@owlmeans/server-marketing-consent 0.1.18-rc.0

package/README.md

@@ -0,0 +1,15 @@
+<!-- owlmeans:agent-guidance:start -->
+## Agent guidance
+
+This package ships embedded agent skills under `agent-meta/`. After installing your
+`@owlmeans/*` packages, run the OwlMeans agent-skills installer to place them into
+your project's skill store (`.agents/skills/`):
+
+```sh
+npx @owlmeans/agent-skills@^0.1.18-rc.33
+```
+
+The embedded files are version-matched to this package release. Do not edit them
+directly — they are regenerated on each publish. To contribute guidance edits,
+open a PR against the source monorepo.
+<!-- owlmeans:agent-guidance:end -->

package/agent-meta/manifest.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": 2,
+  "package": "@owlmeans/server-marketing-consent",
+  "version": "0.1.18-rc.0",
+  "generatedAt": "2026-09-22T17:37:10.936Z",
+  "canonicalRepo": "https://github.com/owlmeans/common",
+  "entries": [
+    {
+      "kind": "skill",
+      "name": "server-marketing-consent",
+      "category": "package-specific",
+      "file": "skills/server-marketing-consent/SKILL.md",
+      "canonicalPath": ".agents/skills/server-marketing-consent/SKILL.md"
+    }
+  ]
+}

package/agent-meta/skills/server-marketing-consent/SKILL.md

@@ -0,0 +1,148 @@
+---
+name: server-marketing-consent
+description: How to use @owlmeans/server-marketing-consent — the database-agnostic MarketingConsentService (status/save/terms/purge/isGranted/observe over two resources resolved by alias) plus the guarded status/save/terms entrypoint handlers for @owlmeans/marketing-consent's protocol tree. Auto-invoked when registering the marketing-consent service, writing a Mongo/Postgres extension that stores its two records, saving or reading a person's consent decisions server-side, or gating a send/share on a consent.
+user-invocable: false
+---
+<!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
+
+# @owlmeans/server-marketing-consent
+
+**Layer:** Server
+**Install:** `"@owlmeans/server-marketing-consent": "^0.1.18-rc.0"` in `dependencies`
+**Contracts:** `@owlmeans/marketing-consent` — the catalogue, `consentStatus`, the protocol tree, the error family
+
+## Key Exports
+
+| Export | Description |
+|--------|-------------|
+| `RES_MARKETING_CONSENT_STATE` (`marketing-consent-state`) · `RES_MARKETING_CONSENT_LOG` (`marketing-consent-log`) | Resource aliases — never rename, a later Mongo/Postgres extension's generated resource file names derive from these exact strings |
+| `MarketingConsentStateRecord` · `MarketingConsentLogRecord` · `MarketingConsentStateSchema` · `MarketingConsentLogSchema` | The two record shapes and their AJV `JSONSchemaType` schemas — shared with the (not yet built) `@owlmeans/marketing-consent-mongo` / `@owlmeans/marketing-consent-postgres` extensions, which import them rather than redeclaring |
+| `subjectOf(req)` · `subjectKey(subject)` · `MarketingConsentSubject` | Who a decision is recorded for, and its one string record id |
+| `makeMarketingConsentService(opts?)` · `appendMarketingConsentService(ctx, opts?)` | Build/register the `MarketingConsentService` |
+| `MarketingConsentService` | `definitions`, `status`, `save`, `recordTerms`, `isGranted`, `purge`, `observe` |
+| `marketingConsentStatus` · `saveMarketingConsent` · `recordTermsAcceptance` | Handler makers for `makeMarketingConsentProtocols().status/save/terms` |
+| `serveMarketingConsentEntrypoints(protocols, opts?)` | Binds `status`/`save`/`terms` — `base` and `screen` carry no server handler of their own |
+
+## Wiring
+
+```ts
+import { appendMarketingConsentService, serveMarketingConsentEntrypoints } from '@owlmeans/server-marketing-consent'
+import { makeMarketingConsentProtocols } from '@owlmeans/marketing-consent'
+
+// shared package
+export const marketingConsentProtocols = makeMarketingConsentProtocols({ parent: appProtocols.account.base })
+
+// backend context — after the Mongo/Postgres extension has registered the two resources
+appendMarketingConsentService(context, { config: appMarketingConsentConfig })
+
+// API process
+context.registerEntrypoints(serveMarketingConsentEntrypoints(marketingConsentProtocols))
+```
+
+`appendMarketingConsentService` is the same "an app that cares provides its own; this is the
+working default" shape as `AUTH_CACHE`/`appendOAuthServer`: it registers nothing but the
+`MarketingConsentService` itself (LazyService, `createLazyService`) and is a no-op if the alias is
+already registered. The TWO RESOURCES it reads and writes (`RES_MARKETING_CONSENT_STATE`,
+`RES_MARKETING_CONSENT_LOG`) are resolved BY ALIAS from the context lazily, inside each method call
+— this package never imports `mongo-resource`/`postgres-resource` and never constructs them. A
+Mongo or Postgres extension package registers the concrete resources at those two aliases
+separately, and `appendMarketingConsentService` must run after that registration (resource lookup
+is lazy per call, so registration order relative to `init()` does not matter — only "resource
+exists under this alias before the first `status`/`save`/`terms` call" does).
+
+## Why `decisions` is an ARRAY, never an object keyed by consent key
+
+This is the single most important gotcha in this package. `MarketingConsentStateRecord.decisions`
+holds `MarketingConsentDecision[]`, one entry per key, folded down to the latest per key on read
+(`consentStatus`). It is never stored as `{ [key]: MarketingConsentDecision }`, because every
+standard consent key is DOTTED (`marketing.email`, `trackers.advertising`) and a dotted key inside
+an object field is read as a PATH by both Mongo's dot-notation queries (`{'decisions.marketing.email':
+...}` reaches into a nested `email` field under a nested `marketing` field, not a literal key) and
+Postgres jsonb path operators (`->` chains on segments). An object-keyed shape works in a quick
+manual test with one key and breaks the moment a second dotted key is added — the two fields
+silently merge into one nested tree instead of staying two siblings. Keep it an array in every
+storage backend; fold by key only in memory, in `consentStatus` or in a resource's own read path.
+
+## `subjectOf` never uses the slug
+
+```ts
+export const subjectOf = (req: AbstractRequest): MarketingConsentSubject => {
+  if (req.auth?.userId == null || req.auth.userId === '') throw new AuthForbidden(...)
+  return { userId: req.auth.userId, profileId: req.auth.profileId, entityId: req.entity?.id }
+}
+```
+
+`entityId` reads `req.entity?.id` ONLY — never `requireEntityKey(req)`, never a slug off the token.
+A deployment with no organization concept at all (a generated target app serving its own end users,
+say) registers no entity resolver, so `req.entity` stays `undefined` and `entityId` is simply
+absent — a valid, expected shape this package must never throw on. `subjectKey(subject)` —
+`` `${entityId ?? ''}|${userId}|${profileId ?? ''}` `` — is the state record's own `id`: one record
+per subject, looked up with a plain `load(id)`, no secondary index needed for the common read path.
+
+## `isGranted` is not `consentStatus`'s display `granted`
+
+`status(subject)` returns what `consentStatus` computes for a settings screen: an unanswered
+`opt-out` item (e.g. `data.partners`) reads `granted: true` there — the "on until you turn it off"
+copy an unauthenticated-feeling first visit shows. `isGranted(subject, key)` is a DIFFERENT
+question — the SERVER-SIDE gate a send/share actually checks before doing something — and it must
+never honor that display default: an item whose `status` is `'new'` or `'revised'` has never been
+affirmatively answered by this person, so `isGranted` answers `false` for it regardless of what
+`consentStatus.granted` says, and `false` too for a key `definitions()` does not carry at all
+(unknown or disabled). Only a `'current'` (i.e. actually saved, unrevised) item's `granted` is
+trusted. Getting this backwards — wiring a send to `status(...).items.find(...).granted` instead of
+`isGranted(...)` — sends to people who opened the settings screen and changed nothing.
+
+## `save` / `recordTerms` — the upsert and the log
+
+- `save` rejects the whole request (`UnknownMarketingConsentError`) if ANY submitted key is not in
+  `definitions()` — never silently drops one; a dropped decision is a decision the person believes
+  they made and did not (`@owlmeans/marketing-consent`'s own skill).
+- Each submitted decision becomes ONE `MarketingConsentLogRecord` (`kind: 'consent'`), appended —
+  never updated, never deleted — then the state record's `decisions` array has that key's entry
+  REPLACED in place (by key) and the rest left untouched; a second save for the same key never
+  duplicates it, it supersedes it. `recordTerms` mirrors this for the state record's single `terms`
+  field, without touching `decisions`.
+- The state record's create-vs-update race is handled the same way
+  `@owlmeans/server-auth-session`'s Redis manager handles a natural-id create race: try `create`,
+  and on `RecordExists` reload and `save` instead.
+
+## The append-only log as GDPR Art. 7(1) evidence
+
+`MarketingConsentLogRecord` rows are never updated or deleted, including by `purge()` — `purge`
+clears only the current-state record (so future `status`/`isGranted` reads see a fresh subject);
+the log keeps every decision and terms acceptance ever recorded, because that history is what
+"demonstrates consent" under GDPR Art. 7(1) and is grounds for the whole design (`@owlmeans/
+marketing-consent`'s own skill's legal matrix). A retention/erasure policy for the log itself is a
+product decision this package does not make.
+
+## `observe`
+
+`save`/`recordTerms` call every registered listener, in registration order, each awaited and each
+wrapped in its own try/catch — one listener's failure never blocks the write or stops the next
+listener (the same shape `@owlmeans/server-auth-identity`'s `IdentityEventsService.
+propagateEntityCreated` uses). Use it to sync a `MarketingConsentBridge` (a cookie-consent widget) or
+to fan a decision out to a downstream system; never to do work the write itself depends on.
+
+## Testing
+
+Category B: `bun test ./tests` with real `@owlmeans/static-resource` stores for both resources, no
+Mongo/Postgres (`tests/context.ts` builds the context and calls `appendMarketingConsentService`
+directly — the app never calls `context.init()`/`configure()` in this style of test, since a
+`Resource` lookup is synchronous and a `LazyService`'s `lazyInit` fires the first time
+`context.service(alias)` is read). `tests/service.spec.ts` covers the upsert-in-place save, the
+`isGranted` vs display-`granted` distinction (the single most important test in the package),
+`purge` leaving the log untouched, and a throwing observer never blocking a write.
+`tests/handlers.spec.ts` binds the three handlers and asserts `save`/`terms` refuse an
+`AuthroizationType.AuthToken` request (`refuseTokenAuth`) while `status` never does.
+`tests/subject.spec.ts` covers the no-`entity`-resolver case explicitly.
+
+## Related
+
+- `@owlmeans/marketing-consent` — the catalogue, `consentStatus`, the protocol tree (read its skill
+  first; this package builds on it and repeats nothing it already documents)
+- `@owlmeans/server-oauth`, `@owlmeans/server-auth-token` — `refuseTokenAuth`, the session-guarded
+  handler shape this package's `save`/`terms` copy
+- `@owlmeans/server-auth-identity` — `IdentityEventsService`, the `observe`/listener idiom this
+  package's `observe` mirrors
+- `@owlmeans/marketing-consent-mongo`, `@owlmeans/marketing-consent-postgres` — later workstreams,
+  not built yet, that register the two resources this service reads by alias

package/build/consts.d.ts

@@ -0,0 +1,12 @@
+/**
+ * The two resource aliases a Mongo/Postgres extension package (`@owlmeans/marketing-consent-mongo`,
+ * `@owlmeans/marketing-consent-postgres` — later workstreams, not built yet) registers its concrete
+ * resources under.
+ *
+ * These string values matter beyond this package: a target project's generated resource FILE names
+ * are derived from an alias via a deterministic `resourceAlias()` helper elsewhere in the monorepo
+ * (`entity/type` -> `entity-type`). Keep them exactly as declared here.
+ */
+export declare const RES_MARKETING_CONSENT_STATE = "marketing-consent-state";
+export declare const RES_MARKETING_CONSENT_LOG = "marketing-consent-log";
+//# sourceMappingURL=consts.d.ts.map

package/build/consts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,4BAA4B,CAAA;AACpE,eAAO,MAAM,yBAAyB,0BAA0B,CAAA"}

package/build/consts.js

@@ -0,0 +1,12 @@
+/**
+ * The two resource aliases a Mongo/Postgres extension package (`@owlmeans/marketing-consent-mongo`,
+ * `@owlmeans/marketing-consent-postgres` — later workstreams, not built yet) registers its concrete
+ * resources under.
+ *
+ * These string values matter beyond this package: a target project's generated resource FILE names
+ * are derived from an alias via a deterministic `resourceAlias()` helper elsewhere in the monorepo
+ * (`entity/type` -> `entity-type`). Keep them exactly as declared here.
+ */
+export const RES_MARKETING_CONSENT_STATE = 'marketing-consent-state';
+export const RES_MARKETING_CONSENT_LOG = 'marketing-consent-log';
+//# sourceMappingURL=consts.js.map

package/build/consts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.js","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAA;AACpE,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAA"}

package/build/handlers.d.ts

@@ -0,0 +1,20 @@
+import type { MarketingConsentEntrypoints } from '@owlmeans/marketing-consent';
+export interface MarketingConsentHandlerOptions {
+    serviceAlias?: string;
+    /** Let an OAuth-minted access token save decisions or record terms too. Defaults to `false` —
+     * `status` is never token-refused regardless of this option. */
+    allowAccessTokens?: boolean;
+}
+export declare const marketingConsentStatus: (protocol: MarketingConsentEntrypoints['status'], opts?: MarketingConsentHandlerOptions) => import("@owlmeans/server-entrypoint").BoundEntrypointHandler<import("@owlmeans/entrypoint").EntrypointProtocol<{}, import("@owlmeans/marketing-consent").MarketingConsentStatusView>>;
+export declare const saveMarketingConsent: (protocol: MarketingConsentEntrypoints['save'], opts?: MarketingConsentHandlerOptions) => import("@owlmeans/server-entrypoint").BoundEntrypointHandler<import("@owlmeans/entrypoint").EntrypointProtocol<{
+    body: import("@owlmeans/marketing-consent").SaveMarketingConsentRequest;
+}, {
+    ok: boolean;
+    status: import("@owlmeans/marketing-consent").MarketingConsentStatusView;
+}>>;
+export declare const recordTermsAcceptance: (protocol: MarketingConsentEntrypoints['terms'], opts?: MarketingConsentHandlerOptions) => import("@owlmeans/server-entrypoint").BoundEntrypointHandler<import("@owlmeans/entrypoint").EntrypointProtocol<{
+    body: import("@owlmeans/marketing-consent").TermsAcceptance;
+}, {
+    ok: boolean;
+}>>;
+//# sourceMappingURL=handlers.d.ts.map

package/build/handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../src/handlers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAA;AAM9E,MAAM,WAAW,8BAA8B;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;oEACgE;IAChE,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAYD,eAAO,MAAM,sBAAsB,aACvB,2BAA2B,CAAC,QAAQ,CAAC,SAAQ,8BAA8B,0LAEF,CAAA;AAErF,eAAO,MAAM,oBAAoB,aACrB,2BAA2B,CAAC,MAAM,CAAC,SAAQ,8BAA8B;;;;;GAKnF,CAAA;AAEF,eAAO,MAAM,qBAAqB,aACtB,2BAA2B,CAAC,OAAO,CAAC,SAAQ,8BAA8B;;;;GAKpF,CAAA"}

package/build/handlers.js

@@ -0,0 +1,23 @@
+import { MARKETING_CONSENT_SERVICE } from '@owlmeans/marketing-consent';
+import { handlers } from '@owlmeans/server-api';
+import { refuseTokenAuth } from '@owlmeans/server-auth-token';
+import { subjectOf } from './subject.js';
+const serviceOf = (context, opts) => context.service(opts?.serviceAlias ?? MARKETING_CONSENT_SERVICE);
+/** GPC ("Sec-GPC: 1") read as a plain header — Fastify normalizes header names to lower case, and
+ * a repeated header arrives as an array, so only its first value is read. */
+const gpcOf = (headers) => {
+    const raw = headers['sec-gpc'];
+    return (Array.isArray(raw) ? raw[0] : raw) === '1';
+};
+export const marketingConsentStatus = (protocol, opts = {}) => handlers().request(protocol, async (req, context) => serviceOf(context, opts).status(subjectOf(req), { gpc: gpcOf(req.headers ?? {}) }));
+export const saveMarketingConsent = (protocol, opts = {}) => handlers().body(protocol, async (payload, context, req) => {
+    if (opts.allowAccessTokens !== true)
+        refuseTokenAuth(req, 'marketing-consent-save');
+    return serviceOf(context, opts).save(subjectOf(req), payload);
+});
+export const recordTermsAcceptance = (protocol, opts = {}) => handlers().body(protocol, async (payload, context, req) => {
+    if (opts.allowAccessTokens !== true)
+        refuseTokenAuth(req, 'marketing-consent-terms');
+    return serviceOf(context, opts).recordTerms(subjectOf(req), payload);
+});
+//# sourceMappingURL=handlers.js.map

package/build/handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.js","sourceRoot":"","sources":["../src/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAA;AAEvE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAE7D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AASxC,MAAM,SAAS,GAAG,CAAC,OAAgC,EAAE,IAAqC,EAA2B,EAAE,CACrH,OAAO,CAAC,OAAO,CAA0B,IAAI,EAAE,YAAY,IAAI,yBAAyB,CAAC,CAAA;AAE3F;6EAC6E;AAC7E,MAAM,KAAK,GAAG,CAAC,OAAsD,EAAW,EAAE;IAChF,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC9B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,CAAA;AACpD,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,QAA+C,EAAE,IAAI,GAAmC,EAAE,EAC1F,EAAE,CAAC,QAAQ,EAA2B,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAChF,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;AAErF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,QAA6C,EAAE,IAAI,GAAmC,EAAE,EACxF,EAAE,CAAC,QAAQ,EAA2B,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;IACtF,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI;QAAE,eAAe,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAA;IAEnF,OAAO,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAA;AAC/D,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,QAA8C,EAAE,IAAI,GAAmC,EAAE,EACzF,EAAE,CAAC,QAAQ,EAA2B,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;IACtF,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI;QAAE,eAAe,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAA;IAEpF,OAAO,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAA;AACtE,CAAC,CAAC,CAAA"}

package/build/helper.d.ts

@@ -0,0 +1,19 @@
+import type { MarketingConsentEntrypoints } from '@owlmeans/marketing-consent';
+import type { MarketingConsentHandlerOptions } from './handlers.js';
+/**
+ * Bind this package's handlers to a tree declared by `makeMarketingConsentProtocols` — one binding
+ * per protocol that needs a server implementation. `base` and `screen` carry no handler of their
+ * own (a mounting anchor and a frontend address, the same shape as `@owlmeans/oauth`'s own consent
+ * screens) and are left for the application's route tree to materialize.
+ */
+export declare const serveMarketingConsentEntrypoints: (protocols: MarketingConsentEntrypoints, opts?: MarketingConsentHandlerOptions) => (import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
+    body: import("@owlmeans/marketing-consent").SaveMarketingConsentRequest;
+}, {
+    ok: boolean;
+    status: import("@owlmeans/marketing-consent").MarketingConsentStatusView;
+}>> | import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
+    body: import("@owlmeans/marketing-consent").TermsAcceptance;
+}, {
+    ok: boolean;
+}>> | import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{}, import("@owlmeans/marketing-consent").MarketingConsentStatusView>>)[];
+//# sourceMappingURL=helper.d.ts.map

package/build/helper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAA;AAE9E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAA;AAEnE;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,cAChC,2BAA2B,SAAQ,8BAA8B;;;;;;;;;gMAK7E,CAAA"}

package/build/helper.js

@@ -0,0 +1,14 @@
+import { bind } from '@owlmeans/server-entrypoint';
+import { marketingConsentStatus, recordTermsAcceptance, saveMarketingConsent } from './handlers.js';
+/**
+ * Bind this package's handlers to a tree declared by `makeMarketingConsentProtocols` — one binding
+ * per protocol that needs a server implementation. `base` and `screen` carry no handler of their
+ * own (a mounting anchor and a frontend address, the same shape as `@owlmeans/oauth`'s own consent
+ * screens) and are left for the application's route tree to materialize.
+ */
+export const serveMarketingConsentEntrypoints = (protocols, opts = {}) => [
+    bind(protocols.status, marketingConsentStatus(protocols.status, opts)),
+    bind(protocols.save, saveMarketingConsent(protocols.save, opts)),
+    bind(protocols.terms, recordTermsAcceptance(protocols.terms, opts)),
+];
+//# sourceMappingURL=helper.js.map

package/build/helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helper.js","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAElD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAGnG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC9C,SAAsC,EAAE,IAAI,GAAmC,EAAE,EACjF,EAAE,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,sBAAsB,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;CACpE,CAAA"}

package/build/index.d.ts

@@ -0,0 +1,7 @@
+export * from './consts.js';
+export * from './model.js';
+export * from './subject.js';
+export * from './service.js';
+export * from './handlers.js';
+export * from './helper.js';
+//# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA"}

package/build/index.js

@@ -0,0 +1,7 @@
+export * from './consts.js';
+export * from './model.js';
+export * from './subject.js';
+export * from './service.js';
+export * from './handlers.js';
+export * from './helper.js';
+//# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA"}

package/build/model.d.ts

@@ -0,0 +1,64 @@
+import type { JSONSchemaType } from 'ajv';
+import type { ResourceRecord } from '@owlmeans/resource';
+import type { MarketingConsentDecision, MarketingConsentMode, MarketingConsentSource, TermsDocumentRef } from '@owlmeans/marketing-consent';
+/**
+ * One subject's saved decisions, one record per subject (`id` = `subjectKey(subject)`).
+ *
+ * `decisions` is an ARRAY, never an object keyed by consent key. A dotted key such as
+ * `"marketing.email"` is read as a PATH by both Mongo dot-notation queries and Postgres jsonb path
+ * operators — an object-keyed shape breaks the moment a second consent key is added. This is the
+ * single most important shape decision in this package; the Mongo/Postgres extensions that will
+ * store this record must not "flatten" it into an object for convenience.
+ */
+export interface MarketingConsentStateRecord extends ResourceRecord {
+    id: string;
+    /** `subjectKey(subjectOf(req))` — see `./subject.js`. Also this record's own `id`. */
+    subject: string;
+    userId: string;
+    profileId?: string;
+    entityId?: string;
+    decisions: MarketingConsentDecision[];
+    terms?: {
+        documents: TermsDocumentRef[];
+        notices?: TermsDocumentRef[];
+        version: string;
+        locale?: string;
+        acceptedAt: string;
+    };
+    gpc?: boolean;
+    createdAt: string;
+    updatedAt: string;
+}
+/**
+ * Append-only evidence of every decision and terms acceptance ever recorded — GDPR Art. 7(1)
+ * "demonstrate consent" material. Never updated or deleted, including on `purge()`: only the
+ * current-state record is cleared there.
+ */
+export interface MarketingConsentLogRecord extends ResourceRecord {
+    id: string;
+    subject: string;
+    userId: string;
+    profileId?: string;
+    entityId?: string;
+    kind: 'consent' | 'terms';
+    /** Present when `kind === 'consent'`. */
+    key?: string;
+    granted?: boolean;
+    revisedAt?: string;
+    mode?: MarketingConsentMode;
+    /** Present when `kind === 'terms'`. */
+    documents?: TermsDocumentRef[];
+    notices?: TermsDocumentRef[];
+    version?: string;
+    decidedAt: string;
+    source: MarketingConsentSource;
+    locale?: string;
+    gpc?: boolean;
+}
+/**
+ * Shared with the Mongo/Postgres extension packages this schema is built for — imported by them,
+ * never duplicated.
+ */
+export declare const MarketingConsentStateSchema: JSONSchemaType<MarketingConsentStateRecord>;
+export declare const MarketingConsentLogSchema: JSONSchemaType<MarketingConsentLogRecord>;
+//# sourceMappingURL=model.d.ts.map

package/build/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,KAAK,CAAA;AACzC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EACV,wBAAwB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,gBAAgB,EACzF,MAAM,6BAA6B,CAAA;AAEpC;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA4B,SAAQ,cAAc;IACjE,EAAE,EAAE,MAAM,CAAA;IACV,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,wBAAwB,EAAE,CAAA;IACrC,KAAK,CAAC,EAAE;QACN,SAAS,EAAE,gBAAgB,EAAE,CAAA;QAC7B,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAA;QAC5B,OAAO,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,UAAU,EAAE,MAAM,CAAA;KACnB,CAAA;IACD,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAA0B,SAAQ,cAAc;IAC/D,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,SAAS,GAAG,OAAO,CAAA;IACzB,yCAAyC;IACzC,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,oBAAoB,CAAA;IAC3B,uCAAuC;IACvC,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAC9B,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,sBAAsB,CAAA;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AA6BD;;;GAGG;AACH,eAAO,MAAM,2BAA2B,EAAE,cAAc,CAAC,2BAA2B,CA4BnF,CAAA;AAED,eAAO,MAAM,yBAAyB,EAAE,cAAc,CAAC,yBAAyB,CAuB/E,CAAA"}

package/build/model.js

@@ -0,0 +1,83 @@
+// `@owlmeans/marketing-consent`'s own `TermsDocumentRefSchema` (in its `src/schemas.ts`) is not
+// exported, so the shape is re-declared here rather than imported.
+const TermsDocumentRefSchema = {
+    type: 'object',
+    properties: {
+        key: { type: 'string', minLength: 1, maxLength: 128 },
+        href: { type: 'string', minLength: 1, maxLength: 2048 },
+        revisedAt: { type: 'string', nullable: true },
+    },
+    required: ['key', 'href'],
+    additionalProperties: false,
+};
+const MarketingConsentDecisionSchema = {
+    type: 'object',
+    properties: {
+        key: { type: 'string', minLength: 1, maxLength: 64 },
+        granted: { type: 'boolean' },
+        revisedAt: { type: 'string', minLength: 1 },
+        mode: { type: 'string', enum: ['opt-in', 'opt-out'] },
+        decidedAt: { type: 'string', minLength: 1 },
+        source: { type: 'string', enum: ['sign-in', 'settings', 'cookie', 'api'] },
+    },
+    required: ['key', 'granted', 'revisedAt', 'mode', 'decidedAt', 'source'],
+    additionalProperties: false,
+};
+/**
+ * Shared with the Mongo/Postgres extension packages this schema is built for — imported by them,
+ * never duplicated.
+ */
+export const MarketingConsentStateSchema = {
+    type: 'object',
+    properties: {
+        id: { type: 'string', minLength: 1 },
+        subject: { type: 'string', minLength: 1 },
+        userId: { type: 'string', minLength: 1 },
+        profileId: { type: 'string', nullable: true },
+        entityId: { type: 'string', nullable: true },
+        decisions: { type: 'array', items: MarketingConsentDecisionSchema },
+        terms: {
+            type: 'object',
+            nullable: true,
+            properties: {
+                documents: { type: 'array', items: TermsDocumentRefSchema },
+                notices: { type: 'array', items: TermsDocumentRefSchema, nullable: true },
+                version: { type: 'string', minLength: 1 },
+                locale: { type: 'string', nullable: true },
+                acceptedAt: { type: 'string', minLength: 1 },
+            },
+            required: ['documents', 'version', 'acceptedAt'],
+            additionalProperties: false,
+        },
+        gpc: { type: 'boolean', nullable: true },
+        createdAt: { type: 'string', minLength: 1 },
+        updatedAt: { type: 'string', minLength: 1 },
+    },
+    required: ['id', 'subject', 'userId', 'decisions', 'createdAt', 'updatedAt'],
+    additionalProperties: false,
+};
+export const MarketingConsentLogSchema = {
+    type: 'object',
+    properties: {
+        id: { type: 'string', minLength: 1 },
+        subject: { type: 'string', minLength: 1 },
+        userId: { type: 'string', minLength: 1 },
+        profileId: { type: 'string', nullable: true },
+        entityId: { type: 'string', nullable: true },
+        kind: { type: 'string', enum: ['consent', 'terms'] },
+        key: { type: 'string', nullable: true },
+        granted: { type: 'boolean', nullable: true },
+        revisedAt: { type: 'string', nullable: true },
+        mode: { type: 'string', enum: ['opt-in', 'opt-out'], nullable: true },
+        documents: { type: 'array', items: TermsDocumentRefSchema, nullable: true },
+        notices: { type: 'array', items: TermsDocumentRefSchema, nullable: true },
+        version: { type: 'string', nullable: true },
+        decidedAt: { type: 'string', minLength: 1 },
+        source: { type: 'string', enum: ['sign-in', 'settings', 'cookie', 'api'] },
+        locale: { type: 'string', nullable: true },
+        gpc: { type: 'boolean', nullable: true },
+    },
+    required: ['id', 'subject', 'userId', 'kind', 'decidedAt', 'source'],
+    additionalProperties: false,
+};
+//# sourceMappingURL=model.js.map

package/build/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AA8DA,gGAAgG;AAChG,mEAAmE;AACnE,MAAM,sBAAsB,GAAqC;IAC/D,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;QACrD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;QACvD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC9C;IACD,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,KAAK;CAC5B,CAAA;AAED,MAAM,8BAA8B,GAA6C;IAC/E,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;QACpD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC5B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC3C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;QACrD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE;KAC3E;IACD,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC;IACxE,oBAAoB,EAAE,KAAK;CAC5B,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAgD;IACtF,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACpC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACzC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACxC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC5C,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,8BAA8B,EAAE;QACnE,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE;gBACV,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE;gBAC3D,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACzE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACzC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC1C,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;aAC7C;YACD,QAAQ,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,CAAC;YAChD,oBAAoB,EAAE,KAAK;SAC5B;QACD,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;QACxC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC3C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;KAC5C;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC;IAC5E,oBAAoB,EAAE,KAAK;CAC5B,CAAA;AAED,MAAM,CAAC,MAAM,yBAAyB,GAA8C;IAClF,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACpC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACzC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACxC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC5C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE;QACpD,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC5C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;QACrE,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC3E,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC3C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE;QAC1E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC1C,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;KACzC;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC;IACpE,oBAAoB,EAAE,KAAK;CAC5B,CAAA"}

package/build/service.d.ts

@@ -0,0 +1,56 @@
+import type { LazyService } from '@owlmeans/context';
+import type { MarketingConsentConfig, MarketingConsentDecision, MarketingConsentDefinition, MarketingConsentSource, MarketingConsentStatusView, SaveMarketingConsentRequest, TermsAcceptance } from '@owlmeans/marketing-consent';
+import type { ServerConfig, ServerContext } from '@owlmeans/server-context';
+import type { MarketingConsentSubject } from './subject.js';
+export type MarketingConsentContext = ServerContext<ServerConfig>;
+export type MarketingConsentObserver = (event: {
+    subject: MarketingConsentSubject;
+    decisions: MarketingConsentDecision[];
+}) => void | Promise<void>;
+export interface MarketingConsentService extends LazyService {
+    /** The effective catalogue (`resolveMarketingConsents`), computed once and memoized. */
+    definitions(): MarketingConsentDefinition[];
+    status(subject: MarketingConsentSubject, opts?: {
+        gpc?: boolean;
+    }): Promise<MarketingConsentStatusView>;
+    save(subject: MarketingConsentSubject, request: SaveMarketingConsentRequest | (Omit<SaveMarketingConsentRequest, 'source'> & {
+        source: 'api';
+    })): Promise<{
+        ok: true;
+        status: MarketingConsentStatusView;
+    }>;
+    recordTerms(subject: MarketingConsentSubject, acceptance: TermsAcceptance, opts?: {
+        source?: MarketingConsentSource;
+    }): Promise<{
+        ok: true;
+    }>;
+    /**
+     * The SERVER-SIDE gate a send/share checks — the SAVED, CONFIRMED answer only. An item still
+     * `'new'` or `'revised'` has never been affirmatively answered by this person, so it reads as
+     * NOT granted here even where `consentStatus`'s own `granted` defaults an opt-out item to `true`
+     * for DISPLAY purposes.
+     */
+    isGranted(subject: MarketingConsentSubject, key: string, opts?: {
+        gpc?: boolean;
+    }): Promise<boolean>;
+    /** Clears the current-state record. Log rows stay — they are the append-only compliance evidence. */
+    purge(subject: MarketingConsentSubject): Promise<void>;
+    observe(listener: MarketingConsentObserver): void;
+}
+export interface MakeMarketingConsentServiceOptions {
+    alias?: string;
+    /** Resource alias holding one current-state record per subject. Defaults to `RES_MARKETING_CONSENT_STATE`. */
+    state?: string;
+    /** Resource alias holding the append-only log. Defaults to `RES_MARKETING_CONSENT_LOG`. */
+    log?: string;
+    config?: MarketingConsentConfig;
+}
+/**
+ * Build the `MarketingConsentService`. Database-agnostic: both resources are resolved BY ALIAS
+ * from the context lazily, inside each method call — never imported or constructed here. A
+ * Mongo/Postgres extension package registers the actual resources at those aliases separately.
+ */
+export declare const makeMarketingConsentService: (opts?: MakeMarketingConsentServiceOptions) => MarketingConsentService;
+/** Register the service, unless the application already registered its own under this alias. */
+export declare const appendMarketingConsentService: (context: MarketingConsentContext, opts?: MakeMarketingConsentServiceOptions) => void;
+//# sourceMappingURL=service.d.ts.map

package/build/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAIpD,OAAO,KAAK,EACV,sBAAsB,EAAE,wBAAwB,EAAE,0BAA0B,EAC5E,sBAAsB,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,eAAe,EACjG,MAAM,6BAA6B,CAAA;AAGpC,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAI3E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAE3D,MAAM,MAAM,uBAAuB,GAAG,aAAa,CAAC,YAAY,CAAC,CAAA;AAEjE,MAAM,MAAM,wBAAwB,GAClC,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,uBAAuB,CAAC;IAAC,SAAS,EAAE,wBAAwB,EAAE,CAAA;CAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAE9G,MAAM,WAAW,uBAAwB,SAAQ,WAAW;IAC1D,wFAAwF;IACxF,WAAW,IAAI,0BAA0B,EAAE,CAAA;IAC3C,MAAM,CAAC,OAAO,EAAE,uBAAuB,EAAE,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAA;IACvG,IAAI,CACF,OAAO,EAAE,uBAAuB,EAChC,OAAO,EAAE,2BAA2B,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,QAAQ,CAAC,GAAG;QAAE,MAAM,EAAE,KAAK,CAAA;KAAE,CAAC,GACvG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,0BAA0B,CAAA;KAAE,CAAC,CAAA;IAC5D,WAAW,CACT,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,sBAAsB,CAAA;KAAE,GACxG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAA;IACxB;;;;;OAKG;IACH,SAAS,CAAC,OAAO,EAAE,uBAAuB,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACpG,qGAAqG;IACrG,KAAK,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtD,OAAO,CAAC,QAAQ,EAAE,wBAAwB,GAAG,IAAI,CAAA;CAClD;AAED,MAAM,WAAW,kCAAkC;IACjD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,8GAA8G;IAC9G,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,2FAA2F;IAC3F,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,sBAAsB,CAAA;CAChC;AAID;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,UAChC,kCAAkC,KACvC,uBAuJF,CAAA;AAED,gGAAgG;AAChG,eAAO,MAAM,6BAA6B,YAC/B,uBAAuB,SAAQ,kCAAkC,KACzE,IAKF,CAAA"}