@futdevpro/nts-dynamo 1.15.157 → 1.15.160

package/src/_modules/privacy-lifecycle/_enums/privacy-request-state.type-enum.ts

@@ -1,15 +0,0 @@
-/** Persisted lifecycle states for a GDPR data-subject request. */
-export enum DyNTS_PrivacyRequestState_Type {
-  received = 'received',
-  identityVerified = 'identity-verified',
-  scoped = 'scoped',
-  planned = 'planned',
-  executing = 'executing',
-  verifying = 'verifying',
-  completed = 'completed',
-  partiallyCompleted = 'partially-completed',
-  rejectedWithReason = 'rejected-with-reason',
-  cancelled = 'cancelled',
-  failedRetryable = 'failed-retryable',
-  failedTerminal = 'failed-terminal',
-}

package/src/_modules/privacy-lifecycle/_enums/privacy-request.type-enum.ts

@@ -1,9 +0,0 @@
-/** GDPR data-subject request categories supported by the shared lifecycle. */
-export enum DyNTS_PrivacyRequest_Type {
-  access = 'access',
-  export = 'export',
-  erasure = 'erasure',
-  rectification = 'rectification',
-  restriction = 'restriction',
-  objection = 'objection',
-}

package/src/_modules/privacy-lifecycle/_models/privacy-consent-input.interface.ts

@@ -1,12 +0,0 @@
-import { DyNTS_PrivacyConsentDecision_Type } from '../_enums/privacy-consent-decision.type-enum';
-
-/** Input for one purpose-specific consent grant or withdrawal event. */
-export interface DyNTS_PrivacyConsentInput_Interface {
-  subjectId: string;
-  organizationId: string;
-  purposeCode: string;
-  policyVersion: string;
-  decision: DyNTS_PrivacyConsentDecision_Type;
-  sourceCode: string;
-  idempotencyKey: string;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-consent-persistence-result.interface.ts

@@ -1,7 +0,0 @@
-import { DyNTS_PrivacyConsentRecord_Interface } from './privacy-consent-record.interface';
-
-/** Adapter-only append result retaining consent-event persistence metadata. */
-export interface DyNTS_PrivacyConsentPersistenceResult_Interface {
-  consent: DyNTS_PrivacyConsentRecord_Interface;
-  created: boolean;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-consent-record.interface.ts

@@ -1,15 +0,0 @@
-import { DyNTS_PrivacyConsentDecision_Type } from '../_enums/privacy-consent-decision.type-enum';
-
-/** Immutable purpose- and policy-version-specific consent event. */
-export interface DyNTS_PrivacyConsentRecord_Interface {
-  consentId: string;
-  subjectId: string;
-  organizationId: string;
-  purposeCode: string;
-  policyVersion: string;
-  decision: DyNTS_PrivacyConsentDecision_Type;
-  sourceCode: string;
-  idempotencyHash: string;
-  requestFingerprint: string;
-  occurredAt: string;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-consent-result.interface.ts

@@ -1,7 +0,0 @@
-import { DyNTS_PrivacyConsentView_Interface } from './privacy-consent-view.interface';
-
-/** Atomic append-or-replay result for one consent event. */
-export interface DyNTS_PrivacyConsentResult_Interface {
-  consent: DyNTS_PrivacyConsentView_Interface;
-  created: boolean;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-consent-view.interface.ts

@@ -1,13 +0,0 @@
-import { DyNTS_PrivacyConsentDecision_Type } from '../_enums/privacy-consent-decision.type-enum';
-
-/** User-safe consent event without persistence idempotency metadata. */
-export interface DyNTS_PrivacyConsentView_Interface {
-  consentId: string;
-  subjectId: string;
-  organizationId: string;
-  purposeCode: string;
-  policyVersion: string;
-  decision: DyNTS_PrivacyConsentDecision_Type;
-  sourceCode: string;
-  occurredAt: string;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-contributor-context.interface.ts

@@ -1,9 +0,0 @@
-import { DyNTS_PrivacyRequest_Type } from '../_enums/privacy-request.type-enum';
-
-/** Minimal execution context passed to a product-owned privacy contributor. */
-export interface DyNTS_PrivacyContributorContext_Interface {
-  requestId: string;
-  subjectId: string;
-  organizationId: string;
-  type: DyNTS_PrivacyRequest_Type;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-contributor-outcome.interface.ts

@@ -1,14 +0,0 @@
-import { DyNTS_PrivacyContributorAction_Type } from '../_enums/privacy-contributor-action.type-enum';
-import { DyNTS_PrivacyContributorOutcome_Type } from '../_enums/privacy-contributor-outcome.type-enum';
-
-/** Durable content-free result of one idempotent contributor execution. */
-export interface DyNTS_PrivacyContributorOutcome_Interface {
-  contributorId: string;
-  action: DyNTS_PrivacyContributorAction_Type;
-  outcome: DyNTS_PrivacyContributorOutcome_Type;
-  retentionBasisCode: string;
-  artifactChecksum: string;
-  processedRecordCount: number;
-  errorCode: string;
-  completedAt: string;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-contributor-plan.interface.ts

@@ -1,8 +0,0 @@
-import { DyNTS_PrivacyContributorAction_Type } from '../_enums/privacy-contributor-action.type-enum';
-
-/** Non-sensitive, auditable action plan returned by a data-domain contributor. */
-export interface DyNTS_PrivacyContributorPlan_Interface {
-  contributorId: string;
-  action: DyNTS_PrivacyContributorAction_Type;
-  retentionBasisCode: string;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-contributor.interface.ts

@@ -1,17 +0,0 @@
-import { DyNTS_PrivacyContributorContext_Interface } from './privacy-contributor-context.interface';
-import { DyNTS_PrivacyContributorOutcome_Interface } from './privacy-contributor-outcome.interface';
-import { DyNTS_PrivacyContributorPlan_Interface } from './privacy-contributor-plan.interface';
-
-/** Product-domain adapter whose execute operation must be idempotent for a request and contributor pair. */
-export interface DyNTS_PrivacyContributor_Interface {
-  readonly contributorId: string;
-  plan(context: DyNTS_PrivacyContributorContext_Interface): Promise<DyNTS_PrivacyContributorPlan_Interface>;
-  execute(
-    context: DyNTS_PrivacyContributorContext_Interface,
-    plan: DyNTS_PrivacyContributorPlan_Interface
-  ): Promise<DyNTS_PrivacyContributorOutcome_Interface>;
-  verify(
-    context: DyNTS_PrivacyContributorContext_Interface,
-    outcome: DyNTS_PrivacyContributorOutcome_Interface
-  ): Promise<boolean>;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-ledger-adapter.interface.ts

@@ -1,21 +0,0 @@
-import { DyNTS_PrivacyConsentRecord_Interface } from './privacy-consent-record.interface';
-import {
-  DyNTS_PrivacyConsentPersistenceResult_Interface
-} from './privacy-consent-persistence-result.interface';
-import { DyNTS_PrivacyLegalAcceptance_Interface } from './privacy-legal-acceptance.interface';
-import {
-  DyNTS_PrivacyLegalAcceptancePersistenceResult_Interface
-} from './privacy-legal-acceptance-persistence-result.interface';
-
-/** Append-only persistence contract for legal acceptance and consent history. */
-export interface DyNTS_PrivacyLedgerAdapter_Interface {
-  appendLegalAcceptance(
-    acceptance: DyNTS_PrivacyLegalAcceptance_Interface
-  ): Promise<DyNTS_PrivacyLegalAcceptancePersistenceResult_Interface>;
-  appendConsent(
-    record: DyNTS_PrivacyConsentRecord_Interface
-  ): Promise<DyNTS_PrivacyConsentPersistenceResult_Interface>;
-  listLegalAcceptances(subjectId: string, organizationId: string): Promise<DyNTS_PrivacyLegalAcceptance_Interface[]>;
-  /** Returns consent events in durable append order, oldest first. */
-  listConsentHistory(subjectId: string, organizationId: string): Promise<DyNTS_PrivacyConsentRecord_Interface[]>;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-ledger-result.interface.ts

@@ -1,9 +0,0 @@
-import { DyNTS_PrivacyConsentView_Interface } from './privacy-consent-view.interface';
-import { DyNTS_PrivacyLegalAcceptanceView_Interface } from './privacy-legal-acceptance-view.interface';
-
-/** Subject-owned privacy-center ledger with immutable legal and consent history. */
-export interface DyNTS_PrivacyLedgerResult_Interface {
-  legalAcceptances: DyNTS_PrivacyLegalAcceptanceView_Interface[];
-  consentHistory: DyNTS_PrivacyConsentView_Interface[];
-  currentConsents: DyNTS_PrivacyConsentView_Interface[];
-}

package/src/_modules/privacy-lifecycle/_models/privacy-ledger-settings.interface.ts

@@ -1,7 +0,0 @@
-import { DyNTS_PrivacyLedgerAdapter_Interface } from './privacy-ledger-adapter.interface';
-
-/** Dependencies and deterministic time source for the privacy ledger. */
-export interface DyNTS_PrivacyLedgerSettings_Interface {
-  adapter: DyNTS_PrivacyLedgerAdapter_Interface;
-  clock?: () => Date;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-legal-acceptance-input.interface.ts

@@ -1,10 +0,0 @@
-/** Input for accepting an exact legal document without carrying document content. */
-export interface DyNTS_PrivacyLegalAcceptanceInput_Interface {
-  subjectId: string;
-  organizationId: string;
-  documentType: string;
-  documentVersion: string;
-  documentChecksum: string;
-  sourceCode: string;
-  idempotencyKey: string;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-legal-acceptance-persistence-result.interface.ts

@@ -1,7 +0,0 @@
-import { DyNTS_PrivacyLegalAcceptance_Interface } from './privacy-legal-acceptance.interface';
-
-/** Adapter-only append result retaining legal-event persistence metadata. */
-export interface DyNTS_PrivacyLegalAcceptancePersistenceResult_Interface {
-  acceptance: DyNTS_PrivacyLegalAcceptance_Interface;
-  created: boolean;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-legal-acceptance-result.interface.ts

@@ -1,7 +0,0 @@
-import { DyNTS_PrivacyLegalAcceptanceView_Interface } from './privacy-legal-acceptance-view.interface';
-
-/** Atomic append-or-replay result for one legal acceptance. */
-export interface DyNTS_PrivacyLegalAcceptanceResult_Interface {
-  acceptance: DyNTS_PrivacyLegalAcceptanceView_Interface;
-  created: boolean;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-legal-acceptance-view.interface.ts

@@ -1,11 +0,0 @@
-/** User-safe immutable legal acceptance without persistence idempotency metadata. */
-export interface DyNTS_PrivacyLegalAcceptanceView_Interface {
-  acceptanceId: string;
-  subjectId: string;
-  organizationId: string;
-  documentType: string;
-  documentVersion: string;
-  documentChecksum: string;
-  sourceCode: string;
-  acceptedAt: string;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-legal-acceptance.interface.ts

@@ -1,13 +0,0 @@
-/** Immutable proof that a subject accepted one exact legal document version. */
-export interface DyNTS_PrivacyLegalAcceptance_Interface {
-  acceptanceId: string;
-  subjectId: string;
-  organizationId: string;
-  documentType: string;
-  documentVersion: string;
-  documentChecksum: string;
-  sourceCode: string;
-  idempotencyHash: string;
-  requestFingerprint: string;
-  acceptedAt: string;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-lifecycle-adapter.interface.ts

@@ -1,19 +0,0 @@
-import { DyNTS_PrivacyContributorOutcome_Interface } from './privacy-contributor-outcome.interface';
-import { DyNTS_PrivacyContributorPlan_Interface } from './privacy-contributor-plan.interface';
-import {
-  DyNTS_PrivacyRequestPersistenceCreateResult_Interface
-} from './privacy-request-persistence-create-result.interface';
-import { DyNTS_PrivacyRequestRecord_Interface } from './privacy-request-record.interface';
-
-/** Atomic persistence contract for the cross-domain privacy lifecycle. */
-export interface DyNTS_PrivacyLifecycleAdapter_Interface {
-  createOrGetRequest(
-    request: DyNTS_PrivacyRequestRecord_Interface
-  ): Promise<DyNTS_PrivacyRequestPersistenceCreateResult_Interface>;
-  findRequestById(requestId: string): Promise<DyNTS_PrivacyRequestRecord_Interface | null>;
-  replaceRequest(request: DyNTS_PrivacyRequestRecord_Interface, expectedRevision: number): Promise<boolean>;
-  saveContributorPlan(requestId: string, plan: DyNTS_PrivacyContributorPlan_Interface): Promise<void>;
-  listContributorPlans(requestId: string): Promise<DyNTS_PrivacyContributorPlan_Interface[]>;
-  saveContributorOutcome(requestId: string, outcome: DyNTS_PrivacyContributorOutcome_Interface): Promise<void>;
-  listContributorOutcomes(requestId: string): Promise<DyNTS_PrivacyContributorOutcome_Interface[]>;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-lifecycle-settings.interface.ts

@@ -1,9 +0,0 @@
-import { DyNTS_PrivacyContributor_Interface } from './privacy-contributor.interface';
-import { DyNTS_PrivacyLifecycleAdapter_Interface } from './privacy-lifecycle-adapter.interface';
-
-/** Dependencies and deterministic time source for the privacy lifecycle orchestrator. */
-export interface DyNTS_PrivacyLifecycleSettings_Interface {
-  adapter: DyNTS_PrivacyLifecycleAdapter_Interface;
-  contributors: DyNTS_PrivacyContributor_Interface[];
-  clock?: () => Date;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-request-create-result.interface.ts

@@ -1,7 +0,0 @@
-import { DyNTS_PrivacyRequestView_Interface } from './privacy-request-view.interface';
-
-/** Atomic create-or-replay result for an idempotent privacy request. */
-export interface DyNTS_PrivacyRequestCreateResult_Interface {
-  request: DyNTS_PrivacyRequestView_Interface;
-  created: boolean;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-request-open.interface.ts

@@ -1,10 +0,0 @@
-import { DyNTS_PrivacyRequest_Type } from '../_enums/privacy-request.type-enum';
-
-/** Subject-scoped input for opening an idempotent privacy request. */
-export interface DyNTS_PrivacyRequestOpen_Interface {
-  subjectId: string;
-  organizationId: string;
-  type: DyNTS_PrivacyRequest_Type;
-  idempotencyKey: string;
-  deadlineAt: string;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-request-persistence-create-result.interface.ts

@@ -1,7 +0,0 @@
-import { DyNTS_PrivacyRequestRecord_Interface } from './privacy-request-record.interface';
-
-/** Adapter-only create-or-replay result retaining server-side persistence metadata. */
-export interface DyNTS_PrivacyRequestPersistenceCreateResult_Interface {
-  request: DyNTS_PrivacyRequestRecord_Interface;
-  created: boolean;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-request-record.interface.ts

@@ -1,21 +0,0 @@
-import { DyNTS_PrivacyRequestState_Type } from '../_enums/privacy-request-state.type-enum';
-import { DyNTS_PrivacyRequest_Type } from '../_enums/privacy-request.type-enum';
-
-/** Central request record. It intentionally carries identifiers and lifecycle metadata only. */
-export interface DyNTS_PrivacyRequestRecord_Interface {
-  requestId: string;
-  subjectId: string;
-  organizationId: string;
-  type: DyNTS_PrivacyRequest_Type;
-  state: DyNTS_PrivacyRequestState_Type;
-  idempotencyHash: string;
-  revision: number;
-  createdAt: string;
-  deadlineAt: string;
-  identityVerifiedAt: string;
-  scopedAt: string;
-  plannedAt: string;
-  executionStartedAt: string;
-  verifyingStartedAt: string;
-  completedAt: string;
-}

package/src/_modules/privacy-lifecycle/_models/privacy-request-result.interface.ts

@@ -1,8 +0,0 @@
-import { DyNTS_PrivacyContributorOutcome_Interface } from './privacy-contributor-outcome.interface';
-import { DyNTS_PrivacyRequestView_Interface } from './privacy-request-view.interface';
-
-/** Safe lifecycle response containing request metadata and content-free contributor outcomes. */
-export interface DyNTS_PrivacyRequestResult_Interface {
-  request: DyNTS_PrivacyRequestView_Interface;
-  outcomes: DyNTS_PrivacyContributorOutcome_Interface[];
-}

package/src/_modules/privacy-lifecycle/_models/privacy-request-view.interface.ts

@@ -1,20 +0,0 @@
-import { DyNTS_PrivacyRequestState_Type } from '../_enums/privacy-request-state.type-enum';
-import { DyNTS_PrivacyRequest_Type } from '../_enums/privacy-request.type-enum';
-
-/** User-safe request projection without persistence idempotency metadata. */
-export interface DyNTS_PrivacyRequestView_Interface {
-  requestId: string;
-  subjectId: string;
-  organizationId: string;
-  type: DyNTS_PrivacyRequest_Type;
-  state: DyNTS_PrivacyRequestState_Type;
-  revision: number;
-  createdAt: string;
-  deadlineAt: string;
-  identityVerifiedAt: string;
-  scopedAt: string;
-  plannedAt: string;
-  executionStartedAt: string;
-  verifyingStartedAt: string;
-  completedAt: string;
-}

package/src/_modules/privacy-lifecycle/index.ts

@@ -1,40 +0,0 @@
-export { DyNTS_PrivacyLifecycle_ControlService } from './privacy-lifecycle.control-service';
-export { DyNTS_PrivacyLedger_ControlService } from './privacy-ledger.control-service';
-export { DyNTS_PrivacyConsentDecision_Type } from './_enums/privacy-consent-decision.type-enum';
-export { DyNTS_PrivacyContributorAction_Type } from './_enums/privacy-contributor-action.type-enum';
-export { DyNTS_PrivacyContributorOutcome_Type } from './_enums/privacy-contributor-outcome.type-enum';
-export { DyNTS_PrivacyRequestState_Type } from './_enums/privacy-request-state.type-enum';
-export { DyNTS_PrivacyRequest_Type } from './_enums/privacy-request.type-enum';
-export { DyNTS_PrivacyContributorContext_Interface } from './_models/privacy-contributor-context.interface';
-export { DyNTS_PrivacyContributorOutcome_Interface } from './_models/privacy-contributor-outcome.interface';
-export { DyNTS_PrivacyContributorPlan_Interface } from './_models/privacy-contributor-plan.interface';
-export { DyNTS_PrivacyContributor_Interface } from './_models/privacy-contributor.interface';
-export { DyNTS_PrivacyLifecycleAdapter_Interface } from './_models/privacy-lifecycle-adapter.interface';
-export { DyNTS_PrivacyLifecycleSettings_Interface } from './_models/privacy-lifecycle-settings.interface';
-export { DyNTS_PrivacyConsentInput_Interface } from './_models/privacy-consent-input.interface';
-export {
-  DyNTS_PrivacyConsentPersistenceResult_Interface
-} from './_models/privacy-consent-persistence-result.interface';
-export { DyNTS_PrivacyConsentRecord_Interface } from './_models/privacy-consent-record.interface';
-export { DyNTS_PrivacyConsentResult_Interface } from './_models/privacy-consent-result.interface';
-export { DyNTS_PrivacyConsentView_Interface } from './_models/privacy-consent-view.interface';
-export { DyNTS_PrivacyLedgerAdapter_Interface } from './_models/privacy-ledger-adapter.interface';
-export { DyNTS_PrivacyLedgerResult_Interface } from './_models/privacy-ledger-result.interface';
-export { DyNTS_PrivacyLedgerSettings_Interface } from './_models/privacy-ledger-settings.interface';
-export { DyNTS_PrivacyLegalAcceptanceInput_Interface } from './_models/privacy-legal-acceptance-input.interface';
-export {
-  DyNTS_PrivacyLegalAcceptancePersistenceResult_Interface
-} from './_models/privacy-legal-acceptance-persistence-result.interface';
-export { DyNTS_PrivacyLegalAcceptanceResult_Interface } from './_models/privacy-legal-acceptance-result.interface';
-export {
-  DyNTS_PrivacyLegalAcceptanceView_Interface
-} from './_models/privacy-legal-acceptance-view.interface';
-export { DyNTS_PrivacyLegalAcceptance_Interface } from './_models/privacy-legal-acceptance.interface';
-export { DyNTS_PrivacyRequestCreateResult_Interface } from './_models/privacy-request-create-result.interface';
-export { DyNTS_PrivacyRequestOpen_Interface } from './_models/privacy-request-open.interface';
-export {
-  DyNTS_PrivacyRequestPersistenceCreateResult_Interface
-} from './_models/privacy-request-persistence-create-result.interface';
-export { DyNTS_PrivacyRequestRecord_Interface } from './_models/privacy-request-record.interface';
-export { DyNTS_PrivacyRequestResult_Interface } from './_models/privacy-request-result.interface';
-export { DyNTS_PrivacyRequestView_Interface } from './_models/privacy-request-view.interface';

package/src/_modules/privacy-lifecycle/privacy-ledger.control-service.spec.ts

@@ -1,206 +0,0 @@
-import { DyFM_Error } from '@futdevpro/fsm-dynamo';
-
-import { DyNTS_PrivacyLedger_ControlService } from './privacy-ledger.control-service';
-import { DyNTS_PrivacyConsentDecision_Type } from './_enums/privacy-consent-decision.type-enum';
-import { DyNTS_PrivacyConsentRecord_Interface } from './_models/privacy-consent-record.interface';
-import {
-  DyNTS_PrivacyConsentPersistenceResult_Interface
-} from './_models/privacy-consent-persistence-result.interface';
-import { DyNTS_PrivacyConsentResult_Interface } from './_models/privacy-consent-result.interface';
-import { DyNTS_PrivacyLedgerAdapter_Interface } from './_models/privacy-ledger-adapter.interface';
-import { DyNTS_PrivacyLedgerResult_Interface } from './_models/privacy-ledger-result.interface';
-import { DyNTS_PrivacyLegalAcceptanceResult_Interface } from './_models/privacy-legal-acceptance-result.interface';
-import { DyNTS_PrivacyLegalAcceptance_Interface } from './_models/privacy-legal-acceptance.interface';
-import {
-  DyNTS_PrivacyLegalAcceptancePersistenceResult_Interface
-} from './_models/privacy-legal-acceptance-persistence-result.interface';
-
-class DyNTS_TestPrivacyLedgerAdapter implements DyNTS_PrivacyLedgerAdapter_Interface {
-  private readonly legal: Map<string, DyNTS_PrivacyLegalAcceptance_Interface> = new Map();
-  private readonly consent: Map<string, DyNTS_PrivacyConsentRecord_Interface> = new Map();
-
-  /** Atomically appends or replays a legal acceptance by idempotency hash. */
-  public async appendLegalAcceptance(
-    acceptance: DyNTS_PrivacyLegalAcceptance_Interface
-  ): Promise<DyNTS_PrivacyLegalAcceptancePersistenceResult_Interface> {
-    const existing: DyNTS_PrivacyLegalAcceptance_Interface | undefined = this.legal.get(acceptance.idempotencyHash);
-
-    if (existing) {
-      return { acceptance: { ...existing }, created: false };
-    }
-
-    this.legal.set(acceptance.idempotencyHash, { ...acceptance });
-
-    return { acceptance: { ...acceptance }, created: true };
-  }
-
-  /** Atomically appends or replays a consent event by idempotency hash. */
-  public async appendConsent(
-    record: DyNTS_PrivacyConsentRecord_Interface
-  ): Promise<DyNTS_PrivacyConsentPersistenceResult_Interface> {
-    const existing: DyNTS_PrivacyConsentRecord_Interface | undefined = this.consent.get(record.idempotencyHash);
-
-    if (existing) {
-      return { consent: { ...existing }, created: false };
-    }
-
-    this.consent.set(record.idempotencyHash, { ...record });
-
-    return { consent: { ...record }, created: true };
-  }
-
-  /** Lists legal acceptances within one exact subject and organization boundary. */
-  public async listLegalAcceptances(
-    subjectId: string,
-    organizationId: string
-  ): Promise<DyNTS_PrivacyLegalAcceptance_Interface[]> {
-    return Array.from(this.legal.values())
-      .filter((item: DyNTS_PrivacyLegalAcceptance_Interface): boolean => (
-        item.subjectId === subjectId && item.organizationId === organizationId
-      ));
-  }
-
-  /** Lists consent history within one exact subject and organization boundary. */
-  public async listConsentHistory(
-    subjectId: string,
-    organizationId: string
-  ): Promise<DyNTS_PrivacyConsentRecord_Interface[]> {
-    return Array.from(this.consent.values())
-      .filter((item: DyNTS_PrivacyConsentRecord_Interface): boolean => (
-        item.subjectId === subjectId && item.organizationId === organizationId
-      ));
-  }
-}
-
-describe('| DyNTS_PrivacyLedger_ControlService', (): void => {
-  let service: DyNTS_PrivacyLedger_ControlService;
-
-  beforeEach((): void => {
-    service = new DyNTS_PrivacyLedger_ControlService({
-      adapter: new DyNTS_TestPrivacyLedgerAdapter(),
-      clock: (): Date => new Date('2026-08-18T10:00:00.000Z'),
-    });
-  });
-
-  it('| appends exact legal-document evidence idempotently without raw keys', async (): Promise<void> => {
-    const first: DyNTS_PrivacyLegalAcceptanceResult_Interface = await acceptTerms(service);
-    const replay: DyNTS_PrivacyLegalAcceptanceResult_Interface = await acceptTerms(service);
-
-    expect(first.created).toBeTrue();
-    expect(replay.created).toBeFalse();
-    expect(replay.acceptance.acceptanceId).toBe(first.acceptance.acceptanceId);
-    expect(JSON.stringify(first.acceptance)).not.toContain('idempotencyHash');
-    expect(JSON.stringify(first.acceptance)).not.toContain('requestFingerprint');
-    expect(first.acceptance.documentChecksum).toBe('a'.repeat(64));
-  });
-
-  it('| keeps consent history and resolves the latest decision per purpose', async (): Promise<void> => {
-    await recordConsent(service, {
-      decision: DyNTS_PrivacyConsentDecision_Type.granted,
-      policyVersion: 'policy-v1',
-      idempotencyKey: 'grant-key',
-    });
-    await recordConsent(service, {
-      decision: DyNTS_PrivacyConsentDecision_Type.withdrawn,
-      policyVersion: 'policy-v1',
-      idempotencyKey: 'withdraw-key',
-    });
-    const ledger: DyNTS_PrivacyLedgerResult_Interface = await service.getLedger('subject-1', 'organization-1');
-
-    expect(ledger.consentHistory.length).toBe(2);
-    expect(ledger.currentConsents.length).toBe(1);
-    expect(ledger.currentConsents[0].decision).toBe(DyNTS_PrivacyConsentDecision_Type.withdrawn);
-  });
-
-  it('| treats a policy-version upgrade as a distinct auditable consent event', async (): Promise<void> => {
-    await recordConsent(service, {
-      decision: DyNTS_PrivacyConsentDecision_Type.granted,
-      policyVersion: 'policy-v1',
-      idempotencyKey: 'v1-key',
-    });
-    await recordConsent(service, {
-      decision: DyNTS_PrivacyConsentDecision_Type.granted,
-      policyVersion: 'policy-v2',
-      idempotencyKey: 'v2-key',
-    });
-    const ledger: DyNTS_PrivacyLedgerResult_Interface = await service.getLedger('subject-1', 'organization-1');
-
-    expect(ledger.consentHistory.map((item: DyNTS_PrivacyConsentRecord_Interface): string => (
-      item.policyVersion
-    ))).toEqual([ 'policy-v1', 'policy-v2' ]);
-    expect(ledger.currentConsents[0].policyVersion).toBe('policy-v2');
-  });
-
-  it('| rejects unverifiable legal document checksums', async (): Promise<void> => {
-    await expectAsync(service.acceptLegalDocument({
-      subjectId: 'subject-1',
-      organizationId: 'organization-1',
-      documentType: 'terms',
-      documentVersion: 'v1',
-      documentChecksum: 'not-a-sha256',
-      sourceCode: 'registration',
-      idempotencyKey: 'legal-key',
-    })).toBeRejectedWithError(DyFM_Error);
-  });
-
-  it('| rejects idempotency-key reuse with different legal content', async (): Promise<void> => {
-    await acceptTerms(service);
-
-    const error: DyFM_Error = await captureError(service.acceptLegalDocument({
-      subjectId: 'subject-1',
-      organizationId: 'organization-1',
-      documentType: 'terms',
-      documentVersion: 'v2',
-      documentChecksum: 'b'.repeat(64),
-      sourceCode: 'registration',
-      idempotencyKey: 'legal-key',
-    }));
-
-    expect(error._errorCode).toContain('IDEMPOTENCY_CONFLICT');
-  });
-});
-
-async function acceptTerms(
-  service: DyNTS_PrivacyLedger_ControlService
-): Promise<DyNTS_PrivacyLegalAcceptanceResult_Interface> {
-  return service.acceptLegalDocument({
-    subjectId: 'subject-1',
-    organizationId: 'organization-1',
-    documentType: 'terms',
-    documentVersion: 'v1',
-    documentChecksum: 'a'.repeat(64),
-    sourceCode: 'registration',
-    idempotencyKey: 'legal-key',
-  });
-}
-
-async function recordConsent(
-  service: DyNTS_PrivacyLedger_ControlService,
-  set: {
-    decision: DyNTS_PrivacyConsentDecision_Type;
-    policyVersion: string;
-    idempotencyKey: string;
-  }
-): Promise<DyNTS_PrivacyConsentResult_Interface> {
-  return service.recordConsent({
-    subjectId: 'subject-1',
-    organizationId: 'organization-1',
-    purposeCode: 'product-improvement',
-    policyVersion: set.policyVersion,
-    decision: set.decision,
-    sourceCode: 'privacy-center',
-    idempotencyKey: set.idempotencyKey,
-  });
-}
-
-async function captureError(promise: Promise<unknown>): Promise<DyFM_Error> {
-  try {
-    await promise;
-  } catch (error: unknown) {
-    if (error instanceof DyFM_Error) {
-      return error;
-    }
-  }
-
-  throw new Error('Expected a DyFM_Error rejection.');
-}