@voltro/plugin-governance 0.83.1 → 0.85.0

package/dist/index.d.ts

@@ -251,7 +251,7 @@ export declare interface GovernancePluginOptions {
 export declare class GovernanceService extends GovernanceService_base {
 }
 
-declare const GovernanceService_base: Context.TagClass<GovernanceService, "@voltro/plugin-governance/GovernanceService", GovernanceServiceShape>;
+declare const GovernanceService_base: Context.ServiceClass<GovernanceService, "@voltro/plugin-governance/GovernanceService", GovernanceServiceShape>;
 
 export declare interface GovernanceServiceShape {
     readonly exportSubject: (subjectId: string) => Promise<Record<string, ReadonlyArray<Record<string, unknown>>>>;
@@ -268,6 +268,20 @@ export declare interface GovernanceServiceShape {
     readonly subjectGraph: () => SubjectGraph;
 }
 
+export declare interface GovScan {
+    readonly limit: number;
+    readonly after?: unknown;
+    readonly column?: string;
+    readonly values?: ReadonlyArray<unknown>;
+    readonly projection?: ReadonlyArray<string>;
+    /** Push down only for a registered timestamp column; other date formats
+     * remain candidates for the caller's Date/string/number matcher. */
+    readonly expired?: {
+        readonly column: string;
+        readonly before: Date;
+    };
+}
+
 export declare interface GovStore {
     /**
      * All rows of a table.
@@ -306,6 +320,12 @@ export declare interface GovStore {
     readonly page: (table: string, limit: number, offset: number) => Promise<ReadonlyArray<Record<string, unknown>>>;
     readonly delete: (table: string, id: string) => Promise<void>;
     readonly update: (table: string, id: string, patch: Record<string, unknown>) => Promise<void>;
+    /** Stable keyset page, optionally subject-scoped/projected. Custom stores
+     * can provide it to avoid materializing a complete subject hop. */
+    readonly scan?: (table: string, options: GovScan) => Promise<ReadonlyArray<Record<string, unknown>>>;
+    /** Bounded physical deletes (no patch) or updates; returns actual affected
+     * rows. Implementations retain normal store events and failure behavior. */
+    readonly writeMany?: (table: string, ids: ReadonlyArray<string>, patch?: Record<string, unknown>) => Promise<number>;
 }
 
 export { isEncrypted }
@@ -361,12 +381,11 @@ declare interface RetentionReport {
  * from growing) can't OOM the process or fire one statement per row in an
  * unbounded burst.
  *
- * Window math: the page is read ordered by a stable key at a moving `offset`.
- * For `delete` the acted-on rows are removed, so the next page's rows shift
- * into the gap — `offset` advances only by the rows the page LEFT in place
- * (`page.length - deleted`). For `anonymize` rows stay, so `offset` advances
- * by the full page. The loop ends when a page comes back shorter than the
- * batch (table drained).
+ * Stores with `scan` select id/date pages after a stable id cursor, pushing
+ * expiry into SQL for timestamp fields. Deletion cannot shift that cursor.
+ * Custom page-only stores retain survivor-offset traversal: deletes advance
+ * by the survivors, anonymization by the complete page. A short page ends
+ * the sweep. Writes are bounded independently of the scan page size.
  */
 export declare const runRetention: (store: GovStore, policies: ReadonlyArray<RetentionPolicy>, now?: number, batchSize?: number) => Promise<ReadonlyArray<RetentionReport>>;