@cosmicdrift/kumiko-renderer 0.362.0 → 0.363.0

package/dist/app/content-preview.js

@@ -24,5 +24,8 @@ export function ContentPreview({ content, variables, contentFormat, }) {
     const safeVariables = contentFormat === "rich"
         ? Object.fromEntries(Object.entries(variables).map(([name, value]) => [name, escapeHtmlAttr(value)]))
         : variables;
-    return (_jsx(Editor, { id: id, value: substituteVariables(content, safeVariables), onChange: noop, variables: [], readOnly: true }));
+    // "document" keeps `{{x}}` as-is: substituting it into a button/link href would make the
+    // schema drop that node; variable chips stay visible.
+    const value = contentFormat === "document" ? content : substituteVariables(content, safeVariables);
+    return _jsx(Editor, { id: id, value: value, onChange: noop, variables: [], readOnly: true });
 }

package/dist/app/kumiko-screen.d.ts

@@ -1,5 +1,5 @@
 import type { ScreenDefinition } from "@cosmicdrift/kumiko-framework/ui-types";
-import type { ListRowViewModel, Translate } from "@cosmicdrift/kumiko-headless";
+import type { FormValues, ListRowViewModel, Translate } from "@cosmicdrift/kumiko-headless";
 import { type ReactNode } from "react";
 import { type ListSort } from "../hooks/use-list-url-state.js";
 import type { FeatureSchema } from "./feature-schema.js";
@@ -19,7 +19,7 @@ export { qualifyScreenId };
 export declare function qualifyNavId(featureName: string, navId: string): string;
 export { screenAccessAllows };
 export declare function KumikoScreen({ schema, qn, translate, entityId, onRowClick, onCopyLink, }: KumikoScreenProps): ReactNode;
-export declare function buildInitialValues(fields: Readonly<Record<string, unknown>>, defaultCurrency?: string, moneyCurrencyOverrides?: Readonly<Record<string, string>>): Readonly<Record<string, unknown>>;
+export declare function buildInitialValues(fields: Readonly<Record<string, unknown>>, defaultCurrency?: string, moneyCurrencyOverrides?: Readonly<Record<string, string>>): FormValues;
 export declare function tenantCurrencyMoneyFieldNames(fields: Readonly<Record<string, unknown>>): readonly string[];
 export declare function literalCurrencyOverrides(fields: Readonly<Record<string, unknown>>): Readonly<Record<string, string>>;
 export declare function useMoneyCurrencyOverrides(fields: Readonly<Record<string, unknown>>, tenantFieldNames: readonly string[], fallback: string | undefined): {

package/dist/app/kumiko-screen.js

@@ -4,6 +4,7 @@ import { applyFormatSpec, buildOptionLabels, computeRelatedListSectionViewModel,
 import { resolveActionIcon } from "@cosmicdrift/kumiko-types/action-icon";
 import { TENANT_CURRENCY_CONFIG_KEY } from "@cosmicdrift/kumiko-types/fields";
 import { Temporal } from "@cosmicdrift/kumiko-types/temporal";
+import { isPlainObject, propertyOf } from "@cosmicdrift/kumiko-types/type-guards";
 import { Fragment, useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { QueryOptionLabel, resolveOptionsQueryPayload, } from "../components/query-options-select.js";
 import { extractCreatedId, extractIdField } from "../components/reference-create-dialog.js";
@@ -246,24 +247,29 @@ function useNavigateToCreateFor(schema, entityName, createScreen, createUnavaila
 // — used for a `money` field that declares `currency: { kind: "tenant" }`, so
 // its empty initial value carries the tenant's own currency instead of the
 // entity-wide default.
+function versionOf(record) {
+    const version = record["version"];
+    return typeof version === "number" ? version : 1;
+}
 export function buildInitialValues(fields, defaultCurrency, moneyCurrencyOverrides) {
     const out = {};
     for (const [name, def] of Object.entries(fields)) {
-        const shape = def;
-        if (shape.default !== undefined) {
-            out[name] = shape.default;
+        const type = propertyOf(def, "type");
+        const defaultValue = propertyOf(def, "default");
+        if (defaultValue !== undefined) {
+            out[name] = defaultValue;
             continue;
         }
         // An untouched optional number must not persist as a deliberate 0.
-        if (shape.type === "number" && shape.required !== true) {
+        if (type === "number" && propertyOf(def, "required") !== true) {
             out[name] = undefined;
             continue;
         }
-        if (shape.type === "embedded" && shape.multiple === true) {
+        if (type === "embedded" && propertyOf(def, "multiple") === true) {
             out[name] = [];
             continue;
         }
-        if (shape.type === "money") {
+        if (type === "money") {
             const currency = moneyCurrencyOverrides?.[name] ?? defaultCurrency;
             if (currency !== undefined) {
                 out[name] = { amount: 0, currency };
@@ -271,11 +277,11 @@ export function buildInitialValues(fields, defaultCurrency, moneyCurrencyOverrid
             }
         }
         out[name] =
-            shape.type === "boolean"
+            type === "boolean"
                 ? false
-                : shape.type === "number" || shape.type === "money"
+                : type === "number" || type === "money"
                     ? 0
-                    : shape.type === "multiSelect"
+                    : type === "multiSelect"
                         ? []
                         : "";
     }
@@ -290,9 +296,10 @@ export function buildInitialValues(fields, defaultCurrency, moneyCurrencyOverrid
 export function tenantCurrencyMoneyFieldNames(fields) {
     const names = [];
     for (const [name, def] of Object.entries(fields)) {
-        const shape = def;
-        if (shape.type === "money" && shape.currency?.kind === "tenant")
+        if (propertyOf(def, "type") === "money" &&
+            propertyOf(propertyOf(def, "currency"), "kind") === "tenant") {
             names.push(name);
+        }
     }
     return names;
 }
@@ -327,9 +334,11 @@ const UPDATE_CHANGES_KEY = "changes";
 export function literalCurrencyOverrides(fields) {
     const out = {};
     for (const [name, def] of Object.entries(fields)) {
-        const shape = def;
-        const code = shape.currency?.code;
-        if (shape.type === "money" && shape.currency?.kind === "literal" && code !== undefined) {
+        const currency = propertyOf(def, "currency");
+        const code = propertyOf(currency, "code");
+        if (propertyOf(def, "type") === "money" &&
+            propertyOf(currency, "kind") === "literal" &&
+            typeof code === "string") {
             out[name] = code;
         }
     }
@@ -375,7 +384,8 @@ const CURRENCY_CODE_PATTERN = /^[A-Za-z]{3}$/;
 function isMoneyValue(value) {
     if (typeof value !== "object" || value === null)
         return false;
-    const { amount, currency } = value;
+    const amount = propertyOf(value, "amount");
+    const currency = propertyOf(value, "currency");
     return (typeof amount === "number" &&
         Number.isFinite(amount) &&
         typeof currency === "string" &&
@@ -526,7 +536,7 @@ function coerceEmbeddedListRows(raw, fieldName, schema, maxItems) {
         }
         const cellEntries = [];
         for (const [cellName, cell] of Object.entries(schema)) {
-            const cellValue = candidate[cellName];
+            const cellValue = propertyOf(candidate, cellName);
             if (cellValue === undefined || cellValue === null)
                 continue;
             const coerced = coerceEmbeddedCell(cellValue, cell);
@@ -762,7 +772,7 @@ function EntityEditUpdateBody({ schema, screen, entity, entityId, translate, onC
     // der ursprünglichen version sitzen — der buildPayload würde
     // weiter die stale version stampen und der Konflikt-Recovery wäre
     // kaputt.
-    const recordKey = record.version ?? 1;
+    const recordKey = versionOf(record);
     return (_jsx(EntityEditUpdateForm, { schema: schema, screen: screen, entity: entity, entityId: entityId, record: record, onReload: detailQuery.refetch, ...(translate !== undefined && { translate }), ...(onCopyLink !== undefined && { onCopyLink }), ...(autoReloadOnSave === true && { onSaved: () => void detailQuery.refetch() }), ...(onDeleted !== undefined && { onDeleted }) }, `${entityId}:${recordKey}`));
 }
 function EntityEditUpdateForm({ schema, screen, entity, entityId, record, onReload, translate, onCopyLink, onSaved, onDeleted, }) {
@@ -773,7 +783,7 @@ function EntityEditUpdateForm({ schema, screen, entity, entityId, record, onRelo
     // captured once and stamped into every update payload — if a
     // concurrent writer bumps it, the server returns a version-conflict
     // error and the user reloads.
-    const recordVersion = record.version ?? 1;
+    const recordVersion = versionOf(record);
     const entityDefaultCurrency = entity.defaultCurrency ?? "EUR";
     // A money field declaring `currency: { kind: "tenant" }` (fw#2933) resolves
     // its empty-value currency from the tenant-settings config key instead of
@@ -800,9 +810,7 @@ function EntityEditUpdateForm({ schema, screen, entity, entityId, record, onRelo
     // damit sie beim Edit den Bestand zeigen statt write-only zu sein.
     const extensionInitialValues = useMemo(() => {
         const cf = record["customFields"];
-        return cf !== null && typeof cf === "object" && !Array.isArray(cf)
-            ? cf
-            : undefined;
+        return isPlainObject(cf) ? cf : undefined;
     }, [record]);
     const writeCommand = entityWriteCommand(schema.featureName, screen.entity, "update");
     const deleteCommand = entityWriteCommand(schema.featureName, screen.entity, "delete");
@@ -1217,8 +1225,8 @@ function EntityListBody({ schema, screen, entity, translate, onRowClick, }) {
     const filterPayload = useMemo(() => buildFilterPayload(urlState.filters, (field) => {
         // entity.fields ist am Renderer-Layer schwach getypt (vom Schema
         // deserialisiert) — Boundary-Cast wie buildInitialValues.
-        const def = entity.fields[field];
-        return def?.type;
+        const type = propertyOf(entity.fields[field], "type");
+        return typeof type === "string" ? type : undefined;
     }), [urlState.filters, entity.fields]);
     // Entity-only additions (screen.filter, faceted filters) layer on top of
     // the shared buildListQueryPayload — projectionList has neither.
@@ -2379,7 +2387,7 @@ function navigateAfterRedirect(options) {
 function overlayUpdatedProjection(record, resultData) {
     if (typeof resultData !== "object" || resultData === null)
         return record;
-    const projection = resultData.data;
+    const projection = propertyOf(resultData, "data");
     if (typeof projection !== "object" || projection === null)
         return record;
     return { ...record, ...projection };
@@ -2628,7 +2636,7 @@ function ConfigEditBody({ schema, screen, translate, }) {
                 out[shortName] = defaults[shortName];
                 continue;
             }
-            const ftype = fieldDef.type;
+            const ftype = propertyOf(fieldDef, "type");
             // Field-Type-Coercion: config-Werte sind string|number|boolean,
             // aber der Form-State erwartet das passende Field-Native-Type.
             if (ftype === "number" || ftype === "money") {

package/dist/app/secret-mint-body.js

@@ -1,4 +1,5 @@
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { propertyOf } from "@cosmicdrift/kumiko-types/type-guards";
 import { useCallback, useMemo, useRef, useState } from "react";
 import { RenderEdit } from "../components/render-edit.js";
 import { useTranslation } from "../i18n.js";
@@ -14,7 +15,7 @@ function extractRevealValue(data, field) {
         return undefined;
     if (!Object.hasOwn(data, field))
         return undefined;
-    return data[field];
+    return propertyOf(data, field);
 }
 function extractCarriedValues(data, carry) {
     const carried = {};

package/dist/components/reference-create-dialog.js

@@ -1,4 +1,5 @@
 import { jsx as _jsx } from "react/jsx-runtime";
+import { propertyOf } from "@cosmicdrift/kumiko-types/type-guards";
 import { useMemo } from "react";
 import { buildInitialValues, tenantCurrencyMoneyFieldNames, useMoneyCurrencyOverrides, } from "../app/kumiko-screen.js";
 import { toKebab } from "../app/qn.js";
@@ -24,7 +25,7 @@ export function extractIdField(data, field) {
         return undefined;
     if (!Object.hasOwn(data, field))
         return undefined;
-    const value = data[field];
+    const value = propertyOf(data, field);
     return typeof value === "string" ? value : undefined;
 }
 export function extractCreatedId(data) {

package/dist/components/render-edit.js

@@ -1,6 +1,7 @@
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { evalFieldCondition, isFieldsEditSection, normalizeEditField, PROJECTION_DETAIL_ENTITY, sectionFieldSpecs, } from "@cosmicdrift/kumiko-framework/ui-types";
 import { computeEditViewModel, groupIssuesByPath, relevantFieldIssues, zodErrorToFieldIssues, } from "@cosmicdrift/kumiko-headless";
+import { propertyOf } from "@cosmicdrift/kumiko-types/type-guards";
 import { RenderEditActionButton } from "./render-edit-action-button.js";
 import { AllFieldsRequiredProvider } from "./render-field.js";
 import { useActionMenuItems } from "./use-action-menu-items.js";
@@ -49,9 +50,13 @@ function newDraftPrefix(screenId) {
 // `crypto.randomUUID` is missing in non-secure contexts and React Native/Hermes
 // without a polyfill — guard like dispatcher-live.ts's generateRequestId.
 function mintDraftId() {
-    const c = globalThis.crypto;
-    if (typeof c?.randomUUID === "function")
-        return c.randomUUID();
+    const webCrypto = propertyOf(globalThis, "crypto");
+    const randomUUID = propertyOf(webCrypto, "randomUUID");
+    if (typeof randomUUID === "function") {
+        const id = Reflect.apply(randomUUID, webCrypto, []);
+        if (typeof id === "string")
+            return id;
+    }
     return `draft-${Math.random().toString(36).slice(2)}${Math.random().toString(36).slice(2)}`;
 }
 // End-to-end renderer für einen entityEdit screen. Rendert aus-
@@ -551,7 +556,7 @@ export function RenderEdit(props) {
                 // was in flight — their input wins over the stored draft.
                 if (controller.getSnapshot().isDirty || hasNavigatedRef.current)
                     return;
-                // @cast-boundary form-draft blob: `values` round-trips through an opaque
+                // @cast-boundary form-values draft blob: `values` round-trips through an opaque
                 // jsonb column and comes back untyped.
                 controller.setValues(draft.values);
                 setRawStep(Math.max(draft.stepIndex, 0));

package/dist/components/render-field.js

@@ -1,6 +1,7 @@
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { isFormatSpec, SYSTEM_REFERENCE_LABELS, } from "@cosmicdrift/kumiko-framework/ui-types";
 import { applyFormatSpec, currencyDecimals, } from "@cosmicdrift/kumiko-headless";
+import { propertyOf } from "@cosmicdrift/kumiko-types/type-guards";
 import { createContext, useCallback, useContext, useMemo, useState } from "react";
 import { useAppFeatures } from "../app/app-features-context.js";
 import { useColumnRenderer } from "../app/column-renderers.js";
@@ -159,7 +160,7 @@ function ReferenceInput({ field, id, hasError, onChange, Input, featureName, })
         }
         setCreatedWithoutIdWarning(false);
         if (isMultiple) {
-            const current = Array.isArray(field.value) ? field.value : [];
+            const current = stringArrayOf(field.value);
             onChange([...current, newId]);
         }
         else {
@@ -194,9 +195,7 @@ function ReferenceInput({ field, id, hasError, onChange, Input, featureName, })
     };
     const createDialog = (_jsxs(_Fragment, { children: [canCreate && refCreateScreen && refEntityDef && (_jsx(ReferenceCreateDialog, { open: createOpen, onClose: () => setCreateOpen(false), onCreated: handleCreated, featureName: refFeature, screen: refCreateScreen, entity: refEntityDef })), createdWithoutIdWarning && (_jsx(Banner, { variant: "error", children: t("kumiko.field.reference-created-no-id") }))] }));
     if (isMultiple) {
-        const arrayValue = Array.isArray(field.value)
-            ? field.value
-            : [];
+        const arrayValue = stringArrayOf(field.value);
         return (_jsxs(_Fragment, { children: [_jsx(Input, { kind: "combobox", ...baseInputProps, multiple: true, value: arrayValue, onChange: (v) => onChange(v) }), createDialog] }));
     }
     const stringValue = field.value === undefined || field.value === null ? "" : String(field.value);
@@ -228,7 +227,7 @@ function FieldRendererOutput({ field, renderer, row, appLocale, }) {
         // when set; coalesce undefined (spread override) back to appLocale (#2332).
         return (_jsx(Text, { testId: `field-value-${field.field}`, children: applyFormatSpec({
                 ...renderer,
-                locale: renderer.locale ?? appLocale,
+                locale: stringPropertyOf(renderer, "locale") ?? appLocale,
             }, field.value, t) }));
     }
     if (componentName !== undefined) {
@@ -254,9 +253,7 @@ function ReadOnlyReferenceValue({ field, featureName, }) {
         limit: REFERENCE_COMBOBOX_LIMIT,
     });
     const ids = isMultiple
-        ? Array.isArray(field.value)
-            ? field.value
-            : []
+        ? stringArrayOf(field.value)
         : typeof field.value === "string" && field.value !== ""
             ? [field.value]
             : [];
@@ -354,7 +351,7 @@ function renderInput({ field, id, hasError, onChange, Input, appLocale, Banner,
         case "tz":
             return (_jsx(Input, { kind: "tz", ...common, value: stringValue(field.value), onChange: (v) => onChange(v) }));
         case "multiSelect": {
-            const arrayValue = Array.isArray(field.value) ? field.value : [];
+            const arrayValue = stringArrayOf(field.value);
             const renderMultiSelect = (options) => field.display === "checkboxes" ? (_jsx(MultiSelectCheckboxes, { field: field, id: id, options: options, value: arrayValue, onChange: (v) => onChange(v) })) : (_jsx(Input, { kind: "combobox", ...common, multiple: true, value: arrayValue, onChange: (v) => onChange(v), options: options }));
             if (field.selectOptionsAvailabilityQuery !== undefined && field.readOnly !== true) {
                 return (_jsx(AvailabilityOptionsMultiSelect, { field: field, query: field.selectOptionsAvailabilityQuery.query, currentValues: arrayValue, children: renderMultiSelect }));
@@ -474,13 +471,20 @@ function resolveNumberUnit(unit, row) {
     const trimmed = sibling.trim();
     return trimmed.length > 0 && trimmed.length <= MAX_SIBLING_UNIT_LENGTH ? trimmed : undefined;
 }
+function stringArrayOf(value) {
+    return Array.isArray(value) && value.every((item) => typeof item === "string") ? value : [];
+}
+function stringPropertyOf(value, key) {
+    const property = propertyOf(value, key);
+    return typeof property === "string" ? property : undefined;
+}
 function moneyMinorValue(v, currency) {
     if (v === undefined || v === null || v === "")
         return "";
     if (typeof v === "number")
         return Math.round(v * 10 ** currencyDecimals(currency));
     if (typeof v === "object") {
-        const amount = v.amount;
+        const amount = propertyOf(v, "amount");
         if (typeof amount === "number")
             return Math.round(amount * 10 ** currencyDecimals(currency));
     }
@@ -498,11 +502,11 @@ function moneyPayload(minorUnits, currency) {
 // (noch nicht gesetzt) → "" als Empty-Sentinel, analog money/timestamp.
 function locatedValue(v) {
     if (v !== null && typeof v === "object" && "at" in v && "tz" in v) {
-        const o = v;
+        const utc = propertyOf(v, "utc");
         return {
-            at: typeof o.at === "string" ? o.at : "",
-            tz: typeof o.tz === "string" ? o.tz : "",
-            ...(typeof o.utc === "string" && { utc: o.utc }),
+            at: typeof v.at === "string" ? v.at : "",
+            tz: typeof v.tz === "string" ? v.tz : "",
+            ...(typeof utc === "string" && { utc }),
         };
     }
     return "";

package/dist/components/write-form-section.js

@@ -14,11 +14,10 @@ function buildWriteFormSchema(fields) {
         .object({})
         .passthrough()
         .superRefine((values, ctx) => {
-        const record = values;
         for (const field of fields) {
             if (field.readOnly || !field.visible || !field.required)
                 continue;
-            if (isPresent(record[field.field]))
+            if (isPresent(values[field.field]))
                 continue;
             ctx.addIssue({
                 code: "custom",

package/dist/i18n-defaults.js

@@ -261,6 +261,7 @@ export const kumikoDefaultTranslations = {
         "errors.internal": "Something went wrong. Please try again later.",
         "errors.rate_limited": "Too many requests. Please try again shortly.",
         "errors.rate_limit_unavailable": "Rate limiting is temporarily unavailable. Please try again shortly.",
+        "errors.puppeteer_unavailable": "The PDF service is not reachable. PDFs cannot be created right now.",
         "errors.cap.exceeded": "Limit reached. Upgrade your plan or wait for the next period.",
         "errors.download.urlMissing": "Download unavailable — please try again.",
         "auth.errors.originNotAllowed": "Requests from this origin are not allowed.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-renderer",
-  "version": "0.362.0",
+  "version": "0.363.0",
   "description": "Platform-agnostic React renderer for Kumiko screens. Contains the shared logic — primitives-contract, hooks, KumikoScreen, navigation & SSE abstractions — that any platform-specific renderer (web, native) composes. No DOM, no EventSource, no react-dom.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -15,9 +15,9 @@
     }
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-framework": "0.362.0",
-    "@cosmicdrift/kumiko-headless": "0.362.0",
-    "@cosmicdrift/kumiko-types": "0.362.0",
+    "@cosmicdrift/kumiko-framework": "0.363.0",
+    "@cosmicdrift/kumiko-headless": "0.363.0",
+    "@cosmicdrift/kumiko-types": "0.363.0",
     "react": "^19.2.6",
     "temporal-polyfill": "^0.3.2",
     "zod": "^4.4.3"
@@ -28,7 +28,7 @@
     "@types/react-dom": "^19.2.3",
     "jsdom": "^29.1.1",
     "react-dom": "^19.2.6",
-    "@cosmicdrift/kumiko-locale-de": "0.362.0"
+    "@cosmicdrift/kumiko-locale-de": "0.363.0"
   },
   "repository": {
     "type": "git",

package/src/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.363.0",
+    "type": "improvement",
+    "title": "propertyOf type guard and fewer unchecked casts in the UI packages",
+    "detail": "\"@cosmicdrift/kumiko-types/type-guards\" exports propertyOf, which reads one property off an unknown value. Headless, renderer, renderer-web and dispatcher-live replace unchecked as-casts and globalThis probes with it and with narrowing. Behavior stays the same for well-formed input; a format spec, upload response or stream event with a wrongly typed property is now ignored instead of passed through."
+  },
   {
     "version": "0.362.0",
     "type": "improvement",