@cosmicdrift/kumiko-types 0.373.0 → 0.377.0

package/dist/feature.d.ts

@@ -116,10 +116,12 @@ export type BootCheckContext = {
 };
 export type BootCheckFn = (ctx: BootCheckContext) => void;
 /** runProdApp options a stack can depend on; runProdApp checks the set at boot. */
-export type BootOptionName = "mail" | "kmsMode" | "fileStorage" | "billing" | "demoMode" | "seeds" | "signals" | "rateLimit";
+export type BootOptionName = "mail" | "kmsMode" | "fileStorage" | "billing" | "featureToggles" | "demoMode" | "seeds" | "signals" | "rateLimit";
 export type StackBootRequirement = {
     readonly stack: string;
     readonly options: readonly BootOptionName[];
+    /** `"warn"`: a missing option logs a boot warning instead of aborting. Default `"error"`. */
+    readonly severity?: "error" | "warn";
 };
 export type FeatureDefinition = {
     readonly name: string;

package/dist/fields.d.ts

@@ -119,8 +119,9 @@ export type TextFieldDef = {
      *  "high" on the directly-dispatched entry handler; a revert doesn't undo a
      *  run that already read the compromised value. See irreversible-operation-gate. */
     readonly readAsInstruction?: boolean;
-    /** "password" is a pure render hint (masked input) — no storage semantics. */
-    readonly format?: "email" | "url" | "phone" | "password";
+    /** "password" is a pure render hint (masked input) — no storage semantics.
+     *  "month" stores `YYYY-MM`: month picker in the form, format enforced on write. */
+    readonly format?: "email" | "url" | "phone" | "password" | "month";
     readonly default?: string;
     readonly access?: FieldAccess;
     /** Mehrzeiliger Text — DefaultInput rendert dann ein <textarea> statt

package/dist/handlers.d.ts

@@ -230,6 +230,9 @@ type SharedContextFields = {
      * absent for r.systemScope() handlers and without a db.
      */
     readonly forTenant?: (tenantId: TenantId) => TenantWriteTarget;
+    /** Mints the per-request `ctx.config`; set by the boot (`addConfigAccessorFactory`) from the effective `configResolver`, overriding an app-supplied value. */
+    readonly configAccessorFactory?: ConfigAccessorFactory;
+    /** @deprecated Use `configAccessorFactory`; the underscore name is removed in the next major. */
     readonly _configAccessorFactory?: ConfigAccessorFactory;
     readonly configEncryption?: import("./envelope-cipher-types.ts").EnvelopeCipher;
     readonly rateLimit?: import("./rate-limit-types.ts").RateLimitResolver;
@@ -290,7 +293,18 @@ export type AppContext = SharedContextFields & {
 };
 export type HandlerContext<TMap extends object = KumikoEventTypeMap> = SharedContextFields & {
     readonly db: TenantDb;
+    /**
+     * Same tenant scoping as `db`, but never bound to the handler's tx: writes through it survive
+     * a rollback. `undefined` only in the denial phases (member-resolution, before-transaction)
+     * and in platform-metering tenant mode; narrow with `hasOutsideTransactionDb(ctx)` or take it
+     * via `requireOutsideTransactionDb(ctx)` (`@cosmicdrift/kumiko-framework/db`). For
+     * r.systemScope() handlers it is a fail-closed Proxy; use `systemDb.outsideTransaction`.
+     */
     readonly dbOutsideTransaction: TenantDb | undefined;
+    /**
+     * @deprecated Use `runInOwnTransaction(ctx.dbOutsideTransaction, fn)` from
+     * `@cosmicdrift/kumiko-framework/db`; removed in the next major.
+     */
     readonly outsideTransaction?: <T>(fn: (db: TenantDb) => Promise<T>) => Promise<T>;
     readonly systemDb?: UncheckedSystemDb;
     readonly registry: Registry;
@@ -320,8 +334,21 @@ export type HandlerContext<TMap extends object = KumikoEventTypeMap> = SharedCon
     readonly write: (qn: string, payload: unknown) => Promise<WriteResult>;
     readonly writeAs: (user: SessionUser, qn: string, payload: unknown) => Promise<WriteResult>;
     readonly hasFeature: (featureName: string) => Promise<boolean>;
+    /**
+     * Default append: a typed domain event on one aggregate stream in the current tx. The runtime
+     * bumps the stream version and fires matching projections in the same transaction. A version
+     * conflict throws and poisons the transaction.
+     */
     readonly appendEvent: AppendEventFn<TMap>;
+    /**
+     * Untyped append (`payload: unknown`) with the same runtime as `appendEvent`. Only for
+     * migrations and upcasters, where the event type is not knowable at compile time.
+     */
     readonly unsafeAppendEvent: UnsafeAppendEventFn;
+    /**
+     * Optimistic append: runs in a savepoint and returns a version conflict as a result instead of
+     * throwing, so the handler can continue after losing a race on the same aggregate stream.
+     */
     readonly tryAppendEvent: TryAppendEventFn;
     readonly fetchForWriting: (args: FetchForWritingArgs) => Promise<AggregateStreamHandle>;
     readonly loadAggregate: (aggregateId: string, options?: {
@@ -375,8 +402,13 @@ export type JobContext = SharedContextFields & {
     readonly triggerName?: string;
     readonly triggerEvent?: JobTriggerEvent;
     readonly _tenantId?: TenantId;
-    readonly _userId?: string | undefined;
 };
+/**
+ * What a provider plugin (`build`, `capabilitiesFor`, ...) may read. Both write/query handlers
+ * and jobs can produce one (`providerPluginContextFromHandler`, `providerPluginContextFromJob`),
+ * so a plugin never depends on a request-bound field.
+ */
+export type ProviderPluginContext = Pick<HandlerContext, "db" | "dbOutsideTransaction" | "systemDb" | "registry" | "user" | "log" | "triggeredBy" | "config" | "secrets">;
 export type WriteHandlerFn<TPayload = unknown, TData = unknown> = (event: WriteEvent<TPayload>, context: HandlerContext) => Promise<WriteResult<TData>>;
 export type QueryHandlerFn<TPayload = unknown, TResult = unknown> = (query: QueryEvent<TPayload>, context: HandlerContext) => Promise<TResult>;
 export type StreamHandlerFn<TPayload = unknown, TChunk = unknown> = (query: QueryEvent<TPayload>, context: HandlerContext) => AsyncGenerator<TChunk>;

package/dist/nav-icon.js

@@ -4,7 +4,7 @@
 // r.nav()/r.screen()/config-mask/button call site instead of a silent
 // missing-icon at runtime.
 //
-// The renderer-web NAV_ICONS map (packages/renderer-web/src/icons.tsx) is
+// The renderer/web NAV_ICONS map (packages/renderer/src/web/icons.tsx) is
 // checked against this same union via `satisfies`, so the two can't drift —
 // add a key here only together with its lucide-react entry there, and vice
 // versa.

package/dist/screen.d.ts

@@ -167,7 +167,7 @@ export type RowActionDisplay = "button" | "link" | "icon" | "responsive";
  *  the rest in a kebab menu — except actions with an explicit `display`, which
  *  stay inline. `"inline"`: every action inline, no kebab. */
 export type RowActionMode = "adaptive" | "inline";
-export type RowAction = RowActionWriteHandler | RowActionNavigate | RowActionDrawer;
+export type RowAction = RowActionWriteHandler | RowActionNavigate | RowActionDrawer | RowActionClientAction;
 export type RowActionWriteHandler = {
     /** Default für RowActions ohne explizit gesetzten `kind` —
      *  Backwards-kompatible Form. Kann auch explizit gesetzt werden. */
@@ -200,7 +200,7 @@ export type RowActionWriteHandler = {
     readonly style?: "primary" | "secondary" | "danger";
     /** Overrides the id-based default icon (see ACTION_ICON_BY_ID in
      *  kumiko-renderer) — closed IconKey vocabulary into the ICONS registry
-     *  (renderer-web), analogous to EditFieldSpec.icon. */
+     *  (renderer/web), analogous to EditFieldSpec.icon. */
     readonly icon?: IconKey;
     /** Inline render form in the row-action column — see `RowActionDisplay`. */
     readonly display?: RowActionDisplay;
@@ -244,7 +244,7 @@ export type RowActionNavigateBase = {
     readonly rowClick?: boolean;
     /** Overrides the id-based default icon (see ACTION_ICON_BY_ID in
      *  kumiko-renderer) — closed IconKey vocabulary into the ICONS registry
-     *  (renderer-web), analogous to EditFieldSpec.icon. */
+     *  (renderer/web), analogous to EditFieldSpec.icon. */
     readonly icon?: IconKey;
     /** Inline render form in the row-action column — see `RowActionDisplay`. */
     readonly display?: RowActionDisplay;
@@ -282,7 +282,7 @@ export type RowActionDrawer = {
     readonly style?: "primary" | "secondary" | "danger";
     /** Overrides the id-based default icon (see ACTION_ICON_BY_ID in
      *  kumiko-renderer) — closed IconKey vocabulary into the ICONS registry
-     *  (renderer-web), analogous to EditFieldSpec.icon. */
+     *  (renderer/web), analogous to EditFieldSpec.icon. */
     readonly icon?: IconKey;
     /** Inline render form in the row-action column — see `RowActionDisplay`. */
     readonly display?: RowActionDisplay;
@@ -293,6 +293,37 @@ export type RowActionDrawer = {
     /** Line under the drawer heading (i18n key or a bare `{name}` template),
      *  resolved like `title`. */
     readonly subtitle?: string;
+    /** Clicking the row opens this drawer with that row's `params`. At most one
+     *  `rowClick` action (navigate or drawer) per list; rejected on
+     *  projectionDetail header actions, like navigate's. */
+    readonly rowClick?: boolean;
+};
+export type RowActionClientAction = {
+    readonly kind: "clientAction";
+    readonly id: string;
+    readonly label: string;
+    /** Registered client handler name, `<feature>:<kebab>`, e.g.
+     *  "auth-email-password:request-password-reset". Resolved when the action is
+     *  triggered; a name no client feature registered shows an error toast. */
+    readonly action: string;
+    /** Payload handed to the handler, picked from the row (or the shown record).
+     *  Default `{ id: row.id }`, like a writeHandler. */
+    readonly payload?: RowFieldExtractor;
+    /** i18n key for the confirm dialog description. */
+    readonly confirm?: string;
+    /** i18n key for the confirm button, default `label`. */
+    readonly confirmLabel?: string;
+    /** Conditional visibility per row. */
+    readonly visible?: FieldCondition;
+    /** Visual style. "danger" forces a confirm dialog, like a writeHandler. */
+    readonly style?: "primary" | "secondary" | "danger";
+    /** Overrides the id-based default icon, see `RowActionWriteHandler.icon`. */
+    readonly icon?: IconKey;
+    /** Inline render form in the row-action column — see `RowActionDisplay`. */
+    readonly display?: RowActionDisplay;
+    /** i18n key of the toast shown after the handler reported `{ ok: true }`
+     *  (default `kumiko.clientAction.success`). */
+    readonly successMessage?: string;
 };
 export type ToolbarAction = {
     readonly kind: "navigate";
@@ -692,18 +723,30 @@ export type DashboardDateParam = {
     readonly kind: "date";
     readonly atMs: number;
 };
+/** Epoch ms, rendered relative to now ("5 minutes ago", "in 30 seconds") in the
+ *  user locale; the text keeps ticking while it is on screen. */
+export type DashboardRelativeTimeParam = {
+    readonly kind: "relativeTime";
+    readonly atMs: number;
+};
 /** Nested DashboardI18nText params resolve first (e.g. a duration "{years} {months}"
  *  with one plural key each); numbers stay raw so plural rules can read `count`. */
-export type DashboardTextParam = string | number | DashboardI18nText | DashboardMoneyParam | DashboardDateParam;
+export type DashboardTextParam = string | number | DashboardI18nText | DashboardMoneyParam | DashboardDateParam | DashboardRelativeTimeParam;
 /** Plain string is displayed as-is; DashboardI18nText is translated by the renderer. */
 export type DashboardText = string | DashboardI18nText;
 /** Chart/stat values are minor units, formatted with the user locale. */
-export type DashboardValueFormat = {
+export type DashboardCurrencyFormat = {
     readonly kind: "currency";
     readonly currency: string;
     /** Defaults to the currency's own decimals. */
     readonly fractionDigits?: number;
 };
+/** The stat value is an epoch ms timestamp, shown relative to now and kept current. */
+export type DashboardRelativeTimeFormat = {
+    readonly kind: "relativeTime";
+};
+/** Stat panels take both formats; chart panels only the currency one. */
+export type DashboardValueFormat = DashboardCurrencyFormat | DashboardRelativeTimeFormat;
 export type DashboardPanelQueryOptions = {
     /** Static, author-set query parameters merged on top of the screen's
      *  dynamic filterParams — lets a panel pin a value (e.g. a status facet)
@@ -737,7 +780,8 @@ export type DashboardStatPanel = DashboardPanelQueryOptions & DashboardPanelGate
     readonly valueField: string;
     readonly subField?: string;
     readonly toneField?: string;
-    /** Formats a numeric value as currency (minor units); ignored for string values. The sparkline is not formatted. */
+    /** Formats a numeric value as currency (minor units) or, with `relativeTime`, as
+     *  a ticking "5 minutes ago" from epoch ms; ignored for string values. The sparkline is not formatted. */
     readonly valueFormat?: DashboardValueFormat;
     /** Fixed tone when `toneField` is unset or yields none; not applied while the value is 0. */
     readonly tone?: DashboardStatTone;
@@ -802,7 +846,9 @@ export type DashboardChartPanel = DashboardPanelQueryOptions & DashboardPanelEmp
     readonly seriesColors?: Readonly<Record<string, string>>;
     /** Formats values as currency (minor units): y ticks, legend totals and tooltips on
      *  stacked-bars/segment-bars/stacked-area, only the y ticks on timeseries. */
-    readonly valueFormat?: DashboardValueFormat;
+    readonly valueFormat?: DashboardCurrencyFormat;
+    /** i18n key of a unit label. Only for chart "timeseries": shown once above the y ticks instead of on every tick. */
+    readonly unit?: string;
     /** Only for chart "stacked-area": fixed width per bucket, plot scrolls horizontally. */
     readonly scrollable?: boolean;
     /** Only for chart "stacked-area": marker `kind` -> look. Markers without a
@@ -849,6 +895,7 @@ export type DashboardFeedPanel = DashboardPanelQueryOptions & DashboardPanelEmpt
     readonly label: string;
     readonly query: string;
 };
+export type DashboardProgressTone = "default" | "danger";
 export type DashboardProgressListPanel = DashboardPanelQueryOptions & DashboardPanelEmptyState & DashboardPanelGate & {
     readonly kind: "progress-list";
     readonly id: string;
@@ -860,6 +907,32 @@ export type DashboardCustomPanel = {
     readonly id: string;
     readonly component: PlatformComponent;
 };
+export type DashboardTextBlock = {
+    readonly kind: "heading";
+    readonly text: string;
+} | {
+    readonly kind: "paragraph";
+    readonly text: string;
+    /** Default "muted", like body copy inside panels. */
+    readonly emphasis?: "muted" | "strong";
+} | {
+    readonly kind: "list";
+    readonly items: readonly string[];
+} | {
+    readonly kind: "code";
+    readonly code: string;
+} | {
+    readonly kind: "hint";
+    readonly text: string;
+};
+export type DashboardTextPanel = DashboardPanelGate & {
+    readonly kind: "text";
+    readonly id: string;
+    /** Panel title (i18n key). */
+    readonly label?: string;
+    readonly span?: DashboardPanelSpan;
+    readonly blocks: readonly DashboardTextBlock[];
+};
 export type DashboardPanelVisibility = {
     readonly query: string;
     readonly field: string;
@@ -872,13 +945,17 @@ export type DashboardScreenPanel = {
     readonly screen: string;
     readonly label?: string;
     readonly visibleWhen?: DashboardPanelVisibility;
+    /** Same-feature short id or cross-feature QN `<feature>:screen:<id>` embedded in this
+     *  panel's place when `visibleWhen` is unmet or its query fails (nothing while it loads).
+     *  Needs `visibleWhen`; the target must not have a `visibleWhen` of its own. */
+    readonly fallback?: string;
     /** Render the embedded form without its own card frame and padding, aligned to
      *  the dashboard's page grid like a standalone settings screen. Default false
      *  (framed card); set for panels whose body is a settings-list form, where a
      *  card inside the page would double the inset. */
     readonly chromeless?: boolean;
 };
-export type DashboardPanelDefinition = DashboardStatPanel | DashboardStatGroupPanel | DashboardChartPanel | DashboardListPanel | DashboardFeedPanel | DashboardProgressListPanel | DashboardCustomPanel | DashboardScreenPanel;
+export type DashboardPanelDefinition = DashboardStatPanel | DashboardStatGroupPanel | DashboardChartPanel | DashboardListPanel | DashboardFeedPanel | DashboardProgressListPanel | DashboardTextPanel | DashboardCustomPanel | DashboardScreenPanel;
 export type DashboardFilterDefinition = {
     readonly id: string;
     readonly label: string;
@@ -906,6 +983,30 @@ export type DashboardScopeDefinition = {
     readonly badge: string;
     readonly notice?: string;
 };
+/** Minimum polling interval of `DashboardScreenDefinition.refresh`; shorter values are rejected
+ *  at boot (`seconds`) or raised at runtime (`field`). */
+export declare const DASHBOARD_MIN_REFRESH_SECONDS = 5;
+export type DashboardRecordBinding = {
+    /** URL search param carrying the record id. Without it the dashboard shows a
+     *  hint instead of its panels and runs no query. */
+    readonly param: string;
+    /** Key of the id in each panel query payload. Default: `param`. */
+    readonly payloadKey?: string;
+    /** Optional query for the record row (QN). It receives `{ [payloadKey]: id }`
+     *  and returns a flat row; `actions` take that row as their input and
+     *  `refresh.field` and `titleField` read from it. */
+    readonly query?: string;
+    /** Field of the record row shown as the page title. Needs `query`. */
+    readonly titleField?: string;
+};
+/** Polling of the record and all panel queries, never faster than
+ *  DASHBOARD_MIN_REFRESH_SECONDS. `field` reads the seconds from the record row
+ *  (needs `record.query`), so a monitor can be polled at its own check interval. */
+export type DashboardRefresh = {
+    readonly seconds: number;
+} | {
+    readonly field: string;
+};
 export type DashboardScreenDefinition = {
     readonly id: string;
     readonly type: "dashboard";
@@ -921,6 +1022,14 @@ export type DashboardScreenDefinition = {
     /** Same-feature short id or cross-feature QN `<feature>:screen:<id>` shown when `visibleWhen` is unmet (default: standard notice). */
     readonly fallback?: string;
     readonly panels: readonly DashboardPanelDefinition[];
+    /** Binds the dashboard to one record via a URL search param, see DashboardRecordBinding. */
+    readonly record?: DashboardRecordBinding;
+    /** Header actions on the bound record (writeHandler, navigate, clientAction).
+     *  The row is the `record.query` row, or `{ id, [payloadKey]: id }` without a
+     *  query. After a success the record and all panels refetch. Needs `record`;
+     *  no drawer, redirect or rowClick. */
+    readonly actions?: readonly RowAction[];
+    readonly refresh?: DashboardRefresh;
     readonly filter?: DashboardFilterDefinition;
     /** Segmented control in the toolbar; the value lives in URL search param
      *  `id` and is merged into EVERY panel query (also ignoreScreenFilter ones). */
@@ -947,12 +1056,27 @@ export type EditFieldSpec = string | {
      *  rendering are unchanged. */
     readonly submit?: false;
     /** Prefix icon on the input — closed FieldIconKey vocabulary into
-     *  the FIELD_ICONS registry (renderer-web), analogous to
+     *  the FIELD_ICONS registry (renderer/web), analogous to
      *  `ScreenNavSugar.icon` / NavIconKey. Only takes effect for
      *  single-line `type: "text"` and `"number"` — a `text` field with
      *  `multiline` routes to a textarea (no icon slot), and other input
      *  kinds (select, combobox, date, …) silently ignore the key. */
     readonly icon?: FieldIconKey;
+    /** Input placeholder (i18n key, falls back to the literal). Only for
+     *  single-line text, number and textarea inputs; other kinds ignore it. */
+    readonly placeholder?: string;
+    /** Static text shown before the input (i18n key, falls back to the
+     *  literal), or `{ field }` for the current form value of another field
+     *  (a hidden field carrying e.g. a base domain). Only for single-line
+     *  text and number inputs; other kinds ignore it. */
+    readonly prefix?: FieldAffix;
+    /** Same as `prefix`, shown after the input. */
+    readonly suffix?: FieldAffix;
+    /** Button beside the input that runs a query and writes one scalar of
+     *  its result into this field. Also offered on a readOnly field, where
+     *  the value can only come from the suggestion. Only for single-line
+     *  text and number inputs; other kinds ignore it. */
+    readonly fillAction?: FieldFillAction;
     /** Marks this field as a reference lookup instead of a plain value —
      *  for projectionDetail fields, which have no `EntityDefinition` to
      *  carry a real `reference` field type. Same target convention as
@@ -971,6 +1095,20 @@ export type EditFieldSpec = string | {
      *  field `default`, it is not applied server-side. */
     readonly prefill?: EditFieldPrefill;
 };
+export type FieldAffix = string | {
+    readonly field: string;
+};
+export type FieldFillAction = {
+    /** i18n key (falls back to the literal) of the button label. */
+    readonly label: string;
+    /** Qualified query name, run with the current form values picked by `params`. */
+    readonly query: string;
+    /** Key in the query result written into the field; the value must be a
+     *  string or a number, anything else counts as a failed fill. */
+    readonly field: string;
+    /** Form fields sent as the query payload (none: an empty payload). */
+    readonly params?: RowFieldExtractor;
+};
 export type EmbeddedListEditSpec = {
     /** Sub-fields shown as read-only cells; every other cell stays editable. */
     readonly readOnlyCells?: readonly string[];
@@ -1013,7 +1151,7 @@ export type EditFieldsSection = {
         readonly columns?: number;
     }[];
     /** Rendered left of the section title, `text-muted-foreground` — closed
-     *  IconKey vocabulary into the ICONS registry (renderer-web), analogous
+     *  IconKey vocabulary into the ICONS registry (renderer/web), analogous
      *  to EditFieldSpec.icon. No title → no icon, and no heuristic derives
      *  one from the title (titles are free i18n strings). */
     readonly icon?: IconKey;
@@ -1469,6 +1607,24 @@ export type ActionFormScreenDefinition = {
      *  the handler creates a child record but the target screen is the
      *  parent's detail screen (fw#2670). */
     readonly redirect?: string | ActionFormRedirect;
+    /** Links shown in the success box after a successful submit while the
+     *  screen stays put. Targets resolve like `redirect` (the id comes from the
+     *  handler's success payload); a link without a string id is hidden.
+     *  Mutually exclusive with `redirect`. */
+    readonly successLinks?: readonly ActionFormSuccessLink[];
+    /** Key figures from the handler's success payload, shown in the success box
+     *  while the screen stays put (e.g. charged/skipped/failed of a batch run).
+     *  Mutually exclusive with `redirect`. */
+    readonly successFacts?: readonly ActionFormSuccessFact[];
+    /** Reset the form to its initial values after a successful submit (prefill
+     *  kept, typed values cleared). Only applies while the screen stays put,
+     *  i.e. without `redirect`. */
+    readonly resetOnSuccess?: boolean;
+    /** Load the initial values from a query. The record id comes from the route
+     *  (or the drawer row id) and is sent as `{ [idParam]: id }`; the result,
+     *  picked to `fields`, becomes the initial values. Turns URL prefill off:
+     *  search params never reach the form. */
+    readonly load?: ActionFormLoad;
     /** Target of the Cancel button. Default: `redirect` (historical
      *  behavior — Cancel and the submit-redirect then land in the same
      *  place). `false` = no Cancel button; correct for single-action
@@ -1519,6 +1675,30 @@ export type ActionFormRedirect = {
      *  Boot rejects other targets and unknown section ids. */
     readonly tab?: string;
 };
+export type ActionFormLoad = {
+    /** Query QN that returns the record. */
+    readonly query: string;
+    /** Payload key carrying the record id (default "id"). */
+    readonly idParam?: string;
+};
+/** One key figure of the success box, read from the handler's success payload. */
+export type ActionFormSuccessFact = {
+    /** Flat field name in the handler's success payload. A number or string is
+     *  shown as one value, an array a comma-separated list (numbers, strings and
+     *  `{ label }` objects). A missing field hides the fact. */
+    readonly field: string;
+    /** Label (i18n key). */
+    readonly label: string;
+};
+/** A redirect target rendered as a link in the success box. */
+export type ActionFormSuccessLink = Omit<ActionFormRedirect, "idFrom"> & {
+    /** Success-payload field carrying the navigation id. Required for a record
+     *  target (`entityEdit`, `projectionDetail`); omit it for a list, dashboard
+     *  or form target, which opens without an id. */
+    readonly idFrom?: string;
+    /** Link text (i18n key). */
+    readonly label: string;
+};
 /** Author-declared field shown once after a mint-form submit — API token,
  *  recovery codes, similar one-time secrets. */
 export type SecretRevealField = {

package/dist/screen.js

@@ -8,6 +8,9 @@ export function metricField(metric) {
 // `visibleWhen` only on a top-level stat; the boot validator rejects it on a
 // stat-group child (gate the whole group instead).
 export const DASHBOARD_STAT_TONES = ["default", "positive", "ok", "warn", "negative"];
+/** Minimum polling interval of `DashboardScreenDefinition.refresh`; shorter values are rejected
+ *  at boot (`seconds`) or raised at runtime (`field`). */
+export const DASHBOARD_MIN_REFRESH_SECONDS = 5;
 /** Group key of a field value; `collapsedWhen` and row values both go through it. */
 export function relatedListGroupKey(value) {
     return value === undefined || value === null ? "" : String(value);

package/dist/target-ref.js

@@ -1,5 +1,5 @@
 // TargetRef — runtime-Repräsentation eines typed buildTarget-Outputs.
-// Wird vom Visual-Tree-Component (renderer-web) an einen Target-Resolver
+// Wird vom Visual-Tree-Component (renderer/web) an einen Target-Resolver
 // dispatcht; der Resolver findet die Editor-Maske via featureId.
 //
 // **Compile-time-Safety:** TargetRef wird niemals hand-getippt. Stattdessen

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-types",
-  "version": "0.373.0",
+  "version": "0.377.0",
   "description": "Framework-Type-Definitions für Kumiko — FeatureDefinition, BootCheck-Types und die reinen Engine-Types. Erlaubt Downstream-Konsumenten, gegen die Type-Contracts zu bauen, ohne das ganze Framework-Package zu importieren. Enthaelt keine identitaets-sensitiven Runtime-Werte mehr (Error-Klassen leben seit #1629 in kumiko-framework, Brand-Symbole nutzen Symbol.for) und ist deshalb eine plain dependency, keine peerDependency.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",

package/src/changes.json

@@ -1,4 +1,24 @@
 [
+  {
+    "version": "0.377.0",
+    "type": "improvement",
+    "title": "outsideTransaction deprecated, ProviderPluginContext added",
+    "detail": "HandlerContext.outsideTransaction is marked deprecated; use runInOwnTransaction(ctx.dbOutsideTransaction, fn). ProviderPluginContext is a Pick of HandlerContext for provider plugins. SharedContextFields gains configAccessorFactory; _configAccessorFactory stays as a deprecated alias. dbOutsideTransaction stays TenantDb | undefined (undefined only in the member-resolution and before-transaction denial phases and in platform-metering tenant mode); hasOutsideTransactionDb(ctx) narrows it and requireOutsideTransactionDb(ctx) throws when it is missing.",
+    "migration": "Replace ctx.outsideTransaction(fn) with runInOwnTransaction(ctx.dbOutsideTransaction, fn). Read configAccessorFactory instead of _configAccessorFactory."
+  },
+  {
+    "version": "0.377.0",
+    "type": "breaking",
+    "title": "JobContext._userId removed",
+    "detail": "The job runner never set JobContext._userId; only user-data-rights read it, falling back to SYSTEM_USER_ID. Hand-built JobContext objects that still set it fail to type-check, and code that read it must use SYSTEM_USER_ID or the job's system user.",
+    "migration": "Drop _userId from hand-built JobContext objects (tests, job helpers) and replace reads of ctx._userId with SYSTEM_USER_ID. Known hits - money-horse data-export integration test, offlot-app channel-text generate-texts.job.ts."
+  },
+  {
+    "version": "0.376.0",
+    "type": "improvement",
+    "title": "StackBootRequirement severity and the featureToggles option name",
+    "detail": "StackBootRequirement takes severity \"warn\" for requirements that only log, and BootOptionName lists featureToggles."
+  },
   {
     "version": "0.370.0",
     "type": "breaking",