@cosmicdrift/kumiko-renderer 0.156.3 → 0.157.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-renderer",
-  "version": "0.156.3",
+  "version": "0.157.1",
   "description": "Platform-agnostic React renderer for Kumiko screens. Contains the shared logic — primitives-contract, hooks, KumikoScreen, navigation & SSE abstractions — that any platform-specific renderer (web, native) composes. No DOM, no EventSource, no react-dom.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -15,8 +15,8 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-framework": "0.156.3",
-    "@cosmicdrift/kumiko-headless": "0.156.3",
+    "@cosmicdrift/kumiko-framework": "0.157.1",
+    "@cosmicdrift/kumiko-headless": "0.157.1",
     "react": "^19.2.6",
     "temporal-polyfill": "^0.3.2"
   },

package/src/__tests__/error-i18n-defaults.test.ts

@@ -56,4 +56,17 @@ describe("kumikoDefaultTranslations covers every error i18nKey", () => {
     expect(de?.["errors.download.urlMissing"]).toBeTruthy();
     expect(en?.["errors.download.urlMissing"]).toBeTruthy();
   });
+
+  // Client-emitted (dispatcher-live error-mapping) — network/abort never
+  // reach the server, so no error class mints these; still rendered through
+  // this last-resort bundle whenever a feature reads res.error.i18nKey raw.
+  test("dispatcher.errors.network has de+en default", () => {
+    expect(de?.["dispatcher.errors.network"]).toBeTruthy();
+    expect(en?.["dispatcher.errors.network"]).toBeTruthy();
+  });
+
+  test("dispatcher.errors.aborted has de+en default", () => {
+    expect(de?.["dispatcher.errors.aborted"]).toBeTruthy();
+    expect(en?.["dispatcher.errors.aborted"]).toBeTruthy();
+  });
 });

package/src/app/kumiko-screen.tsx

@@ -1,5 +1,6 @@
 import type { ConfigCascade } from "@cosmicdrift/kumiko-framework/engine";
 import type {
+  AccessRule,
   ActionFormScreenDefinition,
   ConfigEditScreenDefinition,
   DashboardScreenDefinition,
@@ -29,6 +30,7 @@ import { type ReactNode, useCallback, useEffect, useMemo, useRef, useState } fro
 import { RenderEdit } from "../components/render-edit";
 import { RenderList, type ToolbarActionButton } from "../components/render-list";
 import { useDispatcher, useOptionalDispatcher } from "../context/dispatcher-context";
+import { useUserRoles } from "../context/user-roles-context";
 import { useListUrlState } from "../hooks/use-list-url-state";
 import { useQuery } from "../hooks/use-query";
 import { useTranslation } from "../i18n";
@@ -112,6 +114,22 @@ export function qualifyNavId(featureName: string, navId: string): string {
   return `${featureName}:nav:${navId}`;
 }
 
+// Minimal role-gate for the screen-render path (#1203 — nav filtering via
+// filterByAccess in workspace-shell.tsx hid role-gated screens from the
+// menu, but a direct URL/screenQn hit reached KumikoScreen unchecked).
+// Duplicated instead of imported from framework/engine's hasAccess (pulls
+// server-side deps) — same bundle-purity reasoning as headless/nav's
+// resolve.ts:userCanSee, which this mirrors.
+function screenAccessAllows(
+  access: AccessRule | undefined,
+  userRoles: readonly string[] | undefined,
+): boolean {
+  if (!access) return true;
+  if ("openToAll" in access) return access.openToAll;
+  if (userRoles === undefined) return false;
+  return access.roles.some((role) => userRoles.includes(role));
+}
+
 export function KumikoScreen({
   schema,
   qn,
@@ -121,6 +139,7 @@ export function KumikoScreen({
   onCopyLink,
 }: KumikoScreenProps): ReactNode {
   const { Banner, Text } = usePrimitives();
+  const userRoles = useUserRoles();
   const screen = useMemo(
     () =>
       schema.screens.find(
@@ -137,6 +156,14 @@ export function KumikoScreen({
     );
   }
 
+  if (!screenAccessAllows(screen.access, userRoles)) {
+    return (
+      <Banner padded variant="error" testId="kumiko-screen-access-denied">
+        Access denied: <Text variant="code">{qn}</Text>
+      </Banner>
+    );
+  }
+
   switch (screen.type) {
     case "entityEdit":
       return (
@@ -423,6 +450,8 @@ function EntityEditUpdateBody({
   readonly onCopyLink?: () => Promise<void> | void;
 }): ReactNode {
   const { Banner, Text } = usePrimitives();
+  const t = useTranslation();
+  const effectiveTranslate = translate ?? t;
   const detailQn = `${toKebab(schema.featureName)}:query:${toKebab(screen.entity)}:detail`;
   const detailQuery = useQuery<Readonly<Record<string, unknown>>>(detailQn, { id: entityId });
 
@@ -436,7 +465,7 @@ function EntityEditUpdateBody({
   if (detailQuery.error) {
     return (
       <Banner padded variant="error" testId="kumiko-screen-error">
-        {detailQuery.error.i18nKey}
+        {dispatcherErrorText(detailQuery.error, effectiveTranslate)}
       </Banner>
     );
   }
@@ -1008,7 +1037,7 @@ function EntityListBody({
   if (rowsQuery.error) {
     return (
       <Banner padded variant="error" testId="kumiko-screen-error">
-        {rowsQuery.error.i18nKey}
+        {dispatcherErrorText(rowsQuery.error, effectiveTranslate)}
       </Banner>
     );
   }
@@ -1241,7 +1270,7 @@ function ProjectionListBody({
   if (rowsQuery.error) {
     return (
       <Banner padded variant="error" testId="kumiko-screen-error">
-        {rowsQuery.error.i18nKey}
+        {dispatcherErrorText(rowsQuery.error, effectiveTranslate)}
       </Banner>
     );
   }
@@ -1293,6 +1322,8 @@ function ProjectionDetailBody({
   readonly entityId?: string;
 }): ReactNode {
   const { Banner, Text } = usePrimitives();
+  const t = useTranslation();
+  const effectiveTranslate = translate ?? t;
   const nav = useNav();
   const idParam = screen.idParam ?? "id";
   const entity = useMemo(() => synthesizeProjectionDetailEntity(screen.layout), [screen.layout]);
@@ -1325,7 +1356,7 @@ function ProjectionDetailBody({
   if (detailQuery.error) {
     return (
       <Banner padded variant="error" testId="kumiko-screen-error">
-        {detailQuery.error.i18nKey}
+        {dispatcherErrorText(detailQuery.error, effectiveTranslate)}
       </Banner>
     );
   }
@@ -1470,6 +1501,8 @@ function ConfigEditBody({
   readonly translate?: Translate;
 }): ReactNode {
   const { Banner, ConfigCascadeView } = usePrimitives();
+  const t = useTranslation();
+  const effectiveTranslate = translate ?? t;
   const dispatcher = useDispatcher();
 
   // Detail-Load: config:query:values returnt ALLE Keys des Tenants.
@@ -1594,7 +1627,7 @@ function ConfigEditBody({
   if (valuesQuery.error) {
     return (
       <Banner padded variant="error" testId="kumiko-screen-error">
-        {valuesQuery.error.i18nKey}
+        {dispatcherErrorText(valuesQuery.error, effectiveTranslate)}
       </Banner>
     );
   }

package/src/context/user-roles-context.tsx

@@ -0,0 +1,27 @@
+import { createContext, type ReactNode, useContext } from "react";
+
+// Threads the current user's roles through the tree so KumikoScreen can
+// gate role-restricted screens at render time (see #1203 — nav filtering
+// alone doesn't stop a direct-URL/screenQn hit on a role-gated screen).
+// Apps wire this from their `shell` render-prop, the same place they
+// already pass `user` to WorkspaceShell for nav filtering.
+//
+// undefined (no provider mounted, or `roles` not passed) means "roles
+// unknown" — deliberately distinct from `[]` ("authenticated, no
+// roles"). Both deny role-gated screens; only `undefined` also lets an
+// app without any role-gated screens skip wiring this entirely.
+
+const UserRolesContext = createContext<readonly string[] | undefined>(undefined);
+
+export type UserRolesProviderProps = {
+  readonly roles: readonly string[] | undefined;
+  readonly children: ReactNode;
+};
+
+export function UserRolesProvider({ roles, children }: UserRolesProviderProps): ReactNode {
+  return <UserRolesContext value={roles}>{children}</UserRolesContext>;
+}
+
+export function useUserRoles(): readonly string[] | undefined {
+  return useContext(UserRolesContext);
+}

package/src/i18n-defaults.ts

@@ -148,6 +148,9 @@ export const kumikoDefaultTranslations: TranslationsByLocale = {
       "Limit erreicht. Bitte Tarif upgraden oder auf die nächste Periode warten.",
     "errors.download.urlMissing": "Download nicht verfügbar — bitte versuche es erneut.",
     "auth.errors.originNotAllowed": "Zugriff von dieser Herkunft ist nicht erlaubt.",
+    "dispatcher.errors.network":
+      "Netzwerkfehler. Bitte überprüfe deine Verbindung und versuche es erneut.",
+    "dispatcher.errors.aborted": "Anfrage abgebrochen.",
   },
   en: {
     "kumiko.actions.save": "Save",
@@ -258,5 +261,7 @@ export const kumikoDefaultTranslations: TranslationsByLocale = {
     "errors.cap.exceeded": "Limit reached. Upgrade your plan or wait for the next period.",
     "errors.download.urlMissing": "Download unavailable — please try again.",
     "auth.errors.originNotAllowed": "Requests from this origin are not allowed.",
+    "dispatcher.errors.network": "Network error. Please check your connection and try again.",
+    "dispatcher.errors.aborted": "Request was cancelled.",
   },
 };

package/src/index.ts

@@ -59,6 +59,8 @@ export {
   useDispatcherStatus,
   useOptionalDispatcher,
 } from "./context/dispatcher-context";
+export type { UserRolesProviderProps } from "./context/user-roles-context";
+export { UserRolesProvider, useUserRoles } from "./context/user-roles-context";
 export { formatWhen } from "./format-when";
 export {
   REFERENCE_COMBOBOX_LIMIT,