@voltro/plugin-governance 0.85.0 → 0.87.0

package/dist/consent.js

@@ -0,0 +1,55 @@
+import { and as e, boolean as t, eq as n, id as r, table as i, text as a } from "@voltro/database";
+//#region src/consent.ts
+var o = 1e4, s = (e = o) => {
+	let t = /* @__PURE__ */ new Map(), n = [], r = (e, t) => `${e}|${t}`;
+	return {
+		record: async (i) => {
+			t.set(r(i.subjectId, i.purpose), i), n.unshift(i), n.length > e && (n.length = e);
+		},
+		has: async (e, n) => t.get(r(e, n))?.granted ?? !1,
+		list: async (e) => n.filter((t) => t.subjectId === e)
+	};
+}, c = "_voltro_consent", l = i(c, {
+	id: r({ prefix: "consent" }),
+	subjectId: a(),
+	purpose: a(),
+	granted: t(),
+	at: a(),
+	tenantId: a().nullable()
+}).index("byConsentSubjectPurpose", ["subjectId", "purpose"]).index("byConsentSubject", ["subjectId"]), u = [l], d = (e) => ({
+	subjectId: String(e.subjectId),
+	purpose: String(e.purpose),
+	granted: e.granted === !0 || e.granted === 1 || e.granted === "true",
+	at: String(e.at),
+	tenantId: e.tenantId ?? null
+}), f = (t) => {
+	let r = (e, n) => t.query({
+		table: c,
+		predicate: e,
+		order: [{
+			column: "at",
+			direction: "desc"
+		}],
+		take: n,
+		skip: void 0,
+		projection: void 0
+	});
+	return {
+		record: async (e) => {
+			await t.insert(c, {
+				subjectId: e.subjectId,
+				purpose: e.purpose,
+				granted: e.granted,
+				at: e.at,
+				tenantId: e.tenantId ?? null
+			});
+		},
+		has: async (t, i) => {
+			let a = await r(e(n("subjectId", t), n("purpose", i)), 1);
+			return a[0] ? d(a[0]).granted : !1;
+		},
+		list: async (e) => (await r(n("subjectId", e))).map(d)
+	};
+};
+//#endregion
+export { o as CONSENT_HISTORY_CAP, c as CONSENT_TABLE, l as consentTable, u as consentTables, f as dataStoreConsentStore, s as memoryConsentStore };

package/dist/gdpr.js

@@ -0,0 +1,118 @@
+import { writeGovernanceRows as e } from "./store.js";
+//#region src/gdpr.ts
+var t = 500, n = 5e4, r = (e, t) => {
+	let n = [];
+	for (let r = 0; r < e.length; r += t) n.push(e.slice(r, r + t));
+	return n;
+}, i = (e, t) => e.table === t && e.subjectField === "id" ? {
+	table: e.table,
+	hops: [],
+	depth: 0,
+	via: "declared"
+} : {
+	table: e.table,
+	hops: [{
+		table: e.table,
+		foreignKey: e.subjectField,
+		parentKey: "id"
+	}],
+	depth: 1,
+	via: "declared"
+}, a = async (e, t, i, a = n) => {
+	let o = /* @__PURE__ */ new Map();
+	if (!Number.isSafeInteger(a) || a < 1) throw Error("subject rowCap must be a positive safe integer");
+	let s = /* @__PURE__ */ new Map();
+	for (let e of t) {
+		let t = e.hops.length ? e.hops : [{
+			table: e.table,
+			foreignKey: "id",
+			parentKey: "id"
+		}], n = s;
+		for (let e of t) {
+			let t = JSON.stringify([
+				e.table,
+				e.foreignKey,
+				e.parentKey
+			]), r = n.get(t);
+			r || (r = {
+				hop: e,
+				children: /* @__PURE__ */ new Map()
+			}, n.set(t, r)), n = r.children;
+		}
+	}
+	let c = (e) => {
+		let t = o.get(e);
+		return t || (t = {
+			rows: /* @__PURE__ */ new Map(),
+			truncated: !1
+		}, o.set(e, t)), t;
+	}, l = (e, t) => {
+		let n = c(e);
+		for (let e of t) {
+			let t = String(e.id ?? JSON.stringify(e));
+			n.rows.has(t) || (n.rows.size >= a ? n.truncated = !0 : n.rows.set(t, e));
+		}
+	}, u = async (t, n) => {
+		let { hop: i, children: o } = t, s = c(i.table);
+		for (let t of r(n, 500)) {
+			let n, r = !1;
+			for (;;) {
+				if (o.size === 0 && s.truncated) return;
+				let c = o.size || r ? 500 : Math.min(500, a - s.rows.size + 1), d = e.scan ? await e.scan(i.table, {
+					column: i.foreignKey,
+					values: t,
+					limit: c,
+					...n === void 0 ? {} : { after: n }
+				}) : await e.where(i.table, i.foreignKey, t), f = s.rows.size;
+				if (l(i.table, d), r = d.length > 0 && s.rows.size === f, d.length === 0) break;
+				let p = [...new Set(d.map((e) => String(e[i.parentKey] ?? e.id)))];
+				for (let e of o.values()) await u(e, p);
+				if (!e.scan || d.length < c) break;
+				let m = d[d.length - 1].id;
+				if (m === void 0 || m === n) throw Error("governance scan must advance a stable id cursor");
+				n = m;
+			}
+		}
+	};
+	for (let e of s.values()) await u(e, [i]);
+	return [...o.entries()].map(([e, t]) => ({
+		table: e,
+		rows: [...t.rows.values()],
+		...t.truncated ? { truncated: !0 } : {}
+	}));
+}, o = async (e, t, n) => {
+	let r = await a(e, t, n);
+	if (r.some((e) => e.truncated === !0)) throw Error("governance: subject export exceeds the per-table row limit; no bundle was returned");
+	let i = {};
+	for (let e of r) e.rows.length > 0 && (i[e.table] = e.rows);
+	return i;
+}, s = (e, t) => {
+	if (t === void 0 || t.length === 0) throw Error(`${e}: mode 'anonymize' needs a non-empty 'anonymizeFields' — with none, nothing is written and the result would report rows as affected that were not changed`);
+}, c = async (t, n, r, i = {}, o = () => (/* @__PURE__ */ new Date()).toISOString()) => {
+	let c = i.mode ?? "delete";
+	c === "anonymize" && s("governance erasure", i.anonymizeFields);
+	let l = await a(t, n, r), u = /* @__PURE__ */ new Map();
+	for (let e of n) {
+		let t = u.get(e.table);
+		(t === void 0 || e.depth > t) && u.set(e.table, e.depth);
+	}
+	let d = [...l].sort((e, t) => (u.get(t.table) ?? 0) - (u.get(e.table) ?? 0)), f = [], p = [];
+	for (let n of d) {
+		if (n.rows.length === 0) continue;
+		n.truncated === !0 && p.push(n.table);
+		let r = c === "delete" ? void 0 : Object.fromEntries((i.anonymizeFields ?? []).map((e) => [e, null])), a = await e(t, n.table, n.rows.map((e) => String(e.id)), r);
+		f.push({
+			table: n.table,
+			count: a
+		});
+	}
+	return {
+		subjectId: r,
+		at: o(),
+		mode: c,
+		affected: f,
+		...p.length > 0 ? { truncated: p } : {}
+	};
+};
+//#endregion
+export { t as SUBJECT_KEY_CHUNK, n as SUBJECT_ROW_CAP, s as assertAnonymizable, a as collectSubjectRows, c as eraseSubject, o as exportSubject, i as scopeToPath };

package/dist/index.d.ts

@@ -5,10 +5,13 @@ import { deriveSubjectGraph } from '@voltro/database';
 import { DeriveSubjectGraphInput } from '@voltro/database';
 import { ENCRYPTED_PREFIX } from '@voltro/database';
 import { FieldCipher } from '@voltro/database';
+import { fieldKeyIdOf } from '@voltro/runtime';
 import { formatSubjectGraph } from '@voltro/database';
 import { isEncrypted } from '@voltro/database';
 import { makeAesCipher } from '@voltro/runtime';
 import { makeFieldCipher } from '@voltro/runtime';
+import { makeFieldKeyring } from '@voltro/runtime';
+import { resolveFieldKeyring } from '@voltro/runtime';
 import { SchemaTable } from '@voltro/database';
 import { setFieldCipher } from '@voltro/runtime';
 import { SubjectGraph } from '@voltro/database';
@@ -155,6 +158,8 @@ export declare const exportSubject: (store: GovStore, paths: ReadonlyArray<Subje
 
 export { FieldCipher }
 
+export { fieldKeyIdOf }
+
 export { formatSubjectGraph }
 
 export declare const governancePlugin: (options?: GovernancePluginOptions) => VoltroPlugin;
@@ -334,6 +339,8 @@ export { makeAesCipher }
 
 export { makeFieldCipher }
 
+export { makeFieldKeyring }
+
 /**
  * In-memory consent store (default + test). Latest-write-wins per
  * (subject,purpose).
@@ -354,6 +361,8 @@ export declare const memoryGovStore: (seed?: Record<string, Array<Record<string,
     dump: () => Record<string, Array<Record<string, unknown>>>;
 };
 
+export { resolveFieldKeyring }
+
 export declare interface RetentionPolicy {
     readonly table: string;
     /** Time-to-live in ms (e.g. 90 days = 90*86_400_000). */