@cosmicdrift/kumiko-types 0.200.0 → 0.201.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-types",
-  "version": "0.200.0",
+  "version": "0.201.0",
   "description": "Framework-Type-Definitions für Kumiko — FeatureDefinition, BootCheck-Types und die reinen Engine-Types. Erlaubt Downstream-Konsumenten, gegen die Type-Contracts zu bauen, ohne das ganze Framework-Package zu importieren. Enthaelt keine identitaets-sensitiven Runtime-Werte mehr (Error-Klassen leben seit #1629 in kumiko-framework, Brand-Symbole nutzen Symbol.for) und ist deshalb eine plain dependency, keine peerDependency.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",

package/src/handlers.ts

@@ -364,7 +364,10 @@ export type HandlerContext<TMap extends object = KumikoEventTypeMap> = SharedCon
   // Same tenant scoping as `db`, but never bound to the handler's tx: writes
   // through it survive a rollback, for side effects that already happened
   // outside the DB. `undefined` when the pipeline has no outside-tx source
-  // for this dispatch (see dispatch-shared.ts) — callers must check before use.
+  // for this dispatch (see dispatch-shared.ts) — callers must check before
+  // use. For r.systemScope() handlers this is fail-closed instead, same as
+  // `db` above — a truthy Proxy that throws on first property read, so a
+  // system handler must reach for `systemDb.outsideTransaction` below.
   readonly dbOutsideTransaction: TenantDb | undefined;
   // Only present for r.systemScope() handlers. Non-system handlers never
   // receive this — reach for `db` instead, which is fail-closed for them.

package/src/tenant-db-types.ts

@@ -68,4 +68,14 @@ export type UncheckedSystemDb = {
   assertTenantMatch(tenantId: TenantId): TenantDb;
   assertRowsTenant<T>(rows: readonly T[], tenantField: keyof T): readonly T[];
   acknowledgeCrossTenant(reason: string): TenantDb;
+  // Same self-check pair as above, but hands back the caller's
+  // ctx.dbOutsideTransaction TenantDb instead of the in-tx one — for
+  // durability writes that must survive a rollback of the handler's own
+  // transaction. Throws if the dispatch has no outside-transaction source
+  // configured (e.g. a hand-built UncheckedSystemDb that only ever passed
+  // the in-tx db to createUncheckedSystemDb).
+  readonly outsideTransaction: {
+    assertTenantMatch(tenantId: TenantId): TenantDb;
+    acknowledgeCrossTenant(reason: string): TenantDb;
+  };
 };