@cosmicdrift/kumiko-types 0.409.0 → 0.411.0

package/dist/access-predicates.d.ts

@@ -0,0 +1,4 @@
+import type { AccessRule } from "./handlers.ts";
+export declare function isOpenToAllGranted(rule: AccessRule): boolean;
+export declare function isUiAccessGranted(access: AccessRule | undefined, userRoles: readonly string[] | undefined): boolean;
+export declare function isAnySignedInGranted(rule: AccessRule): boolean;

package/dist/access-predicates.js

@@ -0,0 +1,42 @@
+// AccessRule can arrive from untyped sources (pattern-library JSON, Designer)
+// where `openToAll` doesn't actually match the declared union — narrow via
+// `unknown` instead of trusting the static type, deny on anything malformed.
+export function isOpenToAllGranted(rule) {
+    if (!("openToAll" in rule))
+        return false;
+    const openToAll = rule.openToAll;
+    if (typeof openToAll !== "object" || openToAll === null)
+        return false;
+    if (!("reason" in openToAll) || typeof openToAll.reason !== "string")
+        return false;
+    return openToAll.reason.trim().length > 0;
+}
+const ANONYMOUS_ACCESS_ROLE = "anonymous";
+// UI-visibility predicate — DEFAULT-VISIBLE, the opposite stance from
+// `hasAccess` and the default-deny doc on AccessRule (handlers.ts): an unset `access`
+// means every signed-in user may see the screen/nav/workspace, not nobody.
+// The engine's dispatcher access check stays default-deny; this only
+// decides what a client renders/lists, never what a handler accepts.
+// Same `unknown`-narrowing caution as isOpenToAllGranted — `access` can
+// arrive from untyped sources.
+export function isUiAccessGranted(access, userRoles) {
+    if (access === undefined)
+        return true;
+    if ("openToAll" in access)
+        return isOpenToAllGranted(access);
+    if (userRoles === undefined)
+        return false;
+    if (!("roles" in access))
+        return false;
+    if (isAnySignedInGranted(access) && !userRoles.includes(ANONYMOUS_ACCESS_ROLE))
+        return true;
+    return access.roles.some((role) => userRoles.includes(role));
+}
+// Same `unknown`-narrowing caution as isOpenToAllGranted. Only granted next to the
+// anonymous role, so a rule can never become "every signed-in user" through this flag.
+export function isAnySignedInGranted(rule) {
+    if (!("roles" in rule) || !("anySignedIn" in rule))
+        return false;
+    const anySignedIn = rule.anySignedIn;
+    return (anySignedIn === true && Array.isArray(rule.roles) && rule.roles.includes(ANONYMOUS_ACCESS_ROLE));
+}

package/dist/handler-context-services.d.ts

@@ -12,6 +12,14 @@ import type { KmsAdapter } from "./kms-adapter-types.ts";
 import type { RateLimitResolver } from "./rate-limit-types.ts";
 import type { SearchAdapter } from "./search-adapter.ts";
 import type { MasterKeyProvider, SecretsContext } from "./secrets-types.ts";
+/** Addressed live signal: the SSE frame reaches only the listed users of the caller's own tenant. */
+export type UserLiveSignals = {
+    push(userIds: readonly string[], signal: {
+        readonly type: string;
+        readonly entity?: string;
+        readonly id?: string;
+    }): Promise<void>;
+};
 /**
  * Infrastructure the app wired at boot, as the handler or job sees it. extraContext keys the
  * framework does not know land in `extensions`.
@@ -19,6 +27,7 @@ import type { MasterKeyProvider, SecretsContext } from "./secrets-types.ts";
 export type ContextServices = {
     readonly redis?: Redis;
     readonly cacheSync?: CacheSyncBus;
+    readonly userLiveSignals?: UserLiveSignals;
     readonly jobRunner?: JobRunnerRef;
     readonly searchAdapter?: SearchAdapter;
     readonly entityCache?: EntityCache;

package/dist/handlers.d.ts

@@ -12,14 +12,14 @@ import type { FileContext } from "./file-handle-types.ts";
 import type { FileProviderResolver } from "./file-provider-resolver-types.ts";
 import type { GeoTzProvider } from "./geo-tz.ts";
 import type { BeforeTransactionContext, HandlerAuth, HandlerDb, HandlerDispatch, HandlerEvents, HandlerObservability, JobDispatch, JobEvents, JobObservability, ReservationContext } from "./handler-context-facets.ts";
-import type { ContextServices, HandlerLifecycle, HandlerTenants, JobLifecycle } from "./handler-context-services.ts";
+import type { ContextServices, HandlerLifecycle, HandlerTenants, JobLifecycle, UserLiveSignals } from "./handler-context-services.ts";
 import type { Logger } from "./logger.ts";
 import type { Meter, Tracer } from "./observability/index.ts";
 import type { SearchAdapter } from "./search-adapter.ts";
 import type { CrossTenantReads, TenantDb } from "./tenant-db-types.ts";
 import type { Clock, TzContext } from "./tz-context.ts";
 export type { BeforeTransactionContext, HandlerAuth, HandlerDb, HandlerDispatch, HandlerEvents, HandlerObservability, JobDispatch, JobEvents, JobObservability, ReservationContext, } from "./handler-context-facets.ts";
-export type { ContextServices, HandlerLifecycle, HandlerTenants, JobLifecycle, } from "./handler-context-services.ts";
+export type { ContextServices, HandlerLifecycle, HandlerTenants, JobLifecycle, UserLiveSignals, } from "./handler-context-services.ts";
 import type { AgentHandlerHints } from "./agent-hints.ts";
 export type OpenToAllPersonalData = "tenant-members";
 export type OpenToAllDeclaration = {
@@ -33,6 +33,7 @@ export type RoleAccessPersonalData = "public-intake";
 export type RoleAccessRule = {
     readonly roles: readonly string[];
     readonly personalData?: RoleAccessPersonalData;
+    readonly anySignedIn?: true;
 };
 export type AccessRule = RoleAccessRule | OpenToAllAccessRule;
 export declare const ESCAPE_HATCH_GRANTS: readonly ["systemIdentity", "globalWrites", "unsafeRaw", "crossTenantReads"];
@@ -48,8 +49,7 @@ export declare function crossTenantReadsGrantFor(declaration: EscapeHatchDeclara
 export declare function escapeHatchGrantsProblem(declaration: {
     readonly grants?: unknown;
 }): string | undefined;
-export declare function isOpenToAllGranted(rule: AccessRule): boolean;
-export declare function isUiAccessGranted(access: AccessRule | undefined, userRoles: readonly string[] | undefined): boolean;
+export { isAnySignedInGranted, isOpenToAllGranted, isUiAccessGranted, } from "./access-predicates.ts";
 export type SessionUserOrigin = "member-resolution";
 export type SessionUser = {
     readonly id: string;
@@ -222,6 +222,7 @@ export type TenantWriteTarget = {
 type SharedContextFields = {
     readonly redis?: Redis;
     readonly cacheSync?: CacheSyncBus;
+    readonly userLiveSignals?: UserLiveSignals;
     readonly jobRunner?: JobRunnerRef;
     readonly configResolver?: ConfigResolver;
     readonly config?: ConfigAccessor;

package/dist/handlers.js

@@ -39,37 +39,7 @@ export function escapeHatchGrantsProblem(declaration) {
     }
     return undefined;
 }
-// AccessRule can arrive from untyped sources (pattern-library JSON, Designer)
-// where `openToAll` doesn't actually match the declared union — narrow via
-// `unknown` instead of trusting the static type, deny on anything malformed.
-export function isOpenToAllGranted(rule) {
-    if (!("openToAll" in rule))
-        return false;
-    const openToAll = rule.openToAll;
-    if (typeof openToAll !== "object" || openToAll === null)
-        return false;
-    if (!("reason" in openToAll) || typeof openToAll.reason !== "string")
-        return false;
-    return openToAll.reason.trim().length > 0;
-}
-// UI-visibility predicate — DEFAULT-VISIBLE, the opposite stance from
-// `hasAccess`/AccessRule's own default-deny doc above: an unset `access`
-// means every signed-in user may see the screen/nav/workspace, not nobody.
-// The engine's dispatcher access check stays default-deny; this only
-// decides what a client renders/lists, never what a handler accepts.
-// Same `unknown`-narrowing caution as isOpenToAllGranted — `access` can
-// arrive from untyped sources.
-export function isUiAccessGranted(access, userRoles) {
-    if (access === undefined)
-        return true;
-    if ("openToAll" in access)
-        return isOpenToAllGranted(access);
-    if (userRoles === undefined)
-        return false;
-    if (!("roles" in access))
-        return false;
-    return access.roles.some((role) => userRoles.includes(role));
-}
+export { isAnySignedInGranted, isOpenToAllGranted, isUiAccessGranted, } from "./access-predicates.js";
 // Closed vocabulary for delivery failures and skips. Only these values (plus
 // `http_<status>`) are ever stored or returned as a delivery error, never a raw
 // error message: provider errors can carry URLs, tokens and addresses.

package/dist/presence-types.d.ts

@@ -0,0 +1,42 @@
+export declare const PRESENCE_FEATURE: "presence";
+export declare const PRESENCE_WRITES: {
+    readonly heartbeat: "presence:write:heartbeat";
+    readonly leave: "presence:write:leave";
+};
+export declare const PRESENCE_QUERIES: {
+    readonly list: "presence:query:list";
+};
+export declare const PRESENCE_CHANGED_EVENT: "presence:event:changed";
+export declare const PRESENCE_HEARTBEAT_INTERVAL_MS = 15000;
+export declare const PRESENCE_LIST_REFETCH_INTERVAL_MS = 25000;
+export declare const PRESENCE_FOCUS_MAX_LENGTH = 128;
+export declare const PRESENCE_LIST_MAX_IDS = 100;
+export type PresenceActivity = "viewing" | "editing";
+export type PresenceEntry = {
+    readonly userId: string;
+    readonly displayName: string;
+    readonly activity: PresenceActivity;
+    readonly focus?: string;
+    /** ISO timestamp from which the user has been in this activity and focus. */
+    readonly since: string;
+};
+export type PresenceHeartbeatPayload = {
+    readonly entity: string;
+    readonly id: string;
+    readonly activity: PresenceActivity;
+    readonly focus?: string;
+};
+export type PresenceLeavePayload = {
+    readonly entity: string;
+    readonly id: string;
+};
+export type PresenceListPayload = {
+    readonly entity: string;
+    readonly ids: readonly string[];
+};
+export type PresenceHeartbeatResult = {
+    readonly others: readonly PresenceEntry[];
+};
+export type PresenceListResult = {
+    readonly byId: Readonly<Record<string, readonly PresenceEntry[]>>;
+};

package/dist/presence-types.js

@@ -0,0 +1,15 @@
+// Contract between the presence feature (server) and the presence hooks and widgets in the
+// renderer. The renderer must not import bundled-features, so both sides share this file.
+export const PRESENCE_FEATURE = "presence";
+export const PRESENCE_WRITES = {
+    heartbeat: "presence:write:heartbeat",
+    leave: "presence:write:leave",
+};
+export const PRESENCE_QUERIES = {
+    list: "presence:query:list",
+};
+export const PRESENCE_CHANGED_EVENT = "presence:event:changed";
+export const PRESENCE_HEARTBEAT_INTERVAL_MS = 15_000;
+export const PRESENCE_LIST_REFETCH_INTERVAL_MS = 25_000;
+export const PRESENCE_FOCUS_MAX_LENGTH = 128;
+export const PRESENCE_LIST_MAX_IDS = 100;

package/dist/screen-action-form.d.ts

@@ -81,10 +81,12 @@ export type ActionFormScreenDefinition = {
      *  Order in the array = order in the footer, before the submit button. */
     readonly footerActions?: readonly ActionFormFooterAction[];
     /** Context box above the fields (i18n keys). `{name}` placeholders resolve from the
-     *  drawer prefill (`params` of the opening row action), formatted for display. */
+     *  drawer prefill (`params` of the opening row action), formatted for display, and from
+     *  the fixed `params` (e.g. the app name a feature option sets), which win on a name clash. */
     readonly summary?: {
         readonly title: string;
         readonly subtitle?: string;
+        readonly params?: Readonly<Record<string, string>>;
     };
     /** Visual style of the submit button. "danger" renders it red — for a form
      *  whose handler is destructive (terminate, revoke, delete), so the warning

package/dist/screen-entity-edit.d.ts

@@ -127,6 +127,10 @@ type EditFieldsSectionBase = {
      *  and in the "up next" box. Wizard layouts only; unlike `description` it
      *  is not shown inside the step. */
     readonly subtitle?: string;
+    /** Wizard layouts only: text under this step's title in the "up next" box while the step before it is active; falls back to `subtitle`. */
+    readonly upNextHint?: string;
+    /** Wizard layouts only: field of this section whose formatted value shows under the step label in the step rail once the step is done. Needs a field of this section. */
+    readonly summaryField?: string;
     /** Rendered top-right in the section's Card title row — same
      *  navigate/drawer/writeHandler dispatch as `ProjectionDetailScreenDefinition.actions`,
      *  evaluated against the same record. Every action must resolve an icon
@@ -154,6 +158,14 @@ export type EditExtensionSection = {
     readonly id?: string;
     readonly kind: "extension";
     readonly title: string;
+    /** Wizard layouts only: intro text above the step, same slot as `EditFieldsSection.description`. */
+    readonly description?: string;
+    /** Wizard layouts only: short line under this step's title in the step rail and the "up next" box. */
+    readonly subtitle?: string;
+    /** Wizard layouts only: text under this step's title in the "up next" box while the step before it is active; falls back to `subtitle`. */
+    readonly upNextHint?: string;
+    /** Wizard layouts only: field whose formatted value shows under the step label once the step is done. On an `actionForm` it names a field of the screen's `fields`; elsewhere a field of a fields section of the layout. */
+    readonly summaryField?: string;
     readonly component: PlatformComponent;
     /** When true, the extension registers via `useExtensionFormSubmit` and the
      *  surrounding form's Save button should activate for its dirty state.
@@ -374,16 +386,24 @@ export type EditLayout = {
      *  list of independent preferences rather than one record form. Default
      *  "form" keeps the grid of cells. */
     readonly variant?: "form" | "settings-list";
+    /** Hides the asterisk after required field labels. Default false (shown). */
+    readonly hideRequiredMarker?: boolean;
     /** Persists in-progress wizard state as a resumable draft instead of
      *  discarding it on navigation away. */
     readonly draft?: boolean;
-    /** Wizard layouts only. `upNext: true` adds an "up next" box to the step
-     *  rail with the following step's title and `subtitle`; the last step
-     *  shows none. */
+    /** Wizard layouts only. `aside.upNext: true` adds an "up next" box to the step
+     *  rail with the following step's title and its `upNextHint` (else `subtitle`) only.
+     *  The last step shows the box only with `finishDescription` (i18n key): the
+     *  finish action as title, that text under it. */
     readonly wizard?: {
         readonly aside?: {
             readonly upNext: true;
+            readonly finishDescription?: string;
         };
+        /** Also offers "Save and close" while creating a record (default: update mode only). */
+        readonly saveAndCloseOnCreate?: boolean;
+        /** Disables the finish button (and blocks the submit) while the condition holds on the form values. */
+        readonly submitDisabledWhen?: FieldCondition;
     };
 };
 export type EntityWriteExcludedFields = {

package/dist/screen-entity-list.d.ts

@@ -146,6 +146,8 @@ export type RowActionWriteHandler = {
     readonly confirmLabel?: string;
     /** Conditional visibility per row. */
     readonly visible?: FieldCondition;
+    /** projectionDetail header action only: shown while one of these tab (section) ids is active. Needs `layout.mode: "tabs"`; default every tab. */
+    readonly showOnTabs?: readonly string[];
     /** Visual style. "danger" renders red + forces a confirm dialog (even
      *  without an explicit `confirm` key). */
     readonly style?: "primary" | "secondary" | "danger";
@@ -185,6 +187,8 @@ export type RowActionNavigateBase = {
     readonly tab?: string;
     /** Conditional visibility per row. */
     readonly visible?: FieldCondition;
+    /** projectionDetail header action only: shown while one of these tab (section) ids is active. Needs `layout.mode: "tabs"`; default every tab. */
+    readonly showOnTabs?: readonly string[];
     /** Visual style only — unlike the writeHandler variants, "danger" does not
      *  force a confirm dialog here: the target form is the confirmation. */
     readonly style?: "primary" | "secondary" | "danger";
@@ -228,6 +232,8 @@ export type RowActionDrawer = {
     readonly params?: RowFieldExtractor;
     /** Per-row conditional visibility. */
     readonly visible?: FieldCondition;
+    /** projectionDetail header action only: shown while one of these tab (section) ids is active. Needs `layout.mode: "tabs"`; default every tab. */
+    readonly showOnTabs?: readonly string[];
     /** Visual style only — unlike the writeHandler variants, "danger" does not
      *  force a confirm dialog here: the target form is the confirmation. */
     readonly style?: "primary" | "secondary" | "danger";
@@ -266,6 +272,8 @@ export type RowActionClientAction = {
     readonly confirmLabel?: string;
     /** Conditional visibility per row. */
     readonly visible?: FieldCondition;
+    /** projectionDetail header action only: shown while one of these tab (section) ids is active. Needs `layout.mode: "tabs"`; default every tab. */
+    readonly showOnTabs?: readonly string[];
     /** Visual style. "danger" forces a confirm dialog, like a writeHandler. */
     readonly style?: "primary" | "secondary" | "danger";
     /** Overrides the id-based default icon, see `RowActionWriteHandler.icon`. */

package/dist/screen-list-table.d.ts

@@ -3,7 +3,7 @@ export declare const LIST_TABLE_DENSITIES: readonly ["comfortable", "compact"];
 export type ListTableDensity = (typeof LIST_TABLE_DENSITIES)[number];
 export declare const LIST_COLUMN_PINS: readonly ["left", "right"];
 export type ListColumnPin = (typeof LIST_COLUMN_PINS)[number];
-export declare const LIST_TABLE_OPTION_KEYS: readonly ["rememberState", "resetAll", "columnPicker", "density", "pinning", "resizing", "keyboardNavigation", "export", "grouping", "totals"];
+export declare const LIST_TABLE_OPTION_KEYS: readonly ["rememberState", "resetAll", "columnPicker", "density", "pinning", "resizing", "keyboardNavigation", "export", "grouping", "totals", "compactHeader"];
 export declare const LIST_TABLE_GROUPING_KEYS: readonly ["field", "label", "labels", "collapsedWhen", "userChoice", "fields"];
 export declare const LIST_TABLE_TOTAL_KEYS: readonly ["field", "kind"];
 export declare const LIST_TABLE_EXPORT_KEYS: readonly ["xlsx", "maxRows"];
@@ -25,6 +25,8 @@ export type ListTableOptions = {
     readonly resizing?: boolean;
     /** Rows become one tab stop; ArrowUp/ArrowDown move, Home/End jump, Enter runs the row click. Space stays reserved for selection. */
     readonly keyboardNavigation?: boolean;
+    /** Renders the header row smaller (12px) and semibold. */
+    readonly compactHeader?: boolean;
     readonly density?: {
         /** Row density on first visit. Default "comfortable". */
         readonly default?: ListTableDensity;

package/dist/screen-list-table.js

@@ -11,6 +11,7 @@ export const LIST_TABLE_OPTION_KEYS = [
     "export",
     "grouping",
     "totals",
+    "compactHeader",
 ];
 export const LIST_TABLE_GROUPING_KEYS = [
     "field",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-types",
-  "version": "0.409.0",
+  "version": "0.411.0",
   "description": "Framework-Type-Definitions für Kumiko — FeatureDefinition, BootCheck-Types und die reinen Engine-Types. Erlaubt Downstream-Konsumenten, gegen die Type-Contracts zu bauen, ohne das ganze Framework-Package zu importieren. Enthaelt keine identitaets-sensitiven Runtime-Werte mehr (Error-Klassen leben seit #1629 in kumiko-framework, Brand-Symbole nutzen Symbol.for) und ist deshalb eine plain dependency, keine peerDependency.",
   "license": "MIT",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -46,6 +46,10 @@
       "types": "./dist/in-app-notification-types.d.ts",
       "default": "./dist/in-app-notification-types.js"
     },
+    "./presence-types": {
+      "types": "./dist/presence-types.d.ts",
+      "default": "./dist/presence-types.js"
+    },
     "./target-ref": {
       "types": "./dist/target-ref.d.ts",
       "default": "./dist/target-ref.js"
@@ -349,6 +353,10 @@
         "types": "./dist/in-app-notification-types.d.ts",
         "default": "./dist/in-app-notification-types.js"
       },
+      "./presence-types": {
+        "types": "./dist/presence-types.d.ts",
+        "default": "./dist/presence-types.js"
+      },
       "./target-ref": {
         "types": "./dist/target-ref.d.ts",
         "default": "./dist/target-ref.js"