@cosmicdrift/kumiko-framework 0.332.0 → 0.333.0

package/dist/engine/extension-names.d.ts

@@ -5,6 +5,7 @@ import type { PrincipalStatusPlugin, TenantLifecycleStatusPlugin } from "./activ
 import type { TenantDataExtensionHooks } from "./extensions/tenant-data.js";
 import type { TenantResourceExtensionHooks } from "./extensions/tenant-resource.js";
 import type { UserDataExtensionOptions } from "./extensions/user-data.js";
+import type { AssignableFromRole } from "./role-assignment.js";
 import { TENANT_TIER_RESOLVER_EXT, type TierResolverPlugin } from "./tier-resolver-extension.js";
 /**
  * `userData` — User-Daten-Rights-Hooks (DSGVO Art. 15 + 17 + 20).
@@ -137,13 +138,20 @@ export declare const EXT_PRINCIPAL_STATUS: "principalStatus";
  * the bundled `tenant-lifecycle` feature; absent means no tenant is ever "in teardown".
  */
 export declare const EXT_TENANT_LIFECYCLE_STATUS: "tenantLifecycleStatus";
+/**
+ * `assignableRole` — an app declares a membership role as assignable:
+ * `r.useExtension(EXT_ASSIGNABLE_ROLE, "<RoleName>", { assignableFrom? })`
+ * (`assignableFrom` defaults to "Admin").
+ * Provider is the bundled `tenant` feature; consumers are the membership-role guards.
+ */
+export declare const EXT_ASSIGNABLE_ROLE: "assignableRole";
 export declare const TENANT_MEMBERSHIPS_QUERY: "tenant:query:memberships";
 /**
  * Union aller standardisierten Extension-Namen der Datenschutz-Surface.
  * Nicht alle Extensions im System sind in dieser Liste — andere
  * Features koennen weiterhin eigene Extension-Namen registrieren.
  */
-export type KumikoExtensionName = typeof EXT_USER_DATA | typeof EXT_TENANT_DATA | typeof EXT_STORAGE_PROVIDER | typeof EXT_SEARCH_ADAPTER | typeof EXT_EXTERNAL_RESOURCE | typeof EXT_INFRA_RESOURCE | typeof EXT_FILE_PROVIDER | typeof EXT_DERIVATIVE_RENDERER | typeof EXT_DERIVATIVE_PUBLIC_PREDICATE | typeof EXT_DERIVATIVE_OVERLAY_RESOLVER | typeof EXT_PRINCIPAL_STATUS | typeof EXT_TENANT_LIFECYCLE_STATUS;
+export type KumikoExtensionName = typeof EXT_USER_DATA | typeof EXT_TENANT_DATA | typeof EXT_STORAGE_PROVIDER | typeof EXT_SEARCH_ADAPTER | typeof EXT_EXTERNAL_RESOURCE | typeof EXT_INFRA_RESOURCE | typeof EXT_FILE_PROVIDER | typeof EXT_DERIVATIVE_RENDERER | typeof EXT_DERIVATIVE_PUBLIC_PREDICATE | typeof EXT_DERIVATIVE_OVERLAY_RESOLVER | typeof EXT_PRINCIPAL_STATUS | typeof EXT_TENANT_LIFECYCLE_STATUS | typeof EXT_ASSIGNABLE_ROLE;
 /** The four `destroyTenant(tenantId, ctx)`-only resource-cleanup extension points. */
 export type TenantResourceExtensionName = typeof EXT_STORAGE_PROVIDER | typeof EXT_SEARCH_ADAPTER | typeof EXT_EXTERNAL_RESOURCE | typeof EXT_INFRA_RESOURCE;
 declare module "@cosmicdrift/kumiko-framework/engine" {
@@ -155,6 +163,9 @@ declare module "@cosmicdrift/kumiko-framework/engine" {
         [EXT_DERIVATIVE_OVERLAY_RESOLVER]: OverlayResolverPlugin;
         [EXT_PRINCIPAL_STATUS]: PrincipalStatusPlugin;
         [EXT_TENANT_LIFECYCLE_STATUS]: TenantLifecycleStatusPlugin;
+        [EXT_ASSIGNABLE_ROLE]: {
+            readonly assignableFrom?: AssignableFromRole;
+        };
         [EXT_STORAGE_PROVIDER]: TenantResourceExtensionHooks;
         [EXT_SEARCH_ADAPTER]: TenantResourceExtensionHooks;
         [EXT_EXTERNAL_RESOURCE]: TenantResourceExtensionHooks;

package/dist/engine/extension-names.js

@@ -167,6 +167,13 @@ export const EXT_PRINCIPAL_STATUS = "principalStatus";
  * the bundled `tenant-lifecycle` feature; absent means no tenant is ever "in teardown".
  */
 export const EXT_TENANT_LIFECYCLE_STATUS = "tenantLifecycleStatus";
+/**
+ * `assignableRole` — an app declares a membership role as assignable:
+ * `r.useExtension(EXT_ASSIGNABLE_ROLE, "<RoleName>", { assignableFrom? })`
+ * (`assignableFrom` defaults to "Admin").
+ * Provider is the bundled `tenant` feature; consumers are the membership-role guards.
+ */
+export const EXT_ASSIGNABLE_ROLE = "assignableRole";
 // Default membership-list query handler name. Accepted coupling, same
 // pattern as FILE_PROVIDER_CONFIG_KEY — the `tenant` feature registers a handler under this literal.
 export const TENANT_MEMBERSHIPS_QUERY = "tenant:query:memberships";

package/dist/engine/feature-ast/extractors/index.d.ts

@@ -8,7 +8,7 @@ export { findImportBindingForLocalName, resolveModuleFile, } from "./resolve-imp
 export { extractDescribe, extractOptionalRequires, extractReadsConfig, extractRequires, extractSystemScope, extractToggleable, extractUiHints, } from "./round1.js";
 export { extractEntity, extractNav, extractRelation, extractWorkspace, } from "./round2.js";
 export { extractClaimKey, extractConfig, extractMetric, extractReferenceData, extractSecret, extractTranslations, extractUseExtension, isClaimKeyType, type NamedOptionsResult, readNamedOptions, } from "./round3.js";
-export { extractEnvSchema, extractExposesApi, extractExtendsRegistrar, extractStoreTable, extractUsesApi, } from "./round5.js";
+export { extractBootCheck, extractEnvSchema, extractExposesApi, extractExtendsRegistrar, extractStoreTable, extractUsesApi, } from "./round5.js";
 export { extractTreeActions } from "./round6.js";
 export type { ExtractOutput } from "./shared.js";
 export { fail, findFunctionLiteral, isPlainObject, ok, readBooleanProperty, readDataLiteralNode, readNameOrRef, readNameOrRefOrList, readObjectPropertyInitializer, readPropertyKey, readStringLiteralArgs, readVarargsOrArrayProp, resolveSameFileObjectLiteral, } from "./shared.js";

package/dist/engine/feature-ast/extractors/index.js

@@ -8,6 +8,6 @@ export { findImportBindingForLocalName, resolveModuleFile, } from "./resolve-imp
 export { extractDescribe, extractOptionalRequires, extractReadsConfig, extractRequires, extractSystemScope, extractToggleable, extractUiHints, } from "./round1.js";
 export { extractEntity, extractNav, extractRelation, extractWorkspace, } from "./round2.js";
 export { extractClaimKey, extractConfig, extractMetric, extractReferenceData, extractSecret, extractTranslations, extractUseExtension, isClaimKeyType, readNamedOptions, } from "./round3.js";
-export { extractEnvSchema, extractExposesApi, extractExtendsRegistrar, extractStoreTable, extractUsesApi, } from "./round5.js";
+export { extractBootCheck, extractEnvSchema, extractExposesApi, extractExtendsRegistrar, extractStoreTable, extractUsesApi, } from "./round5.js";
 export { extractTreeActions } from "./round6.js";
 export { fail, findFunctionLiteral, isPlainObject, ok, readBooleanProperty, readDataLiteralNode, readNameOrRef, readNameOrRefOrList, readObjectPropertyInitializer, readPropertyKey, readStringLiteralArgs, readVarargsOrArrayProp, resolveSameFileObjectLiteral, } from "./shared.js";

package/dist/engine/feature-ast/extractors/round5.d.ts

@@ -6,3 +6,4 @@ export declare function extractExtendsRegistrar(call: CallExpression, sourceFile
 export declare function extractUsesApi(call: CallExpression, sourceFile: SourceFile): ExtractOutput<UsesApiPattern>;
 export declare function extractExposesApi(call: CallExpression, sourceFile: SourceFile): ExtractOutput<ExposesApiPattern>;
 export declare function extractStoreTable(call: CallExpression, sourceFile: SourceFile): ExtractOutput<never>;
+export declare function extractBootCheck(call: CallExpression, sourceFile: SourceFile): ExtractOutput<never>;

package/dist/engine/feature-ast/extractors/round5.js

@@ -61,3 +61,8 @@ export function extractStoreTable(call, sourceFile) {
     // UnknownPattern) marks it design-time-unreadable, like entity-by-identifier.
     return fail("storeTable", sourceLocationFromNode(call, sourceFile), "storeTable meta is a factory/identifier argument, not a static literal");
 }
+export function extractBootCheck(call, sourceFile) {
+    // The argument is a runtime closure over the composed feature list —
+    // nothing to extract statically, so a clean ParseError like storeTable.
+    return fail("bootCheck", sourceLocationFromNode(call, sourceFile), "bootCheck takes a runtime closure, not a static literal");
+}

package/dist/engine/feature-ast/parse.js

@@ -21,7 +21,7 @@
 // Per-pattern extractors fill in iteratively (C1.5) — each round adds
 // one extractor + a focused test.
 import { Project, SyntaxKind } from "ts-morph";
-import { extractAiClassify, extractAiExtract, extractAiGenerate, extractAuthClaims, extractClaimKey, extractConfig, extractDefineEvent, extractDescribe, extractEntity, extractEnvSchema, extractExposesApi, extractExtendsRegistrar, extractHook, extractHttpRoute, extractJob, extractMetric, extractMultiStreamProjection, extractNav, extractNotification, extractOptionalRequires, extractProjection, extractQueryHandler, extractReadsConfig, extractReferenceData, extractRelation, extractRequires, extractScreen, extractSecret, extractStoreTable, extractStreamHandler, extractSystemScope, extractToggleable, extractTranslations, extractTreeActions, extractUiHints, extractUseExtension, extractUsesApi, extractWorkspace, extractWriteHandler, findFunctionLiteral, findImportBindingForLocalName, readObjectPropertyInitializer, resolveModuleFile, resolveSameFileObjectLiteral, } from "./extractors/index.js";
+import { extractAiClassify, extractAiExtract, extractAiGenerate, extractAuthClaims, extractBootCheck, extractClaimKey, extractConfig, extractDefineEvent, extractDescribe, extractEntity, extractEnvSchema, extractExposesApi, extractExtendsRegistrar, extractHook, extractHttpRoute, extractJob, extractMetric, extractMultiStreamProjection, extractNav, extractNotification, extractOptionalRequires, extractProjection, extractQueryHandler, extractReadsConfig, extractReferenceData, extractRelation, extractRequires, extractScreen, extractSecret, extractStoreTable, extractStreamHandler, extractSystemScope, extractToggleable, extractTranslations, extractTreeActions, extractUiHints, extractUseExtension, extractUsesApi, extractWorkspace, extractWriteHandler, findFunctionLiteral, findImportBindingForLocalName, readObjectPropertyInitializer, resolveModuleFile, resolveSameFileObjectLiteral, } from "./extractors/index.js";
 import { sourceLocationFromNode } from "./source-location.js";
 /**
  * Parse the given feature file and return all recognised r.* calls
@@ -440,6 +440,8 @@ function dispatchExtractor(methodName, call, sourceFile) {
             return extractExposesApi(call, sourceFile);
         case "storeTable":
             return extractStoreTable(call, sourceFile);
+        case "bootCheck":
+            return extractBootCheck(call, sourceFile);
         // Round 6 — Tree-Actions pattern
         case "treeActions":
             return extractTreeActions(call, sourceFile);

package/dist/engine/index.d.ts

@@ -28,7 +28,7 @@ export { declareEscapeHatch } from "./escape-hatch-declaration.js";
 export type { EmitCtx } from "./event-helpers.js";
 export { emitEvent, typedPayload } from "./event-helpers.js";
 export type { KumikoExtensionName, TenantResourceExtensionName } from "./extension-names.js";
-export { EXT_DERIVATIVE_OVERLAY_RESOLVER, EXT_DERIVATIVE_PUBLIC_PREDICATE, EXT_DERIVATIVE_RENDERER, EXT_EXTERNAL_RESOURCE, EXT_FILE_PROVIDER, EXT_INFRA_RESOURCE, EXT_PRINCIPAL_STATUS, EXT_SEARCH_ADAPTER, EXT_STORAGE_PROVIDER, EXT_TENANT_DATA, EXT_TENANT_LIFECYCLE_STATUS, EXT_USER_DATA, EXT_USER_DATA_ORDER, FILE_PROVIDER_CONFIG_KEY, FILE_STORAGE_PROVIDER_BOOT_SENTINEL, FILE_STORAGE_PROVIDER_ENV, TENANT_MEMBERSHIPS_QUERY, } from "./extension-names.js";
+export { EXT_ASSIGNABLE_ROLE, EXT_DERIVATIVE_OVERLAY_RESOLVER, EXT_DERIVATIVE_PUBLIC_PREDICATE, EXT_DERIVATIVE_RENDERER, EXT_EXTERNAL_RESOURCE, EXT_FILE_PROVIDER, EXT_INFRA_RESOURCE, EXT_PRINCIPAL_STATUS, EXT_SEARCH_ADAPTER, EXT_STORAGE_PROVIDER, EXT_TENANT_DATA, EXT_TENANT_LIFECYCLE_STATUS, EXT_USER_DATA, EXT_USER_DATA_ORDER, FILE_PROVIDER_CONFIG_KEY, FILE_STORAGE_PROVIDER_BOOT_SENTINEL, FILE_STORAGE_PROVIDER_ENV, TENANT_MEMBERSHIPS_QUERY, } from "./extension-names.js";
 export { EXTENSION_SELECTOR_HINT_KEY, extensionSelectorTargets, SELECTED_EXTENSIONS_QUERY, selectablePluginIds, } from "./extension-selector-plugins.js";
 export { extensionUsageEscapeHatchReason } from "./extensions/escape-hatch-usage.js";
 export type { StorageProviderDestroyTenantHook, StorageProviderExtensionHooks, StorageProviderHookCtx, } from "./extensions/storage-provider.js";
@@ -57,7 +57,8 @@ export { readClaim } from "./read-claim.js";
 export { createRegistry } from "./registry.js";
 export type { ClampInfo, ResolveOptions } from "./resolve-config-or-param.js";
 export { resolveConfigOrParam } from "./resolve-config-or-param.js";
-export { findForbiddenRoleAssignment } from "./role-assignment.js";
+export type { AssignableAppRoles, AssignableFromRole } from "./role-assignment.js";
+export { assignableAppRolesFromUsages, findForbiddenRoleAssignment, isAssignableByRole, } from "./role-assignment.js";
 export { runsInLane } from "./run-in.js";
 export type { StepListOutcome } from "./run-pipeline.js";
 export { runPipeline, runStepList } from "./run-pipeline.js";

package/dist/engine/index.js

@@ -26,7 +26,7 @@ export { createEntityExecutor, defineEntityCreateHandler, defineEntityDeleteHand
 defineEntityQueryHandler, defineEntityRestoreHandler, defineEntityUpdateHandler, defineEntityWriteHandler, defineProjectionQueryHandler, entityListSchema, MAX_LIST_LIMIT, registerEntityCrud, } from "./entity-handlers.js";
 export { declareEscapeHatch } from "./escape-hatch-declaration.js";
 export { emitEvent, typedPayload } from "./event-helpers.js";
-export { EXT_DERIVATIVE_OVERLAY_RESOLVER, EXT_DERIVATIVE_PUBLIC_PREDICATE, EXT_DERIVATIVE_RENDERER, EXT_EXTERNAL_RESOURCE, EXT_FILE_PROVIDER, EXT_INFRA_RESOURCE, EXT_PRINCIPAL_STATUS, EXT_SEARCH_ADAPTER, EXT_STORAGE_PROVIDER, EXT_TENANT_DATA, EXT_TENANT_LIFECYCLE_STATUS, EXT_USER_DATA, EXT_USER_DATA_ORDER, FILE_PROVIDER_CONFIG_KEY, FILE_STORAGE_PROVIDER_BOOT_SENTINEL, FILE_STORAGE_PROVIDER_ENV, TENANT_MEMBERSHIPS_QUERY, } from "./extension-names.js";
+export { EXT_ASSIGNABLE_ROLE, EXT_DERIVATIVE_OVERLAY_RESOLVER, EXT_DERIVATIVE_PUBLIC_PREDICATE, EXT_DERIVATIVE_RENDERER, EXT_EXTERNAL_RESOURCE, EXT_FILE_PROVIDER, EXT_INFRA_RESOURCE, EXT_PRINCIPAL_STATUS, EXT_SEARCH_ADAPTER, EXT_STORAGE_PROVIDER, EXT_TENANT_DATA, EXT_TENANT_LIFECYCLE_STATUS, EXT_USER_DATA, EXT_USER_DATA_ORDER, FILE_PROVIDER_CONFIG_KEY, FILE_STORAGE_PROVIDER_BOOT_SENTINEL, FILE_STORAGE_PROVIDER_ENV, TENANT_MEMBERSHIPS_QUERY, } from "./extension-names.js";
 export { EXTENSION_SELECTOR_HINT_KEY, extensionSelectorTargets, SELECTED_EXTENSIONS_QUERY, selectablePluginIds, } from "./extension-selector-plugins.js";
 export { extensionUsageEscapeHatchReason } from "./extensions/escape-hatch-usage.js";
 export { isTenantDataExtensionHooks, } from "./extensions/tenant-data.js";
@@ -54,7 +54,7 @@ export { isValidQn, parseQn, QnTypes, qn, toKebab } from "./qualified-name.js";
 export { readClaim } from "./read-claim.js";
 export { createRegistry } from "./registry.js";
 export { resolveConfigOrParam } from "./resolve-config-or-param.js";
-export { findForbiddenRoleAssignment } from "./role-assignment.js";
+export { assignableAppRolesFromUsages, findForbiddenRoleAssignment, isAssignableByRole, } from "./role-assignment.js";
 export { runsInLane } from "./run-in.js";
 export { runPipeline, runStepList } from "./run-pipeline.js";
 export { buildInsertSchema, buildUpdateSchema, fieldToZod } from "./schema-builder.js";

package/dist/engine/role-assignment.d.ts

@@ -1 +1,11 @@
-export declare function findForbiddenRoleAssignment(actorRoles: readonly string[], assignedRoles: readonly string[], targetCurrentRoles: readonly string[]): string | undefined;
+export type AssignableFromRole = "User" | "Member" | "Editor" | "Admin" | "TenantAdmin" | "SystemAdmin";
+/** App role → lowest built-in role allowed to assign it. */
+export type AssignableAppRoles = ReadonlyMap<string, AssignableFromRole>;
+export declare const DEFAULT_APP_ROLE_ASSIGNABLE_FROM: AssignableFromRole;
+export declare function assignableAppRolesFromUsages(usages: readonly {
+    entityName: string;
+    options?: Record<string, unknown> | undefined;
+}[]): AssignableAppRoles;
+/** True when `actorRole` ranks at least as high as the role an app role is assignable from. */
+export declare function isAssignableByRole(assignableFrom: AssignableFromRole, actorRole: AssignableFromRole): boolean;
+export declare function findForbiddenRoleAssignment(actorRoles: readonly string[], assignedRoles: readonly string[], targetCurrentRoles: readonly string[], assignableAppRoles?: AssignableAppRoles): string | undefined;

package/dist/engine/role-assignment.js

@@ -1,8 +1,13 @@
+import { ROLES } from "../auth/roles.js";
+import { isForbiddenMembershipRole } from "./membership-roles.js";
+const PLATFORM_ROLE_NAMES = new Set(Object.values(ROLES));
 // Prototype-free rank table — Object literals leak Object.prototype
 // (`constructor`, `toString`, …) into `ROLE_RANKS[role]` lookups and turn
 // Math.max into NaN, which fails every `rank > actorRank` check open.
 const ROLE_RANKS = new Map([
     ["User", 0],
+    // Default seed role — unranked it would fail closed and never be assignable.
+    ["Member", 0],
     // Matches DEFAULT_INVITE_ROLE_OPTIONS — must stay ranked or invite UI fails closed.
     ["Editor", 1],
     ["Admin", 2],
@@ -10,7 +15,55 @@ const ROLE_RANKS = new Map([
     ["SystemAdmin", 4],
     ["system", 5],
 ]);
-// Unknown roles: +∞ on the assigned path (cannot grant what we don't know),
+// App roles are ordinary, non-privileged tiers: whoever may manage members
+// (access.admin) may grant them; an app raises the bar via assignableFrom.
+export const DEFAULT_APP_ROLE_ASSIGNABLE_FROM = "Admin";
+const NO_ASSIGNABLE_APP_ROLES = new Map();
+const ASSIGNABLE_FROM_ROLES = new Set([
+    "User",
+    "Member",
+    "Editor",
+    "Admin",
+    "TenantAdmin",
+    "SystemAdmin",
+]);
+function isAssignableFromRole(value) {
+    return typeof value === "string" && ASSIGNABLE_FROM_ROLES.has(value);
+}
+export function assignableAppRolesFromUsages(usages) {
+    const result = new Map();
+    for (const usage of usages) {
+        const role = usage.entityName;
+        if (role === "") {
+            throw new Error("assignableRole: role name must not be empty");
+        }
+        // Platform roles (TenantOwner, DataProtectionOfficer) gate handlers that
+        // TenantAdmin/Admin cannot reach — declaring one would let an Admin
+        // self-grant it, so they stay out of reach of app declarations.
+        if (ROLE_RANKS.has(role) || PLATFORM_ROLE_NAMES.has(role)) {
+            throw new Error(`assignableRole: "${role}" is a built-in role and cannot be redeclared`);
+        }
+        if (isForbiddenMembershipRole(role)) {
+            throw new Error(`assignableRole: "${role}" is a reserved role and cannot be a membership role`);
+        }
+        const declaredAssignableFrom = usage.options?.["assignableFrom"];
+        if (declaredAssignableFrom !== undefined && !isAssignableFromRole(declaredAssignableFrom)) {
+            throw new Error(`assignableRole: "${role}" has invalid assignableFrom, expected one of ${[...ASSIGNABLE_FROM_ROLES].join(", ")}`);
+        }
+        const assignableFrom = declaredAssignableFrom ?? DEFAULT_APP_ROLE_ASSIGNABLE_FROM;
+        const existing = result.get(role);
+        if (existing !== undefined && existing !== assignableFrom) {
+            throw new Error(`assignableRole: "${role}" is declared with conflicting assignableFrom (${existing} vs ${assignableFrom})`);
+        }
+        result.set(role, assignableFrom);
+    }
+    return result;
+}
+/** True when `actorRole` ranks at least as high as the role an app role is assignable from. */
+export function isAssignableByRole(assignableFrom, actorRole) {
+    return getRoleRank(assignableFrom) <= getRoleRank(actorRole);
+}
+// Unknown roles: +∞ on the assigned path (cannot grant what we don't know, unless declared),
 // -1 on the actor path (cannot elevate via an unrecognized self-role).
 function roleRankOr(role, unknownRank) {
     return ROLE_RANKS.get(role) ?? unknownRank;
@@ -27,15 +80,23 @@ function maxRoleRank(roles) {
 function knownRoleRank(role) {
     return ROLE_RANKS.get(role);
 }
+// Built-ins win: a declaration can never re-tier a built-in role.
+function requiredAssignRank(role, assignableAppRoles) {
+    const builtIn = ROLE_RANKS.get(role);
+    if (builtIn !== undefined)
+        return builtIn;
+    const assignableFrom = assignableAppRoles.get(role);
+    return assignableFrom === undefined ? Number.POSITIVE_INFINITY : getRoleRank(assignableFrom);
+}
 export function findForbiddenRoleAssignment(actorRoles, assignedRoles, 
 // Required so callers cannot accidentally disable the downgrade/
 // takeover guard by omitting the third argument (new users: pass []).
-targetCurrentRoles) {
+targetCurrentRoles, assignableAppRoles = NO_ASSIGNABLE_APP_ROLES) {
     const actorRank = maxRoleRank(actorRoles);
     // Assign path: fail-closed on unknown / above-actor roles — except unranked
     // app roles the target already holds (round-trip restore after strip).
     const forbiddenAssigned = assignedRoles.find((role) => {
-        if (getRoleRank(role) <= actorRank)
+        if (requiredAssignRank(role, assignableAppRoles) <= actorRank)
             return false;
         if (knownRoleRank(role) === undefined && targetCurrentRoles.includes(role))
             return false;

package/dist/i18n/required-surface-keys.js

@@ -42,6 +42,7 @@ function editFieldName(f) {
 // Group titles are translated exactly like the section title (computeEditViewModel).
 function pushSectionTitles(out, section, treatAsKey = false) {
     pushKey(out, section.title, treatAsKey);
+    pushKey(out, section.subtitle, treatAsKey);
     for (const group of section.groups ?? [])
         pushKey(out, group.title, treatAsKey);
 }
@@ -51,6 +52,10 @@ function pushRowActionKeys(out, action) {
         pushKey(out, action.confirm);
         pushKey(out, action.confirmLabel);
     }
+    if (action.kind === "drawer") {
+        pushKey(out, action.title);
+        pushKey(out, action.subtitle);
+    }
 }
 function pushDashboardScreenKeys(out, dashboard) {
     for (const panel of dashboard.panels)
@@ -103,9 +108,12 @@ function pushToolbarActionKeys(out, action) {
         pushKey(out, action.confirm);
         pushKey(out, action.confirmLabel);
     }
-    // drawer-kind carries no confirm/confirmLabel — action.label (the
-    // toolbar button AND the Drawer title, see ToolbarDrawerHost) is
-    // already pushed above.
+    // drawer-kind carries no confirm/confirmLabel — action.label is the
+    // toolbar button and the Drawer title unless `title` overrides it.
+    if (action.kind === "drawer") {
+        pushKey(out, action.title);
+        pushKey(out, action.subtitle);
+    }
 }
 function pushRelatedListSectionKeys(out, section) {
     pushKey(out, section.title);
@@ -180,6 +188,7 @@ export function requiredKeysFromScreen(featureName, screen, options = {}) {
         case "entityEdit": {
             const edit = screen;
             pushKey(out, edit.submitLabel);
+            pushKey(out, edit.titleTemplate);
             for (const section of edit.layout.sections) {
                 if (isExtensionEditSection(section)) {
                     pushKey(out, section.title);
@@ -204,6 +213,8 @@ export function requiredKeysFromScreen(featureName, screen, options = {}) {
             pushKey(out, form.submitLabel);
             pushKey(out, form.summary?.title);
             pushKey(out, form.summary?.subtitle);
+            for (const action of form.footerActions ?? [])
+                pushKey(out, action.label);
             for (const fieldName of Object.keys(form.fields)) {
                 const override = form.fieldLabels?.[fieldName];
                 if (override !== undefined)
@@ -328,6 +339,11 @@ export function requiredKeysFromScreen(featureName, screen, options = {}) {
                 }
                 if (section.kind === "relatedList") {
                     pushRelatedListSectionKeys(out, section);
+                    if (section.groupBy !== undefined) {
+                        pushKey(out, section.groupBy.label);
+                        for (const label of Object.values(section.groupBy.labels ?? {}))
+                            pushKey(out, label);
+                    }
                     continue;
                 }
                 if (isWriteFormEditSection(section)) {

package/dist/ui-types/index.d.ts

@@ -9,7 +9,7 @@ export type { BooleanFieldDef, DateFieldDef, EmbeddedDerivedCellDef, EntityDefin
 export type { AccessRule, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, RoleAccessPersonalData, RoleAccessRule, } from "../engine/types/handlers.js";
 export { isOpenToAllGranted, isUiAccessGranted } from "../engine/types/handlers.js";
 export type { IconKey, NavDefinition, NavIconKey } from "../engine/types/nav.js";
-export type { ActionFormRedirect, ActionFormScreenDefinition, ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, DashboardChartKind, DashboardChartPanel, DashboardChartTone, DashboardCustomPanel, DashboardFeedPanel, DashboardFilterDefinition, DashboardListPanel, DashboardPanelDefinition, DashboardPanelEmptyState, DashboardPanelQueryOptions, DashboardPanelSpan, DashboardPanelVisibility, DashboardProgressListPanel, DashboardScopeDefinition, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardTimeRangeDefinition, EditExtensionSection, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EntityEditScreenDefinition, EntityListExpandableRow, EntityListScreenDefinition, FieldCondition, FieldIconKey, FieldRenderer, FormWidth, ListBadgeTone, ListColumnDisplay, ListColumnSpec, ListFacetSpec, ListSortSpec, MetricNavigate, MetricSpec, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSubtitlePart, RelatedListToolbarAction, RowAction, RowActionDrawer, RowActionNavigate, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenSlots, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, ToolbarAction, } from "../engine/types/screen.js";
+export type { ActionFormFooterAction, ActionFormRedirect, ActionFormScreenDefinition, ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, DashboardChartKind, DashboardChartPanel, DashboardChartTone, DashboardCustomPanel, DashboardFeedPanel, DashboardFilterDefinition, DashboardListPanel, DashboardPanelDefinition, DashboardPanelEmptyState, DashboardPanelQueryOptions, DashboardPanelSpan, DashboardPanelVisibility, DashboardProgressListPanel, DashboardScopeDefinition, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardTimeRangeDefinition, EditExtensionSection, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EntityEditScreenDefinition, EntityListExpandableRow, EntityListFacetConfig, EntityListFacetExtraOption, EntityListScreenDefinition, FieldCondition, FieldIconKey, FieldRenderer, FormWidth, ListBadgeTone, ListColumnDisplay, ListColumnSpec, ListFacetSpec, ListSortSpec, MetricNavigate, MetricSpec, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSubtitlePart, RelatedListGroupBy, RelatedListRowTone, RelatedListToolbarAction, RowAction, RowActionDisplay, RowActionDrawer, RowActionMode, RowActionNavigate, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenSlots, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, ToolbarAction, } from "../engine/types/screen.js";
 export { metricField } from "../engine/types/screen.js";
 export type { TargetRef } from "../engine/types/target-ref.js";
 export type { TreeAction, TreeNode, TreeNodeState } from "../engine/types/tree-node.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-framework",
-  "version": "0.332.0",
+  "version": "0.333.0",
   "description": "Framework core — engine, pipeline, API, DB, and every other bit that makes Kumiko go.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -206,8 +206,8 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-http": "0.332.0",
-    "@cosmicdrift/kumiko-types": "0.332.0",
+    "@cosmicdrift/kumiko-http": "0.333.0",
+    "@cosmicdrift/kumiko-types": "0.333.0",
     "bullmq": "^5.76.7",
     "bun-types": "^1.3.13",
     "hono": "^4.13.1",
@@ -223,7 +223,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@cosmicdrift/kumiko-dispatcher-live": "0.332.0",
+    "@cosmicdrift/kumiko-dispatcher-live": "0.333.0",
     "bun-types": "^1.3.13",
     "pino-pretty": "^13.1.3"
   },