optional()

	publicLink: z.string().optional().describe('Generated public share URL'),
	publicLink: z.string().url().optional().describe('Generated public share URL'),

	allowedOrigins: z.array(z.string()).optional()
	allowedOrigins: z.array(z.string().url()).optional()

Conversation

Copilot AI commented Feb 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Phase B: Element Library & Builder (v3.3)

Phase C: Sharing, Embedding & Permissions (v4.0)

Usage

Uh oh!

vercel bot commented Feb 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 16, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 16, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 16, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Feb 16, 2026 •

edited

Loading

vercel bot commented Feb 16, 2026 •

edited

Loading