@justair/justair-library 6.10.0-alpha.b5e7ec1 → 6.10.0

package/dist/index.d.ts

@@ -18,6 +18,9 @@ import { organizationsSchema } from "./models/organizations.js";
 import { Organizations } from "./models/organizations.js";
 import { usersSchema } from "./models/users.js";
 import { Users } from "./models/users.js";
+import { COOKIE_CONSENT_CATEGORIES } from "./models/users.js";
+import { COOKIE_CONSENT_VALUES } from "./models/users.js";
+import { validateCookieConsent } from "./models/users.js";
 import { eventsSchema } from "./models/events.js";
 import { Events } from "./models/events.js";
 import { lightMonitorSchema } from "./models/lightmonitors.js";
@@ -70,10 +73,8 @@ import { Samples } from "./models/samples.js";
 import { samplesAuditSchema } from "./models/samples.js";
 import { SamplesAudit } from "./models/samples.js";
 import { sampleParameterReferenceConcentrations } from "./models/samples.js";
-import { passwordResetTokenSchema } from "./models/passwordResetToken.js";
-import { PasswordResetToken } from "./models/passwordResetToken.js";
 import { PARAMETERS } from "./constants/pollutants.js";
 import { HEAVY_METALS } from "./constants/pollutants.js";
 import { splitName } from "./utils/splitName.js";
-export { Database, adminSchema, Admin, configurationsSchema, Configurations, measurementsSchema, Measurements, monitorRequestsSchema, MonitorRequests, monitorsSchema, Monitors, organizationsSchema, Organizations, usersSchema, Users, eventsSchema, Events, lightMonitorSchema, LightMonitors, monitorSuppliersSchema, MonitorSuppliers, contextsSchema, Contexts, parametersSchema, Parameters, announcementSchema, Announcements, jobsSchema, Jobs, apiKeySchema, ApiKey, UsageMetrics, usageMetricsSchema, Audit, auditSchema, EventsAudit, eventsAuditSchema, MonitorAudit, monitorAuditSchema, parametersEnum, deploymentTypesEnum, AlertsAudit, Alerts, alertsSchema, alertsAuditSchema, Features, featuresSchema, dataCompletenessSchema, DataCompleteness, networkMetricsSchema, NetworkMetrics, rateOfChangeSchema, RateOfChange, changeStreamCheckpointsSchema, ChangeStreamCheckpoints, sitesSchema, Sites, sampleSitesSchema, SampleSites, sampleSiteAuditSchema, SampleSiteAudit, sampleParametersEnum, samplesSchema, Samples, samplesAuditSchema, SamplesAudit, sampleParameterReferenceConcentrations, passwordResetTokenSchema, PasswordResetToken, PARAMETERS, HEAVY_METALS, splitName };
+export { Database, adminSchema, Admin, configurationsSchema, Configurations, measurementsSchema, Measurements, monitorRequestsSchema, MonitorRequests, monitorsSchema, Monitors, organizationsSchema, Organizations, usersSchema, Users, COOKIE_CONSENT_CATEGORIES, COOKIE_CONSENT_VALUES, validateCookieConsent, eventsSchema, Events, lightMonitorSchema, LightMonitors, monitorSuppliersSchema, MonitorSuppliers, contextsSchema, Contexts, parametersSchema, Parameters, announcementSchema, Announcements, jobsSchema, Jobs, apiKeySchema, ApiKey, UsageMetrics, usageMetricsSchema, Audit, auditSchema, EventsAudit, eventsAuditSchema, MonitorAudit, monitorAuditSchema, parametersEnum, deploymentTypesEnum, AlertsAudit, Alerts, alertsSchema, alertsAuditSchema, Features, featuresSchema, dataCompletenessSchema, DataCompleteness, networkMetricsSchema, NetworkMetrics, rateOfChangeSchema, RateOfChange, changeStreamCheckpointsSchema, ChangeStreamCheckpoints, sitesSchema, Sites, sampleSitesSchema, SampleSites, sampleSiteAuditSchema, SampleSiteAudit, sampleParametersEnum, samplesSchema, Samples, samplesAuditSchema, SamplesAudit, sampleParameterReferenceConcentrations, PARAMETERS, HEAVY_METALS, splitName };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.js"],"names":[],"mappings":"AAsFA;;;iBAEC;yBA5BwB,oBAAoB;qBADxB,gBAAgB;4BA3DF,mBAAmB;sBAAnB,mBAAmB;qCAI/C,4BAA4B;+BAA5B,4BAA4B;mCAM5B,0BAA0B;6BAA1B,0BAA0B;sCAI1B,6BAA6B;gCAA7B,6BAA6B;+BAQ7B,sBAAsB;yBAAtB,sBAAsB;oCACsB,2BAA2B;8BAA3B,2BAA2B;4BAQ3C,mBAAmB;sBAAnB,mBAAmB;6BAM/C,oBAAoB;uBAApB,oBAAoB;mCAbuB,2BAA2B;8BAA3B,2BAA2B;uCAItE,8BAA8B;iCAA9B,8BAA8B;+BACI,sBAAsB;yBAAtB,sBAAsB;iCAClB,wBAAwB;2BAAxB,wBAAwB;mCAQnB,2BAA2B;8BAA3B,2BAA2B;2BAC5C,kBAAkB;qBAAlB,kBAAkB;6BACd,oBAAoB;uBAApB,oBAAoB;6BACR,0BAA0B;mCAA1B,0BAA0B;sBA/BpE,0BAA0B;4BAA1B,0BAA0B;4BA2B1B,oBAAoB;kCAApB,oBAAoB;6BAfpB,sBAAsB;mCAAtB,sBAAsB;+BAAtB,sBAAsB;oCAAtB,sBAAsB;4BAyBtB,oBAAoB;uBAApB,oBAAoB;6BAApB,oBAAoB;kCAApB,oBAAoB;yBACc,sBAAsB;+BAAtB,sBAAsB;uCAIxD,8BAA8B;iCAA9B,8BAA8B;qCACgB,4BAA4B;+BAA5B,4BAA4B;mCAChC,0BAA0B;6BAA1B,0BAA0B;8CAIpE,qCAAqC;wCAArC,qCAAqC;4BAOT,mBAAmB;sBAAnB,mBAAmB;kCAS/C,yBAAyB;4BAAzB,yBAAyB;sCAAzB,yBAAyB;gCAAzB,yBAAyB;qCAAzB,yBAAyB;8BASzB,qBAAqB;wBAArB,qBAAqB;mCAArB,qBAAqB;6BAArB,qBAAqB;uDAArB,qBAAqB;yCACiC,gCAAgC;mCAAhC,gCAAgC;2BAvBpD,2BAA2B;6BAA3B,2BAA2B;0BAC1C,sBAAsB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.js"],"names":[],"mappings":"AA2FA;;;iBAEC;yBA3BwB,oBAAoB;qBADxB,gBAAgB;4BAjEF,mBAAmB;sBAAnB,mBAAmB;qCAI/C,4BAA4B;+BAA5B,4BAA4B;mCAM5B,0BAA0B;6BAA1B,0BAA0B;sCAI1B,6BAA6B;gCAA7B,6BAA6B;+BAQ7B,sBAAsB;yBAAtB,sBAAsB;oCACsB,2BAA2B;8BAA3B,2BAA2B;4BAcvE,mBAAmB;sBAAnB,mBAAmB;0CAAnB,mBAAmB;sCAAnB,mBAAmB;sCAAnB,mBAAmB;6BAMnB,oBAAoB;uBAApB,oBAAoB;mCAnBuB,2BAA2B;8BAA3B,2BAA2B;uCAItE,8BAA8B;iCAA9B,8BAA8B;+BACI,sBAAsB;yBAAtB,sBAAsB;iCAClB,wBAAwB;2BAAxB,wBAAwB;mCAcnB,2BAA2B;8BAA3B,2BAA2B;2BAC5C,kBAAkB;qBAAlB,kBAAkB;6BACd,oBAAoB;uBAApB,oBAAoB;6BACR,0BAA0B;mCAA1B,0BAA0B;sBArCpE,0BAA0B;4BAA1B,0BAA0B;4BAiC1B,oBAAoB;kCAApB,oBAAoB;6BArBpB,sBAAsB;mCAAtB,sBAAsB;+BAAtB,sBAAsB;oCAAtB,sBAAsB;4BA+BtB,oBAAoB;uBAApB,oBAAoB;6BAApB,oBAAoB;kCAApB,oBAAoB;yBACc,sBAAsB;+BAAtB,sBAAsB;uCAIxD,8BAA8B;iCAA9B,8BAA8B;qCACgB,4BAA4B;+BAA5B,4BAA4B;mCAChC,0BAA0B;6BAA1B,0BAA0B;8CAIpE,qCAAqC;wCAArC,qCAAqC;4BAOT,mBAAmB;sBAAnB,mBAAmB;kCAS/C,yBAAyB;4BAAzB,yBAAyB;sCAAzB,yBAAyB;gCAAzB,yBAAyB;qCAAzB,yBAAyB;8BASzB,qBAAqB;wBAArB,qBAAqB;mCAArB,qBAAqB;6BAArB,qBAAqB;uDAArB,qBAAqB;2BAtBa,2BAA2B;6BAA3B,2BAA2B;0BAC1C,sBAAsB"}

package/dist/models/admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/models/admin.js"],"names":[],"mappings":"AAEA,8BAsBG;AAcH,wBAAmD"}
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/models/admin.js"],"names":[],"mappings":"AAEA,8BAgBG;AAUH,wBAAmD"}

package/dist/models/measurements.d.ts

@@ -6,10 +6,10 @@ export const annotationSchema: mongoose.Schema<any, mongoose.Model<any, any, any
     _id: true;
     timestamps: false;
 }, {
-    comment: string;
-    measurementIdentifier: string;
     source: "admin" | "processing_engine";
     timestamp: Date;
+    comment: string;
+    measurementIdentifier: string;
     adminId?: {
         prototype?: mongoose.Types.ObjectId;
         cacheHexString?: unknown;
@@ -20,10 +20,10 @@ export const annotationSchema: mongoose.Schema<any, mongoose.Model<any, any, any
         isValid?: {};
     };
 }, mongoose.Document<unknown, {}, mongoose.FlatRecord<{
-    comment: string;
-    measurementIdentifier: string;
     source: "admin" | "processing_engine";
     timestamp: Date;
+    comment: string;
+    measurementIdentifier: string;
     adminId?: {
         prototype?: mongoose.Types.ObjectId;
         cacheHexString?: unknown;
@@ -34,10 +34,10 @@ export const annotationSchema: mongoose.Schema<any, mongoose.Model<any, any, any
         isValid?: {};
     };
 }>> & mongoose.FlatRecord<{
-    comment: string;
-    measurementIdentifier: string;
     source: "admin" | "processing_engine";
     timestamp: Date;
+    comment: string;
+    measurementIdentifier: string;
     adminId?: {
         prototype?: mongoose.Types.ObjectId;
         cacheHexString?: unknown;

package/dist/models/tests/cookieConsent.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cookieConsent.test.d.ts.map

package/dist/models/tests/cookieConsent.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookieConsent.test.d.ts","sourceRoot":"","sources":["../../../src/models/tests/cookieConsent.test.js"],"names":[],"mappings":""}

package/dist/models/users.d.ts

@@ -1,3 +1,6 @@
 export const usersSchema: any;
 export const Users: any;
+export const COOKIE_CONSENT_CATEGORIES: string[];
+export const COOKIE_CONSENT_VALUES: string[];
+export function validateCookieConsent(consent: any): string;
 //# sourceMappingURL=users.d.ts.map

package/dist/models/users.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/models/users.js"],"names":[],"mappings":"AAEA,8BAgDE;AAIF,wBAAmD"}
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/models/users.js"],"names":[],"mappings":"AAqCA,8BAiDE;AAIF,wBAAmD;AAxFnD,iDAA4D;AAC5D,6CAAmD;AAUnD,4DAsBC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@justair/justair-library",
-  "version": "6.10.0-alpha.b5e7ec1",
+  "version": "6.10.0",
   "description": "JustAir Internal Library",
   "main": "src/index.js",
   "type": "module",
@@ -13,18 +13,10 @@
     "./constants": {
       "types": "./dist/constants/pollutants.d.ts",
       "default": "./src/constants/pollutants.js"
-    },
-    "./auth": {
-      "types": "./dist/modules/auth/index.d.ts",
-      "default": "./src/modules/auth/index.js"
-    },
-    "./audit": {
-      "types": "./dist/modules/audit/index.d.ts",
-      "default": "./src/modules/audit/index.js"
     }
   },
   "scripts": {
-    "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js",
+    "test": "node --experimental-vm-modules node_modules/.bin/jest",
     "build": "tsc",
     "prepublish": "npm run build"
   },
@@ -34,21 +26,18 @@
   "author": "Britney Epps",
   "license": "ISC",
   "dependencies": {
-    "jose": "^5.10.0",
     "mongoose": "^7.8.3",
     "nanoid": "^5.1.6",
     "winston": "^3.10.0"
   },
   "jest": {
     "testEnvironment": "node",
-    "transform": {},
-    "testTimeout": 60000
+    "transform": {}
   },
   "devDependencies": {
     "@jest/globals": "^29",
     "@types/node": "^16.0.0",
     "jest": "^29",
-    "mongodb-memory-server": "^11.2.0",
     "jest-environment-node": "^29",
     "ts-node": "^10.0.0",
     "typescript": "^5.3.2"

package/src/index.js

@@ -29,7 +29,13 @@ import {
 } from "./models/monitorSuppliers.js";
 import { contextsSchema, Contexts } from "./models/contexts.js";
 import { parametersSchema, Parameters } from "./models/parameters.js";
-import { usersSchema, Users } from "./models/users.js";
+import {
+  usersSchema,
+  Users,
+  COOKIE_CONSENT_CATEGORIES,
+  COOKIE_CONSENT_VALUES,
+  validateCookieConsent,
+} from "./models/users.js";
 import {
   eventsSchema,
   Events,
@@ -82,7 +88,6 @@ import {
   SamplesAudit,
   sampleParameterReferenceConcentrations,
 } from "./models/samples.js";
-import { passwordResetTokenSchema, PasswordResetToken } from "./models/passwordResetToken.js";
 
 export function createLoggerInstance({ DATADOG_API_KEY, APPLICATION_NAME }) {
   return new CustomLogger({ DATADOG_API_KEY, APPLICATION_NAME });
@@ -104,6 +109,9 @@ export {
   Organizations,
   usersSchema,
   Users,
+  COOKIE_CONSENT_CATEGORIES,
+  COOKIE_CONSENT_VALUES,
+  validateCookieConsent,
   eventsSchema,
   Events,
   lightMonitorSchema,
@@ -159,9 +167,6 @@ export {
   samplesAuditSchema,
   SamplesAudit,
   sampleParameterReferenceConcentrations,
-  // Password reset tokens (JA-2946)
-  passwordResetTokenSchema,
-  PasswordResetToken,
   // Pollutant constants
   PARAMETERS,
   HEAVY_METALS,

package/src/models/admin.js

@@ -13,12 +13,6 @@ const adminSchema = mongoose.Schema({
     authorized: { type: Boolean, default: false },
     isActive: { type: Boolean, default: false },
     hasSeenWelcomeScreen: { type: Boolean, default: false },
-    // Keycloak migration (JA-2814, auth-contracts #5). externalAuthId = Keycloak `sub`.
-    // Intentionally NO default: it must stay `undefined` (not null) until the migration
-    // writes it, so the sparse-unique index below skips un-migrated admins instead of
-    // colliding on many nulls. ssoProvider is reserved for future IdP brokering.
-    externalAuthId: { type: String },
-    ssoProvider: { type: String, default: null },
 },
 {
     timestamps: true
@@ -30,12 +24,8 @@ adminSchema.index({ orgId: 1, isActive: 1 });
 adminSchema.index({ email: 1, isActive: 1 });
 // Permission-based queries
 adminSchema.index({ orgId: 1, permissionName: 1 });
-// Keycloak subject join key — unique per migrated admin; sparse so absent values
-// (un-migrated admins, where externalAuthId is undefined) are not indexed and do
-// not collide. Depends on externalAuthId having NO schema default (see above).
-adminSchema.index({ externalAuthId: 1 }, { unique: true, sparse: true });
 
 
 const Admin = mongoose.model('Admin', adminSchema);
 
-export {adminSchema, Admin};
+export {adminSchema, Admin};

package/src/models/users.js

@@ -1,5 +1,40 @@
 import mongoose from "mongoose";
 
+const COOKIE_CONSENT_CATEGORIES = ["analytics_performance"];
+const COOKIE_CONSENT_VALUES = ["accept", "reject"];
+
+const cookieConsentSchemaDefinition = COOKIE_CONSENT_CATEGORIES.reduce(
+  (definition, category) => {
+    definition[category] = { type: String, enum: COOKIE_CONSENT_VALUES };
+    return definition;
+  },
+  {}
+);
+
+const validateCookieConsent = (consent) => {
+  if (typeof consent !== "object" || consent === null || Array.isArray(consent)) {
+    return "cookie_consent must be an object";
+  }
+
+  const entries = Object.entries(consent);
+  if (entries.length === 0) {
+    return "cookie_consent must include at least one category";
+  }
+
+  for (const [category, value] of entries) {
+    if (!COOKIE_CONSENT_CATEGORIES.includes(category)) {
+      return `Unknown cookie consent category: ${category}`;
+    }
+    if (!COOKIE_CONSENT_VALUES.includes(value)) {
+      return `Invalid value for ${category}: must be one of ${COOKIE_CONSENT_VALUES.join(
+        ", "
+      )}`;
+    }
+  }
+
+  return null;
+};
+
 const usersSchema = mongoose.Schema(
   {
     name: String,
@@ -44,6 +79,7 @@ const usersSchema = mongoose.Schema(
       ],
       default: "Good",
     },
+    cookie_consent: cookieConsentSchemaDefinition,
   },
   {
     timestamps: true,
@@ -54,4 +90,10 @@ usersSchema.index({ phone: 1 });
 
 const Users = mongoose.model("Users", usersSchema);
 
-export { usersSchema, Users };
+export {
+  usersSchema,
+  Users,
+  COOKIE_CONSENT_CATEGORIES,
+  COOKIE_CONSENT_VALUES,
+  validateCookieConsent,
+};

package/tsconfig.json

@@ -2,10 +2,6 @@
     "include": ["src/**/*"],
     "compilerOptions": {
       "allowJs": true,
-      // Don't type-check dependency .d.ts files (e.g. mongodb-memory-server's bundled
-      // mongodb types use AsyncDisposable/Symbol.asyncDispose from a newer lib). Our own
-      // src is still fully checked; this only skips node_modules declarations.
-      "skipLibCheck": true,
       // Generate d.ts files
       "declaration": true,
       "emitDeclarationOnly": true,

package/dist/models/passwordResetToken.d.ts

@@ -1,158 +0,0 @@
-export const passwordResetTokenSchema: mongoose.Schema<any, mongoose.Model<any, any, any, any, any, any>, {}, {}, {}, {}, {
-    timestamps: true;
-}, {
-    createdAt: NativeDate;
-    updatedAt: NativeDate;
-} & {
-    adminId: {
-        prototype?: mongoose.Types.ObjectId;
-        cacheHexString?: unknown;
-        generate?: {};
-        createFromTime?: {};
-        createFromHexString?: {};
-        createFromBase64?: {};
-        isValid?: {};
-    };
-    tokenHash: string;
-    used: boolean;
-    expiresAt: Date;
-}, mongoose.Document<unknown, {}, mongoose.FlatRecord<{
-    createdAt: NativeDate;
-    updatedAt: NativeDate;
-} & {
-    adminId: {
-        prototype?: mongoose.Types.ObjectId;
-        cacheHexString?: unknown;
-        generate?: {};
-        createFromTime?: {};
-        createFromHexString?: {};
-        createFromBase64?: {};
-        isValid?: {};
-    };
-    tokenHash: string;
-    used: boolean;
-    expiresAt: Date;
-}>> & mongoose.FlatRecord<{
-    createdAt: NativeDate;
-    updatedAt: NativeDate;
-} & {
-    adminId: {
-        prototype?: mongoose.Types.ObjectId;
-        cacheHexString?: unknown;
-        generate?: {};
-        createFromTime?: {};
-        createFromHexString?: {};
-        createFromBase64?: {};
-        isValid?: {};
-    };
-    tokenHash: string;
-    used: boolean;
-    expiresAt: Date;
-}> & {
-    _id: mongoose.Types.ObjectId;
-}>;
-export const PasswordResetToken: mongoose.Model<{
-    createdAt: NativeDate;
-    updatedAt: NativeDate;
-} & {
-    adminId: {
-        prototype?: mongoose.Types.ObjectId;
-        cacheHexString?: unknown;
-        generate?: {};
-        createFromTime?: {};
-        createFromHexString?: {};
-        createFromBase64?: {};
-        isValid?: {};
-    };
-    tokenHash: string;
-    used: boolean;
-    expiresAt: Date;
-}, {}, {}, {}, mongoose.Document<unknown, {}, {
-    createdAt: NativeDate;
-    updatedAt: NativeDate;
-} & {
-    adminId: {
-        prototype?: mongoose.Types.ObjectId;
-        cacheHexString?: unknown;
-        generate?: {};
-        createFromTime?: {};
-        createFromHexString?: {};
-        createFromBase64?: {};
-        isValid?: {};
-    };
-    tokenHash: string;
-    used: boolean;
-    expiresAt: Date;
-}> & {
-    createdAt: NativeDate;
-    updatedAt: NativeDate;
-} & {
-    adminId: {
-        prototype?: mongoose.Types.ObjectId;
-        cacheHexString?: unknown;
-        generate?: {};
-        createFromTime?: {};
-        createFromHexString?: {};
-        createFromBase64?: {};
-        isValid?: {};
-    };
-    tokenHash: string;
-    used: boolean;
-    expiresAt: Date;
-} & {
-    _id: mongoose.Types.ObjectId;
-}, mongoose.Schema<any, mongoose.Model<any, any, any, any, any, any>, {}, {}, {}, {}, {
-    timestamps: true;
-}, {
-    createdAt: NativeDate;
-    updatedAt: NativeDate;
-} & {
-    adminId: {
-        prototype?: mongoose.Types.ObjectId;
-        cacheHexString?: unknown;
-        generate?: {};
-        createFromTime?: {};
-        createFromHexString?: {};
-        createFromBase64?: {};
-        isValid?: {};
-    };
-    tokenHash: string;
-    used: boolean;
-    expiresAt: Date;
-}, mongoose.Document<unknown, {}, mongoose.FlatRecord<{
-    createdAt: NativeDate;
-    updatedAt: NativeDate;
-} & {
-    adminId: {
-        prototype?: mongoose.Types.ObjectId;
-        cacheHexString?: unknown;
-        generate?: {};
-        createFromTime?: {};
-        createFromHexString?: {};
-        createFromBase64?: {};
-        isValid?: {};
-    };
-    tokenHash: string;
-    used: boolean;
-    expiresAt: Date;
-}>> & mongoose.FlatRecord<{
-    createdAt: NativeDate;
-    updatedAt: NativeDate;
-} & {
-    adminId: {
-        prototype?: mongoose.Types.ObjectId;
-        cacheHexString?: unknown;
-        generate?: {};
-        createFromTime?: {};
-        createFromHexString?: {};
-        createFromBase64?: {};
-        isValid?: {};
-    };
-    tokenHash: string;
-    used: boolean;
-    expiresAt: Date;
-}> & {
-    _id: mongoose.Types.ObjectId;
-}>>;
-import mongoose from 'mongoose';
-//# sourceMappingURL=passwordResetToken.d.ts.map

package/dist/models/passwordResetToken.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"passwordResetToken.d.ts","sourceRoot":"","sources":["../../src/models/passwordResetToken.js"],"names":[],"mappings":"AAgBA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAQE;AAKF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAA0F;qBA7BrE,UAAU"}

package/dist/modules/audit/actions.d.ts

@@ -1,28 +0,0 @@
-/**
- * Auth/compliance audit action enum (auth-contracts #4 — EXACT strings, frozen).
- * Distinct domain from the measurement-lineage `Audit` model in
- * models/measurements.js: this tracks WHO did WHAT to admin/auth state, for the
- * government-compliance audit trail.
- *
- * Emit sites (in the services): login (success/failure), logout, forgot-password
- * (requested/completed), silent refresh, and the admin mutation sites
- * (create/update/delete, role.change when permissionName changes,
- * deactivate/reactivate when isActive toggles).
- */
-export const AUDIT_ACTIONS: Readonly<{
-    LOGIN_SUCCESS: "auth.login.success";
-    LOGIN_FAILURE: "auth.login.failure";
-    LOGOUT: "auth.logout";
-    PASSWORD_RESET_REQUESTED: "auth.password.reset.requested";
-    PASSWORD_RESET_COMPLETED: "auth.password.reset.completed";
-    TOKEN_REFRESH: "auth.token.refresh";
-    ADMIN_CREATE: "admin.create";
-    ADMIN_UPDATE: "admin.update";
-    ADMIN_DELETE: "admin.delete";
-    ADMIN_ROLE_CHANGE: "admin.role.change";
-    ADMIN_DEACTIVATE: "admin.deactivate";
-    ADMIN_REACTIVATE: "admin.reactivate";
-}>;
-/** Frozen list of all valid action strings — used as the AuditLog schema enum. */
-export const AUDIT_ACTION_VALUES: readonly ("auth.login.success" | "auth.login.failure" | "auth.logout" | "auth.password.reset.requested" | "auth.password.reset.completed" | "auth.token.refresh" | "admin.create" | "admin.update" | "admin.delete" | "admin.role.change" | "admin.deactivate" | "admin.reactivate")[];
-//# sourceMappingURL=actions.d.ts.map

package/dist/modules/audit/actions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../../src/modules/audit/actions.js"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH;;;;;;;;;;;;;GAaG;AAEH,kFAAkF;AAClF,yTAA+E"}

package/dist/modules/audit/auditLog.d.ts

@@ -1,32 +0,0 @@
-/**
- * Single canonical audit write path (auth-contracts #4).
- *
- *   writeAudit(entry) ──► AuditLog.create
- *                           │ ok            │ throws (db down, validation)
- *                           ▼               ▼
- *                        return true   logger.error + return false  (NEVER throws)
- *
- * An audit hiccup must not fail the request it is recording (e.g. a login). The
- * caller gets a boolean and decides; the failure is logged at error for compliance
- * follow-up. Inject the consuming service's logger via deps.logger (DI); it falls
- * back to a no-op rather than raw console so it honors the "no console" rule.
- *
- * @param {{action:string, actor?:object, resource?:object, outcome:string,
- *          reason?:string, metadata?:object, requestId?:string}} entry
- * @param {{ logger?: { error: Function } }} [deps]
- * @returns {Promise<boolean>} true if persisted, false if the write failed
- */
-export function writeAudit({ action, actor, resource, outcome, reason, metadata, requestId }?: {
-    action: string;
-    actor?: object;
-    resource?: object;
-    outcome: string;
-    reason?: string;
-    metadata?: object;
-    requestId?: string;
-}, { logger }?: {
-    logger?: {
-        error: Function;
-    };
-}): Promise<boolean>;
-//# sourceMappingURL=auditLog.d.ts.map

package/dist/modules/audit/auditLog.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auditLog.d.ts","sourceRoot":"","sources":["../../../src/modules/audit/auditLog.js"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;GAiBG;AACH,+FALW;IAAC,MAAM,EAAC,MAAM,CAAC;IAAC,KAAK,CAAC,EAAC,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAC,MAAM,CAAC;IAAC,OAAO,EAAC,MAAM,CAAC;IAC/D,MAAM,CAAC,EAAC,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAC,MAAM,CAAC;IAAC,SAAS,CAAC,EAAC,MAAM,CAAA;CAAC,eACrD;IAAE,MAAM,CAAC,EAAE;QAAE,KAAK,WAAU;KAAE,CAAA;CAAE,GAC9B,OAAO,CAAC,OAAO,CAAC,CAiB5B"}

package/dist/modules/audit/index.d.ts

@@ -1,4 +0,0 @@
-export { writeAudit } from "./auditLog.js";
-export { AUDIT_ACTIONS, AUDIT_ACTION_VALUES } from "./actions.js";
-export { AuditLog, auditLogSchema } from "./schema.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/modules/audit/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/modules/audit/index.js"],"names":[],"mappings":""}