@tokenoftrust/storefront-runner 4.9.2 → 4.9.3

package/apps/storefront/src/scheduled/contactVaultSweep.ts

@@ -0,0 +1,80 @@
+/**
+ * The hourly contact vault sweep — the Worker's `scheduled` handler body. One `now` per firing,
+ * taken from its scheduled time: purge expired order contacts and contact messages, shorten terminal
+ * orders' retention, and seal any contact message still held as legacy plaintext. Expiry predicates
+ * only; it never touches an order, audit or other row.
+ *
+ * It logs ONE structured line of counts on success and ONE fixed error code on failure — never an
+ * error message, id or row, since either could carry data. It composes orders and engagement, which
+ * no module under src/lib may do, so it lives beside the Worker entry.
+ */
+import { fromD1, type Queryable } from "@/lib/catalog/d1/catalog.js";
+import type { VaultKeyring } from "@/lib/customers/contactVault/envelope.js";
+import { purgeExpiredContactMessages, sealLegacyContactMessages } from "@/lib/engagement/contact/contactMessages.js";
+import { loadVaultKeyring } from "@/lib/orders/vault/keyringEnv.js";
+import { purgeOrderContacts, type PurgeCounts } from "@/lib/orders/vault/orderContactVault.js";
+import { readD1 } from "@/lib/publication/shared/env";
+
+export const SWEEP_LEGACY_SEAL_LIMIT = 500;
+export const CONTACT_VAULT_SWEEP_EVENT = "contact-vault-sweep";
+export const SWEEP_DB_UNAVAILABLE = "contact-vault-sweep-db-unavailable";
+export const SWEEP_FAILED = "contact-vault-sweep-failed";
+
+export interface SweepCounts {
+  orders: PurgeCounts;
+  messagesPurged: number;
+  legacySealed: number;
+  legacyRemaining: number;
+}
+
+export async function runContactVaultSweep(db: Queryable, keyring: VaultKeyring | null, now: Date): Promise<SweepCounts> {
+  if (Number.isNaN(now.getTime())) throw new Error("contact vault sweep: unreadable clock");
+  const orders = await purgeOrderContacts(db, now);
+  const messagesPurged = await purgeExpiredContactMessages(db, now);
+  const legacy = keyring
+    ? await sealLegacyContactMessages(db, keyring, now, SWEEP_LEGACY_SEAL_LIMIT)
+    : { sealed: 0, remaining: -1 };
+  return { orders, messagesPurged, legacySealed: legacy.sealed, legacyRemaining: legacy.remaining };
+}
+
+export interface ScheduledSweepDeps {
+  openDb(): Promise<Queryable | null>;
+  loadKeyring(): Promise<VaultKeyring | null>;
+  sweep(db: Queryable, keyring: VaultKeyring | null, now: Date): Promise<SweepCounts>;
+  log(line: string): void;
+  logError(line: string): void;
+}
+
+const workerDeps: ScheduledSweepDeps = {
+  openDb: async () => {
+    const d1 = await readD1("STOREFRONT_APPS_DB");
+    return d1 ? fromD1(d1) : null;
+  },
+  loadKeyring: loadVaultKeyring,
+  sweep: runContactVaultSweep,
+  log: (line) => console.log(line),
+  logError: (line) => console.error(line),
+};
+
+/** Never throws: every failure is reported as a fixed code. */
+export async function runScheduledContactVaultSweep(scheduledTime: number, deps: ScheduledSweepDeps = workerDeps): Promise<void> {
+  const fail = (error: string) => deps.logError(JSON.stringify({ event: CONTACT_VAULT_SWEEP_EVENT, error }));
+  try {
+    const db = await deps.openDb();
+    if (!db) return fail(SWEEP_DB_UNAVAILABLE);
+    const keyring = await deps.loadKeyring();
+    const counts = await deps.sweep(db, keyring, new Date(scheduledTime));
+    deps.log(JSON.stringify({
+      event: CONTACT_VAULT_SWEEP_EVENT,
+      keyringAvailable: keyring !== null,
+      ordersPurged: counts.orders.purged,
+      tombstonesRemoved: counts.orders.tombstonesRemoved,
+      ordersShortened: counts.orders.shortened,
+      messagesPurged: counts.messagesPurged,
+      legacySealed: counts.legacySealed,
+      legacyRemaining: counts.legacyRemaining,
+    }));
+  } catch {
+    fail(SWEEP_FAILED);
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "4.9.2",
+  "version": "4.9.3",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",