@futdevpro/nts-dynamo 1.15.140 → 1.15.142

package/build/_modules/privacy-lifecycle/index.d.ts

@@ -0,0 +1,33 @@
+export { DyNTS_PrivacyLifecycle_ControlService } from './privacy-lifecycle.control-service';
+export { DyNTS_PrivacyLedger_ControlService } from './privacy-ledger.control-service';
+export { DyNTS_PrivacyConsentDecision_Type } from './_enums/privacy-consent-decision.type-enum';
+export { DyNTS_PrivacyContributorAction_Type } from './_enums/privacy-contributor-action.type-enum';
+export { DyNTS_PrivacyContributorOutcome_Type } from './_enums/privacy-contributor-outcome.type-enum';
+export { DyNTS_PrivacyRequestState_Type } from './_enums/privacy-request-state.type-enum';
+export { DyNTS_PrivacyRequest_Type } from './_enums/privacy-request.type-enum';
+export { DyNTS_PrivacyContributorContext_Interface } from './_models/privacy-contributor-context.interface';
+export { DyNTS_PrivacyContributorOutcome_Interface } from './_models/privacy-contributor-outcome.interface';
+export { DyNTS_PrivacyContributorPlan_Interface } from './_models/privacy-contributor-plan.interface';
+export { DyNTS_PrivacyContributor_Interface } from './_models/privacy-contributor.interface';
+export { DyNTS_PrivacyLifecycleAdapter_Interface } from './_models/privacy-lifecycle-adapter.interface';
+export { DyNTS_PrivacyLifecycleSettings_Interface } from './_models/privacy-lifecycle-settings.interface';
+export { DyNTS_PrivacyConsentInput_Interface } from './_models/privacy-consent-input.interface';
+export { DyNTS_PrivacyConsentPersistenceResult_Interface } from './_models/privacy-consent-persistence-result.interface';
+export { DyNTS_PrivacyConsentRecord_Interface } from './_models/privacy-consent-record.interface';
+export { DyNTS_PrivacyConsentResult_Interface } from './_models/privacy-consent-result.interface';
+export { DyNTS_PrivacyConsentView_Interface } from './_models/privacy-consent-view.interface';
+export { DyNTS_PrivacyLedgerAdapter_Interface } from './_models/privacy-ledger-adapter.interface';
+export { DyNTS_PrivacyLedgerResult_Interface } from './_models/privacy-ledger-result.interface';
+export { DyNTS_PrivacyLedgerSettings_Interface } from './_models/privacy-ledger-settings.interface';
+export { DyNTS_PrivacyLegalAcceptanceInput_Interface } from './_models/privacy-legal-acceptance-input.interface';
+export { DyNTS_PrivacyLegalAcceptancePersistenceResult_Interface } from './_models/privacy-legal-acceptance-persistence-result.interface';
+export { DyNTS_PrivacyLegalAcceptanceResult_Interface } from './_models/privacy-legal-acceptance-result.interface';
+export { DyNTS_PrivacyLegalAcceptanceView_Interface } from './_models/privacy-legal-acceptance-view.interface';
+export { DyNTS_PrivacyLegalAcceptance_Interface } from './_models/privacy-legal-acceptance.interface';
+export { DyNTS_PrivacyRequestCreateResult_Interface } from './_models/privacy-request-create-result.interface';
+export { DyNTS_PrivacyRequestOpen_Interface } from './_models/privacy-request-open.interface';
+export { DyNTS_PrivacyRequestPersistenceCreateResult_Interface } from './_models/privacy-request-persistence-create-result.interface';
+export { DyNTS_PrivacyRequestRecord_Interface } from './_models/privacy-request-record.interface';
+export { DyNTS_PrivacyRequestResult_Interface } from './_models/privacy-request-result.interface';
+export { DyNTS_PrivacyRequestView_Interface } from './_models/privacy-request-view.interface';
+//# sourceMappingURL=index.d.ts.map

package/build/_modules/privacy-lifecycle/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,EAAE,kCAAkC,EAAE,MAAM,kCAAkC,CAAC;AACtF,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,iDAAiD,CAAC;AAC5G,OAAO,EAAE,yCAAyC,EAAE,MAAM,iDAAiD,CAAC;AAC5G,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,wCAAwC,EAAE,MAAM,gDAAgD,CAAC;AAC1G,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EACL,+CAA+C,EAChD,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EAAE,2CAA2C,EAAE,MAAM,oDAAoD,CAAC;AACjH,OAAO,EACL,uDAAuD,EACxD,MAAM,iEAAiE,CAAC;AACzE,OAAO,EAAE,4CAA4C,EAAE,MAAM,qDAAqD,CAAC;AACnH,OAAO,EACL,0CAA0C,EAC3C,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,0CAA0C,EAAE,MAAM,mDAAmD,CAAC;AAC/G,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EACL,qDAAqD,EACtD,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC"}

package/build/_modules/privacy-lifecycle/index.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyRequest_Type = exports.DyNTS_PrivacyRequestState_Type = exports.DyNTS_PrivacyContributorOutcome_Type = exports.DyNTS_PrivacyContributorAction_Type = exports.DyNTS_PrivacyConsentDecision_Type = exports.DyNTS_PrivacyLedger_ControlService = exports.DyNTS_PrivacyLifecycle_ControlService = void 0;
+var privacy_lifecycle_control_service_1 = require("./privacy-lifecycle.control-service");
+Object.defineProperty(exports, "DyNTS_PrivacyLifecycle_ControlService", { enumerable: true, get: function () { return privacy_lifecycle_control_service_1.DyNTS_PrivacyLifecycle_ControlService; } });
+var privacy_ledger_control_service_1 = require("./privacy-ledger.control-service");
+Object.defineProperty(exports, "DyNTS_PrivacyLedger_ControlService", { enumerable: true, get: function () { return privacy_ledger_control_service_1.DyNTS_PrivacyLedger_ControlService; } });
+var privacy_consent_decision_type_enum_1 = require("./_enums/privacy-consent-decision.type-enum");
+Object.defineProperty(exports, "DyNTS_PrivacyConsentDecision_Type", { enumerable: true, get: function () { return privacy_consent_decision_type_enum_1.DyNTS_PrivacyConsentDecision_Type; } });
+var privacy_contributor_action_type_enum_1 = require("./_enums/privacy-contributor-action.type-enum");
+Object.defineProperty(exports, "DyNTS_PrivacyContributorAction_Type", { enumerable: true, get: function () { return privacy_contributor_action_type_enum_1.DyNTS_PrivacyContributorAction_Type; } });
+var privacy_contributor_outcome_type_enum_1 = require("./_enums/privacy-contributor-outcome.type-enum");
+Object.defineProperty(exports, "DyNTS_PrivacyContributorOutcome_Type", { enumerable: true, get: function () { return privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type; } });
+var privacy_request_state_type_enum_1 = require("./_enums/privacy-request-state.type-enum");
+Object.defineProperty(exports, "DyNTS_PrivacyRequestState_Type", { enumerable: true, get: function () { return privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type; } });
+var privacy_request_type_enum_1 = require("./_enums/privacy-request.type-enum");
+Object.defineProperty(exports, "DyNTS_PrivacyRequest_Type", { enumerable: true, get: function () { return privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type; } });
+//# sourceMappingURL=index.js.map

package/build/_modules/privacy-lifecycle/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/index.ts"],"names":[],"mappings":";;;AAAA,yFAA4F;AAAnF,0JAAA,qCAAqC,OAAA;AAC9C,mFAAsF;AAA7E,oJAAA,kCAAkC,OAAA;AAC3C,kGAAgG;AAAvF,uJAAA,iCAAiC,OAAA;AAC1C,sGAAoG;AAA3F,2JAAA,mCAAmC,OAAA;AAC5C,wGAAsG;AAA7F,6JAAA,oCAAoC,OAAA;AAC7C,4FAA0F;AAAjF,iJAAA,8BAA8B,OAAA;AACvC,gFAA+E;AAAtE,sIAAA,yBAAyB,OAAA"}

package/build/_modules/privacy-lifecycle/privacy-ledger.control-service.d.ts

@@ -0,0 +1,28 @@
+import { DyNTS_PrivacyConsentInput_Interface } from './_models/privacy-consent-input.interface';
+import { DyNTS_PrivacyConsentResult_Interface } from './_models/privacy-consent-result.interface';
+import { DyNTS_PrivacyLedgerResult_Interface } from './_models/privacy-ledger-result.interface';
+import { DyNTS_PrivacyLedgerSettings_Interface } from './_models/privacy-ledger-settings.interface';
+import { DyNTS_PrivacyLegalAcceptanceInput_Interface } from './_models/privacy-legal-acceptance-input.interface';
+import { DyNTS_PrivacyLegalAcceptanceResult_Interface } from './_models/privacy-legal-acceptance-result.interface';
+/** Maintains immutable legal acceptance and purpose-specific consent evidence. */
+export declare class DyNTS_PrivacyLedger_ControlService {
+    private readonly adapter;
+    private readonly clock;
+    /** Creates a privacy ledger over an append-only persistence adapter. */
+    constructor(set: DyNTS_PrivacyLedgerSettings_Interface);
+    /** Appends or replays acceptance of one exact checksummed legal document version. */
+    acceptLegalDocument(set: DyNTS_PrivacyLegalAcceptanceInput_Interface): Promise<DyNTS_PrivacyLegalAcceptanceResult_Interface>;
+    /** Appends or replays a purpose-specific consent grant or withdrawal. */
+    recordConsent(set: DyNTS_PrivacyConsentInput_Interface): Promise<DyNTS_PrivacyConsentResult_Interface>;
+    /** Returns immutable history plus the latest decision for every purpose. */
+    getLedger(subjectId: string, organizationId: string): Promise<DyNTS_PrivacyLedgerResult_Interface>;
+    private validateCommon;
+    private hashInput;
+    private hashContent;
+    private isSafeCode;
+    private isBoundedText;
+    private toLegalView;
+    private toConsentView;
+    private buildError;
+}
+//# sourceMappingURL=privacy-ledger.control-service.d.ts.map

package/build/_modules/privacy-lifecycle/privacy-ledger.control-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-ledger.control-service.d.ts","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/privacy-ledger.control-service.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAKhG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAGlG,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EAAE,2CAA2C,EAAE,MAAM,oDAAoD,CAAC;AAIjH,OAAO,EAAE,4CAA4C,EAAE,MAAM,qDAAqD,CAAC;AAMnH,kFAAkF;AAClF,qBAAa,kCAAkC;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,wEAAwE;gBAC5D,GAAG,EAAE,qCAAqC;IAStD,qFAAqF;IACxE,mBAAmB,CAC9B,GAAG,EAAE,2CAA2C,GAC/C,OAAO,CAAC,4CAA4C,CAAC;IA2CxD,yEAAyE;IAC5D,aAAa,CACxB,GAAG,EAAE,mCAAmC,GACvC,OAAO,CAAC,oCAAoC,CAAC;IA0ChD,4EAA4E;IAC/D,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,mCAAmC,CAAC;IA0C/G,OAAO,CAAC,cAAc;IAgBtB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,WAAW;IAenB,OAAO,CAAC,aAAa;IAarB,OAAO,CAAC,UAAU;CASnB"}

package/build/_modules/privacy-lifecycle/privacy-ledger.control-service.js

@@ -0,0 +1,168 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyLedger_ControlService = void 0;
+const crypto_1 = require("crypto");
+const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
+const global_settings_const_1 = require("../../_collections/global-settings.const");
+const privacy_consent_decision_type_enum_1 = require("./_enums/privacy-consent-decision.type-enum");
+/** Maintains immutable legal acceptance and purpose-specific consent evidence. */
+class DyNTS_PrivacyLedger_ControlService {
+    adapter;
+    clock;
+    /** Creates a privacy ledger over an append-only persistence adapter. */
+    constructor(set) {
+        this.adapter = set.adapter;
+        this.clock = set.clock ?? (() => new Date());
+        if (!this.adapter) {
+            throw this.buildError(500, 'SETTINGS_INVALID', 'The privacy ledger settings are invalid.');
+        }
+    }
+    /** Appends or replays acceptance of one exact checksummed legal document version. */
+    async acceptLegalDocument(set) {
+        this.validateCommon(set);
+        if (!this.isSafeCode(set.documentType)
+            || !this.isSafeCode(set.documentVersion)
+            || !/^[a-f0-9]{64}$/u.test(set.documentChecksum)) {
+            throw this.buildError(400, 'LEGAL_ACCEPTANCE_INVALID', 'The legal acceptance is invalid.');
+        }
+        const acceptance = {
+            acceptanceId: (0, crypto_1.randomUUID)(),
+            subjectId: set.subjectId,
+            organizationId: set.organizationId,
+            documentType: set.documentType,
+            documentVersion: set.documentVersion,
+            documentChecksum: set.documentChecksum,
+            sourceCode: set.sourceCode,
+            idempotencyHash: this.hashInput('legal', set),
+            requestFingerprint: this.hashContent([
+                set.documentType,
+                set.documentVersion,
+                set.documentChecksum,
+                set.sourceCode,
+            ]),
+            acceptedAt: this.clock().toISOString(),
+        };
+        const result = await this.adapter.appendLegalAcceptance(acceptance);
+        if (result.acceptance.requestFingerprint !== acceptance.requestFingerprint
+            || result.acceptance.idempotencyHash !== acceptance.idempotencyHash
+            || result.acceptance.subjectId !== acceptance.subjectId
+            || result.acceptance.organizationId !== acceptance.organizationId) {
+            throw this.buildError(409, 'IDEMPOTENCY_CONFLICT', 'The idempotency key belongs to another ledger event.');
+        }
+        return { acceptance: this.toLegalView(result.acceptance), created: result.created };
+    }
+    /** Appends or replays a purpose-specific consent grant or withdrawal. */
+    async recordConsent(set) {
+        this.validateCommon(set);
+        if (!this.isSafeCode(set.purposeCode)
+            || !this.isSafeCode(set.policyVersion)
+            || !Object.values(privacy_consent_decision_type_enum_1.DyNTS_PrivacyConsentDecision_Type).includes(set.decision)) {
+            throw this.buildError(400, 'CONSENT_INVALID', 'The consent decision is invalid.');
+        }
+        const consent = {
+            consentId: (0, crypto_1.randomUUID)(),
+            subjectId: set.subjectId,
+            organizationId: set.organizationId,
+            purposeCode: set.purposeCode,
+            policyVersion: set.policyVersion,
+            decision: set.decision,
+            sourceCode: set.sourceCode,
+            idempotencyHash: this.hashInput('consent', set),
+            requestFingerprint: this.hashContent([
+                set.purposeCode,
+                set.policyVersion,
+                set.decision,
+                set.sourceCode,
+            ]),
+            occurredAt: this.clock().toISOString(),
+        };
+        const result = await this.adapter.appendConsent(consent);
+        if (result.consent.requestFingerprint !== consent.requestFingerprint
+            || result.consent.idempotencyHash !== consent.idempotencyHash
+            || result.consent.subjectId !== consent.subjectId
+            || result.consent.organizationId !== consent.organizationId) {
+            throw this.buildError(409, 'IDEMPOTENCY_CONFLICT', 'The idempotency key belongs to another ledger event.');
+        }
+        return { consent: this.toConsentView(result.consent), created: result.created };
+    }
+    /** Returns immutable history plus the latest decision for every purpose. */
+    async getLedger(subjectId, organizationId) {
+        if (!subjectId || !organizationId) {
+            throw this.buildError(400, 'LEDGER_OWNER_INVALID', 'The privacy ledger owner is invalid.');
+        }
+        const legalAcceptances = await this.adapter.listLegalAcceptances(subjectId, organizationId);
+        const consentHistory = await this.adapter.listConsentHistory(subjectId, organizationId);
+        if (legalAcceptances.some((item) => (item.subjectId !== subjectId || item.organizationId !== organizationId))
+            || consentHistory.some((item) => (item.subjectId !== subjectId || item.organizationId !== organizationId))) {
+            throw this.buildError(500, 'LEDGER_SCOPE_VIOLATION', 'The privacy ledger returned an invalid scope.');
+        }
+        const consentViews = consentHistory.map((item) => this.toConsentView(item));
+        const currentByPurpose = new Map();
+        consentViews.forEach((record) => {
+            currentByPurpose.set(record.purposeCode, { ...record });
+        });
+        return {
+            legalAcceptances: [...legalAcceptances].map((item) => this.toLegalView(item)),
+            consentHistory: consentViews,
+            currentConsents: Array.from(currentByPurpose.values())
+                .sort((first, second) => first.purposeCode.localeCompare(second.purposeCode)),
+        };
+    }
+    validateCommon(set) {
+        if (!this.isBoundedText(set.subjectId, 256)
+            || !this.isBoundedText(set.organizationId, 256)
+            || !this.isSafeCode(set.sourceCode)
+            || !this.isBoundedText(set.idempotencyKey, 256)) {
+            throw this.buildError(400, 'LEDGER_EVENT_INVALID', 'The privacy ledger event is invalid.');
+        }
+    }
+    hashInput(category, set) {
+        return (0, crypto_1.createHash)('sha256')
+            .update(`${category}\u0000${set.subjectId}\u0000${set.organizationId}\u0000${set.idempotencyKey}`)
+            .digest('hex');
+    }
+    hashContent(parts) {
+        return (0, crypto_1.createHash)('sha256').update(parts.join('\u0000')).digest('hex');
+    }
+    isSafeCode(value) {
+        return typeof value === 'string' && /^[a-zA-Z0-9._:-]{1,128}$/u.test(value);
+    }
+    isBoundedText(value, maxLength) {
+        return typeof value === 'string' && !!value && value.length <= maxLength && !value.includes('\u0000');
+    }
+    toLegalView(acceptance) {
+        return {
+            acceptanceId: acceptance.acceptanceId,
+            subjectId: acceptance.subjectId,
+            organizationId: acceptance.organizationId,
+            documentType: acceptance.documentType,
+            documentVersion: acceptance.documentVersion,
+            documentChecksum: acceptance.documentChecksum,
+            sourceCode: acceptance.sourceCode,
+            acceptedAt: acceptance.acceptedAt,
+        };
+    }
+    toConsentView(record) {
+        return {
+            consentId: record.consentId,
+            subjectId: record.subjectId,
+            organizationId: record.organizationId,
+            purposeCode: record.purposeCode,
+            policyVersion: record.policyVersion,
+            decision: record.decision,
+            sourceCode: record.sourceCode,
+            occurredAt: record.occurredAt,
+        };
+    }
+    buildError(status, errorCode, message) {
+        return new fsm_dynamo_1.DyFM_Error({
+            status: status,
+            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|PRIVACY_LEDGER|${errorCode}`,
+            message: message,
+            userMessage: status < 500 ? message : 'The privacy ledger is unavailable. Please try again later.',
+            issuerService: this.constructor.name,
+        });
+    }
+}
+exports.DyNTS_PrivacyLedger_ControlService = DyNTS_PrivacyLedger_ControlService;
+//# sourceMappingURL=privacy-ledger.control-service.js.map

package/build/_modules/privacy-lifecycle/privacy-ledger.control-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-ledger.control-service.js","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/privacy-ledger.control-service.ts"],"names":[],"mappings":";;;AAAA,mCAGgB;AAEhB,sDAAmD;AAEnD,oFAAiF;AACjF,oGAAgG;AAqBhG,kFAAkF;AAClF,MAAa,kCAAkC;IAC5B,OAAO,CAAuC;IAC9C,KAAK,CAAa;IAEnC,wEAAwE;IACxE,YAAY,GAA0C;QACpD,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAEnD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,kBAAkB,EAAE,0CAA0C,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,qFAAqF;IAC9E,KAAK,CAAC,mBAAmB,CAC9B,GAAgD;QAEhD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAEzB,IACE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC;eAC/B,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC;eACrC,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAChD,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,0BAA0B,EAAE,kCAAkC,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,UAAU,GAA2C;YACzD,YAAY,EAAE,IAAA,mBAAU,GAAE;YAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC;YAC7C,kBAAkB,EAAE,IAAI,CAAC,WAAW,CAAC;gBACnC,GAAG,CAAC,YAAY;gBAChB,GAAG,CAAC,eAAe;gBACnB,GAAG,CAAC,gBAAgB;gBACpB,GAAG,CAAC,UAAU;aACf,CAAC;YACF,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC;QACF,MAAM,MAAM,GACV,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAEvD,IACE,MAAM,CAAC,UAAU,CAAC,kBAAkB,KAAK,UAAU,CAAC,kBAAkB;eACnE,MAAM,CAAC,UAAU,CAAC,eAAe,KAAK,UAAU,CAAC,eAAe;eAChE,MAAM,CAAC,UAAU,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;eACpD,MAAM,CAAC,UAAU,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc,EACjE,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,sBAAsB,EAAE,sDAAsD,CAAC,CAAC;QAC7G,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACtF,CAAC;IAED,yEAAyE;IAClE,KAAK,CAAC,aAAa,CACxB,GAAwC;QAExC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAEzB,IACE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC;eAC9B,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC;eACnC,CAAC,MAAM,CAAC,MAAM,CAAC,sEAAiC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAC3E,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,iBAAiB,EAAE,kCAAkC,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,OAAO,GAAyC;YACpD,SAAS,EAAE,IAAA,mBAAU,GAAE;YACvB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC;YAC/C,kBAAkB,EAAE,IAAI,CAAC,WAAW,CAAC;gBACnC,GAAG,CAAC,WAAW;gBACf,GAAG,CAAC,aAAa;gBACjB,GAAG,CAAC,QAAQ;gBACZ,GAAG,CAAC,UAAU;aACf,CAAC;YACF,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC;QACF,MAAM,MAAM,GAAoD,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAE1G,IACE,MAAM,CAAC,OAAO,CAAC,kBAAkB,KAAK,OAAO,CAAC,kBAAkB;eAC7D,MAAM,CAAC,OAAO,CAAC,eAAe,KAAK,OAAO,CAAC,eAAe;eAC1D,MAAM,CAAC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;eAC9C,MAAM,CAAC,OAAO,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,EAC3D,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,sBAAsB,EAAE,sDAAsD,CAAC,CAAC;QAC7G,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAClF,CAAC;IAED,4EAA4E;IACrE,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,cAAsB;QAC9D,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,sBAAsB,EAAE,sCAAsC,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,gBAAgB,GACpB,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACrE,MAAM,cAAc,GAClB,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAEnE,IACE,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAA4C,EAAW,EAAE,CAAC,CAC/E,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,cAAc,KAAK,cAAc,CACvE,CAAC;eACC,cAAc,CAAC,IAAI,CAAC,CAAC,IAA0C,EAAW,EAAE,CAAC,CAC9E,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,cAAc,KAAK,cAAc,CACvE,CAAC,EACF,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,wBAAwB,EAAE,+CAA+C,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,YAAY,GAAyC,cAAc,CAAC,GAAG,CAAC,CAC5E,IAA0C,EACN,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,MAAM,gBAAgB,GAAoD,IAAI,GAAG,EAAE,CAAC;QAEpF,YAAY,CAAC,OAAO,CAAC,CAAC,MAA0C,EAAQ,EAAE;YACxE,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,gBAAgB,EAAE,CAAE,GAAG,gBAAgB,CAAE,CAAC,GAAG,CAAC,CAC5C,IAA4C,EACA,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACxE,cAAc,EAAE,YAAY;YAC5B,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;iBACnD,IAAI,CAAC,CACJ,KAAyC,EACzC,MAA0C,EAClC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;SACpE,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,GAKtB;QACC,IACE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC;eACpC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC;eAC5C,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;eAChC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,EAC/C,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,sBAAsB,EAAE,sCAAsC,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAEO,SAAS,CACf,QAAgB,EAChB,GAAsF;QAEtF,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC;aACxB,MAAM,CAAC,GAAG,QAAQ,SAAS,GAAG,CAAC,SAAS,SAAS,GAAG,CAAC,cAAc,SAAS,GAAG,CAAC,cAAc,EAAE,CAAC;aACjG,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAEO,WAAW,CAAC,KAAe;QACjC,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;IAEO,UAAU,CAAC,KAAa;QAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;IAEO,aAAa,CAAC,KAAa,EAAE,SAAiB;QACpD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxG,CAAC;IAEO,WAAW,CACjB,UAAkD;QAElD,OAAO;YACL,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,eAAe,EAAE,UAAU,CAAC,eAAe;YAC3C,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;YAC7C,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,UAAU,EAAE,UAAU,CAAC,UAAU;SAClC,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,MAA4C;QAChE,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;IACJ,CAAC;IAEO,UAAU,CAAC,MAAc,EAAE,SAAiB,EAAE,OAAe;QACnE,OAAO,IAAI,uBAAU,CAAC;YACpB,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,GAAG,6CAAqB,CAAC,mBAAmB,mBAAmB,SAAS,EAAE;YACrF,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,4DAA4D;YAClG,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;SACrC,CAAC,CAAC;IACL,CAAC;CACF;AA9ND,gFA8NC"}

package/build/_modules/privacy-lifecycle/privacy-lifecycle.control-service.d.ts

@@ -0,0 +1,42 @@
+import { DyNTS_PrivacyLifecycleSettings_Interface } from './_models/privacy-lifecycle-settings.interface';
+import { DyNTS_PrivacyRequestCreateResult_Interface } from './_models/privacy-request-create-result.interface';
+import { DyNTS_PrivacyRequestOpen_Interface } from './_models/privacy-request-open.interface';
+import { DyNTS_PrivacyRequestResult_Interface } from './_models/privacy-request-result.interface';
+import { DyNTS_PrivacyRequestView_Interface } from './_models/privacy-request-view.interface';
+/** Coordinates identity-gated, resumable data-subject requests across product-owned data contributors. */
+export declare class DyNTS_PrivacyLifecycle_ControlService {
+    private readonly adapter;
+    private readonly contributors;
+    private readonly clock;
+    /** Creates an orchestrator with a stable contributor registry. */
+    constructor(set: DyNTS_PrivacyLifecycleSettings_Interface);
+    /** Opens or safely replays a subject-scoped request without persisting the raw idempotency key. */
+    openRequest(set: DyNTS_PrivacyRequestOpen_Interface): Promise<DyNTS_PrivacyRequestCreateResult_Interface>;
+    /** Marks request identity verified after the application has completed its security challenge. */
+    verifyIdentity(requestId: string, subjectId: string): Promise<DyNTS_PrivacyRequestView_Interface>;
+    /** Executes or resumes all contributors and never reports complete while one contributor failed. */
+    processRequest(requestId: string, subjectId: string): Promise<DyNTS_PrivacyRequestResult_Interface>;
+    /** Returns an owned request and its content-free contributor outcomes. */
+    getRequest(requestId: string, subjectId: string): Promise<DyNTS_PrivacyRequestResult_Interface>;
+    private planMissingContributors;
+    private executeMissingContributors;
+    private executeContributor;
+    private verifyContributorOutcomes;
+    private validatePlan;
+    private validateOutcome;
+    private buildFailedOutcome;
+    private requireOwnedRequest;
+    private replaceState;
+    private buildContext;
+    private buildResult;
+    private toRequestView;
+    private hashIdempotency;
+    private isFutureDate;
+    private isBoundedText;
+    private hasAllContributorPlans;
+    private validateStoredPlans;
+    private isValidCompletedOutcome;
+    private validateSettings;
+    private buildError;
+}
+//# sourceMappingURL=privacy-lifecycle.control-service.d.ts.map

package/build/_modules/privacy-lifecycle/privacy-lifecycle.control-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-lifecycle.control-service.d.ts","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/privacy-lifecycle.control-service.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,wCAAwC,EAAE,MAAM,gDAAgD,CAAC;AAC1G,OAAO,EAAE,0CAA0C,EAAE,MAAM,mDAAmD,CAAC;AAC/G,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAK9F,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAE9F,0GAA0G;AAC1G,qBAAa,qCAAqC;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0C;IAClE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAuC;IACpE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,kEAAkE;gBACtD,GAAG,EAAE,wCAAwC;IAUzD,mGAAmG;IACtF,WAAW,CACtB,GAAG,EAAE,kCAAkC,GACtC,OAAO,CAAC,0CAA0C,CAAC;IAkDtD,kGAAkG;IACrF,cAAc,CACzB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,kCAAkC,CAAC;IAsB9C,oGAAoG;IACvF,cAAc,CACzB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,oCAAoC,CAAC;IA0FhD,0EAA0E;IAC7D,UAAU,CACrB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,oCAAoC,CAAC;YAMlC,uBAAuB;YA6BvB,0BAA0B;YA0C1B,kBAAkB;YAoBlB,yBAAyB;IAqCvC,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,eAAe;IA6BvB,OAAO,CAAC,kBAAkB;YAiBZ,mBAAmB;YAanB,YAAY;IA2B1B,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,WAAW;IAuBnB,OAAO,CAAC,aAAa;IAmBrB,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,sBAAsB;IAQ9B,OAAO,CAAC,mBAAmB;IAc3B,OAAO,CAAC,uBAAuB;IAc/B,OAAO,CAAC,gBAAgB;IAexB,OAAO,CAAC,UAAU;CAWnB"}