@owlmeans/server-marketing-consent 0.1.18-rc.8 → 0.1.18

package/README.md

@@ -1,3 +1,184 @@
+# @owlmeans/server-marketing-consent
+
+The server half of `@owlmeans/marketing-consent`: a database-agnostic `MarketingConsentService`
+(status, save, terms acceptance, the `isGranted` send gate, purge, observers) over two resources it
+resolves by alias, plus the `status` / `save` / `terms` handlers for the protocol tree from
+`makeMarketingConsentProtocols`. A backend uses it when people record marketing or data-use consent
+and terms acceptance through the API, or when server code must check a consent before sending or
+sharing. It stores nothing by itself: register the resources with
+`@owlmeans/marketing-consent-mongo` or `@owlmeans/marketing-consent-postgres`. Pure catalogue and
+status logic without a server lives in `@owlmeans/marketing-consent`; the screens are
+`@owlmeans/web-marketing-consent`.
+
+## Installation
+
+```bash
+bun add @owlmeans/server-marketing-consent@^0.1.18
+```
+
+## Concepts
+
+- **Subject** — `MarketingConsentSubject` `{ userId, profileId?, entityId? }`, read from an
+  authenticated request. `entityId` comes only from `req.entity?.id`; an app without organization
+  entities simply has none.
+- **Subject key** — `` `${entityId ?? ''}|${userId}|${profileId ?? ''}` ``, stored in the state
+  record's `subject` field. Records are addressed by `subject`, never by `id` (the backend mints
+  `id`).
+- **State record** — `MarketingConsentStateRecord` at `RES_MARKETING_CONSENT_STATE`: one row per
+  subject holding the latest decision per key (`decisions` is an array) and the last terms
+  acceptance.
+- **Log record** — `MarketingConsentLogRecord` at `RES_MARKETING_CONSENT_LOG`: append-only evidence
+  of every decision (`kind: 'consent'`) and terms acceptance (`kind: 'terms'`). Never updated or
+  deleted.
+- **Send gate** — `isGranted(subject, key)` trusts only a saved, unrevised (`current`) answer; the
+  display `granted` from `status()` defaults unanswered opt-out items to `true` and must not gate a
+  send.
+
+## Usage
+
+### Register storage, the service and the handlers
+
+```typescript
+import { makeMarketingConsentProtocols } from '@owlmeans/marketing-consent'
+import { appendMarketingConsentPostgres } from '@owlmeans/marketing-consent-postgres'
+import { appendMarketingConsentService, serveMarketingConsentEntrypoints } from '@owlmeans/server-marketing-consent'
+
+// shared package
+export const marketingConsentProtocols = makeMarketingConsentProtocols({ parent: appProtocols.account.base })
+
+// backend context
+appendMarketingConsentPostgres(context)              // the two resources
+appendMarketingConsentService(context, {             // no-op when the alias is already registered
+  config: { standard: { 'marketing.phone': false } },
+})
+
+// API process
+context.registerEntrypoints(serveMarketingConsentEntrypoints(marketingConsentProtocols))
+```
+
+`serveMarketingConsentEntrypoints` binds `status`, `save` and `terms` only. A `base` declared without
+a `parent` must still be bound by the app, or boot fails with `Entrypoint marketing-consent not found`.
+
+### Gate a send on a consent
+
+```typescript
+import { MC_EMAIL, MARKETING_CONSENT_SERVICE } from '@owlmeans/marketing-consent'
+import type { MarketingConsentService } from '@owlmeans/server-marketing-consent'
+
+const consents = context.service<MarketingConsentService>(MARKETING_CONSENT_SERVICE)
+
+if (await consents.isGranted({ userId, profileId, entityId }, MC_EMAIL)) {
+  await sendNewsletter(userId)
+}
+```
+
+### Record a decision from server code
+
+```typescript
+import { marketingConsentSubjectHelper } from '@owlmeans/server-marketing-consent'
+
+const subject = marketingConsentSubjectHelper.subjectOf(req)   // AuthForbidden without a user
+await consents.save(subject, { decisions: [{ key: MC_EMAIL, granted: false }], source: 'api' })
+```
+
+`source: 'api'` is accepted only by the service, never by the HTTP `save` schema. It is meant for a
+server withdrawing a consent on a caller's behalf.
+
+### React to decisions
+
+```typescript
+consents.observe(async ({ subject, decisions }) => {
+  await mailingList.sync(subject.userId, decisions)
+})
+```
+
+Listeners run in registration order after each `save`; a throwing listener is logged and never fails
+the write.
+
+### Custom handler options
+
+```typescript
+import { saveMarketingConsent } from '@owlmeans/server-marketing-consent'
+import { bind } from '@owlmeans/server-entrypoint'
+
+bind(protocols.save, saveMarketingConsent(protocols.save, { allowAccessTokens: true, serviceAlias: 'my-consents' }))
+```
+
+## API
+
+### Functions
+
+| Symbol | Purpose |
+|---|---|
+| `makeMarketingConsentService(opts?)` | Builds the lazy `MarketingConsentService` |
+| `appendMarketingConsentService(ctx, opts?)` | Registers it unless the alias already exists |
+| `serveMarketingConsentEntrypoints(protocols, opts?)` | `[bind(status), bind(save), bind(terms)]` |
+| `marketingConsentStatus(protocol, opts?)` | `status` handler; reads `Sec-GPC: 1` as `gpc` |
+| `saveMarketingConsent(protocol, opts?)` | `save` handler; refuses access-token auth unless `allowAccessTokens` |
+| `recordTermsAcceptance(protocol, opts?)` | `terms` handler; refuses access-token auth unless `allowAccessTokens` |
+| `marketingConsentSubjectHelper.subjectOf(req)` | `MarketingConsentSubject`; throws `AuthForbidden` without `req.auth.userId` |
+| `marketingConsentSubjectHelper.subjectKey(subject)` | The `subject` string a state record is addressed by |
+| `createMarketingConsentSubjectHelper()` | Builds a `MarketingConsentSubjectHelper` |
+
+### `MarketingConsentService`
+
+| Method | Purpose |
+|---|---|
+| `definitions()` | Effective catalogue from `opts.config`, memoized |
+| `status(subject, { gpc? }?)` | `MarketingConsentStatusView` for a screen |
+| `save(subject, request)` | Validates every key (`UnknownMarketingConsentError` on any unknown), appends one log row per decision, replaces those keys in the state record, notifies observers |
+| `recordTerms(subject, acceptance, { source? }?)` | Appends a `terms` log row and sets the state record's `terms`; `source` defaults to `sign-in` |
+| `isGranted(subject, key, { gpc? }?)` | `true` only for a `current` item whose saved answer is granted |
+| `purge(subject)` | Deletes the state record; log rows stay |
+| `observe(listener)` | Adds a `MarketingConsentObserver` |
+
+### Constants, schemas and types
+
+| Symbol | Kind | Purpose |
+|---|---|---|
+| `RES_MARKETING_CONSENT_STATE` | const | `'marketing-consent-state'` |
+| `RES_MARKETING_CONSENT_LOG` | const | `'marketing-consent-log'` |
+| `MarketingConsentStateSchema`, `MarketingConsentLogSchema` | AJV schema | Shared with the storage packages |
+| `MakeMarketingConsentServiceOptions` | type | `{ alias?, state?, log?, config? }` |
+| `MarketingConsentHandlerOptions` | type | `{ serviceAlias?, allowAccessTokens? }` |
+| `MarketingConsentServedProtocols` | type | `status`, `save`, `terms` of the protocol tree |
+| `MarketingConsentStateRecord`, `MarketingConsentLogRecord` | type | Stored records |
+| `MarketingConsentSubject`, `MarketingConsentSubjectHelper` | type | Who a decision is recorded for |
+| `MarketingConsentService`, `MarketingConsentObserver`, `MarketingConsentContext` | type | Service, listener, `ServerContext<ServerConfig>` |
+
+## Testing
+
+`bun test ./tests` runs against `@owlmeans/static-resource` stores for both aliases; no database is
+needed. The suites cover the in-place upsert, `isGranted` versus display `granted`, `purge` leaving
+the log intact, a throwing observer, the access-token refusal on `save` / `terms`, and a request
+without an organization entity.
+
+## Common pitfalls
+
+- Gating a send on `status(...).items[n].granted` instead of `isGranted` — that sends to people who
+  opened the settings screen and changed nothing.
+- Storing `decisions` as an object keyed by consent key — dotted keys (`marketing.email`) become
+  paths in Mongo and Postgres jsonb queries.
+- Creating a state record with a caller-supplied `id` — Mongo and Postgres refuse it; the service
+  addresses rows by `subject`.
+- Expecting `purge` to remove the log — the log is GDPR Art. 7(1) evidence and is never deleted
+  here.
+- Reading `entityId` from a slug or `requireEntityKey` — the subject takes `req.entity?.id` only.
+- Forgetting a storage package — the service resolves its resources by alias on first call and fails
+  there.
+
+The `server-marketing-consent` skill covers these rules in depth; the `marketing-consent` skill
+covers the catalogue and status table.
+
+## Related packages
+
+- [`@owlmeans/marketing-consent`](../marketing-consent) — catalogue, status resolution, protocol tree, errors
+- [`@owlmeans/marketing-consent-mongo`](../marketing-consent-mongo) — MongoDB resources for the two aliases
+- [`@owlmeans/marketing-consent-postgres`](../marketing-consent-postgres) — PostgreSQL resources for the two aliases
+- [`@owlmeans/web-marketing-consent`](../web-marketing-consent) — the screens that call these handlers
+- [`@owlmeans/server-auth-token`](../server-auth-token) — `refuseTokenAuth`, used by `save` and `terms`
+- [`@owlmeans/server-api`](../server-api) — the `handlers()` builder the handlers use
+
 <!-- owlmeans:agent-guidance:start -->
 ## Agent guidance
 
@@ -6,7 +187,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.41
+npx @owlmeans/agent-skills@^0.1.18
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
-  "schemaVersion": 2,
+  "schemaVersion": 3,
   "package": "@owlmeans/server-marketing-consent",
-  "version": "0.1.18-rc.8",
-  "generatedAt": "2026-09-28T02:06:37.893Z",
+  "version": "0.1.18",
+  "generatedAt": "2026-10-28T00:31:34.768Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/server-marketing-consent/SKILL.md

@@ -8,8 +8,8 @@ user-invocable: false
 # @owlmeans/server-marketing-consent
 
 **Layer:** Server
-**Install:** `"@owlmeans/server-marketing-consent": "^0.1.18-rc.8"` in `dependencies`
-**Contracts:** `@owlmeans/marketing-consent` — the catalogue, `consentStatus`, the protocol tree, the error family
+**Install:** `"@owlmeans/server-marketing-consent": "^0.1.18"` in `dependencies`
+**Contracts:** `@owlmeans/marketing-consent` — the catalogue, `marketingConsentHelper.consentStatus`, the protocol tree, the error family
 
 ## Key Exports
 
@@ -17,7 +17,7 @@ user-invocable: false
 |--------|-------------|
 | `RES_MARKETING_CONSENT_STATE` (`marketing-consent-state`) · `RES_MARKETING_CONSENT_LOG` (`marketing-consent-log`) | Resource aliases — never rename, a later Mongo/Postgres extension's generated resource file names derive from these exact strings |
 | `MarketingConsentStateRecord` · `MarketingConsentLogRecord` · `MarketingConsentStateSchema` · `MarketingConsentLogSchema` | The two record shapes and their AJV `JSONSchemaType` schemas — shared with the `@owlmeans/marketing-consent-mongo` / `@owlmeans/marketing-consent-postgres` extensions, which import them rather than redeclaring |
-| `subjectOf(req)` · `subjectKey(subject)` · `MarketingConsentSubject` | Who a decision is recorded for, and the `subject` key its one state record is addressed by |
+| `marketingConsentSubjectHelper.subjectOf(req)` · `.subjectKey(subject)` · `MarketingConsentSubject` | Who a decision is recorded for, and the `subject` key its one state record is addressed by |
 | `makeMarketingConsentService(opts?)` · `appendMarketingConsentService(ctx, opts?)` | Build/register the `MarketingConsentService` |
 | `MarketingConsentService` | `definitions`, `status`, `save`, `recordTerms`, `isGranted`, `purge`, `observe` |
 | `marketingConsentStatus` · `saveMarketingConsent` · `recordTermsAcceptance` | Handler makers for `makeMarketingConsentProtocols().status/save/terms` |
@@ -54,43 +54,43 @@ exists under this alias before the first `status`/`save`/`terms` call" does).
 
 This is the single most important gotcha in this package. `MarketingConsentStateRecord.decisions`
 holds `MarketingConsentDecision[]`, one entry per key, folded down to the latest per key on read
-(`consentStatus`). It is never stored as `{ [key]: MarketingConsentDecision }`, because every
+(`marketingConsentHelper.consentStatus`). It is never stored as `{ [key]: MarketingConsentDecision }`, because every
 standard consent key is DOTTED (`marketing.email`, `data.profiling`) and a dotted key inside
 an object field is read as a PATH by both Mongo's dot-notation queries (`{'decisions.marketing.email':
 ...}` reaches into a nested `email` field under a nested `marketing` field, not a literal key) and
 Postgres jsonb path operators (`->` chains on segments). An object-keyed shape works in a quick
 manual test with one key and breaks the moment a second dotted key is added — the two fields
 silently merge into one nested tree instead of staying two siblings. Keep it an array in every
-storage backend; fold by key only in memory, in `consentStatus` or in a resource's own read path.
+storage backend; fold by key only in memory, in `.consentStatus` or in a resource's own read path.
 
-## `subjectOf` never uses the slug
+## `marketingConsentSubjectHelper.subjectOf` never uses the slug
 
 ```ts
-export const subjectOf = (req: AbstractRequest): MarketingConsentSubject => {
+const subjectOf = (req: AbstractRequest): MarketingConsentSubject => {
   if (req.auth?.userId == null || req.auth.userId === '') throw new AuthForbidden(...)
   return { userId: req.auth.userId, profileId: req.auth.profileId, entityId: req.entity?.id }
 }
 ```
 
-`entityId` reads `req.entity?.id` ONLY — never `requireEntityKey(req)`, never a slug off the token.
+`entityId` reads `req.entity?.id` ONLY — never `makeEntityScope(req).requireEntityKey()`, never a slug off the token.
 A deployment with no organization concept at all (a generated target app serving its own end users,
 say) registers no entity resolver, so `req.entity` stays `undefined` and `entityId` is simply
-absent — a valid, expected shape this package must never throw on. `subjectKey(subject)` —
+absent — a valid, expected shape this package must never throw on. `marketingConsentSubjectHelper.subjectKey(subject)` —
 `` `${entityId ?? ''}|${userId}|${profileId ?? ''}` `` — is the state record's `subject` field, and
 every read and write addresses the record by it (`load({ subject })`, `purge({ subject })`), never
 by `id`. The record's `id` is whatever the backend mints on `create()`: Mongo and Postgres refuse a
 caller-supplied id outright (`RecordExists('id-present')`, whether or not such a row exists), so a
 natural key can only ever live in a field. Each storage extension makes `subject` unique.
 
-## `isGranted` is not `consentStatus`'s display `granted`
+## `isGranted` is not `marketingConsentHelper.consentStatus`'s display `granted`
 
-`status(subject)` returns what `consentStatus` computes for a settings screen: an unanswered
+`status(subject)` returns what `marketingConsentHelper.consentStatus` computes for a settings screen: an unanswered
 `opt-out` item (e.g. `data.partners`) reads `granted: true` there — the "on until you turn it off"
 copy an unauthenticated-feeling first visit shows. `isGranted(subject, key)` is a DIFFERENT
 question — the SERVER-SIDE gate a send/share actually checks before doing something — and it must
 never honor that display default: an item whose `status` is `'new'` or `'revised'` has never been
 affirmatively answered by this person, so `isGranted` answers `false` for it regardless of what
-`consentStatus.granted` says, and `false` too for a key `definitions()` does not carry at all
+`marketingConsentHelper.consentStatus`'s `granted` says, and `false` too for a key `definitions()` does not carry at all
 (unknown or disabled). Only a `'current'` (i.e. actually saved, unrevised) item's `granted` is
 trusted. Getting this backwards — wiring a send to `status(...).items.find(...).granted` instead of
 `isGranted(...)` — sends to people who opened the settings screen and changed nothing.
@@ -151,7 +151,7 @@ directly — the app never calls `context.init()`/`configure()` in this style of
 
 ## Related
 
-- `@owlmeans/marketing-consent` — the catalogue, `consentStatus`, the protocol tree (read its skill
+- `@owlmeans/marketing-consent` — the catalogue, `marketingConsentHelper.consentStatus`, the protocol tree (read its skill
   first; this package builds on it and repeats nothing it already documents)
 - `@owlmeans/server-oauth`, `@owlmeans/server-auth-token` — `refuseTokenAuth`, the session-guarded
   handler shape this package's `save`/`terms` copy

package/build/handlers/index.d.ts

@@ -0,0 +1,4 @@
+export * from './status.js';
+export * from './save.js';
+export * from './terms.js';
+//# sourceMappingURL=index.d.ts.map

package/build/handlers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/handlers/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA"}

package/build/handlers/index.js

@@ -0,0 +1,4 @@
+export * from './status.js';
+export * from './save.js';
+export * from './terms.js';
+//# sourceMappingURL=index.js.map

package/build/handlers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/handlers/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA"}

package/build/handlers/save.d.ts

@@ -0,0 +1,9 @@
+import { type MarketingConsentEntrypoints } from '@owlmeans/marketing-consent';
+import type { MarketingConsentHandlerOptions } from '../types.js';
+export declare const saveMarketingConsent: (protocol: MarketingConsentEntrypoints['save'], opts?: MarketingConsentHandlerOptions) => import("@owlmeans/server-entrypoint").BoundEntrypointHandler<import("@owlmeans/entrypoint").EntrypointProtocol<{
+    body: import("@owlmeans/marketing-consent").SaveMarketingConsentRequest;
+}, {
+    ok: boolean;
+    status: import("@owlmeans/marketing-consent").MarketingConsentStatusView;
+}>>;
+//# sourceMappingURL=save.d.ts.map

package/build/handlers/save.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"save.d.ts","sourceRoot":"","sources":["../../src/handlers/save.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,KAAK,2BAA2B,EAAE,MAAM,6BAA6B,CAAA;AAGzG,OAAO,KAAK,EAA2B,8BAA8B,EAA2B,MAAM,aAAa,CAAA;AAMnH,eAAO,MAAM,oBAAoB,aACrB,2BAA2B,CAAC,MAAM,CAAC,SAAQ,8BAA8B;;;;;GAKnF,CAAA"}

package/build/handlers/save.js

@@ -0,0 +1,11 @@
+import { MARKETING_CONSENT_SERVICE } from '@owlmeans/marketing-consent';
+import { handlers } from '@owlmeans/server-api';
+import { refuseTokenAuth } from '@owlmeans/server-auth-token';
+import { marketingConsentSubjectHelper } from '../subject.js';
+const serviceOf = (context, opts) => context.service(opts?.serviceAlias ?? MARKETING_CONSENT_SERVICE);
+export const saveMarketingConsent = (protocol, opts = {}) => handlers().body(protocol, async (payload, context, req) => {
+    if (opts.allowAccessTokens !== true)
+        refuseTokenAuth(req, 'marketing-consent-save');
+    return serviceOf(context, opts).save(marketingConsentSubjectHelper.subjectOf(req), payload);
+});
+//# sourceMappingURL=save.js.map

package/build/handlers/save.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"save.js","sourceRoot":"","sources":["../../src/handlers/save.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAoC,MAAM,6BAA6B,CAAA;AACzG,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAE7D,OAAO,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAA;AAE7D,MAAM,SAAS,GAAG,CAAC,OAAgC,EAAE,IAAqC,EAA2B,EAAE,CACrH,OAAO,CAAC,OAAO,CAA0B,IAAI,EAAE,YAAY,IAAI,yBAAyB,CAAC,CAAA;AAE3F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,QAA6C,EAAE,IAAI,GAAmC,EAAE,EACxF,EAAE,CAAC,QAAQ,EAA2B,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;IACtF,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI;QAAE,eAAe,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAA;IAEnF,OAAO,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAA;AAC7F,CAAC,CAAC,CAAA"}

package/build/handlers/status.d.ts

@@ -0,0 +1,4 @@
+import { type MarketingConsentEntrypoints } from '@owlmeans/marketing-consent';
+import type { MarketingConsentHandlerOptions } from '../types.js';
+export declare const marketingConsentStatus: (protocol: MarketingConsentEntrypoints['status'], opts?: MarketingConsentHandlerOptions) => import("@owlmeans/server-entrypoint").BoundEntrypointHandler<import("@owlmeans/entrypoint").EntrypointProtocol<{}, import("@owlmeans/marketing-consent").MarketingConsentStatusView>>;
+//# sourceMappingURL=status.d.ts.map

package/build/handlers/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/handlers/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,KAAK,2BAA2B,EAAE,MAAM,6BAA6B,CAAA;AAEzG,OAAO,KAAK,EAA2B,8BAA8B,EAA2B,MAAM,aAAa,CAAA;AAanH,eAAO,MAAM,sBAAsB,aACvB,2BAA2B,CAAC,QAAQ,CAAC,SAAQ,8BAA8B,0LAE4B,CAAA"}

package/build/handlers/status.js

@@ -0,0 +1,12 @@
+import { MARKETING_CONSENT_SERVICE } from '@owlmeans/marketing-consent';
+import { handlers } from '@owlmeans/server-api';
+import { marketingConsentSubjectHelper } from '../subject.js';
+const serviceOf = (context, opts) => context.service(opts?.serviceAlias ?? MARKETING_CONSENT_SERVICE);
+/** GPC ("Sec-GPC: 1") read as a plain header — Fastify normalizes header names to lower case, and
+ * a repeated header arrives as an array, so only its first value is read. */
+const gpcOf = (headers) => {
+    const raw = headers['sec-gpc'];
+    return (Array.isArray(raw) ? raw[0] : raw) === '1';
+};
+export const marketingConsentStatus = (protocol, opts = {}) => handlers().request(protocol, async (req, context) => serviceOf(context, opts).status(marketingConsentSubjectHelper.subjectOf(req), { gpc: gpcOf(req.headers ?? {}) }));
+//# sourceMappingURL=status.js.map

package/build/handlers/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/handlers/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAoC,MAAM,6BAA6B,CAAA;AACzG,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAE/C,OAAO,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAA;AAE7D,MAAM,SAAS,GAAG,CAAC,OAAgC,EAAE,IAAqC,EAA2B,EAAE,CACrH,OAAO,CAAC,OAAO,CAA0B,IAAI,EAAE,YAAY,IAAI,yBAAyB,CAAC,CAAA;AAE3F;6EAC6E;AAC7E,MAAM,KAAK,GAAG,CAAC,OAAsD,EAAW,EAAE;IAChF,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC9B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,CAAA;AACpD,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,QAA+C,EAAE,IAAI,GAAmC,EAAE,EAC1F,EAAE,CAAC,QAAQ,EAA2B,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAChF,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,6BAA6B,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA"}

package/build/handlers/terms.d.ts

@@ -0,0 +1,8 @@
+import { type MarketingConsentEntrypoints } from '@owlmeans/marketing-consent';
+import type { MarketingConsentHandlerOptions } from '../types.js';
+export declare const recordTermsAcceptance: (protocol: MarketingConsentEntrypoints['terms'], opts?: MarketingConsentHandlerOptions) => import("@owlmeans/server-entrypoint").BoundEntrypointHandler<import("@owlmeans/entrypoint").EntrypointProtocol<{
+    body: import("@owlmeans/marketing-consent").TermsAcceptance;
+}, {
+    ok: boolean;
+}>>;
+//# sourceMappingURL=terms.d.ts.map

package/build/handlers/terms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terms.d.ts","sourceRoot":"","sources":["../../src/handlers/terms.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,KAAK,2BAA2B,EAAE,MAAM,6BAA6B,CAAA;AAGzG,OAAO,KAAK,EAA2B,8BAA8B,EAA2B,MAAM,aAAa,CAAA;AAMnH,eAAO,MAAM,qBAAqB,aACtB,2BAA2B,CAAC,OAAO,CAAC,SAAQ,8BAA8B;;;;GAKpF,CAAA"}

package/build/handlers/terms.js

@@ -0,0 +1,11 @@
+import { MARKETING_CONSENT_SERVICE } from '@owlmeans/marketing-consent';
+import { handlers } from '@owlmeans/server-api';
+import { refuseTokenAuth } from '@owlmeans/server-auth-token';
+import { marketingConsentSubjectHelper } from '../subject.js';
+const serviceOf = (context, opts) => context.service(opts?.serviceAlias ?? MARKETING_CONSENT_SERVICE);
+export const recordTermsAcceptance = (protocol, opts = {}) => handlers().body(protocol, async (payload, context, req) => {
+    if (opts.allowAccessTokens !== true)
+        refuseTokenAuth(req, 'marketing-consent-terms');
+    return serviceOf(context, opts).recordTerms(marketingConsentSubjectHelper.subjectOf(req), payload);
+});
+//# sourceMappingURL=terms.js.map

package/build/handlers/terms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terms.js","sourceRoot":"","sources":["../../src/handlers/terms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAoC,MAAM,6BAA6B,CAAA;AACzG,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAE7D,OAAO,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAA;AAE7D,MAAM,SAAS,GAAG,CAAC,OAAgC,EAAE,IAAqC,EAA2B,EAAE,CACrH,OAAO,CAAC,OAAO,CAA0B,IAAI,EAAE,YAAY,IAAI,yBAAyB,CAAC,CAAA;AAE3F,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,QAA8C,EAAE,IAAI,GAAmC,EAAE,EACzF,EAAE,CAAC,QAAQ,EAA2B,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;IACtF,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI;QAAE,eAAe,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAA;IAEpF,OAAO,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC,6BAA6B,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAA;AACpG,CAAC,CAAC,CAAA"}

package/build/helper.d.ts

@@ -1,7 +1,4 @@
-import type { MarketingConsentEntrypoints } from '@owlmeans/marketing-consent';
-import type { MarketingConsentHandlerOptions } from './handlers.js';
-/** The part of a `makeMarketingConsentProtocols` tree that carries a server implementation. */
-export type MarketingConsentServedProtocols = Pick<MarketingConsentEntrypoints, 'status' | 'save' | 'terms'>;
+import type { MarketingConsentHandlerOptions, MarketingConsentServedProtocols } from './types.js';
 /**
  * Bind this package's handlers to a tree declared by `makeMarketingConsentProtocols` — one binding
  * per protocol that needs a server implementation. `base` and `screen` carry no handler of their

package/build/helper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAA;AAE9E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAA;AAEnE,+FAA+F;AAC/F,MAAM,MAAM,+BAA+B,GAAG,IAAI,CAAC,2BAA2B,EAAE,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,CAAA;AAE5G;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,cAChC,+BAA+B,SAAQ,8BAA8B;;;;;;;;;gMAKjF,CAAA"}
+{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,8BAA8B,EAAE,+BAA+B,EAAE,MAAM,YAAY,CAAA;AAEjG;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,cAChC,+BAA+B,SAAQ,8BAA8B;;;;;;;;;gMAKjF,CAAA"}

package/build/helper.js

@@ -1,5 +1,5 @@
 import { bind } from '@owlmeans/server-entrypoint';
-import { marketingConsentStatus, recordTermsAcceptance, saveMarketingConsent } from './handlers.js';
+import { marketingConsentStatus, recordTermsAcceptance, saveMarketingConsent } from './handlers/index.js';
 /**
  * Bind this package's handlers to a tree declared by `makeMarketingConsentProtocols` — one binding
  * per protocol that needs a server implementation. `base` and `screen` carry no handler of their

package/build/helper.js.map

@@ -1 +1 @@
-{"version":3,"file":"helper.js","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAElD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAMnG;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC9C,SAA0C,EAAE,IAAI,GAAmC,EAAE,EACrF,EAAE,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,sBAAsB,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;CACpE,CAAA"}
+{"version":3,"file":"helper.js","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAClD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAGzG;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC9C,SAA0C,EAAE,IAAI,GAAmC,EAAE,EACrF,EAAE,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,sBAAsB,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;CACpE,CAAA"}

package/build/index.d.ts

@@ -1,7 +1,9 @@
 export * from './consts.js';
 export * from './model.js';
+export type * from './types.js';
+export type * from './subject/types.js';
 export * from './subject.js';
 export * from './service.js';
-export * from './handlers.js';
+export * from './handlers/index.js';
 export * from './helper.js';
 //# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,mBAAmB,YAAY,CAAA;AAC/B,mBAAmB,oBAAoB,CAAA;AACvC,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA;AACnC,cAAc,aAAa,CAAA"}

package/build/index.js

@@ -2,6 +2,6 @@ export * from './consts.js';
 export * from './model.js';
 export * from './subject.js';
 export * from './service.js';
-export * from './handlers.js';
+export * from './handlers/index.js';
 export * from './helper.js';
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAG1B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA;AACnC,cAAc,aAAa,CAAA"}

package/build/model.d.ts

@@ -1,60 +1,5 @@
 import type { JSONSchemaType } from 'ajv';
-import type { ResourceRecord } from '@owlmeans/resource';
-import type { MarketingConsentDecision, MarketingConsentMode, MarketingConsentSource, TermsDocumentRef } from '@owlmeans/marketing-consent';
-/**
- * One subject's saved decisions, one record per subject (`id` = `subjectKey(subject)`).
- *
- * `decisions` is an ARRAY, never an object keyed by consent key. A dotted key such as
- * `"marketing.email"` is read as a PATH by both Mongo dot-notation queries and Postgres jsonb path
- * operators — an object-keyed shape breaks the moment a second consent key is added. This is the
- * single most important shape decision in this package; the Mongo/Postgres extensions that will
- * store this record must not "flatten" it into an object for convenience.
- */
-export interface MarketingConsentStateRecord extends ResourceRecord {
-    id: string;
-    /** `subjectKey(subjectOf(req))` — see `./subject.js`. Also this record's own `id`. */
-    subject: string;
-    userId: string;
-    profileId?: string;
-    entityId?: string;
-    decisions: MarketingConsentDecision[];
-    terms?: {
-        documents: TermsDocumentRef[];
-        notices?: TermsDocumentRef[];
-        version: string;
-        locale?: string;
-        acceptedAt: string;
-    };
-    gpc?: boolean;
-    createdAt: string;
-    updatedAt: string;
-}
-/**
- * Append-only evidence of every decision and terms acceptance ever recorded — GDPR Art. 7(1)
- * "demonstrate consent" material. Never updated or deleted, including on `purge()`: only the
- * current-state record is cleared there.
- */
-export interface MarketingConsentLogRecord extends ResourceRecord {
-    id: string;
-    subject: string;
-    userId: string;
-    profileId?: string;
-    entityId?: string;
-    kind: 'consent' | 'terms';
-    /** Present when `kind === 'consent'`. */
-    key?: string;
-    granted?: boolean;
-    revisedAt?: string;
-    mode?: MarketingConsentMode;
-    /** Present when `kind === 'terms'`. */
-    documents?: TermsDocumentRef[];
-    notices?: TermsDocumentRef[];
-    version?: string;
-    decidedAt: string;
-    source: MarketingConsentSource;
-    locale?: string;
-    gpc?: boolean;
-}
+import type { MarketingConsentLogRecord, MarketingConsentStateRecord } from './types.js';
 /**
  * Shared with the Mongo/Postgres extension packages this schema is built for — imported by them,
  * never duplicated.

package/build/model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,KAAK,CAAA;AACzC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EACV,wBAAwB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,gBAAgB,EACzF,MAAM,6BAA6B,CAAA;AAEpC;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA4B,SAAQ,cAAc;IACjE,EAAE,EAAE,MAAM,CAAA;IACV,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,wBAAwB,EAAE,CAAA;IACrC,KAAK,CAAC,EAAE;QACN,SAAS,EAAE,gBAAgB,EAAE,CAAA;QAC7B,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAA;QAC5B,OAAO,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,UAAU,EAAE,MAAM,CAAA;KACnB,CAAA;IACD,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAA0B,SAAQ,cAAc;IAC/D,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,SAAS,GAAG,OAAO,CAAA;IACzB,yCAAyC;IACzC,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,oBAAoB,CAAA;IAC3B,uCAAuC;IACvC,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAC9B,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,sBAAsB,CAAA;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AA8BD;;;GAGG;AACH,eAAO,MAAM,2BAA2B,EAAE,cAAc,CAAC,2BAA2B,CA4BnF,CAAA;AAED,eAAO,MAAM,yBAAyB,EAAE,cAAc,CAAC,yBAAyB,CAuB/E,CAAA"}
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,KAAK,CAAA;AAEzC,OAAO,KAAK,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAA;AA8BxF;;;GAGG;AACH,eAAO,MAAM,2BAA2B,EAAE,cAAc,CAAC,2BAA2B,CA4BnF,CAAA;AAED,eAAO,MAAM,yBAAyB,EAAE,cAAc,CAAC,yBAAyB,CAuB/E,CAAA"}

package/build/model.js.map

@@ -1 +1 @@
-{"version":3,"file":"model.js","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AA8DA,gGAAgG;AAChG,mEAAmE;AACnE,MAAM,sBAAsB,GAAqC;IAC/D,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;QACrD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;QACvD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC9C;IACD,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,KAAK;CAC5B,CAAA;AAED,MAAM,8BAA8B,GAA6C;IAC/E,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;QACpD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC5B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC3C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;QACrD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC3C,yGAAyG;QACzG,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE;KAC3E;IACD,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC;IACxE,oBAAoB,EAAE,KAAK;CAC5B,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAgD;IACtF,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACpC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACzC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACxC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC5C,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,8BAA8B,EAAE;QACnE,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE;gBACV,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE;gBAC3D,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACzE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACzC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC1C,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;aAC7C;YACD,QAAQ,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,CAAC;YAChD,oBAAoB,EAAE,KAAK;SAC5B;QACD,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;QACxC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC3C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;KAC5C;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC;IAC5E,oBAAoB,EAAE,KAAK;CAC5B,CAAA;AAED,MAAM,CAAC,MAAM,yBAAyB,GAA8C;IAClF,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACpC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACzC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACxC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC5C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE;QACpD,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC5C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;QACrE,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC3E,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC3C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE;QAC1E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC1C,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;KACzC;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC;IACpE,oBAAoB,EAAE,KAAK;CAC5B,CAAA"}
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAIA,gGAAgG;AAChG,mEAAmE;AACnE,MAAM,sBAAsB,GAAqC;IAC/D,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;QACrD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;QACvD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC9C;IACD,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,KAAK;CAC5B,CAAA;AAED,MAAM,8BAA8B,GAA6C;IAC/E,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;QACpD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC5B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC3C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;QACrD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC3C,yGAAyG;QACzG,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE;KAC3E;IACD,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC;IACxE,oBAAoB,EAAE,KAAK;CAC5B,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAgD;IACtF,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACpC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACzC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACxC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC5C,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,8BAA8B,EAAE;QACnE,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE;gBACV,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE;gBAC3D,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACzE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACzC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC1C,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;aAC7C;YACD,QAAQ,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,CAAC;YAChD,oBAAoB,EAAE,KAAK;SAC5B;QACD,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;QACxC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC3C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;KAC5C;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC;IAC5E,oBAAoB,EAAE,KAAK;CAC5B,CAAA;AAED,MAAM,CAAC,MAAM,yBAAyB,GAA8C;IAClF,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACpC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACzC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACxC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC5C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE;QACpD,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC5C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;QACrE,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC3E,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC3C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE;QAC1E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC1C,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;KACzC;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC;IACpE,oBAAoB,EAAE,KAAK;CAC5B,CAAA"}

package/build/service.d.ts

@@ -1,50 +1,4 @@
-import type { LazyService } from '@owlmeans/context';
-import type { MarketingConsentConfig, MarketingConsentDecision, MarketingConsentDefinition, MarketingConsentSource, MarketingConsentStatusView, SaveMarketingConsentRequest, TermsAcceptance } from '@owlmeans/marketing-consent';
-import type { ServerConfig, ServerContext } from '@owlmeans/server-context';
-import type { MarketingConsentSubject } from './subject.js';
-export type MarketingConsentContext = ServerContext<ServerConfig>;
-export type MarketingConsentObserver = (event: {
-    subject: MarketingConsentSubject;
-    decisions: MarketingConsentDecision[];
-}) => void | Promise<void>;
-export interface MarketingConsentService extends LazyService {
-    /** The effective catalogue (`resolveMarketingConsents`), computed once and memoized. */
-    definitions(): MarketingConsentDefinition[];
-    status(subject: MarketingConsentSubject, opts?: {
-        gpc?: boolean;
-    }): Promise<MarketingConsentStatusView>;
-    save(subject: MarketingConsentSubject, request: SaveMarketingConsentRequest | (Omit<SaveMarketingConsentRequest, 'source'> & {
-        source: 'api';
-    })): Promise<{
-        ok: true;
-        status: MarketingConsentStatusView;
-    }>;
-    recordTerms(subject: MarketingConsentSubject, acceptance: TermsAcceptance, opts?: {
-        source?: MarketingConsentSource;
-    }): Promise<{
-        ok: true;
-    }>;
-    /**
-     * The SERVER-SIDE gate a send/share checks — the SAVED, CONFIRMED answer only. An item still
-     * `'new'` or `'revised'` has never been affirmatively answered by this person, so it reads as
-     * NOT granted here even where `consentStatus`'s own `granted` defaults an opt-out item to `true`
-     * for DISPLAY purposes.
-     */
-    isGranted(subject: MarketingConsentSubject, key: string, opts?: {
-        gpc?: boolean;
-    }): Promise<boolean>;
-    /** Clears the current-state record. Log rows stay — they are the append-only compliance evidence. */
-    purge(subject: MarketingConsentSubject): Promise<void>;
-    observe(listener: MarketingConsentObserver): void;
-}
-export interface MakeMarketingConsentServiceOptions {
-    alias?: string;
-    /** Resource alias holding one current-state record per subject. Defaults to `RES_MARKETING_CONSENT_STATE`. */
-    state?: string;
-    /** Resource alias holding the append-only log. Defaults to `RES_MARKETING_CONSENT_LOG`. */
-    log?: string;
-    config?: MarketingConsentConfig;
-}
+import type { MakeMarketingConsentServiceOptions, MarketingConsentContext, MarketingConsentService } from './types.js';
 /**
  * Build the `MarketingConsentService`. Database-agnostic: both resources are resolved BY ALIAS
  * from the context lazily, inside each method call — never imported or constructed here. A

package/build/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAIpD,OAAO,KAAK,EACV,sBAAsB,EAAE,wBAAwB,EAAE,0BAA0B,EAC5E,sBAAsB,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,eAAe,EACjG,MAAM,6BAA6B,CAAA;AAEpC,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAI3E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAE3D,MAAM,MAAM,uBAAuB,GAAG,aAAa,CAAC,YAAY,CAAC,CAAA;AAEjE,MAAM,MAAM,wBAAwB,GAClC,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,uBAAuB,CAAC;IAAC,SAAS,EAAE,wBAAwB,EAAE,CAAA;CAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAE9G,MAAM,WAAW,uBAAwB,SAAQ,WAAW;IAC1D,wFAAwF;IACxF,WAAW,IAAI,0BAA0B,EAAE,CAAA;IAC3C,MAAM,CAAC,OAAO,EAAE,uBAAuB,EAAE,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAA;IACvG,IAAI,CACF,OAAO,EAAE,uBAAuB,EAChC,OAAO,EAAE,2BAA2B,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,QAAQ,CAAC,GAAG;QAAE,MAAM,EAAE,KAAK,CAAA;KAAE,CAAC,GACvG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,0BAA0B,CAAA;KAAE,CAAC,CAAA;IAC5D,WAAW,CACT,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,sBAAsB,CAAA;KAAE,GACxG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAA;IACxB;;;;;OAKG;IACH,SAAS,CAAC,OAAO,EAAE,uBAAuB,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACpG,qGAAqG;IACrG,KAAK,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtD,OAAO,CAAC,QAAQ,EAAE,wBAAwB,GAAG,IAAI,CAAA;CAClD;AAED,MAAM,WAAW,kCAAkC;IACjD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,8GAA8G;IAC9G,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,2FAA2F;IAC3F,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,sBAAsB,CAAA;CAChC;AAID;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,UAChC,kCAAkC,KACvC,uBA+JF,CAAA;AAED,gGAAgG;AAChG,eAAO,MAAM,6BAA6B,YAC/B,uBAAuB,SAAQ,kCAAkC,KACzE,IAKF,CAAA"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAmF,kCAAkC,EAAE,uBAAuB,EAA4B,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAQjO;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,UAChC,kCAAkC,KACvC,uBA+JF,CAAA;AAED,gGAAgG;AAChG,eAAO,MAAM,6BAA6B,YAC/B,uBAAuB,SAAQ,kCAAkC,KACzE,IAKF,CAAA"}