@cosmicdrift/kumiko-bundled-features 0.351.0 → 0.353.0

package/dist/jobs/handlers/list.query.js

@@ -1,10 +1,12 @@
 import { countWhere, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
+import { decodeCursor, encodeCursor } from "@cosmicdrift/kumiko-framework/db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
-import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
+import { InternalError, ValidationError } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
 import { decryptStoredPii, mapWithConcurrency } from "../../shared/index.js";
 import { jobRunsTable } from "../job-run-table.js";
 const KMS_POOL_CONCURRENCY = 4;
+const DEFAULT_PAGE_SIZE = 50;
 const jobRunStatusSchema = z.enum(["queued", "running", "completed", "failed"]);
 async function decryptRunRow(row) {
     let result = row;
@@ -19,6 +21,26 @@ async function decryptRunRow(row) {
     }
     return result;
 }
+function buildListWhere(payload) {
+    const where = {};
+    if (payload.jobName)
+        where["jobName"] = payload.jobName;
+    const statuses = payload.filters?.[0]?.value ?? (payload.status ? [payload.status] : []);
+    if (statuses.length === 1)
+        where["status"] = statuses[0];
+    else if (statuses.length > 1)
+        where["status"] = { in: statuses };
+    return where;
+}
+function parseOffsetCursor(cursor) {
+    const offset = cursor ? Number(decodeCursor(cursor)) : 0;
+    if (!Number.isInteger(offset) || offset < 0) {
+        throw new ValidationError({
+            fields: [{ path: "cursor", code: "invalid_cursor", i18nKey: "jobs.errors.invalidCursor" }],
+        });
+    }
+    return offset;
+}
 export const listQuery = defineQueryHandler({
     name: "list",
     description: "Lists job runs across all tenants newest-first, optionally filtered by job name and status; use it to check whether a job ran and whether it succeeded.",
@@ -35,6 +57,7 @@ export const listQuery = defineQueryHandler({
         sort: z.enum(["jobName", "status", "startedAt", "duration"]).optional(),
         sortDirection: z.enum(["asc", "desc"]).optional(),
         limit: z.number().optional(),
+        cursor: z.string().optional(),
         totalCount: z.boolean().optional(),
     }),
     access: { roles: ["SystemAdmin"] },
@@ -45,27 +68,29 @@ export const listQuery = defineQueryHandler({
             });
         }
         const db = ctx.systemDb.unsafeRaw("cross-tenant job monitoring: SystemAdmin lists job runs of every tenant");
-        const where = {};
-        if (query.payload.jobName)
-            where["jobName"] = query.payload.jobName;
-        const statusFilter = query.payload.filters?.find((filter) => filter.field === "status");
-        const statuses = statusFilter?.value ?? (query.payload.status ? [query.payload.status] : []);
-        if (statuses.length === 1)
-            where["status"] = statuses[0];
-        else if (statuses.length > 1)
-            where["status"] = { in: statuses };
+        const where = buildListWhere(query.payload);
         const sortColumn = query.payload.sort ?? "startedAt";
-        const rows = await selectMany(db, jobRunsTable, where, {
-            orderBy: { col: sortColumn, direction: query.payload.sortDirection ?? "desc" },
-            limit: query.payload.limit ?? 50,
+        const limit = query.payload.limit ?? DEFAULT_PAGE_SIZE;
+        const offset = parseOffsetCursor(query.payload.cursor);
+        const direction = query.payload.sortDirection ?? "desc";
+        // selectMany has no OFFSET: read through the end of the page plus one probe
+        // row, then slice. `id` as tiebreaker keeps pages stable for non-unique sorts.
+        const fetched = await selectMany(db, jobRunsTable, where, {
+            orderBy: [
+                { col: sortColumn, direction },
+                { col: "id", direction },
+            ],
+            limit: offset + limit + 1,
         });
+        const hasMore = fetched.length > offset + limit;
+        const rows = fetched.slice(offset, offset + limit);
         // countWhere reruns the SAME `where` without the limit — `rows.length` is
         // capped at the page size and would silently undercount the total.
         const total = query.payload.totalCount === true ? await countWhere(db, jobRunsTable, where) : undefined;
         // payload/error are stored encrypted under the triggering user's DEK (#799, #2307).
         return {
             rows: await mapWithConcurrency(rows, KMS_POOL_CONCURRENCY, decryptRunRow),
-            nextCursor: null,
+            nextCursor: hasMore ? encodeCursor(String(offset + limit)) : null,
             ...(total !== undefined && { total }),
         };
     },

package/dist/jobs/i18n.js

@@ -33,6 +33,7 @@ export const JOBS_I18N = {
     "jobs.detail.logs": { en: "Logs" },
     "jobs.detail.retry": { en: "Retry" },
     "jobs.trigger.title": { en: "Run a job" },
+    "jobs.errors.invalidCursor": { en: "The pagination cursor is invalid." },
     "jobs.trigger.submit": { en: "Run" },
     "jobs.errors.unknownJob": { en: "Unknown job." },
     "jobs.errors.notManual": {

package/dist/jobs/job-run-table.d.ts

@@ -6,6 +6,7 @@ export declare const jobRunEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -27,6 +28,7 @@ export declare const jobRunEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -48,6 +50,7 @@ export declare const jobRunEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -69,6 +72,7 @@ export declare const jobRunEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -90,6 +94,7 @@ export declare const jobRunEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -179,6 +184,7 @@ export declare const jobRunEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/ledger/entity.d.ts

@@ -3,6 +3,7 @@ export declare const accountEntity: import("@cosmicdrift/kumiko-types/fields").E
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -32,14 +33,15 @@ export declare const accountEntity: import("@cosmicdrift/kumiko-types/fields").E
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly asset?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly equity?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly expense?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly income?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly liability?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly asset?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly equity?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly expense?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly income?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly liability?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -47,6 +49,7 @@ export declare const accountEntity: import("@cosmicdrift/kumiko-types/fields").E
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -68,6 +71,7 @@ export declare const accountEntity: import("@cosmicdrift/kumiko-types/fields").E
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -105,6 +109,7 @@ export declare const transactionEntity: import("@cosmicdrift/kumiko-types/fields
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -126,6 +131,7 @@ export declare const transactionEntity: import("@cosmicdrift/kumiko-types/fields
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -155,11 +161,12 @@ export declare const transactionEntity: import("@cosmicdrift/kumiko-types/fields
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly draft?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly posted?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly draft?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly posted?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -183,6 +190,7 @@ export declare const transactionEntity: import("@cosmicdrift/kumiko-types/fields
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -204,6 +212,7 @@ export declare const transactionEntity: import("@cosmicdrift/kumiko-types/fields
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -227,6 +236,7 @@ export declare const scheduleEntity: import("@cosmicdrift/kumiko-types/fields").
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -284,10 +294,11 @@ export declare const scheduleEntity: import("@cosmicdrift/kumiko-types/fields").
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly monthly?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly monthly?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
+        readonly optionsAvailabilityQuery?: string;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -314,6 +325,7 @@ export declare const scheduleEntity: import("@cosmicdrift/kumiko-types/fields").
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -335,6 +347,7 @@ export declare const scheduleEntity: import("@cosmicdrift/kumiko-types/fields").
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -356,6 +369,7 @@ export declare const scheduleEntity: import("@cosmicdrift/kumiko-types/fields").
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -377,6 +391,7 @@ export declare const scheduleEntity: import("@cosmicdrift/kumiko-types/fields").
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -398,6 +413,7 @@ export declare const scheduleEntity: import("@cosmicdrift/kumiko-types/fields").
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/ledger/entity.js

@@ -80,12 +80,14 @@ export const transactionEntity = createEntity({
         // Optional business-object reference (e.g. a lease contract) so entries can
         // be filtered by what they're about, not just grepped out of `reference`.
         subjectType: createTextField({
+            minLength: 1,
             maxLength: 64,
             personal: false,
             reason: "technical_reference",
             filterable: true,
         }),
         subjectId: createTextField({
+            minLength: 1,
             maxLength: 128,
             personal: false,
             reason: "technical_reference",
@@ -131,12 +133,14 @@ export const scheduleEntity = createEntity({
         // Confirmed periods inherit this from the schedule (see
         // confirm-schedule-period.write.ts) rather than repeating it per period.
         subjectType: createTextField({
+            minLength: 1,
             maxLength: 64,
             personal: false,
             reason: "technical_reference",
             filterable: true,
         }),
         subjectId: createTextField({
+            minLength: 1,
             maxLength: 128,
             personal: false,
             reason: "technical_reference",

package/dist/ledger/schemas.js

@@ -21,8 +21,14 @@ export const createTransactionPayloadSchema = z
     status: z.enum(TRANSACTION_STATUS).optional(),
     lines: z.array(postingSchema).min(2),
     // Business-object reference (e.g. a lease contract) this entry is about.
-    subjectType: z.string().max(64).optional(),
-    subjectId: z.string().max(128).optional(),
+    subjectType: z.string().min(1).max(64).optional(),
+    subjectId: z.string().min(1).max(128).optional(),
+})
+    // Ids are only unique within their type, so a lone subjectId would match
+    // bookings of a different object type.
+    .refine((p) => (p.subjectType === undefined) === (p.subjectId === undefined), {
+    message: "subjectType and subjectId must be set together",
+    path: ["subjectId"],
 })
     .refine((p) => sumIsZero(p.lines), {
     message: "Transaction must balance: Σ of posting amounts must equal 0",

package/dist/managed-pages/feature.js

@@ -1,6 +1,8 @@
 import { computeRevisionEtag, etagMatches } from "@cosmicdrift/kumiko-framework/api";
 import { defineFeature } from "@cosmicdrift/kumiko-framework/engine";
+import { RateLimitError } from "@cosmicdrift/kumiko-framework/errors";
 import { cachedSecurePageResponse, EMPTY_BRANDING, renderSafeMarkdown, wrapInLayout, } from "../page-render/index.js";
+import { rateLimitedTextResponse } from "../shared/index.js";
 import { BRANDING_KEYS, BRANDING_QUERY_QN, CUSTOM_CSS_KEY, coerceBranding } from "./branding.js";
 import { createBrandingQuery } from "./handlers/branding.query.js";
 import { bySlugQuery } from "./handlers/by-slug.query.js";
@@ -28,14 +30,17 @@ function brandingRevisionSeed(branding) {
         branding.customCss,
     ]);
 }
-// Never throws: a query failure or malformed result degrades to the
-// unbranded default (branding is decoration, not a hard dependency of the
-// page render).
+// A query failure or malformed result degrades to the unbranded default
+// (branding is decoration, not a hard dependency of the page render). A rate
+// limit is rethrown so the route answers 429 instead of serving (and caching)
+// an unbranded page.
 async function readBrandingViaSystemQuery(systemQuery, tenantId) {
     try {
         return coerceBranding(await systemQuery(BRANDING_QUERY_QN, {}, tenantId));
     }
-    catch {
+    catch (error) {
+        if (error instanceof RateLimitError)
+            throw error;
         return EMPTY_BRANDING;
     }
 }
@@ -125,12 +130,25 @@ export function createManagedPagesFeature(opts) {
                 // von resolverTrust: "authoritative" zurecht abgelehnt; siehe
                 // systemQuery's Doc in http-route.ts). Branding ist Deko → ein
                 // Fehlschlag degradiert zum unbranded Default, blockt nie die Page.
-                const [pageSettled, brandingResult] = await Promise.all([
-                    systemQuery(BY_SLUG_QN, { slug, lang }, tenantId)
-                        .then((data) => ({ ok: true, data: data }))
-                        .catch(() => ({ ok: false, data: null })),
-                    readBrandingViaSystemQuery(systemQuery, tenantId),
-                ]);
+                let pageSettled;
+                let brandingResult;
+                try {
+                    [pageSettled, brandingResult] = await Promise.all([
+                        systemQuery(BY_SLUG_QN, { slug, lang }, tenantId)
+                            .then((data) => ({ ok: true, data: data }))
+                            .catch((error) => {
+                            if (error instanceof RateLimitError)
+                                throw error;
+                            return { ok: false };
+                        }),
+                        readBrandingViaSystemQuery(systemQuery, tenantId),
+                    ]);
+                }
+                catch (error) {
+                    if (error instanceof RateLimitError)
+                        return rateLimitedTextResponse(error);
+                    throw error;
+                }
                 if (!pageSettled.ok)
                     return c.text("page unavailable", 503);
                 const data = pageSettled.data;

package/dist/managed-pages/table.d.ts

@@ -3,6 +3,7 @@ export declare const pageEntity: import("@cosmicdrift/kumiko-types/fields").Enti
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -24,6 +25,7 @@ export declare const pageEntity: import("@cosmicdrift/kumiko-types/fields").Enti
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -45,6 +47,7 @@ export declare const pageEntity: import("@cosmicdrift/kumiko-types/fields").Enti
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -66,6 +69,7 @@ export declare const pageEntity: import("@cosmicdrift/kumiko-types/fields").Enti
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -87,6 +91,7 @@ export declare const pageEntity: import("@cosmicdrift/kumiko-types/fields").Enti
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -108,6 +113,7 @@ export declare const pageEntity: import("@cosmicdrift/kumiko-types/fields").Enti
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -134,6 +140,7 @@ export declare const pagesTable: import("@cosmicdrift/kumiko-framework/db").Enti
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -155,6 +162,7 @@ export declare const pagesTable: import("@cosmicdrift/kumiko-framework/db").Enti
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -176,6 +184,7 @@ export declare const pagesTable: import("@cosmicdrift/kumiko-framework/db").Enti
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -197,6 +206,7 @@ export declare const pagesTable: import("@cosmicdrift/kumiko-framework/db").Enti
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -218,6 +228,7 @@ export declare const pagesTable: import("@cosmicdrift/kumiko-framework/db").Enti
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -239,6 +250,7 @@ export declare const pagesTable: import("@cosmicdrift/kumiko-framework/db").Enti
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/notes-history/entity.d.ts

@@ -4,6 +4,7 @@ export declare function createNoteEntryEntity(access?: EntityDefinition["access"
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -25,6 +26,7 @@ export declare function createNoteEntryEntity(access?: EntityDefinition["access"
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -46,6 +48,7 @@ export declare function createNoteEntryEntity(access?: EntityDefinition["access"
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -67,6 +70,7 @@ export declare function createNoteEntryEntity(access?: EntityDefinition["access"
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -106,6 +110,7 @@ export declare const noteEntryEntity: EntityDefinition<{
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -127,6 +132,7 @@ export declare const noteEntryEntity: EntityDefinition<{
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -148,6 +154,7 @@ export declare const noteEntryEntity: EntityDefinition<{
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -169,6 +176,7 @@ export declare const noteEntryEntity: EntityDefinition<{
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -208,6 +216,7 @@ export declare function createNoteMentionEntity(): EntityDefinition<{
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -229,6 +238,7 @@ export declare function createNoteMentionEntity(): EntityDefinition<{
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -252,6 +262,7 @@ export declare const noteMentionEntity: EntityDefinition<{
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -273,6 +284,7 @@ export declare const noteMentionEntity: EntityDefinition<{
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/notes-history/feature.js

@@ -13,7 +13,7 @@
 // a new entry, not an edit; see entity.ts for why that still satisfies GDPR
 // erasure without a delete path.
 import { defineEntityListHandler, defineFeature, } from "@cosmicdrift/kumiko-framework/engine";
-import { hasWhereRule } from "../shared/index.js";
+import { assertNoWhereRuleInOwnershipWrite } from "../shared/index.js";
 import { DEFAULT_NOTES_HISTORY_ACCESS, NOTES_HISTORY_FEATURE_NAME } from "./constants.js";
 import { createNoteEntryEntity, noteMentionEntity } from "./entity.js";
 import { createNoteEntryExecutor } from "./executor.js";
@@ -58,15 +58,7 @@ export function createNotesHistoryFeature(opts = {}) {
         opts.parents === undefined) {
         return notesHistoryFeature;
     }
-    if (hasWhereRule(opts.ownership?.write)) {
-        throw new Error("createNotesHistoryFeature({ ownership }): ownership.write must not contain a " +
-            '`{ kind: "where" }` rule — where-rules are evaluated only at the SQL ' +
-            "layer (the read path, via buildOwnershipClause). Write paths that " +
-            "consult access.write (userCanCreateFieldRow/userCanWriteFieldRow) can't " +
-            "evaluate them, so such a rule can only ever deny — boot validation " +
-            "rejects it too (fw#2626). Use a `from()` rule for ownership.write, or " +
-            "leave it unset.");
-    }
+    assertNoWhereRuleInOwnershipWrite("createNotesHistoryFeature", opts.ownership?.write);
     // A mount that accepts no parents at all can never take a note write —
     // that's a config mistake, not a valid allowlist. Omit `parents` instead
     // of passing an empty array.

package/dist/personal-access-tokens/schema/api-token.d.ts

@@ -3,6 +3,7 @@ export declare const apiTokenEntity: import("@cosmicdrift/kumiko-types/fields").
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -24,6 +25,7 @@ export declare const apiTokenEntity: import("@cosmicdrift/kumiko-types/fields").
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -45,6 +47,7 @@ export declare const apiTokenEntity: import("@cosmicdrift/kumiko-types/fields").
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -66,6 +69,7 @@ export declare const apiTokenEntity: import("@cosmicdrift/kumiko-types/fields").
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -87,6 +91,7 @@ export declare const apiTokenEntity: import("@cosmicdrift/kumiko-types/fields").
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -108,6 +113,7 @@ export declare const apiTokenEntity: import("@cosmicdrift/kumiko-types/fields").
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;