@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.4

package/dist/user-data/index.js

@@ -0,0 +1,118 @@
+"use strict";
+// `@marinoscar/platform-api/user-data`: the user-data slice (issue #743,
+// PP-9.1): the registry-driven per-user deletion with scopes, the admin
+// factory reset and organization offboarding. Documented in ./README.md.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.countUserData = exports.collectUserObjectIds = exports.addCounts = exports.USER_DATA_CHUNK_SIZE = exports.selfUnlinkFields = exports.relationsOf = exports.orderForDeletion = exports.delegateName = exports.backRelationFields = exports.UserDataPlanError = exports.recentOrgExportPrecondition = exports.RECENT_ORG_EXPORT_PRECONDITION_ID = exports.RECENT_ORG_EXPORT_PRECONDITION = exports.groupMembershipRemovalHook = exports.registerPlatformUserData = exports.PLATFORM_USER_DATA_MODELS = exports.PLATFORM_USER_DATA_CATEGORIES = exports.PLATFORM_FACTORY_RESET_STEPS = exports.userDataScopeRegistry = exports.userDataModelRegistry = exports.userDataKeptLines = exports.userDataCategoryRegistry = exports.storageObjectModelHint = exports.resolvedUserDataScopes = exports.registerUserDataScope = exports.registerUserDataModels = exports.registerUserDataCategory = exports.registerOffboardingPrecondition = exports.registerFactoryResetStep = exports.offboardingPreconditionRegistry = exports.findUserDataScope = exports.factoryResetStepRegistry = exports.factoryResetKeptLines = exports.factoryResetDeletedLines = exports.categoriesOfScope = exports.USER_DATA_OTHER_CATEGORY = exports.BUILT_IN_USER_DATA_SCOPES = exports.BUILT_IN_USER_DATA_KEPT = exports.BUILT_IN_FACTORY_RESET_KEPT = exports.BUILT_IN_FACTORY_RESET_DELETED = exports.UserDataRegistriesDoctorCheck = exports.findComposedSchemaPath = exports.composedSchemaDatamodel = exports.DefaultUserDataEnvironment = exports.USER_DATA_ENVIRONMENT = exports.USER_DATA_DB = exports.resolveUserDataModuleOptions = exports.USER_DATA_TX_TIMEOUT_MS = exports.USER_DATA_OPTIONS = exports.UserDataModule = void 0;
+exports.USER_DATA_PURGES_METRIC = exports.USER_DATA_METRIC_OUTCOMES = exports.USER_DATA_AUDIT_ACTIONS = exports.USER_DATA_APP_METRICS = exports.ORG_OFFBOARDINGS_METRIC = exports.FACTORY_RESET_RUNS_METRIC = exports.USER_DATA_PERMISSIONS = exports.createUserDataControllers = exports.UserDataSummaryDto = exports.UserDataJobStartedDto = exports.UserDataDeletionStatusDto = exports.UserDataDeletionRequestDto = exports.OrgOffboardingSummaryDto = exports.OrgOffboardingStatusDto = exports.OrgOffboardingRequestDto = exports.FactoryResetSummaryDto = exports.FactoryResetStatusDto = exports.FactoryResetRequestDto = exports.UserDataService = exports.OrgOffboardingService = exports.FactoryResetService = exports.OrgOffboardHandler = exports.ORG_OFFBOARD_SUBJECT_TYPE = exports.ORG_OFFBOARD_PROFILE = exports.FactoryResetHandler = exports.FACTORY_RESET_PROFILE = exports.FACTORY_RESET_ACTOR_ORG_ROLE = exports.UserDataPurgeHandler = exports.USER_DATA_PURGE_PROFILE = exports.LegacyUserDataPurgeHandlers = exports.LegacyUserDataPurgeHandler = exports.userDataPurgeInputSchema = exports.UserPurgeRunner = exports.USER_DATA_SUBJECT_TYPE = exports.UserDataPlanService = exports.readCounts = exports.planUserPurge = exports.deleteUserRows = exports.deleteStorageObjects = void 0;
+var user_data_module_1 = require("./user-data.module");
+Object.defineProperty(exports, "UserDataModule", { enumerable: true, get: function () { return user_data_module_1.UserDataModule; } });
+var user_data_options_1 = require("./user-data.options");
+Object.defineProperty(exports, "USER_DATA_OPTIONS", { enumerable: true, get: function () { return user_data_options_1.USER_DATA_OPTIONS; } });
+Object.defineProperty(exports, "USER_DATA_TX_TIMEOUT_MS", { enumerable: true, get: function () { return user_data_options_1.USER_DATA_TX_TIMEOUT_MS; } });
+Object.defineProperty(exports, "resolveUserDataModuleOptions", { enumerable: true, get: function () { return user_data_options_1.resolveUserDataModuleOptions; } });
+var ports_1 = require("./ports");
+Object.defineProperty(exports, "USER_DATA_DB", { enumerable: true, get: function () { return ports_1.USER_DATA_DB; } });
+Object.defineProperty(exports, "USER_DATA_ENVIRONMENT", { enumerable: true, get: function () { return ports_1.USER_DATA_ENVIRONMENT; } });
+var default_environment_1 = require("./default-environment");
+Object.defineProperty(exports, "DefaultUserDataEnvironment", { enumerable: true, get: function () { return default_environment_1.DefaultUserDataEnvironment; } });
+var composed_schema_1 = require("./composed-schema");
+Object.defineProperty(exports, "composedSchemaDatamodel", { enumerable: true, get: function () { return composed_schema_1.composedSchemaDatamodel; } });
+Object.defineProperty(exports, "findComposedSchemaPath", { enumerable: true, get: function () { return composed_schema_1.findComposedSchemaPath; } });
+var user_data_registries_doctor_check_1 = require("./doctor/user-data-registries.doctor-check");
+Object.defineProperty(exports, "UserDataRegistriesDoctorCheck", { enumerable: true, get: function () { return user_data_registries_doctor_check_1.UserDataRegistriesDoctorCheck; } });
+var user_data_registries_1 = require("./user-data.registries");
+Object.defineProperty(exports, "BUILT_IN_FACTORY_RESET_DELETED", { enumerable: true, get: function () { return user_data_registries_1.BUILT_IN_FACTORY_RESET_DELETED; } });
+Object.defineProperty(exports, "BUILT_IN_FACTORY_RESET_KEPT", { enumerable: true, get: function () { return user_data_registries_1.BUILT_IN_FACTORY_RESET_KEPT; } });
+Object.defineProperty(exports, "BUILT_IN_USER_DATA_KEPT", { enumerable: true, get: function () { return user_data_registries_1.BUILT_IN_USER_DATA_KEPT; } });
+Object.defineProperty(exports, "BUILT_IN_USER_DATA_SCOPES", { enumerable: true, get: function () { return user_data_registries_1.BUILT_IN_USER_DATA_SCOPES; } });
+Object.defineProperty(exports, "USER_DATA_OTHER_CATEGORY", { enumerable: true, get: function () { return user_data_registries_1.USER_DATA_OTHER_CATEGORY; } });
+Object.defineProperty(exports, "categoriesOfScope", { enumerable: true, get: function () { return user_data_registries_1.categoriesOfScope; } });
+Object.defineProperty(exports, "factoryResetDeletedLines", { enumerable: true, get: function () { return user_data_registries_1.factoryResetDeletedLines; } });
+Object.defineProperty(exports, "factoryResetKeptLines", { enumerable: true, get: function () { return user_data_registries_1.factoryResetKeptLines; } });
+Object.defineProperty(exports, "factoryResetStepRegistry", { enumerable: true, get: function () { return user_data_registries_1.factoryResetStepRegistry; } });
+Object.defineProperty(exports, "findUserDataScope", { enumerable: true, get: function () { return user_data_registries_1.findUserDataScope; } });
+Object.defineProperty(exports, "offboardingPreconditionRegistry", { enumerable: true, get: function () { return user_data_registries_1.offboardingPreconditionRegistry; } });
+Object.defineProperty(exports, "registerFactoryResetStep", { enumerable: true, get: function () { return user_data_registries_1.registerFactoryResetStep; } });
+Object.defineProperty(exports, "registerOffboardingPrecondition", { enumerable: true, get: function () { return user_data_registries_1.registerOffboardingPrecondition; } });
+Object.defineProperty(exports, "registerUserDataCategory", { enumerable: true, get: function () { return user_data_registries_1.registerUserDataCategory; } });
+Object.defineProperty(exports, "registerUserDataModels", { enumerable: true, get: function () { return user_data_registries_1.registerUserDataModels; } });
+Object.defineProperty(exports, "registerUserDataScope", { enumerable: true, get: function () { return user_data_registries_1.registerUserDataScope; } });
+Object.defineProperty(exports, "resolvedUserDataScopes", { enumerable: true, get: function () { return user_data_registries_1.resolvedUserDataScopes; } });
+Object.defineProperty(exports, "storageObjectModelHint", { enumerable: true, get: function () { return user_data_registries_1.storageObjectModelHint; } });
+Object.defineProperty(exports, "userDataCategoryRegistry", { enumerable: true, get: function () { return user_data_registries_1.userDataCategoryRegistry; } });
+Object.defineProperty(exports, "userDataKeptLines", { enumerable: true, get: function () { return user_data_registries_1.userDataKeptLines; } });
+Object.defineProperty(exports, "userDataModelRegistry", { enumerable: true, get: function () { return user_data_registries_1.userDataModelRegistry; } });
+Object.defineProperty(exports, "userDataScopeRegistry", { enumerable: true, get: function () { return user_data_registries_1.userDataScopeRegistry; } });
+var platform_user_data_1 = require("./platform-user-data");
+Object.defineProperty(exports, "PLATFORM_FACTORY_RESET_STEPS", { enumerable: true, get: function () { return platform_user_data_1.PLATFORM_FACTORY_RESET_STEPS; } });
+Object.defineProperty(exports, "PLATFORM_USER_DATA_CATEGORIES", { enumerable: true, get: function () { return platform_user_data_1.PLATFORM_USER_DATA_CATEGORIES; } });
+Object.defineProperty(exports, "PLATFORM_USER_DATA_MODELS", { enumerable: true, get: function () { return platform_user_data_1.PLATFORM_USER_DATA_MODELS; } });
+Object.defineProperty(exports, "registerPlatformUserData", { enumerable: true, get: function () { return platform_user_data_1.registerPlatformUserData; } });
+var user_removal_hooks_1 = require("./user-removal-hooks");
+Object.defineProperty(exports, "groupMembershipRemovalHook", { enumerable: true, get: function () { return user_removal_hooks_1.groupMembershipRemovalHook; } });
+var recent_org_export_1 = require("./preconditions/recent-org-export");
+Object.defineProperty(exports, "RECENT_ORG_EXPORT_PRECONDITION", { enumerable: true, get: function () { return recent_org_export_1.RECENT_ORG_EXPORT_PRECONDITION; } });
+Object.defineProperty(exports, "RECENT_ORG_EXPORT_PRECONDITION_ID", { enumerable: true, get: function () { return recent_org_export_1.RECENT_ORG_EXPORT_PRECONDITION_ID; } });
+Object.defineProperty(exports, "recentOrgExportPrecondition", { enumerable: true, get: function () { return recent_org_export_1.recentOrgExportPrecondition; } });
+var purge_planner_1 = require("./purge/purge-planner");
+Object.defineProperty(exports, "UserDataPlanError", { enumerable: true, get: function () { return purge_planner_1.UserDataPlanError; } });
+Object.defineProperty(exports, "backRelationFields", { enumerable: true, get: function () { return purge_planner_1.backRelationFields; } });
+Object.defineProperty(exports, "delegateName", { enumerable: true, get: function () { return purge_planner_1.delegateName; } });
+Object.defineProperty(exports, "orderForDeletion", { enumerable: true, get: function () { return purge_planner_1.orderForDeletion; } });
+Object.defineProperty(exports, "relationsOf", { enumerable: true, get: function () { return purge_planner_1.relationsOf; } });
+Object.defineProperty(exports, "selfUnlinkFields", { enumerable: true, get: function () { return purge_planner_1.selfUnlinkFields; } });
+var user_purge_1 = require("./purge/user-purge");
+Object.defineProperty(exports, "USER_DATA_CHUNK_SIZE", { enumerable: true, get: function () { return user_purge_1.USER_DATA_CHUNK_SIZE; } });
+Object.defineProperty(exports, "addCounts", { enumerable: true, get: function () { return user_purge_1.addCounts; } });
+Object.defineProperty(exports, "collectUserObjectIds", { enumerable: true, get: function () { return user_purge_1.collectUserObjectIds; } });
+Object.defineProperty(exports, "countUserData", { enumerable: true, get: function () { return user_purge_1.countUserData; } });
+Object.defineProperty(exports, "deleteStorageObjects", { enumerable: true, get: function () { return user_purge_1.deleteStorageObjects; } });
+Object.defineProperty(exports, "deleteUserRows", { enumerable: true, get: function () { return user_purge_1.deleteUserRows; } });
+Object.defineProperty(exports, "planUserPurge", { enumerable: true, get: function () { return user_purge_1.planUserPurge; } });
+Object.defineProperty(exports, "readCounts", { enumerable: true, get: function () { return user_purge_1.readCounts; } });
+var user_data_plan_service_1 = require("./user-data-plan.service");
+Object.defineProperty(exports, "UserDataPlanService", { enumerable: true, get: function () { return user_data_plan_service_1.UserDataPlanService; } });
+var user_purge_runner_1 = require("./user-purge.runner");
+Object.defineProperty(exports, "USER_DATA_SUBJECT_TYPE", { enumerable: true, get: function () { return user_purge_runner_1.USER_DATA_SUBJECT_TYPE; } });
+Object.defineProperty(exports, "UserPurgeRunner", { enumerable: true, get: function () { return user_purge_runner_1.UserPurgeRunner; } });
+Object.defineProperty(exports, "userDataPurgeInputSchema", { enumerable: true, get: function () { return user_purge_runner_1.userDataPurgeInputSchema; } });
+var user_data_purge_handler_1 = require("./handlers/user-data-purge.handler");
+Object.defineProperty(exports, "LegacyUserDataPurgeHandler", { enumerable: true, get: function () { return user_data_purge_handler_1.LegacyUserDataPurgeHandler; } });
+Object.defineProperty(exports, "LegacyUserDataPurgeHandlers", { enumerable: true, get: function () { return user_data_purge_handler_1.LegacyUserDataPurgeHandlers; } });
+Object.defineProperty(exports, "USER_DATA_PURGE_PROFILE", { enumerable: true, get: function () { return user_data_purge_handler_1.USER_DATA_PURGE_PROFILE; } });
+Object.defineProperty(exports, "UserDataPurgeHandler", { enumerable: true, get: function () { return user_data_purge_handler_1.UserDataPurgeHandler; } });
+var factory_reset_handler_1 = require("./handlers/factory-reset.handler");
+Object.defineProperty(exports, "FACTORY_RESET_ACTOR_ORG_ROLE", { enumerable: true, get: function () { return factory_reset_handler_1.FACTORY_RESET_ACTOR_ORG_ROLE; } });
+Object.defineProperty(exports, "FACTORY_RESET_PROFILE", { enumerable: true, get: function () { return factory_reset_handler_1.FACTORY_RESET_PROFILE; } });
+Object.defineProperty(exports, "FactoryResetHandler", { enumerable: true, get: function () { return factory_reset_handler_1.FactoryResetHandler; } });
+var org_offboard_handler_1 = require("./handlers/org-offboard.handler");
+Object.defineProperty(exports, "ORG_OFFBOARD_PROFILE", { enumerable: true, get: function () { return org_offboard_handler_1.ORG_OFFBOARD_PROFILE; } });
+Object.defineProperty(exports, "ORG_OFFBOARD_SUBJECT_TYPE", { enumerable: true, get: function () { return org_offboard_handler_1.ORG_OFFBOARD_SUBJECT_TYPE; } });
+Object.defineProperty(exports, "OrgOffboardHandler", { enumerable: true, get: function () { return org_offboard_handler_1.OrgOffboardHandler; } });
+var user_data_service_1 = require("./user-data.service");
+Object.defineProperty(exports, "FactoryResetService", { enumerable: true, get: function () { return user_data_service_1.FactoryResetService; } });
+Object.defineProperty(exports, "OrgOffboardingService", { enumerable: true, get: function () { return user_data_service_1.OrgOffboardingService; } });
+Object.defineProperty(exports, "UserDataService", { enumerable: true, get: function () { return user_data_service_1.UserDataService; } });
+var user_data_controller_1 = require("./user-data.controller");
+Object.defineProperty(exports, "FactoryResetRequestDto", { enumerable: true, get: function () { return user_data_controller_1.FactoryResetRequestDto; } });
+Object.defineProperty(exports, "FactoryResetStatusDto", { enumerable: true, get: function () { return user_data_controller_1.FactoryResetStatusDto; } });
+Object.defineProperty(exports, "FactoryResetSummaryDto", { enumerable: true, get: function () { return user_data_controller_1.FactoryResetSummaryDto; } });
+Object.defineProperty(exports, "OrgOffboardingRequestDto", { enumerable: true, get: function () { return user_data_controller_1.OrgOffboardingRequestDto; } });
+Object.defineProperty(exports, "OrgOffboardingStatusDto", { enumerable: true, get: function () { return user_data_controller_1.OrgOffboardingStatusDto; } });
+Object.defineProperty(exports, "OrgOffboardingSummaryDto", { enumerable: true, get: function () { return user_data_controller_1.OrgOffboardingSummaryDto; } });
+Object.defineProperty(exports, "UserDataDeletionRequestDto", { enumerable: true, get: function () { return user_data_controller_1.UserDataDeletionRequestDto; } });
+Object.defineProperty(exports, "UserDataDeletionStatusDto", { enumerable: true, get: function () { return user_data_controller_1.UserDataDeletionStatusDto; } });
+Object.defineProperty(exports, "UserDataJobStartedDto", { enumerable: true, get: function () { return user_data_controller_1.UserDataJobStartedDto; } });
+Object.defineProperty(exports, "UserDataSummaryDto", { enumerable: true, get: function () { return user_data_controller_1.UserDataSummaryDto; } });
+Object.defineProperty(exports, "createUserDataControllers", { enumerable: true, get: function () { return user_data_controller_1.createUserDataControllers; } });
+var user_data_permissions_1 = require("./user-data.permissions");
+Object.defineProperty(exports, "USER_DATA_PERMISSIONS", { enumerable: true, get: function () { return user_data_permissions_1.USER_DATA_PERMISSIONS; } });
+var user_data_metrics_1 = require("./user-data.metrics");
+Object.defineProperty(exports, "FACTORY_RESET_RUNS_METRIC", { enumerable: true, get: function () { return user_data_metrics_1.FACTORY_RESET_RUNS_METRIC; } });
+Object.defineProperty(exports, "ORG_OFFBOARDINGS_METRIC", { enumerable: true, get: function () { return user_data_metrics_1.ORG_OFFBOARDINGS_METRIC; } });
+Object.defineProperty(exports, "USER_DATA_APP_METRICS", { enumerable: true, get: function () { return user_data_metrics_1.USER_DATA_APP_METRICS; } });
+Object.defineProperty(exports, "USER_DATA_AUDIT_ACTIONS", { enumerable: true, get: function () { return user_data_metrics_1.USER_DATA_AUDIT_ACTIONS; } });
+Object.defineProperty(exports, "USER_DATA_METRIC_OUTCOMES", { enumerable: true, get: function () { return user_data_metrics_1.USER_DATA_METRIC_OUTCOMES; } });
+Object.defineProperty(exports, "USER_DATA_PURGES_METRIC", { enumerable: true, get: function () { return user_data_metrics_1.USER_DATA_PURGES_METRIC; } });
+//# sourceMappingURL=index.js.map

package/dist/user-data/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/user-data/index.ts"],"names":[],"mappings":";AAAA,yEAAyE;AACzE,wEAAwE;AACxE,yEAAyE;;;;AAEzE,uDAAoD;AAA3C,kHAAA,cAAc,OAAA;AACvB,yDAI6B;AAH3B,sHAAA,iBAAiB,OAAA;AACjB,4HAAA,uBAAuB,OAAA;AACvB,iIAAA,4BAA4B,OAAA;AAG9B,iCAA8D;AAArD,qGAAA,YAAY,OAAA;AAAE,8GAAA,qBAAqB,OAAA;AAC5C,6DAAmE;AAA1D,iIAAA,0BAA0B,OAAA;AACnC,qDAAoF;AAA3E,0HAAA,uBAAuB,OAAA;AAAE,yHAAA,sBAAsB,OAAA;AACxD,gGAA2F;AAAlF,kJAAA,6BAA6B,OAAA;AAgBtC,+DAuBgC;AAtB9B,sIAAA,8BAA8B,OAAA;AAC9B,mIAAA,2BAA2B,OAAA;AAC3B,+HAAA,uBAAuB,OAAA;AACvB,iIAAA,yBAAyB,OAAA;AACzB,gIAAA,wBAAwB,OAAA;AACxB,yHAAA,iBAAiB,OAAA;AACjB,gIAAA,wBAAwB,OAAA;AACxB,6HAAA,qBAAqB,OAAA;AACrB,gIAAA,wBAAwB,OAAA;AACxB,yHAAA,iBAAiB,OAAA;AACjB,uIAAA,+BAA+B,OAAA;AAC/B,gIAAA,wBAAwB,OAAA;AACxB,uIAAA,+BAA+B,OAAA;AAC/B,gIAAA,wBAAwB,OAAA;AACxB,8HAAA,sBAAsB,OAAA;AACtB,6HAAA,qBAAqB,OAAA;AACrB,8HAAA,sBAAsB,OAAA;AACtB,8HAAA,sBAAsB,OAAA;AACtB,gIAAA,wBAAwB,OAAA;AACxB,yHAAA,iBAAiB,OAAA;AACjB,6HAAA,qBAAqB,OAAA;AACrB,6HAAA,qBAAqB,OAAA;AAEvB,2DAK8B;AAJ5B,kIAAA,4BAA4B,OAAA;AAC5B,mIAAA,6BAA6B,OAAA;AAC7B,+HAAA,yBAAyB,OAAA;AACzB,8HAAA,wBAAwB,OAAA;AAE1B,2DAAkE;AAAzD,gIAAA,0BAA0B,OAAA;AACnC,uEAI2C;AAHzC,mIAAA,8BAA8B,OAAA;AAC9B,sIAAA,iCAAiC,OAAA;AACjC,gIAAA,2BAA2B,OAAA;AAE7B,uDAO+B;AAN7B,kHAAA,iBAAiB,OAAA;AACjB,mHAAA,kBAAkB,OAAA;AAClB,6GAAA,YAAY,OAAA;AACZ,iHAAA,gBAAgB,OAAA;AAChB,4GAAA,WAAW,OAAA;AACX,iHAAA,gBAAgB,OAAA;AAGlB,iDAS4B;AAR1B,kHAAA,oBAAoB,OAAA;AACpB,uGAAA,SAAS,OAAA;AACT,kHAAA,oBAAoB,OAAA;AACpB,2GAAA,aAAa,OAAA;AACb,kHAAA,oBAAoB,OAAA;AACpB,4GAAA,cAAc,OAAA;AACd,2GAAA,aAAa,OAAA;AACb,wGAAA,UAAU,OAAA;AAWZ,mEAA+D;AAAtD,6HAAA,mBAAmB,OAAA;AAE5B,yDAAwG;AAA/F,2HAAA,sBAAsB,OAAA;AAAE,oHAAA,eAAe,OAAA;AAAE,6HAAA,wBAAwB,OAAA;AAE1E,8EAK4C;AAJ1C,qIAAA,0BAA0B,OAAA;AAC1B,sIAAA,2BAA2B,OAAA;AAC3B,kIAAA,uBAAuB,OAAA;AACvB,+HAAA,oBAAoB,OAAA;AAEtB,0EAA4H;AAAnH,qIAAA,4BAA4B,OAAA;AAAE,8HAAA,qBAAqB,OAAA;AAAE,4HAAA,mBAAmB,OAAA;AACjF,wEAAsH;AAA7G,4HAAA,oBAAoB,OAAA;AAAE,iIAAA,yBAAyB,OAAA;AAAE,0HAAA,kBAAkB,OAAA;AAC5E,yDAAkG;AAAzF,wHAAA,mBAAmB,OAAA;AAAE,0HAAA,qBAAqB,OAAA;AAAE,oHAAA,eAAe,OAAA;AACpE,+DAYgC;AAX9B,8HAAA,sBAAsB,OAAA;AACtB,6HAAA,qBAAqB,OAAA;AACrB,8HAAA,sBAAsB,OAAA;AACtB,gIAAA,wBAAwB,OAAA;AACxB,+HAAA,uBAAuB,OAAA;AACvB,gIAAA,wBAAwB,OAAA;AACxB,kIAAA,0BAA0B,OAAA;AAC1B,iIAAA,yBAAyB,OAAA;AACzB,6HAAA,qBAAqB,OAAA;AACrB,0HAAA,kBAAkB,OAAA;AAClB,iIAAA,yBAAyB,OAAA;AAE3B,iEAAgE;AAAvD,8HAAA,qBAAqB,OAAA;AAE9B,yDAO6B;AAN3B,8HAAA,yBAAyB,OAAA;AACzB,4HAAA,uBAAuB,OAAA;AACvB,0HAAA,qBAAqB,OAAA;AACrB,4HAAA,uBAAuB,OAAA;AACvB,8HAAA,yBAAyB,OAAA;AACzB,4HAAA,uBAAuB,OAAA"}

package/dist/user-data/platform-user-data.d.ts

@@ -0,0 +1,39 @@
+import type { FactoryResetStepDef, UserDataCategoryDef, UserDataModelHint } from './user-data.types';
+/**
+ * The platform's categories, in display order: `files`, `notifications`,
+ * `ai`, `credentials` and `settings` (the last two `content: false`), and
+ * `other`, where a model without a hint lands.
+ *
+ * @stability experimental
+ */
+export declare const PLATFORM_USER_DATA_CATEGORIES: readonly UserDataCategoryDef[];
+/**
+ * A keep-or-delete hint for every platform model with an owner column, plus
+ * the factory reset decision for the platform's configuration tables.
+ *
+ * @stability experimental
+ */
+export declare const PLATFORM_USER_DATA_MODELS: readonly UserDataModelHint[];
+/**
+ * The platform's deployment-wide factory reset leftovers (phase
+ * `deployment`): broadcasts, every remaining device code, the job statistics
+ * rollup, and the allowlist except the administrator's own entry.
+ *
+ * @stability experimental
+ */
+export declare const PLATFORM_FACTORY_RESET_STEPS: readonly FactoryResetStepDef[];
+/**
+ * Registers {@link PLATFORM_USER_DATA_CATEGORIES},
+ * {@link PLATFORM_USER_DATA_MODELS} and {@link PLATFORM_FACTORY_RESET_STEPS}.
+ * Idempotent: an entry already registered is skipped. Call it first in the
+ * app's user-data manifest, before the app's own entries.
+ *
+ * @stability experimental
+ * @example
+ * ```ts
+ * registerPlatformUserData();
+ * registerUserDataModels(APP_USER_DATA_MODELS);
+ * ```
+ */
+export declare function registerPlatformUserData(): void;
+//# sourceMappingURL=platform-user-data.d.ts.map

package/dist/user-data/platform-user-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-user-data.d.ts","sourceRoot":"","sources":["../../src/user-data/platform-user-data.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAWrG;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,EAAE,SAAS,mBAAmB,EA0BtE,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,iBAAiB,EAsBhE,CAAC;AAOH;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,mBAAmB,EA2CrE,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,IAAI,IAAI,CAQ/C"}

package/dist/user-data/platform-user-data.js

@@ -0,0 +1,167 @@
+"use strict";
+// =============================================================================
+// The platform's own user-data declarations (issue #743, PP-9.1)
+// =============================================================================
+//
+// Pure data for the five registries, covering the PLATFORM's models only: the
+// categories the Danger Zone shows on a fresh install, a keep-or-delete hint
+// for every platform model with an owner column, and the deployment-wide
+// leftovers of the factory reset. An app registers these first, then its own
+// (`registerPlatformUserData()` in its manifest).
+//
+// Kept by every data reset (EvoPath's rule, plus the tenancy tables): the
+// account (`UserIdentity`, `UserRole`), the session (`RefreshToken`, so the
+// user stays signed in to read the result), memberships of organizations and
+// groups, shares granted to the user, and the deployment's worker nodes and
+// their credentials. `User`, `AllowedEmail` and `AuditEvent` have no owner
+// column and are never touched by a user purge.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PLATFORM_FACTORY_RESET_STEPS = exports.PLATFORM_USER_DATA_MODELS = exports.PLATFORM_USER_DATA_CATEGORIES = void 0;
+exports.registerPlatformUserData = registerPlatformUserData;
+const user_data_registries_1 = require("./user-data.registries");
+/**
+ * The platform's categories, in display order: `files`, `notifications`,
+ * `ai`, `credentials` and `settings` (the last two `content: false`), and
+ * `other`, where a model without a hint lands.
+ *
+ * @stability experimental
+ */
+exports.PLATFORM_USER_DATA_CATEGORIES = Object.freeze([
+    { id: 'files', label: 'Files', description: 'Everything you uploaded, and its bytes in object storage.', content: true, order: 10 },
+    {
+        id: 'notifications',
+        label: 'Notifications',
+        description: 'Your inbox, the record of what was sent to you, and your browser push subscriptions.',
+        content: true,
+        order: 20,
+    },
+    { id: 'ai', label: 'AI history and keys', description: 'Your AI runs, their usage records and your own provider keys.', content: true, order: 30 },
+    {
+        id: 'credentials',
+        label: 'Access tokens and credentials',
+        description: 'Personal access tokens, pending device logins and your stored credentials. Scripts using a token stop working.',
+        content: false,
+        order: 40,
+    },
+    {
+        id: 'settings',
+        label: 'Settings',
+        description: 'Your preferences, display name and profile image. They return to the defaults.',
+        content: false,
+        order: 50,
+        clearUserFields: ['displayName', 'profileImageUrl'],
+    },
+    { id: user_data_registries_1.USER_DATA_OTHER_CATEGORY, label: 'Other data', description: 'Anything else you own in this application.', content: true, order: 90 },
+]);
+/**
+ * A keep-or-delete hint for every platform model with an owner column, plus
+ * the factory reset decision for the platform's configuration tables.
+ *
+ * @stability experimental
+ */
+exports.PLATFORM_USER_DATA_MODELS = Object.freeze([
+    { model: 'StorageObject', category: 'files', storageObjects: true },
+    { model: 'Notification', category: 'notifications' },
+    { model: 'NotificationDelivery', category: 'notifications' },
+    { model: 'PushSubscription', category: 'notifications' },
+    { model: 'AiRun', category: 'ai' },
+    { model: 'AiUsageEvent', category: 'ai' },
+    { model: 'UserAiKey', category: 'ai' },
+    { model: 'PersonalAccessToken', category: 'credentials' },
+    { model: 'DeviceCode', category: 'credentials' },
+    { model: 'UserCredential', category: 'credentials' },
+    { model: 'UserSettings', category: 'settings' },
+    { model: 'UserIdentity', keep: 'Account state: the user keeps signing in with it.' },
+    { model: 'UserRole', keep: "Access model: the user keeps their role." },
+    { model: 'RefreshToken', keep: 'The session survives, so the user can read the result.' },
+    { model: 'Membership', keep: "Tenancy: a data reset never removes the user from an organization." },
+    { model: 'GroupMember', keep: 'Access model: group memberships are removed only with the user row (GroupMembershipPurge).' },
+    { model: 'Grant', keep: 'Access model: a share belongs to the record owner, not to the grantee.' },
+    { model: 'WorkerNode', keep: 'Deployment infrastructure; the factory reset reassigns nodes to the administrator.' },
+    { model: 'NodeCredential', keep: 'A worker node identity, deployment infrastructure.' },
+    { model: 'OrgSettings', factoryReset: 'keep' },
+    { model: 'OrgCredential', factoryReset: 'keep' },
+]);
+/** A delegate of the app's client, or `undefined` when the schema has no such model. */
+function delegate(tx, name) {
+    return tx?.[name];
+}
+/**
+ * The platform's deployment-wide factory reset leftovers (phase
+ * `deployment`): broadcasts, every remaining device code, the job statistics
+ * rollup, and the allowlist except the administrator's own entry.
+ *
+ * @stability experimental
+ */
+exports.PLATFORM_FACTORY_RESET_STEPS = Object.freeze([
+    {
+        id: 'platform.broadcasts',
+        phase: 'deployment',
+        description: 'Every notification broadcast.',
+        async run(tx) {
+            const model = delegate(tx, 'notificationBroadcast');
+            return model ? { broadcasts: (await model.deleteMany({})).count } : {};
+        },
+    },
+    {
+        id: 'platform.device-codes',
+        phase: 'deployment',
+        description: 'Every remaining device code (device logins in flight are lost).',
+        async run(tx) {
+            const model = delegate(tx, 'deviceCode');
+            return model ? { deviceCodes: (await model.deleteMany({})).count } : {};
+        },
+    },
+    {
+        id: 'platform.job-stats',
+        phase: 'deployment',
+        description: 'The job statistics rollup.',
+        async run(tx) {
+            const model = delegate(tx, 'jobStatsRollup');
+            return model ? { rollups: (await model.deleteMany({})).count } : {};
+        },
+    },
+    {
+        id: 'platform.allowlist',
+        phase: 'deployment',
+        description: "Every allowlist entry except the administrator's own.",
+        async run(tx, ctx) {
+            const model = delegate(tx, 'allowedEmail');
+            if (!model)
+                return {};
+            const actor = await tx.user.findUnique({ where: { id: ctx.actorUserId }, select: { email: true } });
+            // Spelled without NOT(... OR ...) over a nullable column: in SQL that is
+            // NULL for an unclaimed entry, and the entry would survive.
+            const where = { OR: [{ claimedById: null }, { claimedById: { not: ctx.actorUserId } }] };
+            if (actor?.email)
+                where.NOT = { email: { equals: actor.email, mode: 'insensitive' } };
+            return { allowlistEntries: (await model.deleteMany({ where })).count };
+        },
+    },
+]);
+/**
+ * Registers {@link PLATFORM_USER_DATA_CATEGORIES},
+ * {@link PLATFORM_USER_DATA_MODELS} and {@link PLATFORM_FACTORY_RESET_STEPS}.
+ * Idempotent: an entry already registered is skipped. Call it first in the
+ * app's user-data manifest, before the app's own entries.
+ *
+ * @stability experimental
+ * @example
+ * ```ts
+ * registerPlatformUserData();
+ * registerUserDataModels(APP_USER_DATA_MODELS);
+ * ```
+ */
+function registerPlatformUserData() {
+    for (const def of exports.PLATFORM_USER_DATA_CATEGORIES) {
+        if (!user_data_registries_1.userDataCategoryRegistry.has(def.id))
+            (0, user_data_registries_1.registerUserDataCategory)(def);
+    }
+    (0, user_data_registries_1.registerUserDataModels)(exports.PLATFORM_USER_DATA_MODELS.filter((def) => !user_data_registries_1.userDataModelRegistry.has(def.model)));
+    for (const step of exports.PLATFORM_FACTORY_RESET_STEPS) {
+        if (!user_data_registries_1.factoryResetStepRegistry.has(step.id))
+            (0, user_data_registries_1.registerFactoryResetStep)(step);
+    }
+}
+//# sourceMappingURL=platform-user-data.js.map

package/dist/user-data/platform-user-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-user-data.js","sourceRoot":"","sources":["../../src/user-data/platform-user-data.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,iEAAiE;AACjE,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,kDAAkD;AAClD,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,2EAA2E;AAC3E,gDAAgD;AAChD,gFAAgF;;;AAoJhF,4DAQC;AAzJD,iEAQgC;AAEhC;;;;;;GAMG;AACU,QAAA,6BAA6B,GAAmC,MAAM,CAAC,MAAM,CAAC;IACzF,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,2DAA2D,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;IACnI;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,sFAAsF;QACnG,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,EAAE;KACV;IACD,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,+DAA+D,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;IAClJ;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,gHAAgH;QAC7H,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE;KACV;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,gFAAgF;QAC7F,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE;QACT,eAAe,EAAE,CAAC,aAAa,EAAE,iBAAiB,CAAC;KACpD;IACD,EAAE,EAAE,EAAE,+CAAwB,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,4CAA4C,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;CAC3I,CAAC,CAAC;AAEH;;;;;GAKG;AACU,QAAA,yBAAyB,GAAiC,MAAM,CAAC,MAAM,CAAC;IACnF,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE;IACnE,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,eAAe,EAAE;IACpD,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,eAAe,EAAE;IAC5D,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,eAAe,EAAE;IACxD,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAClC,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE;IACzC,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE;IACtC,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,aAAa,EAAE;IACzD,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE;IAChD,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE;IACpD,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC/C,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,mDAAmD,EAAE;IACpF,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,0CAA0C,EAAE;IACvE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,wDAAwD,EAAE;IACzF,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,oEAAoE,EAAE;IACnG,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,4FAA4F,EAAE;IAC5H,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,wEAAwE,EAAE;IAClG,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,oFAAoF,EAAE;IACnH,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,oDAAoD,EAAE;IACvF,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE;IAC9C,EAAE,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,EAAE;CACjD,CAAC,CAAC;AAEH,wFAAwF;AACxF,SAAS,QAAQ,CAAC,EAAO,EAAE,IAAY;IACrC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACU,QAAA,4BAA4B,GAAmC,MAAM,CAAC,MAAM,CAAwB;IAC/G;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,YAAqB;QAC5B,WAAW,EAAE,+BAA+B;QAC5C,KAAK,CAAC,GAAG,CAAC,EAAO;YACf,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;YACpD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,CAAC;KACF;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,YAAqB;QAC5B,WAAW,EAAE,iEAAiE;QAC9E,KAAK,CAAC,GAAG,CAAC,EAAO;YACf,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;YACzC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,CAAC;KACF;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,YAAqB;QAC5B,WAAW,EAAE,4BAA4B;QACzC,KAAK,CAAC,GAAG,CAAC,EAAO;YACf,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,CAAC;KACF;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,YAAqB;QAC5B,WAAW,EAAE,uDAAuD;QACpE,KAAK,CAAC,GAAG,CAAC,EAAO,EAAE,GAAG;YACpB,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;YAC3C,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACpG,yEAAyE;YACzE,4DAA4D;YAC5D,MAAM,KAAK,GAA4B,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC;YAClH,IAAI,KAAK,EAAE,KAAK;gBAAE,KAAK,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC;YACtF,OAAO,EAAE,gBAAgB,EAAE,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QACzE,CAAC;KACF;CACF,CAAC,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,SAAgB,wBAAwB;IACtC,KAAK,MAAM,GAAG,IAAI,qCAA6B,EAAE,CAAC;QAChD,IAAI,CAAC,+CAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,IAAA,+CAAwB,EAAC,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,IAAA,6CAAsB,EAAC,iCAAyB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,4CAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzG,KAAK,MAAM,IAAI,IAAI,oCAA4B,EAAE,CAAC;QAChD,IAAI,CAAC,+CAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,IAAA,+CAAwB,EAAC,IAAI,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC"}

package/dist/user-data/ports.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Injection token of the app's {@link UserDataDbPort}.
+ *
+ * @extensionPoint token
+ * @stability experimental
+ * @example
+ * ```ts
+ * // UserDataHostModule: { provide: USER_DATA_DB, useClass: UserDataDbAdapter }
+ * ```
+ */
+export declare const USER_DATA_DB: unique symbol;
+/**
+ * Why the slice lifts row-level security: deleting (`purge`) or counting
+ * across organizations for a summary (`admin-aggregate`).
+ *
+ * @stability experimental
+ */
+export type UserDataSystemReason = 'purge' | 'admin-aggregate';
+/**
+ * The app's bypass client, as the user-data slice uses it. `tx` and the
+ * client are the app's generated Prisma types, untyped here (the package
+ * never sees the generated client).
+ *
+ * @stability experimental
+ */
+export interface UserDataDbPort {
+    /**
+     * One interactive transaction whose every statement lifts row-level security.
+     *
+     * @param reason - recorded on the active span.
+     * @param fn - the work; `tx` is the transaction client.
+     * @param options - `timeout` in milliseconds (a heavy user's purge outlives Prisma's 5 s default).
+     */
+    runAsSystem<R>(reason: UserDataSystemReason, fn: (tx: any) => Promise<R>, options?: {
+        timeout?: number;
+    }): Promise<R>;
+    /**
+     * A client whose every single statement lifts row-level security (the
+     * media step, which is not transactional, and the summaries).
+     *
+     * @param reason - recorded on the active span.
+     */
+    system(reason: UserDataSystemReason): any;
+}
+/**
+ * Injection token of the app's {@link UserDataEnvironment}.
+ *
+ * @extensionPoint token
+ * @stability experimental
+ * @example
+ * ```ts
+ * // UserDataHostModule: { provide: USER_DATA_ENVIRONMENT, useClass: UserDataEnvironmentAdapter }
+ * ```
+ */
+export declare const USER_DATA_ENVIRONMENT: unique symbol;
+/**
+ * The two deployment facts the slice gates on: `DEPLOYMENT_MODE` (the factory
+ * reset is disabled in `saas`) and `TENANCY_MODE` (offboarding needs `multi`).
+ *
+ * @stability experimental
+ */
+export interface UserDataEnvironment {
+    /** `self-hosted`, `saas` or the id of a mode the app registered (the factory reset is disabled in `saas` only). */
+    deploymentMode(): 'self-hosted' | 'saas' | (string & {});
+    /** `single` or `multi`. */
+    tenancyMode(): 'single' | 'multi';
+}
+//# sourceMappingURL=ports.d.ts.map

package/dist/user-data/ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../../src/user-data/ports.ts"],"names":[],"mappings":"AAkBA;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,EAAE,OAAO,MAAwD,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,iBAAiB,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACtH;;;;;OAKG;IACH,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,GAAG,CAAC;CAC3C;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,EAAE,OAAO,MAAiE,CAAC;AAE7G;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,mHAAmH;IACnH,cAAc,IAAI,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACzD,2BAA2B;IAC3B,WAAW,IAAI,QAAQ,GAAG,OAAO,CAAC;CACnC"}

package/dist/user-data/ports.js

@@ -0,0 +1,43 @@
+"use strict";
+// =============================================================================
+// The user-data slice's host ports (issue #743, PP-9.1)
+// =============================================================================
+//
+// Two capabilities the slice needs from the application, one injection token
+// each; the app binds both in a `@Global()` module of its own (the reference
+// app: `apps/api/src/platform/user-data/user-data-host.module.ts`).
+//
+// ⚠ THE PURGE RUNS ON THE BYPASS CLIENT. A user's rows live in every
+// organization they belong to, and row-level security would hide every row
+// outside the scope of a tenant client: a purge that silently deleted only the
+// active organization's rows would report success. Every statement of the
+// slice runs through `USER_DATA_DB` (reason `purge`, or `admin-aggregate` for
+// the read-only summaries), with an explicit owner or organization filter.
+//
+// The tokens are `Symbol.for(...)` keys, so two copies of this file agree.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.USER_DATA_ENVIRONMENT = exports.USER_DATA_DB = void 0;
+/**
+ * Injection token of the app's {@link UserDataDbPort}.
+ *
+ * @extensionPoint token
+ * @stability experimental
+ * @example
+ * ```ts
+ * // UserDataHostModule: { provide: USER_DATA_DB, useClass: UserDataDbAdapter }
+ * ```
+ */
+exports.USER_DATA_DB = Symbol.for('@marinoscar/platform/user-data/DB');
+/**
+ * Injection token of the app's {@link UserDataEnvironment}.
+ *
+ * @extensionPoint token
+ * @stability experimental
+ * @example
+ * ```ts
+ * // UserDataHostModule: { provide: USER_DATA_ENVIRONMENT, useClass: UserDataEnvironmentAdapter }
+ * ```
+ */
+exports.USER_DATA_ENVIRONMENT = Symbol.for('@marinoscar/platform/user-data/ENVIRONMENT');
+//# sourceMappingURL=ports.js.map

package/dist/user-data/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../src/user-data/ports.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,wDAAwD;AACxD,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,oEAAoE;AACpE,EAAE;AACF,qEAAqE;AACrE,2EAA2E;AAC3E,+EAA+E;AAC/E,0EAA0E;AAC1E,8EAA8E;AAC9E,2EAA2E;AAC3E,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;;;AAEhF;;;;;;;;;GASG;AACU,QAAA,YAAY,GAAkB,MAAM,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;AAmC3F;;;;;;;;;GASG;AACU,QAAA,qBAAqB,GAAkB,MAAM,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC"}

package/dist/user-data/preconditions/recent-org-export.d.ts

@@ -0,0 +1,29 @@
+import type { OffboardingPreconditionDef } from '../user-data.types';
+/**
+ * The precondition's id.
+ *
+ * @stability experimental
+ */
+export declare const RECENT_ORG_EXPORT_PRECONDITION_ID = "exports.recent-org-export";
+/**
+ * Builds the precondition for a window other than the default 7 days.
+ *
+ * @param windowDays - how recent the export must be, in days (at least 1).
+ * @param now - the clock, for tests. Default `Date.now`.
+ * @returns the precondition.
+ * @throws Error when `windowDays` is not a positive integer.
+ *
+ * @stability experimental
+ */
+export declare function recentOrgExportPrecondition(windowDays?: number, now?: () => number): OffboardingPreconditionDef;
+/**
+ * The precondition with the default window (`DEFAULT_EXPORT_RETENTION_DAYS`, 7 days).
+ *
+ * @stability experimental
+ * @example
+ * ```ts
+ * registerOffboardingPrecondition(RECENT_ORG_EXPORT_PRECONDITION);
+ * ```
+ */
+export declare const RECENT_ORG_EXPORT_PRECONDITION: OffboardingPreconditionDef;
+//# sourceMappingURL=recent-org-export.d.ts.map

package/dist/user-data/preconditions/recent-org-export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recent-org-export.d.ts","sourceRoot":"","sources":["../../../src/user-data/preconditions/recent-org-export.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,0BAA0B,EAAkC,MAAM,oBAAoB,CAAC;AAErG;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,8BAA8B,CAAC;AAE7E;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,GAAE,MAAsC,EAAE,GAAG,GAAE,MAAM,MAAiB,GAAG,0BAA0B,CA4BxJ;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,8BAA8B,EAAE,0BAA0D,CAAC"}

package/dist/user-data/preconditions/recent-org-export.js

@@ -0,0 +1,79 @@
+"use strict";
+// =============================================================================
+// The "recent organization export" offboarding precondition (#743 with #744)
+// =============================================================================
+//
+// "Export, then purge the org" (platform-packages spec): an organization is
+// offboarded only after an `org-data` export of it succeeded in the last
+// `DEFAULT_EXPORT_RETENTION_DAYS` days (7), the window in which its file can
+// still be downloaded. Read from the queue's own rows: an `export.run` job of
+// the organization (`subjectType: 'organization'`), succeeded, finished inside
+// the window, whose payload names the `org-data` source and carries a committed
+// result. The operator may still skip it with a reason
+// (`skipExport.reason`), recorded in the audit event.
+//
+// An app registers it when it mounts the exports slice
+// (`registerOffboardingPrecondition(RECENT_ORG_EXPORT_PRECONDITION)`); an app
+// without exports has no way to satisfy it, so it is not a platform default.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RECENT_ORG_EXPORT_PRECONDITION = exports.RECENT_ORG_EXPORT_PRECONDITION_ID = void 0;
+exports.recentOrgExportPrecondition = recentOrgExportPrecondition;
+const index_1 = require("../../exports/index");
+/**
+ * The precondition's id.
+ *
+ * @stability experimental
+ */
+exports.RECENT_ORG_EXPORT_PRECONDITION_ID = 'exports.recent-org-export';
+/**
+ * Builds the precondition for a window other than the default 7 days.
+ *
+ * @param windowDays - how recent the export must be, in days (at least 1).
+ * @param now - the clock, for tests. Default `Date.now`.
+ * @returns the precondition.
+ * @throws Error when `windowDays` is not a positive integer.
+ *
+ * @stability experimental
+ */
+function recentOrgExportPrecondition(windowDays = index_1.DEFAULT_EXPORT_RETENTION_DAYS, now = Date.now) {
+    if (!Number.isSafeInteger(windowDays) || windowDays < 1)
+        throw new Error('recentOrgExportPrecondition: windowDays must be a positive integer');
+    return {
+        id: exports.RECENT_ORG_EXPORT_PRECONDITION_ID,
+        label: `An organization data export completed in the last ${windowDays} days`,
+        async check({ orgId }, db) {
+            const since = new Date(now() - windowDays * 86_400_000);
+            const jobs = await db.job.findMany({
+                where: {
+                    type: index_1.EXPORT_RUN_JOB_TYPE,
+                    subjectType: index_1.EXPORT_ORG_SUBJECT_TYPE,
+                    subjectId: orgId,
+                    status: 'succeeded',
+                    finishedAt: { gte: since },
+                },
+                select: { payload: true },
+                orderBy: { finishedAt: 'desc' },
+                take: 20,
+            });
+            const found = jobs.some((job) => {
+                const payload = job.payload;
+                return payload?.source === index_1.ORG_DATA_EXPORT_SOURCE_ID && (0, index_1.readExportResult)(payload) !== null;
+            });
+            return found
+                ? { passed: true }
+                : { passed: false, message: `No organization data export succeeded in the last ${windowDays} days. Export it first, or give a reason to skip.` };
+        },
+    };
+}
+/**
+ * The precondition with the default window (`DEFAULT_EXPORT_RETENTION_DAYS`, 7 days).
+ *
+ * @stability experimental
+ * @example
+ * ```ts
+ * registerOffboardingPrecondition(RECENT_ORG_EXPORT_PRECONDITION);
+ * ```
+ */
+exports.RECENT_ORG_EXPORT_PRECONDITION = recentOrgExportPrecondition();
+//# sourceMappingURL=recent-org-export.js.map

package/dist/user-data/preconditions/recent-org-export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recent-org-export.js","sourceRoot":"","sources":["../../../src/user-data/preconditions/recent-org-export.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,6EAA6E;AAC7E,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,uDAAuD;AACvD,sDAAsD;AACtD,EAAE;AACF,uDAAuD;AACvD,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;;;AA4BhF,kEA4BC;AAtDD,+CAM6B;AAG7B;;;;GAIG;AACU,QAAA,iCAAiC,GAAG,2BAA2B,CAAC;AAE7E;;;;;;;;;GASG;AACH,SAAgB,2BAA2B,CAAC,aAAqB,qCAA6B,EAAE,MAAoB,IAAI,CAAC,GAAG;IAC1H,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IAC/I,OAAO;QACL,EAAE,EAAE,yCAAiC;QACrC,KAAK,EAAE,qDAAqD,UAAU,OAAO;QAC7E,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;YACvB,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,UAAU,CAAC,CAAC;YACxD,MAAM,IAAI,GAA2B,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzD,KAAK,EAAE;oBACL,IAAI,EAAE,2BAAmB;oBACzB,WAAW,EAAE,+BAAuB;oBACpC,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,WAAW;oBACnB,UAAU,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;iBAC3B;gBACD,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;gBACzB,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;gBAC/B,IAAI,EAAE,EAAE;aACT,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAsC,CAAC;gBAC3D,OAAO,OAAO,EAAE,MAAM,KAAK,iCAAyB,IAAI,IAAA,wBAAgB,EAAC,OAAO,CAAC,KAAK,IAAI,CAAC;YAC7F,CAAC,CAAC,CAAC;YACH,OAAO,KAAK;gBACV,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE;gBAClB,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,qDAAqD,UAAU,mDAAmD,EAAE,CAAC;QACrJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACU,QAAA,8BAA8B,GAA+B,2BAA2B,EAAE,CAAC"}