s3 support

internal/app/maintenance/media_retention.go

@@ -0,0 +1,27 @@
+package maintenance
+
+import (
+	"context"
+	"time"
+)
+
+// OrphanedMediaRetentionStore deletes documents/photos that have been
+// orphaned (no live message/profile-photo/sticker-set reference remains,
+// tracked via media_references + orphaned_at) for at least the configured
+// age, along with their underlying blob once no other file_blobs row on
+// its backend still needs it. Never touches media that still has a live
+// reference, regardless of age.
+type OrphanedMediaRetentionStore interface {
+	DeleteOrphanedOlderThan(ctx context.Context, cutoff time.Time, limit int) (int, error)
+}
+
+// WithOrphanedMediaRetention enables the storage retention sweep. maxAge is
+// how long a document/photo must have been orphaned before it's actually
+// deleted (not how old the media itself is) -- <=0 leaves the sweep
+// disabled even if a store is provided, matching
+// TELESRV_STORAGE_RETENTION_ENABLE=false being the safe default.
+func (w *RetentionWorker) WithOrphanedMediaRetention(store OrphanedMediaRetentionStore, maxAge time.Duration) *RetentionWorker {
+	w.orphanedMedia = store
+	w.orphanedMediaMaxAge = maxAge
+	return w
+}

internal/app/maintenance/retention.go

@@ -118,6 +118,7 @@ type RetentionWorker struct {
 	orphanAuthKeys              OrphanAuthKeyRetentionStore
 	activeAuthKeys              ActiveRawAuthKeyProvider
 	activeAuthKeyHeartbeat      ActiveAuthKeyHeartbeatStore
+	orphanedMedia               OrphanedMediaRetentionStore
 	logger                      *zap.Logger
 	retention                   time.Duration
 	botAPIRetention             time.Duration
@@ -126,6 +127,7 @@ type RetentionWorker struct {
 	authDeliveryReportRetention time.Duration
 	outboxPoisonRetention       time.Duration
 	outboxPoisonInterval        time.Duration
+	orphanedMediaMaxAge         time.Duration
 	interval                    time.Duration
 	batch                       int
 }
@@ -412,6 +414,17 @@ func (w *RetentionWorker) runRetentionOnce(ctx context.Context) {
 			w.logger.Info("expired channel_update_events contiguous-prefix cleanup complete", zap.Int("deleted", channelDeleted))
 		}
 	}
+	if w.orphanedMedia != nil && w.orphanedMediaMaxAge > 0 {
+		// Only ever touches documents/photos already marked orphaned (no live
+		// message/profile-photo/sticker-set reference remains) -- media still
+		// visible in a conversation is never a candidate, regardless of age.
+		mediaDeleted, err := w.orphanedMedia.DeleteOrphanedOlderThan(ctx, time.Now().Add(-w.orphanedMediaMaxAge), w.batch)
+		if err != nil {
+			w.logger.Warn("orphaned media storage retention sweep failed", zap.Error(err))
+		} else if mediaDeleted > 0 {
+			w.logger.Info("orphaned media storage retention sweep complete", zap.Int("deleted", mediaDeleted))
+		}
+	}
 }
 
 func (w *RetentionWorker) orphanHeartbeatInterval() time.Duration {