feat: add brand asset cleanup worker and related functionality

- Implemented a new BrandAssetCleanupWorker to handle the cleanup of brand-related assets after a brand is deleted.
- Added SQL queries for cleaning up articles, keywords, questions, competitors, and monitoring data associated with a brand.
- Introduced a new API endpoint to delete publish records.
- Updated the router to include the new delete publish record endpoint.
- Added tests for the BrandAssetCleanupWorker to ensure proper functionality.
- Created migration scripts to support soft deletion of publish records and to add the brand asset cleanup scheduler job.

server/internal/tenant/app/media_service.go

@@ -4,9 +4,11 @@ import (
 	"context"
 	"crypto/rand"
 	"encoding/hex"
+	"errors"
 	"strings"
 	"time"
 
+	"github.com/jackc/pgx/v5"
 	"github.com/jackc/pgx/v5/pgxpool"
 
 	"github.com/geo-platform/tenant-api/internal/shared/auth"
@@ -38,6 +40,9 @@ type PublishRecordResponse struct {
 	ID                 int64      `json:"id"`
 	PublishBatchID     int64      `json:"publish_batch_id"`
 	ArticleID          int64      `json:"article_id"`
+	BrandID            int64      `json:"brand_id"`
+	BrandName          *string    `json:"brand_name"`
+	BrandDeleted       bool       `json:"brand_deleted"`
 	ArticleTitle       *string    `json:"article_title,omitempty"`
 	PlatformAccountID  *int64     `json:"platform_account_id"`
 	DesktopAccountID   *string    `json:"desktop_account_id"`
@@ -72,6 +77,10 @@ type PublishRecordListResponse struct {
 	HistoryTotal int                     `json:"history_total"`
 }
 
+type DeletePublishRecordResponse struct {
+	Deleted bool `json:"deleted"`
+}
+
 func (s *MediaService) ListPlatforms(ctx context.Context) ([]MediaPlatformResponse, error) {
 	rows, err := s.pool.Query(ctx, `
 		SELECT id, platform_id, name, category, short_name, accent_color, login_url, logo_url, status, sort_order
@@ -108,9 +117,8 @@ func (s *MediaService) ListPlatforms(ctx context.Context) ([]MediaPlatformRespon
 
 func (s *MediaService) ListPublishRecords(ctx context.Context, req ListPublishRecordsRequest) (*PublishRecordListResponse, error) {
 	actor := auth.MustActor(ctx)
-	brandID, err := requireCurrentBrandID(ctx)
-	if err != nil {
-		return nil, err
+	if actor.TenantID == 0 || actor.UserID == 0 {
+		return nil, response.ErrUnauthorized(40132, "workspace_scope_missing", "workspace context is required")
 	}
 
 	page := req.Page
@@ -125,11 +133,11 @@ func (s *MediaService) ListPublishRecords(ctx context.Context, req ListPublishRe
 	pendingStatuses := []string{"queued", "publishing"}
 	historyStatuses := []string{"success", "failed", "cancelled", "canceled"}
 
-	pendingItems, err := s.listPublishRecordsByStatuses(ctx, actor.TenantID, brandID, pendingStatuses, title, 0, 0, "pr.created_at ASC, pr.id ASC")
+	pendingItems, err := s.listPublishRecordsByStatuses(ctx, actor.TenantID, actor.UserID, pendingStatuses, title, 0, 0, "pr.created_at ASC, pr.id ASC")
 	if err != nil {
 		return nil, err
 	}
-	historyTotal, err := s.countPublishRecordsByStatuses(ctx, actor.TenantID, brandID, historyStatuses, title)
+	historyTotal, err := s.countPublishRecordsByStatuses(ctx, actor.TenantID, actor.UserID, historyStatuses, title)
 	if err != nil {
 		return nil, err
 	}
@@ -152,7 +160,7 @@ func (s *MediaService) ListPublishRecords(ctx context.Context, req ListPublishRe
 		historyOffset = 0
 	}
 	if remaining > 0 && historyOffset < historyTotal {
-		historyItems, listErr := s.listPublishRecordsByStatuses(ctx, actor.TenantID, brandID, historyStatuses, title, remaining, historyOffset, "pr.updated_at DESC, pr.id DESC")
+		historyItems, listErr := s.listPublishRecordsByStatuses(ctx, actor.TenantID, actor.UserID, historyStatuses, title, remaining, historyOffset, "pr.updated_at DESC, pr.id DESC")
 		if listErr != nil {
 			return nil, listErr
 		}
@@ -172,7 +180,7 @@ func (s *MediaService) ListPublishRecords(ctx context.Context, req ListPublishRe
 func (s *MediaService) listPublishRecordsByStatuses(
 	ctx context.Context,
 	tenantID int64,
-	brandID int64,
+	userID int64,
 	statuses []string,
 	title string,
 	limit int,
@@ -181,6 +189,7 @@ func (s *MediaService) listPublishRecordsByStatuses(
 ) ([]PublishRecordResponse, error) {
 	query := `
 		SELECT pr.id, pr.publish_batch_id, pr.article_id,
+		       a.brand_id, b.name AS brand_name, (b.id IS NULL OR b.deleted_at IS NOT NULL OR b.status IN ('deleting', 'deleted')) AS brand_deleted,
 		       COALESCE(av.title, NULLIF(a.wizard_state_json ->> 'title', '')) AS article_title,
 		       pr.platform_account_id, pa.desktop_id::text, dt.desktop_id::text,
 		       COALESCE(pr.target_type, 'platform_account'), pr.target_connection_id, pr.platform_id,
@@ -194,6 +203,7 @@ func (s *MediaService) listPublishRecordsByStatuses(
 		       pr.external_manage_url, pr.published_at, pr.error_message, pr.created_at, pr.updated_at
 		FROM publish_records pr
 		JOIN articles a ON a.id = pr.article_id AND a.tenant_id = pr.tenant_id
+		LEFT JOIN brands b ON b.id = a.brand_id AND b.tenant_id = a.tenant_id
 		LEFT JOIN article_versions av ON av.id = a.current_version_id AND av.article_id = a.id
 		LEFT JOIN media_platforms mp ON mp.platform_id = pr.platform_id
 		LEFT JOIN platform_accounts pa ON pa.id = pr.platform_account_id
@@ -210,15 +220,21 @@ func (s *MediaService) listPublishRecordsByStatuses(
 			LIMIT 1
 		) dt ON TRUE
 		WHERE pr.tenant_id = $1
-		  AND a.brand_id = $2
-		  AND a.deleted_at IS NULL
+		  AND EXISTS (
+		    SELECT 1
+		    FROM publish_batches pb
+		    WHERE pb.id = pr.publish_batch_id
+		      AND pb.tenant_id = pr.tenant_id
+		      AND pb.initiator_user_id = $2
+		  )
+		  AND pr.deleted_at IS NULL
 		  AND pr.status = ANY($3)
 		  AND (
 		    $4 = ''
 		    OR COALESCE(av.title, NULLIF(a.wizard_state_json ->> 'title', ''), '') ILIKE '%' || $4 || '%'
 		  )
 	`
-	args := []any{tenantID, brandID, statuses, title}
+	args := []any{tenantID, userID, statuses, title}
 
 	if strings.TrimSpace(orderBy) != "" {
 		query += "\nORDER BY " + orderBy
@@ -243,6 +259,9 @@ func (s *MediaService) listPublishRecordsByStatuses(
 			&item.ID,
 			&item.PublishBatchID,
 			&item.ArticleID,
+			&item.BrandID,
+			&item.BrandName,
+			&item.BrandDeleted,
 			&item.ArticleTitle,
 			&item.PlatformAccountID,
 			&desktopAccountID,
@@ -281,7 +300,7 @@ func (s *MediaService) listPublishRecordsByStatuses(
 func (s *MediaService) countPublishRecordsByStatuses(
 	ctx context.Context,
 	tenantID int64,
-	brandID int64,
+	userID int64,
 	statuses []string,
 	title string,
 ) (int, error) {
@@ -292,14 +311,20 @@ func (s *MediaService) countPublishRecordsByStatuses(
 		JOIN articles a ON a.id = pr.article_id AND a.tenant_id = pr.tenant_id
 		LEFT JOIN article_versions av ON av.id = a.current_version_id AND av.article_id = a.id
 		WHERE pr.tenant_id = $1
-		  AND a.brand_id = $2
-		  AND a.deleted_at IS NULL
+		  AND EXISTS (
+		    SELECT 1
+		    FROM publish_batches pb
+		    WHERE pb.id = pr.publish_batch_id
+		      AND pb.tenant_id = pr.tenant_id
+		      AND pb.initiator_user_id = $2
+		  )
+		  AND pr.deleted_at IS NULL
 		  AND pr.status = ANY($3)
 		  AND (
 		    $4 = ''
 		    OR COALESCE(av.title, NULLIF(a.wizard_state_json ->> 'title', ''), '') ILIKE '%' || $4 || '%'
 		  )
-	`, tenantID, brandID, statuses, title).Scan(&count)
+	`, tenantID, userID, statuses, title).Scan(&count)
 	if err != nil {
 		return 0, response.ErrInternal(50043, "publish_record_query_failed", "failed to list publish records")
 	}
@@ -317,7 +342,9 @@ func (s *MediaService) ListArticlePublishRecords(ctx context.Context, articleID
 
 func (s *MediaService) listArticlePublishRecords(ctx context.Context, tenantID, brandID, articleID int64) ([]PublishRecordResponse, error) {
 	rows, err := s.pool.Query(ctx, `
-		SELECT pr.id, pr.publish_batch_id, pr.article_id, pr.platform_account_id, pa.desktop_id::text,
+		SELECT pr.id, pr.publish_batch_id, pr.article_id,
+		       a.brand_id, b.name AS brand_name, (b.id IS NULL OR b.deleted_at IS NOT NULL OR b.status IN ('deleting', 'deleted')) AS brand_deleted,
+		       pr.platform_account_id, pa.desktop_id::text,
 		       COALESCE(pr.target_type, 'platform_account'), pr.target_connection_id, pr.platform_id,
 		       COALESCE(mp.name, esc.site_name, esc.name, pr.platform_id) AS platform_name,
 		       CASE
@@ -334,7 +361,8 @@ func (s *MediaService) listArticlePublishRecords(ctx context.Context, tenantID,
 		  ON esc.id = pr.target_connection_id
 		 AND esc.tenant_id = pr.tenant_id
 		JOIN articles a ON a.id = pr.article_id AND a.tenant_id = pr.tenant_id
-		WHERE pr.tenant_id = $1 AND pr.article_id = $2 AND a.brand_id = $3 AND a.deleted_at IS NULL
+		LEFT JOIN brands b ON b.id = a.brand_id AND b.tenant_id = a.tenant_id
+		WHERE pr.tenant_id = $1 AND pr.article_id = $2 AND a.brand_id = $3 AND a.deleted_at IS NULL AND pr.deleted_at IS NULL
 		ORDER BY pr.created_at DESC, pr.id DESC
 	`, tenantID, articleID, brandID)
 	if err != nil {
@@ -350,6 +378,9 @@ func (s *MediaService) listArticlePublishRecords(ctx context.Context, tenantID,
 			&item.ID,
 			&item.PublishBatchID,
 			&item.ArticleID,
+			&item.BrandID,
+			&item.BrandName,
+			&item.BrandDeleted,
 			&item.PlatformAccountID,
 			&desktopAccountID,
 			&item.TargetType,
@@ -377,6 +408,112 @@ func (s *MediaService) listArticlePublishRecords(ctx context.Context, tenantID,
 	return items, nil
 }
 
+func (s *MediaService) DeletePublishRecord(ctx context.Context, recordID int64) (*DeletePublishRecordResponse, error) {
+	if recordID <= 0 {
+		return nil, response.ErrBadRequest(40001, "invalid_publish_record_id", "publish record id must be a positive number")
+	}
+	actor := auth.MustActor(ctx)
+	if actor.TenantID == 0 || actor.UserID == 0 {
+		return nil, response.ErrUnauthorized(40132, "workspace_scope_missing", "workspace context is required")
+	}
+
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return nil, response.ErrInternal(50044, "publish_record_delete_begin_failed", "failed to delete publish record")
+	}
+	defer tx.Rollback(ctx)
+
+	var publishBatchID int64
+	var articleID int64
+	var cancelErrorJSON []byte
+	cancelErrorJSON, err = marshalOptionalJSON(map[string]any{
+		"reason": "publish_record_deleted",
+		"source": "tenant_web",
+	})
+	if err != nil {
+		return nil, response.ErrInternal(50044, "publish_record_delete_payload_failed", "failed to delete publish record")
+	}
+	err = tx.QueryRow(ctx, `
+		SELECT pr.publish_batch_id, pr.article_id
+		FROM publish_records pr
+		JOIN articles a
+		  ON a.id = pr.article_id
+		 AND a.tenant_id = pr.tenant_id
+		JOIN publish_batches pb
+		  ON pb.id = pr.publish_batch_id
+		 AND pb.tenant_id = pr.tenant_id
+		WHERE pr.id = $1
+		  AND pr.tenant_id = $2
+		  AND pb.initiator_user_id = $3
+		  AND pr.deleted_at IS NULL
+		FOR UPDATE OF pr
+	`, recordID, actor.TenantID, actor.UserID).Scan(&publishBatchID, &articleID)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return nil, response.ErrNotFound(40435, "publish_record_not_found", "publish record not found")
+		}
+		return nil, response.ErrInternal(50044, "publish_record_delete_lookup_failed", "failed to delete publish record")
+	}
+
+	if tag, err := tx.Exec(ctx, `
+		UPDATE publish_records
+		SET deleted_at = NOW(),
+		    updated_at = NOW()
+		WHERE id = $1
+		  AND tenant_id = $2
+		  AND deleted_at IS NULL
+	`, recordID, actor.TenantID); err != nil {
+		return nil, response.ErrInternal(50044, "publish_record_delete_failed", "failed to delete publish record")
+	} else if tag.RowsAffected() == 0 {
+		return nil, response.ErrNotFound(40435, "publish_record_not_found", "publish record not found")
+	}
+
+	if _, err := tx.Exec(ctx, `
+		UPDATE desktop_tasks
+		SET status = 'aborted',
+		    error = $3,
+		    active_attempt_id = NULL,
+		    lease_token_hash = NULL,
+		    lease_expires_at = NULL,
+		    updated_at = NOW()
+		WHERE tenant_id = $1
+		  AND kind = 'publish'
+		  AND status = 'queued'
+		  AND payload->>'publish_record_id' = $2
+	`, actor.TenantID, recordID, cancelErrorJSON); err != nil {
+		return nil, response.ErrInternal(50044, "publish_record_delete_cancel_task_failed", "failed to cancel queued publish task before deleting record")
+	}
+
+	batchStatus, err := recalculatePublishBatchStatus(ctx, tx, publishBatchID)
+	if err != nil {
+		return nil, err
+	}
+	if _, err := tx.Exec(ctx, `
+		UPDATE publish_batches
+		SET status = $1, updated_at = NOW()
+		WHERE id = $2 AND tenant_id = $3
+	`, batchStatus, publishBatchID, actor.TenantID); err != nil {
+		return nil, response.ErrInternal(50054, "publish_batch_update_failed", "failed to update publish batch")
+	}
+
+	articleStatus, err := recalculateArticlePublishStatus(ctx, tx, actor.TenantID, articleID)
+	if err != nil {
+		return nil, err
+	}
+	if _, err := tx.Exec(ctx, `
+		UPDATE articles
+		SET publish_status = $1, updated_at = NOW()
+		WHERE id = $2 AND tenant_id = $3 AND deleted_at IS NULL
+	`, articleStatus, articleID, actor.TenantID); err != nil {
+		return nil, response.ErrInternal(50055, "article_publish_update_failed", "failed to update article publish status")
+	}
+
+	if err := tx.Commit(ctx); err != nil {
+		return nil, response.ErrInternal(50044, "publish_record_delete_commit_failed", "failed to delete publish record")
+	}
+	return &DeletePublishRecordResponse{Deleted: true}, nil
+}
+
 func publishBatchRequiresCover(accounts []platformAccountSeed) bool {
 	for _, account := range accounts {
 		if publishPlatformRequiresCover(account.PlatformID) {