@futdevpro/nts-dynamo 1.15.140 → 1.15.141

package/build/_modules/account-security/account-session.control-service.js

@@ -0,0 +1,277 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_AccountSession_ControlService = void 0;
+const crypto_1 = require("crypto");
+const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
+const global_settings_const_1 = require("../../_collections/global-settings.const");
+const account_refresh_token_state_type_enum_1 = require("./_enums/account-refresh-token-state.type-enum");
+const account_session_state_type_enum_1 = require("./_enums/account-session-state.type-enum");
+const DEFAULT_ACCESS_TTL_MS = 15 * 60 * 1000;
+const DEFAULT_REFRESH_TTL_MS = 30 * 24 * 60 * 60 * 1000;
+const DEFAULT_TOKEN_BYTES = 32;
+const DEFAULT_MAX_REFRESH_ROTATIONS = 100;
+/**
+ * Opaque, server-revocable account session families with one-time refresh rotation and replay detection.
+ */
+class DyNTS_AccountSession_ControlService {
+    adapter;
+    accessTtlMs;
+    refreshTtlMs;
+    tokenBytes;
+    maxRefreshRotations;
+    clock;
+    /** Creates a validated session service over an atomic persistence adapter. */
+    constructor(set) {
+        this.adapter = set.adapter;
+        this.accessTtlMs = set.accessTtlMs ?? DEFAULT_ACCESS_TTL_MS;
+        this.refreshTtlMs = set.refreshTtlMs ?? DEFAULT_REFRESH_TTL_MS;
+        this.tokenBytes = set.tokenBytes ?? DEFAULT_TOKEN_BYTES;
+        this.maxRefreshRotations = set.maxRefreshRotations ?? DEFAULT_MAX_REFRESH_ROTATIONS;
+        this.clock = set.clock ?? (() => new Date());
+        this.validateSettings();
+    }
+    /** Atomically persists a new session family before returning its raw credentials. */
+    async issueSession(subjectId, authorizationVersion, context) {
+        if (!subjectId
+            || subjectId.length > 256
+            || !Number.isSafeInteger(authorizationVersion)
+            || authorizationVersion < 0) {
+            throw this.buildUnauthorized('SESSION_SUBJECT_MISSING');
+        }
+        this.validateContext(context);
+        const now = this.clock();
+        const material = this.createMaterial({
+            subjectId: subjectId,
+            sessionId: (0, crypto_1.randomUUID)(),
+            familyId: (0, crypto_1.randomUUID)(),
+            generation: 0,
+            revision: 0,
+            authorizationVersion: authorizationVersion,
+            createdAt: now.toISOString(),
+            refreshExpiresAt: new Date(now.getTime() + this.refreshTtlMs).toISOString(),
+            materialCreatedAt: now.toISOString(),
+            context: context,
+        });
+        await this.adapter.createSession({
+            session: material.session,
+            refreshToken: material.refreshToken,
+        });
+        return this.toTokenPair(material);
+    }
+    /** Resolves an opaque access token through the server-side active-session record. */
+    async authenticateAccessToken(accessToken) {
+        if (!accessToken || accessToken.length > 512) {
+            throw this.buildUnauthorized('ACCESS_TOKEN_INVALID');
+        }
+        const now = this.clock();
+        const session = await this.adapter.findSessionByAccessTokenHash(this.hashToken(accessToken));
+        if (session?.state !== account_session_state_type_enum_1.DyNTS_AccountSessionState_Type.active
+            || session.accessTokenHash !== this.hashToken(accessToken)
+            || !this.isFutureDate(session.accessExpiresAt, now)
+            || !session.subjectId
+            || !session.sessionId
+            || !session.familyId
+            || !Number.isSafeInteger(session.authorizationVersion)
+            || session.authorizationVersion < 0) {
+            throw this.buildUnauthorized('ACCESS_TOKEN_INVALID');
+        }
+        return {
+            subjectId: session.subjectId,
+            sessionId: session.sessionId,
+            familyId: session.familyId,
+            authorizationVersion: session.authorizationVersion,
+        };
+    }
+    /** Rotates a one-time refresh token; replay revokes the complete token family. */
+    async rotateRefreshToken(refreshToken, context) {
+        if (!refreshToken || refreshToken.length > 512) {
+            throw this.buildUnauthorized('REFRESH_TOKEN_INVALID');
+        }
+        this.validateContext(context);
+        const now = this.clock();
+        const tokenHash = this.hashToken(refreshToken);
+        const token = await this.adapter.findRefreshTokenByHash(tokenHash);
+        if (!token) {
+            throw this.buildUnauthorized('REFRESH_TOKEN_INVALID');
+        }
+        if (token.state !== account_refresh_token_state_type_enum_1.DyNTS_AccountRefreshTokenState_Type.active) {
+            await this.adapter.revokeFamily(token.familyId, now.toISOString(), 'refresh-token-reuse');
+            throw this.buildUnauthorized('REFRESH_TOKEN_REUSE');
+        }
+        const session = await this.adapter.findSessionById(token.sessionId);
+        if (session?.state !== account_session_state_type_enum_1.DyNTS_AccountSessionState_Type.active
+            || session.familyId !== token.familyId
+            || session.subjectId !== token.subjectId
+            || session.generation !== token.generation
+            || token.tokenHash !== tokenHash
+            || !this.isFutureDate(token.expiresAt, now)
+            || !this.isFutureDate(session.refreshExpiresAt, now)) {
+            await this.adapter.revokeFamily(token.familyId, now.toISOString(), 'refresh-token-invalid-state');
+            throw this.buildUnauthorized('REFRESH_TOKEN_INVALID');
+        }
+        if (session.generation >= this.maxRefreshRotations) {
+            await this.adapter.revokeFamily(token.familyId, now.toISOString(), 'refresh-rotation-limit');
+            throw this.buildUnauthorized('REFRESH_ROTATION_LIMIT');
+        }
+        const material = this.createMaterial({
+            subjectId: session.subjectId,
+            sessionId: session.sessionId,
+            familyId: session.familyId,
+            generation: session.generation + 1,
+            revision: session.revision + 1,
+            authorizationVersion: session.authorizationVersion,
+            createdAt: session.createdAt,
+            refreshExpiresAt: session.refreshExpiresAt,
+            materialCreatedAt: now.toISOString(),
+            context: context,
+        });
+        const rotation = {
+            expectedSessionRevision: session.revision,
+            currentRefreshTokenHash: tokenHash,
+            usedAt: now.toISOString(),
+            replacementSession: material.session,
+            replacementRefreshToken: material.refreshToken,
+        };
+        const didRotate = await this.adapter.rotateSession(rotation);
+        if (!didRotate) {
+            const winner = await this.adapter.findRefreshTokenByHash(tokenHash);
+            if (winner?.state === account_refresh_token_state_type_enum_1.DyNTS_AccountRefreshTokenState_Type.used) {
+                await this.adapter.revokeFamily(token.familyId, now.toISOString(), 'refresh-token-reuse-race');
+                throw this.buildUnauthorized('REFRESH_TOKEN_REUSE');
+            }
+            throw this.buildUnauthorized('REFRESH_TOKEN_CONFLICT');
+        }
+        return this.toTokenPair(material);
+    }
+    /** Revokes one server-side session. */
+    async revokeSession(sessionId, reasonCode) {
+        this.validateRevocation(sessionId, reasonCode);
+        await this.adapter.revokeSession(sessionId, this.clock().toISOString(), reasonCode);
+    }
+    /** Revokes every session belonging to one subject. */
+    async revokeAllSubjectSessions(subjectId, reasonCode) {
+        this.validateRevocation(subjectId, reasonCode);
+        await this.adapter.revokeSubject(subjectId, this.clock().toISOString(), reasonCode);
+    }
+    /** Returns a user-safe session projection without token hashes. */
+    async listSubjectSessions(subjectId) {
+        if (!subjectId || subjectId.length > 256) {
+            throw this.buildUnauthorized('SESSION_SUBJECT_MISSING');
+        }
+        const sessions = await this.adapter.listSubjectSessions(subjectId);
+        return sessions.map((session) => ({
+            sessionId: session.sessionId,
+            state: session.state,
+            createdAt: session.createdAt,
+            lastRotatedAt: session.lastRotatedAt,
+            accessExpiresAt: session.accessExpiresAt,
+            refreshExpiresAt: session.refreshExpiresAt,
+            context: { ...session.context },
+        }));
+    }
+    createMaterial(set) {
+        const rawAccessToken = (0, crypto_1.randomBytes)(this.tokenBytes).toString('base64url');
+        const rawRefreshToken = (0, crypto_1.randomBytes)(this.tokenBytes).toString('base64url');
+        const materialCreatedAt = new Date(set.materialCreatedAt);
+        const accessExpiresAt = new Date(materialCreatedAt.getTime() + this.accessTtlMs).toISOString();
+        const session = {
+            sessionId: set.sessionId,
+            familyId: set.familyId,
+            subjectId: set.subjectId,
+            accessTokenHash: this.hashToken(rawAccessToken),
+            accessExpiresAt: accessExpiresAt,
+            refreshExpiresAt: set.refreshExpiresAt,
+            state: account_session_state_type_enum_1.DyNTS_AccountSessionState_Type.active,
+            generation: set.generation,
+            revision: set.revision,
+            authorizationVersion: set.authorizationVersion,
+            createdAt: set.createdAt,
+            lastRotatedAt: set.materialCreatedAt,
+            revokedAt: '',
+            revocationReason: '',
+            context: { ...set.context },
+        };
+        const refreshTokenRecord = {
+            tokenHash: this.hashToken(rawRefreshToken),
+            sessionId: set.sessionId,
+            familyId: set.familyId,
+            subjectId: set.subjectId,
+            generation: set.generation,
+            state: account_refresh_token_state_type_enum_1.DyNTS_AccountRefreshTokenState_Type.active,
+            expiresAt: set.refreshExpiresAt,
+            usedAt: '',
+        };
+        return {
+            rawAccessToken: rawAccessToken,
+            rawRefreshToken: rawRefreshToken,
+            session: session,
+            refreshToken: refreshTokenRecord,
+        };
+    }
+    toTokenPair(material) {
+        return {
+            sessionId: material.session.sessionId,
+            accessToken: material.rawAccessToken,
+            refreshToken: material.rawRefreshToken,
+            accessExpiresAt: material.session.accessExpiresAt,
+            refreshExpiresAt: material.session.refreshExpiresAt,
+        };
+    }
+    hashToken(token) {
+        return (0, crypto_1.createHash)('sha256').update(token).digest('hex');
+    }
+    validateSettings() {
+        if (!this.adapter
+            || !Number.isSafeInteger(this.accessTtlMs)
+            || this.accessTtlMs < 1_000
+            || this.accessTtlMs > 24 * 60 * 60 * 1000
+            || !Number.isSafeInteger(this.refreshTtlMs)
+            || this.refreshTtlMs <= this.accessTtlMs
+            || this.refreshTtlMs > 366 * 24 * 60 * 60 * 1000
+            || !Number.isSafeInteger(this.tokenBytes)
+            || this.tokenBytes < 32
+            || this.tokenBytes > 128
+            || !Number.isSafeInteger(this.maxRefreshRotations)
+            || this.maxRefreshRotations < 1
+            || this.maxRefreshRotations > 10_000) {
+            throw new fsm_dynamo_1.DyFM_Error({
+                status: 500,
+                errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|ACCOUNT_SECURITY|SESSION_SETTINGS_INVALID`,
+                message: 'The account session settings are outside supported safe bounds.',
+                userMessage: 'The account security service is unavailable.',
+                issuerService: this.constructor.name,
+            });
+        }
+    }
+    validateContext(context) {
+        if (!context
+            || typeof context.deviceName !== 'string'
+            || typeof context.ipAddressHash !== 'string'
+            || typeof context.userAgentHash !== 'string'
+            || context.deviceName.length > 160
+            || context.ipAddressHash.length > 128
+            || context.userAgentHash.length > 128) {
+            throw this.buildUnauthorized('SESSION_CONTEXT_INVALID');
+        }
+    }
+    validateRevocation(targetId, reasonCode) {
+        if (!targetId || !reasonCode || reasonCode.length > 128) {
+            throw this.buildUnauthorized('SESSION_REVOCATION_INVALID');
+        }
+    }
+    isFutureDate(value, now) {
+        const timestamp = new Date(value).getTime();
+        return Number.isFinite(timestamp) && timestamp > now.getTime();
+    }
+    buildUnauthorized(errorCode) {
+        return new fsm_dynamo_1.DyFM_Error({
+            status: 401,
+            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|ACCOUNT_SECURITY|${errorCode}`,
+            message: 'Opaque account credential validation failed.',
+            userMessage: 'The session is invalid or has expired. Please sign in again.',
+            issuerService: this.constructor.name,
+        });
+    }
+}
+exports.DyNTS_AccountSession_ControlService = DyNTS_AccountSession_ControlService;
+//# sourceMappingURL=account-session.control-service.js.map

package/build/_modules/account-security/account-session.control-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-session.control-service.js","sourceRoot":"","sources":["../../../src/_modules/account-security/account-session.control-service.ts"],"names":[],"mappings":";;;AAAA,mCAIgB;AAEhB,sDAAmD;AAEnD,oFAAiF;AACjF,0GAAqG;AACrG,8FAA0F;AAe1F,MAAM,qBAAqB,GAAW,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACrD,MAAM,sBAAsB,GAAW,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAChE,MAAM,mBAAmB,GAAW,EAAE,CAAC;AACvC,MAAM,6BAA6B,GAAW,GAAG,CAAC;AASlD;;GAEG;AACH,MAAa,mCAAmC;IAC7B,OAAO,CAAwC;IAC/C,WAAW,CAAS;IACpB,YAAY,CAAS;IACrB,UAAU,CAAS;IACnB,mBAAmB,CAAS;IAC5B,KAAK,CAAa;IAEnC,8EAA8E;IAC9E,YAAY,GAA2C;QACrD,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,qBAAqB,CAAC;QAC5D,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,IAAI,sBAAsB,CAAC;QAC/D,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,mBAAmB,CAAC;QACxD,IAAI,CAAC,mBAAmB,GAAG,GAAG,CAAC,mBAAmB,IAAI,6BAA6B,CAAC;QACpF,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAED,qFAAqF;IAC9E,KAAK,CAAC,YAAY,CACvB,SAAiB,EACjB,oBAA4B,EAC5B,OAA8C;QAE9C,IACE,CAAC,SAAS;eACP,SAAS,CAAC,MAAM,GAAG,GAAG;eACtB,CAAC,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC;eAC3C,oBAAoB,GAAG,CAAC,EAC3B,CAAC;YACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAE9B,MAAM,GAAG,GAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAA6B,IAAI,CAAC,cAAc,CAAC;YAC7D,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,IAAA,mBAAU,GAAE;YACvB,QAAQ,EAAE,IAAA,mBAAU,GAAE;YACtB,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,CAAC;YACX,oBAAoB,EAAE,oBAAoB;YAC1C,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;YAC5B,gBAAgB,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;YAC3E,iBAAiB,EAAE,GAAG,CAAC,WAAW,EAAE;YACpC,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;YAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,YAAY,EAAE,QAAQ,CAAC,YAAY;SACpC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,qFAAqF;IAC9E,KAAK,CAAC,uBAAuB,CAClC,WAAmB;QAEnB,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC7C,MAAM,IAAI,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,GAAG,GAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,OAAO,GACX,MAAM,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QAE/E,IACE,OAAO,EAAE,KAAK,KAAK,gEAA8B,CAAC,MAAM;eACrD,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;eACvD,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;eAChD,CAAC,OAAO,CAAC,SAAS;eAClB,CAAC,OAAO,CAAC,SAAS;eAClB,CAAC,OAAO,CAAC,QAAQ;eACjB,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,oBAAoB,CAAC;eACnD,OAAO,CAAC,oBAAoB,GAAG,CAAC,EACnC,CAAC;YACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;QACvD,CAAC;QAED,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;SACnD,CAAC;IACJ,CAAC;IAED,kFAAkF;IAC3E,KAAK,CAAC,kBAAkB,CAC7B,YAAoB,EACpB,OAA8C;QAE9C,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC/C,MAAM,IAAI,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAW,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,KAAK,GACT,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAEvD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,KAAK,2EAAmC,CAAC,MAAM,EAAE,CAAC;YAC/D,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,qBAAqB,CAAC,CAAC;YAE1F,MAAM,IAAI,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,OAAO,GACX,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAEtD,IACE,OAAO,EAAE,KAAK,KAAK,gEAA8B,CAAC,MAAM;eACrD,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;eACnC,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;eACrC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;eACvC,KAAK,CAAC,SAAS,KAAK,SAAS;eAC7B,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC;eACxC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,EACpD,CAAC;YACD,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,6BAA6B,CAAC,CAAC;YAElG,MAAM,IAAI,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACnD,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,wBAAwB,CAAC,CAAC;YAE7F,MAAM,IAAI,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,QAAQ,GAA6B,IAAI,CAAC,cAAc,CAAC;YAC7D,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU,GAAG,CAAC;YAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,CAAC;YAC9B,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;YAClD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,iBAAiB,EAAE,GAAG,CAAC,WAAW,EAAE;YACpC,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAyC;YACrD,uBAAuB,EAAE,OAAO,CAAC,QAAQ;YACzC,uBAAuB,EAAE,SAAS;YAClC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE;YACzB,kBAAkB,EAAE,QAAQ,CAAC,OAAO;YACpC,uBAAuB,EAAE,QAAQ,CAAC,YAAY;SAC/C,CAAC;QACF,MAAM,SAAS,GAAY,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAEtE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,MAAM,GACV,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;YAEvD,IAAI,MAAM,EAAE,KAAK,KAAK,2EAAmC,CAAC,IAAI,EAAE,CAAC;gBAC/D,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,0BAA0B,CAAC,CAAC;gBAE/F,MAAM,IAAI,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;YACtD,CAAC;YAED,MAAM,IAAI,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,uCAAuC;IAChC,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,UAAkB;QAC9D,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC/C,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,CAAC;IACtF,CAAC;IAED,sDAAsD;IAC/C,KAAK,CAAC,wBAAwB,CAAC,SAAiB,EAAE,UAAkB;QACzE,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC/C,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,CAAC;IACtF,CAAC;IAED,mEAAmE;IAC5D,KAAK,CAAC,mBAAmB,CAAC,SAAiB;QAChD,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,QAAQ,GACZ,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAEpD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAA6C,EAAsC,EAAE,CAAC,CAAC;YAC1G,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;SAChC,CAAC,CAAC,CAAC;IACN,CAAC;IAEO,cAAc,CAAC,GAWtB;QACC,MAAM,cAAc,GAAW,IAAA,oBAAW,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAClF,MAAM,eAAe,GAAW,IAAA,oBAAW,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnF,MAAM,iBAAiB,GAAS,IAAI,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAChE,MAAM,eAAe,GAAW,IAAI,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QACvG,MAAM,OAAO,GAAyC;YACpD,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;YAC/C,eAAe,EAAE,eAAe;YAChC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,KAAK,EAAE,gEAA8B,CAAC,MAAM;YAC5C,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;YAC9C,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,aAAa,EAAE,GAAG,CAAC,iBAAiB;YACpC,SAAS,EAAE,EAAE;YACb,gBAAgB,EAAE,EAAE;YACpB,OAAO,EAAE,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE;SAC5B,CAAC;QACF,MAAM,kBAAkB,GAA8C;YACpE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;YAC1C,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,2EAAmC,CAAC,MAAM;YACjD,SAAS,EAAE,GAAG,CAAC,gBAAgB;YAC/B,MAAM,EAAE,EAAE;SACX,CAAC;QAEF,OAAO;YACL,cAAc,EAAE,cAAc;YAC9B,eAAe,EAAE,eAAe;YAChC,OAAO,EAAE,OAAO;YAChB,YAAY,EAAE,kBAAkB;SACjC,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,QAAkC;QACpD,OAAO;YACL,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;YACrC,WAAW,EAAE,QAAQ,CAAC,cAAc;YACpC,YAAY,EAAE,QAAQ,CAAC,eAAe;YACtC,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,eAAe;YACjD,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,gBAAgB;SACpD,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,KAAa;QAC7B,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC;IAEO,gBAAgB;QACtB,IACE,CAAC,IAAI,CAAC,OAAO;eACV,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC;eACvC,IAAI,CAAC,WAAW,GAAG,KAAK;eACxB,IAAI,CAAC,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;eACtC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC;eACxC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,WAAW;eACrC,IAAI,CAAC,YAAY,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;eAC7C,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;eACtC,IAAI,CAAC,UAAU,GAAG,EAAE;eACpB,IAAI,CAAC,UAAU,GAAG,GAAG;eACrB,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC;eAC/C,IAAI,CAAC,mBAAmB,GAAG,CAAC;eAC5B,IAAI,CAAC,mBAAmB,GAAG,MAAM,EACpC,CAAC;YACD,MAAM,IAAI,uBAAU,CAAC;gBACnB,MAAM,EAAE,GAAG;gBACX,SAAS,EAAE,GAAG,6CAAqB,CAAC,mBAAmB,4CAA4C;gBACnG,OAAO,EAAE,iEAAiE;gBAC1E,WAAW,EAAE,8CAA8C;gBAC3D,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;aACrC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,OAA8C;QACpE,IACE,CAAC,OAAO;eACL,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ;eACtC,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ;eACzC,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ;eACzC,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG;eAC/B,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,GAAG;eAClC,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,GAAG,EACrC,CAAC;YACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,QAAgB,EAAE,UAAkB;QAC7D,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACxD,MAAM,IAAI,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,KAAa,EAAE,GAAS;QAC3C,MAAM,SAAS,GAAW,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QAEpD,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IACjE,CAAC;IAEO,iBAAiB,CAAC,SAAiB;QACzC,OAAO,IAAI,uBAAU,CAAC;YACpB,MAAM,EAAE,GAAG;YACX,SAAS,EAAE,GAAG,6CAAqB,CAAC,mBAAmB,qBAAqB,SAAS,EAAE;YACvF,OAAO,EAAE,8CAA8C;YACvD,WAAW,EAAE,8DAA8D;YAC3E,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;SACrC,CAAC,CAAC;IACL,CAAC;CACF;AA/UD,kFA+UC"}

package/build/_modules/account-security/index.d.ts

@@ -0,0 +1,24 @@
+export { DyNTS_AccountPassword_ControlService } from './account-password.control-service';
+export { DyNTS_AccountChallenge_ControlService } from './account-challenge.control-service';
+export { DyNTS_AccountSession_ControlService } from './account-session.control-service';
+export { DyNTS_AccountChallengePurpose_Type } from './_enums/account-challenge-purpose.type-enum';
+export { DyNTS_AccountRefreshTokenState_Type } from './_enums/account-refresh-token-state.type-enum';
+export { DyNTS_AccountSessionState_Type } from './_enums/account-session-state.type-enum';
+export { DyNTS_AccountRefreshTokenRecord_Interface } from './_models/account-refresh-token-record.interface';
+export { DyNTS_AccountChallengeAdapter_Interface } from './_models/account-challenge-adapter.interface';
+export { DyNTS_AccountChallengeIssued_Interface } from './_models/account-challenge-issued.interface';
+export { DyNTS_AccountChallengeRecord_Interface } from './_models/account-challenge-record.interface';
+export { DyNTS_AccountChallengeResult_Interface } from './_models/account-challenge-result.interface';
+export { DyNTS_AccountChallengeSettings_Interface } from './_models/account-challenge-settings.interface';
+export { DyNTS_AccountSessionAdapter_Interface } from './_models/account-session-adapter.interface';
+export { DyNTS_AccountSessionCreate_Interface } from './_models/account-session-create.interface';
+export { DyNTS_AccountSessionRotate_Interface } from './_models/account-session-rotate.interface';
+export { DyNTS_AccountSessionClaims_Interface } from './_models/account-session-claims.interface';
+export { DyNTS_AccountSessionContext_Interface } from './_models/account-session-context.interface';
+export { DyNTS_AccountSessionRecord_Interface } from './_models/account-session-record.interface';
+export { DyNTS_AccountSessionSettings_Interface } from './_models/account-session-settings.interface';
+export { DyNTS_AccountSessionTokenPair_Interface } from './_models/account-session-token-pair.interface';
+export { DyNTS_AccountSessionView_Interface } from './_models/account-session-view.interface';
+export { DyNTS_AccountPasswordPolicy_Interface } from './_models/account-password-policy.interface';
+export { DyNTS_AccountPasswordVerification_Interface } from './_models/account-password-verification.interface';
+//# sourceMappingURL=index.d.ts.map

package/build/_modules/account-security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/_modules/account-security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,oCAAoC,CAAC;AAC1F,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,EAAE,mCAAmC,EAAE,MAAM,mCAAmC,CAAC;AACxF,OAAO,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAClG,OAAO,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AACrG,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EACL,yCAAyC,EAC1C,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,wCAAwC,EAAE,MAAM,gDAAgD,CAAC;AAC1G,OAAO,EACL,qCAAqC,EACtC,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,uCAAuC,EAAE,MAAM,gDAAgD,CAAC;AACzG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EACL,qCAAqC,EACtC,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,2CAA2C,EAC5C,MAAM,mDAAmD,CAAC"}

package/build/_modules/account-security/index.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_AccountSessionState_Type = exports.DyNTS_AccountRefreshTokenState_Type = exports.DyNTS_AccountChallengePurpose_Type = exports.DyNTS_AccountSession_ControlService = exports.DyNTS_AccountChallenge_ControlService = exports.DyNTS_AccountPassword_ControlService = void 0;
+var account_password_control_service_1 = require("./account-password.control-service");
+Object.defineProperty(exports, "DyNTS_AccountPassword_ControlService", { enumerable: true, get: function () { return account_password_control_service_1.DyNTS_AccountPassword_ControlService; } });
+var account_challenge_control_service_1 = require("./account-challenge.control-service");
+Object.defineProperty(exports, "DyNTS_AccountChallenge_ControlService", { enumerable: true, get: function () { return account_challenge_control_service_1.DyNTS_AccountChallenge_ControlService; } });
+var account_session_control_service_1 = require("./account-session.control-service");
+Object.defineProperty(exports, "DyNTS_AccountSession_ControlService", { enumerable: true, get: function () { return account_session_control_service_1.DyNTS_AccountSession_ControlService; } });
+var account_challenge_purpose_type_enum_1 = require("./_enums/account-challenge-purpose.type-enum");
+Object.defineProperty(exports, "DyNTS_AccountChallengePurpose_Type", { enumerable: true, get: function () { return account_challenge_purpose_type_enum_1.DyNTS_AccountChallengePurpose_Type; } });
+var account_refresh_token_state_type_enum_1 = require("./_enums/account-refresh-token-state.type-enum");
+Object.defineProperty(exports, "DyNTS_AccountRefreshTokenState_Type", { enumerable: true, get: function () { return account_refresh_token_state_type_enum_1.DyNTS_AccountRefreshTokenState_Type; } });
+var account_session_state_type_enum_1 = require("./_enums/account-session-state.type-enum");
+Object.defineProperty(exports, "DyNTS_AccountSessionState_Type", { enumerable: true, get: function () { return account_session_state_type_enum_1.DyNTS_AccountSessionState_Type; } });
+//# sourceMappingURL=index.js.map

package/build/_modules/account-security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/_modules/account-security/index.ts"],"names":[],"mappings":";;;AAAA,uFAA0F;AAAjF,wJAAA,oCAAoC,OAAA;AAC7C,yFAA4F;AAAnF,0JAAA,qCAAqC,OAAA;AAC9C,qFAAwF;AAA/E,sJAAA,mCAAmC,OAAA;AAC5C,oGAAkG;AAAzF,yJAAA,kCAAkC,OAAA;AAC3C,wGAAqG;AAA5F,4JAAA,mCAAmC,OAAA;AAC5C,4FAA0F;AAAjF,iJAAA,8BAA8B,OAAA"}

package/build/_modules/privacy-lifecycle/_enums/privacy-consent-decision.type-enum.d.ts

@@ -0,0 +1,6 @@
+/** Append-only consent decisions. Withdrawal is a new event, never mutation of history. */
+export declare enum DyNTS_PrivacyConsentDecision_Type {
+    granted = "granted",
+    withdrawn = "withdrawn"
+}
+//# sourceMappingURL=privacy-consent-decision.type-enum.d.ts.map

package/build/_modules/privacy-lifecycle/_enums/privacy-consent-decision.type-enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-consent-decision.type-enum.d.ts","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_enums/privacy-consent-decision.type-enum.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,oBAAY,iCAAiC;IAC3C,OAAO,YAAY;IACnB,SAAS,cAAc;CACxB"}

package/build/_modules/privacy-lifecycle/_enums/privacy-consent-decision.type-enum.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyConsentDecision_Type = void 0;
+/** Append-only consent decisions. Withdrawal is a new event, never mutation of history. */
+var DyNTS_PrivacyConsentDecision_Type;
+(function (DyNTS_PrivacyConsentDecision_Type) {
+    DyNTS_PrivacyConsentDecision_Type["granted"] = "granted";
+    DyNTS_PrivacyConsentDecision_Type["withdrawn"] = "withdrawn";
+})(DyNTS_PrivacyConsentDecision_Type || (exports.DyNTS_PrivacyConsentDecision_Type = DyNTS_PrivacyConsentDecision_Type = {}));
+//# sourceMappingURL=privacy-consent-decision.type-enum.js.map

package/build/_modules/privacy-lifecycle/_enums/privacy-consent-decision.type-enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-consent-decision.type-enum.js","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_enums/privacy-consent-decision.type-enum.ts"],"names":[],"mappings":";;;AAAA,2FAA2F;AAC3F,IAAY,iCAGX;AAHD,WAAY,iCAAiC;IAC3C,wDAAmB,CAAA;IACnB,4DAAuB,CAAA;AACzB,CAAC,EAHW,iCAAiC,iDAAjC,iCAAiC,QAG5C"}

package/build/_modules/privacy-lifecycle/_enums/privacy-contributor-action.type-enum.d.ts

@@ -0,0 +1,11 @@
+/** Contributor action selected during privacy-request planning. */
+export declare enum DyNTS_PrivacyContributorAction_Type {
+    export = "export",
+    delete = "delete",
+    anonymize = "anonymize",
+    rectify = "rectify",
+    restrict = "restrict",
+    retainWithBasis = "retain-with-basis",
+    noData = "no-data"
+}
+//# sourceMappingURL=privacy-contributor-action.type-enum.d.ts.map

package/build/_modules/privacy-lifecycle/_enums/privacy-contributor-action.type-enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-contributor-action.type-enum.d.ts","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_enums/privacy-contributor-action.type-enum.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,oBAAY,mCAAmC;IAC7C,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,eAAe,sBAAsB;IACrC,MAAM,YAAY;CACnB"}

package/build/_modules/privacy-lifecycle/_enums/privacy-contributor-action.type-enum.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyContributorAction_Type = void 0;
+/** Contributor action selected during privacy-request planning. */
+var DyNTS_PrivacyContributorAction_Type;
+(function (DyNTS_PrivacyContributorAction_Type) {
+    DyNTS_PrivacyContributorAction_Type["export"] = "export";
+    DyNTS_PrivacyContributorAction_Type["delete"] = "delete";
+    DyNTS_PrivacyContributorAction_Type["anonymize"] = "anonymize";
+    DyNTS_PrivacyContributorAction_Type["rectify"] = "rectify";
+    DyNTS_PrivacyContributorAction_Type["restrict"] = "restrict";
+    DyNTS_PrivacyContributorAction_Type["retainWithBasis"] = "retain-with-basis";
+    DyNTS_PrivacyContributorAction_Type["noData"] = "no-data";
+})(DyNTS_PrivacyContributorAction_Type || (exports.DyNTS_PrivacyContributorAction_Type = DyNTS_PrivacyContributorAction_Type = {}));
+//# sourceMappingURL=privacy-contributor-action.type-enum.js.map

package/build/_modules/privacy-lifecycle/_enums/privacy-contributor-action.type-enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-contributor-action.type-enum.js","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_enums/privacy-contributor-action.type-enum.ts"],"names":[],"mappings":";;;AAAA,mEAAmE;AACnE,IAAY,mCAQX;AARD,WAAY,mCAAmC;IAC7C,wDAAiB,CAAA;IACjB,wDAAiB,CAAA;IACjB,8DAAuB,CAAA;IACvB,0DAAmB,CAAA;IACnB,4DAAqB,CAAA;IACrB,4EAAqC,CAAA;IACrC,yDAAkB,CAAA;AACpB,CAAC,EARW,mCAAmC,mDAAnC,mCAAmC,QAQ9C"}

package/build/_modules/privacy-lifecycle/_enums/privacy-contributor-outcome.type-enum.d.ts

@@ -0,0 +1,8 @@
+/** Durable result state for one contributor execution. */
+export declare enum DyNTS_PrivacyContributorOutcome_Type {
+    succeeded = "succeeded",
+    retainedWithBasis = "retained-with-basis",
+    noData = "no-data",
+    failed = "failed"
+}
+//# sourceMappingURL=privacy-contributor-outcome.type-enum.d.ts.map

package/build/_modules/privacy-lifecycle/_enums/privacy-contributor-outcome.type-enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-contributor-outcome.type-enum.d.ts","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_enums/privacy-contributor-outcome.type-enum.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,oBAAY,oCAAoC;IAC9C,SAAS,cAAc;IACvB,iBAAiB,wBAAwB;IACzC,MAAM,YAAY;IAClB,MAAM,WAAW;CAClB"}

package/build/_modules/privacy-lifecycle/_enums/privacy-contributor-outcome.type-enum.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyContributorOutcome_Type = void 0;
+/** Durable result state for one contributor execution. */
+var DyNTS_PrivacyContributorOutcome_Type;
+(function (DyNTS_PrivacyContributorOutcome_Type) {
+    DyNTS_PrivacyContributorOutcome_Type["succeeded"] = "succeeded";
+    DyNTS_PrivacyContributorOutcome_Type["retainedWithBasis"] = "retained-with-basis";
+    DyNTS_PrivacyContributorOutcome_Type["noData"] = "no-data";
+    DyNTS_PrivacyContributorOutcome_Type["failed"] = "failed";
+})(DyNTS_PrivacyContributorOutcome_Type || (exports.DyNTS_PrivacyContributorOutcome_Type = DyNTS_PrivacyContributorOutcome_Type = {}));
+//# sourceMappingURL=privacy-contributor-outcome.type-enum.js.map

package/build/_modules/privacy-lifecycle/_enums/privacy-contributor-outcome.type-enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-contributor-outcome.type-enum.js","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_enums/privacy-contributor-outcome.type-enum.ts"],"names":[],"mappings":";;;AAAA,0DAA0D;AAC1D,IAAY,oCAKX;AALD,WAAY,oCAAoC;IAC9C,+DAAuB,CAAA;IACvB,iFAAyC,CAAA;IACzC,0DAAkB,CAAA;IAClB,yDAAiB,CAAA;AACnB,CAAC,EALW,oCAAoC,oDAApC,oCAAoC,QAK/C"}

package/build/_modules/privacy-lifecycle/_enums/privacy-request-state.type-enum.d.ts

@@ -0,0 +1,16 @@
+/** Persisted lifecycle states for a GDPR data-subject request. */
+export declare enum DyNTS_PrivacyRequestState_Type {
+    received = "received",
+    identityVerified = "identity-verified",
+    scoped = "scoped",
+    planned = "planned",
+    executing = "executing",
+    verifying = "verifying",
+    completed = "completed",
+    partiallyCompleted = "partially-completed",
+    rejectedWithReason = "rejected-with-reason",
+    cancelled = "cancelled",
+    failedRetryable = "failed-retryable",
+    failedTerminal = "failed-terminal"
+}
+//# sourceMappingURL=privacy-request-state.type-enum.d.ts.map

package/build/_modules/privacy-lifecycle/_enums/privacy-request-state.type-enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-request-state.type-enum.d.ts","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_enums/privacy-request-state.type-enum.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,oBAAY,8BAA8B;IACxC,QAAQ,aAAa;IACrB,gBAAgB,sBAAsB;IACtC,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,SAAS,cAAc;IACvB,SAAS,cAAc;IACvB,kBAAkB,wBAAwB;IAC1C,kBAAkB,yBAAyB;IAC3C,SAAS,cAAc;IACvB,eAAe,qBAAqB;IACpC,cAAc,oBAAoB;CACnC"}

package/build/_modules/privacy-lifecycle/_enums/privacy-request-state.type-enum.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyRequestState_Type = void 0;
+/** Persisted lifecycle states for a GDPR data-subject request. */
+var DyNTS_PrivacyRequestState_Type;
+(function (DyNTS_PrivacyRequestState_Type) {
+    DyNTS_PrivacyRequestState_Type["received"] = "received";
+    DyNTS_PrivacyRequestState_Type["identityVerified"] = "identity-verified";
+    DyNTS_PrivacyRequestState_Type["scoped"] = "scoped";
+    DyNTS_PrivacyRequestState_Type["planned"] = "planned";
+    DyNTS_PrivacyRequestState_Type["executing"] = "executing";
+    DyNTS_PrivacyRequestState_Type["verifying"] = "verifying";
+    DyNTS_PrivacyRequestState_Type["completed"] = "completed";
+    DyNTS_PrivacyRequestState_Type["partiallyCompleted"] = "partially-completed";
+    DyNTS_PrivacyRequestState_Type["rejectedWithReason"] = "rejected-with-reason";
+    DyNTS_PrivacyRequestState_Type["cancelled"] = "cancelled";
+    DyNTS_PrivacyRequestState_Type["failedRetryable"] = "failed-retryable";
+    DyNTS_PrivacyRequestState_Type["failedTerminal"] = "failed-terminal";
+})(DyNTS_PrivacyRequestState_Type || (exports.DyNTS_PrivacyRequestState_Type = DyNTS_PrivacyRequestState_Type = {}));
+//# sourceMappingURL=privacy-request-state.type-enum.js.map

package/build/_modules/privacy-lifecycle/_enums/privacy-request-state.type-enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-request-state.type-enum.js","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_enums/privacy-request-state.type-enum.ts"],"names":[],"mappings":";;;AAAA,kEAAkE;AAClE,IAAY,8BAaX;AAbD,WAAY,8BAA8B;IACxC,uDAAqB,CAAA;IACrB,wEAAsC,CAAA;IACtC,mDAAiB,CAAA;IACjB,qDAAmB,CAAA;IACnB,yDAAuB,CAAA;IACvB,yDAAuB,CAAA;IACvB,yDAAuB,CAAA;IACvB,4EAA0C,CAAA;IAC1C,6EAA2C,CAAA;IAC3C,yDAAuB,CAAA;IACvB,sEAAoC,CAAA;IACpC,oEAAkC,CAAA;AACpC,CAAC,EAbW,8BAA8B,8CAA9B,8BAA8B,QAazC"}

package/build/_modules/privacy-lifecycle/_enums/privacy-request.type-enum.d.ts

@@ -0,0 +1,10 @@
+/** GDPR data-subject request categories supported by the shared lifecycle. */
+export declare enum DyNTS_PrivacyRequest_Type {
+    access = "access",
+    export = "export",
+    erasure = "erasure",
+    rectification = "rectification",
+    restriction = "restriction",
+    objection = "objection"
+}
+//# sourceMappingURL=privacy-request.type-enum.d.ts.map

package/build/_modules/privacy-lifecycle/_enums/privacy-request.type-enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-request.type-enum.d.ts","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_enums/privacy-request.type-enum.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,oBAAY,yBAAyB;IACnC,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,aAAa,kBAAkB;IAC/B,WAAW,gBAAgB;IAC3B,SAAS,cAAc;CACxB"}

package/build/_modules/privacy-lifecycle/_enums/privacy-request.type-enum.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyRequest_Type = void 0;
+/** GDPR data-subject request categories supported by the shared lifecycle. */
+var DyNTS_PrivacyRequest_Type;
+(function (DyNTS_PrivacyRequest_Type) {
+    DyNTS_PrivacyRequest_Type["access"] = "access";
+    DyNTS_PrivacyRequest_Type["export"] = "export";
+    DyNTS_PrivacyRequest_Type["erasure"] = "erasure";
+    DyNTS_PrivacyRequest_Type["rectification"] = "rectification";
+    DyNTS_PrivacyRequest_Type["restriction"] = "restriction";
+    DyNTS_PrivacyRequest_Type["objection"] = "objection";
+})(DyNTS_PrivacyRequest_Type || (exports.DyNTS_PrivacyRequest_Type = DyNTS_PrivacyRequest_Type = {}));
+//# sourceMappingURL=privacy-request.type-enum.js.map

package/build/_modules/privacy-lifecycle/_enums/privacy-request.type-enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-request.type-enum.js","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_enums/privacy-request.type-enum.ts"],"names":[],"mappings":";;;AAAA,8EAA8E;AAC9E,IAAY,yBAOX;AAPD,WAAY,yBAAyB;IACnC,8CAAiB,CAAA;IACjB,8CAAiB,CAAA;IACjB,gDAAmB,CAAA;IACnB,4DAA+B,CAAA;IAC/B,wDAA2B,CAAA;IAC3B,oDAAuB,CAAA;AACzB,CAAC,EAPW,yBAAyB,yCAAzB,yBAAyB,QAOpC"}

package/build/_modules/privacy-lifecycle/_models/privacy-consent-input.interface.d.ts

@@ -0,0 +1,12 @@
+import { DyNTS_PrivacyConsentDecision_Type } from '../_enums/privacy-consent-decision.type-enum';
+/** Input for one purpose-specific consent grant or withdrawal event. */
+export interface DyNTS_PrivacyConsentInput_Interface {
+    subjectId: string;
+    organizationId: string;
+    purposeCode: string;
+    policyVersion: string;
+    decision: DyNTS_PrivacyConsentDecision_Type;
+    sourceCode: string;
+    idempotencyKey: string;
+}
+//# sourceMappingURL=privacy-consent-input.interface.d.ts.map

package/build/_modules/privacy-lifecycle/_models/privacy-consent-input.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-consent-input.interface.d.ts","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_models/privacy-consent-input.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iCAAiC,EAAE,MAAM,8CAA8C,CAAC;AAEjG,wEAAwE;AACxE,MAAM,WAAW,mCAAmC;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,iCAAiC,CAAC;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB"}

package/build/_modules/privacy-lifecycle/_models/privacy-consent-input.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=privacy-consent-input.interface.js.map

package/build/_modules/privacy-lifecycle/_models/privacy-consent-input.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-consent-input.interface.js","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_models/privacy-consent-input.interface.ts"],"names":[],"mappings":""}

package/build/_modules/privacy-lifecycle/_models/privacy-consent-persistence-result.interface.d.ts

@@ -0,0 +1,7 @@
+import { DyNTS_PrivacyConsentRecord_Interface } from './privacy-consent-record.interface';
+/** Adapter-only append result retaining consent-event persistence metadata. */
+export interface DyNTS_PrivacyConsentPersistenceResult_Interface {
+    consent: DyNTS_PrivacyConsentRecord_Interface;
+    created: boolean;
+}
+//# sourceMappingURL=privacy-consent-persistence-result.interface.d.ts.map

package/build/_modules/privacy-lifecycle/_models/privacy-consent-persistence-result.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-consent-persistence-result.interface.d.ts","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_models/privacy-consent-persistence-result.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,oCAAoC,CAAC;AAE1F,+EAA+E;AAC/E,MAAM,WAAW,+CAA+C;IAC9D,OAAO,EAAE,oCAAoC,CAAC;IAC9C,OAAO,EAAE,OAAO,CAAC;CAClB"}

package/build/_modules/privacy-lifecycle/_models/privacy-consent-persistence-result.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=privacy-consent-persistence-result.interface.js.map

package/build/_modules/privacy-lifecycle/_models/privacy-consent-persistence-result.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-consent-persistence-result.interface.js","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_models/privacy-consent-persistence-result.interface.ts"],"names":[],"mappings":""}

package/build/_modules/privacy-lifecycle/_models/privacy-consent-record.interface.d.ts

@@ -0,0 +1,15 @@
+import { DyNTS_PrivacyConsentDecision_Type } from '../_enums/privacy-consent-decision.type-enum';
+/** Immutable purpose- and policy-version-specific consent event. */
+export interface DyNTS_PrivacyConsentRecord_Interface {
+    consentId: string;
+    subjectId: string;
+    organizationId: string;
+    purposeCode: string;
+    policyVersion: string;
+    decision: DyNTS_PrivacyConsentDecision_Type;
+    sourceCode: string;
+    idempotencyHash: string;
+    requestFingerprint: string;
+    occurredAt: string;
+}
+//# sourceMappingURL=privacy-consent-record.interface.d.ts.map

package/build/_modules/privacy-lifecycle/_models/privacy-consent-record.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-consent-record.interface.d.ts","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_models/privacy-consent-record.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iCAAiC,EAAE,MAAM,8CAA8C,CAAC;AAEjG,oEAAoE;AACpE,MAAM,WAAW,oCAAoC;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,iCAAiC,CAAC;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/build/_modules/privacy-lifecycle/_models/privacy-consent-record.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=privacy-consent-record.interface.js.map

package/build/_modules/privacy-lifecycle/_models/privacy-consent-record.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-consent-record.interface.js","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_models/privacy-consent-record.interface.ts"],"names":[],"mappings":""}

package/build/_modules/privacy-lifecycle/_models/privacy-consent-result.interface.d.ts

@@ -0,0 +1,7 @@
+import { DyNTS_PrivacyConsentView_Interface } from './privacy-consent-view.interface';
+/** Atomic append-or-replay result for one consent event. */
+export interface DyNTS_PrivacyConsentResult_Interface {
+    consent: DyNTS_PrivacyConsentView_Interface;
+    created: boolean;
+}
+//# sourceMappingURL=privacy-consent-result.interface.d.ts.map