Function deleteCredential

apps/sim/lib/credentials/deletion.ts:30–72

(params: DeleteCredentialParams)

 * records an audit entry. Idempotent when the row no longer exists.
 */
export async function deleteCredential(params: DeleteCredentialParams): Promise<void> {
  const { credentialId, actorId, actorName, actorEmail, reason, request } = params

  const [row] = await db
    .select({
      id: schema.credential.id,
      workspaceId: schema.credential.workspaceId,
      type: schema.credential.type,
      displayName: schema.credential.displayName,
      providerId: schema.credential.providerId,
      accountId: schema.credential.accountId,
    })
    .from(schema.credential)
    .where(eq(schema.credential.id, credentialId))
    .limit(1)

  if (!row) return

  await clearCredentialRefs(credentialId, row.workspaceId)

  await db.delete(schema.credential).where(eq(schema.credential.id, credentialId))

  recordAudit({
    workspaceId: row.workspaceId,
    actorId,
    actorName: actorName ?? undefined,
    actorEmail: actorEmail ?? undefined,
    action: AuditAction.CREDENTIAL_DELETED,
    resourceType: AuditResourceType.CREDENTIAL,
    resourceId: credentialId,
    resourceName: row.displayName,
    description: `Deleted ${row.type} credential "${row.displayName}" (${reason})`,
    metadata: {
      reason,
      credentialType: row.type,
      providerId: row.providerId,
      accountId: row.accountId,
    },
    request,
  })

  logger.info('Deleted credential', { credentialId, workspaceId: row.workspaceId, reason })
}

/**
 * Clears stored references to a credential across mutable workspace state