@cosmicdrift/kumiko-types 0.322.0 → 0.324.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-types",
-  "version": "0.322.0",
+  "version": "0.324.0",
   "description": "Framework-Type-Definitions für Kumiko — FeatureDefinition, BootCheck-Types und die reinen Engine-Types. Erlaubt Downstream-Konsumenten, gegen die Type-Contracts zu bauen, ohne das ganze Framework-Package zu importieren. Enthaelt keine identitaets-sensitiven Runtime-Werte mehr (Error-Klassen leben seit #1629 in kumiko-framework, Brand-Symbole nutzen Symbol.for) und ist deshalb eine plain dependency, keine peerDependency.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",

package/src/fields.ts

@@ -160,6 +160,11 @@ export type Findability = "exact" | "fuzzy" | "none" | "secret";
 // force every OTHER intersected property (e.g. a factory's `required?: R`)
 // to `never` too, since its index signature applies to all string keys.
 // Naming the three annotation keys explicitly avoids that trap.
+//
+// kumiko-framework#2921: no longer part of PersonalAnnotations /
+// PersonalAnnotationsLongText — text and longText fields must declare an
+// explicit stance. It still applies to PersonalAnnotationsNoFind, whose
+// factories keep `personal` optional.
 type NoPersonalAnnotation = {
   readonly personal?: never;
   readonly find?: never;
@@ -178,8 +183,7 @@ export type PersonalAnnotations =
       readonly personal: false;
       readonly reason: string;
       readonly anonymize?: () => unknown | Promise<unknown>;
-    }
-  | NoPersonalAnnotation;
+    };
 
 // longText has no lookupable/searchable machinery ("Kein searchable" — see
 // LongTextFieldDef doc) — only "does this need to stay a secret" applies.
@@ -197,8 +201,7 @@ export type PersonalAnnotationsLongText =
       readonly personal: false;
       readonly reason: string;
       readonly anonymize?: () => unknown | Promise<unknown>;
-    }
-  | NoPersonalAnnotation;
+    };
 
 // Same as PersonalAnnotations but without `find` — for field types with no
 // full-text/blind-index machinery (everything except text and longText).
@@ -256,6 +259,11 @@ export type TextFieldDef = {
   readonly filterable?: boolean;
   readonly encrypted?: boolean;
   readonly sensitive?: boolean;
+  /** A later run reads this field's value as an instruction — prompt, rule,
+   *  template. Every create/update whose payload writes it requires agent.risk
+   *  "high" on the directly-dispatched entry handler; a revert doesn't undo a
+   *  run that already read the compromised value. See irreversible-operation-gate. */
+  readonly readAsInstruction?: boolean;
   /** "password" is a pure render hint (masked input) — no storage semantics. */
   readonly format?: "email" | "url" | "phone" | "password";
   readonly default?: string;
@@ -297,6 +305,11 @@ export type LongTextFieldDef = {
   readonly required?: boolean;
   readonly encrypted?: boolean;
   readonly sensitive?: boolean;
+  /** A later run reads this field's value as an instruction — prompt, rule,
+   *  template. Every create/update whose payload writes it requires agent.risk
+   *  "high" on the directly-dispatched entry handler; a revert doesn't undo a
+   *  run that already read the compromised value. See irreversible-operation-gate. */
+  readonly readAsInstruction?: boolean;
   readonly default?: string;
   readonly access?: FieldAccess;
   readonly multiline?: boolean | { readonly rows?: number };
@@ -660,6 +673,11 @@ export type JsonbFieldDef = {
   readonly type: "jsonb";
   readonly description?: string;
   readonly sensitive?: boolean;
+  /** A later run reads this field's value as an instruction — prompt, rule,
+   *  template. Every create/update whose payload writes it requires agent.risk
+   *  "high" on the directly-dispatched entry handler; a revert doesn't undo a
+   *  run that already read the compromised value. See irreversible-operation-gate. */
+  readonly readAsInstruction?: boolean;
   readonly access?: FieldAccess;
 } & ResolvedPiiFlags;