@cosmicdrift/kumiko-types 0.299.0 → 0.304.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-types",
-  "version": "0.299.0",
+  "version": "0.304.0",
   "description": "Framework-Type-Definitions für Kumiko — FeatureDefinition, BootCheck-Types und die reinen Engine-Types. Erlaubt Downstream-Konsumenten, gegen die Type-Contracts zu bauen, ohne das ganze Framework-Package zu importieren. Enthaelt keine identitaets-sensitiven Runtime-Werte mehr (Error-Klassen leben seit #1629 in kumiko-framework, Brand-Symbole nutzen Symbol.for) und ist deshalb eine plain dependency, keine peerDependency.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",

package/src/handlers.ts

@@ -28,11 +28,19 @@ export type OpenToAllAccessRule = {
   readonly openToAll: OpenToAllDeclaration;
 };
 
+// "public-intake": anonymous callers may write personal data; the required rateLimit is the only protection.
+export type RoleAccessPersonalData = "public-intake";
+
+export type RoleAccessRule = {
+  readonly roles: readonly string[];
+  readonly personalData?: RoleAccessPersonalData;
+};
+
 // AccessRule is DEFAULT-DENY: a handler without an access rule is not reachable.
 // To grant access, set one of:
 //   - { roles: ["Admin", ...] }             — role-based allowlist (empty array denies everyone)
 //   - { openToAll: { reason: "..." } }      — any authenticated user may call (still requires a valid JWT)
-export type AccessRule = { readonly roles: readonly string[] } | OpenToAllAccessRule;
+export type AccessRule = RoleAccessRule | OpenToAllAccessRule;
 
 export type EscapeHatchDeclaration = { readonly reason: string };
 

package/src/http-route.ts

@@ -61,11 +61,11 @@ export type HttpRouteDefinition = {
   readonly method: HttpRouteMethod;
   /** URL-Pfad (Hono-Pattern, z.B. "/feed.xml" oder "/og/:tenantId.png"). */
   readonly path: string;
-  /** Wenn true, bypasses die /api/*-Auth-Middleware. Default false —
-   *  Routes liegen außerhalb /api/* und sehen die Auth-Middleware
-   *  ohnehin nicht; das Flag ist semantisch (= "diese Route ist
-   *  bewusst öffentlich") für Boot-Validator + Doku. */
-  readonly anonymous?: boolean;
+  /** true = public, no session required. false = mounted behind the
+   *  session auth chain (no anonymous fallthrough, PAT rate limit,
+   *  origin + CSRF guards) — a request without a session gets 401. The
+   *  handler reads the caller via getUser(c). */
+  readonly anonymous: boolean;
   /** Hono-Handler. Bekommt Hono-Context + Framework-Deps; returnt
    *  Response (sync oder async). */
   readonly handler: HttpRouteHandler;