@cosmicdrift/kumiko-bundled-features 0.209.0 → 0.210.0

package/src/notes-history-user-data/hooks.ts

@@ -26,11 +26,12 @@ export const noteEntryExportHook: UserDataExportHook = async (ctx) => {
   };
 };
 
-// Deliberate no-op: `body` is annotated `userOwned` (entity.ts), which relies
-// on crypto-shredding (mounted KMS) for erasure — destroying the author's
-// subject key makes every note-entry event AND projected row unreadable at
-// once, without needing a physical delete (which would also break the
-// bundle's append-only history for OTHER entities' co-authors reading it).
+// Deliberate no-op: `body` is annotated `personal: { of: "authorId" }`
+// (entity.ts), which relies on crypto-shredding (mounted KMS) for erasure —
+// destroying the author's subject key makes every note-entry event AND
+// projected row unreadable at once, without needing a physical delete
+// (which would also break the bundle's append-only history for OTHER
+// entities' co-authors reading it).
 // Same tradeoff as job-run/delivery-attempt (user-data-rights-defaults).
 // Precondition: this ONLY erases anything if the app mounts a KMS adapter —
 // without one, userOwned fields fall back to plaintext storage framework-wide

package/src/personal-access-tokens/schema/api-token.ts

@@ -33,7 +33,8 @@ export const apiTokenEntity = createEntity({
       required: true,
       maxLength: 120,
       access: { write: access.privileged },
-      userOwned: { ownerField: "userId" },
+      personal: { of: "userId" },
+      find: "none",
     }),
     tokenHash: createTextField({
       required: true,

package/src/sessions/feature.ts

@@ -245,10 +245,6 @@ export function createSessionsFeature(options?: SessionsFeatureOptions): Feature
       type: "projectionDetail",
       query: SessionQueries.detail,
       listScreenId: SESSION_LIST_SCREEN_ID,
-      // No write path on this screen — a "Cancel" button here would only
-      // ever discard nothing. Back-navigation still works via listScreenId
-      // above (resolveDetailBreadcrumb, renderer-web) — fw#2245.
-      hideActions: true,
       layout: {
         sections: [
           {

package/src/sessions/schema/user-session.ts

@@ -63,12 +63,14 @@ export const userSessionEntity = createEntity({
     ip: createTextField({
       maxLength: 64,
       access: { write: access.privileged },
-      userOwned: { ownerField: "userId" },
+      personal: { of: "userId" },
+      find: "none",
     }),
     userAgent: createTextField({
       maxLength: 512,
       access: { write: access.privileged },
-      userOwned: { ownerField: "userId" },
+      personal: { of: "userId" },
+      find: "none",
     }),
   },
 });

package/src/tags/entity.ts

@@ -7,11 +7,17 @@ export const tagEntity = createEntity({
   table: "read_tags",
   fields: {
     // Catalog labels ("urgent", "billing"), not user-identifying content —
-    // allowPlaintext silences the user-content heuristic (456/5). A tenant
-    // COULD name a tag after a person; if that becomes a real requirement,
-    // this needs a userOwned annotation + forget/export hooks in the
-    // user-data-rights pipeline (none exist for tags today).
-    name: createTextField({ required: true, maxLength: 64, allowPlaintext: "catalog-label" }),
+    // `personal: false` silences the user-content heuristic (456/5). A
+    // tenant COULD name a tag after a person; if that becomes a real
+    // requirement, this needs a `personal: { of: "<f>" }` annotation +
+    // forget/export hooks in the user-data-rights pipeline (none exist for
+    // tags today).
+    name: createTextField({
+      required: true,
+      maxLength: 64,
+      personal: false,
+      reason: "catalog_label",
+    }),
     // Optional UI hint (hex or token). No enforcement — purely for rendering.
     color: createTextField({ maxLength: 32 }),
     // Optional entity-type scope (GitLab project-vs-group labels): empty = global

package/src/template-resolver/__tests__/collection-ownership.integration.test.ts

@@ -321,7 +321,7 @@ describe("GDPR :: the owner column is what makes erasure possible", () => {
 
   test("the tenant-wide table keeps its business-data declaration", () => {
     const content = templateResourceEntity.fields["content"];
-    expect((content as { allowPlaintext?: string }).allowPlaintext).toBe("is-business-data");
+    expect((content as { allowPlaintext?: string }).allowPlaintext).toBe("is_business_data");
     expect((content as { userOwned?: unknown }).userOwned).toBeUndefined();
   });
 

package/src/template-resolver/table.ts

@@ -30,7 +30,10 @@ export const templateResourceEntity = createEntity({
     folder: createTextField({}),
     // Template-body is authored by TenantAdmin/Operator (email-templates etc.),
     // business data — kein end-user UGC.
-    content: createLongTextField({ allowPlaintext: "is-business-data" }),
+    content: createLongTextField({
+      personal: false,
+      reason: "is_business_data",
+    }),
     contentFormat: createSelectField({ required: true, options: [...CONTENT_FORMATS] }),
     variableSchema: createLongTextField({}),
     linkedResources: createLongTextField({}),

package/src/template-resolver/user-content-table.ts

@@ -24,13 +24,16 @@ import { CONTENT_FORMATS, TEMPLATE_KINDS } from "./constants";
 export const userContentEntryEntity = createEntity({
   table: "read_user_content_entries",
   fields: {
-    ownerId: createTextField({ required: true, subjectRef: true }),
+    ownerId: createTextField({ required: true, personal: "ref" }),
     slug: createTextField({ required: true }),
     kind: createSelectField({ required: true, options: [...TEMPLATE_KINDS] }),
     locale: createTextField({ required: true }),
     title: createTextField({}),
     folder: createTextField({}),
-    content: createLongTextField({ userOwned: { ownerField: "ownerId" } }),
+    content: createLongTextField({
+      personal: { of: "ownerId" },
+      find: "none",
+    }),
     contentFormat: createSelectField({ required: true, options: [...CONTENT_FORMATS] }),
   },
   indexes: [

package/src/template-resolver-user-data/hooks.ts

@@ -29,11 +29,12 @@ export const userContentExportHook: UserDataExportHook = async (ctx) => {
   };
 };
 
-// Deliberate no-op: `content` is annotated `userOwned`, so erasure runs via
-// crypto-shredding — destroying the owner's subject key makes every event AND
-// the projected row unreadable at once. A physical DELETE would not be
-// rebuild-safe here: user-content-entry is event-sourced, so a replay would
-// bring the row back (with unreadable content, but back).
+// Deliberate no-op: `content` is annotated `personal: { of: "ownerId" }`, so
+// erasure runs via crypto-shredding — destroying the owner's subject key
+// makes every event AND the projected row unreadable at once. A physical
+// DELETE would not be rebuild-safe here: user-content-entry is
+// event-sourced, so a replay would bring the row back (with unreadable
+// content, but back).
 // Precondition: this only erases anything if the app mounts a KMS adapter —
 // without one, userOwned fields fall back to plaintext framework-wide and
 // forget is a true no-op for `content`. Same property as notes-history.

package/src/tenant/invitation-table.ts

@@ -58,7 +58,7 @@ export const tenantInvitationEntity = createEntity({
   fields: {
     // Eingeladene Email — case-insensitive normalisiert beim Insert.
     // PII bis zur Annahme (danach hat der User selbst seine email in users).
-    email: createTextField({ required: true, maxLength: 320, pii: true, lookupable: true }),
+    email: createTextField({ required: true, maxLength: 320, personal: "self", find: "exact" }),
     // Membership-Rolle die dem User nach Accept gegeben wird. Default
     // im handler ist "Admin" (Co-Admin-Pattern für kleine Teams).
     role: createTextField({ required: true, maxLength: 50 }),
@@ -76,8 +76,8 @@ export const tenantInvitationEntity = createEntity({
     // decrypt-and-scan (see user-data-rights-defaults' invitation hook).
     invitedBy: createTextField({
       required: true,
-      userOwned: { ownerField: "invitedBy" },
-      lookupable: true,
+      personal: { of: "invitedBy" },
+      find: "exact",
     }),
     // UI-Anzeige — Wahrheit liegt in Redis-TTL.
     expiresAt: createTimestampField({ required: true }),

package/src/tenant-lifecycle/boot-checks.ts

@@ -1,7 +1,7 @@
 import {
   EXT_TENANT_DATA,
   type FeatureDefinition,
-  type PiiAnnotations,
+  type ResolvedPiiFlags,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { entitiesOf } from "../shared";
 
@@ -13,7 +13,7 @@ import { entitiesOf } from "../shared";
 // original guard's "tenant-lifecycle mounted" gate exactly (unlike gating on
 // a sibling feature, which would silently narrow coverage).
 
-function hasTenantOwned(field: unknown): field is PiiAnnotations {
+function hasTenantOwned(field: unknown): field is ResolvedPiiFlags {
   return (
     typeof field === "object" &&
     field !== null &&

package/src/tenant-settings/__tests__/settings-hub-i18n.test.ts

@@ -0,0 +1,58 @@
+// fw-i18n-funde: tenant-settings has admin-write keys at tenant-home scope
+// (see config.ts) — access.admin includes SystemAdmin, which cascades a
+// "set the platform default" screen up to the system audience alongside
+// the tenant-home screen (buildConfigFeatureSchema's ELEVATED_ROLES). Both
+// used to share the exact same `${feature}.settings` nav label, so the
+// sidebar showed the identical raw i18n key twice, once under each
+// audience. This test proves the real, declared translations resolve to
+// actual text (not the raw key) AND that the two nav entries read
+// differently — a regression guard, not an existence check.
+
+import { describe, expect, test } from "bun:test";
+import { createConfigFeature } from "@cosmicdrift/kumiko-bundled-features/config";
+import { buildConfigFeatureSchema, createRegistry } from "@cosmicdrift/kumiko-framework/engine";
+import { createTenantSettingsFeature } from "../feature";
+
+function translate(
+  translations: Readonly<Record<string, Readonly<Record<string, string>> | undefined>>,
+  key: string,
+  locale = "en",
+): string {
+  return translations[key]?.[locale] ?? key;
+}
+
+describe("tenant-settings — Settings-Hub nav/section labels", () => {
+  test("system + tenant scope screens both translate, and their nav labels differ", () => {
+    const registry = createRegistry([createConfigFeature(), createTenantSettingsFeature()]);
+    const schema = buildConfigFeatureSchema(registry);
+    const translations = registry.getFeature("tenant-settings")?.translations ?? {};
+
+    const systemNav = schema.navs.find((n) => n.id === "tenant-settings-system");
+    const tenantNav = schema.navs.find((n) => n.id === "tenant-settings-tenant");
+    expect(systemNav).toBeDefined();
+    expect(tenantNav).toBeDefined();
+    if (systemNav === undefined || tenantNav === undefined) throw new Error("unreachable");
+
+    const systemLabel = translate(translations, systemNav.label);
+    const tenantLabel = translate(translations, tenantNav.label);
+
+    // Both labels actually resolve to text — not an echoed raw key.
+    expect(systemLabel).not.toBe(systemNav.label);
+    expect(tenantLabel).not.toBe(tenantNav.label);
+    // The cross-scope duplicate this test guards against: the two nav
+    // entries read differently instead of repeating the same words under
+    // both "Platform" and "Organization".
+    expect(systemLabel).not.toBe(tenantLabel);
+
+    const systemScreen = schema.screens.find((s) => s.id === "tenant-settings-system");
+    expect(systemScreen).toBeDefined();
+    if (systemScreen === undefined || systemScreen.type !== "configEdit") {
+      throw new Error("unreachable");
+    }
+    const section = systemScreen.layout.sections[0];
+    const sectionTitle = section !== undefined && "title" in section ? section.title : undefined;
+    expect(sectionTitle).toBeDefined();
+    if (sectionTitle === undefined) throw new Error("unreachable");
+    expect(translate(translations, sectionTitle)).not.toBe(sectionTitle);
+  });
+});

package/src/tenant-settings/feature.ts

@@ -41,6 +41,18 @@ export function createTenantSettingsFeature(
           de: "Tenant-Einstellungen",
           en: "Tenant Settings",
         },
+        // Settings-Hub nav label + configEdit section heading (same key, both
+        // scopes fall back here — see buildConfigFeatureSchema).
+        "tenant-settings.settings": { de: "Tenant-Einstellungen", en: "Tenant Settings" },
+        // Both currency/locale are tenant-home with admin write access, which
+        // cascades a SystemAdmin-only "set the platform default" screen up to
+        // the system audience — scoped override so its nav entry reads
+        // differently from the tenant-home entry instead of repeating the
+        // same words under both "Platform" and "Organization".
+        "tenant-settings.settings.system": {
+          de: "Tenant-Einstellungen (Plattform-Standard)",
+          en: "Tenant Settings (Platform Default)",
+        },
       },
     });
   });

package/src/user/schema/user.ts

@@ -67,8 +67,8 @@ export const userEntity = createEntity({
       required: true,
       format: "email",
       maxLength: 320,
-      pii: true,
-      lookupable: true,
+      personal: "self",
+      find: "exact",
       access: { write: access.privileged },
     }),
 
@@ -85,8 +85,8 @@ export const userEntity = createEntity({
     displayName: createTextField({
       required: true,
       maxLength: 100,
-      pii: true,
-      searchable: true,
+      personal: "self",
+      find: "fuzzy",
     }),
     // No default here — tenant-settings owns the app-wide locale default; see #1637.
     locale: createTextField({ maxLength: 10 }),
@@ -169,7 +169,7 @@ export const userEntity = createEntity({
       access: { write: access.privileged },
     }),
   },
-  // fw#2134 — email is `pii: true, lookupable: true`, so the column holds
+  // fw#2134 — email is `personal: "self", find: "exact"`, so the column holds
   // per-row ciphertext: a plain unique index on it can't catch duplicates.
   // `unique: true` over a lookupable column makes buildEntityTable /
   // deriveEntityTableMeta emit a second, partial unique index over the

package/src/user-data-rights/__tests__/boot-checks.test.ts

@@ -96,7 +96,17 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
 
   test("V3: pii entity without any EXT_USER_DATA hook → throws the guard's own message", () => {
     const bad = defineFeature("crm", (r) => {
-      r.entity("contact", createEntity({ fields: { email: createTextField({ pii: true }) } }));
+      r.entity(
+        "contact",
+        createEntity({
+          fields: {
+            email: createTextField({
+              personal: "self",
+              find: "none",
+            }),
+          },
+        }),
+      );
     });
     expect(() => validateBoot([...baseFeatures(), bad])).toThrow(/EXT_USER_DATA hook.*Art\.17 gap/);
   });
@@ -110,7 +120,14 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
         source: "contact",
         table: projectionTable,
         apply: { [contactCreated.name]: async () => {} },
-        entity: createEntity({ fields: { email: createTextField({ pii: true }) } }),
+        entity: createEntity({
+          fields: {
+            email: createTextField({
+              personal: "self",
+              find: "none",
+            }),
+          },
+        }),
       });
     });
     expect(() => validateBoot([...baseFeatures(), bad])).toThrow(/EXT_USER_DATA hook.*Art\.17 gap/);
@@ -120,7 +137,13 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
     const bad = defineFeature("tasks", (r) => {
       r.entity(
         "task",
-        createEntity({ fields: { assigneeId: createTextField({ subjectRef: true }) } }),
+        createEntity({
+          fields: {
+            assigneeId: createTextField({
+              personal: "ref",
+            }),
+          },
+        }),
       );
     });
     expect(() => validateBoot([...baseFeatures(), bad])).toThrow(/EXT_USER_DATA hook.*Art\.17 gap/);
@@ -131,7 +154,13 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
       r.requires("user-data-rights");
       r.entity(
         "task",
-        createEntity({ fields: { assigneeId: createTextField({ subjectRef: true }) } }),
+        createEntity({
+          fields: {
+            assigneeId: createTextField({
+              personal: "ref",
+            }),
+          },
+        }),
       );
       r.useExtension(EXT_USER_DATA, "task", { export: async () => null, delete: async () => {} });
     });
@@ -148,7 +177,14 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
         source: "contact",
         table: projectionTable,
         apply: { [contactCreated.name]: async () => {} },
-        entity: createEntity({ fields: { email: createTextField({ pii: true }) } }),
+        entity: createEntity({
+          fields: {
+            email: createTextField({
+              personal: "self",
+              find: "none",
+            }),
+          },
+        }),
       });
       r.useExtension(EXT_USER_DATA, "contact-summary", {
         export: async () => null,
@@ -162,7 +198,14 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
     const bad = defineFeature("billing", (r) => {
       r.entity(
         "subscription",
-        createEntity({ fields: { providerCustomerId: createTextField({ tenantOwned: true }) } }),
+        createEntity({
+          fields: {
+            providerCustomerId: createTextField({
+              personal: "tenant",
+              find: "none",
+            }),
+          },
+        }),
       );
     });
     expect(() => validateBoot([...minimalTenantLifecycleFeatures(), bad])).toThrow(
@@ -174,7 +217,14 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
     const bad = defineFeature("billing", (r) => {
       r.entity(
         "subscription",
-        createEntity({ fields: { providerCustomerId: createTextField({ tenantOwned: true }) } }),
+        createEntity({
+          fields: {
+            providerCustomerId: createTextField({
+              personal: "tenant",
+              find: "none",
+            }),
+          },
+        }),
       );
     });
     const features = minimalTenantLifecycleFeatures().concat(bad);
@@ -186,7 +236,14 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
     const notMounted = defineFeature("billing-standalone", (r) => {
       r.entity(
         "subscription",
-        createEntity({ fields: { providerCustomerId: createTextField({ tenantOwned: true }) } }),
+        createEntity({
+          fields: {
+            providerCustomerId: createTextField({
+              personal: "tenant",
+              find: "none",
+            }),
+          },
+        }),
       );
     });
     expect(() => validateBoot([...baseFeatures(), notMounted])).not.toThrow();
@@ -197,7 +254,14 @@ describe("GDPR-storage boot guards V2-V4 (via r.bootCheck)", () => {
       r.requires("tenant-lifecycle");
       r.entity(
         "subscription",
-        createEntity({ fields: { providerCustomerId: createTextField({ tenantOwned: true }) } }),
+        createEntity({
+          fields: {
+            providerCustomerId: createTextField({
+              personal: "tenant",
+              find: "none",
+            }),
+          },
+        }),
       );
       r.useExtension(EXT_TENANT_DATA, "subscription", { destroy: async () => {} });
     });

package/src/user-data-rights/__tests__/forget-cleanup-search-purge-ordering.integration.test.ts

@@ -46,8 +46,8 @@ const noteEntity = createEntity({
     authorId: createTextField({ required: true }),
     body: createTextField({
       required: true,
-      searchable: true,
-      userOwned: { ownerField: "authorId" },
+      personal: { of: "authorId" },
+      find: "fuzzy",
     }),
   },
 });

package/src/user-data-rights/boot-checks.ts

@@ -1,7 +1,7 @@
 import {
   EXT_USER_DATA,
   type FeatureDefinition,
-  type PiiAnnotations,
+  type ResolvedPiiFlags,
 } from "@cosmicdrift/kumiko-framework/engine";
 import { entitiesOf } from "../shared";
 
@@ -58,7 +58,7 @@ export function validateGdprPiiHookCoverage(features: readonly FeatureDefinition
       if (hookedEntities.has(entityName)) continue;
       const subjectFields = Object.entries(entity.fields)
         .filter(([, field]) => {
-          const annot = field as PiiAnnotations; // @cast-boundary schema-walk
+          const annot = field as ResolvedPiiFlags; // @cast-boundary schema-walk
           return Boolean(annot.pii) || Boolean(annot.userOwned) || Boolean(annot.subjectRef);
         })
         .map(([name]) => name);

package/src/user-data-rights/feature.ts

@@ -134,8 +134,8 @@ export type UserDataRightsOptions = {
 };
 
 export function createUserDataRightsFeature(opts: UserDataRightsOptions = {}): FeatureDefinition {
-  // One-shot operator warning (the export cron fires every minute — warn once
-  // per process, not every run). Lives in the factory scope so the cron closure
+  // One-shot operator warning (the export cron fires daily — warn once per
+  // process, not every run). Lives in the factory scope so the cron closure
   // shares it across runs.
   let warnedMissingExportUrl = false;
   return defineFeature("user-data-rights", (r) => {
@@ -401,7 +401,7 @@ export function createUserDataRightsFeature(opts: UserDataRightsOptions = {}): F
     // S2.U3 Atom 3b — Worker fuer Async Export-Pipeline. Cron-getriggert.
     r.job(
       "run-export-jobs",
-      { trigger: { cron: "0 * * * * *" }, concurrency: "skip" },
+      { trigger: { cron: "0 3 * * *" }, concurrency: "skip" },
       async (_payload, ctx) => {
         if (!ctx.db || !ctx.registry) {
           throw new Error(
@@ -488,7 +488,7 @@ export function createUserDataRightsFeature(opts: UserDataRightsOptions = {}): F
     // — Art.17 wuerde nie ausgefuehrt.
     r.job(
       "run-forget-cleanup",
-      { trigger: { cron: "0 * * * * *" }, concurrency: "skip" },
+      { trigger: { cron: "0 3 * * *" }, concurrency: "skip" },
       async (_payload, ctx) => {
         if (!ctx.db || !ctx.registry) {
           throw new Error(

package/src/user-data-rights/schema/download-token.ts

@@ -75,21 +75,23 @@ export const exportDownloadTokenEntity = createEntity({
     // (z.B. broken Sync-Tool).
     useCount: createBigIntField({}),
 
-    // Audit: Source-IP des letzten Downloads. Hilft DPO bei Untersuchung
-    // ungewoehnlicher Aktivitaeten ("Token wurde von 5 verschiedenen
-    // IPs genutzt"). Plain-IP-V4/IPv6, kein hash — DPO braucht direkt
-    // lesbar. is-business-data weil Token-Audit kein User-PII ist
-    // (gehoert dem Tenant-Operator).
+    // Audit: source IP of the last download. Helps the DPO investigate
+    // unusual activity ("token was used from 5 different IPs"). Plain
+    // IPv4/IPv6, no hash — DPO needs it directly readable.
+    // `reason: "is_business_data"` because token-audit data isn't user
+    // PII (it belongs to the tenant operator).
     lastUsedFromIp: createTextField({
-      maxLength: 45, // IPv6 max
-      allowPlaintext: "is-business-data",
+      maxLength: 45,
+      personal: false,
+      reason: "is_business_data",
     }),
 
-    // Audit: User-Agent des letzten Downloads. Audit-Wert (Email-Client
-    // vs Browser vs CLI-Tool unterscheidbar). is-business-data analog.
+    // Audit: user agent of the last download (distinguishes email
+    // client vs browser vs CLI tool). Same `reason` as above.
     lastUsedUserAgent: createTextField({
       maxLength: 500,
-      allowPlaintext: "is-business-data",
+      personal: false,
+      reason: "is_business_data",
     }),
   },
 

package/src/user-data-rights/schema/export-job.ts

@@ -133,11 +133,12 @@ export const exportJobEntity = createEntity({
     // verbleiben.
     expiresAt: createTimestampField({}),
 
-    // Failed-State Diagnose. longText weil Hook-Errors mit Stack-Trace
-    // mehrere KB werden koennen. is-business-data weil Job-Status
-    // public im UI-Polling sichtbar (kein PII).
+    // Failed-state diagnostics. longText because hook errors with stack
+    // traces can run several KB. `reason: "is_business_data"` because
+    // job status is publicly visible in UI polling (no PII).
     errorMessage: createLongTextField({
-      allowPlaintext: "is-business-data",
+      personal: false,
+      reason: "is_business_data",
     }),
 
     // Audit-Info fuer Operator: wie gross war der Export. Hilft beim

package/src/user-data-rights-defaults/__tests__/bundled-entities.userdata-hooks.integration.test.ts

@@ -401,7 +401,7 @@ describe("delivery-attempt userData-hooks (#799)", () => {
 describe("job-run userData-hooks (#799)", () => {
   async function seedRun(id: string, triggeredById: string | null): Promise<void> {
     await asRawClient(full.db).unsafe(
-      `INSERT INTO read_job_runs
+      `INSERT INTO store_job_runs
          (id, tenant_id, job_name, bull_job_id, status, payload, attempt, started_at, triggered_by_id)
        VALUES ($1::uuid, $2, 'app:job:export', $3, 'completed', '{"scope":"mine"}', 1, now(), $4)`,
       [id, TENANT_A, `bull-${id}`, triggeredById],