@consenti/api 0.1.0

package/dist/index.d.cts

@@ -0,0 +1,1085 @@
+import { EventEmitter } from 'node:events';
+import { IncomingMessage, ServerResponse } from 'node:http';
+
+type ConsentStatus = 'granted' | 'denied' | 'objected';
+type ConsentValue = Record<string, ConsentStatus>;
+interface Cookie {
+    id: string;
+    type?: 'consent' | 'legitimate_interest';
+    mandatory?: boolean;
+    listenGpc?: boolean;
+    expiry?: number;
+    tcfVendorId?: number;
+    tcfPurposes?: number[];
+    cpraCategory?: 'sale' | 'sharing' | 'sensitive';
+}
+type ButtonStyle = 'primary' | 'secondary' | 'text' | 'accent';
+type ButtonAction = 'submit' | 'manage' | 'close' | 'custom' | 'link';
+interface Button {
+    text: string;
+    style: ButtonStyle;
+    action: ButtonAction;
+    cookies?: string[] | '*' | '!';
+    url?: string;
+}
+interface MainBanner {
+    position: 'top' | 'bottom' | 'middle' | 'left-bottom' | 'right-bottom';
+    overlayOpacity?: number;
+    showClose?: boolean;
+    showLocaleSwitcher?: boolean;
+    heading?: string;
+    headingTag?: string;
+    htmlText: string;
+    buttons: Button[];
+}
+type GpcBanner = MainBanner;
+interface Category {
+    id: string;
+    heading: string;
+    headingTag?: string;
+    htmlText: string;
+    mandatory?: boolean;
+    type?: 'consent' | 'legitimate_interest';
+    legitimateInterest?: {
+        enabled?: boolean;
+        description?: string;
+    };
+    cookies: string[];
+}
+interface PreferenceModal {
+    position?: 'left' | 'right' | 'center';
+    overlayOpacity?: number;
+    showClose?: boolean;
+    showLocaleSwitcher?: boolean;
+    heading?: string;
+    headingTag?: string;
+    subheading?: string;
+    htmlText?: string;
+    buttons: Button[];
+    categories: Category[];
+    persistent?: boolean;
+}
+interface LocaleTranslations {
+    mainBanner: MainBanner;
+    gpcBanner?: GpcBanner;
+    preferenceModal: PreferenceModal;
+}
+interface ProfileTranslations {
+    [locale: string]: LocaleTranslations;
+}
+interface DpdpaConfig {
+    dataFiduciary: string;
+    grievanceEmail: string;
+    purposeDescription?: string;
+}
+interface LocaleTextContent {
+    mainBanner: {
+        heading: string;
+        htmlText: string;
+        buttonLabels: string[];
+    };
+    gpcBanner: {
+        heading: string;
+        htmlText: string;
+        buttonLabels: string[];
+    };
+    preferenceModal: {
+        heading: string;
+        subheading?: string;
+        htmlText?: string;
+        buttonLabels: string[];
+        categories: Array<{
+            id: string;
+            heading: string;
+            htmlText: string;
+        }>;
+    };
+}
+interface ProfileConfig {
+    cookies?: Cookie[];
+    defaultLocale: string;
+    translations?: ProfileTranslations;
+    gpcBanner?: boolean;
+    darkMode?: boolean;
+    allowedOrigins?: string[];
+    dpdpa?: DpdpaConfig;
+    regulation?: 'gdpr' | 'ccpa' | 'cpra' | 'dpdpa' | 'uk-gdpr' | 'lgpd' | 'pipeda' | 'popia' | 'pdpa-th' | 'appi' | 'kvkk';
+    regulations?: string[];
+    cookieTemplateId?: string;
+    uiTemplateId?: string;
+    localeContents?: Record<string, LocaleTextContent>;
+}
+interface UITemplateButton {
+    text: string;
+    type: string;
+    action: 'submit' | 'custom' | 'manage' | 'close' | 'link';
+    cookies?: string | string[];
+    url?: string;
+}
+interface UITemplateBanner {
+    position: string;
+    overlayOpacity: number;
+    showClose: boolean;
+    showLocaleSwitcher?: boolean;
+    headingTag: string;
+    buttons: UITemplateButton[];
+}
+interface UITemplateCategory {
+    id: string;
+    headingTag: string;
+    mandatory: boolean;
+    type: 'consent' | 'legitimate_interest';
+    liEnabled: boolean;
+    cookies: string[];
+}
+interface UITemplateModal extends UITemplateBanner {
+    hasSubheading: boolean;
+    persistent: boolean;
+    showLocaleSwitcher?: boolean;
+    categories: UITemplateCategory[];
+}
+interface ServerUITemplate {
+    id: string;
+    tenantId: string;
+    name: string;
+    mainBanner: UITemplateBanner;
+    gpcBanner: UITemplateBanner;
+    preferenceModal: UITemplateModal;
+    createdAt: string;
+    updatedAt: string;
+}
+interface ServerCookieTemplate {
+    id: string;
+    tenantId: string;
+    name: string;
+    cookies: Cookie[];
+    createdAt: string;
+    updatedAt: string;
+}
+interface CreateCookieTemplateInput {
+    tenantId: string;
+    name: string;
+    cookies: Cookie[];
+}
+interface UpdateCookieTemplateInput {
+    name?: string;
+    cookies?: Cookie[];
+}
+interface CreateUITemplateInput {
+    tenantId: string;
+    name: string;
+    mainBanner: UITemplateBanner;
+    gpcBanner: UITemplateBanner;
+    preferenceModal: UITemplateModal;
+}
+interface UpdateUITemplateInput {
+    name?: string;
+    mainBanner?: UITemplateBanner;
+    gpcBanner?: UITemplateBanner;
+    preferenceModal?: UITemplateModal;
+}
+interface PublicProfileResponse {
+    id: string;
+    version: number;
+    defaultLocale: string;
+    currentLocale: string;
+    locales: string[];
+    cookies: Cookie[];
+    mainBanner: MainBanner;
+    gpcBanner?: GpcBanner;
+    preferenceModal: PreferenceModal;
+}
+
+interface StorageConfig {
+    driver: 'sqlite' | 'better-sqlite3' | 'node-sqlite3-wasm' | 'node:sqlite' | 'mongodb' | 'mysql' | 'postgresql' | 'json';
+    path?: string;
+    uri?: string;
+    dbName?: string;
+    database?: string;
+    host?: string;
+    port?: number;
+    user?: string;
+    password?: string;
+}
+interface OidcConfig {
+    issuer: string;
+    clientId: string;
+    clientSecret: string;
+    redirectUri: string;
+    claimsMapping?: {
+        roles?: string;
+        email?: string;
+    };
+}
+interface SamlConfig {
+    issuer: string;
+    entryPoint: string;
+    cert: string;
+    callbackUrl: string;
+}
+interface AuthConfig {
+    mode: 'local' | 'jwt' | 'custom' | 'oidc' | 'saml';
+    jwtSecret?: string;
+    validateUser?: (req: unknown) => Promise<AdminUser | null>;
+    adminEmail?: string;
+    adminPassword?: string;
+    oidc?: OidcConfig;
+    saml?: SamlConfig;
+}
+interface RateLimitConfig {
+    enabled?: boolean;
+    windowMs?: number;
+    maxRequests?: number;
+}
+interface ComplianceConfig {
+    gdpr?: boolean;
+    ccpa?: boolean;
+    gpc?: boolean;
+}
+interface DashboardConfig {
+    enabled?: boolean;
+    path?: string;
+}
+interface MultiTenantConfig {
+    enabled: boolean;
+}
+interface AgeGateConfig {
+    enabled: boolean;
+    minimumAge: number;
+    requireParentalConsent?: boolean;
+}
+interface TcfConfig {
+    enabled: boolean;
+    cmpId: number;
+    cmpVersion: number;
+}
+interface DataRetentionConfig {
+    purgeAfterDays: number;
+}
+interface ConsentiServerConfig {
+    basePath?: string;
+    dashboard?: boolean | DashboardConfig;
+    storage?: StorageConfig;
+    auth?: AuthConfig;
+    rateLimit?: RateLimitConfig;
+    compliance?: ComplianceConfig;
+    multiTenant?: MultiTenantConfig;
+    plugins?: ConsentiServerPlugin[];
+    ageGate?: AgeGateConfig;
+    tcf?: TcfConfig;
+    dataRetention?: DataRetentionConfig;
+    maxBodySize?: number;
+    trustedProxies?: string[];
+}
+interface Tenant {
+    id: string;
+    name: string;
+    slug: string;
+    createdAt: string;
+    updatedAt: string;
+}
+interface ApiKey {
+    id: string;
+    tenantId: string;
+    keyHash: string;
+    name: string;
+    isActive: boolean;
+    createdAt: string;
+}
+interface Profile {
+    id: string;
+    tenantId: string;
+    name: string;
+    defaultLocale: string;
+    version: number;
+    profileJson: ProfileConfig;
+    createdAt: string;
+    updatedAt: string;
+}
+interface ConsentDbRecord {
+    id: string;
+    tenantId: string;
+    visitorId: string;
+    profileId: string;
+    profileVersion: number;
+    locale: string;
+    consentJson: ConsentValue;
+    gpcDetected: boolean;
+    source: 'banner' | 'api' | 'import';
+    ageVerified?: boolean;
+    parentalConsentToken?: string;
+    tcfString?: string;
+    createdAt: string;
+    updatedAt: string;
+}
+interface ConsentHistoryEntry {
+    id: string;
+    tenantId: string;
+    consentRecordId: string;
+    visitorId: string;
+    oldJson: ConsentValue | null;
+    newJson: ConsentValue;
+    action: 'created' | 'updated' | 'withdrawn';
+    createdAt: string;
+}
+interface Visitor {
+    id: string;
+    tenantId: string;
+    visitorId: string;
+    country?: string;
+    region?: string;
+    city?: string;
+    ipHash?: string;
+    userAgentHash?: string;
+    firstSeen: string;
+    lastSeen: string;
+}
+interface AdminUser {
+    id: string;
+    tenantId: string;
+    name: string;
+    email: string;
+    passwordHash: string;
+    isActive: boolean;
+    totpEnabled?: boolean;
+    totpSecret?: string;
+    createdAt: string;
+    updatedAt: string;
+}
+interface Role {
+    id: string;
+    tenantId: string;
+    name: string;
+    description?: string;
+}
+interface Permission {
+    id: string;
+    name: string;
+    description?: string;
+}
+interface AuditLog {
+    id: string;
+    tenantId: string;
+    userId?: string;
+    action: string;
+    resourceType: string;
+    resourceId?: string;
+    oldData?: unknown;
+    newData?: unknown;
+    createdAt: string;
+}
+interface CreateProfileInput {
+    tenantId: string;
+    name: string;
+    defaultLocale: string;
+    profileJson: ProfileConfig;
+}
+interface UpdateProfileInput {
+    name?: string;
+    defaultLocale?: string;
+    profileJson?: ProfileConfig;
+}
+interface CreateConsentInput {
+    tenantId: string;
+    visitorId: string;
+    profileId: string;
+    profileVersion: number;
+    locale: string;
+    consentJson: ConsentValue;
+    gpcDetected: boolean;
+    source: 'banner' | 'api' | 'import';
+    ageVerified?: boolean;
+    parentalConsentToken?: string;
+    tcfString?: string;
+}
+interface UpdateConsentInput {
+    consentJson: ConsentValue;
+    locale?: string;
+    gpcDetected?: boolean;
+}
+interface CreateVisitorInput {
+    tenantId: string;
+    visitorId: string;
+    country?: string;
+    region?: string;
+    city?: string;
+    ipHash?: string;
+    userAgentHash?: string;
+}
+interface UpdateVisitorInput {
+    country?: string;
+    region?: string;
+    city?: string;
+    lastSeen?: string;
+}
+interface CreateUserInput {
+    tenantId: string;
+    name: string;
+    email: string;
+    passwordHash: string;
+}
+interface UpdateUserInput {
+    name?: string;
+    email?: string;
+    passwordHash?: string;
+    isActive?: boolean;
+    totpSecret?: string | null;
+    totpEnabled?: boolean;
+}
+interface CreateAuditLogInput {
+    tenantId: string;
+    userId?: string;
+    action: string;
+    resourceType: string;
+    resourceId?: string;
+    oldData?: unknown;
+    newData?: unknown;
+}
+interface ConsentFilters {
+    tenantId: string;
+    profileId?: string;
+    from?: string;
+    to?: string;
+    page?: number;
+    limit?: number;
+}
+interface VisitorFilters {
+    tenantId: string;
+    from?: string;
+    to?: string;
+    page?: number;
+    limit?: number;
+}
+interface AuditFilters {
+    tenantId: string;
+    action?: string;
+    resourceType?: string;
+    from?: string;
+    to?: string;
+    page?: number;
+    limit?: number;
+}
+interface ConsentVerifyResult {
+    valid: boolean;
+    reasons: Array<'profile_version_mismatch' | 'consent_expired' | 'hmac_invalid'>;
+    currentProfileVersion?: number;
+    consentProfileVersion?: number;
+}
+type SafeAdminUser = Omit<AdminUser, 'passwordHash'>;
+interface CreateRoleInput {
+    tenantId: string;
+    name: string;
+    description?: string;
+}
+interface UpdateRoleInput {
+    name?: string;
+    description?: string;
+}
+interface OverviewStats {
+    totalConsents: number;
+    acceptedPct: number;
+    rejectedPct: number;
+    totalVisitors: number;
+    gpcDetectedCount: number;
+}
+type CategoryStats = Record<string, {
+    granted: number;
+    denied: number;
+    objected: number;
+}>;
+interface TimelineEntry {
+    date: string;
+    count: number;
+}
+interface CountryStat {
+    country: string;
+    count: number;
+}
+interface GpcStats {
+    detected: number;
+    total: number;
+    rate: number;
+}
+interface CreateApiKeyInput {
+    tenantId: string;
+    name: string;
+    keyHash: string;
+}
+interface CreateTenantInput {
+    name: string;
+    slug: string;
+}
+interface UpdateTenantInput {
+    name?: string;
+    slug?: string;
+}
+interface StorageAdapter {
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    migrate(): Promise<void>;
+    createProfile(data: CreateProfileInput): Promise<Profile>;
+    updateProfile(id: string, data: UpdateProfileInput): Promise<Profile>;
+    deleteProfile(id: string): Promise<void>;
+    getProfile(id: string): Promise<Profile | null>;
+    getProfiles(tenantId: string): Promise<Profile[]>;
+    createConsent(data: CreateConsentInput): Promise<ConsentDbRecord>;
+    updateConsent(visitorId: string, data: UpdateConsentInput): Promise<ConsentDbRecord>;
+    deleteConsent(visitorId: string): Promise<void>;
+    getConsent(visitorId: string): Promise<ConsentDbRecord | null>;
+    getConsents(filters: ConsentFilters): Promise<ConsentDbRecord[]>;
+    streamConsents(filters: ConsentFilters): AsyncIterable<ConsentDbRecord>;
+    createVisitor(data: CreateVisitorInput): Promise<Visitor>;
+    updateVisitor(visitorId: string, data: UpdateVisitorInput): Promise<Visitor>;
+    deleteVisitor(visitorId: string): Promise<void>;
+    getVisitor(visitorId: string): Promise<Visitor | null>;
+    getVisitors(filters: VisitorFilters): Promise<Visitor[]>;
+    getConsentHistory(visitorId: string): Promise<ConsentHistoryEntry[]>;
+    streamAuditLogs(filters: AuditFilters): AsyncIterable<AuditLog>;
+    getOverviewStats(tenantId: string): Promise<OverviewStats>;
+    getCategoryStats(tenantId: string): Promise<CategoryStats>;
+    getTimeline(tenantId: string, days?: number): Promise<TimelineEntry[]>;
+    getCountries(tenantId: string): Promise<CountryStat[]>;
+    getGpcStats(tenantId: string): Promise<GpcStats>;
+    getTenants(): Promise<Tenant[]>;
+    createTenant(data: CreateTenantInput): Promise<Tenant>;
+    updateTenant(id: string, data: UpdateTenantInput): Promise<Tenant>;
+    deleteTenant(id: string): Promise<void>;
+    createApiKey(data: CreateApiKeyInput): Promise<ApiKey>;
+    getApiKeyByHash(keyHash: string): Promise<ApiKey | null>;
+    revokeApiKey(id: string): Promise<void>;
+    getApiKeys(tenantId: string): Promise<ApiKey[]>;
+    purgeExpiredConsents(olderThanDays: number): Promise<number>;
+    createCookieTemplate(data: CreateCookieTemplateInput): Promise<ServerCookieTemplate>;
+    updateCookieTemplate(id: string, data: UpdateCookieTemplateInput): Promise<ServerCookieTemplate>;
+    deleteCookieTemplate(id: string): Promise<void>;
+    getCookieTemplate(id: string): Promise<ServerCookieTemplate | null>;
+    getCookieTemplates(tenantId: string): Promise<ServerCookieTemplate[]>;
+    copyCookieTemplate(id: string, newName: string): Promise<ServerCookieTemplate>;
+    createUITemplate(data: CreateUITemplateInput): Promise<ServerUITemplate>;
+    updateUITemplate(id: string, data: UpdateUITemplateInput): Promise<ServerUITemplate>;
+    deleteUITemplate(id: string): Promise<void>;
+    getUITemplate(id: string): Promise<ServerUITemplate | null>;
+    getUITemplates(tenantId: string): Promise<ServerUITemplate[]>;
+    copyUITemplate(id: string, newName: string): Promise<ServerUITemplate>;
+    createUser(data: CreateUserInput): Promise<AdminUser>;
+    updateUser(id: string, data: UpdateUserInput): Promise<AdminUser>;
+    deleteUser(id: string): Promise<void>;
+    getUserById(id: string): Promise<AdminUser | null>;
+    getUserByEmail(email: string): Promise<AdminUser | null>;
+    getUsers(tenantId: string): Promise<AdminUser[]>;
+    countUsers(tenantId?: string): Promise<number>;
+    getRoles(tenantId: string): Promise<Role[]>;
+    createRole(data: CreateRoleInput): Promise<Role>;
+    updateRole(id: string, data: UpdateRoleInput): Promise<Role>;
+    deleteRole(id: string): Promise<void>;
+    getAllPermissions(): Promise<Permission[]>;
+    getPermissionsForRole(roleId: string): Promise<Permission[]>;
+    getUserRoles(userId: string, tenantId?: string): Promise<Role[]>;
+    assignRole(userId: string, roleId: string, tenantId?: string): Promise<void>;
+    revokeRole(userId: string, roleId: string, tenantId?: string): Promise<void>;
+    assignPermissionToRole(roleId: string, permissionId: string): Promise<void>;
+    revokePermissionFromRole(roleId: string, permissionId: string): Promise<void>;
+    createLog(data: CreateAuditLogInput): Promise<void>;
+    getLogs(filters: AuditFilters): Promise<AuditLog[]>;
+}
+interface PluginContext {
+    storage: StorageAdapter;
+    config: ConsentiServerConfig;
+}
+declare abstract class ConsentiServerPlugin {
+    abstract name: string;
+    initialize?(context: PluginContext): Promise<void>;
+    destroy?(): Promise<void>;
+    beforeConsentSave?(data: CreateConsentInput): Promise<CreateConsentInput>;
+    afterConsentSave?(record: ConsentDbRecord): Promise<void>;
+    beforeConsentUpdate?(data: UpdateConsentInput): Promise<UpdateConsentInput>;
+    afterConsentUpdate?(record: ConsentDbRecord): Promise<void>;
+    beforeProfileFetch?(id: string): Promise<string>;
+    afterProfileFetch?(profile: Profile): Promise<Profile>;
+    beforeUserCreate?(data: CreateUserInput): Promise<CreateUserInput>;
+    afterUserCreate?(user: AdminUser): Promise<void>;
+}
+
+declare class ProfileRepo {
+    private adapter;
+    constructor(adapter: StorageAdapter);
+    create(data: CreateProfileInput): Promise<Profile>;
+    update(id: string, data: UpdateProfileInput): Promise<Profile>;
+    delete(id: string): Promise<void>;
+    get(id: string): Promise<Profile | null>;
+    list(tenantId: string): Promise<Profile[]>;
+}
+
+declare class AuditRepo {
+    private adapter;
+    constructor(adapter: StorageAdapter);
+    log(data: CreateAuditLogInput): Promise<void>;
+    list(filters: AuditFilters): Promise<AuditLog[]>;
+}
+
+declare class ProfileService {
+    private profiles;
+    private audit;
+    private tenantId;
+    private storage?;
+    constructor(profiles: ProfileRepo, audit: AuditRepo, tenantId?: string, storage?: StorageAdapter | undefined);
+    create(input: Omit<CreateProfileInput, 'tenantId'>): Promise<Profile>;
+    update(id: string, input: UpdateProfileInput): Promise<Profile>;
+    delete(id: string): Promise<void>;
+    get(id: string, locale?: string): Promise<Profile | null>;
+    getResolved(id: string, locale?: string): Promise<PublicProfileResponse | null>;
+    list(): Promise<Profile[]>;
+}
+
+declare class ConsentRepo {
+    private adapter;
+    constructor(adapter: StorageAdapter);
+    create(data: CreateConsentInput): Promise<ConsentDbRecord>;
+    update(visitorId: string, data: UpdateConsentInput): Promise<ConsentDbRecord>;
+    delete(visitorId: string): Promise<void>;
+    get(visitorId: string): Promise<ConsentDbRecord | null>;
+    list(filters: ConsentFilters): Promise<ConsentDbRecord[]>;
+}
+
+declare class VisitorRepo {
+    private adapter;
+    constructor(adapter: StorageAdapter);
+    create(data: CreateVisitorInput): Promise<Visitor>;
+    update(visitorId: string, data: UpdateVisitorInput): Promise<Visitor>;
+    delete(visitorId: string): Promise<void>;
+    get(visitorId: string): Promise<Visitor | null>;
+}
+
+declare class PluginEngine {
+    private plugins;
+    register(plugins: ConsentiServerPlugin[]): void;
+    initialize(context: PluginContext): Promise<void>;
+    destroy(): Promise<void>;
+    runBeforeConsentSave(data: CreateConsentInput): Promise<CreateConsentInput>;
+    runAfterConsentSave(record: ConsentDbRecord): Promise<void>;
+    runBeforeConsentUpdate(data: UpdateConsentInput): Promise<UpdateConsentInput>;
+    runAfterConsentUpdate(record: ConsentDbRecord): Promise<void>;
+    runAfterProfileFetch(profile: Profile): Promise<Profile>;
+    runBeforeUserCreate(data: CreateUserInput): Promise<CreateUserInput>;
+    runAfterUserCreate(user: AdminUser): Promise<void>;
+}
+
+declare class ConsentService {
+    private consents;
+    private visitors;
+    private profiles;
+    private audit;
+    private tenantId;
+    private compliance?;
+    private pluginEngine?;
+    private eventBus?;
+    private tcfConfig?;
+    constructor(consents: ConsentRepo, visitors: VisitorRepo, profiles: ProfileRepo, audit: AuditRepo, tenantId?: string, compliance?: ComplianceConfig | undefined, pluginEngine?: PluginEngine | undefined, eventBus?: EventEmitter | undefined, tcfConfig?: TcfConfig | undefined);
+    create(input: Omit<CreateConsentInput, 'tenantId'>): Promise<ConsentDbRecord>;
+    update(visitorId: string, input: UpdateConsentInput): Promise<ConsentDbRecord>;
+    get(visitorId: string): Promise<ConsentDbRecord | null>;
+    verify(visitorId: string): Promise<ConsentVerifyResult>;
+    erase(visitorId: string): Promise<void>;
+}
+
+declare class VisitorService {
+    private visitors;
+    private tenantId;
+    constructor(visitors: VisitorRepo, tenantId?: string);
+    upsert(data: {
+        visitorId: string;
+        ip?: string;
+        userAgent?: string;
+        country?: string;
+        region?: string;
+        city?: string;
+    }): Promise<Visitor>;
+}
+
+declare class UserRepo {
+    private adapter;
+    constructor(adapter: StorageAdapter);
+    getById(id: string): Promise<AdminUser | null>;
+    getByEmail(email: string): Promise<AdminUser | null>;
+    list(tenantId: string): Promise<AdminUser[]>;
+    create(data: CreateUserInput): Promise<AdminUser>;
+    update(id: string, data: UpdateUserInput): Promise<AdminUser>;
+    delete(id: string): Promise<void>;
+    getRoles(userId: string, tenantId?: string): Promise<Role[]>;
+    assignRole(userId: string, roleId: string, tenantId?: string): Promise<void>;
+    revokeRole(userId: string, roleId: string, tenantId?: string): Promise<void>;
+}
+
+declare class UserService {
+    private users;
+    private audit;
+    private tenantId;
+    constructor(users: UserRepo, audit: AuditRepo, tenantId?: string);
+    private safe;
+    create(input: {
+        name: string;
+        email: string;
+        password: string;
+        roleId?: string;
+    }, actorId?: string): Promise<SafeAdminUser>;
+    update(id: string, input: {
+        name?: string;
+        email?: string;
+        isActive?: boolean;
+        password?: string;
+    }, actorId?: string): Promise<SafeAdminUser>;
+    delete(id: string, actorId?: string): Promise<void>;
+    get(id: string): Promise<SafeAdminUser | null>;
+    list(): Promise<SafeAdminUser[]>;
+    getRoles(userId: string, tenantId?: string): Promise<Role[]>;
+    assignRole(userId: string, roleId: string, tenantId?: string): Promise<void>;
+    revokeRole(userId: string, roleId: string, tenantId?: string): Promise<void>;
+}
+
+declare class BetterSqlite3Adapter implements StorageAdapter {
+    private config;
+    private db;
+    private cache;
+    constructor(config: StorageConfig);
+    private stmt;
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    migrate(): Promise<void>;
+    private mapProfile;
+    createProfile(data: CreateProfileInput): Promise<Profile>;
+    updateProfile(id: string, data: UpdateProfileInput): Promise<Profile>;
+    deleteProfile(id: string): Promise<void>;
+    getProfile(id: string): Promise<Profile | null>;
+    getProfiles(tenantId: string): Promise<Profile[]>;
+    private mapConsent;
+    createConsent(data: CreateConsentInput): Promise<ConsentDbRecord>;
+    updateConsent(visitorId: string, data: UpdateConsentInput): Promise<ConsentDbRecord>;
+    deleteConsent(visitorId: string): Promise<void>;
+    getConsent(visitorId: string): Promise<ConsentDbRecord | null>;
+    getConsents(filters: ConsentFilters): Promise<ConsentDbRecord[]>;
+    streamConsents(filters: ConsentFilters): AsyncIterable<ConsentDbRecord>;
+    getConsentHistory(visitorId: string): Promise<ConsentHistoryEntry[]>;
+    private mapVisitor;
+    createVisitor(data: CreateVisitorInput): Promise<Visitor>;
+    updateVisitor(visitorId: string, data: UpdateVisitorInput): Promise<Visitor>;
+    deleteVisitor(visitorId: string): Promise<void>;
+    getVisitor(visitorId: string): Promise<Visitor | null>;
+    getVisitors(filters: VisitorFilters): Promise<Visitor[]>;
+    private mapUser;
+    createUser(data: CreateUserInput): Promise<AdminUser>;
+    updateUser(id: string, data: UpdateUserInput): Promise<AdminUser>;
+    deleteUser(id: string): Promise<void>;
+    getUserById(id: string): Promise<AdminUser | null>;
+    getUserByEmail(email: string): Promise<AdminUser | null>;
+    getUsers(tenantId: string): Promise<AdminUser[]>;
+    countUsers(tenantId?: string): Promise<number>;
+    getRoles(tenantId: string): Promise<Role[]>;
+    createRole(data: CreateRoleInput): Promise<Role>;
+    updateRole(id: string, data: UpdateRoleInput): Promise<Role>;
+    deleteRole(id: string): Promise<void>;
+    getAllPermissions(): Promise<Permission[]>;
+    assignPermissionToRole(roleId: string, permissionId: string): Promise<void>;
+    revokePermissionFromRole(roleId: string, permissionId: string): Promise<void>;
+    getPermissionsForRole(roleId: string): Promise<Permission[]>;
+    getUserRoles(userId: string, tenantId?: string): Promise<Role[]>;
+    assignRole(userId: string, roleId: string, tenantId?: string): Promise<void>;
+    revokeRole(userId: string, roleId: string, tenantId?: string): Promise<void>;
+    createLog(data: CreateAuditLogInput): Promise<void>;
+    getLogs(filters: AuditFilters): Promise<AuditLog[]>;
+    private mapAuditLog;
+    streamAuditLogs(filters: AuditFilters): AsyncIterable<AuditLog>;
+    getOverviewStats(tenantId: string): Promise<OverviewStats>;
+    getCategoryStats(tenantId: string): Promise<CategoryStats>;
+    getTimeline(tenantId: string, days?: number): Promise<TimelineEntry[]>;
+    getCountries(tenantId: string): Promise<CountryStat[]>;
+    getGpcStats(tenantId: string): Promise<GpcStats>;
+    getTenants(): Promise<Tenant[]>;
+    createTenant(data: CreateTenantInput): Promise<Tenant>;
+    updateTenant(id: string, data: UpdateTenantInput): Promise<Tenant>;
+    deleteTenant(id: string): Promise<void>;
+    purgeExpiredConsents(olderThanDays: number): Promise<number>;
+    private mapApiKey;
+    createApiKey(data: CreateApiKeyInput): Promise<ApiKey>;
+    getApiKeyByHash(keyHash: string): Promise<ApiKey | null>;
+    revokeApiKey(id: string): Promise<void>;
+    getApiKeys(tenantId: string): Promise<ApiKey[]>;
+    private mapCookieTemplate;
+    createCookieTemplate(data: CreateCookieTemplateInput): Promise<ServerCookieTemplate>;
+    updateCookieTemplate(id: string, data: UpdateCookieTemplateInput): Promise<ServerCookieTemplate>;
+    deleteCookieTemplate(id: string): Promise<void>;
+    getCookieTemplate(id: string): Promise<ServerCookieTemplate | null>;
+    getCookieTemplates(tenantId: string): Promise<ServerCookieTemplate[]>;
+    copyCookieTemplate(id: string, newName: string): Promise<ServerCookieTemplate>;
+    private mapUITemplate;
+    createUITemplate(data: CreateUITemplateInput): Promise<ServerUITemplate>;
+    updateUITemplate(id: string, data: UpdateUITemplateInput): Promise<ServerUITemplate>;
+    deleteUITemplate(id: string): Promise<void>;
+    getUITemplate(id: string): Promise<ServerUITemplate | null>;
+    getUITemplates(tenantId: string): Promise<ServerUITemplate[]>;
+    copyUITemplate(id: string, newName: string): Promise<ServerUITemplate>;
+}
+
+declare class MongoDBAdapter implements StorageAdapter {
+    private config;
+    private client;
+    private db;
+    constructor(config: StorageConfig);
+    private col;
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    migrate(): Promise<void>;
+    private createIndexes;
+    private seed;
+    createProfile(data: CreateProfileInput): Promise<Profile>;
+    updateProfile(id: string, data: UpdateProfileInput): Promise<Profile>;
+    deleteProfile(id: string): Promise<void>;
+    getProfile(id: string): Promise<Profile | null>;
+    getProfiles(tenantId: string): Promise<Profile[]>;
+    createConsent(data: CreateConsentInput): Promise<ConsentDbRecord>;
+    updateConsent(visitorId: string, data: UpdateConsentInput): Promise<ConsentDbRecord>;
+    deleteConsent(visitorId: string): Promise<void>;
+    getConsent(visitorId: string): Promise<ConsentDbRecord | null>;
+    getConsents(filters: ConsentFilters): Promise<ConsentDbRecord[]>;
+    streamConsents(filters: ConsentFilters): AsyncIterable<ConsentDbRecord>;
+    private buildConsentFilter;
+    private writeHistory;
+    getConsentHistory(visitorId: string): Promise<ConsentHistoryEntry[]>;
+    createVisitor(data: CreateVisitorInput): Promise<Visitor>;
+    updateVisitor(visitorId: string, data: UpdateVisitorInput): Promise<Visitor>;
+    deleteVisitor(visitorId: string): Promise<void>;
+    getVisitor(visitorId: string): Promise<Visitor | null>;
+    getVisitors(filters: VisitorFilters): Promise<Visitor[]>;
+    getOverviewStats(tenantId: string): Promise<OverviewStats>;
+    getCategoryStats(tenantId: string): Promise<CategoryStats>;
+    getTimeline(tenantId: string, days?: number): Promise<TimelineEntry[]>;
+    createUser(data: CreateUserInput): Promise<AdminUser>;
+    updateUser(id: string, data: UpdateUserInput): Promise<AdminUser>;
+    deleteUser(id: string): Promise<void>;
+    getUserById(id: string): Promise<AdminUser | null>;
+    getUserByEmail(email: string): Promise<AdminUser | null>;
+    getUsers(tenantId: string): Promise<AdminUser[]>;
+    countUsers(tenantId?: string): Promise<number>;
+    getRoles(tenantId: string): Promise<Role[]>;
+    createRole(data: CreateRoleInput): Promise<Role>;
+    updateRole(id: string, data: UpdateRoleInput): Promise<Role>;
+    deleteRole(id: string): Promise<void>;
+    getAllPermissions(): Promise<Permission[]>;
+    getPermissionsForRole(roleId: string): Promise<Permission[]>;
+    getUserRoles(userId: string, tenantId?: string): Promise<Role[]>;
+    assignRole(userId: string, roleId: string, tenantId?: string): Promise<void>;
+    revokeRole(userId: string, roleId: string, tenantId?: string): Promise<void>;
+    assignPermissionToRole(roleId: string, permissionId: string): Promise<void>;
+    revokePermissionFromRole(roleId: string, permissionId: string): Promise<void>;
+    createLog(data: CreateAuditLogInput): Promise<void>;
+    getLogs(filters: AuditFilters): Promise<AuditLog[]>;
+    streamAuditLogs(filters: AuditFilters): AsyncIterable<AuditLog>;
+    private buildAuditFilter;
+    getCountries(tenantId: string): Promise<CountryStat[]>;
+    getGpcStats(tenantId: string): Promise<GpcStats>;
+    getTenants(): Promise<Tenant[]>;
+    createApiKey(data: CreateApiKeyInput): Promise<ApiKey>;
+    getApiKeyByHash(keyHash: string): Promise<ApiKey | null>;
+    revokeApiKey(id: string): Promise<void>;
+    getApiKeys(tenantId: string): Promise<ApiKey[]>;
+    createTenant(data: CreateTenantInput): Promise<Tenant>;
+    updateTenant(id: string, data: UpdateTenantInput): Promise<Tenant>;
+    deleteTenant(id: string): Promise<void>;
+    purgeExpiredConsents(olderThanDays: number): Promise<number>;
+    createCookieTemplate(): Promise<never>;
+    updateCookieTemplate(): Promise<never>;
+    deleteCookieTemplate(): Promise<void>;
+    getCookieTemplate(): Promise<never>;
+    getCookieTemplates(): Promise<never>;
+    copyCookieTemplate(): Promise<never>;
+    createUITemplate(): Promise<never>;
+    updateUITemplate(): Promise<never>;
+    deleteUITemplate(): Promise<void>;
+    getUITemplate(): Promise<never>;
+    getUITemplates(): Promise<never>;
+    copyUITemplate(): Promise<never>;
+}
+
+declare class MySQLAdapter implements StorageAdapter {
+    private config;
+    private pool;
+    constructor(config: StorageConfig);
+    private q;
+    private exec;
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    migrate(): Promise<void>;
+    private seed;
+    createProfile(data: CreateProfileInput): Promise<Profile>;
+    updateProfile(id: string, data: UpdateProfileInput): Promise<Profile>;
+    deleteProfile(id: string): Promise<void>;
+    getProfile(id: string): Promise<Profile | null>;
+    getProfiles(tenantId: string): Promise<Profile[]>;
+    createConsent(data: CreateConsentInput): Promise<ConsentDbRecord>;
+    updateConsent(visitorId: string, data: UpdateConsentInput): Promise<ConsentDbRecord>;
+    deleteConsent(visitorId: string): Promise<void>;
+    getConsent(visitorId: string): Promise<ConsentDbRecord | null>;
+    getConsents(filters: ConsentFilters): Promise<ConsentDbRecord[]>;
+    streamConsents(filters: ConsentFilters): AsyncIterable<ConsentDbRecord>;
+    private buildConsentQuery;
+    private writeHistory;
+    getConsentHistory(visitorId: string): Promise<ConsentHistoryEntry[]>;
+    createVisitor(data: CreateVisitorInput): Promise<Visitor>;
+    updateVisitor(visitorId: string, data: UpdateVisitorInput): Promise<Visitor>;
+    deleteVisitor(visitorId: string): Promise<void>;
+    getVisitor(visitorId: string): Promise<Visitor | null>;
+    getVisitors(filters: VisitorFilters): Promise<Visitor[]>;
+    getOverviewStats(tenantId: string): Promise<OverviewStats>;
+    getCategoryStats(tenantId: string): Promise<CategoryStats>;
+    getTimeline(tenantId: string, days?: number): Promise<TimelineEntry[]>;
+    createUser(data: CreateUserInput): Promise<AdminUser>;
+    updateUser(id: string, data: UpdateUserInput): Promise<AdminUser>;
+    deleteUser(id: string): Promise<void>;
+    getUserById(id: string): Promise<AdminUser | null>;
+    getUserByEmail(email: string): Promise<AdminUser | null>;
+    getUsers(tenantId: string): Promise<AdminUser[]>;
+    countUsers(tenantId?: string): Promise<number>;
+    getRoles(tenantId: string): Promise<Role[]>;
+    createRole(data: CreateRoleInput): Promise<Role>;
+    updateRole(id: string, data: UpdateRoleInput): Promise<Role>;
+    deleteRole(id: string): Promise<void>;
+    getAllPermissions(): Promise<Permission[]>;
+    getPermissionsForRole(roleId: string): Promise<Permission[]>;
+    getUserRoles(userId: string, tenantId?: string): Promise<Role[]>;
+    assignRole(userId: string, roleId: string, tenantId?: string): Promise<void>;
+    revokeRole(userId: string, roleId: string, tenantId?: string): Promise<void>;
+    assignPermissionToRole(roleId: string, permissionId: string): Promise<void>;
+    revokePermissionFromRole(roleId: string, permissionId: string): Promise<void>;
+    createLog(data: CreateAuditLogInput): Promise<void>;
+    getLogs(filters: AuditFilters): Promise<AuditLog[]>;
+    streamAuditLogs(filters: AuditFilters): AsyncIterable<AuditLog>;
+    private buildAuditQuery;
+    getCountries(tenantId: string): Promise<CountryStat[]>;
+    getGpcStats(tenantId: string): Promise<GpcStats>;
+    getTenants(): Promise<Tenant[]>;
+    createApiKey(data: CreateApiKeyInput): Promise<ApiKey>;
+    getApiKeyByHash(keyHash: string): Promise<ApiKey | null>;
+    revokeApiKey(id: string): Promise<void>;
+    getApiKeys(tenantId: string): Promise<ApiKey[]>;
+    createTenant(data: CreateTenantInput): Promise<Tenant>;
+    updateTenant(id: string, data: UpdateTenantInput): Promise<Tenant>;
+    deleteTenant(id: string): Promise<void>;
+    purgeExpiredConsents(olderThanDays: number): Promise<number>;
+    createCookieTemplate(): Promise<never>;
+    updateCookieTemplate(): Promise<never>;
+    deleteCookieTemplate(): Promise<void>;
+    getCookieTemplate(): Promise<never>;
+    getCookieTemplates(): Promise<never>;
+    copyCookieTemplate(): Promise<never>;
+    createUITemplate(): Promise<never>;
+    updateUITemplate(): Promise<never>;
+    deleteUITemplate(): Promise<void>;
+    getUITemplate(): Promise<never>;
+    getUITemplates(): Promise<never>;
+    copyUITemplate(): Promise<never>;
+}
+
+declare class PostgreSQLAdapter implements StorageAdapter {
+    private config;
+    private pool;
+    constructor(config: StorageConfig);
+    private q;
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    migrate(): Promise<void>;
+    private seedTx;
+    createProfile(data: CreateProfileInput): Promise<Profile>;
+    updateProfile(id: string, data: UpdateProfileInput): Promise<Profile>;
+    deleteProfile(id: string): Promise<void>;
+    getProfile(id: string): Promise<Profile | null>;
+    getProfiles(tenantId: string): Promise<Profile[]>;
+    createConsent(data: CreateConsentInput): Promise<ConsentDbRecord>;
+    updateConsent(visitorId: string, data: UpdateConsentInput): Promise<ConsentDbRecord>;
+    deleteConsent(visitorId: string): Promise<void>;
+    getConsent(visitorId: string): Promise<ConsentDbRecord | null>;
+    getConsents(filters: ConsentFilters): Promise<ConsentDbRecord[]>;
+    streamConsents(filters: ConsentFilters): AsyncIterable<ConsentDbRecord>;
+    private buildConsentQuery;
+    private writeHistory;
+    getConsentHistory(visitorId: string): Promise<ConsentHistoryEntry[]>;
+    createVisitor(data: CreateVisitorInput): Promise<Visitor>;
+    updateVisitor(visitorId: string, data: UpdateVisitorInput): Promise<Visitor>;
+    deleteVisitor(visitorId: string): Promise<void>;
+    getVisitor(visitorId: string): Promise<Visitor | null>;
+    getVisitors(filters: VisitorFilters): Promise<Visitor[]>;
+    getOverviewStats(tenantId: string): Promise<OverviewStats>;
+    getCategoryStats(tenantId: string): Promise<CategoryStats>;
+    getTimeline(tenantId: string, days?: number): Promise<TimelineEntry[]>;
+    createUser(data: CreateUserInput): Promise<AdminUser>;
+    updateUser(id: string, data: UpdateUserInput): Promise<AdminUser>;
+    deleteUser(id: string): Promise<void>;
+    getUserById(id: string): Promise<AdminUser | null>;
+    getUserByEmail(email: string): Promise<AdminUser | null>;
+    getUsers(tenantId: string): Promise<AdminUser[]>;
+    countUsers(tenantId?: string): Promise<number>;
+    getRoles(tenantId: string): Promise<Role[]>;
+    createRole(data: CreateRoleInput): Promise<Role>;
+    updateRole(id: string, data: UpdateRoleInput): Promise<Role>;
+    deleteRole(id: string): Promise<void>;
+    getAllPermissions(): Promise<Permission[]>;
+    getPermissionsForRole(roleId: string): Promise<Permission[]>;
+    getUserRoles(userId: string, tenantId?: string): Promise<Role[]>;
+    assignRole(userId: string, roleId: string, tenantId?: string): Promise<void>;
+    revokeRole(userId: string, roleId: string, tenantId?: string): Promise<void>;
+    assignPermissionToRole(roleId: string, permissionId: string): Promise<void>;
+    revokePermissionFromRole(roleId: string, permissionId: string): Promise<void>;
+    createLog(data: CreateAuditLogInput): Promise<void>;
+    getLogs(filters: AuditFilters): Promise<AuditLog[]>;
+    streamAuditLogs(filters: AuditFilters): AsyncIterable<AuditLog>;
+    private buildAuditQuery;
+    getCountries(tenantId: string): Promise<CountryStat[]>;
+    getGpcStats(tenantId: string): Promise<GpcStats>;
+    getTenants(): Promise<Tenant[]>;
+    createApiKey(data: CreateApiKeyInput): Promise<ApiKey>;
+    getApiKeyByHash(keyHash: string): Promise<ApiKey | null>;
+    revokeApiKey(id: string): Promise<void>;
+    getApiKeys(tenantId: string): Promise<ApiKey[]>;
+    createTenant(data: CreateTenantInput): Promise<Tenant>;
+    updateTenant(id: string, data: UpdateTenantInput): Promise<Tenant>;
+    deleteTenant(id: string): Promise<void>;
+    purgeExpiredConsents(olderThanDays: number): Promise<number>;
+    createCookieTemplate(): Promise<never>;
+    updateCookieTemplate(): Promise<never>;
+    deleteCookieTemplate(): Promise<void>;
+    getCookieTemplate(): Promise<never>;
+    getCookieTemplates(): Promise<never>;
+    copyCookieTemplate(): Promise<never>;
+    createUITemplate(): Promise<never>;
+    updateUITemplate(): Promise<never>;
+    deleteUITemplate(): Promise<void>;
+    getUITemplate(): Promise<never>;
+    getUITemplates(): Promise<never>;
+    copyUITemplate(): Promise<never>;
+}
+
+declare const dashboardDir: string;
+declare function createConsenti(userConfig: ConsentiServerConfig): {
+    router: (req: IncomingMessage, res: ServerResponse, next: (err?: unknown) => void) => void;
+    handler: (req: IncomingMessage, res: ServerResponse) => Promise<void>;
+    fastifyPlugin: (fastify: {
+        all: (path: string, handler: (req: {
+            raw: IncomingMessage;
+        }, reply: {
+            raw: ServerResponse;
+            hijack: () => void;
+        }) => Promise<void>) => void;
+    }, _opts: unknown) => Promise<void>;
+    honoApp: {
+        fetch: (request: Request) => Promise<Response>;
+    };
+    services: {
+        profile: ProfileService;
+        consent: ConsentService;
+        visitor: VisitorService;
+        user: UserService;
+    };
+    storage: StorageAdapter;
+    eventBus: EventEmitter<[never]>;
+    destroy: () => Promise<void>;
+};
+
+export { type AdminUser, type AuditLog, type ConsentDbRecord, type ConsentVerifyResult, type ConsentiServerConfig, MongoDBAdapter, MySQLAdapter, type Permission, PostgreSQLAdapter, type Profile, type Role, BetterSqlite3Adapter as SQLiteAdapter, type SafeAdminUser, type StorageAdapter, type Visitor, createConsenti, dashboardDir };