feat: complete TASK-WP1-06 audit immutability

2026-07-28 19:29:24 +08:00
parent 2358f97e5c
commit 59e566885b
9 changed files with 487 additions and 125 deletions
@@ -9,6 +9,7 @@ export class RetentionCleanup {
  private readonly clock: () => number;
  private readonly database: BetterSqlite3.Database;
  private retentionPurgeActive = false;
+  private retentionPurgeNow = 0;

  constructor(input: { clock?: () => number; databasePath: string }) {
    this.clock = input.clock ?? Date.now;
@@ -18,6 +19,7 @@ export class RetentionCleanup {
    this.database.pragma("busy_timeout = 5000");
    this.database.function("dada_allow_privacy_purge", { deterministic: false }, () => 0);
    this.database.function("dada_allow_retention_purge", { deterministic: false }, () => this.retentionPurgeActive ? 1 : 0);
+    this.database.function("dada_retention_purge_now", { deterministic: false }, () => this.retentionPurgeNow);
  }

  purgeExpired() {
@@ -25,16 +27,21 @@ export class RetentionCleanup {
    this.database.exec("BEGIN IMMEDIATE");
    try {
      this.retentionPurgeActive = true;
+      this.retentionPurgeNow = now;
+      const adminOperations = this.database.prepare("DELETE FROM admin_operation_logs WHERE expires_at <= ?").run(now);
      const privateAccess = this.database.prepare("DELETE FROM private_content_access_logs WHERE expires_at <= ?").run(now);
      const anonymous = this.database.prepare("DELETE FROM anonymous_retained_events WHERE expires_at <= ?").run(now);
      this.retentionPurgeActive = false;
+      this.retentionPurgeNow = 0;
      this.database.exec("COMMIT");
      return {
+        admin_operation_logs: adminOperations.changes,
        anonymous_events: anonymous.changes,
        private_access_logs: privateAccess.changes,
      };
    } catch (error) {
      this.retentionPurgeActive = false;
+      this.retentionPurgeNow = 0;
      if (this.database.inTransaction) this.database.exec("ROLLBACK");
      throw error;
    }