@teamscala/service-boot 0.23.430 → 0.23.432

package/src/handlers/prune-stale-data.ts

@@ -1,110 +0,0 @@
-/**
- * @system server-boot
- * @status handwritten
- * @edit edit directly
- *
- * The `db-prune-stale-data` pg-boss handler. Reads the `retention` map from the
- * `scheduled_job` row config and prunes stale rows per entry.
- *
- * Writes use Prisma ORM methods (deleteMany/updateMany) via the prisma-registry
- * client — NEVER raw SQL. The `@teamscala/db` client carries the `blockRawSqlWrites`
- * audit extension: `$executeRaw`/`$executeRawUnsafe` are blocked so every write
- * is audited; ORM methods are the canonical audited path.
- *
- * SAFETY — identifier allowlist: each retention key selects a FIXED, hardcoded
- * Prisma model + field (table/field names are literal in code, never derived
- * from the row); the row's value (a duration string) is parsed to a cutoff Date.
- * A row can therefore never inject arbitrary SQL or address an unvetted model.
- * Keys not in the allowlist are skipped + logged.
- *
- * `audit_trail.*` is INTENTIONALLY EXCLUDED: `audit-trail-permanent` (critical)
- * forbids any DELETE FROM audit_trail. The legacy row's
- * `audit_trail.sync_entities: "delete all"` entry is stale drift from before
- * the 2026-06-19 hardening — surfaced (skipped + warned), never executed.
- *
- * Registered under slug `@teamscala/service-boot:prune-stale-data`.
- */
-import type { ScheduledJobConfig } from "@teamscala/db-validation/registry-schemas/scheduled-job";
-import { Prisma } from "@teamscala/db/client";
-import { getPrisma } from "@teamscala/db/prisma-registry";
-import { getAppLogger } from "@teamscala/logger/app-loggers";
-import { pgBossHandlerRegistry } from "../pg-boss-handler-registry.ts";
-
-const DURATION_RE = /^(\d+)\s+(second|minute|hour|day|week|month|year)s?$/;
-const UNIT_TO_MS: Record<string, number> = {
-	second: 1_000,
-	minute: 60_000,
-	hour: 3_600_000,
-	day: 86_400_000,
-	week: 604_800_000,
-	month: 2_592_000_000,
-	year: 31_536_000_000,
-};
-
-type PrismaClient = ReturnType<typeof getPrisma>;
-type PruneOp = (prisma: PrismaClient, cutoff: Date) => Promise<number>;
-
-// Fixed ops — model + field names literal in code, cutoff Date is the only
-// variable. Adding a prunable target = adding an entry here (and confirming the
-// model/field + audit-trail-permanent scope).
-const PRUNE_OPS: Record<string, PruneOp> = {
-	"fleet_run_events": async (prisma, cutoff) =>
-		(await prisma.fleet_run_events.deleteMany({ where: { created_at: { lt: cutoff } } })).count,
-	"fleet_run_transitions": async (prisma, cutoff) =>
-		(await prisma.fleet_run_transitions.deleteMany({ where: { created_at: { lt: cutoff } } })).count,
-	// Null out the bulky transcript JSON of old runs — keep the run row itself.
-	// A nullable-Json column requires Prisma's DbNull sentinel (bare `null` is
-	// ambiguous: JSON null vs SQL NULL); DbNull sets the column to SQL NULL.
-	// Prisma namespace is re-exported from @teamscala/db/client.
-	"fleet_agent_runs.transcript": async (prisma, cutoff) =>
-		(
-			await prisma.fleet_agent_runs.updateMany({
-				where: { created_at: { lt: cutoff } },
-				data: { transcript: Prisma.DbNull },
-			})
-		).count,
-};
-
-export async function pruneStaleData({
-	config,
-}: {
-	config: ScheduledJobConfig;
-}): Promise<void> {
-	const log = getAppLogger();
-	const retention = config.retention;
-	if (!retention || Object.keys(retention).length === 0) {
-		log.info("[db-prune-stale-data] no retention entries — nothing to prune");
-		return;
-	}
-	const prisma = getPrisma();
-	let ran = 0;
-	let skipped = 0;
-	for (const [key, rawValue] of Object.entries(retention)) {
-		const op = PRUNE_OPS[key];
-		if (!op) {
-			log.warn(
-				`[db-prune-stale-data] skipping "${key}" — not in the prune allowlist ` +
-					`(audit_trail is excluded by audit-trail-permanent; add the op explicitly to enable)`,
-			);
-			skipped++;
-			continue;
-		}
-		const match = DURATION_RE.exec(rawValue.trim());
-		if (!match) {
-			log.warn(
-				`[db-prune-stale-data] skipping "${key}" — value "${rawValue}" is not a duration (expected e.g. "1 day")`,
-			);
-			skipped++;
-			continue;
-		}
-		const cutoff = new Date(Date.now() - Number(match[1]) * UNIT_TO_MS[match[2]!]);
-		const affected = await op(prisma, cutoff);
-		log.info(
-			`[db-prune-stale-data] pruned "${key}" older than ${rawValue} — ${affected} row(s) affected`,
-		);
-		ran++;
-	}
-	log.info(`[db-prune-stale-data] complete — ${ran} op(s) ran, ${skipped} skipped`);
-}
-
-pgBossHandlerRegistry.register("@teamscala/service-boot:prune-stale-data", pruneStaleData);