@@ -0,0 +1,40 @@
+---
+'@object-ui/react': patch
+'@object-ui/core': patch
+'@object-ui/data-objectstack': patch
+'@object-ui/app-shell': patch
+'@object-ui/plugin-designer': patch
+---
+
+refactor(react): `AdapterCtx` / `useAdapter` are typed by `DataSource`, and `@object-ui/react` no longer depends on `@object-ui/data-objectstack`
+
+Clause-②: yes (narrowing)
+Metadata-protocol: none
+
+<!-- adr-0087: not-required (runtime-interface-only ui/packages/react/src/context/AppShellContext.tsx#ContextAdapter) No metadata moves: the narrowed type is the one `AdapterCtx` and `useAdapter()` carry, a runtime TypeScript type of a React context, with no Zod schema, spec declaration or stored row behind it, so there is nothing for objectstack migrate meta to rewrite; the compiler names the affected call site. -->
+
+The runtime no longer depends on one adapter, so a bring-your-own backend installs `@object-ui/react` without the ObjectStack adapter, and learns at the type level which `DataSource` members it lacks.
+
+- **`@object-ui/react`**: `AdapterCtx` and `useAdapter()` are typed by the protocol-level `DataSource` from `@object-ui/types`, not by `ObjectStackAdapter`. A new exported extension point, `AdapterContextRegister`, lets a host declare the concrete adapter its provider installs; `useAdapter()` then returns that adapter and an `AdapterCtx.Provider` value is checked against it. `ContextAdapter` names the resolved type. `@object-ui/data-objectstack` moves from `dependencies` to `devDependencies` (one boundary test still reads it).
+- **`@object-ui/core`**: exports `API_ACCESS_DENIED_CODES` and `isApiAccessDeniedError`, the `enable`-block API denial predicate, moved here unchanged so `@object-ui/react` can classify the denial without the adapter.
+- **`@object-ui/data-objectstack`**: re-exports both names from `@object-ui/core`; its published face is unchanged.
+- **`@object-ui/app-shell`**: declares `ObjectStackAdapter` on `AdapterContextRegister`, and the declaration ships in its published types, so a host that mounts `AdapterProvider` keeps today's `useAdapter()` type.
+- **`@object-ui/plugin-designer`**: declares the same adapter for its own pages, which read the ObjectStack client.
+
+**BREAKING** (a type narrowing) for a TypeScript reader of `useAdapter()` / `AdapterCtx` from `@object-ui/react` that reads an `ObjectStackAdapter` member `DataSource` does not declare (`getClient`, `probeAppAccess`, `probeMetaItemAccess`, `getConnectionState`, `onConnectionStateChange`, `clearCache`, `queryDataset`, …) and does not import `@object-ui/app-shell`. Runtime behaviour is unchanged: the context holds the same adapter object as before.
+
+- **Before.** `useAdapter()` returned `ObjectStackAdapter | null` whatever the host installed.
+- **Now.** It returns `DataSource | null` unless the host declares its adapter, and reading `getClient` off it is `error TS2339`.
+- **Fix.** Either declare the adapter your provider installs, once, in your own package:
+
+  ```ts
+  import type { ObjectStackAdapter } from '@object-ui/data-objectstack';
+
+  declare module '@object-ui/react' {
+    interface AdapterContextRegister {
+      adapter: ObjectStackAdapter;
+    }
+  }
+  ```
+
+  or narrow at the call site that needs the ObjectStack-only member, and keep reading `DataSource` members everywhere else.
@@ -1 +1 @@
-{"package":"ui/packages/core","sources":111,"sha256":"c2cf28d9a3a53535b8a328f099857f84b3ac90402fedc8b898a9266cb261f55c","manifestSha256":"1f6e1ccb925a678eaa393f9091dfc7d0285e4e3626e0a5c61a5474687debabb7"}
+{"package":"ui/packages/core","sources":112,"sha256":"e586f7573193068eefdbf8c22651072941bbd3843d60612cc2bc5d7e16003fca","manifestSha256":"1f6e1ccb925a678eaa393f9091dfc7d0285e4e3626e0a5c61a5474687debabb7"}
@@ -1 +1 @@
-{"package":"ui/packages/react","sources":70,"sha256":"d89393cc7203be3bc88ea59d1a5e0ad6cbda588b8b8ad44baefed0a44da5d9d2","manifestSha256":"1f6e1ccb925a678eaa393f9091dfc7d0285e4e3626e0a5c61a5474687debabb7"}
+{"package":"ui/packages/react","sources":70,"sha256":"0a4e839e9459da5ce7a6eb9b112d527bf8afecd3f7e8c6f63b936e5eb9593c68","manifestSha256":"1f6e1ccb925a678eaa393f9091dfc7d0285e4e3626e0a5c61a5474687debabb7"}
@@ -0,0 +1,23 @@
+/**
+ * The app shell's declaration of the adapter it installs into `AdapterCtx`.
+ *
+ * `@object-ui/react` types `AdapterCtx` / `useAdapter` by the protocol-level
+ * `DataSource`, so the runtime does not depend on any one adapter
+ * (objectstack#25917). This shell's `AdapterProvider` installs an
+ * `ObjectStackAdapter`, and shell code reads its members beyond `DataSource`
+ * (`getClient`, the access probes, the connection state), so the shell
+ * declares that adapter here, in the package that already depends on it.
+ *
+ * Imported from this package's entry so the declaration rides its published
+ * types: a host that mounts `AdapterProvider` reads the same adapter type.
+ */
+
+import type { ObjectStackAdapter } from '@object-ui/data-objectstack';
+
+declare module '@object-ui/react' {
+  interface AdapterContextRegister {
+    adapter: ObjectStackAdapter;
+  }
+}
+
+export {};
@@ -8,6 +8,10 @@
 // Components
 export { AppShell } from './components/AppShell.js';
 
+// The adapter this shell installs into `AdapterCtx`, declared for every
+// reader of `useAdapter` (see the module).
+import './adapter-context-register.js';
+
 // Providers
 export { AdapterProvider, useAdapter } from './providers/AdapterProvider.js';
 export { MetadataProvider, useMetadata, useMetadataItem } from './providers/MetadataProvider.js';
 
@@ -40,6 +40,9 @@ export * from './utils/non-grid-row-ceiling.js';
 // the floor itself never grows past the four.
 export * from './utils/emptiness.js';
 export * from './utils/expand-fields.js';
+// The `enable`-block API denial predicate, read by `@object-ui/react` and
+// re-exported by `@object-ui/data-objectstack` (objectstack#25917).
+export * from './utils/api-access-denied.js';
 // The RETIREMENT gate (objectui#4914, maintainer ruling B). Homed here rather
 // than in `@object-ui/fields` because `@object-ui/components` is one of its six
 // consumers and `fields` depends on `components` — see the module's docblock
 
@@ -0,0 +1,57 @@
+/**
+ * ObjectUI — the `enable`-block API denial predicate
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+import { errorCodeIsAnyOf } from '@object-ui/types';
+
+// Homed in core rather than in `@object-ui/data-objectstack`: the predicate is
+// a pure read of the ADR-0112 `code`, and `@object-ui/react` asks it
+// (`classifyLoadError`) without depending on any one adapter. The adapter
+// re-exports both names unchanged.
+
+/**
+ * The two denials the server derives from an object's `enable` block —
+ * `apiAccessDenialFromEnable` (objectstack `packages/rest/src/rest-server.ts`).
+ *
+ *   - `OBJECT_API_DISABLED` (404) — `enable.apiEnabled: false`; the object is
+ *     not exposed over the data API at all.
+ *   - `OBJECT_API_METHOD_NOT_ALLOWED` (405) — the operation is absent from the
+ *     `enable.apiMethods` whitelist.
+ *
+ * Both are **pure functions of the object's metadata**: no user, no permission,
+ * no context, no request body. So neither is transient and neither is
+ * per-user — when one happens it is a permanent property of that object, and
+ * every retry of every persona gets the identical answer.
+ *
+ * That is exactly why they must not be degraded into "no data". A 404 from a
+ * missing collection means *this backend doesn't have that table*, which the
+ * optional-collection probes below legitimately read as "feature unavailable";
+ * a 404 from `OBJECT_API_DISABLED` means *this page can never work*. Answering
+ * the second with an empty result set renders "you have no records" over a
+ * surface that is not allowed to have any (objectui#4408 — it also hid the
+ * upstream defect objectstack#7544 for its entire life, because a merely
+ * unpopulated page invites nobody to click through).
+ */
+export const API_ACCESS_DENIED_CODES = [
+  'OBJECT_API_DISABLED',
+  'OBJECT_API_METHOD_NOT_ALLOWED',
+] as const;
+
+/**
+ * True when `error` is an `enable`-block API denial (see
+ * {@link API_ACCESS_DENIED_CODES}).
+ *
+ * Discriminates on the ADR-0112 `code`, never on the status: 404 alone cannot
+ * separate a disabled object from a missing collection, and 405 alone cannot
+ * separate a withheld method from any other method rejection. The code survives
+ * the transport — `@objectstack/client`'s fetch wrapper stamps `error.code`
+ * from the response envelope, and both spellings are declared members of the
+ * spec's `StandardErrorCode` — so no heuristic on status is needed or wanted.
+ */
+export function isApiAccessDeniedError(error: unknown): boolean {
+  return errorCodeIsAnyOf(error, API_ACCESS_DENIED_CODES);
+}
@@ -79,6 +79,7 @@ import {
   convertFiltersToAST,
   emulateBatchTransaction,
   normalizeSchemaReferenceKeys,
+  isApiAccessDeniedError,
   type DatasetDrillRange,
 } from '@object-ui/core';
 import { MetadataCache } from './cache/MetadataCache';
@@ -1017,48 +1018,11 @@ export function is404Error(error: unknown): boolean {
   return errorCodeIsAnyOf({ code }, ['OBJECT_NOT_FOUND', 'RECORD_NOT_FOUND']);
 }
 
-/**
- * The two denials the server derives from an object's `enable` block —
- * `apiAccessDenialFromEnable` (objectstack `packages/rest/src/rest-server.ts`).
- *
- *   - `OBJECT_API_DISABLED` (404) — `enable.apiEnabled: false`; the object is
- *     not exposed over the data API at all.
- *   - `OBJECT_API_METHOD_NOT_ALLOWED` (405) — the operation is absent from the
- *     `enable.apiMethods` whitelist.
- *
- * Both are **pure functions of the object's metadata**: no user, no permission,
- * no context, no request body. So neither is transient and neither is
- * per-user — when one happens it is a permanent property of that object, and
- * every retry of every persona gets the identical answer.
- *
- * That is exactly why they must not be degraded into "no data". A 404 from a
- * missing collection means *this backend doesn't have that table*, which the
- * optional-collection probes below legitimately read as "feature unavailable";
- * a 404 from `OBJECT_API_DISABLED` means *this page can never work*. Answering
- * the second with an empty result set renders "you have no records" over a
- * surface that is not allowed to have any (objectui#4408 — it also hid the
- * upstream defect objectstack#7544 for its entire life, because a merely
- * unpopulated page invites nobody to click through).
- */
-export const API_ACCESS_DENIED_CODES = [
-  'OBJECT_API_DISABLED',
-  'OBJECT_API_METHOD_NOT_ALLOWED',
-] as const;
-
-/**
- * True when `error` is an `enable`-block API denial (see
- * {@link API_ACCESS_DENIED_CODES}).
- *
- * Discriminates on the ADR-0112 `code`, never on the status: 404 alone cannot
- * separate a disabled object from a missing collection, and 405 alone cannot
- * separate a withheld method from any other method rejection. The code survives
- * the transport — `@objectstack/client`'s fetch wrapper stamps `error.code`
- * from the response envelope, and both spellings are declared members of the
- * spec's `StandardErrorCode` — so no heuristic on status is needed or wanted.
- */
-export function isApiAccessDeniedError(error: unknown): boolean {
-  return errorCodeIsAnyOf(error, API_ACCESS_DENIED_CODES);
-}
+// `API_ACCESS_DENIED_CODES` / `isApiAccessDeniedError` live in
+// `@object-ui/core` (`utils/api-access-denied.ts`) so that `@object-ui/react`
+// can classify the denial without depending on this adapter. Re-exported here
+// unchanged: this package's published face keeps both names.
+export { API_ACCESS_DENIED_CODES, isApiAccessDeniedError } from '@object-ui/core';
 
 /**
  * What the by-name meta app route said about THIS session's access to an app
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-{"package":"ui/packages/core","sources":111,"sha256":"c2cf28d9a3a53535b8a328f099857f84b3ac90402fedc8b898a9266cb261f55c","manifestSha256":"1f6e1ccb925a678eaa393f9091dfc7d0285e4e3626e0a5c61a5474687debabb7"}`
	`1`	`+{"package":"ui/packages/core","sources":112,"sha256":"e586f7573193068eefdbf8c22651072941bbd3843d60612cc2bc5d7e16003fca","manifestSha256":"1f6e1ccb925a678eaa393f9091dfc7d0285e4e3626e0a5c61a5474687debabb7"}`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-{"package":"ui/packages/react","sources":70,"sha256":"d89393cc7203be3bc88ea59d1a5e0ad6cbda588b8b8ad44baefed0a44da5d9d2","manifestSha256":"1f6e1ccb925a678eaa393f9091dfc7d0285e4e3626e0a5c61a5474687debabb7"}`
	`1`	`+{"package":"ui/packages/react","sources":70,"sha256":"0a4e839e9459da5ce7a6eb9b112d527bf8afecd3f7e8c6f63b936e5eb9593c68","manifestSha256":"1f6e1ccb925a678eaa393f9091dfc7d0285e4e3626e0a5c61a5474687debabb7"}`