@cosmicdrift/kumiko-renderer 0.327.0 → 0.328.1

package/src/app/secret-mint-body.tsx

@@ -1,259 +0,0 @@
-import type { SecretMintScreenDefinition } from "@cosmicdrift/kumiko-framework/ui-types";
-import type { FormValues, SubmitResult, Translate } from "@cosmicdrift/kumiko-headless";
-import { type ReactNode, useCallback, useMemo, useRef, useState } from "react";
-import { RenderEdit } from "../components/render-edit";
-import { useTranslation } from "../i18n";
-import { usePrimitives } from "../primitives";
-import {
-  synthesizeActionFormEntity,
-  synthesizeActionFormScreen,
-  synthesizeSecretMintConfirmScreen,
-} from "./action-form-shim";
-import type { FeatureSchema } from "./feature-schema";
-import {
-  buildInitialValues,
-  literalCurrencyOverrides,
-  mergeSearchParamsIntoInitial,
-} from "./kumiko-screen";
-import { layoutFieldNames } from "./layout-fields";
-import { useInitialValuesHandoff, useNav } from "./nav";
-import { lastSegment } from "./qn";
-import { navigateToReturnOr, useReturnTarget } from "./return-to";
-
-export type SecretMintBodyProps = {
-  readonly schema: FeatureSchema;
-  readonly screen: SecretMintScreenDefinition;
-  readonly translate?: Translate;
-};
-
-function extractRevealValue(data: unknown, field: string): unknown {
-  if (typeof data !== "object" || data === null) return undefined;
-  if (!Object.hasOwn(data, field)) return undefined;
-  return (data as Record<string, unknown>)[field];
-}
-
-function extractCarriedValues(
-  data: unknown,
-  carry: readonly string[],
-): Readonly<Record<string, unknown>> {
-  const carried: Record<string, unknown> = {};
-  for (const field of carry) {
-    const value = extractRevealValue(data, field);
-    if (value === undefined) continue;
-    carried[field] = value;
-  }
-  return carried;
-}
-
-function isBlank(value: unknown): boolean {
-  if (value === undefined || value === null || value === "") return true;
-  return Array.isArray(value) && value.length === 0;
-}
-
-// Mint form → one-time reveal → optional confirm → done. The revealed values
-// live ONLY in this component's `revealed` state — never in the URL, a query
-// cache, or nav — the write-handler's success payload is the only place the
-// secret ever exists (fw#2548). onSubmit copies exclusively the fields
-// declared in `screen.reveal.fields` out of that payload (a whitelist, never
-// the payload as a whole) so an unrelated field (e.g. an internal "id") can
-// never leak into the reveal. `screen.confirm` (fw#2838, e.g. TOTP enroll:
-// scan the code, then enter one) works the same way for its own carried
-// mint-payload fields — those live only in `carriedRef`, never in React state
-// that gets rendered, never in the confirm form's own values.
-export function SecretMintBody({ schema, screen, translate }: SecretMintBodyProps): ReactNode {
-  const nav = useNav();
-  const returnTarget = useReturnTarget(screen.id);
-  const { Card, Heading, Banner, Button, Text, Grid, GridCell, SecretReveal } = usePrimitives();
-  const t = useTranslation();
-  const effectiveTranslate = translate ?? t;
-  const synthEntity = useMemo(() => synthesizeActionFormEntity(screen.fields), [screen.fields]);
-  const synthScreen = useMemo(() => synthesizeActionFormScreen(screen), [screen]);
-  const handoffValues = useInitialValuesHandoff(screen.id);
-  const initial = useMemo(
-    () =>
-      mergeSearchParamsIntoInitial(screen.fields, {
-        searchParams: nav.searchParams,
-        urlPrefillFields: screen.urlPrefillFields,
-        renderableFields: layoutFieldNames(synthScreen),
-        // A mint form has no entity either, so its money fields name their own
-        // currency source (fw#2839). Only the literal form is resolved here:
-        // `{ kind: "tenant" }` would need the config query this screen never
-        // runs, and a one-time secret mint has no money use case to justify it.
-        moneyCurrencyOverrides: literalCurrencyOverrides(screen.fields),
-        ...(handoffValues !== undefined && { handoffValues }),
-      }) as FormValues,
-    [screen.fields, screen.urlPrefillFields, nav.searchParams, synthScreen, handoffValues],
-  );
-  const [revealed, setRevealed] = useState<Readonly<Record<string, unknown>> | null>(null);
-  const [done, setDone] = useState(false);
-  // Never rendered, never merged into `revealed` or the confirm form's
-  // initial values — read only from `buildPayload` at confirm-submit time.
-  const carriedRef = useRef<Readonly<Record<string, unknown>>>({});
-
-  const confirm = screen.confirm;
-  const confirmEntity = useMemo(
-    () => (confirm !== undefined ? synthesizeActionFormEntity(confirm.fields) : undefined),
-    [confirm],
-  );
-  const confirmScreen = useMemo(
-    () => (confirm !== undefined ? synthesizeSecretMintConfirmScreen(screen, confirm) : undefined),
-    [screen, confirm],
-  );
-  const confirmInitial = useMemo(
-    () =>
-      confirm !== undefined
-        ? (buildInitialValues(
-            confirm.fields,
-            undefined,
-            literalCurrencyOverrides(confirm.fields),
-          ) as FormValues)
-        : undefined,
-    [confirm],
-  );
-
-  const handleSubmitted = useCallback(
-    (result: SubmitResult<unknown>) => {
-      if (!result.isSuccess) return;
-      const values: Record<string, unknown> = {};
-      for (const revealField of screen.reveal.fields) {
-        const value = extractRevealValue(result.data, revealField.field);
-        if (value === undefined) continue;
-        values[revealField.field] = value;
-      }
-      setRevealed(values);
-      carriedRef.current =
-        confirm?.carry !== undefined ? extractCarriedValues(result.data, confirm.carry) : {};
-    },
-    [screen.reveal.fields, confirm?.carry],
-  );
-
-  const handleCancel = useMemo<(() => void) | undefined>(() => {
-    const target = screen.cancelTarget ?? screen.redirect;
-    if (target === undefined || target === false) return undefined;
-    return () =>
-      navigateToReturnOr(nav, returnTarget, () => nav.navigate({ screenId: lastSegment(target) }));
-  }, [nav, screen.redirect, screen.cancelTarget, returnTarget]);
-
-  // Ends the reveal phase for both paths (the bare acknowledge button, and a
-  // successful confirm submit): clears the secret and the carried values, then
-  // either navigates (screen.redirect) or shows a done-state — never falls
-  // back to re-rendering the mint form, which would let a stray click mint
-  // (and invalidate) the secret again.
-  const finishMint = useCallback(() => {
-    setRevealed(null);
-    carriedRef.current = {};
-    const redirect = screen.redirect;
-    if (redirect !== undefined) {
-      navigateToReturnOr(nav, returnTarget, () =>
-        nav.navigate({ screenId: lastSegment(redirect) }),
-      );
-    } else {
-      setDone(true);
-    }
-  }, [nav, screen.redirect, returnTarget]);
-
-  const handleConfirmSubmitted = useCallback(
-    (result: SubmitResult<unknown>) => {
-      if (result.isSuccess) finishMint();
-    },
-    [finishMint],
-  );
-
-  if (done) {
-    return (
-      <Card>
-        <Banner variant="info" testId="kumiko-screen-secret-mint-done">
-          {effectiveTranslate(confirm?.doneMessage ?? "kumiko.secretMint.done")}
-        </Banner>
-      </Card>
-    );
-  }
-
-  if (revealed !== null) {
-    const values = screen.reveal.fields.flatMap((revealField) => {
-      const raw = revealed[revealField.field];
-      if (isBlank(raw)) return [];
-      const display = revealField.display ?? "code";
-      const value =
-        display === "list" && Array.isArray(raw)
-          ? raw.map((v) => String(v)).join("\n")
-          : String(raw);
-      return [
-        {
-          label: effectiveTranslate(revealField.label),
-          value,
-          copyable: revealField.copyable ?? true,
-          multiline: display === "list",
-          ...(display === "qr" && { qr: true }),
-        },
-      ];
-    });
-    return (
-      <Card testId="kumiko-screen-secret-mint-card">
-        <Heading variant="page">
-          {effectiveTranslate(screen.reveal.title ?? "kumiko.secretMint.title")}
-        </Heading>
-        <Banner variant="warning" testId="kumiko-screen-secret-mint-warning">
-          {effectiveTranslate(screen.reveal.warning ?? "kumiko.secretMint.warning")}
-        </Banner>
-        {SecretReveal !== undefined ? (
-          <SecretReveal
-            values={values}
-            copyLabel={effectiveTranslate("kumiko.secretMint.copy")}
-            copiedLabel={effectiveTranslate("kumiko.secretMint.copied")}
-            testId="kumiko-screen-secret-mint-reveal"
-          />
-        ) : (
-          <Grid columns={1} testId="kumiko-screen-secret-mint-reveal">
-            {values.map((v) => (
-              <GridCell key={v.label}>
-                <Text>{v.label}</Text>
-                <Text variant="code">{v.value}</Text>
-              </GridCell>
-            ))}
-          </Grid>
-        )}
-        {confirm !== undefined && confirmEntity !== undefined && confirmScreen !== undefined ? (
-          <RenderEdit
-            screen={confirmScreen}
-            entity={confirmEntity}
-            featureName={schema.featureName}
-            initial={confirmInitial ?? ({} as FormValues)}
-            writeCommand={confirm.handler}
-            payloadMode="values"
-            buildPayload={(snapshot) => ({ ...snapshot.values, ...carriedRef.current })}
-            onSubmit={handleConfirmSubmitted}
-            {...(handleCancel !== undefined && { onCancel: handleCancel })}
-            {...(translate !== undefined && { translate })}
-            {...(confirm.submitLabel !== undefined && { submitLabel: confirm.submitLabel })}
-          />
-        ) : (
-          <Button
-            type="button"
-            variant="primary"
-            onClick={finishMint}
-            testId="kumiko-screen-secret-mint-confirm"
-          >
-            {effectiveTranslate(screen.reveal.confirmLabel ?? "kumiko.secretMint.confirm")}
-          </Button>
-        )}
-      </Card>
-    );
-  }
-
-  return (
-    <RenderEdit
-      screen={synthScreen}
-      entity={synthEntity}
-      featureName={schema.featureName}
-      initial={initial}
-      extensionInitialValues={initial}
-      writeCommand={screen.handler}
-      payloadMode="values"
-      onSubmit={handleSubmitted}
-      {...(handleCancel !== undefined && { onCancel: handleCancel })}
-      {...(translate !== undefined && { translate })}
-      {...(screen.submitLabel !== undefined && { submitLabel: screen.submitLabel })}
-    />
-  );
-}

package/src/app/secrets-edit-body.tsx

@@ -1,194 +0,0 @@
-import type { SecretsEditScreenDefinition } from "@cosmicdrift/kumiko-framework/ui-types";
-import type { Translate } from "@cosmicdrift/kumiko-headless";
-import { type ReactNode, useCallback, useMemo, useState } from "react";
-import { useDispatcher } from "../context/dispatcher-context";
-import { useQuery } from "../hooks/use-query";
-import { useTranslation } from "../i18n";
-import { usePrimitives } from "../primitives";
-import { dispatcherErrorText } from "./write-failed-error";
-
-type SecretListRow = {
-  readonly key: string;
-  readonly redactedPreview: string | null;
-  readonly hint: string | null;
-};
-
-export type SecretsEditBodyProps = {
-  readonly screen: SecretsEditScreenDefinition;
-  readonly translate?: Translate;
-};
-
-// secrets:query:list never returns plaintext (only a redacted preview), so
-// unlike ConfigEditBody there is no server value to pre-fill a draft with —
-// every input starts at "" and stays that way unless the user types into it.
-export function SecretsEditBody({ screen, translate }: SecretsEditBodyProps): ReactNode {
-  const { Banner, Form, Section, Field, Input, Button, Text } = usePrimitives();
-  const t = useTranslation();
-  const effectiveTranslate = translate ?? t;
-  const dispatcher = useDispatcher();
-  const listQuery = useQuery<readonly SecretListRow[]>("secrets:query:list", {});
-
-  const [drafts, setDrafts] = useState<Readonly<Record<string, string>>>({});
-  const [submitting, setSubmitting] = useState(false);
-  const [submitError, setSubmitError] = useState<string | null>(null);
-
-  const rowsByQualifiedKey = useMemo(() => {
-    const out = new Map<string, SecretListRow>();
-    for (const row of listQuery.data ?? []) out.set(row.key, row);
-    return out;
-  }, [listQuery.data]);
-
-  const setDraft = useCallback((fieldId: string, value: string) => {
-    setDrafts((prev) => ({ ...prev, [fieldId]: value }));
-  }, []);
-
-  const handleSubmit = useCallback(async (): Promise<void> => {
-    const commands = Object.entries(screen.secretKeys).flatMap(([fieldId, qualified]) => {
-      const value = drafts[fieldId]?.trim();
-      return value ? [{ type: "secrets:write:set", payload: { key: qualified, value } }] : [];
-    });
-    if (commands.length === 0) return;
-    setSubmitting(true);
-    setSubmitError(null);
-    const result = await dispatcher.batch(commands);
-    setSubmitting(false);
-    if (!result.isSuccess) {
-      setSubmitError(dispatcherErrorText(result.error, effectiveTranslate));
-      return;
-    }
-    setDrafts({});
-    await listQuery.refetch();
-  }, [dispatcher, drafts, screen.secretKeys, listQuery.refetch, effectiveTranslate]);
-
-  const handleDelete = useCallback(
-    async (qualified: string): Promise<void> => {
-      const result = await dispatcher.write("secrets:write:delete", { key: qualified });
-      if (!result.isSuccess) {
-        setSubmitError(dispatcherErrorText(result.error, effectiveTranslate));
-        return;
-      }
-      await listQuery.refetch();
-    },
-    [dispatcher, listQuery.refetch, effectiveTranslate],
-  );
-
-  if (listQuery.loading && listQuery.data === null) {
-    return (
-      <Banner padded variant="loading" testId="kumiko-screen-loading">
-        Loading…
-      </Banner>
-    );
-  }
-  if (listQuery.error) {
-    return (
-      <Banner padded variant="error" testId="kumiko-screen-error">
-        {dispatcherErrorText(listQuery.error, effectiveTranslate)}
-      </Banner>
-    );
-  }
-
-  return (
-    <Form
-      onSubmit={() => {
-        void handleSubmit();
-      }}
-      testId="secrets-edit-form"
-      {...(screen.description !== undefined && {
-        subtitle: effectiveTranslate(screen.description),
-      })}
-      actions={
-        <Button
-          type="submit"
-          variant="primary"
-          loading={submitting}
-          disabled={submitting}
-          testId="secrets-edit-submit"
-        >
-          {effectiveTranslate("kumiko.actions.save")}
-        </Button>
-      }
-    >
-      {submitError !== null && (
-        <Banner variant="error" testId="secrets-edit-error">
-          {submitError}
-        </Banner>
-      )}
-      {screen.sections.map((section, index) => (
-        <Section
-          key={section.title ?? `section-${index}`}
-          {...(section.title !== undefined && { title: effectiveTranslate(section.title) })}
-        >
-          {/* kumiko-lint-ignore section-fields-raw secretsEdit section fields are field-id strings, not EditFieldSpec */}
-          {section.fields.map((fieldId) => {
-            const qualified = screen.secretKeys[fieldId];
-            if (qualified === undefined) return null;
-            const row = rowsByQualifiedKey.get(qualified);
-            const hintKey = screen.fieldHints?.[fieldId];
-            const isRequired = screen.requiredFields?.includes(fieldId) ?? false;
-            return (
-              <Field
-                key={fieldId}
-                id={fieldId}
-                label={effectiveTranslate(screen.fieldLabels[fieldId] ?? fieldId)}
-                required={isRequired}
-                testId={`field-${fieldId}`}
-                fieldAppendix={
-                  <>
-                    {hintKey !== undefined && (
-                      <Text variant="small">{effectiveTranslate(hintKey)}</Text>
-                    )}
-                    {row !== undefined ? (
-                      <>
-                        <Text variant="small" testId={`secret-preview-${fieldId}`}>
-                          {row.redactedPreview ?? effectiveTranslate("config.secrets.set")}
-                        </Text>
-                        <Button
-                          type="button"
-                          variant="danger-ghost"
-                          size="sm"
-                          onClick={() => handleDelete(qualified)}
-                          testId={`secret-delete-${fieldId}`}
-                        >
-                          {effectiveTranslate("config.secrets.delete")}
-                        </Button>
-                      </>
-                    ) : (
-                      <>
-                        <Text variant="small" testId={`secret-not-set-${fieldId}`}>
-                          {effectiveTranslate("config.secrets.notSet")}
-                        </Text>
-                        {isRequired && (
-                          <Text variant="small" testId={`required-marker-${fieldId}`}>
-                            {effectiveTranslate("config.secrets.required")}
-                          </Text>
-                        )}
-                      </>
-                    )}
-                  </>
-                }
-              >
-                <Text variant="small">
-                  {effectiveTranslate(
-                    row !== undefined
-                      ? "config.secrets.replacePlaceholder"
-                      : "config.secrets.placeholder",
-                  )}
-                </Text>
-                <Input
-                  kind="password"
-                  id={fieldId}
-                  name={fieldId}
-                  value={drafts[fieldId] ?? ""}
-                  onChange={(v) => setDraft(fieldId, v)}
-                  autoComplete="new-password"
-                  disabled={submitting}
-                  testId={`secret-input-${fieldId}`}
-                />
-              </Field>
-            );
-          })}
-        </Section>
-      ))}
-    </Form>
-  );
-}

package/src/app/use-embedded-screen.ts

@@ -1,27 +0,0 @@
-import { useUserRoles } from "../context/user-roles-context";
-import { useAppFeatures } from "./app-features-context";
-import type { FeatureSchema } from "./feature-schema";
-import { featureNameFromQualifiedScreenId, qualifyScreenId } from "./qualify-screen-id";
-import { screenAccessAllows } from "./screen-access";
-
-export type EmbeddedScreenTarget = {
-  readonly schema: FeatureSchema;
-  readonly qn: string;
-};
-
-// Undefined (not KumikoScreen's access-denied banner) so the host can drop the whole tile.
-export function useEmbeddedScreen(
-  hostFeatureName: string,
-  screen: string,
-): EmbeddedScreenTarget | undefined {
-  const features = useAppFeatures();
-  const userRoles = useUserRoles();
-  const crossFeatureName = featureNameFromQualifiedScreenId(screen);
-  const targetFeatureName = crossFeatureName ?? hostFeatureName;
-  const qn = crossFeatureName !== undefined ? screen : qualifyScreenId(hostFeatureName, screen);
-  const schema = features.find((f) => f.featureName === targetFeatureName);
-  const target = schema?.screens.find((s) => qualifyScreenId(targetFeatureName, s.id) === qn);
-  if (schema === undefined || target === undefined) return undefined;
-  if (!screenAccessAllows(target.access, userRoles)) return undefined;
-  return { schema, qn };
-}

package/src/app/variable-chips.tsx

@@ -1,39 +0,0 @@
-// Editor-agnostic chip bar for a content editor's declared variables
-// (ContentCollectionDefinition.variableSchema). Renders next to the text
-// surface, never inside it — step 3 (rich/tiptap) reuses this same bar over
-// a different editor, so it must not assume a textarea underneath.
-
-import { Fragment, type ReactNode } from "react";
-import { useTranslation } from "../i18n";
-import { usePrimitives } from "../primitives";
-
-export type VariableChipsProps = {
-  readonly variables: readonly string[];
-  readonly onInsert: (name: string) => void;
-  readonly disabled?: boolean;
-};
-
-// No wrapping element: @cosmicdrift/kumiko-renderer is DOM-free (native impls
-// have no <div>), and layout is a platform concern anyway — the caller
-// (PlainContentEditor et al.) places these buttons in its own container.
-export function VariableChips({ variables, onInsert, disabled }: VariableChipsProps): ReactNode {
-  const { Button } = usePrimitives();
-  const t = useTranslation();
-  return (
-    <Fragment>
-      {variables.map((name) => (
-        <Button
-          key={name}
-          type="button"
-          variant="secondary"
-          size="sm"
-          disabled={disabled}
-          onClick={() => onInsert(name)}
-          ariaLabel={t("kumiko.contentEditor.insertVariable", { name })}
-        >
-          {`{{${name}}}`}
-        </Button>
-      ))}
-    </Fragment>
-  );
-}

package/src/app/write-failed-error.ts

@@ -1,27 +0,0 @@
-import type { DispatcherError } from "@cosmicdrift/kumiko-headless";
-
-// dispatcher.write wirft bei Server-Fehlern NICHT — es returnt
-// { isSuccess: false, error }. Action-Wiring das das Result verwirft,
-// macht Fehler unsichtbar ("Klick tut nichts"-Prod-Bug 2026-06-07).
-// Diese Klasse trägt den strukturierten DispatcherError dahin, wo eine
-// UI ihn anzeigen kann (Toast mit docsUrl).
-export class WriteFailedError extends Error {
-  readonly dispatcherError: DispatcherError;
-
-  constructor(error: DispatcherError, message: string) {
-    super(message);
-    this.name = "WriteFailedError";
-    this.dispatcherError = error;
-  }
-}
-
-// i18nKey gewinnt wenn das Bundle ihn kennt (translate returnt den Key
-// unverändert wenn nicht — Renderer-Convention), sonst message, zuletzt code.
-export function dispatcherErrorText(
-  error: DispatcherError,
-  translate: (key: string, params?: Readonly<Record<string, unknown>>) => string,
-): string {
-  const translated = translate(error.i18nKey, error.i18nParams);
-  if (translated !== error.i18nKey) return translated;
-  return error.message !== "" ? error.message : error.code;
-}