@cosmicdrift/kumiko-renderer 0.334.0 → 0.336.0

package/dist/app/row-actions.d.ts

@@ -15,6 +15,7 @@ export declare function runProjectionRowNavigate(nav: NavApi, action: RowActionN
 type OpenDrawer = (action: RowActionDrawer, initialValues: Readonly<Record<string, unknown>> | undefined) => void;
 /** @internal test-only */
 export declare function resetDrawerActionWarningsForTests(): void;
+export declare function buildDrawerRowAction(action: RowActionDrawer, translate: Translate, openDrawer: OpenDrawer): DataTableRowAction;
 export declare function buildProjectionRowActions(options: {
     readonly rowActions: readonly RowAction[] | undefined;
     readonly translate: Translate;
@@ -52,6 +53,8 @@ export declare function buildProjectionToolbarActions(options: {
     readonly record?: Readonly<Record<string, unknown>>;
     readonly host: ReturnHost | undefined;
 }): readonly ToolbarActionButton[] | undefined;
+export declare function deletesShownRecord(action: RowActionWriteHandler, payload: Readonly<Record<string, unknown>>, shownRecordId: unknown): boolean;
+export type RecordLeftHandler = (action: RowActionWriteHandler, resultData: unknown, deletedShownRecord: boolean) => void;
 export declare function buildRecordActions(options: {
     readonly actions: readonly RowAction[];
     readonly record: Readonly<Record<string, unknown>>;
@@ -62,6 +65,11 @@ export declare function buildRecordActions(options: {
     readonly openDrawer: (action: RowActionDrawer, initialValues: Readonly<Record<string, unknown>> | undefined) => void;
     /** Called after a writeHandler action succeeds (refetch/reload). */
     readonly onWriteSuccess: () => void | Promise<void>;
+    /** Called INSTEAD of `onWriteSuccess` when a writeHandler action succeeds
+     *  and leaves the shown record (`redirect` set, or it deletes the record).
+     *  Callers whose actions run on the shown record pass it; callers whose
+     *  records are list rows omit it. */
+    readonly onRecordLeft?: RecordLeftHandler;
     /** Screen-target navigate default entityId when the action declares no
      *  explicit `entityId` field-source. A caller editing a fixed entity can
      *  pass its own `entityId` here directly (the record it already is). A
@@ -73,5 +81,9 @@ export declare function buildRecordActions(options: {
      *  belongs to (cross-feature lookup) — undefined otherwise. Omitted by
      *  callers with no such cross-screen lookup. */
     readonly sameEntityScreenId?: (targetScreen: string) => string | undefined;
+    /** Default `{ id }` for a writeHandler action declaring no `payload`. A
+     *  caller editing a fixed entity passes its route id so the payload does
+     *  not depend on the loaded record carrying an `id` field. */
+    readonly defaultWritePayloadId?: string;
 }): readonly RenderEditAction[] | undefined;
 export {};

package/dist/app/row-actions.js

@@ -119,7 +119,7 @@ function warnDrawerActionDropped(actionKind, actionId) {
     // biome-ignore lint/suspicious/noConsole: dev-warning for a setup error
     console.warn(`[kumiko] ${actionKind} "${actionId}" is kind:"drawer", but the host did not wire openDrawer (RelatedListSection: pass onOpenDrawer) — it will not render.`);
 }
-function buildDrawerRowAction(action, translate, openDrawer) {
+export function buildDrawerRowAction(action, translate, openDrawer) {
     const { visible, params } = action;
     const actionIcon = resolveActionIcon(action.id, action.icon);
     return {
@@ -269,9 +269,9 @@ export function buildProjectionToolbarActions(options) {
         return undefined;
     const out = [];
     for (const action of toolbarActions) {
+        // Fail closed: a conditional action without a record to evaluate against stays hidden.
         if (action.visible !== undefined &&
-            record !== undefined &&
-            !evalFieldCondition(action.visible, record)) {
+            (record === undefined || !evalFieldCondition(action.visible, record))) {
             continue;
         }
         if (action.kind === "navigate") {
@@ -356,8 +356,17 @@ function buildDrawerRecordAction(action, options) {
         },
     };
 }
+// Entity delete handler QN: `<feature>:write:<entity>:delete` (see
+// entityWriteCommand in kumiko-screen.tsx).
+const ENTITY_DELETE_HANDLER_PATTERN = /:write:[^:]+:delete$/;
+export function deletesShownRecord(action, payload, shownRecordId) {
+    return (ENTITY_DELETE_HANDLER_PATTERN.test(action.handler) &&
+        payload["id"] !== undefined &&
+        payload["id"] === shownRecordId);
+}
 function buildWriteHandlerRecordAction(action, options) {
-    const { record, translate, actionIcon, dispatcher, onWriteSuccess } = options;
+    const { record, translate, actionIcon, dispatcher, onWriteSuccess, defaultWritePayloadId, onRecordLeft, } = options;
+    const shownRecordId = defaultWritePayloadId ?? record["id"];
     return {
         id: action.id,
         label: translate(action.label),
@@ -371,12 +380,18 @@ function buildWriteHandlerRecordAction(action, options) {
         onPress: async () => {
             const payload = action.payload !== undefined
                 ? evalRowExtractor(action.payload, record)
-                : { id: record["id"] };
+                : { id: shownRecordId };
             const result = await dispatcher.write(action.handler, payload);
             if (!result.isSuccess) {
                 throw new WriteFailedError(result.error, dispatcherErrorText(result.error, translate));
             }
-            await onWriteSuccess();
+            const deletedShownRecord = deletesShownRecord(action, payload, shownRecordId);
+            if (onRecordLeft !== undefined && (action.redirect !== undefined || deletedShownRecord)) {
+                onRecordLeft(action, result.data, deletedShownRecord);
+            }
+            else {
+                await onWriteSuccess();
+            }
         },
     };
 }
@@ -387,7 +402,7 @@ function buildWriteHandlerRecordAction(action, options) {
 // resolved against the record currently being viewed/edited, independent of
 // any table row.
 export function buildRecordActions(options) {
-    const { actions, record, translate, nav, host, dispatcher, openDrawer, onWriteSuccess, defaultScreenTargetEntityId, sameEntityScreenId, } = options;
+    const { actions, record, translate, nav, host, dispatcher, openDrawer, onWriteSuccess, onRecordLeft, defaultScreenTargetEntityId, sameEntityScreenId, defaultWritePayloadId, } = options;
     const out = [];
     for (const action of actions) {
         if (action.visible !== undefined && !evalFieldCondition(action.visible, record))
@@ -420,6 +435,8 @@ export function buildRecordActions(options) {
             actionIcon,
             dispatcher,
             onWriteSuccess,
+            defaultWritePayloadId,
+            onRecordLeft,
         }));
     }
     return out.length > 0 ? out : undefined;

package/dist/app/screen-access.js

@@ -1,4 +1,5 @@
 import { isUiAccessGranted } from "@cosmicdrift/kumiko-framework/ui-types";
+import { findDetailForScreen } from "./nav.js";
 import { lastSegment } from "./qn.js";
 // Shared UI-visibility predicate for the screen-render path (#1203 — nav
 // filtering via filterByAccess in workspace-shell.tsx hid role-gated
@@ -20,15 +21,18 @@ export function navigateTargetAllows(navigate, appFeatures, userRoles) {
     // forbidden ones.
     if (appFeatures.length === 0)
         return true;
-    for (const feature of appFeatures) {
-        for (const candidate of feature.screens) {
-            const isTarget = entity !== undefined
-                ? candidate.detailFor === entity
-                : lastSegment(candidate.id) === screen;
-            // First match IS the destination: short ids are globally unique
-            // (validateScreenShortIdCollisions) and both the router and
-            // resolveTarget take the first hit.
-            if (isTarget)
+    // Entity targets share nav's lookup so the gate and resolveTarget can't
+    // pick different screens. Short ids are globally unique
+    // (validateScreenShortIdCollisions), so the first screen hit is the one.
+    if (entity !== undefined) {
+        const found = findDetailForScreen(appFeatures, entity);
+        if (found !== undefined)
+            return isUiAccessGranted(found.screen.access, userRoles);
+    }
+    else {
+        for (const feature of appFeatures) {
+            const candidate = feature.screens.find((s) => lastSegment(s.id) === screen);
+            if (candidate !== undefined)
                 return isUiAccessGranted(candidate.access, userRoles);
         }
     }

package/dist/app/secret-mint-body.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useCallback, useMemo, useRef, useState } from "react";
 import { RenderEdit } from "../components/render-edit.js";
 import { useTranslation } from "../i18n.js";
@@ -44,7 +44,7 @@ function isBlank(value) {
 export function SecretMintBody({ schema, screen, translate }) {
     const nav = useNav();
     const returnTarget = useReturnTarget(screen.id);
-    const { Card, Heading, Banner, Button, Text, Grid, GridCell, SecretReveal } = usePrimitives();
+    const { Card, Heading, Banner, Button, Text, Grid, GridCell, Section, SecretReveal } = usePrimitives();
     const t = useTranslation();
     const effectiveTranslate = translate ?? t;
     const synthEntity = useMemo(() => synthesizeActionFormEntity(screen.fields), [screen.fields]);
@@ -63,6 +63,9 @@ export function SecretMintBody({ schema, screen, translate }) {
     }), [screen.fields, screen.urlPrefillFields, nav.searchParams, synthScreen, handoffValues]);
     const [revealed, setRevealed] = useState(null);
     const [done, setDone] = useState(false);
+    // The secret was minted server-side but none of the declared reveal fields
+    // came back; the mint form must not return (a re-mint would invalidate it).
+    const [revealMissing, setRevealMissing] = useState(false);
     // Never rendered, never merged into `revealed` or the confirm form's
     // initial values — read only from `buildPayload` at confirm-submit time.
     const carriedRef = useRef({});
@@ -82,16 +85,36 @@ export function SecretMintBody({ schema, screen, translate }) {
                 continue;
             values[revealField.field] = value;
         }
+        if (Object.values(values).every(isBlank)) {
+            // biome-ignore lint/suspicious/noConsole: the user-facing banner carries no detail; this names the screen and fields for the developer
+            console.error(`secretMint "${screen.id}": write result carried no value for reveal fields [${screen.reveal.fields
+                .map((revealField) => revealField.field)
+                .join(", ")}]`);
+            setRevealMissing(true);
+            return;
+        }
         setRevealed(values);
         carriedRef.current =
             confirm?.carry !== undefined ? extractCarriedValues(result.data, confirm.carry) : {};
-    }, [screen.reveal.fields, confirm?.carry]);
+    }, [screen.id, screen.reveal.fields, confirm?.carry]);
     const handleCancel = useMemo(() => {
         const target = screen.cancelTarget ?? screen.redirect;
         if (target === undefined || target === false)
             return undefined;
-        return () => navigateToReturnOr(nav, returnTarget, () => nav.navigate({ screenId: lastSegment(target) }));
+        return () => {
+            // A native stack keeps this screen mounted after navigate; drop the secret first.
+            setRevealed(null);
+            carriedRef.current = {};
+            navigateToReturnOr(nav, returnTarget, () => nav.navigate({ screenId: lastSegment(target) }));
+        };
     }, [nav, screen.redirect, screen.cancelTarget, returnTarget]);
+    // The confirm step must always offer a way out: a failed confirm (e.g. an
+    // expired setup token) otherwise leaves a form that can only keep failing.
+    // Restarting re-mints, which issues a fresh secret and invalidates this one.
+    const restartMint = useCallback(() => {
+        setRevealed(null);
+        carriedRef.current = {};
+    }, []);
     // Ends the reveal phase for both paths (the bare acknowledge button, and a
     // successful confirm submit): clears the secret and the carried values, then
     // either navigates (screen.redirect) or shows a done-state — never falls
@@ -115,6 +138,9 @@ export function SecretMintBody({ schema, screen, translate }) {
     if (done) {
         return (_jsx(Card, { options: { screenBody: true }, children: _jsx(Banner, { variant: "info", testId: "kumiko-screen-secret-mint-done", children: effectiveTranslate(confirm?.doneMessage ?? "kumiko.secretMint.done") }) }));
     }
+    if (revealMissing) {
+        return (_jsx(Card, { options: { screenBody: true }, children: _jsx(Banner, { variant: "error", testId: "kumiko-screen-secret-mint-missing", children: effectiveTranslate("kumiko.form.error.generic") }) }));
+    }
     if (revealed !== null) {
         const values = screen.reveal.fields.flatMap((revealField) => {
             const raw = revealed[revealField.field];
@@ -134,7 +160,15 @@ export function SecretMintBody({ schema, screen, translate }) {
                 },
             ];
         });
-        return (_jsxs(Card, { options: { screenBody: true }, testId: "kumiko-screen-secret-mint-card", children: [_jsx(Heading, { variant: "page", children: effectiveTranslate(screen.reveal.title ?? "kumiko.secretMint.title") }), _jsx(Banner, { variant: "warning", testId: "kumiko-screen-secret-mint-warning", children: effectiveTranslate(screen.reveal.warning ?? "kumiko.secretMint.warning") }), SecretReveal !== undefined ? (_jsx(SecretReveal, { values: values, copyLabel: effectiveTranslate("kumiko.secretMint.copy"), copiedLabel: effectiveTranslate("kumiko.secretMint.copied"), testId: "kumiko-screen-secret-mint-reveal" })) : (_jsx(Grid, { columns: 1, testId: "kumiko-screen-secret-mint-reveal", children: values.map((v) => (_jsxs(GridCell, { children: [_jsx(Text, { children: v.label }), _jsx(Text, { variant: "code", children: v.value })] }, v.label))) })), confirm !== undefined && confirmEntity !== undefined && confirmScreen !== undefined ? (_jsx(RenderEdit, { screen: confirmScreen, entity: confirmEntity, featureName: schema.featureName, initial: confirmInitial ?? {}, writeCommand: confirm.handler, payloadMode: "values", buildPayload: (snapshot) => ({ ...snapshot.values, ...carriedRef.current }), onSubmit: handleConfirmSubmitted, ...(handleCancel !== undefined && { onCancel: handleCancel }), ...(translate !== undefined && { translate }), ...(confirm.submitLabel !== undefined && { submitLabel: confirm.submitLabel }) })) : (_jsx(Button, { type: "button", variant: "primary", onClick: finishMint, testId: "kumiko-screen-secret-mint-confirm", children: effectiveTranslate(screen.reveal.confirmLabel ?? "kumiko.secretMint.confirm") }))] }));
+        const revealContent = (_jsxs(_Fragment, { children: [_jsx(Heading, { variant: "page", children: effectiveTranslate(screen.reveal.title ?? "kumiko.secretMint.title") }), _jsx(Banner, { variant: "warning", testId: "kumiko-screen-secret-mint-warning", children: effectiveTranslate(screen.reveal.warning ?? "kumiko.secretMint.warning") }), SecretReveal !== undefined ? (_jsx(SecretReveal, { values: values, copyLabel: effectiveTranslate("kumiko.secretMint.copy"), copiedLabel: effectiveTranslate("kumiko.secretMint.copied"), testId: "kumiko-screen-secret-mint-reveal" })) : (_jsx(Grid, { columns: 1, testId: "kumiko-screen-secret-mint-reveal", children: values.map((v) => (_jsxs(GridCell, { children: [_jsx(Text, { children: v.label }), _jsx(Text, { variant: "code", children: v.value })] }, v.label))) }))] }));
+        // One screen form like the mint phase: the reveal leads the form column
+        // instead of the confirm form nesting a second card inside a card. The
+        // keys stop the mint and confirm forms sharing one instance (and its
+        // submit state) across phases.
+        if (confirm !== undefined && confirmEntity !== undefined && confirmScreen !== undefined) {
+            return (_jsx(RenderEdit, { screen: confirmScreen, i18nScreenId: screen.id, entity: confirmEntity, featureName: schema.featureName, initial: confirmInitial ?? {}, writeCommand: confirm.handler, payloadMode: "values", buildPayload: (snapshot) => ({ ...snapshot.values, ...carriedRef.current }), onSubmit: handleConfirmSubmitted, onCancel: handleCancel ?? restartMint, fillScreenHeight: true, leadContent: _jsx(Section, { testId: "kumiko-screen-secret-mint-card", children: revealContent }), ...(translate !== undefined && { translate }), ...(confirm.submitLabel !== undefined && { submitLabel: confirm.submitLabel }) }, "confirm"));
+        }
+        return (_jsxs(Card, { options: { screenBody: true }, testId: "kumiko-screen-secret-mint-card", children: [revealContent, _jsx(Button, { type: "button", variant: "primary", onClick: finishMint, testId: "kumiko-screen-secret-mint-confirm", children: effectiveTranslate(screen.reveal.confirmLabel ?? "kumiko.secretMint.confirm") })] }));
     }
-    return (_jsx(RenderEdit, { screen: synthScreen, entity: synthEntity, featureName: schema.featureName, initial: initial, extensionInitialValues: initial, writeCommand: screen.handler, payloadMode: "values", onSubmit: handleSubmitted, fillScreenHeight: true, ...(handleCancel !== undefined && { onCancel: handleCancel }), ...(translate !== undefined && { translate }), ...(screen.submitLabel !== undefined && { submitLabel: screen.submitLabel }) }));
+    return (_jsx(RenderEdit, { screen: synthScreen, entity: synthEntity, featureName: schema.featureName, initial: initial, extensionInitialValues: initial, writeCommand: screen.handler, payloadMode: "values", onSubmit: handleSubmitted, fillScreenHeight: true, ...(handleCancel !== undefined && { onCancel: handleCancel }), ...(translate !== undefined && { translate }), ...(screen.submitLabel !== undefined && { submitLabel: screen.submitLabel }) }, "mint"));
 }

package/dist/app/secrets-edit-body.js

@@ -19,7 +19,7 @@ function groupSectionsByTitle(sections) {
 // unlike ConfigEditBody there is no server value to pre-fill a draft with —
 // every input starts at "" and stays that way unless the user types into it.
 export function SecretsEditBody({ screen, translate }) {
-    const { Banner, Form, Section, Field, Input, Button, Text, Grid } = usePrimitives();
+    const { Banner, Dialog, Form, Section, Field, Input, Button, Text, Grid } = usePrimitives();
     const t = useTranslation();
     const effectiveTranslate = translate ?? t;
     const dispatcher = useDispatcher();
@@ -27,6 +27,8 @@ export function SecretsEditBody({ screen, translate }) {
     const [drafts, setDrafts] = useState({});
     const [submitting, setSubmitting] = useState(false);
     const [submitError, setSubmitError] = useState(null);
+    const [pendingDeleteKey, setPendingDeleteKey] = useState(null);
+    const [deleting, setDeleting] = useState(false);
     const rowsByQualifiedKey = useMemo(() => {
         const out = new Map();
         for (const row of listQuery.data ?? [])
@@ -45,22 +47,41 @@ export function SecretsEditBody({ screen, translate }) {
             return;
         setSubmitting(true);
         setSubmitError(null);
-        const result = await dispatcher.batch(commands);
-        setSubmitting(false);
-        if (!result.isSuccess) {
-            setSubmitError(dispatcherErrorText(result.error, effectiveTranslate));
-            return;
+        try {
+            const result = await dispatcher.batch(commands);
+            if (!result.isSuccess) {
+                setSubmitError(dispatcherErrorText(result.error, effectiveTranslate));
+                return;
+            }
+            setDrafts({});
+            await listQuery.refetch();
+        }
+        catch {
+            // Transport failures reject instead of returning a result; drafts stay
+            // so the user can retry without retyping the secrets.
+            setSubmitError(effectiveTranslate("kumiko.form.error.generic"));
+        }
+        finally {
+            setSubmitting(false);
         }
-        setDrafts({});
-        await listQuery.refetch();
     }, [dispatcher, drafts, screen.secretKeys, listQuery.refetch, effectiveTranslate]);
     const handleDelete = useCallback(async (qualified) => {
-        const result = await dispatcher.write("secrets:write:delete", { key: qualified });
-        if (!result.isSuccess) {
-            setSubmitError(dispatcherErrorText(result.error, effectiveTranslate));
-            return;
+        setDeleting(true);
+        try {
+            const result = await dispatcher.write("secrets:write:delete", { key: qualified });
+            if (!result.isSuccess) {
+                setSubmitError(dispatcherErrorText(result.error, effectiveTranslate));
+                return;
+            }
+            setSubmitError(null);
+            await listQuery.refetch();
+        }
+        catch {
+            setSubmitError(effectiveTranslate("kumiko.form.error.generic"));
+        }
+        finally {
+            setDeleting(false);
         }
-        await listQuery.refetch();
     }, [dispatcher, listQuery.refetch, effectiveTranslate]);
     if (listQuery.loading && listQuery.data === null)
         return _jsx(QueryLoadingBanner, {});
@@ -71,35 +92,41 @@ export function SecretsEditBody({ screen, translate }) {
     // title all fall under the generic "Secrets" heading and share one band.
     const sectionGroups = groupSectionsByTitle(screen.sections);
     const unsavedCount = Object.values(drafts).filter((value) => value.trim() !== "").length;
-    return (_jsxs(Form, { onSubmit: () => {
-            void handleSubmit();
-        }, testId: "secrets-edit-form", width: "full", fillHeight: true, stickyActions: true, screenForm: true, unsavedCount: unsavedCount, ...(screen.description !== undefined && {
-            subtitle: effectiveTranslate(screen.description),
-        }), actions: _jsxs(_Fragment, { children: [unsavedCount > 0 && (_jsx(Button, { type: "button", variant: "ghost", disabled: submitting, onClick: () => setDrafts({}), testId: "secrets-edit-discard", [STICKY_PRIMARY_ACTION_PROP]: true, children: effectiveTranslate("kumiko.form.discard") })), _jsx(Button, { type: "submit", variant: "primary", loading: submitting, disabled: submitting || unsavedCount === 0, testId: "secrets-edit-submit", children: effectiveTranslate("kumiko.form.saveChanges") })] }), children: [submitError !== null && (_jsx(Banner, { variant: "error", testId: "secrets-edit-error", children: submitError })), sectionGroups.map((section) => (_jsx(Section, { layout: "settings-list", title: effectiveTranslate(section.title), subtitle: effectiveTranslate("config.secrets.description"), children: _jsx(Grid, { columns: 1, list: true, children: section.fields.map((fieldId) => {
-                        const qualified = screen.secretKeys[fieldId];
-                        if (qualified === undefined)
-                            return null;
-                        const row = rowsByQualifiedKey.get(qualified);
-                        const hintKey = screen.fieldHints?.[fieldId];
-                        const isRequired = screen.requiredFields?.includes(fieldId) ?? false;
-                        return (_jsx(Field, { id: fieldId, layout: "row", label: effectiveTranslate(screen.fieldLabels[fieldId] ?? fieldId), required: isRequired, testId: `field-${fieldId}`, status: row !== undefined
-                                ? {
-                                    tone: "ok",
-                                    label: effectiveTranslate("config.secrets.saved"),
-                                    testId: `secret-saved-${fieldId}`,
-                                }
-                                : {
-                                    tone: isRequired ? "bad" : "muted",
-                                    label: effectiveTranslate("config.secrets.notSet"),
-                                    testId: `secret-not-set-${fieldId}`,
-                                }, ...(hintKey !== undefined && { description: effectiveTranslate(hintKey) }), ...(row !== undefined && {
-                                fieldAppendix: (_jsxs(Grid, { columns: "auto", children: [_jsx(Text, { variant: "muted", testId: `secret-preview-${fieldId}`, children: row.redactedPreview !== null
-                                                ? effectiveTranslate("config.secrets.stored", {
-                                                    preview: row.redactedPreview,
-                                                })
-                                                : effectiveTranslate("config.secrets.set") }), _jsx(Button, { type: "button", variant: "danger-ghost", size: "sm", onClick: () => handleDelete(qualified), testId: `secret-delete-${fieldId}`, children: effectiveTranslate("config.secrets.delete") })] })),
-                            }), children: _jsx(Input, { kind: "password", id: fieldId, name: fieldId, value: drafts[fieldId] ?? "", onChange: (v) => setDraft(fieldId, v), placeholder: effectiveTranslate(row !== undefined
-                                    ? "config.secrets.replacePlaceholder"
-                                    : "config.secrets.placeholder"), autoComplete: "new-password", disabled: submitting, testId: `secret-input-${fieldId}` }) }, fieldId));
-                    }) }) }, section.title)))] }));
+    return (_jsxs(_Fragment, { children: [_jsxs(Form, { onSubmit: () => {
+                    void handleSubmit();
+                }, testId: "secrets-edit-form", width: "full", fillHeight: true, stickyActions: true, screenForm: true, unsavedCount: unsavedCount, ...(screen.description !== undefined && {
+                    subtitle: effectiveTranslate(screen.description),
+                }), actions: _jsxs(_Fragment, { children: [unsavedCount > 0 && (_jsx(Button, { type: "button", variant: "ghost", disabled: submitting, onClick: () => setDrafts({}), testId: "secrets-edit-discard", [STICKY_PRIMARY_ACTION_PROP]: true, children: effectiveTranslate("kumiko.form.discard") })), _jsx(Button, { type: "submit", variant: "primary", loading: submitting, disabled: submitting || unsavedCount === 0, testId: "secrets-edit-submit", children: effectiveTranslate("kumiko.form.saveChanges") })] }), children: [submitError !== null && (_jsx(Banner, { variant: "error", testId: "secrets-edit-error", children: submitError })), sectionGroups.map((section) => (_jsx(Section, { layout: "settings-list", title: effectiveTranslate(section.title), subtitle: effectiveTranslate("config.secrets.description"), children: _jsx(Grid, { columns: 1, list: true, children: section.fields.map((fieldId) => {
+                                const qualified = screen.secretKeys[fieldId];
+                                if (qualified === undefined)
+                                    return null;
+                                const row = rowsByQualifiedKey.get(qualified);
+                                const hintKey = screen.fieldHints?.[fieldId];
+                                const isRequired = screen.requiredFields?.includes(fieldId) ?? false;
+                                return (_jsx(Field, { id: fieldId, layout: "row", label: effectiveTranslate(screen.fieldLabels[fieldId] ?? fieldId), required: isRequired, testId: `field-${fieldId}`, status: row !== undefined
+                                        ? {
+                                            tone: "ok",
+                                            label: effectiveTranslate("config.secrets.saved"),
+                                            testId: `secret-saved-${fieldId}`,
+                                        }
+                                        : {
+                                            tone: isRequired ? "bad" : "muted",
+                                            label: effectiveTranslate("config.secrets.notSet"),
+                                            testId: `secret-not-set-${fieldId}`,
+                                        }, ...(hintKey !== undefined && { description: effectiveTranslate(hintKey) }), ...(row !== undefined && {
+                                        fieldAppendix: (_jsxs(Grid, { columns: "auto", children: [_jsx(Text, { variant: "muted", testId: `secret-preview-${fieldId}`, children: row.redactedPreview !== null
+                                                        ? effectiveTranslate("config.secrets.stored", {
+                                                            preview: row.redactedPreview,
+                                                        })
+                                                        : effectiveTranslate("config.secrets.set") }), _jsx(Button, { type: "button", variant: "danger-ghost", size: "sm", disabled: submitting || deleting, onClick: () => setPendingDeleteKey(qualified), testId: `secret-delete-${fieldId}`, children: effectiveTranslate("config.secrets.delete") })] })),
+                                    }), children: _jsx(Input, { kind: "password", id: fieldId, name: fieldId, value: drafts[fieldId] ?? "", onChange: (v) => setDraft(fieldId, v), placeholder: effectiveTranslate(row !== undefined
+                                            ? "config.secrets.replacePlaceholder"
+                                            : "config.secrets.placeholder"), autoComplete: "new-password", disabled: submitting, testId: `secret-input-${fieldId}` }) }, fieldId));
+                            }) }) }, section.title)))] }), _jsx(Dialog, { open: pendingDeleteKey !== null, onOpenChange: (open) => {
+                    if (!open)
+                        setPendingDeleteKey(null);
+                }, title: effectiveTranslate("config.secrets.delete"), description: effectiveTranslate("config.secrets.deleteConfirm"), confirmLabel: effectiveTranslate("config.secrets.delete"), variant: "danger", initialFocus: "cancel", onConfirm: async () => {
+                    if (pendingDeleteKey !== null)
+                        await handleDelete(pendingDeleteKey);
+                }, testId: "secrets-delete-dialog" })] }));
 }

package/dist/components/embedded-list-field.js

@@ -3,7 +3,7 @@ import { computeDerivedCellValue, currencyDecimals, groupEmbeddedListIssues, rou
 import { useState } from "react";
 import { REFERENCE_COMBOBOX_LIMIT } from "../hooks/reference-limits.js";
 import { useQuery } from "../hooks/use-query.js";
-import { referenceLookupSource } from "../hooks/use-reference-lookup.js";
+import { referenceOptionSource } from "../hooks/use-reference-lookup.js";
 import { useTranslation } from "../i18n.js";
 import { usePrimitives } from "../primitives.js";
 function withRecomputedDerived(row, derived, cells) {
@@ -107,9 +107,7 @@ export function EmbeddedListField({ field, id, onChange, allIssues, featureName,
     const rows = Array.isArray(field.value) ? field.value : [];
     const derived = field.embeddedListDerived;
     const referenceCells = cells.filter((c) => c.type === "reference");
-    const referenceSources = referenceCells.map((cell) => cell.refOptionsQuery !== undefined
-        ? { queryQn: cell.refOptionsQuery, labelKey: "label" }
-        : referenceLookupSource(cell.refFeature ?? featureName, cell.refEntity ?? "", cell.refLabelField ?? "id"));
+    const referenceSources = referenceCells.map((cell) => referenceOptionSource(cell, cell.refFeature ?? featureName, cell.refEntity ?? ""));
     const referenceQueries = referenceSources.map((source) => 
     // biome-ignore lint/correctness/useHookAtTopLevel: referenceCells comes from the entity-schema definition — fixed for the screen's lifetime, not a real conditional-hook risk.
     useQuery(source.queryQn, {

package/dist/components/multi-select-checkboxes.js

@@ -32,5 +32,8 @@ export function MultiSelectCheckboxes({ field, id, options, value, onChange, })
     };
     return (_jsxs(_Fragment, { children: [_jsx(Button, { type: "button", variant: "secondary", size: "sm", disabled: disabled, onClick: toggleAll, testId: `${id}-select-all`, children: allSelected
                     ? t("kumiko.field.multiSelect.deselect-all")
-                    : t("kumiko.field.multiSelect.select-all") }), _jsx(Grid, { columns: field.columns ?? 2, testId: `${id}-checkboxes`, ...(field.maxRows !== undefined && { maxRows: field.maxRows }), children: options.map((opt) => (_jsx(GridCell, { children: _jsx(Field, { id: `${id}-${opt.value}`, label: opt.label, layout: "inline", children: _jsx(Input, { kind: "boolean", id: `${id}-${opt.value}`, name: `${id}-${opt.value}`, value: selected.has(opt.value), onChange: (checked) => toggleOption(opt.value, checked), disabled: disabled }) }) }, opt.value))) })] }));
+                    : t("kumiko.field.multiSelect.select-all") }), _jsx(Grid, { columns: field.columns ?? 2, testId: `${id}-checkboxes`, 
+                // Field's label targets `id`, which no checkbox carries here; point the
+                // group at Field's `${id}-label` element instead.
+                ariaLabelledBy: `${id}-label`, ...(field.maxRows !== undefined && { maxRows: field.maxRows }), children: options.map((opt) => (_jsx(GridCell, { children: _jsx(Field, { id: `${id}-${opt.value}`, label: opt.label, layout: "inline", children: _jsx(Input, { kind: "boolean", id: `${id}-${opt.value}`, name: `${id}-${opt.value}`, value: selected.has(opt.value), onChange: (checked) => toggleOption(opt.value, checked), disabled: disabled }) }) }, opt.value))) })] }));
 }

package/dist/components/reference-create-dialog.js

@@ -1,6 +1,6 @@
 import { jsx as _jsx } from "react/jsx-runtime";
 import { useMemo } from "react";
-import { buildInitialValues } from "../app/kumiko-screen.js";
+import { buildInitialValues, tenantCurrencyMoneyFieldNames, useMoneyCurrencyOverrides, } from "../app/kumiko-screen.js";
 import { toKebab } from "../app/qn.js";
 import { useTranslation } from "../i18n.js";
 import { usePrimitives } from "../primitives.js";
@@ -31,9 +31,14 @@ export function extractCreatedId(data) {
     return extractIdField(data, "id");
 }
 export function ReferenceCreateDialog({ open, onClose, onCreated, featureName, screen, entity, }) {
-    const { Modal } = usePrimitives();
+    const { Banner, Modal } = usePrimitives();
     const t = useTranslation();
-    const initial = useMemo(() => buildInitialValues(entity.fields, entity.defaultCurrency ?? "EUR"), [entity.fields, entity.defaultCurrency]);
+    const entityDefaultCurrency = entity.defaultCurrency ?? "EUR";
+    const tenantCurrencyFieldNames = useMemo(() => (open ? tenantCurrencyMoneyFieldNames(entity.fields) : []), [open, entity.fields]);
+    // Same tenant-currency resolution as the entityEdit create screen (fw#2933),
+    // so a `currency: { kind: "tenant" }` field seeds identically via this dialog.
+    const { overrides: moneyCurrencyOverrides, loading: currencyLoading } = useMoneyCurrencyOverrides(entity.fields, tenantCurrencyFieldNames, entityDefaultCurrency);
+    const initial = useMemo(() => buildInitialValues(entity.fields, entityDefaultCurrency, moneyCurrencyOverrides), [entity.fields, entityDefaultCurrency, moneyCurrencyOverrides]);
     const writeCommand = entityWriteCommand(featureName, screen.entity);
     const handleSubmitted = (result) => {
         if (result.validationBlocked || !result.isSuccess)
@@ -42,5 +47,5 @@ export function ReferenceCreateDialog({ open, onClose, onCreated, featureName, s
     };
     if (!open)
         return null;
-    return (_jsx(Modal, { open: open, onOpenChange: (next) => !next && onClose(), title: t("kumiko.actions.create"), children: _jsx(RenderEdit, { screen: screen, entity: entity, featureName: featureName, initial: initial, writeCommand: writeCommand, onSubmit: handleSubmitted, onCancel: onClose, ...(screen.submitLabel !== undefined && { submitLabel: screen.submitLabel }) }) }));
+    return (_jsx(Modal, { open: open, onOpenChange: (next) => !next && onClose(), title: t("kumiko.actions.create"), children: currencyLoading ? (_jsx(Banner, { padded: true, variant: "loading", testId: "reference-create-dialog-loading", children: "Loading\u2026" })) : (_jsx(RenderEdit, { screen: screen, entity: entity, featureName: featureName, initial: initial, writeCommand: writeCommand, onSubmit: handleSubmitted, onCancel: onClose, ...(screen.submitLabel !== undefined && { submitLabel: screen.submitLabel }) })) }));
 }

package/dist/components/related-list-section.js

@@ -12,7 +12,7 @@ import { dispatcherErrorText } from "../app/write-failed-error.js";
 import { useOptionalDispatcher } from "../context/dispatcher-context.js";
 import { useUserRoles } from "../context/user-roles-context.js";
 import { useQuery } from "../hooks/use-query.js";
-import { useLocale, useTranslation } from "../i18n.js";
+import { useOptionalLocale, useTranslation } from "../i18n.js";
 import { PageHeaderSlotAvailableProvider } from "../page-header-slot.js";
 import { usePrimitives, } from "../primitives.js";
 import { sortByAccessor } from "../sort-by-accessor.js";
@@ -84,10 +84,10 @@ export function RelatedListSection({ section, parentId, record, featureName, tra
     const [emptyStateActionError, setEmptyStateActionError] = useState(null);
     const t = useTranslation();
     const effectiveTranslate = translate ?? t;
-    const locale = useLocale().locale();
+    const locale = useOptionalLocale();
     const rowGrouping = useMemo(() => section.groupBy === undefined
         ? undefined
-        : buildRowGrouping(section.groupBy, effectiveTranslate, locale), [section.groupBy, effectiveTranslate, locale]);
+        : buildRowGrouping(section.groupBy, effectiveTranslate, locale ?? "en"), [section.groupBy, effectiveTranslate, locale]);
     const rowTone = useMemo(() => buildRowTone(section.rowTone), [section.rowTone]);
     const nav = useNav();
     const host = useReturnHost();
@@ -175,12 +175,14 @@ export function RelatedListSection({ section, parentId, record, featureName, tra
             const field = normalizeListColumn(col).field;
             accessors[field] = (row) => {
                 const value = row[field];
-                return typeof value === "number" ? value : String(value ?? "");
+                if (value === null || value === undefined)
+                    return null;
+                return typeof value === "number" ? value : String(value);
             };
         }
         return accessors;
     }, [section.columns]);
-    const sortedRows = useMemo(() => sortByAccessor(rowsQuery.data?.rows ?? [], sort, sortAccessors), [rowsQuery.data, sort, sortAccessors]);
+    const sortedRows = useMemo(() => sortByAccessor(rowsQuery.data?.rows ?? [], sort, sortAccessors, locale), [rowsQuery.data, sort, sortAccessors, locale]);
     const rowClick = section.rowClick;
     // A row-body click target comes from EITHER the legacy `rowClick` field OR
     // a `rowActions` entry marked rowClick:true — the boot-validator rejects

package/dist/components/render-edit-action-button.d.ts

@@ -1,7 +1,7 @@
 import type { ReactNode } from "react";
 import type { usePrimitives } from "../primitives.js";
 import type { RenderEditAction } from "./render-edit-types.js";
-export declare function needsActionConfirm(action: RenderEditAction): boolean;
+export declare function needsActionConfirm(action: Pick<RenderEditAction, "confirm" | "confirmRequired" | "style">): boolean;
 export declare function RenderEditActionConfirmDialog({ action, open, onOpenChange, onConfirm, Dialog, }: {
     readonly action: RenderEditAction;
     readonly open: boolean;

package/dist/components/render-edit-action-button.js

@@ -32,7 +32,11 @@ export function RenderEditActionButton({ action, iconOnly = false, hideIcon = fa
     };
     const variant = action.style ?? "secondary";
     const showIconOnly = iconOnly && action.icon !== undefined;
-    return (_jsxs(_Fragment, { children: [_jsx(Button, { type: "button", variant: variant, loading: busy, ...(action.icon !== undefined && (!hideIcon || showIconOnly) && { icon: action.icon }), ...(showIconOnly && { size: "icon", ariaLabel: action.label }), onClick: () => {
+    return (_jsxs(_Fragment, { children: [_jsx(Button, { type: "button", variant: variant, loading: busy, ...(action.icon !== undefined && (!hideIcon || showIconOnly) && { icon: action.icon }), ...(showIconOnly && {
+                    size: "icon",
+                    ariaLabel: action.label,
+                    title: action.label,
+                }), onClick: () => {
                     if (needsActionConfirm(action)) {
                         setConfirmOpen(true);
                     }

package/dist/components/render-edit-logic.d.ts

@@ -1,6 +1,7 @@
-import type { EditSectionViewModel, SubmitResult } from "@cosmicdrift/kumiko-headless";
+import type { EditFieldViewModel, EditSectionViewModel, SubmitResult } from "@cosmicdrift/kumiko-headless";
 export declare function hasEditableSection(sections: readonly EditSectionViewModel[]): boolean;
 export declare function resolveExtensionEntityId(entityIdProp: string | null | undefined, vmId: string | null): string | null;
 export declare function shouldNotifyCaller(result: SubmitResult<unknown>, extensionsPersisted: boolean): boolean;
 export declare function hasIssueWithoutRenderedField(issuePaths: readonly string[], sections: readonly EditSectionViewModel[]): boolean;
+export declare function hasIssueWithoutVisibleField(issuePaths: readonly string[], fields: readonly EditFieldViewModel[]): boolean;
 export declare function filterEditSections(sections: readonly EditSectionViewModel[], fieldsFilter: readonly string[] | undefined): readonly EditSectionViewModel[];

package/dist/components/render-edit-logic.js

@@ -30,13 +30,16 @@ export function shouldNotifyCaller(result, extensionsPersisted) {
 // Matched on the first path segment (embedded-list rows are dotted, e.g. `tasks.2.title`).
 // No issues at all counts as unmatched, so the caller keeps the banner.
 export function hasIssueWithoutRenderedField(issuePaths, sections) {
+    const renderedFields = sections
+        .filter((s) => s.kind === "fields" && (s.visible || s.fields.length === 0))
+        .flatMap((s) => (s.kind === "fields" ? s.fields : []));
+    return hasIssueWithoutVisibleField(issuePaths, renderedFields);
+}
+export function hasIssueWithoutVisibleField(issuePaths, fields) {
     if (issuePaths.length === 0)
         return true;
-    const renderedFields = new Set(sections
-        .filter((s) => s.kind === "fields" && (s.visible || s.fields.length === 0))
-        .flatMap((s) => (s.kind === "fields" ? s.fields.filter((f) => f.visible) : []))
-        .map((f) => f.field));
-    return issuePaths.some((path) => !renderedFields.has(path.split(".")[0] ?? path));
+    const visibleFields = new Set(fields.filter((f) => f.visible).map((f) => f.field));
+    return issuePaths.some((path) => !visibleFields.has(path.split(".")[0] ?? path));
 }
 // Extension, relatedList and writeForm sections skip the `fields` filter
 // (writeForm's fields belong to its own independent form, not the host's);

package/dist/components/render-edit-types.d.ts

@@ -4,6 +4,10 @@ import type { ReactNode } from "react";
 import type * as z from "zod";
 export type RenderEditProps<TValues extends FormValues, TCtx = unknown> = {
     readonly screen: EntityEditScreenDefinition;
+    /** Screen id used for the `screen:<id>.title`/`.subtitle` lookups and as the
+     *  title fallback, when `screen.id` is synthetic (e.g. a secretMint confirm
+     *  form keeps its own id for the draft key). Defaults to `screen.id`. */
+    readonly i18nScreenId?: string;
     readonly entity: EntityDefinition;
     readonly featureName: string;
     readonly initial: TValues;
@@ -104,7 +108,8 @@ export type RenderEditProps<TValues extends FormValues, TCtx = unknown> = {
      *  is the delta against the initial values — same semantics as
      *  `payloadMode: "changes"` — so a caller never overwrites unseen fields.
      *  `valid` is a pure dry-run parse against `schema` (not a
-     *  `controller.validate()` call), so it does not paint field errors into
+     *  `controller.validate()` call) that ignores issues on hidden fields and
+     *  outside the `fields` scope, like submit() does, so it does not paint field errors into
      *  the UI and can diverge from the currently rendered `snapshot.errors` —
      *  always `true` without `schema`. A caller that patches a fresh object
      *  reference on every call must not do so unconditionally: `setValues` is
@@ -175,6 +180,10 @@ export type RenderEditProps<TValues extends FormValues, TCtx = unknown> = {
      *  screens with `fillHeight !== false`; dialogs and other embedded hosts
      *  omit it and keep document-flow height. */
     readonly fillScreenHeight?: boolean;
+    /** Rendered first inside the form, above the sections, in the same column and
+     *  rhythm — for content that belongs to the form but is no field (e.g. the
+     *  secret a confirm step refers to). */
+    readonly leadContent?: ReactNode;
     /** Show the unsaved-changes footer (count, Discard, "Save changes") even
      *  without an entity id or a screen-height form — for hosts that edit an
      *  existing server-side record through `customSubmit` (configEdit, also when