@agentlensai/server 0.10.0 → 0.11.0

package/dist/cloud/org-service.js

@@ -0,0 +1,169 @@
+/**
+ * Org Service (S-7.1, S-7.2)
+ *
+ * Manages organizations, memberships, and invitations.
+ * Used by dashboard routes for org switching and team management.
+ */
+import { generateToken, hashToken } from './auth/tokens.js';
+export class OrgServiceError extends Error {
+    code;
+    statusCode;
+    constructor(code, message, statusCode = 400) {
+        super(message);
+        this.code = code;
+        this.statusCode = statusCode;
+        this.name = 'OrgServiceError';
+    }
+}
+export class OrgService {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    // ═══════════════════════════════════════════
+    // Org CRUD (S-7.1)
+    // ═══════════════════════════════════════════
+    /** List orgs the user belongs to */
+    async listUserOrgs(userId) {
+        const result = await this.db.query(`SELECT o.id, o.name, o.slug, o.plan, o.created_at
+       FROM orgs o
+       JOIN org_members om ON om.org_id = o.id
+       WHERE om.user_id = $1
+       ORDER BY o.name`, [userId]);
+        return result.rows;
+    }
+    /** Create a new org and make the user the owner */
+    async createOrg(userId, name) {
+        if (!name || name.trim().length === 0) {
+            throw new OrgServiceError('invalid_name', 'Organization name is required');
+        }
+        const slug = name
+            .toLowerCase()
+            .replace(/[^a-z0-9]+/g, '-')
+            .replace(/^-|-$/g, '')
+            + '-' + Math.random().toString(36).slice(2, 8);
+        const result = await this.db.query(`INSERT INTO orgs (name, slug) VALUES ($1, $2) RETURNING id, name, slug, plan, created_at`, [name.trim(), slug]);
+        const org = result.rows[0];
+        await this.db.query(`INSERT INTO org_members (org_id, user_id, role) VALUES ($1, $2, 'owner')`, [org.id, userId]);
+        return org;
+    }
+    // ═══════════════════════════════════════════
+    // Team Management (S-7.2)
+    // ═══════════════════════════════════════════
+    /** List members of an org */
+    async listMembers(orgId) {
+        const result = await this.db.query(`SELECT om.user_id, u.email, u.display_name, u.avatar_url, om.role, om.joined_at
+       FROM org_members om
+       JOIN users u ON u.id = om.user_id
+       WHERE om.org_id = $1
+       ORDER BY om.joined_at`, [orgId]);
+        return result.rows;
+    }
+    /** Invite a user by email */
+    async inviteMember(orgId, invitedByUserId, email, role) {
+        // Check if already a member
+        const existing = await this.db.query(`SELECT 1 FROM org_members om JOIN users u ON u.id = om.user_id
+       WHERE om.org_id = $1 AND u.email = $2`, [orgId, email]);
+        if (existing.rows.length > 0) {
+            throw new OrgServiceError('already_member', 'This user is already a member of the organization');
+        }
+        // Check for existing pending invitation
+        const pendingInv = await this.db.query(`SELECT 1 FROM org_invitations
+       WHERE org_id = $1 AND email = $2 AND accepted_at IS NULL AND expires_at > now()`, [orgId, email]);
+        if (pendingInv.rows.length > 0) {
+            throw new OrgServiceError('already_invited', 'An invitation is already pending for this email');
+        }
+        const token = generateToken();
+        const tokenHash = hashToken(token);
+        const result = await this.db.query(`INSERT INTO org_invitations (org_id, email, role, invited_by, token, expires_at)
+       VALUES ($1, $2, $3, $4, $5, now() + interval '7 days')
+       RETURNING id, org_id, email, role, invited_by, expires_at, created_at`, [orgId, email, role, invitedByUserId, tokenHash]);
+        const invitation = result.rows[0];
+        // Get inviter name
+        const inviterResult = await this.db.query(`SELECT display_name FROM users WHERE id = $1`, [invitedByUserId]);
+        invitation.invited_by_name = inviterResult.rows[0]?.display_name ?? null;
+        return { invitation, token };
+    }
+    /** Accept an invitation by token */
+    async acceptInvitation(token, userId) {
+        const tokenHash = hashToken(token);
+        const result = await this.db.query(`SELECT id, org_id, email, role FROM org_invitations
+       WHERE token = $1 AND accepted_at IS NULL AND expires_at > now()`, [tokenHash]);
+        if (result.rows.length === 0) {
+            throw new OrgServiceError('invalid_invitation', 'Invalid or expired invitation', 404);
+        }
+        const inv = result.rows[0];
+        // Mark accepted
+        await this.db.query(`UPDATE org_invitations SET accepted_at = now() WHERE id = $1`, [inv.id]);
+        // Add membership
+        await this.db.query(`INSERT INTO org_members (org_id, user_id, role)
+       VALUES ($1, $2, $3)
+       ON CONFLICT (org_id, user_id) DO NOTHING`, [inv.org_id, userId, inv.role]);
+        return { orgId: inv.org_id, role: inv.role };
+    }
+    /** List pending invitations for an org */
+    async listInvitations(orgId) {
+        const result = await this.db.query(`SELECT i.id, i.org_id, i.email, i.role, i.invited_by,
+              u.display_name as invited_by_name, i.expires_at, i.created_at
+       FROM org_invitations i
+       LEFT JOIN users u ON u.id = i.invited_by
+       WHERE i.org_id = $1 AND i.accepted_at IS NULL AND i.expires_at > now()
+       ORDER BY i.created_at DESC`, [orgId]);
+        return result.rows;
+    }
+    /** Cancel a pending invitation */
+    async cancelInvitation(orgId, invitationId) {
+        const result = await this.db.query(`DELETE FROM org_invitations
+       WHERE id = $1 AND org_id = $2 AND accepted_at IS NULL
+       RETURNING id`, [invitationId, orgId]);
+        return result.rows.length > 0;
+    }
+    /** Change a member's role */
+    async changeMemberRole(orgId, targetUserId, newRole, actorRole) {
+        // Only owner can set owner role
+        if (newRole === 'owner' && actorRole !== 'owner') {
+            throw new OrgServiceError('forbidden', 'Only the owner can transfer ownership', 403);
+        }
+        // Can't change the role of the sole owner
+        if (newRole !== 'owner') {
+            const currentRole = await this.db.query(`SELECT role FROM org_members WHERE org_id = $1 AND user_id = $2`, [orgId, targetUserId]);
+            if (currentRole.rows[0]?.role === 'owner') {
+                // Check there's another owner
+                const ownerCount = await this.db.query(`SELECT COUNT(*) as cnt FROM org_members WHERE org_id = $1 AND role = 'owner'`, [orgId]);
+                if (parseInt(ownerCount.rows[0].cnt) <= 1) {
+                    throw new OrgServiceError('last_owner', 'Cannot change role of the only owner. Transfer ownership first.', 400);
+                }
+            }
+        }
+        await this.db.query(`UPDATE org_members SET role = $1 WHERE org_id = $2 AND user_id = $3`, [newRole, orgId, targetUserId]);
+    }
+    /** Remove a member from org */
+    async removeMember(orgId, targetUserId) {
+        // Can't remove the sole owner
+        const currentRole = await this.db.query(`SELECT role FROM org_members WHERE org_id = $1 AND user_id = $2`, [orgId, targetUserId]);
+        if (currentRole.rows[0]?.role === 'owner') {
+            const ownerCount = await this.db.query(`SELECT COUNT(*) as cnt FROM org_members WHERE org_id = $1 AND role = 'owner'`, [orgId]);
+            if (parseInt(ownerCount.rows[0].cnt) <= 1) {
+                throw new OrgServiceError('last_owner', 'Cannot remove the only owner', 400);
+            }
+        }
+        await this.db.query(`DELETE FROM org_members WHERE org_id = $1 AND user_id = $2`, [orgId, targetUserId]);
+    }
+    /** Transfer ownership to another member */
+    async transferOwnership(orgId, fromUserId, toUserId) {
+        // Verify from is owner
+        const fromRole = await this.db.query(`SELECT role FROM org_members WHERE org_id = $1 AND user_id = $2`, [orgId, fromUserId]);
+        if (fromRole.rows[0]?.role !== 'owner') {
+            throw new OrgServiceError('not_owner', 'Only the owner can transfer ownership', 403);
+        }
+        // Verify target is a member
+        const toMember = await this.db.query(`SELECT role FROM org_members WHERE org_id = $1 AND user_id = $2`, [orgId, toUserId]);
+        if (toMember.rows.length === 0) {
+            throw new OrgServiceError('not_member', 'Target user is not a member of this organization', 400);
+        }
+        // Transfer: demote current owner to admin, promote target to owner
+        await this.db.query(`UPDATE org_members SET role = 'admin' WHERE org_id = $1 AND user_id = $2`, [orgId, fromUserId]);
+        await this.db.query(`UPDATE org_members SET role = 'owner' WHERE org_id = $1 AND user_id = $2`, [orgId, toUserId]);
+    }
+}
+//# sourceMappingURL=org-service.js.map

package/dist/cloud/org-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-service.js","sourceRoot":"","sources":["../../src/cloud/org-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AA8B5D,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAE/B;IAEA;IAHT,YACS,IAAY,EACnB,OAAe,EACR,aAAa,GAAG;QAEvB,KAAK,CAAC,OAAO,CAAC,CAAC;QAJR,SAAI,GAAJ,IAAI,CAAQ;QAEZ,eAAU,GAAV,UAAU,CAAM;QAGvB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,UAAU;IACD;IAApB,YAAoB,EAAmB;QAAnB,OAAE,GAAF,EAAE,CAAiB;IAAG,CAAC;IAE3C,8CAA8C;IAC9C,mBAAmB;IACnB,8CAA8C;IAE9C,oCAAoC;IACpC,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC;;;;uBAIiB,EACjB,CAAC,MAAM,CAAC,CACT,CAAC;QACF,OAAO,MAAM,CAAC,IAAa,CAAC;IAC9B,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,IAAY;QAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,eAAe,CAAC,cAAc,EAAE,+BAA+B,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,IAAI,GAAG,IAAI;aACd,WAAW,EAAE;aACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;aAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;cACpB,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC,0FAA0F,EAC1F,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CACpB,CAAC;QACF,MAAM,GAAG,GAAI,MAAM,CAAC,IAAc,CAAC,CAAC,CAAC,CAAC;QAEtC,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACjB,0EAA0E,EAC1E,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CACjB,CAAC;QAEF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,8CAA8C;IAC9C,0BAA0B;IAC1B,8CAA8C;IAE9C,6BAA6B;IAC7B,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC;;;;6BAIuB,EACvB,CAAC,KAAK,CAAC,CACR,CAAC;QACF,OAAO,MAAM,CAAC,IAAmB,CAAC;IACpC,CAAC;IAED,6BAA6B;IAC7B,KAAK,CAAC,YAAY,CAChB,KAAa,EACb,eAAuB,EACvB,KAAa,EACb,IAAmC;QAEnC,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAClC;6CACuC,EACvC,CAAC,KAAK,EAAE,KAAK,CAAC,CACf,CAAC;QACF,IAAK,QAAQ,CAAC,IAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,mDAAmD,CAAC,CAAC;QACnG,CAAC;QAED,wCAAwC;QACxC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACpC;uFACiF,EACjF,CAAC,KAAK,EAAE,KAAK,CAAC,CACf,CAAC;QACF,IAAK,UAAU,CAAC,IAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,eAAe,CAAC,iBAAiB,EAAE,iDAAiD,CAAC,CAAC;QAClG,CAAC;QAED,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAEnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC;;6EAEuE,EACvE,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,CAAC,CACjD,CAAC;QACF,MAAM,UAAU,GAAI,MAAM,CAAC,IAAc,CAAC,CAAC,CAAC,CAAC;QAE7C,mBAAmB;QACnB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACvC,8CAA8C,EAC9C,CAAC,eAAe,CAAC,CAClB,CAAC;QACF,UAAU,CAAC,eAAe,GAAI,aAAa,CAAC,IAAc,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,IAAI,CAAC;QAEpF,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED,oCAAoC;IACpC,KAAK,CAAC,gBAAgB,CAAC,KAAa,EAAE,MAAc;QAClD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC;uEACiE,EACjE,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,IAAK,MAAM,CAAC,IAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,+BAA+B,EAAE,GAAG,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,GAAG,GAAI,MAAM,CAAC,IAAc,CAAC,CAAC,CAAC,CAAC;QAEtC,gBAAgB;QAChB,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACjB,8DAA8D,EAC9D,CAAC,GAAG,CAAC,EAAE,CAAC,CACT,CAAC;QAEF,iBAAiB;QACjB,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACjB;;gDAE0C,EAC1C,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAC/B,CAAC;QAEF,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,eAAe,CAAC,KAAa;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC;;;;;kCAK4B,EAC5B,CAAC,KAAK,CAAC,CACR,CAAC;QACF,OAAO,MAAM,CAAC,IAAuB,CAAC;IACxC,CAAC;IAED,kCAAkC;IAClC,KAAK,CAAC,gBAAgB,CAAC,KAAa,EAAE,YAAoB;QACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC;;oBAEc,EACd,CAAC,YAAY,EAAE,KAAK,CAAC,CACtB,CAAC;QACF,OAAQ,MAAM,CAAC,IAAc,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,6BAA6B;IAC7B,KAAK,CAAC,gBAAgB,CACpB,KAAa,EACb,YAAoB,EACpB,OAAe,EACf,SAAiB;QAEjB,gCAAgC;QAChC,IAAI,OAAO,KAAK,OAAO,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YACjD,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,uCAAuC,EAAE,GAAG,CAAC,CAAC;QACvF,CAAC;QAED,0CAA0C;QAC1C,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACrC,iEAAiE,EACjE,CAAC,KAAK,EAAE,YAAY,CAAC,CACtB,CAAC;YACF,IAAK,WAAW,CAAC,IAAc,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrD,8BAA8B;gBAC9B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACpC,8EAA8E,EAC9E,CAAC,KAAK,CAAC,CACR,CAAC;gBACF,IAAI,QAAQ,CAAE,UAAU,CAAC,IAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrD,MAAM,IAAI,eAAe,CAAC,YAAY,EAAE,iEAAiE,EAAE,GAAG,CAAC,CAAC;gBAClH,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACjB,qEAAqE,EACrE,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAC/B,CAAC;IACJ,CAAC;IAED,+BAA+B;IAC/B,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,YAAoB;QACpD,8BAA8B;QAC9B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACrC,iEAAiE,EACjE,CAAC,KAAK,EAAE,YAAY,CAAC,CACtB,CAAC;QACF,IAAK,WAAW,CAAC,IAAc,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;YACrD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACpC,8EAA8E,EAC9E,CAAC,KAAK,CAAC,CACR,CAAC;YACF,IAAI,QAAQ,CAAE,UAAU,CAAC,IAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,eAAe,CAAC,YAAY,EAAE,8BAA8B,EAAE,GAAG,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACjB,4DAA4D,EAC5D,CAAC,KAAK,EAAE,YAAY,CAAC,CACtB,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,iBAAiB,CAAC,KAAa,EAAE,UAAkB,EAAE,QAAgB;QACzE,uBAAuB;QACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAClC,iEAAiE,EACjE,CAAC,KAAK,EAAE,UAAU,CAAC,CACpB,CAAC;QACF,IAAK,QAAQ,CAAC,IAAc,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;YAClD,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,uCAAuC,EAAE,GAAG,CAAC,CAAC;QACvF,CAAC;QAED,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAClC,iEAAiE,EACjE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAClB,CAAC;QACF,IAAK,QAAQ,CAAC,IAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,eAAe,CAAC,YAAY,EAAE,kDAAkD,EAAE,GAAG,CAAC,CAAC;QACnG,CAAC;QAED,mEAAmE;QACnE,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACjB,0EAA0E,EAC1E,CAAC,KAAK,EAAE,UAAU,CAAC,CACpB,CAAC;QACF,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACjB,0EAA0E,EAC1E,CAAC,KAAK,EAAE,QAAQ,CAAC,CAClB,CAAC;IACJ,CAAC;CACF"}

package/dist/cloud/partition-maintenance.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Partition Maintenance Job (S-1.4)
+ *
+ * Auto-creates partitions 3 months ahead and drops expired ones.
+ * Designed to be called by a daily cron job.
+ */
+import type { Pool } from './tenant-pool.js';
+export interface PartitionAction {
+    action: 'created' | 'dropped';
+    partitionName: string;
+}
+/**
+ * Create a monthly partition for a table if it doesn't exist.
+ */
+export declare function createMonthlyPartition(pool: Pool, table: string, year: number, month: number): Promise<string | null>;
+/**
+ * Run partition maintenance:
+ * - Create partitions 3 months ahead for all partitioned tables
+ * - Drop partitions older than maxRetentionMonths
+ */
+export declare function maintainPartitions(pool: Pool, maxRetentionMonths?: number): Promise<PartitionAction[]>;
+/**
+ * Get partition info for a table.
+ */
+export declare function getPartitions(pool: Pool, table: string): Promise<{
+    name: string;
+    bounds: string;
+}[]>;
+//# sourceMappingURL=partition-maintenance.d.ts.map

package/dist/cloud/partition-maintenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"partition-maintenance.d.ts","sourceRoot":"","sources":["../../src/cloud/partition-maintenance.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;CACvB;AAiBD;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA8BxB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,IAAI,EACV,kBAAkB,GAAE,MAAW,GAC9B,OAAO,CAAC,eAAe,EAAE,CAAC,CAiD5B;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAa7C"}

package/dist/cloud/partition-maintenance.js

@@ -0,0 +1,96 @@
+/**
+ * Partition Maintenance Job (S-1.4)
+ *
+ * Auto-creates partitions 3 months ahead and drops expired ones.
+ * Designed to be called by a daily cron job.
+ */
+const PARTITIONED_TABLES = [
+    { table: 'events', column: 'timestamp' },
+    { table: 'audit_log', column: 'created_at' },
+    { table: 'usage_records', column: 'hour' },
+];
+const VALID_TABLE_NAMES = new Set(PARTITIONED_TABLES.map((t) => t.table));
+const SAFE_IDENTIFIER_RE = /^[a-z_][a-z0-9_]*$/;
+function assertSafeIdentifier(name) {
+    if (!SAFE_IDENTIFIER_RE.test(name)) {
+        throw new Error(`Unsafe SQL identifier: ${name}`);
+    }
+}
+/**
+ * Create a monthly partition for a table if it doesn't exist.
+ */
+export async function createMonthlyPartition(pool, table, year, month) {
+    if (!VALID_TABLE_NAMES.has(table)) {
+        throw new Error(`Invalid table for partitioning: ${table}`);
+    }
+    assertSafeIdentifier(table);
+    const partitionName = `${table}_${year}_${String(month).padStart(2, '0')}`;
+    assertSafeIdentifier(partitionName);
+    const startDate = `${year}-${String(month).padStart(2, '0')}-01`;
+    const nextMonth = month === 12 ? 1 : month + 1;
+    const nextYear = month === 12 ? year + 1 : year;
+    const endDate = `${nextYear}-${String(nextMonth).padStart(2, '0')}-01`;
+    // Check if partition already exists
+    const check = await pool.query(`SELECT 1 FROM pg_class WHERE relname = $1`, [partitionName]);
+    if (check.rows.length > 0) {
+        return null; // Already exists
+    }
+    await pool.query(`CREATE TABLE IF NOT EXISTS ${partitionName} PARTITION OF ${table} FOR VALUES FROM ($1) TO ($2)`, [startDate, endDate]);
+    return partitionName;
+}
+/**
+ * Run partition maintenance:
+ * - Create partitions 3 months ahead for all partitioned tables
+ * - Drop partitions older than maxRetentionMonths
+ */
+export async function maintainPartitions(pool, maxRetentionMonths = 12) {
+    const actions = [];
+    const now = new Date();
+    // Create future partitions (current month + 3 ahead)
+    for (const { table } of PARTITIONED_TABLES) {
+        for (let offset = 0; offset <= 3; offset++) {
+            const d = new Date(now.getFullYear(), now.getMonth() + offset, 1);
+            const result = await createMonthlyPartition(pool, table, d.getFullYear(), d.getMonth() + 1);
+            if (result) {
+                actions.push({ action: 'created', partitionName: result });
+            }
+        }
+    }
+    // Drop expired partitions
+    const cutoff = new Date(now.getFullYear(), now.getMonth() - maxRetentionMonths, 1);
+    for (const { table } of PARTITIONED_TABLES) {
+        const result = await pool.query(`SELECT inhrelid::regclass::text AS child_name,
+              pg_get_expr(c.relpartbound, c.oid) AS bound_expr
+       FROM pg_inherits
+       JOIN pg_class c ON c.oid = inhrelid
+       JOIN pg_class parent ON parent.oid = inhparent
+       WHERE parent.relname = $1`, [table]);
+        for (const row of result.rows) {
+            // Extract start date from bound: "FOR VALUES FROM ('2025-01-01') TO ('2025-02-01')"
+            const match = row.bound_expr.match(/'(\d{4}-\d{2}-\d{2})'/);
+            if (match) {
+                const startDate = new Date(match[1]);
+                if (startDate < cutoff) {
+                    assertSafeIdentifier(row.child_name);
+                    await pool.query(`DROP TABLE IF EXISTS ${row.child_name}`);
+                    actions.push({ action: 'dropped', partitionName: row.child_name });
+                }
+            }
+        }
+    }
+    return actions;
+}
+/**
+ * Get partition info for a table.
+ */
+export async function getPartitions(pool, table) {
+    const result = await pool.query(`SELECT inhrelid::regclass::text AS name,
+            pg_get_expr(c.relpartbound, c.oid) AS bounds
+     FROM pg_inherits
+     JOIN pg_class c ON c.oid = inhrelid
+     JOIN pg_class parent ON parent.oid = inhparent
+     WHERE parent.relname = $1
+     ORDER BY name`, [table]);
+    return result.rows;
+}
+//# sourceMappingURL=partition-maintenance.js.map

package/dist/cloud/partition-maintenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"partition-maintenance.js","sourceRoot":"","sources":["../../src/cloud/partition-maintenance.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,MAAM,kBAAkB,GAAG;IACzB,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE;IACxC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE;IAC5C,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE;CAClC,CAAC;AAEX,MAAM,iBAAiB,GAAgB,IAAI,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACvF,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEhD,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAU,EACV,KAAa,EACb,IAAY,EACZ,KAAa;IAEb,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAE5B,MAAM,aAAa,GAAG,GAAG,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC3E,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAEpC,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;IACjE,MAAM,SAAS,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;IAEvE,oCAAoC;IACpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAC5B,2CAA2C,EAC3C,CAAC,aAAa,CAAC,CAChB,CAAC;IAEF,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,CAAC,iBAAiB;IAChC,CAAC;IAED,MAAM,IAAI,CAAC,KAAK,CACd,8BAA8B,aAAa,iBAAiB,KAAK,+BAA+B,EAChG,CAAC,SAAS,EAAE,OAAO,CAAC,CACrB,CAAC;IAEF,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAU,EACV,qBAA6B,EAAE;IAE/B,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,qDAAqD;IACrD,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,kBAAkB,EAAE,CAAC;QAC3C,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;YAClE,MAAM,MAAM,GAAG,MAAM,sBAAsB,CACzC,IAAI,EACJ,KAAK,EACL,CAAC,CAAC,WAAW,EAAE,EACf,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CACjB,CAAC;YACF,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,kBAAkB,EAAE,CAAC,CAAC,CAAC;IAEnF,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,kBAAkB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;;;;;iCAK2B,EAC3B,CAAC,KAAK,CAAC,CACR,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAoD,EAAE,CAAC;YAC9E,oFAAoF;YACpF,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC5D,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrC,IAAI,SAAS,GAAG,MAAM,EAAE,CAAC;oBACvB,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBACrC,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;oBAC3D,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAU,EACV,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;;;;;;mBAMe,EACf,CAAC,KAAK,CAAC,CACR,CAAC;IAEF,OAAO,MAAM,CAAC,IAA0C,CAAC;AAC3D,CAAC"}

package/dist/cloud/retention/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Data Retention & Partition Management (S-8.1, S-8.2)
+ */
+export { type RetentionPolicy, type OrgRetentionInfo, TIER_RETENTION, getEffectiveRetention, getRetentionCutoff, } from './retention-policy.js';
+export { type RetentionJobResult, type RetentionWarning, type RetentionError, type OrgPurgeResult, type RetentionJobDeps, type RetentionLogger, runRetentionJob, purgeExpiredData, getExpiringDataSummary, } from './retention-job.js';
+export { type PartitionHealthReport, type PartitionInfo, type PartitionIssue, type PartitionManagementResult, type PartitionManagementDeps, managePartitions, getGlobalMinRetentionMonths, checkPartitionHealth, checkAllPartitionHealth, } from './partition-management.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/cloud/retention/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cloud/retention/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,eAAe,EACf,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,gBAAgB,EAChB,2BAA2B,EAC3B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,2BAA2B,CAAC"}

package/dist/cloud/retention/index.js

@@ -0,0 +1,7 @@
+/**
+ * Data Retention & Partition Management (S-8.1, S-8.2)
+ */
+export { TIER_RETENTION, getEffectiveRetention, getRetentionCutoff, } from './retention-policy.js';
+export { runRetentionJob, purgeExpiredData, getExpiringDataSummary, } from './retention-job.js';
+export { managePartitions, getGlobalMinRetentionMonths, checkPartitionHealth, checkAllPartitionHealth, } from './partition-management.js';
+//# sourceMappingURL=index.js.map

package/dist/cloud/retention/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cloud/retention/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAGL,cAAc,EACd,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAOL,eAAe,EACf,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAML,gBAAgB,EAChB,2BAA2B,EAC3B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,2BAA2B,CAAC"}

package/dist/cloud/retention/partition-management.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Production Partition Management (S-8.2)
+ *
+ * Extends the base partition-maintenance with:
+ * - Integration with retention policies (drop partitions based on min retention across orgs)
+ * - Partition health monitoring
+ * - Future partition pre-creation (3 months ahead)
+ */
+import type { Pool } from '../tenant-pool.js';
+export interface PartitionHealthReport {
+    table: string;
+    totalPartitions: number;
+    partitions: PartitionInfo[];
+    issues: PartitionIssue[];
+    healthy: boolean;
+}
+export interface PartitionInfo {
+    name: string;
+    bounds: string;
+    startDate: string;
+    endDate: string;
+    estimatedRows?: number;
+}
+export interface PartitionIssue {
+    type: 'missing_future' | 'gap' | 'too_many' | 'stale';
+    message: string;
+    partition?: string;
+}
+export interface PartitionManagementResult {
+    created: string[];
+    dropped: string[];
+    errors: string[];
+}
+export interface PartitionManagementDeps {
+    pool: Pool;
+    now?: Date;
+    futureMonths?: number;
+}
+/**
+ * Run full partition lifecycle management.
+ *
+ * 1. Pre-create future partitions (3 months ahead by default)
+ * 2. Drop fully expired partitions based on global minimum retention
+ */
+export declare function managePartitions(deps: PartitionManagementDeps): Promise<PartitionManagementResult>;
+/**
+ * Get the minimum retention across all active orgs (in months).
+ * This determines when a shared partition can safely be dropped —
+ * only when ALL orgs' retention has expired for that time range.
+ */
+export declare function getGlobalMinRetentionMonths(pool: Pool): Promise<number>;
+/**
+ * Check partition health for a table.
+ * Reports issues like missing future partitions, gaps, excessive partitions.
+ */
+export declare function checkPartitionHealth(pool: Pool, table: string, now?: Date, futureMonths?: number): Promise<PartitionHealthReport>;
+/**
+ * Get health reports for all partitioned tables.
+ */
+export declare function checkAllPartitionHealth(pool: Pool, now?: Date): Promise<PartitionHealthReport[]>;
+//# sourceMappingURL=partition-management.d.ts.map

package/dist/cloud/retention/partition-management.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"partition-management.d.ts","sourceRoot":"","sources":["../../../src/cloud/retention/partition-management.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAW9C,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,gBAAgB,GAAG,KAAK,GAAG,UAAU,GAAG,OAAO,CAAC;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,IAAI,CAAC;IACX,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAWD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,yBAAyB,CAAC,CAiCpC;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAkB7E;AAgCD;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,EACb,GAAG,GAAE,IAAiB,EACtB,YAAY,GAAE,MAAU,GACvB,OAAO,CAAC,qBAAqB,CAAC,CA2DhC;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,IAAI,EACV,GAAG,GAAE,IAAiB,GACrB,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAMlC"}

package/dist/cloud/retention/partition-management.js

@@ -0,0 +1,167 @@
+/**
+ * Production Partition Management (S-8.2)
+ *
+ * Extends the base partition-maintenance with:
+ * - Integration with retention policies (drop partitions based on min retention across orgs)
+ * - Partition health monitoring
+ * - Future partition pre-creation (3 months ahead)
+ */
+import { TIER_RETENTION } from './retention-policy.js';
+import { createMonthlyPartition, getPartitions, } from '../partition-maintenance.js';
+const PARTITIONED_TABLES = ['events', 'audit_log', 'usage_records'];
+const SAFE_IDENTIFIER_RE = /^[a-z_][a-z0-9_]*$/;
+function assertSafe(name) {
+    if (!SAFE_IDENTIFIER_RE.test(name))
+        throw new Error(`Unsafe identifier: ${name}`);
+}
+// ─── Core ────────────────────────────────────────────────────────
+/**
+ * Run full partition lifecycle management.
+ *
+ * 1. Pre-create future partitions (3 months ahead by default)
+ * 2. Drop fully expired partitions based on global minimum retention
+ */
+export async function managePartitions(deps) {
+    const { pool, now = new Date(), futureMonths = 3 } = deps;
+    const result = { created: [], dropped: [], errors: [] };
+    // Step 1: Create future partitions
+    for (const table of PARTITIONED_TABLES) {
+        for (let offset = 0; offset <= futureMonths; offset++) {
+            const d = new Date(now.getFullYear(), now.getMonth() + offset, 1);
+            try {
+                const name = await createMonthlyPartition(pool, table, d.getFullYear(), d.getMonth() + 1);
+                if (name)
+                    result.created.push(name);
+            }
+            catch (err) {
+                result.errors.push(`Failed to create partition for ${table} ${d.toISOString()}: ${err}`);
+            }
+        }
+    }
+    // Step 2: Determine global minimum retention to decide which partitions can be dropped
+    const minRetentionMonths = await getGlobalMinRetentionMonths(pool);
+    // Step 3: Drop expired partitions
+    const cutoff = new Date(now.getFullYear(), now.getMonth() - minRetentionMonths, 1);
+    for (const table of PARTITIONED_TABLES) {
+        try {
+            const dropped = await dropExpiredPartitions(pool, table, cutoff);
+            result.dropped.push(...dropped);
+        }
+        catch (err) {
+            result.errors.push(`Failed to drop partitions for ${table}: ${err}`);
+        }
+    }
+    return result;
+}
+/**
+ * Get the minimum retention across all active orgs (in months).
+ * This determines when a shared partition can safely be dropped —
+ * only when ALL orgs' retention has expired for that time range.
+ */
+export async function getGlobalMinRetentionMonths(pool) {
+    const { rows } = await pool.query(`SELECT DISTINCT plan FROM orgs WHERE deleted_at IS NULL`);
+    if (rows.length === 0)
+        return 12; // default safe value
+    let maxRetentionDays = 0;
+    for (const row of rows) {
+        const tier = row.plan;
+        const retention = TIER_RETENTION[tier] ?? TIER_RETENTION.free;
+        // We need the MAXIMUM retention across all orgs to know when a partition is safe to drop
+        // (a partition can only be dropped when ALL orgs' data in it has expired)
+        maxRetentionDays = Math.max(maxRetentionDays, retention.eventRetentionDays, retention.auditLogRetentionDays);
+    }
+    // Convert days to months (round up)
+    return Math.ceil(maxRetentionDays / 30);
+}
+/**
+ * Drop partitions whose entire time range is before the cutoff.
+ */
+async function dropExpiredPartitions(pool, table, cutoff) {
+    assertSafe(table);
+    const partitions = await getPartitions(pool, table);
+    const dropped = [];
+    for (const p of partitions) {
+        // Extract end date from bounds: "FOR VALUES FROM ('2025-01-01') TO ('2025-02-01')"
+        const matches = p.bounds.match(/'(\d{4}-\d{2}-\d{2})'/g);
+        if (!matches || matches.length < 2)
+            continue;
+        const endDate = new Date(matches[1].replace(/'/g, ''));
+        if (endDate <= cutoff) {
+            assertSafe(p.name);
+            await pool.query(`DROP TABLE IF EXISTS ${p.name}`);
+            dropped.push(p.name);
+        }
+    }
+    return dropped;
+}
+// ─── Health Monitoring ───────────────────────────────────────────
+/**
+ * Check partition health for a table.
+ * Reports issues like missing future partitions, gaps, excessive partitions.
+ */
+export async function checkPartitionHealth(pool, table, now = new Date(), futureMonths = 3) {
+    assertSafe(table);
+    const partitions = await getPartitions(pool, table);
+    const issues = [];
+    const parsedPartitions = [];
+    for (const p of partitions) {
+        const matches = p.bounds.match(/'(\d{4}-\d{2}-\d{2})'/g);
+        if (matches && matches.length >= 2) {
+            parsedPartitions.push({
+                name: p.name,
+                bounds: p.bounds,
+                startDate: matches[0].replace(/'/g, ''),
+                endDate: matches[1].replace(/'/g, ''),
+            });
+        }
+    }
+    // Check future partitions exist
+    for (let offset = 0; offset <= futureMonths; offset++) {
+        const d = new Date(now.getFullYear(), now.getMonth() + offset, 1);
+        const expectedName = `${table}_${d.getFullYear()}_${String(d.getMonth() + 1).padStart(2, '0')}`;
+        const exists = parsedPartitions.some((p) => p.name === expectedName);
+        if (!exists) {
+            issues.push({
+                type: 'missing_future',
+                message: `Missing future partition: ${expectedName}`,
+                partition: expectedName,
+            });
+        }
+    }
+    // Check for gaps between partitions
+    const sorted = [...parsedPartitions].sort((a, b) => a.startDate.localeCompare(b.startDate));
+    for (let i = 1; i < sorted.length; i++) {
+        if (sorted[i].startDate !== sorted[i - 1].endDate) {
+            issues.push({
+                type: 'gap',
+                message: `Gap between ${sorted[i - 1].name} and ${sorted[i].name}`,
+                partition: sorted[i].name,
+            });
+        }
+    }
+    // Check for excessive partitions (> 24 is unusual)
+    if (parsedPartitions.length > 24) {
+        issues.push({
+            type: 'too_many',
+            message: `Table ${table} has ${parsedPartitions.length} partitions (>24)`,
+        });
+    }
+    return {
+        table,
+        totalPartitions: parsedPartitions.length,
+        partitions: parsedPartitions,
+        issues,
+        healthy: issues.length === 0,
+    };
+}
+/**
+ * Get health reports for all partitioned tables.
+ */
+export async function checkAllPartitionHealth(pool, now = new Date()) {
+    const reports = [];
+    for (const table of PARTITIONED_TABLES) {
+        reports.push(await checkPartitionHealth(pool, table, now));
+    }
+    return reports;
+}
+//# sourceMappingURL=partition-management.js.map

package/dist/cloud/retention/partition-management.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"partition-management.js","sourceRoot":"","sources":["../../../src/cloud/retention/partition-management.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EACL,sBAAsB,EACtB,aAAa,GAEd,MAAM,6BAA6B,CAAC;AAsCrC,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,eAAe,CAAU,CAAC;AAC7E,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEhD,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,oEAAoE;AAEpE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA6B;IAE7B,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE,EAAE,YAAY,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC;IAC1D,MAAM,MAAM,GAA8B,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAEnF,mCAAmC;IACnC,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACvC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,EAAE,EAAE,CAAC;YACtD,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;YAClE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC1F,IAAI,IAAI;oBAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,KAAK,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;IACH,CAAC;IAED,uFAAuF;IACvF,MAAM,kBAAkB,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC;IAEnE,kCAAkC;IAClC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,kBAAkB,EAAE,CAAC,CAAC,CAAC;IAEnF,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACjE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,KAAK,KAAK,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAU;IAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,yDAAyD,CAC1D,CAAC;IAEF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC,qBAAqB;IAEvD,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,IAA0B,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAgB,CAAC;QAClC,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC;QAC9D,yFAAyF;QACzF,0EAA0E;QAC1E,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,kBAAkB,EAAE,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAC/G,CAAC;IAED,oCAAoC;IACpC,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,qBAAqB,CAClC,IAAU,EACV,KAAa,EACb,MAAY;IAEZ,UAAU,CAAC,KAAK,CAAC,CAAC;IAClB,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,mFAAmF;QACnF,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAE7C,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACvD,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACtB,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnB,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,oEAAoE;AAEpE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAU,EACV,KAAa,EACb,MAAY,IAAI,IAAI,EAAE,EACtB,eAAuB,CAAC;IAExB,UAAU,CAAC,KAAK,CAAC,CAAC;IAClB,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,MAAM,gBAAgB,GAAoB,EAAE,CAAC;IAE7C,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACzD,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACnC,gBAAgB,CAAC,IAAI,CAAC;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;gBACvC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,EAAE,EAAE,CAAC;QACtD,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,YAAY,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAChG,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,6BAA6B,YAAY,EAAE;gBACpD,SAAS,EAAE,YAAY;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,MAAM,MAAM,GAAG,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAClD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,eAAe,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,QAAQ,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBAClE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,IAAI,gBAAgB,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,SAAS,KAAK,QAAQ,gBAAgB,CAAC,MAAM,mBAAmB;SAC1E,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,KAAK;QACL,eAAe,EAAE,gBAAgB,CAAC,MAAM;QACxC,UAAU,EAAE,gBAAgB;QAC5B,MAAM;QACN,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAU,EACV,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,MAAM,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}