@hiai-gg/docsmint 0.4.4 → 0.4.6

package/dist/lifecycle-runtime.js

@@ -538,6 +538,10 @@ function tokenHash(token) {
 function subjectHash(actorUserId) {
   return new Bun.CryptoHasher("sha256").update(actorUserId).digest("hex");
 }
+function lifecycleTombstoneEmail(actorUserId) {
+  const hash = new Bun.CryptoHasher("sha256").update("docsmint:privacy-tombstone:v1\x00").update(actorUserId).digest("hex");
+  return `deleted-${hash}@invalid.local`;
+}
 function checksumLine(hash, record) {
   hash.update(`${JSON.stringify(record)}
 `, "utf8");
@@ -634,6 +638,77 @@ function createPersistentLifecycleService(runtime, database, hostSteps = []) {
       checksumLine(hash, manifest);
       recordCount += 1;
       yield manifest;
+      const actor = await withActor(ctx.actorUserId, (tx) => tx.select({
+        id: users.id,
+        email: users.email,
+        name: users.name,
+        emailVerified: users.emailVerified,
+        image: users.image,
+        createdAt: users.createdAt,
+        updatedAt: users.updatedAt
+      }).from(users).where(eq(users.id, ctx.actorUserId)).limit(1));
+      for (const profile of actor) {
+        const record = {
+          type: "data",
+          domain: "account",
+          resourceType: "user",
+          resourceId: profile.id,
+          workspaceId: null,
+          payload: {
+            email: profile.email,
+            name: profile.name,
+            emailVerified: profile.emailVerified,
+            image: profile.image,
+            createdAt: profile.createdAt,
+            updatedAt: profile.updatedAt
+          }
+        };
+        checksumLine(hash, record);
+        recordCount += 1;
+        yield record;
+      }
+      const actorFolders = await withActor(ctx.actorUserId, (tx) => tx.select().from(folders).where(eq(folders.ownerId, ctx.actorUserId)));
+      for (const folder of actorFolders) {
+        const record = {
+          type: "data",
+          domain: "folders",
+          resourceType: "folder",
+          resourceId: folder.id,
+          workspaceId: folder.workspaceId,
+          payload: folder
+        };
+        checksumLine(hash, record);
+        recordCount += 1;
+        yield record;
+      }
+      const actorTags = await withActor(ctx.actorUserId, (tx) => tx.select().from(tags).where(eq(tags.ownerId, ctx.actorUserId)));
+      for (const tag of actorTags) {
+        const record = {
+          type: "data",
+          domain: "tags",
+          resourceType: "tag",
+          resourceId: tag.id,
+          workspaceId: tag.workspaceId,
+          payload: tag
+        };
+        checksumLine(hash, record);
+        recordCount += 1;
+        yield record;
+      }
+      const actorCategories = await withActor(ctx.actorUserId, (tx) => tx.select().from(categories).where(eq(categories.ownerId, ctx.actorUserId)));
+      for (const category of actorCategories) {
+        const record = {
+          type: "data",
+          domain: "categories",
+          resourceType: "category",
+          resourceId: category.id,
+          workspaceId: category.workspaceId,
+          payload: category
+        };
+        checksumLine(hash, record);
+        recordCount += 1;
+        yield record;
+      }
       const ownedDocuments = await withActor(ctx.actorUserId, (tx) => tx.select().from(documents).where(eq(documents.ownerId, ctx.actorUserId)));
       for (const document of ownedDocuments) {
         throwIfAborted(ctx.signal);
@@ -733,12 +808,24 @@ function createPersistentLifecycleService(runtime, database, hostSteps = []) {
           storageKey: attachments.storageKey
         }).from(attachments).where(inArray(attachments.documentId, documentIds))) : [];
         await runStep(operation, ctx.actorUserId, leaseOwner, "delete_attachment_objects", deletedByDomain, () => runtime.deleteObjects(objectRows.map((row) => row.storageKey), ctx.signal));
+        await runStep(operation, ctx.actorUserId, leaseOwner, "remove_subject_folders", deletedByDomain, () => dbDelete((tx) => tx.delete(folders).where(eq(folders.ownerId, ctx.actorUserId)).returning({ id: folders.id })));
+        await runStep(operation, ctx.actorUserId, leaseOwner, "remove_subject_tags", deletedByDomain, () => dbDelete((tx) => tx.delete(tags).where(eq(tags.ownerId, ctx.actorUserId)).returning({ id: tags.id })));
+        await runStep(operation, ctx.actorUserId, leaseOwner, "remove_subject_categories", deletedByDomain, () => dbDelete((tx) => tx.delete(categories).where(eq(categories.ownerId, ctx.actorUserId)).returning({ id: categories.id })));
         await runStep(operation, ctx.actorUserId, leaseOwner, "remove_attachment_rows", deletedByDomain, () => objectRows.length ? dbDelete((tx) => tx.delete(attachments).where(inArray(attachments.id, objectRows.map((row) => row.id))).returning({ id: attachments.id })) : Promise.resolve(0));
         await runStep(operation, ctx.actorUserId, leaseOwner, "remove_subject_documents", deletedByDomain, () => dbDelete((tx) => tx.delete(documents).where(eq(documents.ownerId, ctx.actorUserId)).returning({ id: documents.id })));
         await runStep(operation, ctx.actorUserId, leaseOwner, "clear_redis_state", deletedByDomain, () => runtime.clearAccountRedisState(ctx.actorUserId, ctx.signal));
         for (const step of orderedSteps)
           if (step.purge)
             await runStep(operation, ctx.actorUserId, leaseOwner, `host:${step.id}`, deletedByDomain, async () => (await step.purge?.(ctx))?.deletedCount ?? 0);
+        await runStep(operation, ctx.actorUserId, leaseOwner, "remove_auth_sessions", deletedByDomain, () => dbDelete((tx) => tx.delete(sessions).where(eq(sessions.userId, ctx.actorUserId)).returning({ id: sessions.id })));
+        await runStep(operation, ctx.actorUserId, leaseOwner, "remove_auth_accounts", deletedByDomain, () => dbDelete((tx) => tx.delete(accounts).where(eq(accounts.userId, ctx.actorUserId)).returning({ id: accounts.id })));
+        await runStep(operation, ctx.actorUserId, leaseOwner, "tombstone_subject_user", deletedByDomain, () => dbDelete((tx) => tx.update(users).set({
+          email: lifecycleTombstoneEmail(ctx.actorUserId),
+          name: null,
+          image: null,
+          emailVerified: false,
+          updatedAt: new Date
+        }).where(eq(users.id, ctx.actorUserId)).returning({ id: users.id })));
         await runStep(operation, ctx.actorUserId, leaseOwner, "write_deletion_audit", deletedByDomain, async () => {
           await withActor(ctx.actorUserId, (tx) => tx.insert(auditLog).values({
             actorId: ctx.actorUserId,
@@ -803,6 +890,7 @@ function createPersistentLifecycleRuntime(options) {
 }
 export {
   requireLeaseWrite,
+  lifecycleTombstoneEmail,
   createPersistentLifecycleService,
   createPersistentLifecycleRuntime,
   bindPersistentLifecycle,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hiai-gg/docsmint",
-  "version": "0.4.4",
+  "version": "0.4.6",
   "type": "module",
   "browser": {
     "./dist/backend-launcher.js": false,
@@ -10,7 +10,8 @@
     "./dist/pipeline-cancellation.js": false,
     "./dist/storage-quota.js": false,
     "./dist/workspace.js": false,
-    "./dist/backend-pipeline-cancellation.js": false
+    "./dist/backend-pipeline-cancellation.js": false,
+    "./dist/backend-account-runtime-cleanup.js": false
   },
   "license": "Apache-2.0",
   "description": "The lightweight, AI-native self-hosted knowledge base — built-in RAG, hybrid semantic search, and a clean REST API for AI agents.",
@@ -306,6 +307,11 @@
       "browser": "./dist/server-only-browser-entry.js",
       "import": "./dist/backend-pipeline-cancellation.js",
       "types": "./dist/backend-pipeline-cancellation.d.ts"
+    },
+    "./backend/account-runtime-cleanup": {
+      "browser": "./dist/server-only-browser-entry.js",
+      "import": "./dist/backend-account-runtime-cleanup.js",
+      "types": "./dist/backend-account-runtime-cleanup.d.ts"
     }
   },
   "bin": {
@@ -352,12 +358,12 @@
     "@modelcontextprotocol/sdk": "^1.12.1",
     "bullmq": "^5.80.2",
     "commander": "^13.1.0",
+    "ioredis": "^5.11.1",
     "zod": "^4.0.0"
   },
   "peerDependencies": {
     "drizzle-orm": "^0.45.2",
     "postgres": "^3.4.9",
-    "ioredis": "^5.4.0",
     "@aws-sdk/client-s3": "^3.0.0",
     "pino": "^10.0.0",
     "@sveltejs/kit": "^2.68.0",
@@ -370,9 +376,6 @@
     "postgres": {
       "optional": true
     },
-    "ioredis": {
-      "optional": true
-    },
     "@aws-sdk/client-s3": {
       "optional": true
     },

package/packages/cli/src/index.ts

@@ -24,7 +24,7 @@ import { registerSearch } from "./commands/search.js";
 import { registerSnapshot } from "./commands/snapshot.js";
 import { registerUpdate } from "./commands/update.js";
 
-const VERSION = "0.4.4";
+const VERSION = "0.4.6";
 
 const program = new Command();
 program

package/packages/mcp-server/src/index.ts

@@ -35,7 +35,7 @@ interface McpToolResult {
 
 const server = new McpServer({
 	name: "hiai-docs",
-	version: "0.4.4",
+	version: "0.4.6",
 });
 
 /**