@cosmicdrift/kumiko-types 0.338.0 → 0.339.0

package/dist/define-handler.d.ts

@@ -12,6 +12,7 @@ export type WriteHandlerDefinition<TName extends string = string, TSchema extend
     readonly unsafeSkipTransitionGuard?: boolean;
     readonly rateLimit?: RateLimitDeclaration;
     readonly escapeHatch?: EscapeHatchDeclaration;
+    readonly tenantlessAnonymous?: boolean;
     readonly handler: (event: WriteEvent<z.infer<TSchema>>, context: HandlerContext<TMap>) => Promise<WriteResult<TData>>;
     readonly perform?: PipelineDef<z.infer<TSchema>, TData>;
 };
@@ -24,6 +25,7 @@ export type WriteHandlerInput<TName extends string = string, TSchema extends Zod
     readonly unsafeSkipTransitionGuard?: boolean;
     readonly rateLimit?: RateLimitDeclaration;
     readonly escapeHatch?: EscapeHatchDeclaration;
+    readonly tenantlessAnonymous?: boolean;
 } & ({
     readonly handler: (event: WriteEvent<z.infer<TSchema>>, context: HandlerContext<TMap>) => Promise<WriteResult<TData>>;
     readonly perform?: never;

package/dist/handlers.d.ts

@@ -473,6 +473,10 @@ export type WriteHandlerDef = {
     readonly unsafeSkipTransitionGuard?: boolean;
     readonly rateLimit?: RateLimitDeclaration;
     readonly escapeHatch?: EscapeHatchDeclaration;
+    /** Lets an anonymous `POST /api/write` for this handler proceed under
+     *  SYSTEM_TENANT_ID when the host resolves no tenant. Boot requires
+     *  `access.roles: ["anonymous"]` and a real `rateLimit`. */
+    readonly tenantlessAnonymous?: boolean;
     readonly perform?: import("./step.js").PipelineDef;
 };
 export declare const ENTITY_CONVENTION_QUERY_BRAND = "__kumikoEntityConventionQuery";

package/dist/tenant-db-types.d.ts

@@ -34,9 +34,9 @@ export type TenantDb = {
     readonly mode: TenantDbMode;
     /**
      * Unfiltered DbRunner escape hatch for handlers/hooks that declare `escapeHatch: { reason }`.
-     * Throws `AccessDeniedError` when ungranted, or `Error` when `reason` is empty.
+     * Throws `AccessDeniedError` when ungranted. The audit entry carries the declared escapeHatch reason.
      */
-    unsafeRaw(reason: string): DbRunner;
+    unsafeRaw(): DbRunner;
     /**
      * Reach a "global" table with the tenant filter lifted — reads always work; writes
      * reject unless the write handler declared `escapeHatch: { reason }`. "tenant"-tenancy is a compile error here.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-types",
-  "version": "0.338.0",
+  "version": "0.339.0",
   "description": "Framework-Type-Definitions für Kumiko — FeatureDefinition, BootCheck-Types und die reinen Engine-Types. Erlaubt Downstream-Konsumenten, gegen die Type-Contracts zu bauen, ohne das ganze Framework-Package zu importieren. Enthaelt keine identitaets-sensitiven Runtime-Werte mehr (Error-Klassen leben seit #1629 in kumiko-framework, Brand-Symbole nutzen Symbol.for) und ist deshalb eine plain dependency, keine peerDependency.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",