includio-cms 0.26.0 → 0.28.0

package/dist/shop/types.d.ts

@@ -147,11 +147,194 @@ export interface CouponRef {
     value: number;
     discountAmount: number;
 }
+/**
+ * Schema descriptor for one product-variant attribute (city, startsAt, …).
+ * Drives Zod validation, ts-gen typings, GIN indexes, and admin renderers.
+ * @public
+ */
+export type VariantAttribute = VariantAttributeText | VariantAttributeNumber | VariantAttributeDatetime | VariantAttributeSelect | VariantAttributeBoolean | VariantAttributeImage | VariantAttributeEntry | VariantAttributeSlug;
+interface VariantAttributeBase {
+    label: I18nText;
+    required?: boolean;
+    /**
+     * Generate a `GIN ((attributes->'<key>'))` index on the variants table.
+     * Enable for keys filtered on storefront (`city`, `startsAt`, …).
+     */
+    indexable?: boolean;
+}
+/** @public */
+export interface VariantAttributeText extends VariantAttributeBase {
+    type: 'text';
+}
+/** @public */
+export interface VariantAttributeNumber extends VariantAttributeBase {
+    type: 'number';
+}
+/** @public — value stored as ISO-8601 string. */
+export interface VariantAttributeDatetime extends VariantAttributeBase {
+    type: 'datetime';
+}
+/** @public */
+export interface VariantAttributeSelect extends VariantAttributeBase {
+    type: 'select';
+    options: {
+        value: string;
+        label: I18nText;
+    }[];
+}
+/** @public */
+export interface VariantAttributeBoolean extends VariantAttributeBase {
+    type: 'boolean';
+}
+/** @public — value = media file id (UUID). */
+export interface VariantAttributeImage extends VariantAttributeBase {
+    type: 'image';
+}
+/** @public — value = entry id (UUID) from given collection. */
+export interface VariantAttributeEntry extends VariantAttributeBase {
+    type: 'entry';
+    entryCollection: string;
+}
+/** @public — value matches slug regex `^[a-z0-9-]+$`. */
+export interface VariantAttributeSlug extends VariantAttributeBase {
+    type: 'slug';
+}
+/**
+ * Template used to auto-generate `variant.name` from `variantAttributes`.
+ * Syntax: `{key|filter:arg}`. Filters: `date` (long|medium|short),
+ * `currency` (currency code), `uppercase`. Admin pre-fills the name input
+ * with the interpolated string; once the editor types into the name field,
+ * pre-fill stops for that variant (per-session dirty flag).
+ * @public
+ */
+export interface VariantLabelConfig {
+    template: string;
+}
+/**
+ * Per-product payment policy. `full` (default) charges the full order total
+ * immediately; `deposit` charges only a deposit at checkout and leaves a
+ * remaining balance owed by the customer, redeemable via a signed balance
+ * link sent by the admin. Set on `ShopFieldData.paymentPolicy` per product
+ * entry — not globally on `defineShop`.
+ * @public
+ */
+export type PaymentPolicy = {
+    type: 'full';
+} | {
+    type: 'deposit';
+    depositAmount: DepositAmount;
+};
+/**
+ * Deposit amount specifier. `percent` charges `floor(base * value / 100)` of
+ * the line total; `amount` charges a fixed minor-unit value (clamped to the
+ * line total). Validation: `value > 0` always; `percent` ≤ 100; `amount` in
+ * the same minor-unit as `order.totalGross` (grosze for PLN).
+ * @public
+ */
+export type DepositAmount = {
+    type: 'percent';
+    value: number;
+} | {
+    type: 'amount';
+    value: number;
+};
+/**
+ * Persisted partial-payment summary on `order.partialPayment` when the order
+ * was placed under a deposit policy. Amounts are in minor currency units
+ * (grosze for PLN). `paidAt` is the ISO timestamp when the deposit cleared
+ * (or `null` while still pending). On balance payment, `paidAmount` is
+ * bumped to the full order total and `paidAt` is refreshed.
+ * @public
+ */
+export interface PartialPayment {
+    kind: 'deposit';
+    paidAmount: number;
+    balanceAmount: number;
+    paidAt: string | null;
+}
+/**
+ * Opt-in storefront filter that hides variants whose datetime attribute
+ * (`source`, e.g. `startsAt`) has already passed. `offsetDays` shifts the
+ * cut-off: `0` = expire exactly when the source datetime hits now, `1` = one
+ * day after (grace period), `-1` = one day before. Admin still shows expired
+ * variants with a "Zakończony" badge; storefront `listUpcoming` filters them
+ * out and cart/checkout reject them with `VARIANT_EXPIRED`.
+ * @public
+ */
+export interface VariantExpiryConfig {
+    source: string;
+    offsetDays: number;
+}
+/**
+ * When an invoice should be issued automatically after an order is fully paid.
+ * - `b2bAndOnRequest` (default): only when the order carries a NIP (B2B) or the
+ *   customer explicitly requested an invoice (`invoiceRequested`).
+ * - `always`: for every fully-paid order regardless of NIP / request.
+ * @public
+ */
+export type InvoiceIssuePolicy = 'b2bAndOnRequest' | 'always';
+/** @public */
+export interface InvoiceBuyer {
+    name: string;
+    email: string;
+    nip?: string | null;
+    companyName?: string | null;
+    address?: Record<string, string> | null;
+}
+/** @public */
+export interface InvoiceLineItem {
+    name: string;
+    quantity: number;
+    /** Gross unit price in minor units (grosze for PLN). */
+    unitPriceGross: number;
+    /** VAT rate as a plain percentage (e.g. `23` for 23%). */
+    vatRate: number;
+}
+/** @public */
+export interface InvoicePayload {
+    orderNumber: string;
+    currency: Currency;
+    buyer: InvoiceBuyer;
+    items: InvoiceLineItem[];
+    /** ISO timestamp the payment was confirmed — used as issue / paid date. */
+    paidAt: string;
+}
+/** @public */
+export interface InvoiceCreateResult {
+    externalId: string;
+    number?: string;
+    pdfUrl?: string;
+    raw?: unknown;
+}
+/** @public */
+export interface InvoiceContext {
+    language?: string | null;
+}
+/**
+ * Adapter that issues invoices with an external provider (e.g. Fakturownia).
+ * Registered via `defineShop({ invoicing })`. `createInvoice` is called once an
+ * order is fully paid and qualifies under `issueWhen`; `send` (optional) e-mails
+ * the issued invoice to the buyer provider-side.
+ * @public
+ */
+export interface InvoicingAdapter {
+    id: string;
+    /** Trigger policy. Default `b2bAndOnRequest`. */
+    issueWhen?: InvoiceIssuePolicy;
+    createInvoice(payload: InvoicePayload, ctx?: InvoiceContext): Promise<InvoiceCreateResult>;
+    send?(externalId: string, ctx?: InvoiceContext): Promise<void>;
+}
 export interface ShopConfig {
     currency: Currency;
     vatRates: number[];
     payment: PaymentAdapter[];
     carriers?: CarrierAdapter[];
+    /**
+     * Optional invoicing adapter — issues invoices automatically once an order is
+     * fully paid. Omitted = no invoicing.
+     * @public
+     */
+    invoicing?: InvoicingAdapter | null;
     features?: ShopFeatures;
     rateLimit?: ShopRateLimit;
     consents?: ConsentConfig[];
@@ -168,11 +351,35 @@ export interface ShopConfig {
      * automatic admin notifications. Omitted = those alerts are no-ops.
      */
     adminEmail?: string;
+    /**
+     * Typed variant attribute schema. Each key declares one attribute (city,
+     * startsAt, …) — drives Zod validation, ts-gen typings, GIN indexes, and
+     * admin variant form renderer. Omitted = legacy untyped string map.
+     * @public
+     */
+    variantAttributes?: Record<string, VariantAttribute>;
+    /**
+     * Template used by admin to auto-prefill `variant.name` from typed
+     * `variantAttributes`. Omitted = no pre-fill (editor enters name manually).
+     * @public
+     */
+    variantLabel?: VariantLabelConfig;
+    /**
+     * Opt-in storefront filter for time-bound variants (events, courses).
+     * Omitted = no filtering (legacy behavior — every variant always listed).
+     * @public
+     */
+    variantExpiry?: VariantExpiryConfig;
 }
-export interface ResolvedShopConfig extends ShopConfig {
+export interface ResolvedShopConfig extends Omit<ShopConfig, 'variantLabel' | 'variantExpiry' | 'invoicing'> {
     features: Required<ShopFeatures>;
     rateLimit: Required<ShopRateLimit>;
     carriers: CarrierAdapter[];
     consents: ConsentConfig[];
+    invoicing: InvoicingAdapter | null;
     orderViewUrl: string;
+    variantAttributes: Record<string, VariantAttribute>;
+    variantLabel: VariantLabelConfig | null;
+    variantExpiry: VariantExpiryConfig | null;
 }
+export {};

package/dist/shop/variant-attributes.d.ts

@@ -0,0 +1,28 @@
+import { z } from 'zod';
+import type { VariantAttribute } from './types.js';
+/**
+ * Build a Zod object schema from a `defineShop({ variantAttributes })` map.
+ * Required attributes are mandatory keys; optional ones use `.optional()`.
+ * Empty map → `z.object({})`.
+ * @internal
+ */
+export declare function buildVariantAttributesSchema(attrs: Record<string, VariantAttribute>): z.ZodObject<Record<string, z.ZodType>>;
+/**
+ * @public
+ * Thrown by `upsertShopData` (and `validateVariantAttributes`) when a
+ * `variant.attributes` payload fails the schema derived from
+ * `defineShop({ variantAttributes })`. Carries the raw Zod issues.
+ */
+export declare class InvalidVariantAttributesError extends Error {
+    readonly code = "INVALID_VARIANT_ATTRIBUTES";
+    readonly issues: z.ZodIssue[];
+    constructor(issues: z.ZodIssue[]);
+}
+/**
+ * Validate a variant attributes payload against a shop config.
+ * Throws `InvalidVariantAttributesError` (code `INVALID_VARIANT_ATTRIBUTES`) on
+ * failure. Returns the parsed (and coerced where applicable) value on success.
+ * `null` / `undefined` payloads are treated as `{}`.
+ * @internal
+ */
+export declare function validateVariantAttributes(value: unknown, attrs: Record<string, VariantAttribute>): Record<string, unknown>;

package/dist/shop/variant-attributes.js

@@ -0,0 +1,69 @@
+import { z } from 'zod';
+const SLUG_REGEX = /^[a-z0-9-]+$/;
+function buildLeafSchema(attr) {
+    switch (attr.type) {
+        case 'text':
+            return attr.required ? z.string().min(1) : z.string();
+        case 'number':
+            return z.number().finite();
+        case 'datetime':
+            // Accept full ISO 8601: UTC (`...Z`) AND offset forms (`+02:00`).
+            // Admin DatetimeField produces `Z` via toISOString(); imports/seeds
+            // may use local offsets. Both are valid ISO 8601.
+            return z.string().datetime({ offset: true });
+        case 'select':
+            return z.enum(attr.options.map((o) => o.value));
+        case 'boolean':
+            return z.boolean();
+        case 'image':
+        case 'entry':
+            return z.string().uuid();
+        case 'slug':
+            return z.string().regex(SLUG_REGEX);
+    }
+}
+/**
+ * Build a Zod object schema from a `defineShop({ variantAttributes })` map.
+ * Required attributes are mandatory keys; optional ones use `.optional()`.
+ * Empty map → `z.object({})`.
+ * @internal
+ */
+export function buildVariantAttributesSchema(attrs) {
+    const shape = {};
+    for (const [key, attr] of Object.entries(attrs)) {
+        const leaf = buildLeafSchema(attr);
+        shape[key] = attr.required ? leaf : leaf.optional();
+    }
+    return z.object(shape);
+}
+/**
+ * @public
+ * Thrown by `upsertShopData` (and `validateVariantAttributes`) when a
+ * `variant.attributes` payload fails the schema derived from
+ * `defineShop({ variantAttributes })`. Carries the raw Zod issues.
+ */
+export class InvalidVariantAttributesError extends Error {
+    code = 'INVALID_VARIANT_ATTRIBUTES';
+    issues;
+    constructor(issues) {
+        super(`Invalid variant attributes: ${issues.map((i) => i.message).join('; ')}`);
+        this.name = 'InvalidVariantAttributesError';
+        this.issues = issues;
+    }
+}
+/**
+ * Validate a variant attributes payload against a shop config.
+ * Throws `InvalidVariantAttributesError` (code `INVALID_VARIANT_ATTRIBUTES`) on
+ * failure. Returns the parsed (and coerced where applicable) value on success.
+ * `null` / `undefined` payloads are treated as `{}`.
+ * @internal
+ */
+export function validateVariantAttributes(value, attrs) {
+    const schema = buildVariantAttributesSchema(attrs);
+    const input = value ?? {};
+    const result = schema.safeParse(input);
+    if (!result.success) {
+        throw new InvalidVariantAttributesError(result.error.issues);
+    }
+    return result.data;
+}

package/dist/sveltekit/server/index.d.ts

@@ -7,3 +7,4 @@ export { createConsentLog } from '../../core/server/consentLogs/operations/creat
 export { getPreviewEntry } from './preview.js';
 export { createRestApiHandler } from '../../admin/api/rest/handler.js';
 export { generateApiKey } from '../../admin/api/rest/middleware/generateApiKey.js';
+export { createAdminApiHandler } from '../../admin/api/handler.js';

package/dist/sveltekit/server/index.js

@@ -8,3 +8,5 @@ export { getPreviewEntry } from './preview.js';
 // Folded from `./admin/api/rest/handler` (dropped as separate export in 0.20.0)
 export { createRestApiHandler } from '../../admin/api/rest/handler.js';
 export { generateApiKey } from '../../admin/api/rest/middleware/generateApiKey.js';
+// Folded from `./admin/api/handler` (dropped as separate export in 0.26.1)
+export { createAdminApiHandler } from '../../admin/api/handler.js';

package/dist/types/cms.d.ts

@@ -3,7 +3,7 @@ import type { FilesAdapter } from './adapters/files.js';
 import type { CollectionConfig, CollectionConfigWithType } from './collections.js';
 import type { Language } from './languages.js';
 import type { SingleConfig, SingleConfigWithType } from './singles.js';
-import type { CustomFieldDefinition, PluginConfig } from './plugins.js';
+import type { CustomFieldDefinition, IconSetPlugin, Plugin } from './plugins.js';
 import type { FormConfig } from './forms.js';
 import type { AIAdapter } from './adapters/ai.js';
 import type { EmailAdapter } from './adapters/email.js';
@@ -77,7 +77,7 @@ export interface CMSConfig {
     files: FilesAdapter;
     email?: EmailAdapter;
     auth?: AuthConfig;
-    plugins?: PluginConfig[];
+    plugins?: Plugin[];
     ai?: AIAdapter;
     media?: MediaConfig;
     apiKeys?: ApiKeyConfig[];
@@ -95,8 +95,9 @@ export interface ICMS {
     filesAdapter: FilesAdapter;
     emailAdapter: EmailAdapter | null;
     authConfig: AuthConfig | null;
-    plugins: PluginConfig[];
+    plugins: Plugin[];
     customFields: Map<string, CustomFieldDefinition>;
+    iconSets: Map<string, IconSetPlugin>;
     aiAdapter: AIAdapter | null;
     mediaConfig: MediaConfig;
     apiKeys: ApiKeyConfig[];

package/dist/types/cms.schema.d.ts

@@ -445,7 +445,7 @@ export declare const _internal: {
         shop: z.ZodOptional<z.ZodUnknown>;
         cmp: z.ZodOptional<z.ZodUnknown>;
     }, z.core.$loose>;
-    FIELD_TYPES: readonly ["text", "content", "number", "boolean", "date", "datetime", "file", "media", "select", "radio", "checkboxes", "relation", "object", "array", "blocks", "slug", "seo", "shop", "url", "custom"];
+    FIELD_TYPES: readonly ["text", "content", "number", "boolean", "date", "datetime", "file", "media", "select", "radio", "checkboxes", "relation", "object", "array", "blocks", "slug", "seo", "shop", "url", "icon", "custom"];
     FORM_FIELD_TYPES: readonly ["text", "email", "textarea", "checkbox", "select", "file"];
     getLangCode: typeof getLangCode;
 };

package/dist/types/cms.schema.js

@@ -51,6 +51,7 @@ const FIELD_TYPES = [
     'seo',
     'shop',
     'url',
+    'icon',
     'custom'
 ];
 const baseFieldShape = {
@@ -269,6 +270,14 @@ const fieldSchema = z.lazy(() => z.discriminatedUnion('type', [
         type: z.literal('custom'),
         fieldType: z.string().min(1, { message: 'custom.fieldType is required' }),
         config: z.record(z.string(), z.unknown()).optional()
+    })
+        .passthrough(),
+    // icon — set provided by IconSetPlugin (registered in plugins[])
+    z
+        .object({
+        ...baseFieldShape,
+        type: z.literal('icon'),
+        set: z.string().optional()
     })
         .passthrough()
 ]));

package/dist/types/fields.d.ts

@@ -2,7 +2,7 @@ import type { FormatEnum } from 'sharp';
 import type { ImageStyle, MediaFile, VideoStyle } from './media.js';
 import type { Localized } from './languages.js';
 import type { StructuredContentDoc } from './structured-content.js';
-export type FieldType = 'text' | 'content' | 'number' | 'boolean' | 'date' | 'datetime' | 'file' | 'media' | 'select' | 'radio' | 'checkboxes' | 'relation' | 'object' | 'array' | 'blocks' | 'slug' | 'seo' | 'shop' | 'url' | 'custom';
+export type FieldType = 'text' | 'content' | 'number' | 'boolean' | 'date' | 'datetime' | 'file' | 'media' | 'select' | 'radio' | 'checkboxes' | 'relation' | 'object' | 'array' | 'blocks' | 'slug' | 'seo' | 'shop' | 'url' | 'icon' | 'custom';
 export interface FieldCondition {
     field: string;
     equals?: string | string[];
@@ -234,6 +234,11 @@ export interface ShopFieldData {
     basePrice: number;
     vatRate: number;
     isActive: boolean;
+    /**
+     * Per-product payment policy. Omitted = `{ type: 'full' }` (legacy behavior).
+     * @public
+     */
+    paymentPolicy?: import('../shop/types.js').PaymentPolicy;
     variants?: Array<{
         id?: string;
         sku?: string | null;
@@ -264,4 +269,18 @@ export interface CustomField extends BaseField {
     /** Plugin-specific configuration, opaque to core */
     config?: Record<string, unknown>;
 }
-export type Field = TextField | ContentField | NumberField | BooleanField | DateField | DateTimeField | FileField | MediaField | SelectField | RadioField | CheckboxesField | RelationField | ObjectField | ArrayField | BlocksField | SlugField | SeoField | ShopField | UrlField | CustomField;
+/**
+ * @public
+ * Icon picker field. Stores a string key referencing an icon registered by an
+ * {@link import('./plugins.js').IconSetPlugin}. Admin UI renders a kafelek
+ * (collapsed) and opens a searchable grid dialog. The set of icons (Svelte
+ * components + labels) is provided by a plugin at admin bootstrap — NOT inline
+ * in `cms.config.ts` (which is server-only / Zod-validated).
+ */
+export interface IconField extends BaseField {
+    type: 'icon';
+    /** Plugin slug to source icons from when multiple icon-set plugins registered. Defaults to the first one. */
+    set?: string;
+    defaultValue?: string;
+}
+export type Field = TextField | ContentField | NumberField | BooleanField | DateField | DateTimeField | FileField | MediaField | SelectField | RadioField | CheckboxesField | RelationField | ObjectField | ArrayField | BlocksField | SlugField | SeoField | ShopField | UrlField | IconField | CustomField;

package/dist/types/index.d.ts

@@ -10,7 +10,7 @@ export { type SingleConfig } from './singles.js';
 export { type FormConfig, type FormSubmission } from './forms.js';
 export { type FormField, type FormFieldType, type FormBaseField, type FormTextField, type FormEmailField, type FormTextareaField, type FormCheckboxField, type FormSelectField } from './formFields.js';
 export { type CMSConfig, type ApiKeyConfig, type AuthConfig, type TypographyConfig } from './cms.js';
-export { type PluginConfig, type CustomFieldDefinition } from './plugins.js';
+export { type PluginConfig, type CustomFieldDefinition, type IconSetPlugin, type IconDefinition, type Plugin, isIconSetPlugin } from './plugins.js';
 export { type Language, type Localized } from './languages.js';
 export { type Layout, type LayoutNode, type LayoutPreset, type LayoutNodeType, type ColumnRatio, type SectionNode, type ColumnsNode, type CardNode, type AccordionNode, type StackNode, type TabsNode, type TabNode } from './layout.js';
 export { type CmsContext } from './cms-context.js';

package/dist/types/index.js

@@ -10,7 +10,7 @@ export {} from './singles.js';
 export {} from './forms.js';
 export {} from './formFields.js';
 export {} from './cms.js';
-export {} from './plugins.js';
+export { isIconSetPlugin } from './plugins.js';
 export {} from './languages.js';
 export {} from './layout.js';
 export {} from './cms-context.js';

package/dist/types/plugins.d.ts

@@ -2,6 +2,7 @@ import type { Component } from 'svelte';
 import type { z } from 'zod';
 import type { RawEntry } from './entries.js';
 import type { CustomField } from './fields.js';
+import type { Localized } from './languages.js';
 import type { PopulateCtx } from '../core/server/entries/operations/resolveEntry.js';
 /**
  * Defines a custom field type contributed by a plugin.
@@ -40,3 +41,42 @@ export interface PluginConfig {
         afterDelete?: (id: string) => Promise<void>;
     };
 }
+/**
+ * @public
+ * Single icon entry contributed by an {@link IconSetPlugin}. Carries a Svelte
+ * component, a localized label and optional search keywords. Components are
+ * eagerly imported (tree-shakable) — for small sets (10–50 icons) lazy import
+ * adds overhead without benefit.
+ */
+export interface IconDefinition {
+    /** Svelte icon component (e.g. `Brain` from `@lucide/svelte`). */
+    component: Component;
+    /** Localized display label shown in collapsed state and in the picker grid. */
+    label: Localized;
+    /** Extra search keywords (non-localized). Search matches key + label + keywords. */
+    keywords?: string[];
+}
+/**
+ * @public
+ * Icon set plugin — registers a named set of icons consumable by the `icon`
+ * field type. Registered alongside other plugins in `cms.config.ts`'s
+ * `plugins:` array. Because Svelte components do NOT serialize to the client,
+ * the application's admin layout must wire the same plugin instance to
+ * `AdminLayout` via `buildIconSetMap(...)` — see admin/helpers.
+ */
+export interface IconSetPlugin {
+    /** Unique slug — referenced by `IconField.set` when multiple sets exist. */
+    slug: string;
+    type: 'icon-set';
+    icons: Record<string, IconDefinition>;
+}
+/**
+ * @public
+ * Union of all plugin kinds accepted in `cms.config.ts → plugins:`. New
+ * plugin kinds must be added here. Type discriminated by:
+ * - {@link IconSetPlugin} → `type === 'icon-set'`
+ * - {@link PluginConfig} → everything else (no `type` field).
+ */
+export type Plugin = PluginConfig | IconSetPlugin;
+/** Type guard for {@link IconSetPlugin}. */
+export declare function isIconSetPlugin(p: Plugin): p is IconSetPlugin;

package/dist/types/plugins.js

@@ -1 +1,4 @@
-export {};
+/** Type guard for {@link IconSetPlugin}. */
+export function isIconSetPlugin(p) {
+    return p.type === 'icon-set';
+}

package/dist/updates/0.26.1/index.d.ts

@@ -0,0 +1,2 @@
+import type { CmsUpdate } from '../index.js';
+export declare const update: CmsUpdate;

package/dist/updates/0.26.1/index.js

@@ -0,0 +1,19 @@
+export const update = {
+    version: '0.26.1',
+    date: '2026-05-28',
+    description: 'Nowy typ pola `icon` + IconSetPlugin (zestaw ikon dostarczany przez aplikację, dialog z gridem + search). Scaffolder fix + DataTable polish: scaffold admin używa publicznych entry points; pierwsza kolumna tabeli bez sticky-first; checkbox visual wraca do 16 px z transparent hit-area 24×24 (WCAG 2.5.5).',
+    features: [
+        'Nowy typ pola `icon` (`IconField` @public, `src/lib/types/fields.ts`) — kompaktowy kafelek 96×96 w formularzu (ikona + nazwa, X do wyczyszczenia) otwiera dialog z gridem responsive 3–6 kolumn, wyszukiwarką (filtruje po `key`, lokalizowanym `label`, opcjonalnych `keywords`) i przyciskami Anuluj / OK. Klik na kafelku w dialogu zaznacza, OK zatwierdza; dwuklik = szybki zapis. Stan "missing" (wartość w DB nieobecna w bibliotece) pokazuje placeholder + przyjazne ostrzeżenie zamiast resetować wartość — zgodne z ToV "informuj, nie strasz". i18n PL/EN, `role="listbox"`/`role="option"`/`aria-selected`, LiveRegion z liczbą wyników.',
+        '`IconSetPlugin` / `IconDefinition` (`@public`, `src/lib/types/plugins.ts`) — nowy rodzaj pluginu rejestrujący nazwany zestaw ikon: `{ slug, type: \'icon-set\', icons: Record<key, { component, label: Localized, keywords?: string[] }> }`. Komponenty Svelte (eager import, tree-shakable — np. `Brain` z `@lucide/svelte`) ŻYJĄ w pluginie, bo `cms.config.ts` jest server-only i Zod-validated. `Plugin = PluginConfig | IconSetPlugin` + `isIconSetPlugin` type guard.',
+        '`buildIconSetMap(...plugins)` (`includio-cms/admin`) + nowy prop `iconSets?: Map<string, IconSetPlugin>` na `AdminLayout` — konsumencki `+layout.svelte` admina przekazuje plugin instancje na klienta (funkcji komponentów nie da się serializować przez SvelteKit data). `getIconSets()` / `resolveIconSet(slug?)` w `includio-cms/admin` — runtime lookup używany przez `icon-field.svelte` przez Svelte context.',
+        '`CMS.iconSets: Map<slug, IconSetPlugin>` agregowane przy starcie z `cms.config.plugins` przez `isIconSetPlugin` guard; duplikat slug → throw. Generator TS mapuje `icon` → `string` w wygenerowanym `types.ts`; Zod runtime → `z.string()` (analogicznie do `slug` field).'
+    ],
+    fixes: [
+        '`scaffold admin` generuje `src/routes/admin/api/[...path]/+server.ts` z `import { createAdminApiHandler } from \'includio-cms/sveltekit/server\'`. Wcześniej generowany import `includio-cms/admin/api/handler` rzucał Vite `Missing "./admin/api/handler" specifier in "includio-cms" package` przy starcie dev/build — `admin/api/handler` nie ma w `exports` (v1.0 frozen 18 ścieżek).',
+        '`scaffold admin` generuje `src/routes/admin/api/rest/[...restPath]/+server.ts` z `import { createRestApiHandler } from \'includio-cms/sveltekit/server\'` (analogicznie — był broken w 0.20.0+ ale scaffolder nie zaktualizowany).',
+        '`includio-cms/sveltekit/server` re-eksportuje teraz `createAdminApiHandler` (obok istniejącego `createRestApiHandler`).',
+        '`DataTable`: revert sticky-first column (z 0.26.0 / S10c) — pierwsza kolumna scrolluje razem z resztą, bez wyróżnienia kolorystycznego. Usunięty prop `stickyFirstColumn` i powiązany CSS.',
+        '`Checkbox` primitive: visual wraca do 16×16 px (z 24×24 w 0.26.0 / S10b), klikalny obszar utrzymany na ≥24×24 przez transparent `::after` pseudo-element (`after:-inset-1`) — WCAG 2.5.5 target-size AA dalej spełniony, lepszy wygląd zgodny z proporcjami pól tekstowych.'
+    ],
+    breakingChanges: []
+};

package/dist/updates/0.27.0/index.d.ts

@@ -0,0 +1,2 @@
+import type { CmsUpdate } from '../index.js';
+export declare const update: CmsUpdate;

package/dist/updates/0.27.0/index.js

@@ -0,0 +1,50 @@
+export const update = {
+    version: '0.27.0',
+    date: '2026-05-29',
+    description: 'Shop platformowy — Fazy 1 + 2 + 3 + 4 + 5: schema-driven `variantAttributes` (typed `defineShop` schema, Zod walidacja, GIN index helper, ts-gen typed `variant.attributes`) + admin renderer per attribute type + `variantLabel.template` interpolacja z admin auto-prefill nazwy wariantu + `variantExpiry` opt-in (storefront filter, cart/checkout guard, admin "Zakończony" badge) + `paymentPolicy` A-lite (deposit + balance + signed token + refund per kind + admin balance link + per-kind refund dialog). Faza 6 envet pilot (consumer-side end-to-end QA: szkolenia variants + deposit flow + balance link — nie wymaga zmian w core). Post-Faza-5 hot-fixy uwzględnione w tym wydaniu (single release, nie patch): datetime walidator z offsetem, auto-detect deposit kind przy admin manual mark-paid, admin paymentPolicy UI + preserve-on-undefined w upsert. Additive only — żadnych breaking zmian. Plan: `/Users/patryk/.claude/plans/implementacja-ariacms-0-27-partitioned-kahn.md`.',
+    features: [
+        '`defineShop({ variantAttributes })` (`includio-cms/shop`) — typed schema dla atrybutów wariantu: `text | number | datetime | select | boolean | image | entry | slug` z polami `{ type, label, required?, indexable?, options?, entryCollection? }`. Zostaje jedno źródło prawdy: napędza Zod walidację, ts-gen typings, GIN index utility oraz renderer admin form.',
+        '`VariantAttribute` + per-type interfejsy (`VariantAttributeText/Number/Datetime/Select/Boolean/Image/Entry/Slug`) wyeksportowane jako `@public` z `includio-cms/shop`.',
+        '`InvalidVariantAttributesError` (code `INVALID_VARIANT_ATTRIBUTES`) — rzucany przez `upsertShopData` gdy `variant.attributes` nie pasują do schemy. Eksport publiczny z `includio-cms/shop`.',
+        '`runtime/types.ts` — pole `shop` w entry typings generuje teraz typed `variant.attributes` (`{ city: string; startsAt: string; online?: boolean; level: \'basic\' | \'advanced\' }`) zamiast `Record<string, string>` gdy `defineShop` ma `variantAttributes`. Brak `variantAttributes` = poprzednie `Record<string, string> | null` (backwards-compatible).',
+        '`createVariantAttributeIndexes(attrs)` w `$lib/db-postgres/schema/shop/productVariant.ts` — zwraca `CREATE INDEX IF NOT EXISTS shop_variant_attr_<key>_gin_idx ON shop_product_variants USING gin ((attributes->\'<key>\'))` DDL per atrybut z `indexable: true`. Wymusza safe SQL identifier dla klucza (`[A-Za-z][A-Za-z0-9_]*`).',
+        '`applyVariantAttributeIndexes(shop, db)` w `$lib/shop/server/init.ts` — idempotentny serialized applier indeksów GIN. `initCMS()` odpala go automatycznie fire-and-forget gdy shop jest skonfigurowany (zero ręcznych hooków u konsumenta). `cms.shopInitPromise` wystawiony jako `@internal` punkt synchronizacji dla testów.',
+        '`VariantAttributeRenderer.svelte` (NEW, `$lib/admin/components/variant-form/`) — switch po `attr.type`, deleguje do field components z `$lib/admin/components/fields/` (text/number/datetime/select/boolean) lub renderuje prosty Input dla slug/image/entry (pełny picker UI dla image/entry defer post-1.0).',
+        '`shop-field.svelte` (admin variant editor) — variant row pokazuje siatkę atrybutów (responsywna 1/2-col) ponad legacy polami (nazwa/SKU/delta/stock) gdy `shopConfig.variantAttributes` ma wpisy. Brak attrs = legacy behavior bez zmian. Hydratacja + save propaguje `variant.attributes` jako `Record<string, unknown>`.',
+        '`getShopConfig` remote (admin) — response zawiera teraz `variantAttributes` z `ResolvedShopConfig`, dzięki czemu `shop-field` może lokalnie renderować typed atrybuty bez dodatkowego round-tripa.',
+        '`upsertShopDataForEntry` (admin remote command) — input schema dla `variant.attributes` zluzowany do `z.record(z.string(), z.unknown())`; typed shape egzekwowany serwerowo przez `validateVariantAttributes` (jedno źródło prawdy).',
+        '`defineShop({ variantLabel: { template } })` (`includio-cms/shop`) — opcjonalny szablon nazwy wariantu w składni `{key|filter:arg}`. Filtry: `date` (long/medium/short), `currency` (kod waluty, domyślnie PLN), `uppercase`. Nieznany klucz → pusty string + dev warn; nieznany filtr → passthrough; malformed template → surowy template + warn.',
+        '`interpolateTemplate(template, vars, locale)` (`includio-cms/shop`, `@public`) — silnik interpolacji wykorzystywany wewnętrznie przez admin do pre-fill `variant.name`, dostępny też publicznie dla konsumentów (np. storefront-side derived labels).',
+        '`VariantLabelConfig` eksportowany jako `@public` typ z `includio-cms/shop`.',
+        '`getShopConfig` remote response zawiera teraz `variantLabel: shop.variantLabel ?? null`.',
+        '`shop-field.svelte` (admin variant editor) — gdy `variantLabel.template` zdefiniowany, pole `Nazwa` auto-wypełnia się z interpolacji `variantAttributes` (locale `pl` w 0.27; multi-locale defer post-1.0). Per-variant dirty flag: po hydratacji z niepustym `name` lock = aktywny (nie nadpisujemy editor decision); ręczna edycja w polu `Nazwa` (`oninput`) trwale wyłącza pre-fill dla wariantu w bieżącej sesji.',
+        '`defineShop({ variantExpiry: { source, offsetDays } })` (`includio-cms/shop`, `@public`) — opt-in filtr wariantów time-bound (events, courses, szkolenia). `source` = klucz atrybutu typu `datetime`; `offsetDays` przesuwa cut-off (`0` = expire dokładnie gdy datetime hits now, `1` = jeden dzień grace, `-1` = jeden dzień przed). Globalny config — brak per-product override.',
+        '`isVariantExpired(variant, config, now?)` + `filterUpcoming(variants, config, now?)` (`includio-cms/shop`, `@public`) — fail-open helpers: `null` config / brak source attribute / non-string / malformed datetime → variant traktowany jako upcoming (z `console.warn` dla malformed w dev). `filterUpcoming` zachowuje order; sort source-asc realizowany na poziomie HTTP / admin osobno.',
+        '`VariantExpiredError` (code `VARIANT_EXPIRED`, `variantId`) — eksport `@public`. Rzucany przez `createOrderFromCart` w `server/orders.ts` przed stock reservation (idempotent guard).',
+        '`POST /api/shop/cart` (add) — preflight `VARIANT_EXPIRED` guard: kiedy `variantExpiry` jest skonfigurowany i variant ma expired source attribute, response 400 JSON `{ error: "VARIANT_EXPIRED", variantId }` bez aktualizacji cart cookie.',
+        '`createUpcomingVariantsHandler` (`includio-cms/shop/http`, `@experimental`) — nowy GET endpoint `/api/shop/products/[id]/variants/upcoming`. Zwraca `{ items: VariantPublic[] }` przefiltrowanych przez `filterUpcoming` + posortowanych ascendingly po `attributes.<source>` (Date.parse) gdy `variantExpiry` ustawiony, w insertion order gdy brak.',
+        '`client.products.listUpcoming(productId)` + `VariantPublic` (`includio-cms/shop/client`, `@public`) — nowy namespace SDK. Zwraca upcoming variants per produkt; zero-config passthrough kiedy `variantExpiry` nieustawiony.',
+        '`getShopConfig` remote (admin) — response zawiera teraz `variantExpiry: shop.variantExpiry ?? null`.',
+        '`shop-field.svelte` (admin variant editor) — gdy `variantExpiry` skonfigurowany: per-variant badge "Zakończony" (greyed-out, `bg-muted text-muted-foreground` z border), checkbox filter "Pokaż zakończone (N)" w toolbarze wariantów (default off, ukryty gdy zero expired), opacity-60 na expired row, sort wariantów po source ASC (closer terms first). Brak config = zero zmian w UI.',
+        '`PaymentPolicy` + `DepositAmount` + `PartialPayment` (`includio-cms/shop`, `@public`) — per-product policy `{ type: "full" } | { type: "deposit", depositAmount: { type: "percent" | "amount", value } }` ustawiana w `ShopFieldData.paymentPolicy`. Cart deposit-aware: order zachowuje pełen `totalGross`, `partialPayment.balanceAmount` = co zostaje do dopłaty, `balanceOwed = true` po zapłaconym depozycie. Walidacja: percent w (0, 100], amount = positive integer (minor units). `validatePaymentPolicy` wymusza to przy upsert produktu.',
+        '`resolvePaymentAmount(policy, lineGross)` + `computeDepositAmount(spec, base)` (`$lib/shop/server/payment-policy.ts`, server-internal — nie eksportowane z publicznego entry pointu) — silnik resolver per linia. `percent` flooruje `base * value / 100`; `amount` klampuje do `base`. Null / `full` policy → pełen `lineGross`, `kind = "full"`, balance 0. 15 spec testów + 10 integration.',
+        '`MixedPaymentPolicyError` (code `MIXED_PAYMENT_POLICY`) — `createOrderFromCart` odrzuca cart z więcej niż jednym produktem gdy którykolwiek z nich ma deposit policy. Decyzja: deposit orders span ONE product (refund-per-kind + balance link unambiguous). Cart all-`full` mixed-product nadal działa.',
+        '`shop_orders.partial_payment jsonb + balance_owed boolean` — nowe kolumny. `shop_payments.kind enum ("full" | "deposit" | "balance")` z default `"full"` — back-compat dla istniejących płatności. `shop_products.payment_policy jsonb` przechowuje per-product policy.',
+        '`shop_payments` zaczyna być aktywnie wypełniane: `checkout-handler` po `adapter.createPayment` insert payment row z odpowiednim `kind` (full lub deposit) + `providerRef`. Webhook handler matchuje (provider, providerRef) → branchuje per kind: `full`/`deposit` przepuszcza `updateOrderStatus(paid, paymentKind)`, `balance` bypasses status flow i woła `markBalancePaid` (stock przy depozycie już permanentnie potwierdzony).',
+        '`createOrderFromCart` CreateOrderResult: nowe pola `amountToPay` (deposit-aware kwota do pobrania na checkout) + `paymentKind` (`"full" | "deposit"`). `checkout-handler` przekazuje `amountToPay` do adaptera przez OrderRef.totalGross override — adaptery PayU/Stripe/manual działają bez zmian.',
+        '`generateBalanceToken` + `verifyBalanceToken` (`includio-cms/shop/server`, `@internal`) — HMAC-SHA256 nad JSON payload `{orderId, type: "balance"}`, encoding `base64url(payload).base64url(sig)`. Deterministic per (orderId, secret) — brak rotation, brak exp, server-side invalidation przez `order.balanceOwed === true`. Secret = `INCLUDIO_BALANCE_TOKEN_SECRET` env (≥16 chars, hard-fail przy brak gdy deposit policy aktywne). 8 spec testów (roundtrip, tampered, wrong orderId/secret, malformed, deterministic).',
+        '`createBalanceSession(orderNumber, token, ctx?)` (`includio-cms/shop/server`, `@experimental`) — customer flow: verify token + `balanceOwed`, reuse `order.paymentMethod` adapter, call `adapter.createPayment` z `amount = partialPayment.balanceAmount`, insert payment row `kind: "balance"`, mirror providerRef na order. `markBalancePaid` (idempotent) clears balanceOwed + bumps `paidAmount` do `totalGross`.',
+        '`createBalanceHandler` (`includio-cms/shop/http`, `@experimental`) — GET `/api/shop/orders/[number]/balance?token=...` zwraca minimalny widok ({orderNumber, currency, totalGross, amountToPay, paidAmount, paymentMethod, language}); POST inicjuje payment session ({status, redirectUrl, requiresPaymentRedirect}). 403 przy złym tokenie lub wyczyszczonym `balanceOwed`.',
+        '`client.orders.payBalance(orderNumber, token)` + `PayBalanceResult` (`includio-cms/shop/client`, `@public` / `@experimental`) — REST wrapper dla customer flow dopłaty.',
+        '`refundOrder({ kind?, releaseStock?, ... })` (`includio-cms/shop/server`) — per-kind routing. `kind: "deposit" | "balance" | "full"` matchuje konkretny payment row; kwota cap = `row.amount - prior refunds`. Domyślnie `kind` = `"full"` z heurystyką: pojedynczy paid row → użyj go, multi-row → wybierz `full`, brak rows → legacy fallback do `order.paymentProviderRef`. Refund row link do `paymentId` dla per-row audit. `getCollectedAmount` decyduje o transition do `refunded` (sum paid rows lub `totalGross` dla legacy). `releaseStock: true` (opt-in) reinkrementuje variant.stock per order item. 6 integration spec.',
+        '`refundOrderCmd` (admin remote) dostaje `kind` + `releaseStock` w schemacie input. `refund-dialog.svelte` — radio "Która płatność?" (deposit/balance) widoczne gdy `hasPartial`, balance radio disabled gdy `balanceOwed=true` (nic do refund), checkbox "Zwolnij stan magazynowy".',
+        '`generateBalanceLinkForOrder` (admin remote) — auth-protected, requires `INCLUDIO_BALANCE_TOKEN_SECRET`, builds URL z configured `orderViewUrl` + `?balance=1&balanceToken=...`. Zwraca `{ success, url, balanceAmount }`.',
+        '`shop-order-detail-page.svelte` — nowa sekcja "Płatność dzielona" widoczna gdy `order.partialPayment != null`: Plum badge "Czeka na dopłatę" przy `balanceOwed=true` / success badge "Opłacone w całości" po dopłacie, paid/owed/total breakdown z `formatCentsPrice`, button "Wyślij link do dopłaty" generuje token + kopiuje URL do clipboard, wyświetla URL w `<code>` blocku jako fallback dla "skopiuj ręcznie".'
+    ],
+    fixes: [
+        '`variant-attributes.ts` — `datetime` walidator używa teraz `z.string().datetime({ offset: true })`: akceptuje pełen ISO 8601 (`Z` UTC z admin `DatetimeField.toISOString()` ORAZ offset `+02:00` z importów/seedów/zewnętrznych systemów). Wcześniej tryb default odrzucał offset, blokując offsetowe wartości atrybutów.',
+        '`updateOrderStatus` (`server/orders.ts`) — admin manual mark-paid auto-detektuje `deposit` kind: gdy `order.partialPayment.kind === "deposit"` + `!balanceOwed` + `paidAt == null`, `effectiveKind = "deposit"`. Wcześniej `updateOrderStatusCmd` (w przeciwieństwie do webhooka) nie przekazywał `paymentKind`, więc admin oznaczając deposit order jako paid pomijał deposit logic (`paidAmount` nie był bumpowany, `balanceOwed` nie był ustawiany). Pozwala testować pełny deposit flow przez manual adapter bez sandbox PayU; webhook bez zmian (zawsze pass explicit kind).',
+        'admin `paymentPolicy` — trzy bugi powodujące kasowanie deposit policy przy każdym save naprawione razem: (1) `upsertShopData` (`server/shop-data.ts`) — `undefined` zachowuje istniejącą policy, tylko `null` kasuje (było `?? null` nadpisujące przy każdym upsert innego pola); (2) `shopDataInputSchema` (admin remote) — dodany discriminated union `paymentPolicy` (full/deposit + percent/amount), wcześniej command odrzucał pole; (3) `shop-field.svelte` — sekcja "Zasady płatności" (radio full/deposit + warunkowe inputy percent/amount + live preview kwoty depozytu), wcześniej brak UI do ustawienia deposit.'
+    ],
+    breakingChanges: []
+};

package/dist/updates/0.28.0/index.d.ts

@@ -0,0 +1,2 @@
+import type { CmsUpdate } from '../index.js';
+export declare const update: CmsUpdate;