From 942a22f618fdafe10523afff4cce0e04b92ee6d1 Mon Sep 17 00:00:00 2001
From: WieszczY <wieszczy85@gmail.com>
Date: Fri, 25 Sep 2026 09:34:09 +0200
Subject: [PATCH 1/4] feat(ui): complete availability state baseline

---
 src/UI/Catalog/BaseUiCatalog.php              |  6 +++
 src/UI/Component/DegradedState.php            | 38 ++++++++++++++
 src/UI/Component/PermissionDeniedState.php    | 41 +++++++++++++++
 src/UI/Theme/Base/BaseTheme.php               |  6 +++
 .../Base/Renderer/DegradedStateRenderer.php   | 32 ++++++++++++
 .../PermissionDeniedStateRenderer.php         | 35 +++++++++++++
 tests/UI/BaseThemeTest.php                    |  6 +++
 tests/UI/UiAvailabilityStateTest.php          | 50 +++++++++++++++++++
 8 files changed, 214 insertions(+)
 create mode 100644 src/UI/Component/DegradedState.php
 create mode 100644 src/UI/Component/PermissionDeniedState.php
 create mode 100644 src/UI/Theme/Base/Renderer/DegradedStateRenderer.php
 create mode 100644 src/UI/Theme/Base/Renderer/PermissionDeniedStateRenderer.php
 create mode 100644 tests/UI/UiAvailabilityStateTest.php

diff --git a/src/UI/Catalog/BaseUiCatalog.php b/src/UI/Catalog/BaseUiCatalog.php
index 59dd5ce..13f0e4e 100644
--- a/src/UI/Catalog/BaseUiCatalog.php
+++ b/src/UI/Catalog/BaseUiCatalog.php
@@ -18,6 +18,8 @@
 use SyntaxDevTeam\MiniPortal\UI\Component\ErrorState;
 use SyntaxDevTeam\MiniPortal\UI\Component\LoadingState;
 use SyntaxDevTeam\MiniPortal\UI\Component\Pagination;
+use SyntaxDevTeam\MiniPortal\UI\Component\PermissionDeniedState;
+use SyntaxDevTeam\MiniPortal\UI\Component\DegradedState;
 use SyntaxDevTeam\MiniPortal\UI\Model\AlertSeverity;
 use SyntaxDevTeam\MiniPortal\UI\Model\ComponentIdentity;
 use SyntaxDevTeam\MiniPortal\UI\Model\PageRegion;
@@ -59,6 +61,10 @@ public function page(): PageDefinition
                     ['name' => 'Worker', 'status' => 'idle', 'jobs' => 0],
                 ], 'Usługi platformy'),
                 new Pagination(2, 3, '/catalog?page=1', '/catalog?page=3'),
+                new PermissionDeniedState('Brak dostępu', 'Nie masz uprawnienia do tej sekcji.', 'admin.system.read'),
+                new DegradedState('Dane częściowe', 'Jedno ze źródeł jest chwilowo niedostępne.', [
+                    new Text('Pozostałe dane pozostają dostępne.', TextTone::Muted),
+                ]),
             ], new ComponentIdentity('catalog.content'))]],
         );
     }
diff --git a/src/UI/Component/DegradedState.php b/src/UI/Component/DegradedState.php
new file mode 100644
index 0000000..356fd5f
--- /dev/null
+++ b/src/UI/Component/DegradedState.php
@@ -0,0 +1,38 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SyntaxDevTeam\MiniPortal\UI\Component;
+
+use SyntaxDevTeam\MiniPortal\UI\Contract\Component;
+use SyntaxDevTeam\MiniPortal\UI\Model\ComponentIdentity;
+
+final readonly class DegradedState implements Component
+{
+    /** @param list<Component> $availableContent */
+    public function __construct(
+        public string $title,
+        public string $description,
+        private array $availableContent = [],
+        private ?ComponentIdentity $componentIdentity = null,
+    ) {
+        if (trim($title) === '' || trim($description) === '') {
+            throw new \InvalidArgumentException('Degraded state requires a title and description.');
+        }
+    }
+
+    public static function componentType(): string
+    {
+        return 'degraded_state';
+    }
+
+    public function identity(): ?ComponentIdentity
+    {
+        return $this->componentIdentity;
+    }
+
+    public function children(): array
+    {
+        return $this->availableContent;
+    }
+}
diff --git a/src/UI/Component/PermissionDeniedState.php b/src/UI/Component/PermissionDeniedState.php
new file mode 100644
index 0000000..9227a3d
--- /dev/null
+++ b/src/UI/Component/PermissionDeniedState.php
@@ -0,0 +1,41 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SyntaxDevTeam\MiniPortal\UI\Component;
+
+use SyntaxDevTeam\MiniPortal\UI\Contract\Component;
+use SyntaxDevTeam\MiniPortal\UI\Model\ComponentIdentity;
+
+final readonly class PermissionDeniedState implements Component
+{
+    public function __construct(
+        public string $title = 'Brak dostępu',
+        public ?string $description = null,
+        public ?string $requiredPermission = null,
+        private ?ComponentIdentity $componentIdentity = null,
+    ) {
+        if (trim($title) === '' || ($description !== null && trim($description) === '')) {
+            throw new \InvalidArgumentException('Permission denied state requires a title and a non-empty optional description.');
+        }
+        if ($requiredPermission !== null
+            && preg_match('/^[A-Za-z0-9][A-Za-z0-9_.:-]{0,127}$/D', $requiredPermission) !== 1) {
+            throw new \InvalidArgumentException('Required permission must be a safe permission identifier.');
+        }
+    }
+
+    public static function componentType(): string
+    {
+        return 'permission_denied_state';
+    }
+
+    public function identity(): ?ComponentIdentity
+    {
+        return $this->componentIdentity;
+    }
+
+    public function children(): array
+    {
+        return [];
+    }
+}
diff --git a/src/UI/Theme/Base/BaseTheme.php b/src/UI/Theme/Base/BaseTheme.php
index 34eb39a..2577fa5 100644
--- a/src/UI/Theme/Base/BaseTheme.php
+++ b/src/UI/Theme/Base/BaseTheme.php
@@ -19,6 +19,8 @@
 use SyntaxDevTeam\MiniPortal\UI\Component\ErrorState;
 use SyntaxDevTeam\MiniPortal\UI\Component\LoadingState;
 use SyntaxDevTeam\MiniPortal\UI\Component\Pagination;
+use SyntaxDevTeam\MiniPortal\UI\Component\PermissionDeniedState;
+use SyntaxDevTeam\MiniPortal\UI\Component\DegradedState;
 use SyntaxDevTeam\MiniPortal\UI\Rendering\RendererRegistry;
 use SyntaxDevTeam\MiniPortal\UI\PageDefinition;
 use SyntaxDevTeam\MiniPortal\UI\Theme\Base\Renderer\AlertRenderer;
@@ -35,6 +37,8 @@
 use SyntaxDevTeam\MiniPortal\UI\Theme\Base\Renderer\ErrorStateRenderer;
 use SyntaxDevTeam\MiniPortal\UI\Theme\Base\Renderer\LoadingStateRenderer;
 use SyntaxDevTeam\MiniPortal\UI\Theme\Base\Renderer\PaginationRenderer;
+use SyntaxDevTeam\MiniPortal\UI\Theme\Base\Renderer\PermissionDeniedStateRenderer;
+use SyntaxDevTeam\MiniPortal\UI\Theme\Base\Renderer\DegradedStateRenderer;
 
 final class BaseTheme implements Theme
 {
@@ -70,6 +74,8 @@ public function renderers(): RendererRegistry
         $registry->register(LoadingState::class, new LoadingStateRenderer());
         $registry->register(DataTable::class, new DataTableRenderer());
         $registry->register(Pagination::class, new PaginationRenderer());
+        $registry->register(PermissionDeniedState::class, new PermissionDeniedStateRenderer());
+        $registry->register(DegradedState::class, new DegradedStateRenderer());
         return $registry;
     }
 
diff --git a/src/UI/Theme/Base/Renderer/DegradedStateRenderer.php b/src/UI/Theme/Base/Renderer/DegradedStateRenderer.php
new file mode 100644
index 0000000..db9eea2
--- /dev/null
+++ b/src/UI/Theme/Base/Renderer/DegradedStateRenderer.php
@@ -0,0 +1,32 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SyntaxDevTeam\MiniPortal\UI\Theme\Base\Renderer;
+
+use SyntaxDevTeam\MiniPortal\UI\Component\DegradedState;
+use SyntaxDevTeam\MiniPortal\UI\Contract\Component;
+use SyntaxDevTeam\MiniPortal\UI\Rendering\ComponentRenderer;
+use SyntaxDevTeam\MiniPortal\UI\Rendering\ComponentRendererIdentity;
+use SyntaxDevTeam\MiniPortal\UI\Rendering\Html;
+use SyntaxDevTeam\MiniPortal\UI\Rendering\RendererRegistry;
+
+final class DegradedStateRenderer implements ComponentRenderer
+{
+    public function render(Component $component, RendererRegistry $registry): string
+    {
+        if (!$component instanceof DegradedState) {
+            throw new \LogicException('DegradedStateRenderer received an unsupported component.');
+        }
+
+        $content = $component->children() === []
+            ? ''
+            : '<div class="mp-degraded-state__available">' . $registry->renderMany($component->children()) . '</div>';
+
+        return '<section class="mp-degraded-state" role="status" aria-live="polite"'
+            . Html::identityAttribute(new ComponentRendererIdentity($component)) . '>'
+            . '<h2 class="mp-degraded-state__title">' . Html::escape($component->title) . '</h2>'
+            . '<p class="mp-degraded-state__description">' . Html::escape($component->description) . '</p>'
+            . $content . '</section>';
+    }
+}
diff --git a/src/UI/Theme/Base/Renderer/PermissionDeniedStateRenderer.php b/src/UI/Theme/Base/Renderer/PermissionDeniedStateRenderer.php
new file mode 100644
index 0000000..8aea881
--- /dev/null
+++ b/src/UI/Theme/Base/Renderer/PermissionDeniedStateRenderer.php
@@ -0,0 +1,35 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SyntaxDevTeam\MiniPortal\UI\Theme\Base\Renderer;
+
+use SyntaxDevTeam\MiniPortal\UI\Component\PermissionDeniedState;
+use SyntaxDevTeam\MiniPortal\UI\Contract\Component;
+use SyntaxDevTeam\MiniPortal\UI\Rendering\ComponentRenderer;
+use SyntaxDevTeam\MiniPortal\UI\Rendering\ComponentRendererIdentity;
+use SyntaxDevTeam\MiniPortal\UI\Rendering\Html;
+use SyntaxDevTeam\MiniPortal\UI\Rendering\RendererRegistry;
+
+final class PermissionDeniedStateRenderer implements ComponentRenderer
+{
+    public function render(Component $component, RendererRegistry $_registry): string
+    {
+        if (!$component instanceof PermissionDeniedState) {
+            throw new \LogicException('PermissionDeniedStateRenderer received an unsupported component.');
+        }
+
+        $description = $component->description === null
+            ? ''
+            : '<p class="mp-permission-denied-state__description">' . Html::escape($component->description) . '</p>';
+        $permission = $component->requiredPermission === null
+            ? ''
+            : '<p class="mp-permission-denied-state__permission">Wymagane uprawnienie: <code>'
+                . Html::escape($component->requiredPermission) . '</code></p>';
+
+        return '<section class="mp-permission-denied-state" role="alert"'
+            . Html::identityAttribute(new ComponentRendererIdentity($component)) . '>'
+            . '<h2 class="mp-permission-denied-state__title">' . Html::escape($component->title) . '</h2>'
+            . $description . $permission . '</section>';
+    }
+}
diff --git a/tests/UI/BaseThemeTest.php b/tests/UI/BaseThemeTest.php
index 4a80959..791484d 100644
--- a/tests/UI/BaseThemeTest.php
+++ b/tests/UI/BaseThemeTest.php
@@ -21,6 +21,8 @@
 use SyntaxDevTeam\MiniPortal\UI\Component\ErrorState;
 use SyntaxDevTeam\MiniPortal\UI\Component\LoadingState;
 use SyntaxDevTeam\MiniPortal\UI\Component\Pagination;
+use SyntaxDevTeam\MiniPortal\UI\Component\PermissionDeniedState;
+use SyntaxDevTeam\MiniPortal\UI\Component\DegradedState;
 use SyntaxDevTeam\MiniPortal\UI\Model\AlertSeverity;
 use SyntaxDevTeam\MiniPortal\UI\Model\ComponentIdentity;
 use SyntaxDevTeam\MiniPortal\UI\Model\PageRegion;
@@ -53,6 +55,8 @@ public function testEveryCurrentPublicComponentHasBaseRenderer(): void
             LoadingState::class,
             DataTable::class,
             Pagination::class,
+            PermissionDeniedState::class,
+            DegradedState::class,
         ], $registered);
     }
 
@@ -92,6 +96,8 @@ public function testCatalogExercisesEveryRegisteredComponent(): void
         self::assertStringContainsString('mp-error-state', $html);
         self::assertStringContainsString('mp-data-table', $html);
         self::assertStringContainsString('mp-pagination', $html);
+        self::assertStringContainsString('mp-permission-denied-state', $html);
+        self::assertStringContainsString('mp-degraded-state', $html);
     }
 
     public function testUnknownComponentFailsExplicitly(): void
diff --git a/tests/UI/UiAvailabilityStateTest.php b/tests/UI/UiAvailabilityStateTest.php
new file mode 100644
index 0000000..356b987
--- /dev/null
+++ b/tests/UI/UiAvailabilityStateTest.php
@@ -0,0 +1,50 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SyntaxDevTeam\MiniPortal\Tests\UI;
+
+use PHPUnit\Framework\TestCase;
+use SyntaxDevTeam\MiniPortal\UI\Component\Card;
+use SyntaxDevTeam\MiniPortal\UI\Component\DegradedState;
+use SyntaxDevTeam\MiniPortal\UI\Component\PermissionDeniedState;
+use SyntaxDevTeam\MiniPortal\UI\Component\Text;
+use SyntaxDevTeam\MiniPortal\UI\Theme\Base\BaseTheme;
+
+final class UiAvailabilityStateTest extends TestCase
+{
+    public function testPermissionDeniedStateEscapesVisibleContext(): void
+    {
+        $html = (new BaseTheme())->renderers()->render(new PermissionDeniedState(
+            'Brak <dostępu>',
+            'Skontaktuj się z administratorem & spróbuj ponownie.',
+            'module.files.read',
+        ));
+
+        self::assertStringContainsString('role="alert"', $html);
+        self::assertStringContainsString('Brak &lt;dostępu&gt;', $html);
+        self::assertStringContainsString('administrator &amp; spróbuj', $html);
+        self::assertStringContainsString('<code>module.files.read</code>', $html);
+    }
+
+    public function testPermissionDeniedStateRejectsUnsafePermissionIdentifier(): void
+    {
+        $this->expectException(\InvalidArgumentException::class);
+        new PermissionDeniedState(requiredPermission: '<script>');
+    }
+
+    public function testDegradedStateKeepsAvailableContentRenderable(): void
+    {
+        $state = new DegradedState(
+            'Tryb ograniczony',
+            'Część danych jest niedostępna.',
+            [new Card([new Text('Dane z cache')], 'Dostępne')],
+        );
+
+        $html = (new BaseTheme())->renderers()->render($state);
+
+        self::assertStringContainsString('role="status"', $html);
+        self::assertStringContainsString('mp-degraded-state__available', $html);
+        self::assertStringContainsString('Dane z cache', $html);
+    }
+}

From 6f9bb13c8913101bdb0372cae2be43c8fae17c7c Mon Sep 17 00:00:00 2001
From: WieszczY <wieszczy85@gmail.com>
Date: Fri, 25 Sep 2026 09:34:37 +0200
Subject: [PATCH 2/4] feat(ui): add transport-neutral fragment renderer

---
 src/UI/Contract/UiRenderer.php       | 14 +++++
 src/UI/Rendering/ThemeUiRenderer.php | 35 ++++++++++++
 tests/UI/ThemeUiRendererTest.php     | 81 ++++++++++++++++++++++++++++
 3 files changed, 130 insertions(+)
 create mode 100644 src/UI/Contract/UiRenderer.php
 create mode 100644 src/UI/Rendering/ThemeUiRenderer.php
 create mode 100644 tests/UI/ThemeUiRendererTest.php

diff --git a/src/UI/Contract/UiRenderer.php b/src/UI/Contract/UiRenderer.php
new file mode 100644
index 0000000..3a93fa4
--- /dev/null
+++ b/src/UI/Contract/UiRenderer.php
@@ -0,0 +1,14 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SyntaxDevTeam\MiniPortal\UI\Contract;
+
+use SyntaxDevTeam\MiniPortal\UI\PageDefinition;
+
+interface UiRenderer extends PageRenderer
+{
+    public function renderComponent(Component $component): string;
+
+    public function renderRegion(PageDefinition $page, string $region): string;
+}
diff --git a/src/UI/Rendering/ThemeUiRenderer.php b/src/UI/Rendering/ThemeUiRenderer.php
new file mode 100644
index 0000000..be55fa7
--- /dev/null
+++ b/src/UI/Rendering/ThemeUiRenderer.php
@@ -0,0 +1,35 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SyntaxDevTeam\MiniPortal\UI\Rendering;
+
+use SyntaxDevTeam\MiniPortal\UI\Contract\Component;
+use SyntaxDevTeam\MiniPortal\UI\Contract\Theme;
+use SyntaxDevTeam\MiniPortal\UI\Contract\UiRenderer;
+use SyntaxDevTeam\MiniPortal\UI\PageDefinition;
+
+final readonly class ThemeUiRenderer implements UiRenderer
+{
+    private RendererRegistry $renderers;
+
+    public function __construct(private Theme $theme)
+    {
+        $this->renderers = $theme->renderers();
+    }
+
+    public function render(PageDefinition $page, string $language = 'pl'): string
+    {
+        return $this->theme->render($page, $language);
+    }
+
+    public function renderComponent(Component $component): string
+    {
+        return $this->renderers->render($component);
+    }
+
+    public function renderRegion(PageDefinition $page, string $region): string
+    {
+        return $this->renderers->renderMany($page->region($region));
+    }
+}
diff --git a/tests/UI/ThemeUiRendererTest.php b/tests/UI/ThemeUiRendererTest.php
new file mode 100644
index 0000000..c92e411
--- /dev/null
+++ b/tests/UI/ThemeUiRendererTest.php
@@ -0,0 +1,81 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SyntaxDevTeam\MiniPortal\Tests\UI;
+
+use PHPUnit\Framework\TestCase;
+use SyntaxDevTeam\MiniPortal\UI\Component\Card;
+use SyntaxDevTeam\MiniPortal\UI\Component\Stack;
+use SyntaxDevTeam\MiniPortal\UI\Component\Text;
+use SyntaxDevTeam\MiniPortal\UI\Model\PageRegion;
+use SyntaxDevTeam\MiniPortal\UI\PageDefinition;
+use SyntaxDevTeam\MiniPortal\UI\Rendering\ThemeUiRenderer;
+use SyntaxDevTeam\MiniPortal\UI\Theme\Plasma\PlasmaTheme;
+
+final class ThemeUiRendererTest extends TestCase
+{
+    public function testFullPageRenderingDelegatesToActiveTheme(): void
+    {
+        $renderer = new ThemeUiRenderer(new PlasmaTheme('/assets'));
+        $page = new PageDefinition('dashboard', 'Panel', 'dashboard', [
+            PageRegion::CONTENT => [new Text('Treść')],
+        ]);
+
+        $html = $renderer->render($page, 'pl-PL');
+
+        self::assertStringContainsString('class="mp-plasma admin-shell"', $html);
+        self::assertStringContainsString('href="/assets/theme.css"', $html);
+        self::assertStringContainsString('<html lang="pl-PL">', $html);
+    }
+
+    public function testSingleComponentUsesActiveThemeInheritanceChain(): void
+    {
+        $renderer = new ThemeUiRenderer(new PlasmaTheme());
+
+        $html = $renderer->renderComponent(new Stack([
+            new Card([new Text('Nested & safe')], 'Karta'),
+        ]));
+
+        self::assertStringContainsString('class="mp-stack"', $html);
+        self::assertStringContainsString('class="mp-card plasma-card"', $html);
+        self::assertStringContainsString('Nested &amp; safe', $html);
+    }
+
+    public function testNamedRegionRendersOnlyRequestedRegion(): void
+    {
+        $renderer = new ThemeUiRenderer(new PlasmaTheme());
+        $page = new PageDefinition('fragments', 'Fragmenty', 'application', [
+            PageRegion::CONTENT => [new Text('Treść główna')],
+            PageRegion::ASIDE => [new Card([new Text('Boczna')], 'Aside')],
+        ]);
+
+        $html = $renderer->renderRegion($page, PageRegion::ASIDE);
+
+        self::assertStringContainsString('plasma-card', $html);
+        self::assertStringContainsString('Boczna', $html);
+        self::assertStringNotContainsString('Treść główna', $html);
+        self::assertStringNotContainsString('<!doctype html>', $html);
+    }
+
+    public function testMissingValidRegionRendersEmptyFragment(): void
+    {
+        $renderer = new ThemeUiRenderer(new PlasmaTheme());
+        $page = new PageDefinition('fragments', 'Fragmenty', 'application', [
+            PageRegion::CONTENT => [new Text('Treść')],
+        ]);
+
+        self::assertSame('', $renderer->renderRegion($page, PageRegion::ASIDE));
+    }
+
+    public function testInvalidRegionIdentifierIsRejectedByPageContract(): void
+    {
+        $renderer = new ThemeUiRenderer(new PlasmaTheme());
+        $page = new PageDefinition('fragments', 'Fragmenty', 'application', [
+            PageRegion::CONTENT => [new Text('Treść')],
+        ]);
+
+        $this->expectException(\InvalidArgumentException::class);
+        $renderer->renderRegion($page, 'invalid region');
+    }
+}

From f318073c55bdac974c87d34279ef0b1f564b2aff Mon Sep 17 00:00:00 2001
From: WieszczY <wieszczy85@gmail.com>
Date: Fri, 25 Sep 2026 09:35:29 +0200
Subject: [PATCH 3/4] docs(ui): mark state and fragment rendering baseline

---
 README.md                         |  4 ++--
 docs/05-UI-COMPONENT-MODEL.md     | 19 +++++++++++++++----
 docs/16-IMPLEMENTATION-BACKLOG.md | 11 ++++++++---
 3 files changed, 25 insertions(+), 9 deletions(-)

diff --git a/README.md b/README.md
index 35827c1..1bae21f 100644
--- a/README.md
+++ b/README.md
@@ -6,9 +6,9 @@ Projekt pozostaje świadomie lekki i server-driven: PHP generuje HTML, MySQL/Mar
 
 ## Status
 
-**Faza: implementacja Service Platform / `1.0.0-alpha.2` (w toku).**
+**Faza: implementacja UI Core / `1.0.0-alpha.3` (w toku).**
 
-Core Kernel posiada już bootstrap, bezpieczny error boundary, data-only package discovery, routing, capability registry i izolację błędu modułu. Service Platform dostarcza baseline cache, bezpiecznego filesystemu, PDO Storage, plan-first migracji schematu per pakiet, typowanego klienta HTTP oraz kontraktu Jobs z pamięciowym providerem testowym. Nadal nie budujemy modułów domenowych takich jak Minecraft, VPS, PunisherX czy StableManagerX — najpierw platforma musi przejść kolejne kryteria roadmapy.
+Core Kernel posiada bootstrap, bezpieczny error boundary, data-only package discovery, routing, capability registry i izolację błędu modułu. Service Platform ma bazowe kontrakty i providery dla cache, filesystemu, PDO Storage, migracji plan-first, HTTP, Jobs, Realtime i Audit. UI Core posiada semantyczne `PageDefinition`, renderer registry z dziedziczeniem theme, formularze, stany danych, podstawowy `DataTable`/`Pagination` oraz transport-neutralne renderowanie pełnej strony, regionu i pojedynczego komponentu. Nadal nie budujemy modułów domenowych takich jak Minecraft, VPS, PunisherX czy StableManagerX — najpierw platforma musi przejść kolejne kryteria roadmapy.
 
 ## Zasady nadrzędne
 
diff --git a/docs/05-UI-COMPONENT-MODEL.md b/docs/05-UI-COMPONENT-MODEL.md
index 7d722e0..3477095 100644
--- a/docs/05-UI-COMPONENT-MODEL.md
+++ b/docs/05-UI-COMPONENT-MODEL.md
@@ -242,10 +242,13 @@ Każdy data-driven component powinien jawnie obsługiwać:
 
 Nie należy dodawać ich ad hoc per module.
 
-`LoadingState`, `EmptyState` i `ErrorState` są już częścią publicznego kontraktu.
-Base Theme nadaje im odpowiednie role accessibility (`status`/`alert`), a
-`ErrorState` może pokazać bezpieczny publiczny error ID bez ujawniania szczegółu
-technicznego. Stany `degraded` i `permission denied` pozostają do dodania.
+`LoadingState`, `EmptyState`, `ErrorState`, `PermissionDeniedState` i
+`DegradedState` są częścią publicznego kontraktu. Base Theme nadaje im
+odpowiednie role accessibility (`status`/`alert`), a `ErrorState` może pokazać
+bezpieczny publiczny error ID bez ujawniania szczegółu technicznego.
+`PermissionDeniedState` może opcjonalnie ujawnić wyłącznie bezpieczny identyfikator
+wymaganego uprawnienia, natomiast `DegradedState` może zawierać nadal dostępne
+komponenty zamiast sprowadzać częściową awarię do pustego ekranu.
 
 ## 9. Fragment rendering
 
@@ -259,6 +262,14 @@ UI Renderer powinien umieć wyrenderować:
 
 Dzięki temu htmx/SSE korzystają z tego samego drzewa UI zamiast osobnych template'ów.
 
+Bazowy kontrakt `UiRenderer` i implementacja `ThemeUiRenderer` obsługują już
+pełną stronę, nazwany region oraz pojedynczy komponent. Renderowanie fragmentu
+używa registry aktywnego theme wraz z całym łańcuchem dziedziczenia, więc np.
+komponent odziedziczony z Base Theme może nadal zawierać zagnieżdżony override
+aktywnego theme. Mechanika out-of-band update, wybór target/swap oraz error
+replacement pozostają odpowiedzialnością przyszłego adaptera interakcji (htmx /
+Realtime), a nie modułów domenowych.
+
 ## 10. Component identity
 
 Komponenty dynamiczne potrzebują stabilnego logical ID, ale moduł nie powinien ręcznie składać losowych DOM ID. UI Core może generować DOM identity na podstawie component tree/request context.
diff --git a/docs/16-IMPLEMENTATION-BACKLOG.md b/docs/16-IMPLEMENTATION-BACKLOG.md
index 0f7d376..073d2e6 100644
--- a/docs/16-IMPLEMENTATION-BACKLOG.md
+++ b/docs/16-IMPLEMENTATION-BACKLOG.md
@@ -226,9 +226,10 @@ identyfikatory wierszy i akcje row/bulk.
 - permission denied,
 - degraded.
 
-Baseline gotowy dla `LoadingState`, `EmptyState` i `ErrorState`, łącznie z
-rendererami Base Theme, accessibility roles i reprezentacją w UI Catalog.
-Pozostają stany permission denied oraz degraded.
+Baseline gotowy dla `LoadingState`, `EmptyState`, `ErrorState`,
+`PermissionDeniedState` i `DegradedState`, łącznie z rendererami Base Theme,
+accessibility roles i reprezentacją w UI Catalog. `DegradedState` zachowuje
+możliwość renderowania nadal dostępnej części drzewa UI.
 
 ### E6. Fragment rendering contract
 
@@ -236,6 +237,10 @@ Pozostają stany permission denied oraz degraded.
 - named region,
 - single component.
 
+Baseline gotowy: `UiRenderer` + `ThemeUiRenderer` renderują pełną stronę,
+pojedynczy komponent i nazwany region przez registry aktywnego theme. Szczegóły
+transportu, out-of-band updates i target/swap pozostają w Epic G.
+
 ## Epic F — Theme Engine
 
 ### F1. Base Theme

From d97ef24fb95b795c9b72a11ab2d8295a62d8c355 Mon Sep 17 00:00:00 2001
From: WieszczY <wieszczy85@gmail.com>
Date: Fri, 25 Sep 2026 09:36:36 +0200
Subject: [PATCH 4/4] test(ui): align permission state escaping assertion

---
 tests/UI/UiAvailabilityStateTest.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/UI/UiAvailabilityStateTest.php b/tests/UI/UiAvailabilityStateTest.php
index 356b987..16ec444 100644
--- a/tests/UI/UiAvailabilityStateTest.php
+++ b/tests/UI/UiAvailabilityStateTest.php
@@ -23,7 +23,7 @@ public function testPermissionDeniedStateEscapesVisibleContext(): void
 
         self::assertStringContainsString('role="alert"', $html);
         self::assertStringContainsString('Brak &lt;dostępu&gt;', $html);
-        self::assertStringContainsString('administrator &amp; spróbuj', $html);
+        self::assertStringContainsString('administratorem &amp; spróbuj', $html);
         self::assertStringContainsString('<code>module.files.read</code>', $html);
     }