@forklaunch/core 1.0.12 → 1.1.0

package/lib/openTelemetryCollector-DXGXRvQP.d.mts

@@ -0,0 +1,51 @@
+import { Counter, Gauge, Histogram, UpDownCounter, ObservableCounter, ObservableGauge, ObservableUpDownCounter } from '@opentelemetry/api';
+import { LevelWithSilentOrString, LevelWithSilent } from 'pino';
+
+type MetricType<T extends string> = T extends 'counter' ? Counter : T extends 'gauge' ? Gauge : T extends 'histogram' ? Histogram : T extends 'upDownCounter' ? UpDownCounter : T extends 'observableCounter' ? ObservableCounter : T extends 'observableGauge' ? ObservableGauge : T extends 'observableUpDownCounter' ? ObservableUpDownCounter : undefined;
+type MetricsDefinition = Record<string, 'counter' | 'gauge' | 'histogram' | 'upDownCounter' | 'observableCounter' | 'observableGauge' | 'observableUpDownCounter'>;
+type LoggerMeta = Record<string, unknown> & {
+    _meta: true;
+};
+interface LogFn {
+    <T extends object>(obj: T | LoggerMeta, msg?: string | LoggerMeta, ...args: unknown[]): void;
+    (obj: unknown | LoggerMeta, msg?: string | LoggerMeta, ...args: unknown[]): void;
+    (msg: string | LoggerMeta, ...args: unknown[]): void;
+}
+interface TelemetryOptions {
+    enabled: boolean | {
+        metrics?: boolean;
+        tracing?: boolean;
+        logging?: boolean;
+    };
+    level: LevelWithSilentOrString;
+}
+
+declare class OpenTelemetryCollector<AppliedMetricsDefinition extends MetricsDefinition> {
+    #private;
+    constructor(serviceName: string, level?: LevelWithSilentOrString, metricDefinitions?: AppliedMetricsDefinition);
+    log(level: LevelWithSilent, ...args: (string | unknown | LoggerMeta)[]): void;
+    info: LogFn;
+    error: LogFn;
+    warn: LogFn;
+    debug: LogFn;
+    trace: LogFn;
+    getMetric<T extends keyof AppliedMetricsDefinition>(metricId: T): MetricType<AppliedMetricsDefinition[T]>;
+}
+declare const httpRequestsTotalCounter: Counter<{
+    "service.name": string;
+    application_id?: string;
+    "api.name": string;
+    "http.request.method": string;
+    "http.route": string;
+    "http.response.status_code": number;
+}>;
+declare const httpServerDurationHistogram: Histogram<{
+    "service.name": string;
+    application_id?: string;
+    "api.name": string;
+    "http.request.method": string;
+    "http.route": string;
+    "http.response.status_code": number;
+}>;
+
+export { type LoggerMeta as L, type MetricsDefinition as M, OpenTelemetryCollector as O, type TelemetryOptions as T, type LogFn as a, type MetricType as b, httpServerDurationHistogram as c, httpRequestsTotalCounter as h };

package/lib/openTelemetryCollector-DXGXRvQP.d.ts

@@ -0,0 +1,51 @@
+import { Counter, Gauge, Histogram, UpDownCounter, ObservableCounter, ObservableGauge, ObservableUpDownCounter } from '@opentelemetry/api';
+import { LevelWithSilentOrString, LevelWithSilent } from 'pino';
+
+type MetricType<T extends string> = T extends 'counter' ? Counter : T extends 'gauge' ? Gauge : T extends 'histogram' ? Histogram : T extends 'upDownCounter' ? UpDownCounter : T extends 'observableCounter' ? ObservableCounter : T extends 'observableGauge' ? ObservableGauge : T extends 'observableUpDownCounter' ? ObservableUpDownCounter : undefined;
+type MetricsDefinition = Record<string, 'counter' | 'gauge' | 'histogram' | 'upDownCounter' | 'observableCounter' | 'observableGauge' | 'observableUpDownCounter'>;
+type LoggerMeta = Record<string, unknown> & {
+    _meta: true;
+};
+interface LogFn {
+    <T extends object>(obj: T | LoggerMeta, msg?: string | LoggerMeta, ...args: unknown[]): void;
+    (obj: unknown | LoggerMeta, msg?: string | LoggerMeta, ...args: unknown[]): void;
+    (msg: string | LoggerMeta, ...args: unknown[]): void;
+}
+interface TelemetryOptions {
+    enabled: boolean | {
+        metrics?: boolean;
+        tracing?: boolean;
+        logging?: boolean;
+    };
+    level: LevelWithSilentOrString;
+}
+
+declare class OpenTelemetryCollector<AppliedMetricsDefinition extends MetricsDefinition> {
+    #private;
+    constructor(serviceName: string, level?: LevelWithSilentOrString, metricDefinitions?: AppliedMetricsDefinition);
+    log(level: LevelWithSilent, ...args: (string | unknown | LoggerMeta)[]): void;
+    info: LogFn;
+    error: LogFn;
+    warn: LogFn;
+    debug: LogFn;
+    trace: LogFn;
+    getMetric<T extends keyof AppliedMetricsDefinition>(metricId: T): MetricType<AppliedMetricsDefinition[T]>;
+}
+declare const httpRequestsTotalCounter: Counter<{
+    "service.name": string;
+    application_id?: string;
+    "api.name": string;
+    "http.request.method": string;
+    "http.route": string;
+    "http.response.status_code": number;
+}>;
+declare const httpServerDurationHistogram: Histogram<{
+    "service.name": string;
+    application_id?: string;
+    "api.name": string;
+    "http.request.method": string;
+    "http.route": string;
+    "http.response.status_code": number;
+}>;
+
+export { type LoggerMeta as L, type MetricsDefinition as M, OpenTelemetryCollector as O, type TelemetryOptions as T, type LogFn as a, type MetricType as b, httpServerDurationHistogram as c, httpRequestsTotalCounter as h };

package/lib/persistence/index.d.mts

@@ -1,5 +1,4 @@
-import * as _mikro_orm_core from '@mikro-orm/core';
-import { PropertyBuilders, PropertyChain, EmptyOptions, EntityMetadataWithProperties, EventSubscriber, EventArgs, FilterDef, EntityManager, MikroORM } from '@mikro-orm/core';
+import { PropertyBuilders, PropertyChain, EmptyOptions, EntityMetadataWithProperties, EntitySchemaWithMeta, InferEntityFromProperties, EventSubscriber, EventArgs, FilterDef, EntityManager, MikroORM } from '@mikro-orm/core';
 export { InferEntity } from '@mikro-orm/core';
 
 declare const ComplianceLevel: {
@@ -12,20 +11,35 @@ type ComplianceLevel = (typeof ComplianceLevel)[keyof typeof ComplianceLevel];
 declare function getComplianceMetadata(entityName: string, fieldName: string): ComplianceLevel;
 declare function getEntityComplianceFields(entityName: string): Map<string, ComplianceLevel> | undefined;
 declare function entityHasEncryptedFields(entityName: string): boolean;
+declare const RetentionAction: {
+    readonly delete: "delete";
+    readonly anonymize: "anonymize";
+};
+type RetentionAction = (typeof RetentionAction)[keyof typeof RetentionAction];
+interface RetentionPolicy {
+    duration: string;
+    action: RetentionAction;
+}
+declare const RetentionDuration: {
+    readonly days: (n: number) => string;
+    readonly months: (n: number) => string;
+    readonly years: (n: number) => string;
+};
+declare function parseDuration(iso: string): number;
+declare function getEntityRetention(entityName: string): RetentionPolicy | undefined;
+declare function getAllRetentionPolicies(): ReadonlyMap<string, RetentionPolicy>;
 /**
  * Tagged wrapper returned by `.compliance()`.
  * `__inner` is the EXACT MikroORM builder type.
  * `defineComplianceEntity` checks for this wrapper and extracts `__inner`.
  */
-interface ClassifiedProperty<Builder = unknown> {
+interface ClassifiedProperty<Builder = unknown, Value = unknown, Options = unknown> {
     readonly __inner: Builder;
     readonly __compliance: ComplianceLevel;
-    readonly '~type'?: Builder extends {
-        '~type'?: infer T;
-    } ? T : unknown;
-    readonly '~options': Builder extends {
-        '~options': infer O;
-    } ? O : unknown;
+    readonly '~type'?: {
+        value: Value;
+    };
+    readonly '~options': Options;
 }
 /**
  * For each property, if it's a ClassifiedProperty, extract __inner.
@@ -46,10 +60,15 @@ type WithCompliance<T> = {
         '~options': unknown;
     } ? (...args: A) => WithCompliance<R> : T[K] : T[K];
 } & {
-    compliance(level: ComplianceLevel): ClassifiedProperty<T>;
+    compliance(level: ComplianceLevel): T extends {
+        '~type'?: {
+            value: infer V;
+        };
+        '~options': infer O;
+    } ? ClassifiedProperty<T, V, O> : ClassifiedProperty<T>;
 };
 type RelationBuilderKeys = 'manyToOne' | 'oneToMany' | 'manyToMany' | 'oneToOne' | 'embedded';
-type GenericBuilderKeys = 'json' | 'formula' | 'type';
+type GenericBuilderKeys = 'json' | 'formula' | 'type' | 'enum' | 'bigint' | 'array' | 'decimal';
 /**
  * Each scalar method wraps the EXACT MikroORM return type with
  * WithCompliance. Relations pass through unchanged.
@@ -63,6 +82,12 @@ type ForklaunchPropertyBuilders = {
     json: <T>() => WithCompliance<PropertyChain<T, EmptyOptions>>;
     formula: <T>(formula: string | ((...args: never[]) => string)) => WithCompliance<PropertyChain<T, EmptyOptions>>;
     type: <T>(type: T) => WithCompliance<PropertyChain<T, EmptyOptions>>;
+    enum: <const T extends (number | string)[] | (() => Record<string, any>)>(items?: T) => WithCompliance<PropertyChain<T extends () => Record<string, any> ? T extends () => infer R ? R[keyof R] : never : T extends (infer Value)[] ? Value : T, EmptyOptions & {
+        kind: 'enum';
+    }>>;
+    bigint: <Mode extends 'bigint' | 'number' | 'string' = 'bigint'>(mode?: Mode) => WithCompliance<PropertyChain<Mode extends 'bigint' ? bigint : Mode extends 'number' ? number : string, EmptyOptions>>;
+    array: <T = string>(toJsValue?: (i: string) => T, toDbValue?: (i: T) => string) => WithCompliance<PropertyChain<T[], EmptyOptions>>;
+    decimal: <Mode extends 'number' | 'string' = 'string'>(mode?: Mode) => WithCompliance<PropertyChain<Mode extends 'number' ? number : string, EmptyOptions>>;
 };
 
 /**
@@ -93,13 +118,9 @@ declare const fp: ForklaunchPropertyBuilders;
 type ValidateProperties<T> = {
     [K in keyof T]: T[K] extends ClassifiedProperty ? T[K] : T[K] extends (...args: never[]) => unknown ? T[K] : ClassifiedProperty;
 };
-/**
- * Wrapper around defineEntity. Validates compliance on input.
- * ClassifiedProperty forwards ~type and ~options from the inner builder,
- * so InferBuilderValue works directly. Return type is inferred by
- * defineEntity — same leniency as plain defineEntity.
- */
-declare function defineComplianceEntity<const TName extends string, const TTableName extends string, const TProperties extends Record<string, unknown>, const TPK extends (keyof TProperties)[] | undefined = undefined, const TBase = never, const TRepository = never, const TForceObject extends boolean = false>(meta: EntityMetadataWithProperties<TName, TTableName, TProperties & ValidateProperties<TProperties>, TPK, TBase, TRepository, TForceObject>): _mikro_orm_core.EntitySchemaWithMeta<TName, TTableName, _mikro_orm_core.InferEntityFromProperties<TProperties & ValidateProperties<TProperties>, TPK, TBase, TRepository, TForceObject>, TBase, TProperties & ValidateProperties<TProperties>, _mikro_orm_core.EntityCtor<_mikro_orm_core.InferEntityFromProperties<TProperties & ValidateProperties<TProperties>, TPK, TBase, TRepository, TForceObject>>>;
+declare function defineComplianceEntity<const TName extends string, const TTableName extends string, const TProperties extends Record<string, unknown>, const TPK extends (keyof TProperties)[] | undefined = undefined, const TBase = never, const TRepository = never, const TForceObject extends boolean = false>(meta: EntityMetadataWithProperties<TName, TTableName, TProperties & ValidateProperties<TProperties>, TPK, TBase, TRepository, TForceObject> & {
+    retention?: RetentionPolicy;
+}): EntitySchemaWithMeta<TName, TTableName, InferEntityFromProperties<TProperties, TPK, TBase, TRepository, TForceObject>, TBase, TProperties>;
 
 declare class FieldEncryptor {
     private readonly masterKey;
@@ -248,4 +269,4 @@ declare class RlsEventSubscriber implements EventSubscriber {
  */
 declare function setupRls(orm: MikroORM, config?: RlsConfig): void;
 
-export { type ClassifiedProperty, ComplianceEventSubscriber, ComplianceLevel, ComplianceLevel as ComplianceLevelType, type ExtractInner, type ForklaunchPropertyBuilders, type RlsConfig, RlsEventSubscriber, TENANT_FILTER_NAME, type WithCompliance, createTenantFilterDef, defineComplianceEntity, entityHasEncryptedFields, fp, getComplianceMetadata, getEntityComplianceFields, getSuperAdminContext, setupRls, setupTenantFilter, wrapEmWithNativeQueryBlocking };
+export { type ClassifiedProperty, ComplianceEventSubscriber, ComplianceLevel, ComplianceLevel as ComplianceLevelType, type ExtractInner, type ForklaunchPropertyBuilders, RetentionAction, RetentionAction as RetentionActionType, RetentionDuration, type RetentionPolicy, type RlsConfig, RlsEventSubscriber, TENANT_FILTER_NAME, type WithCompliance, createTenantFilterDef, defineComplianceEntity, entityHasEncryptedFields, fp, getAllRetentionPolicies, getComplianceMetadata, getEntityComplianceFields, getEntityRetention, getSuperAdminContext, parseDuration, setupRls, setupTenantFilter, wrapEmWithNativeQueryBlocking };

package/lib/persistence/index.d.ts

@@ -1,5 +1,4 @@
-import * as _mikro_orm_core from '@mikro-orm/core';
-import { PropertyBuilders, PropertyChain, EmptyOptions, EntityMetadataWithProperties, EventSubscriber, EventArgs, FilterDef, EntityManager, MikroORM } from '@mikro-orm/core';
+import { PropertyBuilders, PropertyChain, EmptyOptions, EntityMetadataWithProperties, EntitySchemaWithMeta, InferEntityFromProperties, EventSubscriber, EventArgs, FilterDef, EntityManager, MikroORM } from '@mikro-orm/core';
 export { InferEntity } from '@mikro-orm/core';
 
 declare const ComplianceLevel: {
@@ -12,20 +11,35 @@ type ComplianceLevel = (typeof ComplianceLevel)[keyof typeof ComplianceLevel];
 declare function getComplianceMetadata(entityName: string, fieldName: string): ComplianceLevel;
 declare function getEntityComplianceFields(entityName: string): Map<string, ComplianceLevel> | undefined;
 declare function entityHasEncryptedFields(entityName: string): boolean;
+declare const RetentionAction: {
+    readonly delete: "delete";
+    readonly anonymize: "anonymize";
+};
+type RetentionAction = (typeof RetentionAction)[keyof typeof RetentionAction];
+interface RetentionPolicy {
+    duration: string;
+    action: RetentionAction;
+}
+declare const RetentionDuration: {
+    readonly days: (n: number) => string;
+    readonly months: (n: number) => string;
+    readonly years: (n: number) => string;
+};
+declare function parseDuration(iso: string): number;
+declare function getEntityRetention(entityName: string): RetentionPolicy | undefined;
+declare function getAllRetentionPolicies(): ReadonlyMap<string, RetentionPolicy>;
 /**
  * Tagged wrapper returned by `.compliance()`.
  * `__inner` is the EXACT MikroORM builder type.
  * `defineComplianceEntity` checks for this wrapper and extracts `__inner`.
  */
-interface ClassifiedProperty<Builder = unknown> {
+interface ClassifiedProperty<Builder = unknown, Value = unknown, Options = unknown> {
     readonly __inner: Builder;
     readonly __compliance: ComplianceLevel;
-    readonly '~type'?: Builder extends {
-        '~type'?: infer T;
-    } ? T : unknown;
-    readonly '~options': Builder extends {
-        '~options': infer O;
-    } ? O : unknown;
+    readonly '~type'?: {
+        value: Value;
+    };
+    readonly '~options': Options;
 }
 /**
  * For each property, if it's a ClassifiedProperty, extract __inner.
@@ -46,10 +60,15 @@ type WithCompliance<T> = {
         '~options': unknown;
     } ? (...args: A) => WithCompliance<R> : T[K] : T[K];
 } & {
-    compliance(level: ComplianceLevel): ClassifiedProperty<T>;
+    compliance(level: ComplianceLevel): T extends {
+        '~type'?: {
+            value: infer V;
+        };
+        '~options': infer O;
+    } ? ClassifiedProperty<T, V, O> : ClassifiedProperty<T>;
 };
 type RelationBuilderKeys = 'manyToOne' | 'oneToMany' | 'manyToMany' | 'oneToOne' | 'embedded';
-type GenericBuilderKeys = 'json' | 'formula' | 'type';
+type GenericBuilderKeys = 'json' | 'formula' | 'type' | 'enum' | 'bigint' | 'array' | 'decimal';
 /**
  * Each scalar method wraps the EXACT MikroORM return type with
  * WithCompliance. Relations pass through unchanged.
@@ -63,6 +82,12 @@ type ForklaunchPropertyBuilders = {
     json: <T>() => WithCompliance<PropertyChain<T, EmptyOptions>>;
     formula: <T>(formula: string | ((...args: never[]) => string)) => WithCompliance<PropertyChain<T, EmptyOptions>>;
     type: <T>(type: T) => WithCompliance<PropertyChain<T, EmptyOptions>>;
+    enum: <const T extends (number | string)[] | (() => Record<string, any>)>(items?: T) => WithCompliance<PropertyChain<T extends () => Record<string, any> ? T extends () => infer R ? R[keyof R] : never : T extends (infer Value)[] ? Value : T, EmptyOptions & {
+        kind: 'enum';
+    }>>;
+    bigint: <Mode extends 'bigint' | 'number' | 'string' = 'bigint'>(mode?: Mode) => WithCompliance<PropertyChain<Mode extends 'bigint' ? bigint : Mode extends 'number' ? number : string, EmptyOptions>>;
+    array: <T = string>(toJsValue?: (i: string) => T, toDbValue?: (i: T) => string) => WithCompliance<PropertyChain<T[], EmptyOptions>>;
+    decimal: <Mode extends 'number' | 'string' = 'string'>(mode?: Mode) => WithCompliance<PropertyChain<Mode extends 'number' ? number : string, EmptyOptions>>;
 };
 
 /**
@@ -93,13 +118,9 @@ declare const fp: ForklaunchPropertyBuilders;
 type ValidateProperties<T> = {
     [K in keyof T]: T[K] extends ClassifiedProperty ? T[K] : T[K] extends (...args: never[]) => unknown ? T[K] : ClassifiedProperty;
 };
-/**
- * Wrapper around defineEntity. Validates compliance on input.
- * ClassifiedProperty forwards ~type and ~options from the inner builder,
- * so InferBuilderValue works directly. Return type is inferred by
- * defineEntity — same leniency as plain defineEntity.
- */
-declare function defineComplianceEntity<const TName extends string, const TTableName extends string, const TProperties extends Record<string, unknown>, const TPK extends (keyof TProperties)[] | undefined = undefined, const TBase = never, const TRepository = never, const TForceObject extends boolean = false>(meta: EntityMetadataWithProperties<TName, TTableName, TProperties & ValidateProperties<TProperties>, TPK, TBase, TRepository, TForceObject>): _mikro_orm_core.EntitySchemaWithMeta<TName, TTableName, _mikro_orm_core.InferEntityFromProperties<TProperties & ValidateProperties<TProperties>, TPK, TBase, TRepository, TForceObject>, TBase, TProperties & ValidateProperties<TProperties>, _mikro_orm_core.EntityCtor<_mikro_orm_core.InferEntityFromProperties<TProperties & ValidateProperties<TProperties>, TPK, TBase, TRepository, TForceObject>>>;
+declare function defineComplianceEntity<const TName extends string, const TTableName extends string, const TProperties extends Record<string, unknown>, const TPK extends (keyof TProperties)[] | undefined = undefined, const TBase = never, const TRepository = never, const TForceObject extends boolean = false>(meta: EntityMetadataWithProperties<TName, TTableName, TProperties & ValidateProperties<TProperties>, TPK, TBase, TRepository, TForceObject> & {
+    retention?: RetentionPolicy;
+}): EntitySchemaWithMeta<TName, TTableName, InferEntityFromProperties<TProperties, TPK, TBase, TRepository, TForceObject>, TBase, TProperties>;
 
 declare class FieldEncryptor {
     private readonly masterKey;
@@ -248,4 +269,4 @@ declare class RlsEventSubscriber implements EventSubscriber {
  */
 declare function setupRls(orm: MikroORM, config?: RlsConfig): void;
 
-export { type ClassifiedProperty, ComplianceEventSubscriber, ComplianceLevel, ComplianceLevel as ComplianceLevelType, type ExtractInner, type ForklaunchPropertyBuilders, type RlsConfig, RlsEventSubscriber, TENANT_FILTER_NAME, type WithCompliance, createTenantFilterDef, defineComplianceEntity, entityHasEncryptedFields, fp, getComplianceMetadata, getEntityComplianceFields, getSuperAdminContext, setupRls, setupTenantFilter, wrapEmWithNativeQueryBlocking };
+export { type ClassifiedProperty, ComplianceEventSubscriber, ComplianceLevel, ComplianceLevel as ComplianceLevelType, type ExtractInner, type ForklaunchPropertyBuilders, RetentionAction, RetentionAction as RetentionActionType, RetentionDuration, type RetentionPolicy, type RlsConfig, RlsEventSubscriber, TENANT_FILTER_NAME, type WithCompliance, createTenantFilterDef, defineComplianceEntity, entityHasEncryptedFields, fp, getAllRetentionPolicies, getComplianceMetadata, getEntityComplianceFields, getEntityRetention, getSuperAdminContext, parseDuration, setupRls, setupTenantFilter, wrapEmWithNativeQueryBlocking };

package/lib/persistence/index.js

@@ -22,15 +22,20 @@ var persistence_exports = {};
 __export(persistence_exports, {
   ComplianceEventSubscriber: () => ComplianceEventSubscriber,
   ComplianceLevel: () => ComplianceLevel,
+  RetentionAction: () => RetentionAction,
+  RetentionDuration: () => RetentionDuration,
   RlsEventSubscriber: () => RlsEventSubscriber,
   TENANT_FILTER_NAME: () => TENANT_FILTER_NAME,
   createTenantFilterDef: () => createTenantFilterDef,
   defineComplianceEntity: () => defineComplianceEntity,
   entityHasEncryptedFields: () => entityHasEncryptedFields,
   fp: () => fp,
+  getAllRetentionPolicies: () => getAllRetentionPolicies,
   getComplianceMetadata: () => getComplianceMetadata,
   getEntityComplianceFields: () => getEntityComplianceFields,
+  getEntityRetention: () => getEntityRetention,
   getSuperAdminContext: () => getSuperAdminContext,
+  parseDuration: () => parseDuration,
   setupRls: () => setupRls,
   setupTenantFilter: () => setupTenantFilter,
   wrapEmWithNativeQueryBlocking: () => wrapEmWithNativeQueryBlocking
@@ -63,6 +68,47 @@ function entityHasEncryptedFields(entityName) {
   }
   return false;
 }
+var RetentionAction = {
+  delete: "delete",
+  anonymize: "anonymize"
+};
+var RetentionDuration = {
+  days: (n) => `P${n}D`,
+  months: (n) => `P${n}M`,
+  years: (n) => `P${n}Y`
+};
+var DURATION_REGEX = /^P(?:(\d+)Y)?(?:(\d+)M)?(?:(\d+)D)?$/;
+var MS_PER_DAY = 864e5;
+var MIN_DURATION_MS = MS_PER_DAY;
+function parseDuration(iso) {
+  const match = DURATION_REGEX.exec(iso);
+  if (!match) {
+    throw new Error(
+      `Invalid ISO 8601 duration: '${iso}'. Expected format: P[n]Y[n]M[n]D`
+    );
+  }
+  const years = parseInt(match[1] || "0", 10);
+  const months = parseInt(match[2] || "0", 10);
+  const days = parseInt(match[3] || "0", 10);
+  const totalDays = years * 365 + months * 30 + days;
+  const ms = totalDays * MS_PER_DAY;
+  if (ms < MIN_DURATION_MS) {
+    throw new Error(
+      `Retention duration must be >= 1 day (P1D). Got: '${iso}' (${totalDays} days)`
+    );
+  }
+  return ms;
+}
+var retentionRegistry = /* @__PURE__ */ new Map();
+function registerEntityRetention(entityName, policy) {
+  retentionRegistry.set(entityName, policy);
+}
+function getEntityRetention(entityName) {
+  return retentionRegistry.get(entityName);
+}
+function getAllRetentionPolicies() {
+  return retentionRegistry;
+}
 
 // src/persistence/compliancePropertyBuilder.ts
 var import_core = require("@mikro-orm/core");
@@ -168,7 +214,19 @@ function defineComplianceEntity(meta) {
     complianceFields.set(fieldName, level);
   }
   registerEntityCompliance(entityName, complianceFields);
-  return (0, import_core2.defineEntity)(meta);
+  if (meta.retention) {
+    parseDuration(meta.retention.duration);
+    if (!resolvedProperties["createdAt"]) {
+      throw new Error(
+        `Entity '${entityName}' has a retention policy but no 'createdAt' property. Retention requires createdAt to compute expiration.`
+      );
+    }
+    registerEntityRetention(entityName, meta.retention);
+  }
+  const { retention: _retention, ...mikroMeta } = meta;
+  return (0, import_core2.defineEntity)(
+    mikroMeta
+  );
 }
 
 // src/encryption/fieldEncryptor.ts
@@ -449,15 +507,20 @@ function escapeSqlString(value) {
 0 && (module.exports = {
   ComplianceEventSubscriber,
   ComplianceLevel,
+  RetentionAction,
+  RetentionDuration,
   RlsEventSubscriber,
   TENANT_FILTER_NAME,
   createTenantFilterDef,
   defineComplianceEntity,
   entityHasEncryptedFields,
   fp,
+  getAllRetentionPolicies,
   getComplianceMetadata,
   getEntityComplianceFields,
+  getEntityRetention,
   getSuperAdminContext,
+  parseDuration,
   setupRls,
   setupTenantFilter,
   wrapEmWithNativeQueryBlocking