@futdevpro/nts-dynamo 1.15.156 → 1.15.160

package/build/_modules/privacy-lifecycle/privacy-export-artifact.mongo-store.js

@@ -0,0 +1,126 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyExportArtifact_MongoStore = void 0;
+const tslib_1 = require("tslib");
+const mongoose_1 = tslib_1.__importStar(require("mongoose"));
+const DyNTS_privacyExportArtifactModelName = 'DyNTSPrivacyExportArtifact';
+/** Strict Mongo persistence with atomic replay, tenant metadata and automatic expiry. */
+class DyNTS_PrivacyExportArtifact_MongoStore {
+    injectedModel;
+    readiness;
+    /** Accepts an isolated model for integration tests; production resolves the singleton lazily. */
+    constructor(set = {}) {
+        this.injectedModel = set.model;
+    }
+    /** Creates the unique scope and TTL indexes before reads or writes. */
+    async ensureReady() {
+        this.readiness ??= this.getModel().createIndexes()
+            .then(() => undefined)
+            .catch((error) => {
+            this.readiness = undefined;
+            throw error;
+        });
+        await this.readiness;
+    }
+    /** Creates one artifact or returns the winner of an exact concurrent replay. */
+    async createOrGet(record) {
+        try {
+            const created = await this.getModel().create([record]);
+            const value = created[0]?.toObject();
+            if (!value) {
+                throw new Error('DYNTS|PRIVACY_EXPORT_ARTIFACT|CREATE_EMPTY');
+            }
+            return { record: value, created: true };
+        }
+        catch (error) {
+            if (!this.isDuplicateKey(error)) {
+                throw error;
+            }
+            const existing = await this.find(record.scopeHash);
+            if (!existing) {
+                throw error;
+            }
+            return { record: existing, created: false };
+        }
+    }
+    /** Loads one encrypted record by its content-free request-contributor scope hash. */
+    find(scopeHash) {
+        return this.getModel().findOne({ scopeHash: scopeHash })
+            .lean().exec();
+    }
+    /** Deletes already expired records independently of Mongo TTL scheduling latency. */
+    async deleteExpired(cutoff) {
+        return (await this.getModel().deleteMany({ expiresAt: { $lte: cutoff } }).exec()).deletedCount;
+    }
+    /** Builds the strict encrypted-artifact schema for production composition and contract tests. */
+    static createSchema() {
+        const schema = new mongoose_1.Schema({
+            contractVersion: {
+                type: String,
+                required: true,
+                immutable: true,
+                enum: ['dynts-privacy-export-artifact/1'],
+            },
+            scopeHash: { type: String, required: true, immutable: true, match: /^[a-f0-9]{64}$/u },
+            requestId: { type: String, required: true, immutable: true, maxlength: 128 },
+            contributorId: { type: String, required: true, immutable: true, maxlength: 128 },
+            subjectId: { type: String, required: true, immutable: true, maxlength: 128 },
+            organizationId: { type: String, required: true, immutable: true, maxlength: 128 },
+            contentType: { type: String, required: true, immutable: true, enum: ['application/json'] },
+            encryptedPayload: {
+                type: String,
+                required: true,
+                immutable: true,
+                maxlength: DyNTS_PrivacyExportArtifact_MongoStore.maxCiphertextLength(),
+            },
+            encryptionKeyId: {
+                type: String,
+                required: true,
+                immutable: true,
+                match: /^[a-z0-9][a-z0-9._-]{0,127}$/u,
+            },
+            plaintextChecksum: {
+                type: String,
+                required: true,
+                immutable: true,
+                match: /^[a-f0-9]{64}$/u,
+            },
+            plaintextBytes: {
+                type: Number,
+                required: true,
+                immutable: true,
+                min: 1,
+                max: 16_777_216,
+                validate: Number.isSafeInteger,
+            },
+            createdAt: { type: Date, required: true, immutable: true },
+            expiresAt: { type: Date, required: true, immutable: true },
+        }, {
+            collection: 'dynts_privacy_export_artifacts',
+            strict: 'throw',
+            versionKey: false,
+        });
+        schema.index({ scopeHash: 1 }, { unique: true, name: 'uq_dynts_privacy_export_scope' });
+        schema.index({ expiresAt: 1 }, { expireAfterSeconds: 0, name: 'ttl_dynts_privacy_export_expiry' });
+        schema.index({ subjectId: 1, organizationId: 1, expiresAt: 1 }, { name: 'ix_dynts_privacy_export_authority_expiry' });
+        return schema;
+    }
+    getModel() {
+        if (this.injectedModel) {
+            return this.injectedModel;
+        }
+        if (mongoose_1.default.modelNames().includes(DyNTS_privacyExportArtifactModelName)) {
+            return mongoose_1.default.model(DyNTS_privacyExportArtifactModelName);
+        }
+        return mongoose_1.default.model(DyNTS_privacyExportArtifactModelName, DyNTS_PrivacyExportArtifact_MongoStore.createSchema());
+    }
+    static maxCiphertextLength() {
+        return 33_554_432;
+    }
+    isDuplicateKey(error) {
+        return typeof error === 'object' && error !== null && 'code' in error
+            && Object.getOwnPropertyDescriptor(error, 'code')?.value === 11000;
+    }
+}
+exports.DyNTS_PrivacyExportArtifact_MongoStore = DyNTS_PrivacyExportArtifact_MongoStore;
+//# sourceMappingURL=privacy-export-artifact.mongo-store.js.map

package/build/_modules/privacy-lifecycle/privacy-export-artifact.mongo-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-export-artifact.mongo-store.js","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/privacy-export-artifact.mongo-store.ts"],"names":[],"mappings":";;;;AAAA,6DAAqE;AAQrE,MAAM,oCAAoC,GAAiC,4BAA4B,CAAC;AAExG,yFAAyF;AACzF,MAAa,sCAAsC;IAEhC,aAAa,CAAsD;IAC5E,SAAS,CAAiB;IAElC,iGAAiG;IACjG,YAAY,MAAsE,EAAE;QAClF,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC;IACjC,CAAC;IAED,uEAAuE;IAChE,KAAK,CAAC,WAAW;QACtB,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC,aAAa,EAAE;aAC/C,IAAI,CAAC,GAAS,EAAE,CAAC,SAAS,CAAC;aAC3B,KAAK,CAAC,CAAC,KAAc,EAAS,EAAE;YAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAE3B,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACL,MAAM,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,gFAAgF;IACzE,KAAK,CAAC,WAAW,CACtB,MAAmD;QAEnD,IAAI,CAAC;YACH,MAAM,OAAO,GACX,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAE,MAAM,CAAE,CAAC,CAAC;YAC3C,MAAM,KAAK,GAA4D,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;YAE9F,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,CAAC;YAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,QAAQ,GACZ,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAEpC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,qFAAqF;IAC9E,IAAI,CAAC,SAAiB;QAC3B,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;aACrD,IAAI,EAA+C,CAAC,IAAI,EAAE,CAAC;IAChE,CAAC;IAED,qFAAqF;IAC9E,KAAK,CAAC,aAAa,CAAC,MAAY;QACrC,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC;IACjG,CAAC;IAED,iGAAiG;IAC1F,MAAM,CAAC,YAAY;QACxB,MAAM,MAAM,GAAwD,IAAI,iBAAM,CAAC;YAC7E,eAAe,EAAE;gBACf,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,CAAE,iCAAiC,CAAE;aAC5C;YACD,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE;YACtF,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAC5E,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAChF,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAC5E,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YACjF,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAE,kBAAkB,CAAE,EAAE;YAC5F,gBAAgB,EAAE;gBAChB,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,sCAAsC,CAAC,mBAAmB,EAAE;aACxE;YACD,eAAe,EAAE;gBACf,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,+BAA+B;aACvC;YACD,iBAAiB,EAAE;gBACjB,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,iBAAiB;aACzB;YACD,cAAc,EAAE;gBACd,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;gBACf,GAAG,EAAE,CAAC;gBACN,GAAG,EAAE,UAAU;gBACf,QAAQ,EAAE,MAAM,CAAC,aAAa;aAC/B;YACD,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;YAC1D,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;SAC3D,EAAE;YACD,UAAU,EAAE,gCAAgC;YAC5C,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC;QACnG,MAAM,CAAC,KAAK,CACV,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EACjD,EAAE,IAAI,EAAE,0CAA0C,EAAE,CACrD,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,QAAQ;QACd,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QAED,IAAI,kBAAQ,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC,EAAE,CAAC;YACzE,OAAO,kBAAQ,CAAC,KAAK,CACnB,oCAAoC,CACrC,CAAC;QACJ,CAAC;QAED,OAAO,kBAAQ,CAAC,KAAK,CACnB,oCAAoC,EACpC,sCAAsC,CAAC,YAAY,EAAE,CACtD,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,mBAAmB;QAChC,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,cAAc,CAAC,KAAc;QACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;eAChE,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC;IACvE,CAAC;CACF;AAnJD,wFAmJC"}

package/build/_modules/privacy-lifecycle/privacy-ledger.control-service.d.ts

@@ -1,28 +1,28 @@
-import { DyNTS_PrivacyConsentInput_Interface } from './_models/privacy-consent-input.interface';
-import { DyNTS_PrivacyConsentResult_Interface } from './_models/privacy-consent-result.interface';
-import { DyNTS_PrivacyLedgerResult_Interface } from './_models/privacy-ledger-result.interface';
-import { DyNTS_PrivacyLedgerSettings_Interface } from './_models/privacy-ledger-settings.interface';
-import { DyNTS_PrivacyLegalAcceptanceInput_Interface } from './_models/privacy-legal-acceptance-input.interface';
-import { DyNTS_PrivacyLegalAcceptanceResult_Interface } from './_models/privacy-legal-acceptance-result.interface';
-/** Maintains immutable legal acceptance and purpose-specific consent evidence. */
-export declare class DyNTS_PrivacyLedger_ControlService {
-    private readonly adapter;
-    private readonly clock;
-    /** Creates a privacy ledger over an append-only persistence adapter. */
-    constructor(set: DyNTS_PrivacyLedgerSettings_Interface);
-    /** Appends or replays acceptance of one exact checksummed legal document version. */
-    acceptLegalDocument(set: DyNTS_PrivacyLegalAcceptanceInput_Interface): Promise<DyNTS_PrivacyLegalAcceptanceResult_Interface>;
-    /** Appends or replays a purpose-specific consent grant or withdrawal. */
-    recordConsent(set: DyNTS_PrivacyConsentInput_Interface): Promise<DyNTS_PrivacyConsentResult_Interface>;
-    /** Returns immutable history plus the latest decision for every purpose. */
-    getLedger(subjectId: string, organizationId: string): Promise<DyNTS_PrivacyLedgerResult_Interface>;
-    private validateCommon;
-    private hashInput;
-    private hashContent;
-    private isSafeCode;
-    private isBoundedText;
-    private toLegalView;
-    private toConsentView;
-    private buildError;
-}
+import { DyNTS_PrivacyConsentInput_Interface } from './_models/privacy-consent-input.interface';
+import { DyNTS_PrivacyConsentResult_Interface } from './_models/privacy-consent-result.interface';
+import { DyNTS_PrivacyLedgerResult_Interface } from './_models/privacy-ledger-result.interface';
+import { DyNTS_PrivacyLedgerSettings_Interface } from './_models/privacy-ledger-settings.interface';
+import { DyNTS_PrivacyLegalAcceptanceInput_Interface } from './_models/privacy-legal-acceptance-input.interface';
+import { DyNTS_PrivacyLegalAcceptanceResult_Interface } from './_models/privacy-legal-acceptance-result.interface';
+/** Maintains immutable legal acceptance and purpose-specific consent evidence. */
+export declare class DyNTS_PrivacyLedger_ControlService {
+    private readonly adapter;
+    private readonly clock;
+    /** Creates a privacy ledger over an append-only persistence adapter. */
+    constructor(set: DyNTS_PrivacyLedgerSettings_Interface);
+    /** Appends or replays acceptance of one exact checksummed legal document version. */
+    acceptLegalDocument(set: DyNTS_PrivacyLegalAcceptanceInput_Interface): Promise<DyNTS_PrivacyLegalAcceptanceResult_Interface>;
+    /** Appends or replays a purpose-specific consent grant or withdrawal. */
+    recordConsent(set: DyNTS_PrivacyConsentInput_Interface): Promise<DyNTS_PrivacyConsentResult_Interface>;
+    /** Returns immutable history plus the latest decision for every purpose. */
+    getLedger(subjectId: string, organizationId: string): Promise<DyNTS_PrivacyLedgerResult_Interface>;
+    private validateCommon;
+    private hashInput;
+    private hashContent;
+    private isSafeCode;
+    private isBoundedText;
+    private toLegalView;
+    private toConsentView;
+    private buildError;
+}
 //# sourceMappingURL=privacy-ledger.control-service.d.ts.map

package/build/_modules/privacy-lifecycle/privacy-ledger.control-service.js

@@ -1,168 +1,168 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DyNTS_PrivacyLedger_ControlService = void 0;
-const crypto_1 = require("crypto");
-const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
-const global_settings_const_1 = require("../../_collections/global-settings.const");
-const privacy_consent_decision_type_enum_1 = require("./_enums/privacy-consent-decision.type-enum");
-/** Maintains immutable legal acceptance and purpose-specific consent evidence. */
-class DyNTS_PrivacyLedger_ControlService {
-    adapter;
-    clock;
-    /** Creates a privacy ledger over an append-only persistence adapter. */
-    constructor(set) {
-        this.adapter = set.adapter;
-        this.clock = set.clock ?? (() => new Date());
-        if (!this.adapter) {
-            throw this.buildError(500, 'SETTINGS_INVALID', 'The privacy ledger settings are invalid.');
-        }
-    }
-    /** Appends or replays acceptance of one exact checksummed legal document version. */
-    async acceptLegalDocument(set) {
-        this.validateCommon(set);
-        if (!this.isSafeCode(set.documentType)
-            || !this.isSafeCode(set.documentVersion)
-            || !/^[a-f0-9]{64}$/u.test(set.documentChecksum)) {
-            throw this.buildError(400, 'LEGAL_ACCEPTANCE_INVALID', 'The legal acceptance is invalid.');
-        }
-        const acceptance = {
-            acceptanceId: (0, crypto_1.randomUUID)(),
-            subjectId: set.subjectId,
-            organizationId: set.organizationId,
-            documentType: set.documentType,
-            documentVersion: set.documentVersion,
-            documentChecksum: set.documentChecksum,
-            sourceCode: set.sourceCode,
-            idempotencyHash: this.hashInput('legal', set),
-            requestFingerprint: this.hashContent([
-                set.documentType,
-                set.documentVersion,
-                set.documentChecksum,
-                set.sourceCode,
-            ]),
-            acceptedAt: this.clock().toISOString(),
-        };
-        const result = await this.adapter.appendLegalAcceptance(acceptance);
-        if (result.acceptance.requestFingerprint !== acceptance.requestFingerprint
-            || result.acceptance.idempotencyHash !== acceptance.idempotencyHash
-            || result.acceptance.subjectId !== acceptance.subjectId
-            || result.acceptance.organizationId !== acceptance.organizationId) {
-            throw this.buildError(409, 'IDEMPOTENCY_CONFLICT', 'The idempotency key belongs to another ledger event.');
-        }
-        return { acceptance: this.toLegalView(result.acceptance), created: result.created };
-    }
-    /** Appends or replays a purpose-specific consent grant or withdrawal. */
-    async recordConsent(set) {
-        this.validateCommon(set);
-        if (!this.isSafeCode(set.purposeCode)
-            || !this.isSafeCode(set.policyVersion)
-            || !Object.values(privacy_consent_decision_type_enum_1.DyNTS_PrivacyConsentDecision_Type).includes(set.decision)) {
-            throw this.buildError(400, 'CONSENT_INVALID', 'The consent decision is invalid.');
-        }
-        const consent = {
-            consentId: (0, crypto_1.randomUUID)(),
-            subjectId: set.subjectId,
-            organizationId: set.organizationId,
-            purposeCode: set.purposeCode,
-            policyVersion: set.policyVersion,
-            decision: set.decision,
-            sourceCode: set.sourceCode,
-            idempotencyHash: this.hashInput('consent', set),
-            requestFingerprint: this.hashContent([
-                set.purposeCode,
-                set.policyVersion,
-                set.decision,
-                set.sourceCode,
-            ]),
-            occurredAt: this.clock().toISOString(),
-        };
-        const result = await this.adapter.appendConsent(consent);
-        if (result.consent.requestFingerprint !== consent.requestFingerprint
-            || result.consent.idempotencyHash !== consent.idempotencyHash
-            || result.consent.subjectId !== consent.subjectId
-            || result.consent.organizationId !== consent.organizationId) {
-            throw this.buildError(409, 'IDEMPOTENCY_CONFLICT', 'The idempotency key belongs to another ledger event.');
-        }
-        return { consent: this.toConsentView(result.consent), created: result.created };
-    }
-    /** Returns immutable history plus the latest decision for every purpose. */
-    async getLedger(subjectId, organizationId) {
-        if (!subjectId || !organizationId) {
-            throw this.buildError(400, 'LEDGER_OWNER_INVALID', 'The privacy ledger owner is invalid.');
-        }
-        const legalAcceptances = await this.adapter.listLegalAcceptances(subjectId, organizationId);
-        const consentHistory = await this.adapter.listConsentHistory(subjectId, organizationId);
-        if (legalAcceptances.some((item) => (item.subjectId !== subjectId || item.organizationId !== organizationId))
-            || consentHistory.some((item) => (item.subjectId !== subjectId || item.organizationId !== organizationId))) {
-            throw this.buildError(500, 'LEDGER_SCOPE_VIOLATION', 'The privacy ledger returned an invalid scope.');
-        }
-        const consentViews = consentHistory.map((item) => this.toConsentView(item));
-        const currentByPurpose = new Map();
-        consentViews.forEach((record) => {
-            currentByPurpose.set(record.purposeCode, { ...record });
-        });
-        return {
-            legalAcceptances: [...legalAcceptances].map((item) => this.toLegalView(item)),
-            consentHistory: consentViews,
-            currentConsents: Array.from(currentByPurpose.values())
-                .sort((first, second) => first.purposeCode.localeCompare(second.purposeCode)),
-        };
-    }
-    validateCommon(set) {
-        if (!this.isBoundedText(set.subjectId, 256)
-            || !this.isBoundedText(set.organizationId, 256)
-            || !this.isSafeCode(set.sourceCode)
-            || !this.isBoundedText(set.idempotencyKey, 256)) {
-            throw this.buildError(400, 'LEDGER_EVENT_INVALID', 'The privacy ledger event is invalid.');
-        }
-    }
-    hashInput(category, set) {
-        return (0, crypto_1.createHash)('sha256')
-            .update(`${category}\u0000${set.subjectId}\u0000${set.organizationId}\u0000${set.idempotencyKey}`)
-            .digest('hex');
-    }
-    hashContent(parts) {
-        return (0, crypto_1.createHash)('sha256').update(parts.join('\u0000')).digest('hex');
-    }
-    isSafeCode(value) {
-        return typeof value === 'string' && /^[a-zA-Z0-9._:-]{1,128}$/u.test(value);
-    }
-    isBoundedText(value, maxLength) {
-        return typeof value === 'string' && !!value && value.length <= maxLength && !value.includes('\u0000');
-    }
-    toLegalView(acceptance) {
-        return {
-            acceptanceId: acceptance.acceptanceId,
-            subjectId: acceptance.subjectId,
-            organizationId: acceptance.organizationId,
-            documentType: acceptance.documentType,
-            documentVersion: acceptance.documentVersion,
-            documentChecksum: acceptance.documentChecksum,
-            sourceCode: acceptance.sourceCode,
-            acceptedAt: acceptance.acceptedAt,
-        };
-    }
-    toConsentView(record) {
-        return {
-            consentId: record.consentId,
-            subjectId: record.subjectId,
-            organizationId: record.organizationId,
-            purposeCode: record.purposeCode,
-            policyVersion: record.policyVersion,
-            decision: record.decision,
-            sourceCode: record.sourceCode,
-            occurredAt: record.occurredAt,
-        };
-    }
-    buildError(status, errorCode, message) {
-        return new fsm_dynamo_1.DyFM_Error({
-            status: status,
-            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|PRIVACY_LEDGER|${errorCode}`,
-            message: message,
-            userMessage: status < 500 ? message : 'The privacy ledger is unavailable. Please try again later.',
-            issuerService: this.constructor.name,
-        });
-    }
-}
-exports.DyNTS_PrivacyLedger_ControlService = DyNTS_PrivacyLedger_ControlService;
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyLedger_ControlService = void 0;
+const crypto_1 = require("crypto");
+const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
+const global_settings_const_1 = require("../../_collections/global-settings.const");
+const privacy_consent_decision_type_enum_1 = require("./_enums/privacy-consent-decision.type-enum");
+/** Maintains immutable legal acceptance and purpose-specific consent evidence. */
+class DyNTS_PrivacyLedger_ControlService {
+    adapter;
+    clock;
+    /** Creates a privacy ledger over an append-only persistence adapter. */
+    constructor(set) {
+        this.adapter = set.adapter;
+        this.clock = set.clock ?? (() => new Date());
+        if (!this.adapter) {
+            throw this.buildError(500, 'SETTINGS_INVALID', 'The privacy ledger settings are invalid.');
+        }
+    }
+    /** Appends or replays acceptance of one exact checksummed legal document version. */
+    async acceptLegalDocument(set) {
+        this.validateCommon(set);
+        if (!this.isSafeCode(set.documentType)
+            || !this.isSafeCode(set.documentVersion)
+            || !/^[a-f0-9]{64}$/u.test(set.documentChecksum)) {
+            throw this.buildError(400, 'LEGAL_ACCEPTANCE_INVALID', 'The legal acceptance is invalid.');
+        }
+        const acceptance = {
+            acceptanceId: (0, crypto_1.randomUUID)(),
+            subjectId: set.subjectId,
+            organizationId: set.organizationId,
+            documentType: set.documentType,
+            documentVersion: set.documentVersion,
+            documentChecksum: set.documentChecksum,
+            sourceCode: set.sourceCode,
+            idempotencyHash: this.hashInput('legal', set),
+            requestFingerprint: this.hashContent([
+                set.documentType,
+                set.documentVersion,
+                set.documentChecksum,
+                set.sourceCode,
+            ]),
+            acceptedAt: this.clock().toISOString(),
+        };
+        const result = await this.adapter.appendLegalAcceptance(acceptance);
+        if (result.acceptance.requestFingerprint !== acceptance.requestFingerprint
+            || result.acceptance.idempotencyHash !== acceptance.idempotencyHash
+            || result.acceptance.subjectId !== acceptance.subjectId
+            || result.acceptance.organizationId !== acceptance.organizationId) {
+            throw this.buildError(409, 'IDEMPOTENCY_CONFLICT', 'The idempotency key belongs to another ledger event.');
+        }
+        return { acceptance: this.toLegalView(result.acceptance), created: result.created };
+    }
+    /** Appends or replays a purpose-specific consent grant or withdrawal. */
+    async recordConsent(set) {
+        this.validateCommon(set);
+        if (!this.isSafeCode(set.purposeCode)
+            || !this.isSafeCode(set.policyVersion)
+            || !Object.values(privacy_consent_decision_type_enum_1.DyNTS_PrivacyConsentDecision_Type).includes(set.decision)) {
+            throw this.buildError(400, 'CONSENT_INVALID', 'The consent decision is invalid.');
+        }
+        const consent = {
+            consentId: (0, crypto_1.randomUUID)(),
+            subjectId: set.subjectId,
+            organizationId: set.organizationId,
+            purposeCode: set.purposeCode,
+            policyVersion: set.policyVersion,
+            decision: set.decision,
+            sourceCode: set.sourceCode,
+            idempotencyHash: this.hashInput('consent', set),
+            requestFingerprint: this.hashContent([
+                set.purposeCode,
+                set.policyVersion,
+                set.decision,
+                set.sourceCode,
+            ]),
+            occurredAt: this.clock().toISOString(),
+        };
+        const result = await this.adapter.appendConsent(consent);
+        if (result.consent.requestFingerprint !== consent.requestFingerprint
+            || result.consent.idempotencyHash !== consent.idempotencyHash
+            || result.consent.subjectId !== consent.subjectId
+            || result.consent.organizationId !== consent.organizationId) {
+            throw this.buildError(409, 'IDEMPOTENCY_CONFLICT', 'The idempotency key belongs to another ledger event.');
+        }
+        return { consent: this.toConsentView(result.consent), created: result.created };
+    }
+    /** Returns immutable history plus the latest decision for every purpose. */
+    async getLedger(subjectId, organizationId) {
+        if (!subjectId || !organizationId) {
+            throw this.buildError(400, 'LEDGER_OWNER_INVALID', 'The privacy ledger owner is invalid.');
+        }
+        const legalAcceptances = await this.adapter.listLegalAcceptances(subjectId, organizationId);
+        const consentHistory = await this.adapter.listConsentHistory(subjectId, organizationId);
+        if (legalAcceptances.some((item) => (item.subjectId !== subjectId || item.organizationId !== organizationId))
+            || consentHistory.some((item) => (item.subjectId !== subjectId || item.organizationId !== organizationId))) {
+            throw this.buildError(500, 'LEDGER_SCOPE_VIOLATION', 'The privacy ledger returned an invalid scope.');
+        }
+        const consentViews = consentHistory.map((item) => this.toConsentView(item));
+        const currentByPurpose = new Map();
+        consentViews.forEach((record) => {
+            currentByPurpose.set(record.purposeCode, { ...record });
+        });
+        return {
+            legalAcceptances: [...legalAcceptances].map((item) => this.toLegalView(item)),
+            consentHistory: consentViews,
+            currentConsents: Array.from(currentByPurpose.values())
+                .sort((first, second) => first.purposeCode.localeCompare(second.purposeCode)),
+        };
+    }
+    validateCommon(set) {
+        if (!this.isBoundedText(set.subjectId, 256)
+            || !this.isBoundedText(set.organizationId, 256)
+            || !this.isSafeCode(set.sourceCode)
+            || !this.isBoundedText(set.idempotencyKey, 256)) {
+            throw this.buildError(400, 'LEDGER_EVENT_INVALID', 'The privacy ledger event is invalid.');
+        }
+    }
+    hashInput(category, set) {
+        return (0, crypto_1.createHash)('sha256')
+            .update(`${category}\u0000${set.subjectId}\u0000${set.organizationId}\u0000${set.idempotencyKey}`)
+            .digest('hex');
+    }
+    hashContent(parts) {
+        return (0, crypto_1.createHash)('sha256').update(parts.join('\u0000')).digest('hex');
+    }
+    isSafeCode(value) {
+        return typeof value === 'string' && /^[a-zA-Z0-9._:-]{1,128}$/u.test(value);
+    }
+    isBoundedText(value, maxLength) {
+        return typeof value === 'string' && !!value && value.length <= maxLength && !value.includes('\u0000');
+    }
+    toLegalView(acceptance) {
+        return {
+            acceptanceId: acceptance.acceptanceId,
+            subjectId: acceptance.subjectId,
+            organizationId: acceptance.organizationId,
+            documentType: acceptance.documentType,
+            documentVersion: acceptance.documentVersion,
+            documentChecksum: acceptance.documentChecksum,
+            sourceCode: acceptance.sourceCode,
+            acceptedAt: acceptance.acceptedAt,
+        };
+    }
+    toConsentView(record) {
+        return {
+            consentId: record.consentId,
+            subjectId: record.subjectId,
+            organizationId: record.organizationId,
+            purposeCode: record.purposeCode,
+            policyVersion: record.policyVersion,
+            decision: record.decision,
+            sourceCode: record.sourceCode,
+            occurredAt: record.occurredAt,
+        };
+    }
+    buildError(status, errorCode, message) {
+        return new fsm_dynamo_1.DyFM_Error({
+            status: status,
+            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|PRIVACY_LEDGER|${errorCode}`,
+            message: message,
+            userMessage: status < 500 ? message : 'The privacy ledger is unavailable. Please try again later.',
+            issuerService: this.constructor.name,
+        });
+    }
+}
+exports.DyNTS_PrivacyLedger_ControlService = DyNTS_PrivacyLedger_ControlService;
 //# sourceMappingURL=privacy-ledger.control-service.js.map

package/build/_modules/privacy-lifecycle/privacy-lifecycle.control-service.d.ts

@@ -1,42 +1,42 @@
-import { DyNTS_PrivacyLifecycleSettings_Interface } from './_models/privacy-lifecycle-settings.interface';
-import { DyNTS_PrivacyRequestCreateResult_Interface } from './_models/privacy-request-create-result.interface';
-import { DyNTS_PrivacyRequestOpen_Interface } from './_models/privacy-request-open.interface';
-import { DyNTS_PrivacyRequestResult_Interface } from './_models/privacy-request-result.interface';
-import { DyNTS_PrivacyRequestView_Interface } from './_models/privacy-request-view.interface';
-/** Coordinates identity-gated, resumable data-subject requests across product-owned data contributors. */
-export declare class DyNTS_PrivacyLifecycle_ControlService {
-    private readonly adapter;
-    private readonly contributors;
-    private readonly clock;
-    /** Creates an orchestrator with a stable contributor registry. */
-    constructor(set: DyNTS_PrivacyLifecycleSettings_Interface);
-    /** Opens or safely replays a subject-scoped request without persisting the raw idempotency key. */
-    openRequest(set: DyNTS_PrivacyRequestOpen_Interface): Promise<DyNTS_PrivacyRequestCreateResult_Interface>;
-    /** Marks request identity verified after the application has completed its security challenge. */
-    verifyIdentity(requestId: string, subjectId: string): Promise<DyNTS_PrivacyRequestView_Interface>;
-    /** Executes or resumes all contributors and never reports complete while one contributor failed. */
-    processRequest(requestId: string, subjectId: string): Promise<DyNTS_PrivacyRequestResult_Interface>;
-    /** Returns an owned request and its content-free contributor outcomes. */
-    getRequest(requestId: string, subjectId: string): Promise<DyNTS_PrivacyRequestResult_Interface>;
-    private planMissingContributors;
-    private executeMissingContributors;
-    private executeContributor;
-    private verifyContributorOutcomes;
-    private validatePlan;
-    private validateOutcome;
-    private buildFailedOutcome;
-    private requireOwnedRequest;
-    private replaceState;
-    private buildContext;
-    private buildResult;
-    private toRequestView;
-    private hashIdempotency;
-    private isFutureDate;
-    private isBoundedText;
-    private hasAllContributorPlans;
-    private validateStoredPlans;
-    private isValidCompletedOutcome;
-    private validateSettings;
-    private buildError;
-}
+import { DyNTS_PrivacyLifecycleSettings_Interface } from './_models/privacy-lifecycle-settings.interface';
+import { DyNTS_PrivacyRequestCreateResult_Interface } from './_models/privacy-request-create-result.interface';
+import { DyNTS_PrivacyRequestOpen_Interface } from './_models/privacy-request-open.interface';
+import { DyNTS_PrivacyRequestResult_Interface } from './_models/privacy-request-result.interface';
+import { DyNTS_PrivacyRequestView_Interface } from './_models/privacy-request-view.interface';
+/** Coordinates identity-gated, resumable data-subject requests across product-owned data contributors. */
+export declare class DyNTS_PrivacyLifecycle_ControlService {
+    private readonly adapter;
+    private readonly contributors;
+    private readonly clock;
+    /** Creates an orchestrator with a stable contributor registry. */
+    constructor(set: DyNTS_PrivacyLifecycleSettings_Interface);
+    /** Opens or safely replays a subject-scoped request without persisting the raw idempotency key. */
+    openRequest(set: DyNTS_PrivacyRequestOpen_Interface): Promise<DyNTS_PrivacyRequestCreateResult_Interface>;
+    /** Marks request identity verified after the application has completed its security challenge. */
+    verifyIdentity(requestId: string, subjectId: string): Promise<DyNTS_PrivacyRequestView_Interface>;
+    /** Executes or resumes all contributors and never reports complete while one contributor failed. */
+    processRequest(requestId: string, subjectId: string): Promise<DyNTS_PrivacyRequestResult_Interface>;
+    /** Returns an owned request and its content-free contributor outcomes. */
+    getRequest(requestId: string, subjectId: string): Promise<DyNTS_PrivacyRequestResult_Interface>;
+    private planMissingContributors;
+    private executeMissingContributors;
+    private executeContributor;
+    private verifyContributorOutcomes;
+    private validatePlan;
+    private validateOutcome;
+    private buildFailedOutcome;
+    private requireOwnedRequest;
+    private replaceState;
+    private buildContext;
+    private buildResult;
+    private toRequestView;
+    private hashIdempotency;
+    private isFutureDate;
+    private isBoundedText;
+    private hasAllContributorPlans;
+    private validateStoredPlans;
+    private isValidCompletedOutcome;
+    private validateSettings;
+    private buildError;
+}
 //# sourceMappingURL=privacy-lifecycle.control-service.d.ts.map