@cosmicdrift/kumiko-types 0.364.0 → 0.365.1

package/dist/config.d.ts

@@ -154,12 +154,17 @@ export type JobBackoff = JobBackoffStrategy | {
     readonly type: JobBackoffStrategy;
     readonly delayMs?: number | undefined;
 };
+export type MaxPerTenantOptions = {
+    readonly limit: number;
+    readonly onLimit: "skip" | "defer";
+    readonly deferMs?: number | undefined;
+};
 export type JobDefinition = {
     readonly name: string;
     readonly handler: JobHandlerFn;
     readonly trigger: JobTrigger;
     readonly concurrency?: ConcurrencyMode | undefined;
-    readonly maxPerTenant?: number | undefined;
+    readonly maxPerTenant?: number | MaxPerTenantOptions | undefined;
     readonly debounceMs?: number | undefined;
     readonly retries?: number | undefined;
     readonly backoff?: JobBackoff | undefined;

package/dist/db-connection.d.ts

@@ -11,4 +11,9 @@ export type DbTx = postgres.TransactionSql<Record<string, unknown>> | RawDbClien
 export type DbRunner = DbConnection | DbTx;
 export type DbRow = Record<string, unknown>;
 export type PgClient = ReturnType<typeof postgres>;
-export type PgListenClient = ReturnType<typeof postgres>;
+export type PgListenSubscription = {
+    unlisten(): Promise<void>;
+};
+export type PgListenClient = {
+    listen(channel: string, onnotify: (payload: string) => void, onlisten?: () => void): Promise<PgListenSubscription>;
+};

package/dist/file-handle-types.d.ts

@@ -11,5 +11,8 @@ export type FileContext = {
     refFromFileRef(row: {
         readonly storageKey: string;
     }): FileHandle;
+    listFromFileRef(row: {
+        readonly storageKey: string;
+    }): Promise<readonly string[]>;
     list(prefix: string): Promise<readonly string[]>;
 };

package/dist/handlers.d.ts

@@ -127,6 +127,10 @@ export type JobTriggerEvent = {
 };
 export type JobRunnerRef = {
     handleEvent(eventName: string, payload: Record<string, unknown>, user?: SessionUser, triggerEvent?: JobTriggerEvent): Promise<void>;
+    dispatch?(jobName: string, payload: Record<string, unknown>, meta?: {
+        readonly priority?: number;
+        readonly jobId?: string;
+    }): Promise<unknown>;
 };
 export type DispatchWriteRef = {
     readonly write: (user: SessionUser, qn: string, payload: unknown, inheritedOrigin?: WriteOrigin) => Promise<WriteResult>;
@@ -238,6 +242,7 @@ type SharedContextFields = {
     readonly notify?: NotifyFn;
     readonly _notifyFactory?: NotifyFactory;
     readonly _notifyInTransactionFactory?: (user: SessionUser, tenantId: TenantId) => NotifyFn;
+    readonly _notifyAfterCommitFactory?: (user: SessionUser, tenantId: TenantId) => NotifyFn;
     readonly _escapeHatchAuditSink?: EscapeHatchAuditSink;
     readonly secrets?: import("./secrets-types.js").SecretsContext;
     readonly masterKeyProvider?: import("./secrets-types.js").MasterKeyProvider;
@@ -355,6 +360,7 @@ export type JobContext = SharedContextFields & {
     readonly registry: Registry;
     readonly systemUser: SessionUser;
     readonly log: Logger;
+    readonly metricsFor: (featureName: string) => MetricsHandle;
     readonly triggeredBy: {
         readonly id: string;
         readonly tenantId: TenantId;
@@ -596,7 +602,9 @@ export type WriteHandlerDef = {
     /** Runs after all pre-handler gates (and after reserveBeforeTransaction) and before the
      *  transaction opens: no transaction and no connection held, for external I/O and reads only.
      *  Its `data` reaches the handler as `event.prepared`; a failure result or throw rejects the
-     *  write before anything is written. A handler with this phase cannot run as a nested ctx.write. */
+     *  write before anything is written. A handler with this phase cannot run as a nested ctx.write.
+     *  `ctx.forTenant` is available but read-only here: its db denies writes for the own and a
+     *  foreign tenant alike (a foreign tenant stays gated by the SystemAdmin check). */
     readonly beforeTransaction?: BeforeTransactionPhase;
     /** `"perCommand"`: the handler runs without a transaction of its own. Every ctx.write/writeAs it
      *  issues runs as its own top-level command with its own transaction and afterCommit hooks;

package/dist/kms-adapter-types.d.ts

@@ -40,7 +40,8 @@ interface KmsAdapterBase {
     createKey(subject: SubjectId, ctx: KmsContext): Promise<void>;
     /**
      * Erases the key material immediately; the tombstone row stays for the
-     * audit trail. Idempotent — repeat calls and unknown subjects are no-ops.
+     * audit trail. Idempotent. A never-keyed subject gets a tombstone too, so a
+     * later createKey cannot mint a fresh key for pre-KMS plaintext.
      */
     eraseKey(subject: SubjectId, ctx: KmsContext): Promise<void>;
     /** Probe for boot + readiness. Throws when the backend is unreachable. */

package/dist/multi-stream-apply-context-types.d.ts

@@ -16,4 +16,9 @@ export type MultiStreamApplyContext<TMap extends object = KumikoEventTypeMap> =
     readonly files?: FileContext;
     readonly derivatives?: DerivativesContext;
     readonly secrets?: SecretsContext;
+    readonly jobs?: {
+        dispatch(jobName: string, payload: Record<string, unknown>, options?: {
+            readonly jobId?: string;
+        }): Promise<void>;
+    };
 };

package/dist/screen.d.ts

@@ -13,6 +13,8 @@ export interface FieldFormatRegistry {
         readonly locale?: string;
         readonly dateStyle?: "full" | "long" | "medium" | "short";
         readonly timeStyle?: "full" | "long" | "medium" | "short";
+        /** IANA zone id (e.g. "Europe/Berlin"). Default: the runtime's zone. */
+        readonly timeZone?: string;
     };
     date: {
         readonly locale?: string;
@@ -723,6 +725,8 @@ export type DashboardPanelEmptyState = {
     /** Second line under `emptyLabel`. */
     readonly emptyHint?: string;
 };
+export declare const DASHBOARD_STAT_TONES: readonly ["default", "positive", "ok", "warn", "negative"];
+export type DashboardStatTone = (typeof DASHBOARD_STAT_TONES)[number];
 export type DashboardStatPanel = DashboardPanelQueryOptions & DashboardPanelGate & {
     readonly kind: "stat";
     /** Stable id: kebab-case, unique within the panel set. */
@@ -736,7 +740,7 @@ export type DashboardStatPanel = DashboardPanelQueryOptions & DashboardPanelGate
     /** Formats a numeric value as currency (minor units); ignored for string values. The sparkline is not formatted. */
     readonly valueFormat?: DashboardValueFormat;
     /** Fixed tone when `toneField` is unset or yields none; not applied while the value is 0. */
-    readonly tone?: "default" | "positive" | "ok" | "warn" | "negative";
+    readonly tone?: DashboardStatTone;
     /** Record field holding `{ atMs, value | null }[]` (MetricResult.points),
      *  drawn as a sparkline next to the value. */
     readonly sparklineField?: string;

package/dist/screen.js

@@ -1,6 +1,13 @@
 export function metricField(metric) {
     return typeof metric === "string" ? metric : metric.field;
 }
+// Query result contract: flat record; `valueField` points at the
+// value (string is display-ready, number is locale-formatted, DashboardI18nText
+// is translated), `subField` optionally at a sub line (string | DashboardI18nText), `toneField` optionally at
+// "default" | "positive" | "ok" | "warn" | "negative".
+// `visibleWhen` only on a top-level stat; the boot validator rejects it on a
+// stat-group child (gate the whole group instead).
+export const DASHBOARD_STAT_TONES = ["default", "positive", "ok", "warn", "negative"];
 /** Group key of a field value; `collapsedWhen` and row values both go through it. */
 export function relatedListGroupKey(value) {
     return value === undefined || value === null ? "" : String(value);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-types",
-  "version": "0.364.0",
+  "version": "0.365.1",
   "description": "Framework-Type-Definitions für Kumiko — FeatureDefinition, BootCheck-Types und die reinen Engine-Types. Erlaubt Downstream-Konsumenten, gegen die Type-Contracts zu bauen, ohne das ganze Framework-Package zu importieren. Enthaelt keine identitaets-sensitiven Runtime-Werte mehr (Error-Klassen leben seit #1629 in kumiko-framework, Brand-Symbole nutzen Symbol.for) und ist deshalb eine plain dependency, keine peerDependency.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",

package/src/changes.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.365.0",
+    "type": "improvement",
+    "title": "DASHBOARD_STAT_TONES is the single source for dashboard stat tones",
+    "detail": "screen.ts exports DASHBOARD_STAT_TONES and DashboardStatTone; DashboardStatPanel.tone derives from it, and the web renderer builds its runtime tone check and StatTone type from the same constant, so a new tone can no longer be silently dropped from toneField values."
+  },
   {
     "version": "0.362.0",
     "type": "improvement",