@futdevpro/nts-dynamo 1.15.315 → 1.15.320

package/build/_modules/privacy-lifecycle/privacy-ledger.mongo-store.js

@@ -0,0 +1,295 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyLedger_MongoStore = void 0;
+const tslib_1 = require("tslib");
+const mongoose_1 = tslib_1.__importStar(require("mongoose"));
+const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
+const privacy_consent_decision_type_enum_1 = require("./_enums/privacy-consent-decision.type-enum");
+const DyNTS_privacyLegalAcceptanceModelName = 'DyNTSPrivacyLegalAcceptance';
+const DyNTS_privacyConsentModelName = 'DyNTSPrivacyConsent';
+/**
+ * Append-only Mongo persistence for the legal-acceptance and consent ledger — the production
+ * `DyNTS_PrivacyLedgerAdapter_Interface` (BFR-FUTDEVPRO-010, second half).
+ *
+ * @description Lifted from the company-toolmaker `PR_PrivacyLedger_MongoAdapter` (behaviour, keyset order, the
+ *   bounded unpaged read), but standalone: no product data-model, own strict schemas and collections.
+ *
+ *   - Append-only: every field is immutable and the store exposes NO update/delete — the ledger is evidence.
+ *   - Idempotent replay: the UNIQUE `idempotencyHash` index decides; the loser of a race returns the winner.
+ *   - Keyset paging newest-first by `(time, eventId)` — both unique together, so no row is skipped or repeated.
+ *
+ *   ⚠️ TRANSACTIONS. When the caller passes a `session`, a duplicate-key error ABORTS the Mongo transaction, so the
+ *   "catch, then read the winner" replay cannot run inside it (the toolmaker copy would fail there). Inside a
+ *   session the store therefore reads FIRST, and if a concurrent transaction still wins the insert race, the
+ *   duplicate-key error is labelled `TransientTransactionError` — the caller's `withTransaction` retries, and the
+ *   retry's read finds the committed winner. Without a session the classic insert-then-replay path is used.
+ *   (Measured on a real replica set: under snapshot isolation a concurrent winner usually surfaces as a
+ *   server-labelled WriteConflict; the store's own label covers the E11000 variant — both end in a retry.)
+ */
+class DyNTS_PrivacyLedger_MongoStore {
+    injected;
+    unpagedReadMax;
+    readiness;
+    /** Accepts isolated models for integration tests; production resolves the singletons lazily. */
+    constructor(set = {}) {
+        this.injected = set;
+        this.unpagedReadMax = set.unpagedReadMax ?? 100;
+        if (!Number.isSafeInteger(this.unpagedReadMax) || this.unpagedReadMax < 1) {
+            throw new Error('DYNTS|PRIVACY_LEDGER|INVALID_SETTINGS');
+        }
+    }
+    /** Creates the unique replay/id and the paging indexes BEFORE the first read or write. */
+    async ensureReady() {
+        this.readiness ??= Promise.all([
+            this.getLegalModel().createIndexes(),
+            this.getConsentModel().createIndexes(),
+        ])
+            .then(() => undefined)
+            .catch((error) => {
+            this.readiness = undefined;
+            throw error;
+        });
+        await this.readiness;
+    }
+    /** Appends one legal acceptance, or returns the stored one on an exact idempotent replay. */
+    async appendLegalAcceptance(acceptance, session) {
+        const result = await this.appendIdempotent(this.getLegalModel(), { ...acceptance, acceptedAt: new Date(acceptance.acceptedAt) }, session);
+        return { acceptance: this.toLegalRecord(result.row), created: result.created };
+    }
+    /** Appends one consent event, or returns the stored one on an exact idempotent replay. */
+    async appendConsent(record, session) {
+        const result = await this.appendIdempotent(this.getConsentModel(), { ...record, occurredAt: new Date(record.occurredAt) }, session);
+        return { consent: this.toConsentRecord(result.row), created: result.created };
+    }
+    /** All legal evidence of one subject+organization, oldest first — bounded, fail-closed above the limit. */
+    async listLegalAcceptances(subjectId, organizationId) {
+        const rows = await this.getLegalModel()
+            .find({ subjectId: subjectId, organizationId: organizationId })
+            .sort({ acceptedAt: 1, acceptanceId: 1 })
+            .limit(this.unpagedReadMax + 1)
+            .lean().exec();
+        this.assertBoundedRead(rows.length);
+        return rows.map((row) => this.toLegalRecord(row));
+    }
+    /** The consent history of one subject+organization in durable append order, oldest first — bounded. */
+    async listConsentHistory(subjectId, organizationId) {
+        const rows = await this.getConsentModel()
+            .find({ subjectId: subjectId, organizationId: organizationId })
+            .sort({ occurredAt: 1, _id: 1 })
+            .limit(this.unpagedReadMax + 1)
+            .lean().exec();
+        this.assertBoundedRead(rows.length);
+        return rows.map((row) => this.toConsentRecord(row));
+    }
+    /** The latest exact-purpose decision, or null. Insertion order resolves equal timestamps. */
+    async findLatestConsent(subjectId, organizationId, purposeCode) {
+        const row = await this.getConsentModel()
+            .findOne({ subjectId: subjectId, organizationId: organizationId, purposeCode: purposeCode })
+            .sort({ occurredAt: -1, _id: -1 })
+            .lean().exec();
+        return row ? this.toConsentRecord(row) : null;
+    }
+    /** One newest-first legal page with a strict `(acceptedAt, acceptanceId)` keyset. */
+    async listLegalAcceptancesPage(subjectId, organizationId, query) {
+        const rows = await this.getLegalModel().find({
+            subjectId: subjectId,
+            organizationId: organizationId,
+            ...this.afterFilter(query, 'acceptedAt', 'acceptanceId'),
+        }).sort({ acceptedAt: -1, acceptanceId: -1 })
+            .limit(query.limit)
+            .lean().exec();
+        return rows.map((row) => this.toLegalRecord(row));
+    }
+    /** One newest-first consent-history page with a strict `(occurredAt, consentId)` keyset. */
+    async listConsentHistoryPage(subjectId, organizationId, query) {
+        const rows = await this.getConsentModel().find({
+            subjectId: subjectId,
+            organizationId: organizationId,
+            ...this.afterFilter(query, 'occurredAt', 'consentId'),
+        }).sort({ occurredAt: -1, consentId: -1 })
+            .limit(query.limit)
+            .lean().exec();
+        return rows.map((row) => this.toConsentRecord(row));
+    }
+    /** Only the latest decision per purpose, then the same strict newest-first page order. */
+    async listCurrentConsentsPage(subjectId, organizationId, query) {
+        const after = this.afterFilter(query, 'occurredAt', 'consentId');
+        const rows = await this.getConsentModel()
+            .aggregate([
+            { $match: { subjectId: subjectId, organizationId: organizationId } },
+            // `_id` last: the same insertion-order tie-break as findLatestConsent, so "current" never disagrees with it
+            { $sort: { purposeCode: 1, occurredAt: -1, _id: -1 } },
+            { $group: { _id: '$purposeCode', record: { $first: '$$ROOT' } } },
+            { $replaceRoot: { newRoot: '$record' } },
+            ...(Object.keys(after).length ? [{ $match: after }] : []),
+            { $sort: { occurredAt: -1, consentId: -1 } },
+            { $limit: query.limit },
+        ]).exec();
+        return rows.map((row) => this.toConsentRecord(row));
+    }
+    /** Strict legal-acceptance schema — every field immutable (append-only evidence). */
+    static createLegalAcceptanceSchema() {
+        const schema = new mongoose_1.Schema({
+            acceptanceId: { type: String, required: true, immutable: true, maxlength: 128 },
+            subjectId: { type: String, required: true, immutable: true, maxlength: 256 },
+            organizationId: { type: String, required: true, immutable: true, maxlength: 256 },
+            documentType: { type: String, required: true, immutable: true, maxlength: 128 },
+            documentVersion: { type: String, required: true, immutable: true, maxlength: 128 },
+            documentChecksum: { type: String, required: true, immutable: true, match: /^[a-f0-9]{64}$/u },
+            sourceCode: { type: String, required: true, immutable: true, maxlength: 128 },
+            idempotencyHash: { type: String, required: true, immutable: true, match: /^[a-f0-9]{64}$/u },
+            requestFingerprint: { type: String, required: true, immutable: true, match: /^[a-f0-9]{64}$/u },
+            acceptedAt: { type: Date, required: true, immutable: true },
+        }, {
+            collection: 'dynts_privacy_legal_acceptances',
+            strict: 'throw',
+            versionKey: false,
+        });
+        schema.index({ idempotencyHash: 1 }, { unique: true, name: 'uq_dynts_privacy_legal_idempotency' });
+        schema.index({ acceptanceId: 1 }, { unique: true, name: 'uq_dynts_privacy_legal_id' });
+        schema.index({ subjectId: 1, organizationId: 1, acceptedAt: -1, acceptanceId: -1 }, { name: 'ix_dynts_privacy_legal_subject_page' });
+        return schema;
+    }
+    /** Strict consent-event schema — every field immutable (append-only evidence). */
+    static createConsentSchema() {
+        const schema = new mongoose_1.Schema({
+            consentId: { type: String, required: true, immutable: true, maxlength: 128 },
+            subjectId: { type: String, required: true, immutable: true, maxlength: 256 },
+            organizationId: { type: String, required: true, immutable: true, maxlength: 256 },
+            purposeCode: { type: String, required: true, immutable: true, maxlength: 128 },
+            policyVersion: { type: String, required: true, immutable: true, maxlength: 128 },
+            decision: {
+                type: String, required: true, immutable: true, enum: Object.values(privacy_consent_decision_type_enum_1.DyNTS_PrivacyConsentDecision_Type),
+            },
+            sourceCode: { type: String, required: true, immutable: true, maxlength: 128 },
+            idempotencyHash: { type: String, required: true, immutable: true, match: /^[a-f0-9]{64}$/u },
+            requestFingerprint: { type: String, required: true, immutable: true, match: /^[a-f0-9]{64}$/u },
+            occurredAt: { type: Date, required: true, immutable: true },
+        }, {
+            collection: 'dynts_privacy_consents',
+            strict: 'throw',
+            versionKey: false,
+        });
+        schema.index({ idempotencyHash: 1 }, { unique: true, name: 'uq_dynts_privacy_consent_idempotency' });
+        schema.index({ consentId: 1 }, { unique: true, name: 'uq_dynts_privacy_consent_id' });
+        schema.index({ subjectId: 1, organizationId: 1, occurredAt: -1, consentId: -1 }, { name: 'ix_dynts_privacy_consent_subject_page' });
+        schema.index({ subjectId: 1, organizationId: 1, purposeCode: 1, occurredAt: -1 }, { name: 'ix_dynts_privacy_consent_subject_purpose' });
+        return schema;
+    }
+    /**
+     * The shared append-or-replay core of both ledgers.
+     *
+     * @description Without a session: insert, and on a duplicate key read the winner. Inside a session: read first
+     *   (a duplicate-key error would abort the transaction), insert only when absent, and label a lost insert race
+     *   `TransientTransactionError` so the caller's `withTransaction` retries into the read-first branch.
+     */
+    async appendIdempotent(model, data, session) {
+        if (session) {
+            const existing = await model.findOne({ idempotencyHash: data.idempotencyHash })
+                .session(session).lean().exec();
+            if (existing) {
+                return { row: existing, created: false };
+            }
+        }
+        try {
+            const created = session
+                ? await model.create([data], { session: session })
+                : await model.create([data]);
+            const value = created[0]?.toObject();
+            if (!value) {
+                throw new Error('DYNTS|PRIVACY_LEDGER|CREATE_EMPTY');
+            }
+            return { row: value, created: true };
+        }
+        catch (error) {
+            if (!this.isDuplicateKey(error)) {
+                throw error;
+            }
+            if (session) {
+                if (error instanceof mongoose_1.mongo.MongoServerError) {
+                    error.addErrorLabel('TransientTransactionError');
+                }
+                throw error;
+            }
+            const existing = await model.findOne({ idempotencyHash: data.idempotencyHash }).lean().exec();
+            if (!existing) {
+                throw error;
+            }
+            return { row: existing, created: false };
+        }
+    }
+    /** Fail-closed guard of the legacy unpaged reads — above the bound the caller must page. */
+    assertBoundedRead(rowCount) {
+        if (rowCount <= this.unpagedReadMax) {
+            return;
+        }
+        throw new fsm_dynamo_1.DyFM_Error({
+            status: 503,
+            errorCode: 'DYNTS|PRIVACY_LEDGER|PAGE_REQUIRED',
+            message: `The privacy ledger exceeds the safe unpaged read bound (${this.unpagedReadMax}); use the page API.`,
+            userMessage: 'The privacy history is temporarily unavailable. Please try again later.',
+            issuerService: this.constructor.name,
+        });
+    }
+    /** Keyset filter strictly AFTER the given `(time, eventId)` position in newest-first order. */
+    afterFilter(query, timeField, eventIdField) {
+        if (!query.after) {
+            return {};
+        }
+        const time = new Date(query.after.occurredAt);
+        return {
+            $or: [
+                { [timeField]: { $lt: time } },
+                { [timeField]: time, [eventIdField]: { $lt: query.after.eventId } },
+            ],
+        };
+    }
+    /** Contract shape from a stored row — an ALLOW-list, so `_id` never leaks into the domain. */
+    toLegalRecord(row) {
+        return {
+            acceptanceId: row.acceptanceId,
+            subjectId: row.subjectId,
+            organizationId: row.organizationId,
+            documentType: row.documentType,
+            documentVersion: row.documentVersion,
+            documentChecksum: row.documentChecksum,
+            sourceCode: row.sourceCode,
+            idempotencyHash: row.idempotencyHash,
+            requestFingerprint: row.requestFingerprint,
+            acceptedAt: new Date(row.acceptedAt).toISOString(),
+        };
+    }
+    /** Contract shape from a stored row — an ALLOW-list, so `_id` never leaks into the domain. */
+    toConsentRecord(row) {
+        return {
+            consentId: row.consentId,
+            subjectId: row.subjectId,
+            organizationId: row.organizationId,
+            purposeCode: row.purposeCode,
+            policyVersion: row.policyVersion,
+            decision: row.decision,
+            sourceCode: row.sourceCode,
+            idempotencyHash: row.idempotencyHash,
+            requestFingerprint: row.requestFingerprint,
+            occurredAt: new Date(row.occurredAt).toISOString(),
+        };
+    }
+    getLegalModel() {
+        return this.injected.legalModel ?? this.resolveModel(DyNTS_privacyLegalAcceptanceModelName, DyNTS_PrivacyLedger_MongoStore.createLegalAcceptanceSchema());
+    }
+    getConsentModel() {
+        return this.injected.consentModel ?? this.resolveModel(DyNTS_privacyConsentModelName, DyNTS_PrivacyLedger_MongoStore.createConsentSchema());
+    }
+    /** Lazy one-time model resolution — a second `mongoose.model(name, schema)` for one name would throw. */
+    resolveModel(name, schema) {
+        return mongoose_1.default.modelNames().includes(name)
+            ? mongoose_1.default.model(name)
+            : mongoose_1.default.model(name, schema);
+    }
+    isDuplicateKey(error) {
+        return typeof error === 'object' && error !== null && 'code' in error
+            && Object.getOwnPropertyDescriptor(error, 'code')?.value === 11000;
+    }
+}
+exports.DyNTS_PrivacyLedger_MongoStore = DyNTS_PrivacyLedger_MongoStore;
+//# sourceMappingURL=privacy-ledger.mongo-store.js.map

package/build/_modules/privacy-lifecycle/privacy-ledger.mongo-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-ledger.mongo-store.js","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/privacy-ledger.mongo-store.ts"],"names":[],"mappings":";;;;AAAA,6DAA2F;AAE3F,sDAAmD;AAEnD,oGAAgG;AAYhG,MAAM,qCAAqC,GAAkC,6BAA6B,CAAC;AAC3G,MAAM,6BAA6B,GAA0B,qBAAqB,CAAC;AAoBnF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAa,8BAA8B;IACxB,QAAQ,CAAyC;IACjD,cAAc,CAAS;IAChC,SAAS,CAAiB;IAElC,gGAAgG;IAChG,YAAY,MAA8C,EAAE;QAC1D,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QACpB,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC;QAEhD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,0FAA0F;IACnF,KAAK,CAAC,WAAW;QACtB,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC;YAC7B,IAAI,CAAC,aAAa,EAAE,CAAC,aAAa,EAAE;YACpC,IAAI,CAAC,eAAe,EAAE,CAAC,aAAa,EAAE;SACvC,CAAC;aACC,IAAI,CAAC,GAAS,EAAE,CAAC,SAAS,CAAC;aAC3B,KAAK,CAAC,CAAC,KAAc,EAAS,EAAE;YAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAE3B,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACL,MAAM,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,6FAA6F;IACtF,KAAK,CAAC,qBAAqB,CAChC,UAAkD,EAClD,OAAuB;QAEvB,MAAM,MAAM,GAAsE,MAAM,IAAI,CAAC,gBAAgB,CAC3G,IAAI,CAAC,aAAa,EAAE,EACpB,EAAE,GAAG,UAAU,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,EAC9D,OAAO,CACR,CAAC;QAEF,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACjF,CAAC;IAED,0FAA0F;IACnF,KAAK,CAAC,aAAa,CACxB,MAA4C,EAC5C,OAAuB;QAEvB,MAAM,MAAM,GAA8D,MAAM,IAAI,CAAC,gBAAgB,CACnG,IAAI,CAAC,eAAe,EAAE,EACtB,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EACtD,OAAO,CACR,CAAC;QAEF,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAChF,CAAC;IAED,2GAA2G;IACpG,KAAK,CAAC,oBAAoB,CAC/B,SAAiB,EACjB,cAAsB;QAEtB,MAAM,IAAI,GAA6C,MAAM,IAAI,CAAC,aAAa,EAAE;aAC9E,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;aAC9D,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;aACxC,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;aAC9B,IAAI,EAA4C,CAAC,IAAI,EAAE,CAAC;QAE3D,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEpC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAA2C,EAA0C,EAAE,CACtG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,uGAAuG;IAChG,KAAK,CAAC,kBAAkB,CAC7B,SAAiB,EACjB,cAAsB;QAEtB,MAAM,IAAI,GAAqC,MAAM,IAAI,CAAC,eAAe,EAAE;aACxE,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;aAC9D,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;aAC/B,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;aAC9B,IAAI,EAAoC,CAAC,IAAI,EAAE,CAAC;QAEnD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEpC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAmC,EAAwC,EAAE,CAC5F,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,6FAA6F;IACtF,KAAK,CAAC,iBAAiB,CAC5B,SAAiB,EACjB,cAAsB,EACtB,WAAmB;QAEnB,MAAM,GAAG,GAA0C,MAAM,IAAI,CAAC,eAAe,EAAE;aAC5E,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;aAC3F,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;aACjC,IAAI,EAAkC,CAAC,IAAI,EAAE,CAAC;QAEjD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAED,qFAAqF;IAC9E,KAAK,CAAC,wBAAwB,CACnC,SAAiB,EACjB,cAAsB,EACtB,KAAoD;QAEpD,MAAM,IAAI,GAA6C,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC;YACrF,SAAS,EAAE,SAAS;YACpB,cAAc,EAAE,cAAc;YAC9B,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,cAAc,CAAC;SACzD,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC;aAC1C,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;aAClB,IAAI,EAA4C,CAAC,IAAI,EAAE,CAAC;QAE3D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAA2C,EAA0C,EAAE,CACtG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,4FAA4F;IACrF,KAAK,CAAC,sBAAsB,CACjC,SAAiB,EACjB,cAAsB,EACtB,KAAoD;QAEpD,MAAM,IAAI,GAAqC,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC;YAC/E,SAAS,EAAE,SAAS;YACpB,cAAc,EAAE,cAAc;YAC9B,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,WAAW,CAAC;SACtD,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC;aACvC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;aAClB,IAAI,EAAoC,CAAC,IAAI,EAAE,CAAC;QAEnD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAmC,EAAwC,EAAE,CAC5F,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,0FAA0F;IACnF,KAAK,CAAC,uBAAuB,CAClC,SAAiB,EACjB,cAAsB,EACtB,KAAoD;QAEpD,MAAM,KAAK,GAA4B,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAqC,MAAM,IAAI,CAAC,eAAe,EAAE;aACxE,SAAS,CAAiC;YACzC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,EAAE;YACpE,4GAA4G;YAC5G,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;YACtD,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;YACjE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;YACxC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;YAC5C,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE;SACxB,CAAC,CAAC,IAAI,EAAE,CAAC;QAEZ,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAmC,EAAwC,EAAE,CAC5F,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,qFAAqF;IAC9E,MAAM,CAAC,2BAA2B;QACvC,MAAM,MAAM,GAAmD,IAAI,iBAAM,CAAyC;YAChH,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAC/E,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAC5E,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YACjF,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAC/E,eAAe,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAClF,gBAAgB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE;YAC7F,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAC7E,eAAe,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE;YAC5F,kBAAkB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE;YAC/F,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;SAC5D,EAAE;YACD,UAAU,EAAE,iCAAiC;YAC7C,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAAC,CAAC;QACnG,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,KAAK,CACV,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,EACrE,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAChD,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kFAAkF;IAC3E,MAAM,CAAC,mBAAmB;QAC/B,MAAM,MAAM,GAA2C,IAAI,iBAAM,CAAiC;YAChG,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAC5E,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAC5E,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YACjF,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAC9E,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAChF,QAAQ,EAAE;gBACR,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,sEAAiC,CAAC;aACtG;YACD,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YAC7E,eAAe,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE;YAC5F,kBAAkB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE;YAC/F,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;SAC5D,EAAE;YACD,UAAU,EAAE,wBAAwB;YACpC,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAC,CAAC;QACrG,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,KAAK,CACV,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAClE,EAAE,IAAI,EAAE,uCAAuC,EAAE,CAClD,CAAC;QACF,MAAM,CAAC,KAAK,CACV,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EACnE,EAAE,IAAI,EAAE,0CAA0C,EAAE,CACrD,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,gBAAgB,CAC5B,KAAe,EACf,IAAO,EACP,OAAuB;QAEvB,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAa,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;iBACtF,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,EAAK,CAAC,IAAI,EAAE,CAAC;YAErC,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAA0B,OAAO;gBAC5C,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAE,IAAI,CAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;gBACpD,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAE,IAAI,CAAE,CAAC,CAAC;YACjC,MAAM,KAAK,GAAkB,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAK,CAAC;YAEvD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YAED,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,KAAK,CAAC;YACd,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,KAAK,YAAY,gBAAK,CAAC,gBAAgB,EAAE,CAAC;oBAC5C,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAC;gBACnD,CAAC;gBAED,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,QAAQ,GAAa,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,EAAK,CAAC,IAAI,EAAE,CAAC;YAE3G,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,4FAA4F;IACpF,iBAAiB,CAAC,QAAgB;QACxC,IAAI,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,uBAAU,CAAC;YACnB,MAAM,EAAE,GAAG;YACX,SAAS,EAAE,oCAAoC;YAC/C,OAAO,EAAE,2DAA2D,IAAI,CAAC,cAAc,sBAAsB;YAC7G,WAAW,EAAE,yEAAyE;YACtF,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;SACrC,CAAC,CAAC;IACL,CAAC;IAED,+FAA+F;IACvF,WAAW,CACjB,KAAoD,EACpD,SAAsC,EACtC,YAA0C;QAE1C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAS,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEpD,OAAO;YACL,GAAG,EAAE;gBACH,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBAC9B,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE;aACpE;SACF,CAAC;IACJ,CAAC;IAED,8FAA8F;IACtF,aAAa,CAAC,GAA2C;QAC/D,OAAO;YACL,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;YAC1C,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;SACnD,CAAC;IACJ,CAAC;IAED,8FAA8F;IACtF,eAAe,CAAC,GAAmC;QACzD,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;YAC1C,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;SACnD,CAAC;IACJ,CAAC;IAEO,aAAa;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,YAAY,CAClD,qCAAqC,EAAE,8BAA8B,CAAC,2BAA2B,EAAE,CACpG,CAAC;IACJ,CAAC;IAEO,eAAe;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CACpD,6BAA6B,EAAE,8BAA8B,CAAC,mBAAmB,EAAE,CACpF,CAAC;IACJ,CAAC;IAED,yGAAyG;IACjG,YAAY,CAAI,IAAY,EAAE,MAAiB;QACrD,OAAO,kBAAQ,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;YACzC,CAAC,CAAC,kBAAQ,CAAC,KAAK,CAAI,IAAI,CAAC;YACzB,CAAC,CAAC,kBAAQ,CAAC,KAAK,CAAI,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAEO,cAAc,CAAC,KAAc;QACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;eAChE,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC;IACvE,CAAC;CACF;AAtXD,wEAsXC"}

package/build/_modules/privacy-lifecycle/privacy-lifecycle.mongo-store.d.ts

@@ -0,0 +1,136 @@
+import { Model, Schema } from 'mongoose';
+import { DyNTS_PrivacyContributorOutcome_Interface } from './_models/privacy-contributor-outcome.interface';
+import { DyNTS_PrivacyContributorPlan_Interface } from './_models/privacy-contributor-plan.interface';
+import { DyNTS_PrivacyLifecycleAdapter_Interface } from './_models/privacy-lifecycle-adapter.interface';
+import { DyNTS_PrivacyRequestPersistenceCreateResult_Interface } from './_models/privacy-request-persistence-create-result.interface';
+import { DyNTS_PrivacyRequestListQuery_Interface } from './_models/privacy-request-list.interface';
+import { DyNTS_PrivacyRequestPersistenceListResult_Interface } from './_models/privacy-request-list-result.interface';
+import { DyNTS_PrivacyRequestRecord_Interface } from './_models/privacy-request-record.interface';
+/** Persistence row of a contributor plan: the contract shape plus its lookup key. */
+export type DyNTS_PrivacyStoredPlan_Row = DyNTS_PrivacyContributorPlan_Interface & {
+    requestId: string;
+};
+/** Persistence row of a contributor outcome: the contract shape plus its lookup key. */
+export type DyNTS_PrivacyStoredOutcome_Row = DyNTS_PrivacyContributorOutcome_Interface & {
+    requestId: string;
+};
+/** Optional isolated models — integration tests bind them to a dedicated connection. */
+export interface DyNTS_PrivacyLifecycleMongoStore_Settings {
+    requestModel?: Model<DyNTS_PrivacyRequestRecord_Interface>;
+    planModel?: Model<DyNTS_PrivacyStoredPlan_Row>;
+    outcomeModel?: Model<DyNTS_PrivacyStoredOutcome_Row>;
+}
+/**
+ * Mongo persistence for the privacy lifecycle — the production `DyNTS_PrivacyLifecycleAdapter_Interface`.
+ *
+ * @description BFR-FUTDEVPRO-010 / BFR-ADVENTOR-025. Before this store the module shipped the contract only,
+ *   so `DyNTS_PrivacyLifecycle_ControlService` (which REQUIRES an adapter) could not be started, and three
+ *   products carried their own copies (company-toolmaker, futdevpro, adventor). This is the futdevpro copy,
+ *   lifted verbatim in behaviour; the collection and model names are unchanged, so existing data stays readable.
+ *
+ *   Atomicity does NOT need a transaction here — every guarantee is a single-document operation:
+ *   - replay idempotency: the UNIQUE `idempotencyHash` index (the loser of a race reads the winner);
+ *   - optimistic concurrency: `replaceRequest` puts `revision` INTO the filter, so a stale writer matches
+ *     nothing and gets `false` (the caller turns that into a 409);
+ *   - plan/outcome writes: an upsert on the UNIQUE `(requestId, contributorId)` pair.
+ *
+ *   ⚠️ A broken revision check here is not "a bug": it is a lost or doubly executed erasure request —
+ *   exactly the operation whose provability is the legal requirement (GDPR Art. 17).
+ *
+ *   ⚠️ Consumers that carried a product-side copy must DELETE it in the same change-set that switches to this
+ *   store: both register the same model names, and `resolveModel` silently returns whichever registered first.
+ */
+export declare class DyNTS_PrivacyLifecycle_MongoStore implements DyNTS_PrivacyLifecycleAdapter_Interface {
+    private readonly injected;
+    private readiness?;
+    /** Accepts isolated models for integration tests; production resolves the singletons lazily. */
+    constructor(set?: DyNTS_PrivacyLifecycleMongoStore_Settings);
+    /**
+     * Creates the indexes BEFORE the first read or write.
+     *
+     * @description Not a convenience step: idempotency and optimistic concurrency both rest on the UNIQUE
+     *   indexes. Without them a duplicate would not fail — it would silently become a second record.
+     */
+    ensureReady(): Promise<void>;
+    /**
+     * Creates one request, or returns the EXACT same request on an idempotent replay.
+     *
+     * @description The decision is not a racy "does it exist?" read (two parallel callers would both see
+     *   "no"), but the UNIQUE index: the second writer gets a duplicate-key error and reads the winner.
+     */
+    createOrGetRequest(request: DyNTS_PrivacyRequestRecord_Interface): Promise<DyNTS_PrivacyRequestPersistenceCreateResult_Interface>;
+    /** Loads one request by id. Does not throw when missing — interpreting absence is the caller's job. */
+    findRequestById(requestId: string): Promise<DyNTS_PrivacyRequestRecord_Interface | null>;
+    /**
+     * One bounded, deterministic, newest-first page of the subject's own requests.
+     *
+     * @description Sorted by TWO keys (`createdAt`, then `requestId`): with a single key two requests created in
+     *   the same millisecond would order non-deterministically and paging could skip or repeat a row
+     *   (`createdAt` is ISO-8601 UTC text, so string order is time order). The cursor is opaque and carries no
+     *   personal data — a timestamp and a machine id only.
+     */
+    listRequests(query: DyNTS_PrivacyRequestListQuery_Interface): Promise<DyNTS_PrivacyRequestPersistenceListResult_Interface>;
+    /**
+     * State transition with OPTIMISTIC CONCURRENCY.
+     *
+     * @description `revision` is part of the filter: if someone else rewrote the record meanwhile, the filter
+     *   matches nothing and `false` is returned. That `false` is not an error — it is the correct answer to a
+     *   race, and the caller turns it into a 409.
+     */
+    replaceRequest(request: DyNTS_PrivacyRequestRecord_Interface, expectedRevision: number): Promise<boolean>;
+    /**
+     * Stores one contributor plan.
+     *
+     * @description Overwrites, does not insert: a resumed run may deliver the same plan again. The upsert on the
+     *   `(requestId, contributorId)` pair keeps it idempotent — never two plans for one contributor.
+     */
+    saveContributorPlan(requestId: string, plan: DyNTS_PrivacyContributorPlan_Interface): Promise<void>;
+    /** All contributor plans of one request, in a stable order. */
+    listContributorPlans(requestId: string): Promise<DyNTS_PrivacyContributorPlan_Interface[]>;
+    /**
+     * Stores one contributor outcome.
+     *
+     * @description The overwrite is not only for resumed runs: on a failed verification the lifecycle
+     *   DELIBERATELY replaces an earlier (successful) outcome with a failed one — an insert-only store would make
+     *   the request look falsely successful.
+     */
+    saveContributorOutcome(requestId: string, outcome: DyNTS_PrivacyContributorOutcome_Interface): Promise<void>;
+    /** All contributor outcomes of one request, in a stable order. */
+    listContributorOutcomes(requestId: string): Promise<DyNTS_PrivacyContributorOutcome_Interface[]>;
+    /**
+     * The request-record schema.
+     *
+     * @description Date fields are `String`, not `Date`: the contract uses an EMPTY string for "has not happened
+     *   yet" (`identityVerifiedAt: ''`), which a `Date` field cannot represent. `strict: 'throw'` is deliberate —
+     *   an unknown field must not slip in silently.
+     */
+    static createRequestSchema(): Schema<DyNTS_PrivacyRequestRecord_Interface>;
+    /** The contributor-plan schema. */
+    static createPlanSchema(): Schema<DyNTS_PrivacyStoredPlan_Row>;
+    /** The contributor-outcome schema. */
+    static createOutcomeSchema(): Schema<DyNTS_PrivacyStoredOutcome_Row>;
+    /**
+     * The contract shape from a stored row — an ALLOW-list.
+     *
+     * @description `.lean()` also returns the persistence's own fields (`_id`). Passing them on, the lifecycle's
+     *   `{ ...request }` spread would write them back — the filtering keeps the domain object clean.
+     */
+    private toRequestRecord;
+    /** Opaque, but NOT encrypted, paging cursor — it holds no personal data. */
+    private encodeCursor;
+    /**
+     * Decodes the cursor — FAIL-SAFE: a damaged or forged cursor restarts paging on the FIRST page.
+     *
+     * @description Not a security hole: the `subjectId` + `organizationId` filter is independent of the cursor,
+     *   so the subject still sees only their own requests.
+     */
+    private decodeCursor;
+    private getRequestModel;
+    private getPlanModel;
+    private getOutcomeModel;
+    /** Lazy one-time model resolution — a second `mongoose.model(name, schema)` for one name would throw. */
+    private resolveModel;
+    /** Mongo duplicate-key error — the signal that carries the "idempotent replay" branch. */
+    private isDuplicateKey;
+}
+//# sourceMappingURL=privacy-lifecycle.mongo-store.d.ts.map

package/build/_modules/privacy-lifecycle/privacy-lifecycle.mongo-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-lifecycle.mongo-store.d.ts","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/privacy-lifecycle.mongo-store.ts"],"names":[],"mappings":"AAAA,OAAiB,EAAoB,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAErE,OAAO,EAAE,yCAAyC,EAAE,MAAM,iDAAiD,CAAC;AAC5G,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EACL,qDAAqD,EACtD,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,0CAA0C,CAAC;AACnG,OAAO,EACL,mDAAmD,EACpD,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAMlG,qFAAqF;AACrF,MAAM,MAAM,2BAA2B,GAAG,sCAAsC,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzG,wFAAwF;AACxF,MAAM,MAAM,8BAA8B,GAAG,yCAAyC,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/G,wFAAwF;AACxF,MAAM,WAAW,yCAAyC;IACxD,YAAY,CAAC,EAAE,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC3D,SAAS,CAAC,EAAE,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,YAAY,CAAC,EAAE,KAAK,CAAC,8BAA8B,CAAC,CAAC;CACtD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,iCAAkC,YAAW,uCAAuC;IAC/F,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IACrE,OAAO,CAAC,SAAS,CAAC,CAAgB;IAElC,gGAAgG;gBACpF,GAAG,GAAE,yCAA8C;IAI/D;;;;;OAKG;IACU,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAezC;;;;;OAKG;IACU,kBAAkB,CAC7B,OAAO,EAAE,oCAAoC,GAC5C,OAAO,CAAC,qDAAqD,CAAC;IA4BjE,uGAAuG;IAC1F,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oCAAoC,GAAG,IAAI,CAAC;IAQrG;;;;;;;OAOG;IACU,YAAY,CACvB,KAAK,EAAE,uCAAuC,GAC7C,OAAO,CAAC,mDAAmD,CAAC;IA+B/D;;;;;;OAMG;IACU,cAAc,CACzB,OAAO,EAAE,oCAAoC,EAC7C,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,OAAO,CAAC;IASnB;;;;;OAKG;IACU,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,sCAAsC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQhH,+DAA+D;IAClD,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,sCAAsC,EAAE,CAAC;IAWvG;;;;;;OAMG;IACU,sBAAsB,CACjC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,yCAAyC,GACjD,OAAO,CAAC,IAAI,CAAC;IAQhB,kEAAkE;IACrD,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,yCAAyC,EAAE,CAAC;IAgB7G;;;;;;OAMG;WACW,mBAAmB,IAAI,MAAM,CAAC,oCAAoC,CAAC;IAkCjF,mCAAmC;WACrB,gBAAgB,IAAI,MAAM,CAAC,2BAA2B,CAAC;IAiBrE,sCAAsC;WACxB,mBAAmB,IAAI,MAAM,CAAC,8BAA8B,CAAC;IAsB3E;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAqBvB,4EAA4E;IAC5E,OAAO,CAAC,YAAY;IAIpB;;;;;OAKG;IACH,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,eAAe;IAMvB,yGAAyG;IACzG,OAAO,CAAC,YAAY;IAMpB,0FAA0F;IAC1F,OAAO,CAAC,cAAc;CAIvB"}