Summary by cubic

Switch org-wide deletes to batched queries for customers, features, and products to avoid locks/timeouts when nuking sandbox orgs. Customer deletes remain blocked in Live, and the delete for customers now also scopes by org_id and env.

• Refactors
  • Added CusService.safeDeleteByOrgId with 250-row batches, inArray, Live-mode guard, and org/env-scoped delete.
  • Added FeatureService.safeDeleteByOrgId and ProductService.safeDeleteByOrgId with 250-row batched deletes.
  • Updated handleNukeOrganisationConfiguration to use safe deletes for customers, features, and products in Sandbox.

^{Written for commit a214068. Summary will update on new commits.}

Confidence Score: 3/5

• Safe to merge with caution — the new method is correct, but the PR misses the pricing agent handler it claims to fix.
• The safeDeleteByOrgId implementation is logically sound and the live-mode guard is preserved. However, the PR title explicitly states the goal is to move the pricing agent to the safer delete, yet handleSyncPreviewPricing.ts still calls the old deleteByOrgId. This is an incomplete implementation of the stated intent, dropping the score to 3.
• server/src/internal/misc/pricingAgent/handlers/handleSyncPreviewPricing.ts — still uses the old deleteByOrgId and should be updated to safeDeleteByOrgId.

Important Files Changed

sequenceDiagram
    participant Handler as handleNukeOrganisationConfiguration
    participant CusService
    participant DB as Database (customers table)

    Handler->>CusService: safeDeleteByOrgId(db, orgId, env=Sandbox)
    CusService->>CusService: guard: throw if env == Live

    loop Until no rows remain
        CusService->>DB: SELECT internal_id WHERE org_id=orgId AND env=Sandbox LIMIT 250
        DB-->>CusService: batch of internal_ids (up to 250)
        alt batch is empty
            CusService-->>Handler: done (break)
        else batch has rows
            CusService->>DB: DELETE WHERE internal_id IN (batch)
            DB-->>CusService: rows deleted
        end
    end

_{Last reviewed commit: fc5ff77}