@futdevpro/nts-dynamo 1.15.150 → 1.15.153

package/src/_models/interfaces/routing-module-settings.interface.ts

@@ -1,21 +1,21 @@
-import { DyNTS_RouteSecurity } from '../../_enums/route-security.enum';
-import { DyNTS_Controller } from '../../_services/route/controller.service';
-
-
-/**
- * This is a main route point handler, which collects a list of controllers for the API
- */
-export interface DyNTS_RoutingModule_Settings {
-  /**
-   * main route of the module
-   */
-  route: string;
-  /**
-   * the collection of controllers (sub-routes, with differentlogical parts, to different db elements)
-   */
-  controllers: DyNTS_Controller[];
-  /**
-   * securityOverride will be used to create different security for a single module without changing the default security (http/https/both)
-   */
-  securityOverride?: DyNTS_RouteSecurity;
-}
+import { DyNTS_RouteSecurity } from '../../_enums/route-security.enum';
+import { DyNTS_Controller } from '../../_services/route/controller.service';
+
+
+/**
+ * This is a main route point handler, which collects a list of controllers for the API
+ */
+export interface DyNTS_RoutingModule_Settings {
+  /**
+   * main route of the module
+   */
+  route: string;
+  /**
+   * the collection of controllers (sub-routes, with differentlogical parts, to different db elements)
+   */
+  controllers: DyNTS_Controller[];
+  /**
+   * securityOverride will be used to create different security for a single module without changing the default security (http/https/both)
+   */
+  securityOverride?: DyNTS_RouteSecurity;
+}

package/src/_models/interfaces/security-headers-settings.interface.ts

@@ -1,50 +1,50 @@
-/**
- * `DyNTS_SecurityHeaders_Settings` — a bedrock security response-header middleware beállításai
- * (BFR-MASTERPROMPTER-011 / SEC-R2-8). A middleware minden `DyNTS_App`-leszármazott open+secure
- * Express-én, a CORS-mount ELŐTT fut (így az OPTIONS preflight-válaszok is megkapják a headereket).
- *
- * **Default-ON, safe-by-default**: zéró-konfiggal a bizonyítottan nem-törő készlet megy ki
- * (x-powered-by removal + X-Frame-Options + nosniff + Referrer-Policy). A HSTS auto-env-gated
- * (csak prod), a CSP opt-in (app-specifikus). Bármely header `false`-szal kikapcsolható;
- * `enabled: false` = teljes opt-out.
- */
-export interface DyNTS_SecurityHeaders_Settings {
-  /** Fő kapcsoló. Default: true (a middleware minden szerveren aktív). */
-  enabled: boolean;
-
-  /** `app.disable('x-powered-by')` — Express tech-leak eltávolítás. Default: true. */
-  removePoweredBy?: boolean;
-
-  /** `X-Frame-Options` értéke, vagy `false` a kihagyáshoz. Default: 'SAMEORIGIN'. */
-  frameOptions?: string | false;
-
-  /** `X-Content-Type-Options` értéke, vagy `false`. Default: 'nosniff'. */
-  contentTypeOptions?: string | false;
-
-  /** `Referrer-Policy` értéke, vagy `false`. Default: 'strict-origin-when-cross-origin'. */
-  referrerPolicy?: string | false;
-
-  /** `Permissions-Policy` értéke, vagy `false`. Default: false (opt-in — app-specifikus). */
-  permissionsPolicy?: string | false;
-
-  /**
-   * HSTS (`Strict-Transport-Security`). Default: AUTO — CSAK prod environment-en emittál
-   * (`max-age=15768000; includeSubDomains`); a test-en a sticky-HSTS strukturálisan elkerülve.
-   * Explicit `{ enabled: true }` bármely env-en bekapcsolja; `false` mindenhol kikapcsolja.
-   */
-  hsts?: {
-    enabled?: boolean;
-    maxAgeSeconds?: number;
-    includeSubDomains?: boolean;
-    preload?: boolean;
-  } | false;
-
-  /** `Content-Security-Policy` string, vagy `false`. Default: false (app-specifikus, OPT-IN). */
-  csp?: string | false;
-
-  /** Ha true, a CSP a `Content-Security-Policy-Report-Only` header-névvel megy ki (rollout-segéd). */
-  cspReportOnly?: boolean;
-
-  /** További tetszőleges fix headerek (merge a resolvelt készletre). */
-  additionalHeaders?: Record<string, string>;
-}
+/**
+ * `DyNTS_SecurityHeaders_Settings` — a bedrock security response-header middleware beállításai
+ * (BFR-MASTERPROMPTER-011 / SEC-R2-8). A middleware minden `DyNTS_App`-leszármazott open+secure
+ * Express-én, a CORS-mount ELŐTT fut (így az OPTIONS preflight-válaszok is megkapják a headereket).
+ *
+ * **Default-ON, safe-by-default**: zéró-konfiggal a bizonyítottan nem-törő készlet megy ki
+ * (x-powered-by removal + X-Frame-Options + nosniff + Referrer-Policy). A HSTS auto-env-gated
+ * (csak prod), a CSP opt-in (app-specifikus). Bármely header `false`-szal kikapcsolható;
+ * `enabled: false` = teljes opt-out.
+ */
+export interface DyNTS_SecurityHeaders_Settings {
+  /** Fő kapcsoló. Default: true (a middleware minden szerveren aktív). */
+  enabled: boolean;
+
+  /** `app.disable('x-powered-by')` — Express tech-leak eltávolítás. Default: true. */
+  removePoweredBy?: boolean;
+
+  /** `X-Frame-Options` értéke, vagy `false` a kihagyáshoz. Default: 'SAMEORIGIN'. */
+  frameOptions?: string | false;
+
+  /** `X-Content-Type-Options` értéke, vagy `false`. Default: 'nosniff'. */
+  contentTypeOptions?: string | false;
+
+  /** `Referrer-Policy` értéke, vagy `false`. Default: 'strict-origin-when-cross-origin'. */
+  referrerPolicy?: string | false;
+
+  /** `Permissions-Policy` értéke, vagy `false`. Default: false (opt-in — app-specifikus). */
+  permissionsPolicy?: string | false;
+
+  /**
+   * HSTS (`Strict-Transport-Security`). Default: AUTO — CSAK prod environment-en emittál
+   * (`max-age=15768000; includeSubDomains`); a test-en a sticky-HSTS strukturálisan elkerülve.
+   * Explicit `{ enabled: true }` bármely env-en bekapcsolja; `false` mindenhol kikapcsolja.
+   */
+  hsts?: {
+    enabled?: boolean;
+    maxAgeSeconds?: number;
+    includeSubDomains?: boolean;
+    preload?: boolean;
+  } | false;
+
+  /** `Content-Security-Policy` string, vagy `false`. Default: false (app-specifikus, OPT-IN). */
+  csp?: string | false;
+
+  /** Ha true, a CSP a `Content-Security-Policy-Report-Only` header-névvel megy ki (rollout-segéd). */
+  cspReportOnly?: boolean;
+
+  /** További tetszőleges fix headerek (merge a resolvelt készletre). */
+  additionalHeaders?: Record<string, string>;
+}

package/src/_models/interfaces/signed-url-verify-result.interface.ts

@@ -1,13 +1,13 @@
-/**
- * Az aláírt-URL ellenőrzés (`DyNTS_SignedUrl_Util.verify`) strukturált eredménye.
- *
- * ⚠️ A `reason` **logba** való — a HTTP-válaszba **NEM** szivárogtatható: az elutasítás oka
- * támadónak információ *(pl. „expired" vs. „signature-mismatch" megkülönböztetése)*.
- *
- * ⭐ **Miért strukturált eredmény és nem kivétel:** a `verify` SOHA nem dob, hogy a hívó gate-ek
- * egységes, szivárgás-mentes választ tudjanak adni — a `reason` a **belső** diagnosztika.
- */
-export interface DyNTS_SignedUrl_VerifyResult {
-  valid: boolean;
-  reason?: 'missing-secret' | 'missing-params' | 'expired' | 'signature-mismatch';
-}
+/**
+ * Az aláírt-URL ellenőrzés (`DyNTS_SignedUrl_Util.verify`) strukturált eredménye.
+ *
+ * ⚠️ A `reason` **logba** való — a HTTP-válaszba **NEM** szivárogtatható: az elutasítás oka
+ * támadónak információ *(pl. „expired" vs. „signature-mismatch" megkülönböztetése)*.
+ *
+ * ⭐ **Miért strukturált eredmény és nem kivétel:** a `verify` SOHA nem dob, hogy a hívó gate-ek
+ * egységes, szivárgás-mentes választ tudjanak adni — a `reason` a **belső** diagnosztika.
+ */
+export interface DyNTS_SignedUrl_VerifyResult {
+  valid: boolean;
+  reason?: 'missing-secret' | 'missing-params' | 'expired' | 'signature-mismatch';
+}

package/src/_models/interfaces/static-client-settings.interface.spec.ts

@@ -1,29 +1,29 @@
-import { DyNTS_StaticClient_Settings } from './static-client-settings.interface';
-
-describe('| DyNTS_StaticClient_Settings', () => {
-  it('| should allow minimal settings with only root', () => {
-    const s: DyNTS_StaticClient_Settings = { root: '/dist' };
-    expect(s.root).toBe('/dist');
-    expect(s.fallbackPath).toBeUndefined();
-  });
-
-  it('| should allow optional fallbackPath', () => {
-    const s: DyNTS_StaticClient_Settings = {
-      root: '/dist',
-      fallbackPath: 'index.html',
-    };
-    expect(s.fallbackPath).toBe('index.html');
-  });
-
-  it('| should allow SPA cache options', () => {
-    const s: DyNTS_StaticClient_Settings = {
-      root: '/dist',
-      assetCacheMaxAge: 31536000,
-      assetCacheImmutable: true,
-      fallbackCacheMaxAge: 0,
-    };
-    expect(s.assetCacheMaxAge).toBe(31536000);
-    expect(s.assetCacheImmutable).toBe(true);
-    expect(s.fallbackCacheMaxAge).toBe(0);
-  });
-});
+import { DyNTS_StaticClient_Settings } from './static-client-settings.interface';
+
+describe('| DyNTS_StaticClient_Settings', () => {
+  it('| should allow minimal settings with only root', () => {
+    const s: DyNTS_StaticClient_Settings = { root: '/dist' };
+    expect(s.root).toBe('/dist');
+    expect(s.fallbackPath).toBeUndefined();
+  });
+
+  it('| should allow optional fallbackPath', () => {
+    const s: DyNTS_StaticClient_Settings = {
+      root: '/dist',
+      fallbackPath: 'index.html',
+    };
+    expect(s.fallbackPath).toBe('index.html');
+  });
+
+  it('| should allow SPA cache options', () => {
+    const s: DyNTS_StaticClient_Settings = {
+      root: '/dist',
+      assetCacheMaxAge: 31536000,
+      assetCacheImmutable: true,
+      fallbackCacheMaxAge: 0,
+    };
+    expect(s.assetCacheMaxAge).toBe(31536000);
+    expect(s.assetCacheImmutable).toBe(true);
+    expect(s.fallbackCacheMaxAge).toBe(0);
+  });
+});

package/src/_models/interfaces/static-client-settings.interface.ts

@@ -1,36 +1,36 @@
-/**
- * Beállítások a client static fájlok kiszolgálásához (pl. SPA) a '/' path alatt.
- * Ha megadva, a getStaticClientSettings() által visszaadott értéket a base app
- * a mountStaticClient() során használja (API route-ok után).
- * A cache mezők SPA (pl. Angular) optimalizáláshoz opcionálisak; ha nincs kitöltve,
- * viselkedés változatlan (alkalmas nem-SPA kiszolgálásra is).
- */
-export interface DyNTS_StaticClient_Settings {
-  /** A static fájlok könyvtárának path-ja (abszolút vagy process.cwd()-hez képest). */
-  root: string;
-  /** SPA fallback: ha a kérés nem egy fájlra mutat, ezt a fájlt szolgáljuk ki (pl. 'index.html'). */
-  fallbackPath?: string;
-  /**
-   * Static asset-ek (pl. JS, CSS) Cache-Control max-age másodpercben.
-   * SPA (Angular) hashed fájloknál pl. 1 év (31536000).
-   */
-  assetCacheMaxAge?: number;
-  /**
-   * Ha true és assetCacheMaxAge is megadva, Cache-Control-hoz hozzáadódik az immutable direktíva
-   * (Angular hashed fájlokra ideális).
-   */
-  assetCacheImmutable?: boolean;
-  /**
-   * Fallback (pl. index.html) Cache-Control max-age másodpercben.
-   * SPA esetén ajánlott 0, hogy a böngésző ne cache-elje az index.html-t (deploy után friss).
-   */
-  fallbackCacheMaxAge?: number;
-  /**
-   * API-namespace prefixek, amikre a SPA-fallback NEM vonatkozik (BFR-DYNAMOBUILDER-001):
-   * egy ismeretlen `GET /api/...` így 404 JSON-t kap a megtévesztő `200 + index.html` helyett
-   * (a SPA-fallback catch-all eddig az API-namespace-t is fedte). Default:
-   * `['/api', '/auth-api']` — felülírható/üríthető, ha az app más namespace-t használ,
-   * vagy szándékosan SPA-route-ol API-szerű path alatt.
-   */
-  fallbackExcludePrefixes?: string[];
-}
+/**
+ * Beállítások a client static fájlok kiszolgálásához (pl. SPA) a '/' path alatt.
+ * Ha megadva, a getStaticClientSettings() által visszaadott értéket a base app
+ * a mountStaticClient() során használja (API route-ok után).
+ * A cache mezők SPA (pl. Angular) optimalizáláshoz opcionálisak; ha nincs kitöltve,
+ * viselkedés változatlan (alkalmas nem-SPA kiszolgálásra is).
+ */
+export interface DyNTS_StaticClient_Settings {
+  /** A static fájlok könyvtárának path-ja (abszolút vagy process.cwd()-hez képest). */
+  root: string;
+  /** SPA fallback: ha a kérés nem egy fájlra mutat, ezt a fájlt szolgáljuk ki (pl. 'index.html'). */
+  fallbackPath?: string;
+  /**
+   * Static asset-ek (pl. JS, CSS) Cache-Control max-age másodpercben.
+   * SPA (Angular) hashed fájloknál pl. 1 év (31536000).
+   */
+  assetCacheMaxAge?: number;
+  /**
+   * Ha true és assetCacheMaxAge is megadva, Cache-Control-hoz hozzáadódik az immutable direktíva
+   * (Angular hashed fájlokra ideális).
+   */
+  assetCacheImmutable?: boolean;
+  /**
+   * Fallback (pl. index.html) Cache-Control max-age másodpercben.
+   * SPA esetén ajánlott 0, hogy a böngésző ne cache-elje az index.html-t (deploy után friss).
+   */
+  fallbackCacheMaxAge?: number;
+  /**
+   * API-namespace prefixek, amikre a SPA-fallback NEM vonatkozik (BFR-DYNAMOBUILDER-001):
+   * egy ismeretlen `GET /api/...` így 404 JSON-t kap a megtévesztő `200 + index.html` helyett
+   * (a SPA-fallback catch-all eddig az API-namespace-t is fedte). Default:
+   * `['/api', '/auth-api']` — felülírható/üríthető, ha az app más namespace-t használ,
+   * vagy szándékosan SPA-route-ol API-szerű path alatt.
+   */
+  fallbackExcludePrefixes?: string[];
+}

package/src/_models/types/db-update.type.ts

@@ -1,100 +1,100 @@
-
-/**
- * @param update this uses the basic Mongoose updateOne
- * @example
- * // increase a specific value (here by 15): 
- * { $inc: { popularity: 15 } }
- * //
- * @example 
- * // or add element to a list:
- * { $push: { reactions: this.newReaction }
- * // or add multiple elements to a list
- * { $push: { schedule: {$each: [ monday, tuesday, wednesday ] } } }
- * //
- * @example 
- * // or all at once 
- * {  
- *   $inc: { popularity: this.newVote.amount }, 
- *   emailVerified: true, 
- *   $push: { reactions: this.newReaction } 
- * }
- * // further tools (syntax matches with $inc):
- * $currentDate: // Sets the value of a field to current date, either as a Date or a Timestamp.
- * $min:         // Only updates the field if the specified value is less than the existing field value.
- * $max:         // Only updates the field if the specified value is greater than the existing field value.
- * $mul:         // Multiplies the value of the field by the specified amount.
- * $rename:      // Renames a field.
- * $unset:       // Removes the specified field from a document. (set: "" to value)
- * //
- */
-export type DyNTS_DBUpdate<T> = {
-  /**
-   * Sets the value of a field to current date, either as a Date or a Timestamp.
-   */
-  /* $currentDate?: { [K in keyof T]?: boolean }; */
-  /**
-   * Increments the value of the field by the specified amount.
-   */
-  $inc?: { [K in keyof T]?: number };
-  /**
-   * Only updates the field if the specified value is less than the existing field value.
-   */
-  $min?: { [K in keyof T]?: number };
-  /**
-   * Only updates the field if the specified value is greater than the existing field value.
-   */
-  $max?: { [K in keyof T]?: number };
-  /**
-   * Multiplies the value of the field by the specified amount.
-   */
-  $mul?: { [K in keyof T]?: number };
-  /**
-   * Renames a field.
-   */
-  $rename?: { [K in keyof T]?: string };
-  /**
-   * Removes the specified field from a document. (set: "" to value)
-   */
-  $unset?: { [K in keyof T]?: string };
-  /**
-   * Sets the value of a field in a document.
-   */
-  $set?: { [K in keyof T]?: string } | any;
-  /**
-   * Sets the value of a field if an update results in an insert of a document. 
-   * Has no effect on update operations that modify existing documents.
-   */
-  $setOnInsert?: { [K in keyof T]?: T[K] };
-  /**
-   * Removes the first or last item of an array.
-   */
-
-  // array only operations
-  /**
-   * Removes the first or last item of an array.
-   */
-  $push?: { [K in keyof T]?: any | { $each?: T[K] } };
-  /**
-   * Removes the first or last item of an array.
-   */
-  $addToSet?: { [K in keyof T]?: any | { $each?: T[K] } };
-  /**
-   * Removes the first or last item of an array.
-   */
-  $pop?: { [K in keyof T]?: 1 | -1 };
-  /**
-   * Removes all array elements that match a specified query.
-   */
-  $pull?: { [K in keyof T]?: any | { $each?: T[K] } };
-  /**
-   * Removes all array elements that match a specified query.
-   */
-  $pullAll?: { [K in keyof T]?: any | { $each?: T[K] } };
-} & DyNTS_DBSimpleUpdate<T>;
-
-/**
- * 
- */
-export type DyNTS_DBSimpleUpdate<T> = {
-  [K in keyof T]?: T[K];
-};
+
+/**
+ * @param update this uses the basic Mongoose updateOne
+ * @example
+ * // increase a specific value (here by 15): 
+ * { $inc: { popularity: 15 } }
+ * //
+ * @example 
+ * // or add element to a list:
+ * { $push: { reactions: this.newReaction }
+ * // or add multiple elements to a list
+ * { $push: { schedule: {$each: [ monday, tuesday, wednesday ] } } }
+ * //
+ * @example 
+ * // or all at once 
+ * {  
+ *   $inc: { popularity: this.newVote.amount }, 
+ *   emailVerified: true, 
+ *   $push: { reactions: this.newReaction } 
+ * }
+ * // further tools (syntax matches with $inc):
+ * $currentDate: // Sets the value of a field to current date, either as a Date or a Timestamp.
+ * $min:         // Only updates the field if the specified value is less than the existing field value.
+ * $max:         // Only updates the field if the specified value is greater than the existing field value.
+ * $mul:         // Multiplies the value of the field by the specified amount.
+ * $rename:      // Renames a field.
+ * $unset:       // Removes the specified field from a document. (set: "" to value)
+ * //
+ */
+export type DyNTS_DBUpdate<T> = {
+  /**
+   * Sets the value of a field to current date, either as a Date or a Timestamp.
+   */
+  /* $currentDate?: { [K in keyof T]?: boolean }; */
+  /**
+   * Increments the value of the field by the specified amount.
+   */
+  $inc?: { [K in keyof T]?: number };
+  /**
+   * Only updates the field if the specified value is less than the existing field value.
+   */
+  $min?: { [K in keyof T]?: number };
+  /**
+   * Only updates the field if the specified value is greater than the existing field value.
+   */
+  $max?: { [K in keyof T]?: number };
+  /**
+   * Multiplies the value of the field by the specified amount.
+   */
+  $mul?: { [K in keyof T]?: number };
+  /**
+   * Renames a field.
+   */
+  $rename?: { [K in keyof T]?: string };
+  /**
+   * Removes the specified field from a document. (set: "" to value)
+   */
+  $unset?: { [K in keyof T]?: string };
+  /**
+   * Sets the value of a field in a document.
+   */
+  $set?: { [K in keyof T]?: string } | any;
+  /**
+   * Sets the value of a field if an update results in an insert of a document. 
+   * Has no effect on update operations that modify existing documents.
+   */
+  $setOnInsert?: { [K in keyof T]?: T[K] };
+  /**
+   * Removes the first or last item of an array.
+   */
+
+  // array only operations
+  /**
+   * Removes the first or last item of an array.
+   */
+  $push?: { [K in keyof T]?: any | { $each?: T[K] } };
+  /**
+   * Removes the first or last item of an array.
+   */
+  $addToSet?: { [K in keyof T]?: any | { $each?: T[K] } };
+  /**
+   * Removes the first or last item of an array.
+   */
+  $pop?: { [K in keyof T]?: 1 | -1 };
+  /**
+   * Removes all array elements that match a specified query.
+   */
+  $pull?: { [K in keyof T]?: any | { $each?: T[K] } };
+  /**
+   * Removes all array elements that match a specified query.
+   */
+  $pullAll?: { [K in keyof T]?: any | { $each?: T[K] } };
+} & DyNTS_DBSimpleUpdate<T>;
+
+/**
+ * 
+ */
+export type DyNTS_DBSimpleUpdate<T> = {
+  [K in keyof T]?: T[K];
+};

package/src/_modules/account-security/_enums/account-challenge-purpose.type-enum.ts

@@ -1,5 +1,5 @@
-/** Supported one-time account challenge purposes. */
-export enum DyNTS_AccountChallengePurpose_Type {
-  emailVerification = 'email-verification',
-  passwordReset = 'password-reset',
-}
+/** Supported one-time account challenge purposes. */
+export enum DyNTS_AccountChallengePurpose_Type {
+  emailVerification = 'email-verification',
+  passwordReset = 'password-reset',
+}

package/src/_modules/account-security/_enums/account-refresh-token-state.type-enum.ts

@@ -1,6 +1,6 @@
-/** One-time refresh-token ledger states. */
-export enum DyNTS_AccountRefreshTokenState_Type {
-  active = 'active',
-  used = 'used',
-  revoked = 'revoked',
-}
+/** One-time refresh-token ledger states. */
+export enum DyNTS_AccountRefreshTokenState_Type {
+  active = 'active',
+  used = 'used',
+  revoked = 'revoked',
+}

package/src/_modules/account-security/_enums/account-session-state.type-enum.ts

@@ -1,6 +1,6 @@
-/** Persisted standalone account-session states. */
-export enum DyNTS_AccountSessionState_Type {
-  active = 'active',
-  revoked = 'revoked',
-  expired = 'expired',
-}
+/** Persisted standalone account-session states. */
+export enum DyNTS_AccountSessionState_Type {
+  active = 'active',
+  revoked = 'revoked',
+  expired = 'expired',
+}

package/src/_modules/account-security/_models/account-challenge-adapter.interface.ts

@@ -1,17 +1,17 @@
-import { DyNTS_AccountChallengePurpose_Type } from '../_enums/account-challenge-purpose.type-enum';
-import { DyNTS_AccountChallengeRecord_Interface } from './account-challenge-record.interface';
-
-/** Atomic persistence contract for replacing and consuming one-time account challenges. */
-export interface DyNTS_AccountChallengeAdapter_Interface {
-  replaceActiveChallenge(record: DyNTS_AccountChallengeRecord_Interface): Promise<void>;
-  consumeActiveChallenge(
-    tokenHash: string,
-    purpose: DyNTS_AccountChallengePurpose_Type,
-    consumedAt: string
-  ): Promise<DyNTS_AccountChallengeRecord_Interface | null>;
-  revokeSubjectChallenges(
-    subjectId: string,
-    purpose: DyNTS_AccountChallengePurpose_Type,
-    revokedAt: string
-  ): Promise<void>;
-}
+import { DyNTS_AccountChallengePurpose_Type } from '../_enums/account-challenge-purpose.type-enum';
+import { DyNTS_AccountChallengeRecord_Interface } from './account-challenge-record.interface';
+
+/** Atomic persistence contract for replacing and consuming one-time account challenges. */
+export interface DyNTS_AccountChallengeAdapter_Interface {
+  replaceActiveChallenge(record: DyNTS_AccountChallengeRecord_Interface): Promise<void>;
+  consumeActiveChallenge(
+    tokenHash: string,
+    purpose: DyNTS_AccountChallengePurpose_Type,
+    consumedAt: string
+  ): Promise<DyNTS_AccountChallengeRecord_Interface | null>;
+  revokeSubjectChallenges(
+    subjectId: string,
+    purpose: DyNTS_AccountChallengePurpose_Type,
+    revokedAt: string
+  ): Promise<void>;
+}

package/src/_modules/account-security/_models/account-challenge-issued.interface.ts

@@ -1,6 +1,6 @@
-/** Raw one-time challenge returned once after its hash is persisted. */
-export interface DyNTS_AccountChallengeIssued_Interface {
-  challengeId: string;
-  token: string;
-  expiresAt: string;
-}
+/** Raw one-time challenge returned once after its hash is persisted. */
+export interface DyNTS_AccountChallengeIssued_Interface {
+  challengeId: string;
+  token: string;
+  expiresAt: string;
+}

package/src/_modules/account-security/_models/account-challenge-record.interface.ts

@@ -1,13 +1,13 @@
-import { DyNTS_AccountChallengePurpose_Type } from '../_enums/account-challenge-purpose.type-enum';
-
-/** Server-only one-time account challenge record containing a credential hash only. */
-export interface DyNTS_AccountChallengeRecord_Interface {
-  challengeId: string;
-  subjectId: string;
-  purpose: DyNTS_AccountChallengePurpose_Type;
-  tokenHash: string;
-  createdAt: string;
-  expiresAt: string;
-  consumedAt: string;
-  revokedAt: string;
-}
+import { DyNTS_AccountChallengePurpose_Type } from '../_enums/account-challenge-purpose.type-enum';
+
+/** Server-only one-time account challenge record containing a credential hash only. */
+export interface DyNTS_AccountChallengeRecord_Interface {
+  challengeId: string;
+  subjectId: string;
+  purpose: DyNTS_AccountChallengePurpose_Type;
+  tokenHash: string;
+  createdAt: string;
+  expiresAt: string;
+  consumedAt: string;
+  revokedAt: string;
+}

package/src/_modules/account-security/_models/account-challenge-result.interface.ts

@@ -1,8 +1,8 @@
-import { DyNTS_AccountChallengePurpose_Type } from '../_enums/account-challenge-purpose.type-enum';
-
-/** Trusted identity binding returned after an atomic one-time challenge consumption. */
-export interface DyNTS_AccountChallengeResult_Interface {
-  challengeId: string;
-  subjectId: string;
-  purpose: DyNTS_AccountChallengePurpose_Type;
-}
+import { DyNTS_AccountChallengePurpose_Type } from '../_enums/account-challenge-purpose.type-enum';
+
+/** Trusted identity binding returned after an atomic one-time challenge consumption. */
+export interface DyNTS_AccountChallengeResult_Interface {
+  challengeId: string;
+  subjectId: string;
+  purpose: DyNTS_AccountChallengePurpose_Type;
+}