@cosmicdrift/kumiko-renderer 0.352.0 → 0.354.0

package/dist/app/form-schema.d.ts

@@ -2,4 +2,5 @@ import type { EntityDefinition, EntityEditScreenDefinition } from "@cosmicdrift/
 import * as z from "zod";
 export declare function isPresent(value: unknown): boolean;
 export declare const REQUIRED_FIELD_I18N_KEY = "kumiko.validation.required";
+export declare const OPTION_NOT_AVAILABLE_I18N_KEY = "kumiko.validation.optionNotAvailable";
 export declare function buildFormSchema(entity: EntityDefinition, screen: EntityEditScreenDefinition, unchangedFrom?: Readonly<Record<string, unknown>>): z.ZodType;

package/dist/app/form-schema.js

@@ -1,4 +1,4 @@
-import { evalFieldCondition, NO_WIDGET_FIELD_TYPES } from "@cosmicdrift/kumiko-framework/ui-types";
+import { evalFieldCondition, findUnavailableSelectOptions, NO_WIDGET_FIELD_TYPES, } from "@cosmicdrift/kumiko-framework/ui-types";
 import { I18N_KEY_PARAM } from "@cosmicdrift/kumiko-headless";
 import * as z from "zod";
 import { layoutEditFields } from "./layout-fields.js";
@@ -16,6 +16,7 @@ function isEmbeddedListField(field) {
 }
 // Renders raw to the user without a de+en default in i18n-defaults.ts.
 export const REQUIRED_FIELD_I18N_KEY = "kumiko.validation.required";
+export const OPTION_NOT_AVAILABLE_I18N_KEY = "kumiko.validation.optionNotAvailable";
 // Client-side presence validation for the auto-wired entityEdit path —
 // checks that every rendered required field HAS a value, not that the
 // value has the right shape. Format/range/type validation stays server-
@@ -54,6 +55,7 @@ export function buildFormSchema(entity, screen, unchangedFrom) {
         // its keys — the runtime object always carries every form field.
         // @cast-boundary form-values
         const record = values;
+        const selectFieldsToCheck = {};
         for (const spec of fields) {
             const field = entity.fields[spec.field];
             if (!field)
@@ -62,6 +64,7 @@ export function buildFormSchema(entity, screen, unchangedFrom) {
             // same reason as the NO_WIDGET_FIELD_TYPES check below.
             if (spec.readOnly !== undefined && evalFieldCondition(spec.readOnly, record))
                 continue;
+            selectFieldsToCheck[spec.field] = field;
             // Screen-spec `required` overrides the entity default, mirroring
             // `view-model/edit.ts` — the rendered form is the reference, and a
             // presence check stricter than the form blocks the user for nothing.
@@ -90,5 +93,15 @@ export function buildFormSchema(entity, screen, unchangedFrom) {
                 params: { [I18N_KEY_PARAM]: REQUIRED_FIELD_I18N_KEY },
             });
         }
+        // Against `unchangedFrom` the helper still checks a stored value whose
+        // discriminator changed — the server validates the merged row.
+        for (const issue of findUnavailableSelectOptions(selectFieldsToCheck, record, unchangedFrom)) {
+            ctx.addIssue({
+                code: "custom",
+                path: [issue.field],
+                message: `"${issue.field}" is not available for the current selection.`,
+                params: { [I18N_KEY_PARAM]: OPTION_NOT_AVAILABLE_I18N_KEY, allowed: issue.allowed },
+            });
+        }
     });
 }

package/dist/app/kumiko-screen.d.ts

@@ -22,9 +22,10 @@ export declare function KumikoScreen({ schema, qn, translate, entityId, onRowCli
 export declare function buildInitialValues(fields: Readonly<Record<string, unknown>>, defaultCurrency?: string, moneyCurrencyOverrides?: Readonly<Record<string, string>>): Readonly<Record<string, unknown>>;
 export declare function tenantCurrencyMoneyFieldNames(fields: Readonly<Record<string, unknown>>): readonly string[];
 export declare function literalCurrencyOverrides(fields: Readonly<Record<string, unknown>>): Readonly<Record<string, string>>;
-export declare function useMoneyCurrencyOverrides(fields: Readonly<Record<string, unknown>>, tenantFieldNames: readonly string[], fallback: string): {
+export declare function useMoneyCurrencyOverrides(fields: Readonly<Record<string, unknown>>, tenantFieldNames: readonly string[], fallback: string | undefined): {
     readonly overrides: Readonly<Record<string, string>> | undefined;
     readonly loading: boolean;
+    readonly unresolved: boolean;
 };
 export type InitialValueSources = {
     readonly searchParams: Readonly<Record<string, string>>;

package/dist/app/kumiko-screen.js

@@ -30,7 +30,7 @@ import { useDashboardBody } from "./dashboard-body.js";
 import { EntityListExpandedRow } from "./entity-list-expanded-row.js";
 import { FacetCountBridges } from "./facet-count-bridge.js";
 import { buildFormSchema } from "./form-schema.js";
-import { layoutFieldNames } from "./layout-fields.js";
+import { hiddenRequiredFieldsFilled, layoutFieldNames } from "./layout-fields.js";
 import { buildDateRangePayload, buildEntityFilterFacets, buildFacetCountRequests, buildFilterFacets, buildFilterPayload, clampDateRange, mergeReferenceFacetOptions, normalizeDefaultFilters, readDateRange, resolveDateRangeFacets, resolveProjectionFacetSpecs, } from "./list-facets.js";
 import { useInitialValuesHandoff, useNav } from "./nav.js";
 import { synthesizeProjectionDetailEntity, synthesizeProjectionDetailScreen, } from "./projection-detail-shim.js";
@@ -202,12 +202,16 @@ function pageSizeOptionsFor(currentLimit) {
         ? PAGE_SIZE_OPTIONS
         : [...PAGE_SIZE_OPTIONS, currentLimit].sort((a, b) => a - b);
 }
-function useNavigateToCreateFor(schema, entityName, createScreen) {
+function useNavigateToCreateFor(schema, entityName, createScreen, createUnavailable) {
     const nav = useNav();
     const host = useReturnHost();
     const editScreenId = useMemo(() => {
         if (createScreen !== undefined)
             return createScreen;
+        // The role may not open the declared create target; falling back to the
+        // entity's edit form would bypass the flow the app prescribes (e.g. a wizard).
+        if (createUnavailable === true)
+            return undefined;
         // allowCreate:false = update-only Edit-Screen (Create läuft über einen
         // Lifecycle-Write) — der zählt nicht als „+ Neu"-Ziel. singleton:true
         // öffnet ohne entityId den vorhandenen Record (EntityEditSingletonBody)
@@ -217,7 +221,7 @@ function useNavigateToCreateFor(schema, entityName, createScreen) {
             s.allowCreate !== false &&
             s.singleton !== true);
         return edit !== undefined ? lastSegment(edit.id) : undefined;
-    }, [schema.screens, entityName, createScreen]);
+    }, [schema.screens, entityName, createScreen, createUnavailable]);
     const navigate = useCallback(() => {
         if (editScreenId !== undefined)
             navigateWithReturnTo(nav, { screenId: editScreenId }, host);
@@ -283,17 +287,20 @@ export function tenantCurrencyMoneyFieldNames(fields) {
 function resolveTenantCurrency(fieldNames, query, fallback) {
     if (fieldNames.length === 0)
         return { status: "not-needed" };
-    if (query.error)
-        return { status: "ready", currency: fallback };
+    if (query.error) {
+        return fallback === undefined
+            ? { status: "unresolved" }
+            : { status: "ready", currency: fallback };
+    }
     if (query.data === null)
         return { status: "loading" };
     const raw = query.data[TENANT_CURRENCY_CONFIG_KEY]?.value;
-    return { status: "ready", currency: typeof raw === "string" && raw !== "" ? raw : fallback };
+    if (typeof raw === "string" && raw !== "")
+        return { status: "ready", currency: raw };
+    return fallback === undefined
+        ? { status: "unresolved" }
+        : { status: "ready", currency: fallback };
 }
-// An entity-less form screen has no `entity.defaultCurrency` to fall back on,
-// so a tenant-declared field whose config query errors or returns no value
-// lands here — same last resort as the entityEdit path's `?? "EUR"`.
-const ACTION_FORM_CURRENCY_FALLBACK = "EUR";
 const HEADER_CARD_DEFAULT_WIDTH = "4xl";
 // Shared by the update payload shape and the server-error path prefix so both can't drift.
 const UPDATE_CHANGES_KEY = "changes";
@@ -318,8 +325,11 @@ export function literalCurrencyOverrides(fields) {
 // on a fast click submit, the wrong currency. Callers pass the tenant field
 // names themselves because an edit form only needs the fetch for fields the
 // record has no stored value for.
-export function useMoneyCurrencyOverrides(fields, tenantFieldNames, fallback) {
-    const query = useQuery("config:query:values", {}, { enabled: tenantFieldNames.length > 0 });
+export function useMoneyCurrencyOverrides(fields, tenantFieldNames, 
+// `undefined` = no safe last resort (entity-less forms): an unresolvable
+// tenant currency is reported via `unresolved` instead of guessing a code.
+fallback) {
+    const query = useQuery("config:query:values", { keys: [TENANT_CURRENCY_CONFIG_KEY] }, { enabled: tenantFieldNames.length > 0 });
     const resolution = resolveTenantCurrency(tenantFieldNames, query, fallback);
     const resolvedTenantCurrency = resolution.status === "ready" ? resolution.currency : undefined;
     const overrides = useMemo(() => {
@@ -330,7 +340,11 @@ export function useMoneyCurrencyOverrides(fields, tenantFieldNames, fallback) {
         }
         return Object.keys(out).length > 0 ? out : undefined;
     }, [fields, tenantFieldNames, resolvedTenantCurrency]);
-    return { overrides, loading: resolution.status === "loading" };
+    return {
+        overrides,
+        loading: resolution.status === "loading",
+        unresolved: resolution.status === "unresolved",
+    };
 }
 function multiSelectOptionValues(shape) {
     if (shape.options === undefined || shape.options.length === 0)
@@ -822,6 +836,9 @@ function EntityEditUpdateForm({ schema, screen, entity, entityId, record, onRelo
         onReload,
         screen.entity,
     ]);
+    const sameEntityScreenId = useCallback((targetScreen) => isEntityEditScreenOfOtherEntity(screen.entity, targetScreen, schema, appFeatures)
+        ? undefined
+        : entityId, [screen.entity, schema, appFeatures, entityId]);
     const buildSectionActions = useCallback((actions) => buildRecordActions({
         actions,
         record,
@@ -832,7 +849,7 @@ function EntityEditUpdateForm({ schema, screen, entity, entityId, record, onRelo
         openDrawer,
         onWriteSuccess: onReload,
         onRecordLeft: handleRecordLeft,
-        defaultScreenTargetEntityId: entityId,
+        sameEntityScreenId,
         defaultWritePayloadId: entityId,
     }), [
         record,
@@ -843,6 +860,7 @@ function EntityEditUpdateForm({ schema, screen, entity, entityId, record, onRelo
         openDrawer,
         onReload,
         handleRecordLeft,
+        sameEntityScreenId,
         entityId,
     ]);
     const headerActions = useMemo(() => buildSectionActions(screen.actions ?? []), [buildSectionActions, screen.actions]);
@@ -1105,7 +1123,7 @@ function EntityListScreen({ schema, screen, translate, onRowClick, }) {
 function EntityListBody({ schema, screen, entity, translate, onRowClick, }) {
     const isEmbeddedScreen = useIsEmbeddedScreen();
     const featureName = schema.featureName;
-    const onCreate = useNavigateToCreateFor(schema, screen.entity, screen.createScreen);
+    const onCreate = useNavigateToCreateFor(schema, screen.entity, screen.createScreen, screen.createUnavailable);
     const { Banner } = usePrimitives();
     const queryType = entityQueryCommand(featureName, screen.entity, "list");
     const nav = useNav();
@@ -1322,9 +1340,7 @@ function EntityListBody({ schema, screen, entity, translate, onRowClick, }) {
             // Default entityId für entityEdit-Targets: row["id"] wenn kein expliziter
             // entityId-Feldname gesetzt ist. Nur für Targets DERSELBEN Entity — sonst
             // bekäme ein Cross-Entity-Edit-Screen die falsche row.id injiziert.
-            const targetIsEntityEdit = schema.screens.some((s) => s.type === "entityEdit" &&
-                s.entity === screen.entity &&
-                lastSegment(s.id) === action.screen);
+            const targetIsEntityEdit = isEntityEditScreenOfEntity(screen.entity, action.screen, schema, appFeatures);
             const explicit = action.entityId !== undefined ? String(row.values[action.entityId] ?? "") : undefined;
             const fallback = targetIsEntityEdit ? String(row.values["id"] ?? "") : undefined;
             const entityId = explicit ?? fallback;
@@ -1339,7 +1355,7 @@ function EntityListBody({ schema, screen, entity, translate, onRowClick, }) {
             const params = navigateActionSearchParams(action, row.values);
             navigateWithReturnTo(nav, target, host, params);
         }
-    }, [nav, schema.screens, screen.entity, host]);
+    }, [nav, schema, appFeatures, screen.entity, host]);
     const rowActions = useMemo(() => {
         const declared = screen.rowActions ?? [];
         // Prepended unless a declared rowAction already has id "edit" — declared wins.
@@ -1830,7 +1846,8 @@ function headerStatusTone(header, record) {
     const declared = header.statusTones !== undefined && Object.hasOwn(header.statusTones, value)
         ? header.statusTones[value]
         : undefined;
-    return declared !== undefined ? statusToneForOptionTone(declared) : statusToneForValue(value);
+    const declaredTone = declared !== undefined ? statusToneForOptionTone(declared) : undefined;
+    return declaredTone ?? statusToneForValue(value);
 }
 function resolveSubtitleHref(header, record) {
     if (header?.subtitleHref === undefined)
@@ -2229,6 +2246,20 @@ function ProjectionDetailBody({ schema, screen, translate, entityId, }) {
 function redirectScreenTarget(redirect) {
     return typeof redirect === "string" ? redirect : redirect.screen;
 }
+// Same-entity detection for navigate defaults: only an entityEdit screen of the
+// SAME entity may receive the current record's id (it opens in UPDATE mode, which
+// is what the boot validator assumes). Searched across all features.
+function isEntityEditScreenOfEntity(entity, targetScreen, schema, appFeatures) {
+    if (entity === undefined)
+        return false;
+    return [schema, ...appFeatures].some((feature) => feature.screens.some((s) => s.type === "entityEdit" && s.entity === entity && lastSegment(s.id) === targetScreen));
+}
+// Record-scoped targets (actionForm, secretMint) take the shown record's id; an
+// entityEdit of ANOTHER entity must not, or it would open that entity's UPDATE
+// mode on the wrong id instead of create.
+function isEntityEditScreenOfOtherEntity(entity, targetScreen, schema, appFeatures) {
+    return [schema, ...appFeatures].some((feature) => feature.screens.some((s) => s.type === "entityEdit" && s.entity !== entity && lastSegment(s.id) === targetScreen));
+}
 // A qualified redirect names its feature, so the search space is THAT feature
 // only — the current schema's own screens must not shadow it with a same
 // short-id screen of another type. An unqualified redirect searches this
@@ -2330,11 +2361,11 @@ function ActionFormBody({ schema, screen, translate, initialOverrides, onSuccess
     const handoffValues = onSuccess === undefined ? pendingHandoff : undefined;
     // This screen has no entity, so a money field here declares its own currency
     // source (fw#2839, boot-enforced) — without one the form would seed a bare
-    // `0` the handler's schema rejects. ACTION_FORM_CURRENCY_FALLBACK only
-    // applies when a tenant-declared field's config query errors or holds no
-    // value, matching the entityEdit path's behaviour (fw#2937).
+    // `0` the handler's schema rejects. When a tenant-declared field's config
+    // query errors or holds no value there is no entity default to use, and
+    // submitting a guessed currency would mis-book the amount — block instead.
     const tenantCurrencyFieldNames = useMemo(() => tenantCurrencyMoneyFieldNames(screen.fields), [screen.fields]);
-    const { overrides: moneyCurrencyOverrides, loading: currencyLoading } = useMoneyCurrencyOverrides(screen.fields, tenantCurrencyFieldNames, ACTION_FORM_CURRENCY_FALLBACK);
+    const { overrides: moneyCurrencyOverrides, loading: currencyLoading, unresolved: currencyUnresolved, } = useMoneyCurrencyOverrides(screen.fields, tenantCurrencyFieldNames, undefined);
     const initial = useMemo(() => mergeSearchParamsIntoInitial(screen.fields, {
         searchParams: nav.searchParams,
         urlPrefillFields: screen.urlPrefillFields,
@@ -2423,12 +2454,17 @@ function ActionFormBody({ schema, screen, translate, initialOverrides, onSuccess
     if (currencyLoading) {
         return (_jsx(Banner, { padded: true, variant: "loading", testId: "kumiko-screen-loading", children: "Loading\u2026" }));
     }
+    if (currencyUnresolved) {
+        return (_jsx(Banner, { padded: true, variant: "error", testId: "kumiko-screen-currency-unresolved", children: "The tenant currency could not be loaded, so this form cannot be submitted." }));
+    }
     return (_jsx(RenderEdit, { screen: synthScreen, entity: synthEntity, featureName: schema.featureName, initial: initial, 
         // Extension-Sections im actionForm sehen die initialen Form-Values
         // (inkl. searchParams-Prefill, z.B. ?incidentId=…) als initialValues
         // — anders als im entityEdit gibt es hier keinen record, aus dem
         // sie Kontext ziehen könnten.
-        extensionInitialValues: initial, ...(successText !== undefined && {
+        extensionInitialValues: initial, ...(screen.submitPrefilled === true && {
+            submitWithoutChanges: hiddenRequiredFieldsFilled(synthScreen, screen.fields, initial),
+        }), ...(successText !== undefined && {
             leadContent: (_jsx(Banner, { variant: "info", testId: "action-form-success", children: successText })),
         }), writeCommand: screen.handler, payloadMode: "values", onSubmit: handleSubmitted, ...(handleCancel !== undefined && { onCancel: handleCancel }), ...(onDirtyChange !== undefined && { onDirtyChange }), ...((insideDrawer || screenFillsHeight(screen)) && { fillScreenHeight: true }), ...((screen.submitLabel ?? submitLabelFallback) !== undefined && {
             submitLabel: screen.submitLabel ?? submitLabelFallback,

package/dist/app/layout-fields.d.ts

@@ -1,3 +1,4 @@
-import type { EditFieldSpec, EntityEditScreenDefinition } from "@cosmicdrift/kumiko-framework/ui-types";
+import type { EditFieldSpec, EntityEditScreenDefinition, SecretMintScreenDefinition } from "@cosmicdrift/kumiko-framework/ui-types";
 export declare function layoutEditFields(screen: EntityEditScreenDefinition): readonly Exclude<EditFieldSpec, string>[];
 export declare function layoutFieldNames(screen: EntityEditScreenDefinition): ReadonlySet<string>;
+export declare function hiddenRequiredFieldsFilled(screen: EntityEditScreenDefinition, fields: SecretMintScreenDefinition["fields"], initial: Readonly<Record<string, unknown>>): boolean;

package/dist/app/layout-fields.js

@@ -18,3 +18,18 @@ export function layoutEditFields(screen) {
 export function layoutFieldNames(screen) {
     return new Set(layoutEditFields(screen).map((spec) => spec.field));
 }
+function isRequiredField(field) {
+    return field !== undefined && "required" in field && field.required === true;
+}
+function hasValue(value) {
+    if (value === undefined || value === null || value === "")
+        return false;
+    return !(Array.isArray(value) && value.length === 0);
+}
+// A layout-hidden field can never be edited, so a required one without a seeded
+// value would leave the form permanently unsubmittable.
+export function hiddenRequiredFieldsFilled(screen, fields, initial) {
+    return layoutEditFields(screen).every((spec) => spec.visible !== false ||
+        !isRequiredField(fields[spec.field]) ||
+        hasValue(initial[spec.field]));
+}

package/dist/app/projection-list-shim.d.ts

@@ -1,8 +1,9 @@
 import type { EntityDefinition, EntityListScreenDefinition, ListColumnSpec, ProjectionListScreenDefinition } from "@cosmicdrift/kumiko-framework/ui-types";
 /** Minimal EntityDefinition from the column list: every field is a text
- *  field. `sortable` applies uniformly to all columns — buildAppSchema
- *  derives it from the query's Zod schema (`screen.sortable`, fw#2165); the
- *  query itself has no per-field server-sort guarantee.
+ *  field. `sortable` applies to all columns — buildAppSchema derives it from
+ *  the query's Zod schema (`screen.sortable`, fw#2165); the query itself has
+ *  no per-field server-sort guarantee, so a column opts out with
+ *  `sortable: false` when the handler cannot order by it.
  *  computeListViewModel only reads `fields[<col>].type` — text is enough,
  *  presentation comes from the column renderer + explicit label. */
 export declare function synthesizeProjectionEntity(columns: readonly ListColumnSpec[], sortable: boolean): EntityDefinition;

package/dist/app/projection-list-shim.js

@@ -16,15 +16,20 @@
 import { normalizeListColumn } from "@cosmicdrift/kumiko-framework/ui-types";
 const PROJECTION_PSEUDO_ENTITY = "__projection__";
 /** Minimal EntityDefinition from the column list: every field is a text
- *  field. `sortable` applies uniformly to all columns — buildAppSchema
- *  derives it from the query's Zod schema (`screen.sortable`, fw#2165); the
- *  query itself has no per-field server-sort guarantee.
+ *  field. `sortable` applies to all columns — buildAppSchema derives it from
+ *  the query's Zod schema (`screen.sortable`, fw#2165); the query itself has
+ *  no per-field server-sort guarantee, so a column opts out with
+ *  `sortable: false` when the handler cannot order by it.
  *  computeListViewModel only reads `fields[<col>].type` — text is enough,
  *  presentation comes from the column renderer + explicit label. */
 export function synthesizeProjectionEntity(columns, sortable) {
     const fields = {};
     for (const col of columns) {
-        fields[normalizeListColumn(col).field] = { type: "text", sortable };
+        const normalized = normalizeListColumn(col);
+        fields[normalized.field] = {
+            type: "text",
+            sortable: sortable && normalized.sortable !== false,
+        };
     }
     return { fields };
 }

package/dist/app/secret-mint-body.js

@@ -4,8 +4,8 @@ import { RenderEdit } from "../components/render-edit.js";
 import { useTranslation } from "../i18n.js";
 import { usePrimitives } from "../primitives.js";
 import { synthesizeActionFormEntity, synthesizeActionFormScreen, synthesizeSecretMintConfirmScreen, } from "./action-form-shim.js";
-import { buildInitialValues, literalCurrencyOverrides, mergeSearchParamsIntoInitial, } from "./kumiko-screen.js";
-import { layoutFieldNames } from "./layout-fields.js";
+import { buildInitialValues, mergeSearchParamsIntoInitial, tenantCurrencyMoneyFieldNames, useMoneyCurrencyOverrides, } from "./kumiko-screen.js";
+import { hiddenRequiredFieldsFilled, layoutFieldNames } from "./layout-fields.js";
 import { useInitialValuesHandoff, useNav } from "./nav.js";
 import { lastSegment } from "./qn.js";
 import { navigateToReturnOr, useReturnTarget } from "./return-to.js";
@@ -26,6 +26,9 @@ function extractCarriedValues(data, carry) {
     }
     return carried;
 }
+// Entity-less forms have no `entity.defaultCurrency`; same fallback as actionForm.
+const SECRET_MINT_CURRENCY_FALLBACK = "EUR";
+const NO_FIELDS = {};
 function isBlank(value) {
     if (value === undefined || value === null || value === "")
         return true;
@@ -50,17 +53,26 @@ export function SecretMintBody({ schema, screen, translate }) {
     const synthEntity = useMemo(() => synthesizeActionFormEntity(screen.fields), [screen.fields]);
     const synthScreen = useMemo(() => synthesizeActionFormScreen(screen), [screen]);
     const handoffValues = useInitialValuesHandoff(screen.id);
+    const mintTenantCurrencyFields = useMemo(() => tenantCurrencyMoneyFieldNames(screen.fields), [screen.fields]);
+    const { overrides: mintCurrencyOverrides, loading: mintCurrencyLoading } = useMoneyCurrencyOverrides(screen.fields, mintTenantCurrencyFields, SECRET_MINT_CURRENCY_FALLBACK);
     const initial = useMemo(() => mergeSearchParamsIntoInitial(screen.fields, {
         searchParams: nav.searchParams,
         urlPrefillFields: screen.urlPrefillFields,
         renderableFields: layoutFieldNames(synthScreen),
         // A mint form has no entity either, so its money fields name their own
-        // currency source (fw#2839). Only the literal form is resolved here:
-        // `{ kind: "tenant" }` would need the config query this screen never
-        // runs, and a one-time secret mint has no money use case to justify it.
-        moneyCurrencyOverrides: literalCurrencyOverrides(screen.fields),
+        // currency source (fw#2839, fw#2933).
+        ...(mintCurrencyOverrides !== undefined && {
+            moneyCurrencyOverrides: mintCurrencyOverrides,
+        }),
         ...(handoffValues !== undefined && { handoffValues }),
-    }), [screen.fields, screen.urlPrefillFields, nav.searchParams, synthScreen, handoffValues]);
+    }), [
+        screen.fields,
+        screen.urlPrefillFields,
+        nav.searchParams,
+        synthScreen,
+        handoffValues,
+        mintCurrencyOverrides,
+    ]);
     const [revealed, setRevealed] = useState(null);
     const [done, setDone] = useState(false);
     // The secret was minted server-side but none of the declared reveal fields
@@ -72,9 +84,12 @@ export function SecretMintBody({ schema, screen, translate }) {
     const confirm = screen.confirm;
     const confirmEntity = useMemo(() => (confirm !== undefined ? synthesizeActionFormEntity(confirm.fields) : undefined), [confirm]);
     const confirmScreen = useMemo(() => (confirm !== undefined ? synthesizeSecretMintConfirmScreen(screen, confirm) : undefined), [screen, confirm]);
+    const confirmFields = confirm?.fields ?? NO_FIELDS;
+    const confirmTenantCurrencyFields = useMemo(() => tenantCurrencyMoneyFieldNames(confirmFields), [confirmFields]);
+    const { overrides: confirmCurrencyOverrides, loading: confirmCurrencyLoading } = useMoneyCurrencyOverrides(confirmFields, confirmTenantCurrencyFields, SECRET_MINT_CURRENCY_FALLBACK);
     const confirmInitial = useMemo(() => confirm !== undefined
-        ? buildInitialValues(confirm.fields, undefined, literalCurrencyOverrides(confirm.fields))
-        : undefined, [confirm]);
+        ? buildInitialValues(confirm.fields, undefined, confirmCurrencyOverrides)
+        : undefined, [confirm, confirmCurrencyOverrides]);
     const handleSubmitted = useCallback((result) => {
         if (!result.isSuccess)
             return;
@@ -166,9 +181,19 @@ export function SecretMintBody({ schema, screen, translate }) {
         // keys stop the mint and confirm forms sharing one instance (and its
         // submit state) across phases.
         if (confirm !== undefined && confirmEntity !== undefined && confirmScreen !== undefined) {
+            // Hold until a tenant-declared currency lands, else the form would seed (and
+            // on a fast click submit) the fallback currency (fw#2933).
+            if (confirmCurrencyLoading) {
+                return (_jsx(Banner, { padded: true, variant: "loading", testId: "kumiko-screen-loading", children: "Loading\u2026" }));
+            }
             return (_jsx(RenderEdit, { screen: confirmScreen, i18nScreenId: screen.id, entity: confirmEntity, featureName: schema.featureName, initial: confirmInitial ?? {}, writeCommand: confirm.handler, payloadMode: "values", buildPayload: (snapshot) => ({ ...snapshot.values, ...carriedRef.current }), onSubmit: handleConfirmSubmitted, onCancel: handleCancel ?? restartMint, fillScreenHeight: true, leadContent: _jsx(Section, { testId: "kumiko-screen-secret-mint-card", children: revealContent }), ...(translate !== undefined && { translate }), ...(confirm.submitLabel !== undefined && { submitLabel: confirm.submitLabel }) }, "confirm"));
         }
         return (_jsxs(Card, { options: { screenBody: true }, testId: "kumiko-screen-secret-mint-card", children: [revealContent, _jsx(Button, { type: "button", variant: "primary", onClick: finishMint, testId: "kumiko-screen-secret-mint-confirm", children: effectiveTranslate(screen.reveal.confirmLabel ?? "kumiko.secretMint.confirm") })] }));
     }
-    return (_jsx(RenderEdit, { screen: synthScreen, entity: synthEntity, featureName: schema.featureName, initial: initial, extensionInitialValues: initial, writeCommand: screen.handler, payloadMode: "values", onSubmit: handleSubmitted, fillScreenHeight: true, ...(handleCancel !== undefined && { onCancel: handleCancel }), ...(translate !== undefined && { translate }), ...(screen.submitLabel !== undefined && { submitLabel: screen.submitLabel }) }, "mint"));
+    if (mintCurrencyLoading) {
+        return (_jsx(Banner, { padded: true, variant: "loading", testId: "kumiko-screen-loading", children: "Loading\u2026" }));
+    }
+    return (_jsx(RenderEdit, { screen: synthScreen, entity: synthEntity, featureName: schema.featureName, initial: initial, extensionInitialValues: initial, ...(screen.submitPrefilled === true && {
+            submitWithoutChanges: hiddenRequiredFieldsFilled(synthScreen, screen.fields, initial),
+        }), writeCommand: screen.handler, payloadMode: "values", onSubmit: handleSubmitted, fillScreenHeight: true, ...(handleCancel !== undefined && { onCancel: handleCancel }), ...(translate !== undefined && { translate }), ...(screen.submitLabel !== undefined && { submitLabel: screen.submitLabel }) }, "mint"));
 }

package/dist/components/render-edit-types.d.ts

@@ -76,6 +76,9 @@ export type RenderEditProps<TValues extends FormValues, TCtx = unknown> = {
      *  "Save" can be replaced by domain-specific strings ("Approve" /
      *  "Dispatch" / etc.). */
     readonly submitLabel?: string;
+    /** Set by submitPrefilled screens: defined shows the submit button even when no field is
+     *  editable (all hidden or read-only); `true` also enables it while the form is unchanged. */
+    readonly submitWithoutChanges?: boolean;
     /** Visual style of the submit button (actionForm `submitStyle`). Default "primary". */
     readonly submitVariant?: "primary" | "danger";
     /** Extra footer buttons (actionForm `footerActions`): each sets its `patch`
@@ -241,4 +244,9 @@ export type RenderEditControls<TValues extends FormValues> = {
      *  guard — a host showing a pre-filled proposal must be able to accept it
      *  untouched. */
     readonly submit: () => Promise<void>;
+    /** Wizard only (no-op elsewhere): validates the current step and advances,
+     *  like the built-in Next button. A `hideActions` host steps with this. */
+    readonly next: () => void;
+    /** Wizard only (no-op elsewhere): goes back one step without validating. */
+    readonly back: () => void;
 };

package/dist/components/render-edit.js

@@ -223,7 +223,7 @@ function resolveTitleTemplate(template, values, translate, fallback) {
     return translate(template, values);
 }
 export function RenderEdit(props) {
-    const { screen, entity, featureName, initial, writeCommand, translate: translateProp, ctx, schema, onSubmit, payloadMode = "values", buildPayload, serverFieldPathPrefix, onDelete, onCancel, onReload, onDirtyChange, onCopyLink, actions, onRelatedListDrawerAction, submitLabel, submitVariant, footerActions, summary, labelAppendix, fieldAppendix, fieldAppendixPlacement, fieldDescription, fieldAccent, markChangedFields = false, entityId: entityIdProp, extensionInitialValues, onChange, onControlsReady, fields: fieldsFilter, disabled = false, hideActions, valueDisplay = "form", hideSectionTitles, fillScreenHeight, dirtyFooter, validateOnChange, headerRegion, buildSectionActions, leadContent, } = props;
+    const { screen, entity, featureName, initial, writeCommand, translate: translateProp, ctx, schema, onSubmit, payloadMode = "values", buildPayload, serverFieldPathPrefix, onDelete, onCancel, onReload, onDirtyChange, onCopyLink, actions, onRelatedListDrawerAction, submitLabel, submitVariant, submitWithoutChanges, footerActions, summary, labelAppendix, fieldAppendix, fieldAppendixPlacement, fieldDescription, fieldAccent, markChangedFields = false, entityId: entityIdProp, extensionInitialValues, onChange, onControlsReady, fields: fieldsFilter, disabled = false, hideActions, valueDisplay = "form", hideSectionTitles, fillScreenHeight, dirtyFooter, validateOnChange, headerRegion, buildSectionActions, leadContent, } = props;
     const i18nScreenId = props.i18nScreenId ?? screen.id;
     const { customSubmit } = props;
     // Translate-Fallback: wenn der Caller keine Translate-Fn übergibt,
@@ -398,6 +398,8 @@ export function RenderEdit(props) {
     // snapshot/extensionDirty, while the onControlsReady effect fires once per
     // mount — the ref lets controls.submit() always reach the current one.
     const handleSubmitRef = useRef(async () => { });
+    const wizardNextRef = useRef(() => { });
+    const wizardBackRef = useRef(() => { });
     const currentStepRef = useRef(0);
     const draftSaveTimerRef = useRef(null);
     useEffect(() => {
@@ -452,7 +454,11 @@ export function RenderEdit(props) {
             patch: patchAndScheduleDraftSave,
             validate: scopedValidate,
             getValues: () => controller.getSnapshot().values,
-            submit: () => handleSubmitRef.current(),
+            // saveNow: a host-driven submit must save on a wizard's intermediate
+            // steps too instead of silently advancing; stepping is next()/back().
+            submit: () => handleSubmitRef.current({ saveNow: true }),
+            next: () => wizardNextRef.current(),
+            back: () => wizardBackRef.current(),
         });
         // Dep on boolean presence only — inline-arrow identity must not redeliver.
     }, [hasControlsReady, controller, scopedValidate, patchAndScheduleDraftSave]);
@@ -752,10 +758,10 @@ export function RenderEdit(props) {
         }
         const secretFieldNames = new Set(vm.sections.flatMap((section) => section.kind === "fields"
             ? section.fields
-                .filter((f) => f.format === "password" || f.writeOnly === true)
+                .filter((f) => f.format === "password" || f.writeOnly === true || f.sensitive === true)
                 .map((f) => f.field)
             : []));
-        // A password or writeOnly field never enters the persisted draft blob — it would be stored in the clear and restored on resume.
+        // A password, writeOnly or sensitive field never enters the persisted draft blob — it would be stored in the clear and restored on resume.
         const draftValues = Object.fromEntries(Object.entries(controller.getSnapshot().values).filter(([field]) => !secretFieldNames.has(field)));
         void dispatcher
             .write(FORM_DRAFT_SAVE, {
@@ -1011,6 +1017,8 @@ export function RenderEdit(props) {
         }
     }
     handleSubmitRef.current = handleSubmit;
+    wizardNextRef.current = isWizard ? handleWizardNext : () => { };
+    wizardBackRef.current = isWizard ? handleWizardBack : () => { };
     // Screen forms (entityEdit/actionForm filling the shell height) drop the card;
     // the title then lives in the shell header when the shell offers a slot.
     const isScreenForm = fillScreenHeight === true && hideSectionTitles !== true && !insideDrawer;
@@ -1089,7 +1097,10 @@ export function RenderEdit(props) {
     // draw a no-op Save. Extension registrations still get their Save, since
     // persistExtensions() runs on the customSubmit path too.
     const isFieldlessSubmitForm = isFieldless && screen.entity !== PROJECTION_DETAIL_ENTITY;
-    const showsSubmit = isFormEditable || hasExtensionRegistrations || isFieldlessSubmitForm;
+    const showsSubmit = isFormEditable ||
+        hasExtensionRegistrations ||
+        isFieldlessSubmitForm ||
+        submitWithoutChanges !== undefined;
     const footerSlot = screen.slots?.footer;
     // An unregistered footer component renders null, so only a resolvable one may
     // count as an action (else read-only screens get an empty footer strip).
@@ -1131,7 +1142,11 @@ export function RenderEdit(props) {
                 footerActions?.map((action) => (_jsx(Button, { type: "button", variant: action.variant ?? "secondary", ...(action.icon !== undefined && { icon: action.icon }), disabled: isSubmitting || disabled, onClick: () => {
                         controller.setValues(action.patch); // @cast-boundary form-values
                         void handleSubmit();
-                    }, testId: `render-edit-footer-action-${action.id}`, children: translate(action.label) }, action.id))), hasDirtyFooter && showsSubmit && unsavedCount !== undefined && unsavedCount > 0 && (_jsx(Button, { type: "button", variant: "ghost", disabled: isSubmitting || disabled, onClick: () => controller.reset(), testId: "render-edit-discard", [STICKY_PRIMARY_ACTION_PROP]: true, children: translate("kumiko.form.discard") })), showSubmit && (_jsx(Button, { type: "submit", disabled: (snapshot.isUnchanged && !extensionDirty && !isFieldless && !insideDrawer) ||
+                    }, testId: `render-edit-footer-action-${action.id}`, children: translate(action.label) }, action.id))), hasDirtyFooter && showsSubmit && unsavedCount !== undefined && unsavedCount > 0 && (_jsx(Button, { type: "button", variant: "ghost", disabled: isSubmitting || disabled, onClick: () => controller.reset(), testId: "render-edit-discard", [STICKY_PRIMARY_ACTION_PROP]: true, children: translate("kumiko.form.discard") })), showSubmit && (_jsx(Button, { type: "submit", disabled: (snapshot.isUnchanged &&
+                    !extensionDirty &&
+                    !isFieldlessSubmitForm &&
+                    !insideDrawer &&
+                    submitWithoutChanges !== true) ||
                     isSubmitting ||
                     disabled, loading: isSubmitting, variant: submitVariant ?? "primary", testId: "render-edit-submit", children: translate(submitLabel ??
                     (isWizard
@@ -1367,10 +1382,13 @@ export function RenderEdit(props) {
                                 }
                                 // No section title here (fw#3218) — the Tab strip right above
                                 // already names this panel, so a repeated Card title would just
-                                // duplicate it. The title row only exists to carry actions, and
-                                // then it carries only the actions, never the title text.
-                                const cardEl = (_jsx(Card, { options: { framed: false }, ...(sectionActionsEl !== undefined && {
-                                        slots: { headerActions: sectionActionsEl },
+                                // duplicate it. The header row only exists to carry the section
+                                // description and actions, never the title text.
+                                const cardEl = (_jsx(Card, { options: { framed: false }, ...((sectionActionsEl !== undefined || section.description !== undefined) && {
+                                        slots: {
+                                            ...(section.description !== undefined && { subtitle: section.description }),
+                                            ...(sectionActionsEl !== undefined && { headerActions: sectionActionsEl }),
+                                        },
                                     }), testId: `section-${sectionKey}`, children: renderFieldGrid(section.fields, section.columns, `${sectionKey}-grid`) }, sectionKey));
                                 return wrapWizardStep(sectionKey, cardEl);
                             }

package/dist/hooks/use-reference-lookup.js

@@ -17,6 +17,7 @@
 // internen Cache shared zwischen List + Edit-Form für die gleiche
 // Entity, Live-Updates kommen via SSE (use-query-live).
 import { REFERENCE_LOOKUP_SOURCES, SYSTEM_REFERENCE_LABELS, } from "@cosmicdrift/kumiko-framework/ui-types";
+import { PII_ERASED_SENTINEL } from "@cosmicdrift/kumiko-types/kms-adapter-types";
 import { useMemo } from "react";
 import { toKebab } from "../app/qn.js";
 import { useTranslation } from "../i18n.js";
@@ -61,7 +62,7 @@ export function useReferenceLookup(featureName, refEntity, labelField) {
                 continue;
             const idStr = String(id);
             const label = row[labelKey] ?? id;
-            out.set(idStr, String(label));
+            out.set(idStr, label === PII_ERASED_SENTINEL ? translate("kumiko.pii.erased") : String(label));
         }
         // System-scope ids (e.g. SYSTEM_TENANT_ID) never have a backing row, so
         // the bulk lookup above never covers them — inject the label directly.

package/dist/i18n-defaults.js

@@ -41,6 +41,7 @@ export const kumikoDefaultTranslations = {
         "kumiko.field.unsupported": "This field type can't be edited here yet.",
         "kumiko.field.writeOnly.remove": "Remove stored value",
         "kumiko.field.writeOnly.set": "Set",
+        "kumiko.pii.erased": "Deleted",
         "kumiko.field.writeOnly.setPlaceholder": "Set — leave empty to keep it",
         "kumiko.field.writeOnly.undo": "Undo",
         "kumiko.field.writeOnly.willRemove": "Removed on save",
@@ -107,6 +108,8 @@ export const kumikoDefaultTranslations = {
         "kumiko.dashboard.panel.error.title": "{label} could not be loaded",
         "kumiko.dashboard.time-range": "Time range",
         "kumiko.screen.unavailable": "This page is not available right now.",
+        "kumiko.dashboard.brush-end": "Window end",
+        "kumiko.dashboard.brush-start": "Window start",
         "kumiko.dashboard.today": "Today",
         "kumiko.dashboard.updated-at": "As of {time}",
         "kumiko.app-boot.loading": "Loading…",
@@ -206,6 +209,7 @@ export const kumikoDefaultTranslations = {
         "kumiko.secretMint.copied": "Copied",
         "kumiko.secretMint.done": "Done.",
         "kumiko.validation.required": "Required.",
+        "kumiko.validation.optionNotAvailable": "Not available for the current selection.",
         "kumiko.validation.invalid": "Invalid value.",
         "kumiko.validation.too-short": "Too short (at least {min} characters).",
         "kumiko.validation.too-long": "Too long (at most {max} characters).",

package/dist/i18n.d.ts

@@ -11,6 +11,9 @@ export type TranslationsByLocale = Readonly<Record<string, TranslationBundle>>;
 export type TranslationsByKey = Readonly<Record<string, Readonly<Record<string, TranslationValue>>>>;
 /** Pivot key-first server translations to locale-first client bundles. */
 export declare function translationsByLocaleFromKeys(source: TranslationsByKey): TranslationsByLocale;
+/** Inverse of `translationsByLocaleFromKeys`: pivot locale-first bundles to the key-first
+ *  shape `r.translations({ keys })` expects, so one source feeds server and client. */
+export declare function translationsByKeyFromLocales(source: TranslationsByLocale): TranslationsByKey;
 /** Merged zwei TranslationsByLocale-Maps — der override gewinnt pro Key,
  *  die Locales werden zusammengeführt. Standard-Baustein für Client-
  *  Plugins, die App-Overrides über ihre Default-Bundles legen. */

package/dist/i18n.js

@@ -27,6 +27,18 @@ export function translationsByLocaleFromKeys(source) {
     }
     return out;
 }
+/** Inverse of `translationsByLocaleFromKeys`: pivot locale-first bundles to the key-first
+ *  shape `r.translations({ keys })` expects, so one source feeds server and client. */
+export function translationsByKeyFromLocales(source) {
+    const out = {};
+    for (const [locale, bundle] of Object.entries(source)) {
+        for (const [key, value] of Object.entries(bundle)) {
+            out[key] ??= {};
+            out[key][locale] = value;
+        }
+    }
+    return out;
+}
 /** Merged zwei TranslationsByLocale-Maps — der override gewinnt pro Key,
  *  die Locales werden zusammengeführt. Standard-Baustein für Client-
  *  Plugins, die App-Overrides über ihre Default-Bundles legen. */

package/dist/index.d.ts

@@ -67,12 +67,12 @@ export { useStore, useStoreSelector } from "./hooks/use-store.js";
 export type { StreamStatus, UseStreamHandlerOptions, UseStreamHandlerResult, } from "./hooks/use-stream-handler.js";
 export { useStreamHandler } from "./hooks/use-stream-handler.js";
 export type { LocaleProviderProps, TranslationBundle, TranslationsByKey, TranslationsByLocale, } from "./i18n.js";
-export { createStaticLocaleResolver, FormalityProvider, LocaleProvider, mergeTranslations, translationsByLocaleFromKeys, useFormality, useLocale, useOptionalLocale, useOptionalTranslation, useTranslation, } from "./i18n.js";
+export { createStaticLocaleResolver, FormalityProvider, LocaleProvider, mergeTranslations, translationsByKeyFromLocales, translationsByLocaleFromKeys, useFormality, useLocale, useOptionalLocale, useOptionalTranslation, useTranslation, } from "./i18n.js";
 export { kumikoDefaultTranslations } from "./i18n-defaults.js";
 export { InsideDrawerProvider, useInsideDrawer } from "./inside-drawer.js";
 export { PageHeaderCompactProvider, PageHeaderSlotAvailableProvider, usePageHeaderCompact, usePageHeaderSlotAvailable, } from "./page-header-slot.js";
 export type { ActionMenuItemSpec, ActionOverflowMenuProps, AppPrimitives, BannerProps, ButtonProps, CardOptions, CardProps, CardSlots, CopyButtonProps, CorePrimitives, DataTableDateRangeFacet, DataTableFacet, DataTableFacetChip, DataTableProps, DataTableRowAction, DataTableRowActionMode, DataTableRowGrouping, DataTableSort, DataTableSortDir, DialogProps, DrawerProps, EmbeddedListCellType, EmbeddedListColumn, EmbeddedListInputProps, EmbeddedListTotal, FieldCellWidth, FieldProps, FillContainerProps, FooterActionMarker, FooterActionRole, FormProps, FormSectionNavItem, FormWidth, GridCellProps, GridProps, HeadingProps, InputProps, JsonViewProps, LightboxImage, LightboxProps, LinkProps, MetricBandProps, MetricProps, ModalProps, PageHeaderProps, PrimitivesProviderProps, PrimitivesRegistry, ProgressProps, ProgressTone, PromoPanelAction, PromoPanelProps, RuntimeRenderer, SecretRevealProps, SecretRevealValue, SectionProps, ShareButtonProps, StatusBadgeProps, StatusTone, StepBarProps, StickyActionBarProps, StickyPrimaryActionMarker, TabsProps, TextProps, TrailingInputAction, WizardStepGroupProps, } from "./primitives.js";
-export { FOOTER_ACTION_ROLE_PROP, NARROW_LABEL_PROP, PrimitivesProvider, STICKY_PRIMARY_ACTION_PROP, shouldRenderActionsIconOnly, statusToneForOptionTone, statusToneForValue, usePrimitives, } from "./primitives.js";
+export { FOOTER_ACTION_ROLE_PROP, NARROW_LABEL_PROP, PrimitivesProvider, STICKY_PRIMARY_ACTION_PROP, shouldRenderActionsIconOnly, statusToneForOptionTone, statusToneForValue, useOptionalPrimitives, usePrimitives, } from "./primitives.js";
 export type { SessionEndedSignal, SessionEndedSignalProviderProps, } from "./session/session-ended.js";
 export { createSessionEndedSignal, isSessionEndedError, SESSION_ENDED_ERROR_CODES, SessionEndedSignalProvider, useSessionEndedSignal, withSessionEndedDetection, } from "./session/session-ended.js";
 export { buildWhatsAppShareUrl } from "./share-links.js";

package/dist/index.js

@@ -48,11 +48,11 @@ export { entityFromQueryType, useQuery } from "./hooks/use-query.js";
 export { useReportStepComplete } from "./hooks/use-report-step-complete.js";
 export { useStore, useStoreSelector } from "./hooks/use-store.js";
 export { useStreamHandler } from "./hooks/use-stream-handler.js";
-export { createStaticLocaleResolver, FormalityProvider, LocaleProvider, mergeTranslations, translationsByLocaleFromKeys, useFormality, useLocale, useOptionalLocale, useOptionalTranslation, useTranslation, } from "./i18n.js";
+export { createStaticLocaleResolver, FormalityProvider, LocaleProvider, mergeTranslations, translationsByKeyFromLocales, translationsByLocaleFromKeys, useFormality, useLocale, useOptionalLocale, useOptionalTranslation, useTranslation, } from "./i18n.js";
 export { kumikoDefaultTranslations } from "./i18n-defaults.js";
 export { InsideDrawerProvider, useInsideDrawer } from "./inside-drawer.js";
 export { PageHeaderCompactProvider, PageHeaderSlotAvailableProvider, usePageHeaderCompact, usePageHeaderSlotAvailable, } from "./page-header-slot.js";
-export { FOOTER_ACTION_ROLE_PROP, NARROW_LABEL_PROP, PrimitivesProvider, STICKY_PRIMARY_ACTION_PROP, shouldRenderActionsIconOnly, statusToneForOptionTone, statusToneForValue, usePrimitives, } from "./primitives.js";
+export { FOOTER_ACTION_ROLE_PROP, NARROW_LABEL_PROP, PrimitivesProvider, STICKY_PRIMARY_ACTION_PROP, shouldRenderActionsIconOnly, statusToneForOptionTone, statusToneForValue, useOptionalPrimitives, usePrimitives, } from "./primitives.js";
 export { createSessionEndedSignal, isSessionEndedError, SESSION_ENDED_ERROR_CODES, SessionEndedSignalProvider, useSessionEndedSignal, withSessionEndedDetection, } from "./session/session-ended.js";
 export { buildWhatsAppShareUrl } from "./share-links.js";
 export { sortByAccessor } from "./sort-by-accessor.js";

package/dist/primitives.d.ts

@@ -28,7 +28,14 @@ export type FooterActionMarker = {
  *  und sollte mit `disabled` kombiniert werden, wenn die Action wirklich
  *  blockiert bis das Loading durch ist (z.B. async submit). Native-
  *  Impls können den Spinner als Activity-Indicator rendern. */
-export type ButtonProps = {
+export type ButtonProps = ButtonBaseProps & ({
+    readonly children: ReactNode;
+} | {
+    readonly children?: undefined;
+    readonly icon: NavIconKey;
+    readonly ariaLabel: string;
+});
+type ButtonBaseProps = {
     readonly type?: "button" | "submit";
     readonly onClick?: () => void | Promise<void>;
     readonly disabled?: boolean;
@@ -59,11 +66,6 @@ export type ButtonProps = {
      *  die Container-Breite (Karten/Panels). Andere Breiten sind Layout-Sache
      *  des Containers, kein Button-Prop (Kit hält arbiträres Sizing draußen). */
     readonly width?: "full" | "auto";
-    /** Optional for icon-only buttons (`size="icon"` with a resolved `icon`)
-     *  — the icon carries the content then, `ariaLabel` the accessible name.
-     *  Required in practice otherwise: without children and without `icon`
-     *  the button stays empty. */
-    readonly children?: ReactNode;
     readonly testId?: string;
     /** Layout extras — Web merges via cn(), native impls ignore it
      *  (precedent: LinkProps.className). */
@@ -1034,8 +1036,9 @@ export type DialogProps = {
     readonly cancelLabel?: string;
     /** `default` = Confirm primary, `danger` = Confirm danger. */
     readonly variant?: "default" | "danger";
-    /** Which button takes focus on open. Default: Confirm for a bare dialog,
-     *  the browser/Radix default when `children` are present. `"cancel"` for
+    /** Which button takes focus on open. Default: Confirm for a bare dialog
+     *  (Cancel when `variant` is `danger`), the browser/Radix default when
+     *  `children` are present. `"cancel"` for
      *  dialogs where the safe choice must be the one Enter triggers. */
     readonly initialFocus?: "confirm" | "cancel";
     /** Wird gefeuert wenn der User Confirm drückt. Async-Funktion ist
@@ -1270,7 +1273,7 @@ export type StatusBadgeProps = {
     readonly tone?: StatusTone;
     readonly testId?: string;
 };
-export declare function statusToneForOptionTone(tone: SelectOptionTone): StatusTone;
+export declare function statusToneForOptionTone(tone: SelectOptionTone): StatusTone | undefined;
 export declare function statusToneForValue(value: string): StatusTone | undefined;
 /** Compact label/value tile (record-detail metrics band). `testId` is the
  *  tile's own id — the impl derives `${testId}-label`/`${testId}-value` for
@@ -1523,4 +1526,6 @@ export type PrimitivesProviderProps = {
     readonly value: PrimitivesRegistry;
 };
 export declare function PrimitivesProvider({ children, value }: PrimitivesProviderProps): ReactNode;
+/** Like `usePrimitives`, but `undefined` outside a provider — for components that also render standalone. */
+export declare function useOptionalPrimitives(): PrimitivesRegistry | undefined;
 export declare function usePrimitives(): PrimitivesRegistry;

package/dist/primitives.js

@@ -52,8 +52,11 @@ const STATUS_TONE_BY_OPTION_TONE = {
     bad: "bad",
     neutral: "muted",
 };
+// Own-key check: an unknown tone from an untyped definition must yield undefined so callers fall back to the value heuristic.
 export function statusToneForOptionTone(tone) {
-    return STATUS_TONE_BY_OPTION_TONE[tone];
+    return Object.hasOwn(STATUS_TONE_BY_OPTION_TONE, tone)
+        ? STATUS_TONE_BY_OPTION_TONE[tone]
+        : undefined;
 }
 export function statusToneForValue(value) {
     const slug = value
@@ -69,6 +72,10 @@ const PrimitivesContext = createContext(undefined);
 export function PrimitivesProvider({ children, value }) {
     return _jsx(PrimitivesContext.Provider, { value: value, children: children });
 }
+/** Like `usePrimitives`, but `undefined` outside a provider — for components that also render standalone. */
+export function useOptionalPrimitives() {
+    return useContext(PrimitivesContext);
+}
 export function usePrimitives() {
     const registry = useContext(PrimitivesContext);
     if (registry === undefined) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-renderer",
-  "version": "0.352.0",
+  "version": "0.354.0",
   "description": "Platform-agnostic React renderer for Kumiko screens. Contains the shared logic — primitives-contract, hooks, KumikoScreen, navigation & SSE abstractions — that any platform-specific renderer (web, native) composes. No DOM, no EventSource, no react-dom.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -15,9 +15,9 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-framework": "0.352.0",
-    "@cosmicdrift/kumiko-headless": "0.352.0",
-    "@cosmicdrift/kumiko-types": "0.352.0",
+    "@cosmicdrift/kumiko-framework": "0.354.0",
+    "@cosmicdrift/kumiko-headless": "0.354.0",
+    "@cosmicdrift/kumiko-types": "0.354.0",
     "react": "^19.2.6",
     "temporal-polyfill": "^0.3.2",
     "zod": "^4.4.3"
@@ -28,7 +28,7 @@
     "@types/react-dom": "^19.2.3",
     "jsdom": "^29.1.1",
     "react-dom": "^19.2.6",
-    "@cosmicdrift/kumiko-locale-de": "0.352.0"
+    "@cosmicdrift/kumiko-locale-de": "0.354.0"
   },
   "repository": {
     "type": "git",

package/src/changes.json

@@ -1,4 +1,47 @@
 [
+  {
+    "version": "0.354.0",
+    "type": "fix",
+    "title": "Navigate no longer injects the current id into entityEdit targets of another entity",
+    "detail": "Navigate actions no longer inject the current record's id into entityEdit targets of another entity; entityList rowActions now recognise same-entity entityEdit targets across features and open them in UPDATE mode"
+  },
+  {
+    "version": "0.354.0",
+    "type": "improvement",
+    "title": "translationsByKeyFromLocales export and email-template subpath exports",
+    "detail": "Renderer exports translationsByKeyFromLocales (inverse of translationsByLocaleFromKeys); bundled-features exposes the auth-email-password and user-data-rights email-templates as subpath exports"
+  },
+  {
+    "version": "0.354.0",
+    "type": "breaking",
+    "title": "Grid columns is number | \"auto\"",
+    "detail": "Final review batch F: renderer, renderer-web, types\nThe boot validator rejects a `listScreenId` that matches no mounted screen, a `sortable` column that the list cannot sort (entityList: any value; projectionList: `true`) and an authored `urlPrefillFields`. `TreeAction` is a union: exactly one of `screen` or `target`. `Button` without children needs `icon` and `ariaLabel`. `RenderEditControls` gains `next` and `back`, and `controls.submit()` saves on an intermediate wizard step. An actionForm money field with a tenant currency that cannot be loaded shows an error instead of submitting with a guessed EUR. The MFA setup and recovery-code buttons sit below the content. The boot context passes Redis to the delivery service, so `notify` with an `idempotencyKey` dedupes. `user:query:user:detail` skips the tenants label when the tenant feature is not mounted.",
+    "migration": "Pass a number or \"auto\" to Grid columns; other values no longer type-check."
+  },
+  {
+    "version": "0.354.0",
+    "type": "breaking",
+    "title": "Button without children requires icon and ariaLabel",
+    "migration": "A custom wrapper that forwards ButtonProps must pass either children or both icon and ariaLabel."
+  },
+  {
+    "version": "0.354.0",
+    "type": "fix",
+    "title": "RenderEditControls has next and back; submit saves on an intermediate wizard step",
+    "migration": "No action needed. A host that renders its own wizard buttons with hideActions can call controls.next(), controls.back() and controls.submit()."
+  },
+  {
+    "version": "0.354.0",
+    "type": "fix",
+    "title": "actionForm money fields with a tenant currency block the form when the currency cannot be loaded",
+    "migration": "No action needed. secretMint and the reference create dialog keep their fallback currency."
+  },
+  {
+    "version": "0.353.0",
+    "type": "fix",
+    "title": "secretMint with tenant currency waits for the tenant currency in mint and confirm step",
+    "detail": "Number inputs no longer keep a typed prefix, secretMint honours tenant currency, refEntity respects real field types\nA `NumberInput` draft that does not parse (\"12abc\", \"12,5\" on an integer field) now clears the value instead of leaving the last parseable prefix (\"12\") to be submitted. A `secretMint` screen with `currency: { kind: \"tenant\" }` money fields now waits for the tenant currency in both the mint and the confirm step, like `actionForm`, instead of seeding a bare `0`. `refEntity` on an `entityList` column or `entityEdit` field no longer overrides a real non-text entity field (a multi-reference stays multi, a sortable column stays sortable). The Tailwind scan skips compiled `__tests__` in `dist`."
+  },
   {
     "version": "0.352.0",
     "type": "improvement",