@hiai-gg/docsmint 0.4.5 → 0.4.6

package/backend/src/lib/lifecycle-service.ts

@@ -1,10 +1,16 @@
 import {
+	accounts,
 	attachments,
 	auditLog,
+	categories,
 	documentEmbeddings,
 	documents,
+	folders,
 	lifecycleOperations,
+	sessions,
 	shareLinks,
+	tags,
+	users,
 	versions,
 } from "@hiai-docs/db/schema";
 import type { TenantTransaction } from "@hiai-docs/db/with-tenant";
@@ -121,6 +127,14 @@ function subjectHash(actorUserId: string): string {
 	return new Bun.CryptoHasher("sha256").update(actorUserId).digest("hex");
 }
 
+export function lifecycleTombstoneEmail(actorUserId: string): string {
+	const hash = new Bun.CryptoHasher("sha256")
+		.update("docsmint:privacy-tombstone:v1\0")
+		.update(actorUserId)
+		.digest("hex");
+	return `deleted-${hash}@invalid.local`;
+}
+
 function checksumLine(
 	hash: Bun.CryptoHasher,
 	record: UserDataExportRecord,
@@ -317,6 +331,92 @@ export function createPersistentLifecycleService(
 			checksumLine(hash, manifest);
 			recordCount += 1;
 			yield manifest;
+			const actor = await withActor(ctx.actorUserId, (tx) =>
+				tx
+					.select({
+						id: users.id,
+						email: users.email,
+						name: users.name,
+						emailVerified: users.emailVerified,
+						image: users.image,
+						createdAt: users.createdAt,
+						updatedAt: users.updatedAt,
+					})
+					.from(users)
+					.where(eq(users.id, ctx.actorUserId))
+					.limit(1),
+			);
+			for (const profile of actor) {
+				const record: UserDataExportRecord = {
+					type: "data",
+					domain: "account",
+					resourceType: "user",
+					resourceId: profile.id,
+					workspaceId: null,
+					payload: {
+						email: profile.email,
+						name: profile.name,
+						emailVerified: profile.emailVerified,
+						image: profile.image,
+						createdAt: profile.createdAt,
+						updatedAt: profile.updatedAt,
+					},
+				};
+				checksumLine(hash, record);
+				recordCount += 1;
+				yield record;
+			}
+			const actorFolders = await withActor(ctx.actorUserId, (tx) =>
+				tx.select().from(folders).where(eq(folders.ownerId, ctx.actorUserId)),
+			);
+			for (const folder of actorFolders) {
+				const record: UserDataExportRecord = {
+					type: "data",
+					domain: "folders",
+					resourceType: "folder",
+					resourceId: folder.id,
+					workspaceId: folder.workspaceId,
+					payload: folder,
+				};
+				checksumLine(hash, record);
+				recordCount += 1;
+				yield record;
+			}
+			const actorTags = await withActor(ctx.actorUserId, (tx) =>
+				tx.select().from(tags).where(eq(tags.ownerId, ctx.actorUserId)),
+			);
+			for (const tag of actorTags) {
+				const record: UserDataExportRecord = {
+					type: "data",
+					domain: "tags",
+					resourceType: "tag",
+					resourceId: tag.id,
+					workspaceId: tag.workspaceId,
+					payload: tag,
+				};
+				checksumLine(hash, record);
+				recordCount += 1;
+				yield record;
+			}
+			const actorCategories = await withActor(ctx.actorUserId, (tx) =>
+				tx
+					.select()
+					.from(categories)
+					.where(eq(categories.ownerId, ctx.actorUserId)),
+			);
+			for (const category of actorCategories) {
+				const record: UserDataExportRecord = {
+					type: "data",
+					domain: "categories",
+					resourceType: "category",
+					resourceId: category.id,
+					workspaceId: category.workspaceId,
+					payload: category,
+				};
+				checksumLine(hash, record);
+				recordCount += 1;
+				yield record;
+			}
 			const ownedDocuments = await withActor(ctx.actorUserId, (tx) =>
 				tx
 					.select()
@@ -529,6 +629,48 @@ export function createPersistentLifecycleService(
 							ctx.signal,
 						),
 				);
+				await runStep(
+					operation,
+					ctx.actorUserId,
+					leaseOwner,
+					"remove_subject_folders",
+					deletedByDomain,
+					() =>
+						dbDelete((tx) =>
+							tx
+								.delete(folders)
+								.where(eq(folders.ownerId, ctx.actorUserId))
+								.returning({ id: folders.id }),
+						),
+				);
+				await runStep(
+					operation,
+					ctx.actorUserId,
+					leaseOwner,
+					"remove_subject_tags",
+					deletedByDomain,
+					() =>
+						dbDelete((tx) =>
+							tx
+								.delete(tags)
+								.where(eq(tags.ownerId, ctx.actorUserId))
+								.returning({ id: tags.id }),
+						),
+				);
+				await runStep(
+					operation,
+					ctx.actorUserId,
+					leaseOwner,
+					"remove_subject_categories",
+					deletedByDomain,
+					() =>
+						dbDelete((tx) =>
+							tx
+								.delete(categories)
+								.where(eq(categories.ownerId, ctx.actorUserId))
+								.returning({ id: categories.id }),
+						),
+				);
 				await runStep(
 					operation,
 					ctx.actorUserId,
@@ -582,6 +724,55 @@ export function createPersistentLifecycleService(
 							deletedByDomain,
 							async () => (await step.purge?.(ctx))?.deletedCount ?? 0,
 						);
+				await runStep(
+					operation,
+					ctx.actorUserId,
+					leaseOwner,
+					"remove_auth_sessions",
+					deletedByDomain,
+					() =>
+						dbDelete((tx) =>
+							tx
+								.delete(sessions)
+								.where(eq(sessions.userId, ctx.actorUserId))
+								.returning({ id: sessions.id }),
+						),
+				);
+				await runStep(
+					operation,
+					ctx.actorUserId,
+					leaseOwner,
+					"remove_auth_accounts",
+					deletedByDomain,
+					() =>
+						dbDelete((tx) =>
+							tx
+								.delete(accounts)
+								.where(eq(accounts.userId, ctx.actorUserId))
+								.returning({ id: accounts.id }),
+						),
+				);
+				await runStep(
+					operation,
+					ctx.actorUserId,
+					leaseOwner,
+					"tombstone_subject_user",
+					deletedByDomain,
+					() =>
+						dbDelete((tx) =>
+							tx
+								.update(users)
+								.set({
+									email: lifecycleTombstoneEmail(ctx.actorUserId),
+									name: null,
+									image: null,
+									emailVerified: false,
+									updatedAt: new Date(),
+								})
+								.where(eq(users.id, ctx.actorUserId))
+								.returning({ id: users.id }),
+						),
+				);
 				await runStep(
 					operation,
 					ctx.actorUserId,

package/dist/backend/index.js

@@ -214361,7 +214361,7 @@ var swaggerConfig = {
   documentation: {
     info: {
       title: "DocsMint API",
-      version: "0.4.5",
+      version: "0.4.6",
       description: "Self-hosted AI-first documentation platform. Full-text + semantic search, version history, sharing, and folder organization.",
       contact: { name: "HiAi-gg", url: "https://github.com/HiAi-gg/docsmint" },
       license: {

package/dist/lifecycle-runtime.js

@@ -538,6 +538,10 @@ function tokenHash(token) {
 function subjectHash(actorUserId) {
   return new Bun.CryptoHasher("sha256").update(actorUserId).digest("hex");
 }
+function lifecycleTombstoneEmail(actorUserId) {
+  const hash = new Bun.CryptoHasher("sha256").update("docsmint:privacy-tombstone:v1\x00").update(actorUserId).digest("hex");
+  return `deleted-${hash}@invalid.local`;
+}
 function checksumLine(hash, record) {
   hash.update(`${JSON.stringify(record)}
 `, "utf8");
@@ -634,6 +638,77 @@ function createPersistentLifecycleService(runtime, database, hostSteps = []) {
       checksumLine(hash, manifest);
       recordCount += 1;
       yield manifest;
+      const actor = await withActor(ctx.actorUserId, (tx) => tx.select({
+        id: users.id,
+        email: users.email,
+        name: users.name,
+        emailVerified: users.emailVerified,
+        image: users.image,
+        createdAt: users.createdAt,
+        updatedAt: users.updatedAt
+      }).from(users).where(eq(users.id, ctx.actorUserId)).limit(1));
+      for (const profile of actor) {
+        const record = {
+          type: "data",
+          domain: "account",
+          resourceType: "user",
+          resourceId: profile.id,
+          workspaceId: null,
+          payload: {
+            email: profile.email,
+            name: profile.name,
+            emailVerified: profile.emailVerified,
+            image: profile.image,
+            createdAt: profile.createdAt,
+            updatedAt: profile.updatedAt
+          }
+        };
+        checksumLine(hash, record);
+        recordCount += 1;
+        yield record;
+      }
+      const actorFolders = await withActor(ctx.actorUserId, (tx) => tx.select().from(folders).where(eq(folders.ownerId, ctx.actorUserId)));
+      for (const folder of actorFolders) {
+        const record = {
+          type: "data",
+          domain: "folders",
+          resourceType: "folder",
+          resourceId: folder.id,
+          workspaceId: folder.workspaceId,
+          payload: folder
+        };
+        checksumLine(hash, record);
+        recordCount += 1;
+        yield record;
+      }
+      const actorTags = await withActor(ctx.actorUserId, (tx) => tx.select().from(tags).where(eq(tags.ownerId, ctx.actorUserId)));
+      for (const tag of actorTags) {
+        const record = {
+          type: "data",
+          domain: "tags",
+          resourceType: "tag",
+          resourceId: tag.id,
+          workspaceId: tag.workspaceId,
+          payload: tag
+        };
+        checksumLine(hash, record);
+        recordCount += 1;
+        yield record;
+      }
+      const actorCategories = await withActor(ctx.actorUserId, (tx) => tx.select().from(categories).where(eq(categories.ownerId, ctx.actorUserId)));
+      for (const category of actorCategories) {
+        const record = {
+          type: "data",
+          domain: "categories",
+          resourceType: "category",
+          resourceId: category.id,
+          workspaceId: category.workspaceId,
+          payload: category
+        };
+        checksumLine(hash, record);
+        recordCount += 1;
+        yield record;
+      }
       const ownedDocuments = await withActor(ctx.actorUserId, (tx) => tx.select().from(documents).where(eq(documents.ownerId, ctx.actorUserId)));
       for (const document of ownedDocuments) {
         throwIfAborted(ctx.signal);
@@ -733,12 +808,24 @@ function createPersistentLifecycleService(runtime, database, hostSteps = []) {
           storageKey: attachments.storageKey
         }).from(attachments).where(inArray(attachments.documentId, documentIds))) : [];
         await runStep(operation, ctx.actorUserId, leaseOwner, "delete_attachment_objects", deletedByDomain, () => runtime.deleteObjects(objectRows.map((row) => row.storageKey), ctx.signal));
+        await runStep(operation, ctx.actorUserId, leaseOwner, "remove_subject_folders", deletedByDomain, () => dbDelete((tx) => tx.delete(folders).where(eq(folders.ownerId, ctx.actorUserId)).returning({ id: folders.id })));
+        await runStep(operation, ctx.actorUserId, leaseOwner, "remove_subject_tags", deletedByDomain, () => dbDelete((tx) => tx.delete(tags).where(eq(tags.ownerId, ctx.actorUserId)).returning({ id: tags.id })));
+        await runStep(operation, ctx.actorUserId, leaseOwner, "remove_subject_categories", deletedByDomain, () => dbDelete((tx) => tx.delete(categories).where(eq(categories.ownerId, ctx.actorUserId)).returning({ id: categories.id })));
         await runStep(operation, ctx.actorUserId, leaseOwner, "remove_attachment_rows", deletedByDomain, () => objectRows.length ? dbDelete((tx) => tx.delete(attachments).where(inArray(attachments.id, objectRows.map((row) => row.id))).returning({ id: attachments.id })) : Promise.resolve(0));
         await runStep(operation, ctx.actorUserId, leaseOwner, "remove_subject_documents", deletedByDomain, () => dbDelete((tx) => tx.delete(documents).where(eq(documents.ownerId, ctx.actorUserId)).returning({ id: documents.id })));
         await runStep(operation, ctx.actorUserId, leaseOwner, "clear_redis_state", deletedByDomain, () => runtime.clearAccountRedisState(ctx.actorUserId, ctx.signal));
         for (const step of orderedSteps)
           if (step.purge)
             await runStep(operation, ctx.actorUserId, leaseOwner, `host:${step.id}`, deletedByDomain, async () => (await step.purge?.(ctx))?.deletedCount ?? 0);
+        await runStep(operation, ctx.actorUserId, leaseOwner, "remove_auth_sessions", deletedByDomain, () => dbDelete((tx) => tx.delete(sessions).where(eq(sessions.userId, ctx.actorUserId)).returning({ id: sessions.id })));
+        await runStep(operation, ctx.actorUserId, leaseOwner, "remove_auth_accounts", deletedByDomain, () => dbDelete((tx) => tx.delete(accounts).where(eq(accounts.userId, ctx.actorUserId)).returning({ id: accounts.id })));
+        await runStep(operation, ctx.actorUserId, leaseOwner, "tombstone_subject_user", deletedByDomain, () => dbDelete((tx) => tx.update(users).set({
+          email: lifecycleTombstoneEmail(ctx.actorUserId),
+          name: null,
+          image: null,
+          emailVerified: false,
+          updatedAt: new Date
+        }).where(eq(users.id, ctx.actorUserId)).returning({ id: users.id })));
         await runStep(operation, ctx.actorUserId, leaseOwner, "write_deletion_audit", deletedByDomain, async () => {
           await withActor(ctx.actorUserId, (tx) => tx.insert(auditLog).values({
             actorId: ctx.actorUserId,
@@ -803,6 +890,7 @@ function createPersistentLifecycleRuntime(options) {
 }
 export {
   requireLeaseWrite,
+  lifecycleTombstoneEmail,
   createPersistentLifecycleService,
   createPersistentLifecycleRuntime,
   bindPersistentLifecycle,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hiai-gg/docsmint",
-  "version": "0.4.5",
+  "version": "0.4.6",
   "type": "module",
   "browser": {
     "./dist/backend-launcher.js": false,

package/packages/cli/src/index.ts

@@ -24,7 +24,7 @@ import { registerSearch } from "./commands/search.js";
 import { registerSnapshot } from "./commands/snapshot.js";
 import { registerUpdate } from "./commands/update.js";
 
-const VERSION = "0.4.5";
+const VERSION = "0.4.6";
 
 const program = new Command();
 program

package/packages/mcp-server/src/index.ts

@@ -35,7 +35,7 @@ interface McpToolResult {
 
 const server = new McpServer({
 	name: "hiai-docs",
-	version: "0.4.5",
+	version: "0.4.6",
 });
 
 /**