@3fn/core 13.0.0 → 14.1.0

package/src/components/core/Input-Text-Base/platforms/ios/InputTextBase.ios.swift

@@ -13,21 +13,33 @@
  * - Color animation (text.subtle → primary with blend.focusSaturate)
  * - Offset animation (translateY)
  * - Trailing icon support (error, success, info)
+ * - Trailing content slot for semantic variants (e.g., password toggle)
+ * - Read-only rendering (B-prime): selectable Text inside the shared field
+ *   chrome — never disabled semantics
  * - Respects accessibilityReduceMotion
  * - WCAG 2.1 AA compliant
- * - Uses theme-aware blend utilities for state colors (focus, disabled)
- * 
+ * - Uses theme-aware blend utilities for state colors (focus)
+ *
  * Behavioral Contracts:
- * - focusable: Can receive keyboard focus
- * - float_label_animation: Label animates on focus
- * - validates_on_blur: Validation triggers on blur
- * - error_state_display: Shows error message and styling
- * - success_state_display: Shows success styling
- * - disabled_state: Prevents interaction when disabled
- * - trailing_icon_display: Shows contextual trailing icons
- * - focus_ring: WCAG 2.4.7 focus visible indicator
- * - reduced_motion_support: Respects prefers-reduced-motion
- * 
+ * - interaction_focusable: Can receive keyboard focus (iOS readOnly carve-out
+ *   declared in contracts.yaml — readOnly content is not in FKA focus order)
+ * - content_float_label: Label animates on focus
+ * - validation_on_blur: Validation triggers on blur
+ * - state_error: Shows error message and styling
+ * - state_success: Shows success styling
+ * - state_readonly: Read-only display — selectable/copyable, non-editable,
+ *   announced read-only, never a disabled/dimmed trait (concept ballot
+ *   pending ratification; see contracts.yaml)
+ * - content_trailing_icon: Shows contextual trailing icons
+ * - interaction_focus_ring: WCAG 2.4.7 focus visible indicator
+ * - accessibility_reduced_motion: Respects prefers-reduced-motion
+ *
+ * Read-only (B-prime ruling — Peter, 2026-07-15,
+ * .kiro/issues/input-text-base-ios-readonly-adjudication.md):
+ * readOnly renders as `Text(value).textSelection(.enabled)` inside the same
+ * field chrome as the editable field. The SwiftUI disabled modifier is never
+ * applied. onFocus/onBlur are DECLARED not-fired on the iOS readOnly path.
+ *
  * Requirements: 1.1, 1.2, 1.3, 1.5, 4.1, 4.2, 4.3, 8.1, 8.2, 8.4, 11.1, 11.2, 11.3, 13.1
  */
 
@@ -81,7 +93,9 @@ struct InputTextBase: View {
     /// Placeholder text (only shown when label is floated and input is empty)
     let placeholder: String?
     
-    /// Read-only state
+    /// Read-only state (state_readonly contract): renders the value as
+    /// selectable Text inside the field chrome — never disabled semantics.
+    /// Ignored for secure fields (see isReadOnlyDisplay).
     let readOnly: Bool
     
     /// Required field indicator
@@ -89,10 +103,12 @@ struct InputTextBase: View {
     
     /// Maximum length for input value
     let maxLength: Int?
-    
-    /// Disabled state
-    let isDisabled: Bool
-    
+
+    /// Trailing content slot rendered after the status icons
+    /// (e.g., password visibility toggle). Declared as `var` with a
+    /// default so the memberwise initializer keeps it optional and last.
+    var trailingContent: AnyView? = nil
+
     // MARK: - State
     
     /// Whether input currently has focus
@@ -112,6 +128,22 @@ struct InputTextBase: View {
     private var isFilled: Bool {
         !value.isEmpty
     }
+
+    /// Whether to render the read-only display path (B-prime).
+    ///
+    /// SECURITY-CRITICAL GATE: the read-only path renders the value as
+    /// selectable plaintext `Text`. It MUST be unreachable for secure fields
+    /// (`type == .password`), or a readOnly password would render its secret
+    /// in plaintext. readOnly is contracted OUT of Input-Text-Password
+    /// entirely (adjudication condition 4:
+    /// .kiro/issues/input-text-base-ios-readonly-adjudication.md — RULED
+    /// B-prime, Peter 2026-07-15); the Password variant additionally strips
+    /// readOnly before it reaches this component. On a secure field, readOnly
+    /// is ignored (the field stays an editable SecureField) rather than ever
+    /// routing to the plaintext Text branch.
+    private var isReadOnlyDisplay: Bool {
+        readOnly && type != .password
+    }
     
     /// Whether input has error
     private var hasError: Bool {
@@ -140,8 +172,6 @@ struct InputTextBase: View {
             return theme.colorFeedbackErrorText
         } else if isSuccess {
             return theme.colorFeedbackSuccessText
-        } else if isDisabled {
-            return theme.colorActionPrimary.disabledBlend()
         } else if isFocused {
             return theme.colorActionPrimary.focusBlend()
         } else {
@@ -164,8 +194,6 @@ struct InputTextBase: View {
             return theme.colorFeedbackErrorText
         } else if isSuccess {
             return theme.colorFeedbackSuccessText
-        } else if isDisabled {
-            return theme.colorActionPrimary.disabledBlend()
         } else if isFocused {
             return theme.colorActionPrimary.focusBlend()
         } else {
@@ -213,18 +241,45 @@ struct InputTextBase: View {
                         }
                     
                     // Input field
-                    if type == .password {
+                    if isReadOnlyDisplay {
+                        // Read-only rendering (B-prime): selectable Text inside
+                        // the shared field chrome. Never the SwiftUI disabled
+                        // modifier — it produces disabled semantics (unfocusable,
+                        // uncopyable, VoiceOver "dimmed"), which DesignerPunk bans.
+                        // Long-press → select/copy (whole-string copy is the
+                        // contracted iOS behavior). No keyboard is raised.
+                        //
+                        // Declared behavior (state_readonly contract):
+                        // - NOT in keyboard/FKA focus order (mitigable declared
+                        //   exception — .focusable(interactions:) prototype
+                        //   tracked; contract tightens if it verifies on-device)
+                        // - onFocus/onBlur DECLARED not-fired on this path
+                        //   (there is no focus system here — nothing simulates
+                        //   or pretends otherwise)
+                        // - Empty value: label rests in placeholder position
+                        //   (cross-platform parity); the chrome reserves full
+                        //   height unconditionally.
+                        Text(value)
+                            .textSelection(.enabled)
+                            .modifier(InputTextBaseFieldChrome(
+                                borderColor: borderColor,
+                                isFocused: false,
+                                hasTrailingIcon: showErrorIcon || showSuccessIcon || showInfoIconVisible || trailingContent != nil
+                            ))
+                    } else if type == .password {
+                        // Secure path: readOnly is IGNORED here (see
+                        // isReadOnlyDisplay) — a secure field never routes to
+                        // the plaintext read-only Text branch, and disabled
+                        // semantics are never applied.
                         SecureField(isLabelFloated && placeholder != nil ? placeholder! : "", text: $value)
                             .textFieldStyle(InputTextBaseFieldStyle(
                                 borderColor: borderColor,
                                 isFocused: isFocused,
                                 hasError: hasError,
                                 isSuccess: isSuccess,
-                                isDisabled: isDisabled,
-                                hasTrailingIcon: showErrorIcon || showSuccessIcon || showInfoIconVisible
+                                hasTrailingIcon: showErrorIcon || showSuccessIcon || showInfoIconVisible || trailingContent != nil
                             ))
                             .focused($isFocused)
-                            .disabled(readOnly || isDisabled)
                             .textContentType(autocomplete)
                             .onChange(of: value) { newValue in
                                 if let maxLength = maxLength, newValue.count > maxLength {
@@ -246,11 +301,9 @@ struct InputTextBase: View {
                                 isFocused: isFocused,
                                 hasError: hasError,
                                 isSuccess: isSuccess,
-                                isDisabled: isDisabled,
-                                hasTrailingIcon: showErrorIcon || showSuccessIcon || showInfoIconVisible
+                                hasTrailingIcon: showErrorIcon || showSuccessIcon || showInfoIconVisible || trailingContent != nil
                             ))
                             .focused($isFocused)
-                            .disabled(readOnly || isDisabled)
                             .textContentType(autocomplete)
                             .keyboardType(keyboardTypeForInputType(type))
                             .onChange(of: value) { newValue in
@@ -295,6 +348,12 @@ struct InputTextBase: View {
                             value: showInfoIconVisible
                         )
                 }
+
+                // Trailing content slot (e.g., password visibility toggle)
+                if let trailingContent = trailingContent {
+                    trailingContent
+                        .padding(.trailing, DesignTokens.spaceInset100)
+                }
             }
             .frame(minHeight: DesignTokens.tapAreaRecommended)
             
@@ -319,7 +378,25 @@ struct InputTextBase: View {
         .accessibilityElement(children: .contain)
         .accessibilityLabel(label)
         .accessibilityValue(value)
-        .accessibilityHint(helperText ?? "")
+        .accessibilityHint(accessibilityHintText)
+    }
+
+    /// Composed accessibility hint.
+    ///
+    /// On the read-only path this composes the read-only indication with any
+    /// helper text, so VoiceOver announces label + value + "Read only"
+    /// (state_readonly contract) — never a disabled/dimmed trait. iOS has no
+    /// read-only accessibility trait; the hint is the correct announcement
+    /// route (adjudication, Kenya R1).
+    private var accessibilityHintText: String {
+        var parts: [String] = []
+        if isReadOnlyDisplay {
+            parts.append("Read only")
+        }
+        if let helperText = helperText, !helperText.isEmpty {
+            parts.append(helperText)
+        }
+        return parts.joined(separator: ". ")
     }
     
     // MARK: - Helper Methods
@@ -353,30 +430,48 @@ enum InputType {
     case url
 }
 
-// MARK: - Custom Text Field Style
+// MARK: - Shared Field Chrome
 
 /**
- * Custom text field style for consistent appearance
+ * Shared field chrome (B-prime chrome extraction, adjudication 2026-07-15).
+ *
+ * The visual treatment of the field box — typography, text color, insets,
+ * canvas background, border overlay, and focus-ring overlay — extracted from
+ * InputTextBaseFieldStyle so it applies to BOTH rendering paths: the editable
+ * TextField/SecureField (via InputTextBaseFieldStyle, which delegates here)
+ * and the read-only Text (applied directly). One chrome, two contents — the
+ * two paths cannot drift visually.
  */
-struct InputTextBaseFieldStyle: TextFieldStyle {
+struct InputTextBaseFieldChrome: ViewModifier {
     let borderColor: Color
     let isFocused: Bool
-    let hasError: Bool
-    let isSuccess: Bool
-    let isDisabled: Bool
     let hasTrailingIcon: Bool
-    
+
     @Environment(\.accessibilityReduceMotion) var reduceMotion
     @Environment(\.dpTheme) private var theme
-    
-    func _body(configuration: TextField<Self._Label>) -> some View {
-        configuration
+
+    /// Minimum content height, reserved UNCONDITIONALLY on both paths:
+    /// input line height (fontSize × unitless lineHeight multiplier, the
+    /// Badge/Nav token-derived pattern) + vertical insets. This deliberately
+    /// does NOT reason about empty `Text` intrinsic size (undocumented, has
+    /// varied across SwiftUI releases): an empty readOnly value keeps the
+    /// same field height as a filled editable field. Note: the field uses a
+    /// fixed token font size (no Dynamic Type) today — if the family adopts
+    /// Dynamic Type, this minHeight must scale with it.
+    private var minFieldHeight: CGFloat {
+        (DesignTokens.typographyInput.fontSize * DesignTokens.typographyInput.lineHeight)
+            + (DesignTokens.spaceInset100 * 2)
+    }
+
+    func body(content: Content) -> some View {
+        content
             .font(Font.system(size: DesignTokens.typographyInput.fontSize)
                 .weight(DesignTokens.typographyInput.fontWeight))
-            .foregroundColor(isDisabled ? theme.colorTextMuted : theme.colorTextDefault)
+            .foregroundColor(theme.colorTextDefault)
             .padding(.leading, DesignTokens.spaceInset100)
             .padding(.vertical, DesignTokens.spaceInset100)
             .padding(.trailing, hasTrailingIcon ? 0 : DesignTokens.spaceInset100)
+            .frame(maxWidth: .infinity, minHeight: minFieldHeight, alignment: .leading)
             .background(theme.colorStructureCanvas)
             .overlay(
                 RoundedRectangle(cornerRadius: DesignTokens.radius150)
@@ -386,7 +481,7 @@ struct InputTextBaseFieldStyle: TextFieldStyle {
                 RoundedRectangle(cornerRadius: DesignTokens.radius150)
                     .stroke(theme.colorActionPrimary, lineWidth: DesignTokens.accessibilityFocusWidth)
                     .padding(-DesignTokens.accessibilityFocusOffset)
-                    .opacity(isFocused && !isDisabled ? 1 : 0)
+                    .opacity(isFocused ? 1 : 0)
                     .animation(
                         reduceMotion ? .none : Animation.timingCurve(0.4, 0.0, 0.2, 1.0, duration: DesignTokens.MotionFocusTransition.duration),
                         value: isFocused
@@ -395,6 +490,30 @@ struct InputTextBaseFieldStyle: TextFieldStyle {
     }
 }
 
+// MARK: - Custom Text Field Style
+
+/**
+ * Custom text field style for consistent appearance.
+ * Delegates all visual treatment to InputTextBaseFieldChrome (shared with
+ * the read-only rendering path).
+ */
+struct InputTextBaseFieldStyle: TextFieldStyle {
+    let borderColor: Color
+    let isFocused: Bool
+    let hasError: Bool
+    let isSuccess: Bool
+    let hasTrailingIcon: Bool
+
+    func _body(configuration: TextField<Self._Label>) -> some View {
+        configuration
+            .modifier(InputTextBaseFieldChrome(
+                borderColor: borderColor,
+                isFocused: isFocused,
+                hasTrailingIcon: hasTrailingIcon
+            ))
+    }
+}
+
 // MARK: - Preview
 
 #if DEBUG
@@ -417,8 +536,7 @@ struct InputTextBase_Previews: PreviewProvider {
                 placeholder: nil,
                 readOnly: false,
                 required: false,
-                maxLength: nil,
-                isDisabled: false
+                maxLength: nil
             )
             
             InputTextBase(
@@ -437,8 +555,7 @@ struct InputTextBase_Previews: PreviewProvider {
                 placeholder: nil,
                 readOnly: false,
                 required: false,
-                maxLength: nil,
-                isDisabled: false
+                maxLength: nil
             )
             
             InputTextBase(
@@ -457,8 +574,7 @@ struct InputTextBase_Previews: PreviewProvider {
                 placeholder: nil,
                 readOnly: false,
                 required: true,
-                maxLength: nil,
-                isDisabled: false
+                maxLength: nil
             )
             
             InputTextBase(
@@ -477,28 +593,48 @@ struct InputTextBase_Previews: PreviewProvider {
                 placeholder: nil,
                 readOnly: false,
                 required: false,
-                maxLength: nil,
-                isDisabled: false
+                maxLength: nil
             )
-            
+
+            // Read-only (B-prime): selectable Text in the shared chrome
             InputTextBase(
-                id: "preview-disabled",
-                label: "Email",
-                value: .constant("user@example.com"),
+                id: "preview-read-only",
+                label: "Reference number",
+                value: .constant("REF-2026-07-15"),
                 onChange: nil,
                 onFocus: nil,
                 onBlur: nil,
-                helperText: "This field is disabled",
+                helperText: "Long-press to copy",
                 errorMessage: nil,
                 isSuccess: false,
                 showInfoIcon: false,
-                type: .email,
-                autocomplete: .emailAddress,
+                type: .text,
+                autocomplete: nil,
                 placeholder: nil,
-                readOnly: false,
+                readOnly: true,
+                required: false,
+                maxLength: nil
+            )
+
+            // Read-only, empty: label rests in placeholder position,
+            // chrome reserves full field height
+            InputTextBase(
+                id: "preview-read-only-empty",
+                label: "Reference number",
+                value: .constant(""),
+                onChange: nil,
+                onFocus: nil,
+                onBlur: nil,
+                helperText: nil,
+                errorMessage: nil,
+                isSuccess: false,
+                showInfoIcon: false,
+                type: .text,
+                autocomplete: nil,
+                placeholder: nil,
+                readOnly: true,
                 required: false,
-                maxLength: nil,
-                isDisabled: true
+                maxLength: nil
             )
         }
         .padding()

package/src/components/core/Input-Text-Base/types.ts

@@ -54,7 +54,19 @@ export interface InputTextBaseProps {
   /** Placeholder text (only shown when label is floated and input is empty) */
   placeholder?: string;
   
-  /** Read-only state (alternative to disabled) */
+  /**
+   * Read-only state (state_readonly contract): the value is displayed
+   * non-editably while remaining perceivable, selectable, and copyable —
+   * never rendered with disabled semantics on any platform.
+   *
+   * Platform note: web and Android readOnly fields participate in keyboard
+   * focus order; iOS renders readOnly as selectable static text in the
+   * field chrome and is not in focus order (declared carve-out — see
+   * contracts.yaml interaction_focusable).
+   *
+   * NOT supported by Input-Text-Password: readOnly is contracted out of the
+   * Password variant (see its contracts.yaml excludes) and is ignored there.
+   */
   readOnly?: boolean;
   
   /** Required field indicator */

package/src/components/core/Input-Text-Email/Input-Text-Email.schema.yaml

@@ -101,7 +101,11 @@ properties:
     type: boolean
     required: false
     default: false
-    description: Read-only state (alternative to disabled)
+    description: >-
+      Read-only display state (state_readonly contract) — the value is
+      non-editable but stays perceivable, selectable, and copyable; no
+      keyboard/IME is raised and disabled semantics are never applied. iOS
+      renders it as selectable static text inside the field chrome.
   
   required:
     type: boolean

package/src/components/core/Input-Text-Email/README.md

@@ -97,7 +97,7 @@ InputTextEmail(
 | `isSuccess` | boolean | No | false | Success state indicator |
 | `showInfoIcon` | boolean | No | false | Show info icon |
 | `placeholder` | string | No | - | Placeholder text |
-| `readOnly` | boolean | No | false | Read-only state |
+| `readOnly` | boolean | No | false | Read-only display state (`state_readonly` contract): value is non-editable but selectable and copyable; no keyboard raised; iOS renders selectable text in the field chrome |
 | `required` | boolean | No | false | Required field indicator |
 | `maxLength` | number | No | - | Maximum input length |
 | `testID` | string | No | - | Test ID for automation |
@@ -126,15 +126,16 @@ InputTextEmail(
 3. **validates_on_blur**: Validation triggers on blur
 4. **error_state_display**: Shows error message and styling
 5. **success_state_display**: Shows success styling
-6. **disabled_state**: Prevents interaction when disabled
-7. **trailing_icon_display**: Shows contextual trailing icons
-8. **focus_ring**: WCAG 2.4.7 focus visible indicator
-9. **reduced_motion_support**: Respects prefers-reduced-motion
+6. **trailing_icon_display**: Shows contextual trailing icons
+7. **focus_ring**: WCAG 2.4.7 focus visible indicator
+8. **reduced_motion_support**: Respects prefers-reduced-motion
+
+**Excluded**: `state_disabled` — DesignerPunk does not support disabled states for usability and accessibility reasons. If an action is unavailable, the component should not be rendered (adjudicated 2026-07-15).
 
 ### Email-Specific Contracts
 
-10. **validates_email_format**: Validates email against RFC 5322 pattern
-11. **provides_email_autocomplete**: Enables browser/platform email autofill
+9. **validates_email_format**: Validates email against RFC 5322 pattern
+10. **provides_email_autocomplete**: Enables browser/platform email autofill
 
 ## Validation
 

package/src/components/core/Input-Text-Email/platforms/android/InputTextEmail.android.kt

@@ -78,7 +78,6 @@ private fun isValidEmail(email: String): Boolean {
  * @param maxLength Maximum length for input value
  * @param imeAction IME action for keyboard
  * @param keyboardActions Keyboard actions
- * @param isDisabled Disabled state
  * @param invalidEmailMessage Custom invalid email message
  * @param customValidator Custom email validator function
  */
@@ -102,7 +101,6 @@ fun InputTextEmail(
     maxLength: Int? = null,
     imeAction: ImeAction = ImeAction.Done,
     keyboardActions: KeyboardActions = KeyboardActions.Default,
-    isDisabled: Boolean = false,
     invalidEmailMessage: String = DEFAULT_INVALID_EMAIL_MESSAGE,
     customValidator: ((String) -> Boolean)? = null
 ) {
@@ -158,8 +156,7 @@ fun InputTextEmail(
         required = required,
         maxLength = maxLength,
         imeAction = imeAction,
-        keyboardActions = keyboardActions,
-        isDisabled = isDisabled
+        keyboardActions = keyboardActions
     )
 }
 

package/src/components/core/Input-Text-Email/platforms/ios/InputTextEmail.ios.swift

@@ -104,10 +104,7 @@ struct InputTextEmail: View {
     
     /// Maximum length for input value
     let maxLength: Int?
-    
-    /// Disabled state
-    let isDisabled: Bool
-    
+
     /// Custom invalid email message
     let invalidEmailMessage: String
     
@@ -155,7 +152,6 @@ struct InputTextEmail: View {
         readOnly: Bool = false,
         required: Bool = false,
         maxLength: Int? = nil,
-        isDisabled: Bool = false,
         invalidEmailMessage: String = defaultInvalidEmailMessage,
         customValidator: ((String) -> Bool)? = nil
     ) {
@@ -174,7 +170,6 @@ struct InputTextEmail: View {
         self.readOnly = readOnly
         self.required = required
         self.maxLength = maxLength
-        self.isDisabled = isDisabled
         self.invalidEmailMessage = invalidEmailMessage
         self.customValidator = customValidator
     }
@@ -207,8 +202,7 @@ struct InputTextEmail: View {
             placeholder: placeholder,
             readOnly: readOnly,
             required: required,
-            maxLength: maxLength,
-            isDisabled: isDisabled
+            maxLength: maxLength
         )
     }
     
@@ -268,14 +262,6 @@ struct InputTextEmail_Previews: PreviewProvider {
                 isSuccess: true
             )
             
-            InputTextEmail(
-                id: "preview-disabled",
-                label: "Email",
-                value: .constant("user@example.com"),
-                helperText: "This field is disabled",
-                isDisabled: true
-            )
-            
             InputTextEmail(
                 id: "preview-required",
                 label: "Email",

package/src/components/core/Input-Text-Password/Input-Text-Password.schema.yaml

@@ -103,7 +103,12 @@ properties:
     type: boolean
     required: false
     default: false
-    description: Read-only state (alternative to disabled)
+    description: >-
+      Accepted for API stability but IGNORED — readOnly is contracted out of
+      Input-Text-Password (contracts.yaml excludes.state_readonly; adjudication
+      .kiro/issues/input-text-base-ios-readonly-adjudication.md, RULED B-prime,
+      Peter 2026-07-15). Implementations never forward it to the base on any
+      platform.
   
   required:
     type: boolean
@@ -262,13 +267,15 @@ platform_notes:
   ios:
     implementation: SwiftUI View wrapping InputTextBase
     file: platforms/ios/InputTextPassword.ios.swift
-    toggle: Button with SF Symbol eye/eye.slash
+    toggle: Button with SF Symbol eye/eye.slash, injected via the base's trailingContent slot
     autocomplete: UITextContentType.password or .newPassword
+    visibility: Toggles by switching base type between .password and .text
   android:
     implementation: Jetpack Compose Composable wrapping InputTextBase
     file: platforms/android/InputTextPassword.android.kt
-    toggle: IconButton with visibility icons
+    toggle: IconButton with visibility icons, injected via the base's trailingContent slot
     autocomplete: Autofill framework password type
+    visibility: Toggles via the base's visualTransformation override (type stays PASSWORD)
 
 # Inheritance relationship
 inheritance:

package/src/components/core/Input-Text-Password/README.md

@@ -178,7 +178,7 @@ InputTextPassword(
 | `isSuccess` | boolean | No | false | Success state indicator |
 | `showInfoIcon` | boolean | No | false | Show info icon |
 | `placeholder` | string | No | - | Placeholder text |
-| `readOnly` | boolean | No | false | Read-only state |
+| `readOnly` | boolean | No | false | Accepted but **ignored** — readOnly is contracted out of Input-Text-Password (never forwarded to the base; see contracts.yaml `excludes.state_readonly` and the adjudication `.kiro/issues/input-text-base-ios-readonly-adjudication.md`, RULED B-prime 2026-07-15) |
 | `required` | boolean | No | false | Required field indicator |
 | `maxLength` | number | No | - | Maximum input length |
 | `testID` | string | No | - | Test ID for automation |
@@ -216,16 +216,17 @@ InputTextPassword(
 3. **validates_on_blur**: Validation triggers on blur
 4. **error_state_display**: Shows error message and styling
 5. **success_state_display**: Shows success styling
-6. **disabled_state**: Prevents interaction when disabled
-7. **trailing_icon_display**: Shows contextual trailing icons
-8. **focus_ring**: WCAG 2.4.7 focus visible indicator
-9. **reduced_motion_support**: Respects prefers-reduced-motion
+6. **trailing_icon_display**: Shows contextual trailing icons
+7. **focus_ring**: WCAG 2.4.7 focus visible indicator
+8. **reduced_motion_support**: Respects prefers-reduced-motion
+
+**Excluded**: `state_disabled` — DesignerPunk does not support disabled states for usability and accessibility reasons. If an action is unavailable, the component should not be rendered (adjudicated 2026-07-15).
 
 ### Password-Specific Contracts
 
-10. **provides_secure_input**: Masks password input by default
-11. **supports_password_toggle**: Show/hide password functionality
-12. **provides_password_autocomplete**: Enables browser/platform password autofill
+9. **provides_secure_input**: Masks password input by default
+10. **supports_password_toggle**: Show/hide password functionality
+11. **provides_password_autocomplete**: Enables browser/platform password autofill
 
 ## Validation
 

package/src/components/core/Input-Text-Password/contracts.yaml

@@ -61,3 +61,8 @@ excludes:
   state_disabled:
     reason: "DesignerPunk does not support disabled states for usability and accessibility reasons. If an action is unavailable, the component should not be rendered."
     category: state
+
+  state_readonly:
+    reason: "readOnly is contracted out of Input-Text-Password: zero named consumers, and excluding it deletes a security fork — the base's iOS read-only path (B-prime) renders the value as selectable plaintext Text, which must never be reachable for a secret. The profile idiom for a locked password is a display row ('Password ••••••••') plus a Change action, not a read-only password field. Implementations strip/ignore the inherited readOnly prop. If a product case ever materializes, the invariant-based fallback rule recorded in the adjudication ([DATA R2] §3: masked value never copyable; plaintext never in the accessibility tree while masked; announced semantically as hidden; no keyboard; toggle functional; revealed plaintext selectable/copyable) is the recorded alternative."
+    category: state
+    reference: ".kiro/issues/input-text-base-ios-readonly-adjudication.md (RULED B-prime, Peter 2026-07-15, condition 4)"