@cosmicdrift/kumiko-samples 0.342.0 → 0.343.0

package/packages/bundled-features/src/tenant-lifecycle/run-tenant-destroy.ts

@@ -1,6 +1,6 @@
 /// <reference types="temporal-polyfill/global" preserve="true" />
 import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
-import type { DbRunner } from "@cosmicdrift/kumiko-framework/db";
+import type { DbRunner, TenantDb, WhereObject } from "@cosmicdrift/kumiko-framework/db";
 import { createEventStoreExecutor, createTenantDb } from "@cosmicdrift/kumiko-framework/db";
 import {
   createSystemUser,
@@ -307,6 +307,26 @@ export async function runNextDestructionStage(args: {
   }
 }
 
+function destroyRequestedDueWhere(now: Temporal.Instant): WhereObject {
+  return {
+    status: "destroyRequested",
+    gracePeriodEnd: { lte: now.subtract({ milliseconds: TEARDOWN_GATE_SETTLE_MS }) },
+  };
+}
+
+const destroyingWhere: WhereObject = { status: "destroying" };
+
+export async function hasTenantDestructionWork(
+  reads: Pick<TenantDb, "count">,
+  now: Temporal.Instant,
+): Promise<boolean> {
+  const [due, destroying] = await Promise.all([
+    reads.count(tenantTable, destroyRequestedDueWhere(now)),
+    reads.count(tenantTable, destroyingWhere),
+  ]);
+  return due > 0 || destroying > 0;
+}
+
 /** Cron entry: start destruction for tenants past grace, then advance stages. */
 export async function runTenantDestructionSweep(args: {
   readonly db: DbRunner;
@@ -319,10 +339,7 @@ export async function runTenantDestructionSweep(args: {
 }): Promise<{ readonly triggered: number; readonly advanced: number }> {
   const T = getTemporal();
   const now = args.now ?? T.Now.instant();
-  const due = await selectMany<{ id: string }>(args.db, tenantTable, {
-    status: "destroyRequested",
-    gracePeriodEnd: { lte: now.subtract({ milliseconds: TEARDOWN_GATE_SETTLE_MS }) },
-  });
+  const due = await selectMany<{ id: string }>(args.db, tenantTable, destroyRequestedDueWhere(now));
 
   let triggered = 0;
   for (const row of due) {
@@ -354,9 +371,7 @@ export async function runTenantDestructionSweep(args: {
   }
 
   let advanced = 0;
-  const destroying = await selectMany<{ id: string }>(args.db, tenantTable, {
-    status: "destroying",
-  });
+  const destroying = await selectMany<{ id: string }>(args.db, tenantTable, destroyingWhere);
   for (const row of destroying) {
     try {
       const result = await runNextDestructionStage({

package/packages/bundled-features/src/user/index.ts

@@ -6,6 +6,7 @@ export {
 } from "./db/queries/stream-tenant-backfill.js";
 export { createUserFeature } from "./feature.js";
 export { isPrincipalBlocked, principalStatusPlugin } from "./principal-status.js";
+export { resolveUserDisplayNames } from "./resolve-display-names.js";
 export type { UserStatus } from "./schema/user.js";
 export {
   USER_ANONYMIZED_DISPLAY_NAME,

package/packages/bundled-features/src/user/resolve-display-names.ts

@@ -0,0 +1,35 @@
+import { selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
+import type { TenantDb } from "@cosmicdrift/kumiko-framework/db";
+import { decryptStoredPii, mapWithConcurrency } from "../shared/index.js";
+import { userTable } from "./schema/user.js";
+
+// Shares the KMS adapter's small dedicated pool, same as member-directory.
+const KMS_POOL_CONCURRENCY = 4;
+
+// One batched lookup for a page of user ids. Users that are missing, have no
+// display name, or whose name cannot be decrypted (e.g. crypto-shredded) are
+// left out, so callers fall back to the raw id instead of failing the page.
+export async function resolveUserDisplayNames(
+  db: TenantDb,
+  userIds: readonly string[],
+): Promise<ReadonlyMap<string, string>> {
+  const names = new Map<string, string>();
+  if (userIds.length === 0) return names;
+  const users = await selectMany(db, userTable, { id: [...userIds] });
+  const named = users.filter((user) => typeof user.displayName === "string");
+  await mapWithConcurrency(named, KMS_POOL_CONCURRENCY, async (user) => {
+    try {
+      names.set(
+        String(user.id),
+        await decryptStoredPii(
+          String(user.displayName),
+          "displayName",
+          "user:resolve-display-names",
+        ),
+      );
+    } catch {
+      // Unreadable name: the caller's fallback applies.
+    }
+  });
+  return names;
+}