@declarion/react 0.56.0 → 0.59.0

package/dist-lib/safe-url-oSJw5pzO.js

@@ -0,0 +1,34 @@
+//#region src/lib/safe-url.ts
+var e = [
+	"http:",
+	"https:",
+	"mailto:"
+], t = /[\u0000-\u001f\u007f]/g;
+function n(n) {
+	if (!n) return;
+	let r = n.trim();
+	if (!r) return;
+	let i = r.replace(t, "");
+	if (!i || i.startsWith("//")) return;
+	let a = i.match(/^([a-zA-Z][a-zA-Z0-9+.-]*):/);
+	if (a) {
+		let t = a[1].toLowerCase() + ":";
+		if (!e.includes(t)) return;
+	}
+	return i;
+}
+function r(e) {
+	if (!e) return !1;
+	if (e.startsWith("//")) return !0;
+	let t = typeof window < "u" ? window.location.href : "http://localhost/", n;
+	try {
+		n = new URL(e, t);
+	} catch {
+		return !1;
+	}
+	if (n.protocol !== "http:" && n.protocol !== "https:") return !0;
+	let r = typeof window < "u" ? window.location.origin : "http://localhost";
+	return n.origin !== r;
+}
+//#endregion
+export { n, r as t };

package/dist-lib/stores/icon-registry.d.ts

@@ -1,10 +1,10 @@
 /**
  * One declared glyph. Matches the wire JSON the Go side serves on /api/schema
- * as `icons` (plan §4):
+ * as `icons`:
  *   - svg:    geometry-only path `d` strings, rendered into the fixed 24x24
  *             stroke frame (the same frame as the built-in set).
  *   - lucide: a Lucide icon name, lazily resolved via dynamicIconImports.
- *   - url:    an asset URL, rendered via <img src> ONLY (security boundary, §6).
+ *   - url:    an asset URL, rendered via <img src> ONLY (security boundary).
  */
 export type IconDef = {
     kind: "svg";

package/dist-lib/stores/list-layout.d.ts

@@ -1,7 +1,6 @@
 /**
- * Per-device list-table WIDTH store (plan 2026-07-18 "Adjustable table
- * columns", rev 2). Holds ONE thing: column pixel widths, device-local in
- * localStorage, per (tenant, user, SCREEN) by column id. Screen-keyed, so
+ * Per-device list-table WIDTH store. Holds ONE thing: column pixel widths,
+ * device-local in localStorage, per (tenant, user, SCREEN) by column id. Screen-keyed, so
  * widening a column once holds across EVERY view of that screen on this device.
  * Absent entry = the YAML default (`field.display.width ?? 150`), resolved by
  * TanStack when `header.getSize()` reads `columnSizing[id] ?? columnDef.size`.
@@ -15,7 +14,7 @@
  * for a teammate on a laptop), so it is device-local and never in a saved view.
  *
  * This does NOT violate the "browser stores nothing" appearance-preferences
- * rule (Decision 33, `preferences.ts`): that governs deployment BRANDING
+ * rule (`preferences.ts`): that governs deployment BRANDING
  * (theme/accent/density). Widths are device state of the same class as the
  * `tabs` store, which already uses localStorage. Keying + persistence mirror
  * `stores/tabs.ts`: a module-level (tenant,user) scope set via `setScope`, the

package/dist-lib/stores/realtime.d.ts

@@ -90,7 +90,7 @@ export declare function screenCurrentness(state: CurrentnessInputs, realtimeFlag
 /**
  * The one predicate every indicator reads: is the screen showing this entity
  * CURRENT. The rows keep rendering throughout; this says whether they may be
- * behind. docs/realtime.md "Currentness".
+ * behind.
  */
 export declare function useScreenIsLive(realtimeFlag: boolean | undefined, entityCode: string): boolean;
 export {};

package/dist-lib/stores/tabs.d.ts

@@ -10,7 +10,7 @@ export type TabCloseScope = "current" | "others" | "right" | "all";
  * origin tab with a hash is reopened via pathname+search, and the hash is
  * applied only in the `navigate()` call. `tabId`/`title`/`icon`/`screen` are
  * hints for switching to (or reopening) the origin tab. Never stores secrets,
- * external URLs, or row data. See docs/plans/2026-06-29-origin-aware-back-navigation.md.
+ * external URLs, or row data.
  */
 export interface ReturnTarget {
     pathname: string;
@@ -26,6 +26,7 @@ export interface TabItem {
     pathname: string;
     search: string;
     title: string;
+    derivedTitle?: boolean;
     icon?: string;
     closable: boolean;
     area?: string;
@@ -46,7 +47,7 @@ interface TabState {
     switchTab: (id: string) => void;
     reorderTabs: (activeId: string, overId: string) => void;
     findTabByPathname: (pathname: string) => TabItem | undefined;
-    updateTabTitle: (id: string, title: string) => void;
+    updateTabTitle: (id: string, title: string, derived?: boolean) => void;
     updateTabSearch: (id: string, search: string) => void;
     setReturnTarget: (id: string, rt: ReturnTarget | null) => void;
     commitTabNavigation: (id: string, patch: {

package/dist-lib/testing.d.ts

@@ -5,6 +5,8 @@ import { type ResponsiveViewport } from "./hooks/useResponsiveMode.d.ts";
 import { type ActionExecuteRequest, type ActionExecuteResponse } from "./api/data.d.ts";
 import type { Schema } from "./types/schema.d.ts";
 import type { DataResponse, ListMeta, ListResponse, Refs } from "./types/api.d.ts";
+import { type TextFn } from "./lib/language.d.ts";
+import type { LocalizedString } from "./types/schema.d.ts";
 /** A single action's stubbed outcome: the action's RESULT payload (what
  *  executeDeclarionAction unwraps from response.result), or a function of the
  *  dispatched body returning it. The harness always wraps it in a success
@@ -63,6 +65,10 @@ export interface RenderWithDeclarionResult extends RenderResult {
      *  CALLED something rather than that the user arrived. */
     location: () => string;
 }
+export declare function textFixture(language?: string, messages?: Record<string, LocalizedString>): TextFn;
+export declare function languageWrapper(language?: string, messages?: Record<string, LocalizedString>): ({ children }: {
+    children: ReactNode;
+}) => import("react").JSX.Element;
 /** Build a valid Schema from a partial - fills the required empty maps so a
  *  consumer only declares the entities/screens its test needs. */
 export declare function schemaFixture(partial?: Partial<Schema>): Schema;

package/dist-lib/testing.js

@@ -1,14 +1,36 @@
-import { $t as e, Bt as t, cn as n, dn as r, jr as i, on as a, r as o, sn as s, t as c } from "./useCurrentScreen-CzwzQpoW.js";
-import { useState as l } from "react";
-import { MemoryRouter as u, useLocation as d } from "react-router";
-import { QueryClient as f, QueryClientProvider as p } from "@tanstack/react-query";
-import { Toaster as m } from "sonner";
-import { jsx as h, jsxs as g } from "react/jsx-runtime";
-import { render as _ } from "@testing-library/react";
+import { an as e, r as t, t as n } from "./useCurrentScreen-BL5NZFCw.js";
+import { E as r, p as i, s as a } from "./useText-BFDCTUSo.js";
+import { _ as o, c as s, g as c, v as l } from "./failure-v-uGSpbX.js";
+import { useState as u } from "react";
+import { MemoryRouter as d, useLocation as f } from "react-router";
+import { QueryClient as p, QueryClientProvider as m } from "@tanstack/react-query";
+import { Toaster as h } from "sonner";
+import { jsx as g, jsxs as _ } from "react/jsx-runtime";
+import { render as v } from "@testing-library/react";
 //#region src/testing.tsx
-function v(e = {}) {
+function y(e = "en", t) {
+	return a(t, e, "en");
+}
+function b(e = "en", t) {
+	let n = new p({ defaultOptions: { queries: { retry: !1 } } });
+	return n.setQueryData(["schema", !1], x({
+		language: e,
+		messages: t
+	})), n.setQueryData(["schema", !0], x({
+		language: e,
+		messages: t
+	})), function({ children: e }) {
+		return /* @__PURE__ */ g(m, {
+			client: n,
+			children: e
+		});
+	};
+}
+function x(e = {}) {
 	return {
 		languages: [],
+		language: "en",
+		deployment_language: "en",
 		structures: {},
 		entities: {},
 		screens: {},
@@ -19,7 +41,7 @@ function v(e = {}) {
 		...e
 	};
 }
-function y(e, t = {}, n) {
+function S(e, t = {}, n) {
 	return {
 		data: e,
 		meta: {
@@ -33,31 +55,31 @@ function y(e, t = {}, n) {
 		...n === void 0 ? {} : { $refs: n }
 	};
 }
-function b(e) {
+function C(e) {
 	return e;
 }
-var x = Symbol("declarion.testing.actionEnvelope");
-function S(e) {
+var w = Symbol("declarion.testing.actionEnvelope");
+function T(e) {
 	return {
 		...e,
-		[x]: !0
+		[w]: !0
 	};
 }
-function C(e) {
-	if (e && typeof e == "object" && e[x]) {
+function E(e) {
+	if (e && typeof e == "object" && e[w]) {
 		let t = { ...e };
-		return delete t[x], t;
+		return delete t[w], t;
 	}
 	return {
 		status: "success",
 		result: e
 	};
 }
-function w({ into: e }) {
-	let t = d();
+function D({ into: e }) {
+	let t = f();
 	return e.current = `${t.pathname}${t.search}${t.hash}`, null;
 }
-function T() {
+function O() {
 	let e = {
 		id: "test-tenant",
 		code: "test",
@@ -74,9 +96,9 @@ function T() {
 		created_at: "2026-01-01T00:00:00Z",
 		updated_at: "2026-01-01T00:00:00Z"
 	};
-	r.getState().setUser(t, e);
+	i.getState().setUser(t, e);
 }
-function E(e) {
+function k(e) {
 	if (e === void 0) return { rows: [] };
 	if (Array.isArray(e)) return { rows: e };
 	if (Array.isArray(e.data)) {
@@ -89,15 +111,15 @@ function E(e) {
 	}
 	return e;
 }
-function D(t) {
-	let r = t.entityData ?? {};
-	n((e, n) => {
-		let i = n;
-		t.onListRequest?.(e, i);
-		let a = r[e], o = typeof a == "function" ? a(i) : a;
+function A(e) {
+	let t = e.entityData ?? {};
+	l((n, r) => {
+		let i = r;
+		e.onListRequest?.(n, i);
+		let a = t[n], o = typeof a == "function" ? a(i) : a;
 		if (o instanceof Error) throw o;
-		let s = E(o), c = s.meta?.per_page ?? 50, l = s.meta?.total ?? s.rows.length;
-		return n.count === "only" ? {
+		let s = k(o), c = s.meta?.per_page ?? 50, l = s.meta?.total ?? s.rows.length;
+		return r.count === "only" ? {
 			data: [],
 			meta: {
 				page: 1,
@@ -116,78 +138,78 @@ function D(t) {
 			...s.refs === void 0 ? {} : { $refs: s.refs }
 		};
 	});
-	let i = t.entityItems ?? {}, o = t.entityItemResponses ?? {};
-	s((t, n) => {
-		let r = typeof n == "string" ? n : e(n), a = o[t]?.[r];
+	let n = e.entityItems ?? {}, r = e.entityItemResponses ?? {};
+	o((e, t) => {
+		let i = typeof t == "string" ? t : s(t), a = r[e]?.[i];
 		if (a instanceof Error) throw a;
 		if (a !== void 0) return a;
-		let s = i[t]?.[r];
-		if (s instanceof Error) throw s;
-		return { data: s };
+		let o = n[e]?.[i];
+		if (o instanceof Error) throw o;
+		return { data: o };
 	});
-	let c = t.actionResults ?? {};
-	a(async (e, t) => {
-		if (!(e in c)) throw Error(`renderWithDeclarion: no action result registered for "${e}" (seed it via actionResults)`);
-		let n = c[e];
-		return C(typeof n == "function" ? await n(t) : n);
+	let i = e.actionResults ?? {};
+	c(async (e, t) => {
+		if (!(e in i)) throw Error(`renderWithDeclarion: no action result registered for "${e}" (seed it via actionResults)`);
+		let n = i[e];
+		return E(typeof n == "function" ? await n(t) : n);
 	});
 }
-function O() {
-	n(null), s(null), a(null), r.setState({
+function j() {
+	l(null), o(null), c(null), i.setState({
 		user: null,
 		isAuthenticated: !1,
 		activeTenant: null,
 		tenants: []
 	});
 }
-function k(e, n = {}) {
-	let r = new f({ defaultOptions: { queries: {
+function M(i, a = {}) {
+	let o = new p({ defaultOptions: { queries: {
 		retry: !1,
 		gcTime: Infinity
 	} } });
-	T(), r.setQueryData(["schema", !0], n.schema ?? v()), D(n);
-	let a = n.screenCode ? /* @__PURE__ */ h(c, {
-		code: n.screenCode,
-		children: e
-	}) : e, s = { current: n.route ?? "/" }, l = /* @__PURE__ */ g(p, {
-		client: r,
-		children: [/* @__PURE__ */ g(u, {
-			initialEntries: [n.route ?? "/"],
-			children: [/* @__PURE__ */ h(w, { into: s }), /* @__PURE__ */ h(o, { children: a })]
-		}), /* @__PURE__ */ h(m, {})]
-	}), d = n.embedQuery ? /* @__PURE__ */ h(t, {
-		query: n.embedQuery,
+	O(), o.setQueryData(["schema", !0], a.schema ?? x()), A(a);
+	let s = a.screenCode ? /* @__PURE__ */ g(n, {
+		code: a.screenCode,
+		children: i
+	}) : i, c = { current: a.route ?? "/" }, l = /* @__PURE__ */ _(m, {
+		client: o,
+		children: [/* @__PURE__ */ _(d, {
+			initialEntries: [a.route ?? "/"],
+			children: [/* @__PURE__ */ g(D, { into: c }), /* @__PURE__ */ g(t, { children: s })]
+		}), /* @__PURE__ */ g(h, {})]
+	}), u = a.embedQuery ? /* @__PURE__ */ g(r, {
+		query: a.embedQuery,
 		children: l
-	}) : l, y = _(n.viewport ? /* @__PURE__ */ h(i, {
-		viewportOverride: n.viewport,
-		children: d
-	}) : d);
-	return Object.assign(y, {
-		queryClient: r,
-		location: () => s.current
+	}) : l, f = v(a.viewport ? /* @__PURE__ */ g(e, {
+		viewportOverride: a.viewport,
+		children: u
+	}) : u);
+	return Object.assign(f, {
+		queryClient: o,
+		location: () => c.current
 	});
 }
-function A({ children: e, authenticated: t = !0, ...n }) {
-	let [i] = l(() => {
-		let e = new f({ defaultOptions: { queries: {
+function N({ children: e, authenticated: n = !0, ...r }) {
+	let [a] = u(() => {
+		let e = new p({ defaultOptions: { queries: {
 			retry: !1,
 			gcTime: Infinity
 		} } });
-		return t ? (T(), e.setQueryData(["schema", !0], n.schema ?? v())) : r.setState({
+		return n ? (O(), e.setQueryData(["schema", !0], r.schema ?? x())) : i.setState({
 			user: null,
 			isAuthenticated: !1,
 			activeTenant: null,
 			tenants: []
-		}), D(n), e;
+		}), A(r), e;
 	});
-	return /* @__PURE__ */ g(p, {
-		client: i,
-		children: [/* @__PURE__ */ h(u, {
-			initialEntries: [n.route ?? "/"],
-			children: /* @__PURE__ */ h(o, { children: e })
-		}), /* @__PURE__ */ h(m, {})]
+	return /* @__PURE__ */ _(m, {
+		client: a,
+		children: [/* @__PURE__ */ g(d, {
+			initialEntries: [r.route ?? "/"],
+			children: /* @__PURE__ */ g(t, { children: e })
+		}), /* @__PURE__ */ g(h, {})]
 	});
 }
-typeof afterEach == "function" && afterEach(() => O());
+typeof afterEach == "function" && afterEach(() => j());
 //#endregion
-export { A as PreviewHarness, S as actionEnvelope, b as actionResults, O as cleanupDeclarion, y as entityDataFixture, k as renderWithDeclarion, v as schemaFixture };
+export { N as PreviewHarness, T as actionEnvelope, C as actionResults, j as cleanupDeclarion, S as entityDataFixture, b as languageWrapper, M as renderWithDeclarion, x as schemaFixture, y as textFixture };

package/dist-lib/types/api.d.ts

@@ -85,9 +85,9 @@ export declare function isApiErrorBody(body: unknown): body is ApiErrorBody;
  * - CURSOR_SEMANTICS_MISMATCH: the cursor was minted under different sort
  *   semantics (multi-column ordering, NULL placement). Server bumped its
  *   cursor format version since the cursor was issued.
- * - CURSOR_LOCALE_CHANGED: the cursor was minted under one active locale
- *   and the request now carries a different one. Issued so multilang sort
- *   cannot silently re-order mid-pagination.
+ * - CURSOR_LANGUAGE_CHANGED: the cursor was minted in one language and the
+ *   request now reads in another. Issued so multilang sort cannot silently
+ *   re-order mid-pagination.
  *
  * UX contract for both: clear the `after` token and refetch page 1 under
  * the current conditions. EntityClient.list does this transparently;
@@ -95,7 +95,7 @@ export declare function isApiErrorBody(body: unknown): body is ApiErrorBody;
  * retry logic.
  */
 export declare const CURSOR_SEMANTICS_MISMATCH = "cursor.semantics_mismatch";
-export declare const CURSOR_LOCALE_CHANGED = "cursor.locale_changed";
+export declare const CURSOR_LANGUAGE_CHANGED = "cursor.language_changed";
 /**
  * A cross-store (Postgres-hot / ClickHouse-cold) archive cursor that the server
  * could not decode for this read - a malformed token, a tenant/entity mismatch,
@@ -266,8 +266,8 @@ export interface BrandingTheme {
 }
 /**
  * The deployment's DEFAULTS for the controls the Preferences screen renders,
- * and the single durable source of preference state (Decision 33: the browser
- * stores nothing). A user's toggle holds for the SPA session and resets to
+ * and the single durable source of preference state: the browser stores
+ * nothing. A user's toggle holds for the SPA session and resets to
  * these on reload.
  *
  * Wire shape is snake_case because it is YAML. `stores/preferences.ts` owns the
@@ -372,7 +372,6 @@ export interface PublicMeta {
 export interface PublicParamsResponse {
     parameters: PublicParam[];
     accents?: Record<string, AccentDef>;
-    messages?: Record<string, LocalizedString>;
     meta?: PublicMeta;
 }
 /**
@@ -419,6 +418,7 @@ export interface ResolvedParam {
     /** Shared enum this parameter names, when it names one rather than listing
      *  its members inline. Present for display; `values` is what to render. */
     enum?: string;
+    ref?: EntityField["ref"];
 }
 export interface ParamOverride {
     param_code: string;
@@ -454,7 +454,6 @@ export interface ListParams {
      *   "only"             - total only, no rows (the follow-up count request).
      *   "with"             - rows + total, using the entity's declared strategy.
      *   "exact"            - rows + forced exact total.
-     * See docs/plans/2026-05-18-declarative-row-count.md.
      */
     count?: "window" | "only" | "with" | "exact";
 }

package/dist-lib/types/fieldType.d.ts

@@ -1,2 +1,2 @@
-export type FieldType = "uuid" | "string" | "text" | "rich_text" | "int" | "float" | "bool" | "date" | "time" | "timestamp" | "email" | "url" | "phone" | "enum" | "json" | "ref" | "tags" | "multilang" | "multilang_text" | "structure" | "secret" | "password" | "decimal" | "string_array" | "int_array" | "uuid_array" | "bytes";
+export type FieldType = "uuid" | "string" | "text" | "rich_text" | "int" | "float" | "bool" | "date" | "time" | "timestamp" | "email" | "url" | "phone" | "enum" | "json" | "ref" | "tags" | "multilang" | "multilang_text" | "multilang_array" | "structure" | "secret" | "password" | "decimal" | "string_array" | "int_array" | "uuid_array" | "bytes";
 export declare const FIELD_TYPES: readonly FieldType[];

package/dist-lib/types/files.d.ts

@@ -1,7 +1,9 @@
+import type { LocalizedString } from "./schema";
 export type FileFieldMode = "single" | "array" | "named_map" | "rich_text_inline";
 export interface FileFieldDisplay {
     widget: string;
-    placeholder?: string;
+    placeholder?: LocalizedString;
+    initials?: boolean;
     crop_on_upload?: boolean;
     aspect_ratio?: string;
     focal_point?: boolean;
@@ -13,11 +15,9 @@ export interface FileFieldDisplay {
     lazy_load?: boolean;
 }
 export interface FileNamedSlotDef {
+    name: LocalizedString;
     accepts?: string[];
     max_size_bytes?: number;
-    svg_sanitize?: boolean;
-    pdf_strip_js?: boolean;
-    exif_strip?: boolean;
     aspect_ratio?: string;
     storage_backend?: string;
 }