@cosmicdrift/kumiko-types 0.323.0 → 0.325.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-types",
-  "version": "0.323.0",
+  "version": "0.325.0",
   "description": "Framework-Type-Definitions für Kumiko — FeatureDefinition, BootCheck-Types und die reinen Engine-Types. Erlaubt Downstream-Konsumenten, gegen die Type-Contracts zu bauen, ohne das ganze Framework-Package zu importieren. Enthaelt keine identitaets-sensitiven Runtime-Werte mehr (Error-Klassen leben seit #1629 in kumiko-framework, Brand-Symbole nutzen Symbol.for) und ist deshalb eine plain dependency, keine peerDependency.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",

package/src/fields.ts

@@ -259,6 +259,11 @@ export type TextFieldDef = {
   readonly filterable?: boolean;
   readonly encrypted?: boolean;
   readonly sensitive?: boolean;
+  /** A later run reads this field's value as an instruction — prompt, rule,
+   *  template. Every create/update whose payload writes it requires agent.risk
+   *  "high" on the directly-dispatched entry handler; a revert doesn't undo a
+   *  run that already read the compromised value. See irreversible-operation-gate. */
+  readonly readAsInstruction?: boolean;
   /** "password" is a pure render hint (masked input) — no storage semantics. */
   readonly format?: "email" | "url" | "phone" | "password";
   readonly default?: string;
@@ -300,6 +305,11 @@ export type LongTextFieldDef = {
   readonly required?: boolean;
   readonly encrypted?: boolean;
   readonly sensitive?: boolean;
+  /** A later run reads this field's value as an instruction — prompt, rule,
+   *  template. Every create/update whose payload writes it requires agent.risk
+   *  "high" on the directly-dispatched entry handler; a revert doesn't undo a
+   *  run that already read the compromised value. See irreversible-operation-gate. */
+  readonly readAsInstruction?: boolean;
   readonly default?: string;
   readonly access?: FieldAccess;
   readonly multiline?: boolean | { readonly rows?: number };
@@ -663,6 +673,11 @@ export type JsonbFieldDef = {
   readonly type: "jsonb";
   readonly description?: string;
   readonly sensitive?: boolean;
+  /** A later run reads this field's value as an instruction — prompt, rule,
+   *  template. Every create/update whose payload writes it requires agent.risk
+   *  "high" on the directly-dispatched entry handler; a revert doesn't undo a
+   *  run that already read the compromised value. See irreversible-operation-gate. */
+  readonly readAsInstruction?: boolean;
   readonly access?: FieldAccess;
 } & ResolvedPiiFlags;
 

package/src/handlers.ts

@@ -767,6 +767,9 @@ export type JobContext = SharedContextFields & {
   readonly systemUser: SessionUser;
   readonly log: Logger;
   readonly triggeredBy: { readonly id: string; readonly tenantId: TenantId } | null;
+  // 1-based run number; finalAttempt = no retry follows if this run throws. A sequential-lock re-enqueue restarts at 1.
+  readonly attempt: number;
+  readonly finalAttempt: boolean;
   // Only present for jobs whose owning feature declares r.systemScope().
   // assertTenantMatch()/acknowledgeCrossTenant() return a TenantDb; a raw,
   // tenant-unfiltered DbRunner instead comes from ctx.systemDb.unsafeRaw(reason)