@cosmicdrift/kumiko-types 0.234.0 → 0.235.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-types",
-  "version": "0.234.0",
+  "version": "0.235.0",
   "description": "Framework-Type-Definitions für Kumiko — FeatureDefinition, BootCheck-Types und die reinen Engine-Types. Erlaubt Downstream-Konsumenten, gegen die Type-Contracts zu bauen, ohne das ganze Framework-Package zu importieren. Enthaelt keine identitaets-sensitiven Runtime-Werte mehr (Error-Klassen leben seit #1629 in kumiko-framework, Brand-Symbole nutzen Symbol.for) und ist deshalb eine plain dependency, keine peerDependency.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",

package/src/config.ts

@@ -369,7 +369,23 @@ export type JobDefinition = {
   readonly backoff?: "fixed" | "exponential" | undefined;
   readonly timeout?: number | undefined;
   readonly schema?: ZodType | undefined;
+  // Enqueue this job once when a runner for its lane starts. Fire-and-forget:
+  // the enqueue is awaited, the run is not, so a throwing handler only fails
+  // the queue job — the process keeps booting and reports ready.
+  // Deduped on a fixed job id, so it runs at most once per Redis dataset: a
+  // boot job that already ran (or failed) is not retried on a later deploy.
+  // Never a deploy gate — use `bootGate` for that.
   readonly runOnBoot?: boolean | undefined;
+  // Run this job inline while the runner for its lane starts, before cron
+  // schedules and `runOnBoot` enqueues. The handler is awaited and a throw
+  // rejects the runner's start() — which rejects runProdApp's boot, so the
+  // process exits before it ever reports ready. That makes it a real deploy
+  // gate, unlike `runOnBoot`. Runs on every start, never deduped.
+  // `retries`/`timeout`/`backoff` are BullMQ options and do not apply on the
+  // inline path. Incompatible with `perTenant` and `concurrency: "sequential"`.
+  // The gate runs wherever a job runner for its lane starts — a setup that
+  // starts no runner for that lane runs no gate.
+  readonly bootGate?: boolean | undefined;
   readonly perTenant?: boolean | undefined;
   // Which deploy-lane runs this job. Default "worker". Set "api" only for
   // short CPU-light handlers (token cleanup, in-process cache warmup) that

package/src/projection.ts

@@ -161,4 +161,10 @@ export type MultiStreamProjectionDefinition = {
   //                   writes duplicate rows. Misuse = duplicated side
   //                   effects, not a safety property.
   readonly delivery?: "shared" | "per-instance";
+  // Where the consumer's cursor starts on its FIRST registration. Default
+  // "beginning" replays the full log. "now" seeds the cursor at the current
+  // MAX(events.id) so mounting the MSP into an existing app does not
+  // retroactively fire side effects for historical events. Only affects the
+  // first registration — an existing cursor row is never clobbered.
+  readonly startFrom?: "beginning" | "now";
 };

package/src/screen.ts

@@ -984,6 +984,32 @@ export type ConfigEditScreenDefinition = {
   readonly access?: AccessRule;
 };
 
+// Self-populating counterpart of ConfigEditScreenDefinition for `r.secret(...)`
+// declarations. No EditLayout/FieldDefinition — secrets never round-trip a
+// stored value to the client, so the screen renders its own body (password
+// inputs + redaction display + delete) instead of going through RenderEdit.
+export type SecretsEditSection = {
+  readonly title?: string;
+  readonly fields: readonly string[];
+};
+
+export type SecretsEditScreenDefinition = {
+  readonly id: string;
+  readonly type: "secretsEdit";
+  readonly nav?: ScreenNavSugar;
+  readonly detailFor?: string;
+  /** field id -> qualified secret name (`<feature>:secret:<kebab>`). */
+  readonly secretKeys: Readonly<Record<string, string>>;
+  /** field id -> i18n key for the label. */
+  readonly fieldLabels: Readonly<Record<string, string>>;
+  /** field id -> i18n key for the hint, only where the declaration carries one. */
+  readonly fieldHints?: Readonly<Record<string, string>>;
+  /** field ids whose declaration set `required: true`. */
+  readonly requiredFields?: readonly string[];
+  readonly sections: readonly SecretsEditSection[];
+  readonly access?: AccessRule;
+};
+
 // --- shared slots (Level 4 from ui-architecture.md) ---
 
 export type ScreenSlots = {
@@ -1030,4 +1056,5 @@ export type ScreenDefinition =
   | EntityEditScreenDefinition
   | ActionFormScreenDefinition
   | ConfigEditScreenDefinition
+  | SecretsEditScreenDefinition
   | CustomScreenDefinition;