@cratis/chronicle 6.2.0 → 6.3.1

package/dist/confidentiality/SecurityMetadata.d.ts

@@ -0,0 +1,18 @@
+import type { SecurityMetadataType } from './SecurityMetadataType';
+/**
+ * Represents metadata related to security.
+ *
+ * This is the security counterpart to {@link ComplianceMetadata} - a deliberately separate type
+ * rather than a shared one. See {@link SecurityMetadataType} for why.
+ */
+export interface SecurityMetadata {
+    /**
+     * The type of security metadata.
+     */
+    readonly metadataType: SecurityMetadataType;
+    /**
+     * Any additional details - can be empty.
+     */
+    readonly details: string;
+}
+//# sourceMappingURL=SecurityMetadata.d.ts.map

package/dist/confidentiality/SecurityMetadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityMetadata.d.ts","sourceRoot":"","sources":["../../confidentiality/SecurityMetadata.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC7B;;OAEG;IACH,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAE5C;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B"}

package/dist/confidentiality/SecurityMetadata.js

@@ -0,0 +1,4 @@
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+export {};
+//# sourceMappingURL=SecurityMetadata.js.map

package/dist/confidentiality/SecurityMetadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityMetadata.js","sourceRoot":"","sources":["../../confidentiality/SecurityMetadata.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,qGAAqG"}

package/dist/confidentiality/SecurityMetadataResolver.d.ts

@@ -0,0 +1,30 @@
+import type { SecurityMetadata } from './SecurityMetadata';
+/**
+ * Resolves security metadata for properties and types.
+ *
+ * This is the security counterpart to {@link ComplianceMetadataResolver} - a deliberately separate
+ * type rather than a shared one. See {@link SecurityMetadataType} for why.
+ */
+export declare class SecurityMetadataResolver {
+    /**
+     * Checks if a property has security metadata.
+     * @param target - The class prototype.
+     * @param propertyKey - The property name.
+     * @returns True if the property has security metadata; false otherwise.
+     */
+    static hasMetadataFor(target: object, propertyKey: string): boolean;
+    /**
+     * Gets all security metadata for a property.
+     * @param target - The class prototype.
+     * @param propertyKey - The property name.
+     * @returns Array of security metadata.
+     */
+    static getMetadataFor(target: object, propertyKey: string): SecurityMetadata[];
+    /**
+     * Gets security metadata for a type (e.g., ConceptAs types).
+     * @param type - The type constructor.
+     * @returns Array of security metadata.
+     */
+    static getMetadataForType(type: Function): SecurityMetadata[];
+}
+//# sourceMappingURL=SecurityMetadataResolver.d.ts.map

package/dist/confidentiality/SecurityMetadataResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityMetadataResolver.d.ts","sourceRoot":"","sources":["../../confidentiality/SecurityMetadataResolver.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAG3D;;;;;GAKG;AACH,qBAAa,wBAAwB;IACjC;;;;;OAKG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO;IAInE;;;;;OAKG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,gBAAgB,EAAE;IAW9E;;;;OAIG;IACH,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,GAAG,gBAAgB,EAAE;CAQhE"}

package/dist/confidentiality/SecurityMetadataResolver.js

@@ -0,0 +1,48 @@
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+import { getEncryptedMetadata, getTypeEncryptedMetadata } from './encrypted';
+/**
+ * Resolves security metadata for properties and types.
+ *
+ * This is the security counterpart to {@link ComplianceMetadataResolver} - a deliberately separate
+ * type rather than a shared one. See {@link SecurityMetadataType} for why.
+ */
+export class SecurityMetadataResolver {
+    /**
+     * Checks if a property has security metadata.
+     * @param target - The class prototype.
+     * @param propertyKey - The property name.
+     * @returns True if the property has security metadata; false otherwise.
+     */
+    static hasMetadataFor(target, propertyKey) {
+        return getEncryptedMetadata(target, propertyKey) !== undefined;
+    }
+    /**
+     * Gets all security metadata for a property.
+     * @param target - The class prototype.
+     * @param propertyKey - The property name.
+     * @returns Array of security metadata.
+     */
+    static getMetadataFor(target, propertyKey) {
+        const metadata = [];
+        const encryptedMetadata = getEncryptedMetadata(target, propertyKey);
+        if (encryptedMetadata) {
+            metadata.push(encryptedMetadata);
+        }
+        return metadata;
+    }
+    /**
+     * Gets security metadata for a type (e.g., ConceptAs types).
+     * @param type - The type constructor.
+     * @returns Array of security metadata.
+     */
+    static getMetadataForType(type) {
+        const metadata = [];
+        const encryptedMetadata = getTypeEncryptedMetadata(type);
+        if (encryptedMetadata) {
+            metadata.push(encryptedMetadata);
+        }
+        return metadata;
+    }
+}
+//# sourceMappingURL=SecurityMetadataResolver.js.map

package/dist/confidentiality/SecurityMetadataResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityMetadataResolver.js","sourceRoot":"","sources":["../../confidentiality/SecurityMetadataResolver.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,qGAAqG;AAGrG,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE7E;;;;;GAKG;AACH,MAAM,OAAO,wBAAwB;IACjC;;;;;OAKG;IACH,MAAM,CAAC,cAAc,CAAC,MAAc,EAAE,WAAmB;QACrD,OAAO,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,KAAK,SAAS,CAAC;IACnE,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,cAAc,CAAC,MAAc,EAAE,WAAmB;QACrD,MAAM,QAAQ,GAAuB,EAAE,CAAC;QAExC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACpE,IAAI,iBAAiB,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,kBAAkB,CAAC,IAAc;QACpC,MAAM,QAAQ,GAAuB,EAAE,CAAC;QACxC,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,iBAAiB,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;CACJ"}

package/dist/confidentiality/SecurityMetadataType.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Represents a type of security metadata.
+ *
+ * This is the security counterpart to {@link ComplianceMetadataType} - a deliberately separate type
+ * rather than a shared one. A `@pii()` value and an `@encrypted()` value are never the same kind of
+ * thing: one is personal data with a GDPR erasure obligation, the other is an operational secret
+ * with none. Keeping the two vocabularies apart keeps that distinction visible at every call site
+ * that reads a schema's metadata.
+ */
+export declare class SecurityMetadataType {
+    /**
+     * The key is provisioned per compliance identity - the same identity, resolved the same way, a
+     * `@pii()` value on the same document would use. This is what `@encrypted()` (with no explicit
+     * scope, or `EncryptionScope.Subject`) resolves to.
+     */
+    static readonly EncryptedSubject: SecurityMetadataType;
+    /**
+     * The key is provisioned once per event store namespace. This is what
+     * `@encrypted(EncryptionScope.Namespace)` resolves to.
+     */
+    static readonly EncryptedNamespace: SecurityMetadataType;
+    /**
+     * The key is provisioned once for the whole Chronicle installation. This is what
+     * `@encrypted(EncryptionScope.Global)` resolves to.
+     */
+    static readonly EncryptedGlobal: SecurityMetadataType;
+    private readonly _value;
+    /**
+     * Initializes a new instance of SecurityMetadataType.
+     * @param value - The string value of the security metadata type.
+     */
+    constructor(value: string);
+    /**
+     * Gets the underlying string value.
+     */
+    get value(): string;
+    /**
+     * Returns the string representation of the security metadata type.
+     */
+    toString(): string;
+}
+//# sourceMappingURL=SecurityMetadataType.d.ts.map

package/dist/confidentiality/SecurityMetadataType.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityMetadataType.d.ts","sourceRoot":"","sources":["../../confidentiality/SecurityMetadataType.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,qBAAa,oBAAoB;IAC7B;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CAAC,gBAAgB,uBAAgD;IAEhF;;;OAGG;IACH,MAAM,CAAC,QAAQ,CAAC,kBAAkB,uBAAkD;IAEpF;;;OAGG;IACH,MAAM,CAAC,QAAQ,CAAC,eAAe,uBAA+C;IAE9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC;;;OAGG;gBACS,KAAK,EAAE,MAAM;IAIzB;;OAEG;IACH,IAAI,KAAK,IAAI,MAAM,CAElB;IAED;;OAEG;IACH,QAAQ,IAAI,MAAM;CAGrB"}

package/dist/confidentiality/SecurityMetadataType.js

@@ -0,0 +1,50 @@
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+/**
+ * Represents a type of security metadata.
+ *
+ * This is the security counterpart to {@link ComplianceMetadataType} - a deliberately separate type
+ * rather than a shared one. A `@pii()` value and an `@encrypted()` value are never the same kind of
+ * thing: one is personal data with a GDPR erasure obligation, the other is an operational secret
+ * with none. Keeping the two vocabularies apart keeps that distinction visible at every call site
+ * that reads a schema's metadata.
+ */
+export class SecurityMetadataType {
+    /**
+     * The key is provisioned per compliance identity - the same identity, resolved the same way, a
+     * `@pii()` value on the same document would use. This is what `@encrypted()` (with no explicit
+     * scope, or `EncryptionScope.Subject`) resolves to.
+     */
+    static EncryptedSubject = new SecurityMetadataType('EncryptedSubject');
+    /**
+     * The key is provisioned once per event store namespace. This is what
+     * `@encrypted(EncryptionScope.Namespace)` resolves to.
+     */
+    static EncryptedNamespace = new SecurityMetadataType('EncryptedNamespace');
+    /**
+     * The key is provisioned once for the whole Chronicle installation. This is what
+     * `@encrypted(EncryptionScope.Global)` resolves to.
+     */
+    static EncryptedGlobal = new SecurityMetadataType('EncryptedGlobal');
+    _value;
+    /**
+     * Initializes a new instance of SecurityMetadataType.
+     * @param value - The string value of the security metadata type.
+     */
+    constructor(value) {
+        this._value = value;
+    }
+    /**
+     * Gets the underlying string value.
+     */
+    get value() {
+        return this._value;
+    }
+    /**
+     * Returns the string representation of the security metadata type.
+     */
+    toString() {
+        return this._value;
+    }
+}
+//# sourceMappingURL=SecurityMetadataType.js.map

package/dist/confidentiality/SecurityMetadataType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityMetadataType.js","sourceRoot":"","sources":["../../confidentiality/SecurityMetadataType.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,qGAAqG;AAErG;;;;;;;;GAQG;AACH,MAAM,OAAO,oBAAoB;IAC7B;;;;OAIG;IACH,MAAM,CAAU,gBAAgB,GAAG,IAAI,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IAEhF;;;OAGG;IACH,MAAM,CAAU,kBAAkB,GAAG,IAAI,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;IAEpF;;;OAGG;IACH,MAAM,CAAU,eAAe,GAAG,IAAI,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;IAE7D,MAAM,CAAS;IAEhC;;;OAGG;IACH,YAAY,KAAa;QACrB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACL,OAAO,IAAI,CAAC,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,QAAQ;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC;IACvB,CAAC"}

package/dist/confidentiality/encrypted.d.ts

@@ -0,0 +1,72 @@
+import 'reflect-metadata';
+import type { SecurityMetadata } from './SecurityMetadata';
+import { EncryptionScope } from './EncryptionScope';
+/**
+ * Decorator that marks a property or type as needing plain-confidentiality encryption at rest - a
+ * security measure, not a compliance one.
+ *
+ * Use `@encrypted()` for an operational secret that has no data subject and no lawful basis for
+ * erasure - an API key, a webhook signing secret, a partner credential. Use `@pii()` instead when
+ * the value is personal data about a natural person: only `@pii()` encrypts a value *and* enrolls it
+ * in GDPR right-to-erasure. Marking a secret `@pii()` would make it erasable on a request that was
+ * never about it; marking personal data `@encrypted()` would encrypt it but never erase it. The two
+ * are not interchangeable, and this decorator's key is never provisioned under the same identity a
+ * `@pii()` value for the same subject uses.
+ *
+ * All three {@link EncryptionScope} members are honored by the kernel: `EncryptionScope.Subject`
+ * (the default) provisions a key per compliance identity, exactly matching how a `@pii()` value on
+ * the same document is resolved; `EncryptionScope.Namespace` provisions one key shared by every
+ * value marked with it in a given event store namespace; `EncryptionScope.Global` provisions one key
+ * shared across the whole installation. Choosing a wider scope is safe for `@encrypted()` in a way
+ * it is not for `@pii()`, precisely because an operational secret has no data subject whose erasure
+ * request the wider key could ever need to honor separately from another subject's.
+ *
+ * This decorator can be used in two ways:
+ * - As a property decorator: `@encrypted() propertyName: type`
+ * - As a class decorator: `@encrypted() class TypeName { }`
+ *
+ * @param scope - The {@link EncryptionScope} the key is provisioned under - defaults to `EncryptionScope.Subject`.
+ * @param details - Optional details explaining why or to what purpose/extent the property/type needs encryption.
+ * @returns A decorator function that can be applied to either properties or classes (but not both on the same target).
+ *
+ * @example
+ * Property usage:
+ * ```typescript
+ * @readModel()
+ * class PartnerIntegration {
+ *     @encrypted()
+ *     apiKey: string = '';
+ *
+ *     @encrypted(EncryptionScope.Namespace)
+ *     webhookSigningSecret: string = '';
+ * }
+ * ```
+ */
+export declare function encrypted(scope?: EncryptionScope, details?: string): PropertyDecorator & ClassDecorator;
+/**
+ * Gets the encrypted security metadata for a property.
+ * @param target - The class prototype.
+ * @param propertyKey - The property name.
+ * @returns The security metadata, or undefined if not decorated with @encrypted.
+ */
+export declare function getEncryptedMetadata(target: object, propertyKey: string): SecurityMetadata | undefined;
+/**
+ * Checks whether a property has been decorated with @encrypted.
+ * @param target - The class prototype.
+ * @param propertyKey - The property name.
+ * @returns True if the property has @encrypted decorator; false otherwise.
+ */
+export declare function hasEncryptedMetadata(target: object, propertyKey: string): boolean;
+/**
+ * Gets the encrypted security metadata for a type.
+ * @param type - The type constructor.
+ * @returns The security metadata, or undefined if not decorated with @encrypted.
+ */
+export declare function getTypeEncryptedMetadata(type: Function): SecurityMetadata | undefined;
+/**
+ * Checks whether a type has been decorated with @encrypted.
+ * @param type - The type constructor.
+ * @returns True if the type has @encrypted decorator; false otherwise.
+ */
+export declare function isEncrypted(type: Function): boolean;
+//# sourceMappingURL=encrypted.d.ts.map

package/dist/confidentiality/encrypted.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted.d.ts","sourceRoot":"","sources":["../../confidentiality/encrypted.ts"],"names":[],"mappings":"AAGA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAwBpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,SAAS,CAAC,KAAK,GAAE,eAAyC,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,iBAAiB,GAAG,cAAc,CAiChI;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAEtG;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAEjF;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,QAAQ,GAAG,gBAAgB,GAAG,SAAS,CAErF;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAEnD"}

package/dist/confidentiality/encrypted.js

@@ -0,0 +1,130 @@
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+import 'reflect-metadata';
+import { SecurityMetadataType } from './SecurityMetadataType';
+import { EncryptionScope } from './EncryptionScope';
+import { EncryptedNotSupportedOnEventSourceId } from './EncryptedNotSupportedOnEventSourceId';
+import { TypeIntrospector } from '../types';
+/** The property name this client uses everywhere for the event source identifier. */
+const EVENT_SOURCE_ID_PROPERTY = 'eventSourceId';
+/** Metadata key for the encrypted decorator on properties. */
+const ENCRYPTED_PROPERTY_METADATA_KEY = 'chronicle:security:encrypted:property';
+/** Metadata key for the encrypted decorator on types. */
+const ENCRYPTED_TYPE_METADATA_KEY = 'chronicle:security:encrypted:type';
+function metadataTypeFor(scope) {
+    switch (scope) {
+        case EncryptionScope.Subject:
+            return SecurityMetadataType.EncryptedSubject;
+        case EncryptionScope.Namespace:
+            return SecurityMetadataType.EncryptedNamespace;
+        case EncryptionScope.Global:
+            return SecurityMetadataType.EncryptedGlobal;
+    }
+}
+/**
+ * Decorator that marks a property or type as needing plain-confidentiality encryption at rest - a
+ * security measure, not a compliance one.
+ *
+ * Use `@encrypted()` for an operational secret that has no data subject and no lawful basis for
+ * erasure - an API key, a webhook signing secret, a partner credential. Use `@pii()` instead when
+ * the value is personal data about a natural person: only `@pii()` encrypts a value *and* enrolls it
+ * in GDPR right-to-erasure. Marking a secret `@pii()` would make it erasable on a request that was
+ * never about it; marking personal data `@encrypted()` would encrypt it but never erase it. The two
+ * are not interchangeable, and this decorator's key is never provisioned under the same identity a
+ * `@pii()` value for the same subject uses.
+ *
+ * All three {@link EncryptionScope} members are honored by the kernel: `EncryptionScope.Subject`
+ * (the default) provisions a key per compliance identity, exactly matching how a `@pii()` value on
+ * the same document is resolved; `EncryptionScope.Namespace` provisions one key shared by every
+ * value marked with it in a given event store namespace; `EncryptionScope.Global` provisions one key
+ * shared across the whole installation. Choosing a wider scope is safe for `@encrypted()` in a way
+ * it is not for `@pii()`, precisely because an operational secret has no data subject whose erasure
+ * request the wider key could ever need to honor separately from another subject's.
+ *
+ * This decorator can be used in two ways:
+ * - As a property decorator: `@encrypted() propertyName: type`
+ * - As a class decorator: `@encrypted() class TypeName { }`
+ *
+ * @param scope - The {@link EncryptionScope} the key is provisioned under - defaults to `EncryptionScope.Subject`.
+ * @param details - Optional details explaining why or to what purpose/extent the property/type needs encryption.
+ * @returns A decorator function that can be applied to either properties or classes (but not both on the same target).
+ *
+ * @example
+ * Property usage:
+ * ```typescript
+ * @readModel()
+ * class PartnerIntegration {
+ *     @encrypted()
+ *     apiKey: string = '';
+ *
+ *     @encrypted(EncryptionScope.Namespace)
+ *     webhookSigningSecret: string = '';
+ * }
+ * ```
+ */
+export function encrypted(scope = EncryptionScope.Subject, details) {
+    return (target, propertyKey) => {
+        // Class decorator usage (for types like ConceptAs)
+        if (typeof target === 'function' && propertyKey === undefined) {
+            const metadata = {
+                metadataType: metadataTypeFor(scope),
+                details: details ?? ''
+            };
+            Reflect.defineMetadata(ENCRYPTED_TYPE_METADATA_KEY, metadata, target);
+            return;
+        }
+        // Property decorator usage
+        if (propertyKey !== undefined) {
+            const key = propertyKey.toString();
+            const declaringType = target.constructor;
+            // Encrypting the event source identifier would make its own decryption key
+            // unfindable - the identifier is required, in the clear, to correlate events and
+            // look up the key that protects everything else. Mirrors @pii()'s
+            // PIINotSupportedOnEventSourceId guard, for the same reason.
+            if (key === EVENT_SOURCE_ID_PROPERTY) {
+                throw new EncryptedNotSupportedOnEventSourceId(declaringType.name);
+            }
+            TypeIntrospector.trackProperty(declaringType, key);
+            const metadata = {
+                metadataType: metadataTypeFor(scope),
+                details: details ?? ''
+            };
+            Reflect.defineMetadata(ENCRYPTED_PROPERTY_METADATA_KEY, metadata, target, key);
+        }
+    };
+}
+/**
+ * Gets the encrypted security metadata for a property.
+ * @param target - The class prototype.
+ * @param propertyKey - The property name.
+ * @returns The security metadata, or undefined if not decorated with @encrypted.
+ */
+export function getEncryptedMetadata(target, propertyKey) {
+    return Reflect.getMetadata(ENCRYPTED_PROPERTY_METADATA_KEY, target, propertyKey);
+}
+/**
+ * Checks whether a property has been decorated with @encrypted.
+ * @param target - The class prototype.
+ * @param propertyKey - The property name.
+ * @returns True if the property has @encrypted decorator; false otherwise.
+ */
+export function hasEncryptedMetadata(target, propertyKey) {
+    return Reflect.hasMetadata(ENCRYPTED_PROPERTY_METADATA_KEY, target, propertyKey);
+}
+/**
+ * Gets the encrypted security metadata for a type.
+ * @param type - The type constructor.
+ * @returns The security metadata, or undefined if not decorated with @encrypted.
+ */
+export function getTypeEncryptedMetadata(type) {
+    return Reflect.getMetadata(ENCRYPTED_TYPE_METADATA_KEY, type);
+}
+/**
+ * Checks whether a type has been decorated with @encrypted.
+ * @param type - The type constructor.
+ * @returns True if the type has @encrypted decorator; false otherwise.
+ */
+export function isEncrypted(type) {
+    return Reflect.hasMetadata(ENCRYPTED_TYPE_METADATA_KEY, type);
+}
+//# sourceMappingURL=encrypted.js.map

package/dist/confidentiality/encrypted.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted.js","sourceRoot":"","sources":["../../confidentiality/encrypted.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,qGAAqG;AAErG,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C,qFAAqF;AACrF,MAAM,wBAAwB,GAAG,eAAe,CAAC;AAEjD,8DAA8D;AAC9D,MAAM,+BAA+B,GAAG,uCAAuC,CAAC;AAEhF,yDAAyD;AACzD,MAAM,2BAA2B,GAAG,mCAAmC,CAAC;AAExE,SAAS,eAAe,CAAC,KAAsB;IAC3C,QAAQ,KAAK,EAAE,CAAC;QACZ,KAAK,eAAe,CAAC,OAAO;YACxB,OAAO,oBAAoB,CAAC,gBAAgB,CAAC;QACjD,KAAK,eAAe,CAAC,SAAS;YAC1B,OAAO,oBAAoB,CAAC,kBAAkB,CAAC;QACnD,KAAK,eAAe,CAAC,MAAM;YACvB,OAAO,oBAAoB,CAAC,eAAe,CAAC;IACpD,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,UAAU,SAAS,CAAC,QAAyB,eAAe,CAAC,OAAO,EAAE,OAAgB;IACxF,OAAO,CAAC,MAAyB,EAAE,WAA6B,EAAE,EAAE;QAChE,mDAAmD;QACnD,IAAI,OAAO,MAAM,KAAK,UAAU,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAqB;gBAC/B,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC;gBACpC,OAAO,EAAE,OAAO,IAAI,EAAE;aACzB,CAAC;YACF,OAAO,CAAC,cAAc,CAAC,2BAA2B,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YACtE,OAAO;QACX,CAAC;QAED,2BAA2B;QAC3B,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,aAAa,GAAI,MAAoC,CAAC,WAAW,CAAC;YAExE,2EAA2E;YAC3E,iFAAiF;YACjF,kEAAkE;YAClE,6DAA6D;YAC7D,IAAI,GAAG,KAAK,wBAAwB,EAAE,CAAC;gBACnC,MAAM,IAAI,oCAAoC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YACvE,CAAC;YAED,gBAAgB,CAAC,aAAa,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAqB;gBAC/B,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC;gBACpC,OAAO,EAAE,OAAO,IAAI,EAAE;aACzB,CAAC;YACF,OAAO,CAAC,cAAc,CAAC,+BAA+B,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACnF,CAAC;IACL,CAAC,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,WAAmB;IACpE,OAAO,OAAO,CAAC,WAAW,CAAC,+BAA+B,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AACrF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,WAAmB;IACpE,OAAO,OAAO,CAAC,WAAW,CAAC,+BAA+B,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAc;IACnD,OAAO,OAAO,CAAC,WAAW,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAc;IACtC,OAAO,OAAO,CAAC,WAAW,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;AAClE,CAAC"}

package/dist/confidentiality/index.d.ts

@@ -0,0 +1,8 @@
+export { SecurityMetadataType } from './SecurityMetadataType';
+export type { SecurityMetadata } from './SecurityMetadata';
+export { EncryptionScope } from './EncryptionScope';
+export { encrypted, getEncryptedMetadata, hasEncryptedMetadata, getTypeEncryptedMetadata, isEncrypted } from './encrypted';
+export { EncryptedNotSupportedOnEventSourceId } from './EncryptedNotSupportedOnEventSourceId';
+export { PIIAndEncryptedCombinedNotSupported } from './PIIAndEncryptedCombinedNotSupported';
+export { SecurityMetadataResolver } from './SecurityMetadataResolver';
+//# sourceMappingURL=index.d.ts.map

package/dist/confidentiality/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../confidentiality/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC3H,OAAO,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/confidentiality/index.js

@@ -0,0 +1,9 @@
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+export { SecurityMetadataType } from './SecurityMetadataType';
+export { EncryptionScope } from './EncryptionScope';
+export { encrypted, getEncryptedMetadata, hasEncryptedMetadata, getTypeEncryptedMetadata, isEncrypted } from './encrypted';
+export { EncryptedNotSupportedOnEventSourceId } from './EncryptedNotSupportedOnEventSourceId';
+export { PIIAndEncryptedCombinedNotSupported } from './PIIAndEncryptedCombinedNotSupported';
+export { SecurityMetadataResolver } from './SecurityMetadataResolver';
+//# sourceMappingURL=index.js.map

package/dist/confidentiality/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../confidentiality/index.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,qGAAqG;AAErG,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC3H,OAAO,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/events/constraints/Constraints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Constraints.d.ts","sourceRoot":"","sources":["../../../events/constraints/Constraints.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAI9C;;GAEG;AACH,qBAAa,WAAY,YAAW,YAAY;IAUxC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IAXrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwC;IAElE;;;;;OAKG;gBAEkB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,mBAAmB,EAChC,gBAAgB,EAAE,wBAAwB;IAG/D,kBAAkB;IACZ,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAa/B,kBAAkB;IACZ,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAmE/B,kBAAkB;IAClB,MAAM,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO;CAGpC"}
+{"version":3,"file":"Constraints.d.ts","sourceRoot":"","sources":["../../../events/constraints/Constraints.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAI9C;;GAEG;AACH,qBAAa,WAAY,YAAW,YAAY;IAUxC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IAXrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwC;IAElE;;;;;OAKG;gBAEkB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,mBAAmB,EAChC,gBAAgB,EAAE,wBAAwB;IAG/D,kBAAkB;IACZ,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAa/B,kBAAkB;IACZ,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAwE/B,kBAAkB;IAClB,MAAM,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO;CAGpC"}

package/dist/events/constraints/Constraints.js

@@ -48,10 +48,15 @@ export class Constraints {
             };
             if (capture.uniqueConstraint) {
                 const uc = capture.uniqueConstraint;
+                const removalEventTypeIds = uc.removedWithEventTypeIds ?? [];
+                const legacyEventTypeId = uc.removedWithEventTypeId;
                 return {
                     Name: capture.name,
                     Type: ConstraintType.Unique,
-                    RemovedWith: uc.removedWithEventTypeId ? [uc.removedWithEventTypeId] : [],
+                    RemovedWith: [...new Set([
+                            ...(legacyEventTypeId && !removalEventTypeIds.includes(legacyEventTypeId) ? [legacyEventTypeId] : []),
+                            ...removalEventTypeIds
+                        ])],
                     Definition: {
                         Value0: {
                             EventDefinitions: uc.eventDefinitions.map(ed => ({

package/dist/events/constraints/Constraints.js.map

@@ -1 +1 @@
-{"version":3,"file":"Constraints.js","sourceRoot":"","sources":["../../../events/constraints/Constraints.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,qGAAqG;AAErG,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAM7D,OAAO,EAAE,iBAAiB,EAAqB,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAErD;;GAEG;AACH,MAAM,OAAO,WAAW;IAUC;IACA;IACA;IAXJ,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IAElE;;;;;OAKG;IACH,YACqB,WAAmB,EACnB,WAAgC,EAChC,gBAA0C;QAF1C,gBAAW,GAAX,WAAW,CAAQ;QACnB,gBAAW,GAAX,WAAW,CAAqB;QAChC,qBAAgB,GAAhB,gBAAgB,CAA0B;IAC5D,CAAC;IAEJ,kBAAkB;IAClB,KAAK,CAAC,QAAQ;QACV,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAExB,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,IAAK,IAA8B,EAAE,CAAC;YACvD,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;IACL,CAAC;IAED,kBAAkB;IAClB,KAAK,CAAC,QAAQ;QACV,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;YAC3D,MAAM,KAAK,GAAG;gBACV,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;gBAC5D,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;gBAC5D,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;aAC3D,CAAC;YAEF,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC3B,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;gBACpC,OAAO;oBACH,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,IAAI,EAAE,cAAc,CAAC,MAAM;oBAC3B,WAAW,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE;oBACzE,UAAU,EAAE;wBACR,MAAM,EAAE;4BACJ,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gCAC7C,WAAW,EAAE,EAAE,CAAC,WAAW;gCAC3B,UAAU,EAAE,EAAE,CAAC,UAAU;6BAC5B,CAAC,CAAC;4BACH,YAAY,EAAE,EAAE,CAAC,YAAY;yBAChC;wBACD,MAAM,EAAE,SAAS;qBACpB;oBACD,KAAK,EAAE,KAAK;iBACf,CAAC;YACN,CAAC;YAED,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC;gBACpC,OAAO;oBACH,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;oBAC9B,IAAI,EAAE,cAAc,CAAC,eAAe;oBACpC,WAAW,EAAE,EAAE;oBACf,UAAU,EAAE;wBACR,MAAM,EAAE,SAAS;wBACjB,MAAM,EAAE;4BACJ,YAAY,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC;yBAClC;qBACJ;oBACD,KAAK,EAAE,KAAK;iBACf,CAAC;YACN,CAAC;YAED,OAAO;gBACH,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,cAAc,CAAC,OAAO;gBAC5B,WAAW,EAAE,EAAE;gBACf,UAAU,EAAE,SAAS;gBACrB,KAAK,EAAE,KAAK;aACf,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO;QACX,CAAC;QAED,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC;YACxC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,WAAW,EAAE,WAAW;SAC3B,CAAC,CAAC;IACP,CAAC;IAED,kBAAkB;IAClB,MAAM,CAAC,EAAgB;QACnB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;CACJ"}
+{"version":3,"file":"Constraints.js","sourceRoot":"","sources":["../../../events/constraints/Constraints.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,qGAAqG;AAErG,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAM7D,OAAO,EAAE,iBAAiB,EAAqB,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAErD;;GAEG;AACH,MAAM,OAAO,WAAW;IAUC;IACA;IACA;IAXJ,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IAElE;;;;;OAKG;IACH,YACqB,WAAmB,EACnB,WAAgC,EAChC,gBAA0C;QAF1C,gBAAW,GAAX,WAAW,CAAQ;QACnB,gBAAW,GAAX,WAAW,CAAqB;QAChC,qBAAgB,GAAhB,gBAAgB,CAA0B;IAC5D,CAAC;IAEJ,kBAAkB;IAClB,KAAK,CAAC,QAAQ;QACV,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAExB,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,IAAK,IAA8B,EAAE,CAAC;YACvD,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;IACL,CAAC;IAED,kBAAkB;IAClB,KAAK,CAAC,QAAQ;QACV,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;YAC3D,MAAM,KAAK,GAAG;gBACV,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;gBAC5D,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;gBAC5D,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;aAC3D,CAAC;YAEF,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC3B,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;gBACpC,MAAM,mBAAmB,GAAG,EAAE,CAAC,uBAAuB,IAAI,EAAE,CAAC;gBAC7D,MAAM,iBAAiB,GAAG,EAAE,CAAC,sBAAsB,CAAC;gBACpD,OAAO;oBACH,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,IAAI,EAAE,cAAc,CAAC,MAAM;oBAC3B,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC;4BACrB,GAAG,CAAC,iBAAiB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;4BACrG,GAAG,mBAAmB;yBACzB,CAAC,CAAC;oBACH,UAAU,EAAE;wBACR,MAAM,EAAE;4BACJ,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gCAC7C,WAAW,EAAE,EAAE,CAAC,WAAW;gCAC3B,UAAU,EAAE,EAAE,CAAC,UAAU;6BAC5B,CAAC,CAAC;4BACH,YAAY,EAAE,EAAE,CAAC,YAAY;yBAChC;wBACD,MAAM,EAAE,SAAS;qBACpB;oBACD,KAAK,EAAE,KAAK;iBACf,CAAC;YACN,CAAC;YAED,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC;gBACpC,OAAO;oBACH,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;oBAC9B,IAAI,EAAE,cAAc,CAAC,eAAe;oBACpC,WAAW,EAAE,EAAE;oBACf,UAAU,EAAE;wBACR,MAAM,EAAE,SAAS;wBACjB,MAAM,EAAE;4BACJ,YAAY,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC;yBAClC;qBACJ;oBACD,KAAK,EAAE,KAAK;iBACf,CAAC;YACN,CAAC;YAED,OAAO;gBACH,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,cAAc,CAAC,OAAO;gBAC5B,WAAW,EAAE,EAAE;gBACf,UAAU,EAAE,SAAS;gBACrB,KAAK,EAAE,KAAK;aACf,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO;QACX,CAAC;QAED,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC;YACxC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,WAAW,EAAE,WAAW;SAC3B,CAAC,CAAC;IACP,CAAC;IAED,kBAAkB;IAClB,MAAM,CAAC,EAAgB;QACnB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;CACJ"}

package/dist/events/constraints/IUniqueConstraintBuilder.d.ts

@@ -24,7 +24,8 @@ export interface IUniqueConstraintBuilder {
      */
     ignoreCasing(): IUniqueConstraintBuilder;
     /**
-     * Specifies the event type that removes this unique constraint (e.g. a deletion event).
+     * Adds an event type that removes this unique property constraint (e.g. a deletion event).
+     * Repeated calls retain distinct event types in registration order.
      * @param eventType - The event constructor that removes the constraint.
      * @returns This builder for fluent chaining.
      */

package/dist/events/constraints/IUniqueConstraintBuilder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IUniqueConstraintBuilder.d.ts","sourceRoot":"","sources":["../../../events/constraints/IUniqueConstraintBuilder.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAErE;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,wBAAwB,CAAC;IAEjD;;;;;OAKG;IACH,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,GAAG,wBAAwB,CAAC;IAEhH;;;OAGG;IACH,YAAY,IAAI,wBAAwB,CAAC;IAEzC;;;;OAIG;IACH,WAAW,CAAC,SAAS,EAAE,QAAQ,GAAG,wBAAwB,CAAC;IAE3D;;;;OAIG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,wBAAwB,CAAC;IAEvD;;;;OAIG;IACH,eAAe,CAAC,eAAe,EAAE,MAAM,MAAM,GAAG,wBAAwB,CAAC;CAC5E"}
+{"version":3,"file":"IUniqueConstraintBuilder.d.ts","sourceRoot":"","sources":["../../../events/constraints/IUniqueConstraintBuilder.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAErE;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,wBAAwB,CAAC;IAEjD;;;;;OAKG;IACH,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,GAAG,wBAAwB,CAAC;IAEhH;;;OAGG;IACH,YAAY,IAAI,wBAAwB,CAAC;IAEzC;;;;;OAKG;IACH,WAAW,CAAC,SAAS,EAAE,QAAQ,GAAG,wBAAwB,CAAC;IAE3D;;;;OAIG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,wBAAwB,CAAC;IAEvD;;;;OAIG;IACH,eAAe,CAAC,eAAe,EAAE,MAAM,MAAM,GAAG,wBAAwB,CAAC;CAC5E"}

package/dist/events/constraints/UniqueConstraintBuilder.d.ts

@@ -10,7 +10,10 @@ export interface UniqueConstraintCapture {
     name?: string;
     eventDefinitions: UniqueConstraintEventEntry[];
     ignoreCasing: boolean;
+    /** The most recently specified removal event type (retained for legacy capture consumers). */
     removedWithEventTypeId?: string;
+    /** Distinct removal event types in registration order. */
+    removedWithEventTypeIds?: string[];
     message?: string;
 }
 /**

package/dist/events/constraints/UniqueConstraintBuilder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UniqueConstraintBuilder.d.ts","sourceRoot":"","sources":["../../../events/constraints/UniqueConstraintBuilder.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAoC,MAAM,sBAAsB,CAAC;AAEvG,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAUtE,8DAA8D;AAC9D,MAAM,WAAW,0BAA0B;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,kDAAkD;AAClD,MAAM,WAAW,uBAAuB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,0BAA0B,EAAE,CAAC;IAC/C,YAAY,EAAE,OAAO,CAAC;IACtB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,qBAAa,uBAAwB,YAAW,wBAAwB;IACpE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA0B;gBAEvC,OAAO,EAAE,uBAAuB;IAI5C,kBAAkB;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,wBAAwB;IAKhD,kBAAkB;IAClB,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,GAAG,wBAAwB;IAY/G,kBAAkB;IAClB,YAAY,IAAI,wBAAwB;IAKxC,kBAAkB;IAClB,WAAW,CAAC,SAAS,EAAE,QAAQ,GAAG,wBAAwB;IAM1D,kBAAkB;IAClB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,wBAAwB;IAKtD,kBAAkB;IAClB,eAAe,CAAC,eAAe,EAAE,MAAM,MAAM,GAAG,wBAAwB;CAI3E"}
+{"version":3,"file":"UniqueConstraintBuilder.d.ts","sourceRoot":"","sources":["../../../events/constraints/UniqueConstraintBuilder.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAoC,MAAM,sBAAsB,CAAC;AAEvG,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAUtE,8DAA8D;AAC9D,MAAM,WAAW,0BAA0B;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,kDAAkD;AAClD,MAAM,WAAW,uBAAuB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,0BAA0B,EAAE,CAAC;IAC/C,YAAY,EAAE,OAAO,CAAC;IACtB,8FAA8F;IAC9F,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,0DAA0D;IAC1D,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,qBAAa,uBAAwB,YAAW,wBAAwB;IACpE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA0B;gBAEvC,OAAO,EAAE,uBAAuB;IAI5C,kBAAkB;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,wBAAwB;IAKhD,kBAAkB;IAClB,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,GAAG,wBAAwB;IAY/G,kBAAkB;IAClB,YAAY,IAAI,wBAAwB;IAKxC,kBAAkB;IAClB,WAAW,CAAC,SAAS,EAAE,QAAQ,GAAG,wBAAwB;IAW1D,kBAAkB;IAClB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,wBAAwB;IAKtD,kBAAkB;IAClB,eAAe,CAAC,eAAe,EAAE,MAAM,MAAM,GAAG,wBAAwB;CAI3E"}

package/dist/events/constraints/UniqueConstraintBuilder.js

@@ -43,8 +43,13 @@ export class UniqueConstraintBuilder {
     }
     /** @inheritdoc */
     removedWith(eventType) {
-        const et = getEventTypeFor(eventType);
-        this._capture.removedWithEventTypeId = et.id.value;
+        const eventTypeId = getEventTypeFor(eventType).id.value;
+        const removalEventTypeIds = this._capture.removedWithEventTypeIds ??=
+            this._capture.removedWithEventTypeId ? [this._capture.removedWithEventTypeId] : [];
+        if (!removalEventTypeIds.includes(eventTypeId)) {
+            removalEventTypeIds.push(eventTypeId);
+        }
+        this._capture.removedWithEventTypeId = eventTypeId;
         return this;
     }
     /** @inheritdoc */

package/dist/events/constraints/UniqueConstraintBuilder.js.map

@@ -1 +1 @@
-{"version":3,"file":"UniqueConstraintBuilder.js","sourceRoot":"","sources":["../../../events/constraints/UniqueConstraintBuilder.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,qGAAqG;AAErG,OAAO,EAAiC,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,uEAAuE;AACvE,SAAS,mBAAmB,CAAI,QAA6B;IACzD,MAAM,OAAO,GAAG,IAAI,gCAAgC,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAU,CAAC,CAAC;IACrB,OAAO,OAAO,CAAC,IAAI,CAAC;AACxB,CAAC;AAiBD;;;GAGG;AACH,MAAM,OAAO,uBAAuB;IACf,QAAQ,CAA0B;IAEnD,YAAY,OAAgC;QACxC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC5B,CAAC;IAED,kBAAkB;IAClB,QAAQ,CAAC,IAAY;QACjB,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;QAC1B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,kBAAkB;IAClB,EAAE,CAAS,SAA8B,EAAE,GAAG,UAAsC;QAChF,MAAM,WAAW,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC;QACxD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACzF,IAAI,QAAQ,EAAE,CAAC;YACX,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,kBAAkB;IAClB,YAAY;QACR,IAAI,CAAC,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC;QAClC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,kBAAkB;IAClB,WAAW,CAAC,SAAmB;QAC3B,MAAM,EAAE,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC;QACnD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,kBAAkB;IAClB,WAAW,CAAC,OAAe;QACvB,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;QAChC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,kBAAkB;IAClB,eAAe,CAAC,eAA6B;QACzC,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,eAAe,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ"}
+{"version":3,"file":"UniqueConstraintBuilder.js","sourceRoot":"","sources":["../../../events/constraints/UniqueConstraintBuilder.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,qGAAqG;AAErG,OAAO,EAAiC,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,uEAAuE;AACvE,SAAS,mBAAmB,CAAI,QAA6B;IACzD,MAAM,OAAO,GAAG,IAAI,gCAAgC,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAU,CAAC,CAAC;IACrB,OAAO,OAAO,CAAC,IAAI,CAAC;AACxB,CAAC;AAoBD;;;GAGG;AACH,MAAM,OAAO,uBAAuB;IACf,QAAQ,CAA0B;IAEnD,YAAY,OAAgC;QACxC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC5B,CAAC;IAED,kBAAkB;IAClB,QAAQ,CAAC,IAAY;QACjB,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;QAC1B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,kBAAkB;IAClB,EAAE,CAAS,SAA8B,EAAE,GAAG,UAAsC;QAChF,MAAM,WAAW,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC;QACxD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACzF,IAAI,QAAQ,EAAE,CAAC;YACX,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,kBAAkB;IAClB,YAAY;QACR,IAAI,CAAC,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC;QAClC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,kBAAkB;IAClB,WAAW,CAAC,SAAmB;QAC3B,MAAM,WAAW,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC;QACxD,MAAM,mBAAmB,GAAG,IAAI,CAAC,QAAQ,CAAC,uBAAuB;YAC7D,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7C,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,sBAAsB,GAAG,WAAW,CAAC;QACnD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,kBAAkB;IAClB,WAAW,CAAC,OAAe;QACvB,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;QAChC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,kBAAkB;IAClB,eAAe,CAAC,eAA6B;QACzC,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,eAAe,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ"}

package/dist/index.d.ts

@@ -20,6 +20,7 @@ import * as correlation from './correlation';
 import * as transactions from './transactions';
 import * as eventStoreSubscriptions from './eventStoreSubscriptions';
 import * as compliance from './compliance';
+import * as confidentiality from './confidentiality';
 export { ChronicleClient } from './ChronicleClient';
 export { IncompatibleChronicleServer } from './connection/IncompatibleChronicleServer';
 export type { IChronicleClient } from './IChronicleClient';
@@ -53,5 +54,6 @@ export * from './correlation';
 export * from './transactions';
 export * from './eventStoreSubscriptions';
 export * from './compliance';
-export { events, eventSequences, reactors, reducers, seeding, readModels, projections, jobs, webhooks, externalServices, identities, observation, sinks, schemas, types, artifacts, identity, auditing, correlation, transactions, eventStoreSubscriptions, compliance, };
+export * from './confidentiality';
+export { events, eventSequences, reactors, reducers, seeding, readModels, projections, jobs, webhooks, externalServices, identities, observation, sinks, schemas, types, artifacts, identity, auditing, correlation, transactions, eventStoreSubscriptions, compliance, confidentiality, };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,cAAc,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,WAAW,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,IAAI,MAAM,QAAQ,CAAC;AAC/B,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,gBAAgB,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,WAAW,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,SAAS,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,WAAW,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,YAAY,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,uBAAuB,MAAM,2BAA2B,CAAC;AACrE,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AACvF,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,4BAA4B,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAEjF,cAAc,UAAU,CAAC;AACzB,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,cAAc,CAAC;AAE7B,OAAO,EACH,MAAM,EACN,cAAc,EACd,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,UAAU,EACV,WAAW,EACX,IAAI,EACJ,QAAQ,EACR,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,KAAK,EACL,OAAO,EACP,KAAK,EACL,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,uBAAuB,EACvB,UAAU,GACb,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,cAAc,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,WAAW,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,IAAI,MAAM,QAAQ,CAAC;AAC/B,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,gBAAgB,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,WAAW,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,SAAS,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,WAAW,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,YAAY,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,uBAAuB,MAAM,2BAA2B,CAAC;AACrE,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,eAAe,MAAM,mBAAmB,CAAC;AAErD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AACvF,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,4BAA4B,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAEjF,cAAc,UAAU,CAAC;AACzB,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAElC,OAAO,EACH,MAAM,EACN,cAAc,EACd,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,UAAU,EACV,WAAW,EACX,IAAI,EACJ,QAAQ,EACR,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,KAAK,EACL,OAAO,EACP,KAAK,EACL,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,uBAAuB,EACvB,UAAU,EACV,eAAe,GAClB,CAAC"}

package/dist/index.js

@@ -22,6 +22,7 @@ import * as correlation from './correlation';
 import * as transactions from './transactions';
 import * as eventStoreSubscriptions from './eventStoreSubscriptions';
 import * as compliance from './compliance';
+import * as confidentiality from './confidentiality';
 export { ChronicleClient } from './ChronicleClient';
 export { IncompatibleChronicleServer } from './connection/IncompatibleChronicleServer';
 export { ChronicleOptions } from './ChronicleOptions';
@@ -53,5 +54,6 @@ export * from './correlation';
 export * from './transactions';
 export * from './eventStoreSubscriptions';
 export * from './compliance';
-export { events, eventSequences, reactors, reducers, seeding, readModels, projections, jobs, webhooks, externalServices, identities, observation, sinks, schemas, types, artifacts, identity, auditing, correlation, transactions, eventStoreSubscriptions, compliance, };
+export * from './confidentiality';
+export { events, eventSequences, reactors, reducers, seeding, readModels, projections, jobs, webhooks, externalServices, identities, observation, sinks, schemas, types, artifacts, identity, auditing, correlation, transactions, eventStoreSubscriptions, compliance, confidentiality, };
 //# sourceMappingURL=index.js.map