@cosmicdrift/kumiko-bundled-features 0.352.0 → 0.354.0

package/dist/tags/entity.d.ts

@@ -4,6 +4,7 @@ export declare const tagEntity: EntityDefinition<{
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -25,6 +26,7 @@ export declare const tagEntity: EntityDefinition<{
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -46,6 +48,7 @@ export declare const tagEntity: EntityDefinition<{
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -69,6 +72,7 @@ export declare function createTagAssignmentEntity(access?: EntityDefinition["acc
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -90,6 +94,7 @@ export declare function createTagAssignmentEntity(access?: EntityDefinition["acc
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -111,6 +116,7 @@ export declare function createTagAssignmentEntity(access?: EntityDefinition["acc
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -134,6 +140,7 @@ export declare const tagAssignmentEntity: EntityDefinition<{
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -155,6 +162,7 @@ export declare const tagAssignmentEntity: EntityDefinition<{
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -176,6 +184,7 @@ export declare const tagAssignmentEntity: EntityDefinition<{
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/tags/feature.js

@@ -18,7 +18,7 @@
 // entityList/entityEdit catalog screens (legacy QNs stay for TagManager).
 // Deferred: optional host-projection decoration (`wireTagsFor`), search indexing.
 import { defineEntityDetailHandler, defineEntityListHandler, defineEntityUpdateHandler, defineFeature, } from "@cosmicdrift/kumiko-framework/engine";
-import { hasWhereRule } from "../shared/index.js";
+import { assertNoWhereRuleInOwnershipWrite } from "../shared/index.js";
 import { DEFAULT_TAG_ACCESS, TAGS_FEATURE_NAME } from "./constants.js";
 import { createTagAssignmentEntity, tagEntity } from "./entity.js";
 import { createTagAssignmentExecutor } from "./executor.js";
@@ -109,15 +109,7 @@ export function createTagsFeature(opts = {}) {
             "assignment row. Omit `parents` to keep every registered entity " +
             "admissible as a host instead.");
     }
-    if (hasWhereRule(opts.ownership?.write)) {
-        throw new Error("createTagsFeature({ ownership }): ownership.write must not contain a " +
-            '`{ kind: "where" }` rule — where-rules are evaluated only at the SQL ' +
-            "layer (the read path, via buildOwnershipClause). Write paths that " +
-            "consult access.write (userCanCreateFieldRow/userCanWriteFieldRow) can't " +
-            "evaluate them, so such a rule can only ever deny — boot validation " +
-            "rejects it too (fw#2626). Use a `from()` rule for ownership.write, or " +
-            "leave it unset.");
-    }
+    assertNoWhereRuleInOwnershipWrite("createTagsFeature", opts.ownership?.write);
     const access = resolveAccess(opts);
     return defineFeature(TAGS_FEATURE_NAME, (r) => registerTags(r, access, opts.toggleable, opts.ownership, opts.parents));
 }

package/dist/template-resolver/api.d.ts

@@ -1,4 +1,4 @@
-import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
+import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
 import type { SessionUser, TenantId } from "@cosmicdrift/kumiko-framework/engine";
 import type { Temporal } from "@cosmicdrift/kumiko-types/temporal";
 import type { ContentFormat, TemplateKind } from "./constants.js";
@@ -61,7 +61,7 @@ export type TemplateResolverApi = {
      */
     readonly resolveTemplate: (args: ResolveRequest) => Promise<TemplateResource>;
 };
-export declare function createTemplateResolverApi(db: DbConnection): TemplateResolverApi;
+export declare function createTemplateResolverApi(db: DbRunner): TemplateResolverApi;
 export declare class TemplateNotFoundError extends Error {
     readonly query: {
         slug: string;

package/dist/template-resolver/handlers/list.query.d.ts

@@ -1,10 +1,12 @@
 import * as z from "zod";
 export declare const listQuery: import("@cosmicdrift/kumiko-types/define-handler").QueryHandlerDefinition<"list", z.ZodObject<{
     kind: z.ZodOptional<z.ZodEnum<{
+        "ai-prompt": "ai-prompt";
         "document-pdf": "document-pdf";
         "image-snapshot": "image-snapshot";
         "mail-html": "mail-html";
         notification: "notification";
+        "text-block": "text-block";
     }>>;
     locale: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{

package/dist/template-resolver/handlers/list.query.js

@@ -1,7 +1,7 @@
 import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import * as z from "zod";
-import { RENDER_KINDS, TEMPLATE_STATUSES } from "../constants.js";
+import { TEMPLATE_KINDS, TEMPLATE_STATUSES } from "../constants.js";
 import { templateResourcesTable } from "../table.js";
 // List für Admin-UI: filterbar nach kind / locale / status. Liefert
 // system-templates + tenant's eigene zusammen — Admin-UI rendert beide
@@ -9,7 +9,7 @@ import { templateResourcesTable } from "../table.js";
 export const listQuery = defineQueryHandler({
     name: "list",
     schema: z.object({
-        kind: z.enum(RENDER_KINDS).optional(),
+        kind: z.enum(TEMPLATE_KINDS).optional(),
         locale: z.string().min(2).max(8).optional(),
         status: z.enum(TEMPLATE_STATUSES).optional(),
         includeSystem: z.boolean().default(true),

package/dist/template-resolver/table.d.ts

@@ -4,6 +4,7 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -33,16 +34,17 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "ai-prompt"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "document-pdf"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "image-snapshot"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "mail-html"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly notification?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "text-block"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly "ai-prompt"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "document-pdf"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "image-snapshot"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "mail-html"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly notification?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "text-block"?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
         readonly optionsAvailabilityQuery?: string;
+        readonly conditionalOptions?: readonly import("@cosmicdrift/kumiko-types/fields").SelectConditionalOptions<"ai-prompt" | "document-pdf" | "image-snapshot" | "mail-html" | "notification" | "text-block">[] | undefined;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -50,6 +52,7 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -71,6 +74,7 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -92,6 +96,7 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -137,14 +142,15 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly html?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly markdown?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly mjml?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly plain?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly html?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly markdown?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly mjml?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly plain?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
         readonly optionsAvailabilityQuery?: string;
+        readonly conditionalOptions?: readonly import("@cosmicdrift/kumiko-types/fields").SelectConditionalOptions<"html" | "markdown" | "mjml" | "plain">[] | undefined;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -192,12 +198,13 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly system?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly tenant?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly system?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly tenant?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
         readonly optionsAvailabilityQuery?: string;
+        readonly conditionalOptions?: readonly import("@cosmicdrift/kumiko-types/fields").SelectConditionalOptions<"system" | "tenant">[] | undefined;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -205,6 +212,7 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -234,13 +242,14 @@ export declare const templateResourceEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly active?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly archived?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly draft?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly active?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly archived?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly draft?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
         readonly optionsAvailabilityQuery?: string;
+        readonly conditionalOptions?: readonly import("@cosmicdrift/kumiko-types/fields").SelectConditionalOptions<"active" | "archived" | "draft">[] | undefined;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -250,6 +259,7 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -279,16 +289,17 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "ai-prompt"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "document-pdf"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "image-snapshot"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "mail-html"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly notification?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "text-block"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly "ai-prompt"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "document-pdf"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "image-snapshot"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "mail-html"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly notification?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "text-block"?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
         readonly optionsAvailabilityQuery?: string;
+        readonly conditionalOptions?: readonly import("@cosmicdrift/kumiko-types/fields").SelectConditionalOptions<"ai-prompt" | "document-pdf" | "image-snapshot" | "mail-html" | "notification" | "text-block">[] | undefined;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -296,6 +307,7 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -317,6 +329,7 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -338,6 +351,7 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -383,14 +397,15 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly html?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly markdown?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly mjml?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly plain?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly html?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly markdown?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly mjml?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly plain?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
         readonly optionsAvailabilityQuery?: string;
+        readonly conditionalOptions?: readonly import("@cosmicdrift/kumiko-types/fields").SelectConditionalOptions<"html" | "markdown" | "mjml" | "plain">[] | undefined;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -438,12 +453,13 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly system?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly tenant?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly system?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly tenant?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
         readonly optionsAvailabilityQuery?: string;
+        readonly conditionalOptions?: readonly import("@cosmicdrift/kumiko-types/fields").SelectConditionalOptions<"system" | "tenant">[] | undefined;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -451,6 +467,7 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -480,13 +497,14 @@ export declare const templateResourcesTable: import("@cosmicdrift/kumiko-framewo
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly active?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly archived?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly draft?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly active?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly archived?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly draft?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
         readonly optionsAvailabilityQuery?: string;
+        readonly conditionalOptions?: readonly import("@cosmicdrift/kumiko-types/fields").SelectConditionalOptions<"active" | "archived" | "draft">[] | undefined;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };

package/dist/template-resolver/user-content-table.d.ts

@@ -4,6 +4,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -25,6 +26,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -54,16 +56,17 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "ai-prompt"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "document-pdf"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "image-snapshot"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "mail-html"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly notification?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "text-block"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly "ai-prompt"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "document-pdf"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "image-snapshot"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "mail-html"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly notification?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "text-block"?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
         readonly optionsAvailabilityQuery?: string;
+        readonly conditionalOptions?: readonly import("@cosmicdrift/kumiko-types/fields").SelectConditionalOptions<"ai-prompt" | "document-pdf" | "image-snapshot" | "mail-html" | "notification" | "text-block">[] | undefined;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -71,6 +74,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -92,6 +96,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -113,6 +118,7 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -158,14 +164,15 @@ export declare const userContentEntryEntity: import("@cosmicdrift/kumiko-types/f
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly html?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly markdown?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly mjml?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly plain?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly html?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly markdown?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly mjml?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly plain?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
         readonly optionsAvailabilityQuery?: string;
+        readonly conditionalOptions?: readonly import("@cosmicdrift/kumiko-types/fields").SelectConditionalOptions<"html" | "markdown" | "mjml" | "plain">[] | undefined;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -175,6 +182,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -196,6 +204,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -225,16 +234,17 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly "ai-prompt"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "document-pdf"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "image-snapshot"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "mail-html"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly notification?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly "text-block"?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly "ai-prompt"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "document-pdf"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "image-snapshot"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "mail-html"?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly notification?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly "text-block"?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
         readonly optionsAvailabilityQuery?: string;
+        readonly conditionalOptions?: readonly import("@cosmicdrift/kumiko-types/fields").SelectConditionalOptions<"ai-prompt" | "document-pdf" | "image-snapshot" | "mail-html" | "notification" | "text-block">[] | undefined;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };
@@ -242,6 +252,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -263,6 +274,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -284,6 +296,7 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly type: "text";
         readonly description?: string;
         readonly maxLength?: number;
+        readonly minLength?: number;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -329,14 +342,15 @@ export declare const userContentEntriesTable: import("@cosmicdrift/kumiko-framew
         readonly access?: import("@cosmicdrift/kumiko-types/fields").FieldAccess;
         readonly display?: "radio" | "dropdown";
         readonly optionTones?: {
-            readonly html?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly markdown?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly mjml?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
-            readonly plain?: import("@cosmicdrift/kumiko-types/fields").SelectOptionTone | undefined;
+            readonly html?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly markdown?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly mjml?: "bad" | "neutral" | "ok" | "warn" | undefined;
+            readonly plain?: "bad" | "neutral" | "ok" | "warn" | undefined;
         } | undefined;
         readonly optionsQuery?: string;
         readonly optionsQueryPayload?: import("@cosmicdrift/kumiko-types/fields").OptionsQueryPayload;
         readonly optionsAvailabilityQuery?: string;
+        readonly conditionalOptions?: readonly import("@cosmicdrift/kumiko-types/fields").SelectConditionalOptions<"html" | "markdown" | "mjml" | "plain">[] | undefined;
     } & import("@cosmicdrift/kumiko-types/fields").ResolvedPiiFlags & {
         required: true;
     };

package/dist/tenant/decrypt-tenant-names.d.ts

@@ -0,0 +1,3 @@
+export declare function decryptTenantNames<T extends {
+    readonly name?: unknown;
+}>(rows: readonly T[], fallbackRequestId: string): Promise<T[]>;

package/dist/tenant/decrypt-tenant-names.js

@@ -0,0 +1,10 @@
+import { decryptStoredPii, mapWithConcurrency } from "../shared/index.js";
+// Bounded like tenant:query:members: each decrypt hits the KMS adapter's small pool.
+const KMS_POOL_CONCURRENCY = 4;
+// Raw reads of read_tenants return the stored column, which is ciphertext
+// under an active KMS; executor reads (crud.list/detail) decrypt on their own.
+export async function decryptTenantNames(rows, fallbackRequestId) {
+    return mapWithConcurrency(rows, KMS_POOL_CONCURRENCY, async (row) => typeof row.name === "string"
+        ? { ...row, name: await decryptStoredPii(row.name, "name", fallbackRequestId) }
+        : row);
+}

package/dist/tenant/feature.js

@@ -39,8 +39,14 @@ export function createTenantFeature(options) {
         r.systemScope();
         r.requires("config");
         r.extendsRegistrar(EXT_ASSIGNABLE_ROLE, {});
+        // The elevation guards read the registry, the screens only these options: a role the
+        // server accepts but the screen omits is silently stripped on the next member-roles save.
         r.bootCheck(({ features }) => {
-            collectAssignableAppRoles(features);
+            for (const [role, assignableFrom] of collectAssignableAppRoles(features)) {
+                if (options?.assignableAppRoles?.get(role) === assignableFrom)
+                    continue;
+                throw new Error(`[tenant] assignable app role "${role}" (assignableFrom "${assignableFrom}") is declared but missing from the tenant screens' options; pass assignableAppRoles: collectAssignableAppRoles(appFeatures) to createTenantFeature.`);
+            }
         });
         r.entity("tenant", tenantEntity);
         r.entity("tenant-membership", tenantMembershipEntity);

package/dist/tenant/handlers/me.query.js

@@ -2,6 +2,7 @@ import { fetchOne } from "@cosmicdrift/kumiko-framework/bun-db";
 import { defineQueryHandler } from "@cosmicdrift/kumiko-framework/engine";
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import * as z from "zod";
+import { decryptTenantNames } from "../decrypt-tenant-names.js";
 import { tenantTable } from "../schema/tenant.js";
 // Direct query — query handlers don't have a tenant-crud handle. A direct
 // select is trivial: WHERE id = tenantId (both UUID). No CRUD detour needed.
@@ -28,6 +29,9 @@ export const meQuery = defineQueryHandler({
         }
         const db = ctx.systemDb.assertTenantMatch(query.user.tenantId);
         const row = await fetchOne(db, tenantTable, { id: query.user.tenantId });
-        return row ?? null;
+        if (row === undefined)
+            return null;
+        const [decrypted] = await decryptTenantNames([row], "tenant:me");
+        return decrypted ?? null;
     },
 });

package/dist/tenant/handlers/memberships.query.js

@@ -3,6 +3,7 @@ import { defineQueryHandler, SYSTEM_ROLE } from "@cosmicdrift/kumiko-framework/e
 import { InternalError } from "@cosmicdrift/kumiko-framework/errors";
 import { parseRoles } from "@cosmicdrift/kumiko-framework/utils";
 import * as z from "zod";
+import { decryptTenantNames } from "../decrypt-tenant-names.js";
 import { tenantMembershipsTable } from "../membership-table.js";
 import { tenantTable } from "../schema/tenant.js";
 export const membershipsQuery = defineQueryHandler({
@@ -22,9 +23,9 @@ export const membershipsQuery = defineQueryHandler({
         const rows = await selectMany(db, tenantMembershipsTable, { userId: query.payload.userId });
         if (rows.length === 0)
             return [];
-        const tenants = await selectMany(db, tenantTable, {
+        const tenants = await decryptTenantNames(await selectMany(db, tenantTable, {
             id: rows.map((row) => row["tenantId"]),
-        });
+        }), "tenant:memberships");
         const tenantById = new Map(tenants.map((t) => [t.id, t]));
         return rows
             .map((row) => {