@cosmicdrift/kumiko-bundled-features 0.356.0 → 0.358.0

package/dist/delivery/tables.d.ts

@@ -7,6 +7,7 @@ export declare const notificationPreferenceEntity: import("@cosmicdrift/kumiko-t
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -29,6 +30,7 @@ export declare const notificationPreferenceEntity: import("@cosmicdrift/kumiko-t
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -51,6 +53,7 @@ export declare const notificationPreferenceEntity: import("@cosmicdrift/kumiko-t
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -79,6 +82,7 @@ export declare const notificationAddressOptOutEntity: import("@cosmicdrift/kumik
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -101,6 +105,7 @@ export declare const notificationAddressOptOutEntity: import("@cosmicdrift/kumik
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -123,6 +128,7 @@ export declare const notificationAddressOptOutEntity: import("@cosmicdrift/kumik
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/delivery/testing.d.ts

@@ -15,6 +15,7 @@ export type CreateDeliveryTestContextOptions = {
     readonly log?: Logger;
     readonly jobRunner?: JobRunner;
     readonly secrets?: SecretsContext;
+    readonly idempotencyRedis?: Redis;
 };
 /**
  * Helper for setupTestStack: creates a DeliveryService + _notifyFactory for the test context.

package/dist/document-ingest-foundation/entity.d.ts

@@ -15,6 +15,7 @@ export declare const documentExtractEntity: import("@cosmicdrift/kumiko-types/fi
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -37,6 +38,7 @@ export declare const documentExtractEntity: import("@cosmicdrift/kumiko-types/fi
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -78,6 +80,7 @@ export declare const documentExtractsTable: import("@cosmicdrift/kumiko-framewor
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -100,6 +103,7 @@ export declare const documentExtractsTable: import("@cosmicdrift/kumiko-framewor
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/folders/entity.d.ts

@@ -5,6 +5,7 @@ export declare const folderEntity: EntityDefinition<{
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -27,6 +28,7 @@ export declare const folderEntity: EntityDefinition<{
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -51,6 +53,7 @@ export declare function createFolderAssignmentEntity(access?: EntityDefinition["
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -73,6 +76,7 @@ export declare function createFolderAssignmentEntity(access?: EntityDefinition["
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -95,6 +99,7 @@ export declare function createFolderAssignmentEntity(access?: EntityDefinition["
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -119,6 +124,7 @@ export declare const folderAssignmentEntity: EntityDefinition<{
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -141,6 +147,7 @@ export declare const folderAssignmentEntity: EntityDefinition<{
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -163,6 +170,7 @@ export declare const folderAssignmentEntity: EntityDefinition<{
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/form-draft/entity.d.ts

@@ -4,6 +4,7 @@ export declare const formDraftEntity: import("@cosmicdrift/kumiko-types/fields")
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -26,6 +27,7 @@ export declare const formDraftEntity: import("@cosmicdrift/kumiko-types/fields")
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/inbound-mail-foundation/entities.d.ts

@@ -6,6 +6,7 @@ export declare const mailAccountEntity: import("@cosmicdrift/kumiko-types/fields
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -28,6 +29,7 @@ export declare const mailAccountEntity: import("@cosmicdrift/kumiko-types/fields
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -50,6 +52,7 @@ export declare const mailAccountEntity: import("@cosmicdrift/kumiko-types/fields
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -72,6 +75,7 @@ export declare const mailAccountEntity: import("@cosmicdrift/kumiko-types/fields
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -94,6 +98,7 @@ export declare const mailAccountEntity: import("@cosmicdrift/kumiko-types/fields
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -116,6 +121,7 @@ export declare const mailAccountEntity: import("@cosmicdrift/kumiko-types/fields
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -138,6 +144,7 @@ export declare const mailAccountEntity: import("@cosmicdrift/kumiko-types/fields
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -180,6 +187,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -202,6 +210,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -224,6 +233,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -246,6 +256,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -268,6 +279,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -290,6 +302,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -312,6 +325,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -334,6 +348,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -356,6 +371,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -393,6 +409,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -415,6 +432,7 @@ export declare const inboundMessageEntity: import("@cosmicdrift/kumiko-types/fie
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -441,6 +459,7 @@ export declare const mailThreadEntity: import("@cosmicdrift/kumiko-types/fields"
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -463,6 +482,7 @@ export declare const mailThreadEntity: import("@cosmicdrift/kumiko-types/fields"
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -528,6 +548,7 @@ export declare const syncCursorEntity: import("@cosmicdrift/kumiko-types/fields"
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -550,6 +571,7 @@ export declare const syncCursorEntity: import("@cosmicdrift/kumiko-types/fields"
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -572,6 +594,7 @@ export declare const syncCursorEntity: import("@cosmicdrift/kumiko-types/fields"
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -615,6 +638,7 @@ export declare const seenMessageEntity: import("@cosmicdrift/kumiko-types/fields
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -637,6 +661,7 @@ export declare const seenMessageEntity: import("@cosmicdrift/kumiko-types/fields
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/inbound-mail-foundation/projection.d.ts

@@ -4,6 +4,7 @@ export declare const mailAccountsProjectionTable: import("@cosmicdrift/kumiko-fr
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -26,6 +27,7 @@ export declare const mailAccountsProjectionTable: import("@cosmicdrift/kumiko-fr
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -48,6 +50,7 @@ export declare const mailAccountsProjectionTable: import("@cosmicdrift/kumiko-fr
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -70,6 +73,7 @@ export declare const mailAccountsProjectionTable: import("@cosmicdrift/kumiko-fr
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -92,6 +96,7 @@ export declare const mailAccountsProjectionTable: import("@cosmicdrift/kumiko-fr
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -114,6 +119,7 @@ export declare const mailAccountsProjectionTable: import("@cosmicdrift/kumiko-fr
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -136,6 +142,7 @@ export declare const mailAccountsProjectionTable: import("@cosmicdrift/kumiko-fr
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -175,6 +182,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -197,6 +205,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -219,6 +228,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -241,6 +251,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -263,6 +274,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -285,6 +297,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -307,6 +320,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -329,6 +343,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -351,6 +366,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -388,6 +404,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -410,6 +427,7 @@ export declare const inboundMessagesProjectionTable: import("@cosmicdrift/kumiko
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -434,6 +452,7 @@ export declare const mailThreadsProjectionTable: import("@cosmicdrift/kumiko-fra
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -456,6 +475,7 @@ export declare const mailThreadsProjectionTable: import("@cosmicdrift/kumiko-fra
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/jobs/job-run-logger.js

@@ -25,6 +25,14 @@ const DEFAULT_CACHE_MAX_ENTRIES = 10_000;
 // complete/failed; either way the cache entry has no value. Falls back
 // to DB-lookup if actually needed.
 const DEFAULT_CACHE_TTL_MS = 60 * 60 * 1000; // 1 hour
+// Run rows hang on SYSTEM_TENANT_ID and a null trigger is a cron/system run;
+// job-run-table.ts declares whenAbsent: "tenant" for exactly that case, so the
+// logger must resolve the same subject the entity chain would (fw#3654).
+function jobRunSubject(triggeredById) {
+    return triggeredById === null
+        ? { kind: "tenant", tenantId: SYSTEM_TENANT_ID }
+        : { kind: "user", userId: triggeredById };
+}
 // Same per-subject encryption as encryptFailureError/encryptStartedPayload,
 // applied to a single value — shared so payload/message/error all go
 // through the identical erased-key fallback. A key erased right before (or
@@ -33,9 +41,9 @@ const DEFAULT_CACHE_TTL_MS = 60 * 60 * 1000; // 1 hour
 // sentinel like decryptPiiValueForSubject does on the read side, instead of
 // throwing and dropping the rest of the batch — or, for onJobStart, the
 // whole run row.
-async function encryptOrSentinel(kms, subjectUserId, value, field) {
+async function encryptOrSentinel(kms, subject, value, field) {
     try {
-        return await encryptPiiValueForSubject(kms, { kind: "user", userId: subjectUserId }, value, { requestId: "jobs:job-run-logger" }, field);
+        return await encryptPiiValueForSubject(kms, subject, value, { requestId: "jobs:job-run-logger" }, field);
     }
     catch (e) {
         if (!(e instanceof KeyErasedError))
@@ -48,19 +56,18 @@ async function encryptOrSentinel(kms, subjectUserId, value, field) {
 // jobRunLogsTable — that table is unmanaged/direct-write, so there is no
 // event-piiFields catalog to lean on here either. "message" is the AAD
 // field name and must match the field passed to decryptStoredPii on read
-// (detail.query.ts) or decrypt fails loud. Same skip rules as the payload:
-// null subject (system/cron runs) and absent KMS (rollout mode) both stay
-// plaintext. Bounded concurrency (#2307) — unbounded Promise.all would fire
-// one getOrCreateDek per log line at once against the KMS adapter's pool.
+// (detail.query.ts) or decrypt fails loud. Same skip rule as the payload:
+// absent KMS (rollout mode) stays plaintext. Bounded concurrency (#2307) —
+// unbounded Promise.all would fire one getOrCreateDek per log line at once
+// against the KMS adapter's pool.
 async function encryptLogMessages(logs, triggeredById) {
-    if (triggeredById === null)
-        return [...logs];
     const kms = configuredPiiSubjectKms();
     if (!kms)
         return [...logs];
+    const subject = jobRunSubject(triggeredById);
     return mapWithConcurrency(logs, KMS_POOL_CONCURRENCY, async (log) => ({
         ...log,
-        message: await encryptOrSentinel(kms, triggeredById, log.message, "message"),
+        message: await encryptOrSentinel(kms, subject, log.message, "message"),
     }));
 }
 // Mirrors encryptFailureError for the failure-path `error` column (#2307):
@@ -70,29 +77,26 @@ async function encryptLogMessages(logs, triggeredById) {
 // separate, per-row batch path outside onJobFailed) applies the identical
 // per-subject encryption instead of writing `error` in the clear.
 export async function encryptFailureError(error, triggeredById) {
-    if (triggeredById === null)
-        return error;
     const kms = configuredPiiSubjectKms();
     if (!kms)
         return error;
-    return encryptOrSentinel(kms, triggeredById, error, "error");
+    return encryptOrSentinel(kms, jobRunSubject(triggeredById), error, "error");
 }
 // The run-started payload can carry arbitrary user data; triggeredById
 // names its owning user. No event-PII catalog involved (#2243 removed the
 // jobRun r.defineEvent registrations, so there is nothing to catalog) —
 // the subject is known statically, so we encrypt directly. A null subject
-// (system cron runs, recipient-less triggers) stays plaintext: there is no
-// user key to shred, mirroring the previous event-pii catalog's own skip
-// rule. Absent KMS adapter stays plaintext too (rollout mode, unchanged).
+// (system cron runs, recipient-less triggers) encrypts under the system
+// tenant key. Absent KMS adapter stays plaintext (rollout mode, unchanged).
 // A key already erased by the time the trigger lands (#2307) must not fail
 // the whole run-start write — sentinel like the log/error paths.
 async function encryptStartedPayload(payload, triggeredById) {
-    if (payload === null || triggeredById === null)
+    if (payload === null)
         return payload;
     const kms = configuredPiiSubjectKms();
     if (!kms)
         return payload;
-    return encryptOrSentinel(kms, triggeredById, payload, "payload");
+    return encryptOrSentinel(kms, jobRunSubject(triggeredById), payload, "payload");
 }
 // pg_advisory_xact_lock namespace (int4): 'tjfl' as ASCII, disjoint from the
 // framework's other fixed advisory-lock keys.

package/dist/jobs/job-run-table.d.ts

@@ -7,6 +7,7 @@ export declare const jobRunEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -29,6 +30,7 @@ export declare const jobRunEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -51,6 +53,7 @@ export declare const jobRunEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -73,6 +76,7 @@ export declare const jobRunEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -95,6 +99,7 @@ export declare const jobRunEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;
@@ -185,6 +190,7 @@ export declare const jobRunEntity: import("@cosmicdrift/kumiko-types/fields").En
         readonly description?: string;
         readonly maxLength?: number;
         readonly minLength?: number;
+        readonly autoComplete?: string;
         readonly required?: boolean;
         readonly searchable?: boolean;
         readonly sortable?: boolean;

package/dist/jobs/job-run-table.js

@@ -29,11 +29,18 @@ export const jobRunEntity = createEntity({
         status: createTextField({ required: true, personal: false, reason: "system_metadata" }),
         // The run-started payload can carry arbitrary caller-supplied data,
         // encrypted by job-run-logger.ts under the triggering user's DEK (see
-        // jobs-pii-kms.integration.test.ts) — same subject as `triggeredById`.
-        payload: createTextField({ personal: { of: "triggeredById" }, find: "none" }),
+        // jobs-pii-kms.integration.test.ts) — same subject as `triggeredById`;
+        // cron runs have none and use the system tenant key (whenAbsent).
+        payload: createTextField({
+            personal: { of: "triggeredById", whenAbsent: "tenant" },
+            find: "none",
+        }),
         // Failure messages can echo payload content back — same subject/DEK as
         // `payload` (job-run-logger.ts encryptFailureError).
-        error: createTextField({ personal: { of: "triggeredById" }, find: "none" }),
+        error: createTextField({
+            personal: { of: "triggeredById", whenAbsent: "tenant" },
+            find: "none",
+        }),
         attempt: createNumberField({ required: true, default: 1, integer: true }),
         startedAt: createTimestampField({ required: true }),
         finishedAt: createTimestampField(),