@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.5

package/dist/user-data/handlers/org-offboard.handler.js

@@ -0,0 +1,263 @@
+"use strict";
+// =============================================================================
+// `org.offboard`: delete one organization with its data (#743, PP-9.1)
+// =============================================================================
+//
+// "Export, then purge the org" (platform-packages spec, Per-slice impact).
+// Multi-organization mode only; the API refuses single mode and the default
+// organization, and checks the registered preconditions before it enqueues.
+// Steps, each idempotent, counts committed with their rows:
+//
+//   1. Pending jobs of the organization (`jobs.org_id`), except this one;
+//   2. The members left without any other membership are recorded in the
+//      payload (once: a retry must not lose them when step 4 removed the
+//      memberships);
+//   3. Every `org` model's rows of the organization, children first, one
+//      transaction per model (the storage-object model excluded);
+//   4. Storage objects of the organization: bytes, then the row. A provider
+//      failure keeps the row and FAILS the job after the step, because the
+//      organization row cannot go while an object still references it (a
+//      retry finishes the media);
+//   5. Invites and memberships (`OrgCredential` and the org-bound sessions
+//      and tokens cascade with the organization);
+//   6. The users of step 2: kept (`keep`: they cannot sign in until invited),
+//      or purged and deleted (`purge`: the `everything` purge, the removal
+//      hooks, then the user row);
+//   7. The organization row.
+//
+// Every statement runs on the bypass client: row-level security must not
+// hide a row from the purge. SERVER-ONLY, PERMANENTLY.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var OrgOffboardHandler_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrgOffboardHandler = exports.ORG_OFFBOARD_SUBJECT_TYPE = exports.ORG_OFFBOARD_PROFILE = void 0;
+const common_1 = require("@nestjs/common");
+const api_1 = require("@opentelemetry/api");
+const user_data_1 = require("@marinoscar/platform-contract/user-data");
+const zod_1 = require("zod");
+const index_1 = require("../../core/index");
+const index_2 = require("../../jobs/index");
+const index_3 = require("../../otel-core/index");
+const index_4 = require("../../storage/index");
+const ports_1 = require("../ports");
+const user_purge_1 = require("../purge/user-purge");
+const user_data_plan_service_1 = require("../user-data-plan.service");
+const user_data_metrics_1 = require("../user-data.metrics");
+const user_data_options_1 = require("../user-data.options");
+const user_purge_runner_1 = require("../user-purge.runner");
+/**
+ * The profile of `org.offboard`: 60 minutes, 3 attempts.
+ *
+ * @stability experimental
+ */
+exports.ORG_OFFBOARD_PROFILE = Object.freeze({ maxRuntimeMs: 60 * 60_000, maxAttempts: 3 });
+/**
+ * The subject type of an `org.offboard` job (one active offboarding per organization).
+ *
+ * @stability experimental
+ */
+exports.ORG_OFFBOARD_SUBJECT_TYPE = 'organization';
+const payloadSchema = zod_1.z.object({
+    orgId: zod_1.z.string().uuid(),
+    actorUserId: zod_1.z.string().uuid(),
+    userDisposition: zod_1.z.enum(user_data_1.OFFBOARDING_USER_DISPOSITIONS).default('keep'),
+});
+/**
+ * The `org.offboard` job handler. Server-only.
+ *
+ * @stability experimental
+ */
+let OrgOffboardHandler = OrgOffboardHandler_1 = class OrgOffboardHandler {
+    registry;
+    db;
+    storage;
+    plans;
+    runner;
+    audit;
+    options;
+    metrics;
+    type = user_data_1.ORG_OFFBOARD_JOB_TYPE;
+    label = 'Organization offboarding';
+    profile = exports.ORG_OFFBOARD_PROFILE;
+    logger = new common_1.Logger(OrgOffboardHandler_1.name);
+    constructor(registry, db, storage, plans, runner, audit, options, metrics) {
+        this.registry = registry;
+        this.db = db;
+        this.storage = storage;
+        this.plans = plans;
+        this.runner = runner;
+        this.audit = audit;
+        this.options = options;
+        this.metrics = metrics;
+    }
+    /** Self-registration: the only wiring a handler needs. */
+    onModuleInit() {
+        this.registry.register(this);
+    }
+    /**
+     * Runs the seven steps. Throws on a database error (or a kept storage
+     * object) so the queue retries.
+     *
+     * @param job - the claimed job.
+     */
+    async process(job) {
+        const parsed = payloadSchema.safeParse((0, user_purge_runner_1.payloadOf)(job));
+        if (!parsed.success)
+            throw new Error(`org.offboard job ${job.id}: payload must carry { orgId, actorUserId, userDisposition }`);
+        try {
+            await this.run(job, parsed.data);
+            this.metrics?.add(user_data_metrics_1.ORG_OFFBOARDINGS_METRIC, 1, { outcome: 'succeeded', user_disposition: parsed.data.userDisposition });
+        }
+        catch (error) {
+            this.metrics?.add(user_data_metrics_1.ORG_OFFBOARDINGS_METRIC, 1, { outcome: 'failed', user_disposition: parsed.data.userDisposition });
+            throw error;
+        }
+    }
+    async run(job, input) {
+        const { orgId, actorUserId, userDisposition } = input;
+        const system = this.db.system('purge');
+        api_1.trace.getActiveSpan()?.setAttributes({ 'org.id': orgId, 'offboarding.user_disposition': userDisposition });
+        const base = (0, user_purge_runner_1.payloadOf)(job);
+        let counts = (0, user_purge_1.readCounts)(base.deleted);
+        let orphanUserIds = Array.isArray(base.orphanUserIds) ? base.orphanUserIds.filter((id) => typeof id === 'string') : null;
+        const write = (db) => db.job.update({ where: { id: job.id }, data: { payload: { ...base, ...input, deleted: counts, ...(orphanUserIds ? { orphanUserIds } : {}) } } });
+        const commit = async (tx, add) => {
+            counts = (0, user_purge_1.addCounts)(counts, add);
+            await write(tx);
+        };
+        const inTx = (fn) => this.db.runAsSystem('purge', fn, { timeout: this.options.txTimeoutMs });
+        const org = await system.organization.findUnique({ where: { id: orgId }, select: { id: true, isDefault: true } });
+        if (!org && !(counts.organizations > 0))
+            throw new Error(`org.offboard job ${job.id}: organization ${orgId} does not exist`);
+        if (org?.isDefault)
+            throw new Error(`org.offboard job ${job.id}: the default organization is never offboarded`);
+        if (org) {
+            // 1. Pending jobs of the organization.
+            await inTx(async (tx) => {
+                const { count } = await tx.job.deleteMany({ where: { orgId, status: 'pending', id: { not: job.id } } });
+                await commit(tx, { jobs: count });
+            });
+            // 2. Members left with no other membership (recorded once).
+            if (!orphanUserIds) {
+                const members = await system.membership.findMany({ where: { orgId }, select: { userId: true } });
+                const orphans = [];
+                for (const { userId } of members) {
+                    const elsewhere = await system.membership.count({ where: { userId, orgId: { not: orgId } } });
+                    if (elsewhere === 0)
+                        orphans.push(userId);
+                }
+                orphanUserIds = orphans;
+                await write(system);
+            }
+            // 3. Org-owned rows, children first, one transaction per model.
+            for (const step of this.plans.org().steps) {
+                await inTx(async (tx) => {
+                    const { count } = await tx[step.delegate].deleteMany({ where: { [step.orgField]: orgId } });
+                    await commit(tx, { [step.model]: count });
+                });
+            }
+            // 4. Storage objects of the organization: bytes, then the row.
+            const storage = this.plans.org().storage;
+            if (storage) {
+                let cursor;
+                let deleted = 0;
+                let failed = 0;
+                for (;;) {
+                    const page = await system[storage.delegate].findMany({
+                        where: { [storage.orgField]: orgId, ...(cursor ? { id: { gt: cursor } } : {}) },
+                        select: { id: true },
+                        orderBy: { id: 'asc' },
+                        take: user_purge_1.USER_DATA_CHUNK_SIZE,
+                    });
+                    if (page.length === 0)
+                        break;
+                    cursor = page[page.length - 1].id;
+                    const media = await (0, user_purge_1.deleteStorageObjects)(system, this.storage, this.logger, `org.offboard job ${job.id}`, page.map((row) => row.id), storage.delegate);
+                    deleted += media.storageObjectsDeleted;
+                    failed += media.storageObjectsFailed;
+                }
+                await commit(system, { storageObjectsDeleted: deleted });
+                if (failed > 0) {
+                    throw new Error(`org.offboard job ${job.id}: ${failed} storage object(s) could not be deleted; the organization is kept so a retry can finish them`);
+                }
+            }
+            // 5. Invites and memberships.
+            await inTx(async (tx) => {
+                const invites = tx.invite ? (await tx.invite.deleteMany({ where: { orgId } })).count : 0;
+                const memberships = (await tx.membership.deleteMany({ where: { orgId } })).count;
+                await commit(tx, { invites, memberships });
+            });
+        }
+        // 6. Users left without an organization.
+        let kept = 0;
+        for (const userId of orphanUserIds ?? []) {
+            const remaining = await system.membership.count({ where: { userId } });
+            if (remaining > 0)
+                continue; // joined another organization meanwhile
+            if (userDisposition === 'purge') {
+                const exists = await system.user.count({ where: { id: userId } });
+                if (exists === 0)
+                    continue;
+                const done = await this.runner.purgeAndRemoveUser(userId, job.id);
+                counts = (0, user_purge_1.addCounts)(counts, { usersPurged: done.usersDeleted ?? 0, storageObjectsFailed: done.storageObjectsFailed ?? 0 });
+                await write(system);
+            }
+            else {
+                kept += 1;
+            }
+        }
+        if (userDisposition === 'keep')
+            counts = { ...counts, usersKept: kept };
+        // 7. The organization.
+        if (org) {
+            await inTx(async (tx) => {
+                const { count } = await tx.organization.deleteMany({ where: { id: orgId, isDefault: false } });
+                await commit(tx, { organizations: count });
+            });
+        }
+        const result = { counts };
+        await system.job.update({
+            where: { id: job.id },
+            data: { payload: { ...base, ...input, deleted: counts, orphanUserIds: orphanUserIds ?? [], result } },
+        });
+        await this.audit.record({
+            action: user_data_metrics_1.USER_DATA_AUDIT_ACTIONS.OFFBOARD_COMPLETED,
+            actorUserId,
+            targetType: 'organization',
+            targetId: orgId,
+            meta: {
+                orgId,
+                jobId: job.id,
+                userDisposition,
+                memberships: counts.memberships ?? 0,
+                usersPurged: counts.usersPurged ?? 0,
+                usersKept: counts.usersKept ?? 0,
+                storageObjectsDeleted: counts.storageObjectsDeleted ?? 0,
+            },
+        });
+    }
+};
+exports.OrgOffboardHandler = OrgOffboardHandler;
+exports.OrgOffboardHandler = OrgOffboardHandler = OrgOffboardHandler_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Inject)(ports_1.USER_DATA_DB)),
+    __param(2, (0, common_1.Inject)(index_4.STORAGE_PROVIDER)),
+    __param(5, (0, common_1.Inject)(index_1.AUDIT_SINK)),
+    __param(6, (0, common_1.Inject)(user_data_options_1.USER_DATA_OPTIONS)),
+    __param(7, (0, common_1.Optional)()),
+    __metadata("design:paramtypes", [index_2.JobHandlerRegistry, Object, Object, user_data_plan_service_1.UserDataPlanService,
+        user_purge_runner_1.UserPurgeRunner, Object, Object, index_3.MetricsHostService])
+], OrgOffboardHandler);
+//# sourceMappingURL=org-offboard.handler.js.map

package/dist/user-data/handlers/org-offboard.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-offboard.handler.js","sourceRoot":"","sources":["../../../src/user-data/handlers/org-offboard.handler.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,uEAAuE;AACvE,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,4EAA4E;AAC5E,4DAA4D;AAC5D,EAAE;AACF,0EAA0E;AAC1E,yEAAyE;AACzE,yEAAyE;AACzE,qBAAqB;AACrB,yEAAyE;AACzE,kEAAkE;AAClE,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,kCAAkC;AAClC,2EAA2E;AAC3E,kDAAkD;AAClD,8EAA8E;AAC9E,2EAA2E;AAC3E,kCAAkC;AAClC,6BAA6B;AAC7B,EAAE;AACF,yEAAyE;AACzE,uDAAuD;AACvD,gFAAgF;;;;;;;;;;;;;;;;AAEhF,2CAAyF;AACzF,4CAA2C;AAC3C,uEAA+G;AAC/G,6BAAwB;AAExB,4CAA8D;AAC9D,4CAA2G;AAC3G,iDAA2D;AAC3D,+CAA6E;AAC7E,oCAA6D;AAC7D,oDAAwG;AACxG,sEAAgE;AAChE,4DAAwF;AACxF,4DAA6F;AAC7F,4DAAkE;AAElE;;;;GAIG;AACU,QAAA,oBAAoB,GAAwB,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;AAEtH;;;;GAIG;AACU,QAAA,yBAAyB,GAAG,cAAc,CAAC;AAExD,MAAM,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACxB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,eAAe,EAAE,OAAC,CAAC,IAAI,CAAC,yCAA6B,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACvE,CAAC,CAAC;AAEH;;;;GAIG;AAEI,IAAM,kBAAkB,0BAAxB,MAAM,kBAAkB;IAOV;IACsB;IACI;IAC1B;IACA;IACoB;IACO;IACf;IAbtB,IAAI,GAAG,iCAAqB,CAAC;IAC7B,KAAK,GAAG,0BAA0B,CAAC;IACnC,OAAO,GAAG,4BAAoB,CAAC;IACvB,MAAM,GAAG,IAAI,eAAM,CAAC,oBAAkB,CAAC,IAAI,CAAC,CAAC;IAE9D,YACmB,QAA4B,EACN,EAAkB,EACd,OAAwB,EAClD,KAA0B,EAC1B,MAAuB,EACH,KAAgB,EACT,OAAsC,EACrD,OAA4B;QAPxC,aAAQ,GAAR,QAAQ,CAAoB;QACN,OAAE,GAAF,EAAE,CAAgB;QACd,YAAO,GAAP,OAAO,CAAiB;QAClD,UAAK,GAAL,KAAK,CAAqB;QAC1B,WAAM,GAAN,MAAM,CAAiB;QACH,UAAK,GAAL,KAAK,CAAW;QACT,YAAO,GAAP,OAAO,CAA+B;QACrD,YAAO,GAAP,OAAO,CAAqB;IACxD,CAAC;IAEJ,0DAA0D;IAC1D,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,GAAQ;QACpB,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,IAAA,6BAAS,EAAC,GAAG,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,EAAE,8DAA8D,CAAC,CAAC;QAC/H,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,2CAAuB,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QACzH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,2CAAuB,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;YACpH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,GAAQ,EAAE,KAAoC;QAC9D,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,WAAK,CAAC,aAAa,EAAE,EAAE,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,8BAA8B,EAAE,eAAe,EAAE,CAAC,CAAC;QAC3G,MAAM,IAAI,GAAG,IAAA,6BAAS,EAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,GAAG,IAAA,uBAAU,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,aAA2B,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtJ,MAAM,KAAK,GAAG,CAAC,EAAO,EAAE,EAAE,CACxB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACnJ,MAAM,MAAM,GAAG,KAAK,EAAE,EAAO,EAAE,GAA2B,EAAE,EAAE;YAC5D,MAAM,GAAG,IAAA,sBAAS,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAChC,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAI,EAA2B,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAEzH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAClH,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,EAAE,kBAAkB,KAAK,iBAAiB,CAAC,CAAC;QAC7H,IAAI,GAAG,EAAE,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,EAAE,gDAAgD,CAAC,CAAC;QAEhH,IAAI,GAAG,EAAE,CAAC;YACR,uCAAuC;YACvC,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBACtB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;gBACxG,MAAM,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,4DAA4D;YAC5D,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAyB,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;gBACvH,MAAM,OAAO,GAAa,EAAE,CAAC;gBAC7B,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;oBACjC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC9F,IAAI,SAAS,KAAK,CAAC;wBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5C,CAAC;gBACD,aAAa,GAAG,OAAO,CAAC;gBACxB,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;YAED,gEAAgE;YAChE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;gBAC1C,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;oBACtB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;oBAC5F,MAAM,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC5C,CAAC,CAAC,CAAC;YACL,CAAC;YAED,+DAA+D;YAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;YACzC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,MAA0B,CAAC;gBAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;gBAChB,IAAI,MAAM,GAAG,CAAC,CAAC;gBACf,SAAS,CAAC;oBACR,MAAM,IAAI,GAAqB,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;wBACrE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;wBAC/E,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;wBACpB,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;wBACtB,IAAI,EAAE,iCAAoB;qBAC3B,CAAC,CAAC;oBACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;wBAAE,MAAM;oBAC7B,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,EAAE,CAAC;oBACnC,MAAM,KAAK,GAAG,MAAM,IAAA,iCAAoB,EAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,oBAAoB,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACvJ,OAAO,IAAI,KAAK,CAAC,qBAAqB,CAAC;oBACvC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC;gBACvC,CAAC;gBACD,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,CAAC;gBACzD,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;oBACf,MAAM,IAAI,KAAK,CACb,oBAAoB,GAAG,CAAC,EAAE,KAAK,MAAM,8FAA8F,CACpI,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,8BAA8B;YAC9B,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBACtB,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzF,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;gBACjF,MAAM,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;QACL,CAAC;QAED,yCAAyC;QACzC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,MAAM,MAAM,IAAI,aAAa,IAAI,EAAE,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACvE,IAAI,SAAS,GAAG,CAAC;gBAAE,SAAS,CAAC,wCAAwC;YACrE,IAAI,eAAe,KAAK,OAAO,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;gBAClE,IAAI,MAAM,KAAK,CAAC;oBAAE,SAAS;gBAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBAClE,MAAM,GAAG,IAAA,sBAAS,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC1H,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,IAAI,IAAI,CAAC,CAAC;YACZ,CAAC;QACH,CAAC;QACD,IAAI,eAAe,KAAK,MAAM;YAAE,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAExE,uBAAuB;QACvB,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBACtB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC/F,MAAM,MAAM,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,CAAC;QAC1B,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YACtB,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE;YACrB,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE;SACtG,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,MAAM,EAAE,2CAAuB,CAAC,kBAAkB;YAClD,WAAW;YACX,UAAU,EAAE,cAAc;YAC1B,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE;gBACJ,KAAK;gBACL,KAAK,EAAE,GAAG,CAAC,EAAE;gBACb,eAAe;gBACf,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,CAAC;gBACpC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,CAAC;gBACpC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC;gBAChC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,CAAC;aACzD;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAvKY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;IASR,WAAA,IAAA,eAAM,EAAC,oBAAY,CAAC,CAAA;IACpB,WAAA,IAAA,eAAM,EAAC,wBAAgB,CAAC,CAAA;IAGxB,WAAA,IAAA,eAAM,EAAC,kBAAU,CAAC,CAAA;IAClB,WAAA,IAAA,eAAM,EAAC,qCAAiB,CAAC,CAAA;IACzB,WAAA,IAAA,iBAAQ,GAAE,CAAA;qCAPgB,0BAAkB,kBAGrB,4CAAmB;QAClB,mCAAe,kBAGD,0BAAkB;GAdhD,kBAAkB,CAuK9B"}

package/dist/user-data/handlers/user-data-purge.handler.d.ts

@@ -0,0 +1,69 @@
+import { type OnModuleInit } from '@nestjs/common';
+import { JobHandlerRegistry, type Job, type JobExecutionProfile, type JobHandler } from '../../jobs/index';
+import { type ResolvedUserDataModuleOptions } from '../user-data.options';
+import type { LegacyUserDataJobType } from '../user-data.types';
+import { UserPurgeRunner } from '../user-purge.runner';
+/**
+ * The profile of `user.data.purge`: 15 minutes, 3 attempts (EvoPath's).
+ *
+ * @stability experimental
+ */
+export declare const USER_DATA_PURGE_PROFILE: JobExecutionProfile;
+/**
+ * The `user.data.purge` job handler. Server-only.
+ *
+ * @stability experimental
+ */
+export declare class UserDataPurgeHandler implements JobHandler, OnModuleInit {
+    private readonly registry;
+    private readonly runner;
+    readonly type = "user.data.purge";
+    readonly label = "User data deletion";
+    readonly profile: JobExecutionProfile;
+    constructor(registry: JobHandlerRegistry, runner: UserPurgeRunner);
+    /** Self-registration: the only wiring a handler needs. */
+    onModuleInit(): void;
+    /**
+     * Validates the payload and runs the purge.
+     *
+     * @param job - the claimed job.
+     */
+    process(job: Job): Promise<void>;
+}
+/**
+ * An alias handler for one legacy job type: maps the old payload and runs
+ * the `user.data.purge` work. Server-only, same profile.
+ *
+ * @stability experimental
+ */
+export declare class LegacyUserDataPurgeHandler implements JobHandler {
+    private readonly alias;
+    private readonly runner;
+    readonly type: string;
+    readonly label: string;
+    readonly profile: JobExecutionProfile;
+    constructor(alias: LegacyUserDataJobType, runner: UserPurgeRunner);
+    /**
+     * Maps the old payload and runs the purge. The payload keeps the old keys
+     * next to the platform's.
+     *
+     * @param job - the claimed legacy job.
+     */
+    process(job: Job): Promise<void>;
+}
+/**
+ * Registers one {@link LegacyUserDataPurgeHandler} per `legacyJobTypes` entry.
+ *
+ * @stability experimental
+ */
+export declare class LegacyUserDataPurgeHandlers implements OnModuleInit {
+    private readonly registry;
+    private readonly runner;
+    private readonly options;
+    constructor(registry: JobHandlerRegistry, runner: UserPurgeRunner, options: ResolvedUserDataModuleOptions);
+    /** The handlers, one per alias (registered by `onModuleInit`). */
+    handlers(): LegacyUserDataPurgeHandler[];
+    /** Self-registration of every alias. */
+    onModuleInit(): void;
+}
+//# sourceMappingURL=user-data-purge.handler.d.ts.map

package/dist/user-data/handlers/user-data-purge.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-data-purge.handler.d.ts","sourceRoot":"","sources":["../../../src/user-data/handlers/user-data-purge.handler.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAGvE,OAAO,EAAE,kBAAkB,EAAE,KAAK,GAAG,EAAE,KAAK,mBAAmB,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC3G,OAAO,EAAqB,KAAK,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAuC,MAAM,sBAAsB,CAAC;AAE5F;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,mBAAkF,CAAC;AAEzH;;;;GAIG;AACH,qBACa,oBAAqB,YAAW,UAAU,EAAE,YAAY;IAMjE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IANzB,QAAQ,CAAC,IAAI,qBAA4B;IACzC,QAAQ,CAAC,KAAK,wBAAwB;IACtC,QAAQ,CAAC,OAAO,sBAA2B;gBAGxB,QAAQ,EAAE,kBAAkB,EAC5B,MAAM,EAAE,eAAe;IAG1C,0DAA0D;IAC1D,YAAY,IAAI,IAAI;IAIpB;;;;OAIG;IACG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;CAKvC;AAED;;;;;GAKG;AACH,qBAAa,0BAA2B,YAAW,UAAU;IAMzD,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IANzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,sBAA2B;gBAGxB,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,eAAe;IAM1C;;;;;OAKG;IACG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;CAMvC;AAED;;;;GAIG;AACH,qBACa,2BAA4B,YAAW,YAAY;IAE5D,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACI,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAFlC,QAAQ,EAAE,kBAAkB,EAC5B,MAAM,EAAE,eAAe,EACI,OAAO,EAAE,6BAA6B;IAGpF,kEAAkE;IAClE,QAAQ,IAAI,0BAA0B,EAAE;IAIxC,wCAAwC;IACxC,YAAY,IAAI,IAAI;CAGrB"}

package/dist/user-data/handlers/user-data-purge.handler.js

@@ -0,0 +1,146 @@
+"use strict";
+// =============================================================================
+// `user.data.purge`: one user's data, one scope (issue #743, PP-9.1)
+// =============================================================================
+//
+// Enqueued by `POST /api/user-data/deletions` with subject `user:<userId>`
+// (the queue's active dedup allows one pending or running purge per user;
+// the API never pre-checks with a `findFirst`). The work is
+// `UserPurgeRunner.runJob` (read its header).
+//
+// SERVER-ONLY, PERMANENTLY: no `nodeResultSchema`, no `persistNodeResult`. The
+// purge reads and deletes across every table with the bypass client, a
+// privilege a remote machine must never hold.
+//
+// LEGACY ALIASES (`legacyJobTypes`): an app's own pre-platform job type (EvoPath's
+// `user.data_reset`) is permanent once queued, so the module registers one
+// `LegacyUserDataPurgeHandler` per alias: it maps the old payload with the
+// app's `toPayload` and runs the same work.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LegacyUserDataPurgeHandlers = exports.LegacyUserDataPurgeHandler = exports.UserDataPurgeHandler = exports.USER_DATA_PURGE_PROFILE = void 0;
+const common_1 = require("@nestjs/common");
+const user_data_1 = require("@marinoscar/platform-contract/user-data");
+const index_1 = require("../../jobs/index");
+const user_data_options_1 = require("../user-data.options");
+const user_purge_runner_1 = require("../user-purge.runner");
+/**
+ * The profile of `user.data.purge`: 15 minutes, 3 attempts (EvoPath's).
+ *
+ * @stability experimental
+ */
+exports.USER_DATA_PURGE_PROFILE = Object.freeze({ maxRuntimeMs: 15 * 60_000, maxAttempts: 3 });
+/**
+ * The `user.data.purge` job handler. Server-only.
+ *
+ * @stability experimental
+ */
+let UserDataPurgeHandler = class UserDataPurgeHandler {
+    registry;
+    runner;
+    type = user_data_1.USER_DATA_PURGE_JOB_TYPE;
+    label = 'User data deletion';
+    profile = exports.USER_DATA_PURGE_PROFILE;
+    constructor(registry, runner) {
+        this.registry = registry;
+        this.runner = runner;
+    }
+    /** Self-registration: the only wiring a handler needs. */
+    onModuleInit() {
+        this.registry.register(this);
+    }
+    /**
+     * Validates the payload and runs the purge.
+     *
+     * @param job - the claimed job.
+     */
+    async process(job) {
+        const parsed = user_purge_runner_1.userDataPurgeInputSchema.safeParse((0, user_purge_runner_1.payloadOf)(job));
+        if (!parsed.success)
+            throw new Error(`user.data.purge job ${job.id}: payload must carry { userId (uuid), scope }`);
+        await this.runner.runJob(job, parsed.data);
+    }
+};
+exports.UserDataPurgeHandler = UserDataPurgeHandler;
+exports.UserDataPurgeHandler = UserDataPurgeHandler = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [index_1.JobHandlerRegistry,
+        user_purge_runner_1.UserPurgeRunner])
+], UserDataPurgeHandler);
+/**
+ * An alias handler for one legacy job type: maps the old payload and runs
+ * the `user.data.purge` work. Server-only, same profile.
+ *
+ * @stability experimental
+ */
+class LegacyUserDataPurgeHandler {
+    alias;
+    runner;
+    type;
+    label;
+    profile = exports.USER_DATA_PURGE_PROFILE;
+    constructor(alias, runner) {
+        this.alias = alias;
+        this.runner = runner;
+        this.type = alias.type;
+        this.label = `User data deletion (legacy ${alias.type})`;
+    }
+    /**
+     * Maps the old payload and runs the purge. The payload keeps the old keys
+     * next to the platform's.
+     *
+     * @param job - the claimed legacy job.
+     */
+    async process(job) {
+        const old = (0, user_purge_runner_1.payloadOf)(job);
+        const mapped = user_purge_runner_1.userDataPurgeInputSchema.safeParse(this.alias.toPayload(old));
+        if (!mapped.success)
+            throw new Error(`${this.alias.type} job ${job.id}: toPayload did not return { userId (uuid), scope }`);
+        await this.runner.runJob(job, mapped.data);
+    }
+}
+exports.LegacyUserDataPurgeHandler = LegacyUserDataPurgeHandler;
+/**
+ * Registers one {@link LegacyUserDataPurgeHandler} per `legacyJobTypes` entry.
+ *
+ * @stability experimental
+ */
+let LegacyUserDataPurgeHandlers = class LegacyUserDataPurgeHandlers {
+    registry;
+    runner;
+    options;
+    constructor(registry, runner, options) {
+        this.registry = registry;
+        this.runner = runner;
+        this.options = options;
+    }
+    /** The handlers, one per alias (registered by `onModuleInit`). */
+    handlers() {
+        return this.options.legacyJobTypes.map((alias) => new LegacyUserDataPurgeHandler(alias, this.runner));
+    }
+    /** Self-registration of every alias. */
+    onModuleInit() {
+        for (const handler of this.handlers())
+            this.registry.register(handler);
+    }
+};
+exports.LegacyUserDataPurgeHandlers = LegacyUserDataPurgeHandlers;
+exports.LegacyUserDataPurgeHandlers = LegacyUserDataPurgeHandlers = __decorate([
+    (0, common_1.Injectable)(),
+    __param(2, (0, common_1.Inject)(user_data_options_1.USER_DATA_OPTIONS)),
+    __metadata("design:paramtypes", [index_1.JobHandlerRegistry,
+        user_purge_runner_1.UserPurgeRunner, Object])
+], LegacyUserDataPurgeHandlers);
+//# sourceMappingURL=user-data-purge.handler.js.map

package/dist/user-data/handlers/user-data-purge.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-data-purge.handler.js","sourceRoot":"","sources":["../../../src/user-data/handlers/user-data-purge.handler.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,qEAAqE;AACrE,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,4DAA4D;AAC5D,8CAA8C;AAC9C,EAAE;AACF,+EAA+E;AAC/E,uEAAuE;AACvE,8CAA8C;AAC9C,EAAE;AACF,mFAAmF;AACnF,2EAA2E;AAC3E,2EAA2E;AAC3E,4CAA4C;AAC5C,gFAAgF;;;;;;;;;;;;;;;AAEhF,2CAAuE;AACvE,uEAAmF;AAEnF,4CAA2G;AAC3G,4DAA6F;AAE7F,4DAA4F;AAE5F;;;;GAIG;AACU,QAAA,uBAAuB,GAAwB,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;AAEzH;;;;GAIG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAMZ;IACA;IANV,IAAI,GAAG,oCAAwB,CAAC;IAChC,KAAK,GAAG,oBAAoB,CAAC;IAC7B,OAAO,GAAG,+BAAuB,CAAC;IAE3C,YACmB,QAA4B,EAC5B,MAAuB;QADvB,aAAQ,GAAR,QAAQ,CAAoB;QAC5B,WAAM,GAAN,MAAM,CAAiB;IACvC,CAAC;IAEJ,0DAA0D;IAC1D,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,GAAQ;QACpB,MAAM,MAAM,GAAG,4CAAwB,CAAC,SAAS,CAAC,IAAA,6BAAS,EAAC,GAAG,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,EAAE,+CAA+C,CAAC,CAAC;QACnH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;CACF,CAAA;AAzBY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;qCAOkB,0BAAkB;QACpB,mCAAe;GAP/B,oBAAoB,CAyBhC;AAED;;;;;GAKG;AACH,MAAa,0BAA0B;IAMlB;IACA;IANV,IAAI,CAAS;IACb,KAAK,CAAS;IACd,OAAO,GAAG,+BAAuB,CAAC;IAE3C,YACmB,KAA4B,EAC5B,MAAuB;QADvB,UAAK,GAAL,KAAK,CAAuB;QAC5B,WAAM,GAAN,MAAM,CAAiB;QAExC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,8BAA8B,KAAK,CAAC,IAAI,GAAG,CAAC;IAC3D,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,GAAQ;QACpB,MAAM,GAAG,GAAG,IAAA,6BAAS,EAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,4CAAwB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,qDAAqD,CAAC,CAAC;QAC5H,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;CACF;AAzBD,gEAyBC;AAED;;;;GAIG;AAEI,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IAEnB;IACA;IAC2B;IAH9C,YACmB,QAA4B,EAC5B,MAAuB,EACI,OAAsC;QAFjE,aAAQ,GAAR,QAAQ,CAAoB;QAC5B,WAAM,GAAN,MAAM,CAAiB;QACI,YAAO,GAAP,OAAO,CAA+B;IACjF,CAAC;IAEJ,kEAAkE;IAClE,QAAQ;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,0BAA0B,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACxG,CAAC;IAED,wCAAwC;IACxC,YAAY;QACV,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE;YAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzE,CAAC;CACF,CAAA;AAhBY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,qCAAiB,CAAC,CAAA;qCAFC,0BAAkB;QACpB,mCAAe;GAH/B,2BAA2B,CAgBvC"}

package/dist/user-data/index.d.ts

@@ -0,0 +1,30 @@
+export { UserDataModule } from './user-data.module';
+export { USER_DATA_OPTIONS, USER_DATA_TX_TIMEOUT_MS, resolveUserDataModuleOptions, } from './user-data.options';
+export type { JobReference, ResolvedUserDataModuleOptions, UserDataModuleOptions } from './user-data.options';
+export { USER_DATA_DB, USER_DATA_ENVIRONMENT } from './ports';
+export { DefaultUserDataEnvironment } from './default-environment';
+export { composedSchemaDatamodel, findComposedSchemaPath } from './composed-schema';
+export { UserDataRegistriesDoctorCheck } from './doctor/user-data-registries.doctor-check';
+export type { UserDataDbPort, UserDataEnvironment, UserDataSystemReason } from './ports';
+export type { FactoryResetStepContext, FactoryResetStepDef, LegacyUserDataJobType, OffboardingPreconditionDef, OffboardingPreconditionVerdict, UserDataCategoryDef, UserDataModelHint, UserDataPurgeDelegate, UserDataPurgeInput, UserDataScopeCategories, UserDataScopeDef, UserRemovalHook, } from './user-data.types';
+export { BUILT_IN_FACTORY_RESET_DELETED, BUILT_IN_FACTORY_RESET_KEPT, BUILT_IN_USER_DATA_KEPT, BUILT_IN_USER_DATA_SCOPES, USER_DATA_OTHER_CATEGORY, categoriesOfScope, factoryResetDeletedLines, factoryResetKeptLines, factoryResetStepRegistry, findUserDataScope, offboardingPreconditionRegistry, registerFactoryResetStep, registerOffboardingPrecondition, registerUserDataCategory, registerUserDataModels, registerUserDataScope, resolvedUserDataScopes, storageObjectModelHint, userDataCategoryRegistry, userDataKeptLines, userDataModelRegistry, userDataScopeRegistry, } from './user-data.registries';
+export { PLATFORM_FACTORY_RESET_STEPS, PLATFORM_USER_DATA_CATEGORIES, PLATFORM_USER_DATA_MODELS, registerPlatformUserData, } from './platform-user-data';
+export { groupMembershipRemovalHook } from './user-removal-hooks';
+export { RECENT_ORG_EXPORT_PRECONDITION, RECENT_ORG_EXPORT_PRECONDITION_ID, recentOrgExportPrecondition, } from './preconditions/recent-org-export';
+export { UserDataPlanError, backRelationFields, delegateName, orderForDeletion, relationsOf, selfUnlinkFields, } from './purge/purge-planner';
+export type { PurgeDatamodel, PurgeRelation } from './purge/purge-planner';
+export { USER_DATA_CHUNK_SIZE, addCounts, collectUserObjectIds, countUserData, deleteStorageObjects, deleteUserRows, planUserPurge, readCounts, } from './purge/user-purge';
+export type { DeletedUserRows, KeptModel, StorageDeletionCounts, UserDataCounts, UserPurgeDelegateStep, UserPurgePlan, UserPurgeStep, } from './purge/user-purge';
+export { UserDataPlanService } from './user-data-plan.service';
+export type { OrgDataPlan, OrgDataStep, OrgStorageStep } from './user-data-plan.service';
+export { USER_DATA_SUBJECT_TYPE, UserPurgeRunner, userDataPurgeInputSchema } from './user-purge.runner';
+export type { UserDataPurgeDeleted, UserDataPurgeMedia, UserDataPurgePayload } from './user-purge.runner';
+export { LegacyUserDataPurgeHandler, LegacyUserDataPurgeHandlers, USER_DATA_PURGE_PROFILE, UserDataPurgeHandler, } from './handlers/user-data-purge.handler';
+export { FACTORY_RESET_ACTOR_ORG_ROLE, FACTORY_RESET_PROFILE, FactoryResetHandler } from './handlers/factory-reset.handler';
+export { ORG_OFFBOARD_PROFILE, ORG_OFFBOARD_SUBJECT_TYPE, OrgOffboardHandler } from './handlers/org-offboard.handler';
+export { FactoryResetService, OrgOffboardingService, UserDataService } from './user-data.service';
+export { FactoryResetRequestDto, FactoryResetStatusDto, FactoryResetSummaryDto, OrgOffboardingRequestDto, OrgOffboardingStatusDto, OrgOffboardingSummaryDto, UserDataDeletionRequestDto, UserDataDeletionStatusDto, UserDataJobStartedDto, UserDataSummaryDto, createUserDataControllers, } from './user-data.controller';
+export { USER_DATA_PERMISSIONS } from './user-data.permissions';
+export type { UserDataPermissionDeclaration } from './user-data.permissions';
+export { FACTORY_RESET_RUNS_METRIC, ORG_OFFBOARDINGS_METRIC, USER_DATA_APP_METRICS, USER_DATA_AUDIT_ACTIONS, USER_DATA_METRIC_OUTCOMES, USER_DATA_PURGES_METRIC, } from './user-data.metrics';
+//# sourceMappingURL=index.d.ts.map

package/dist/user-data/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/user-data/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,YAAY,EAAE,6BAA6B,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC9G,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,6BAA6B,EAAE,MAAM,4CAA4C,CAAC;AAC3F,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AACzF,YAAY,EACV,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,EAC1B,8BAA8B,EAC9B,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,gBAAgB,EAChB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,EAC3B,uBAAuB,EACvB,yBAAyB,EACzB,wBAAwB,EACxB,iBAAiB,EACjB,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,iBAAiB,EACjB,+BAA+B,EAC/B,wBAAwB,EACxB,+BAA+B,EAC/B,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,wBAAwB,EACxB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,EACjC,2BAA2B,GAC5B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EACL,oBAAoB,EACpB,SAAS,EACT,oBAAoB,EACpB,aAAa,EACb,oBAAoB,EACpB,cAAc,EACd,aAAa,EACb,UAAU,GACX,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,eAAe,EACf,SAAS,EACT,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AACxG,YAAY,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC1G,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5H,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACtH,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAClG,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,YAAY,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC"}