creator-hub/internal/account/deletion.go

package account

import (
	"context"
	"errors"
)

// CheckAccountDeletion verifies that deleting an account will not interrupt an active run.
func (s *Store) CheckAccountDeletion(ctx context.Context, accountID string) error {
	if !idPattern.MatchString(accountID) {
		return ErrInvalid
	}
	var exists bool
	if err := s.db.QueryRowContext(ctx, `SELECT EXISTS (SELECT 1 FROM social_account WHERE id = $1)`, accountID).Scan(&exists); err != nil {
		return errors.New("check account deletion state")
	}
	if !exists {
		return ErrNotFound
	}
	var active bool
	if err := s.db.QueryRowContext(ctx, `
		SELECT EXISTS (
			SELECT 1 FROM browser_env
			WHERE account_id = $1 AND runtime_id IS NOT NULL
		)`, accountID).Scan(&active); err != nil {
		return errors.New("check account deletion state")
	}
	if active {
		return ErrConflict
	}
	return nil
}

// DeleteAccountData removes Phase A data while keeping the account row for the final deletion step.
func (s *Store) DeleteAccountData(ctx context.Context, accountID string) error {
	if !idPattern.MatchString(accountID) {
		return ErrInvalid
	}
	tx, err := s.db.BeginTx(ctx, nil)
	if err != nil {
		return errors.New("begin account deletion transaction")
	}
	defer tx.Rollback()
	var lockedID string
	if err := tx.QueryRowContext(ctx, `SELECT id FROM social_account WHERE id = $1 FOR UPDATE`, accountID).Scan(&lockedID); err != nil {
		return rowError(err)
	}
	var active bool
	if err := tx.QueryRowContext(ctx, `
		SELECT EXISTS (
			SELECT 1 FROM browser_env
			WHERE account_id = $1 AND runtime_id IS NOT NULL
		)`, accountID).Scan(&active); err != nil {
		return errors.New("check account deletion state")
	}
	if active {
		return ErrConflict
	}
	if _, err := tx.ExecContext(ctx, `SELECT set_config('creatorhub.account_deletion', 'on', true)`); err != nil {
		return errors.New("enable account deletion audit cleanup")
	}
	if _, err := tx.ExecContext(ctx, `
		DELETE FROM audit_event
		WHERE account_id = $1
		   OR browser_env_alias IN (
				SELECT alias FROM browser_env WHERE account_id = $1
			  )`, accountID); err != nil {
		return errors.New("delete account audit data")
	}
	if _, err := tx.ExecContext(ctx, `
		UPDATE browser_env SET runtime_id = NULL, runtime_lease_until = NULL, runtime_network_id = NULL, runtime_node_id = NULL
		WHERE account_id = $1`, accountID); err != nil {
		return errors.New("clear account runtime state")
	}
	return commit(tx)
}

// DeleteAccount removes the account row and its external cookie credential.
// Call DeleteAccountData and delete account-owned creator/environment data first.
func (s *Store) DeleteAccount(ctx context.Context, accountID string, credentials CredentialBridge) error {
	if !idPattern.MatchString(accountID) || credentials == nil {
		return ErrInvalid
	}
	tx, err := s.db.BeginTx(ctx, nil)
	if err != nil {
		return errors.New("begin account record deletion")
	}
	defer tx.Rollback()
	reference := CredentialReference{ID: accountID, Provider: ""}
	var key string
	if err := tx.QueryRowContext(ctx, `
		SELECT credential_provider, credential_key
		FROM social_account
		WHERE id = $1
		FOR UPDATE`, accountID).Scan(&reference.Provider, &key); err != nil {
		return rowError(err)
	}
	if _, err := tx.ExecContext(ctx, `DELETE FROM social_account WHERE id = $1`, accountID); err != nil {
		return publicDatabaseError(err)
	}
	if err := tx.Commit(); err != nil {
		return errors.New("commit account record deletion")
	}
	if err := credentials.Delete(context.WithoutCancel(ctx), reference, key); err != nil {
		return errors.Join(errors.New("delete account credential"), err)
	}
	return nil
}