@futdevpro/nts-dynamo 1.15.155 → 1.15.156

package/build/_modules/privacy-lifecycle/privacy-lifecycle.control-service.js

@@ -1,364 +1,364 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DyNTS_PrivacyLifecycle_ControlService = void 0;
-const crypto_1 = require("crypto");
-const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
-const global_settings_const_1 = require("../../_collections/global-settings.const");
-const privacy_contributor_action_type_enum_1 = require("./_enums/privacy-contributor-action.type-enum");
-const privacy_contributor_outcome_type_enum_1 = require("./_enums/privacy-contributor-outcome.type-enum");
-const privacy_request_state_type_enum_1 = require("./_enums/privacy-request-state.type-enum");
-const privacy_request_type_enum_1 = require("./_enums/privacy-request.type-enum");
-/** Coordinates identity-gated, resumable data-subject requests across product-owned data contributors. */
-class DyNTS_PrivacyLifecycle_ControlService {
-    adapter;
-    contributors;
-    clock;
-    /** Creates an orchestrator with a stable contributor registry. */
-    constructor(set) {
-        this.adapter = set.adapter;
-        this.contributors = [...set.contributors]
-            .sort((first, second) => (first.contributorId.localeCompare(second.contributorId)));
-        this.clock = set.clock ?? (() => new Date());
-        this.validateSettings();
-    }
-    /** Opens or safely replays a subject-scoped request without persisting the raw idempotency key. */
-    async openRequest(set) {
-        if (!this.isBoundedText(set.subjectId, 256)
-            || !this.isBoundedText(set.organizationId, 256)
-            || !Object.values(privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type).includes(set.type)) {
-            throw this.buildError(400, 'REQUEST_INVALID', 'The privacy request is invalid.');
-        }
-        if (!this.isBoundedText(set.idempotencyKey, 256)
-            || !this.isFutureDate(set.deadlineAt)) {
-            throw this.buildError(400, 'IDEMPOTENCY_KEY_INVALID', 'The privacy request key is invalid.');
-        }
-        const createdAt = this.clock().toISOString();
-        const request = {
-            requestId: (0, crypto_1.randomUUID)(),
-            subjectId: set.subjectId,
-            organizationId: set.organizationId,
-            type: set.type,
-            state: privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.received,
-            idempotencyHash: this.hashIdempotency(set),
-            revision: 0,
-            createdAt: createdAt,
-            deadlineAt: set.deadlineAt,
-            identityVerifiedAt: '',
-            scopedAt: '',
-            plannedAt: '',
-            executionStartedAt: '',
-            verifyingStartedAt: '',
-            completedAt: '',
-        };
-        const result = await this.adapter.createOrGetRequest(request);
-        if (result.request.idempotencyHash !== request.idempotencyHash
-            || result.request.subjectId !== request.subjectId
-            || result.request.organizationId !== request.organizationId
-            || result.request.type !== request.type) {
-            throw this.buildError(409, 'IDEMPOTENCY_CONFLICT', 'The idempotency key belongs to another request.');
-        }
-        return { request: this.toRequestView(result.request), created: result.created };
-    }
-    /** Marks request identity verified after the application has completed its security challenge. */
-    async verifyIdentity(requestId, subjectId) {
-        const request = await this.requireOwnedRequest(requestId, subjectId);
-        if (request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.identityVerified) {
-            return this.toRequestView(request);
-        }
-        if (request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.received) {
-            throw this.buildError(409, 'IDENTITY_STATE_CONFLICT', 'The request cannot be identity-verified now.');
-        }
-        const replacement = await this.replaceState(request, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.identityVerified, {
-            identityVerifiedAt: this.clock().toISOString(),
-        });
-        return this.toRequestView(replacement);
-    }
-    /** Executes or resumes all contributors and never reports complete while one contributor failed. */
-    async processRequest(requestId, subjectId) {
-        let request = await this.requireOwnedRequest(requestId, subjectId);
-        if (request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.completed) {
-            return this.buildResult(request, await this.adapter.listContributorOutcomes(request.requestId));
-        }
-        if (request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.identityVerified
-            && request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.scoped
-            && request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.planned
-            && request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.executing
-            && request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.verifying
-            && request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.partiallyCompleted) {
-            throw this.buildError(409, 'EXECUTION_STATE_CONFLICT', 'The request is not ready for execution.');
-        }
-        if (request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.identityVerified) {
-            request = await this.replaceState(request, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.scoped, {
-                scopedAt: this.clock().toISOString(),
-            });
-        }
-        const context = this.buildContext(request);
-        let plans = await this.adapter.listContributorPlans(request.requestId);
-        this.validateStoredPlans(plans);
-        if (request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.scoped
-            || request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.partiallyCompleted) {
-            await this.planMissingContributors(request.requestId, context, plans);
-            plans = await this.adapter.listContributorPlans(request.requestId);
-            this.validateStoredPlans(plans);
-            if (!this.hasAllContributorPlans(plans)) {
-                request = await this.replaceState(request, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.partiallyCompleted, {
-                    completedAt: '',
-                });
-                return this.buildResult(request, await this.adapter.listContributorOutcomes(request.requestId));
-            }
-            request = await this.replaceState(request, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.planned, {
-                plannedAt: this.clock().toISOString(),
-            });
-        }
-        if (request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.planned) {
-            this.validateStoredPlans(plans);
-            request = await this.replaceState(request, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.executing, {
-                executionStartedAt: request.executionStartedAt || this.clock().toISOString(),
-                completedAt: '',
-            });
-        }
-        if (request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.executing) {
-            await this.executeMissingContributors(request.requestId, context, plans);
-            request = await this.replaceState(request, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.verifying, {
-                verifyingStartedAt: this.clock().toISOString(),
-            });
-        }
-        let outcomes = await this.adapter.listContributorOutcomes(request.requestId);
-        if (request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.verifying) {
-            await this.verifyContributorOutcomes(context, plans, outcomes);
-            outcomes = await this.adapter.listContributorOutcomes(request.requestId);
-        }
-        const isComplete = this.contributors.every((contributor) => (outcomes.some((outcome) => (outcome.contributorId === contributor.contributorId
-            && outcome.outcome !== privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.failed))));
-        const finalState = isComplete
-            ? privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.completed
-            : privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.partiallyCompleted;
-        request = await this.replaceState(request, finalState, {
-            completedAt: isComplete ? this.clock().toISOString() : '',
-        });
-        return this.buildResult(request, outcomes);
-    }
-    /** Returns an owned request and its content-free contributor outcomes. */
-    async getRequest(requestId, subjectId) {
-        const request = await this.requireOwnedRequest(requestId, subjectId);
-        return this.buildResult(request, await this.adapter.listContributorOutcomes(request.requestId));
-    }
-    async planMissingContributors(requestId, context, existingPlans) {
-        const plannedContributorIds = new Set(existingPlans.map((plan) => plan.contributorId));
-        for (const contributor of this.contributors) {
-            if (plannedContributorIds.has(contributor.contributorId)) {
-                continue;
-            }
-            try {
-                const plan = await contributor.plan(context);
-                this.validatePlan(contributor, plan);
-                await this.adapter.saveContributorPlan(requestId, plan);
-            }
-            catch (error) {
-                await this.adapter.saveContributorOutcome(requestId, this.buildFailedOutcome(contributor.contributorId, privacy_contributor_action_type_enum_1.DyNTS_PrivacyContributorAction_Type.noData, error instanceof fsm_dynamo_1.DyFM_Error ? 'CONTRIBUTOR_PLAN_INVALID' : 'CONTRIBUTOR_PLAN_FAILED'));
-            }
-        }
-    }
-    async executeMissingContributors(requestId, context, plans) {
-        const existing = await this.adapter.listContributorOutcomes(requestId);
-        const completedContributorIds = new Set();
-        for (const contributor of this.contributors) {
-            const plan = plans.find((item) => item.contributorId === contributor.contributorId);
-            const outcome = existing.find((item) => item.contributorId === contributor.contributorId);
-            if (plan && outcome && this.isValidCompletedOutcome(contributor, plan, outcome)) {
-                completedContributorIds.add(contributor.contributorId);
-            }
-        }
-        for (const contributor of this.contributors) {
-            if (completedContributorIds.has(contributor.contributorId)) {
-                continue;
-            }
-            const plan = plans.find((item) => item.contributorId === contributor.contributorId);
-            const outcome = plan
-                ? await this.executeContributor(contributor, context, plan)
-                : this.buildFailedOutcome(contributor.contributorId, privacy_contributor_action_type_enum_1.DyNTS_PrivacyContributorAction_Type.noData, 'CONTRIBUTOR_PLAN_MISSING');
-            await this.adapter.saveContributorOutcome(requestId, outcome);
-        }
-    }
-    async executeContributor(contributor, context, plan) {
-        try {
-            const outcome = await contributor.execute(context, plan);
-            this.validateOutcome(contributor, plan, outcome);
-            return { ...outcome };
-        }
-        catch (error) {
-            return this.buildFailedOutcome(contributor.contributorId, plan.action, error instanceof fsm_dynamo_1.DyFM_Error ? 'CONTRIBUTOR_CONTRACT_FAILED' : 'CONTRIBUTOR_EXECUTION_FAILED');
-        }
-    }
-    async verifyContributorOutcomes(context, plans, outcomes) {
-        for (const contributor of this.contributors) {
-            const outcome = outcomes.find((item) => item.contributorId === contributor.contributorId);
-            const plan = plans.find((item) => item.contributorId === contributor.contributorId);
-            if (!outcome || outcome.outcome === privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.failed || !plan) {
-                continue;
-            }
-            try {
-                this.validateOutcome(contributor, plan, outcome);
-                if (!await contributor.verify(context, outcome)) {
-                    await this.adapter.saveContributorOutcome(context.requestId, this.buildFailedOutcome(contributor.contributorId, outcome.action, 'CONTRIBUTOR_VERIFY_FAILED'));
-                }
-            }
-            catch {
-                await this.adapter.saveContributorOutcome(context.requestId, this.buildFailedOutcome(contributor.contributorId, outcome.action, 'CONTRIBUTOR_VERIFY_FAILED'));
-            }
-        }
-    }
-    validatePlan(contributor, plan) {
-        if (plan.contributorId !== contributor.contributorId
-            || !this.isBoundedText(plan.contributorId, 128)
-            || !Object.values(privacy_contributor_action_type_enum_1.DyNTS_PrivacyContributorAction_Type).includes(plan.action)
-            || (plan.action === privacy_contributor_action_type_enum_1.DyNTS_PrivacyContributorAction_Type.retainWithBasis && !plan.retentionBasisCode)
-            || (plan.action !== privacy_contributor_action_type_enum_1.DyNTS_PrivacyContributorAction_Type.retainWithBasis && !!plan.retentionBasisCode)) {
-            throw this.buildError(500, 'CONTRIBUTOR_PLAN_INVALID', 'A privacy contributor returned an invalid plan.');
-        }
-    }
-    validateOutcome(contributor, plan, outcome) {
-        if (outcome.contributorId !== contributor.contributorId
-            || outcome.action !== plan.action
-            || !Object.values(privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type).includes(outcome.outcome)
-            || !Number.isSafeInteger(outcome.processedRecordCount)
-            || outcome.processedRecordCount < 0
-            || (outcome.outcome === privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.retainedWithBasis
-                && outcome.retentionBasisCode !== plan.retentionBasisCode)
-            || (outcome.outcome !== privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.retainedWithBasis
-                && !!outcome.retentionBasisCode)
-            || (outcome.outcome === privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.failed && !outcome.errorCode)
-            || (outcome.outcome !== privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.failed && !!outcome.errorCode)
-            || (outcome.action === privacy_contributor_action_type_enum_1.DyNTS_PrivacyContributorAction_Type.retainWithBasis
-                && outcome.outcome !== privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.retainedWithBasis
-                && outcome.outcome !== privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.failed)
-            || (outcome.action !== privacy_contributor_action_type_enum_1.DyNTS_PrivacyContributorAction_Type.retainWithBasis
-                && outcome.outcome === privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.retainedWithBasis)
-            || (!!outcome.artifactChecksum && !/^[a-f0-9]{64}$/u.test(outcome.artifactChecksum))
-            || !Number.isFinite(new Date(outcome.completedAt).getTime())) {
-            throw this.buildError(500, 'CONTRIBUTOR_OUTCOME_INVALID', 'A privacy contributor returned an invalid outcome.');
-        }
-    }
-    buildFailedOutcome(contributorId, action, errorCode) {
-        return {
-            contributorId: contributorId,
-            action: action,
-            outcome: privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.failed,
-            retentionBasisCode: '',
-            artifactChecksum: '',
-            processedRecordCount: 0,
-            errorCode: errorCode,
-            completedAt: this.clock().toISOString(),
-        };
-    }
-    async requireOwnedRequest(requestId, subjectId) {
-        const request = await this.adapter.findRequestById(requestId);
-        if (request?.subjectId !== subjectId) {
-            throw this.buildError(404, 'REQUEST_NOT_FOUND', 'The privacy request was not found.');
-        }
-        return request;
-    }
-    async replaceState(request, state, dates) {
-        const replacement = {
-            ...request,
-            ...dates,
-            state: state,
-            revision: request.revision + 1,
-        };
-        const didReplace = await this.adapter.replaceRequest(replacement, request.revision);
-        if (!didReplace) {
-            throw this.buildError(409, 'REQUEST_REVISION_CONFLICT', 'The privacy request changed concurrently.');
-        }
-        return replacement;
-    }
-    buildContext(request) {
-        return {
-            requestId: request.requestId,
-            subjectId: request.subjectId,
-            organizationId: request.organizationId,
-            type: request.type,
-        };
-    }
-    buildResult(request, outcomes) {
-        if (outcomes.some((outcome) => (!this.contributors.some((contributor) => (contributor.contributorId === outcome.contributorId))))) {
-            throw this.buildError(500, 'CONTRIBUTOR_OUTCOME_UNKNOWN', 'An unknown contributor outcome was stored.');
-        }
-        return {
-            request: this.toRequestView(request),
-            outcomes: [...outcomes].sort((first, second) => (first.contributorId.localeCompare(second.contributorId))),
-        };
-    }
-    toRequestView(request) {
-        return {
-            requestId: request.requestId,
-            subjectId: request.subjectId,
-            organizationId: request.organizationId,
-            type: request.type,
-            state: request.state,
-            revision: request.revision,
-            createdAt: request.createdAt,
-            deadlineAt: request.deadlineAt,
-            identityVerifiedAt: request.identityVerifiedAt,
-            scopedAt: request.scopedAt,
-            plannedAt: request.plannedAt,
-            executionStartedAt: request.executionStartedAt,
-            verifyingStartedAt: request.verifyingStartedAt,
-            completedAt: request.completedAt,
-        };
-    }
-    hashIdempotency(set) {
-        return (0, crypto_1.createHash)('sha256')
-            .update(`${set.subjectId}\u0000${set.organizationId}\u0000${set.type}\u0000${set.idempotencyKey}`)
-            .digest('hex');
-    }
-    isFutureDate(value) {
-        const timestamp = new Date(value).getTime();
-        return Number.isFinite(timestamp) && timestamp > this.clock().getTime();
-    }
-    isBoundedText(value, maxLength) {
-        return typeof value === 'string' && !!value && value.length <= maxLength && !value.includes('\u0000');
-    }
-    hasAllContributorPlans(plans) {
-        return this.contributors.every((contributor) => (plans.some((plan) => (plan.contributorId === contributor.contributorId))));
-    }
-    validateStoredPlans(plans) {
-        for (const plan of plans) {
-            const contributor = this.contributors.find((item) => item.contributorId === plan.contributorId);
-            if (!contributor) {
-                throw this.buildError(500, 'CONTRIBUTOR_PLAN_UNKNOWN', 'An unknown privacy contributor plan was stored.');
-            }
-            this.validatePlan(contributor, plan);
-        }
-    }
-    isValidCompletedOutcome(contributor, plan, outcome) {
-        try {
-            this.validateOutcome(contributor, plan, outcome);
-            return outcome.outcome !== privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.failed;
-        }
-        catch {
-            return false;
-        }
-    }
-    validateSettings() {
-        const contributorIds = this.contributors.map((item) => (item.contributorId));
-        if (!this.adapter
-            || !this.contributors.length
-            || contributorIds.some((contributorId) => !contributorId)
-            || new Set(contributorIds).size !== contributorIds.length) {
-            throw this.buildError(500, 'SETTINGS_INVALID', 'The privacy lifecycle settings are invalid.');
-        }
-    }
-    buildError(status, errorCode, message) {
-        return new fsm_dynamo_1.DyFM_Error({
-            status: status,
-            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|PRIVACY_LIFECYCLE|${errorCode}`,
-            message: message,
-            userMessage: status < 500
-                ? message
-                : 'The privacy request could not be processed safely. Please try again later.',
-            issuerService: this.constructor.name,
-        });
-    }
-}
-exports.DyNTS_PrivacyLifecycle_ControlService = DyNTS_PrivacyLifecycle_ControlService;
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyLifecycle_ControlService = void 0;
+const crypto_1 = require("crypto");
+const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
+const global_settings_const_1 = require("../../_collections/global-settings.const");
+const privacy_contributor_action_type_enum_1 = require("./_enums/privacy-contributor-action.type-enum");
+const privacy_contributor_outcome_type_enum_1 = require("./_enums/privacy-contributor-outcome.type-enum");
+const privacy_request_state_type_enum_1 = require("./_enums/privacy-request-state.type-enum");
+const privacy_request_type_enum_1 = require("./_enums/privacy-request.type-enum");
+/** Coordinates identity-gated, resumable data-subject requests across product-owned data contributors. */
+class DyNTS_PrivacyLifecycle_ControlService {
+    adapter;
+    contributors;
+    clock;
+    /** Creates an orchestrator with a stable contributor registry. */
+    constructor(set) {
+        this.adapter = set.adapter;
+        this.contributors = [...set.contributors]
+            .sort((first, second) => (first.contributorId.localeCompare(second.contributorId)));
+        this.clock = set.clock ?? (() => new Date());
+        this.validateSettings();
+    }
+    /** Opens or safely replays a subject-scoped request without persisting the raw idempotency key. */
+    async openRequest(set) {
+        if (!this.isBoundedText(set.subjectId, 256)
+            || !this.isBoundedText(set.organizationId, 256)
+            || !Object.values(privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type).includes(set.type)) {
+            throw this.buildError(400, 'REQUEST_INVALID', 'The privacy request is invalid.');
+        }
+        if (!this.isBoundedText(set.idempotencyKey, 256)
+            || !this.isFutureDate(set.deadlineAt)) {
+            throw this.buildError(400, 'IDEMPOTENCY_KEY_INVALID', 'The privacy request key is invalid.');
+        }
+        const createdAt = this.clock().toISOString();
+        const request = {
+            requestId: (0, crypto_1.randomUUID)(),
+            subjectId: set.subjectId,
+            organizationId: set.organizationId,
+            type: set.type,
+            state: privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.received,
+            idempotencyHash: this.hashIdempotency(set),
+            revision: 0,
+            createdAt: createdAt,
+            deadlineAt: set.deadlineAt,
+            identityVerifiedAt: '',
+            scopedAt: '',
+            plannedAt: '',
+            executionStartedAt: '',
+            verifyingStartedAt: '',
+            completedAt: '',
+        };
+        const result = await this.adapter.createOrGetRequest(request);
+        if (result.request.idempotencyHash !== request.idempotencyHash
+            || result.request.subjectId !== request.subjectId
+            || result.request.organizationId !== request.organizationId
+            || result.request.type !== request.type) {
+            throw this.buildError(409, 'IDEMPOTENCY_CONFLICT', 'The idempotency key belongs to another request.');
+        }
+        return { request: this.toRequestView(result.request), created: result.created };
+    }
+    /** Marks request identity verified after the application has completed its security challenge. */
+    async verifyIdentity(requestId, subjectId) {
+        const request = await this.requireOwnedRequest(requestId, subjectId);
+        if (request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.identityVerified) {
+            return this.toRequestView(request);
+        }
+        if (request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.received) {
+            throw this.buildError(409, 'IDENTITY_STATE_CONFLICT', 'The request cannot be identity-verified now.');
+        }
+        const replacement = await this.replaceState(request, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.identityVerified, {
+            identityVerifiedAt: this.clock().toISOString(),
+        });
+        return this.toRequestView(replacement);
+    }
+    /** Executes or resumes all contributors and never reports complete while one contributor failed. */
+    async processRequest(requestId, subjectId) {
+        let request = await this.requireOwnedRequest(requestId, subjectId);
+        if (request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.completed) {
+            return this.buildResult(request, await this.adapter.listContributorOutcomes(request.requestId));
+        }
+        if (request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.identityVerified
+            && request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.scoped
+            && request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.planned
+            && request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.executing
+            && request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.verifying
+            && request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.partiallyCompleted) {
+            throw this.buildError(409, 'EXECUTION_STATE_CONFLICT', 'The request is not ready for execution.');
+        }
+        if (request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.identityVerified) {
+            request = await this.replaceState(request, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.scoped, {
+                scopedAt: this.clock().toISOString(),
+            });
+        }
+        const context = this.buildContext(request);
+        let plans = await this.adapter.listContributorPlans(request.requestId);
+        this.validateStoredPlans(plans);
+        if (request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.scoped
+            || request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.partiallyCompleted) {
+            await this.planMissingContributors(request.requestId, context, plans);
+            plans = await this.adapter.listContributorPlans(request.requestId);
+            this.validateStoredPlans(plans);
+            if (!this.hasAllContributorPlans(plans)) {
+                request = await this.replaceState(request, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.partiallyCompleted, {
+                    completedAt: '',
+                });
+                return this.buildResult(request, await this.adapter.listContributorOutcomes(request.requestId));
+            }
+            request = await this.replaceState(request, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.planned, {
+                plannedAt: this.clock().toISOString(),
+            });
+        }
+        if (request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.planned) {
+            this.validateStoredPlans(plans);
+            request = await this.replaceState(request, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.executing, {
+                executionStartedAt: request.executionStartedAt || this.clock().toISOString(),
+                completedAt: '',
+            });
+        }
+        if (request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.executing) {
+            await this.executeMissingContributors(request.requestId, context, plans);
+            request = await this.replaceState(request, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.verifying, {
+                verifyingStartedAt: this.clock().toISOString(),
+            });
+        }
+        let outcomes = await this.adapter.listContributorOutcomes(request.requestId);
+        if (request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.verifying) {
+            await this.verifyContributorOutcomes(context, plans, outcomes);
+            outcomes = await this.adapter.listContributorOutcomes(request.requestId);
+        }
+        const isComplete = this.contributors.every((contributor) => (outcomes.some((outcome) => (outcome.contributorId === contributor.contributorId
+            && outcome.outcome !== privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.failed))));
+        const finalState = isComplete
+            ? privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.completed
+            : privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.partiallyCompleted;
+        request = await this.replaceState(request, finalState, {
+            completedAt: isComplete ? this.clock().toISOString() : '',
+        });
+        return this.buildResult(request, outcomes);
+    }
+    /** Returns an owned request and its content-free contributor outcomes. */
+    async getRequest(requestId, subjectId) {
+        const request = await this.requireOwnedRequest(requestId, subjectId);
+        return this.buildResult(request, await this.adapter.listContributorOutcomes(request.requestId));
+    }
+    async planMissingContributors(requestId, context, existingPlans) {
+        const plannedContributorIds = new Set(existingPlans.map((plan) => plan.contributorId));
+        for (const contributor of this.contributors) {
+            if (plannedContributorIds.has(contributor.contributorId)) {
+                continue;
+            }
+            try {
+                const plan = await contributor.plan(context);
+                this.validatePlan(contributor, plan);
+                await this.adapter.saveContributorPlan(requestId, plan);
+            }
+            catch (error) {
+                await this.adapter.saveContributorOutcome(requestId, this.buildFailedOutcome(contributor.contributorId, privacy_contributor_action_type_enum_1.DyNTS_PrivacyContributorAction_Type.noData, error instanceof fsm_dynamo_1.DyFM_Error ? 'CONTRIBUTOR_PLAN_INVALID' : 'CONTRIBUTOR_PLAN_FAILED'));
+            }
+        }
+    }
+    async executeMissingContributors(requestId, context, plans) {
+        const existing = await this.adapter.listContributorOutcomes(requestId);
+        const completedContributorIds = new Set();
+        for (const contributor of this.contributors) {
+            const plan = plans.find((item) => item.contributorId === contributor.contributorId);
+            const outcome = existing.find((item) => item.contributorId === contributor.contributorId);
+            if (plan && outcome && this.isValidCompletedOutcome(contributor, plan, outcome)) {
+                completedContributorIds.add(contributor.contributorId);
+            }
+        }
+        for (const contributor of this.contributors) {
+            if (completedContributorIds.has(contributor.contributorId)) {
+                continue;
+            }
+            const plan = plans.find((item) => item.contributorId === contributor.contributorId);
+            const outcome = plan
+                ? await this.executeContributor(contributor, context, plan)
+                : this.buildFailedOutcome(contributor.contributorId, privacy_contributor_action_type_enum_1.DyNTS_PrivacyContributorAction_Type.noData, 'CONTRIBUTOR_PLAN_MISSING');
+            await this.adapter.saveContributorOutcome(requestId, outcome);
+        }
+    }
+    async executeContributor(contributor, context, plan) {
+        try {
+            const outcome = await contributor.execute(context, plan);
+            this.validateOutcome(contributor, plan, outcome);
+            return { ...outcome };
+        }
+        catch (error) {
+            return this.buildFailedOutcome(contributor.contributorId, plan.action, error instanceof fsm_dynamo_1.DyFM_Error ? 'CONTRIBUTOR_CONTRACT_FAILED' : 'CONTRIBUTOR_EXECUTION_FAILED');
+        }
+    }
+    async verifyContributorOutcomes(context, plans, outcomes) {
+        for (const contributor of this.contributors) {
+            const outcome = outcomes.find((item) => item.contributorId === contributor.contributorId);
+            const plan = plans.find((item) => item.contributorId === contributor.contributorId);
+            if (!outcome || outcome.outcome === privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.failed || !plan) {
+                continue;
+            }
+            try {
+                this.validateOutcome(contributor, plan, outcome);
+                if (!await contributor.verify(context, outcome)) {
+                    await this.adapter.saveContributorOutcome(context.requestId, this.buildFailedOutcome(contributor.contributorId, outcome.action, 'CONTRIBUTOR_VERIFY_FAILED'));
+                }
+            }
+            catch {
+                await this.adapter.saveContributorOutcome(context.requestId, this.buildFailedOutcome(contributor.contributorId, outcome.action, 'CONTRIBUTOR_VERIFY_FAILED'));
+            }
+        }
+    }
+    validatePlan(contributor, plan) {
+        if (plan.contributorId !== contributor.contributorId
+            || !this.isBoundedText(plan.contributorId, 128)
+            || !Object.values(privacy_contributor_action_type_enum_1.DyNTS_PrivacyContributorAction_Type).includes(plan.action)
+            || (plan.action === privacy_contributor_action_type_enum_1.DyNTS_PrivacyContributorAction_Type.retainWithBasis && !plan.retentionBasisCode)
+            || (plan.action !== privacy_contributor_action_type_enum_1.DyNTS_PrivacyContributorAction_Type.retainWithBasis && !!plan.retentionBasisCode)) {
+            throw this.buildError(500, 'CONTRIBUTOR_PLAN_INVALID', 'A privacy contributor returned an invalid plan.');
+        }
+    }
+    validateOutcome(contributor, plan, outcome) {
+        if (outcome.contributorId !== contributor.contributorId
+            || outcome.action !== plan.action
+            || !Object.values(privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type).includes(outcome.outcome)
+            || !Number.isSafeInteger(outcome.processedRecordCount)
+            || outcome.processedRecordCount < 0
+            || (outcome.outcome === privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.retainedWithBasis
+                && outcome.retentionBasisCode !== plan.retentionBasisCode)
+            || (outcome.outcome !== privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.retainedWithBasis
+                && !!outcome.retentionBasisCode)
+            || (outcome.outcome === privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.failed && !outcome.errorCode)
+            || (outcome.outcome !== privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.failed && !!outcome.errorCode)
+            || (outcome.action === privacy_contributor_action_type_enum_1.DyNTS_PrivacyContributorAction_Type.retainWithBasis
+                && outcome.outcome !== privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.retainedWithBasis
+                && outcome.outcome !== privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.failed)
+            || (outcome.action !== privacy_contributor_action_type_enum_1.DyNTS_PrivacyContributorAction_Type.retainWithBasis
+                && outcome.outcome === privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.retainedWithBasis)
+            || (!!outcome.artifactChecksum && !/^[a-f0-9]{64}$/u.test(outcome.artifactChecksum))
+            || !Number.isFinite(new Date(outcome.completedAt).getTime())) {
+            throw this.buildError(500, 'CONTRIBUTOR_OUTCOME_INVALID', 'A privacy contributor returned an invalid outcome.');
+        }
+    }
+    buildFailedOutcome(contributorId, action, errorCode) {
+        return {
+            contributorId: contributorId,
+            action: action,
+            outcome: privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.failed,
+            retentionBasisCode: '',
+            artifactChecksum: '',
+            processedRecordCount: 0,
+            errorCode: errorCode,
+            completedAt: this.clock().toISOString(),
+        };
+    }
+    async requireOwnedRequest(requestId, subjectId) {
+        const request = await this.adapter.findRequestById(requestId);
+        if (request?.subjectId !== subjectId) {
+            throw this.buildError(404, 'REQUEST_NOT_FOUND', 'The privacy request was not found.');
+        }
+        return request;
+    }
+    async replaceState(request, state, dates) {
+        const replacement = {
+            ...request,
+            ...dates,
+            state: state,
+            revision: request.revision + 1,
+        };
+        const didReplace = await this.adapter.replaceRequest(replacement, request.revision);
+        if (!didReplace) {
+            throw this.buildError(409, 'REQUEST_REVISION_CONFLICT', 'The privacy request changed concurrently.');
+        }
+        return replacement;
+    }
+    buildContext(request) {
+        return {
+            requestId: request.requestId,
+            subjectId: request.subjectId,
+            organizationId: request.organizationId,
+            type: request.type,
+        };
+    }
+    buildResult(request, outcomes) {
+        if (outcomes.some((outcome) => (!this.contributors.some((contributor) => (contributor.contributorId === outcome.contributorId))))) {
+            throw this.buildError(500, 'CONTRIBUTOR_OUTCOME_UNKNOWN', 'An unknown contributor outcome was stored.');
+        }
+        return {
+            request: this.toRequestView(request),
+            outcomes: [...outcomes].sort((first, second) => (first.contributorId.localeCompare(second.contributorId))),
+        };
+    }
+    toRequestView(request) {
+        return {
+            requestId: request.requestId,
+            subjectId: request.subjectId,
+            organizationId: request.organizationId,
+            type: request.type,
+            state: request.state,
+            revision: request.revision,
+            createdAt: request.createdAt,
+            deadlineAt: request.deadlineAt,
+            identityVerifiedAt: request.identityVerifiedAt,
+            scopedAt: request.scopedAt,
+            plannedAt: request.plannedAt,
+            executionStartedAt: request.executionStartedAt,
+            verifyingStartedAt: request.verifyingStartedAt,
+            completedAt: request.completedAt,
+        };
+    }
+    hashIdempotency(set) {
+        return (0, crypto_1.createHash)('sha256')
+            .update(`${set.subjectId}\u0000${set.organizationId}\u0000${set.type}\u0000${set.idempotencyKey}`)
+            .digest('hex');
+    }
+    isFutureDate(value) {
+        const timestamp = new Date(value).getTime();
+        return Number.isFinite(timestamp) && timestamp > this.clock().getTime();
+    }
+    isBoundedText(value, maxLength) {
+        return typeof value === 'string' && !!value && value.length <= maxLength && !value.includes('\u0000');
+    }
+    hasAllContributorPlans(plans) {
+        return this.contributors.every((contributor) => (plans.some((plan) => (plan.contributorId === contributor.contributorId))));
+    }
+    validateStoredPlans(plans) {
+        for (const plan of plans) {
+            const contributor = this.contributors.find((item) => item.contributorId === plan.contributorId);
+            if (!contributor) {
+                throw this.buildError(500, 'CONTRIBUTOR_PLAN_UNKNOWN', 'An unknown privacy contributor plan was stored.');
+            }
+            this.validatePlan(contributor, plan);
+        }
+    }
+    isValidCompletedOutcome(contributor, plan, outcome) {
+        try {
+            this.validateOutcome(contributor, plan, outcome);
+            return outcome.outcome !== privacy_contributor_outcome_type_enum_1.DyNTS_PrivacyContributorOutcome_Type.failed;
+        }
+        catch {
+            return false;
+        }
+    }
+    validateSettings() {
+        const contributorIds = this.contributors.map((item) => (item.contributorId));
+        if (!this.adapter
+            || !this.contributors.length
+            || contributorIds.some((contributorId) => !contributorId)
+            || new Set(contributorIds).size !== contributorIds.length) {
+            throw this.buildError(500, 'SETTINGS_INVALID', 'The privacy lifecycle settings are invalid.');
+        }
+    }
+    buildError(status, errorCode, message) {
+        return new fsm_dynamo_1.DyFM_Error({
+            status: status,
+            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|PRIVACY_LIFECYCLE|${errorCode}`,
+            message: message,
+            userMessage: status < 500
+                ? message
+                : 'The privacy request could not be processed safely. Please try again later.',
+            issuerService: this.constructor.name,
+        });
+    }
+}
+exports.DyNTS_PrivacyLifecycle_ControlService = DyNTS_PrivacyLifecycle_ControlService;
 //# sourceMappingURL=privacy-lifecycle.control-service.js.map