@cosmicdrift/kumiko-bundled-features 0.352.0 → 0.353.0

package/dist/template-resolver/table.d.ts

@@ -4,6 +4,7 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -33,12 +34,12 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "ai-prompt"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "document-pdf"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "image-snapshot"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "mail-html"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly notification?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "text-block"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly "ai-prompt"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "document-pdf"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "image-snapshot"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "mail-html"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly notification?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "text-block"?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -50,6 +51,7 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -71,6 +73,7 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -92,6 +95,7 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -137,10 +141,10 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly html?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly markdown?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly mjml?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly plain?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly html?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly markdown?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly mjml?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly plain?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -192,8 +196,8 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly system?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly tenant?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly system?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly tenant?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -205,6 +209,7 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -234,9 +239,9 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly active?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly archived?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly draft?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly active?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly archived?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly draft?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -250,6 +255,7 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -279,12 +285,12 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "ai-prompt"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "document-pdf"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "image-snapshot"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "mail-html"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly notification?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "text-block"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly "ai-prompt"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "document-pdf"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "image-snapshot"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "mail-html"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly notification?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "text-block"?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -296,6 +302,7 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -317,6 +324,7 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -338,6 +346,7 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -383,10 +392,10 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly html?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly markdown?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly mjml?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly plain?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly html?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly markdown?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly mjml?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly plain?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -438,8 +447,8 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly system?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly tenant?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly system?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly tenant?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -451,6 +460,7 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -480,9 +490,9 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly active?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly archived?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly draft?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly active?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly archived?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly draft?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;

package/dist/template-resolver/user-content-table.d.ts

@@ -4,6 +4,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -25,6 +26,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -54,12 +56,12 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "ai-prompt"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "document-pdf"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "image-snapshot"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "mail-html"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly notification?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "text-block"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly "ai-prompt"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "document-pdf"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "image-snapshot"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "mail-html"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly notification?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "text-block"?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -71,6 +73,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -92,6 +95,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -113,6 +117,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -158,10 +163,10 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly html?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly markdown?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly mjml?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly plain?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly html?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly markdown?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly mjml?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly plain?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -175,6 +180,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -196,6 +202,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -225,12 +232,12 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "ai-prompt"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "document-pdf"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "image-snapshot"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "mail-html"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly notification?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "text-block"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly "ai-prompt"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "document-pdf"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "image-snapshot"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "mail-html"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly notification?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "text-block"?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -242,6 +249,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -263,6 +271,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -284,6 +293,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -329,10 +339,10 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly html?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly markdown?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly mjml?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly plain?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly html?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly markdown?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly mjml?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly plain?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;

package/dist/tenant/decrypt-tenant-names.d.ts

@@ -0,0 +1,3 @@
+export declare function decryptTenantNames<T extends {
+    readonly name?: unknown;
+}>(rows: readonly T[], fallbackRequestId: string): Promise<T[]>;

package/dist/tenant/decrypt-tenant-names.js

@@ -0,0 +1,10 @@
+import { decryptStoredPii, mapWithConcurrency } from "../shared/index.js";
+// Bounded like tenant:query:members: each decrypt hits the KMS adapter's small pool.
+const KMS_POOL_CONCURRENCY = 4;
+// Raw reads of read_tenants return the stored column, which is ciphertext
+// under an active KMS; executor reads (crud.list/detail) decrypt on their own.
+export async function decryptTenantNames(rows, fallbackRequestId) {
+    return mapWithConcurrency(rows, KMS_POOL_CONCURRENCY, async (row) => typeof row.name === "string"
+        ? { ...row, name: await decryptStoredPii(row.name, "name", fallbackRequestId) }
+        : row);
+}

package/dist/tenant/handlers/me.query.js

@@ -2,6 +2,7 @@ import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
+import { decryptTenantNames } from "../decrypt-tenant-names.js";
 import { tenantTable } from "../schema/tenant.js";
 // Direct query — query handlers don't have a tenant-crud handle. A direct
 // select is trivial: WHERE id = tenantId (both UUID). No CRUD detour needed.
@@ -28,6 +29,9 @@ export const meQuery = defineQueryHandler({
         }
         const db = ctx.systemDb.assertTenantMatch(query.user.tenantId);
         const row = await fetchOne(db, tenantTable, { id: query.user.tenantId });
-        return row ?? null;
+        if (row === undefined)
+            return null;
+        const [decrypted] = await decryptTenantNames([row], "tenant:me");
+        return decrypted ?? null;
     },
 });

package/dist/tenant/handlers/memberships.query.js

@@ -3,6 +3,7 @@ import { defineQueryHandler, SYSTEM_ROLE } from "@cosmicdrift/kumiko-framework/e
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
 import * as z from "zod";
+import { decryptTenantNames } from "../decrypt-tenant-names.js";
 import { tenantMembershipsTable } from "../membership-table.js";
 import { tenantTable } from "../schema/tenant.js";
 export const membershipsQuery = defineQueryHandler({
@@ -22,9 +23,9 @@ export const membershipsQuery = defineQueryHandler({
         const rows = await selectMany(db, tenantMembershipsTable, { userId: query.payload.userId });
         if (rows.length === 0)
             return [];
-        const tenants = await selectMany(db, tenantTable, {
+        const tenants = await decryptTenantNames(await selectMany(db, tenantTable, {
             id: rows.map((row) => row["tenantId"]),
-        });
+        }), "tenant:memberships");
         const tenantById = new Map(tenants.map((t) => [t.id, t]));
         return rows
             .map((row) => {

package/dist/tenant/handlers/tenant-directory.query.js

@@ -2,6 +2,7 @@ import { fetchOne, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { access, definePagedQueryHandler, MAX_LIST_LIMIT, } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
+import { decryptTenantNames } from "../decrypt-tenant-names.js";
 import { tenantTable } from "../schema/tenant.js";
 import { isSystemAdmin } from "./is-system-admin.js";
 // Label source behind every `tenant:tenant` reference column (fw#3142). The
@@ -38,7 +39,7 @@ export const tenantDirectoryQuery = definePagedQueryHandler({
             tenants = await selectMany(db, tenantTable, undefined, {
                 limit: scanLimit,
                 orderBy: [
-                    { col: "name", direction: "asc" },
+                    { col: "key", direction: "asc" },
                     { col: "id", direction: "asc" },
                 ],
             });
@@ -48,10 +49,15 @@ export const tenantDirectoryQuery = definePagedQueryHandler({
             const row = await fetchOne(db, tenantTable, { id: query.user.tenantId });
             tenants = row ? [row] : [];
         }
-        const labeled = tenants.map((tenant) => {
+        // name is ciphertext at rest, so the SQL page is keyed by the plaintext
+        // `key`; label order and search happen in memory after decrypting.
+        const decrypted = await decryptTenantNames(tenants, "tenant:tenant-directory");
+        const labeled = decrypted
+            .map((tenant) => {
             const id = String(tenant.id);
             return { id, label: typeof tenant.name === "string" ? tenant.name : id };
-        });
+        })
+            .sort((a, b) => a.label.localeCompare(b.label) || a.id.localeCompare(b.id));
         const needle = search?.toLowerCase();
         const rows = needle === undefined
             ? labeled

package/dist/tenant/index.d.ts

@@ -1,6 +1,7 @@
 export { cancelPendingInvitation } from "./cancel-pending-invitation.js";
 export { TenantCommandSchemas } from "./command-schemas.js";
 export { OWNER_INVITE_ROLE_OPTIONS, TENANT_FEATURE, TenantErrors, TenantHandlers, TenantQueries, } from "./constants.js";
+export { decryptTenantNames } from "./decrypt-tenant-names.js";
 export { collectAssignableAppRoles, createTenantFeature } from "./feature.js";
 export type { InvitationStatus } from "./invitation-table.js";
 export { INVITATION_STATUS, INVITATION_STATUSES, tenantInvitationEntity, tenantInvitationsTable, } from "./invitation-table.js";

package/dist/tenant/index.js

@@ -1,6 +1,7 @@
 export { cancelPendingInvitation } from "./cancel-pending-invitation.js";
 export { TenantCommandSchemas } from "./command-schemas.js";
 export { OWNER_INVITE_ROLE_OPTIONS, TENANT_FEATURE, TenantErrors, TenantHandlers, TenantQueries, } from "./constants.js";
+export { decryptTenantNames } from "./decrypt-tenant-names.js";
 export { collectAssignableAppRoles, createTenantFeature } from "./feature.js";
 export { INVITATION_STATUS, INVITATION_STATUSES, tenantInvitationEntity, tenantInvitationsTable, } from "./invitation-table.js";
 export { isTenantServingPublicContent } from "./is-tenant-serving-public-content.js";

package/dist/tenant/invitation-table.d.ts

@@ -11,6 +11,7 @@ export declare const tenantInvitationEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -32,6 +33,7 @@ export declare const tenantInvitationEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -62,10 +64,10 @@ export declare const tenantInvitationEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly accepted?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly cancelled?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly expired?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly pending?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly accepted?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly cancelled?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly expired?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly pending?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -77,6 +79,7 @@ export declare const tenantInvitationEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -115,6 +118,7 @@ export declare const tenantInvitationsTable: import("@cosmicdrift/kumiko-framewo
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -136,6 +140,7 @@ export declare const tenantInvitationsTable: import("@cosmicdrift/kumiko-framewo
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -166,10 +171,10 @@ export declare const tenantInvitationsTable: import("@cosmicdrift/kumiko-framewo
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly accepted?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly cancelled?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly expired?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly pending?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly accepted?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly cancelled?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly expired?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly pending?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
@@ -181,6 +186,7 @@ export declare const tenantInvitationsTable: import("@cosmicdrift/kumiko-framewo
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/tenant/membership-table.d.ts

@@ -3,6 +3,7 @@ export declare const tenantMembershipEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -24,6 +25,7 @@ export declare const tenantMembershipEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -47,6 +49,7 @@ export declare const tenantMembershipsTable: import("@cosmicdrift/kumiko-framewo
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -68,6 +71,7 @@ export declare const tenantMembershipsTable: import("@cosmicdrift/kumiko-framewo
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;