@declarion/react 0.1.67 → 0.1.68

package/dist-lib/lib/safe-url.d.ts

@@ -0,0 +1 @@
+export declare function safeExternalUrl(input: string | undefined | null): string | undefined;

package/dist-lib/lib/timestamp.d.ts

@@ -18,3 +18,20 @@ export declare function formatWireDateTime(date?: Date): string;
  * Falls back to browser-local formatting for bare datetime strings.
  */
 export declare function formatOffsetTimestamp(raw: string): string;
+/**
+ * Relative-or-absolute timestamp formatting for the time_ago cell renderer.
+ *
+ * Returns a short relative phrase ("5 minutes ago", "2 days ago") when the
+ * timestamp is within the last 30 days, and an ISO date ("2026-01-15") when
+ * older. Linear / Stripe / Datadog convention — avoids the "1y 4mo 12d ago"
+ * eyesore for stable historical data.
+ *
+ * `absolute` is the offset-aware long form intended for the cell's hover
+ * tooltip; the user always has access to the precise timestamp.
+ *
+ * Bare or unparseable input falls back to the raw string for both fields.
+ */
+export declare function formatRelativeOrAbsolute(raw: string | Date | null | undefined, now?: Date): {
+    text: string;
+    absolute: string;
+};

package/dist-lib/stores/appearance.d.ts

@@ -4,6 +4,7 @@ export type Density = "compact" | "comfortable" | "cozy";
 export type SidebarMode = "wide" | "collapsed";
 export type TabsPosition = "top" | "bottom";
 export type AiSurface = "command" | "panel" | "both" | "off";
+export type FaviconSource = "google" | "direct" | "none";
 export interface Appearance {
     theme: ThemeId;
     accent: AccentId;
@@ -16,6 +17,8 @@ export interface Appearance {
     radius: number;
     zebra: boolean;
     aiSurface: AiSurface;
+    /** Favicon source for unknown hosts in URL cells. See ui_favicon_source. */
+    faviconSource: FaviconSource;
 }
 export declare function applyAppearance(a: Appearance): void;
 interface AppearanceState extends Appearance {

package/dist-lib/types/api.d.ts

@@ -99,6 +99,13 @@ export interface PublicParam {
     description?: LocalizedString;
     value: unknown;
 }
+/** Per-app legal/support URL set rendered in the auth-shell footer. */
+export interface PublicLegalLinks {
+    security_url?: string;
+    privacy_url?: string;
+    terms_url?: string;
+    docs_url?: string;
+}
 /** Subset of branding exposed pre-login by /api/params/public. */
 export interface PublicBranding {
     app_name?: string;
@@ -108,16 +115,54 @@ export interface PublicBranding {
     ai_name?: string;
     wordmark?: string;
     version_label?: string;
+    status_url?: string;
     auth_tagline?: LocalizedString;
     auth_subtagline?: LocalizedString;
     auth_badges?: LocalizedString[];
+    legal_entity?: string;
+    workspace_domain?: string;
+    legal_links?: PublicLegalLinks;
+}
+/**
+ * Deploy-time identity exposed pre-login by /api/params/public so the
+ * auth shell can render real region/build values (no mockup placeholders).
+ * Each field is empty when unconfigured/unset; consumers hide the pill
+ * when the entire block is missing or empty.
+ */
+export interface PublicMeta {
+    version?: string;
+    revision?: string;
+    build_time?: string;
+    region?: string;
 }
 /** Envelope returned by GET /api/params/public. */
 export interface PublicParamsResponse {
     parameters: PublicParam[];
     accents?: Record<string, AccentDef>;
     branding?: PublicBranding;
+    meta?: PublicMeta;
+}
+/**
+ * Wire envelope for GET /api/params/{code}.
+ *
+ * The server always responds with HTTP 200. `found:false` means the
+ * platform has no value for the code (undeclared, restricted-category,
+ * or no value at any resolution layer); the caller substitutes its own
+ * default. `found:true` means `value` is authoritative - even if it is
+ * null/zero (an explicit nil value is a real value, not absence).
+ *
+ * The default never crosses the wire; servers don't track caller
+ * defaults, so two callers with different defaults always see consistent
+ * server state.
+ */
+export interface ParamLookup {
+    code: string;
+    found: boolean;
+    value?: unknown;
+    source?: "object" | "user" | "role" | "tenant" | "env" | "yaml";
+    type?: string;
 }
+/** @deprecated Prefer `ParamLookup`. Retained for callers still inspecting `source`. */
 export interface ResolvedParam {
     code: string;
     name: LocalizedString;

package/dist-lib/types/fieldType.d.ts

@@ -0,0 +1,2 @@
+export type FieldType = "uuid" | "string" | "text" | "rich_text" | "int" | "float" | "bool" | "date" | "time" | "timestamp" | "email" | "url" | "phone" | "enum" | "json" | "ref" | "tags" | "multilang" | "multilang_text" | "structure" | "secret" | "password" | "decimal" | "string_array" | "int_array";
+export declare const FIELD_TYPES: readonly FieldType[];

package/dist-lib/types/schema.d.ts

@@ -2,6 +2,18 @@ import { OrderedMap } from "./ordmap";
 import type { FileFieldDef } from "./files";
 export { OrderedMap };
 export type LocalizedString = Record<string, string>;
+/**
+ * Per-entity empty-state copy declared in the manifest under
+ * `display.empty_state`. Title and Body are localized; LearnMoreURL is a
+ * plain string. The SDK falls back to a generic "No <plural> yet" derived
+ * from `display.name_plural` when this is absent. Read-only entities never
+ * render the legacy "Create your first..." copy regardless of EmptyStateDef.
+ */
+export interface EmptyStateDef {
+    title?: LocalizedString;
+    body?: LocalizedString;
+    learn_more_url?: string;
+}
 /**
  * Reserved sentinel value for Screen.detail_screen (list screens). Disables
  * row-click navigation even when the entity declares a canonical detail. Paired
@@ -46,12 +58,22 @@ export interface EntityField {
     default?: unknown;
     display?: {
         name: LocalizedString;
+        description?: LocalizedString;
         width?: number;
         widget?: string;
         is_listable?: boolean;
         is_filterable?: boolean;
         ref_display_field?: string;
         span?: number | "full";
+        bool_labels?: {
+            true: LocalizedString;
+            false: LocalizedString;
+        };
+        value_map?: Record<string, {
+            label?: LocalizedString;
+            color?: string;
+        }>;
+        currency?: string;
     };
     values?: Array<{
         code: string;
@@ -192,6 +214,7 @@ export interface Entity {
         icon: string;
         display_field?: string;
         display_template?: string;
+        empty_state?: EmptyStateDef;
     };
     fields: OrderedMap<EntityField>;
     soft_delete?: string;
@@ -205,6 +228,32 @@ export interface Entity {
     associations?: Record<string, AssociationDef>;
     files?: OrderedMap<FileFieldDef>;
     detail_screen?: string;
+    /** Standard CSV export gate per docs/plans/2026-05-01-standard-table-export.md.
+     *  Absent block (or absent `enabled`) means export is enabled. Only an
+     *  explicit `enabled: false` opts out, mirroring the Go ExportEnabled()
+     *  helper. Same shape ships on Screen for per-screen overrides. */
+    export?: ExportConfig;
+    /** At most one row visible per caller. Loader requires either a
+     *  caller-bound `prefilter` or `access: self` to back this. Frontend
+     *  routes a singleton entity's detail screen at the screen's declared
+     *  `route:` without a `:id` segment, and skips list-route registration. */
+    singleton?: boolean;
+    /** Server-enforced WHERE applied unconditionally on every read/write
+     *  via server/handlers/data_prefilter.go. Values may be literal scalars
+     *  OR `$caller.*` expressions (`$caller.user_id`, `$caller.tenant_id`)
+     *  resolved at request time. Security boundary, not a UX hint. */
+    prefilter?: Record<string, unknown>;
+    /** Hard entity-wide access gate. `"self"` restricts every read/write
+     *  to rows where the field marked `owner: true` matches the caller's
+     *  user id (chokepoint + with_check). `"platform_admin"` restricts to
+     *  platform owner / superadmin roles. Empty = standard RBAC. */
+    access?: "self" | "platform_admin";
+    /** Whether the entity participates in RBAC permission gating
+     *  (`entity:<code>:<op>` grants). Mirrors engine.Entity.Permissions. */
+    permissions?: boolean;
+}
+export interface ExportConfig {
+    enabled?: boolean;
 }
 export declare function getPrimaryKeyFields(entity: Entity): string[];
 export type PkValues = Record<string, string>;
@@ -311,6 +360,10 @@ export interface Screen {
     inline_edit?: InlineEditConfig;
     column_overrides?: Record<string, ColumnSpec>;
     activity_rail?: ActivityRailConfig;
+    /** Per-screen override for the CSV export gate. Same shape as Entity.export.
+     *  Either gate being false hides the toolbar Export menu and makes the
+     *  POST endpoint return 403 EXPORT_DISABLED. */
+    export?: ExportConfig;
 }
 export interface QuickPeekConfig {
     enabled?: boolean;

package/dist-lib/vite/declarion-glyph.svg

@@ -0,0 +1,17 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" width="64" height="64">
+  <!--
+    Declarion mark: angular letter "D" with an embedded "=" in the negative
+    space of the counter. Encodes the product thesis ("this declaration
+    equals this runtime behavior") in the letterform itself. Solid accent
+    purple #5B5BD6 — visible on both light surfaces and the dark brand
+    panel without prefers-color-scheme tricks. Trademark distinctive,
+    scales crisp from favicon (16px) through hero (96px+).
+  -->
+  <path
+    fill-rule="evenodd"
+    fill="#5B5BD6"
+    d="M 6 6 H 42 L 58 22 V 42 L 42 58 H 6 Z M 18 18 V 46 H 38 L 46 38 V 26 L 38 18 Z"
+  />
+  <rect x="22" y="28" width="20" height="3" fill="#5B5BD6"/>
+  <rect x="22" y="33" width="20" height="3" fill="#5B5BD6"/>
+</svg>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@declarion/react",
-  "version": "0.1.67",
+  "version": "0.1.68",
   "private": false,
   "license": "MIT",
   "description": "React SDK for Declarion, the schema-driven business apps platform.",
@@ -87,7 +87,7 @@
   },
   "scripts": {
     "dev": "vite",
-    "build": "tsc --noEmit && vite build",
+    "build": "tsc -p tsconfig.app.json --noEmit && vite build",
     "build:lib": "vite build --config vite.lib.config.ts && vite build --config vite.plugin.config.ts && tsc -p tsconfig.lib.json && tsc-alias -p tsconfig.lib.json",
     "lint": "tsc --noEmit && eslint src",
     "test": "vitest run",