@cosmicdrift/kumiko-types 0.406.0 → 0.410.0

package/dist/access-predicates.d.ts

@@ -0,0 +1,4 @@
+import type { AccessRule } from "./handlers.ts";
+export declare function isOpenToAllGranted(rule: AccessRule): boolean;
+export declare function isUiAccessGranted(access: AccessRule | undefined, userRoles: readonly string[] | undefined): boolean;
+export declare function isAnySignedInGranted(rule: AccessRule): boolean;

package/dist/access-predicates.js

@@ -0,0 +1,42 @@
+// AccessRule can arrive from untyped sources (pattern-library JSON, Designer)
+// where `openToAll` doesn't actually match the declared union — narrow via
+// `unknown` instead of trusting the static type, deny on anything malformed.
+export function isOpenToAllGranted(rule) {
+    if (!("openToAll" in rule))
+        return false;
+    const openToAll = rule.openToAll;
+    if (typeof openToAll !== "object" || openToAll === null)
+        return false;
+    if (!("reason" in openToAll) || typeof openToAll.reason !== "string")
+        return false;
+    return openToAll.reason.trim().length > 0;
+}
+const ANONYMOUS_ACCESS_ROLE = "anonymous";
+// UI-visibility predicate — DEFAULT-VISIBLE, the opposite stance from
+// `hasAccess` and the default-deny doc on AccessRule (handlers.ts): an unset `access`
+// means every signed-in user may see the screen/nav/workspace, not nobody.
+// The engine's dispatcher access check stays default-deny; this only
+// decides what a client renders/lists, never what a handler accepts.
+// Same `unknown`-narrowing caution as isOpenToAllGranted — `access` can
+// arrive from untyped sources.
+export function isUiAccessGranted(access, userRoles) {
+    if (access === undefined)
+        return true;
+    if ("openToAll" in access)
+        return isOpenToAllGranted(access);
+    if (userRoles === undefined)
+        return false;
+    if (!("roles" in access))
+        return false;
+    if (isAnySignedInGranted(access) && !userRoles.includes(ANONYMOUS_ACCESS_ROLE))
+        return true;
+    return access.roles.some((role) => userRoles.includes(role));
+}
+// Same `unknown`-narrowing caution as isOpenToAllGranted. Only granted next to the
+// anonymous role, so a rule can never become "every signed-in user" through this flag.
+export function isAnySignedInGranted(rule) {
+    if (!("roles" in rule) || !("anySignedIn" in rule))
+        return false;
+    const anySignedIn = rule.anySignedIn;
+    return (anySignedIn === true && Array.isArray(rule.roles) && rule.roles.includes(ANONYMOUS_ACCESS_ROLE));
+}

package/dist/agent-exposure.js

@@ -2,9 +2,11 @@
  *  unless it opts in explicitly. `kind` is a parameter because write and query
  *  handler definitions are structurally indistinguishable at runtime. */
 export function resolveAgentExposure(def, kind) {
+    const effect = def.agent?.effect;
     return {
         expose: def.agent?.expose ?? def.description !== undefined,
         risk: def.agent?.risk ?? (kind === "query" ? "low" : "mid"),
+        ...(effect !== undefined && { effect }),
     };
 }
 /** Screens are the inverse of handlers: the manifest lists every role-visible

package/dist/agent-hints.d.ts

@@ -0,0 +1,18 @@
+export type AgentRisk = "low" | "mid" | "high";
+/** "proposal": the write only changes a suggestion that a person still approves elsewhere, so the
+ *  agent may run it without its own approval step. Boot accepts it only with `risk: "low"`. */
+export type AgentEffect = "proposal";
+/** Per-handler hints for the AI-agent manifest. `expose` overrides the
+ *  default derived from `description`; `risk` overrides the per-kind default. */
+export type AgentHandlerHints = {
+    readonly expose?: boolean;
+    readonly risk?: AgentRisk;
+    readonly effect?: AgentEffect;
+};
+/** Screens only read `expose`; `risk` ranks handler tool calls, so it is not offered here. */
+export type AgentScreenHints = Pick<AgentHandlerHints, "expose">;
+export type AgentExposure = {
+    readonly expose: boolean;
+    readonly risk: AgentRisk;
+    readonly effect?: AgentEffect;
+};

package/dist/agent-hints.js

@@ -0,0 +1 @@
+export {};

package/dist/event-store-executor-types.d.ts

@@ -31,6 +31,7 @@ export type LockGuardOption = {
 export type ListRuntimeOptions = {
     readonly searchAdapter?: SearchAdapter;
     readonly includeDeleted?: boolean;
+    readonly onlyDeleted?: boolean;
     readonly referenceSearch?: {
         readonly fields: ReadonlyArray<{
             readonly fieldName: string;

package/dist/fields.d.ts

@@ -7,6 +7,7 @@ import type { DerivedFieldsMap } from "./fields-derived.ts";
 import type { EventUpcastCtx } from "./handlers.ts";
 import type { NamedListFilterDef } from "./named-list-filters.ts";
 import type { OwnershipMap } from "./ownership.ts";
+import type { EntityPiiAbsentSubject } from "./personal-annotations.ts";
 import type { EntityTenancy } from "./tenancy-brand.ts";
 export type { ClientDerivedFieldDef, DeriveContext, DerivedCondition, DerivedConditionValue, DerivedFieldDef, DerivedFieldsMap, DerivedRelatedMeasure, DerivedSqlSpec, DerivedValueType, JsDerivedFieldDef, SqlDerivedFieldDef, } from "./fields-derived.ts";
 export { isSqlDerivedField } from "./fields-derived.ts";
@@ -36,51 +37,7 @@ export type ResolvedPiiFlags = {
     readonly subjectRef?: true;
 };
 type PiiAndFieldState = ResolvedPiiFlags & FieldStateConditions;
-export type EntityPiiAbsentSubject = "tenant" | "self";
-export type PersonalSubject = "self" | {
-    readonly of: string;
-    readonly whenAbsent?: EntityPiiAbsentSubject;
-} | "tenant";
-export type Findability = "exact" | "fuzzy" | "none" | "secret";
-type NoPersonalAnnotation = {
-    readonly personal?: never;
-    readonly find?: never;
-    readonly reason?: never;
-    readonly anonymize?: never;
-};
-export type PersonalAnnotations = {
-    readonly personal: PersonalSubject;
-    readonly find: Findability;
-    readonly anonymize?: () => unknown | Promise<unknown>;
-} | {
-    readonly personal: "ref";
-} | {
-    readonly personal: false;
-    readonly reason: string;
-    readonly anonymize?: () => unknown | Promise<unknown>;
-};
-export type LongTextFindability = "none" | "secret";
-export type PersonalAnnotationsLongText = {
-    readonly personal: PersonalSubject;
-    readonly find: LongTextFindability;
-    readonly anonymize?: () => unknown | Promise<unknown>;
-} | {
-    readonly personal: "ref";
-} | {
-    readonly personal: false;
-    readonly reason: string;
-    readonly anonymize?: () => unknown | Promise<unknown>;
-};
-export type PersonalAnnotationsNoFind = {
-    readonly personal: PersonalSubject;
-    readonly anonymize?: () => unknown | Promise<unknown>;
-} | {
-    readonly personal: "ref";
-} | {
-    readonly personal: false;
-    readonly reason: string;
-    readonly anonymize?: () => unknown | Promise<unknown>;
-} | NoPersonalAnnotation;
+export type { EntityPiiAbsentSubject, Findability, LongTextFindability, PersonalAnnotations, PersonalAnnotationsLongText, PersonalAnnotationsNoFind, PersonalSubject, } from "./personal-annotations.ts";
 export type RetentionDef = {
     readonly keepFor: string;
     readonly strategy: "hardDelete" | "softDelete" | "anonymize" | "blockDelete";
@@ -151,9 +108,9 @@ export type TextFieldDef = {
  *
  *   - **No `sortable`**: ordering 100 KB strings costs I/O without useful UX;
  *     lexicographic ordering of code is not meaningful.
- *   - **No `searchable`**: ILIKE/substring searches do not scale on long text.
- *     Full-text search should use the SearchAdapter (Meilisearch), which has
- *     its own tokenizer and index rather than this field flag.
+ *   - **`searchable` only through `find: "fuzzy"`**: ILIKE/substring searches
+ *     do not scale on long text, so the value is full-text indexed by the
+ *     SearchAdapter (Meilisearch, chunked) and never searched in SQL.
  *   - **No `filterable`**: filtering long strings has the same issue as sorting.
  *   - **No `format`**: email/url/phone are short, structured inputs, whereas
  *     longText is unstructured by definition.
@@ -177,6 +134,8 @@ export type LongTextFieldDef = {
      *  "high" on the directly-dispatched entry handler; a revert doesn't undo a
      *  run that already read the compromised value. See irreversible-operation-gate. */
     readonly readAsInstruction?: boolean;
+    /** Set by `find: "fuzzy"`: the value goes into the SearchAdapter document. */
+    readonly searchable?: boolean;
     readonly default?: string;
     readonly access?: FieldAccess;
     readonly multiline?: boolean | {

package/dist/handlers.d.ts

@@ -20,6 +20,7 @@ import type { CrossTenantReads, TenantDb } from "./tenant-db-types.ts";
 import type { Clock, TzContext } from "./tz-context.ts";
 export type { BeforeTransactionContext, HandlerAuth, HandlerDb, HandlerDispatch, HandlerEvents, HandlerObservability, JobDispatch, JobEvents, JobObservability, ReservationContext, } from "./handler-context-facets.ts";
 export type { ContextServices, HandlerLifecycle, HandlerTenants, JobLifecycle, } from "./handler-context-services.ts";
+import type { AgentHandlerHints } from "./agent-hints.ts";
 export type OpenToAllPersonalData = "tenant-members";
 export type OpenToAllDeclaration = {
     readonly reason: string;
@@ -32,6 +33,7 @@ export type RoleAccessPersonalData = "public-intake";
 export type RoleAccessRule = {
     readonly roles: readonly string[];
     readonly personalData?: RoleAccessPersonalData;
+    readonly anySignedIn?: true;
 };
 export type AccessRule = RoleAccessRule | OpenToAllAccessRule;
 export declare const ESCAPE_HATCH_GRANTS: readonly ["systemIdentity", "globalWrites", "unsafeRaw", "crossTenantReads"];
@@ -47,8 +49,7 @@ export declare function crossTenantReadsGrantFor(declaration: EscapeHatchDeclara
 export declare function escapeHatchGrantsProblem(declaration: {
     readonly grants?: unknown;
 }): string | undefined;
-export declare function isOpenToAllGranted(rule: AccessRule): boolean;
-export declare function isUiAccessGranted(access: AccessRule | undefined, userRoles: readonly string[] | undefined): boolean;
+export { isAnySignedInGranted, isOpenToAllGranted, isUiAccessGranted, } from "./access-predicates.ts";
 export type SessionUserOrigin = "member-resolution";
 export type SessionUser = {
     readonly id: string;
@@ -153,6 +154,7 @@ export type NotifyOptions = {
         readonly tenant: TenantId;
     };
     readonly route?: Readonly<Record<string, string>>;
+    readonly channels?: readonly string[];
     readonly data?: Readonly<Record<string, unknown>>;
     readonly priority?: NotifyPriority;
     readonly idempotencyKey?: string;
@@ -307,6 +309,7 @@ export type HandlerContext<TMap extends object = KumikoEventTypeMap> = {
      *  dispatcher payload-bucket digest. Absent when the app wires no digest key. */
     readonly rateLimitDigest?: (value: string) => string;
     readonly includeDeleted?: boolean;
+    readonly onlyDeleted?: boolean;
     readonly dispatch: HandlerDispatch;
     readonly hasFeature: (featureName: string) => Promise<boolean>;
     readonly events: HandlerEvents<TMap>;
@@ -514,19 +517,7 @@ export type RateLimitDisabled = {
 export type RateLimitDeclaration = RateLimitOption | RateLimitOptions | RateLimitDisabled;
 export declare function declaredRateLimitOptions(declaration: RateLimitDeclaration | undefined): readonly RateLimitOption[];
 export declare function isRateLimitDisabled(v: RateLimitDeclaration | undefined): v is RateLimitDisabled;
-export type AgentRisk = "low" | "mid" | "high";
-/** Per-handler hints for the AI-agent manifest. `expose` overrides the
- *  default derived from `description`; `risk` overrides the per-kind default. */
-export type AgentHandlerHints = {
-    readonly expose?: boolean;
-    readonly risk?: AgentRisk;
-};
-/** Screens only read `expose`; `risk` ranks handler tool calls, so it is not offered here. */
-export type AgentScreenHints = Pick<AgentHandlerHints, "expose">;
-export type AgentExposure = {
-    readonly expose: boolean;
-    readonly risk: AgentRisk;
-};
+export type { AgentEffect, AgentExposure, AgentHandlerHints, AgentRisk, AgentScreenHints, } from "./agent-hints.ts";
 /** Undoes a reservation made before the handler transaction. */
 export type ReservationRelease = () => Promise<void>;
 /** The dispatcher's own open handler transaction: a reservation must settle on it, not on

package/dist/handlers.js

@@ -39,37 +39,7 @@ export function escapeHatchGrantsProblem(declaration) {
     }
     return undefined;
 }
-// AccessRule can arrive from untyped sources (pattern-library JSON, Designer)
-// where `openToAll` doesn't actually match the declared union — narrow via
-// `unknown` instead of trusting the static type, deny on anything malformed.
-export function isOpenToAllGranted(rule) {
-    if (!("openToAll" in rule))
-        return false;
-    const openToAll = rule.openToAll;
-    if (typeof openToAll !== "object" || openToAll === null)
-        return false;
-    if (!("reason" in openToAll) || typeof openToAll.reason !== "string")
-        return false;
-    return openToAll.reason.trim().length > 0;
-}
-// UI-visibility predicate — DEFAULT-VISIBLE, the opposite stance from
-// `hasAccess`/AccessRule's own default-deny doc above: an unset `access`
-// means every signed-in user may see the screen/nav/workspace, not nobody.
-// The engine's dispatcher access check stays default-deny; this only
-// decides what a client renders/lists, never what a handler accepts.
-// Same `unknown`-narrowing caution as isOpenToAllGranted — `access` can
-// arrive from untyped sources.
-export function isUiAccessGranted(access, userRoles) {
-    if (access === undefined)
-        return true;
-    if ("openToAll" in access)
-        return isOpenToAllGranted(access);
-    if (userRoles === undefined)
-        return false;
-    if (!("roles" in access))
-        return false;
-    return access.roles.some((role) => userRoles.includes(role));
-}
+export { isAnySignedInGranted, isOpenToAllGranted, isUiAccessGranted, } from "./access-predicates.js";
 // Closed vocabulary for delivery failures and skips. Only these values (plus
 // `http_<status>`) are ever stored or returned as a delivery error, never a raw
 // error message: provider errors can carry URLs, tokens and addresses.

package/dist/in-app-notification-types.d.ts

@@ -2,6 +2,7 @@ export declare const IN_APP_NOTIFICATION_FEATURE: "channel-in-app";
 export declare const IN_APP_NOTIFICATION_QUERIES: {
     readonly inbox: "channel-in-app:query:inbox";
     readonly unreadCount: "channel-in-app:query:unread-count";
+    readonly readStateByKeys: "channel-in-app:query:read-state-by-keys";
 };
 export declare const IN_APP_NOTIFICATION_WRITES: {
     readonly markRead: "channel-in-app:write:mark-read";

package/dist/in-app-notification-types.js

@@ -4,6 +4,7 @@ export const IN_APP_NOTIFICATION_FEATURE = "channel-in-app";
 export const IN_APP_NOTIFICATION_QUERIES = {
     inbox: "channel-in-app:query:inbox",
     unreadCount: "channel-in-app:query:unread-count",
+    readStateByKeys: "channel-in-app:query:read-state-by-keys",
 };
 export const IN_APP_NOTIFICATION_WRITES = {
     markRead: "channel-in-app:write:mark-read",

package/dist/nav-icon.d.ts

@@ -1,3 +1,3 @@
-export declare const NAV_ICON_KEYS: readonly ["dashboard", "layout-grid", "book-open", "clipboard-list", "package", "gauge", "list", "table", "layers", "building", "calculator", "wallet", "coins", "credit-card", "piggy-bank", "receipt", "chart", "bar-chart", "trending", "sparkles", "wand", "calendar", "file", "folder", "folder-open", "home", "bell", "shield", "shield-check", "send", "settings", "users", "user", "search", "tag", "key", "link", "palette", "share", "server", "mail", "lock", "hash", "download", "upload", "rocket", "plus", "languages", "trash", "x", "check", "arrow-left", "arrow-right", "copy", "pencil", "eye", "eye-off", "filter", "refresh", "more-horizontal", "more-vertical", "external-link", "chevron-down", "chevron-up", "chevron-left", "chevron-right", "save", "undo", "archive", "star", "flag", "clock", "map-pin", "phone", "printer", "alert-triangle", "info", "check-circle", "x-circle", "loader", "mic", "circle-stop", "image", "camera", "headphones"];
+export declare const NAV_ICON_KEYS: readonly ["dashboard", "layout-grid", "book-open", "clipboard-list", "package", "gauge", "list", "table", "layers", "building", "warehouse", "calculator", "wallet", "euro", "coins", "credit-card", "piggy-bank", "receipt", "chart", "bar-chart", "trending", "sparkles", "wand", "calendar", "file", "folder", "folder-open", "home", "bell", "shield", "shield-check", "send", "settings", "users", "user", "search", "tag", "key", "link", "palette", "share", "server", "mail", "lock", "hash", "download", "upload", "rocket", "plus", "languages", "trash", "x", "check", "arrow-left", "arrow-right", "copy", "pencil", "eye", "eye-off", "filter", "refresh", "more-horizontal", "more-vertical", "external-link", "chevron-down", "chevron-up", "chevron-left", "chevron-right", "save", "undo", "archive", "star", "flag", "clock", "map-pin", "phone", "printer", "alert-triangle", "info", "check-circle", "x-circle", "loader", "mic", "circle-stop", "image", "camera", "headphones"];
 export type NavIconKey = (typeof NAV_ICON_KEYS)[number];
 export type IconKey = NavIconKey;

package/dist/nav-icon.js

@@ -25,8 +25,10 @@ export const NAV_ICON_KEYS = [
     "table",
     "layers",
     "building",
+    "warehouse",
     "calculator",
     "wallet",
+    "euro",
     "coins",
     "credit-card",
     "piggy-bank",

package/dist/personal-annotations.d.ts

@@ -0,0 +1,46 @@
+export type EntityPiiAbsentSubject = "tenant" | "self";
+export type PersonalSubject = "self" | {
+    readonly of: string;
+    readonly whenAbsent?: EntityPiiAbsentSubject;
+} | "tenant";
+export type Findability = "exact" | "fuzzy" | "none" | "secret";
+type NoPersonalAnnotation = {
+    readonly personal?: never;
+    readonly find?: never;
+    readonly reason?: never;
+    readonly anonymize?: never;
+};
+export type PersonalAnnotations = {
+    readonly personal: PersonalSubject;
+    readonly find: Findability;
+    readonly anonymize?: () => unknown | Promise<unknown>;
+} | {
+    readonly personal: "ref";
+} | {
+    readonly personal: false;
+    readonly reason: string;
+    readonly anonymize?: () => unknown | Promise<unknown>;
+};
+export type LongTextFindability = "none" | "fuzzy" | "secret";
+export type PersonalAnnotationsLongText = {
+    readonly personal: PersonalSubject;
+    readonly find: LongTextFindability;
+    readonly anonymize?: () => unknown | Promise<unknown>;
+} | {
+    readonly personal: "ref";
+} | {
+    readonly personal: false;
+    readonly reason: string;
+    readonly anonymize?: () => unknown | Promise<unknown>;
+};
+export type PersonalAnnotationsNoFind = {
+    readonly personal: PersonalSubject;
+    readonly anonymize?: () => unknown | Promise<unknown>;
+} | {
+    readonly personal: "ref";
+} | {
+    readonly personal: false;
+    readonly reason: string;
+    readonly anonymize?: () => unknown | Promise<unknown>;
+} | NoPersonalAnnotation;
+export {};

package/dist/personal-annotations.js

@@ -0,0 +1 @@
+export {};

package/dist/screen-action-form.d.ts

@@ -81,10 +81,12 @@ export type ActionFormScreenDefinition = {
      *  Order in the array = order in the footer, before the submit button. */
     readonly footerActions?: readonly ActionFormFooterAction[];
     /** Context box above the fields (i18n keys). `{name}` placeholders resolve from the
-     *  drawer prefill (`params` of the opening row action), formatted for display. */
+     *  drawer prefill (`params` of the opening row action), formatted for display, and from
+     *  the fixed `params` (e.g. the app name a feature option sets), which win on a name clash. */
     readonly summary?: {
         readonly title: string;
         readonly subtitle?: string;
+        readonly params?: Readonly<Record<string, string>>;
     };
     /** Visual style of the submit button. "danger" renders it red — for a form
      *  whose handler is destructive (terminate, revoke, delete), so the warning
@@ -121,6 +123,11 @@ export type ActionFormScreenDefinition = {
      *  while the screen stays put (e.g. charged/skipped/failed of a batch run).
      *  Mutually exclusive with `redirect`. */
     readonly successFacts?: readonly ActionFormSuccessFact[];
+    /** One hint per entry of a success-payload array, each with its own link
+     *  (e.g. "this file is already in the inbox" with "Open" per uploaded file).
+     *  While at least one entry is shown, the hints replace the generic
+     *  confirmation text. Mutually exclusive with `redirect`. */
+    readonly successItems?: ActionFormSuccessItems;
     /** Reset the form to its initial values after a successful submit (prefill
      *  kept, typed values cleared). Only applies while the screen stays put,
      *  i.e. without `redirect`. */
@@ -200,12 +207,25 @@ export type ActionFormSuccessFact = {
     /** Label (i18n key). */
     readonly label: string;
 };
+/** Per-entry hints of the success box, read from an array in the handler's success payload. */
+export type ActionFormSuccessItems = {
+    /** Flat field name of an array in the success payload. An entry is shown
+     *  when it is an object with a string `label` (the sentence of the hint). */
+    readonly field: string;
+    /** Link of each hint. `idFrom` and `params` read from the entry, not from
+     *  the whole payload; an entry whose link does not resolve shows without one. */
+    readonly link?: ActionFormSuccessLink;
+};
 /** A redirect target rendered as a link in the success box. */
 export type ActionFormSuccessLink = Omit<ActionFormRedirect, "idFrom"> & {
     /** Success-payload field carrying the navigation id. Required for a record
      *  target (`entityEdit`, `projectionDetail`); omit it for a list, dashboard
      *  or form target, which opens without an id. */
     readonly idFrom?: string;
+    /** URL search params of the target, each read from a success-payload field
+     *  (`{ cmd: "duplicateOfId" }` opens `?cmd=<duplicateOfId>`). The link is
+     *  hidden while one of these fields is not a string. */
+    readonly params?: Readonly<Record<string, string>>;
     /** Link text (i18n key). */
     readonly label: string;
 };

package/dist/screen-custom-config.d.ts

@@ -35,6 +35,22 @@ export type CustomScreenDefinition = {
     /** Same-feature short id or cross-feature QN `<feature>:screen:<id>` shown when `visibleWhen` is unmet (default: standard notice). */
     readonly fallback?: ScreenFallback;
 };
+/** A button row on a configEdit form that calls a write handler with `{}` (for example "send a test").
+ *  It never saves the form: the button is disabled while the form has unsaved changes, so the
+ *  handler always works on what is stored. All text fields are i18n keys. */
+export type ConfigEditAction = {
+    /** Unique within the screen; used for the test id. */
+    readonly id: string;
+    /** Qualified name of a write handler (`<feature>:write:<name>`). */
+    readonly handler: string;
+    readonly label: string;
+    readonly description?: string;
+    readonly buttonLabel: string;
+    /** Field (from the layout) after which the row is drawn. */
+    readonly afterField: string;
+    /** Shown after a successful call; without it a success stays silent. */
+    readonly successMessage?: string;
+};
 export type ConfigEditScreenDefinition = {
     readonly id: string;
     readonly type: "configEdit";
@@ -60,7 +76,8 @@ export type ConfigEditScreenDefinition = {
      *  qualified config key (`<feature>:config:<short>`). The boot validator
      *  checks that every qualified key is known in the registry. */
     readonly configKeys: Readonly<Record<string, string>>;
-    /** Field name → qualified secret key (`<feature>:secret:<short>`), tenant scope only.
+    /** Field name → qualified secret key (`<feature>:secret:<short>`), tenant or system scope
+     *  (system: platform-wide, SystemAdmin only), never user scope.
      *  Such a field is a writeOnly text field with no `configKeys` entry; the same save
      *  writes it through secrets:write:set (or secrets:write:delete on removal). */
     readonly secretKeys?: Readonly<Record<string, string>>;
@@ -84,6 +101,8 @@ export type ConfigEditScreenDefinition = {
     readonly requiredFields?: readonly string[];
     /** i18n key for the submit button. Default: "kumiko.actions.save". */
     readonly submitLabel?: string;
+    /** Handler buttons drawn as their own row after `afterField` (settings-list layout). */
+    readonly actions?: readonly ConfigEditAction[];
     readonly slots?: ScreenSlots;
     readonly access?: AccessRule;
 };

package/dist/screen-entity-edit.d.ts

@@ -55,6 +55,10 @@ export type EditFieldSpec = string | {
     /** Row field on the referenced entity shown as the label (default
      *  "id"). Only meaningful together with `refEntity`. */
     readonly refLabelField?: string;
+    /** Text format for projectionDetail fields, which have no `EntityDefinition`
+     *  to carry it: a read-only value renders as a `mailto:`/`tel:` link.
+     *  Ignored on `entityEdit` fields, where the field's own `format` wins. */
+    readonly format?: "email" | "phone";
     /** Embedded-list fields only (`createEmbeddedListField`). */
     readonly embeddedList?: EmbeddedListEditSpec;
     /** Fills an empty value when the create form opens; the update form and

package/dist/screen-projection.d.ts

@@ -122,6 +122,8 @@ export type ProjectionListScreenDefinition = {
 export type RecordHeaderSubtitlePart = string | {
     readonly field: string;
     readonly navigate?: MetricNavigate;
+    /** Formats the raw field value (e.g. `timestamp`); an empty value is still dropped. */
+    readonly format?: FormatSpec;
 };
 export type RecordHeaderSpec = {
     readonly title: string;

package/dist/screen.d.ts

@@ -115,8 +115,8 @@ export type ScreenNavSugar = {
     readonly order?: number;
 };
 export type ScreenDefinition = EntityListScreenDefinition | ProjectionListScreenDefinition | ProjectionDetailScreenDefinition | DashboardScreenDefinition | EntityEditScreenDefinition | ActionFormScreenDefinition | ConfigEditScreenDefinition | SecretsEditScreenDefinition | SecretMintScreenDefinition | CustomScreenDefinition;
-export type { ActionFormFooterAction, ActionFormLoad, ActionFormRedirect, ActionFormScreenDefinition, ActionFormSuccessFact, ActionFormSuccessLink, FormFieldDerivation, FormFieldDerivationWithoutList, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, } from "./screen-action-form.ts";
-export type { ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, SecretsEditScreenDefinition, SecretsEditSection, } from "./screen-custom-config.ts";
+export type { ActionFormFooterAction, ActionFormLoad, ActionFormRedirect, ActionFormScreenDefinition, ActionFormSuccessFact, ActionFormSuccessItems, ActionFormSuccessLink, FormFieldDerivation, FormFieldDerivationWithoutList, SecretMintConfirmStep, SecretMintScreenDefinition, SecretReveal, SecretRevealField, } from "./screen-action-form.ts";
+export type { ConfigEditAction, ConfigEditScreenDefinition, CustomScreenDefinition, CustomScreenRoute, SecretsEditScreenDefinition, SecretsEditSection, } from "./screen-custom-config.ts";
 export type { DashboardChartKind, DashboardChartMarkerKind, DashboardChartPanel, DashboardChartRangeOption, DashboardChartRanges, DashboardChartTone, DashboardCurrencyFormat, DashboardCustomPanel, DashboardDateParam, DashboardFeedPanel, DashboardFilterDefinition, DashboardI18nText, DashboardListPanel, DashboardMoneyParam, DashboardPanelDefinition, DashboardPanelEmptyState, DashboardPanelGate, DashboardPanelQueryOptions, DashboardPanelSpan, DashboardPanelVisibility, DashboardProgressListPanel, DashboardProgressTone, DashboardRecordBinding, DashboardRefresh, DashboardRelativeTimeFormat, DashboardRelativeTimeParam, DashboardScopeDefinition, DashboardScreenDefinition, DashboardScreenPanel, DashboardStatGroupPanel, DashboardStatPanel, DashboardStatTone, DashboardText, DashboardTextBlock, DashboardTextPanel, DashboardTextParam, DashboardTimeRangeDefinition, DashboardValueFormat, ScreenVisibility, } from "./screen-dashboard.ts";
 export { DASHBOARD_MIN_REFRESH_SECONDS, DASHBOARD_STAT_TONES } from "./screen-dashboard.ts";
 export type { EditExtensionSection, EditFieldGroup, EditFieldPrefill, EditFieldSpec, EditFieldsSection, EditLayout, EditRelatedListSection, EditSectionSpec, EditWriteFormSection, EmbeddedListEditSpec, EntityEditAction, EntityEditActionPlacement, EntityEditScreenDefinition, EntityWriteExcludedFields, FieldAffix, FieldFillAction, FormWidth, ListEmptyStateSpec, RelatedListEmptyStateSpec, RelatedListEmptyStateVariant, RelatedListRowTone, } from "./screen-entity-edit.ts";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-types",
-  "version": "0.406.0",
+  "version": "0.410.0",
   "description": "Framework-Type-Definitions für Kumiko — FeatureDefinition, BootCheck-Types und die reinen Engine-Types. Erlaubt Downstream-Konsumenten, gegen die Type-Contracts zu bauen, ohne das ganze Framework-Package zu importieren. Enthaelt keine identitaets-sensitiven Runtime-Werte mehr (Error-Klassen leben seit #1629 in kumiko-framework, Brand-Symbole nutzen Symbol.for) und ist deshalb eine plain dependency, keine peerDependency.",
   "license": "MIT",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",