@futdevpro/nts-dynamo 1.15.407 → 1.15.408

package/build/_modules/privacy-lifecycle/_models/privacy-share-grant.interface.d.ts

@@ -0,0 +1,73 @@
+import { DyNTS_PrivacyRequestRecord_Interface } from './privacy-request-record.interface';
+/**
+ * L-174 B2 (BFR-FUTDEVPRO-048) — the share-grant model: a short-lived, single-use, revocable permission for a third
+ * party (the subject's new provider) to download ONE completed export, without an account. The secret exists in clear
+ * text only once (in the create response); the store keeps its SHA-256 hash.
+ *
+ * The exact authority of one completed export request (the subject's own). */
+export interface DyNTS_PrivacyShareGrantScope_Interface {
+    requestId: string;
+    subjectId: string;
+    organizationId: string;
+}
+/** The persisted grant — never contains the secret, only its hash. Empty string = not happened. */
+export interface DyNTS_PrivacyShareGrantRecord_Interface extends DyNTS_PrivacyShareGrantScope_Interface {
+    grantId: string;
+    secretHash: string;
+    createdAt: string;
+    expiresAt: string;
+    revokedAt: string;
+    usedAt: string;
+    /** Who/where redeemed it, as the delivery layer describes it (e.g. a hashed client address) — bounded, no raw PII. */
+    usedBy: string;
+}
+/** The subject-facing view of a grant (no secret, no hash). */
+export interface DyNTS_PrivacyShareGrantView_Interface {
+    grantId: string;
+    requestId: string;
+    state: 'active' | 'used' | 'revoked' | 'expired';
+    createdAt: string;
+    expiresAt: string;
+    revokedAt: string;
+    usedAt: string;
+    usedBy: string;
+}
+/** The create response — the ONLY place the clear-text secret ever appears. */
+export interface DyNTS_PrivacyShareGrantCreated_Interface {
+    grant: DyNTS_PrivacyShareGrantView_Interface;
+    secret: string;
+}
+/** A successful redemption: the exact authority to assemble the SAME bundle the subject downloads. */
+export interface DyNTS_PrivacyShareGrantRedeemed_Interface extends DyNTS_PrivacyShareGrantScope_Interface {
+    grantId: string;
+}
+/** One audit event (content-free) — `refused` carries no grant id when the secret matched nothing. */
+export interface DyNTS_PrivacyShareGrantAuditEvent_Interface {
+    kind: 'created' | 'revoked' | 'redeemed' | 'refused';
+    grantId: string;
+    requestId: string;
+    at: string;
+    usedBy: string;
+}
+/** Persistence boundary. `consume` MUST be atomic (one winner per grant, e.g. a conditional update). */
+export interface DyNTS_PrivacyShareGrantStore_Interface {
+    insert(record: DyNTS_PrivacyShareGrantRecord_Interface): Promise<void>;
+    listForRequest(scope: DyNTS_PrivacyShareGrantScope_Interface): Promise<DyNTS_PrivacyShareGrantRecord_Interface[]>;
+    /** Marks an active grant of exactly this scope revoked; `false` if there was nothing to revoke. */
+    revoke(set: {
+        grantId: string;
+        scope: DyNTS_PrivacyShareGrantScope_Interface;
+        at: string;
+    }): Promise<boolean>;
+    /** Atomically consumes the grant with this hash if it is not revoked, not used and `expiresAt > at`; else `null`. */
+    consume(set: {
+        secretHash: string;
+        at: string;
+        usedBy: string;
+    }): Promise<DyNTS_PrivacyShareGrantRecord_Interface | null>;
+}
+/** The lifecycle read the grant service needs (the bundle assembler's reader satisfies it). */
+export interface DyNTS_PrivacyShareGrantLifecycleReader_Interface {
+    findRequestById(requestId: string): Promise<DyNTS_PrivacyRequestRecord_Interface | null>;
+}
+//# sourceMappingURL=privacy-share-grant.interface.d.ts.map

package/build/_modules/privacy-lifecycle/_models/privacy-share-grant.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-share-grant.interface.d.ts","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_models/privacy-share-grant.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,oCAAoC,CAAC;AAE1F;;;;;8EAK8E;AAC9E,MAAM,WAAW,sCAAsC;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,mGAAmG;AACnG,MAAM,WAAW,uCAAwC,SAAQ,sCAAsC;IACrG,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,sHAAsH;IACtH,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,+DAA+D;AAC/D,MAAM,WAAW,qCAAqC;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,+EAA+E;AAC/E,MAAM,WAAW,wCAAwC;IACvD,KAAK,EAAE,qCAAqC,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,sGAAsG;AACtG,MAAM,WAAW,yCAA0C,SAAQ,sCAAsC;IACvG,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,sGAAsG;AACtG,MAAM,WAAW,2CAA2C;IAC1D,IAAI,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wGAAwG;AACxG,MAAM,WAAW,sCAAsC;IACrD,MAAM,CAAC,MAAM,EAAE,uCAAuC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,cAAc,CAAC,KAAK,EAAE,sCAAsC,GAAG,OAAO,CAAC,uCAAuC,EAAE,CAAC,CAAC;IAClH,mGAAmG;IACnG,MAAM,CAAC,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,sCAAsC,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9G,qHAAqH;IACrH,OAAO,CAAC,GAAG,EAAE;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,uCAAuC,GAAG,IAAI,CAAC,CAAC;CAC7D;AAED,+FAA+F;AAC/F,MAAM,WAAW,gDAAgD;IAC/D,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oCAAoC,GAAG,IAAI,CAAC,CAAC;CAC1F"}

package/build/_modules/privacy-lifecycle/_models/privacy-share-grant.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=privacy-share-grant.interface.js.map

package/build/_modules/privacy-lifecycle/_models/privacy-share-grant.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-share-grant.interface.js","sourceRoot":"","sources":["../../../../src/_modules/privacy-lifecycle/_models/privacy-share-grant.interface.ts"],"names":[],"mappings":""}

package/build/_modules/privacy-lifecycle/index.d.ts

@@ -24,6 +24,8 @@ export { DyNTS_PrivacyLifecycle_MongoStore, DyNTS_PrivacyLifecycleMongoStore_Set
 export { DyNTS_PrivacyLedger_MongoStore, DyNTS_PrivacyLedgerMongoStore_Settings, DyNTS_PrivacyStoredConsent_Row, DyNTS_PrivacyStoredLegalAcceptance_Row } from './privacy-ledger.mongo-store';
 export { DyNTS_PrivacyExportBundle_ControlService } from './privacy-export-bundle.control-service';
 export { DyNTS_PrivacyExportSchema_Util } from './privacy-export-schema.util';
+export { DyNTS_PrivacyShareGrant_ControlService } from './privacy-share-grant.control-service';
+export { DyNTS_PrivacyShareGrantAuditEvent_Interface, DyNTS_PrivacyShareGrantCreated_Interface, DyNTS_PrivacyShareGrantLifecycleReader_Interface, DyNTS_PrivacyShareGrantRecord_Interface, DyNTS_PrivacyShareGrantRedeemed_Interface, DyNTS_PrivacyShareGrantScope_Interface, DyNTS_PrivacyShareGrantStore_Interface, DyNTS_PrivacyShareGrantView_Interface } from './_models/privacy-share-grant.interface';
 export { DyNTS_PrivacyExportSchema_Interface } from './_models/privacy-export-schema.interface';
 export { DyNTS_PrivacyExportSchemaSync_Result } from './_models/privacy-export-schema-sync-result.interface';
 export { DyNTS_PrivacyExportSchemaPublished_Interface } from './_models/privacy-export-schema-published.interface';

package/build/_modules/privacy-lifecycle/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,EACL,oDAAoD,EACrD,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,uCAAuC,EAAE,MAAM,wCAAwC,CAAC;AACjG,OAAO,EAAE,qCAAqC,EAAE,MAAM,sCAAsC,CAAC;AAC7F,OAAO,EAAE,uCAAuC,EAAE,MAAM,wCAAwC,CAAC;AACjG,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EACL,sCAAsC,EACtC,0CAA0C,EAC1C,mCAAmC,EACnC,0CAA0C,EAC1C,4CAA4C,EAC5C,oCAAoC,EACpC,mCAAmC,EACpC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EACL,uCAAuC,EACvC,6CAA6C,EAC9C,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,EACL,wCAAwC,EACxC,sCAAsC,EACtC,yCAAyC,EACzC,wCAAwC,EACxC,yCAAyC,EACzC,+CAA+C,EAC/C,wCAAwC,EACzC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,6CAA6C,EAC7C,4CAA4C,EAC5C,8CAA8C,EAC9C,gDAAgD,EAChD,4CAA4C,EAC5C,6CAA6C,EAC7C,gDAAgD,EAChD,kDAAkD,EAClD,mDAAmD,EACnD,sDAAsD,EACvD,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,oDAAoD,EACpD,mDAAmD,EACnD,sDAAsD,EACtD,+CAA+C,EAC/C,iDAAiD,EACjD,iDAAiD,EACjD,6CAA6C,EAC9C,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,2CAA2C,EAC3C,yCAAyC,EAC1C,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAC3F,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,2CAA2C,EAC5C,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,yCAAyC,EAAE,MAAM,0CAA0C,CAAC;AACrG,OAAO,EAAE,kCAAkC,EAAE,MAAM,kCAAkC,CAAC;AACtF,OAAO,EACL,gDAAgD,EACjD,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EACL,4DAA4D,EAC5D,wCAAwC,EACzC,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EACL,iCAAiC,EACjC,yCAAyC,EACzC,8BAA8B,EAC9B,2BAA2B,EAC5B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,8BAA8B,EAC9B,sCAAsC,EACtC,8BAA8B,EAC9B,sCAAsC,EACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,wCAAwC,EAAE,MAAM,yCAAyC,CAAC;AACnG,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EAAE,oCAAoC,EAAE,MAAM,uDAAuD,CAAC;AAC7G,OAAO,EAAE,4CAA4C,EAAE,MAAM,qDAAqD,CAAC;AACnH,OAAO,EAAE,sCAAsC,EAAE,MAAM,mDAAmD,CAAC;AAC3G,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EACL,4CAA4C,EAC7C,MAAM,yDAAyD,CAAC;AACjE,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EACL,0CAA0C,EAC3C,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,iDAAiD,CAAC;AAC5G,OAAO,EAAE,yCAAyC,EAAE,MAAM,iDAAiD,CAAC;AAC5G,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,wCAAwC,EAAE,MAAM,gDAAgD,CAAC;AAC1G,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EACL,kDAAkD,EAClD,iDAAiD,EAClD,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EACL,+CAA+C,EAChD,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EACL,6CAA6C,EAC7C,uCAAuC,EACvC,sCAAsC,EACtC,uCAAuC,EACxC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,wCAAwC,EACxC,gDAAgD,EACjD,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,2CAA2C,EAAE,MAAM,oDAAoD,CAAC;AACjH,OAAO,EACL,uDAAuD,EACxD,MAAM,iEAAiE,CAAC;AACzE,OAAO,EAAE,4CAA4C,EAAE,MAAM,qDAAqD,CAAC;AACnH,OAAO,EACL,0CAA0C,EAC3C,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,0CAA0C,EAAE,MAAM,mDAAmD,CAAC;AAC/G,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EACL,qDAAqD,EACtD,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EACL,yCAAyC,EAC1C,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,kCAAkC,EAClC,uCAAuC,EACxC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,wCAAwC,EACxC,mDAAmD,EACpD,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EACL,8CAA8C,EAC9C,2CAA2C,EAC3C,4CAA4C,EAC5C,iDAAiD,EACjD,2CAA2C,EAC3C,+CAA+C,EAC/C,2CAA2C,EAC3C,2CAA2C,EAC3C,0CAA0C,EAC1C,iDAAiD,EACjD,yCAAyC,EACzC,0CAA0C,EAC3C,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,iDAAiD,EACjD,kDAAkD,EAClD,0CAA0C,EAC1C,yCAAyC,EAC1C,MAAM,2CAA2C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,EACL,oDAAoD,EACrD,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,uCAAuC,EAAE,MAAM,wCAAwC,CAAC;AACjG,OAAO,EAAE,qCAAqC,EAAE,MAAM,sCAAsC,CAAC;AAC7F,OAAO,EAAE,uCAAuC,EAAE,MAAM,wCAAwC,CAAC;AACjG,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EACL,sCAAsC,EACtC,0CAA0C,EAC1C,mCAAmC,EACnC,0CAA0C,EAC1C,4CAA4C,EAC5C,oCAAoC,EACpC,mCAAmC,EACpC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EACL,uCAAuC,EACvC,6CAA6C,EAC9C,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,EACL,wCAAwC,EACxC,sCAAsC,EACtC,yCAAyC,EACzC,wCAAwC,EACxC,yCAAyC,EACzC,+CAA+C,EAC/C,wCAAwC,EACzC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,6CAA6C,EAC7C,4CAA4C,EAC5C,8CAA8C,EAC9C,gDAAgD,EAChD,4CAA4C,EAC5C,6CAA6C,EAC7C,gDAAgD,EAChD,kDAAkD,EAClD,mDAAmD,EACnD,sDAAsD,EACvD,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,oDAAoD,EACpD,mDAAmD,EACnD,sDAAsD,EACtD,+CAA+C,EAC/C,iDAAiD,EACjD,iDAAiD,EACjD,6CAA6C,EAC9C,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,2CAA2C,EAC3C,yCAAyC,EAC1C,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAC3F,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,2CAA2C,EAC5C,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,yCAAyC,EAAE,MAAM,0CAA0C,CAAC;AACrG,OAAO,EAAE,kCAAkC,EAAE,MAAM,kCAAkC,CAAC;AACtF,OAAO,EACL,gDAAgD,EACjD,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EACL,4DAA4D,EAC5D,wCAAwC,EACzC,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EACL,iCAAiC,EACjC,yCAAyC,EACzC,8BAA8B,EAC9B,2BAA2B,EAC5B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,8BAA8B,EAC9B,sCAAsC,EACtC,8BAA8B,EAC9B,sCAAsC,EACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,wCAAwC,EAAE,MAAM,yCAAyC,CAAC;AACnG,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EACL,2CAA2C,EAC3C,wCAAwC,EACxC,gDAAgD,EAChD,uCAAuC,EACvC,yCAAyC,EACzC,sCAAsC,EACtC,sCAAsC,EACtC,qCAAqC,EACtC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EAAE,oCAAoC,EAAE,MAAM,uDAAuD,CAAC;AAC7G,OAAO,EAAE,4CAA4C,EAAE,MAAM,qDAAqD,CAAC;AACnH,OAAO,EAAE,sCAAsC,EAAE,MAAM,mDAAmD,CAAC;AAC3G,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EACL,4CAA4C,EAC7C,MAAM,yDAAyD,CAAC;AACjE,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EACL,0CAA0C,EAC3C,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,iDAAiD,CAAC;AAC5G,OAAO,EAAE,yCAAyC,EAAE,MAAM,iDAAiD,CAAC;AAC5G,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,wCAAwC,EAAE,MAAM,gDAAgD,CAAC;AAC1G,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EACL,kDAAkD,EAClD,iDAAiD,EAClD,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EACL,+CAA+C,EAChD,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EACL,6CAA6C,EAC7C,uCAAuC,EACvC,sCAAsC,EACtC,uCAAuC,EACxC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,wCAAwC,EACxC,gDAAgD,EACjD,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,2CAA2C,EAAE,MAAM,oDAAoD,CAAC;AACjH,OAAO,EACL,uDAAuD,EACxD,MAAM,iEAAiE,CAAC;AACzE,OAAO,EAAE,4CAA4C,EAAE,MAAM,qDAAqD,CAAC;AACnH,OAAO,EACL,0CAA0C,EAC3C,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,0CAA0C,EAAE,MAAM,mDAAmD,CAAC;AAC/G,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EACL,qDAAqD,EACtD,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EACL,yCAAyC,EAC1C,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,kCAAkC,EAClC,uCAAuC,EACxC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,wCAAwC,EACxC,mDAAmD,EACpD,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EACL,8CAA8C,EAC9C,2CAA2C,EAC3C,4CAA4C,EAC5C,iDAAiD,EACjD,2CAA2C,EAC3C,+CAA+C,EAC/C,2CAA2C,EAC3C,2CAA2C,EAC3C,0CAA0C,EAC1C,iDAAiD,EACjD,yCAAyC,EACzC,0CAA0C,EAC3C,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,iDAAiD,EACjD,kDAAkD,EAClD,0CAA0C,EAC1C,yCAAyC,EAC1C,MAAM,2CAA2C,CAAC"}

package/build/_modules/privacy-lifecycle/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DyNTS_PrivacyRequest_Type = exports.DyNTS_PrivacyRequestState_Type = exports.DyNTS_PrivacyContributorOutcome_Type = exports.DyNTS_PrivacyContributorExecutionMode_Type = exports.DyNTS_PrivacyContributorAction_Type = exports.DyNTS_PrivacyConsentAuthorizationReason_Type = exports.DyNTS_PrivacyConsentDecision_Type = exports.DyNTS_PrivacyExportSchema_Util = exports.DyNTS_PrivacyExportBundle_ControlService = exports.DyNTS_PrivacyLedger_MongoStore = exports.DyNTS_PrivacyLifecycle_MongoStore = exports.DyNTS_PrivacyExportArtifact_MongoStore = exports.DyNTS_privacyExportArtifactContributorId = exports.DyNTS_PrivacyExportArtifactPrivacyContributor_ControlService = exports.DyNTS_PrivacyExportArtifact_ControlService = exports.DyNTS_PrivacyConsentAuthorization_ControlService = exports.DyNTS_PrivacyLedger_ControlService = exports.DyNTS_PrivacyRequestCursor_ControlService = exports.DyNTS_PrivacyMutationGate_MongoStore = exports.DyNTS_PrivacyRightsNotificationState_Type = exports.DyNTS_PrivacyRightsNotificationChannel_Type = exports.DyNTS_PrivacyRightsRectificationDecision_Type = exports.DyNTS_PrivacyRightsPurposeDecision_Type = exports.DyNTS_PrivacyRightsValue_Type = exports.DyNTS_PrivacyRightsNotification_MongoStore = exports.DyNTS_PrivacyRightsExecution_MongoStore = exports.DyNTS_PrivacyRightsCustody_MongoStore = exports.DyNTS_PrivacyRightsInput_ControlService = exports.DyNTS_PrivacyContributorRequestRouter_ControlService = exports.DyNTS_PrivacyLifecycle_ControlService = void 0;
+exports.DyNTS_PrivacyRequest_Type = exports.DyNTS_PrivacyRequestState_Type = exports.DyNTS_PrivacyContributorOutcome_Type = exports.DyNTS_PrivacyContributorExecutionMode_Type = exports.DyNTS_PrivacyContributorAction_Type = exports.DyNTS_PrivacyConsentAuthorizationReason_Type = exports.DyNTS_PrivacyConsentDecision_Type = exports.DyNTS_PrivacyShareGrant_ControlService = exports.DyNTS_PrivacyExportSchema_Util = exports.DyNTS_PrivacyExportBundle_ControlService = exports.DyNTS_PrivacyLedger_MongoStore = exports.DyNTS_PrivacyLifecycle_MongoStore = exports.DyNTS_PrivacyExportArtifact_MongoStore = exports.DyNTS_privacyExportArtifactContributorId = exports.DyNTS_PrivacyExportArtifactPrivacyContributor_ControlService = exports.DyNTS_PrivacyExportArtifact_ControlService = exports.DyNTS_PrivacyConsentAuthorization_ControlService = exports.DyNTS_PrivacyLedger_ControlService = exports.DyNTS_PrivacyRequestCursor_ControlService = exports.DyNTS_PrivacyMutationGate_MongoStore = exports.DyNTS_PrivacyRightsNotificationState_Type = exports.DyNTS_PrivacyRightsNotificationChannel_Type = exports.DyNTS_PrivacyRightsRectificationDecision_Type = exports.DyNTS_PrivacyRightsPurposeDecision_Type = exports.DyNTS_PrivacyRightsValue_Type = exports.DyNTS_PrivacyRightsNotification_MongoStore = exports.DyNTS_PrivacyRightsExecution_MongoStore = exports.DyNTS_PrivacyRightsCustody_MongoStore = exports.DyNTS_PrivacyRightsInput_ControlService = exports.DyNTS_PrivacyContributorRequestRouter_ControlService = exports.DyNTS_PrivacyLifecycle_ControlService = void 0;
 var privacy_lifecycle_control_service_1 = require("./privacy-lifecycle.control-service");
 Object.defineProperty(exports, "DyNTS_PrivacyLifecycle_ControlService", { enumerable: true, get: function () { return privacy_lifecycle_control_service_1.DyNTS_PrivacyLifecycle_ControlService; } });
 var privacy_contributor_request_router_control_service_1 = require("./privacy-contributor-request-router.control-service");
@@ -44,6 +44,8 @@ var privacy_export_bundle_control_service_1 = require("./privacy-export-bundle.c
 Object.defineProperty(exports, "DyNTS_PrivacyExportBundle_ControlService", { enumerable: true, get: function () { return privacy_export_bundle_control_service_1.DyNTS_PrivacyExportBundle_ControlService; } });
 var privacy_export_schema_util_1 = require("./privacy-export-schema.util");
 Object.defineProperty(exports, "DyNTS_PrivacyExportSchema_Util", { enumerable: true, get: function () { return privacy_export_schema_util_1.DyNTS_PrivacyExportSchema_Util; } });
+var privacy_share_grant_control_service_1 = require("./privacy-share-grant.control-service");
+Object.defineProperty(exports, "DyNTS_PrivacyShareGrant_ControlService", { enumerable: true, get: function () { return privacy_share_grant_control_service_1.DyNTS_PrivacyShareGrant_ControlService; } });
 var privacy_consent_decision_type_enum_1 = require("./_enums/privacy-consent-decision.type-enum");
 Object.defineProperty(exports, "DyNTS_PrivacyConsentDecision_Type", { enumerable: true, get: function () { return privacy_consent_decision_type_enum_1.DyNTS_PrivacyConsentDecision_Type; } });
 var privacy_consent_authorization_reason_type_enum_1 = require("./_enums/privacy-consent-authorization-reason.type-enum");

package/build/_modules/privacy-lifecycle/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/index.ts"],"names":[],"mappings":";;;AAAA,yFAA4F;AAAnF,0JAAA,qCAAqC,OAAA;AAC9C,2HAE8D;AAD5D,0LAAA,oDAAoD,OAAA;AAEtD,+FAAiG;AAAxF,+JAAA,uCAAuC,OAAA;AAChD,2FAA6F;AAApF,2JAAA,qCAAqC,OAAA;AAC9C,+FAAiG;AAAxF,+JAAA,uCAAuC,OAAA;AAChD,qGAAuG;AAA9F,qKAAA,0CAA0C,OAAA;AAUnD,0FAAwF;AAA/E,+IAAA,6BAA6B,OAAA;AACtC,gGAGoD;AAFlD,4JAAA,uCAAuC,OAAA;AACvC,kKAAA,6CAA6C,OAAA;AAiC/C,oHAG8D;AAF5D,0KAAA,2CAA2C,OAAA;AAC3C,wKAAA,yCAAyC,OAAA;AAE3C,yFAA2F;AAAlF,yJAAA,oCAAoC,OAAA;AAM7C,mGAAqG;AAA5F,mKAAA,yCAAyC,OAAA;AAClD,mFAAsF;AAA7E,oJAAA,kCAAkC,OAAA;AAC3C,iHAEyD;AADvD,iLAAA,gDAAgD,OAAA;AAElD,qGAAuG;AAA9F,qKAAA,0CAA0C,OAAA;AACnD,6IAGuE;AAFrE,2MAAA,4DAA4D,OAAA;AAC5D,uLAAA,wCAAwC,OAAA;AAE1C,6FAA+F;AAAtF,6JAAA,sCAAsC,OAAA;AAC/C,iFAKyC;AAJvC,kJAAA,iCAAiC,OAAA;AAKnC,2EAKsC;AAJpC,4IAAA,8BAA8B,OAAA;AAKhC,iGAAmG;AAA1F,iKAAA,wCAAwC,OAAA;AACjD,2EAA8E;AAArE,4IAAA,8BAA8B,OAAA;AAKvC,kGAAgG;AAAvF,uJAAA,iCAAiC,OAAA;AAC1C,0HAEiE;AAD/D,8KAAA,4CAA4C,OAAA;AAE9C,sGAAoG;AAA3F,2JAAA,mCAAmC,OAAA;AAC5C,sHAE+D;AAD7D,0KAAA,0CAA0C,OAAA;AAE5C,wGAAsG;AAA7F,6JAAA,oCAAoC,OAAA;AAC7C,4FAA0F;AAAjF,iJAAA,8BAA8B,OAAA;AACvC,gFAA+E;AAAtE,sIAAA,yBAAyB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/index.ts"],"names":[],"mappings":";;;AAAA,yFAA4F;AAAnF,0JAAA,qCAAqC,OAAA;AAC9C,2HAE8D;AAD5D,0LAAA,oDAAoD,OAAA;AAEtD,+FAAiG;AAAxF,+JAAA,uCAAuC,OAAA;AAChD,2FAA6F;AAApF,2JAAA,qCAAqC,OAAA;AAC9C,+FAAiG;AAAxF,+JAAA,uCAAuC,OAAA;AAChD,qGAAuG;AAA9F,qKAAA,0CAA0C,OAAA;AAUnD,0FAAwF;AAA/E,+IAAA,6BAA6B,OAAA;AACtC,gGAGoD;AAFlD,4JAAA,uCAAuC,OAAA;AACvC,kKAAA,6CAA6C,OAAA;AAiC/C,oHAG8D;AAF5D,0KAAA,2CAA2C,OAAA;AAC3C,wKAAA,yCAAyC,OAAA;AAE3C,yFAA2F;AAAlF,yJAAA,oCAAoC,OAAA;AAM7C,mGAAqG;AAA5F,mKAAA,yCAAyC,OAAA;AAClD,mFAAsF;AAA7E,oJAAA,kCAAkC,OAAA;AAC3C,iHAEyD;AADvD,iLAAA,gDAAgD,OAAA;AAElD,qGAAuG;AAA9F,qKAAA,0CAA0C,OAAA;AACnD,6IAGuE;AAFrE,2MAAA,4DAA4D,OAAA;AAC5D,uLAAA,wCAAwC,OAAA;AAE1C,6FAA+F;AAAtF,6JAAA,sCAAsC,OAAA;AAC/C,iFAKyC;AAJvC,kJAAA,iCAAiC,OAAA;AAKnC,2EAKsC;AAJpC,4IAAA,8BAA8B,OAAA;AAKhC,iGAAmG;AAA1F,iKAAA,wCAAwC,OAAA;AACjD,2EAA8E;AAArE,4IAAA,8BAA8B,OAAA;AACvC,6FAA+F;AAAtF,6JAAA,sCAAsC,OAAA;AAe/C,kGAAgG;AAAvF,uJAAA,iCAAiC,OAAA;AAC1C,0HAEiE;AAD/D,8KAAA,4CAA4C,OAAA;AAE9C,sGAAoG;AAA3F,2JAAA,mCAAmC,OAAA;AAC5C,sHAE+D;AAD7D,0KAAA,0CAA0C,OAAA;AAE5C,wGAAsG;AAA7F,6JAAA,oCAAoC,OAAA;AAC7C,4FAA0F;AAAjF,iJAAA,8BAA8B,OAAA;AACvC,gFAA+E;AAAtE,sIAAA,yBAAyB,OAAA"}

package/build/_modules/privacy-lifecycle/privacy-share-grant.control-service.d.ts

@@ -0,0 +1,61 @@
+import { DyNTS_PrivacyShareGrantAuditEvent_Interface, DyNTS_PrivacyShareGrantCreated_Interface, DyNTS_PrivacyShareGrantLifecycleReader_Interface, DyNTS_PrivacyShareGrantRedeemed_Interface, DyNTS_PrivacyShareGrantScope_Interface, DyNTS_PrivacyShareGrantStore_Interface, DyNTS_PrivacyShareGrantView_Interface } from './_models/privacy-share-grant.interface';
+/**
+ * L-174 B2 (BFR-FUTDEVPRO-048, Data Act art. 26 b) — the share grant: the subject lets their NEW provider download ONE
+ * completed export without an account. Short-lived (default 72 h), single-use (atomic consume), revocable; the
+ * secret is shown once and stored only as a SHA-256 hash; a redemption notifies the subject (`onRedeemed`) and every
+ * step is audited (`onAudit`). A redemption yields the exact authority for
+ * `DyNTS_PrivacyExportBundle_ControlService.assemble` — the provider gets the SAME bundle the subject downloads.
+ *
+ * Owns no HTTP, no persistence, no delivery: the store, the lifecycle reader and the hooks are injected.
+ */
+export declare class DyNTS_PrivacyShareGrant_ControlService {
+    static readonly defaultTtlMs: number;
+    static readonly absoluteMaxTtlMs: number;
+    /** The secret is 32 random bytes, base64url ⇒ exactly 43 characters. */
+    private static readonly secretPattern;
+    private readonly lifecycleReader;
+    private readonly store;
+    private readonly ttlMs;
+    private readonly maxActivePerRequest;
+    private readonly clock;
+    private readonly onRedeemed?;
+    private readonly onAudit?;
+    /** Creates the service; `ttlMs` ≤ 7 days, `maxActivePerRequest` 1–10 (the per-request rate limit). */
+    constructor(set: {
+        lifecycleReader: DyNTS_PrivacyShareGrantLifecycleReader_Interface;
+        store: DyNTS_PrivacyShareGrantStore_Interface;
+        ttlMs?: number;
+        maxActivePerRequest?: number;
+        clock?: () => Date;
+        onRedeemed?: (event: DyNTS_PrivacyShareGrantRedeemed_Interface) => Promise<void> | void;
+        onAudit?: (event: DyNTS_PrivacyShareGrantAuditEvent_Interface) => Promise<void> | void;
+    });
+    /** Creates a grant for the subject's own COMPLETED export; the returned secret is never retrievable again. */
+    create(scope: DyNTS_PrivacyShareGrantScope_Interface): Promise<DyNTS_PrivacyShareGrantCreated_Interface>;
+    /** The subject's grants of one export request, newest first (no secret, no hash). */
+    list(scope: DyNTS_PrivacyShareGrantScope_Interface): Promise<DyNTS_PrivacyShareGrantView_Interface[]>;
+    /** Revokes one active grant of the subject's request (404 when there is no such active grant). */
+    revoke(set: {
+        grantId: string;
+        scope: DyNTS_PrivacyShareGrantScope_Interface;
+    }): Promise<void>;
+    /**
+     * The public redemption (no account): consumes the grant atomically and returns the export authority. Any failure — a
+     * malformed, unknown, used, revoked or expired secret — is the SAME 404, so the endpoint gives no oracle.
+     */
+    redeem(set: {
+        secret: string;
+        usedBy: string;
+    }): Promise<DyNTS_PrivacyShareGrantRedeemed_Interface>;
+    /** The grant must be for the subject's own export request, in `completed` state. */
+    private requireCompletedExport;
+    private stateOf;
+    private view;
+    private inScope;
+    private validateScope;
+    private boundedText;
+    private hash;
+    private audit;
+    private error;
+}
+//# sourceMappingURL=privacy-share-grant.control-service.d.ts.map

package/build/_modules/privacy-lifecycle/privacy-share-grant.control-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-share-grant.control-service.d.ts","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/privacy-share-grant.control-service.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,2CAA2C,EAC3C,wCAAwC,EACxC,gDAAgD,EAEhD,yCAAyC,EACzC,sCAAsC,EACtC,sCAAsC,EACtC,qCAAqC,EACtC,MAAM,yCAAyC,CAAC;AAEjD;;;;;;;;GAQG;AACH,qBAAa,sCAAsC;IACjD,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAuB;IAC3D,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAA2B;IACnE,wEAAwE;IACxE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAkC;IAEvE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmD;IACnF,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyC;IAC/D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAA6E;IACzG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAA+E;IAExG,sGAAsG;gBAC1F,GAAG,EAAE;QACf,eAAe,EAAE,gDAAgD,CAAC;QAClE,KAAK,EAAE,sCAAsC,CAAC;QAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;QACnB,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,yCAAyC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACxF,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,2CAA2C,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;KACxF;IAqBD,8GAA8G;IACxG,MAAM,CAAC,KAAK,EAAE,sCAAsC,GAAG,OAAO,CAAC,wCAAwC,CAAC;IA8B9G,qFAAqF;IAC/E,IAAI,CAAC,KAAK,EAAE,sCAAsC,GAAG,OAAO,CAAC,qCAAqC,EAAE,CAAC;IAiB3G,kGAAkG;IAC5F,MAAM,CAAC,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,sCAAsC,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAapG;;;OAGG;IACG,MAAM,CAAC,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,yCAAyC,CAAC;IAmCzG,oFAAoF;YACtE,sBAAsB;IAqBpC,OAAO,CAAC,OAAO;IAef,OAAO,CAAC,IAAI;IAaZ,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,IAAI;YAIE,KAAK;IAInB,OAAO,CAAC,KAAK;CAed"}

package/build/_modules/privacy-lifecycle/privacy-share-grant.control-service.js

@@ -0,0 +1,200 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyShareGrant_ControlService = void 0;
+const node_crypto_1 = require("node:crypto");
+const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
+const privacy_request_state_type_enum_1 = require("./_enums/privacy-request-state.type-enum");
+const privacy_request_type_enum_1 = require("./_enums/privacy-request.type-enum");
+/**
+ * L-174 B2 (BFR-FUTDEVPRO-048, Data Act art. 26 b) — the share grant: the subject lets their NEW provider download ONE
+ * completed export without an account. Short-lived (default 72 h), single-use (atomic consume), revocable; the
+ * secret is shown once and stored only as a SHA-256 hash; a redemption notifies the subject (`onRedeemed`) and every
+ * step is audited (`onAudit`). A redemption yields the exact authority for
+ * `DyNTS_PrivacyExportBundle_ControlService.assemble` — the provider gets the SAME bundle the subject downloads.
+ *
+ * Owns no HTTP, no persistence, no delivery: the store, the lifecycle reader and the hooks are injected.
+ */
+class DyNTS_PrivacyShareGrant_ControlService {
+    static defaultTtlMs = 72 * 60 * 60 * 1000;
+    static absoluteMaxTtlMs = 7 * 24 * 60 * 60 * 1000;
+    /** The secret is 32 random bytes, base64url ⇒ exactly 43 characters. */
+    static secretPattern = /^[A-Za-z0-9_-]{43}$/u;
+    lifecycleReader;
+    store;
+    ttlMs;
+    maxActivePerRequest;
+    clock;
+    onRedeemed;
+    onAudit;
+    /** Creates the service; `ttlMs` ≤ 7 days, `maxActivePerRequest` 1–10 (the per-request rate limit). */
+    constructor(set) {
+        const ttlMs = set?.ttlMs ?? DyNTS_PrivacyShareGrant_ControlService.defaultTtlMs;
+        const maxActive = set?.maxActivePerRequest ?? 3;
+        if (!set?.lifecycleReader || !set?.store
+            || !Number.isSafeInteger(ttlMs) || ttlMs < 60_000
+            || ttlMs > DyNTS_PrivacyShareGrant_ControlService.absoluteMaxTtlMs
+            || !Number.isSafeInteger(maxActive) || maxActive < 1 || maxActive > 10) {
+            throw this.error('SETTINGS_INVALID', 500);
+        }
+        this.lifecycleReader = set.lifecycleReader;
+        this.store = set.store;
+        this.ttlMs = ttlMs;
+        this.maxActivePerRequest = maxActive;
+        this.clock = set.clock ?? (() => new Date());
+        this.onRedeemed = set.onRedeemed;
+        this.onAudit = set.onAudit;
+    }
+    /** Creates a grant for the subject's own COMPLETED export; the returned secret is never retrievable again. */
+    async create(scope) {
+        await this.requireCompletedExport(scope);
+        const now = this.clock();
+        const active = (await this.store.listForRequest(scope))
+            .filter((record) => this.stateOf(record, now) === 'active')
+            .length;
+        if (active >= this.maxActivePerRequest) {
+            throw this.error('TOO_MANY_ACTIVE_GRANTS', 429);
+        }
+        const secret = (0, node_crypto_1.randomBytes)(32).toString('base64url');
+        const record = {
+            requestId: scope.requestId,
+            subjectId: scope.subjectId,
+            organizationId: scope.organizationId,
+            grantId: (0, node_crypto_1.randomUUID)(),
+            secretHash: this.hash(secret),
+            createdAt: now.toISOString(),
+            expiresAt: new Date(now.getTime() + this.ttlMs).toISOString(),
+            revokedAt: '',
+            usedAt: '',
+            usedBy: '',
+        };
+        await this.store.insert(record);
+        await this.audit({ kind: 'created', grantId: record.grantId, requestId: record.requestId, usedBy: '' });
+        return { grant: this.view(record, now), secret: secret };
+    }
+    /** The subject's grants of one export request, newest first (no secret, no hash). */
+    async list(scope) {
+        this.validateScope(scope);
+        const now = this.clock();
+        return (await this.store.listForRequest(scope))
+            .filter((record) => this.inScope(record, scope))
+            .sort((first, second) => (first.createdAt < second.createdAt ? 1 : first.createdAt > second.createdAt ? -1 : 0))
+            .map((record) => (this.view(record, now)));
+    }
+    /** Revokes one active grant of the subject's request (404 when there is no such active grant). */
+    async revoke(set) {
+        this.validateScope(set?.scope);
+        const at = this.clock().toISOString();
+        const revoked = this.boundedText(set?.grantId, 64)
+            && await this.store.revoke({ grantId: set.grantId, scope: set.scope, at: at });
+        if (!revoked) {
+            throw this.error('GRANT_NOT_FOUND', 404);
+        }
+        await this.audit({ kind: 'revoked', grantId: set.grantId, requestId: set.scope.requestId, usedBy: '' });
+    }
+    /**
+     * The public redemption (no account): consumes the grant atomically and returns the export authority. Any failure — a
+     * malformed, unknown, used, revoked or expired secret — is the SAME 404, so the endpoint gives no oracle.
+     */
+    async redeem(set) {
+        const at = this.clock().toISOString();
+        const usedBy = this.boundedText(set?.usedBy, 256) ? set.usedBy : '';
+        const record = DyNTS_PrivacyShareGrant_ControlService.secretPattern.test(set?.secret ?? '')
+            ? await this.store.consume({ secretHash: this.hash(set.secret), at: at, usedBy: usedBy })
+            : null;
+        if (!record) {
+            await this.audit({ kind: 'refused', grantId: '', requestId: '', usedBy: usedBy });
+            throw this.error('GRANT_NOT_FOUND', 404);
+        }
+        const redeemed = {
+            grantId: record.grantId,
+            requestId: record.requestId,
+            subjectId: record.subjectId,
+            organizationId: record.organizationId,
+        };
+        await this.audit({ kind: 'redeemed', grantId: record.grantId, requestId: record.requestId, usedBy: usedBy });
+        // the grant is already consumed — a failing notification must not cost the provider its download
+        try {
+            await this.onRedeemed?.(redeemed);
+        }
+        catch (error) {
+            fsm_dynamo_1.DyFM_Log.error(`DyNTS_PrivacyShareGrant_ControlService: the redemption notification failed (${redeemed.grantId})`, error);
+        }
+        return redeemed;
+    }
+    /** The grant must be for the subject's own export request, in `completed` state. */
+    async requireCompletedExport(scope) {
+        this.validateScope(scope);
+        let request;
+        try {
+            request = await this.lifecycleReader.findRequestById(scope.requestId);
+        }
+        catch {
+            throw this.error('LIFECYCLE_UNAVAILABLE', 503);
+        }
+        if (!request || !this.inScope(request, scope)) {
+            throw this.error('REQUEST_NOT_FOUND', 404);
+        }
+        const ready = request.type === privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.export
+            && request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.completed;
+        if (!ready) {
+            throw this.error('REQUEST_NOT_READY', 409);
+        }
+    }
+    stateOf(record, now) {
+        if (record.usedAt) {
+            return 'used';
+        }
+        if (record.revokedAt) {
+            return 'revoked';
+        }
+        return Date.parse(record.expiresAt) <= now.getTime() ? 'expired' : 'active';
+    }
+    view(record, now) {
+        return {
+            grantId: record.grantId,
+            requestId: record.requestId,
+            state: this.stateOf(record, now),
+            createdAt: record.createdAt,
+            expiresAt: record.expiresAt,
+            revokedAt: record.revokedAt,
+            usedAt: record.usedAt,
+            usedBy: record.usedBy,
+        };
+    }
+    inScope(value, scope) {
+        return value.requestId === scope.requestId && value.subjectId === scope.subjectId
+            && value.organizationId === scope.organizationId;
+    }
+    validateScope(scope) {
+        if (!this.boundedText(scope?.requestId, 256) || !this.boundedText(scope?.subjectId, 256)
+            || !this.boundedText(scope?.organizationId, 256)) {
+            throw this.error('REQUEST_INVALID', 400);
+        }
+    }
+    boundedText(value, maximum) {
+        return typeof value === 'string' && value.length > 0 && value.length <= maximum;
+    }
+    hash(secret) {
+        return (0, node_crypto_1.createHash)('sha256').update(secret, 'utf8').digest('hex');
+    }
+    async audit(event) {
+        await this.onAudit?.({ ...event, at: this.clock().toISOString() });
+    }
+    error(code, status) {
+        return new fsm_dynamo_1.DyFM_Error({
+            status: status,
+            errorCode: `DYNTS|PRIVACY_SHARE_GRANT|${code}`,
+            message: 'The privacy share grant operation failed.',
+            userMessage: status === 404
+                ? 'This download link is not valid (it may have expired, been used or been revoked).'
+                : status === 409
+                    ? 'The export is not ready to be shared yet.'
+                    : status === 429
+                        ? 'Too many active share links for this export — revoke one first.'
+                        : 'The share link operation is temporarily unavailable.',
+            issuerService: 'DyNTS_PrivacyShareGrant_ControlService',
+        });
+    }
+}
+exports.DyNTS_PrivacyShareGrant_ControlService = DyNTS_PrivacyShareGrant_ControlService;
+//# sourceMappingURL=privacy-share-grant.control-service.js.map

package/build/_modules/privacy-lifecycle/privacy-share-grant.control-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-share-grant.control-service.js","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/privacy-share-grant.control-service.ts"],"names":[],"mappings":";;;AAAA,6CAAkE;AAElE,sDAA6D;AAE7D,8FAA0F;AAC1F,kFAA+E;AAa/E;;;;;;;;GAQG;AACH,MAAa,sCAAsC;IACjD,MAAM,CAAU,YAAY,GAAW,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC3D,MAAM,CAAU,gBAAgB,GAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACnE,wEAAwE;IAChE,MAAM,CAAU,aAAa,GAAW,sBAAsB,CAAC;IAEtD,eAAe,CAAmD;IAClE,KAAK,CAAyC;IAC9C,KAAK,CAAS;IACd,mBAAmB,CAAS;IAC5B,KAAK,CAAa;IAClB,UAAU,CAA8E;IACxF,OAAO,CAAgF;IAExG,sGAAsG;IACtG,YAAY,GAQX;QACC,MAAM,KAAK,GAAW,GAAG,EAAE,KAAK,IAAI,sCAAsC,CAAC,YAAY,CAAC;QACxF,MAAM,SAAS,GAAW,GAAG,EAAE,mBAAmB,IAAI,CAAC,CAAC;QAExD,IACE,CAAC,GAAG,EAAE,eAAe,IAAI,CAAC,GAAG,EAAE,KAAK;eACjC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,MAAM;eAC9C,KAAK,GAAG,sCAAsC,CAAC,gBAAgB;eAC/D,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,EAAE,EACtE,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;QAC3C,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,8GAA8G;IAC9G,KAAK,CAAC,MAAM,CAAC,KAA6C;QACxD,MAAM,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,GAAG,GAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAW,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;aAC5D,MAAM,CAAC,CAAC,MAA+C,EAAW,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,QAAQ,CAAC;aAC5G,MAAM,CAAC;QAEV,IAAI,MAAM,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,MAAM,GAAW,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC7D,MAAM,MAAM,GAA4C;YACtD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,OAAO,EAAE,IAAA,wBAAU,GAAE;YACrB,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAC7B,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;YAC5B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;YAC7D,SAAS,EAAE,EAAE;YACb,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;SACX,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAExG,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC3D,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,IAAI,CAAC,KAA6C;QACtD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QAE/B,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;aAC5C,MAAM,CAAC,CAAC,MAA+C,EAAW,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;aACjG,IAAI,CAAC,CACJ,KAA8C,EAC9C,MAA+C,EACvC,EAAE,CAAC,CACX,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACrF,CAAC;aACD,GAAG,CAAC,CAAC,MAA+C,EAAyC,EAAE,CAAC,CAC/F,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CACvB,CAAC,CAAC;IACP,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,MAAM,CAAC,GAAuE;QAClF,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAW,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;QAE9C,MAAM,OAAO,GAAY,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;eACtD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEjF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,GAAuC;QAClD,MAAM,EAAE,GAAW,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAW,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,MAAM,GACV,sCAAsC,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,IAAI,EAAE,CAAC;YAC1E,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YACzF,CAAC,CAAC,IAAI,CAAC;QAEX,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAElF,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,QAAQ,GAA8C;YAC1D,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAE7G,iGAAiG;QACjG,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qBAAQ,CAAC,KAAK,CACZ,+EAA+E,QAAQ,CAAC,OAAO,GAAG,EAClG,KAAK,CACN,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,oFAAoF;IAC5E,KAAK,CAAC,sBAAsB,CAAC,KAA6C;QAChF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,OAAoD,CAAC;QAEzD,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,KAAK,GAAY,OAAO,CAAC,IAAI,KAAK,qDAAyB,CAAC,MAAM;eACnE,OAAO,CAAC,KAAK,KAAK,gEAA8B,CAAC,SAAS,CAAC;QAEhE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,OAAO,CACb,MAA+C,EAC/C,GAAS;QAET,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9E,CAAC;IAEO,IAAI,CAAC,MAA+C,EAAE,GAAS;QACrE,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;YAChC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;IAEO,OAAO,CACb,KAA6C,EAC7C,KAA6C;QAE7C,OAAO,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;eAC5E,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,CAAC;IACrD,CAAC;IAEO,aAAa,CAAC,KAA6C;QACjE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC;eACnF,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,KAAa,EAAE,OAAe;QAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC;IAClF,CAAC;IAEO,IAAI,CAAC,MAAc;QACzB,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,KAA8D;QAChF,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAEO,KAAK,CAAC,IAAY,EAAE,MAAc;QACxC,OAAO,IAAI,uBAAU,CAAC;YACpB,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,6BAA6B,IAAI,EAAE;YAC9C,OAAO,EAAE,2CAA2C;YACpD,WAAW,EAAE,MAAM,KAAK,GAAG;gBACzB,CAAC,CAAC,mFAAmF;gBACrF,CAAC,CAAC,MAAM,KAAK,GAAG;oBACd,CAAC,CAAC,2CAA2C;oBAC7C,CAAC,CAAC,MAAM,KAAK,GAAG;wBACd,CAAC,CAAC,iEAAiE;wBACnE,CAAC,CAAC,sDAAsD;YAC9D,aAAa,EAAE,wCAAwC;SACxD,CAAC,CAAC;IACL,CAAC;;AA7OH,wFA8OC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@futdevpro/nts-dynamo",
-  "version": "01.15.407",
+  "version": "01.15.408",
   "description": "Dynamic NodeTS (NodeJS-Typescript), MongoDB Backend System Framework by Future Development Program Ltd.",
   "DyBu_settings": {
     "packageType": "server-package",