@cosmicdrift/kumiko-types 0.274.0 → 0.276.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-types",
-  "version": "0.274.0",
+  "version": "0.276.0",
   "description": "Framework-Type-Definitions für Kumiko — FeatureDefinition, BootCheck-Types und die reinen Engine-Types. Erlaubt Downstream-Konsumenten, gegen die Type-Contracts zu bauen, ohne das ganze Framework-Package zu importieren. Enthaelt keine identitaets-sensitiven Runtime-Werte mehr (Error-Klassen leben seit #1629 in kumiko-framework, Brand-Symbole nutzen Symbol.for) und ist deshalb eine plain dependency, keine peerDependency.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",

package/src/config.ts

@@ -3,7 +3,7 @@ import type { ConcurrencyMode } from "./concurrency-mode";
 import type { ConfigScope } from "./config-scope";
 import type { DbConnection } from "./db-connection";
 import type { FieldDefinition } from "./fields";
-import type { JobContext } from "./handlers";
+import type { EscapeHatchDeclaration, JobContext } from "./handlers";
 import type {
   PostDeleteHookFn,
   PostSaveHookFn,
@@ -392,6 +392,8 @@ export type JobDefinition = {
   // don't justify a separate worker container — long/CPU-heavy jobs on the
   // API lane will starve request handlers.
   readonly runIn?: JobRunIn | undefined;
+  // Grants `ctx.db.unsafeRaw(reason)` for this job, audited as `unsafe-raw`.
+  readonly escapeHatch?: EscapeHatchDeclaration | undefined;
 };
 
 // --- Notifications ---

package/src/feature.ts

@@ -382,6 +382,8 @@ export type FeatureDefinition = {
   // rendering. Absence means the feature reads no env-vars (or hasn't
   // been migrated yet — Sprint-9 migration is add-only per phase).
   readonly envSchema?: z.ZodObject<z.ZodRawShape>;
+  // Factory guarantee: two instances with shallow-equal dedupeOptions are interchangeable.
+  readonly dedupeOptions?: Readonly<Record<string, unknown>>;
 };
 
 // --- Feature Registrar (the "r" object in defineFeature) ---

package/src/fields.ts

@@ -445,6 +445,19 @@ export type DecimalFieldDef = {
   readonly access?: FieldAccess;
 } & ResolvedPiiFlags;
 
+/** Where a money field's currency comes from, for the fields that opt in.
+ *  Discriminated union so #2839 can add `{ kind: "literal", code }` and
+ *  `{ kind: "field", of }` variants without a breaking change. `"tenant"` is
+ *  the tenant-settings bundle's per-tenant currency (`tenant-settings:config:
+ *  currency`) — see kumiko-framework#2933. */
+export type MoneyCurrencySource = { readonly kind: "tenant" };
+
+/** Qualified config key a `{ kind: "tenant" }` MoneyCurrencySource resolves
+ *  against — the tenant-settings bundle's per-tenant currency. Lives here
+ *  (client-safe) rather than framework/engine so renderer code can read it
+ *  without a runtime-only import (kumiko-framework#2937). */
+export const TENANT_CURRENCY_CONFIG_KEY = "tenant-settings:config:currency";
+
 export type MoneyFieldDef = {
   readonly type: "money";
   readonly description?: string;
@@ -453,6 +466,11 @@ export type MoneyFieldDef = {
   readonly filterable?: boolean;
   readonly sensitive?: boolean;
   readonly access?: FieldAccess;
+  /** Declares where this field's currency comes from for a currently-empty
+   *  value in an entityEdit form. Undefined = unchanged existing behaviour
+   *  (`entity.defaultCurrency ?? "EUR"`); a stored value always keeps its
+   *  own currency regardless of this declaration. */
+  readonly currency?: MoneyCurrencySource;
 };
 
 // Reference-Field (Tier 2.7e-3) — FK-Style Verweis auf eine andere

package/src/handlers.ts

@@ -707,11 +707,14 @@ export type HandlerContext<TMap extends object = KumikoEventTypeMap> = SharedCon
 //
 // The passed identity also decides the target tenant — `writeAs` hands
 // `user.tenantId` straight to the dispatcher with nothing cross-checking it
-// against the job's own tenant, exactly as `queryAs` and the raw `db` above
-// already do. Building an identity from job payload data is therefore a
-// cross-tenant write path; derive it from a trusted lookup instead.
+// against the job's own tenant, exactly as `queryAs` does. Building an
+// identity from job payload data is therefore a cross-tenant write path;
+// derive it from a trusted lookup instead.
 export type JobContext = SharedContextFields & {
-  readonly db: DbConnection;
+  // Tenant-filtered to the job's own tenant. Cross-tenant raw access needs
+  // `escapeHatch` on the job (`ctx.db.unsafeRaw(reason)`) or `r.systemScope()`
+  // (`ctx.systemDb`).
+  readonly db: TenantDb;
   readonly registry: Registry;
   readonly systemUser: SessionUser;
   readonly log: Logger;

package/src/screen.ts

@@ -1474,6 +1474,8 @@ export type SecretsEditScreenDefinition = {
 
 export type ScreenSlots = {
   readonly header?: PlatformComponent;
+  /** entityEdit / actionForm: rendered on the right of the form title, same row. */
+  readonly titleAction?: PlatformComponent;
   readonly beforeForm?: PlatformComponent;
   readonly afterForm?: PlatformComponent;
   readonly sidebar?: PlatformComponent;