@de-otio/trellis 0.4.0

package/dist/lib/services/media-reconciliation-service.js

@@ -0,0 +1,191 @@
+"use strict";
+/**
+ * Media Reconciliation Service
+ *
+ * Processes queued media uploads and creates database records
+ * Handles deduplication, retries, and R2 metadata updates
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MediaReconciliationService = void 0;
+const database_connection_manager_1 = require("../database-connection-manager");
+const logger_1 = require("../logger");
+class MediaReconciliationService {
+    env;
+    r2Bucket;
+    constructor(env) {
+        this.env = env;
+        this.r2Bucket = env.MEDIA_BUCKET_R2;
+    }
+    /**
+     * Reconcile batch of media uploads
+     */
+    async reconcileBatch(messages) {
+        const logger = logger_1.Logger.getInstance(this.env);
+        // Flatten all uploads from all messages
+        const allUploads = messages.flatMap((m) => m.uploads);
+        logger.info("[MediaReconciliation] Processing batch", {
+            messageCount: messages.length,
+            uploadCount: allUploads.length,
+        });
+        if (allUploads.length === 0) {
+            logger.info("[MediaReconciliation] No uploads to process");
+            return;
+        }
+        // Get database connection
+        const region = "US"; // TODO: Get from env or config
+        const managed = database_connection_manager_1.sharedDatabaseConnectionManager.acquireClient(region, this.env);
+        const db = managed.client;
+        try {
+            // 1. Check for existing records (deduplication)
+            const hashes = allUploads.map((u) => u.contentHash);
+            const existing = await db.mediaFile.findMany({
+                where: { contentHash: { in: hashes } },
+                select: { id: true, contentHash: true },
+            });
+            const existingHashes = new Set(existing.map((m) => m.contentHash));
+            logger.info("[MediaReconciliation] Deduplication check", {
+                total: allUploads.length,
+                existing: existing.length,
+                new: allUploads.length - existing.length,
+            });
+            // 2. Filter to only new uploads
+            const newUploads = allUploads.filter((u) => !existingHashes.has(u.contentHash));
+            if (newUploads.length === 0) {
+                logger.info("[MediaReconciliation] All uploads already reconciled");
+                // Update R2 metadata for existing records
+                await this.updateR2MetadataForExisting(allUploads, existing);
+                return;
+            }
+            // 3. Batch create database records
+            const mediaFiles = await db.$transaction(newUploads.map((u) => db.mediaFile.create({
+                data: {
+                    contentHash: u.contentHash,
+                    mimeType: u.mimeType,
+                    size: u.size,
+                    originalKey: u.originalKey,
+                    uploadStatus: "COMPLETE",
+                    uploadedBy: u.uploadedBy,
+                    uploadBatchId: messages[0].batchId,
+                    createdViaReconciliation: true,
+                    reconciledAt: new Date(),
+                    width: u.width,
+                    height: u.height,
+                    duration: u.duration,
+                },
+            })), { timeout: 30000 });
+            logger.info("[MediaReconciliation] Created MediaFile records", {
+                count: mediaFiles.length,
+            });
+            // 4. Update R2 metadata (mark as reconciled)
+            await this.updateR2Metadata(newUploads, mediaFiles);
+            logger.info("[MediaReconciliation] Batch reconciliation complete", {
+                messageCount: messages.length,
+                uploadCount: allUploads.length,
+                newRecords: mediaFiles.length,
+            });
+        }
+        catch (error) {
+            if (error.code === "P2002") {
+                // Unique constraint violation - race condition
+                logger.warn("[MediaReconciliation] Duplicate records detected", {
+                    error: error.message,
+                });
+                // Retry will handle this
+                throw error;
+            }
+            logger.error("[MediaReconciliation] Reconciliation failed", {
+                error: error.message,
+                stack: error.stack,
+                uploadCount: allUploads.length,
+            });
+            throw error;
+        }
+    }
+    /**
+     * Update R2 metadata for newly reconciled uploads
+     */
+    async updateR2Metadata(uploads, mediaFiles) {
+        const logger = logger_1.Logger.getInstance(this.env);
+        // Create map of contentHash -> mediaId
+        const hashToId = new Map(mediaFiles.map((m) => [m.contentHash, m.id]));
+        // Update R2 metadata in parallel
+        const results = await Promise.allSettled(uploads.map(async (u) => {
+            const mediaId = hashToId.get(u.contentHash);
+            if (!mediaId)
+                return;
+            try {
+                // Get existing object
+                const obj = await this.r2Bucket.get(u.originalKey);
+                if (!obj) {
+                    logger.warn("[MediaReconciliation] R2 object not found", {
+                        key: u.originalKey,
+                        contentHash: u.contentHash,
+                    });
+                    return;
+                }
+                // Re-upload with updated metadata
+                await this.r2Bucket.put(u.originalKey, obj.body, {
+                    httpMetadata: obj.httpMetadata,
+                    customMetadata: {
+                        ...obj.customMetadata,
+                        mediaId,
+                        reconciled: "true",
+                        reconciledAt: new Date().toISOString(),
+                        needsReconciliation: "false",
+                    },
+                });
+            }
+            catch (error) {
+                logger.warn("[MediaReconciliation] Failed to update R2 metadata", {
+                    key: u.originalKey,
+                    error: error.message,
+                });
+            }
+        }));
+        const failed = results.filter((r) => r.status === "rejected");
+        if (failed.length > 0) {
+            logger.warn("[MediaReconciliation] Some R2 metadata updates failed", {
+                failedCount: failed.length,
+                totalCount: uploads.length,
+            });
+        }
+    }
+    /**
+     * Update R2 metadata for existing records (deduplication case)
+     */
+    async updateR2MetadataForExisting(uploads, existing) {
+        const logger = logger_1.Logger.getInstance(this.env);
+        const hashToId = new Map(existing.map((m) => [m.contentHash, m.id]));
+        await Promise.allSettled(uploads.map(async (u) => {
+            const mediaId = hashToId.get(u.contentHash);
+            if (!mediaId)
+                return;
+            try {
+                const obj = await this.r2Bucket.get(u.originalKey);
+                if (!obj)
+                    return;
+                // Only update if not already reconciled
+                if (obj.customMetadata?.reconciled !== "true") {
+                    await this.r2Bucket.put(u.originalKey, obj.body, {
+                        httpMetadata: obj.httpMetadata,
+                        customMetadata: {
+                            ...obj.customMetadata,
+                            mediaId,
+                            reconciled: "true",
+                            reconciledAt: new Date().toISOString(),
+                            needsReconciliation: "false",
+                        },
+                    });
+                }
+            }
+            catch (error) {
+                logger.warn("[MediaReconciliation] Failed to update existing R2 metadata", {
+                    key: u.originalKey,
+                    error: error.message,
+                });
+            }
+        }));
+    }
+}
+exports.MediaReconciliationService = MediaReconciliationService;
+//# sourceMappingURL=media-reconciliation-service.js.map

package/dist/lib/services/media-reconciliation-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-reconciliation-service.js","sourceRoot":"","sources":["../../../src/lib/services/media-reconciliation-service.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,gFAAiF;AACjF,sCAAmC;AAGnC,MAAa,0BAA0B;IAC7B,GAAG,CAAM;IACT,QAAQ,CAAW;IAE3B,YAAY,GAAQ;QAClB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,eAAe,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,QAAsC;QACzD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE5C,wCAAwC;QACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAEtD,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;YACpD,YAAY,EAAE,QAAQ,CAAC,MAAM;YAC7B,WAAW,EAAE,UAAU,CAAC,MAAM;SAC/B,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,0BAA0B;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,+BAA+B;QACpD,MAAM,OAAO,GAAG,6DAA+B,CAAC,aAAa,CAC3D,MAAM,EACN,IAAI,CAAC,GAAG,CACT,CAAC;QACF,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAE1B,IAAI,CAAC;YACH,gDAAgD;YAChD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAO,EAAU,CAAC,SAAS,CAAC,QAAQ,CAAC;gBACpD,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;gBACtC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;aACxC,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YAExE,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;gBACvD,KAAK,EAAE,UAAU,CAAC,MAAM;gBACxB,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,GAAG,EAAE,UAAU,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM;aACzC,CAAC,CAAC;YAEH,gCAAgC;YAChC,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAC1C,CAAC;YAEF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;gBAEpE,0CAA0C;gBAC1C,MAAM,IAAI,CAAC,2BAA2B,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YAED,mCAAmC;YACnC,MAAM,UAAU,GAAG,MAAO,EAAU,CAAC,YAAY,CAC/C,UAAU,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CACvB,EAAU,CAAC,SAAS,CAAC,MAAM,CAAC;gBAC3B,IAAI,EAAE;oBACJ,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,YAAY,EAAE,UAAU;oBACxB,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO;oBAClC,wBAAwB,EAAE,IAAI;oBAC9B,YAAY,EAAE,IAAI,IAAI,EAAE;oBACxB,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;iBACrB;aACF,CAAC,CACH,EACD,EAAE,OAAO,EAAE,KAAK,EAAE,CACnB,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;gBAC7D,KAAK,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC,CAAC;YAEH,6CAA6C;YAC7C,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAEpD,MAAM,CAAC,IAAI,CAAC,qDAAqD,EAAE;gBACjE,YAAY,EAAE,QAAQ,CAAC,MAAM;gBAC7B,WAAW,EAAE,UAAU,CAAC,MAAM;gBAC9B,UAAU,EAAE,UAAU,CAAC,MAAM;aAC9B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3B,+CAA+C;gBAC/C,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE;oBAC9D,KAAK,EAAE,KAAK,CAAC,OAAO;iBACrB,CAAC,CAAC;gBACH,yBAAyB;gBACzB,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE;gBAC1D,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,WAAW,EAAE,UAAU,CAAC,MAAM;aAC/B,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAC5B,OAAc,EACd,UAAiB;QAEjB,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE5C,uCAAuC;QACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAE5E,iCAAiC;QACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO;gBAAE,OAAO;YAErB,IAAI,CAAC;gBACH,sBAAsB;gBACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBACnD,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;wBACvD,GAAG,EAAE,CAAC,CAAC,WAAW;wBAClB,WAAW,EAAE,CAAC,CAAC,WAAW;qBAC3B,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,kCAAkC;gBAClC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE;oBAC/C,YAAY,EAAE,GAAG,CAAC,YAAY;oBAC9B,cAAc,EAAE;wBACd,GAAG,GAAG,CAAC,cAAc;wBACrB,OAAO;wBACP,UAAU,EAAE,MAAM;wBAClB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACtC,mBAAmB,EAAE,OAAO;qBAC7B;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;oBAChE,GAAG,EAAE,CAAC,CAAC,WAAW;oBAClB,KAAK,EAAE,KAAK,CAAC,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE;gBACnE,WAAW,EAAE,MAAM,CAAC,MAAM;gBAC1B,UAAU,EAAE,OAAO,CAAC,MAAM;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,2BAA2B,CACvC,OAAc,EACd,QAAe;QAEf,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAE1E,MAAM,OAAO,CAAC,UAAU,CACtB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO;gBAAE,OAAO;YAErB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBACnD,IAAI,CAAC,GAAG;oBAAE,OAAO;gBAEjB,wCAAwC;gBACxC,IAAI,GAAG,CAAC,cAAc,EAAE,UAAU,KAAK,MAAM,EAAE,CAAC;oBAC9C,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE;wBAC/C,YAAY,EAAE,GAAG,CAAC,YAAY;wBAC9B,cAAc,EAAE;4BACd,GAAG,GAAG,CAAC,cAAc;4BACrB,OAAO;4BACP,UAAU,EAAE,MAAM;4BAClB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;4BACtC,mBAAmB,EAAE,OAAO;yBAC7B;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CACT,6DAA6D,EAC7D;oBACE,GAAG,EAAE,CAAC,CAAC,WAAW;oBAClB,KAAK,EAAE,KAAK,CAAC,OAAO;iBACrB,CACF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF;AA9ND,gEA8NC"}

package/dist/lib/services/media-upload-service.d.ts

@@ -0,0 +1,25 @@
+import type { UploadResult } from "../types/media-reconciliation";
+export declare class MediaUploadService {
+    private r2Bucket;
+    private queue;
+    private apiDomain;
+    private env;
+    constructor(env: any);
+    /**
+     * Upload single file
+     */
+    uploadSingle(file: File, userId: string, metadata?: {
+        width?: number;
+        height?: number;
+        duration?: number;
+    }, preReadBuffer?: ArrayBuffer): Promise<UploadResult>;
+    /**
+     * Upload batch of files
+     */
+    uploadBatch(files: File[], userId: string, metadataArray?: Array<{
+        width?: number;
+        height?: number;
+        duration?: number;
+    }>): Promise<UploadResult[]>;
+}
+//# sourceMappingURL=media-upload-service.d.ts.map

package/dist/lib/services/media-upload-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-upload-service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/media-upload-service.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAGV,YAAY,EACb,MAAM,+BAA+B,CAAC;AAqCvC,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,KAAK,CAAoC;IACjD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,GAAG,CAAM;gBAEL,GAAG,EAAE,GAAG;IAUpB;;OAEG;IACG,YAAY,CAChB,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EACjE,aAAa,CAAC,EAAE,WAAW,GAC1B,OAAO,CAAC,YAAY,CAAC;IA2FxB;;OAEG;IACG,WAAW,CACf,KAAK,EAAE,IAAI,EAAE,EACb,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,KAAK,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC,GACD,OAAO,CAAC,YAAY,EAAE,CAAC;CAsG3B"}

package/dist/lib/services/media-upload-service.js

@@ -0,0 +1,240 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MediaUploadService = void 0;
+/**
+ * Media Upload Service
+ *
+ * Implements Option 2 (Eventual Consistency) for media uploads:
+ * 1. Upload to R2 immediately (fast, reliable)
+ * 2. Queue reconciliation message (non-blocking)
+ * 3. Return success to client
+ * 4. Reconciliation worker creates database record asynchronously
+ */
+const logger_1 = require("../logger");
+/**
+ * Generate unique batch ID
+ */
+function generateBatchId() {
+    return `batch_${Date.now()}_${Math.random().toString(36).substring(2, 9)}`;
+}
+/**
+ * Generate SHA-256 content hash for content-addressed storage
+ */
+async function generateContentHash(file) {
+    const hashBuffer = await crypto.subtle.digest("SHA-256", file);
+    const hashArray = Array.from(new Uint8Array(hashBuffer));
+    return hashArray.map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+/**
+ * Get file extension from MIME type
+ */
+function getExtensionFromMimeType(mimeType) {
+    const mimeMap = {
+        "image/jpeg": "jpg",
+        "image/jpg": "jpg",
+        "image/png": "png",
+        "image/gif": "gif",
+        "image/webp": "webp",
+        "image/heic": "heic",
+        "image/heif": "heif",
+        "video/mp4": "mp4",
+        "video/webm": "webm",
+        "video/quicktime": "mov",
+    };
+    return mimeMap[mimeType] || "bin";
+}
+class MediaUploadService {
+    r2Bucket;
+    queue;
+    apiDomain;
+    env;
+    constructor(env) {
+        this.env = env;
+        this.r2Bucket = env.MEDIA_BUCKET_R2;
+        this.queue = env.MEDIA_RECONCILIATION_QUEUE;
+        this.apiDomain =
+            env.ENVIRONMENT === "prod"
+                ? "https://api.example.com"
+                : "https://api.rkm1.de";
+    }
+    /**
+     * Upload single file
+     */
+    async uploadSingle(file, userId, metadata, preReadBuffer) {
+        const logger = logger_1.Logger.getInstance(this.env);
+        const batchId = generateBatchId();
+        try {
+            // 1. Generate content hash
+            // Use pre-read buffer if provided (avoids double file.arrayBuffer() read
+            // which may not work reliably on Cloudflare Workers for FormData Files)
+            const fileBuffer = preReadBuffer ?? await file.arrayBuffer();
+            const contentHash = await generateContentHash(fileBuffer);
+            const ext = getExtensionFromMimeType(file.type);
+            const originalKey = `media/${contentHash}.${ext}`;
+            logger.info("[MediaUpload] Starting upload", {
+                contentHash,
+                mimeType: file.type,
+                size: file.size,
+                userId,
+                batchId,
+            });
+            // 2. Upload to R2 with metadata
+            const r2Metadata = {
+                contentHash,
+                uploadedBy: userId,
+                uploadedAt: new Date().toISOString(),
+                mimeType: file.type,
+                needsReconciliation: "true",
+                reconciled: "false",
+                batchId,
+                ...(metadata?.width && { width: metadata.width.toString() }),
+                ...(metadata?.height && { height: metadata.height.toString() }),
+                ...(metadata?.duration && { duration: metadata.duration.toString() }),
+            };
+            await this.r2Bucket.put(originalKey, fileBuffer, {
+                httpMetadata: {
+                    contentType: file.type,
+                },
+                customMetadata: r2Metadata,
+            });
+            logger.info("[MediaUpload] R2 upload successful", {
+                contentHash,
+                originalKey,
+            });
+            // 3. Queue reconciliation (non-blocking)
+            const message = {
+                type: "SINGLE_UPLOAD",
+                batchId,
+                timestamp: Date.now(),
+                uploads: [
+                    {
+                        contentHash,
+                        originalKey,
+                        mimeType: file.type,
+                        size: file.size,
+                        uploadedBy: userId,
+                        uploadedAt: new Date().toISOString(),
+                        ...(metadata?.width && { width: metadata.width }),
+                        ...(metadata?.height && { height: metadata.height }),
+                        ...(metadata?.duration && { duration: metadata.duration }),
+                    },
+                ],
+            };
+            await this.queue.send(message);
+            logger.info("[MediaUpload] Reconciliation queued", {
+                contentHash,
+                batchId,
+            });
+            // 4. Return success immediately
+            return {
+                success: true,
+                contentHash,
+                url: `${this.apiDomain}/api/media/${contentHash}`,
+                status: "uploaded",
+            };
+        }
+        catch (error) {
+            logger.error("[MediaUpload] Upload failed", {
+                error: error.message,
+                userId,
+                fileName: file.name,
+            });
+            throw error;
+        }
+    }
+    /**
+     * Upload batch of files
+     */
+    async uploadBatch(files, userId, metadataArray) {
+        const logger = logger_1.Logger.getInstance(this.env);
+        const batchId = generateBatchId();
+        logger.info("[MediaUpload] Starting batch upload", {
+            fileCount: files.length,
+            userId,
+            batchId,
+        });
+        // Upload all files to R2 in parallel
+        const uploadResults = await Promise.allSettled(files.map(async (file, index) => {
+            const fileBuffer = await file.arrayBuffer();
+            const contentHash = await generateContentHash(fileBuffer);
+            const ext = getExtensionFromMimeType(file.type);
+            const originalKey = `media/${contentHash}.${ext}`;
+            const metadata = metadataArray?.[index];
+            const r2Metadata = {
+                contentHash,
+                uploadedBy: userId,
+                uploadedAt: new Date().toISOString(),
+                mimeType: file.type,
+                needsReconciliation: "true",
+                reconciled: "false",
+                batchId,
+                ...(metadata?.width && { width: metadata.width.toString() }),
+                ...(metadata?.height && { height: metadata.height.toString() }),
+                ...(metadata?.duration && { duration: metadata.duration.toString() }),
+            };
+            await this.r2Bucket.put(originalKey, fileBuffer, {
+                httpMetadata: {
+                    contentType: file.type,
+                },
+                customMetadata: r2Metadata,
+            });
+            return {
+                contentHash,
+                originalKey,
+                mimeType: file.type,
+                size: file.size,
+                uploadedBy: userId,
+                uploadedAt: new Date().toISOString(),
+                ...(metadata?.width && { width: metadata.width }),
+                ...(metadata?.height && { height: metadata.height }),
+                ...(metadata?.duration && { duration: metadata.duration }),
+            };
+        }));
+        // Collect successful uploads
+        const successful = uploadResults
+            .filter((r) => r.status === "fulfilled")
+            .map((r) => r.value);
+        logger.info("[MediaUpload] R2 batch upload complete", {
+            total: files.length,
+            successful: successful.length,
+            failed: files.length - successful.length,
+            batchId,
+        });
+        // Queue reconciliation for successful uploads
+        if (successful.length > 0) {
+            const message = {
+                type: "BATCH_UPLOAD",
+                batchId,
+                timestamp: Date.now(),
+                uploads: successful,
+            };
+            await this.queue.send(message);
+            logger.info("[MediaUpload] Batch reconciliation queued", {
+                count: successful.length,
+                batchId,
+            });
+        }
+        // Return results
+        return uploadResults.map((result, index) => {
+            if (result.status === "fulfilled") {
+                return {
+                    success: true,
+                    contentHash: result.value.contentHash,
+                    url: `${this.apiDomain}/api/media/${result.value.contentHash}`,
+                    status: "uploaded",
+                };
+            }
+            else {
+                return {
+                    success: false,
+                    contentHash: "",
+                    url: "",
+                    status: "uploaded",
+                    warning: `Upload failed: ${result.reason.message}`,
+                };
+            }
+        });
+    }
+}
+exports.MediaUploadService = MediaUploadService;
+//# sourceMappingURL=media-upload-service.js.map

package/dist/lib/services/media-upload-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-upload-service.js","sourceRoot":"","sources":["../../../src/lib/services/media-upload-service.ts"],"names":[],"mappings":";;;AACA;;;;;;;;GAQG;AAEH,sCAAmC;AAOnC;;GAEG;AACH,SAAS,eAAe;IACtB,OAAO,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAAC,IAAiB;IAClD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IACzD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,SAAS,wBAAwB,CAAC,QAAgB;IAChD,MAAM,OAAO,GAA2B;QACtC,YAAY,EAAE,KAAK;QACnB,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,KAAK;QAClB,YAAY,EAAE,MAAM;QACpB,YAAY,EAAE,MAAM;QACpB,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,KAAK;QAClB,YAAY,EAAE,MAAM;QACpB,iBAAiB,EAAE,KAAK;KACzB,CAAC;IACF,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC;AACpC,CAAC;AAED,MAAa,kBAAkB;IACrB,QAAQ,CAAW;IACnB,KAAK,CAAoC;IACzC,SAAS,CAAS;IAClB,GAAG,CAAM;IAEjB,YAAY,GAAQ;QAClB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,eAAe,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,0BAA0B,CAAC;QAC5C,IAAI,CAAC,SAAS;YACZ,GAAG,CAAC,WAAW,KAAK,MAAM;gBACxB,CAAC,CAAC,yBAAyB;gBAC3B,CAAC,CAAC,qBAAqB,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,IAAU,EACV,MAAc,EACd,QAAiE,EACjE,aAA2B;QAE3B,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;QAElC,IAAI,CAAC;YACH,2BAA2B;YAC3B,yEAAyE;YACzE,wEAAwE;YACxE,MAAM,UAAU,GAAG,aAAa,IAAI,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAC7D,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;YAC1D,MAAM,GAAG,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,SAAS,WAAW,IAAI,GAAG,EAAE,CAAC;YAElD,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;gBAC3C,WAAW;gBACX,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM;gBACN,OAAO;aACR,CAAC,CAAC;YAEH,gCAAgC;YAChC,MAAM,UAAU,GAAoB;gBAClC,WAAW;gBACX,UAAU,EAAE,MAAM;gBAClB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,mBAAmB,EAAE,MAAM;gBAC3B,UAAU,EAAE,OAAO;gBACnB,OAAO;gBACP,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAC5D,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAC/D,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC;aACtE,CAAC;YAEF,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE;gBAC/C,YAAY,EAAE;oBACZ,WAAW,EAAE,IAAI,CAAC,IAAI;iBACvB;gBACD,cAAc,EAAE,UAA+C;aAChE,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;gBAChD,WAAW;gBACX,WAAW;aACZ,CAAC,CAAC;YAEH,yCAAyC;YACzC,MAAM,OAAO,GAA+B;gBAC1C,IAAI,EAAE,eAAe;gBACrB,OAAO;gBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,OAAO,EAAE;oBACP;wBACE,WAAW;wBACX,WAAW;wBACX,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,UAAU,EAAE,MAAM;wBAClB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACpC,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;wBACjD,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;wBACpD,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;qBAC3D;iBACF;aACF,CAAC;YAEF,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAE/B,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;gBACjD,WAAW;gBACX,OAAO;aACR,CAAC,CAAC;YAEH,gCAAgC;YAChC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,WAAW;gBACX,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,cAAc,WAAW,EAAE;gBACjD,MAAM,EAAE,UAAU;aACnB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC1C,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,MAAM;gBACN,QAAQ,EAAE,IAAI,CAAC,IAAI;aACpB,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,KAAa,EACb,MAAc,EACd,aAIE;QAEF,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;QAElC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;YACjD,SAAS,EAAE,KAAK,CAAC,MAAM;YACvB,MAAM;YACN,OAAO;SACR,CAAC,CAAC;QAEH,qCAAqC;QACrC,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,UAAU,CAC5C,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;YAC1D,MAAM,GAAG,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,SAAS,WAAW,IAAI,GAAG,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC,KAAK,CAAC,CAAC;YAExC,MAAM,UAAU,GAAoB;gBAClC,WAAW;gBACX,UAAU,EAAE,MAAM;gBAClB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,mBAAmB,EAAE,MAAM;gBAC3B,UAAU,EAAE,OAAO;gBACnB,OAAO;gBACP,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAC5D,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAC/D,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC;aACtE,CAAC;YAEF,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE;gBAC/C,YAAY,EAAE;oBACZ,WAAW,EAAE,IAAI,CAAC,IAAI;iBACvB;gBACD,cAAc,EAAE,UAA+C;aAChE,CAAC,CAAC;YAEH,OAAO;gBACL,WAAW;gBACX,WAAW;gBACX,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,UAAU,EAAE,MAAM;gBAClB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACjD,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpD,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;aAC3D,CAAC;QACJ,CAAC,CAAC,CACH,CAAC;QAEF,6BAA6B;QAC7B,MAAM,UAAU,GAAG,aAAa;aAC7B,MAAM,CAAC,CAAC,CAAC,EAAoC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC;aACzE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAEvB,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;YACpD,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,UAAU,EAAE,UAAU,CAAC,MAAM;YAC7B,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM;YACxC,OAAO;SACR,CAAC,CAAC;QAEH,8CAA8C;QAC9C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,OAAO,GAA+B;gBAC1C,IAAI,EAAE,cAAc;gBACpB,OAAO;gBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,OAAO,EAAE,UAAU;aACpB,CAAC;YAEF,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAE/B,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;gBACvD,KAAK,EAAE,UAAU,CAAC,MAAM;gBACxB,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAED,iBAAiB;QACjB,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACzC,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;oBACrC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,cAAc,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE;oBAC9D,MAAM,EAAE,UAAmB;iBAC5B,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,WAAW,EAAE,EAAE;oBACf,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE,UAAmB;oBAC3B,OAAO,EAAE,kBAAkB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;iBACnD,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AApOD,gDAoOC"}

package/dist/lib/services/user-data-deletion.d.ts

@@ -0,0 +1,30 @@
+import type { PrismaClient } from "@prisma/client";
+export interface DeletionResult {
+    commentSentiments: number;
+    postSentiments: number;
+    comments: number;
+    posts: number;
+    entities: number;
+    follows: number;
+    directMessages: number;
+    audienceMembers: number;
+    audiences: number;
+    securityEvents: number;
+    crossRegionConsents: number;
+    invitations: number;
+}
+/**
+ * Cascade-deletes all data owned by a user from the database.
+ *
+ * Does NOT delete:
+ * - Cognito identity (caller's responsibility)
+ * - S3 media files (caller's responsibility)
+ * - DynamoDB cache entries (caller's responsibility)
+ *
+ * Does NOT check authorization — caller must verify permissions.
+ *
+ * Models with onDelete: Cascade on the User relation (MfaEnrollment, LinkReport,
+ * UserEncryptionKey) are automatically deleted by the final user.delete().
+ */
+export declare function deleteUserData(db: PrismaClient, userId: string): Promise<DeletionResult>;
+//# sourceMappingURL=user-data-deletion.d.ts.map

package/dist/lib/services/user-data-deletion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-data-deletion.d.ts","sourceRoot":"","sources":["../../../src/lib/services/user-data-deletion.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,YAAY,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,cAAc,CAAC,CAqHzB"}

package/dist/lib/services/user-data-deletion.js

@@ -0,0 +1,118 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deleteUserData = deleteUserData;
+/**
+ * Cascade-deletes all data owned by a user from the database.
+ *
+ * Does NOT delete:
+ * - Cognito identity (caller's responsibility)
+ * - S3 media files (caller's responsibility)
+ * - DynamoDB cache entries (caller's responsibility)
+ *
+ * Does NOT check authorization — caller must verify permissions.
+ *
+ * Models with onDelete: Cascade on the User relation (MfaEnrollment, LinkReport,
+ * UserEncryptionKey) are automatically deleted by the final user.delete().
+ */
+async function deleteUserData(db, userId) {
+    // Delete related records first to avoid foreign key constraint violations.
+    // Order matters: delete child records before parent records.
+    // 1. Delete comment sentiments (references comments)
+    const commentSentiments = await db.commentSentiment.deleteMany({
+        where: { authorId: userId },
+    });
+    // 2. Delete post sentiments (references posts)
+    const postSentiments = await db.postSentiment.deleteMany({
+        where: { authorId: userId },
+    });
+    // 3. Delete comment media (references comments)
+    const userComments = await db.postComment.findMany({
+        where: { authorId: userId },
+        select: { id: true },
+    });
+    if (userComments.length > 0) {
+        const commentIds = userComments.map((c) => c.id);
+        await db.postCommentMedia.deleteMany({
+            where: { commentId: { in: commentIds } },
+        });
+    }
+    // 4. Delete comments
+    const comments = await db.postComment.deleteMany({
+        where: { authorId: userId },
+    });
+    // 5. Delete post-related records (junction tables, media)
+    const userPosts = await db.post.findMany({
+        where: { authorId: userId },
+        select: { id: true },
+    });
+    if (userPosts.length > 0) {
+        const postIds = userPosts.map((p) => p.id);
+        await db.postSubject.deleteMany({ where: { postId: { in: postIds } } });
+        await db.postTaxonomyTag.deleteMany({ where: { postId: { in: postIds } } });
+        await db.postMedia.deleteMany({ where: { postId: { in: postIds } } });
+    }
+    // 6. Delete posts
+    const posts = await db.post.deleteMany({
+        where: { authorId: userId },
+    });
+    // 7. Delete entity-related records
+    const userEntities = await db.entity.findMany({
+        where: { owners: { some: { userId: userId, status: 'ACTIVE' } } },
+        select: { id: true },
+    });
+    if (userEntities.length > 0) {
+        const entityIds = userEntities.map((e) => e.id);
+        await db.entityTaxonomyTag.deleteMany({
+            where: { entityId: { in: entityIds } },
+        });
+    }
+    // 8. Delete entity ownerships and entities
+    await db.entityOwnership.deleteMany({
+        where: { userId: userId },
+    });
+    const entities = await db.entity.deleteMany({
+        where: { owners: { none: {} } }, // Delete entities with no remaining owners
+    });
+    // 9. Follow relationships now handled by graph DB — no-op
+    // 10. Delete direct messages (sent and received)
+    const directMessages = await db.directMessage.deleteMany({
+        where: { OR: [{ senderId: userId }, { recipientId: userId }] },
+    });
+    // 11. Delete custom audience memberships
+    const audienceMembers = await db.customAudienceMember.deleteMany({
+        where: { memberId: userId },
+    });
+    // 12. Delete custom audiences created by user
+    const audiences = await db.customAudience.deleteMany({
+        where: { creatorId: userId },
+    });
+    // 13. Delete security events
+    const securityEvents = await db.securityEvent.deleteMany({
+        where: { userId },
+    });
+    // 14. Delete cross-region consents
+    const crossRegionConsents = await db.crossRegionConsent.deleteMany({
+        where: { userId },
+    });
+    // 15. Delete invitations (both created and used)
+    const invitations = await db.invitation.deleteMany({
+        where: { OR: [{ createdBy: userId }, { usedBy: userId }] },
+    });
+    // 16. Delete the user (cascades to MfaEnrollment, LinkReport, UserEncryptionKey)
+    await db.user.delete({ where: { id: userId } });
+    return {
+        commentSentiments: commentSentiments.count,
+        postSentiments: postSentiments.count,
+        comments: comments.count,
+        posts: posts.count,
+        entities: entities.count,
+        follows: 0, // Follow relationships now handled by graph DB
+        directMessages: directMessages.count,
+        audienceMembers: audienceMembers.count,
+        audiences: audiences.count,
+        securityEvents: securityEvents.count,
+        crossRegionConsents: crossRegionConsents.count,
+        invitations: invitations.count,
+    };
+}
+//# sourceMappingURL=user-data-deletion.js.map

package/dist/lib/services/user-data-deletion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-data-deletion.js","sourceRoot":"","sources":["../../../src/lib/services/user-data-deletion.ts"],"names":[],"mappings":";;AA8BA,wCAwHC;AArID;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,cAAc,CAClC,EAAgB,EAChB,MAAc;IAEd,2EAA2E;IAC3E,6DAA6D;IAE7D,qDAAqD;IACrD,MAAM,iBAAiB,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC;QAC7D,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;KAC5B,CAAC,CAAC;IAEH,+CAA+C;IAC/C,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC;QACvD,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;KAC5B,CAAC,CAAC;IAEH,gDAAgD;IAChD,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC;QACjD,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;KACrB,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC;YACnC,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;IAED,qBAAqB;IACrB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC;QAC/C,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;KAC5B,CAAC,CAAC;IAEH,0DAA0D;IAC1D,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;QACvC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;KACrB,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,kBAAkB;IAClB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;QACrC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;KAC5B,CAAC,CAAC;IAEH,mCAAmC;IACnC,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC5C,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;QACjE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;KACrB,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC;YACpC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;IAED,2CAA2C;IAC3C,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC;QAClC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;KAC1B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;QAC1C,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,2CAA2C;KAC7E,CAAC,CAAC;IAEH,0DAA0D;IAE1D,iDAAiD;IACjD,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC;QACvD,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE;KAC/D,CAAC,CAAC;IAEH,yCAAyC;IACzC,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,UAAU,CAAC;QAC/D,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;KAC5B,CAAC,CAAC;IAEH,8CAA8C;IAC9C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;QACnD,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;KAC7B,CAAC,CAAC;IAEH,6BAA6B;IAC7B,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC;QACvD,KAAK,EAAE,EAAE,MAAM,EAAE;KAClB,CAAC,CAAC;IAEH,mCAAmC;IACnC,MAAM,mBAAmB,GAAG,MAAM,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC;QACjE,KAAK,EAAE,EAAE,MAAM,EAAE;KAClB,CAAC,CAAC;IAEH,iDAAiD;IACjD,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QACjD,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE;KAC3D,CAAC,CAAC;IAEH,iFAAiF;IACjF,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAEhD,OAAO;QACL,iBAAiB,EAAE,iBAAiB,CAAC,KAAK;QAC1C,cAAc,EAAE,cAAc,CAAC,KAAK;QACpC,QAAQ,EAAE,QAAQ,CAAC,KAAK;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,QAAQ,CAAC,KAAK;QACxB,OAAO,EAAE,CAAC,EAAE,+CAA+C;QAC3D,cAAc,EAAE,cAAc,CAAC,KAAK;QACpC,eAAe,EAAE,eAAe,CAAC,KAAK;QACtC,SAAS,EAAE,SAAS,CAAC,KAAK;QAC1B,cAAc,EAAE,cAAc,CAAC,KAAK;QACpC,mBAAmB,EAAE,mBAAmB,CAAC,KAAK;QAC9C,WAAW,EAAE,WAAW,CAAC,KAAK;KAC/B,CAAC;AACJ,CAAC"}