@futdevpro/nts-dynamo 1.15.230 → 1.15.233

package/build/_modules/privacy-lifecycle/_enums/privacy-rights-value.type-enum.d.ts

@@ -0,0 +1,7 @@
+/** Closed scalar kinds accepted by the confidential rights-input schema. */
+export declare enum DyNTS_PrivacyRightsValue_Type {
+    string = "string",
+    number = "number",
+    boolean = "boolean"
+}
+//# sourceMappingURL=privacy-rights-value.type-enum.d.ts.map

package/build/_modules/privacy-lifecycle/_enums/privacy-rights-value.type-enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-rights-value.type-enum.d.ts","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_enums/privacy-rights-value.type-enum.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,oBAAY,6BAA6B;IACvC,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,OAAO,YAAY;CACpB"}

package/build/_modules/privacy-lifecycle/_enums/privacy-rights-value.type-enum.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyRightsValue_Type = void 0;
+/** Closed scalar kinds accepted by the confidential rights-input schema. */
+var DyNTS_PrivacyRightsValue_Type;
+(function (DyNTS_PrivacyRightsValue_Type) {
+    DyNTS_PrivacyRightsValue_Type["string"] = "string";
+    DyNTS_PrivacyRightsValue_Type["number"] = "number";
+    DyNTS_PrivacyRightsValue_Type["boolean"] = "boolean";
+})(DyNTS_PrivacyRightsValue_Type || (exports.DyNTS_PrivacyRightsValue_Type = DyNTS_PrivacyRightsValue_Type = {}));
+//# sourceMappingURL=privacy-rights-value.type-enum.js.map

package/build/_modules/privacy-lifecycle/_enums/privacy-rights-value.type-enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-rights-value.type-enum.js","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_enums/privacy-rights-value.type-enum.ts"],"names":[],"mappings":";;;AAAA,4EAA4E;AAC5E,IAAY,6BAIX;AAJD,WAAY,6BAA6B;IACvC,kDAAiB,CAAA;IACjB,kDAAiB,CAAA;IACjB,oDAAmB,CAAA;AACrB,CAAC,EAJW,6BAA6B,6CAA7B,6BAA6B,QAIxC"}

package/build/_modules/privacy-lifecycle/_models/privacy-rights-custody.interface.d.ts

@@ -0,0 +1,74 @@
+import { ClientSession, Connection } from 'mongoose';
+import { DyNTS_AccountChallengePurpose_Type } from '../../account-security/_enums/account-challenge-purpose.type-enum';
+import { DyNTS_AccountChallengeResult_Interface } from '../../account-security/_models/account-challenge-result.interface';
+import { DyNTS_PrivacyRequestRecord_Interface } from './privacy-request-record.interface';
+import { DyNTS_PrivacyRightsInputPolicy_Interface } from './privacy-rights-input.interface';
+/** Derived from authenticated server context; requestId selects, never grants authority. */
+export interface DyNTS_PrivacyRightsAuthority_Interface {
+    readonly requestId: string;
+    readonly subjectId: string;
+    readonly organizationId: string;
+}
+/** Every field is authenticated by the dedicated rights-input cipher, including expiry and challenge binding. */
+export interface DyNTS_PrivacyRightsCipherContext_Interface extends DyNTS_PrivacyRightsAuthority_Interface {
+    readonly contractVersion: 'dynts-privacy-rights-custody/1';
+    readonly inputId: string;
+    readonly requestType: string;
+    readonly requestRevision: number;
+    readonly policyVersion: string;
+    readonly challengeId: string;
+    readonly createdAt: string;
+    readonly expiresAt: string;
+}
+/** Only authenticated ciphertext leaves the dedicated, externally provisioned keyring. */
+export interface DyNTS_PrivacyRightsSealed_Interface {
+    readonly keyId: string;
+    readonly ciphertext: string;
+}
+/** No export/download grant can open this purpose-separated execution-only input. */
+export interface DyNTS_PrivacyRightsCipher_Interface {
+    seal(plaintext: string, context: DyNTS_PrivacyRightsCipherContext_Interface): DyNTS_PrivacyRightsSealed_Interface;
+    open(sealed: DyNTS_PrivacyRightsSealed_Interface, context: DyNTS_PrivacyRightsCipherContext_Interface): string;
+}
+/** Content-free intake receipt; never includes input, credential hash or ciphertext. */
+export interface DyNTS_PrivacyRightsReceipt_Interface {
+    readonly contractVersion: 'dynts-privacy-rights-receipt/1';
+    readonly inputId: string;
+    readonly requestId: string;
+    readonly created: boolean;
+    readonly expiresAt: string;
+}
+/** Internal database shape. No unkeyed low-entropy replacement-value fingerprint is persisted. */
+export interface DyNTS_PrivacyRightsCustodyRecord_Interface extends DyNTS_PrivacyRightsCipherContext_Interface {
+    _id: string;
+    credentialHash: string;
+    keyId: string;
+    ciphertext: string;
+}
+/** Shared custody over one existing connection and caller-owned strong transaction. */
+export interface DyNTS_PrivacyRightsCustodySettings_Interface {
+    readonly connection: Connection;
+    readonly maxOperationTimeMs: number;
+    readonly retentionMs: number;
+    readonly policies: readonly DyNTS_PrivacyRightsInputPolicy_Interface[];
+    readonly currentPolicyVersion: string;
+    readonly cipher: DyNTS_PrivacyRightsCipher_Interface;
+    /** Must WRITE-lock the owned request/subject eligibility in this session, not perform a snapshot-only read. */
+    readonly lockRequest: (authority: DyNTS_PrivacyRightsAuthority_Interface, session: ClientSession) => Promise<DyNTS_PrivacyRequestRecord_Interface>;
+    /** Must use the existing challenge service with a SAME-session adapter. Failure must abort the transaction. */
+    readonly consumeChallenge: (set: {
+        token: string;
+        purpose: DyNTS_AccountChallengePurpose_Type;
+        subjectId: string;
+        session: ClientSession;
+        now: Date;
+    }) => Promise<DyNTS_AccountChallengeResult_Interface>;
+    /** Same-session CAS: identityVerified at expectedRevision -> scoped at expectedRevision + 1. */
+    readonly acceptRequest: (set: {
+        authority: DyNTS_PrivacyRightsAuthority_Interface;
+        expectedRevision: number;
+        acceptedAt: string;
+        session: ClientSession;
+    }) => Promise<DyNTS_PrivacyRequestRecord_Interface>;
+}
+//# sourceMappingURL=privacy-rights-custody.interface.d.ts.map

package/build/_modules/privacy-lifecycle/_models/privacy-rights-custody.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-rights-custody.interface.d.ts","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_models/privacy-rights-custody.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAErD,OAAO,EACL,kCAAkC,EACnC,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EACL,sCAAsC,EACvC,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EAAE,oCAAoC,EAAE,MAAM,oCAAoC,CAAC;AAC1F,OAAO,EAAE,wCAAwC,EAAE,MAAM,kCAAkC,CAAC;AAE5F,4FAA4F;AAC5F,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,iHAAiH;AACjH,MAAM,WAAW,0CAA2C,SAAQ,sCAAsC;IACxG,QAAQ,CAAC,eAAe,EAAE,gCAAgC,CAAC;IAC3D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,0FAA0F;AAC1F,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,qFAAqF;AACrF,MAAM,WAAW,mCAAmC;IAClD,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,0CAA0C,GAAG,mCAAmC,CAAC;IAClH,IAAI,CAAC,MAAM,EAAE,mCAAmC,EAAE,OAAO,EAAE,0CAA0C,GAAG,MAAM,CAAC;CAChH;AAED,wFAAwF;AACxF,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,eAAe,EAAE,gCAAgC,CAAC;IAC3D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,kGAAkG;AAClG,MAAM,WAAW,0CAA2C,SAAQ,0CAA0C;IAC5G,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,uFAAuF;AACvF,MAAM,WAAW,4CAA4C;IAC3D,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,wCAAwC,EAAE,CAAC;IACvE,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,mCAAmC,CAAC;IACrD,+GAA+G;IAC/G,QAAQ,CAAC,WAAW,EAAE,CACpB,SAAS,EAAE,sCAAsC,EAAE,OAAO,EAAE,aAAa,KACtE,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACnD,+GAA+G;IAC/G,QAAQ,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE;QAC/B,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,kCAAkC,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,aAAa,CAAC;QAAC,GAAG,EAAE,IAAI,CAAC;KAClH,KAAK,OAAO,CAAC,sCAAsC,CAAC,CAAC;IACtD,gGAAgG;IAChG,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE;QAC5B,SAAS,EAAE,sCAAsC,CAAC;QAClD,gBAAgB,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,aAAa,CAAC;KACtE,KAAK,OAAO,CAAC,oCAAoC,CAAC,CAAC;CACrD"}

package/build/_modules/privacy-lifecycle/_models/privacy-rights-custody.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=privacy-rights-custody.interface.js.map

package/build/_modules/privacy-lifecycle/_models/privacy-rights-custody.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-rights-custody.interface.js","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_models/privacy-rights-custody.interface.ts"],"names":[],"mappings":""}

package/build/_modules/privacy-lifecycle/_models/privacy-rights-input.interface.d.ts

@@ -0,0 +1,48 @@
+import { DyNTS_PrivacyRequest_Type } from '../_enums/privacy-request.type-enum';
+import { DyNTS_PrivacyRightsValue_Type } from '../_enums/privacy-rights-value.type-enum';
+/** One proposed revision. Values are confidential execution input, never lifecycle evidence. */
+export interface DyNTS_PrivacyRightsReplacement_Interface {
+    readonly fieldCode: string;
+    readonly expectedRevision: number;
+    readonly value: string | number | boolean | null;
+}
+/** Trusted product field schema. It validates but never transforms the previewed value. */
+export interface DyNTS_PrivacyRightsFieldPolicy_Interface {
+    readonly fieldCode: string;
+    readonly valueType: DyNTS_PrivacyRightsValue_Type;
+    readonly nullable: boolean;
+    readonly maxStringBytes: number;
+    readonly validate: (value: string | number | boolean | null) => boolean;
+}
+/** No defaults: product-approved fields, purposes and limits must be supplied explicitly. */
+export interface DyNTS_PrivacyRightsInputPolicy_Interface {
+    readonly policyVersion: string;
+    readonly maxInputBytes: number;
+    readonly maxEntries: number;
+    readonly fields: readonly DyNTS_PrivacyRightsFieldPolicy_Interface[];
+    readonly purposeCodes: readonly string[];
+}
+/** Server-derived request binding; this parser does not create or consume step-up credentials. */
+export interface DyNTS_PrivacyRightsInputContext_Interface {
+    readonly requestId: string;
+    readonly type: DyNTS_PrivacyRequest_Type;
+    readonly revision: number;
+}
+/** Common immutable envelope binding a preview to one request revision and policy. */
+export interface DyNTS_PrivacyRightsInputBase_Interface {
+    readonly contractVersion: 'dynts-privacy-rights-input/1';
+    readonly requestId: string;
+    readonly policyVersion: string;
+    readonly expectedRequestRevision: number;
+}
+/** Structured replacements, including immutable-field proposals for a later explicit decision. */
+export interface DyNTS_PrivacyRightsRectificationInput_Interface extends DyNTS_PrivacyRightsInputBase_Interface {
+    readonly type: DyNTS_PrivacyRequest_Type.rectification;
+    readonly replacements: readonly DyNTS_PrivacyRightsReplacement_Interface[];
+}
+/** Purpose selection carries neither a caller-declared legal basis nor an exception grant. */
+export interface DyNTS_PrivacyRightsPurposeInput_Interface extends DyNTS_PrivacyRightsInputBase_Interface {
+    readonly type: DyNTS_PrivacyRequest_Type.restriction | DyNTS_PrivacyRequest_Type.objection;
+    readonly purposeCodes: readonly string[];
+}
+//# sourceMappingURL=privacy-rights-input.interface.d.ts.map

package/build/_modules/privacy-lifecycle/_models/privacy-rights-input.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-rights-input.interface.d.ts","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_models/privacy-rights-input.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAEzF,gGAAgG;AAChG,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;CAClD;AAED,2FAA2F;AAC3F,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC;IAClD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,KAAK,OAAO,CAAC;CACzE;AAED,6FAA6F;AAC7F,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,SAAS,wCAAwC,EAAE,CAAC;IACrE,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,kGAAkG;AAClG,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,sFAAsF;AACtF,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,eAAe,EAAE,8BAA8B,CAAC;IACzD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;CAC1C;AAED,kGAAkG;AAClG,MAAM,WAAW,+CAAgD,SAAQ,sCAAsC;IAC7G,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC,aAAa,CAAC;IACvD,QAAQ,CAAC,YAAY,EAAE,SAAS,wCAAwC,EAAE,CAAC;CAC5E;AAED,8FAA8F;AAC9F,MAAM,WAAW,yCAA0C,SAAQ,sCAAsC;IACvG,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC,WAAW,GAAG,yBAAyB,CAAC,SAAS,CAAC;IAC3F,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C"}

package/build/_modules/privacy-lifecycle/_models/privacy-rights-input.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=privacy-rights-input.interface.js.map

package/build/_modules/privacy-lifecycle/_models/privacy-rights-input.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-rights-input.interface.js","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_models/privacy-rights-input.interface.ts"],"names":[],"mappings":""}

package/build/_modules/privacy-lifecycle/_types/privacy-rights-input.type.d.ts

@@ -0,0 +1,4 @@
+import { DyNTS_PrivacyRightsPurposeInput_Interface, DyNTS_PrivacyRightsRectificationInput_Interface } from '../_models/privacy-rights-input.interface';
+/** Confidential normalized input; do not expose it through request views, logs or audit records. */
+export type DyNTS_PrivacyRightsInput_Type = DyNTS_PrivacyRightsRectificationInput_Interface | DyNTS_PrivacyRightsPurposeInput_Interface;
+//# sourceMappingURL=privacy-rights-input.type.d.ts.map

package/build/_modules/privacy-lifecycle/_types/privacy-rights-input.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-rights-input.type.d.ts","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_types/privacy-rights-input.type.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yCAAyC,EACzC,+CAA+C,EAChD,MAAM,2CAA2C,CAAC;AAEnD,oGAAoG;AACpG,MAAM,MAAM,6BAA6B,GACvC,+CAA+C,GAAG,yCAAyC,CAAC"}

package/build/_modules/privacy-lifecycle/_types/privacy-rights-input.type.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=privacy-rights-input.type.js.map

package/build/_modules/privacy-lifecycle/_types/privacy-rights-input.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-rights-input.type.js","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_types/privacy-rights-input.type.ts"],"names":[],"mappings":""}

package/build/_modules/privacy-lifecycle/index.d.ts

@@ -1,4 +1,10 @@
 export { DyNTS_PrivacyLifecycle_ControlService } from './privacy-lifecycle.control-service';
+export { DyNTS_PrivacyRightsInput_ControlService } from './privacy-rights-input.control-service';
+export { DyNTS_PrivacyRightsCustody_MongoStore } from './privacy-rights-custody.mongo-store';
+export { DyNTS_PrivacyRightsAuthority_Interface, DyNTS_PrivacyRightsCipherContext_Interface, DyNTS_PrivacyRightsCipher_Interface, DyNTS_PrivacyRightsCustodyRecord_Interface, DyNTS_PrivacyRightsCustodySettings_Interface, DyNTS_PrivacyRightsReceipt_Interface, DyNTS_PrivacyRightsSealed_Interface } from './_models/privacy-rights-custody.interface';
+export { DyNTS_PrivacyRightsValue_Type } from './_enums/privacy-rights-value.type-enum';
+export { DyNTS_PrivacyRightsInput_Type } from './_types/privacy-rights-input.type';
+export { DyNTS_PrivacyRightsFieldPolicy_Interface, DyNTS_PrivacyRightsInputBase_Interface, DyNTS_PrivacyRightsInputContext_Interface, DyNTS_PrivacyRightsInputPolicy_Interface, DyNTS_PrivacyRightsPurposeInput_Interface, DyNTS_PrivacyRightsRectificationInput_Interface, DyNTS_PrivacyRightsReplacement_Interface } from './_models/privacy-rights-input.interface';
 export { DyNTS_PrivacyMutationGate_MongoStore } from './privacy-mutation-gate.mongo-store';
 export { DyNTS_PrivacyMutationGateClosure_Interface, DyNTS_PrivacyMutationGateIdentity_Interface, DyNTS_PrivacyMutationGateSettings_Interface } from './_models/privacy-mutation-gate.interface';
 export { DyNTS_PrivacyRequestCursor_ControlService } from './privacy-request-cursor.control-service';

package/build/_modules/privacy-lifecycle/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAC3F,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,2CAA2C,EAC5C,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,yCAAyC,EAAE,MAAM,0CAA0C,CAAC;AACrG,OAAO,EAAE,kCAAkC,EAAE,MAAM,kCAAkC,CAAC;AACtF,OAAO,EACL,gDAAgD,EACjD,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EACL,4DAA4D,EAC5D,wCAAwC,EACzC,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,wCAAwC,EAAE,MAAM,yCAAyC,CAAC;AACnG,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EACL,4CAA4C,EAC7C,MAAM,yDAAyD,CAAC;AACjE,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EACL,0CAA0C,EAC3C,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,iDAAiD,CAAC;AAC5G,OAAO,EAAE,yCAAyC,EAAE,MAAM,iDAAiD,CAAC;AAC5G,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,wCAAwC,EAAE,MAAM,gDAAgD,CAAC;AAC1G,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EACL,kDAAkD,EAClD,iDAAiD,EAClD,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EACL,+CAA+C,EAChD,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EACL,6CAA6C,EAC7C,uCAAuC,EACvC,sCAAsC,EACtC,uCAAuC,EACxC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,wCAAwC,EACxC,gDAAgD,EACjD,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,2CAA2C,EAAE,MAAM,oDAAoD,CAAC;AACjH,OAAO,EACL,uDAAuD,EACxD,MAAM,iEAAiE,CAAC;AACzE,OAAO,EAAE,4CAA4C,EAAE,MAAM,qDAAqD,CAAC;AACnH,OAAO,EACL,0CAA0C,EAC3C,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,0CAA0C,EAAE,MAAM,mDAAmD,CAAC;AAC/G,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EACL,qDAAqD,EACtD,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EACL,yCAAyC,EAC1C,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,kCAAkC,EAClC,uCAAuC,EACxC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,wCAAwC,EACxC,mDAAmD,EACpD,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EACL,8CAA8C,EAC9C,2CAA2C,EAC3C,4CAA4C,EAC5C,iDAAiD,EACjD,2CAA2C,EAC3C,+CAA+C,EAC/C,2CAA2C,EAC3C,2CAA2C,EAC3C,0CAA0C,EAC1C,iDAAiD,EACjD,yCAAyC,EACzC,0CAA0C,EAC3C,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,iDAAiD,EACjD,kDAAkD,EAClD,0CAA0C,EAC1C,yCAAyC,EAC1C,MAAM,2CAA2C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,EAAE,uCAAuC,EAAE,MAAM,wCAAwC,CAAC;AACjG,OAAO,EAAE,qCAAqC,EAAE,MAAM,sCAAsC,CAAC;AAC7F,OAAO,EACL,sCAAsC,EACtC,0CAA0C,EAC1C,mCAAmC,EACnC,0CAA0C,EAC1C,4CAA4C,EAC5C,oCAAoC,EACpC,mCAAmC,EACpC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,EACL,wCAAwC,EACxC,sCAAsC,EACtC,yCAAyC,EACzC,wCAAwC,EACxC,yCAAyC,EACzC,+CAA+C,EAC/C,wCAAwC,EACzC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAC3F,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,2CAA2C,EAC5C,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,yCAAyC,EAAE,MAAM,0CAA0C,CAAC;AACrG,OAAO,EAAE,kCAAkC,EAAE,MAAM,kCAAkC,CAAC;AACtF,OAAO,EACL,gDAAgD,EACjD,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EACL,4DAA4D,EAC5D,wCAAwC,EACzC,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,wCAAwC,EAAE,MAAM,yCAAyC,CAAC;AACnG,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EACL,4CAA4C,EAC7C,MAAM,yDAAyD,CAAC;AACjE,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EACL,0CAA0C,EAC3C,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,iDAAiD,CAAC;AAC5G,OAAO,EAAE,yCAAyC,EAAE,MAAM,iDAAiD,CAAC;AAC5G,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,wCAAwC,EAAE,MAAM,gDAAgD,CAAC;AAC1G,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EACL,kDAAkD,EAClD,iDAAiD,EAClD,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EACL,+CAA+C,EAChD,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EACL,6CAA6C,EAC7C,uCAAuC,EACvC,sCAAsC,EACtC,uCAAuC,EACxC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,wCAAwC,EACxC,gDAAgD,EACjD,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,2CAA2C,EAAE,MAAM,oDAAoD,CAAC;AACjH,OAAO,EACL,uDAAuD,EACxD,MAAM,iEAAiE,CAAC;AACzE,OAAO,EAAE,4CAA4C,EAAE,MAAM,qDAAqD,CAAC;AACnH,OAAO,EACL,0CAA0C,EAC3C,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,0CAA0C,EAAE,MAAM,mDAAmD,CAAC;AAC/G,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EACL,qDAAqD,EACtD,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EACL,yCAAyC,EAC1C,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,kCAAkC,EAClC,uCAAuC,EACxC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,wCAAwC,EACxC,mDAAmD,EACpD,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EACL,8CAA8C,EAC9C,2CAA2C,EAC3C,4CAA4C,EAC5C,iDAAiD,EACjD,2CAA2C,EAC3C,+CAA+C,EAC/C,2CAA2C,EAC3C,2CAA2C,EAC3C,0CAA0C,EAC1C,iDAAiD,EACjD,yCAAyC,EACzC,0CAA0C,EAC3C,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,iDAAiD,EACjD,kDAAkD,EAClD,0CAA0C,EAC1C,yCAAyC,EAC1C,MAAM,2CAA2C,CAAC"}

package/build/_modules/privacy-lifecycle/index.js

@@ -1,8 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DyNTS_PrivacyRequest_Type = exports.DyNTS_PrivacyRequestState_Type = exports.DyNTS_PrivacyContributorOutcome_Type = exports.DyNTS_PrivacyContributorExecutionMode_Type = exports.DyNTS_PrivacyContributorAction_Type = exports.DyNTS_PrivacyConsentAuthorizationReason_Type = exports.DyNTS_PrivacyConsentDecision_Type = exports.DyNTS_PrivacyExportBundle_ControlService = exports.DyNTS_PrivacyExportArtifact_MongoStore = exports.DyNTS_privacyExportArtifactContributorId = exports.DyNTS_PrivacyExportArtifactPrivacyContributor_ControlService = exports.DyNTS_PrivacyExportArtifact_ControlService = exports.DyNTS_PrivacyConsentAuthorization_ControlService = exports.DyNTS_PrivacyLedger_ControlService = exports.DyNTS_PrivacyRequestCursor_ControlService = exports.DyNTS_PrivacyMutationGate_MongoStore = exports.DyNTS_PrivacyLifecycle_ControlService = void 0;
+exports.DyNTS_PrivacyRequest_Type = exports.DyNTS_PrivacyRequestState_Type = exports.DyNTS_PrivacyContributorOutcome_Type = exports.DyNTS_PrivacyContributorExecutionMode_Type = exports.DyNTS_PrivacyContributorAction_Type = exports.DyNTS_PrivacyConsentAuthorizationReason_Type = exports.DyNTS_PrivacyConsentDecision_Type = exports.DyNTS_PrivacyExportBundle_ControlService = exports.DyNTS_PrivacyExportArtifact_MongoStore = exports.DyNTS_privacyExportArtifactContributorId = exports.DyNTS_PrivacyExportArtifactPrivacyContributor_ControlService = exports.DyNTS_PrivacyExportArtifact_ControlService = exports.DyNTS_PrivacyConsentAuthorization_ControlService = exports.DyNTS_PrivacyLedger_ControlService = exports.DyNTS_PrivacyRequestCursor_ControlService = exports.DyNTS_PrivacyMutationGate_MongoStore = exports.DyNTS_PrivacyRightsValue_Type = exports.DyNTS_PrivacyRightsCustody_MongoStore = exports.DyNTS_PrivacyRightsInput_ControlService = exports.DyNTS_PrivacyLifecycle_ControlService = void 0;
 var privacy_lifecycle_control_service_1 = require("./privacy-lifecycle.control-service");
 Object.defineProperty(exports, "DyNTS_PrivacyLifecycle_ControlService", { enumerable: true, get: function () { return privacy_lifecycle_control_service_1.DyNTS_PrivacyLifecycle_ControlService; } });
+var privacy_rights_input_control_service_1 = require("./privacy-rights-input.control-service");
+Object.defineProperty(exports, "DyNTS_PrivacyRightsInput_ControlService", { enumerable: true, get: function () { return privacy_rights_input_control_service_1.DyNTS_PrivacyRightsInput_ControlService; } });
+var privacy_rights_custody_mongo_store_1 = require("./privacy-rights-custody.mongo-store");
+Object.defineProperty(exports, "DyNTS_PrivacyRightsCustody_MongoStore", { enumerable: true, get: function () { return privacy_rights_custody_mongo_store_1.DyNTS_PrivacyRightsCustody_MongoStore; } });
+var privacy_rights_value_type_enum_1 = require("./_enums/privacy-rights-value.type-enum");
+Object.defineProperty(exports, "DyNTS_PrivacyRightsValue_Type", { enumerable: true, get: function () { return privacy_rights_value_type_enum_1.DyNTS_PrivacyRightsValue_Type; } });
 var privacy_mutation_gate_mongo_store_1 = require("./privacy-mutation-gate.mongo-store");
 Object.defineProperty(exports, "DyNTS_PrivacyMutationGate_MongoStore", { enumerable: true, get: function () { return privacy_mutation_gate_mongo_store_1.DyNTS_PrivacyMutationGate_MongoStore; } });
 var privacy_request_cursor_control_service_1 = require("./privacy-request-cursor.control-service");

package/build/_modules/privacy-lifecycle/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/index.ts"],"names":[],"mappings":";;;AAAA,yFAA4F;AAAnF,0JAAA,qCAAqC,OAAA;AAC9C,yFAA2F;AAAlF,yJAAA,oCAAoC,OAAA;AAM7C,mGAAqG;AAA5F,mKAAA,yCAAyC,OAAA;AAClD,mFAAsF;AAA7E,oJAAA,kCAAkC,OAAA;AAC3C,iHAEyD;AADvD,iLAAA,gDAAgD,OAAA;AAElD,qGAAuG;AAA9F,qKAAA,0CAA0C,OAAA;AACnD,6IAGuE;AAFrE,2MAAA,4DAA4D,OAAA;AAC5D,uLAAA,wCAAwC,OAAA;AAE1C,6FAA+F;AAAtF,6JAAA,sCAAsC,OAAA;AAC/C,iGAAmG;AAA1F,iKAAA,wCAAwC,OAAA;AACjD,kGAAgG;AAAvF,uJAAA,iCAAiC,OAAA;AAC1C,0HAEiE;AAD/D,8KAAA,4CAA4C,OAAA;AAE9C,sGAAoG;AAA3F,2JAAA,mCAAmC,OAAA;AAC5C,sHAE+D;AAD7D,0KAAA,0CAA0C,OAAA;AAE5C,wGAAsG;AAA7F,6JAAA,oCAAoC,OAAA;AAC7C,4FAA0F;AAAjF,iJAAA,8BAA8B,OAAA;AACvC,gFAA+E;AAAtE,sIAAA,yBAAyB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/index.ts"],"names":[],"mappings":";;;AAAA,yFAA4F;AAAnF,0JAAA,qCAAqC,OAAA;AAC9C,+FAAiG;AAAxF,+JAAA,uCAAuC,OAAA;AAChD,2FAA6F;AAApF,2JAAA,qCAAqC,OAAA;AAU9C,0FAAwF;AAA/E,+IAAA,6BAA6B,OAAA;AAWtC,yFAA2F;AAAlF,yJAAA,oCAAoC,OAAA;AAM7C,mGAAqG;AAA5F,mKAAA,yCAAyC,OAAA;AAClD,mFAAsF;AAA7E,oJAAA,kCAAkC,OAAA;AAC3C,iHAEyD;AADvD,iLAAA,gDAAgD,OAAA;AAElD,qGAAuG;AAA9F,qKAAA,0CAA0C,OAAA;AACnD,6IAGuE;AAFrE,2MAAA,4DAA4D,OAAA;AAC5D,uLAAA,wCAAwC,OAAA;AAE1C,6FAA+F;AAAtF,6JAAA,sCAAsC,OAAA;AAC/C,iGAAmG;AAA1F,iKAAA,wCAAwC,OAAA;AACjD,kGAAgG;AAAvF,uJAAA,iCAAiC,OAAA;AAC1C,0HAEiE;AAD/D,8KAAA,4CAA4C,OAAA;AAE9C,sGAAoG;AAA3F,2JAAA,mCAAmC,OAAA;AAC5C,sHAE+D;AAD7D,0KAAA,0CAA0C,OAAA;AAE5C,wGAAsG;AAA7F,6JAAA,oCAAoC,OAAA;AAC7C,4FAA0F;AAAjF,iJAAA,8BAA8B,OAAA;AACvC,gFAA+E;AAAtE,sIAAA,yBAAyB,OAAA"}

package/build/_modules/privacy-lifecycle/privacy-rights-custody.mongo-store.d.ts

@@ -0,0 +1,49 @@
+import { ClientSession } from 'mongoose';
+import { DyNTS_PrivacyRightsAuthority_Interface, DyNTS_PrivacyRightsCustodySettings_Interface, DyNTS_PrivacyRightsReceipt_Interface } from './_models/privacy-rights-custody.interface';
+import { DyNTS_PrivacyRightsInput_Type } from './_types/privacy-rights-input.type';
+/**
+ * Atomic confidential rights-input custody. Call ensureReady during bootstrap, then use the SAME strong
+ * transaction for request/subject locking, challenge consumption and encrypted creation. No nested transaction.
+ * Injected callbacks are trusted composition, not browser authority. Never catch a failure and commit anyway.
+ */
+export declare class DyNTS_PrivacyRightsCustody_MongoStore {
+    private readonly settings;
+    private readonly schemas;
+    private readonly ownedErrors;
+    private isReady;
+    /** Captures explicit lifetime, policy history and purpose-separated encryption without reading secrets. */
+    constructor(settings: DyNTS_PrivacyRightsCustodySettings_Interface);
+    /** Creates a strict collection and unique challenge binding outside all business transactions. */
+    ensureReady(): Promise<void>;
+    /** Commits with the caller's transaction; replay requires the same credential and identical normalized input. */
+    intake(set: {
+        authority: DyNTS_PrivacyRightsAuthority_Interface;
+        input: unknown;
+        token: string;
+    }, session: ClientSession): Promise<DyNTS_PrivacyRightsReceipt_Interface>;
+    /** Execution-only callback; no plaintext read/list/download method or arbitrary callback return value. */
+    withExecutionInput(set: {
+        authority: DyNTS_PrivacyRightsAuthority_Interface;
+        task: (input: DyNTS_PrivacyRightsInput_Type, session: ClientSession) => Promise<void>;
+    }, session: ClientSession): Promise<void>;
+    /** Erases ciphertext and grant-binding data only after expiry or terminal lifecycle, then proves no residue. */
+    eraseInput(authorityValue: DyNTS_PrivacyRightsAuthority_Interface, session: ClientSession): Promise<number>;
+    private lockRequest;
+    private parse;
+    private open;
+    private context;
+    private assertRecord;
+    private authority;
+    private databaseTime;
+    private execute;
+    private purpose;
+    private receipt;
+    private key;
+    private positive;
+    private code;
+    private options;
+    private collection;
+    private error;
+    private validator;
+}
+//# sourceMappingURL=privacy-rights-custody.mongo-store.d.ts.map

package/build/_modules/privacy-lifecycle/privacy-rights-custody.mongo-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-rights-custody.mongo-store.d.ts","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/privacy-rights-custody.mongo-store.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAS,MAAM,UAAU,CAAC;AAOhD,OAAO,EACL,sCAAsC,EAGtC,4CAA4C,EAC5C,oCAAoC,EAErC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAGnF;;;;GAIG;AACH,qBAAa,qCAAqC;IAChD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA+C;IACxE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+D;IACvF,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAC7D,OAAO,CAAC,OAAO,CAAkB;IAEjC,2GAA2G;gBAC/F,QAAQ,EAAE,4CAA4C;IA8BlE,kGAAkG;IACrF,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAoCzC,iHAAiH;IACpG,MAAM,CAAC,GAAG,EAAE;QACvB,SAAS,EAAE,sCAAsC,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;KAClF,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,oCAAoC,CAAC;IAiGzE,0GAA0G;IAC7F,kBAAkB,CAAC,GAAG,EAAE;QACnC,SAAS,EAAE,sCAAsC,CAAC;QAClD,IAAI,EAAE,CAAC,KAAK,EAAE,6BAA6B,EAAE,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KACvF,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBzC,gHAAgH;IACnG,UAAU,CAAC,cAAc,EAAE,sCAAsC,EAC5E,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;YAqC5B,WAAW;IAqBzB,OAAO,CAAC,KAAK;IAYb,OAAO,CAAC,IAAI;IAYZ,OAAO,CAAC,OAAO;IASf,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,SAAS;YAcH,YAAY;YAcZ,OAAO;IA+BrB,OAAO,CAAC,OAAO;IAUf,OAAO,CAAC,OAAO;IAOf,OAAO,CAAC,GAAG;IAMX,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,IAAI;IAIZ,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,KAAK;IAQb,OAAO,CAAC,SAAS;CAgBlB"}

package/build/_modules/privacy-lifecycle/privacy-rights-custody.mongo-store.js

@@ -0,0 +1,355 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyRightsCustody_MongoStore = void 0;
+const node_crypto_1 = require("node:crypto");
+const node_util_1 = require("node:util");
+const mongoose_1 = require("mongoose");
+const account_challenge_purpose_type_enum_1 = require("../account-security/_enums/account-challenge-purpose.type-enum");
+const privacy_request_state_type_enum_1 = require("./_enums/privacy-request-state.type-enum");
+const privacy_request_type_enum_1 = require("./_enums/privacy-request.type-enum");
+const privacy_rights_input_control_service_1 = require("./privacy-rights-input.control-service");
+/**
+ * Atomic confidential rights-input custody. Call ensureReady during bootstrap, then use the SAME strong
+ * transaction for request/subject locking, challenge consumption and encrypted creation. No nested transaction.
+ * Injected callbacks are trusted composition, not browser authority. Never catch a failure and commit anyway.
+ */
+class DyNTS_PrivacyRightsCustody_MongoStore {
+    settings;
+    schemas;
+    ownedErrors = new WeakSet();
+    isReady = false;
+    /** Captures explicit lifetime, policy history and purpose-separated encryption without reading secrets. */
+    constructor(settings) {
+        try {
+            if (!settings?.connection || typeof settings.connection.startSession !== 'function'
+                || !this.positive(settings.maxOperationTimeMs, 2_147_483_647)
+                || !this.positive(settings.retentionMs, 2_592_000_000)
+                || !Array.isArray(settings.policies) || !this.positive(settings.policies.length, 64)
+                || typeof settings.cipher?.seal !== 'function' || typeof settings.cipher?.open !== 'function'
+                || typeof settings.lockRequest !== 'function' || typeof settings.consumeChallenge !== 'function'
+                || typeof settings.acceptRequest !== 'function') {
+                throw new Error();
+            }
+            const schemas = new Map();
+            for (const policy of settings.policies) {
+                if (schemas.has(policy.policyVersion)) {
+                    throw new Error();
+                }
+                schemas.set(policy.policyVersion, new privacy_rights_input_control_service_1.DyNTS_PrivacyRightsInput_ControlService(policy));
+            }
+            if (!schemas.has(settings.currentPolicyVersion)) {
+                throw new Error();
+            }
+            this.settings = Object.freeze({ ...settings });
+            this.schemas = schemas;
+        }
+        catch {
+            throw this.error('SETTINGS_INVALID');
+        }
+    }
+    /** Creates a strict collection and unique challenge binding outside all business transactions. */
+    async ensureReady() {
+        if (this.isReady) {
+            return;
+        }
+        try {
+            try {
+                await this.settings.connection.db.createCollection('dynts_privacy_rights_inputs', {
+                    validator: this.validator(), validationLevel: 'strict', validationAction: 'error',
+                    maxTimeMS: this.settings.maxOperationTimeMs,
+                });
+            }
+            catch (error) {
+                if (!(error instanceof mongoose_1.mongo.MongoServerError) || error.code !== 48) {
+                    throw error;
+                }
+            }
+            const information = await this.settings.connection.db.listCollections({ name: 'dynts_privacy_rights_inputs' }, { nameOnly: false, maxTimeMS: this.settings.maxOperationTimeMs }).next();
+            if (!(0, node_util_1.isDeepStrictEqual)(information?.options?.validator, this.validator())
+                || information?.options?.validationLevel !== 'strict' || information?.options?.validationAction !== 'error') {
+                throw this.error('SCHEMA_MIGRATION_REQUIRED');
+            }
+            await this.collection().createIndex({ challengeId: 1 }, {
+                unique: true, name: 'uq_dynts_rights_challenge', maxTimeMS: this.settings.maxOperationTimeMs,
+            });
+            this.isReady = true;
+        }
+        catch (error) {
+            if (error instanceof Error && this.ownedErrors.has(error)) {
+                throw error;
+            }
+            throw this.error('NOT_READY');
+        }
+    }
+    /** Commits with the caller's transaction; replay requires the same credential and identical normalized input. */
+    async intake(set, session) {
+        return this.execute(session, async () => {
+            const authority = this.authority(set?.authority);
+            if (typeof set.token !== 'string' || !/^[A-Za-z0-9_-]{43,512}$/u.test(set.token)) {
+                throw this.error('CHALLENGE_INVALID');
+            }
+            const request = await this.lockRequest(authority, session);
+            const existing = await this.collection().findOne({ _id: this.key(authority) }, this.options(session));
+            const now = await this.databaseTime();
+            const credentialHash = (0, node_crypto_1.createHash)('sha256').update(set.token).digest('hex');
+            if (Date.parse(request.deadlineAt) <= now.getTime()) {
+                throw this.error('REQUEST_EXPIRED');
+            }
+            if (existing) {
+                this.assertRecord(existing, authority, now);
+                if (existing.credentialHash !== credentialHash || existing.requestType !== request.type) {
+                    throw this.error('REPLAY_CONFLICT');
+                }
+                const parsed = this.parse(set.input, existing);
+                const original = this.open(existing);
+                if (JSON.stringify(parsed) !== JSON.stringify(original)) {
+                    throw this.error('REPLAY_CONFLICT');
+                }
+                return this.receipt(existing, false);
+            }
+            if (request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.identityVerified
+                || !!request.executionStartedAt || !request.identityVerifiedAt) {
+                throw this.error('REQUEST_STATE_INVALID');
+            }
+            const policyVersion = typeof set.input === 'object' && set.input !== null
+                ? Object.getOwnPropertyDescriptor(set.input, 'policyVersion')?.value : undefined;
+            if (typeof policyVersion !== 'string' || policyVersion !== this.settings.currentPolicyVersion) {
+                throw this.error('INPUT_INVALID');
+            }
+            const inputContext = {
+                contractVersion: 'dynts-privacy-rights-custody/1', ...authority, inputId: (0, node_crypto_1.randomUUID)(),
+                requestType: request.type, requestRevision: request.revision, policyVersion: policyVersion,
+                challengeId: '', createdAt: now.toISOString(),
+                expiresAt: new Date(Math.min(now.getTime() + this.settings.retentionMs, Date.parse(request.deadlineAt))).toISOString(),
+            };
+            const parsed = this.parse(set.input, inputContext);
+            const purpose = this.purpose(request.type);
+            const consumed = await this.settings.consumeChallenge({
+                token: set.token, subjectId: authority.subjectId, purpose: purpose, session: session, now: now,
+            });
+            if (!consumed || !this.code(consumed.challengeId) || consumed.subjectId !== authority.subjectId
+                || consumed.purpose !== purpose) {
+                throw this.error('CHALLENGE_INVALID');
+            }
+            const context = Object.freeze({
+                ...inputContext, challengeId: consumed.challengeId,
+            });
+            const plaintext = JSON.stringify(parsed);
+            const sealed = this.settings.cipher.seal(plaintext, context);
+            if (!sealed || !this.code(sealed.keyId) || typeof sealed.ciphertext !== 'string'
+                || !sealed.ciphertext || sealed.ciphertext.length > 131_072 || sealed.ciphertext === plaintext) {
+                throw this.error('ENCRYPTION_FAILED');
+            }
+            const record = {
+                ...context, _id: this.key(authority), credentialHash: credentialHash,
+                keyId: sealed.keyId, ciphertext: sealed.ciphertext,
+            };
+            // Authenticate the actual encryption result before durable storage. Never persist a plaintext checksum.
+            if (JSON.stringify(this.open(record)) !== plaintext) {
+                throw this.error('ENCRYPTION_FAILED');
+            }
+            await this.collection().insertOne(record, this.options(session));
+            const accepted = await this.settings.acceptRequest({
+                authority: authority, expectedRevision: request.revision, acceptedAt: context.createdAt, session: session,
+            });
+            if (accepted?.requestId !== authority.requestId || accepted.subjectId !== authority.subjectId
+                || accepted.organizationId !== authority.organizationId || accepted.type !== request.type
+                || accepted.revision !== request.revision + 1 || accepted.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.scoped
+                || accepted.scopedAt !== context.createdAt || accepted.identityVerifiedAt !== request.identityVerifiedAt
+                || !!accepted.executionStartedAt || !!accepted.cancelledAt) {
+                throw this.error('ACCEPTANCE_CONFLICT');
+            }
+            return this.receipt(record, true);
+        });
+    }
+    /** Execution-only callback; no plaintext read/list/download method or arbitrary callback return value. */
+    async withExecutionInput(set, session) {
+        await this.execute(session, async () => {
+            const authority = this.authority(set?.authority);
+            const request = await this.lockRequest(authority, session);
+            if (request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.executing || typeof set.task !== 'function') {
+                throw this.error('EXECUTION_DENIED');
+            }
+            const record = await this.collection().findOne({ _id: this.key(authority) }, this.options(session));
+            const now = await this.databaseTime();
+            this.assertRecord(record, authority, now);
+            if (record.requestType !== request.type || Date.parse(request.deadlineAt) <= now.getTime()) {
+                throw this.error('EXECUTION_DENIED');
+            }
+            await set.task(this.open(record), session);
+        });
+    }
+    /** Erases ciphertext and grant-binding data only after expiry or terminal lifecycle, then proves no residue. */
+    async eraseInput(authorityValue, session) {
+        return this.execute(session, async () => {
+            const authority = this.authority(authorityValue);
+            // Cleanup must also support cancelled/rejected requests, unlike intake and execution admission.
+            const request = await this.settings.lockRequest(authority, session);
+            if (request?.requestId !== authority.requestId || request.subjectId !== authority.subjectId
+                || request.organizationId !== authority.organizationId) {
+                throw this.error('AUTHORITY_INVALID');
+            }
+            const record = await this.collection().findOne({ _id: this.key(authority) }, this.options(session));
+            if (!record) {
+                return 0;
+            }
+            const terminal = [privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.completed, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.cancelled,
+                privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.rejectedWithReason, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.failedTerminal]
+                .includes(request.state);
+            const now = await this.databaseTime();
+            if (!terminal && !(Date.parse(record.expiresAt) <= now.getTime())) {
+                throw this.error('ERASURE_NOT_ELIGIBLE');
+            }
+            const removed = await this.collection().deleteOne({
+                _id: record._id, inputId: record.inputId,
+            }, this.options(session));
+            if (removed.deletedCount !== 1 || await this.collection().findOne({ _id: record._id }, this.options(session))) {
+                throw this.error('ERASURE_NOT_VERIFIED');
+            }
+            return 1;
+        });
+    }
+    async lockRequest(authority, session) {
+        const request = await this.settings.lockRequest(authority, session);
+        if (request?.requestId !== authority.requestId || request.subjectId !== authority.subjectId
+            || request.organizationId !== authority.organizationId || !Number.isSafeInteger(request.revision)
+            || request.revision < 0 || !Number.isFinite(Date.parse(request.deadlineAt))) {
+            throw this.error('AUTHORITY_INVALID');
+        }
+        this.purpose(request.type);
+        if (request.cancelledAt || request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.cancelled
+            || request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.failedTerminal
+            || request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.rejectedWithReason) {
+            throw this.error('REQUEST_STATE_INVALID');
+        }
+        return request;
+    }
+    parse(value, context) {
+        const schema = this.schemas.get(context.policyVersion);
+        if (!schema) {
+            throw this.error('POLICY_UNAVAILABLE');
+        }
+        const type = Object.values(privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type)
+            .find((entry) => entry === context.requestType);
+        return schema.parse(value, { requestId: context.requestId, type: type, revision: context.requestRevision });
+    }
+    open(record) {
+        const plaintext = this.settings.cipher.open({ keyId: record.keyId, ciphertext: record.ciphertext }, this.context(record));
+        if (typeof plaintext !== 'string' || Buffer.byteLength(plaintext, 'utf8') > 65_536) {
+            throw this.error('CIPHERTEXT_INVALID');
+        }
+        return this.parse(JSON.parse(plaintext), record);
+    }
+    context(record) {
+        return Object.freeze({
+            contractVersion: record.contractVersion, inputId: record.inputId, requestId: record.requestId,
+            subjectId: record.subjectId, organizationId: record.organizationId, requestType: record.requestType,
+            requestRevision: record.requestRevision, policyVersion: record.policyVersion, challengeId: record.challengeId,
+            createdAt: record.createdAt, expiresAt: record.expiresAt,
+        });
+    }
+    assertRecord(record, authority, now) {
+        if (record?._id !== this.key(authority) || record.requestId !== authority.requestId
+            || record.subjectId !== authority.subjectId || record.organizationId !== authority.organizationId
+            || record.contractVersion !== 'dynts-privacy-rights-custody/1' || !this.code(record.inputId)
+            || !Number.isFinite(Date.parse(record.expiresAt)) || Date.parse(record.expiresAt) <= now.getTime()) {
+            throw this.error('INPUT_UNAVAILABLE');
+        }
+    }
+    authority(value) {
+        const descriptors = Object.getOwnPropertyDescriptors(value);
+        const requestId = descriptors.requestId?.value;
+        const subjectId = descriptors.subjectId?.value;
+        const organizationId = descriptors.organizationId?.value;
+        if (Reflect.ownKeys(value).length !== 3 || !this.code(requestId)
+            || !this.code(subjectId) || !this.code(organizationId)) {
+            throw this.error('AUTHORITY_INVALID');
+        }
+        return Object.freeze({ requestId: requestId, subjectId: subjectId, organizationId: organizationId });
+    }
+    async databaseTime() {
+        // hello is not legal inside a transaction. This bounded same-server clock read carries no session or payload.
+        const result = await this.settings.connection.db.command({ hello: 1, maxTimeMS: this.settings.maxOperationTimeMs }, { timeoutMS: this.settings.maxOperationTimeMs });
+        const now = result.localTime;
+        if (!(now instanceof Date) || !Number.isFinite(now.getTime())) {
+            throw this.error('CLOCK_UNAVAILABLE');
+        }
+        return now;
+    }
+    async execute(session, task) {
+        const concern = session?.transaction?.options?.readConcern;
+        if (!this.isReady || !session?.inTransaction() || session.transaction.options.writeConcern?.w !== 'majority'
+            || (typeof concern === 'string' ? concern : concern?.level) !== 'snapshot') {
+            throw this.error('OWNING_TRANSACTION_REQUIRED');
+        }
+        try {
+            // The native driver validates session ownership before dispatch. Empty _id is excluded by our strict schema;
+            // this indexed, content-free read verifies the real connection/session pair BEFORE any trusted callback.
+            await this.collection().findOne({ _id: '' }, this.options(session));
+            return await task();
+        }
+        catch (error) {
+            // Preserve only the driver's retry label, never the message, command or input in its error.
+            if (error instanceof mongoose_1.mongo.MongoError && error.hasErrorLabel('TransientTransactionError')) {
+                const retryable = new mongoose_1.mongo.MongoError('DyNTS|PRIVACY_RIGHTS_CUSTODY|TRANSACTION_FAILED');
+                retryable.addErrorLabel('TransientTransactionError');
+                throw retryable;
+            }
+            if (error instanceof Error && this.ownedErrors.has(error)) {
+                throw error;
+            }
+            throw this.error('INTAKE_OR_EXECUTION_FAILED');
+        }
+    }
+    purpose(type) {
+        switch (type) {
+            case privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.rectification: return account_challenge_purpose_type_enum_1.DyNTS_AccountChallengePurpose_Type.privacyRectification;
+            case privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.restriction: return account_challenge_purpose_type_enum_1.DyNTS_AccountChallengePurpose_Type.privacyRestriction;
+            case privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.objection: return account_challenge_purpose_type_enum_1.DyNTS_AccountChallengePurpose_Type.privacyObjection;
+            default: throw this.error('REQUEST_TYPE_INVALID');
+        }
+    }
+    receipt(record, created) {
+        return Object.freeze({ contractVersion: 'dynts-privacy-rights-receipt/1', inputId: record.inputId,
+            requestId: record.requestId, created: created, expiresAt: record.expiresAt });
+    }
+    key(authority) {
+        return (0, node_crypto_1.createHash)('sha256').update(JSON.stringify([
+            'dynts-privacy-rights-custody/1', authority.requestId, authority.subjectId, authority.organizationId,
+        ])).digest('hex');
+    }
+    positive(value, maximum) {
+        return Number.isSafeInteger(value) && Number(value) > 0 && Number(value) <= maximum;
+    }
+    code(value) {
+        return typeof value === 'string' && /^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$/u.test(value);
+    }
+    options(session) {
+        return { session: session, maxTimeMS: this.settings.maxOperationTimeMs };
+    }
+    collection() {
+        return this.settings.connection.db.collection('dynts_privacy_rights_inputs');
+    }
+    error(code) {
+        const error = new Error(`DyNTS|PRIVACY_RIGHTS_CUSTODY|${code}`);
+        this.ownedErrors.add(error);
+        return error;
+    }
+    validator() {
+        const code = { bsonType: 'string', pattern: '^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$' };
+        const properties = {
+            _id: { bsonType: 'string', pattern: '^[a-f0-9]{64}$' },
+            contractVersion: { enum: ['dynts-privacy-rights-custody/1'] },
+            inputId: code, requestId: code, subjectId: code, organizationId: code, policyVersion: code, challengeId: code,
+            requestType: { enum: ['rectification', 'restriction', 'objection'] },
+            requestRevision: { bsonType: ['int', 'long', 'double'], minimum: 0, maximum: Number.MAX_SAFE_INTEGER },
+            createdAt: { bsonType: 'string', maxLength: 24 }, expiresAt: { bsonType: 'string', maxLength: 24 },
+            credentialHash: { bsonType: 'string', pattern: '^[a-f0-9]{64}$' },
+            keyId: code, ciphertext: { bsonType: 'string', minLength: 1, maxLength: 131_072 },
+        };
+        return { $jsonSchema: { bsonType: 'object', additionalProperties: false,
+                required: Object.keys(properties), properties: properties } };
+    }
+}
+exports.DyNTS_PrivacyRightsCustody_MongoStore = DyNTS_PrivacyRightsCustody_MongoStore;
+//# sourceMappingURL=privacy-rights-custody.mongo-store.js.map

package/build/_modules/privacy-lifecycle/privacy-rights-custody.mongo-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-rights-custody.mongo-store.js","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/privacy-rights-custody.mongo-store.ts"],"names":[],"mappings":";;;AAAA,6CAAqD;AACrD,yCAA8C;AAE9C,uCAAgD;AAEhD,wHAAoH;AAEpH,8FAA0F;AAC1F,kFAA+E;AAW/E,iGAAiG;AAEjG;;;;GAIG;AACH,MAAa,qCAAqC;IAC/B,QAAQ,CAA+C;IACvD,OAAO,CAA+D;IACtE,WAAW,GAAmB,IAAI,OAAO,EAAE,CAAC;IACrD,OAAO,GAAY,KAAK,CAAC;IAEjC,2GAA2G;IAC3G,YAAY,QAAsD;QAChE,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,OAAO,QAAQ,CAAC,UAAU,CAAC,YAAY,KAAK,UAAU;mBAC9E,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,aAAa,CAAC;mBAC1D,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;mBACnD,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;mBACjF,OAAO,QAAQ,CAAC,MAAM,EAAE,IAAI,KAAK,UAAU,IAAI,OAAO,QAAQ,CAAC,MAAM,EAAE,IAAI,KAAK,UAAU;mBAC1F,OAAO,QAAQ,CAAC,WAAW,KAAK,UAAU,IAAI,OAAO,QAAQ,CAAC,gBAAgB,KAAK,UAAU;mBAC7F,OAAO,QAAQ,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,EAAE,CAAC;YACpB,CAAC;YACD,MAAM,OAAO,GAAyD,IAAI,GAAG,EAAE,CAAC;YAEhF,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACvC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;oBACtC,MAAM,IAAI,KAAK,EAAE,CAAC;gBACpB,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,8EAAuC,CAAC,MAAM,CAAC,CAAC,CAAC;YACzF,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,EAAE,CAAC;YACpB,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,kGAAkG;IAC3F,KAAK,CAAC,WAAW;QACtB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,gBAAgB,CAAC,6BAA6B,EAAE;oBAChF,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO;oBACjF,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB;iBAC5C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,KAAK,YAAY,gBAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;oBACpE,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YACD,MAAM,WAAW,GAAgC,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,eAAe,CAChG,EAAE,IAAI,EAAE,6BAA6B,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAC1G,CAAC,IAAI,EAAE,CAAC;YAET,IAAI,CAAC,IAAA,6BAAiB,EAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;mBACpE,WAAW,EAAE,OAAO,EAAE,eAAe,KAAK,QAAQ,IAAI,WAAW,EAAE,OAAO,EAAE,gBAAgB,KAAK,OAAO,EAAE,CAAC;gBAC9G,MAAM,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE;gBACtD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,2BAA2B,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB;aAC7F,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,KAAK,YAAY,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1D,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,iHAAiH;IAC1G,KAAK,CAAC,MAAM,CAAC,GAEnB,EAAE,OAAsB;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,IAAmD,EAAE;YACrF,MAAM,SAAS,GAA2C,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAEzF,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjF,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,OAAO,GAAyC,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACjG,MAAM,QAAQ,GAAsD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CACjG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CACpD,CAAC;YACF,MAAM,GAAG,GAAS,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,MAAM,cAAc,GAAW,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEpF,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpD,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACtC,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;gBAE5C,IAAI,QAAQ,CAAC,cAAc,KAAK,cAAc,IAAI,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;oBACxF,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM,MAAM,GAAkC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAC9E,MAAM,QAAQ,GAAkC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAEpE,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACxD,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBACtC,CAAC;gBAED,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACvC,CAAC;YAED,IAAI,OAAO,CAAC,KAAK,KAAK,gEAA8B,CAAC,gBAAgB;mBAChE,CAAC,CAAC,OAAO,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;gBACjE,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,aAAa,GAAY,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI;gBAChF,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAEnF,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,KAAK,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC;gBAC9F,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACpC,CAAC;YACD,MAAM,YAAY,GAA+C;gBAC/D,eAAe,EAAE,gCAAgC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,IAAA,wBAAU,GAAE;gBACtF,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,aAAa;gBAC1F,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;gBAC7C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EACpE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;aACjD,CAAC;YACF,MAAM,MAAM,GAAkC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAClF,MAAM,OAAO,GAAuC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/E,MAAM,QAAQ,GAA2C,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAC5F,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG;aAC/F,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;mBAC1F,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,OAAO,GAA+C,MAAM,CAAC,MAAM,CAAC;gBACxE,GAAG,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW;aACnD,CAAC,CAAC;YACH,MAAM,SAAS,GAAW,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,MAAM,GAAwC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAElG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;mBAC3E,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,OAAO,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACjG,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,MAAM,GAA+C;gBACzD,GAAG,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,cAAc;gBACpE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU;aACnD,CAAC;YAEF,wGAAwG;YACxG,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpD,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAyC,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;gBACvF,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO;aAC1G,CAAC,CAAC;YAEH,IAAI,QAAQ,EAAE,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;mBACxF,QAAQ,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;mBACtF,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,gEAA8B,CAAC,MAAM;mBACtG,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,kBAAkB,KAAK,OAAO,CAAC,kBAAkB;mBACrG,CAAC,CAAC,QAAQ,CAAC,kBAAkB,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC7D,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC1C,CAAC;YAED,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0GAA0G;IACnG,KAAK,CAAC,kBAAkB,CAAC,GAG/B,EAAE,OAAsB;QACvB,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,IAAmB,EAAE;YACpD,MAAM,SAAS,GAA2C,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACzF,MAAM,OAAO,GAAyC,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAEjG,IAAI,OAAO,CAAC,KAAK,KAAK,gEAA8B,CAAC,SAAS,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACjG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,MAAM,GAAsD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAC/F,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CACpD,CAAC;YAEF,MAAM,GAAG,GAAS,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAE5C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YAE1C,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC3F,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gHAAgH;IACzG,KAAK,CAAC,UAAU,CAAC,cAAsD,EAC5E,OAAsB;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,IAAqB,EAAE;YACvD,MAAM,SAAS,GAA2C,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YACzF,gGAAgG;YAChG,MAAM,OAAO,GAAyC,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAE1G,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;mBACtF,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc,EAAE,CAAC;gBACzD,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,MAAM,GAAsD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAC/F,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CACpD,CAAC;YAEF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,QAAQ,GAAY,CAAE,gEAA8B,CAAC,SAAS,EAAE,gEAA8B,CAAC,SAAS;gBAC5G,gEAA8B,CAAC,kBAAkB,EAAE,gEAA8B,CAAC,cAAc,CAAE;iBACjG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,GAAG,GAAS,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAE5C,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,OAAO,GAAuB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC;gBACpE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO;aACzC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAE1B,IAAI,OAAO,CAAC,YAAY,KAAK,CAAC,IAAI,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC9G,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC3C,CAAC;YAED,OAAO,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,SAAiD,EAAE,OAAsB;QAEzE,MAAM,OAAO,GAAyC,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE1G,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;eACtF,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;eAC9F,OAAO,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAE3B,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,KAAK,gEAA8B,CAAC,SAAS;eAChF,OAAO,CAAC,KAAK,KAAK,gEAA8B,CAAC,cAAc;eAC/D,OAAO,CAAC,KAAK,KAAK,gEAA8B,CAAC,kBAAkB,EAAE,CAAC;YACzE,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,KAAc,EAAE,OAAmD;QAC/E,MAAM,MAAM,GAAwD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAE5G,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,IAAI,GAA0C,MAAM,CAAC,MAAM,CAAC,qDAAyB,CAAC;aACzF,IAAI,CAAC,CAAC,KAAgC,EAAW,EAAE,CAAC,KAAK,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;QAEtF,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAC9G,CAAC;IAEO,IAAI,CAAC,MAAkD;QAC7D,MAAM,SAAS,GAAW,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CACjD,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAC7E,CAAC;QAEF,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;YACnF,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAEO,OAAO,CAAC,MAAkD;QAChE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;YAC7F,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW;YACnG,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW;YAC7G,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;SACzD,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAClB,MAAyD,EACzD,SAAiD,EAAE,GAAS;QAE5D,IAAI,MAAM,EAAE,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;eAC9E,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc;eAC9F,MAAM,CAAC,eAAe,KAAK,gCAAgC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;eACzF,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACrG,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,KAA6C;QAC7D,MAAM,WAAW,GAA0B,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACnF,MAAM,SAAS,GAAY,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC;QACxD,MAAM,SAAS,GAAY,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC;QACxD,MAAM,cAAc,GAAY,WAAW,CAAC,cAAc,EAAE,KAAK,CAAC;QAElE,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;eAC3D,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC;IACvG,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,8GAA8G;QAC9G,MAAM,MAAM,GAAmB,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CACtE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAC3G,CAAC;QACF,MAAM,GAAG,GAAY,MAAM,CAAC,SAAS,CAAC;QAEtC,IAAI,CAAC,CAAC,GAAG,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,OAAsB,EAAE,IAAsB;QACrE,MAAM,OAAO,GAAsC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC;QAE9F,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,UAAU;eACvG,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,UAAU,EAAE,CAAC;YAC7E,MAAM,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC;YACH,6GAA6G;YAC7G,yGAAyG;YACzG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAEpE,OAAO,MAAM,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,4FAA4F;YAC5F,IAAI,KAAK,YAAY,gBAAK,CAAC,UAAU,IAAI,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,EAAE,CAAC;gBAC1F,MAAM,SAAS,GAAqB,IAAI,gBAAK,CAAC,UAAU,CAAC,iDAAiD,CAAC,CAAC;gBAE5G,SAAS,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAC;gBAErD,MAAM,SAAS,CAAC;YAClB,CAAC;YAED,IAAI,KAAK,YAAY,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1D,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,IAA+B;QAC7C,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,qDAAyB,CAAC,aAAa,CAAC,CAAC,OAAO,wEAAkC,CAAC,oBAAoB,CAAC;YAC7G,KAAK,qDAAyB,CAAC,WAAW,CAAC,CAAC,OAAO,wEAAkC,CAAC,kBAAkB,CAAC;YACzG,KAAK,qDAAyB,CAAC,SAAS,CAAC,CAAC,OAAO,wEAAkC,CAAC,gBAAgB,CAAC;YAErG,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAEO,OAAO,CACb,MAAkD,EAAE,OAAgB;QAEpE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,gCAAgC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO;YAC/F,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAClF,CAAC;IAEO,GAAG,CAAC,SAAiD;QAC3D,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAChD,gCAAgC,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,cAAc;SACrG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAEO,QAAQ,CAAC,KAAc,EAAE,OAAe;QAC9C,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC;IACtF,CAAC;IAEO,IAAI,CAAC,KAAc;QACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzF,CAAC;IAEO,OAAO,CAAC,OAAsB;QACpC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;IAC3E,CAAC;IAEO,UAAU;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAC3C,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAY;QACxB,MAAM,KAAK,GAAU,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;QAEvE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAE5B,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,SAAS;QACf,MAAM,IAAI,GAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;QACpG,MAAM,UAAU,GAAmB;YACjC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE;YACtD,eAAe,EAAE,EAAE,IAAI,EAAE,CAAE,gCAAgC,CAAE,EAAE;YAC/D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI;YAC7G,WAAW,EAAE,EAAE,IAAI,EAAE,CAAE,eAAe,EAAE,aAAa,EAAE,WAAW,CAAE,EAAE;YACtE,eAAe,EAAE,EAAE,QAAQ,EAAE,CAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE;YACxG,SAAS,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE;YAClG,cAAc,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE;YACjE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE;SAClF,CAAC;QAEF,OAAO,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK;gBACrE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC;IAClE,CAAC;CACF;AA9aD,sFA8aC"}

package/build/_modules/privacy-lifecycle/privacy-rights-input.control-service.d.ts

@@ -0,0 +1,30 @@
+import { DyNTS_PrivacyRightsInputContext_Interface, DyNTS_PrivacyRightsInputPolicy_Interface } from './_models/privacy-rights-input.interface';
+import { DyNTS_PrivacyRightsInput_Type } from './_types/privacy-rights-input.type';
+/**
+ * Validates confidential rights input against a trusted, configure-once product schema.
+ * Validation is NOT authorization: the caller must consume exact-purpose step-up, derive subject/organization
+ * server-side and atomically bind persistence to the same request revision before any execution can occur.
+ * No plaintext persistence, hash, logging, authorization grant or field mutation is performed here.
+ */
+export declare class DyNTS_PrivacyRightsInput_ControlService {
+    private readonly policyVersion;
+    private readonly maxInputBytes;
+    private readonly maxEntries;
+    private readonly fields;
+    private readonly purposeCodes;
+    /** Captures bounded product schemas so later configuration mutation cannot silently widen acceptance. */
+    constructor(policy: DyNTS_PrivacyRightsInputPolicy_Interface);
+    /** Returns a detached, deeply frozen envelope, or a content-free rejection without reflecting the input. */
+    parse(value: unknown, context: DyNTS_PrivacyRightsInputContext_Interface): DyNTS_PrivacyRightsInput_Type;
+    private parseInput;
+    private parseReplacements;
+    private parsePurposes;
+    private entries;
+    private exactRecord;
+    private safeCode;
+    private isScalar;
+    private revision;
+    private positiveInteger;
+    private error;
+}
+//# sourceMappingURL=privacy-rights-input.control-service.d.ts.map

package/build/_modules/privacy-lifecycle/privacy-rights-input.control-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-rights-input.control-service.d.ts","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/privacy-rights-input.control-service.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,yCAAyC,EACzC,wCAAwC,EAEzC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAEnF;;;;;GAKG;AACH,qBAAa,uCAAuC;IAClD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgE;IACvF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAEnD,yGAAyG;gBAC7F,MAAM,EAAE,wCAAwC;IA8C5D,4GAA4G;IACrG,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,yCAAyC,GAAG,6BAA6B;IAS/G,OAAO,CAAC,UAAU;IAoDlB,OAAO,CAAC,iBAAiB;IAwCzB,OAAO,CAAC,aAAa;IAerB,OAAO,CAAC,OAAO;IAyBf,OAAO,CAAC,WAAW;IAiBnB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,KAAK;CASd"}

package/build/_modules/privacy-lifecycle/privacy-rights-input.control-service.js

@@ -0,0 +1,202 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyRightsInput_ControlService = void 0;
+const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
+const privacy_request_type_enum_1 = require("./_enums/privacy-request.type-enum");
+const privacy_rights_value_type_enum_1 = require("./_enums/privacy-rights-value.type-enum");
+/**
+ * Validates confidential rights input against a trusted, configure-once product schema.
+ * Validation is NOT authorization: the caller must consume exact-purpose step-up, derive subject/organization
+ * server-side and atomically bind persistence to the same request revision before any execution can occur.
+ * No plaintext persistence, hash, logging, authorization grant or field mutation is performed here.
+ */
+class DyNTS_PrivacyRightsInput_ControlService {
+    policyVersion;
+    maxInputBytes;
+    maxEntries;
+    fields;
+    purposeCodes;
+    /** Captures bounded product schemas so later configuration mutation cannot silently widen acceptance. */
+    constructor(policy) {
+        try {
+            if (!policy || !this.safeCode(policy.policyVersion)
+                || !this.positiveInteger(policy.maxInputBytes, 65_536)
+                || !this.positiveInteger(policy.maxEntries, 64)
+                || !Array.isArray(policy.fields) || policy.fields.length > 128
+                || !Array.isArray(policy.purposeCodes) || policy.purposeCodes.length > 128) {
+                throw this.error('SETTINGS_INVALID');
+            }
+            const fields = new Map();
+            const purposes = new Set();
+            for (const field of policy.fields) {
+                if (!field || !this.safeCode(field.fieldCode) || fields.has(field.fieldCode)
+                    || !Object.values(privacy_rights_value_type_enum_1.DyNTS_PrivacyRightsValue_Type).includes(field.valueType)
+                    || typeof field.nullable !== 'boolean' || !this.positiveInteger(field.maxStringBytes, 16_384)
+                    || typeof field.validate !== 'function') {
+                    throw this.error('SETTINGS_INVALID');
+                }
+                fields.set(field.fieldCode, Object.freeze({ ...field }));
+            }
+            for (const purpose of policy.purposeCodes) {
+                if (!this.safeCode(purpose) || purposes.has(purpose)) {
+                    throw this.error('SETTINGS_INVALID');
+                }
+                purposes.add(purpose);
+            }
+            this.policyVersion = policy.policyVersion;
+            this.maxInputBytes = policy.maxInputBytes;
+            this.maxEntries = policy.maxEntries;
+            this.fields = fields;
+            this.purposeCodes = purposes;
+        }
+        catch {
+            throw this.error('SETTINGS_INVALID');
+        }
+    }
+    /** Returns a detached, deeply frozen envelope, or a content-free rejection without reflecting the input. */
+    parse(value, context) {
+        try {
+            return this.parseInput(value, context);
+        }
+        catch {
+            // Schema callbacks and malformed objects can throw sensitive values. Never attach their cause or message.
+            throw this.error('INPUT_INVALID');
+        }
+    }
+    parseInput(value, context) {
+        const isRectification = context?.type === privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.rectification;
+        const payloadKey = isRectification ? 'replacements' : 'purposeCodes';
+        if (!context || !this.safeCode(context.requestId) || !this.revision(context.revision)
+            || (context.type !== privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.rectification
+                && context.type !== privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.restriction
+                && context.type !== privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.objection)
+            || !this.exactRecord(value, ['contractVersion', 'requestId', 'policyVersion',
+                'expectedRequestRevision', 'type', payloadKey])
+            || value.contractVersion !== 'dynts-privacy-rights-input/1'
+            || value.requestId !== context.requestId || value.type !== context.type
+            || value.policyVersion !== this.policyVersion || !this.revision(value.expectedRequestRevision)
+            || value.expectedRequestRevision !== context.revision) {
+            throw this.error('INPUT_INVALID');
+        }
+        const base = {
+            contractVersion: 'dynts-privacy-rights-input/1',
+            requestId: context.requestId,
+            policyVersion: this.policyVersion,
+            expectedRequestRevision: context.revision,
+        };
+        let result;
+        if (context.type === privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.rectification) {
+            result = Object.freeze({
+                ...base,
+                type: context.type,
+                replacements: this.parseReplacements(value.replacements),
+            });
+        }
+        else {
+            result = Object.freeze({
+                ...base,
+                type: context.type,
+                purposeCodes: this.parsePurposes(value.purposeCodes),
+            });
+        }
+        // Only our reconstructed primitives are serialized: no attacker-controlled toJSON/getters are executed.
+        if (Buffer.byteLength(JSON.stringify(result), 'utf8') > this.maxInputBytes) {
+            throw this.error('INPUT_INVALID');
+        }
+        return result;
+    }
+    parseReplacements(value) {
+        const entries = this.entries(value);
+        const seen = new Set();
+        const replacements = [];
+        for (const entry of entries) {
+            if (!this.exactRecord(entry, ['fieldCode', 'expectedRevision', 'value'])
+                || typeof entry.fieldCode !== 'string' || !this.revision(entry.expectedRevision)
+                || seen.has(entry.fieldCode)) {
+                throw this.error('INPUT_INVALID');
+            }
+            const field = this.fields.get(entry.fieldCode);
+            const replacement = entry.value;
+            if (!this.isScalar(replacement) || !field
+                || (replacement === null ? !field.nullable : typeof replacement !== field.valueType)
+                || (typeof replacement === 'number' && (!Number.isFinite(replacement) || Object.is(replacement, -0)))
+                || (typeof replacement === 'string' && (replacement.includes('\u0000')
+                    || Buffer.byteLength(replacement, 'utf8') > field.maxStringBytes))) {
+                throw this.error('INPUT_INVALID');
+            }
+            if (field.validate(replacement) !== true) {
+                throw this.error('INPUT_INVALID');
+            }
+            seen.add(entry.fieldCode);
+            replacements.push(Object.freeze({
+                fieldCode: entry.fieldCode, expectedRevision: entry.expectedRevision, value: replacement,
+            }));
+        }
+        return Object.freeze(replacements);
+    }
+    parsePurposes(value) {
+        const entries = this.entries(value);
+        const purposes = new Set();
+        for (const entry of entries) {
+            if (typeof entry !== 'string' || !this.purposeCodes.has(entry) || purposes.has(entry)) {
+                throw this.error('INPUT_INVALID');
+            }
+            purposes.add(entry);
+        }
+        return Object.freeze([...purposes]);
+    }
+    entries(value) {
+        if (!Array.isArray(value) || !this.positiveInteger(value.length, this.maxEntries)) {
+            throw this.error('INPUT_INVALID');
+        }
+        // Reject sparse arrays, accessors and hidden/symbol properties before reading any element.
+        if (Reflect.ownKeys(value).length !== value.length + 1) {
+            throw this.error('INPUT_INVALID');
+        }
+        const entries = [];
+        for (let index = 0; index < value.length; index++) {
+            const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+            if (!descriptor || !('value' in descriptor) || !descriptor.enumerable) {
+                throw this.error('INPUT_INVALID');
+            }
+            entries.push(descriptor.value);
+        }
+        return entries;
+    }
+    exactRecord(value, keys) {
+        if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+            return false;
+        }
+        const prototype = Object.getPrototypeOf(value);
+        const ownKeys = Reflect.ownKeys(value);
+        return (prototype === Object.prototype || prototype === null)
+            && ownKeys.length === keys.length && ownKeys.every((key) => {
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            return typeof key === 'string' && keys.includes(key)
+                && !!descriptor && 'value' in descriptor && descriptor.enumerable === true;
+        });
+    }
+    safeCode(value) {
+        return typeof value === 'string' && /^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$/u.test(value);
+    }
+    isScalar(value) {
+        return value === null || typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean';
+    }
+    revision(value) {
+        return Number.isSafeInteger(value) && Number(value) >= 0 && !Object.is(value, -0);
+    }
+    positiveInteger(value, maximum) {
+        return Number.isSafeInteger(value) && Number(value) > 0 && Number(value) <= maximum;
+    }
+    error(code) {
+        return new fsm_dynamo_1.DyFM_Error({
+            status: code === 'INPUT_INVALID' ? 400 : 500,
+            errorCode: `DYNTS|PRIVACY_RIGHTS_INPUT|${code}`,
+            message: 'The privacy rights input or its policy is invalid.',
+            userMessage: 'The privacy request input could not be accepted.',
+            issuerService: 'DyNTS_PrivacyRightsInput_ControlService',
+        });
+    }
+}
+exports.DyNTS_PrivacyRightsInput_ControlService = DyNTS_PrivacyRightsInput_ControlService;
+//# sourceMappingURL=privacy-rights-input.control-service.js.map

package/build/_modules/privacy-lifecycle/privacy-rights-input.control-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-rights-input.control-service.js","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/privacy-rights-input.control-service.ts"],"names":[],"mappings":";;;AAAA,sDAAmD;AAEnD,kFAA+E;AAC/E,4FAAwF;AAUxF;;;;;GAKG;AACH,MAAa,uCAAuC;IACjC,aAAa,CAAS;IACtB,aAAa,CAAS;IACtB,UAAU,CAAS;IACnB,MAAM,CAAgE;IACtE,YAAY,CAAsB;IAEnD,yGAAyG;IACzG,YAAY,MAAgD;QAC1D,IAAI,CAAC;YACH,IACE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC;mBAC5C,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC;mBACnD,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;mBAC5C,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG;mBAC3D,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,GAAG,EAC1E,CAAC;gBACD,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACvC,CAAC;YAED,MAAM,MAAM,GAA0D,IAAI,GAAG,EAAE,CAAC;YAChF,MAAM,QAAQ,GAAgB,IAAI,GAAG,EAAE,CAAC;YAExC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClC,IACE,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;uBACrE,CAAC,MAAM,CAAC,MAAM,CAAC,8DAA6B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;uBACvE,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC;uBAC1F,OAAO,KAAK,CAAC,QAAQ,KAAK,UAAU,EACvC,CAAC;oBACD,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBACvC,CAAC;gBAED,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;YAC3D,CAAC;YAED,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC1C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBACrD,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBACvC,CAAC;gBAED,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;YAED,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;YAC1C,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;YAC1C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACrB,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,4GAA4G;IACrG,KAAK,CAAC,KAAc,EAAE,OAAkD;QAC7E,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,0GAA0G;YAC1G,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAEO,UAAU,CAChB,KAAc,EACd,OAAkD;QAElD,MAAM,eAAe,GAAY,OAAO,EAAE,IAAI,KAAK,qDAAyB,CAAC,aAAa,CAAC;QAC3F,MAAM,UAAU,GAAW,eAAe,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC;QAE7E,IACE,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;eAC9E,CAAC,OAAO,CAAC,IAAI,KAAK,qDAAyB,CAAC,aAAa;mBACvD,OAAO,CAAC,IAAI,KAAK,qDAAyB,CAAC,WAAW;mBACtD,OAAO,CAAC,IAAI,KAAK,qDAAyB,CAAC,SAAS,CAAC;eACvD,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAE,iBAAiB,EAAE,WAAW,EAAE,eAAe;gBAC3E,yBAAyB,EAAE,MAAM,EAAE,UAAU,CAAE,CAAC;eAC/C,KAAK,CAAC,eAAe,KAAK,8BAA8B;eACxD,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;eACpE,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,uBAAuB,CAAC;eAC3F,KAAK,CAAC,uBAAuB,KAAK,OAAO,CAAC,QAAQ,EACrD,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,IAAI,GAA2C;YACnD,eAAe,EAAE,8BAA8B;YAC/C,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,uBAAuB,EAAE,OAAO,CAAC,QAAQ;SAC1C,CAAC;QACF,IAAI,MAAqC,CAAC;QAE1C,IAAI,OAAO,CAAC,IAAI,KAAK,qDAAyB,CAAC,aAAa,EAAE,CAAC;YAC7D,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBACrB,GAAG,IAAI;gBACP,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,YAAY,EAAE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC;aACzD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBACrB,GAAG,IAAI;gBACP,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;aACrD,CAAC,CAAC;QACL,CAAC;QAED,wGAAwG;QACxG,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3E,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,iBAAiB,CAAC,KAAc;QACtC,MAAM,OAAO,GAAuB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,IAAI,GAAgB,IAAI,GAAG,EAAE,CAAC;QACpC,MAAM,YAAY,GAA+C,EAAE,CAAC;QAEpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IACE,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAE,WAAW,EAAE,kBAAkB,EAAE,OAAO,CAAE,CAAC;mBACnE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC;mBAC7E,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAC5B,CAAC;gBACD,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACpC,CAAC;YAED,MAAM,KAAK,GAAyD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACrG,MAAM,WAAW,GAAY,KAAK,CAAC,KAAK,CAAC;YAEzC,IACE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK;mBAClC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,WAAW,KAAK,KAAK,CAAC,SAAS,CAAC;mBACjF,CAAC,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;mBAClG,CAAC,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC;uBACjE,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,EACpE,CAAC;gBACD,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACpC,CAAC;YAED,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;gBACzC,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACpC,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC1B,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,EAAE,WAAW;aACzF,CAAC,CAAC,CAAC;QACN,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;IAEO,aAAa,CAAC,KAAc;QAClC,MAAM,OAAO,GAAuB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAgB,IAAI,GAAG,EAAE,CAAC;QAExC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtF,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACpC,CAAC;YAED,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC,CAAE,GAAG,QAAQ,CAAE,CAAC,CAAC;IACxC,CAAC;IAEO,OAAO,CAAC,KAAc;QAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACpC,CAAC;QAED,2FAA2F;QAC3F,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,OAAO,GAAc,EAAE,CAAC;QAE9B,KAAK,IAAI,KAAK,GAAW,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YAC1D,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAEzG,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;gBACtE,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACpC,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,WAAW,CAAC,KAAc,EAAE,IAAuB;QACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,OAAO,GAAwB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAE5D,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;eACxD,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,GAAoB,EAAW,EAAE;YACrF,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAE/F,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;mBAC/C,CAAC,CAAC,UAAU,IAAI,OAAO,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI,CAAC;QAC/E,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CAAC,KAAc;QAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzF,CAAC;IAEO,QAAQ,CAAC,KAAc;QAC7B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC;IAChH,CAAC;IAEO,QAAQ,CAAC,KAAc;QAC7B,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IAEO,eAAe,CAAC,KAAc,EAAE,OAAe;QACrD,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC;IACtF,CAAC;IAEO,KAAK,CAAC,IAA0C;QACtD,OAAO,IAAI,uBAAU,CAAC;YACpB,MAAM,EAAE,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YAC5C,SAAS,EAAE,8BAA8B,IAAI,EAAE;YAC/C,OAAO,EAAE,oDAAoD;YAC7D,WAAW,EAAE,kDAAkD;YAC/D,aAAa,EAAE,yCAAyC;SACzD,CAAC,CAAC;IACL,CAAC;CACF;AA9OD,0FA8OC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@futdevpro/nts-dynamo",
-  "version": "01.15.230",
+  "version": "01.15.233",
   "description": "Dynamic NodeTS (NodeJS-Typescript), MongoDB Backend System Framework by Future Development Program Ltd.",
   "DyBu_settings": {
     "packageType": "server-package",