@cosmicdrift/kumiko-types 0.409.0 → 0.410.0

package/dist/access-predicates.d.ts

@@ -0,0 +1,4 @@
+import type { AccessRule } from "./handlers.ts";
+export declare function isOpenToAllGranted(rule: AccessRule): boolean;
+export declare function isUiAccessGranted(access: AccessRule | undefined, userRoles: readonly string[] | undefined): boolean;
+export declare function isAnySignedInGranted(rule: AccessRule): boolean;

package/dist/access-predicates.js

@@ -0,0 +1,42 @@
+// AccessRule can arrive from untyped sources (pattern-library JSON, Designer)
+// where `openToAll` doesn't actually match the declared union — narrow via
+// `unknown` instead of trusting the static type, deny on anything malformed.
+export function isOpenToAllGranted(rule) {
+    if (!("openToAll" in rule))
+        return false;
+    const openToAll = rule.openToAll;
+    if (typeof openToAll !== "object" || openToAll === null)
+        return false;
+    if (!("reason" in openToAll) || typeof openToAll.reason !== "string")
+        return false;
+    return openToAll.reason.trim().length > 0;
+}
+const ANONYMOUS_ACCESS_ROLE = "anonymous";
+// UI-visibility predicate — DEFAULT-VISIBLE, the opposite stance from
+// `hasAccess` and the default-deny doc on AccessRule (handlers.ts): an unset `access`
+// means every signed-in user may see the screen/nav/workspace, not nobody.
+// The engine's dispatcher access check stays default-deny; this only
+// decides what a client renders/lists, never what a handler accepts.
+// Same `unknown`-narrowing caution as isOpenToAllGranted — `access` can
+// arrive from untyped sources.
+export function isUiAccessGranted(access, userRoles) {
+    if (access === undefined)
+        return true;
+    if ("openToAll" in access)
+        return isOpenToAllGranted(access);
+    if (userRoles === undefined)
+        return false;
+    if (!("roles" in access))
+        return false;
+    if (isAnySignedInGranted(access) && !userRoles.includes(ANONYMOUS_ACCESS_ROLE))
+        return true;
+    return access.roles.some((role) => userRoles.includes(role));
+}
+// Same `unknown`-narrowing caution as isOpenToAllGranted. Only granted next to the
+// anonymous role, so a rule can never become "every signed-in user" through this flag.
+export function isAnySignedInGranted(rule) {
+    if (!("roles" in rule) || !("anySignedIn" in rule))
+        return false;
+    const anySignedIn = rule.anySignedIn;
+    return (anySignedIn === true && Array.isArray(rule.roles) && rule.roles.includes(ANONYMOUS_ACCESS_ROLE));
+}

package/dist/handlers.d.ts

@@ -33,6 +33,7 @@ export type RoleAccessPersonalData = "public-intake";
 export type RoleAccessRule = {
     readonly roles: readonly string[];
     readonly personalData?: RoleAccessPersonalData;
+    readonly anySignedIn?: true;
 };
 export type AccessRule = RoleAccessRule | OpenToAllAccessRule;
 export declare const ESCAPE_HATCH_GRANTS: readonly ["systemIdentity", "globalWrites", "unsafeRaw", "crossTenantReads"];
@@ -48,8 +49,7 @@ export declare function crossTenantReadsGrantFor(declaration: EscapeHatchDeclara
 export declare function escapeHatchGrantsProblem(declaration: {
     readonly grants?: unknown;
 }): string | undefined;
-export declare function isOpenToAllGranted(rule: AccessRule): boolean;
-export declare function isUiAccessGranted(access: AccessRule | undefined, userRoles: readonly string[] | undefined): boolean;
+export { isAnySignedInGranted, isOpenToAllGranted, isUiAccessGranted, } from "./access-predicates.ts";
 export type SessionUserOrigin = "member-resolution";
 export type SessionUser = {
     readonly id: string;

package/dist/handlers.js

@@ -39,37 +39,7 @@ export function escapeHatchGrantsProblem(declaration) {
     }
     return undefined;
 }
-// AccessRule can arrive from untyped sources (pattern-library JSON, Designer)
-// where `openToAll` doesn't actually match the declared union — narrow via
-// `unknown` instead of trusting the static type, deny on anything malformed.
-export function isOpenToAllGranted(rule) {
-    if (!("openToAll" in rule))
-        return false;
-    const openToAll = rule.openToAll;
-    if (typeof openToAll !== "object" || openToAll === null)
-        return false;
-    if (!("reason" in openToAll) || typeof openToAll.reason !== "string")
-        return false;
-    return openToAll.reason.trim().length > 0;
-}
-// UI-visibility predicate — DEFAULT-VISIBLE, the opposite stance from
-// `hasAccess`/AccessRule's own default-deny doc above: an unset `access`
-// means every signed-in user may see the screen/nav/workspace, not nobody.
-// The engine's dispatcher access check stays default-deny; this only
-// decides what a client renders/lists, never what a handler accepts.
-// Same `unknown`-narrowing caution as isOpenToAllGranted — `access` can
-// arrive from untyped sources.
-export function isUiAccessGranted(access, userRoles) {
-    if (access === undefined)
-        return true;
-    if ("openToAll" in access)
-        return isOpenToAllGranted(access);
-    if (userRoles === undefined)
-        return false;
-    if (!("roles" in access))
-        return false;
-    return access.roles.some((role) => userRoles.includes(role));
-}
+export { isAnySignedInGranted, isOpenToAllGranted, isUiAccessGranted, } from "./access-predicates.js";
 // Closed vocabulary for delivery failures and skips. Only these values (plus
 // `http_<status>`) are ever stored or returned as a delivery error, never a raw
 // error message: provider errors can carry URLs, tokens and addresses.

package/dist/screen-action-form.d.ts

@@ -81,10 +81,12 @@ export type ActionFormScreenDefinition = {
      *  Order in the array = order in the footer, before the submit button. */
     readonly footerActions?: readonly ActionFormFooterAction[];
     /** Context box above the fields (i18n keys). `{name}` placeholders resolve from the
-     *  drawer prefill (`params` of the opening row action), formatted for display. */
+     *  drawer prefill (`params` of the opening row action), formatted for display, and from
+     *  the fixed `params` (e.g. the app name a feature option sets), which win on a name clash. */
     readonly summary?: {
         readonly title: string;
         readonly subtitle?: string;
+        readonly params?: Readonly<Record<string, string>>;
     };
     /** Visual style of the submit button. "danger" renders it red — for a form
      *  whose handler is destructive (terminate, revoke, delete), so the warning

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-types",
-  "version": "0.409.0",
+  "version": "0.410.0",
   "description": "Framework-Type-Definitions für Kumiko — FeatureDefinition, BootCheck-Types und die reinen Engine-Types. Erlaubt Downstream-Konsumenten, gegen die Type-Contracts zu bauen, ohne das ganze Framework-Package zu importieren. Enthaelt keine identitaets-sensitiven Runtime-Werte mehr (Error-Klassen leben seit #1629 in kumiko-framework, Brand-Symbole nutzen Symbol.for) und ist deshalb eine plain dependency, keine peerDependency.",
   "license": "MIT",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",