@@ -0,0 +1,14 @@
+---
+'@object-ui/app-shell': patch
+'@object-ui/components': patch
+'@object-ui/i18n': patch
+---
+
+feat(app-shell,components): "Open the full form" on an AI chat record card opens the New form with the values in router state, marked 「AI 建议」 until edited
+
+Clause-②: yes (widening)
+Metadata-protocol: none
+
+- **`@object-ui/app-shell`:** on a create card from the AI chat (cloud#3565), "Open the full form" used to put every card value in the New page's query string, so a lead's name, phone number and e-mail address sat in the address bar, the browser history and any link copied from it. The values now travel in the router state of that one navigation (`utils/recordFormAiDraft.ts`), with their types kept, and the URL is the bare `/new` path. `RecordFormPage` reads them as create values in create mode only, under any query-string prefill, which still wins per field (a related-list "+ New" names its parent on purpose), and over the form view's `defaults`. When the page opens on such a draft it shows one notice above the form saying the record is not saved until the person checks it and saves. Nothing submits on its own. Router state belongs to the tab's history entry: reloading or going Back to that entry reopens the draft, while a copied link, a new tab or another device opens an empty form. The query-string helper `recordFormPrefill.ts`, which only this button used, is removed.
+- **`@object-ui/components`:** new host slot `SuggestedFieldsContext` (a set of field names, default `undefined`). A `form` renderer under it marks each named field "AI suggestion" inside the field's description, so the control's `aria-describedby` announces it, while the field still holds its opening value. The person's first edit takes the mark away. It is not metadata: no form or field key sets it, and with no provider nothing changes.
+- **`@object-ui/i18n`:** `form.aiSuggested` and `form.aiDraftNotice` in all eleven locale packs.
@@ -146,7 +146,7 @@ import { isConversationZh } from './conversationLanguage.js';
 import { resolveOutboundAgentText, type OutboundAgentTextKey } from './outboundAgentText.js';
 import { resolveApiBase } from './resolveApiBase.js';
 import { AiUnavailable } from './AiUnavailable.js';
-import { recordFormPrefillQuery } from './recordFormPrefill.js';
+import { recordWriteFormTarget } from '../../utils/recordFormAiDraft.js';
 
 /**
  * The app segment a record of `objectName` lives under: the object's owning
@@ -1747,9 +1747,11 @@ export function ChatPane({
   );
 
   // cloud#3565 — 打开完整表单 on a record-write card. A create opens the New
-  // form with the card's values through the query-string prefill
-  // `RecordFormPage` already reads for related-list "+ New" (one `field=value`
-  // pair per card field; the form's own defaults fill the rest). An update
+  // form with the card's values in the ROUTER STATE of this navigation, never
+  // the query string: a chat draft carries contact details, and a URL is
+  // copied, shared and logged (objectstack#28104, `recordFormAiDraft.ts`).
+  // The form marks each of those fields 「AI 建议」 until the person edits
+  // it, and opens unsaved; the form's own defaults fill the rest. An update
   // opens the record's edit form: the card has shown old → new, and the form
   // opens on the stored record. The card cancelled the pending write before
   // calling this, so a record saved here is never written a second time.
@@ -1760,14 +1762,8 @@ export function ChatPane({
       recordId?: string;
       fields: Array<{ name: string; value: unknown }>;
     }) => {
-      const app = await appOfObject(write.objectName);
-      const base = `/apps/${encodeURIComponent(app)}/${encodeURIComponent(write.objectName)}`;
-      if (write.operation === 'update' && write.recordId) {
-        navigate(`${base}/record/${encodeURIComponent(write.recordId)}/edit`);
-        return;
-      }
-      const query = recordFormPrefillQuery(write.fields);
-      navigate(`${base}/new${query ? `?${query}` : ''}`);
+      const target = recordWriteFormTarget(write, await appOfObject(write.objectName));
+      navigate(target.to, target.state ? { state: target.state } : undefined);
     },
     [navigate],
   );
 
@@ -0,0 +1,73 @@
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+/**
+ * objectstack#28104 — "Open the full form" on a record-write card carries the
+ * card's values in router state, never in the query string, and the New page
+ * reads back exactly what was sent.
+ */
+import { describe, expect, it } from 'vitest';
+import { readRecordFormAiDraft, recordFormAiDraftState, recordWriteFormTarget } from '../recordFormAiDraft';
+
+const CREATE = {
+  operation: 'create' as const,
+  objectName: 'crm_lead',
+  fields: [
+    { name: 'name', value: '张伟' },
+    { name: 'phone', value: '13900001111' },
+    { name: 'estimated_amount', value: 120000 },
+    { name: 'is_vip', value: false },
+    { name: 'tags', value: ['打印机', '网络'] },
+    { name: 'note', value: '' },
+    { name: 'email', value: null },
+    { name: 'labels', value: [] },
+  ],
+};
+
+describe('recordWriteFormTarget (objectstack#28104)', () => {
+  it('a create opens /new with no query string and the values in state, types kept', () => {
+    const target = recordWriteFormTarget(CREATE, 'crm');
+    expect(target.to).toBe('/apps/crm/crm_lead/new');
+    expect(target.to).not.toContain('?');
+    expect(target.to).not.toContain('13900001111');
+    expect(readRecordFormAiDraft(target.state)).toStrictEqual({
+      name: '张伟',
+      phone: '13900001111',
+      estimated_amount: 120000,
+      is_vip: false,
+      tags: ['打印机', '网络'],
+    });
+  });
+
+  it('a create whose fields are all empty opens a plain /new with no state', () => {
+    const target = recordWriteFormTarget({ ...CREATE, fields: [{ name: 'note', value: '' }] }, 'crm');
+    expect(target).toStrictEqual({ to: '/apps/crm/crm_lead/new' });
+  });
+
+  it('an update opens the edit page on the stored record and carries no draft', () => {
+    const target = recordWriteFormTarget(
+      { operation: 'update', objectName: 'crm_lead', recordId: 'lead 1', fields: [{ name: 'phone', value: '1' }] },
+      'crm',
+    );
+    expect(target).toStrictEqual({ to: '/apps/crm/crm_lead/record/lead%201/edit' });
+  });
+});
+
+describe('readRecordFormAiDraft (objectstack#28104)', () => {
+  it('reads nothing from a state that is not a draft', () => {
+    for (const state of [undefined, null, 'x', 1, {}, { from: { pathname: '/a' } }, { recordFormAiDraft: 'x' },
+      { recordFormAiDraft: { values: ['a'] } }, { recordFormAiDraft: { values: { a: '' } } }]) {
+      expect(readRecordFormAiDraft(state)).toBeUndefined();
+    }
+  });
+
+  it('round-trips the state recordFormAiDraftState builds', () => {
+    expect(readRecordFormAiDraft(recordFormAiDraftState([{ name: 'a', value: 1 }]))).toStrictEqual({ a: 1 });
+    expect(recordFormAiDraftState([])).toBeUndefined();
+  });
+});
@@ -0,0 +1,94 @@
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ *
+ * objectstack#28104 — how an AI chat draft reaches the New form.
+ *
+ * "Open the full form" on a record-write card (cloud#3565) opens the object's
+ * New page on the card's values. They travel in the ROUTER STATE of that one
+ * navigation, never in the query string: a draft pasted from a chat carries
+ * names, phone numbers and e-mail addresses, and a URL is copied, shared,
+ * logged by proxies and kept in the browser history's address list.
+ *
+ * Router state lives in the tab's history entry (`history.state`), so it is
+ * read again when that same entry is reloaded or revisited with Back, and is
+ * absent everywhere else: a copied link, a new tab, another device all open
+ * an empty form. Nothing here saves anything: the page opens unsaved and the
+ * person presses Save.
+ */
+
+/** The key the draft rides under in `location.state`. */
+const AI_DRAFT_KEY = 'recordFormAiDraft';
+
+/** The `state` "Open the full form" navigates with. */
+export interface RecordFormAiDraftState {
+  [AI_DRAFT_KEY]: { values: Record<string, unknown> };
+}
+
+/** An empty value is left out: the form's own default fills that field. */
+function isEmptyValue(value: unknown): boolean {
+  return (
+    value === null ||
+    value === undefined ||
+    value === '' ||
+    (Array.isArray(value) && value.length === 0)
+  );
+}
+
+/**
+ * The router state for a card's fields, or `undefined` when no field carries
+ * a value. Values keep their type (a number stays a number, a multi-select
+ * stays a list): unlike a query string, router state is not flattened.
+ */
+export function recordFormAiDraftState(
+  fields: ReadonlyArray<{ name: string; value: unknown }>,
+): RecordFormAiDraftState | undefined {
+  const values: Record<string, unknown> = {};
+  for (const f of fields) {
+    if (f.name && !isEmptyValue(f.value)) values[f.name] = f.value;
+  }
+  return Object.keys(values).length > 0 ? { [AI_DRAFT_KEY]: { values } } : undefined;
+}
+
+/**
+ * The draft values a New page was opened with, or `undefined` when its
+ * `location.state` carries none (or anything that is not a draft).
+ */
+export function readRecordFormAiDraft(state: unknown): Record<string, unknown> | undefined {
+  if (!state || typeof state !== 'object') return undefined;
+  const draft = (state as Record<string, unknown>)[AI_DRAFT_KEY];
+  if (!draft || typeof draft !== 'object') return undefined;
+  const values = (draft as { values?: unknown }).values;
+  if (!values || typeof values !== 'object' || Array.isArray(values)) return undefined;
+  const out: Record<string, unknown> = {};
+  for (const [name, value] of Object.entries(values as Record<string, unknown>)) {
+    if (name && !isEmptyValue(value)) out[name] = value;
+  }
+  return Object.keys(out).length > 0 ? out : undefined;
+}
+
+/**
+ * Where "Open the full form" on a record-write card goes, given the app the
+ * object belongs to. A create opens the New page with the card's values in
+ * `state` and nothing after the path; an update opens the record's edit page
+ * on the stored record (the card already showed old → new).
+ */
+export function recordWriteFormTarget(
+  write: {
+    operation: 'create' | 'update';
+    objectName: string;
+    recordId?: string;
+    fields: ReadonlyArray<{ name: string; value: unknown }>;
+  },
+  app: string,
+): { to: string; state?: RecordFormAiDraftState } {
+  const base = `/apps/${encodeURIComponent(app)}/${encodeURIComponent(write.objectName)}`;
+  if (write.operation === 'update' && write.recordId) {
+    return { to: `${base}/record/${encodeURIComponent(write.recordId)}/edit` };
+  }
+  const state = recordFormAiDraftState(write.fields);
+  return state ? { to: `${base}/new`, state } : { to: `${base}/new` };
+}