@cosmicdrift/kumiko-framework 0.374.0 → 0.378.0

package/dist/engine/build-config-feature-schema.js

@@ -46,6 +46,10 @@ const PROVIDER_PANEL_TITLE_ENTRY = {
     es: "Proveedor",
 };
 const PROVIDER_SECTION_TITLE_KEY = "config.settings.provider";
+// The empty option of a provider select means "no own provider, the platform handles it". A selector
+// names it through `<field label key>.platformDefault`, else this generic text applies.
+const PLATFORM_DEFAULT_LABEL_SUFFIX = ".platformDefault";
+const PLATFORM_DEFAULT_FALLBACK_KEY = "config.settings.provider.platformDefault";
 const SECRETS_SECTION_DESCRIPTION_KEY = "config.secrets.description";
 const audienceNavShortId = (scope) => `audience-${scope}`;
 // Generated post-boot, never via r.nav() — the boot validator exempts exactly these QNs (an app references one to place the settings group inline).
@@ -214,8 +218,8 @@ function buildFeatureNav(scope, feature, ordered, access, declaredTranslationKey
         access,
     };
 }
-// One configEdit screen + child-nav per feature; a tenant-scope selector owner
-// becomes a dashboard instead and its gated plugins get no entries of their own.
+// One configEdit screen + child-nav per feature; a tenant-scope selector owner folds its
+// gated plugins into its own screen (a dashboard when it carries extra panels).
 function buildFeatureScreensAndNavs(scope, visible, hub, gating, secretsAccess) {
     const out = { screens: [], navs: [], translations: {} };
     const ungated = visible.filter((v) => !gating.pluginFeatures.has(v.key.ownerFeature));
@@ -230,7 +234,7 @@ function buildFeatureScreensAndNavs(scope, visible, hub, gating, secretsAccess)
             out.navs.push(buildFeatureNav(scope, feature, ordered, access, hub.declaredTranslationKeys));
             continue;
         }
-        const ownerHub = buildSelectorOwnerDashboard(feature, ordered, access, plugins, gating.ownerPanelsByGroup.get(feature) ?? [], hub, secretsAccess);
+        const ownerHub = buildSelectorOwnerScreens(feature, ordered, access, plugins, gating.ownerPanelsByGroup.get(feature) ?? [], hub, secretsAccess);
         out.screens.push(...ownerHub.screens);
         out.navs.push(buildFeatureNav(scope, feature, ordered, ownerHub.access, hub.declaredTranslationKeys));
         Object.assign(out.translations, ownerHub.translations);
@@ -251,15 +255,19 @@ function assertUniquePanelIds(ownerGroup, panels) {
 // One form for the provider and the settings of every provider: a single save writes
 // all of it, so switching sections can't drop typed input. Each plugin's fields are
 // shown only while its provider is picked in the form; hidden fields are not saved.
-function buildSelectorOwnerDashboard(ownerGroup, ownerKeys, ownerAccess, plugins, ownerPanels, hub, secretsAccess) {
-    const selectionScreenId = `${ownerGroup}-tenant-selection`;
+// Without extra panels the form is the owner's screen itself; with panels it sits
+// chromeless in a dashboard.
+function buildSelectorOwnerScreens(ownerGroup, ownerKeys, ownerAccess, plugins, ownerPanels, hub, secretsAccess) {
+    const hasPanels = ownerPanels.length > 0;
+    const selectionScreenId = hasPanels ? `${ownerGroup}-tenant-selection` : `${ownerGroup}-tenant`;
     const form = new ProviderFormBuilder(selectionScreenId, buildScreen(selectionScreenId, "tenant", ownerGroup, ownerKeys, ownerAccess, hub, {
         description: EXTENSION_SELECTOR_HINT_KEY,
-        sectionTitle: PROVIDER_SECTION_TITLE_KEY,
+        ...(hasPanels && { sectionTitle: PROVIDER_SECTION_TITLE_KEY }),
     }));
     const accessRules = [ownerAccess];
     const translations = {};
-    translations[`screen:${selectionScreenId}.title`] = PROVIDER_PANEL_TITLE_ENTRY;
+    if (hasPanels)
+        translations[`screen:${selectionScreenId}.title`] = PROVIDER_PANEL_TITLE_ENTRY;
     Object.assign(translations, providerOptionTranslations(form.base, hub));
     for (const plugin of plugins) {
         const providerFieldId = form.fieldIdOfConfigKey(plugin.selectorQn);
@@ -279,7 +287,10 @@ function buildSelectorOwnerDashboard(ownerGroup, ownerKeys, ownerAccess, plugins
         }
     }
     const access = unionAccessRules(accessRules);
-    const selectionScreen = { ...form.build(access), dormant: true };
+    const providerForm = form.build(access);
+    if (!hasPanels)
+        return { screens: [providerForm], access, translations };
+    const selectionScreen = { ...providerForm, dormant: true };
     const dashboard = {
         id: `${ownerGroup}-tenant`,
         type: "dashboard",
@@ -726,6 +737,14 @@ function providerOptionTranslations(selectionScreen, hub) {
         const featureByPluginId = hub.selectorOptionFeatures.get(qn);
         if (featureByPluginId === undefined)
             continue;
+        const fieldLabelTranslationKey = selectionScreen.fieldLabels?.[fieldId];
+        const platformDefaultLabel = (fieldLabelTranslationKey !== undefined
+            ? hub.translationsByKey.get(`${fieldLabelTranslationKey}${PLATFORM_DEFAULT_LABEL_SUFFIX}`)
+            : undefined) ?? hub.translationsByKey.get(PLATFORM_DEFAULT_FALLBACK_KEY);
+        if (platformDefaultLabel !== undefined) {
+            out[`${fieldLabelKey(SETTINGS_HUB_FEATURE, CONFIG_EDIT_ENTITY, fieldId)}:option:`] =
+                platformDefaultLabel;
+        }
         for (const [pluginId, feature] of featureByPluginId) {
             const label = hub.translationsByKey.get(`${feature}.settings`);
             if (label === undefined)
@@ -738,8 +757,12 @@ function providerOptionTranslations(selectionScreen, hub) {
 }
 function deriveField(key, selectorPluginIds, screenKeys, fieldIdOf) {
     const def = key.def;
-    if (selectorPluginIds !== undefined)
-        return createSelectField({ options: selectorPluginIds });
+    if (selectorPluginIds !== undefined) {
+        return createSelectField({
+            options: selectorPluginIds.length > 0 ? ["", ...selectorPluginIds] : selectorPluginIds,
+            display: "radio",
+        });
+    }
     switch (def.type) {
         case "number":
             return createNumberField({

package/dist/engine/embedded-derived.d.ts

@@ -1,6 +1,6 @@
 import type { EmbeddedDerivedCellDef, EmbeddedSubFieldDef } from "./types/index.ts";
 /** Computes a derived cell from its source values. Missing/non-numeric
- *  sources: "multiply" with any missing source → undefined; "sum"/"subtract"
+ *  sources: "multiply"/"percent" with any missing source → undefined; "sum"/"subtract"
  *  treat missing as 0 only when at least one source is present — if every
  *  source is missing, return undefined (do not invent 0). Money cells are
  *  minor-unit integers — unit-agnostic arithmetic; `withDerivedCells` rounds

package/dist/engine/embedded-derived.js

@@ -1,6 +1,6 @@
 import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
 /** Computes a derived cell from its source values. Missing/non-numeric
- *  sources: "multiply" with any missing source → undefined; "sum"/"subtract"
+ *  sources: "multiply"/"percent" with any missing source → undefined; "sum"/"subtract"
  *  treat missing as 0 only when at least one source is present — if every
  *  source is missing, return undefined (do not invent 0). Money cells are
  *  minor-unit integers — unit-agnostic arithmetic; `withDerivedCells` rounds
@@ -15,6 +15,12 @@ export function computeDerivedCellValue(op, values) {
         }
         return product;
     }
+    if (op === "percent") {
+        const [base, rate] = values;
+        if (values.length !== 2 || base === undefined || rate === undefined)
+            return undefined;
+        return (base * rate) / 100;
+    }
     if (values.every((value) => value === undefined))
         return undefined;
     const numeric = values.map((value) => value ?? 0);

package/dist/engine/form-derivations.d.ts

@@ -0,0 +1,21 @@
+import type { FormFieldDefinition } from "@cosmicdrift/kumiko-types/fields";
+import type { FormFieldDerivation } from "./types/screen.ts";
+export type FormDerivationScreen = {
+    readonly fields: Readonly<Record<string, FormFieldDefinition>>;
+    readonly derive?: Readonly<Record<string, FormFieldDerivation>>;
+};
+/** Targets ordered so every derived source is computed before its reader. */
+export declare function orderFormDerivations(derive: Readonly<Record<string, FormFieldDerivation>>): readonly string[];
+/** True when `field` is a `listSum` without `whenEmpty` whose list has no
+ *  rows: the sum has nothing to add up, so the user types the value. */
+export declare function isFormDerivationInputMode(screen: FormDerivationScreen, values: unknown, field: string): boolean;
+/** True when `field` is only read as a `whenEmpty` operand of `listSum`
+ *  derivations whose lists all have rows: nothing reads it, so it is locked
+ *  rather than inviting an input that is silently dropped. */
+export declare function isUnusedFallbackOperand(screen: FormDerivationScreen, values: unknown, field: string): boolean;
+/** Recomputes every derived head field of an action form from its inputs.
+ *  Pure and client-safe: the renderer runs it live, the server runs it
+ *  again (`withFormDerivations`) and overwrites whatever the client sent.
+ *  Money operands are converted to minor units for the arithmetic and money
+ *  targets are written back as `{ amount, currency }` in major units. */
+export declare function applyFormDerivations(values: unknown, screen: FormDerivationScreen): unknown;

package/dist/engine/form-derivations.js

@@ -0,0 +1,175 @@
+import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
+import { computeDerivedCellValue, roundDerivedCellValue, withDerivedCells, } from "./embedded-derived.js";
+import { MINOR_UNIT_SCALE, toMinorUnits } from "./minor-units.js";
+function readMoneyOperand(raw) {
+    if (typeof raw === "number")
+        return { minor: toMinorUnits(raw), currency: undefined };
+    if (!isPlainObject(raw) || typeof raw["amount"] !== "number")
+        return undefined;
+    const currency = raw["currency"];
+    return {
+        minor: toMinorUnits(raw["amount"]),
+        currency: typeof currency === "string" && currency !== "" ? currency : undefined,
+    };
+}
+function readOperand(values, fields, name) {
+    const raw = values[name];
+    if (fields[name]?.type === "money") {
+        const money = readMoneyOperand(raw);
+        return { value: money?.minor, currency: money?.currency };
+    }
+    return { value: typeof raw === "number" ? raw : undefined, currency: undefined };
+}
+function dependenciesOf(derivation) {
+    if (derivation.op === "listSum") {
+        return derivation.whenEmpty === undefined ? [] : derivation.whenEmpty.from;
+    }
+    return derivation.from;
+}
+/** Targets ordered so every derived source is computed before its reader. */
+export function orderFormDerivations(derive) {
+    const ordered = [];
+    const state = new Map();
+    const visit = (name, path) => {
+        const derivation = derive[name];
+        // skip: plain input field, nothing to order
+        if (derivation === undefined)
+            return;
+        const status = state.get(name);
+        // skip: already ordered via another path
+        if (status === "done")
+            return;
+        if (status === "visiting") {
+            throw new Error(`Form derivation cycle: ${[...path, name].join(" -> ")}`);
+        }
+        state.set(name, "visiting");
+        for (const dependency of dependenciesOf(derivation))
+            visit(dependency, [...path, name]);
+        state.set(name, "done");
+        ordered.push(name);
+    };
+    for (const name of Object.keys(derive))
+        visit(name, []);
+    return ordered;
+}
+function isNonEmptyList(value) {
+    return Array.isArray(value) && value.length > 0;
+}
+/** True when `field` is a `listSum` without `whenEmpty` whose list has no
+ *  rows: the sum has nothing to add up, so the user types the value. */
+export function isFormDerivationInputMode(screen, values, field) {
+    const derivation = screen.derive?.[field];
+    if (derivation === undefined || derivation.op !== "listSum")
+        return false;
+    if (derivation.whenEmpty !== undefined)
+        return false;
+    return !isPlainObject(values) || !isNonEmptyList(values[derivation.list]);
+}
+/** True when `field` is only read as a `whenEmpty` operand of `listSum`
+ *  derivations whose lists all have rows: nothing reads it, so it is locked
+ *  rather than inviting an input that is silently dropped. */
+export function isUnusedFallbackOperand(screen, values, field) {
+    const derive = screen.derive;
+    if (derive === undefined || derive[field] !== undefined)
+        return false;
+    let usedAsFallback = false;
+    for (const derivation of Object.values(derive)) {
+        if (derivation.op !== "listSum") {
+            if (derivation.from.includes(field))
+                return false;
+            continue;
+        }
+        if (derivation.whenEmpty?.from.includes(field) !== true)
+            continue;
+        if (!isPlainObject(values) || !isNonEmptyList(values[derivation.list]))
+            return false;
+        usedAsFallback = true;
+    }
+    return usedAsFallback;
+}
+function sumListCell(rows, listField, cell) {
+    const embedded = listField?.type === "embedded" ? listField : undefined;
+    let sum = 0;
+    for (const rawRow of rows) {
+        // Recompute the row's derived cells so a manipulated row value can't leak into the head.
+        const row = embedded?.derived === undefined
+            ? rawRow
+            : withDerivedCells(rawRow, embedded.derived, embedded.schema);
+        if (isPlainObject(row) && typeof row[cell] === "number")
+            sum += row[cell];
+    }
+    return sum;
+}
+function targetCurrency(field, current, sourceCurrency) {
+    if (isPlainObject(current) &&
+        typeof current["currency"] === "string" &&
+        current["currency"] !== "") {
+        return current["currency"];
+    }
+    if (sourceCurrency !== undefined)
+        return sourceCurrency;
+    if (field.type === "money" && field.currency.kind === "literal")
+        return field.currency.code;
+    return undefined;
+}
+/** Recomputes every derived head field of an action form from its inputs.
+ *  Pure and client-safe: the renderer runs it live, the server runs it
+ *  again (`withFormDerivations`) and overwrites whatever the client sent.
+ *  Money operands are converted to minor units for the arithmetic and money
+ *  targets are written back as `{ amount, currency }` in major units. */
+export function applyFormDerivations(values, screen) {
+    if (!isPlainObject(values))
+        return values;
+    const derive = screen.derive;
+    if (derive === undefined)
+        return values;
+    const result = { ...values };
+    for (const target of orderFormDerivations(derive)) {
+        const derivation = derive[target];
+        const targetField = screen.fields[target];
+        if (derivation === undefined || targetField === undefined)
+            continue;
+        let computed;
+        let sourceCurrency;
+        let ordinary;
+        if (derivation.op === "listSum") {
+            const rows = result[derivation.list];
+            if (isNonEmptyList(rows)) {
+                computed = sumListCell(rows, screen.fields[derivation.list], derivation.cell);
+            }
+            else if (derivation.whenEmpty === undefined) {
+                continue;
+            }
+            else {
+                ordinary = derivation.whenEmpty;
+            }
+        }
+        else {
+            ordinary = derivation;
+        }
+        if (ordinary !== undefined) {
+            const operands = ordinary.from.map((name) => readOperand(result, screen.fields, name));
+            sourceCurrency = operands.find((operand) => operand.currency !== undefined)?.currency;
+            computed = computeDerivedCellValue(ordinary.op, operands.map((operand) => operand.value));
+        }
+        if (computed === undefined) {
+            delete result[target];
+            continue;
+        }
+        if (targetField.type === "money") {
+            const minor = roundDerivedCellValue(computed, { type: "money" });
+            const currency = targetCurrency(targetField, result[target], sourceCurrency);
+            result[target] =
+                currency === undefined
+                    ? { amount: minor / MINOR_UNIT_SCALE }
+                    : { amount: minor / MINOR_UNIT_SCALE, currency };
+        }
+        else if (targetField.type === "decimal") {
+            result[target] = roundDerivedCellValue(computed, targetField);
+        }
+        else {
+            result[target] = computed;
+        }
+    }
+    return result;
+}

package/dist/engine/index.d.ts

@@ -45,6 +45,8 @@ export { addPattern, applyChanges, createFeaturePatcher, getPatternSchema, group
 export { type ChangelogEntry, type ChangelogType, compareVersions, type FeatureChangelog, filterEntriesAfter, parseFeatureChangelog, sortEntries, validateChangelog, } from "./feature-changelog.ts";
 export { type BuildManifestOptions, buildManifestFromRegistry, type FeatureManifest, type ManifestConfigKey, type ManifestExtension, type ManifestFeature, type ManifestSecret, type ManifestSystemEvent, serializeManifest, } from "./feature-manifest.ts";
 export { checkWriteFieldOwnership, checkWriteFieldRoles, filterReadFields, maskWriteOnlyFields, } from "./field-access.ts";
+export type { FormDerivationScreen } from "./form-derivations.ts";
+export { applyFormDerivations, isFormDerivationInputMode } from "./form-derivations.ts";
 export { HANDLER_FIELD_REFERENCES_META_KEY, type HandlerFieldPathSegment, type HandlerFieldReference, type HandlerFieldReferenceAtPath, type HandlerFieldReferenceMeta, handlerFieldReference, handlerFieldReferences, readHandlerFieldReferences, } from "./handler-field-references.ts";
 export { resolveName, withResponseData } from "./handler-helpers.ts";
 export { i18nKey } from "./i18n-key.ts";
@@ -57,6 +59,7 @@ export { parseRefTarget, parseRefTargetEntityName } from "./parse-ref-target.ts"
 export { buildPipelineSteps, stepsPipeline } from "./pipeline.ts";
 export { projectAppSchemaForRoles } from "./project-app-schema-for-roles.ts";
 export { defineApply, defineMspApply, setFields } from "./projection-helpers.ts";
+export { providerPluginContextFromHandler, providerPluginContextFromJob, } from "./provider-plugin-context.ts";
 export type { BuiltinQnType, ParsedQn, QnType } from "./qualified-name.ts";
 export { isValidQn, parseQn, QnTypes, qn, toKebab } from "./qualified-name.ts";
 export { readClaim } from "./read-claim.ts";
@@ -84,7 +87,8 @@ export { assertNotificationVariables, templateVariable, templateVariablesToZod,
 export { type EffectiveFeaturesResolver, findTierResolverUsage, isTierResolverPlugin, requireTierResolverPlugin, TENANT_TIER_RESOLVER_EXT, type TierResolverPlugin, type TrialGate, } from "./tier-resolver-extension.ts";
 export { findOverDeepTransferChain, resolveTransferAdjacency as resolveEntityTransferAdjacency, type TransferAdjacency, type TransferEdge, type TransferEdgeLink, } from "./transfer-adjacency.ts";
 export { isSystemTenant, isUuid, parseTenantId, SYSTEM_TENANT_ID } from "./types/identifiers.ts";
-export type { AccessRule, ActionFormScreenDefinition, ActiveMembership, ActiveMembershipRejection, ActiveMembershipResult, AgentExposure, AgentHandlerHints, AgentRisk, AppContext, AppendEventArgs, AppendEventFn, AuthClaimsContext, AuthClaimsFn, AuthClaimsHookDef, BeforeTransactionPhase, BeforeTransactionResult, BelongsToRelation, BigIntFieldDef, BooleanFieldDef, BootOptionName, CamelToKebab, ChatSendFailureCode, ClaimKeyDefinition, ClaimKeyHandle, ClaimKeyJsType, ClaimKeyType, ConcurrencyMode, ConfigAccessor, ConfigAccessorFactory, ConfigBacking, ConfigCascade, ConfigCascadeLevel, ConfigDefinition, ConfigEditScreenDefinition, ConfigKeyAccess, ConfigKeyDefinition, ConfigKeyHandle, ConfigKeyType, ConfigMask, ConfigResolver, ConfigScope, ConfigSecretsReader, ConfigSeedDef, ConfigStoredRow, ConfigStoredRowWithSource, ConfigValidateContext, ConfigValidateFn, ConfigValue, ConfigValueSource, ConfigValueWithSource, ContentCollectionDefinition, CreateSeedOptions, CreateTenantSeedOptions, CreateUserSeedOptions, CustomScreenDefinition, CustomScreenRoute, DashboardChartPanel, DashboardCurrencyFormat, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelVisibility, DashboardProgressListPanel, DashboardProgressTone, DashboardRecordBinding, DashboardRefresh, DashboardRelativeTimeFormat, DashboardRelativeTimeParam, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextBlock, DashboardTextPanel, DashboardTextParam, DashboardValueFormat, DateFieldDef, DecimalFieldDef, DeleteContext, DeliveryErrorCode, DeliveryFailureCode, DeliverySkipReason, DeriveContext, DerivedFieldDef, DerivedFieldsMap, DerivedValueType, EditExtensionSection, EditFieldPrefill, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EmbeddedListEditSpec, EntityDefinition, EntityEditAction, EntityEditActionPlacement, EntityEditScreenDefinition, EntityId, EntityListExpandableRow, EntityListScreenDefinition, EntityObjectDefinition, EntityRef, EntityRelations, EscapeHatchAuditSink, EscapeHatchDeclaration, EscapeHatchKind, EscapeHatchReporter, EscapeHatchTarget, EscapeHatchUseEvent, EventDef, ExtensionOptionsArgs, ExtensionOptionsFor, FeatureDefinition, FeatureRegistrar, FieldAccess, FieldCondition, FieldDefinition, FieldFormatRegistry, FieldIconKey, FieldRenderer, FileFieldDef, FilesFieldDef, Findability, FormatSpec, FormWidth, HandlerContext, HasManyRelation, HookDefinition, HookMap, ImageFieldDef, ImagesFieldDef, JobBackoff, JobBackoffStrategy, JobContext, JobDefinition, JobHandlerFn, JobTrigger, JobTriggerEvent, JsonbFieldDef, KumikoEntityTypeMap, KumikoEventTypeMap, KumikoExtensionOptionsMap, KumikoHandlerPayloadMap, KumikoHandlerResultMap, LifecycleHookType, ListColumnSpec, ListFacetSpec, ListPaginationMode, ListSortDir, ListSortSpec, LongTextFindability, ManyToManyRelation, MaxPerTenantOptions, MemberReader, MetricNavigate, MetricSpec, MspErrorMode, MspErrorPolicy, MultiSelectFieldDef, MultiStreamApplyFn, MultiStreamProjectionDefinition, NameOrRef, NavDefinition, NavIconKey, NotificationDataFn, NotificationDefinition, NotificationLocalizedTemplate, NotificationRecipientFn, NotificationRecordMapping, NotificationTemplateBody, NotificationTemplateFn, NotificationTemplateMeta, NotifyDeferred, NotifyDelivery, NotifyDeliveryStatus, NotifyDispatched, NotifyFactory, NotifyFn, NotifyJobDispatcher, NotifyOptions, NotifyPriority, NotifyResult, NumberFieldDef, OnDeleteStrategy, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, ParentRefDef, PersonalAnnotations, PersonalAnnotationsLongText, PersonalAnnotationsNoFind, PersonalSubject, PlatformComponent, PluralForms, PostDeleteHookFn, PostSaveHookFn, PreDeleteHookFn, PreparedWriteEvent, PreQueryHookFn, PreSaveHookFn, ProjectionDefinition, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, ProjectionTable, QualifiedEventName, QueryEvent, QueryHandlerDef, QueryHandlerFn, RateLimitPer, RecordHeaderSpec, RecordHeaderSubtitlePart, ReferenceDataDef, Registry, RelationDefinition, ResolvedPiiFlags, RetentionDef, RoleAccessPersonalData, RoleAccessRule, RowAction, RowActionNavigate, RowActionNavigateBase, RowActionWriteHandler, RowFieldExtractor, SaveContext, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenNavSugar, ScreenSlots, SecretKeyDefinition, SecretKeyHandle, SecretMintConfirmStep, SecretMintScreenDefinition, SecretNamespaceDefinition, SecretNamespaceHandle, SecretNamespaceOptions, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, SelectFieldDef, SessionUser, SessionUserOrigin, StackBootRequirement, StreamHandlerDef, StreamHandlerFn, Subscribe, TargetRef, TemplateListVariableDef, TemplateScalarVariableDef, TemplateVariableDef, TemplateVariables, TenantId, TenantWriteTarget, TextFieldDef, ToolbarAction, TranslationEntry, TranslationKeys, TranslationsDef, TranslationValue, TreeAction, TreeActionDef, TreeActionsHandle, TreeChildrenSubscribe, TreeNode, TreeNodeState, UnitKey, UnsafeAppendEventFn, ValidationError, ValidationHookFn, WorkspaceDefinition, WriteEvent, WriteHandlerDef, WriteHandlerFn, WriteResult, } from "./types/index.ts";
+export type { AccessRule, ActionFormScreenDefinition, ActiveMembership, ActiveMembershipRejection, ActiveMembershipResult, AgentExposure, AgentHandlerHints, AgentRisk, AppContext, AppendEventArgs, AppendEventFn, AuthClaimsContext, AuthClaimsFn, AuthClaimsHookDef, BeforeTransactionPhase, BeforeTransactionResult, BelongsToRelation, BigIntFieldDef, BooleanFieldDef, BootOptionName, CamelToKebab, ChatSendFailureCode, ClaimKeyDefinition, ClaimKeyHandle, ClaimKeyJsType, ClaimKeyType, ConcurrencyMode, ConfigAccessor, ConfigAccessorFactory, ConfigBacking, ConfigCascade, ConfigCascadeLevel, ConfigDefinition, ConfigEditScreenDefinition, ConfigKeyAccess, ConfigKeyDefinition, ConfigKeyHandle, ConfigKeyType, ConfigMask, ConfigResolver, ConfigScope, ConfigSecretsReader, ConfigSeedDef, ConfigStoredRow, ConfigStoredRowWithSource, ConfigValidateContext, ConfigValidateFn, ConfigValue, ConfigValueSource, ConfigValueWithSource, ContentCollectionDefinition, CreateSeedOptions, CreateTenantSeedOptions, CreateUserSeedOptions, CustomScreenDefinition, CustomScreenRoute, DashboardChartPanel, DashboardCurrencyFormat, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelVisibility, DashboardProgressListPanel, DashboardProgressTone, DashboardRecordBinding, DashboardRefresh, DashboardRelativeTimeFormat, DashboardRelativeTimeParam, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextBlock, DashboardTextPanel, DashboardTextParam, DashboardValueFormat, DateFieldDef, DecimalFieldDef, DeleteContext, DeliveryErrorCode, DeliveryFailureCode, DeliverySkipReason, DeriveContext, DerivedFieldDef, DerivedFieldsMap, DerivedValueType, EditExtensionSection, EditFieldPrefill, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EmbeddedListEditSpec, EntityDefinition, EntityEditAction, EntityEditActionPlacement, EntityEditScreenDefinition, EntityId, EntityListExpandableRow, EntityListScreenDefinition, EntityObjectDefinition, EntityRef, EntityRelations, EscapeHatchAuditSink, EscapeHatchDeclaration, EscapeHatchKind, EscapeHatchReporter, EscapeHatchTarget, EscapeHatchUseEvent, EventDef, ExtensionOptionsArgs, ExtensionOptionsFor, FeatureDefinition, FeatureRegistrar, FieldAccess, FieldCondition, FieldDefinition, FieldFormatRegistry, FieldIconKey, FieldRenderer, FileFieldDef, FilesFieldDef, Findability, FormatSpec, FormWidth, HandlerContext, HasManyRelation, HookDefinition, HookMap, ImageFieldDef, ImagesFieldDef, JobBackoff, JobBackoffStrategy, JobContext, JobDefinition, JobHandlerFn, JobTrigger, JobTriggerEvent, JsonbFieldDef, KumikoEntityTypeMap, KumikoEventTypeMap, KumikoExtensionOptionsMap, KumikoHandlerPayloadMap, KumikoHandlerResultMap, LifecycleHookType, ListColumnSpec, ListFacetSpec, ListPaginationMode, ListSortDir, ListSortSpec, LongTextFindability, ManyToManyRelation, MaxPerTenantOptions, MemberReader, MetricNavigate, MetricSpec, MspErrorMode, MspErrorPolicy, MultiSelectFieldDef, MultiStreamApplyFn, MultiStreamProjectionDefinition, NameOrRef, NavDefinition, NavIconKey, NotificationDataFn, NotificationDefinition, NotificationLocalizedTemplate, NotificationRecipientFn, NotificationRecordMapping, NotificationTemplateBody, NotificationTemplateFn, NotificationTemplateMeta, NotifyDeferred, NotifyDelivery, NotifyDeliveryStatus, NotifyDispatched, NotifyFactory, NotifyFn, NotifyJobDispatcher, NotifyOptions, NotifyPriority, NotifyResult, NumberFieldDef, OnDeleteStrategy, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, ParentRefDef, PersonalAnnotations, PersonalAnnotationsLongText, PersonalAnnotationsNoFind, PersonalSubject, PlatformComponent, PluralForms, PostDeleteHookFn, PostSaveHookFn, PreDeleteHookFn, PreparedWriteEvent, PreQueryHookFn, PreSaveHookFn, ProjectionDefinition, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, ProjectionTable, ProviderPluginContext, QualifiedEventName, QueryEvent, QueryHandlerDef, QueryHandlerFn, RateLimitPer, RecordHeaderSpec, RecordHeaderSubtitlePart, ReferenceDataDef, Registry, RelationDefinition, ResolvedPiiFlags, RetentionDef, RoleAccessPersonalData, RoleAccessRule, RowAction, RowActionNavigate, RowActionNavigateBase, RowActionWriteHandler, RowFieldExtractor, SaveContext, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenNavSugar, ScreenSlots, SecretKeyDefinition, SecretKeyHandle, SecretMintConfirmStep, SecretMintScreenDefinition, SecretNamespaceDefinition, SecretNamespaceHandle, SecretNamespaceOptions, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, SelectFieldDef, SessionUser, SessionUserOrigin, StackBootRequirement, StreamHandlerDef, StreamHandlerFn, Subscribe, TargetRef, TemplateImagesVariableDef, TemplateListVariableDef, TemplateScalarVariableDef, TemplateVariableDef, TemplateVariables, TenantId, TenantWriteTarget, TextFieldDef, ToolbarAction, TranslationEntry, TranslationKeys, TranslationsDef, TranslationValue, TreeAction, TreeActionDef, TreeActionsHandle, TreeChildrenSubscribe, TreeNode, TreeNodeState, UnitKey, UnsafeAppendEventFn, ValidationError, ValidationHookFn, WorkspaceDefinition, WriteEvent, WriteHandlerDef, WriteHandlerFn, WriteResult, } from "./types/index.ts";
 export { DEFAULT_CURRENCIES, DEFAULT_LOCALES, DELIVERY_FAILURE_CODES, DELIVERY_SKIP_REASONS, HookPhases, HTTP_ERROR_CODE_PATTERN, isAgentVisibleScreen, isDeliveryErrorCode, isOpenToAllGranted, resolveAgentExposure, } from "./types/index.ts";
 export type { AwaitedEventType, PipelineBuildCtx, PipelineCtx, PipelineDef, StepBuilder, StepDef, StepFailureStrategy, StepInstance, StepKind, StepNamespace, StepResolver, } from "./types/step.ts";
 export { runValidation } from "./validation.ts";
+export { formDerivationsOfSchema, withFormDerivations } from "./with-form-derivations.ts";

package/dist/engine/index.js

@@ -40,6 +40,7 @@ export { addPattern, applyChanges, createFeaturePatcher, getPatternSchema, group
 export { compareVersions, filterEntriesAfter, parseFeatureChangelog, sortEntries, validateChangelog, } from "./feature-changelog.js";
 export { buildManifestFromRegistry, serializeManifest, } from "./feature-manifest.js";
 export { checkWriteFieldOwnership, checkWriteFieldRoles, filterReadFields, maskWriteOnlyFields, } from "./field-access.js";
+export { applyFormDerivations, isFormDerivationInputMode } from "./form-derivations.js";
 export { HANDLER_FIELD_REFERENCES_META_KEY, handlerFieldReference, handlerFieldReferences, readHandlerFieldReferences, } from "./handler-field-references.js";
 export { resolveName, withResponseData } from "./handler-helpers.js";
 export { i18nKey } from "./i18n-key.js";
@@ -56,6 +57,7 @@ export { parseRefTarget, parseRefTargetEntityName } from "./parse-ref-target.js"
 export { buildPipelineSteps, stepsPipeline } from "./pipeline.js";
 export { projectAppSchemaForRoles } from "./project-app-schema-for-roles.js";
 export { defineApply, defineMspApply, setFields } from "./projection-helpers.js";
+export { providerPluginContextFromHandler, providerPluginContextFromJob, } from "./provider-plugin-context.js";
 export { isValidQn, parseQn, QnTypes, qn, toKebab } from "./qualified-name.js";
 export { readClaim } from "./read-claim.js";
 export { createRegistry } from "./registry.js";
@@ -79,3 +81,4 @@ export { findOverDeepTransferChain, resolveTransferAdjacency as resolveEntityTra
 export { isSystemTenant, isUuid, parseTenantId, SYSTEM_TENANT_ID } from "./types/identifiers.js";
 export { DEFAULT_CURRENCIES, DEFAULT_LOCALES, DELIVERY_FAILURE_CODES, DELIVERY_SKIP_REASONS, HookPhases, HTTP_ERROR_CODE_PATTERN, isAgentVisibleScreen, isDeliveryErrorCode, isOpenToAllGranted, resolveAgentExposure, } from "./types/index.js";
 export { runValidation } from "./validation.js";
+export { formDerivationsOfSchema, withFormDerivations } from "./with-form-derivations.js";

package/dist/engine/minor-units.d.ts

@@ -0,0 +1,2 @@
+export declare const MINOR_UNIT_SCALE = 100;
+export declare function toMinorUnits(amount: number): number;

package/dist/engine/minor-units.js

@@ -0,0 +1,8 @@
+// 2 decimal places (cents) — covers every currently-supported currency
+// (EUR/USD/GBP/...). No ISO-4217 minor-unit table yet (JPY=0, BHD=3) —
+// upgrade path once a currency needing a different scale actually lands.
+// Client-safe on purpose: db/money.ts pulls in engine runtime values.
+export const MINOR_UNIT_SCALE = 100;
+export function toMinorUnits(amount) {
+    return Math.round(amount * MINOR_UNIT_SCALE);
+}

package/dist/engine/parse-ref-target.js

@@ -5,7 +5,7 @@
 //   - "users:user"  → cross-feature ref (qualifiziert)
 //
 // Lebt im framework-Package damit Server-Validator + Renderer (über
-// Re-Export aus @cosmicdrift/kumiko-headless) denselben Parser nutzen — die
+// Re-Export aus @cosmicdrift/kumiko-renderer/headless) denselben Parser nutzen — die
 // Convention darf nicht zweimal implementiert werden.
 export function parseRefTarget(raw, currentFeature) {
     const idx = raw.indexOf(":");

package/dist/engine/provider-plugin-context.d.ts

@@ -0,0 +1,3 @@
+import type { HandlerContext, JobContext, ProviderPluginContext } from "@cosmicdrift/kumiko-types/handlers";
+export declare function providerPluginContextFromHandler(ctx: HandlerContext): ProviderPluginContext;
+export declare function providerPluginContextFromJob(ctx: JobContext): ProviderPluginContext;

package/dist/engine/provider-plugin-context.js

@@ -0,0 +1,28 @@
+export function providerPluginContextFromHandler(ctx) {
+    return {
+        db: ctx.db,
+        dbOutsideTransaction: ctx.dbOutsideTransaction,
+        systemDb: ctx.systemDb,
+        registry: ctx.registry,
+        user: ctx.user,
+        log: ctx.log,
+        triggeredBy: ctx.triggeredBy,
+        config: ctx.config,
+        secrets: ctx.secrets,
+    };
+}
+// Jobs have no request user: the job's system user is the acting identity, and no
+// outside-transaction handle exists because jobs never run inside the handler's tx.
+export function providerPluginContextFromJob(ctx) {
+    return {
+        db: ctx.db,
+        dbOutsideTransaction: undefined,
+        systemDb: ctx.systemDb,
+        registry: ctx.registry,
+        user: ctx.systemUser,
+        log: ctx.log,
+        triggeredBy: ctx.triggeredBy,
+        config: ctx.config,
+        secrets: ctx.secrets,
+    };
+}

package/dist/engine/schema-builder.js

@@ -4,6 +4,7 @@ import { isValidIanaTimeZone } from "../time/index.js";
 import { assertUnreachable } from "../utils/index.js";
 import { withDerivedCells } from "./embedded-derived.js";
 import { DEFAULT_CURRENCIES } from "./types/index.js";
+const MONTH_PATTERN = /^\d{4}-(0[1-9]|1[0-2])$/;
 // True if `n` carries at most `scale` decimal places. A relative epsilon
 // tolerates float artifacts (`0.1 + 0.2 = 0.30000000000000004` is accepted at
 // scale 2) — the exact `toFixed`-roundtrip-equality it replaces rejected such
@@ -106,6 +107,12 @@ export function fieldToZod(field, currencies, opts = {}) {
                 schema = schema.email();
             if (field.format === "url")
                 schema = schema.url();
+            if (field.format === "month") {
+                // "" stays valid for an optional field; `required` rejects it via min(1) below.
+                schema = schema.refine((value) => value === "" || MONTH_PATTERN.test(value), {
+                    message: "expected a month as YYYY-MM",
+                });
+            }
             if (field.required)
                 schema = schema.min(1);
             return field.default !== undefined && applyDefaults ? schema.default(field.default) : schema;

package/dist/engine/template-variables.d.ts

@@ -1,5 +1,5 @@
 import * as z from "zod";
-import type { Registry, TemplateListVariableDef, TemplateScalarVariableDef, TemplateVariables } from "./types/index.ts";
+import type { Registry, TemplateImagesVariableDef, TemplateListVariableDef, TemplateScalarVariableDef, TemplateVariables } from "./types/index.ts";
 type CommonOptions = {
     readonly label?: string;
     readonly required?: boolean;
@@ -26,6 +26,7 @@ export declare const templateVariable: {
     readonly percent: (opts?: CommonOptions & {
         readonly example?: number;
     }) => TemplateScalarVariableDef;
+    readonly images: (opts?: CommonOptions) => TemplateImagesVariableDef;
     readonly list: (item: Readonly<Record<string, TemplateScalarVariableDef>>, opts?: CommonOptions & {
         readonly example?: readonly Readonly<Record<string, unknown>>[];
     }) => TemplateListVariableDef;

package/dist/engine/template-variables.js

@@ -17,6 +17,7 @@ export const templateVariable = {
         ...opts,
     }),
     percent: (opts = {}) => ({ type: "percent", ...opts }),
+    images: (opts = {}) => ({ type: "images", ...opts }),
     list: (item, opts = {}) => ({ type: "list", item, ...opts }),
 };
 const LINK_PROTOCOLS = new Set(["http:", "https:", "mailto:"]);
@@ -53,7 +54,10 @@ function scalarToZod(def) {
             return z.number().finite();
     }
 }
+const imagesSchema = z.union([z.string(), z.array(z.string())]);
 function variableToZod(def) {
+    if (def.type === "images")
+        return imagesSchema;
     if (def.type !== "list")
         return scalarToZod(def);
     return z.array(z.object(Object.fromEntries(Object.entries(def.item).map(([name, item]) => [name, withOptionality(item)]))));

package/dist/engine/types/index.d.ts

@@ -1,5 +1,5 @@
 export { isAgentVisibleScreen, resolveAgentExposure, } from "@cosmicdrift/kumiko-types/agent-exposure";
-export type { ConfigAccessor, ConfigAccessorFactory, ConfigBacking, ConfigBounds, ConfigCascade, ConfigCascadeLevel, ConfigComputedContext, ConfigComputedFn, ConfigDefinition, ConfigKeyAccess, ConfigKeyDefinition, ConfigKeyHandle, ConfigKeyType, ConfigMask, ConfigResolver, ConfigSecretsReader, ConfigSeedDef, ConfigStoredRow, ConfigStoredRowWithSource, ConfigValidateContext, ConfigValidateFn, ConfigValue, ConfigValueSource, ConfigValueWithSource, CreateSeedOptions, CreateTenantSeedOptions, CreateUserSeedOptions, ExtensionSelectorDef, ExtensionSelectorPanel, JobBackoff, JobBackoffStrategy, JobDefinition, JobHandlerFn, JobRunIn, JobTrigger, MaxPerTenantOptions, NotificationDataFn, NotificationDefinition, NotificationLocalizedTemplate, NotificationRecipientFn, NotificationRecordMapping, NotificationTemplateBody, NotificationTemplateFn, NotificationTemplateMeta, PluralForms, ReferenceDataDef, RegistrarExtensionDef, RegistrarExtensionHooks, RegistrarExtensionRegistration, RunIn, TemplateListVariableDef, TemplateScalarVariableDef, TemplateVariableDef, TemplateVariables, TranslationEntry, TranslationKeys, TranslationsDef, TranslationValue, UiExtensionDef, } from "@cosmicdrift/kumiko-types/config";
+export type { ConfigAccessor, ConfigAccessorFactory, ConfigBacking, ConfigBounds, ConfigCascade, ConfigCascadeLevel, ConfigComputedContext, ConfigComputedFn, ConfigDefinition, ConfigKeyAccess, ConfigKeyDefinition, ConfigKeyHandle, ConfigKeyType, ConfigMask, ConfigResolver, ConfigSecretsReader, ConfigSeedDef, ConfigStoredRow, ConfigStoredRowWithSource, ConfigValidateContext, ConfigValidateFn, ConfigValue, ConfigValueSource, ConfigValueWithSource, CreateSeedOptions, CreateTenantSeedOptions, CreateUserSeedOptions, ExtensionSelectorDef, ExtensionSelectorPanel, JobBackoff, JobBackoffStrategy, JobDefinition, JobHandlerFn, JobRunIn, JobTrigger, MaxPerTenantOptions, NotificationDataFn, NotificationDefinition, NotificationLocalizedTemplate, NotificationRecipientFn, NotificationRecordMapping, NotificationTemplateBody, NotificationTemplateFn, NotificationTemplateMeta, PluralForms, ReferenceDataDef, RegistrarExtensionDef, RegistrarExtensionHooks, RegistrarExtensionRegistration, RunIn, TemplateImagesVariableDef, TemplateListVariableDef, TemplateScalarVariableDef, TemplateVariableDef, TemplateVariables, TranslationEntry, TranslationKeys, TranslationsDef, TranslationValue, UiExtensionDef, } from "@cosmicdrift/kumiko-types/config";
 export type { QueryHandlerDefinition, StreamHandlerDefinition, WriteHandlerDefinition, WriteHandlerInput, } from "@cosmicdrift/kumiko-types/define-handler";
 export type { EntityCrudRegistrar, EntityCrudVerb, EntityHandlerOptions, EntityQueryHandlerOptions, EntityWriteHandlerOptions, RegisterEntityCrudOptions, } from "@cosmicdrift/kumiko-types/entity-handlers";
 export type { KumikoEntityTypeMap, KumikoEventTypeMap, KumikoHandlerPayloadMap, KumikoHandlerResultMap, } from "@cosmicdrift/kumiko-types/event-type-map";
@@ -7,7 +7,7 @@ export type { ExtensionOptionsArgs, ExtensionOptionsFor, KumikoExtensionOptionsM
 export type { BootCheckContext, BootCheckFn, BootOptionName, EntityObjectDefinition, FeatureDefinition, FeatureMetricDef, FeatureMetricType, FeatureRegistrar, HookDefinition, MetricOptions, Registry, SecretKeyDefinition, SecretKeyHandle, SecretNamespaceDefinition, SecretNamespaceHandle, SecretNamespaceOptions, SecretOptions, StackBootRequirement, StoreTableDef, StoreTableEntry, StoreTableOptions, UiHintOption, UiHints, } from "@cosmicdrift/kumiko-types/feature";
 export type { FieldIconKey } from "@cosmicdrift/kumiko-types/field-icon";
 export type { AnyFileFieldDef, BigIntFieldDef, BooleanFieldDef, ClientDerivedFieldDef, DateFieldDef, DecimalFieldDef, DefaultCurrency, DeriveContext, DerivedFieldDef, DerivedFieldsMap, DerivedValueType, EmbeddedDerivedCellDef, EmbeddedFieldDef, EmbeddedSubFieldDef, EntityDefinition, EntityEventMigration, EntityIndexDef, FieldAccess, FieldDefinition, FieldsMap, FileFieldDef, FilesFieldDef, Findability, ImageFieldDef, ImagesFieldDef, JsonbFieldDef, LocatedTimestampFieldDef, LongTextFieldDef, LongTextFindability, MoneyCurrencySource, MoneyFieldDef, MultiSelectFieldDef, NumberFieldDef, OptionsQueryPayload, OptionsQueryPayloadValue, ParentRefDef, PersonalAnnotations, PersonalAnnotationsLongText, PersonalAnnotationsNoFind, PersonalSubject, ReferenceFieldDef, ResolvedPiiFlags, RetentionDef, SelectFieldDef, SelectOptionTone, TextFieldDef, TimestampFieldDef, TransitionMap, TzFieldDef, } from "@cosmicdrift/kumiko-types/fields";
-export type { AccessRule, ActiveMembership, ActiveMembershipRejection, ActiveMembershipResult, AgentExposure, AgentHandlerHints, AgentRisk, AggregateStreamHandle, AppContext, AppendEventArgs, AppendEventFn, AuthClaimsContext, AuthClaimsFn, AuthClaimsHookDef, BeforeTransactionPhase, BeforeTransactionResult, CamelToKebab, ChatSendFailureCode, ClaimKeyDefinition, ClaimKeyHandle, ClaimKeyJsType, ClaimKeyType, DeclarativeEventMigration, DeliveryErrorCode, DeliveryFailureCode, DeliverySkipReason, DispatchWriteRef, EntityRef, EscapeHatchAuditSink, EscapeHatchDeclaration, EscapeHatchKind, EscapeHatchReporter, EscapeHatchTarget, EscapeHatchUseEvent, EventDef, EventMigrationDef, EventPiiFields, EventPiiStance, EventUpcastCtx, EventUpcastFn, FetchForWritingArgs, HandlerContext, HandlerRef, JobContext, JobRunnerRef, JobTriggerEvent, MemberReader, NameOrRef, NotifyDeferred, NotifyDelivery, NotifyDeliveryStatus, NotifyDispatched, NotifyFactory, NotifyFn, NotifyJobDispatcher, NotifyOptions, NotifyPriority, NotifyResult, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, PayloadBucketNormalization, PayloadRateLimitOption, PreparedWriteEvent, QualifiedEventName, QueryEvent, QueryHandlerDef, QueryHandlerFn, RateLimitDeclaration, RateLimitDisabled, RateLimitOption, RateLimitOptions, RateLimitPer, RoleAccessPersonalData, RoleAccessRule, SessionUser, SessionUserOrigin, StreamHandlerDef, StreamHandlerFn, TenantWriteTarget, TryAppendEventFn, TryAppendEventResult, UnsafeAppendEventFn, WriteEvent, WriteHandlerDef, WriteHandlerFn, WriteResult, } from "@cosmicdrift/kumiko-types/handlers";
+export type { AccessRule, ActiveMembership, ActiveMembershipRejection, ActiveMembershipResult, AgentExposure, AgentHandlerHints, AgentRisk, AggregateStreamHandle, AppContext, AppendEventArgs, AppendEventFn, AuthClaimsContext, AuthClaimsFn, AuthClaimsHookDef, BeforeTransactionPhase, BeforeTransactionResult, CamelToKebab, ChatSendFailureCode, ClaimKeyDefinition, ClaimKeyHandle, ClaimKeyJsType, ClaimKeyType, DeclarativeEventMigration, DeliveryErrorCode, DeliveryFailureCode, DeliverySkipReason, DispatchWriteRef, EntityRef, EscapeHatchAuditSink, EscapeHatchDeclaration, EscapeHatchKind, EscapeHatchReporter, EscapeHatchTarget, EscapeHatchUseEvent, EventDef, EventMigrationDef, EventPiiFields, EventPiiStance, EventUpcastCtx, EventUpcastFn, FetchForWritingArgs, HandlerContext, HandlerRef, JobContext, JobRunnerRef, JobTriggerEvent, MemberReader, NameOrRef, NotifyDeferred, NotifyDelivery, NotifyDeliveryStatus, NotifyDispatched, NotifyFactory, NotifyFn, NotifyJobDispatcher, NotifyOptions, NotifyPriority, NotifyResult, OpenToAllAccessRule, OpenToAllDeclaration, OpenToAllPersonalData, PayloadBucketNormalization, PayloadRateLimitOption, PreparedWriteEvent, ProviderPluginContext, QualifiedEventName, QueryEvent, QueryHandlerDef, QueryHandlerFn, RateLimitDeclaration, RateLimitDisabled, RateLimitOption, RateLimitOptions, RateLimitPer, RoleAccessPersonalData, RoleAccessRule, SessionUser, SessionUserOrigin, StreamHandlerDef, StreamHandlerFn, TenantWriteTarget, TryAppendEventFn, TryAppendEventResult, UnsafeAppendEventFn, WriteEvent, WriteHandlerDef, WriteHandlerFn, WriteResult, } from "@cosmicdrift/kumiko-types/handlers";
 export { DELIVERY_FAILURE_CODES, DELIVERY_SKIP_REASONS, declaredRateLimitOptions, HTTP_ERROR_CODE_PATTERN, isDeliveryErrorCode, isOpenToAllGranted, isRateLimitDisabled, isRateLimitOption, isUiAccessGranted, } from "@cosmicdrift/kumiko-types/handlers";
 export type { DeleteContext, EntityHookMap, HookMap, HookOwner, HookPhase, LifecycleHookFn, LifecycleResult, OwnedFn, PhasedHook, PostDeleteBatchHookFn, PostDeleteHookFn, PostQueryHookFn, PostSaveBatchHookFn, PostSaveHookFn, PreDeleteHookFn, PreQueryHookFn, PreSaveHookFn, SaveContext, SearchPayloadContributorFn, ValidationError, ValidationHookFn, } from "@cosmicdrift/kumiko-types/hooks";
 export type { HttpRouteDefinition, HttpRouteHandler, HttpRouteHandlerDeps, HttpRouteMethod, } from "@cosmicdrift/kumiko-types/http-route";
@@ -17,7 +17,7 @@ export type { ContentCollectionDefinition, NavDefinition, NavIconKey, } from "@c
 export type { FromRule, FromRuleKind, OwnershipClause, OwnershipMap, OwnershipRef, OwnershipRule, SqlFragment, WhereRule, WhereRuleContext, } from "@cosmicdrift/kumiko-types/ownership";
 export type { EntityProjectionExtension, MspErrorMode, MspErrorPolicy, MultiStreamApplyFn, MultiStreamProjectionDefinition, ProjectionDefinition, ProjectionRowIdOf, ProjectionTable, SingleStreamApplyFn, } from "@cosmicdrift/kumiko-types/projection";
 export type { BelongsToRelation, EntityRelations, HasManyRelation, ManyToManyRelation, RelationDefinition, } from "@cosmicdrift/kumiko-types/relations";
-export type { ActionFormScreenDefinition, ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, DashboardChartMarkerKind, DashboardChartPanel, DashboardChartRangeOption, DashboardChartRanges, DashboardCurrencyFormat, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelGate, DashboardPanelVisibility, DashboardProgressListPanel, DashboardProgressTone, DashboardRecordBinding, DashboardRefresh, DashboardRelativeTimeFormat, DashboardRelativeTimeParam, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextBlock, DashboardTextPanel, DashboardTextParam, DashboardValueFormat, EditExtensionSection, EditFieldPrefill, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EmbeddedListEditSpec, EntityEditAction, EntityEditActionPlacement, EntityEditScreenDefinition, EntityListExpandableRow, EntityListScreenDefinition, FieldCondition, FieldFormatRegistry, FieldRenderer, FormatSpec, FormWidth, ListColumnSpec, ListEmptyStateSpec, ListFacetSpec, ListPaginationMode, ListSortDir, ListSortSpec, MetricNavigate, MetricSpec, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSpec, RecordHeaderSubtitlePart, RowAction, RowActionNavigate, RowActionNavigateBase, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenNavSugar, ScreenSlots, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, ToolbarAction, UnitKey, } from "@cosmicdrift/kumiko-types/screen";
+export type { ActionFormScreenDefinition, ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, DashboardChartMarkerKind, DashboardChartPanel, DashboardChartRangeOption, DashboardChartRanges, DashboardCurrencyFormat, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelGate, DashboardPanelVisibility, DashboardProgressListPanel, DashboardProgressTone, DashboardRecordBinding, DashboardRefresh, DashboardRelativeTimeFormat, DashboardRelativeTimeParam, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardText, DashboardTextBlock, DashboardTextPanel, DashboardTextParam, DashboardValueFormat, EditExtensionSection, EditFieldPrefill, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EmbeddedListEditSpec, EntityEditAction, EntityEditActionPlacement, EntityEditScreenDefinition, EntityListExpandableRow, EntityListScreenDefinition, FieldCondition, FieldFormatRegistry, FieldRenderer, FormatSpec, FormFieldDerivation, FormWidth, ListColumnSpec, ListEmptyStateSpec, ListFacetSpec, ListPaginationMode, ListSortDir, ListSortSpec, MetricNavigate, MetricSpec, PlatformComponent, ProjectionDetailScreenDefinition, ProjectionListScreenDefinition, RecordHeaderSpec, RecordHeaderSubtitlePart, RowAction, RowActionNavigate, RowActionNavigateBase, RowActionWriteHandler, RowFieldExtractor, ScreenDefinition, ScreenFilter, ScreenFilterOp, ScreenNavSugar, ScreenSlots, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, SecretsEditScreenDefinition, SecretsEditSection, ToolbarAction, UnitKey, } from "@cosmicdrift/kumiko-types/screen";
 export { metricField, relatedListGroupHeaderLabel, relatedListGroupKey, } from "@cosmicdrift/kumiko-types/screen";
 export type { TargetRef } from "@cosmicdrift/kumiko-types/target-ref";
 export type { Subscribe, TreeAction, TreeActionDef, TreeActionsHandle, TreeChildrenSubscribe, TreeNode, TreeNodeState, } from "@cosmicdrift/kumiko-types/tree-node";

package/dist/engine/with-form-derivations.d.ts

@@ -0,0 +1,9 @@
+import * as z from "zod";
+import { type FormDerivationScreen } from "./form-derivations.ts";
+import type { FormFieldDerivation } from "./types/screen.ts";
+/** The `derive` a schema was wrapped with via `withFormDerivations`, so the
+ *  boot validator can prove an actionForm's handler recomputes its totals. */
+export declare function formDerivationsOfSchema(schema: unknown): Readonly<Record<string, FormFieldDerivation>> | undefined;
+/** Server counterpart of an actionForm's `derive`: recomputes the derived head
+ *  fields before the schema validates them, so client-sent totals never count. */
+export declare function withFormDerivations<Schema extends z.ZodType>(schema: Schema, screen: FormDerivationScreen): z.ZodPreprocess<Schema, unknown>;

package/dist/engine/with-form-derivations.js

@@ -0,0 +1,16 @@
+import * as z from "zod";
+import { applyFormDerivations } from "./form-derivations.js";
+const derivationsBySchema = new WeakMap();
+/** The `derive` a schema was wrapped with via `withFormDerivations`, so the
+ *  boot validator can prove an actionForm's handler recomputes its totals. */
+export function formDerivationsOfSchema(schema) {
+    return schema instanceof z.ZodType ? derivationsBySchema.get(schema) : undefined;
+}
+/** Server counterpart of an actionForm's `derive`: recomputes the derived head
+ *  fields before the schema validates them, so client-sent totals never count. */
+export function withFormDerivations(schema, screen) {
+    const wrapped = z.preprocess((value) => applyFormDerivations(value, screen), schema);
+    if (screen.derive !== undefined)
+        derivationsBySchema.set(wrapped, screen.derive);
+    return wrapped;
+}

package/dist/env/index.js

@@ -277,7 +277,7 @@ function formatBootError(errors) {
         }
     }
     lines.push("");
-    lines.push("See: kumiko-platform/docs/runbooks/standard-deploy-app.md#step-1-boot-dry-run-lokal");
+    lines.push("See: https://github.com/CosmicDriftGameStudio/infra/blob/main/docs/runbooks/standard-deploy-app.md#schritt-1--env-vertrag-lokal-ausgeben");
     return lines.join("\n");
 }
 export class KumikoBootError extends Error {

package/dist/errors/zod-bridge.js

@@ -35,7 +35,7 @@ export function validationErrorFromZod(error) {
 // `code: "custom"` is zod's catch-all for every superRefine/refine check;
 // left mechanical it'd collapse onto one generic key, so a superRefine can
 // set `params.i18nKey` to override it. Keep in sync with the client mirror
-// (packages/headless/src/form/zod-bridge.ts).
+// (packages/renderer/src/headless/form/zod-bridge.ts).
 function resolveI18nKey(issue) {
     if (issue.code === "custom") {
         const override = issue.params?.["i18nKey"];