@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.10

package/dist/user-data/purge/user-purge.js

@@ -0,0 +1,305 @@
+"use strict";
+// =============================================================================
+// The per-user purge: plan and execution (issue #743, PP-9.1)
+// =============================================================================
+//
+// The registry-driven replacement of EvoPath's `user-data-purge.ts`
+// (`collectUserObjectIds`, `deleteUserOwnedRows`, `deleteStorageObjects`). The
+// keep/delete decision per model comes from the registries; the order from
+// the planner. Shared by the user's own deletion, the factory reset (every
+// user) and offboarding (`userDisposition: 'purge'`), so a model is decided
+// once and every flow covers it.
+//
+// Every function takes its client (a transaction or the bypass client) as an
+// argument and holds no state: callers decide transaction boundaries.
+//
+// RETRY SAFETY (EvoPath's rules, verbatim):
+//   - every delete is a `deleteMany` by owner, so a rerun deletes what is left;
+//   - object ids are collected BEFORE rows go, into the payload, and unioned
+//     on retry;
+//   - a storage failure keeps the row and is counted, never thrown;
+//   - running jobs are never cancelled; pending jobs whose subject is a
+//     deleted row are deleted (never this job).
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.USER_DATA_CHUNK_SIZE = void 0;
+exports.planUserPurge = planUserPurge;
+exports.chunk = chunk;
+exports.addCounts = addCounts;
+exports.readCounts = readCounts;
+exports.collectUserObjectIds = collectUserObjectIds;
+exports.deleteUserRows = deleteUserRows;
+exports.deleteStorageObjects = deleteStorageObjects;
+exports.countUserData = countUserData;
+const user_data_registries_1 = require("../user-data.registries");
+const purge_planner_1 = require("./purge-planner");
+/**
+ * Largest `IN (...)` list sent in one statement.
+ *
+ * @stability experimental
+ */
+exports.USER_DATA_CHUNK_SIZE = 1000;
+/**
+ * Builds the per-user purge plan from the registered owner models and hints.
+ *
+ * @param input - the parsed schema, the owner models (the user-owned registry), the hints and the categories.
+ * @returns the plan.
+ * @throws UserDataPlanError on a cycle, a model the schema lacks, a hint naming
+ *   an unknown category, or a storage-object column the model lacks.
+ *
+ * @stability experimental
+ */
+function planUserPurge(input) {
+    const { datamodel } = input;
+    const categoryIds = new Set(input.categories.map((def) => def.id));
+    const kept = [];
+    const candidates = [];
+    let storage;
+    for (const def of input.owned) {
+        if (def.ownerField === undefined)
+            continue;
+        const hint = input.hint(def.model);
+        if (hint?.keep !== undefined) {
+            kept.push({ model: def.model, reason: hint.keep });
+            continue;
+        }
+        const category = hint?.category ?? user_data_registries_1.USER_DATA_OTHER_CATEGORY;
+        if (!categoryIds.has(category)) {
+            throw new purge_planner_1.UserDataPlanError(`${def.model} is deleted in category "${category}", which is not registered`, [def.model]);
+        }
+        const model = datamodel.find((entry) => entry.name === def.model);
+        if (!model)
+            throw new purge_planner_1.UserDataPlanError(`the schema has no model ${def.model}`, [def.model]);
+        for (const column of hint?.storageObjectColumns ?? []) {
+            if (!(0, purge_planner_1.hasField)(def.model, column, datamodel)) {
+                throw new purge_planner_1.UserDataPlanError(`${def.model} has no column ${column} (storageObjectColumns)`, [def.model]);
+            }
+        }
+        const ownerField = model.fields.find((field) => field.name === def.ownerField);
+        const step = {
+            model: def.model,
+            delegate: (0, purge_planner_1.delegateName)(def.model),
+            ownerField: def.ownerField,
+            ownerOptional: ownerField?.isOptional ?? false,
+            category,
+            selfUnlink: (0, purge_planner_1.selfUnlinkFields)(def.model, datamodel),
+            keepWhenReferenced: hint?.keepWhenReferenced ? (0, purge_planner_1.backRelationFields)(def.model, datamodel) : [],
+            storageObjectColumns: hint?.storageObjectColumns ?? [],
+            hasId: (0, purge_planner_1.hasField)(def.model, 'id', datamodel),
+            ...(hint?.delegate ? { delegateJob: { ...hint.delegate, model: def.model } } : {}),
+        };
+        if (hint?.storageObjects)
+            storage = step;
+        else
+            candidates.push(step);
+    }
+    const inline = candidates.filter((step) => !step.delegateJob);
+    const order = (0, purge_planner_1.orderForDeletion)(inline.map((step) => step.model), datamodel);
+    const byModel = new Map(inline.map((step) => [step.model, step]));
+    const modelsByCategory = {};
+    for (const step of [...candidates, ...(storage ? [storage] : [])]) {
+        (modelsByCategory[step.category] ??= []).push(step.model);
+    }
+    return {
+        steps: order.map((name) => byModel.get(name)),
+        delegated: candidates.filter((step) => step.delegateJob),
+        ...(storage ? { storage } : {}),
+        kept: kept.sort((a, b) => (a.model < b.model ? -1 : 1)),
+        modelsByCategory,
+        datamodel,
+    };
+}
+/**
+ * Splits `items` into lists of at most `size`.
+ *
+ * @stability experimental
+ */
+function chunk(items, size = exports.USER_DATA_CHUNK_SIZE) {
+    const out = [];
+    for (let i = 0; i < items.length; i += size)
+        out.push(items.slice(i, i + size));
+    return out;
+}
+/**
+ * Key-wise sum of two count maps.
+ *
+ * @stability experimental
+ */
+function addCounts(a, b) {
+    const out = { ...a };
+    for (const [key, value] of Object.entries(b))
+        out[key] = (out[key] ?? 0) + value;
+    return out;
+}
+/**
+ * A count map an earlier attempt left on a payload (`{}` for anything else).
+ *
+ * @stability experimental
+ */
+function readCounts(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return {};
+    const out = {};
+    for (const [key, value] of Object.entries(raw)) {
+        if (typeof value === 'number' && Number.isFinite(value))
+            out[key] = value;
+    }
+    return out;
+}
+/** A model delegate of the app's client, or a clear error. */
+function model(db, step) {
+    const delegate = db?.[step.delegate];
+    if (!delegate)
+        throw new Error(`the database client has no delegate "${step.delegate}" for model ${step.model}`);
+    return delegate;
+}
+/**
+ * Every storage object id one user's purge must delete for these categories:
+ * the user's own objects (`files`) and the columns named by
+ * `storageObjectColumns` on the included models.
+ *
+ * @param db - a client (transaction or bypass).
+ * @param plan - the purge plan.
+ * @param userId - the user.
+ * @param categories - the included category ids.
+ * @returns distinct ids.
+ *
+ * @stability experimental
+ */
+async function collectUserObjectIds(db, plan, userId, categories) {
+    const ids = new Set();
+    if (plan.storage && categories.has(plan.storage.category)) {
+        const rows = await model(db, plan.storage).findMany({ where: { [plan.storage.ownerField]: userId }, select: { id: true } });
+        rows.forEach((row) => ids.add(row.id));
+    }
+    for (const step of plan.steps) {
+        if (!categories.has(step.category))
+            continue;
+        for (const column of step.storageObjectColumns) {
+            const rows = await model(db, step).findMany({
+                where: { [step.ownerField]: userId, [column]: { not: null } },
+                select: { [column]: true },
+            });
+            for (const row of rows)
+                if (typeof row[column] === 'string')
+                    ids.add(row[column]);
+        }
+    }
+    return [...ids];
+}
+/**
+ * Deletes one user's rows of the included categories, children before
+ * parents, inside the caller's transaction. Clears the `User` columns the
+ * included categories name. Never deletes the storage-object model (the
+ * media step does) nor a delegated one.
+ *
+ * @param tx - the transaction client (bypass).
+ * @param plan - the purge plan.
+ * @param userId - the user.
+ * @param options - the included categories, the running job (never cancelled), extra subject ids (the collected objects) and the categories' `clearUserFields`.
+ * @returns the counts.
+ *
+ * @stability experimental
+ */
+async function deleteUserRows(tx, plan, userId, options) {
+    const out = { models: {}, categories: {}, cancelledJobs: 0 };
+    const notThisJob = options.jobId ? { id: { not: options.jobId } } : {};
+    const cancelPending = async (subjectIds) => {
+        for (const ids of chunk(subjectIds)) {
+            const { count } = await tx.job.deleteMany({ where: { status: 'pending', subjectId: { in: ids }, ...notThisJob } });
+            out.cancelledJobs += count;
+        }
+    };
+    for (const step of plan.steps) {
+        if (!options.categories.has(step.category))
+            continue;
+        const delegate = model(tx, step);
+        const owner = { [step.ownerField]: userId };
+        if (step.hasId) {
+            const rows = await delegate.findMany({ where: owner, select: { id: true } });
+            await cancelPending(rows.map((row) => row.id));
+        }
+        for (const field of step.selfUnlink) {
+            await delegate.updateMany({ where: { ...owner, [field]: { not: null } }, data: { [field]: null } });
+        }
+        const unreferenced = Object.fromEntries(step.keepWhenReferenced.map((field) => [field, { none: {} }]));
+        const { count } = await delegate.deleteMany({ where: { ...owner, ...unreferenced } });
+        out.models[step.model] = (out.models[step.model] ?? 0) + count;
+        out.categories[step.category] = (out.categories[step.category] ?? 0) + count;
+    }
+    await cancelPending(options.objectIds ?? []);
+    const clear = [...new Set(options.clearUserFields ?? [])];
+    if (clear.length > 0) {
+        await tx.user.updateMany({ where: { id: userId }, data: Object.fromEntries(clear.map((field) => [field, null])) });
+    }
+    return out;
+}
+/**
+ * Bytes first (aborting an unfinished multipart upload), then the row. A
+ * provider failure keeps the row, is counted and logged under `context`, and
+ * never throws.
+ *
+ * @param db - the bypass client (no transaction: storage is not transactional).
+ * @param storage - the active storage provider.
+ * @param logger - where failures are logged.
+ * @param context - the log prefix (`user.data.purge job <id>`).
+ * @param objectIds - the objects.
+ * @param storageDelegate - the storage-object model's delegate name. Default `storageObject`.
+ * @returns the counts.
+ *
+ * @stability experimental
+ */
+async function deleteStorageObjects(db, storage, logger, context, objectIds, storageDelegate = 'storageObject') {
+    let storageObjectsDeleted = 0;
+    let storageObjectsFailed = 0;
+    const delegate = db[storageDelegate];
+    for (const ids of chunk(objectIds)) {
+        const objects = await delegate.findMany({
+            where: { id: { in: ids } },
+            select: { id: true, storageKey: true, s3UploadId: true },
+        });
+        for (const object of objects) {
+            try {
+                if (object.s3UploadId)
+                    await storage.abortMultipartUpload(object.storageKey, object.s3UploadId);
+                await storage.delete(object.storageKey);
+            }
+            catch (error) {
+                storageObjectsFailed += 1;
+                logger.warn(`${context}: could not delete storage object ${object.id}: ${error instanceof Error ? error.message : String(error)}`);
+                continue;
+            }
+            // A row already gone (a concurrent delete) is fine.
+            const { count } = await delegate.deleteMany({ where: { id: object.id } });
+            storageObjectsDeleted += count;
+        }
+    }
+    return { storageObjectsDeleted, storageObjectsFailed };
+}
+/**
+ * Rows one user owns per category (and the stored bytes of the storage
+ * model's category), for the Danger Zone summary. Read-only.
+ *
+ * @param db - a client.
+ * @param plan - the purge plan.
+ * @param userId - the user.
+ * @returns counts per category id, and bytes per category id (storage only).
+ *
+ * @stability experimental
+ */
+async function countUserData(db, plan, userId) {
+    const counts = {};
+    const bytes = {};
+    const all = [...plan.steps, ...plan.delegated, ...(plan.storage ? [plan.storage] : [])];
+    for (const step of all) {
+        const where = { [step.ownerField]: userId };
+        counts[step.category] = (counts[step.category] ?? 0) + (await model(db, step).count({ where }));
+    }
+    if (plan.storage) {
+        const sum = await model(db, plan.storage).aggregate({ where: { [plan.storage.ownerField]: userId }, _sum: { size: true } });
+        const raw = sum?._sum?.size;
+        bytes[plan.storage.category] = raw === null || raw === undefined ? 0 : Number(raw);
+    }
+    return { counts, bytes };
+}
+//# sourceMappingURL=user-purge.js.map

package/dist/user-data/purge/user-purge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-purge.js","sourceRoot":"","sources":["../../../src/user-data/purge/user-purge.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,8DAA8D;AAC9D,gFAAgF;AAChF,EAAE;AACF,oEAAoE;AACpE,+EAA+E;AAC/E,2EAA2E;AAC3E,2EAA2E;AAC3E,4EAA4E;AAC5E,iCAAiC;AACjC,EAAE;AACF,6EAA6E;AAC7E,sEAAsE;AACtE,EAAE;AACF,4CAA4C;AAC5C,gFAAgF;AAChF,6EAA6E;AAC7E,gBAAgB;AAChB,oEAAoE;AACpE,wEAAwE;AACxE,gDAAgD;AAChD,gFAAgF;;;AAqHhF,sCAkEC;AAOD,sBAIC;AAOD,8BAIC;AAOD,gCAOC;AAsBD,oDAiBC;AA8BD,wCA8CC;AA6BD,oDAgCC;AAaD,sCAkBC;AApaD,kEAAmE;AAEnE,mDAQyB;AAEzB;;;;GAIG;AACU,QAAA,oBAAoB,GAAG,IAAI,CAAC;AAoFzC;;;;;;;;;GASG;AACH,SAAgB,aAAa,CAAC,KAK7B;IACC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC5B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAwC,EAAE,CAAC;IACrD,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,IAAI,OAAkC,CAAC;IAEvC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;YAAE,SAAS;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACnD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,+CAAwB,CAAC;QAC5D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,iCAAiB,CAAC,GAAG,GAAG,CAAC,KAAK,4BAA4B,QAAQ,4BAA4B,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACzH,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,iCAAiB,CAAC,2BAA2B,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7F,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,oBAAoB,IAAI,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC,IAAA,wBAAQ,EAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,iCAAiB,CAAC,GAAG,GAAG,CAAC,KAAK,kBAAkB,MAAM,yBAAyB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAkB;YAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,QAAQ,EAAE,IAAA,4BAAY,EAAC,GAAG,CAAC,KAAK,CAAC;YACjC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,aAAa,EAAE,UAAU,EAAE,UAAU,IAAI,KAAK;YAC9C,QAAQ;YACR,UAAU,EAAE,IAAA,gCAAgB,EAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC;YAClD,kBAAkB,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAA,kCAAkB,EAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE;YAC5F,oBAAoB,EAAE,IAAI,EAAE,oBAAoB,IAAI,EAAE;YACtD,KAAK,EAAE,IAAA,wBAAQ,EAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC;YAC3C,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF,CAAC;QACF,IAAI,IAAI,EAAE,cAAc;YAAE,OAAO,GAAG,IAAI,CAAC;;YACpC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAA,gCAAgB,EAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAChC,SAAS,CACV,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAA6B,EAAE,CAAC;IACtD,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAClE,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QAC9C,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,gBAAgB;QAChB,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,KAAK,CAAI,KAAmB,EAAE,IAAI,GAAG,4BAAoB;IACvE,MAAM,GAAG,GAAU,EAAE,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAChF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAgB,SAAS,CAAC,CAAmC,EAAE,CAAmC;IAChG,MAAM,GAAG,GAA2B,EAAE,GAAG,CAAC,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;IACjF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAgB,UAAU,CAAC,GAAY;IACrC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACrE,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8DAA8D;AAC9D,SAAS,KAAK,CAAC,EAAO,EAAE,IAA+C;IACrE,MAAM,QAAQ,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,CAAC,QAAQ,eAAe,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACjH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,oBAAoB,CAAC,EAAO,EAAE,IAAmB,EAAE,MAAc,EAAE,UAA+B;IACtH,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAqB,MAAM,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9I,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC7C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/C,MAAM,IAAI,GAA8B,MAAM,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC;gBACrE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBAC7D,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE;aAC3B,CAAC,CAAC;YACH,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,IAAI,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ;oBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAW,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAgBD;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,cAAc,CAClC,EAAO,EACP,IAAmB,EACnB,MAAc,EACd,OAKC;IAED,MAAM,GAAG,GAAoB,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAC9E,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvE,MAAM,aAAa,GAAG,KAAK,EAAE,UAA6B,EAAE,EAAE;QAC5D,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,UAAU,EAAE,EAAE,CAAC,CAAC;YACnH,GAAG,CAAC,aAAa,IAAI,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,SAAS;QACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAE5C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAqB,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/F,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpC,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACvG,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,YAAY,EAAE,EAAE,CAAC,CAAC;QACtF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QAC/D,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;IAC/E,CAAC;IAED,MAAM,aAAa,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAE7C,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAcD;;;;;;;;;;;;;;GAcG;AACI,KAAK,UAAU,oBAAoB,CACxC,EAAO,EACP,OAAiE,EACjE,MAA4B,EAC5B,OAAe,EACf,SAA4B,EAC5B,eAAe,GAAG,eAAe;IAEjC,IAAI,qBAAqB,GAAG,CAAC,CAAC;IAC9B,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC;IAErC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAoE,MAAM,QAAQ,CAAC,QAAQ,CAAC;YACvG,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE;YAC1B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;SACzD,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,MAAM,CAAC,UAAU;oBAAE,MAAM,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;gBAChG,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,oBAAoB,IAAI,CAAC,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,qCAAqC,MAAM,CAAC,EAAE,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACnI,SAAS;YACX,CAAC;YACD,oDAAoD;YACpD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1E,qBAAqB,IAAI,KAAK,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,CAAC;AACzD,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,aAAa,CACjC,EAAO,EACP,IAAmB,EACnB,MAAc;IAEd,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxF,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5H,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC"}

package/dist/user-data/registry-checks.d.ts

@@ -0,0 +1,44 @@
+import type { ConformanceFinding } from '../testing/index';
+import type { PurgeDatamodel } from './purge/purge-planner';
+/** The `file` of the decisions findings.
+ *
+ * @stability experimental
+ */
+export declare const FILE_DECISIONS = "user-data-decisions";
+/** The `file` of the hints findings.
+ *
+ * @stability experimental
+ */
+export declare const FILE_HINTS = "user-data-hints";
+/** The `file` of the plan findings.
+ *
+ * @stability experimental
+ */
+export declare const FILE_PLAN = "user-data-plan";
+/**
+ * Check 1: every owner model has an explicit keep-or-delete decision.
+ *
+ * @returns one finding per undecided model.
+ *
+ * @stability experimental
+ */
+export declare function checkUserDataDecisions(): ConformanceFinding[];
+/**
+ * Check 2: hints and scopes name what exists.
+ *
+ * @param datamodel - the parsed schema.
+ * @returns one finding per problem.
+ *
+ * @stability experimental
+ */
+export declare function checkUserDataHints(datamodel: PurgeDatamodel): ConformanceFinding[];
+/**
+ * Check 3: the delete order exists.
+ *
+ * @param datamodel - the parsed schema.
+ * @returns a finding when planning throws.
+ *
+ * @stability experimental
+ */
+export declare function checkUserDataPlan(datamodel: PurgeDatamodel): ConformanceFinding[];
+//# sourceMappingURL=registry-checks.d.ts.map

package/dist/user-data/registry-checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-checks.d.ts","sourceRoot":"","sources":["../../src/user-data/registry-checks.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAI5D;;;GAGG;AACH,eAAO,MAAM,cAAc,wBAAwB,CAAC;AACpD;;;GAGG;AACH,eAAO,MAAM,UAAU,oBAAoB,CAAC;AAC5C;;;GAGG;AACH,eAAO,MAAM,SAAS,mBAAmB,CAAC;AAE1C;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI,kBAAkB,EAAE,CAgB7D;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,cAAc,GAAG,kBAAkB,EAAE,CA2BlF;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,cAAc,GAAG,kBAAkB,EAAE,CAYjF"}

package/dist/user-data/registry-checks.js

@@ -0,0 +1,121 @@
+"use strict";
+// =============================================================================
+// The registry checks of the user-data slice (issues #743, #880)
+// =============================================================================
+//
+// Three pure checks over the app's own registries and schema. They run in two
+// places: the `user-data` conformance suite (`./testing/conformance.ts`, in the
+// app's CI) and the `user-data.registries` Doctor check (a running deployment).
+// Kept here, free of the test harness, so production code can use them without
+// registering the conformance suite as an import side effect.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FILE_PLAN = exports.FILE_HINTS = exports.FILE_DECISIONS = void 0;
+exports.checkUserDataDecisions = checkUserDataDecisions;
+exports.checkUserDataHints = checkUserDataHints;
+exports.checkUserDataPlan = checkUserDataPlan;
+const index_1 = require("../core/index");
+const user_purge_1 = require("./purge/user-purge");
+const user_data_registries_1 = require("./user-data.registries");
+/** The `file` of the decisions findings.
+ *
+ * @stability experimental
+ */
+exports.FILE_DECISIONS = 'user-data-decisions';
+/** The `file` of the hints findings.
+ *
+ * @stability experimental
+ */
+exports.FILE_HINTS = 'user-data-hints';
+/** The `file` of the plan findings.
+ *
+ * @stability experimental
+ */
+exports.FILE_PLAN = 'user-data-plan';
+/**
+ * Check 1: every owner model has an explicit keep-or-delete decision.
+ *
+ * @returns one finding per undecided model.
+ *
+ * @stability experimental
+ */
+function checkUserDataDecisions() {
+    const findings = [];
+    const categories = new Set(user_data_registries_1.userDataCategoryRegistry.ids());
+    for (const def of index_1.userOwnedModelRegistry.list()) {
+        if (def.ownerField === undefined)
+            continue;
+        const hint = user_data_registries_1.userDataModelRegistry.get(def.model);
+        if (!hint) {
+            findings.push({
+                file: exports.FILE_DECISIONS,
+                message: `${def.model} (owner ${def.ownerField}) has no user-data decision: registerUserDataModels([{ model: '${def.model}', category: '...' }]) or { keep: '<why>' }`,
+            });
+        }
+        else if (hint.keep === undefined && !categories.has(hint.category ?? 'other')) {
+            findings.push({ file: exports.FILE_DECISIONS, message: `${def.model} is deleted in category "${hint.category ?? 'other'}", which is not registered, so "everything" cannot reach it` });
+        }
+    }
+    return findings;
+}
+/**
+ * Check 2: hints and scopes name what exists.
+ *
+ * @param datamodel - the parsed schema.
+ * @returns one finding per problem.
+ *
+ * @stability experimental
+ */
+function checkUserDataHints(datamodel) {
+    const findings = [];
+    const categories = new Set(user_data_registries_1.userDataCategoryRegistry.ids());
+    for (const hint of user_data_registries_1.userDataModelRegistry.list()) {
+        const model = datamodel.find((entry) => entry.name === hint.model);
+        if (!model) {
+            findings.push({ file: exports.FILE_HINTS, message: `hint for ${hint.model}: the schema has no such model` });
+            continue;
+        }
+        if (hint.category !== undefined && !categories.has(hint.category)) {
+            findings.push({ file: exports.FILE_HINTS, message: `hint for ${hint.model}: category "${hint.category}" is not registered` });
+        }
+        for (const column of hint.storageObjectColumns ?? []) {
+            if (!model.fields.some((field) => field.name === column)) {
+                findings.push({ file: exports.FILE_HINTS, message: `hint for ${hint.model}: storageObjectColumns names "${column}", which the model lacks` });
+            }
+        }
+    }
+    for (const scope of (0, user_data_registries_1.resolvedUserDataScopes)()) {
+        if (Array.isArray(scope.categories)) {
+            for (const id of scope.categories) {
+                if (!categories.has(id))
+                    findings.push({ file: exports.FILE_HINTS, message: `scope "${scope.id}" names category "${id}", which is not registered` });
+            }
+        }
+        if ((0, user_data_registries_1.categoriesOfScope)(scope).length === 0)
+            findings.push({ file: exports.FILE_HINTS, message: `scope "${scope.id}" resolves to no category` });
+    }
+    return findings;
+}
+/**
+ * Check 3: the delete order exists.
+ *
+ * @param datamodel - the parsed schema.
+ * @returns a finding when planning throws.
+ *
+ * @stability experimental
+ */
+function checkUserDataPlan(datamodel) {
+    try {
+        (0, user_purge_1.planUserPurge)({
+            datamodel,
+            owned: index_1.userOwnedModelRegistry.list(),
+            hint: (model) => user_data_registries_1.userDataModelRegistry.get(model),
+            categories: user_data_registries_1.userDataCategoryRegistry.list(),
+        });
+        return [];
+    }
+    catch (error) {
+        return [{ file: exports.FILE_PLAN, message: error instanceof Error ? error.message : String(error) }];
+    }
+}
+//# sourceMappingURL=registry-checks.js.map

package/dist/user-data/registry-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-checks.js","sourceRoot":"","sources":["../../src/user-data/registry-checks.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,iEAAiE;AACjE,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,gFAAgF;AAChF,+EAA+E;AAC/E,8DAA8D;AAC9D,gFAAgF;;;AA+BhF,wDAgBC;AAUD,gDA2BC;AAUD,8CAYC;AAxGD,yCAAuD;AAGvD,mDAAmD;AACnD,iEAAoI;AAEpI;;;GAGG;AACU,QAAA,cAAc,GAAG,qBAAqB,CAAC;AACpD;;;GAGG;AACU,QAAA,UAAU,GAAG,iBAAiB,CAAC;AAC5C;;;GAGG;AACU,QAAA,SAAS,GAAG,gBAAgB,CAAC;AAE1C;;;;;;GAMG;AACH,SAAgB,sBAAsB;IACpC,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,+CAAwB,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,KAAK,MAAM,GAAG,IAAI,8BAAsB,CAAC,IAAI,EAAE,EAAE,CAAC;QAChD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;YAAE,SAAS;QAC3C,MAAM,IAAI,GAAG,4CAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,sBAAc;gBACpB,OAAO,EAAE,GAAG,GAAG,CAAC,KAAK,WAAW,GAAG,CAAC,UAAU,kEAAkE,GAAG,CAAC,KAAK,6CAA6C;aACvK,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE,CAAC;YAChF,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAc,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,KAAK,4BAA4B,IAAI,CAAC,QAAQ,IAAI,OAAO,6DAA6D,EAAE,CAAC,CAAC;QAClL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,kBAAkB,CAAC,SAAyB;IAC1D,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,+CAAwB,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,KAAK,MAAM,IAAI,IAAI,4CAAqB,CAAC,IAAI,EAAE,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAU,EAAE,OAAO,EAAE,YAAY,IAAI,CAAC,KAAK,gCAAgC,EAAE,CAAC,CAAC;YACrG,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAU,EAAE,OAAO,EAAE,YAAY,IAAI,CAAC,KAAK,eAAe,IAAI,CAAC,QAAQ,qBAAqB,EAAE,CAAC,CAAC;QACxH,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;YACrD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;gBACzD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAU,EAAE,OAAO,EAAE,YAAY,IAAI,CAAC,KAAK,iCAAiC,MAAM,0BAA0B,EAAE,CAAC,CAAC;YACxI,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAA,6CAAsB,GAAE,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBAClC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAU,EAAE,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAC/I,CAAC;QACH,CAAC;QACD,IAAI,IAAA,wCAAiB,EAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAU,EAAE,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACzI,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,iBAAiB,CAAC,SAAyB;IACzD,IAAI,CAAC;QACH,IAAA,0BAAa,EAAC;YACZ,SAAS;YACT,KAAK,EAAE,8BAAsB,CAAC,IAAI,EAAE;YACpC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,4CAAqB,CAAC,GAAG,CAAC,KAAK,CAAC;YACjD,UAAU,EAAE,+CAAwB,CAAC,IAAI,EAAE;SAC5C,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,EAAE,IAAI,EAAE,iBAAS,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;AACH,CAAC"}

package/dist/user-data/testing/conformance.d.ts

@@ -0,0 +1,33 @@
+import type { ConformanceSuite } from '../../testing/index';
+import type { PurgeDatamodel } from '../purge/purge-planner';
+import { checkUserDataDecisions, checkUserDataHints, checkUserDataPlan } from '../registry-checks';
+export { checkUserDataDecisions, checkUserDataHints, checkUserDataPlan };
+declare module '../../testing/index' {
+    interface PlatformConformanceSuiteOptions {
+        /** The user-data slice's suite: its options, or `false` to opt out. Registered by importing `@marinoscar/platform-api/user-data/testing`. */
+        userData?: UserDataConformanceOptions | false;
+    }
+}
+/**
+ * Options of the `user-data` suite.
+ *
+ * @stability experimental
+ */
+export interface UserDataConformanceOptions {
+    /** The app's parsed schema (`readSchemaDatamodel`). */
+    readonly datamodel: PurgeDatamodel;
+}
+/**
+ * The `user-data` conformance suite. Registered when
+ * `@marinoscar/platform-api/user-data/testing` is imported.
+ *
+ * @stability experimental
+ * @extensionPoint registry
+ * @example
+ * ```ts
+ * import '@marinoscar/platform-api/user-data/testing';
+ * runPlatformConformance({ sourceRoots: [API_SOURCE_ROOT], suites: { userData: { datamodel } } });
+ * ```
+ */
+export declare const userDataConformanceSuite: ConformanceSuite<UserDataConformanceOptions>;
+//# sourceMappingURL=conformance.d.ts.map

package/dist/user-data/testing/conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.d.ts","sourceRoot":"","sources":["../../../src/user-data/testing/conformance.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAA0D,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACpH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAIL,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,CAAC;AAEzE,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,+BAA+B;QACvC,6IAA6I;QAC7I,QAAQ,CAAC,EAAE,0BAA0B,GAAG,KAAK,CAAC;KAC/C;CACF;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,uDAAuD;IACvD,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;CACpC;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB,EAAE,gBAAgB,CAAC,0BAA0B,CAqCjF,CAAC"}

package/dist/user-data/testing/conformance.js

@@ -0,0 +1,80 @@
+"use strict";
+// =============================================================================
+// The `user-data` conformance suite (issue #743, PP-9.1)
+// =============================================================================
+//
+// Replaces EvoPath's admission that "no test discovers a new model, so the
+// decision is manual". Against the app's own registries and schema:
+//
+//   decisions  every model the user-owned registry gives an owner column has
+//              an explicit decision: kept (with a reason) or deleted in a
+//              REGISTERED category, which `everything` therefore reaches;
+//   hints      every hint names a model of the schema, a registered category,
+//              and columns the model has; every scope names registered
+//              categories and resolves to at least one;
+//   plan       the delete order exists (no cycle, no required self-restrict).
+//
+// The web counterpart (Danger Zone groups last) is
+// `dangerZoneLastViolations` of `@marinoscar/platform-web/user-data/headless`.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.userDataConformanceSuite = exports.checkUserDataPlan = exports.checkUserDataHints = exports.checkUserDataDecisions = void 0;
+const index_1 = require("../../core/index");
+const index_2 = require("../../testing/index");
+const registry_checks_1 = require("../registry-checks");
+Object.defineProperty(exports, "checkUserDataDecisions", { enumerable: true, get: function () { return registry_checks_1.checkUserDataDecisions; } });
+Object.defineProperty(exports, "checkUserDataHints", { enumerable: true, get: function () { return registry_checks_1.checkUserDataHints; } });
+Object.defineProperty(exports, "checkUserDataPlan", { enumerable: true, get: function () { return registry_checks_1.checkUserDataPlan; } });
+const user_data_registries_1 = require("../user-data.registries");
+/**
+ * The `user-data` conformance suite. Registered when
+ * `@marinoscar/platform-api/user-data/testing` is imported.
+ *
+ * @stability experimental
+ * @extensionPoint registry
+ * @example
+ * ```ts
+ * import '@marinoscar/platform-api/user-data/testing';
+ * runPlatformConformance({ sourceRoots: [API_SOURCE_ROOT], suites: { userData: { datamodel } } });
+ * ```
+ */
+exports.userDataConformanceSuite = {
+    id: 'user-data',
+    title: 'the user-data slice decides every owner model',
+    description: 'Every model with an owner column is kept with a reason or deleted in a registered category the everything scope reaches, hints and scopes name what exists, and a delete order exists.',
+    check(_context, options) {
+        const owned = index_1.userOwnedModelRegistry.list().filter((def) => def.ownerField !== undefined);
+        return {
+            scanned: { ownerModels: owned.length, hints: user_data_registries_1.userDataModelRegistry.list().length, scopes: (0, user_data_registries_1.resolvedUserDataScopes)().length },
+            scannedFiles: { ownerModels: owned.map((def) => def.model) },
+            findings: [...(0, registry_checks_1.checkUserDataDecisions)(), ...(0, registry_checks_1.checkUserDataHints)(options.datamodel), ...(0, registry_checks_1.checkUserDataPlan)(options.datamodel)],
+        };
+    },
+    cases() {
+        return [
+            {
+                name: 'decisions: every owner model is kept with a reason or deleted in a category "everything" reaches',
+                run: (report, expect) => {
+                    expect(report.scanned.ownerModels).toBeGreaterThanOrEqual(1);
+                    expect(report.findings.filter((finding) => finding.file === registry_checks_1.FILE_DECISIONS)).toEqual([]);
+                },
+            },
+            {
+                name: 'hints: every hint and scope names a model, column and category that exist',
+                run: (report, expect) => {
+                    expect(report.scanned.scopes).toBeGreaterThanOrEqual(2);
+                    expect(report.findings.filter((finding) => finding.file === registry_checks_1.FILE_HINTS)).toEqual([]);
+                },
+            },
+            {
+                name: 'plan: a delete order exists for the owner models (no cycle)',
+                run: (report, expect) => {
+                    expect(report.findings.filter((finding) => finding.file === registry_checks_1.FILE_PLAN)).toEqual([]);
+                },
+            },
+        ];
+    },
+};
+if (!index_2.conformanceSuites.has(exports.userDataConformanceSuite.id))
+    index_2.conformanceSuites.register(exports.userDataConformanceSuite);
+//# sourceMappingURL=conformance.js.map

package/dist/user-data/testing/conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.js","sourceRoot":"","sources":["../../../src/user-data/testing/conformance.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yDAAyD;AACzD,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,oEAAoE;AACpE,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,0EAA0E;AAC1E,8EAA8E;AAC9E,uEAAuE;AACvE,wDAAwD;AACxD,8EAA8E;AAC9E,EAAE;AACF,mDAAmD;AACnD,+EAA+E;AAC/E,gFAAgF;;;AAEhF,4CAA0D;AAC1D,+CAAwD;AAGxD,wDAO4B;AAGnB,uGANP,wCAAsB,OAMO;AAAE,mGAL/B,oCAAkB,OAK+B;AAAE,kGAJnD,mCAAiB,OAImD;AAFtE,kEAAwF;AAqBxF;;;;;;;;;;;GAWG;AACU,QAAA,wBAAwB,GAAiD;IACpF,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,+CAA+C;IACtD,WAAW,EACT,wLAAwL;IAC1L,KAAK,CAAC,QAAQ,EAAE,OAAO;QACrB,MAAM,KAAK,GAAG,8BAAsB,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;QAC1F,OAAO;YACL,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,4CAAqB,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAA,6CAAsB,GAAE,CAAC,MAAM,EAAE;YAC3H,YAAY,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YAC5D,QAAQ,EAAE,CAAC,GAAG,IAAA,wCAAsB,GAAE,EAAE,GAAG,IAAA,oCAAkB,EAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,IAAA,mCAAiB,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;SAC3H,CAAC;IACJ,CAAC;IACD,KAAK;QACH,OAAO;YACL;gBACE,IAAI,EAAE,kGAAkG;gBACxG,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;oBACtB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;oBAC7D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,gCAAc,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC3F,CAAC;aACF;YACD;gBACE,IAAI,EAAE,2EAA2E;gBACjF,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;oBACtB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;oBACxD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,4BAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACvF,CAAC;aACF;YACD;gBACE,IAAI,EAAE,6DAA6D;gBACnE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;oBACtB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,2BAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACtF,CAAC;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,IAAI,CAAC,yBAAiB,CAAC,GAAG,CAAC,gCAAwB,CAAC,EAAE,CAAC;IAAE,yBAAiB,CAAC,QAAQ,CAAC,gCAAwB,CAAC,CAAC"}

package/dist/user-data/testing/index.d.ts

@@ -0,0 +1,3 @@
+export { checkUserDataDecisions, checkUserDataHints, checkUserDataPlan, userDataConformanceSuite } from './conformance';
+export type { UserDataConformanceOptions } from './conformance';
+//# sourceMappingURL=index.d.ts.map

package/dist/user-data/testing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/user-data/testing/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACxH,YAAY,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC"}

package/dist/user-data/testing/index.js

@@ -0,0 +1,13 @@
+"use strict";
+// `@marinoscar/platform-api/user-data/testing`: the user-data slice's test
+// seams (issue #743): the conformance suite (importing this entry registers it
+// with `runPlatformConformance`). Never import it from production code.
+// Documented in ../README.md.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.userDataConformanceSuite = exports.checkUserDataPlan = exports.checkUserDataHints = exports.checkUserDataDecisions = void 0;
+var conformance_1 = require("./conformance");
+Object.defineProperty(exports, "checkUserDataDecisions", { enumerable: true, get: function () { return conformance_1.checkUserDataDecisions; } });
+Object.defineProperty(exports, "checkUserDataHints", { enumerable: true, get: function () { return conformance_1.checkUserDataHints; } });
+Object.defineProperty(exports, "checkUserDataPlan", { enumerable: true, get: function () { return conformance_1.checkUserDataPlan; } });
+Object.defineProperty(exports, "userDataConformanceSuite", { enumerable: true, get: function () { return conformance_1.userDataConformanceSuite; } });
+//# sourceMappingURL=index.js.map

package/dist/user-data/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/user-data/testing/index.ts"],"names":[],"mappings":";AAAA,2EAA2E;AAC3E,+EAA+E;AAC/E,wEAAwE;AACxE,8BAA8B;;;AAE9B,6CAAwH;AAA/G,qHAAA,sBAAsB,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAAE,gHAAA,iBAAiB,OAAA;AAAE,uHAAA,wBAAwB,OAAA"}