@empire-builder-kit/runtime 1.0.0-beta.9 → 1.0.0-rc.1

package/src/data-lifecycle/contract.d.ts

@@ -0,0 +1,33 @@
+export type DataLifecycleRuntimeFailureClassification = 'data-lifecycle-input-invalid' | 'data-lifecycle-retention-page-invalid' | 'data-lifecycle-retention-scan-failed' | 'data-lifecycle-hold-expired' | 'data-lifecycle-rights-transition-invalid' | 'data-lifecycle-restore-controls-incomplete' | 'data-lifecycle-restore-reconciliation-failed' | 'data-lifecycle-evidence-unsafe';
+export declare class DataLifecycleRuntimeError extends Error {
+    readonly classification: DataLifecycleRuntimeFailureClassification;
+    readonly pointer: string;
+    constructor(classification: DataLifecycleRuntimeFailureClassification, pointer: string, message: string);
+}
+export declare const DATA_LIFECYCLE_ID_PATTERN: RegExp;
+export declare const DATA_LIFECYCLE_CODE_PATTERN: RegExp;
+export declare const DATA_LIFECYCLE_POLICY_VERSION_PATTERN: RegExp;
+export declare const DATA_LIFECYCLE_SAFE_REFERENCE_PATTERN: RegExp;
+export declare const DATA_LIFECYCLE_CURSOR_PATTERN: RegExp;
+export declare function failDataLifecycleRuntime(classification: DataLifecycleRuntimeFailureClassification, pointer: string, message: string): never;
+export declare function requireCanonicalTimestamp(value: unknown, pointer: string): string;
+export declare function requireBoundedString(value: unknown, pointer: string, pattern?: RegExp, maximumLength?: number): string;
+export declare function requireDataLifecycleId(value: unknown, pointer: string): string;
+/**
+ * Produces the one opaque identity used for a protected value across holds,
+ * lifecycle ledgers, retention work, and cross-Slice lifecycle events.
+ */
+export declare function createDataLifecyclePseudonymousReference(input: {
+    categoryId: string;
+    slice: string;
+    value: string;
+}): string;
+export declare function requireDataLifecycleCode(value: unknown, pointer: string): string;
+export declare function requirePolicyVersion(value: unknown, pointer: string): string;
+export declare function requireSafeReference(value: unknown, pointer: string): string;
+export declare function requireCursor(value: unknown, pointer: string): string;
+export declare function requireBoundedInteger(value: unknown, pointer: string, minimum: number, maximum: number): number;
+export declare function compareLifecycleStrings(left: string, right: string): number;
+export declare function requireUniqueLifecycleIds(values: readonly string[], pointer: string): string[];
+export declare function lifecycleIdempotencyKey(namespace: string, parts: readonly string[]): string;
+export declare function requireChronologicalTransition(previous: string, next: unknown, pointer: string): string;

package/src/data-lifecycle/contract.js

@@ -0,0 +1,118 @@
+import { createHash } from 'node:crypto';
+export class DataLifecycleRuntimeError extends Error {
+    constructor(classification, pointer, message) {
+        super(`${pointer}: ${message}`);
+        this.classification = classification;
+        this.pointer = pointer;
+        this.name = 'DataLifecycleRuntimeError';
+    }
+}
+export const DATA_LIFECYCLE_ID_PATTERN = /^[a-z][a-z0-9]*(?:[.-][a-z0-9]+){0,15}$/;
+export const DATA_LIFECYCLE_CODE_PATTERN = /^[a-z][a-z0-9]*(?:[-_.:][a-z0-9]+){0,15}$/;
+export const DATA_LIFECYCLE_POLICY_VERSION_PATTERN = /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)$/;
+export const DATA_LIFECYCLE_SAFE_REFERENCE_PATTERN = /^(?:sha256:[a-f0-9]{64}|opaque:[A-Za-z0-9_-]{16,128})$/;
+export const DATA_LIFECYCLE_CURSOR_PATTERN = /^[A-Za-z0-9_-]{1,256}$/;
+const DATA_LIFECYCLE_SLICE_PATTERN = /^[a-z][a-z0-9-]{0,62}$/;
+export function failDataLifecycleRuntime(classification, pointer, message) {
+    throw new DataLifecycleRuntimeError(classification, pointer, message);
+}
+export function requireCanonicalTimestamp(value, pointer) {
+    if (typeof value !== 'string' ||
+        value.length > 40 ||
+        !Number.isFinite(Date.parse(value)) ||
+        new Date(value).toISOString() !== value) {
+        failDataLifecycleRuntime('data-lifecycle-input-invalid', pointer, 'must be a canonical ISO-8601 timestamp');
+    }
+    return value;
+}
+export function requireBoundedString(value, pointer, pattern = DATA_LIFECYCLE_CODE_PATTERN, maximumLength = 256) {
+    const containsControlCharacter = typeof value === 'string' &&
+        Array.from(value).some((character) => {
+            var _a;
+            const codePoint = (_a = character.codePointAt(0)) !== null && _a !== void 0 ? _a : 0;
+            return ((codePoint >= 0 && codePoint <= 0x1f) ||
+                (codePoint >= 0x7f && codePoint <= 0x9f) ||
+                codePoint === 0x2028 ||
+                codePoint === 0x2029);
+        });
+    if (typeof value !== 'string' ||
+        value.length === 0 ||
+        value.length > maximumLength ||
+        value.trim() !== value ||
+        containsControlCharacter ||
+        !pattern.test(value)) {
+        failDataLifecycleRuntime('data-lifecycle-input-invalid', pointer, 'must be a bounded normalized value');
+    }
+    return value;
+}
+export function requireDataLifecycleId(value, pointer) {
+    return requireBoundedString(value, pointer, DATA_LIFECYCLE_ID_PATTERN, 256);
+}
+/**
+ * Produces the one opaque identity used for a protected value across holds,
+ * lifecycle ledgers, retention work, and cross-Slice lifecycle events.
+ */
+export function createDataLifecyclePseudonymousReference(input) {
+    const slice = requireBoundedString(input.slice, '/slice', DATA_LIFECYCLE_SLICE_PATTERN, 63);
+    const categoryId = requireDataLifecycleId(input.categoryId, '/categoryId');
+    const value = requireBoundedString(input.value, '/value', /^[^\p{Cc}\p{Zl}\p{Zp}]+$/u, 256);
+    return ('opaque:' +
+        createHash('sha256')
+            .update(slice, 'utf8')
+            .update('\0', 'utf8')
+            .update(categoryId, 'utf8')
+            .update('\0', 'utf8')
+            .update(value, 'utf8')
+            .digest('base64url'));
+}
+export function requireDataLifecycleCode(value, pointer) {
+    return requireBoundedString(value, pointer, DATA_LIFECYCLE_CODE_PATTERN, 256);
+}
+export function requirePolicyVersion(value, pointer) {
+    return requireBoundedString(value, pointer, DATA_LIFECYCLE_POLICY_VERSION_PATTERN, 64);
+}
+export function requireSafeReference(value, pointer) {
+    return requireBoundedString(value, pointer, DATA_LIFECYCLE_SAFE_REFERENCE_PATTERN, 136);
+}
+export function requireCursor(value, pointer) {
+    return requireBoundedString(value, pointer, DATA_LIFECYCLE_CURSOR_PATTERN, 256);
+}
+export function requireBoundedInteger(value, pointer, minimum, maximum) {
+    if (typeof value !== 'number' ||
+        !Number.isSafeInteger(value) ||
+        value < minimum ||
+        value > maximum) {
+        failDataLifecycleRuntime('data-lifecycle-input-invalid', pointer, `must be a safe integer from ${minimum} through ${maximum}`);
+    }
+    return value;
+}
+export function compareLifecycleStrings(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+export function requireUniqueLifecycleIds(values, pointer) {
+    if (!Array.isArray(values) || values.length > 1000) {
+        failDataLifecycleRuntime('data-lifecycle-input-invalid', pointer, 'must be an array with at most 1000 entries');
+    }
+    const result = values
+        .map((value, index) => requireDataLifecycleId(value, `${pointer}/${index}`))
+        .sort(compareLifecycleStrings);
+    for (let index = 1; index < result.length; index += 1) {
+        if (result[index] === result[index - 1]) {
+            failDataLifecycleRuntime('data-lifecycle-input-invalid', pointer, `contains duplicate ${result[index]}`);
+        }
+    }
+    return result;
+}
+export function lifecycleIdempotencyKey(namespace, parts) {
+    return `sha256:${createHash('sha256')
+        .update([namespace, ...parts].join('\0'), 'utf8')
+        .digest('hex')}`;
+}
+export function requireChronologicalTransition(previous, next, pointer) {
+    const timestamp = requireCanonicalTimestamp(next, pointer);
+    if (Date.parse(timestamp) < Date.parse(previous)) {
+        failDataLifecycleRuntime('data-lifecycle-rights-transition-invalid', pointer, 'must not precede the current workflow timestamp');
+    }
+    return timestamp;
+}
+//# sourceMappingURL=contract.js.map

package/src/data-lifecycle/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../../../../packages/runtime/src/data-lifecycle/contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAYzC,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YACW,cAAyD,EACzD,OAAe,EACxB,OAAe;QAEf,KAAK,CAAC,GAAG,OAAO,KAAK,OAAO,EAAE,CAAC,CAAC;QAJvB,mBAAc,GAAd,cAAc,CAA2C;QACzD,YAAO,GAAP,OAAO,CAAQ;QAIxB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,CAAC,MAAM,yBAAyB,GACpC,yCAAyC,CAAC;AAC5C,MAAM,CAAC,MAAM,2BAA2B,GACtC,2CAA2C,CAAC;AAC9C,MAAM,CAAC,MAAM,qCAAqC,GAChD,kDAAkD,CAAC;AACrD,MAAM,CAAC,MAAM,qCAAqC,GAChD,wDAAwD,CAAC;AAC3D,MAAM,CAAC,MAAM,6BAA6B,GAAG,wBAAwB,CAAC;AACtE,MAAM,4BAA4B,GAAG,wBAAwB,CAAC;AAE9D,MAAM,UAAU,wBAAwB,CACtC,cAAyD,EACzD,OAAe,EACf,OAAe;IAEf,MAAM,IAAI,yBAAyB,CAAC,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAAc,EACd,OAAe;IAEf,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,EAAE;QACjB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EACvC,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,OAAO,EACP,wCAAwC,CACzC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAc,EACd,OAAe,EACf,UAAkB,2BAA2B,EAC7C,aAAa,GAAG,GAAG;IAEnB,MAAM,wBAAwB,GAC5B,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;;YACnC,MAAM,SAAS,GAAG,MAAA,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,mCAAI,CAAC,CAAC;YAChD,OAAO,CACL,CAAC,SAAS,IAAI,CAAC,IAAI,SAAS,IAAI,IAAI,CAAC;gBACrC,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC;gBACxC,SAAS,KAAK,MAAM;gBACpB,SAAS,KAAK,MAAM,CACrB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,MAAM,GAAG,aAAa;QAC5B,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK;QACtB,wBAAwB;QACxB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EACpB,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,OAAO,EACP,oCAAoC,CACrC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc,EACd,OAAe;IAEf,OAAO,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,yBAAyB,EAAE,GAAG,CAAC,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wCAAwC,CAAC,KAIxD;IACC,MAAM,KAAK,GAAG,oBAAoB,CAChC,KAAK,CAAC,KAAK,EACX,QAAQ,EACR,4BAA4B,EAC5B,EAAE,CACH,CAAC;IACF,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,oBAAoB,CAChC,KAAK,CAAC,KAAK,EACX,QAAQ,EACR,2BAA2B,EAC3B,GAAG,CACJ,CAAC;IAEF,OAAO,CACL,SAAS;QACT,UAAU,CAAC,QAAQ,CAAC;aACjB,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;aACrB,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;aACpB,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC;aAC1B,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;aACpB,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;aACrB,MAAM,CAAC,WAAW,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc,EACd,OAAe;IAEf,OAAO,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,2BAA2B,EAAE,GAAG,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,OAAe;IAClE,OAAO,oBAAoB,CACzB,KAAK,EACL,OAAO,EACP,qCAAqC,EACrC,EAAE,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,OAAe;IAClE,OAAO,oBAAoB,CACzB,KAAK,EACL,OAAO,EACP,qCAAqC,EACrC,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,OAAe;IAC3D,OAAO,oBAAoB,CACzB,KAAK,EACL,OAAO,EACP,6BAA6B,EAC7B,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAc,EACd,OAAe,EACf,OAAe,EACf,OAAe;IAEf,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC5B,KAAK,GAAG,OAAO;QACf,KAAK,GAAG,OAAO,EACf,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,OAAO,EACP,+BAA+B,OAAO,YAAY,OAAO,EAAE,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,KAAa;IACjE,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAyB,EACzB,OAAe;IAEf,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,IAAK,EAAE,CAAC;QACpD,wBAAwB,CACtB,8BAA8B,EAC9B,OAAO,EACP,4CAA4C,CAC7C,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM;SAClB,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,KAAK,EAAE,GAAG,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;SAC3E,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YACxC,wBAAwB,CACtB,8BAA8B,EAC9B,OAAO,EACP,sBAAsB,MAAM,CAAC,KAAK,CAAC,EAAE,CACtC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,SAAiB,EACjB,KAAwB;IAExB,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC;SAClC,MAAM,CAAC,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;SAChD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,QAAgB,EAChB,IAAa,EACb,OAAe;IAEf,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,wBAAwB,CACtB,0CAA0C,EAC1C,OAAO,EACP,iDAAiD,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/src/data-lifecycle/event.d.ts

@@ -0,0 +1,28 @@
+export declare const DATA_LIFECYCLE_CHANGE_EVENT_KIND: "ebk-data-lifecycle-change";
+export declare const DATA_LIFECYCLE_CHANGE_EVENT_SCHEMA_VERSION: 1;
+export interface DataLifecycleChangeEventV1 {
+    action: 'correction' | 'deletion';
+    categoryId: string;
+    kind: typeof DATA_LIFECYCLE_CHANGE_EVENT_KIND;
+    occurredAt: string;
+    policyVersion: string;
+    pseudonymousKey: string;
+    requestRef: string;
+    schemaVersion: typeof DATA_LIFECYCLE_CHANGE_EVENT_SCHEMA_VERSION;
+    sourceSlice: string;
+}
+export interface CreateDataLifecycleChangeEventInput {
+    action: DataLifecycleChangeEventV1['action'];
+    categoryId: string;
+    occurredAt: string;
+    policyVersion: string;
+    pseudonymousKey: string;
+    requestRef: string;
+    sourceSlice: string;
+}
+/**
+ * Creates the minimized event used to propagate deletion/correction across
+ * Slice boundaries. It carries no subject identity or record content.
+ */
+export declare function createDataLifecycleChangeEvent(input: CreateDataLifecycleChangeEventInput): DataLifecycleChangeEventV1;
+export declare function parseDataLifecycleChangeEvent(value: unknown): DataLifecycleChangeEventV1;

package/src/data-lifecycle/event.js

@@ -0,0 +1,76 @@
+import { isBoundedSafeReference } from '../safe-reference.js';
+export const DATA_LIFECYCLE_CHANGE_EVENT_KIND = 'ebk-data-lifecycle-change';
+export const DATA_LIFECYCLE_CHANGE_EVENT_SCHEMA_VERSION = 1;
+const SAFE_NAME = /^[a-z][a-z0-9-]{0,62}$/;
+const PSEUDONYMOUS_REFERENCE = /^(?:opaque:[A-Za-z0-9_-]{16,128}|sha256:[a-f0-9]{64})$/;
+function exactRecord(value) {
+    if (value === null ||
+        typeof value !== 'object' ||
+        Array.isArray(value) ||
+        Object.getPrototypeOf(value) !== Object.prototype) {
+        throw new Error('[runtime/data-lifecycle] Lifecycle change event must be a plain object.');
+    }
+    const record = value;
+    const expected = [
+        'action',
+        'categoryId',
+        'kind',
+        'occurredAt',
+        'policyVersion',
+        'pseudonymousKey',
+        'requestRef',
+        'schemaVersion',
+        'sourceSlice',
+    ];
+    if (Object.keys(record).sort().join('\0') !== expected.sort().join('\0')) {
+        throw new Error('[runtime/data-lifecycle] Lifecycle change event fields are invalid.');
+    }
+    return record;
+}
+function safeToken(value, label) {
+    if (!isBoundedSafeReference(value)) {
+        throw new Error(`[runtime/data-lifecycle] Lifecycle change ${label} must be a bounded safe reference.`);
+    }
+    return value;
+}
+/**
+ * Creates the minimized event used to propagate deletion/correction across
+ * Slice boundaries. It carries no subject identity or record content.
+ */
+export function createDataLifecycleChangeEvent(input) {
+    if (!['correction', 'deletion'].includes(input.action) ||
+        !SAFE_NAME.test(input.sourceSlice) ||
+        !PSEUDONYMOUS_REFERENCE.test(input.pseudonymousKey) ||
+        !PSEUDONYMOUS_REFERENCE.test(input.requestRef) ||
+        !Number.isFinite(Date.parse(input.occurredAt))) {
+        throw new Error('[runtime/data-lifecycle] Lifecycle change event input is invalid.');
+    }
+    return Object.freeze({
+        action: input.action,
+        categoryId: safeToken(input.categoryId, 'category'),
+        kind: DATA_LIFECYCLE_CHANGE_EVENT_KIND,
+        occurredAt: new Date(input.occurredAt).toISOString(),
+        policyVersion: safeToken(input.policyVersion, 'policy version'),
+        pseudonymousKey: input.pseudonymousKey,
+        requestRef: input.requestRef,
+        schemaVersion: DATA_LIFECYCLE_CHANGE_EVENT_SCHEMA_VERSION,
+        sourceSlice: input.sourceSlice,
+    });
+}
+export function parseDataLifecycleChangeEvent(value) {
+    const record = exactRecord(value);
+    if (record['kind'] !== DATA_LIFECYCLE_CHANGE_EVENT_KIND ||
+        record['schemaVersion'] !== DATA_LIFECYCLE_CHANGE_EVENT_SCHEMA_VERSION) {
+        throw new Error('[runtime/data-lifecycle] Lifecycle change event version is unsupported.');
+    }
+    return createDataLifecycleChangeEvent({
+        action: record['action'],
+        categoryId: record['categoryId'],
+        occurredAt: record['occurredAt'],
+        policyVersion: record['policyVersion'],
+        pseudonymousKey: record['pseudonymousKey'],
+        requestRef: record['requestRef'],
+        sourceSlice: record['sourceSlice'],
+    });
+}
+//# sourceMappingURL=event.js.map

package/src/data-lifecycle/event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event.js","sourceRoot":"","sources":["../../../../../packages/runtime/src/data-lifecycle/event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,MAAM,CAAC,MAAM,gCAAgC,GAC3C,2BAAoC,CAAC;AACvC,MAAM,CAAC,MAAM,0CAA0C,GAAG,CAAU,CAAC;AAwBrE,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAC3C,MAAM,sBAAsB,GAC1B,wDAAwD,CAAC;AAE3D,SAAS,WAAW,CAAC,KAAc;IACjC,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,EACjD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,QAAQ,GAAG;QACf,QAAQ;QACR,YAAY;QACZ,MAAM;QACN,YAAY;QACZ,eAAe;QACf,iBAAiB;QACjB,YAAY;QACZ,eAAe;QACf,aAAa;KACd,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,6CAA6C,KAAK,oCAAoC,CACvF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAA0C;IAE1C,IACE,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAClD,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAClC,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;QACnD,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QAC9C,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;QACnD,IAAI,EAAE,gCAAgC;QACtC,UAAU,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACpD,aAAa,EAAE,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,gBAAgB,CAAC;QAC/D,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,aAAa,EAAE,0CAA0C;QACzD,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAc;IAEd,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,IACE,MAAM,CAAC,MAAM,CAAC,KAAK,gCAAgC;QACnD,MAAM,CAAC,eAAe,CAAC,KAAK,0CAA0C,EACtE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,8BAA8B,CAAC;QACpC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAyC;QAChE,UAAU,EAAE,MAAM,CAAC,YAAY,CAAW;QAC1C,UAAU,EAAE,MAAM,CAAC,YAAY,CAAW;QAC1C,aAAa,EAAE,MAAM,CAAC,eAAe,CAAW;QAChD,eAAe,EAAE,MAAM,CAAC,iBAAiB,CAAW;QACpD,UAAU,EAAE,MAAM,CAAC,YAAY,CAAW;QAC1C,WAAW,EAAE,MAAM,CAAC,aAAa,CAAW;KAC7C,CAAC,CAAC;AACL,CAAC"}

package/src/data-lifecycle/evidence.d.ts

@@ -0,0 +1,65 @@
+export declare const DATA_LIFECYCLE_EVIDENCE_SCHEMA_VERSION: 1;
+export declare const DATA_LIFECYCLE_EVIDENCE_SUMMARY_MAX_LENGTH = 240;
+export declare const DATA_LIFECYCLE_EVIDENCE_SUMMARY_INSPECTION_MAX_BYTES = 4096;
+export declare const DATA_LIFECYCLE_AUDIT_ACTIONS: readonly ["retention-report", "retention-apply", "export", "deletion", "correction", "hold", "restore-reconciliation", "privileged-read", "policy-change"];
+export type DataLifecycleAuditAction = (typeof DATA_LIFECYCLE_AUDIT_ACTIONS)[number];
+export type DataLifecycleEvidenceOutcome = 'succeeded' | 'failed' | 'held' | 'rejected' | 'retry-required';
+export interface DataLifecycleAuditRecordV1 {
+    action: DataLifecycleAuditAction;
+    actorRef: string;
+    authorityCode: string;
+    correlationRef: string;
+    kind: 'data-lifecycle-audit';
+    outcome: DataLifecycleEvidenceOutcome;
+    policyVersion: string;
+    purposeCode: string;
+    schemaVersion: typeof DATA_LIFECYCLE_EVIDENCE_SCHEMA_VERSION;
+    summary: string;
+    targetCategoryId: string;
+    timestamp: string;
+}
+export interface DataLifecycleEvidenceV1 {
+    categoryId: string;
+    completedAt: string;
+    counts: Readonly<Record<string, number>>;
+    errorCodes: readonly string[];
+    kind: 'data-lifecycle-evidence';
+    operation: DataLifecycleAuditAction;
+    outcome: DataLifecycleEvidenceOutcome;
+    policyVersion: string;
+    requestRef?: string;
+    schemaVersion: typeof DATA_LIFECYCLE_EVIDENCE_SCHEMA_VERSION;
+    startedAt: string;
+    summary: string;
+    systemIds: readonly string[];
+}
+/**
+ * Evidence diagnostics are metadata-only. Unsafe or oversized caller text is
+ * replaced wholesale rather than partially redacted.
+ */
+export declare function sanitizeDataLifecycleSummary(value: unknown): string;
+export declare function createDataLifecycleAuditRecord(options: {
+    action: DataLifecycleAuditAction;
+    actorRef: string;
+    authorityCode: string;
+    correlationRef: string;
+    outcome: DataLifecycleEvidenceOutcome;
+    policyVersion: string;
+    purposeCode: string;
+    summary?: unknown;
+    targetCategoryId: string;
+    timestamp: string;
+}): DataLifecycleAuditRecordV1;
+export declare function createDataLifecycleEvidence(options: {
+    categoryId: string;
+    completedAt: string;
+    counts: Readonly<Record<string, number>>;
+    errorCodes?: readonly string[];
+    operation: DataLifecycleAuditAction;
+    outcome: DataLifecycleEvidenceOutcome;
+    policyVersion: string;
+    requestRef?: string;
+    startedAt: string;
+    summary?: unknown;
+    systemIds: readonly string[];
+}): DataLifecycleEvidenceV1;

package/src/data-lifecycle/evidence.js

@@ -0,0 +1,162 @@
+import { CREDENTIAL_SHAPE_DEFINITIONS } from '../secrets/sensitive-patterns.js';
+import { compareLifecycleStrings, failDataLifecycleRuntime, requireBoundedInteger, requireBoundedString, requireCanonicalTimestamp, requireDataLifecycleCode, requireDataLifecycleId, requirePolicyVersion, requireSafeReference, } from './contract.js';
+export const DATA_LIFECYCLE_EVIDENCE_SCHEMA_VERSION = 1;
+export const DATA_LIFECYCLE_EVIDENCE_SUMMARY_MAX_LENGTH = 240;
+export const DATA_LIFECYCLE_EVIDENCE_SUMMARY_INSPECTION_MAX_BYTES = 4096;
+export const DATA_LIFECYCLE_AUDIT_ACTIONS = [
+    'retention-report',
+    'retention-apply',
+    'export',
+    'deletion',
+    'correction',
+    'hold',
+    'restore-reconciliation',
+    'privileged-read',
+    'policy-change',
+];
+const UNSAFE_SUMMARY_PATTERNS = [
+    ...CREDENTIAL_SHAPE_DEFINITIONS.map(({ pattern }) => pattern),
+    /\b\d{3}-\d{2}-\d{4}\b/,
+    /["']?(?:customerId|userId|subjectId|accountId)["']?\s*[:=]\s*["']?(?!sha256:|opaque:)\S+/i,
+];
+const EMAIL_PATTERN = /\b[A-Z0-9._%+-]+@([A-Z0-9.-]+\.[A-Z]{2,})\b/gi;
+const SAFE_EMAIL_DOMAINS = new Set([
+    'example.com',
+    'example.net',
+    'example.org',
+    'example.test',
+]);
+const EVIDENCE_COUNT_KEY_PATTERN = /^[a-z][A-Za-z0-9]*(?:[-_.][A-Za-z0-9]+){0,15}$/;
+function containsUnsafeEmail(value) {
+    var _a;
+    EMAIL_PATTERN.lastIndex = 0;
+    for (const match of value.matchAll(EMAIL_PATTERN)) {
+        const domain = (_a = match[1]) === null || _a === void 0 ? void 0 : _a.toLowerCase();
+        if (domain && !SAFE_EMAIL_DOMAINS.has(domain))
+            return true;
+    }
+    return false;
+}
+/**
+ * Evidence diagnostics are metadata-only. Unsafe or oversized caller text is
+ * replaced wholesale rather than partially redacted.
+ */
+export function sanitizeDataLifecycleSummary(value) {
+    if (typeof value !== 'string' ||
+        Buffer.byteLength(value, 'utf8') >
+            DATA_LIFECYCLE_EVIDENCE_SUMMARY_INSPECTION_MAX_BYTES) {
+        return 'Lifecycle diagnostic removed because safe metadata was unavailable.';
+    }
+    const normalized = Array.from(value, (character) => {
+        var _a;
+        const codePoint = (_a = character.codePointAt(0)) !== null && _a !== void 0 ? _a : 0;
+        return (codePoint >= 0 && codePoint <= 0x1f) ||
+            (codePoint >= 0x7f && codePoint <= 0x9f) ||
+            codePoint === 0x2028 ||
+            codePoint === 0x2029
+            ? ' '
+            : character;
+    })
+        .join('')
+        .replace(/\s+/g, ' ')
+        .trim();
+    if (normalized.length === 0) {
+        return 'Lifecycle diagnostic was unavailable.';
+    }
+    if (containsUnsafeEmail(normalized) ||
+        UNSAFE_SUMMARY_PATTERNS.some((pattern) => pattern.test(normalized))) {
+        return 'Lifecycle diagnostic removed because it contained protected data.';
+    }
+    return normalized.slice(0, DATA_LIFECYCLE_EVIDENCE_SUMMARY_MAX_LENGTH);
+}
+function requireAuditAction(value, pointer) {
+    if (!DATA_LIFECYCLE_AUDIT_ACTIONS.includes(value)) {
+        failDataLifecycleRuntime('data-lifecycle-input-invalid', pointer, 'audit action is unsupported');
+    }
+    return value;
+}
+function requireOutcome(value, pointer) {
+    const outcomes = [
+        'succeeded',
+        'failed',
+        'held',
+        'rejected',
+        'retry-required',
+    ];
+    if (!outcomes.includes(value)) {
+        failDataLifecycleRuntime('data-lifecycle-input-invalid', pointer, 'evidence outcome is unsupported');
+    }
+    return value;
+}
+function uniqueCodes(values, pointer, maximum) {
+    if (!Array.isArray(values) || values.length > maximum) {
+        failDataLifecycleRuntime('data-lifecycle-input-invalid', pointer, `must contain at most ${maximum} entries`);
+    }
+    const codes = values
+        .map((value, index) => requireDataLifecycleCode(value, `${pointer}/${index}`))
+        .sort(compareLifecycleStrings);
+    for (let index = 1; index < codes.length; index += 1) {
+        if (codes[index] === codes[index - 1]) {
+            failDataLifecycleRuntime('data-lifecycle-input-invalid', pointer, `contains duplicate ${codes[index]}`);
+        }
+    }
+    return codes;
+}
+function normalizeCounts(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        failDataLifecycleRuntime('data-lifecycle-input-invalid', '/counts', 'must be a bounded metadata count record');
+    }
+    const entries = Object.entries(value);
+    if (entries.length > 32) {
+        failDataLifecycleRuntime('data-lifecycle-input-invalid', '/counts', 'must contain at most 32 count fields');
+    }
+    const result = {};
+    for (const [key, count] of entries.sort(([left], [right]) => compareLifecycleStrings(left, right))) {
+        const normalizedKey = requireBoundedString(key, `/counts/${key}`, EVIDENCE_COUNT_KEY_PATTERN, 128);
+        result[normalizedKey] = requireBoundedInteger(count, `/counts/${key}`, 0, Number.MAX_SAFE_INTEGER);
+    }
+    return result;
+}
+export function createDataLifecycleAuditRecord(options) {
+    return {
+        action: requireAuditAction(options.action, '/action'),
+        actorRef: requireSafeReference(options.actorRef, '/actorRef'),
+        authorityCode: requireDataLifecycleCode(options.authorityCode, '/authorityCode'),
+        correlationRef: requireSafeReference(options.correlationRef, '/correlationRef'),
+        kind: 'data-lifecycle-audit',
+        outcome: requireOutcome(options.outcome, '/outcome'),
+        policyVersion: requirePolicyVersion(options.policyVersion, '/policyVersion'),
+        purposeCode: requireDataLifecycleCode(options.purposeCode, '/purposeCode'),
+        schemaVersion: DATA_LIFECYCLE_EVIDENCE_SCHEMA_VERSION,
+        summary: sanitizeDataLifecycleSummary(options.summary),
+        targetCategoryId: requireDataLifecycleId(options.targetCategoryId, '/targetCategoryId'),
+        timestamp: requireCanonicalTimestamp(options.timestamp, '/timestamp'),
+    };
+}
+export function createDataLifecycleEvidence(options) {
+    var _a;
+    const startedAt = requireCanonicalTimestamp(options.startedAt, '/startedAt');
+    const completedAt = requireCanonicalTimestamp(options.completedAt, '/completedAt');
+    if (Date.parse(completedAt) < Date.parse(startedAt)) {
+        failDataLifecycleRuntime('data-lifecycle-input-invalid', '/completedAt', 'cannot precede evidence start');
+    }
+    const evidence = {
+        categoryId: requireDataLifecycleId(options.categoryId, '/categoryId'),
+        completedAt,
+        counts: normalizeCounts(options.counts),
+        errorCodes: uniqueCodes((_a = options.errorCodes) !== null && _a !== void 0 ? _a : [], '/errorCodes', 32),
+        kind: 'data-lifecycle-evidence',
+        operation: requireAuditAction(options.operation, '/operation'),
+        outcome: requireOutcome(options.outcome, '/outcome'),
+        policyVersion: requirePolicyVersion(options.policyVersion, '/policyVersion'),
+        schemaVersion: DATA_LIFECYCLE_EVIDENCE_SCHEMA_VERSION,
+        startedAt,
+        summary: sanitizeDataLifecycleSummary(options.summary),
+        systemIds: uniqueCodes(options.systemIds, '/systemIds', 100),
+    };
+    if (options.requestRef !== undefined) {
+        evidence.requestRef = requireSafeReference(options.requestRef, '/requestRef');
+    }
+    return evidence;
+}
+//# sourceMappingURL=evidence.js.map

package/src/data-lifecycle/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../../../packages/runtime/src/data-lifecycle/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EACzB,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,eAAe,CAAC;AAEvB,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAU,CAAC;AACjE,MAAM,CAAC,MAAM,0CAA0C,GAAG,GAAG,CAAC;AAC9D,MAAM,CAAC,MAAM,oDAAoD,GAAG,IAAK,CAAC;AAE1E,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,kBAAkB;IAClB,iBAAiB;IACjB,QAAQ;IACR,UAAU;IACV,YAAY;IACZ,MAAM;IACN,wBAAwB;IACxB,iBAAiB;IACjB,eAAe;CACP,CAAC;AAuCX,MAAM,uBAAuB,GAAsB;IACjD,GAAG,4BAA4B,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC;IAC7D,uBAAuB;IACvB,2FAA2F;CAC5F,CAAC;AACF,MAAM,aAAa,GAAG,+CAA+C,CAAC;AACtE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,aAAa;IACb,aAAa;IACb,aAAa;IACb,cAAc;CACf,CAAC,CAAC;AACH,MAAM,0BAA0B,GAC9B,gDAAgD,CAAC;AAEnD,SAAS,mBAAmB,CAAC,KAAa;;IACxC,aAAa,CAAC,SAAS,GAAG,CAAC,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,MAAA,KAAK,CAAC,CAAC,CAAC,0CAAE,WAAW,EAAE,CAAC;QACvC,IAAI,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;YAC9B,oDAAoD,EACtD,CAAC;QACD,OAAO,qEAAqE,CAAC;IAC/E,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,EAAE;;QACjD,MAAM,SAAS,GAAG,MAAA,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,mCAAI,CAAC,CAAC;QAChD,OAAO,CAAC,SAAS,IAAI,CAAC,IAAI,SAAS,IAAI,IAAI,CAAC;YAC1C,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC;YACxC,SAAS,KAAK,MAAM;YACpB,SAAS,KAAK,MAAM;YACpB,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC,CAAC;SACC,IAAI,CAAC,EAAE,CAAC;SACR,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;IACV,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,uCAAuC,CAAC;IACjD,CAAC;IACD,IACE,mBAAmB,CAAC,UAAU,CAAC;QAC/B,uBAAuB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EACnE,CAAC;QACD,OAAO,mEAAmE,CAAC;IAC7E,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,0CAA0C,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,kBAAkB,CACzB,KAA+B,EAC/B,OAAe;IAEf,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,wBAAwB,CACtB,8BAA8B,EAC9B,OAAO,EACP,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,KAAmC,EACnC,OAAe;IAEf,MAAM,QAAQ,GAA4C;QACxD,WAAW;QACX,QAAQ;QACR,MAAM;QACN,UAAU;QACV,gBAAgB;KACjB,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,wBAAwB,CACtB,8BAA8B,EAC9B,OAAO,EACP,iCAAiC,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAClB,MAAyB,EACzB,OAAe,EACf,OAAe;IAEf,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QACtD,wBAAwB,CACtB,8BAA8B,EAC9B,OAAO,EACP,wBAAwB,OAAO,UAAU,CAC1C,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM;SACjB,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACpB,wBAAwB,CAAC,KAAK,EAAE,GAAG,OAAO,IAAI,KAAK,EAAE,CAAC,CACvD;SACA,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YACtC,wBAAwB,CACtB,8BAA8B,EAC9B,OAAO,EACP,sBAAsB,KAAK,CAAC,KAAK,CAAC,EAAE,CACrC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CACtB,KAAuC;IAEvC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,wBAAwB,CACtB,8BAA8B,EAC9B,SAAS,EACT,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACxB,wBAAwB,CACtB,8BAA8B,EAC9B,SAAS,EACT,sCAAsC,CACvC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAC1D,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CACrC,EAAE,CAAC;QACF,MAAM,aAAa,GAAG,oBAAoB,CACxC,GAAG,EACH,WAAW,GAAG,EAAE,EAChB,0BAA0B,EAC1B,GAAG,CACJ,CAAC;QACF,MAAM,CAAC,aAAa,CAAC,GAAG,qBAAqB,CAC3C,KAAK,EACL,WAAW,GAAG,EAAE,EAChB,CAAC,EACD,MAAM,CAAC,gBAAgB,CACxB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAW9C;IACC,OAAO;QACL,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;QACrD,QAAQ,EAAE,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC;QAC7D,aAAa,EAAE,wBAAwB,CACrC,OAAO,CAAC,aAAa,EACrB,gBAAgB,CACjB;QACD,cAAc,EAAE,oBAAoB,CAClC,OAAO,CAAC,cAAc,EACtB,iBAAiB,CAClB;QACD,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC;QACpD,aAAa,EAAE,oBAAoB,CACjC,OAAO,CAAC,aAAa,EACrB,gBAAgB,CACjB;QACD,WAAW,EAAE,wBAAwB,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC;QAC1E,aAAa,EAAE,sCAAsC;QACrD,OAAO,EAAE,4BAA4B,CAAC,OAAO,CAAC,OAAO,CAAC;QACtD,gBAAgB,EAAE,sBAAsB,CACtC,OAAO,CAAC,gBAAgB,EACxB,mBAAmB,CACpB;QACD,SAAS,EAAE,yBAAyB,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAY3C;;IACC,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,yBAAyB,CAC3C,OAAO,CAAC,WAAW,EACnB,cAAc,CACf,CAAC;IACF,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,wBAAwB,CACtB,8BAA8B,EAC9B,cAAc,EACd,+BAA+B,CAChC,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAA4B;QACxC,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC;QACrE,WAAW;QACX,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC;QACvC,UAAU,EAAE,WAAW,CAAC,MAAA,OAAO,CAAC,UAAU,mCAAI,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC;QACpE,IAAI,EAAE,yBAAyB;QAC/B,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC;QAC9D,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC;QACpD,aAAa,EAAE,oBAAoB,CACjC,OAAO,CAAC,aAAa,EACrB,gBAAgB,CACjB;QACD,aAAa,EAAE,sCAAsC;QACrD,SAAS;QACT,OAAO,EAAE,4BAA4B,CAAC,OAAO,CAAC,OAAO,CAAC;QACtD,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC;KAC7D,CAAC;IACF,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,QAAQ,CAAC,UAAU,GAAG,oBAAoB,CACxC,OAAO,CAAC,UAAU,EAClB,aAAa,CACd,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/src/data-lifecycle/holds.d.ts

@@ -0,0 +1,29 @@
+export declare const DATA_LIFECYCLE_RUNTIME_HOLD_PURPOSES: readonly ["legal", "security", "fraud", "support", "incident"];
+export type DataLifecycleRuntimeHoldPurpose = (typeof DATA_LIFECYCLE_RUNTIME_HOLD_PURPOSES)[number];
+export type DataLifecycleRuntimeHoldEffect = 'block-deletion' | 'block-export';
+export interface DataLifecycleRuntimeHoldV1 {
+    categoryId: string;
+    effects: readonly DataLifecycleRuntimeHoldEffect[];
+    expiresAt: string;
+    holdId: string;
+    issuerCode: string;
+    purpose: DataLifecycleRuntimeHoldPurpose;
+    releasedAt?: string;
+    reviewAt: string;
+    scopeRef: string;
+    startsAt: string;
+    status: 'active' | 'released';
+}
+export interface DataLifecycleHoldEvaluationV1 {
+    blocked: boolean;
+    holdIds: readonly string[];
+    operation: 'deletion' | 'export';
+}
+export declare function normalizeDataLifecycleRuntimeHold(value: DataLifecycleRuntimeHoldV1, index: number): DataLifecycleRuntimeHoldV1;
+export declare function evaluateDataLifecycleHolds(options: {
+    categoryId: string;
+    holds: readonly DataLifecycleRuntimeHoldV1[];
+    now: string;
+    operation: 'deletion' | 'export';
+    scopeRef: string;
+}): DataLifecycleHoldEvaluationV1;