@conduction/nextcloud-vue 2.67.0 → 2.69.0

package/src/schemas/app-manifest-v2.schema.json

@@ -3,7 +3,7 @@
 	"$id": "https://raw.githubusercontent.com/ConductionNL/nextcloud-vue/main/src/schemas/app-manifest-v2.schema.json",
 	"title": "Conduction App Manifest v2",
 	"description": "v2 schema for the JSON-driven page and navigation manifest consumed by @conduction/nextcloud-vue. Introduces a uniform widgets[] array on every page type with a per-slot grid coordinate system, a typed actions[] discriminator, and the required $schema field for version detection. v1 manifests continue to validate against app-manifest.schema.json (unchanged).",
-	"version": "2.49.0",
+	"version": "2.51.0",
 	"type": "object",
 	"required": ["$schema", "version"],
 	"allOf": [
@@ -2903,7 +2903,7 @@
 			"type": "object",
 			"required": ["register", "schema"],
 			"additionalProperties": false,
-			"description": "One KPI entry inside a multi-entry stats-block widget (CnStatsBlockWidget `entries[]`). Carries the same source contract as a type:'stat' widget: register + schema + metric + token-resolved filter (@today / @me / @workspace.* and ?-optional clauses), plus per-entry presentation (title, variant, countLabel), an optional route deep link, and hideWhenZero.",
+			"description": "One KPI entry inside a multi-entry stats-block widget (CnStatsBlockWidget `entries[]`). Carries the same source contract as a type:'stat' widget: register + schema + metric + token-resolved filter (@today / @me / @workspace.* and ?-optional clauses), plus per-entry presentation (title, variant, countLabel, format), an optional route deep link, and hideWhenZero. A money value names its currency with currencyField (the page object's field) or currency.",
 			"properties": {
 				"title": {
 					"type": "string",
@@ -2952,6 +2952,32 @@
 					"type": "boolean",
 					"default": false,
 					"description": "When true, the entry is omitted from the card when its resolved count is 0."
+				},
+				"format": {
+					"description": "How the value is shown, as a type:'stat' widget's content.format: a style name, or { style, currency, currencyField, decimals, prefix, suffix }. Omitted, the plain localized count is shown. Numbers are formatted with Intl in the user's locale.",
+					"oneOf": [
+						{ "type": "string", "enum": ["number", "currency", "percent", "decimal", "duration-hours"] },
+						{
+							"type": "object",
+							"additionalProperties": false,
+							"properties": {
+								"style": { "type": "string", "enum": ["number", "currency", "percent", "decimal", "duration-hours"] },
+								"currency": { "type": "string", "description": "ISO-4217 code, or a token such as @config.currency or @object.currency." },
+								"currencyField": { "type": "string", "description": "Field of the detail page's object that holds the currency (dot-path allowed)." },
+								"decimals": { "type": "integer", "minimum": 0, "description": "Fraction digits." },
+								"prefix": { "type": "string" },
+								"suffix": { "type": "string" }
+							}
+						}
+					]
+				},
+				"currency": {
+					"type": "string",
+					"description": "Shorthand for format.currency: an ISO-4217 code, or a token such as @config.currency. Implies format 'currency'."
+				},
+				"currencyField": {
+					"type": "string",
+					"description": "Shorthand for format.currencyField: the field of the detail page's object that holds the currency, e.g. 'currency'. Implies format 'currency'. The currency is taken from the object, then currency, then the app's reporting currency (config currency), then EUR."
 				}
 			}
 		},
@@ -3458,14 +3484,30 @@
 						"actions": {
 							"type": "array",
 							"items": {
-								"type": "object",
-								"required": ["label"],
-								"additionalProperties": true,
-								"properties": {
-									"label": { "type": "string", "minLength": 1 }
-								}
+								"anyOf": [
+									{
+										"type": "object",
+										"required": ["label"],
+										"additionalProperties": true,
+										"properties": {
+											"label": { "type": "string", "minLength": 1 },
+											"id": { "type": "string", "not": { "pattern": "^builtin:" } },
+											"builtin": false
+										}
+									},
+									{
+										"type": "string",
+										"enum": ["builtin:view", "builtin:edit", "builtin:copy", "builtin:delete"]
+									}
+								]
 							},
-							"description": "Declarative actions on a page. Governed ONLY by \"an object carrying a non-empty label\", deliberately: this key is polymorphic by page type (index rows dispatch $defs/action; detail pages also carry type='lifecycle-transition' entries), so one closed grammar here would reject working manifests. A label is what every dialect needs — CnRowActions renders an entry from its label and icon, so an entry without one became a full-height, clickable, EMPTY row in the overflow menu. Two shapes hit this, both meaning \"show the built-in\": a bare string (\"edit\") and a key-only object ({\"key\": \"edit\"}). Built-ins are enabled with config.actionToggles / the show*Action keys, never by naming them here."
+							"allOf": [
+								{ "contains": { "const": "builtin:view" }, "minContains": 0, "maxContains": 1 },
+								{ "contains": { "const": "builtin:edit" }, "minContains": 0, "maxContains": 1 },
+								{ "contains": { "const": "builtin:copy" }, "minContains": 0, "maxContains": 1 },
+								{ "contains": { "const": "builtin:delete" }, "minContains": 0, "maxContains": 1 }
+							],
+							"description": "Declarative actions on a page. An object entry is governed ONLY by \"an object carrying a non-empty label\", deliberately: this key is polymorphic by page type (index rows dispatch $defs/action; detail pages also carry type='lifecycle-transition' entries), so one closed grammar here would reject working manifests. A label is what every dialect needs — CnRowActions renders an entry from its label and icon, so an entry without one became a full-height, clickable, EMPTY row in the overflow menu. An object is always an app action whatever its id: an id, when present, must be a string that does not start with 'builtin:', and the object may not set a 'builtin' key. On a type='index' page an entry may also be one of the placeholders \"builtin:view\", \"builtin:edit\", \"builtin:copy\" or \"builtin:delete\", each at most once, which puts that built-in row action at its position in the menu. A placeholder only places a built-in: config.actionToggles / the show*Action keys still decide whether it renders. Enabled built-ins the array does not place are appended after everything else in the order View, Edit, Copy, Delete. Any other string (a bare \"edit\", an unknown \"builtin:archive\") is refused, and placeholders are refused on every page type other than index."
 						},
 						"rowIndicators": {
 							"type": "array",
@@ -3732,6 +3774,10 @@
 									"type": "boolean",
 									"description": "Whether the built-in create / edit form dialog is enabled. Maps to CnIndexPage `showFormDialog`."
 								},
+								"showViewAction": {
+									"type": "boolean",
+									"description": "Whether to add a View action to row actions. Maps to CnIndexPage `showViewAction`."
+								},
 								"showEditAction": {
 									"type": "boolean",
 									"description": "Whether to add an Edit action to row actions. Maps to CnIndexPage `showEditAction`."
@@ -3824,6 +3870,24 @@
 						}
 					}
 				},
+				{
+					"description": "The \"builtin:<id>\" placeholders in config.actions place CnIndexPage's built-in row actions, so only a type='index' page may use them. On every other page type config.actions holds objects only; a placeholder there would validate and then render nothing (row-action-builtin-placement).",
+					"if": {
+						"not": {
+							"properties": { "type": { "const": "index" } },
+							"required": ["type"]
+						}
+					},
+					"then": {
+						"properties": {
+							"config": {
+								"properties": {
+									"actions": { "items": { "type": "object" } }
+								}
+							}
+						}
+					}
+				},
 				{
 					"description": "tabInAddress puts the active tab of a record in the address. Only a detail page has a record and a tab strip, so the key is refused elsewhere rather than validating into a no-op (case-page-and-list-as-a-place).",
 					"if": {

package/src/store/plugins/dashboardLayouts.js

@@ -156,6 +156,40 @@ export function mergeUserLayout(manifestLayout, record) {
 	return [...arranged, ...appended]
 }
 
+/**
+ * The three calls a user layout needs: from a store that carries the
+ * `dashboardLayoutsPlugin` actions, or straight over user preferences.
+ *
+ * Both paths write through `writeUserPreference`, so a record lands on the
+ * server and in the browser mirror whichever one a page uses. CnDashboardPage
+ * reads its own grid's record through this, and the page views mixin reads
+ * each view's record through it, so the two cannot disagree about where a
+ * user's arrangement lives.
+ *
+ * @param {object|null} [store] A store with `loadDashboardLayout`, `saveDashboardLayout` and `resetDashboardLayout`, or null.
+ * @return {{ load: (appId: string, pageId: string) => Promise<object|null>, save: (appId: string, pageId: string, layout: Array<object>) => Promise<boolean>, reset: (appId: string, pageId: string) => Promise<boolean> }} The api.
+ * @spec openspec/changes/page-view-user-layouts/specs/view-switch-containers/spec.md#requirement-a-user-arranges-each-view-for-themselves
+ */
+export function resolveUserLayoutApi(store = null) {
+	if (store && typeof store.loadDashboardLayout === 'function') {
+		return {
+			load: (...a) => store.loadDashboardLayout(...a),
+			save: (...a) => store.saveDashboardLayout(...a),
+			reset: (...a) => store.resetDashboardLayout(...a),
+		}
+	}
+
+	return {
+		load: (appId, pageId) => readUserPreference(appId, dashboardLayoutKey(pageId), null),
+		save: (appId, pageId, layout) => writeUserPreference(
+			appId,
+			dashboardLayoutKey(pageId),
+			{ items: (Array.isArray(layout) ? layout : []).map(geometryOf).filter((entry) => entry.widgetId !== '') },
+		),
+		reset: (appId, pageId) => writeUserPreference(appId, dashboardLayoutKey(pageId), { items: [] }),
+	}
+}
+
 /**
  * Plugin definition.
  *

package/src/utils/formatMetric.js

@@ -3,8 +3,16 @@
  * SPDX-License-Identifier: EUPL-1.2
  */
 
+import { getCanonicalLocale } from '@nextcloud/l10n'
 import { resolveFilterValue } from './resolveFilterTokens.js'
 
+/**
+ * The format styles a stat or stats-block entry may name.
+ *
+ * @type {Array<string>}
+ */
+export const METRIC_FORMAT_STYLES = ['number', 'currency', 'percent', 'duration-hours', 'decimal']
+
 /**
  * Unwrap a possibly-ref-wrapped `cnAppConfig` inject into a plain object.
  *
@@ -25,20 +33,25 @@ export function unwrapAppConfig(cnAppConfig) {
  * Resolve `@config.<key>` tokens in a `content.format` spec's string fields.
  *
  * Each of `currency` / `prefix` / `suffix` may be a `@config.<key>` token (e.g.
- * `currency: '@config.currency'`). Tokens are resolved against `configCtx`; a
- * token that stays unresolved (the config key is unset, or the config map has
- * not been injected yet during a route transition) is DROPPED so the downstream
- * literal default applies instead of a raw `@config.…` string leaking into
- * `Intl.NumberFormat`.
+ * `currency: '@config.currency'`), or an `@object.<field>` token read off the
+ * detail page's object when `object` is given. Tokens are resolved against
+ * `configCtx`; a token that stays unresolved (the config key is unset, or the
+ * config map has not been injected yet during a route transition) is DROPPED
+ * so the downstream literal default applies instead of a raw `@config.…`
+ * string leaking into `Intl.NumberFormat`.
  *
  * @param {object} format    The raw `content.format` spec.
  * @param {object} configCtx The page-level app-config map (from `unwrapAppConfig`).
+ * @param {object|null} [object] The detail page's object, for `@object.<field>` tokens.
  * @return {object} A copy of `format` with its string tokens resolved/dropped.
  */
-export function resolveConfigFormat(format, configCtx) {
+export function resolveConfigFormat(format, configCtx, object = null) {
 	const fmt = format || {}
 	const out = { ...fmt }
-	const ctx = { config: (configCtx && typeof configCtx === 'object') ? configCtx : {} }
+	const ctx = {
+		config: (configCtx && typeof configCtx === 'object') ? configCtx : {},
+		object: (object && typeof object === 'object') ? object : null,
+	}
 	for (const key of ['currency', 'prefix', 'suffix']) {
 		const raw = fmt[key]
 		if (typeof raw !== 'string' || raw.charAt(0) !== '@') {
@@ -68,6 +81,114 @@ export function safeCurrencyCode(currency) {
 		: 'EUR'
 }
 
+/**
+ * Whether a value is a three-letter currency code.
+ *
+ * @param {unknown} value The candidate.
+ * @return {boolean}
+ */
+function isCurrencyCode(value) {
+	return typeof value === 'string' && /^[A-Za-z]{3}$/.test(value)
+}
+
+/**
+ * Read a dot-path off an object.
+ *
+ * @param {object} object The object.
+ * @param {string} path The path, e.g. `currency` or `price.currency`.
+ * @return {unknown} The value, or undefined.
+ */
+function readPath(object, path) {
+	return String(path).split('.').reduce((acc, key) => (acc && typeof acc === 'object' ? acc[key] : undefined), object)
+}
+
+/**
+ * The currency a money value is shown in. In order:
+ *
+ * 1. `currencyField`: the field of the page's object that holds the currency
+ *    (a detail page; e.g. a contract's own `currency`).
+ * 2. `currency`: a literal code, or a token (`@config.currency`,
+ *    `@object.currency`).
+ * 3. The app's reporting currency, `currency` in the page's app config.
+ * 4. `EUR`.
+ *
+ * A step whose value is not a three-letter code is skipped, so an object
+ * without a currency falls back to the reporting currency instead of
+ * throwing in `Intl.NumberFormat`.
+ *
+ * @param {object} format The format spec (`{ currency?, currencyField? }`).
+ * @param {object} configCtx The page-level app-config map.
+ * @param {object|null} [object] The detail page's object.
+ * @return {string} An upper-case three-letter code.
+ * @spec openspec/changes/stat-currency-from-object/specs/dashboard-page/spec.md#requirement-a-money-value-is-shown-in-the-currency-the-entry-names
+ */
+export function resolveFormatCurrency(format, configCtx, object = null) {
+	const fmt = format || {}
+	if (typeof fmt.currencyField === 'string' && fmt.currencyField !== '' && object && typeof object === 'object') {
+		const own = readPath(object, fmt.currencyField)
+		if (isCurrencyCode(own)) {
+			return own.toUpperCase()
+		}
+	}
+	const declared = resolveConfigFormat({ currency: fmt.currency }, configCtx, object).currency
+	if (isCurrencyCode(declared)) {
+		return declared.toUpperCase()
+	}
+	const reporting = configCtx && typeof configCtx === 'object' ? configCtx.currency : undefined
+	return safeCurrencyCode(reporting)
+}
+
+/**
+ * The format spec of a stat or stats-block entry in one shape.
+ *
+ * `format` may be a style name (`"currency"`) or an object (`{ style,
+ * currency, currencyField, decimals, prefix, suffix }`). A sibling `currency`
+ * or `currencyField` on the entry itself fills the same keys, and either one
+ * makes the style `currency` when none is named. Answers null when the entry
+ * declares no format at all, so the caller keeps its own rendering.
+ *
+ * @param {object} entry The declaration (`{ format?, currency?, currencyField? }`).
+ * @return {object|null} The format spec, or null.
+ * @spec openspec/changes/stat-currency-from-object/specs/dashboard-page/spec.md#requirement-a-stats-block-entry-formats-its-value
+ */
+export function normalizeMetricFormat(entry) {
+	const source = entry && typeof entry === 'object' ? entry : {}
+	let fmt = null
+	if (typeof source.format === 'string' && source.format !== '') {
+		fmt = { style: source.format }
+	} else if (source.format && typeof source.format === 'object' && !Array.isArray(source.format)) {
+		fmt = { ...source.format }
+	}
+	for (const key of ['currency', 'currencyField']) {
+		if (typeof source[key] === 'string' && source[key] !== '') {
+			fmt = fmt || {}
+			if (fmt[key] === undefined) {
+				fmt[key] = source[key]
+			}
+		}
+	}
+	if (fmt && !fmt.style && (fmt.currency || fmt.currencyField)) {
+		fmt.style = 'currency'
+	}
+	return fmt
+}
+
+/**
+ * The user's locale for number formatting: the Nextcloud locale setting,
+ * else the browser's.
+ *
+ * @return {string|undefined} A BCP 47 tag, or undefined for the runtime default.
+ */
+export function metricLocale() {
+	try {
+		const tag = getCanonicalLocale()
+		// A tag Intl does not accept would throw a RangeError on every value.
+		return tag && Intl.NumberFormat.supportedLocalesOf([tag]).length > 0 ? tag : undefined
+	} catch {
+		return undefined
+	}
+}
+
 /**
  * Format a numeric value per a manifest `content.format` spec.
  *
@@ -85,12 +206,18 @@ export function safeCurrencyCode(currency) {
  *  - `decimal` is a plain number with ONE fraction digit by default (the
  *    fleet KPIs' `toFixed(1)` convention), where `number` defaults to 0.
  *
+ * The currency follows `resolveFormatCurrency`: the object's own currency
+ * (`currencyField`), then `currency`, then the app's reporting currency, then
+ * EUR. Numbers are formatted in the user's locale (`metricLocale`).
+ *
  * @param {unknown}      value     The raw value to format.
- * @param {object} format    The `content.format` spec (`{ style, currency, decimals, prefix, suffix }`).
+ * @param {object} format    The `content.format` spec (`{ style, currency, currencyField, decimals, prefix, suffix }`).
  * @param {object} configCtx The page-level app-config map for `@config.<key>` resolution.
+ * @param {object|null} [object] The detail page's object, for `currencyField` and `@object.<field>`.
  * @return {string} The formatted display string.
+ * @spec openspec/changes/stat-currency-from-object/specs/dashboard-page/spec.md#requirement-a-money-value-is-shown-in-the-currency-the-entry-names
  */
-export function formatMetricValue(value, format, configCtx) {
+export function formatMetricValue(value, format, configCtx, object = null) {
 	if (value === null || value === undefined) {
 		return '—'
 	}
@@ -99,7 +226,8 @@ export function formatMetricValue(value, format, configCtx) {
 		return String(value)
 	}
 
-	const fmt = resolveConfigFormat(format, configCtx)
+	const fmt = resolveConfigFormat(format, configCtx, object)
+	const locale = metricLocale()
 	// `duration-hours` and `decimal` default to ONE fraction digit; the
 	// other styles keep the pre-existing default of 0.
 	const oneDigitDefault = fmt.style === 'duration-hours' || fmt.style === 'decimal'
@@ -107,26 +235,26 @@ export function formatMetricValue(value, format, configCtx) {
 
 	let body
 	if (fmt.style === 'currency') {
-		body = new Intl.NumberFormat(undefined, {
+		body = new Intl.NumberFormat(locale, {
 			style: 'currency',
-			currency: safeCurrencyCode(fmt.currency),
+			currency: resolveFormatCurrency(format, configCtx, object),
 			minimumFractionDigits: decimals,
 			maximumFractionDigits: decimals,
 		}).format(num)
 	} else if (fmt.style === 'percent') {
 		// Values are stored as the literal percent (83.3), not a 0–1 ratio.
-		body = new Intl.NumberFormat(undefined, {
+		body = new Intl.NumberFormat(locale, {
 			minimumFractionDigits: decimals,
 			maximumFractionDigits: decimals,
 		}).format(num) + '%'
 	} else if (fmt.style === 'duration-hours') {
 		// An hour count (e.g. mean resolution time): `42.5h`.
-		body = new Intl.NumberFormat(undefined, {
+		body = new Intl.NumberFormat(locale, {
 			minimumFractionDigits: decimals,
 			maximumFractionDigits: decimals,
 		}).format(num) + 'h'
 	} else {
-		body = new Intl.NumberFormat(undefined, {
+		body = new Intl.NumberFormat(locale, {
 			minimumFractionDigits: decimals,
 			maximumFractionDigits: decimals,
 		}).format(num)

package/src/utils/resolveRowActions.js

@@ -0,0 +1,127 @@
+/**
+ * SPDX-FileCopyrightText: 2026 Conduction B.V. <info@conduction.nl>
+ * SPDX-License-Identifier: EUPL-1.2
+ */
+
+/**
+ * The built-in row action ids, in their default order.
+ *
+ * @type {ReadonlyArray<string>}
+ */
+export const BUILTIN_ROW_ACTION_IDS = Object.freeze(['view', 'edit', 'copy', 'delete'])
+
+/**
+ * The prefix that marks a row action entry as a placeholder for a built-in.
+ *
+ * @type {string}
+ */
+export const BUILTIN_PLACEHOLDER_PREFIX = 'builtin:'
+
+/**
+ * Whether an entry is one of the four built-in placeholders (`"builtin:view"`, `"builtin:edit"`, `"builtin:copy"`, `"builtin:delete"`).
+ *
+ * @param {object|string} entry A declared row action entry.
+ * @return {boolean} True for a known placeholder string.
+ */
+export function isBuiltinPlaceholder(entry) {
+	return typeof entry === 'string'
+		&& entry.startsWith(BUILTIN_PLACEHOLDER_PREFIX)
+		&& BUILTIN_ROW_ACTION_IDS.includes(entry.slice(BUILTIN_PLACEHOLDER_PREFIX.length))
+}
+
+/**
+ * A short name for an entry in a warning message.
+ *
+ * @param {object} action An app action object.
+ * @return {string} Its id, else its label, quoted.
+ */
+function describe(action) {
+	const name = (typeof action.id === 'string' && action.id !== '') ? action.id : action.label
+	return JSON.stringify(name === undefined ? '' : name)
+}
+
+/**
+ * Resolve a page's declared row actions and its enabled built-ins into the one ordered list every row surface renders.
+ *
+ * - An object is an app action, whatever its `id`; a `builtin` key on it is dropped, since only real built-ins carry that marker.
+ * - A placeholder (`"builtin:edit"`) puts that built-in at its position when it is enabled, and renders nothing when it is not: the toggle wins.
+ * - A repeated placeholder keeps its first position.
+ * - Any other entry is dropped.
+ * - Enabled built-ins the entries do not place are appended in the order `builtins` gives them.
+ *
+ * Every dropped or questionable entry is reported in `warnings`; the caller decides whether to log them.
+ *
+ * @param {Array<object|string>} declared The declared entries: app action objects and placeholders.
+ * @param {Array<{id: string}>} builtins The enabled built-in actions, in default order.
+ * @param {object} [options] Options.
+ * @param {(action: object) => object} [options.prepare] Maps an app action to the object rendered for it.
+ * @return {{actions: Array<object>, warnings: Array<{code: string, message: string}>, deleteNotLast: boolean}} The ordered actions, the warnings, and whether the built-in Delete is enabled but not last.
+ */
+export function resolveRowActions(declared, builtins, { prepare = (action) => action } = {}) {
+	const enabled = new Map()
+	for (const builtin of (Array.isArray(builtins) ? builtins : [])) {
+		if (builtin && typeof builtin.id === 'string') {
+			enabled.set(builtin.id, builtin)
+		}
+	}
+	const placed = new Set()
+	const actions = []
+	const warnings = []
+
+	for (const entry of (Array.isArray(declared) ? declared : [])) {
+		if (entry && typeof entry === 'object' && !Array.isArray(entry)) {
+			let action = entry
+			if (Object.hasOwn(entry, 'builtin')) {
+				const { builtin, ...rest } = entry
+				action = rest
+				warnings.push({
+					code: 'builtin-key-ignored',
+					message: `Action ${describe(entry)} sets "builtin", which only built-in actions carry; the key is ignored and the entry stays an app action.`,
+				})
+			}
+			actions.push(prepare(action))
+			continue
+		}
+		if (isBuiltinPlaceholder(entry)) {
+			const id = entry.slice(BUILTIN_PLACEHOLDER_PREFIX.length)
+			if (placed.has(id)) {
+				warnings.push({
+					code: 'repeated-placeholder',
+					message: `"${entry}" is placed more than once; only its first position is used.`,
+				})
+				continue
+			}
+			placed.add(id)
+			if (!enabled.has(id)) {
+				warnings.push({
+					code: 'disabled-placeholder',
+					message: `"${entry}" is placed but that built-in action is turned off, so it renders nothing. Its show*Action toggle decides whether it renders.`,
+				})
+				continue
+			}
+			actions.push(enabled.get(id))
+			continue
+		}
+		warnings.push({
+			code: 'invalid-entry',
+			message: `Ignoring action ${JSON.stringify(entry)}: actions must be objects with an id and a label, or one of ${BUILTIN_ROW_ACTION_IDS.map((id) => `"${BUILTIN_PLACEHOLDER_PREFIX}${id}"`).join(', ')}. To turn a built-in action on or off use the showViewAction / showEditAction / showCopyAction / showDeleteAction props.`,
+		})
+	}
+
+	for (const builtin of enabled.values()) {
+		if (!placed.has(builtin.id)) {
+			actions.push(builtin)
+		}
+	}
+
+	const deleteIndex = actions.findIndex((action) => action && action.builtin === true && action.id === 'delete')
+	const deleteNotLast = deleteIndex !== -1 && deleteIndex !== actions.length - 1
+	if (deleteNotLast) {
+		warnings.push({
+			code: 'delete-not-last',
+			message: `"${BUILTIN_PLACEHOLDER_PREFIX}delete" is not the last row action; it renders before ${actions.slice(deleteIndex + 1).map((a) => (a.builtin === true ? `"${BUILTIN_PLACEHOLDER_PREFIX}${a.id}"` : describe(a))).join(', ')}. Delete is normally last.`,
+		})
+	}
+
+	return { actions, warnings, deleteNotLast }
+}

package/src/utils/rowActionItem.js

@@ -0,0 +1,100 @@
+/**
+ * SPDX-FileCopyrightText: 2026 Conduction B.V. <info@conduction.nl>
+ * SPDX-License-Identifier: EUPL-1.2
+ *
+ * How a row action renders as a menu entry.
+ * CnRowActions and CnContextMenu both use these, so a row's actions menu and its right-click menu agree on which entries show and on each entry's key, testid and event payload.
+ */
+
+import { evaluateVisibleWhenLocal, isLocallyDecidableVisibleWhen } from './visibleWhen.js'
+
+/**
+ * Whether an action is a built-in row action (View, Edit, Copy, Delete).
+ *
+ * @param {object} action The action.
+ * @return {boolean} True for a built-in carrying an id.
+ */
+function isBuiltin(action) {
+	return !!action && action.builtin === true && typeof action.id === 'string' && action.id !== ''
+}
+
+/**
+ * Whether an action shows for an item.
+ * A locally decidable `visibleWhen` that is false hides it; an endpoint or source condition is not decided here.
+ * Then `visible` (a boolean or `(item) => boolean`) applies; without it the action shows.
+ *
+ * @param {object} action The action.
+ * @param {object|string|number|null} item The row or right-clicked item.
+ * @return {boolean} Whether the entry renders.
+ */
+export function isRowActionVisible(action, item) {
+	if (action.visibleWhen
+		&& isLocallyDecidableVisibleWhen(action.visibleWhen)
+		&& evaluateVisibleWhenLocal(action.visibleWhen, item) === false) {
+		return false
+	}
+	if (action.visible === undefined) {
+		return true
+	}
+	if (typeof action.visible === 'function') {
+		return !!action.visible(item)
+	}
+	return !!action.visible
+}
+
+/**
+ * Slugify a label for a `data-testid` suffix: lowercase, kebab-case, non-alphanumerics stripped.
+ *
+ * @param {string} label The label.
+ * @return {string} The slug.
+ */
+export function slugifyActionLabel(label) {
+	// One pass collapses every run of other characters to a single '-', so at
+	// most one '-' can sit at either end; trimming it by index keeps this
+	// linear. `/^-+|-+$/g` here was a ReDoS on long runs of '-' (CodeQL).
+	const slug = String(label || '')
+		.toLowerCase()
+		.replace(/[^a-z0-9]+/g, '-')
+	const start = slug.startsWith('-') ? 1 : 0
+	const end = slug.length > start && slug.endsWith('-') ? slug.length - 1 : slug.length
+	return slug.slice(start, end)
+}
+
+/**
+ * The render key of an entry: `builtin:<id>` for a built-in, the label for an app action.
+ * An app action with `id: "edit"` therefore never shares a key with the built-in Edit.
+ *
+ * @param {object} action The action.
+ * @return {string} The key.
+ */
+export function rowActionKey(action) {
+	return isBuiltin(action) ? `builtin:${action.id}` : action.label
+}
+
+/**
+ * The `data-testid` of an entry: `cn-action-item-<id>` for a built-in, in every locale, and the slug of the label for an app action.
+ *
+ * @param {object} action The action.
+ * @return {string} The testid.
+ */
+export function rowActionTestId(action) {
+	return `cn-action-item-${isBuiltin(action) ? action.id : slugifyActionLabel(action.label)}`
+}
+
+/**
+ * The `action` event payload for an entry: `action` is the label, `id` is the action's id when it has one, and `builtin: true` marks a built-in.
+ *
+ * @param {object} action The action.
+ * @param {object|string|number|null} row The row or right-clicked item.
+ * @return {{action: string, row: (object|string|number|null), id?: string, builtin?: true}} The payload.
+ */
+export function rowActionPayload(action, row) {
+	const payload = { action: action.label, row }
+	if (typeof action.id === 'string' && action.id !== '') {
+		payload.id = action.id
+	}
+	if (isBuiltin(action)) {
+		payload.builtin = true
+	}
+	return payload
+}

package/src/utils/timelineEvents.js

@@ -97,6 +97,49 @@ export function fieldEvents(object, fields, now = new Date()) {
  * @param {Date} [now] The reference moment.
  * @return {Array<object>} The events.
  */
+/**
+ * The text at a path of a list entry, or '' when the path is unset or empty.
+ *
+ * @param {object} row The list entry.
+ * @param {string|undefined} path The path to read.
+ * @return {string} The text.
+ */
+function textAt(row, path) {
+	if (!path) {
+		return ''
+	}
+	const value = readPath(row, path)
+	return value === null || value === undefined ? '' : String(value)
+}
+
+/**
+ * Events from a list held on the object itself, such as a status history:
+ * `[{ field, dateField, labelField?, label?, detailField? }]`. Each entry of the
+ * list at `field` becomes one event, dated by `dateField`, labelled by its
+ * `labelField` value (else `label`), with `detailField` as the line under it.
+ *
+ * @param {object} object The object.
+ * @param {Array<object>} lists The list configs.
+ * @param {Date} now The moment that separates past from upcoming.
+ * @return {Array<object>} The events.
+ * @spec openspec/changes/timeline-audit-trails-url/specs/timeline-widget/spec.md#requirement-a-list-on-the-object-becomes-dated-events
+ */
+export function listEvents(object, lists, now = new Date()) {
+	return (Array.isArray(lists) ? lists : [])
+		.filter((l) => l && typeof l.field === 'string' && typeof l.dateField === 'string')
+		.flatMap((l) => {
+			const rows = readPath(object, l.field)
+			return (Array.isArray(rows) ? rows : []).map((row, i) => makeEvent({
+				id: `list:${l.field}:${i}`,
+				raw: readPath(row, l.dateField),
+				label: textAt(row, l.labelField) || l.label || l.field,
+				detail: textAt(row, l.detailField),
+				source: 'list',
+			}, now))
+		})
+		.filter(Boolean)
+}
+
 export function relatedEvents(rows, config, now = new Date()) {
 	const cfg = config || {}
 	const dateField = cfg.dateField || '@self.created'