feat: auth

common/src/common/config.py

@@ -79,6 +79,22 @@ class Settings(BaseSettings):
         default="run-logs",
         description="Bucket for schedule run logs.",
     )
+    rustfs_trash_bucket: str = Field(
+        default="trash",
+        description=(
+            "Bucket for soft-deleted objects. The source bucket key is "
+            "preserved as a prefix so a restore is a same-key move. "
+            "Trash is reaped on a schedule out of band."
+        ),
+    )
+    rustfs_trash_retention_days: int = Field(
+        default=30,
+        description=(
+            "How long a trashed object is retained before reaping. "
+            "Tracked in the database (StorageObjects.deleted_at) so the "
+            "reaper can run as a single SQL sweep."
+        ),
+    )
 
     # ── local FS roots ────────────────────────────────────────────
     workspace_root: str = Field(