From 86efa8229302595ec1c1958c3a19c166f42bbd23 Mon Sep 17 00:00:00 2001
From: Filipriec <filippriec@gmail.com>
Date: Sun, 30 Aug 2026 13:00:55 +0200
Subject: [PATCH] hidden columns from clients

---
 client                                        |   2 +-
 common/proto/table_definition.proto           |  27 ++++
 common/src/proto/descriptor.bin               | Bin 203675 -> 205480 bytes
 common/src/proto/komp_ac.table_definition.rs  | 127 ++++++++++++++++++
 server                                        |   2 +-
 web/locales/cs/main.ftl                       |   4 +
 web/locales/en/main.ftl                       |   4 +
 web/locales/sk/main.ftl                       |   4 +
 web/src/lib.rs                                |   5 +
 .../pages/admin/table_definition/loader.rs    |   2 +
 web/src/pages/admin/table_definition/logic.rs |  49 ++++++-
 web/src/pages/admin/table_definition/mod.rs   |   4 +
 web/src/pages/admin/table_definition/state.rs |  21 +++
 web/src/pages/admin/table_definition/ui.rs    |   1 +
 .../table_definition/presentation_panel.html  |  17 ++-
 15 files changed, 263 insertions(+), 6 deletions(-)

diff --git a/client b/client
index 7eaf34d0..2e4b1589 160000
--- a/client
+++ b/client
@@ -1 +1 @@
-Subproject commit 7eaf34d09e49bb0f30225368e20c63fb18c049bf
+Subproject commit 2e4b158935ea31e1cf0c8504b6293d36ec703edb
diff --git a/common/proto/table_definition.proto b/common/proto/table_definition.proto
index 1e7aa49b..67946424 100644
--- a/common/proto/table_definition.proto
+++ b/common/proto/table_definition.proto
@@ -58,6 +58,11 @@ service TableDefinition {
   // Physical column names and identities remain unchanged.
   rpc SetColumnPresentation(SetColumnPresentationRequest) returns (SetColumnPresentationResponse);
 
+  // Shows or hides one column in bundled data-entry forms. This is presentation
+  // metadata only: hidden columns remain available to data APIs, scripts and
+  // backend calculations.
+  rpc SetColumnFormVisibility(SetColumnFormVisibilityRequest) returns (SetColumnFormVisibilityResponse);
+
   // Drops a table and its metadata, then deletes the profile if it becomes empty.
   rpc DeleteTable(DeleteTableRequest) returns (DeleteTableResponse);
 }
@@ -471,6 +476,10 @@ message ColumnBehavior {
 
   // Stable public identity used when updating this column's presentation.
   int64 column_id = 5;
+
+  // True when bundled data-entry clients should not render this column.
+  // This is not an authorization boundary; data APIs still expose the column.
+  bool hidden_from_forms = 6;
 }
 
 // A script that targets a specific column in a table.
@@ -507,6 +516,24 @@ message SetColumnPresentationResponse {
   int64 row_version = 4;
 }
 
+message SetColumnFormVisibilityRequest {
+  string profile_name = 1;
+  string table_name = 2;
+  int64 column_id = 3;
+  bool hidden_from_forms = 4;
+  // Row version returned by GetProfileDetails when the column was read.
+  int64 expected_row_version = 5;
+}
+
+message SetColumnFormVisibilityResponse {
+  bool success = 1;
+  string message = 2;
+  int64 column_id = 3;
+  bool hidden_from_forms = 4;
+  // New row version after the update.
+  int64 row_version = 5;
+}
+
 // Request to delete one table definition entirely.
 message DeleteTableRequest {
   // Profile (schema) name owning the table (must exist).
diff --git a/common/src/proto/descriptor.bin b/common/src/proto/descriptor.bin
index c073db7793a45303029d670f52e0aff6643472b3..8e339ff04577a10153e741db2bcb63fc8331e4cd 100644
GIT binary patch
delta 11309
zcmb_id3e>;nZDmS=ic1=3o+zJNW#s+6>XIzK?JP}I+jfVmx>hI(y5ImK4e&;3Fu@x
zdSyTaq!sDlK^Tk6AVEPEI|O7C9i!kvu^>Bz4j=@PrV5Iv%=?`smw6ujZ=NTA<UQxS
z@A=O6eP{jMc}?va-)i^BAL*qAvGAp)#SPTdf%fRC-_o)kVYeV}R83V?^|-t4t*ae-
z*S)oMW9y4zDY`U1EZ0^HLir#rZp!~1%@@V{C@8z5dVK%dF%!m)<BAbA^)+|bjHwyl
zpf}E>!8e7)LE;`$dsj_Wk%X2U7Pke1tG>HK^<5q6*PoyyMfL3ysi>sO1`0ZVU$>Xl
zi@yJV-9EfQbZJ^KlQt_c<$|V%XHyU>{T&5`-_v_|mF_i(lHXUYX{adDH%y}J?`@Hu
zM-#G7AD|#Bj8bG;RG*ti!>E7Lu>YXDg7jJnR4gLeh4LT7sN^e@x?@!BgY~J}x)kD5
zjeo{fr>u8VHRDouPZ(D<rn)LsRXM)0yn5XDx`vdAX+>)IsG9l|{_d-*u17`X_?p^r
zL27LE_)2aInK2F5uq1N9>D8y|s>h})p<4MsWzCq%yT??g#@8C@)Q^8MxV}fK{+_y;
z`^ML&D#uj?sk<xh8C^ZDDs@lgn0qFSG5YltLC`LUviSu2W2GJmpt8OmNuV3=4Ss0`
zniI-?VnFh?)PTC$`|4A=`9-=dodbHmSe_%~fZi{>*dx&U_3Re}fl!f94UF7K_+P3B
zI0NJ5L3W^2L_|V4NF<rUAj&B25gHCkbo2;vgNiyCISSR_$jua_S&z_caJ<6k5$g>R
zDZ>GP-Vl-H5gHDO7kdP~A!VH%4OK%$2UkU)4HYquxGw7gk3bum7X||{Dv=1Iw?!rq
zC9l%IT1|!e@<!^Gdt1Cquv%bnf{hu`G`f+lrS2o#uuurS5eeHD5cEbA6b46;PGF#J
zq~5xSTCN@`OpLfJhQe%XHxM@|xyYCU1p3GyUJ`s}=?Flj{`@66b#-MMU0^ho*(OF1
z;~px*PL3`>uPiAI_F6j7y}HX{+TZ=&HghEi_qr$uA-M^n@Fz=9p&YHdFQE^w9^KZT
zLVu&%`ct5f4u9bKQ=pH&v}^E<^$%LsHC_1%rKx*eTZd6F>JlZ65e1{Jb1GP1JA^A9
z&<B>%!fp?=5n>=bkSKJ77zhs}OM=^tKeIyFpqDSBJFaeMGcXI?HnbU-1$Ki?TDT_*
z?1oFa1`BO>@lZabuUk%wdOYOvL5MgA4`t=J?&2Uk)IKkG!V(gpnn*ft1x>jr2PrK?
zLU9TDb}+^;yR(PL<cXB(<)LKQ=gMGG4Cy7q*er@X*R*E^3E6%Y#Y=+y>^F(LQgfP4
z{1^S2D&`RUz}hH<*c^f*9E8{$N)`u8q#>d9*{0t#(NgO9Y=(q%QqNN20!KnV0V2P5
z6D&|+>_v*aq<_AecBNmWcvlQsAx+W$Lc*-&j)0;DS~CElxR8)Bt`>?52`OW#sB9!r
z>?$$S7<wuj(@2Q|Ukhp@b>h`QsbO$ts1}jv=4u5z3urxyN=Pjtgw=M7JO@PLIS8pm
zgv>k6<BEo{r4;$2mTRaby_Djdo=Qb|T+2ul84eH>0j+U>P+UfsxU2{W#btz<YpJMQ
zPNLLR^0)v!mB+Q55?+{{yqt<T#g$4&d0Ysw%?TiI0X>%ovVs!U*{B6~1(lY$Zh>AU
zVFw)*5>!A>#nc5%v~xyb?gHkv4~D}9u`t#|k=Kay@wIe&x{2c5jAV?Ru!^u2@-TrQ
z2^jMblB)=-p{s@DDoz(3NsLWhO`?yhBm@Z11_+f%{neCxsjoGSyY@7&0M(FMO_%o$
zhQhk6Ft&~&TlCg-G$eN&#mj<nbdbfiZP4A;Q_u1ZewZkP(gvS!fDqci3D?_DQ2B<Q
zvYxJ}cq2pMfV|;jnPvKZgJbyu&*Cf&NV7h+o)+|N_V%L?_BRvOVIDdlB$^2ev4iNf
znXnRHV-$ck>CGFcZ{JNB1rE<9pQ2fU!?TI77Fz`l&nCiR{Gd^Q^WN9}UZ;lZ-_Ix@
zZ0dc#d}IkMu7Ga&0EEK()aQ!eaRDF3!`Md@Iox#SbqXl`5ydYwQHrw@clg;01fu|L
z&HzGkhj%6*BzO4P8|N|a^b-UKR6tK<r|$GlMJ=d1{RBzJ*{QooTw+EGgz*8|<N$=!
zF3N82Yaz9Z^165ksa^DgAG!em?IzK~RZ1uUdL;=L?e<}c8z=9klC<xay}X;cb$3$W
z?jhm(!Gg!oOJSV=bW2LyczX|pc8&u=X%D5mSJ8Gai7TB^Q78d=rD!i$wbutOF0jV|
zy1)TKYA*+F2IpU#Gwpz0{wDpd;sD|J!uf$ha1QV$;2<~$2s`5>%gGAWAwBlL>CyC|
zOh~Y~sY8BCi1Y3Sh%KQV@*@$(KBmYgL^uLTl|ajn2}c*6$qCMpqka(p!r%byA^?cC
zNBtrI2-Ty05lDzMYLEFfDPfWX&?X6>sdZ}-Ah^ePO|so0M_PP-B}`HPS_c4v+Cp)=
zG690x;`1xP=r{?iE@^lR5CH(T0RY4Zj{E!qgw%1$vy&IlkTH4TmuMu6eM*s5>z62x
z^;0A|8yMx|sygZB4kJ_onyro@%s)xj*u4%IwSRMa0wW8}CcqGl|HhlZ^@v3f#y+RW
z61}LIt}FPQ;zhwU-n0Ym?`yP7ekJsCjg;Ti{%yLSDo|woi3U*pni4rCD*!Q)uL<Xo
zb9}rG*o3)FOWz@imCwb|#kFEn<_fo!p%F-P1(v@X3<riiqxXG4{mP#aBG*w^=^4@9
zZef9O{xbsB-)|@ocuwEEh3d<n!#e3G?BwS}mfg(*<K*WAcJl^9L3|eIPqxr+$`@n|
z;{|PjNZ9=heu3@+k>4@+iJ>5djr!mJM8hf?GrjOsY7|-CPM%7QBJ2=M=V=k}R9dX_
zx6+LCVj=9&2!-G*7DYdFhT_Nw*p)Xxo|&<wBJ!#*(;~{AS}LOE2omMng<2-;34{?U
z0nHhMAsn|%;EchkLhP{R!Y(b0ZnfB~9*og=xv;ATAkd0TW99<-wzd{+2f-!TVQi&{
ztkq*bq=C6BMZ7agmC9z*R_To&(oN;7ymL?pp;f|d*MJ!4DuL~q{h7_ZtkGBg8U9@3
zLx4gq6>fq8g0e<nf(}66?ZVgw5&1%|{4@0rHwfINZi7%ei7B&Dh)p_s8{L|>Q3Uxx
z*C58_Y}K3kpSDr=K5rt+gWMp?7Ne6lMRvzb0lIlpVCF2rwca#Ai+A*<ZM3w{JLfam
zymv%)K^v0|e23GjyD<gfdryeNdhvGZmiL}Ovmr*%#O?$A@piiTst>UEIlc|z2Lds(
zwxIxmAMl8;c0}~JRjB-AS6%X%DAUtEqN3g?@S{O2O^fW@HVL+AD<|Q<Ithe#yWaK@
zJv?|jyx7)`vva%1Da;f=X}c)uk|}`Fc7dI5gi`|EDO8W-Abr^qD$vV!&~*b)kkRCo
zZl}oU&?dptaHq(>BvW8Cum%3yY4Wb8FW*Tcd+#}aSUef`WP(I?$KxRNb3}BtU%$SS
z2K3pF^F~_-JSF#wM8+RHDfhEKmI%khzz;QDwTpUEpF`*O$uski$j*3#=jI`SEvu^u
zuLxsDh4@s@+fA3|9Th<yj*FZxeAiYjdfRTgrFTn4(A>6Fi)f3Dxp1QZw)A&I^msxK
z-$MiYoyhnRn+;4nA#y@DDim--(V<hO0H&P~IIx+_V*^_Co;_54U8`{WPCF5SN~_2Y
z%}N6ZjaJdYo*@CD&?@i<@eVIm?RY|-)&uv_=9^CY35h~36}S-dz7Gh_X@Py8_wbxB
zc1A?Lwu_a*Ym7Q0a9F+rYB_AsS$*d|`f2*CHwcA@*;(PvG=QL-6=9hX2ZZ=paUq`q
zgt{P%eJdi5NP9rI04=}e<%W0a3t0S|5SJMq5K;)x?zVs!^*ND!v8%m^dpRe5(A~F2
zFXu!>Pplq7<%Y3IGBQQqx}R>%oh0L_;97K$%N;zbU*1pGRXi%)#)U!%Ju2PZ5)eX<
zN+jgX5NaRBrpd?*UGNtgnw}=zako7SO_%Pn3WV_k+MN&(g44YqAOxqgAP=%V$K!G7
zPKQ7kB%mE6AO`uk#7e|*0W^&Z?dh-p7*dZ*EZV$q=7q5*WaRhy^k1ld`Ux4gSK2(b
zZKf0#8VMlS254;qgyKx;0uKnmnbHJasXVsr$qbc`;((sY#ypv!vMo<~>g{>FpUm>(
z0>Zce?YICTHA}h-0ff{n=}x_XkebEA>V;v2VeBaxnWqy6>9X`w(!8zV49&yR(p@2e
zAP8uW1%MFL((Orr5Y*CLAw%wMj<hE#2=TB0?XUn%ZNlCX070E2JLH>ar9&Rp(>~Hb
z-~!syBOtg>%eZ}(00j4GAL)?MT<M-AfItQGR9->n%D9a*YE5J8I3wVK4q@yMGV+2X
z{iDCq9Yg*g-95SkJ7K=J1_+XXb|iq1obU4v5R&uRnwyY!9oW?8^|rs#kn5iJaX}#z
zo|o>51jvnKo}FWWP<UQma;b?+KHhC)<P|;ge-M`!rF-AVXOk96cccS?AfO#3AOsi6
zxJ?5<2riU4{O+k#KAY6&M*{>ZpdAgMsddv55Y$HR+jKt1Ws$_AEKd|5Z~=X{th|U*
z$JK(nNMcE}-2%NN-HS}Vi3_0bmgDl0bjMiKn#S%$CZDtVWhqM2PM9xqz@E#S+so2D
z$)GW~FH83%lg}nD2G>!e7J4dgZ;LZj-rN>vs8|)2WGs$FFEiM4d4F4yF`0L_B@!m{
z$*yA<TQ2b`b=6@Sm|ia9_Kw<-qqf4k9tg$&T0uYvuJDNj2*DNJ^&Q!_uS#)+83zzt
z0%#))2vc8`?m-67H12Ab^a5Z=y()Y6!2wFB0z4PV$a^|GLW9#y5|=QJPXXJuN(#HZ
z0l_vvYa1XGS4np_0fgWxiMxrVqH?uQ#sZU3fHo@tO|45tKu}lvWK0)uM!hEavWJWU
z!ngqKxBxM(*Q9%>0ff|R(mm7wLh3bX?s_}`pf!Fe1cDNvSK_yXH4?{E+Yjg48d;Eb
zYrILgHPW8pAqDPQ>7FNnEc8;Gerx@zidsmmmF{^G5N52E_UZs7v|T4fZ`W-URsi~5
zqkO?$C(9~)HMr|!ugjfV(RjVjzXB116rhg?r{8*?ey9a?J*S_I2%Zo&WP*uja)x%<
zE)e{butDP8JEzDvo!=5Ra5R5v5+NR{jk@+I-PvbjCW?3}R~tE5tpD&<4p>kWtm5NN
z0Y0CoW-PkNMWnCaMZI+QV>GD(CEi+olW6w2jpm>?%c5kk-_nCny{q>gqXQN1X3Px0
zc~`pYV1Wq0c~^${!JSCr!Z5Z)M*gZ>T4+S>7GBVQ4m%1tiMQ(8j?>7?w|XHILTIbZ
zvU?36gtqct!^17)oZ5zMDtV*6<rnyl`1x_VrW^&<S*SMkZDda0ZA>0+$jIIudgLcG
zqI`!RY@tch9n!tt1A?+c;@msTP=I#p{h!eA^4*zUI3IV*EPGonH0iio;<ju}ME>p5
zcb%X+)BAix3QgYalW|YsyxYf=`Rvj{PP~K2wB$@m4X>L}oqBK-zB+!#x66CR)ZklX
zeX4#`?SwH^sd2UA@lA4ERdrozJb%u#-#se=`*Aak5^hn650(?gkE*S!`4{sQGIe(?
zzKT}XHC&tdcA2UlUo&P*s`{VrtF6aZ%~AdvDn3|p4#7feqIWc}#Rp}UeU?Bi#&eL@
z;{FJCQ5ZWcBgdsae1d+QJ}l$*nYxJMeMAboodZD;(5^gyP(0#21PH|=>>-{aMI85!
z{W$>$R6v`rfTq@cz5oREW9dF$q>FgbI_kGUAaDUamz9sogxv;F3+_?B4HhvvCPlvS
z0T8Hwp2}%(Oyau59zv~Yj0=vn7-`TVMW<_AEw4ksp3Cb{i%fWB&W9FRSj3NtLUjsb
zCuQU_{i~DoZ@DM=)H)PS=*0eO)hAEVEn{1~-%tppR_`}JD7AXOb>h+e-Jb}7U<9Bw
z0?^dDZ%}}s{+&;R{GB2h#!kz~*OHQho_diw>h*u4YtpA>oWC+Fm1JAK@S7tLgaNHE
zAcVj03kV>Dzwn!5l5P6ZuarQb0(vUj^rc@ZQ48vqex>|Ll4E(suk}E1GN8>-K&-)M
zWVT(f0U>opmf25HfRH-FYyB_G0D#Www_E9#>9gLMN%KB=R=T%dKyGBu??M%av2SH$
zva;8*Vu*k1Pk6=bj&t76Ko}FCoh*Q8d(NM{0ik-%pS+9ByX_;&9leW<KLD*i0Kt7k
zxuZ8AxQ{4z^e$$1OjK^`1A;pMtvdkWj)}^-0}x6Rm2(FmlqM>;BfA&;QOt0X(mg(-
z%hQvTo0TX9X_9g~37~0ZHZGw`!q^lQ`K@zE30h83ar>>HgdOsja<@MqI0VoR3J`4{
zQ|{af2-U}wyZx0IhfG!O@L6IU0_eHykg3WYK2ZzqROPnP5_ZTm<(3#AbPH&g7(h^`
zDYpm%f;vsPC8mVYbj7><wV2L;-~!ti0)jhTxdji<w8nzRSN;-q{0t>7Ob*oVwZegZ
z^-MijS&s#}vdS%^Xb4rb^cL|lFhjX~LoHNiDEG!tio2_dJmuV5ik45PI6svuRm$$2
zsoYHu2&#bA)>4sX|ISqIs)uUG&ct2VaZ&lC&$m+JUO?+!KvV1T4G`2PeZG~lduMs~
z0-;+#I~YJvXR&*K$_pYexU;-}OBwy%_}5gjdjY-4?B3sd_oA(74EJ(wma=<io80Wt
z2LR03nO@n2vweo57R=e44>w>DD+^;!tH`r@#%FYGQ5hOOt+1F5fMywca2^sgd8J;q
zA3q^E{TW@{2c-~4vGoQZIP-j>0z!NqC+cM0w##_H^YyKt(<4{me=z4~nC!>-K21>z
z=6p7*0%mm%V=t)4B1OrRzW+nKCYGF{+zy?=ctPPp_A_XAX8RWC>rc_}-uNHd3%s)c
z(Q<(gFCerRaCrFvr!yPXsNXt8Kk9@3L2UF!0dk#ROaMV_<ly2NCyE!o#VXRIFFQ>`
za~G><A#XbP?hQL$(bG@UEkAoj*^4?CA`xCu=2tv2%Hdh21phJv1pdv@GL>yUeltRs
z=R*(;JPi**2(>G9&oAi93s+{;`Hg-htN*8jw^Cv3b%mdSHQn?j{ecQopuDc|9>!<7
z6hDE#p~Rz6{mmJ=xd<55Zz#Nkzs(QYz&wCvUHKJlyw)Iiq!}M5%xj`40HImAhe}fb
zuQV&{;}1FkG}x^F@hsinm#f*Oo6i?ur*2l+_TksGfWT&sHGcD8O~81z=-_KQY!rCf
zY{BQoHWSzjTR2zvDV!B}u54k27x~?mOHi=AsrxsSA~On}J=@Qh;Q6y%;RBAB;2E@?
zCm%n<vjT#&Q&0Jp2Hao}_J*Cf3$(T8X|z)ncFq()V5jPG5k4DP0d%<+`IW4h{jNyr
zi_g*Ueyqd?LzHJm!$-rt3O}6irtsl#ufk6!@KZ@Eh0YIR&q=;Vy4N?9uRl0P>&&?L
z+Ju^n7+;(YDje;+7+;+ZDje?aa9aHRb#}A3#qjy=bm)A(`4FoTnPHhvu{^9{j*kn}
z5q&F(n@w!u5IAza0AHn!s6<(t0eqP{qAt8Bc-M~x*Qw+BBNA_2&;Ce2;rRLa!MCa7
z3hzgL2z;M9&eN{1HGy;ZQ>DJryM*Xn0u7VIpQ?7n!CVUB96jhFja&7lQq1b_F#2g#
zv37WhPxvP2sa56VonM5$S~(4V-6n)ar}Q^c{LBe)LZAA-LY&g46uysSw0W&KrEo8*
zZxcdRpV4!a80~~Oug|Dha2|^@`;5viIll-(XLyfWCtU<^pPU?R8Wa^PX(+}f0;K9>
zJh`_yEI__Yj^>nP3LrZ<T3V4Qfav6CuioaHT#9`)HL7pS5<k8I0CH2K?o<Q_v8hq_
dwg3pJsnG)aO9Vg&O^rUbE=x46%aZ#${4aGt-e3R#

delta 9761
zcmY*fdvKLSmcOUF@0WYOn-KCPBq0d_@fnx|k>C?3grE+nI|!nV)Q)aVS+(oBRn$;5
zT0_mn6_{BBYZcj69<K5*2n0qGxR?QJGBC)iYM6vKm>>v4ke8_7;A?-UANOYeyT9)K
z{rdFj)2AQbUG<mz#hLt>EwuUtv1mzV?F*DCruF)l^XU(n(XY_|ip-0z(M~14&d)rk
zDGc=Am(stdb{wQIFN#y_g3|x|7Cl0vGVi}dzX-#rp$cLmKawN0Tunbu=M#PgMPYsz
z=W+oQ-QbY~8ZssfL!n}k8XX%$_$^fooY9HeFcm5l6R}9%D=L`6AkHY^5gOi`?BfyS
z?k(?Y<S0@NvHK}ZvmT*YL!!>;5$lZ;0}KZMdgDZ%M`$=MQRxx%##Q%sG*sOuid_|f
zcAp45;<~(E9)WgWQ4}^{R3aX!@v-0Pr`J$J;rPVB@I!$y3ASNkrezJ?LxU%}(V!4A
z6O*<JAjnKCEep?(VW4h`u4tmOcTEwY=}8C*P?)mj0&$b7>wO*QQ*OFB{L<3l_o;g1
zI{NyqsaZOVlT%Y>YG9H8eQMO#(FN#JtNMk<EFI`+{p@<`9Q<_FTnWO{&iO(}ZUX1;
zwFDK(XY}+xQ2SlaWcyR-@0o0W3iM~98(n`2^k;6V3BR}gLCfbd>Gvs3gP+TG7zg9I
zWR+vY!FaC!fN-Vl5U!Y}YnrKX(6lTe0AX6P%n<?*rd3ph6OBLfA~{`OYo<weP0t#b
zhi<254a@_3x{X!1ClBoDH`j!Xw!1_mpVxC*=)J+uyD$(U0mAcn1+KdU2+#K}3SY5=
zWF%+kCpXZX1`cE)lJL-sY|lxUKO@!OQIimwF<_`i5Smecd-zg-fRa%#pJGcgH5*CD
z-t#F@6?U@ABtl9p$lUWGJw<g32rei<Hz>tISU~WBgOXuIW!NMQ3AKweJ6mZz4OyHc
zA(GT$O7?Oj0%<WJqK^<PP*Ly>#a8OZ&2%{Z4kc<}rb0}k|7C=A${hhA@BytEfKXgU
z2o_fh#btzOu~bwpCsFAtv9=g`DjTz$lBK>D)aBHd^MO*2z>$$!L1K`r70STSLrAS4
z%&6@aAr6R`a}ZK12toHbk1HMpt0}f#PyC3^Myn~ok*QRi$F+t;x!!b#=$9@wR1|``
zhOjzq8|bbj(a%-#008X(;=C>aljXh^)U{N}Va)QdzllVDSIPMT&{NsqCQ4eTqV2=r
zHc`K7#|2tP!j3L3B)EW{i{%NJ%y-IIpMZtE!^s$H5CtDlY=gezPc$k00VM_*!GOow
zOh|I<A0P+<1|CANnULmOEd-l6DtH_LTiQaR-c=Ij0np9^Dg%b8TYRl)Tr<SLQdC2#
zg>D-bPJnHBQLu?(yLA6H8eh1H64hZXI>=+&TJ`g7G^DoG4-$n?YV~mi2%%Pvt6_$M
z$}M_d8x619lB4i+Y$2ps9!8$&dkfFxa$cu-JRfcPjz81N5pCXn6vF;CLZ-DG9&8&S
z)jEh?+X%V#ZleISO_y(_5hJ$c6nJvB`AEzYJUQD4+14uX<ZL6P+g}?6IB$pk@2&L0
zs2w>4Oq$w3$Pt!;^a+S0;UE-tQ2p@mWdR>1qTp{7JD$0J8-<kq8zrtYvy@;bw);g2
z1fu|L!~jCF-8&NylI?zxCV0#pSO=y*AW#84m7Ut*or+peJN)uUC)la`NZjnWyhs6U
zaG(-W`zY1h*FtI^6%F(dQv2w}o7@0^_LKODtCUaz^hy#g+V7_+VVu05s?xq+_VRuj
zG}uXjdw_)R2YHR5mqI!KbeSU|*xLsvvMU@AN(X3w_bS>RByqblDh?$;uM{5&s}A~!
zO9<>@fNtUdA$5=^ZXU;9f+Ovy{&73KQg@VaF5%flAvi}l*E<N#QNrH$lI7$@s!RXz
zW15}r%1sHjFV*EUe}eZfKxF=W#78m;PEhRcL^#_>h3!V2ARJD3B_}yXPWmJOguwyY
zBmjuECw&qCgz8D31d<|++RuDON}3=6v_S%BYF$PG1otz}NVZ$V$SEIRNfQ)+)&YQ^
zo}z?Zw1A+V^6`~qbeaUROB&t+!~_7_2>`?hPW$)*gw$y&vWpkckg<5-mv}4+x+!+f
z`X$a|?M9%pfpI>Es<UqGFhV7u+0hun{Ihho-O_+j`?=c@7+Gi*4?{HmoVS2cn2Rt9
zE>dijzPgh}_P$7o^6<ZSZw|S?tC@yf^fJ|5^-e@7q^?r3z=Q%I%)d%FX8g#9<&gVb
znE8G;QBb=OClc3+`(G$r&O;-R77FCN(S`$S-q3^FX-w@KLKHd*E4?9l+w~qAkG~;c
z@-#z%z!JTvoqkoj1j*4+*t1JSp53WK<JlzwJM{~Of=PK>-`zpKseL<V7_Y0hMbd6z
za0YbW7A1YcpBV}!Zn-|uL66ie&-KFVXSvApcJlgJE~4UaF0X}<*H5GVmwhxZ-6(`T
z_Mi})Mp1r~GZZI5z#885csT~EMQoigYaz~_S}o${coFBjf?6Z&>4Fg|0nPb=Asn|x
z;QYYxLF}-#!sZi34_j<f24gf{D{RUD1Zv7PW-g#_YirT=KDZ<m1@DVkM*nd?jVpX#
zB>JONsT7;mtP2m&1GUZGIVglsvv7MfAO_kjut&2$Q{2l&J?jAcxzSGn3b|CcRS5{n
zMuAny*O&Y#Xce)`8X0PA)GBZ@`X>nGORSU4LTuAd9HfVfHjA(%tO)}yXRAKan-0?8
z`i~IWVPTkOi_ytPBGo5XfNnk#ST0StQko`cu~nBHqV@G#dotO)ts+&LWwL==Ijja7
zQ!srW3vpauJ4AzuJ{D*;-Uynx+o^{irU&obiHzs?b`p0A%$c<f1rXfHBfiTK(c>PW
zN-Apf@d2`0KRZbz_3^`0I1HtJNSIL5ELE7*VZ-)tB+hU;nB%>A;1T+5!(O;D+m1tY
zuP7+X6+mgPC?A+BfYM%pJ#UIr0`AbC9ihh?I(jN`X6q0I#aSY+zz$JzbFP4y0$bh_
zPKkFpJ@Y6%IqX2s!I=FmH$P-|IG&#|j)<-f>t4sGq5d$=7ugPYH69kpoELaK9%e5z
z3CF~6yE1c*(GaTd>e(kR$}W-0`GJ>Zm%tWPV`f%F!AT*yb@wN9OVLRY7U6ivp~AOk
zbxIHHq=$x`$_bkLvpOZRGh(jLD1a?v9T7dA(aSn%+?X>tKbm{AIwJ}qH!5?LMnQ4k
zTmeiwBXB@7LB|H1(=}aGJMx@x`%J!wVW8(kDl$n15S^V9#rDhy2!(S3uL(OiPv!Gk
z{6a72qFoPs;nyMxxm4ha%lkYaI9~|t^SoylM8Q`gcGc!7Re+XX2^@|mL9Kudx}sMe
zr$^IQyg?|$oLv#_3<C(t6%kb%aX^S)5!dmqFI2B6_=kvn>%@DZ<v%#n@Xp+e#jgo*
ztKk75gaGaC3W!l(6R8_q?e*NtHF4u$-x|GK6Lmw7ID{&Uf*(ZeMZM%xdbs2Vkr)u(
zgANM0gPBrPRMhGh2gp)ga)Jidp}_85sD|WB=`N3eken$Inh!#<cNEN$vES)mo}dZo
zS<)SJd$Z(hNE$1E;0Zu02nfO1UJww1vssXb+nZ-*j&$cjAPg7K4i^x^og<Nsc!mH?
z<1%|LECq(t9Er@$*|R7L=E~SBy5S^^P0y7HduJ_T+g_I9IwJuD+W@U?fKYr{x)1<_
z;LFm4fKo+l+q@i=58;5G%ErvgQQ4Mxo;tCJH<kH*TtFBXpdA+=q~=Q(D}a!iFWq?;
z5K{AbSVJ+aC<<PcvH#JJeMYyYUzO&$45w!v)@#yT9)TbTXwL?K5PVI#jR_EfuSs`#
zjJUT2(w?Ot#KQu#!vZw5Nqav41a*NdE-|x}j(AwF`<Vs;7to#?0l|G;ChWTdAh@sl
znT{AOl<wUD2vk5%<y^W@ChSb3)-=YpGX*Xvj)FI3>@7)p_9>b){!Qs_(8cV8Mcx`9
zNCMiC077z+k2^p}E@EpQK-?9xsY~_1(=>kMQa>*!gu+tkE=PdeNEX@E1_*_v^5$F2
zyp-T!M#kRL@14fHyd&KMMhTm=OuBO&5Cj43C;=h3OeSm?077t?Ea0b1rApYO<$g3k
zpaR;_0Ge92ECE4X?tPms;dxmh@y^N%1qfU~-z_Vz;Lvfk;I5EJj<#E%mC{``OU%3g
z`fhn%R!Vo4MXhP<USdi(s^67(sByx4jRW>v-saww?kNV1!F^Y{r<f8pu@PKHja%rc
zywNr0sJzWJ=BUUDt8x|x@mme{T;Azc<xJ*%Zk2?|e7x%u1#2aqo#vdOap|=(VQ;5>
zc-ES{>w#blpcMp!V3Q9dKnON@*Y{!Hu9IT883zzt0%&I#5T>q^?kNV)G_JA9y%ZQy
z>*TO{oT7v(#WRtNeXO7Ark|!ikhp&F{FJh7%~IHn4hXgZTH64j*eu-z1rUPG5*HLp
zMP-W*#!?eefHo=sO|1(?Ku}wJFs4g6qBcmr<{_ehFfKqlE<lWHgLF?cfRNfC-4hKU
zq&7%%%i{q6ZS<)S2ugrniC+;mN}N?~KOAoxWog>wcoT3Nr9H?)3fzoz?~gzhdMOUS
zjL)j5g;Ykm_eVgOk&*WP0422DB*ie-Z5&nr`d;IFwcaGF>wGo1o8-{joLkZOLmz*o
zB7hX2pAinf4}JKd7Ss<p{OpY2@t`#~nRo(cXw!D7;75d3i8t+na^rM<MQG*OeAEO&
zB2t_6me1+2`pvmn#51_s%)w&)hj(zm((-T<AACwhGE!|wx)tw{o_CCf>KD$@OLZvm
z*79pan~!ZY2fa;}SA?CG9!6@r9(10L*KN<48G^H2x;tU12*KGdqmuA31aVmu?2@s=
z`pye9rEnJ~^e13P83*wmz4QV-dD|W@ghB}Ik$HBn0ff*V-fMWcWgJs~#Wq!OzaDyt
zO7y6UG^!Q_)>)`F^;t59?_Zfb*^m*v?fSioG^MuP54OyNX}fgK^MIhVOPqioF%+Qv
z`X`rYa_#<HFC35iWuCn<mzi+fFL7nICL;b0>84BcSluB%BV{J;4#|Y4aNHeY%2>Fk
zJPMA<*a=OSX-xW<OxX9_a(2%rQrO)O2w?$e7b+lZ_{0kWLhut7<cKO~H+A}L6$n&7
zJH3FW);;F~g4!wFbAGy<*LauTHGsec^juc%l1aO3pcdRNziX5;Ixa<t2|FNA0X>zy
zc3k3~!a<2z(-=1cYcag`sT6(hcD1~0fjyU(?WZ#7mDzot%Cd5PeG{s06r7f^v-&q*
z(tj47=0n~DIH525?~Km>iXM9IjQ1M~p>)Rk4G>Cayx;or=(_y@3J693S|b2Wt@|be
z2x>PUp!hkzA_~sS*q4$j?$f_mMSb+qujuadd70o3tx8p}F&F%10t971s|*O`3x2@?
zLivK<Oe)x@i$1defePrUY}7@cSx^h=MW0!IR>6~b$>&BOcp1><MnL4OOEP5>93Z4F
z$!hy;1`tx0I5+;>3;^h|{_Ja-n!fD4Sz%uCE=%_+3doJ@c~_{)DEL~&zLoZcvl8N8
z`x8+myW@&?G!VuFXjd^H+FtP|RY0g-@h8<v^TK)6A5|-jKLD*i0KvT~-BA?~+^hbm
zTFLJC#=8Ru?f|sz0E9cf@$LYG(l_26fKd8|-H{p!e^fHOCiPFR(rtCuyhBh5(lwuX
z0Zl9O%qLV8?p`uBTfcdY?kTTA!yh<S8=zLj{+Ow7|GM4Yzr?q6V?9dY7ZlsE0fIAA
zx#J!n#AhlTUT1M$u3~#<=_kLXnP761%*rv@E3=e4v7r{sSqf&=A$0pi!S5CBNQK`~
zO>sXo{Jp}d@Nr1?W3%S!3E$D=VfYQnxynrvAX?5<?m7Vo$+@_1nfqivwq?F<|Bmjc
z$8Qklds_gxPPrKZ1aZDXj>cUwjt7TVRcwhK`8`c2d{xEEcq!wn8|+x1_4oA9;|r9%
zEpQ=bbAdAd4v=x4%Y{ntr(Y2GzYGgi%6xfagf4qR5DmNn$3Y0Si}i>f=$q>n=hXSN
za51Z|kZ@9U6s%PEr$y$`AL%VBs|IDI!u6atmTG>CYgFQ_(jkcl%YjkdsPHEDF+Z&V
z^8nW9{~*zJk3sOr8a$Pn#|={e!W!k?O-up2vPL00{@Mwk!Fv5~LQEUM)$G#sJq6gQ
z>s89WLzxy3SkF_8FRRuBjHgAHNpZ?3a9(f0*N&_S?1dH%5q^|o1&;6*R(O}6k+=i}
zt(iNO7(iweoZnk}N^tPEDm*272@d~Og<Xjs1X%%-v_&t7i-yq#VZm*|fh60W)BF}y
z)<0JOfh}s_^?1Ox0_d_$ss0uJs-H@T3OzIslg)7Ws(^~zaQL#&rtsa?+rrm{HiZwj
zpLmC$_wBkZ5C@Ghd}7<)Q-RNH+ZDD+ufV6a?Ft*^BxelHZ9A2^p<=8x=5n5>GmhaC
z94d0g@ELBWO6JDJhq#?Qu1A~{j&Zy7lL_&l8BGELyL$@ofo``-R%dPDBi(Lw-Sy#a
zKN=kB_Ue-f@t0BT+9VYA_6!g{)9qEb#ro0ksctW?yAjp|4&n}luUMy(VptV4OcZyh
z{K{|<g$bTM=pv2}=;5JwZLGuS=YR_G@idt9P0-T;RZ!Hk2z?#kICv^6ghoenm=cdW
zA&%%H|6hn>`iR0SZBCn$#Sw+m*{`xf2<uM0G9{jMLLAtgDhPY9IJ7%es;XxZggO--
zb+$-1131-otIVW)v5_XQ2SdbaH=YTz4hs=4-KwA}R{+^=)vqpB0MTwWbeQ=(P|dzN
vuk_?z;@;r^kUOv3UIPfR^UB?D03mf=mD(?%fDk&bez&Wa$n5GRJB$Ahyq$w;

diff --git a/common/src/proto/komp_ac.table_definition.rs b/common/src/proto/komp_ac.table_definition.rs
index 3ab28d34..27cd74db 100644
--- a/common/src/proto/komp_ac.table_definition.rs
+++ b/common/src/proto/komp_ac.table_definition.rs
@@ -495,6 +495,10 @@ pub struct ColumnBehavior {
     /// Stable public identity used when updating this column's presentation.
     #[prost(int64, tag = "5")]
     pub column_id: i64,
+    /// True when bundled data-entry clients should not render this column.
+    /// This is not an authorization boundary; data APIs still expose the column.
+    #[prost(bool, tag = "6")]
+    pub hidden_from_forms: bool,
 }
 /// A script that targets a specific column in a table.
 #[derive(serde::Serialize, serde::Deserialize)]
@@ -549,6 +553,36 @@ pub struct SetColumnPresentationResponse {
     #[prost(int64, tag = "4")]
     pub row_version: i64,
 }
+#[derive(serde::Serialize, serde::Deserialize)]
+#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
+pub struct SetColumnFormVisibilityRequest {
+    #[prost(string, tag = "1")]
+    pub profile_name: ::prost::alloc::string::String,
+    #[prost(string, tag = "2")]
+    pub table_name: ::prost::alloc::string::String,
+    #[prost(int64, tag = "3")]
+    pub column_id: i64,
+    #[prost(bool, tag = "4")]
+    pub hidden_from_forms: bool,
+    /// Row version returned by GetProfileDetails when the column was read.
+    #[prost(int64, tag = "5")]
+    pub expected_row_version: i64,
+}
+#[derive(serde::Serialize, serde::Deserialize)]
+#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
+pub struct SetColumnFormVisibilityResponse {
+    #[prost(bool, tag = "1")]
+    pub success: bool,
+    #[prost(string, tag = "2")]
+    pub message: ::prost::alloc::string::String,
+    #[prost(int64, tag = "3")]
+    pub column_id: i64,
+    #[prost(bool, tag = "4")]
+    pub hidden_from_forms: bool,
+    /// New row version after the update.
+    #[prost(int64, tag = "5")]
+    pub row_version: i64,
+}
 /// Request to delete one table definition entirely.
 #[derive(serde::Serialize, serde::Deserialize)]
 #[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
@@ -1227,6 +1261,38 @@ pub mod table_definition_client {
                 );
             self.inner.unary(req, path, codec).await
         }
+        /// Shows or hides one column in bundled data-entry forms. This is presentation
+        /// metadata only: hidden columns remain available to data APIs, scripts and
+        /// backend calculations.
+        pub async fn set_column_form_visibility(
+            &mut self,
+            request: impl tonic::IntoRequest<super::SetColumnFormVisibilityRequest>,
+        ) -> std::result::Result<
+            tonic::Response<super::SetColumnFormVisibilityResponse>,
+            tonic::Status,
+        > {
+            self.inner
+                .ready()
+                .await
+                .map_err(|e| {
+                    tonic::Status::unknown(
+                        format!("Service was not ready: {}", e.into()),
+                    )
+                })?;
+            let codec = tonic_prost::ProstCodec::default();
+            let path = http::uri::PathAndQuery::from_static(
+                "/komp_ac.table_definition.TableDefinition/SetColumnFormVisibility",
+            );
+            let mut req = request.into_request();
+            req.extensions_mut()
+                .insert(
+                    GrpcMethod::new(
+                        "komp_ac.table_definition.TableDefinition",
+                        "SetColumnFormVisibility",
+                    ),
+                );
+            self.inner.unary(req, path, codec).await
+        }
         /// Drops a table and its metadata, then deletes the profile if it becomes empty.
         pub async fn delete_table(
             &mut self,
@@ -1381,6 +1447,16 @@ pub mod table_definition_server {
             tonic::Response<super::SetColumnPresentationResponse>,
             tonic::Status,
         >;
+        /// Shows or hides one column in bundled data-entry forms. This is presentation
+        /// metadata only: hidden columns remain available to data APIs, scripts and
+        /// backend calculations.
+        async fn set_column_form_visibility(
+            &self,
+            request: tonic::Request<super::SetColumnFormVisibilityRequest>,
+        ) -> std::result::Result<
+            tonic::Response<super::SetColumnFormVisibilityResponse>,
+            tonic::Status,
+        >;
         /// Drops a table and its metadata, then deletes the profile if it becomes empty.
         async fn delete_table(
             &self,
@@ -2052,6 +2128,57 @@ pub mod table_definition_server {
                     };
                     Box::pin(fut)
                 }
+                "/komp_ac.table_definition.TableDefinition/SetColumnFormVisibility" => {
+                    #[allow(non_camel_case_types)]
+                    struct SetColumnFormVisibilitySvc<T: TableDefinition>(pub Arc<T>);
+                    impl<
+                        T: TableDefinition,
+                    > tonic::server::UnaryService<super::SetColumnFormVisibilityRequest>
+                    for SetColumnFormVisibilitySvc<T> {
+                        type Response = super::SetColumnFormVisibilityResponse;
+                        type Future = BoxFuture<
+                            tonic::Response<Self::Response>,
+                            tonic::Status,
+                        >;
+                        fn call(
+                            &mut self,
+                            request: tonic::Request<
+                                super::SetColumnFormVisibilityRequest,
+                            >,
+                        ) -> Self::Future {
+                            let inner = Arc::clone(&self.0);
+                            let fut = async move {
+                                <T as TableDefinition>::set_column_form_visibility(
+                                        &inner,
+                                        request,
+                                    )
+                                    .await
+                            };
+                            Box::pin(fut)
+                        }
+                    }
+                    let accept_compression_encodings = self.accept_compression_encodings;
+                    let send_compression_encodings = self.send_compression_encodings;
+                    let max_decoding_message_size = self.max_decoding_message_size;
+                    let max_encoding_message_size = self.max_encoding_message_size;
+                    let inner = self.inner.clone();
+                    let fut = async move {
+                        let method = SetColumnFormVisibilitySvc(inner);
+                        let codec = tonic_prost::ProstCodec::default();
+                        let mut grpc = tonic::server::Grpc::new(codec)
+                            .apply_compression_config(
+                                accept_compression_encodings,
+                                send_compression_encodings,
+                            )
+                            .apply_max_message_size_config(
+                                max_decoding_message_size,
+                                max_encoding_message_size,
+                            );
+                        let res = grpc.unary(method, req).await;
+                        Ok(res)
+                    };
+                    Box::pin(fut)
+                }
                 "/komp_ac.table_definition.TableDefinition/DeleteTable" => {
                     #[allow(non_camel_case_types)]
                     struct DeleteTableSvc<T: TableDefinition>(pub Arc<T>);
diff --git a/server b/server
index 2e9522fe..9d960ff7 160000
--- a/server
+++ b/server
@@ -1 +1 @@
-Subproject commit 2e9522fe257344df11a9968d572e57258a2a355f
+Subproject commit 9d960ff719c29b92a4fb43a1a19747d883d0659d
diff --git a/web/locales/cs/main.ftl b/web/locales/cs/main.ftl
index bb99cd90..47554207 100644
--- a/web/locales/cs/main.ftl
+++ b/web/locales/cs/main.ftl
@@ -59,6 +59,7 @@ column-flag-half-up = zaokrouhleno nahoru
 column-flag-read-only = pouze pro čtení
 column-flag-generated = generovaný
 column-flag-generated-from = generováno z { $source }
+column-flag-hidden-from-forms = skrytý ve formulářích
 
 # --- Přihlášení / registrace / změna hesla -----------------------------------
 login-title = Přihlášení
@@ -189,6 +190,9 @@ td-columns-now = Současné sloupce
 td-col-column = Sloupec
 td-col-type = Typ
 td-col-notes = Poznámky
+td-form-visibility = Viditelnost ve formuláři
+td-hide-from-forms = Skrýt
+td-show-in-forms = Zobrazit
 td-scripts = Skripty
 td-col-target-column = Cílový sloupec
 td-col-description = Popis
diff --git a/web/locales/en/main.ftl b/web/locales/en/main.ftl
index 8757ba69..b7f90f32 100644
--- a/web/locales/en/main.ftl
+++ b/web/locales/en/main.ftl
@@ -64,6 +64,7 @@ column-flag-half-up = half-up
 column-flag-read-only = read only
 column-flag-generated = generated
 column-flag-generated-from = generated from { $source }
+column-flag-hidden-from-forms = hidden from forms
 
 # --- Login / register / change password ------------------------------------
 login-title = Sign in
@@ -193,6 +194,9 @@ td-columns-now = Columns it has now
 td-col-column = Column
 td-col-type = Type
 td-col-notes = Notes
+td-form-visibility = Form visibility
+td-hide-from-forms = Hide
+td-show-in-forms = Show
 td-scripts = Scripts
 td-col-target-column = Target column
 td-col-description = Description
diff --git a/web/locales/sk/main.ftl b/web/locales/sk/main.ftl
index 261162a3..eec10768 100644
--- a/web/locales/sk/main.ftl
+++ b/web/locales/sk/main.ftl
@@ -59,6 +59,7 @@ column-flag-half-up = zaokrúhlené nahor
 column-flag-read-only = len na čítanie
 column-flag-generated = generovaný
 column-flag-generated-from = generovaný z { $source }
+column-flag-hidden-from-forms = skrytý vo formulároch
 
 # --- Prihlásenie / registrácia / zmena hesla -------------------------------
 login-title = Prihlásenie
@@ -189,6 +190,9 @@ td-columns-now = Súčasné stĺpce
 td-col-column = Stĺpec
 td-col-type = Typ
 td-col-notes = Poznámky
+td-form-visibility = Viditeľnosť vo formulári
+td-hide-from-forms = Skryť
+td-show-in-forms = Zobraziť
 td-scripts = Skripty
 td-col-target-column = Cieľový stĺpec
 td-col-description = Popis
diff --git a/web/src/lib.rs b/web/src/lib.rs
index 7f97f68b..7687e797 100644
--- a/web/src/lib.rs
+++ b/web/src/lib.rs
@@ -344,6 +344,7 @@ mod tests {
             "/admin/tables/columns/add/builder",
             "/admin/tables/presentation/alias",
             "/admin/tables/presentation/order",
+            "/admin/tables/presentation/visibility",
             "/admin/tables/delete",
             "/admin/profiles/copy",
             "/admin/tables/from-template",
@@ -481,6 +482,10 @@ mod tests {
                 "/admin/tables/presentation/order",
                 "profile=billing&table=invoice&column_ids=1&column_ids=2",
             ),
+            (
+                "/admin/tables/presentation/visibility",
+                "profile=billing&table=invoice&column_id=1&hidden_from_forms=true",
+            ),
             ("/admin/tables/columns/add", "profile=billing&table=invoice"),
             ("/admin/tables/builder", ""),
             ("/admin/tables", ""),
diff --git a/web/src/pages/admin/table_definition/loader.rs b/web/src/pages/admin/table_definition/loader.rs
index 81debd98..33ebacc4 100644
--- a/web/src/pages/admin/table_definition/loader.rs
+++ b/web/src/pages/admin/table_definition/loader.rs
@@ -225,6 +225,8 @@ pub(crate) async fn load_page(
                                 // incomplete server capability response does
                                 // not grant permission by omission.
                                 renameable: behavior.is_some_and(|behavior| behavior.renameable),
+                                hidden_from_forms: behavior
+                                    .is_some_and(|behavior| behavior.hidden_from_forms),
                             }
                         })
                         .collect(),
diff --git a/web/src/pages/admin/table_definition/logic.rs b/web/src/pages/admin/table_definition/logic.rs
index 888b4e1b..4c5746ef 100644
--- a/web/src/pages/admin/table_definition/logic.rs
+++ b/web/src/pages/admin/table_definition/logic.rs
@@ -23,8 +23,8 @@ use crate::{
     AppState,
     definitions::table_definition::{
         AddTableColumnsRequest, CopyProfileRequest, CreateInvoiceTemplateTableRequest,
-        ColumnPresentation, DeleteTableRequest, SetColumnPresentationRequest,
-        PutTableDefinitionRequest,
+        ColumnPresentation, DeleteTableRequest, PutTableDefinitionRequest,
+        SetColumnFormVisibilityRequest, SetColumnPresentationRequest,
     },
     {i18n::Locale, tr},
     schema::{ColumnForm, proto_columns, validate_column_alias, validate_table_name},
@@ -35,7 +35,7 @@ use super::{
     loader::{self, load_page},
     state::{
         AliasForm, CopyForm, DeleteForm, DetailColumn, GeneratedTableView, InvoiceTemplateForm,
-        LoadError, OrderForm, PageInputs, Selection, TableDefinitionPageState,
+        LoadError, OrderForm, PageInputs, Selection, TableDefinitionPageState, VisibilityForm,
     },
     ui,
 };
@@ -551,6 +551,49 @@ pub(crate) async fn set_column_order(
     .await
 }
 
+/// POST /admin/tables/presentation/visibility — show or hide one column in
+/// bundled data-entry forms without changing its data-plane behavior.
+pub(crate) async fn set_column_visibility(
+    State(state): State<AppState>,
+    headers: HeaderMap,
+    Form(form): Form<VisibilityForm>,
+) -> Response {
+    if let Some(rejection) = reject_cross_site(&headers) {
+        return rejection;
+    }
+
+    let inputs = PageInputs::for_selection(Selection {
+        profile: form.profile.clone(),
+        table: form.table.clone(),
+    });
+    let request = SetColumnFormVisibilityRequest {
+        profile_name: form.profile,
+        table_name: form.table,
+        column_id: form.column_id,
+        hidden_from_forms: form.hidden_from_forms,
+        expected_row_version: form.expected_row_version,
+    };
+    let Ok(request) = authenticated_request(&headers, request) else {
+        return Redirect::to("/login").into_response();
+    };
+
+    let mut definitions = state.definitions.clone();
+    match definitions.set_column_form_visibility(request).await {
+        Ok(response) if response.get_ref().success => {
+            let mut inputs = inputs;
+            inputs.status = Some(response.into_inner().message);
+            respond(state, headers, inputs, Page::Presentation, StatusCode::OK).await
+        }
+        Ok(response) => {
+            let message = response.into_inner().message;
+            refuse(state, headers, inputs, Page::Presentation, message).await
+        }
+        Err(error) => {
+            refuse(state, headers, inputs, Page::Presentation, error.message().to_string()).await
+        }
+    }
+}
+
 /// The table's columns as the backend has them now, in their current order.
 ///
 /// Both presentation writes have to send every column, and the ones they are
diff --git a/web/src/pages/admin/table_definition/mod.rs b/web/src/pages/admin/table_definition/mod.rs
index 118320e4..0e1fd2b8 100644
--- a/web/src/pages/admin/table_definition/mod.rs
+++ b/web/src/pages/admin/table_definition/mod.rs
@@ -50,6 +50,10 @@ pub(crate) fn router() -> Router<AppState> {
             "/admin/tables/presentation/order",
             post(logic::set_column_order),
         )
+        .route(
+            "/admin/tables/presentation/visibility",
+            post(logic::set_column_visibility),
+        )
         .route("/admin/tables/delete", get(logic::delete_page))
         .route("/admin/tables/delete", post(logic::delete_table))
         // Profile-scoped.
diff --git a/web/src/pages/admin/table_definition/state.rs b/web/src/pages/admin/table_definition/state.rs
index 2734597f..d6de9cca 100644
--- a/web/src/pages/admin/table_definition/state.rs
+++ b/web/src/pages/admin/table_definition/state.rs
@@ -159,6 +159,7 @@ pub(crate) struct DetailColumn {
     pub read_only: bool,
     pub generated_from: String,
     pub renameable: bool,
+    pub hidden_from_forms: bool,
 }
 
 impl DetailColumn {
@@ -186,6 +187,9 @@ impl DetailColumn {
         if self.read_only {
             flags.push(crate::tr!(*locale, "column-flag-read-only"));
         }
+        if self.hidden_from_forms {
+            flags.push(crate::tr!(*locale, "column-flag-hidden-from-forms"));
+        }
         if !self.generated_from.is_empty() {
             flags.push(crate::tr!(
                 *locale,
@@ -266,6 +270,20 @@ pub(crate) struct OrderForm {
     pub column_ids: Vec<i64>,
 }
 
+#[derive(Clone, Debug, Default, serde::Deserialize)]
+pub(crate) struct VisibilityForm {
+    #[serde(default)]
+    pub profile: String,
+    #[serde(default)]
+    pub table: String,
+    #[serde(default)]
+    pub expected_row_version: i64,
+    #[serde(default)]
+    pub column_id: i64,
+    #[serde(default)]
+    pub hidden_from_forms: bool,
+}
+
 /// The copy-profile panel. An empty `table_names` copies the whole profile,
 /// which is what the backend takes an empty list to mean.
 #[derive(Clone, Debug, Default, serde::Deserialize)]
@@ -515,6 +533,7 @@ mod tests {
                     read_only: false,
                     generated_from: String::new(),
                     renameable: true,
+                    hidden_from_forms: false,
                 },
                 DetailColumn {
                     column_id: 2,
@@ -528,6 +547,7 @@ mod tests {
                     read_only: true,
                     generated_from: "work_phone".to_string(),
                     renameable: false,
+                    hidden_from_forms: false,
                 },
                 DetailColumn {
                     column_id: 3,
@@ -541,6 +561,7 @@ mod tests {
                     read_only: false,
                     generated_from: "accounting".to_string(),
                     renameable: true,
+                    hidden_from_forms: false,
                 },
             ],
         };
diff --git a/web/src/pages/admin/table_definition/ui.rs b/web/src/pages/admin/table_definition/ui.rs
index 274ebd53..b970a29d 100644
--- a/web/src/pages/admin/table_definition/ui.rs
+++ b/web/src/pages/admin/table_definition/ui.rs
@@ -288,6 +288,7 @@ mod tests {
                     read_only: false,
                     generated_from: String::new(),
                     renameable: true,
+                    hidden_from_forms: false,
                 }],
             }),
             history: Vec::new(),
diff --git a/web/templates/pages/admin/table_definition/presentation_panel.html b/web/templates/pages/admin/table_definition/presentation_panel.html
index f69e48fc..a2b82a69 100644
--- a/web/templates/pages/admin/table_definition/presentation_panel.html
+++ b/web/templates/pages/admin/table_definition/presentation_panel.html
@@ -82,7 +82,7 @@
   <section class="panel">
     <h2>{{ nav.tr("td-columns-now") }} <span class="count">{{ detail.columns.len() }}</span></h2>
     <table class="builder-table">
-      <thead><tr><th>{{ nav.tr("td-col-column") }}</th><th>{{ nav.tr("td-col-type") }}</th><th>{{ nav.tr("td-col-notes") }}</th></tr></thead>
+      <thead><tr><th>{{ nav.tr("td-col-column") }}</th><th>{{ nav.tr("td-col-type") }}</th><th>{{ nav.tr("td-col-notes") }}</th><th>{{ nav.tr("td-form-visibility") }}</th></tr></thead>
       <tbody>
         {% for column in detail.columns %}
           <tr>
@@ -91,6 +91,21 @@
             <td>
               {%- for flag in column.flags(nav.locale) %}<span class="tag">{{ flag }}</span>{% endfor -%}
             </td>
+            <td>
+              {% if page.table_is_writable() %}
+                <form hx-post="/admin/tables/presentation/visibility"
+                      hx-target="#table-panel" hx-swap="innerHTML">
+                  <input type="hidden" name="profile" value="{{ page.selection.profile }}">
+                  <input type="hidden" name="table" value="{{ page.selection.table }}">
+                  <input type="hidden" name="expected_row_version" value="{{ detail.row_version }}">
+                  <input type="hidden" name="column_id" value="{{ column.column_id }}">
+                  <input type="hidden" name="hidden_from_forms" value="{% if column.hidden_from_forms %}false{% else %}true{% endif %}">
+                  <button class="secondary" type="submit">
+                    {% if column.hidden_from_forms %}{{ nav.tr("td-show-in-forms") }}{% else %}{{ nav.tr("td-hide-from-forms") }}{% endif %}
+                  </button>
+                </form>
+              {% endif %}
+            </td>
           </tr>
         {% endfor %}
       </tbody>