@nextage/era-lib 1.0.195 → 1.0.196

package/build/events/types/enums.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../../../src/events/types/enums.ts"],"names":[],"mappings":"AAAA,oBAAY,QAAQ;IAElB;;sBAEkB;IAGlB,mBAAmB,yBAA8B;IACjD,mBAAmB,yBAA8B;IACjD,mBAAmB,yBAA8B;IAGjD,eAAe,qBAA8B;IAC7C,eAAe,qBAA8B;IAC7C,eAAe,qBAA8B;IAG7C,oBAAoB,0BAA8B;IAClD,oBAAoB,0BAA8B;IAClD,oBAAoB,0BAA8B;IAGlD,kBAAkB,wBAA8B;IAChD,kBAAkB,wBAA8B;IAChD,kBAAkB,wBAA8B;IAGhD,uBAAuB,6BAA8B;IACrD,uBAAuB,6BAA8B;IACrD,uBAAuB,6BAA8B;IAGrD,gBAAgB,sBAA8B;IAC9C,gBAAgB,sBAA8B;IAC9C,gBAAgB,sBAA8B;IAE9C;;sBAEkB;IAGlB,iBAAiB,uBAA2B;IAC5C,iBAAiB,uBAA2B;IAC5C,iBAAiB,uBAA2B;IAG5C,cAAc,oBAA2B;IACzC,cAAc,oBAA2B;IACzC,cAAc,oBAA2B;IAGzC,aAAa,mBAA2B;IACxC,aAAa,mBAA2B;IACxC,aAAa,mBAA2B;IAGxC,oBAAoB,iBAAkB;IACtC,oBAAoB,iBAAkB;IACtC,oBAAoB,iBAAkB;IAEtC;;uBAEmB;IAGnB,WAAW,iBAAyB;IACpC,WAAW,iBAAyB;IACpC,WAAW,iBAAyB;IAGpC,mBAAmB,yBAAyB;IAC5C,mBAAmB,yBAAyB;IAC5C,mBAAmB,yBAAyB;IAG5C,oBAAoB,0BAA0B;IAE9C;;uBAEmB;IAGnB,cAAc,oBAA4B;IAC1C,cAAc,oBAA4B;IAC1C,cAAc,oBAA4B;IAG1C,mBAAmB,0BAA6B;IAChD,mBAAmB,0BAA6B;IAChD,mBAAmB,0BAA6B;IAGhD,qBAAqB,4BAA6B;IAClD,qBAAqB,4BAA6B;IAClD,qBAAqB,4BAA6B;IAGlD,oBAAoB,2BAA6B;IACjD,oBAAoB,2BAA6B;IACjD,oBAAoB,2BAA6B;IAGjD,sBAAsB,6BAA6B;IACnD,sBAAsB,6BAA6B;IACnD,sBAAsB,6BAA6B;IAGnD,kBAAkB,yBAA6B;IAC/C,kBAAkB,yBAA6B;IAC/C,kBAAkB,yBAA6B;IAG/C,sBAAsB,6BAA6B;IACnD,sBAAsB,6BAA6B;IACnD,sBAAsB,6BAA6B;IAGnD,qBAAqB,4BAA6B;IAClD,qBAAqB,4BAA6B;IAClD,qBAAqB,4BAA6B;IAElD;;sBAEkB;IAGlB,mBAAmB,0BAA0B;IAC7C,mBAAmB,0BAA0B;IAC7C,mBAAmB,0BAA0B;IAG7C,gBAAgB,uBAA0B;IAC1C,gBAAgB,uBAA0B;IAC1C,gBAAgB,uBAA0B;IAE1C;;sBAEkB;IAOlB;;sBAEkB;IAKlB,aAAa,mBAAyB;CACvC;AAED,oBAAY,cAAc;IACxB,MAAM,iBAAiB;IACvB,MAAM,iBAAiB;IACvB,MAAM,iBAAiB;CACxB"}
+{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../../../src/events/types/enums.ts"],"names":[],"mappings":"AAAA,oBAAY,QAAQ;IAElB;;sBAEkB;IAGlB,mBAAmB,yBAA8B;IACjD,mBAAmB,yBAA8B;IACjD,mBAAmB,yBAA8B;IAGjD,eAAe,qBAA8B;IAC7C,eAAe,qBAA8B;IAC7C,eAAe,qBAA8B;IAG7C,oBAAoB,0BAA8B;IAClD,oBAAoB,0BAA8B;IAClD,oBAAoB,0BAA8B;IAGlD,kBAAkB,wBAA8B;IAChD,kBAAkB,wBAA8B;IAChD,kBAAkB,wBAA8B;IAGhD,uBAAuB,6BAA8B;IACrD,uBAAuB,6BAA8B;IACrD,uBAAuB,6BAA8B;IAGrD,gBAAgB,sBAA8B;IAC9C,gBAAgB,sBAA8B;IAC9C,gBAAgB,sBAA8B;IAE9C;;sBAEkB;IAGlB,iBAAiB,uBAA2B;IAC5C,iBAAiB,uBAA2B;IAC5C,iBAAiB,uBAA2B;IAG5C,cAAc,oBAA2B;IACzC,cAAc,oBAA2B;IACzC,cAAc,oBAA2B;IAGzC,aAAa,mBAA2B;IACxC,aAAa,mBAA2B;IACxC,aAAa,mBAA2B;IAGxC,oBAAoB,iBAAkB;IACtC,oBAAoB,iBAAkB;IACtC,oBAAoB,iBAAkB;IAEtC;;uBAEmB;IAGnB,WAAW,iBAA0B;IACrC,WAAW,iBAA0B;IACrC,WAAW,iBAA0B;IAGrC,mBAAmB,yBAA0B;IAC7C,mBAAmB,yBAA0B;IAC7C,mBAAmB,yBAA0B;IAG7C,oBAAoB,0BAA0B;IAE9C;;uBAEmB;IAGnB,cAAc,oBAA4B;IAC1C,cAAc,oBAA4B;IAC1C,cAAc,oBAA4B;IAG1C,mBAAmB,0BAA6B;IAChD,mBAAmB,0BAA6B;IAChD,mBAAmB,0BAA6B;IAGhD,qBAAqB,4BAA6B;IAClD,qBAAqB,4BAA6B;IAClD,qBAAqB,4BAA6B;IAGlD,oBAAoB,2BAA6B;IACjD,oBAAoB,2BAA6B;IACjD,oBAAoB,2BAA6B;IAGjD,sBAAsB,6BAA6B;IACnD,sBAAsB,6BAA6B;IACnD,sBAAsB,6BAA6B;IAGnD,kBAAkB,yBAA6B;IAC/C,kBAAkB,yBAA6B;IAC/C,kBAAkB,yBAA6B;IAG/C,sBAAsB,6BAA6B;IACnD,sBAAsB,6BAA6B;IACnD,sBAAsB,6BAA6B;IAGnD,qBAAqB,4BAA6B;IAClD,qBAAqB,4BAA6B;IAClD,qBAAqB,4BAA6B;IAElD;;sBAEkB;IAGlB,mBAAmB,0BAA0B;IAC7C,mBAAmB,0BAA0B;IAC7C,mBAAmB,0BAA0B;IAG7C,gBAAgB,uBAA0B;IAC1C,gBAAgB,uBAA0B;IAC1C,gBAAgB,uBAA0B;IAE1C;;sBAEkB;IAOlB;;sBAEkB;IAKlB,aAAa,mBAAyB;CACvC;AAED,oBAAY,cAAc;IACxB,MAAM,iBAAiB;IACvB,MAAM,iBAAiB;IACvB,MAAM,iBAAiB;CACxB"}

package/build/events/types/enums.js.map

@@ -1 +1 @@
-{"version":3,"file":"enums.js","sourceRoot":"","sources":["../../../src/events/types/enums.ts"],"names":[],"mappings":";;;AAAA,IAAY,QAwJX;AAxJD,WAAY,QAAQ;IAElB;;sBAEkB;IAElB,gBAAgB;IAChB,wDAAiD,CAAA;IACjD,wDAAiD,CAAA;IACjD,wDAAiD,CAAA;IAEjD,WAAW;IACX,gDAA6C,CAAA;IAC7C,gDAA6C,CAAA;IAC7C,gDAA6C,CAAA;IAE7C,gBAAgB;IAChB,0DAAkD,CAAA;IAClD,0DAAkD,CAAA;IAClD,0DAAkD,CAAA;IAElD,cAAc;IACd,sDAAgD,CAAA;IAChD,sDAAgD,CAAA;IAChD,sDAAgD,CAAA;IAEhD,mBAAmB;IACnB,gEAAqD,CAAA;IACrD,gEAAqD,CAAA;IACrD,gEAAqD,CAAA;IAErD,YAAY;IACZ,kDAA8C,CAAA;IAC9C,kDAA8C,CAAA;IAC9C,kDAA8C,CAAA;IAE9C;;sBAEkB;IAElB,cAAc;IACd,oDAA4C,CAAA;IAC5C,oDAA4C,CAAA;IAC5C,oDAA4C,CAAA;IAE5C,UAAU;IACV,8CAAyC,CAAA;IACzC,8CAAyC,CAAA;IACzC,8CAAyC,CAAA;IAEzC,SAAS;IACT,4CAAwC,CAAA;IACxC,4CAAwC,CAAA;IACxC,4CAAwC,CAAA;IAExC,gBAAgB;IAChB,iDAAsC,CAAA;IACtC,iDAAsC,CAAA;IACtC,iDAAsC,CAAA;IAEtC;;uBAEmB;IAEnB,OAAO;IACP,wCAAoC,CAAA;IACpC,wCAAoC,CAAA;IACpC,wCAAoC,CAAA;IAEpC,eAAe;IACf,wDAA4C,CAAA;IAC5C,wDAA4C,CAAA;IAC5C,wDAA4C,CAAA;IAC5C,+EAA+E;IAC/E,oEAAoE;IACpE,0DAA8C,CAAA;IAE9C;;uBAEmB;IAEnB,UAAU;IACV,8CAA0C,CAAA;IAC1C,8CAA0C,CAAA;IAC1C,8CAA0C,CAAA;IAE1C,kBAAkB;IAClB,yDAAgD,CAAA;IAChD,yDAAgD,CAAA;IAChD,yDAAgD,CAAA;IAEhD,iBAAiB;IACjB,6DAAkD,CAAA;IAClD,6DAAkD,CAAA;IAClD,6DAAkD,CAAA;IAElD,kBAAkB;IAClB,2DAAiD,CAAA;IACjD,2DAAiD,CAAA;IACjD,2DAAiD,CAAA;IAEjD,WAAW;IACX,+DAAmD,CAAA;IACnD,+DAAmD,CAAA;IACnD,+DAAmD,CAAA;IAEnD,eAAe;IACf,uDAA+C,CAAA;IAC/C,uDAA+C,CAAA;IAC/C,uDAA+C,CAAA;IAE/C,WAAW;IACX,+DAAmD,CAAA;IACnD,+DAAmD,CAAA;IACnD,+DAAmD,CAAA;IAEnD,UAAU;IACV,6DAAkD,CAAA;IAClD,6DAAkD,CAAA;IAClD,6DAAkD,CAAA;IAElD;;sBAEkB;IAElB,gBAAgB;IAChB,yDAA6C,CAAA;IAC7C,yDAA6C,CAAA;IAC7C,yDAA6C,CAAA;IAE7C,aAAa;IACb,mDAA0C,CAAA;IAC1C,mDAA0C,CAAA;IAC1C,mDAA0C,CAAA;IAE1C;;sBAEkB;IAElB,mBAAmB;IACnB,2CAA2C;IAC3C,2CAA2C;IAC3C,2CAA2C;IAE3C;;sBAEkB;IAElB,0EAA0E;IAC1E,uEAAuE;IACvE,yDAAyD;IACzD,4CAAsC,CAAA;AACxC,CAAC,EAxJW,QAAQ,wBAAR,QAAQ,QAwJnB;AAED,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,yCAAuB,CAAA;IACvB,yCAAuB,CAAA;IACvB,yCAAuB,CAAA;AACzB,CAAC,EAJW,cAAc,8BAAd,cAAc,QAIzB"}
+{"version":3,"file":"enums.js","sourceRoot":"","sources":["../../../src/events/types/enums.ts"],"names":[],"mappings":";;;AAAA,IAAY,QAwJX;AAxJD,WAAY,QAAQ;IAElB;;sBAEkB;IAElB,gBAAgB;IAChB,wDAAiD,CAAA;IACjD,wDAAiD,CAAA;IACjD,wDAAiD,CAAA;IAEjD,WAAW;IACX,gDAA6C,CAAA;IAC7C,gDAA6C,CAAA;IAC7C,gDAA6C,CAAA;IAE7C,gBAAgB;IAChB,0DAAkD,CAAA;IAClD,0DAAkD,CAAA;IAClD,0DAAkD,CAAA;IAElD,cAAc;IACd,sDAAgD,CAAA;IAChD,sDAAgD,CAAA;IAChD,sDAAgD,CAAA;IAEhD,mBAAmB;IACnB,gEAAqD,CAAA;IACrD,gEAAqD,CAAA;IACrD,gEAAqD,CAAA;IAErD,YAAY;IACZ,kDAA8C,CAAA;IAC9C,kDAA8C,CAAA;IAC9C,kDAA8C,CAAA;IAE9C;;sBAEkB;IAElB,cAAc;IACd,oDAA4C,CAAA;IAC5C,oDAA4C,CAAA;IAC5C,oDAA4C,CAAA;IAE5C,UAAU;IACV,8CAAyC,CAAA;IACzC,8CAAyC,CAAA;IACzC,8CAAyC,CAAA;IAEzC,SAAS;IACT,4CAAwC,CAAA;IACxC,4CAAwC,CAAA;IACxC,4CAAwC,CAAA;IAExC,gBAAgB;IAChB,iDAAsC,CAAA;IACtC,iDAAsC,CAAA;IACtC,iDAAsC,CAAA;IAEtC;;uBAEmB;IAEnB,OAAO;IACP,wCAAqC,CAAA;IACrC,wCAAqC,CAAA;IACrC,wCAAqC,CAAA;IAErC,eAAe;IACf,wDAA6C,CAAA;IAC7C,wDAA6C,CAAA;IAC7C,wDAA6C,CAAA;IAC7C,+EAA+E;IAC/E,oEAAoE;IACpE,0DAA8C,CAAA;IAE9C;;uBAEmB;IAEnB,UAAU;IACV,8CAA0C,CAAA;IAC1C,8CAA0C,CAAA;IAC1C,8CAA0C,CAAA;IAE1C,kBAAkB;IAClB,yDAAgD,CAAA;IAChD,yDAAgD,CAAA;IAChD,yDAAgD,CAAA;IAEhD,iBAAiB;IACjB,6DAAkD,CAAA;IAClD,6DAAkD,CAAA;IAClD,6DAAkD,CAAA;IAElD,kBAAkB;IAClB,2DAAiD,CAAA;IACjD,2DAAiD,CAAA;IACjD,2DAAiD,CAAA;IAEjD,WAAW;IACX,+DAAmD,CAAA;IACnD,+DAAmD,CAAA;IACnD,+DAAmD,CAAA;IAEnD,eAAe;IACf,uDAA+C,CAAA;IAC/C,uDAA+C,CAAA;IAC/C,uDAA+C,CAAA;IAE/C,WAAW;IACX,+DAAmD,CAAA;IACnD,+DAAmD,CAAA;IACnD,+DAAmD,CAAA;IAEnD,UAAU;IACV,6DAAkD,CAAA;IAClD,6DAAkD,CAAA;IAClD,6DAAkD,CAAA;IAElD;;sBAEkB;IAElB,gBAAgB;IAChB,yDAA6C,CAAA;IAC7C,yDAA6C,CAAA;IAC7C,yDAA6C,CAAA;IAE7C,aAAa;IACb,mDAA0C,CAAA;IAC1C,mDAA0C,CAAA;IAC1C,mDAA0C,CAAA;IAE1C;;sBAEkB;IAElB,mBAAmB;IACnB,2CAA2C;IAC3C,2CAA2C;IAC3C,2CAA2C;IAE3C;;sBAEkB;IAElB,0EAA0E;IAC1E,uEAAuE;IACvE,yDAAyD;IACzD,4CAAsC,CAAA;AACxC,CAAC,EAxJW,QAAQ,wBAAR,QAAQ,QAwJnB;AAED,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,yCAAuB,CAAA;IACvB,yCAAuB,CAAA;IACvB,yCAAuB,CAAA;AACzB,CAAC,EAJW,cAAc,8BAAd,cAAc,QAIzB"}

package/build/services/index.d.ts

@@ -1,2 +1,4 @@
 export * from './password';
+export * from './tenant-archive';
+export * from './tenant-archive.interfaces';
 //# sourceMappingURL=index.d.ts.map

package/build/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC"}

package/build/services/index.js

@@ -15,4 +15,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./password"), exports);
+__exportStar(require("./tenant-archive"), exports);
+__exportStar(require("./tenant-archive.interfaces"), exports);
 //# sourceMappingURL=index.js.map

package/build/services/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B;AAC3B,mDAAiC;AACjC,8DAA4C"}

package/build/services/tenant-archive.d.ts

@@ -0,0 +1,90 @@
+/*********************************************************************************************
+ *                                                                                           *
+ * Tenant archive - how a deleted organization's documents are set aside, and put back.      *
+ *                                                                                           *
+ * Deleting an organization spans two services and eleven-plus collections, and no user      *
+ * confirmation makes an irreversible cascade of that size safe. So nothing is deleted       *
+ * outright: documents are MOVED to `tenantArchive`, where a TTL index disposes of them once *
+ * the recovery window closes. "Retained no longer than necessary" is satisfied by the        *
+ * deadline, not by the immediacy of the deletion.                                           *
+ *                                                                                           *
+ * This module owns the MECHANIC only. WHICH collections belong to a tenant is a question    *
+ * each service answers for itself - auth-srv its identity documents, app-srv its tenant     *
+ * data - which is also why the model types here are structural (T42).                       *
+ *                                                                                           *
+ *********************************************************************************************/
+import { ArchivableModel } from './tenant-archive.interfaces';
+import { ArchiveOutcome } from './tenant-archive.interfaces';
+import { TenantArchiveStore } from './tenant-archive.interfaces';
+/**
+ * Computes the instant an archived tenant stops being recoverable.
+ *
+ * Exported because the caller must compute it ONCE for a whole cascade and pass the
+ * same value to every collection: a per-collection deadline would let the TTL index
+ * expire half a tenant while the rest is still restorable, and a restore would then
+ * bring back an organization whose users have already been swept.
+ *
+ * @param purgeValidity the configured window (`APP.config.app.tenant.purgeValidity`,
+ *                      e.g. `'30d'`); anything unparseable falls back to 30 days
+ * @param from          the instant the window starts (defaults to now)
+ */
+export declare function purgeDeadline(purgeValidity?: string | number, from?: Date): Date;
+/**
+ * Files documents the caller ALREADY holds, without touching any source collection.
+ *
+ * The primitive {@link archiveDocuments} is built on, and useful on its own whenever
+ * the removal is not ours to perform: the organization record itself is deleted by
+ * the framework's `remove` - which is also what publishes `organization.removed` and
+ * writes the outbox row - so it can only be archived from the document in hand,
+ * before or after that call, never by reading it back.
+ *
+ * @param archive          the shared `tenantArchive` store
+ * @param sourceCollection where the documents came from, and where a restore puts them
+ * @param documents        the documents themselves, archived verbatim
+ * @param tenantId         the organization being deleted
+ * @param purgeAt          the shared deadline for the whole cascade
+ * @returns how many entries were written
+ */
+export declare function archiveEntries(archive: TenantArchiveStore, sourceCollection: string, documents: Record<string, unknown>[], tenantId: string, purgeAt: Date): Promise<ArchiveOutcome>;
+/**
+ * Moves every document matching `filter` out of `source` and into the archive.
+ *
+ * The order is the whole point: the entries are written FIRST and the originals
+ * removed only once that succeeded. The reverse would turn a failed write into data
+ * loss, which is exactly what the archive exists to prevent - the same reasoning
+ * that puts the organization first in the auth-srv cascade (T29).
+ *
+ * ⚠️ Not a transaction. A crash between the two steps leaves the documents in BOTH
+ * places, which the restore tolerates (it puts back what is already there, by `_id`)
+ * whereas the opposite ordering would leave them in NEITHER.
+ *
+ * The document is archived VERBATIM, `_id` included: relations across collections are
+ * by `_id`, so regenerating one would restore a tenant whose relations no longer match.
+ *
+ * @param source         the collection being emptied
+ * @param archive        the shared `tenantArchive` store
+ * @param filter         which documents belong to the tenant, as only the caller knows
+ * @param tenantId       the organization being deleted
+ * @param purgeAt        the shared deadline for the whole cascade - see {@link purgeDeadline}
+ * @returns how many documents were moved
+ */
+export declare function archiveDocuments(source: ArchivableModel, archive: TenantArchiveStore, filter: Record<string, unknown>, tenantId: string, purgeAt: Date): Promise<ArchiveOutcome>;
+/**
+ * Puts a tenant's documents back into `source`, and drops their archive entries.
+ *
+ * Mirrors {@link archiveDocuments}, including the ordering rule: the documents are
+ * reinserted FIRST and the archive entries dropped only afterwards, so a failure
+ * leaves them recoverable rather than gone.
+ *
+ * ⚠️ Restores ONLY what this service owns: the caller passes its own model, and the
+ * source collection name it carries is what selects the entries. The shared archive
+ * is therefore safe to read from both services - each sees only its own rows, and
+ * the two sets are disjoint by construction.
+ *
+ * @param source   the collection being refilled
+ * @param archive  the shared `tenantArchive` store
+ * @param tenantId the organization being restored
+ * @returns how many documents were put back
+ */
+export declare function restoreDocuments(source: ArchivableModel, archive: TenantArchiveStore, tenantId: string): Promise<ArchiveOutcome>;
+//# sourceMappingURL=tenant-archive.d.ts.map

package/build/services/tenant-archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-archive.d.ts","sourceRoot":"","sources":["../../src/services/tenant-archive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;+FAc+F;AAI/F,OAAO,EAAE,eAAe,EAAE,MAAS,6BAA6B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAU,6BAA6B,CAAC;AAEjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAKjE;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,GAAE,IAAiB,GAAG,IAAI,CAG5F;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAW,kBAAkB,EACpC,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAC3C,QAAQ,EAAU,MAAM,EACxB,OAAO,EAAW,IAAI,GACrB,OAAO,CAAC,cAAc,CAAC,CAWzB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAI,eAAe,EACzB,OAAO,EAAG,kBAAkB,EAC5B,MAAM,EAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAG,IAAI,GACb,OAAO,CAAC,cAAc,CAAC,CAWzB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAI,eAAe,EACzB,OAAO,EAAG,kBAAkB,EAC5B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,cAAc,CAAC,CAYzB"}

package/build/services/tenant-archive.interfaces.d.ts

@@ -0,0 +1,54 @@
+import { TenantArchiveItem } from '../interfaces';
+/**
+ * A collection the archive can empty and refill.
+ *
+ * Structural, like {@link ExistenceCheckModel} and for the same reason: the archive
+ * is a MECHANIC, not a rule about a specific entity. auth-srv hands it `users` and
+ * `mixin`, app-srv the eleven tenant collections, and a future service whatever it
+ * owns - none of which this library knows, nor should.
+ *
+ * `listNative` is deliberate over `list`: the scoped read applies `beforeGet`, which
+ * resolves the caller's tenant, and the documents being archived belong to an
+ * organization the caller is precisely in the act of deleting. The same holds for
+ * `removeNative` over `remove`.
+ */
+export interface ArchivableModel {
+    mgModel: {
+        collection: {
+            collectionName: string;
+        };
+    };
+    listNative(filter: Record<string, unknown>): {
+        toArray(): Promise<Record<string, unknown>[]>;
+    };
+    removeNative(filter: Record<string, unknown>): Promise<{
+        deletedCount?: number;
+    }>;
+    insertManyNative(items: any[], options: any): Promise<unknown>;
+}
+/**
+ * The archive itself, seen by the mechanic that fills and drains it.
+ *
+ * Kept separate from {@link ArchivableModel} even though the shapes overlap: the
+ * archive is never a SOURCE, and typing it as one would make
+ * `archiveDocuments(archive, archive, ...)` a legal call.
+ */
+export interface TenantArchiveStore {
+    listNative(filter: Record<string, unknown>): {
+        toArray(): Promise<Record<string, unknown>[]>;
+    };
+    removeNative(filter: Record<string, unknown>): Promise<{
+        deletedCount?: number;
+    }>;
+    insertManyNative(items: any[], options: any): Promise<unknown>;
+}
+/** What a single archive or restore actually moved. */
+export interface ArchiveOutcome {
+    /** Documents moved out of (or back into) the source collection. */
+    moved: number;
+    /** The source collection, echoed back so a caller can log the cascade. */
+    sourceCollection: string;
+}
+/** An archived entry as it comes back from the store, `_id` of the archive row aside. */
+export type ArchivedEntry = TenantArchiveItem & Record<string, unknown>;
+//# sourceMappingURL=tenant-archive.interfaces.d.ts.map

package/build/services/tenant-archive.interfaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-archive.interfaces.d.ts","sourceRoot":"","sources":["../../src/services/tenant-archive.interfaces.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,eAAe;IAE9B,OAAO,EAAE;QACP,UAAU,EAAE;YAAE,cAAc,EAAE,MAAM,CAAA;SAAE,CAAC;KACxC,CAAC;IAEF,UAAU,CAAG,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;KAAE,CAAC;IACjG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAIlF,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IAEjC,UAAU,CAAO,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;KAAE,CAAC;IACrG,YAAY,CAAK,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtF,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChE;AAED,uDAAuD;AACvD,MAAM,WAAW,cAAc;IAE7B,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IAEd,0EAA0E;IAC1E,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,yFAAyF;AACzF,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC"}

package/build/services/tenant-archive.interfaces.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=tenant-archive.interfaces.js.map

package/build/services/tenant-archive.interfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-archive.interfaces.js","sourceRoot":"","sources":["../../src/services/tenant-archive.interfaces.ts"],"names":[],"mappings":""}

package/build/services/tenant-archive.js

@@ -0,0 +1,120 @@
+"use strict";
+/*********************************************************************************************
+ *                                                                                           *
+ * Tenant archive - how a deleted organization's documents are set aside, and put back.      *
+ *                                                                                           *
+ * Deleting an organization spans two services and eleven-plus collections, and no user      *
+ * confirmation makes an irreversible cascade of that size safe. So nothing is deleted       *
+ * outright: documents are MOVED to `tenantArchive`, where a TTL index disposes of them once *
+ * the recovery window closes. "Retained no longer than necessary" is satisfied by the        *
+ * deadline, not by the immediacy of the deletion.                                           *
+ *                                                                                           *
+ * This module owns the MECHANIC only. WHICH collections belong to a tenant is a question    *
+ * each service answers for itself - auth-srv its identity documents, app-srv its tenant     *
+ * data - which is also why the model types here are structural (T42).                       *
+ *                                                                                           *
+ *********************************************************************************************/
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.purgeDeadline = purgeDeadline;
+exports.archiveEntries = archiveEntries;
+exports.archiveDocuments = archiveDocuments;
+exports.restoreDocuments = restoreDocuments;
+const functs_1 = require("../utils/functs");
+/** Fallback window, used when the configured validity is absent or unparseable. */
+const DEFAULT_PURGE_MS = 30 * 86400000;
+/**
+ * Computes the instant an archived tenant stops being recoverable.
+ *
+ * Exported because the caller must compute it ONCE for a whole cascade and pass the
+ * same value to every collection: a per-collection deadline would let the TTL index
+ * expire half a tenant while the rest is still restorable, and a restore would then
+ * bring back an organization whose users have already been swept.
+ *
+ * @param purgeValidity the configured window (`APP.config.app.tenant.purgeValidity`,
+ *                      e.g. `'30d'`); anything unparseable falls back to 30 days
+ * @param from          the instant the window starts (defaults to now)
+ */
+function purgeDeadline(purgeValidity, from = new Date()) {
+    return new Date(from.getTime() + ((0, functs_1.parseDurationMs)(purgeValidity) ?? DEFAULT_PURGE_MS));
+}
+/**
+ * Files documents the caller ALREADY holds, without touching any source collection.
+ *
+ * The primitive {@link archiveDocuments} is built on, and useful on its own whenever
+ * the removal is not ours to perform: the organization record itself is deleted by
+ * the framework's `remove` - which is also what publishes `organization.removed` and
+ * writes the outbox row - so it can only be archived from the document in hand,
+ * before or after that call, never by reading it back.
+ *
+ * @param archive          the shared `tenantArchive` store
+ * @param sourceCollection where the documents came from, and where a restore puts them
+ * @param documents        the documents themselves, archived verbatim
+ * @param tenantId         the organization being deleted
+ * @param purgeAt          the shared deadline for the whole cascade
+ * @returns how many entries were written
+ */
+async function archiveEntries(archive, sourceCollection, documents, tenantId, purgeAt) {
+    if (!documents.length)
+        return { moved: 0, sourceCollection };
+    const archivedAt = new Date();
+    const entries = documents.map((doc) => ({ tenantId, sourceCollection, doc, archivedAt, purgeAt }));
+    await archive.insertManyNative(entries, {});
+    return { moved: documents.length, sourceCollection };
+}
+/**
+ * Moves every document matching `filter` out of `source` and into the archive.
+ *
+ * The order is the whole point: the entries are written FIRST and the originals
+ * removed only once that succeeded. The reverse would turn a failed write into data
+ * loss, which is exactly what the archive exists to prevent - the same reasoning
+ * that puts the organization first in the auth-srv cascade (T29).
+ *
+ * ⚠️ Not a transaction. A crash between the two steps leaves the documents in BOTH
+ * places, which the restore tolerates (it puts back what is already there, by `_id`)
+ * whereas the opposite ordering would leave them in NEITHER.
+ *
+ * The document is archived VERBATIM, `_id` included: relations across collections are
+ * by `_id`, so regenerating one would restore a tenant whose relations no longer match.
+ *
+ * @param source         the collection being emptied
+ * @param archive        the shared `tenantArchive` store
+ * @param filter         which documents belong to the tenant, as only the caller knows
+ * @param tenantId       the organization being deleted
+ * @param purgeAt        the shared deadline for the whole cascade - see {@link purgeDeadline}
+ * @returns how many documents were moved
+ */
+async function archiveDocuments(source, archive, filter, tenantId, purgeAt) {
+    const sourceCollection = source.mgModel.collection.collectionName;
+    const documents = await source.listNative(filter).toArray();
+    const outcome = await archiveEntries(archive, sourceCollection, documents, tenantId, purgeAt);
+    if (outcome.moved)
+        await source.removeNative(filter);
+    return outcome;
+}
+/**
+ * Puts a tenant's documents back into `source`, and drops their archive entries.
+ *
+ * Mirrors {@link archiveDocuments}, including the ordering rule: the documents are
+ * reinserted FIRST and the archive entries dropped only afterwards, so a failure
+ * leaves them recoverable rather than gone.
+ *
+ * ⚠️ Restores ONLY what this service owns: the caller passes its own model, and the
+ * source collection name it carries is what selects the entries. The shared archive
+ * is therefore safe to read from both services - each sees only its own rows, and
+ * the two sets are disjoint by construction.
+ *
+ * @param source   the collection being refilled
+ * @param archive  the shared `tenantArchive` store
+ * @param tenantId the organization being restored
+ * @returns how many documents were put back
+ */
+async function restoreDocuments(source, archive, tenantId) {
+    const sourceCollection = source.mgModel.collection.collectionName;
+    const entries = await archive.listNative({ tenantId, sourceCollection }).toArray();
+    if (!entries.length)
+        return { moved: 0, sourceCollection };
+    await source.insertManyNative(entries.map(entry => entry.doc), {});
+    await archive.removeNative({ tenantId, sourceCollection });
+    return { moved: entries.length, sourceCollection };
+}
+//# sourceMappingURL=tenant-archive.js.map

package/build/services/tenant-archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-archive.js","sourceRoot":"","sources":["../../src/services/tenant-archive.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;+FAc+F;;AAwB/F,sCAGC;AAkBD,wCAiBC;AAwBD,4CAiBC;AAmBD,4CAgBC;AAxID,4CAAqD;AAOrD,mFAAmF;AACnF,MAAM,gBAAgB,GAAG,EAAE,GAAG,QAAU,CAAC;AAEzC;;;;;;;;;;;GAWG;AACH,SAAgB,aAAa,CAAC,aAA+B,EAAE,OAAa,IAAI,IAAI,EAAE;IAEpF,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAA,wBAAe,EAAC,aAAa,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACI,KAAK,UAAU,cAAc,CAClC,OAAoC,EACpC,gBAAwB,EACxB,SAA2C,EAC3C,QAAwB,EACxB,OAAsB;IAGtB,IAAI,CAAC,SAAS,CAAC,MAAM;QACnB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAExC,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAM,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAqB,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAEzH,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAA+C,EAAE,EAAE,CAAC,CAAC;IAEpF,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACI,KAAK,UAAU,gBAAgB,CACpC,MAAyB,EACzB,OAA4B,EAC5B,MAAiC,EACjC,QAAgB,EAChB,OAAc;IAGd,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;IAClE,MAAM,SAAS,GAAU,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAEnE,MAAM,OAAO,GAAY,MAAM,cAAc,CAAC,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEvG,IAAI,OAAO,CAAC,KAAK;QACf,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAEpC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACI,KAAK,UAAU,gBAAgB,CACpC,MAAyB,EACzB,OAA4B,EAC5B,QAAgB;IAGhB,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;IAClE,MAAM,OAAO,GAAY,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAqB,CAAC;IAE/G,IAAI,CAAC,OAAO,CAAC,MAAM;QACjB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAExC,MAAM,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,GAA8B,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9F,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAE3D,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC;AACrD,CAAC"}

package/build/utils/env.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.constants.js","sourceRoot":"","sources":["../../src/utils/env.constants.ts"],"names":[],"mappings":";;;AAAA,mDAAyI;AAEzI;;;;;;GAMG;AAEH;;;;;;;GAOG;AACU,QAAA,YAAY,GAA2B;IAClD,QAAQ,EAAa,OAAO;IAC5B,WAAW,EAAU,MAAM;IAC3B,OAAO,EAAc,QAAQ;IAC7B,aAAa,EAAQ,EAAE;IACvB,aAAa,EAAQ,wCAAwB;IAC7C,YAAY,EAAS,uCAAuB,EAAI,gEAAgE;IAChH,iBAAiB,EAAI,yCAAyB,EAAE,gEAAgE;IAChH,gBAAgB,EAAK,wCAAwB,EAAG,KAAK;IACrD,UAAU,EAAW,WAAW;IAChC,UAAU,EAAW,IAAI,EAAuB,sDAAsD;IACtG,UAAU,EAAW,IAAI;IACzB,SAAS,EAAY,EAAE;IACvB,aAAa,EAAQ,EAAE;IACvB,aAAa,EAAQ,EAAE;IACvB,QAAQ,EAAa,uBAAuB;IAC5C,mBAAmB,EAAE,GAAG;IACxB,mBAAmB,EAAE,GAAG;IACxB,mBAAmB,EAAE,IAAI;IACzB,qBAAqB,EAAE,KAAK,EAAoB,sDAAsD;IACtG,OAAO,EAAc,EAAE;IACvB,cAAc,EAAO,EAAE;IACvB,aAAa,EAAQ,EAAE;IACvB,aAAa,EAAQ,WAAW;IAChC,gBAAgB,EAAK,cAAc;IACnC,iBAAiB,EAAI,eAAe,EAAY,mCAAmC;IACnF,mBAAmB,EAAE,gBAAgB;IACrC,eAAe,EAAM,MAAM;CAC5B,CAAC;AAEF,mFAAmF;AACtE,QAAA,WAAW,GAAG,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;AAE9D,uFAAuF;AAC1E,QAAA,QAAQ,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC"}
+{"version":3,"file":"env.constants.js","sourceRoot":"","sources":["../../src/utils/env.constants.ts"],"names":[],"mappings":";;;AAAA,mDAAyI;AAEzI;;;;;;GAMG;AAEH;;;;;;;GAOG;AACU,QAAA,YAAY,GAA2B;IAClD,QAAQ,EAAe,OAAO;IAC9B,WAAW,EAAY,MAAM;IAC7B,OAAO,EAAgB,QAAQ;IAC/B,aAAa,EAAU,EAAE;IACzB,aAAa,EAAU,wCAAwB;IAC/C,YAAY,EAAW,uCAAuB,EAAI,gEAAgE;IAClH,iBAAiB,EAAM,yCAAyB,EAAE,gEAAgE;IAClH,gBAAgB,EAAO,wCAAwB,EAAG,KAAK;IACvD,UAAU,EAAa,WAAW;IAClC,UAAU,EAAa,IAAI,EAAuB,sDAAsD;IACxG,UAAU,EAAa,IAAI;IAC3B,SAAS,EAAc,EAAE;IACzB,aAAa,EAAU,EAAE;IACzB,aAAa,EAAU,EAAE;IACzB,QAAQ,EAAe,uBAAuB;IAC9C,mBAAmB,EAAI,GAAG;IAC1B,mBAAmB,EAAI,GAAG;IAC1B,mBAAmB,EAAI,IAAI;IAC3B,qBAAqB,EAAE,KAAK,EAAoB,sDAAsD;IACtG,OAAO,EAAgB,EAAE;IACzB,cAAc,EAAS,EAAE;IACzB,aAAa,EAAU,EAAE;IACzB,aAAa,EAAU,WAAW;IAClC,gBAAgB,EAAO,cAAc;IACrC,iBAAiB,EAAM,eAAe,EAAY,mCAAmC;IACrF,mBAAmB,EAAI,gBAAgB;IACvC,eAAe,EAAQ,MAAM;CAC9B,CAAC;AAEF,mFAAmF;AACtE,QAAA,WAAW,GAAG,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;AAE9D,uFAAuF;AAC1E,QAAA,QAAQ,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextage/era-lib",
-  "version": "1.0.195",
+  "version": "1.0.196",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
   "files": [