@voltro/plugin-governance 0.85.0 → 0.87.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +5987 -0
- package/THIRD-PARTY-NOTICES.md +864 -253
- package/dist/consent.js +55 -0
- package/dist/gdpr.js +118 -0
- package/dist/index.d.ts +9 -0
- package/dist/index.js +193 -442
- package/dist/retention.js +52 -0
- package/dist/store.js +120 -0
- package/package.json +4 -4
|
@@ -0,0 +1,52 @@
|
|
|
1
|
+
import { writeGovernanceRows as e } from "./store.js";
|
|
2
|
+
import { assertAnonymizable as t } from "./gdpr.js";
|
|
3
|
+
//#region src/retention.ts
|
|
4
|
+
var n = (e, t, n) => {
|
|
5
|
+
let r = e[t], i = r instanceof Date ? r.getTime() : typeof r == "string" || typeof r == "number" ? new Date(r).getTime() : NaN;
|
|
6
|
+
return Number.isNaN(i) ? null : n - i;
|
|
7
|
+
}, r = (e, t, r) => {
|
|
8
|
+
let i = t.dateField ?? "createdAt";
|
|
9
|
+
return e.filter((e) => {
|
|
10
|
+
let a = n(e, i, r);
|
|
11
|
+
return a !== null && a > t.ttlMs;
|
|
12
|
+
}).map((e) => String(e.id));
|
|
13
|
+
}, i = 1e3, a = async (n, a, o = Date.now(), s = i) => {
|
|
14
|
+
if (!Number.isSafeInteger(s) || s < 1) throw Error("retention batchSize must be a positive safe integer");
|
|
15
|
+
let c = [];
|
|
16
|
+
for (let i of a) {
|
|
17
|
+
let a = i.action ?? "delete";
|
|
18
|
+
a === "anonymize" && t(`retention policy '${i.table}'`, i.anonymizeFields);
|
|
19
|
+
let l = 0, u = 0, d, f = !1;
|
|
20
|
+
for (; !f;) {
|
|
21
|
+
let t = i.dateField ?? "createdAt", c = new Date(Math.ceil(o - i.ttlMs)), p = n.scan ? await n.scan(i.table, {
|
|
22
|
+
limit: s,
|
|
23
|
+
...d === void 0 ? {} : { after: d },
|
|
24
|
+
projection: ["id", t],
|
|
25
|
+
...Number.isNaN(c.getTime()) ? {} : { expired: {
|
|
26
|
+
column: t,
|
|
27
|
+
before: c
|
|
28
|
+
} }
|
|
29
|
+
}) : await n.page(i.table, s, u), m = r(p, i, o);
|
|
30
|
+
if (a === "delete") l += await e(n, i.table, m), u += p.length - m.length;
|
|
31
|
+
else {
|
|
32
|
+
let t = {};
|
|
33
|
+
for (let e of i.anonymizeFields ?? []) t[e] = null;
|
|
34
|
+
l += await e(n, i.table, m, t), u += p.length;
|
|
35
|
+
}
|
|
36
|
+
if (p.length && n.scan) {
|
|
37
|
+
let e = p[p.length - 1].id;
|
|
38
|
+
if (e === void 0 || e === d) throw Error("retention scan must advance a stable id cursor");
|
|
39
|
+
d = e;
|
|
40
|
+
}
|
|
41
|
+
f = p.length < s;
|
|
42
|
+
}
|
|
43
|
+
c.push({
|
|
44
|
+
table: i.table,
|
|
45
|
+
action: a,
|
|
46
|
+
affected: l
|
|
47
|
+
});
|
|
48
|
+
}
|
|
49
|
+
return c;
|
|
50
|
+
};
|
|
51
|
+
//#endregion
|
|
52
|
+
export { i as RETENTION_BATCH_SIZE, a as runRetention, r as selectExpired };
|
package/dist/store.js
ADDED
|
@@ -0,0 +1,120 @@
|
|
|
1
|
+
import { and as e, getTable as t, gt as n, inSet as r, lt as i } from "@voltro/database";
|
|
2
|
+
//#region src/store.ts
|
|
3
|
+
var a = (a) => {
|
|
4
|
+
let o = a, s = (e, t) => ({
|
|
5
|
+
table: void 0,
|
|
6
|
+
predicate: void 0,
|
|
7
|
+
order: [{
|
|
8
|
+
column: "id",
|
|
9
|
+
direction: "asc"
|
|
10
|
+
}],
|
|
11
|
+
take: e,
|
|
12
|
+
skip: t,
|
|
13
|
+
projection: void 0
|
|
14
|
+
});
|
|
15
|
+
return {
|
|
16
|
+
all: (e) => o.query({
|
|
17
|
+
...s(void 0, void 0),
|
|
18
|
+
table: e
|
|
19
|
+
}),
|
|
20
|
+
where: async (e, t, n) => n.length === 0 ? [] : o.query({
|
|
21
|
+
...s(void 0, void 0),
|
|
22
|
+
table: e,
|
|
23
|
+
predicate: {
|
|
24
|
+
column: t,
|
|
25
|
+
op: "in",
|
|
26
|
+
value: [...n]
|
|
27
|
+
}
|
|
28
|
+
}),
|
|
29
|
+
page: (e, t, n) => o.query({
|
|
30
|
+
...s(t, n),
|
|
31
|
+
table: e
|
|
32
|
+
}),
|
|
33
|
+
scan: (a, c) => {
|
|
34
|
+
if (c.column !== void 0 && c.values?.length === 0) return Promise.resolve([]);
|
|
35
|
+
let l = [];
|
|
36
|
+
if (c.after !== void 0 && l.push(n("id", c.after)), c.column !== void 0) {
|
|
37
|
+
if (c.values === void 0) throw Error("governance scan needs values for its subject column");
|
|
38
|
+
l.push(r(c.column, c.values));
|
|
39
|
+
}
|
|
40
|
+
return c.expired && t(a)?.fields[c.expired.column]?.type === "timestamp" && l.push(i(c.expired.column, c.expired.before)), o.query({
|
|
41
|
+
...s(c.limit, void 0),
|
|
42
|
+
table: a,
|
|
43
|
+
predicate: l.length ? e(...l) : void 0,
|
|
44
|
+
projection: c.projection
|
|
45
|
+
});
|
|
46
|
+
},
|
|
47
|
+
...o.deleteMany && o.updateMany ? { writeMany: async (e, t, n) => {
|
|
48
|
+
if (t.length === 0) return 0;
|
|
49
|
+
let i = r("id", t);
|
|
50
|
+
return n === void 0 ? o.deleteMany(e, { where: i }) : o.updateMany(e, n, { where: i });
|
|
51
|
+
} } : {},
|
|
52
|
+
delete: async (e, t) => {
|
|
53
|
+
await (o.hardDelete ?? o.delete).call(o, e, t);
|
|
54
|
+
},
|
|
55
|
+
update: async (e, t, n) => {
|
|
56
|
+
await o.update(e, t, n);
|
|
57
|
+
}
|
|
58
|
+
};
|
|
59
|
+
}, o = (e = {}) => {
|
|
60
|
+
let t = new Map(Object.entries(e).map(([e, t]) => [e, t.map((e) => ({ ...e }))])), n = (e) => {
|
|
61
|
+
let n = t.get(e);
|
|
62
|
+
return n || (n = [], t.set(e, n)), n;
|
|
63
|
+
};
|
|
64
|
+
return {
|
|
65
|
+
all: async (e) => [...n(e)],
|
|
66
|
+
where: async (e, t, r) => {
|
|
67
|
+
if (r.length === 0) return [];
|
|
68
|
+
let i = new Set(r.map((e) => String(e)));
|
|
69
|
+
return n(e).filter((e) => i.has(String(e[t]))).map((e) => ({ ...e }));
|
|
70
|
+
},
|
|
71
|
+
page: async (e, t, r) => n(e).slice(r, r + t).map((e) => ({ ...e })),
|
|
72
|
+
scan: async (e, t) => {
|
|
73
|
+
let r = t.values === void 0 ? void 0 : new Set(t.values.map(String));
|
|
74
|
+
return n(e).filter((e) => (t.after === void 0 || String(e.id) > String(t.after)) && (t.column === void 0 || r?.has(String(e[t.column])))).sort((e, t) => String(e.id) < String(t.id) ? -1 : +(String(e.id) > String(t.id))).slice(0, t.limit).map((e) => t.projection ? Object.fromEntries(t.projection.map((t) => [t, e[t]])) : { ...e });
|
|
75
|
+
},
|
|
76
|
+
writeMany: async (e, r, i) => {
|
|
77
|
+
let a = new Set(r), o = n(e), s = 0;
|
|
78
|
+
if (i === void 0) {
|
|
79
|
+
let n = o.filter((e) => !a.has(String(e.id)) || (s++, !1));
|
|
80
|
+
t.set(e, n);
|
|
81
|
+
} else for (let e = 0; e < o.length; e++) a.has(String(o[e].id)) && (o[e] = {
|
|
82
|
+
...o[e],
|
|
83
|
+
...i
|
|
84
|
+
}, s++);
|
|
85
|
+
return s;
|
|
86
|
+
},
|
|
87
|
+
delete: async (e, t) => {
|
|
88
|
+
let r = n(e), i = r.findIndex((e) => String(e.id) === t);
|
|
89
|
+
i !== -1 && r.splice(i, 1);
|
|
90
|
+
},
|
|
91
|
+
update: async (e, t, r) => {
|
|
92
|
+
let i = n(e), a = i.findIndex((e) => String(e.id) === t);
|
|
93
|
+
a !== -1 && (i[a] = {
|
|
94
|
+
...i[a],
|
|
95
|
+
...r
|
|
96
|
+
});
|
|
97
|
+
},
|
|
98
|
+
dump: () => Object.fromEntries([...t.entries()].map(([e, t]) => [e, t.map((e) => ({ ...e }))]))
|
|
99
|
+
};
|
|
100
|
+
}, s = async (e, t, n, r) => {
|
|
101
|
+
let i = 0;
|
|
102
|
+
if (e.writeMany) {
|
|
103
|
+
for (let a = 0; a < n.length; a += 500) i += await e.writeMany(t, n.slice(a, a + 500), r);
|
|
104
|
+
return i;
|
|
105
|
+
}
|
|
106
|
+
let a = 0, o = !1, s = await Promise.allSettled(Array.from({ length: Math.min(8, n.length) }, async () => {
|
|
107
|
+
for (; !o && a < n.length;) {
|
|
108
|
+
let s = n[a++];
|
|
109
|
+
try {
|
|
110
|
+
r === void 0 ? await e.delete(t, s) : await e.update(t, s, r), i++;
|
|
111
|
+
} catch (e) {
|
|
112
|
+
throw o = !0, e;
|
|
113
|
+
}
|
|
114
|
+
}
|
|
115
|
+
}));
|
|
116
|
+
for (let e of s) if (e.status === "rejected") throw e.reason;
|
|
117
|
+
return i;
|
|
118
|
+
};
|
|
119
|
+
//#endregion
|
|
120
|
+
export { a as dataStoreGovStore, o as memoryGovStore, s as writeGovernanceRows };
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@voltro/plugin-governance",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.87.0",
|
|
4
4
|
"description": "Data governance — retention policies (TTL sweep), GDPR subject export + erasure (right-to-be-forgotten), and consent recording. Builds on audit + soft-delete.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"voltro",
|
|
@@ -38,9 +38,9 @@
|
|
|
38
38
|
"node": ">=24.0.0"
|
|
39
39
|
},
|
|
40
40
|
"dependencies": {
|
|
41
|
-
"@voltro/database": "0.
|
|
42
|
-
"@voltro/protocol": "0.
|
|
43
|
-
"@voltro/runtime": "0.
|
|
41
|
+
"@voltro/database": "0.87.0",
|
|
42
|
+
"@voltro/protocol": "0.87.0",
|
|
43
|
+
"@voltro/runtime": "0.87.0"
|
|
44
44
|
},
|
|
45
45
|
"peerDependencies": {
|
|
46
46
|
"effect": "4.0.1"
|