@futdevpro/nts-dynamo 1.15.224 → 1.15.226

package/build/_modules/account-security/_enums/account-security-retention-category.type-enum.d.ts

@@ -0,0 +1,7 @@
+/** Closed account-security record categories covered by the shared retention evaluator. */
+export declare enum DyNTS_AccountSecurityRetentionCategory_Type {
+    challenge = "challenge",
+    refreshToken = "refresh-token",
+    session = "session"
+}
+//# sourceMappingURL=account-security-retention-category.type-enum.d.ts.map

package/build/_modules/account-security/_enums/account-security-retention-category.type-enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-security-retention-category.type-enum.d.ts","sourceRoot":"","sources":["../../../../src/_modules/account-security/_enums/account-security-retention-category.type-enum.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,oBAAY,2CAA2C;IACrD,SAAS,cAAc;IACvB,YAAY,kBAAkB;IAC9B,OAAO,YAAY;CACpB"}

package/build/_modules/account-security/_enums/account-security-retention-category.type-enum.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_AccountSecurityRetentionCategory_Type = void 0;
+/** Closed account-security record categories covered by the shared retention evaluator. */
+var DyNTS_AccountSecurityRetentionCategory_Type;
+(function (DyNTS_AccountSecurityRetentionCategory_Type) {
+    DyNTS_AccountSecurityRetentionCategory_Type["challenge"] = "challenge";
+    DyNTS_AccountSecurityRetentionCategory_Type["refreshToken"] = "refresh-token";
+    DyNTS_AccountSecurityRetentionCategory_Type["session"] = "session";
+})(DyNTS_AccountSecurityRetentionCategory_Type || (exports.DyNTS_AccountSecurityRetentionCategory_Type = DyNTS_AccountSecurityRetentionCategory_Type = {}));
+//# sourceMappingURL=account-security-retention-category.type-enum.js.map

package/build/_modules/account-security/_enums/account-security-retention-category.type-enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-security-retention-category.type-enum.js","sourceRoot":"","sources":["../../../../src/_modules/account-security/_enums/account-security-retention-category.type-enum.ts"],"names":[],"mappings":";;;AAAA,2FAA2F;AAC3F,IAAY,2CAIX;AAJD,WAAY,2CAA2C;IACrD,sEAAuB,CAAA;IACvB,6EAA8B,CAAA;IAC9B,kEAAmB,CAAA;AACrB,CAAC,EAJW,2CAA2C,2DAA3C,2CAA2C,QAItD"}

package/build/_modules/account-security/_enums/account-security-retention-reason.type-enum.d.ts

@@ -0,0 +1,10 @@
+/** Stable content-free reasons emitted by account-security retention evaluation. */
+export declare enum DyNTS_AccountSecurityRetentionReason_Type {
+    challengeExpired = "challenge-expired",
+    activeRefreshTokenExpired = "active-refresh-token-expired",
+    refreshTokenSecurityEvidenceExpired = "refresh-token-security-evidence-expired",
+    activeSessionExpired = "active-session-expired",
+    sessionSecurityEvidenceExpired = "session-security-evidence-expired",
+    retentionNotDue = "retention-not-due"
+}
+//# sourceMappingURL=account-security-retention-reason.type-enum.d.ts.map

package/build/_modules/account-security/_enums/account-security-retention-reason.type-enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-security-retention-reason.type-enum.d.ts","sourceRoot":"","sources":["../../../../src/_modules/account-security/_enums/account-security-retention-reason.type-enum.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oBAAY,yCAAyC;IACnD,gBAAgB,sBAAsB;IACtC,yBAAyB,iCAAiC;IAC1D,mCAAmC,4CAA4C;IAC/E,oBAAoB,2BAA2B;IAC/C,8BAA8B,sCAAsC;IACpE,eAAe,sBAAsB;CACtC"}

package/build/_modules/account-security/_enums/account-security-retention-reason.type-enum.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_AccountSecurityRetentionReason_Type = void 0;
+/** Stable content-free reasons emitted by account-security retention evaluation. */
+var DyNTS_AccountSecurityRetentionReason_Type;
+(function (DyNTS_AccountSecurityRetentionReason_Type) {
+    DyNTS_AccountSecurityRetentionReason_Type["challengeExpired"] = "challenge-expired";
+    DyNTS_AccountSecurityRetentionReason_Type["activeRefreshTokenExpired"] = "active-refresh-token-expired";
+    DyNTS_AccountSecurityRetentionReason_Type["refreshTokenSecurityEvidenceExpired"] = "refresh-token-security-evidence-expired";
+    DyNTS_AccountSecurityRetentionReason_Type["activeSessionExpired"] = "active-session-expired";
+    DyNTS_AccountSecurityRetentionReason_Type["sessionSecurityEvidenceExpired"] = "session-security-evidence-expired";
+    DyNTS_AccountSecurityRetentionReason_Type["retentionNotDue"] = "retention-not-due";
+})(DyNTS_AccountSecurityRetentionReason_Type || (exports.DyNTS_AccountSecurityRetentionReason_Type = DyNTS_AccountSecurityRetentionReason_Type = {}));
+//# sourceMappingURL=account-security-retention-reason.type-enum.js.map

package/build/_modules/account-security/_enums/account-security-retention-reason.type-enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-security-retention-reason.type-enum.js","sourceRoot":"","sources":["../../../../src/_modules/account-security/_enums/account-security-retention-reason.type-enum.ts"],"names":[],"mappings":";;;AAAA,oFAAoF;AACpF,IAAY,yCAOX;AAPD,WAAY,yCAAyC;IACnD,mFAAsC,CAAA;IACtC,uGAA0D,CAAA;IAC1D,4HAA+E,CAAA;IAC/E,4FAA+C,CAAA;IAC/C,iHAAoE,CAAA;IACpE,kFAAqC,CAAA;AACvC,CAAC,EAPW,yCAAyC,yDAAzC,yCAAyC,QAOpD"}

package/build/_modules/account-security/_models/account-security-retention.interface.d.ts

@@ -0,0 +1,44 @@
+import { DyNTS_AccountSecurityRetentionCategory_Type } from '../_enums/account-security-retention-category.type-enum';
+import { DyNTS_AccountSecurityRetentionReason_Type } from '../_enums/account-security-retention-reason.type-enum';
+import { DyNTS_AccountRefreshTokenState_Type } from '../_enums/account-refresh-token-state.type-enum';
+import { DyNTS_AccountSessionState_Type } from '../_enums/account-session-state.type-enum';
+/** Caller-owned finite policy; Bedrock supplies mechanics and never invents the legal duration. */
+export interface DyNTS_AccountSecurityRetentionPolicy_Interface {
+    readonly contractVersion: 'dynts-account-security-retention-policy/1';
+    readonly securityEvidenceRetentionDays: number;
+    readonly policyVersion: string;
+    readonly retentionBasisCode: string;
+}
+/** Minimal challenge projection. Challenge payload and subject identity are deliberately absent. */
+export interface DyNTS_AccountChallengeRetentionCandidate_Interface {
+    readonly category: DyNTS_AccountSecurityRetentionCategory_Type.challenge;
+    readonly expiresAt: string;
+}
+/** Minimal session projection. Credential hashes, subject and device metadata are deliberately absent. */
+export interface DyNTS_AccountSessionRetentionCandidate_Interface {
+    readonly category: DyNTS_AccountSecurityRetentionCategory_Type.session;
+    readonly state: DyNTS_AccountSessionState_Type;
+    readonly refreshExpiresAt: string;
+    readonly revokedAt: string;
+}
+/** Minimal refresh-token projection. Token hash, session, family and subject identity are deliberately absent. */
+export interface DyNTS_AccountRefreshTokenRetentionCandidate_Interface {
+    readonly category: DyNTS_AccountSecurityRetentionCategory_Type.refreshToken;
+    readonly state: DyNTS_AccountRefreshTokenState_Type;
+    readonly expiresAt: string;
+    readonly usedAt: string;
+}
+/** Exact projected input union accepted by the shared evaluator. */
+export type DyNTS_AccountSecurityRetentionCandidate_Type = DyNTS_AccountChallengeRetentionCandidate_Interface | DyNTS_AccountSessionRetentionCandidate_Interface | DyNTS_AccountRefreshTokenRetentionCandidate_Interface;
+/** Content-free finite deletion decision. No record identity or supplied value is reflected. */
+export interface DyNTS_AccountSecurityRetentionDecision_Interface {
+    readonly contractVersion: 'dynts-account-security-retention-decision/1';
+    readonly category: DyNTS_AccountSecurityRetentionCategory_Type;
+    readonly evaluatedAt: string;
+    readonly deletionDeadlineAt: string;
+    readonly eligibleForDeletion: boolean;
+    readonly reasonCode: DyNTS_AccountSecurityRetentionReason_Type;
+    readonly policyVersion: string;
+    readonly retentionBasisCode: string;
+}
+//# sourceMappingURL=account-security-retention.interface.d.ts.map

package/build/_modules/account-security/_models/account-security-retention.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-security-retention.interface.d.ts","sourceRoot":"","sources":["../../../../src/_modules/account-security/_models/account-security-retention.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2CAA2C,EAAE,MAAM,yDAAyD,CAAC;AACtH,OAAO,EAAE,yCAAyC,EAAE,MAAM,uDAAuD,CAAC;AAClH,OAAO,EAAE,mCAAmC,EAAE,MAAM,iDAAiD,CAAC;AACtG,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAE3F,mGAAmG;AACnG,MAAM,WAAW,8CAA8C;IAC7D,QAAQ,CAAC,eAAe,EAAE,2CAA2C,CAAC;IACtE,QAAQ,CAAC,6BAA6B,EAAE,MAAM,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED,oGAAoG;AACpG,MAAM,WAAW,kDAAkD;IACjE,QAAQ,CAAC,QAAQ,EAAE,2CAA2C,CAAC,SAAS,CAAC;IACzE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,0GAA0G;AAC1G,MAAM,WAAW,gDAAgD;IAC/D,QAAQ,CAAC,QAAQ,EAAE,2CAA2C,CAAC,OAAO,CAAC;IACvE,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,kHAAkH;AAClH,MAAM,WAAW,qDAAqD;IACpE,QAAQ,CAAC,QAAQ,EAAE,2CAA2C,CAAC,YAAY,CAAC;IAC5E,QAAQ,CAAC,KAAK,EAAE,mCAAmC,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,oEAAoE;AACpE,MAAM,MAAM,4CAA4C,GACtD,kDAAkD,GAChD,gDAAgD,GAChD,qDAAqD,CAAC;AAE1D,gGAAgG;AAChG,MAAM,WAAW,gDAAgD;IAC/D,QAAQ,CAAC,eAAe,EAAE,6CAA6C,CAAC;IACxE,QAAQ,CAAC,QAAQ,EAAE,2CAA2C,CAAC;IAC/D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,yCAAyC,CAAC;IAC/D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC"}

package/build/_modules/account-security/_models/account-security-retention.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=account-security-retention.interface.js.map

package/build/_modules/account-security/_models/account-security-retention.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-security-retention.interface.js","sourceRoot":"","sources":["../../../../src/_modules/account-security/_models/account-security-retention.interface.ts"],"names":[],"mappings":""}

package/build/_modules/account-security/account-security-retention.control-service.d.ts

@@ -0,0 +1,32 @@
+import { DyNTS_AccountSecurityRetentionDecision_Interface } from './_models/account-security-retention.interface';
+/**
+ * Applies caller-owned finite policy to content-minimal account-security projections.
+ *
+ * The evaluator has no storage, logging, network, subject identity or credential access. Active credentials are
+ * eligible at their own expiry. Terminated security evidence receives only the caller-approved finite evidence
+ * window. Challenges never receive a post-expiry grace period.
+ */
+export declare class DyNTS_AccountSecurityRetention_ControlService {
+    private readonly clock;
+    /** Uses the trusted process clock in production and an explicit deterministic clock in tests. */
+    constructor(clock?: () => Date);
+    /** Returns one frozen, identifier-free decision or fails closed with a stable code. */
+    evaluate(candidateValue: unknown, policyValue: unknown): DyNTS_AccountSecurityRetentionDecision_Interface;
+    private deadline;
+    private sessionDeadline;
+    private refreshTokenDeadline;
+    private policy;
+    private candidate;
+    private challengeCandidate;
+    private sessionCandidate;
+    private refreshTokenCandidate;
+    private record;
+    private value;
+    private date;
+    private addDays;
+    private validClock;
+    private sessionState;
+    private refreshTokenState;
+    private code;
+}
+//# sourceMappingURL=account-security-retention.control-service.d.ts.map

package/build/_modules/account-security/account-security-retention.control-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-security-retention.control-service.d.ts","sourceRoot":"","sources":["../../../src/_modules/account-security/account-security-retention.control-service.ts"],"names":[],"mappings":"AAIA,OAAO,EAIL,gDAAgD,EAGjD,MAAM,gDAAgD,CAAC;AAOxD;;;;;;GAMG;AACH,qBAAa,6CAA6C;IACxD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC,iGAAiG;gBAC9E,KAAK,GAAE,MAAM,IAA6B;IAI7D,uFAAuF;IAChF,QAAQ,CACb,cAAc,EAAE,OAAO,EACvB,WAAW,EAAE,OAAO,GACnB,gDAAgD;IAqBnD,OAAO,CAAC,QAAQ;IAoBhB,OAAO,CAAC,eAAe;IAoBvB,OAAO,CAAC,oBAAoB;IAiB5B,OAAO,CAAC,MAAM;IAwBd,OAAO,CAAC,SAAS;IAgBjB,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,gBAAgB;IAwBxB,OAAO,CAAC,qBAAqB;IAuB7B,OAAO,CAAC,MAAM;IA4Bd,OAAO,CAAC,KAAK;IAab,OAAO,CAAC,IAAI;IAaZ,OAAO,CAAC,OAAO;IAUf,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,IAAI;CAGb"}

package/build/_modules/account-security/account-security-retention.control-service.js

@@ -0,0 +1,243 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_AccountSecurityRetention_ControlService = void 0;
+const account_security_retention_category_type_enum_1 = require("./_enums/account-security-retention-category.type-enum");
+const account_security_retention_reason_type_enum_1 = require("./_enums/account-security-retention-reason.type-enum");
+const account_refresh_token_state_type_enum_1 = require("./_enums/account-refresh-token-state.type-enum");
+const account_session_state_type_enum_1 = require("./_enums/account-session-state.type-enum");
+/**
+ * Applies caller-owned finite policy to content-minimal account-security projections.
+ *
+ * The evaluator has no storage, logging, network, subject identity or credential access. Active credentials are
+ * eligible at their own expiry. Terminated security evidence receives only the caller-approved finite evidence
+ * window. Challenges never receive a post-expiry grace period.
+ */
+class DyNTS_AccountSecurityRetention_ControlService {
+    clock;
+    /** Uses the trusted process clock in production and an explicit deterministic clock in tests. */
+    constructor(clock = () => new Date()) {
+        this.clock = clock;
+    }
+    /** Returns one frozen, identifier-free decision or fails closed with a stable code. */
+    evaluate(candidateValue, policyValue) {
+        const policy = this.policy(policyValue);
+        const candidate = this.candidate(candidateValue);
+        const evaluatedAt = this.validClock();
+        const deadline = this.deadline(candidate, policy);
+        const isDue = evaluatedAt.getTime() >= deadline.deadlineAt.getTime();
+        return Object.freeze({
+            contractVersion: 'dynts-account-security-retention-decision/1',
+            category: candidate.category,
+            evaluatedAt: evaluatedAt.toISOString(),
+            deletionDeadlineAt: deadline.deadlineAt.toISOString(),
+            eligibleForDeletion: isDue,
+            reasonCode: isDue
+                ? deadline.dueReasonCode
+                : account_security_retention_reason_type_enum_1.DyNTS_AccountSecurityRetentionReason_Type.retentionNotDue,
+            policyVersion: policy.policyVersion,
+            retentionBasisCode: policy.retentionBasisCode,
+        });
+    }
+    deadline(candidate, policy) {
+        switch (candidate.category) {
+            case account_security_retention_category_type_enum_1.DyNTS_AccountSecurityRetentionCategory_Type.challenge:
+                return {
+                    deadlineAt: this.date(candidate.expiresAt),
+                    dueReasonCode: account_security_retention_reason_type_enum_1.DyNTS_AccountSecurityRetentionReason_Type.challengeExpired,
+                };
+            case account_security_retention_category_type_enum_1.DyNTS_AccountSecurityRetentionCategory_Type.session:
+                return this.sessionDeadline(candidate, policy.securityEvidenceRetentionDays);
+            case account_security_retention_category_type_enum_1.DyNTS_AccountSecurityRetentionCategory_Type.refreshToken:
+                return this.refreshTokenDeadline(candidate, policy.securityEvidenceRetentionDays);
+            default:
+                throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_CANDIDATE');
+        }
+    }
+    sessionDeadline(candidate, evidenceDays) {
+        if (candidate.state === account_session_state_type_enum_1.DyNTS_AccountSessionState_Type.active) {
+            return {
+                deadlineAt: this.date(candidate.refreshExpiresAt),
+                dueReasonCode: account_security_retention_reason_type_enum_1.DyNTS_AccountSecurityRetentionReason_Type.activeSessionExpired,
+            };
+        }
+        const terminationAt = candidate.state === account_session_state_type_enum_1.DyNTS_AccountSessionState_Type.revoked
+            ? this.date(candidate.revokedAt)
+            : this.date(candidate.refreshExpiresAt);
+        return {
+            deadlineAt: this.addDays(terminationAt, evidenceDays),
+            dueReasonCode: account_security_retention_reason_type_enum_1.DyNTS_AccountSecurityRetentionReason_Type.sessionSecurityEvidenceExpired,
+        };
+    }
+    refreshTokenDeadline(candidate, evidenceDays) {
+        if (candidate.state === account_refresh_token_state_type_enum_1.DyNTS_AccountRefreshTokenState_Type.active) {
+            return {
+                deadlineAt: this.date(candidate.expiresAt),
+                dueReasonCode: account_security_retention_reason_type_enum_1.DyNTS_AccountSecurityRetentionReason_Type.activeRefreshTokenExpired,
+            };
+        }
+        return {
+            deadlineAt: this.addDays(this.date(candidate.usedAt), evidenceDays),
+            dueReasonCode: account_security_retention_reason_type_enum_1.DyNTS_AccountSecurityRetentionReason_Type.refreshTokenSecurityEvidenceExpired,
+        };
+    }
+    policy(value) {
+        const record = this.record(value, [
+            'contractVersion', 'securityEvidenceRetentionDays', 'policyVersion', 'retentionBasisCode',
+        ]);
+        if (record.contractVersion !== 'dynts-account-security-retention-policy/1'
+            || !Number.isSafeInteger(record.securityEvidenceRetentionDays)
+            || Number(record.securityEvidenceRetentionDays) < 1
+            || Number(record.securityEvidenceRetentionDays) > 3_650
+            || !this.code(record.policyVersion)
+            || !this.code(record.retentionBasisCode)) {
+            throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_POLICY');
+        }
+        return Object.freeze({
+            contractVersion: record.contractVersion,
+            securityEvidenceRetentionDays: Number(record.securityEvidenceRetentionDays),
+            policyVersion: String(record.policyVersion),
+            retentionBasisCode: String(record.retentionBasisCode),
+        });
+    }
+    candidate(value) {
+        const category = this.value(value, 'category');
+        switch (category) {
+            case account_security_retention_category_type_enum_1.DyNTS_AccountSecurityRetentionCategory_Type.challenge:
+                return this.challengeCandidate(value);
+            case account_security_retention_category_type_enum_1.DyNTS_AccountSecurityRetentionCategory_Type.session:
+                return this.sessionCandidate(value);
+            case account_security_retention_category_type_enum_1.DyNTS_AccountSecurityRetentionCategory_Type.refreshToken:
+                return this.refreshTokenCandidate(value);
+            default:
+                throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_CANDIDATE');
+        }
+    }
+    challengeCandidate(value) {
+        const record = this.record(value, ['category', 'expiresAt']);
+        this.date(record.expiresAt);
+        return Object.freeze({
+            category: account_security_retention_category_type_enum_1.DyNTS_AccountSecurityRetentionCategory_Type.challenge,
+            expiresAt: String(record.expiresAt),
+        });
+    }
+    sessionCandidate(value) {
+        const record = this.record(value, ['category', 'state', 'refreshExpiresAt', 'revokedAt']);
+        const state = this.sessionState(record.state);
+        this.date(record.refreshExpiresAt);
+        if (state === account_session_state_type_enum_1.DyNTS_AccountSessionState_Type.revoked) {
+            this.date(record.revokedAt);
+        }
+        else if (typeof record.revokedAt !== 'string' || record.revokedAt !== '') {
+            throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_CANDIDATE');
+        }
+        return Object.freeze({
+            category: account_security_retention_category_type_enum_1.DyNTS_AccountSecurityRetentionCategory_Type.session,
+            state: state,
+            refreshExpiresAt: String(record.refreshExpiresAt),
+            revokedAt: String(record.revokedAt),
+        });
+    }
+    refreshTokenCandidate(value) {
+        const record = this.record(value, ['category', 'state', 'expiresAt', 'usedAt']);
+        const state = this.refreshTokenState(record.state);
+        this.date(record.expiresAt);
+        if (state === account_refresh_token_state_type_enum_1.DyNTS_AccountRefreshTokenState_Type.active) {
+            if (typeof record.usedAt !== 'string' || record.usedAt !== '') {
+                throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_CANDIDATE');
+            }
+        }
+        else {
+            this.date(record.usedAt);
+        }
+        return Object.freeze({
+            category: account_security_retention_category_type_enum_1.DyNTS_AccountSecurityRetentionCategory_Type.refreshToken,
+            state: state,
+            expiresAt: String(record.expiresAt),
+            usedAt: String(record.usedAt),
+        });
+    }
+    record(value, exactKeys) {
+        if (!value
+            || typeof value !== 'object'
+            || Array.isArray(value)
+            || Object.getPrototypeOf(value) !== Object.prototype) {
+            throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_INPUT');
+        }
+        const keys = Object.keys(value);
+        if (keys.length !== exactKeys.length || exactKeys.some((key) => !keys.includes(key))) {
+            throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_INPUT');
+        }
+        const result = {};
+        for (const key of exactKeys) {
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            if (!descriptor || !('value' in descriptor)) {
+                throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_INPUT');
+            }
+            result[key] = descriptor.value;
+        }
+        return result;
+    }
+    value(candidate, key) {
+        if (!candidate || typeof candidate !== 'object' || Array.isArray(candidate)) {
+            throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_INPUT');
+        }
+        const descriptor = Object.getOwnPropertyDescriptor(candidate, key);
+        if (!descriptor || !('value' in descriptor)) {
+            throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_INPUT');
+        }
+        return descriptor.value;
+    }
+    date(value) {
+        if (typeof value !== 'string') {
+            throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_DATE');
+        }
+        const parsed = new Date(value);
+        if (Number.isNaN(parsed.getTime()) || parsed.toISOString() !== value) {
+            throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_DATE');
+        }
+        return parsed;
+    }
+    addDays(value, days) {
+        const result = new Date(value.getTime() + days * 24 * 60 * 60 * 1_000);
+        if (Number.isNaN(result.getTime())) {
+            throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_DATE');
+        }
+        return result;
+    }
+    validClock() {
+        const value = this.clock();
+        if (!(value instanceof Date) || Number.isNaN(value.getTime())) {
+            throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_CLOCK');
+        }
+        return new Date(value.getTime());
+    }
+    sessionState(value) {
+        switch (value) {
+            case account_session_state_type_enum_1.DyNTS_AccountSessionState_Type.active:
+                return account_session_state_type_enum_1.DyNTS_AccountSessionState_Type.active;
+            case account_session_state_type_enum_1.DyNTS_AccountSessionState_Type.revoked:
+                return account_session_state_type_enum_1.DyNTS_AccountSessionState_Type.revoked;
+            case account_session_state_type_enum_1.DyNTS_AccountSessionState_Type.expired:
+                return account_session_state_type_enum_1.DyNTS_AccountSessionState_Type.expired;
+            default:
+                throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_CANDIDATE');
+        }
+    }
+    refreshTokenState(value) {
+        switch (value) {
+            case account_refresh_token_state_type_enum_1.DyNTS_AccountRefreshTokenState_Type.active:
+                return account_refresh_token_state_type_enum_1.DyNTS_AccountRefreshTokenState_Type.active;
+            case account_refresh_token_state_type_enum_1.DyNTS_AccountRefreshTokenState_Type.used:
+                return account_refresh_token_state_type_enum_1.DyNTS_AccountRefreshTokenState_Type.used;
+            case account_refresh_token_state_type_enum_1.DyNTS_AccountRefreshTokenState_Type.revoked:
+                return account_refresh_token_state_type_enum_1.DyNTS_AccountRefreshTokenState_Type.revoked;
+            default:
+                throw new Error('DyNTS|ACCOUNT_SECURITY_RETENTION|INVALID_CANDIDATE');
+        }
+    }
+    code(value) {
+        return typeof value === 'string' && /^[a-z0-9][a-z0-9._:-]{2,127}$/u.test(value);
+    }
+}
+exports.DyNTS_AccountSecurityRetention_ControlService = DyNTS_AccountSecurityRetention_ControlService;
+//# sourceMappingURL=account-security-retention.control-service.js.map

package/build/_modules/account-security/account-security-retention.control-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-security-retention.control-service.js","sourceRoot":"","sources":["../../../src/_modules/account-security/account-security-retention.control-service.ts"],"names":[],"mappings":";;;AAAA,0HAAqH;AACrH,sHAAiH;AACjH,0GAAqG;AACrG,8FAA0F;AAe1F;;;;;;GAMG;AACH,MAAa,6CAA6C;IACvC,KAAK,CAAa;IAEnC,iGAAiG;IACjG,YAAmB,QAAoB,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE;QAC3D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,uFAAuF;IAChF,QAAQ,CACb,cAAuB,EACvB,WAAoB;QAEpB,MAAM,MAAM,GAAmD,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxF,MAAM,SAAS,GAAiD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC/F,MAAM,WAAW,GAAS,IAAI,CAAC,UAAU,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAqD,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACpG,MAAM,KAAK,GAAY,WAAW,CAAC,OAAO,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAE9E,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,eAAe,EAAE,6CAA6C;YAC9D,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;YACtC,kBAAkB,EAAE,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE;YACrD,mBAAmB,EAAE,KAAK;YAC1B,UAAU,EAAE,KAAK;gBACf,CAAC,CAAC,QAAQ,CAAC,aAAa;gBACxB,CAAC,CAAC,uFAAyC,CAAC,eAAe;YAC7D,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;SAC9C,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CACd,SAAuD,EACvD,MAAsD;QAEtD,QAAQ,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,2FAA2C,CAAC,SAAS;gBACxD,OAAO;oBACL,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;oBAC1C,aAAa,EAAE,uFAAyC,CAAC,gBAAgB;iBAC1E,CAAC;YACJ,KAAK,2FAA2C,CAAC,OAAO;gBACtD,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,6BAA6B,CAAC,CAAC;YAC/E,KAAK,2FAA2C,CAAC,YAAY;gBAC3D,OAAO,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,6BAA6B,CAAC,CAAC;YAEpF;gBACE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAEO,eAAe,CACrB,SAA2D,EAC3D,YAAoB;QAEpB,IAAI,SAAS,CAAC,KAAK,KAAK,gEAA8B,CAAC,MAAM,EAAE,CAAC;YAC9D,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;gBACjD,aAAa,EAAE,uFAAyC,CAAC,oBAAoB;aAC9E,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAS,SAAS,CAAC,KAAK,KAAK,gEAA8B,CAAC,OAAO;YACpF,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;YAChC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAE1C,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,YAAY,CAAC;YACrD,aAAa,EAAE,uFAAyC,CAAC,8BAA8B;SACxF,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAC1B,SAAgE,EAChE,YAAoB;QAEpB,IAAI,SAAS,CAAC,KAAK,KAAK,2EAAmC,CAAC,MAAM,EAAE,CAAC;YACnE,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;gBAC1C,aAAa,EAAE,uFAAyC,CAAC,yBAAyB;aACnF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;YACnE,aAAa,EAAE,uFAAyC,CAAC,mCAAmC;SAC7F,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,KAAc;QAC3B,MAAM,MAAM,GAA4B,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;YACzD,iBAAiB,EAAE,+BAA+B,EAAE,eAAe,EAAE,oBAAoB;SAC1F,CAAC,CAAC;QAEH,IACE,MAAM,CAAC,eAAe,KAAK,2CAA2C;eACnE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,6BAA6B,CAAC;eAC3D,MAAM,CAAC,MAAM,CAAC,6BAA6B,CAAC,GAAG,CAAC;eAChD,MAAM,CAAC,MAAM,CAAC,6BAA6B,CAAC,GAAG,KAAK;eACpD,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;eAChC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,EACxC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,6BAA6B,EAAE,MAAM,CAAC,MAAM,CAAC,6BAA6B,CAAC;YAC3E,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;YAC3C,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,KAAc;QAC9B,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAExD,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,2FAA2C,CAAC,SAAS;gBACxD,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACxC,KAAK,2FAA2C,CAAC,OAAO;gBACtD,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACtC,KAAK,2FAA2C,CAAC,YAAY;gBAC3D,OAAO,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAE3C;gBACE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,KAAc;QACvC,MAAM,MAAM,GAA4B,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAE,UAAU,EAAE,WAAW,CAAE,CAAC,CAAC;QAExF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE5B,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,2FAA2C,CAAC,SAAS;YAC/D,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAEO,gBAAgB,CAAC,KAAc;QACrC,MAAM,MAAM,GAA4B,IAAI,CAAC,MAAM,CACjD,KAAK,EACL,CAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,CAAE,CACzD,CAAC;QAEF,MAAM,KAAK,GAAmC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE9E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAEnC,IAAI,KAAK,KAAK,gEAA8B,CAAC,OAAO,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,2FAA2C,CAAC,OAAO;YAC7D,KAAK,EAAE,KAAK;YACZ,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACjD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAEO,qBAAqB,CAAC,KAAc;QAC1C,MAAM,MAAM,GAA4B,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAE,CAAC,CAAC;QAE3G,MAAM,KAAK,GAAwC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAExF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE5B,IAAI,KAAK,KAAK,2EAAmC,CAAC,MAAM,EAAE,CAAC;YACzD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBAC9D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,2FAA2C,CAAC,YAAY;YAClE,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;YACnC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,KAAc,EAAE,SAAmB;QAChD,IACE,CAAC,KAAK;eACH,OAAO,KAAK,KAAK,QAAQ;eACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;eACpB,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,EACpD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,IAAI,GAAa,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE1C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,GAAW,EAAW,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACtG,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAE3C,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAE/F,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;QACjC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,SAAkB,EAAE,GAAW;QAC3C,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,UAAU,GAAmC,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAEnG,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC;IAEO,IAAI,CAAC,KAAc;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,MAAM,GAAS,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QAErC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,OAAO,CAAC,KAAW,EAAE,IAAY;QACvC,MAAM,MAAM,GAAS,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAE7E,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,UAAU;QAChB,MAAM,KAAK,GAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QAEjC,IAAI,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC;IAEO,YAAY,CAAC,KAAc;QACjC,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,gEAA8B,CAAC,MAAM;gBACxC,OAAO,gEAA8B,CAAC,MAAM,CAAC;YAC/C,KAAK,gEAA8B,CAAC,OAAO;gBACzC,OAAO,gEAA8B,CAAC,OAAO,CAAC;YAChD,KAAK,gEAA8B,CAAC,OAAO;gBACzC,OAAO,gEAA8B,CAAC,OAAO,CAAC;YAEhD;gBACE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,KAAc;QACtC,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,2EAAmC,CAAC,MAAM;gBAC7C,OAAO,2EAAmC,CAAC,MAAM,CAAC;YACpD,KAAK,2EAAmC,CAAC,IAAI;gBAC3C,OAAO,2EAAmC,CAAC,IAAI,CAAC;YAClD,KAAK,2EAAmC,CAAC,OAAO;gBAC9C,OAAO,2EAAmC,CAAC,OAAO,CAAC;YAErD;gBACE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,KAAc;QACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnF,CAAC;CACF;AArSD,sGAqSC"}

package/build/_modules/account-security/index.d.ts

@@ -1,7 +1,10 @@
 export { DyNTS_AccountPassword_ControlService } from './account-password.control-service';
 export { DyNTS_AccountChallenge_ControlService } from './account-challenge.control-service';
 export { DyNTS_AccountSession_ControlService } from './account-session.control-service';
+export { DyNTS_AccountSecurityRetention_ControlService } from './account-security-retention.control-service';
 export { DyNTS_AccountChallengePurpose_Type } from './_enums/account-challenge-purpose.type-enum';
+export { DyNTS_AccountSecurityRetentionCategory_Type } from './_enums/account-security-retention-category.type-enum';
+export { DyNTS_AccountSecurityRetentionReason_Type } from './_enums/account-security-retention-reason.type-enum';
 export { DyNTS_AccountRefreshTokenState_Type } from './_enums/account-refresh-token-state.type-enum';
 export { DyNTS_AccountSessionState_Type } from './_enums/account-session-state.type-enum';
 export { DyNTS_AccountRefreshTokenRecord_Interface } from './_models/account-refresh-token-record.interface';
@@ -21,4 +24,5 @@ export { DyNTS_AccountSessionTokenPair_Interface } from './_models/account-sessi
 export { DyNTS_AccountSessionView_Interface } from './_models/account-session-view.interface';
 export { DyNTS_AccountPasswordPolicy_Interface } from './_models/account-password-policy.interface';
 export { DyNTS_AccountPasswordVerification_Interface } from './_models/account-password-verification.interface';
+export { DyNTS_AccountChallengeRetentionCandidate_Interface, DyNTS_AccountRefreshTokenRetentionCandidate_Interface, DyNTS_AccountSecurityRetentionCandidate_Type, DyNTS_AccountSecurityRetentionDecision_Interface, DyNTS_AccountSecurityRetentionPolicy_Interface, DyNTS_AccountSessionRetentionCandidate_Interface } from './_models/account-security-retention.interface';
 //# sourceMappingURL=index.d.ts.map

package/build/_modules/account-security/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/_modules/account-security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,oCAAoC,CAAC;AAC1F,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,EAAE,mCAAmC,EAAE,MAAM,mCAAmC,CAAC;AACxF,OAAO,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAClG,OAAO,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AACrG,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EACL,yCAAyC,EAC1C,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,wCAAwC,EAAE,MAAM,gDAAgD,CAAC;AAC1G,OAAO,EACL,qCAAqC,EACtC,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,uCAAuC,EAAE,MAAM,gDAAgD,CAAC;AACzG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EACL,qCAAqC,EACtC,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,2CAA2C,EAC5C,MAAM,mDAAmD,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/_modules/account-security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,oCAAoC,CAAC;AAC1F,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,EAAE,mCAAmC,EAAE,MAAM,mCAAmC,CAAC;AACxF,OAAO,EACL,6CAA6C,EAC9C,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAClG,OAAO,EACL,2CAA2C,EAC5C,MAAM,wDAAwD,CAAC;AAChE,OAAO,EACL,yCAAyC,EAC1C,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AACrG,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EACL,yCAAyC,EAC1C,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,wCAAwC,EAAE,MAAM,gDAAgD,CAAC;AAC1G,OAAO,EACL,qCAAqC,EACtC,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAClG,OAAO,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACtG,OAAO,EAAE,uCAAuC,EAAE,MAAM,gDAAgD,CAAC;AACzG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EACL,qCAAqC,EACtC,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,2CAA2C,EAC5C,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EACL,kDAAkD,EAClD,qDAAqD,EACrD,4CAA4C,EAC5C,gDAAgD,EAChD,8CAA8C,EAC9C,gDAAgD,EACjD,MAAM,gDAAgD,CAAC"}

package/build/_modules/account-security/index.js

@@ -1,14 +1,20 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DyNTS_AccountSessionState_Type = exports.DyNTS_AccountRefreshTokenState_Type = exports.DyNTS_AccountChallengePurpose_Type = exports.DyNTS_AccountSession_ControlService = exports.DyNTS_AccountChallenge_ControlService = exports.DyNTS_AccountPassword_ControlService = void 0;
+exports.DyNTS_AccountSessionState_Type = exports.DyNTS_AccountRefreshTokenState_Type = exports.DyNTS_AccountSecurityRetentionReason_Type = exports.DyNTS_AccountSecurityRetentionCategory_Type = exports.DyNTS_AccountChallengePurpose_Type = exports.DyNTS_AccountSecurityRetention_ControlService = exports.DyNTS_AccountSession_ControlService = exports.DyNTS_AccountChallenge_ControlService = exports.DyNTS_AccountPassword_ControlService = void 0;
 var account_password_control_service_1 = require("./account-password.control-service");
 Object.defineProperty(exports, "DyNTS_AccountPassword_ControlService", { enumerable: true, get: function () { return account_password_control_service_1.DyNTS_AccountPassword_ControlService; } });
 var account_challenge_control_service_1 = require("./account-challenge.control-service");
 Object.defineProperty(exports, "DyNTS_AccountChallenge_ControlService", { enumerable: true, get: function () { return account_challenge_control_service_1.DyNTS_AccountChallenge_ControlService; } });
 var account_session_control_service_1 = require("./account-session.control-service");
 Object.defineProperty(exports, "DyNTS_AccountSession_ControlService", { enumerable: true, get: function () { return account_session_control_service_1.DyNTS_AccountSession_ControlService; } });
+var account_security_retention_control_service_1 = require("./account-security-retention.control-service");
+Object.defineProperty(exports, "DyNTS_AccountSecurityRetention_ControlService", { enumerable: true, get: function () { return account_security_retention_control_service_1.DyNTS_AccountSecurityRetention_ControlService; } });
 var account_challenge_purpose_type_enum_1 = require("./_enums/account-challenge-purpose.type-enum");
 Object.defineProperty(exports, "DyNTS_AccountChallengePurpose_Type", { enumerable: true, get: function () { return account_challenge_purpose_type_enum_1.DyNTS_AccountChallengePurpose_Type; } });
+var account_security_retention_category_type_enum_1 = require("./_enums/account-security-retention-category.type-enum");
+Object.defineProperty(exports, "DyNTS_AccountSecurityRetentionCategory_Type", { enumerable: true, get: function () { return account_security_retention_category_type_enum_1.DyNTS_AccountSecurityRetentionCategory_Type; } });
+var account_security_retention_reason_type_enum_1 = require("./_enums/account-security-retention-reason.type-enum");
+Object.defineProperty(exports, "DyNTS_AccountSecurityRetentionReason_Type", { enumerable: true, get: function () { return account_security_retention_reason_type_enum_1.DyNTS_AccountSecurityRetentionReason_Type; } });
 var account_refresh_token_state_type_enum_1 = require("./_enums/account-refresh-token-state.type-enum");
 Object.defineProperty(exports, "DyNTS_AccountRefreshTokenState_Type", { enumerable: true, get: function () { return account_refresh_token_state_type_enum_1.DyNTS_AccountRefreshTokenState_Type; } });
 var account_session_state_type_enum_1 = require("./_enums/account-session-state.type-enum");

package/build/_modules/account-security/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/_modules/account-security/index.ts"],"names":[],"mappings":";;;AAAA,uFAA0F;AAAjF,wJAAA,oCAAoC,OAAA;AAC7C,yFAA4F;AAAnF,0JAAA,qCAAqC,OAAA;AAC9C,qFAAwF;AAA/E,sJAAA,mCAAmC,OAAA;AAC5C,oGAAkG;AAAzF,yJAAA,kCAAkC,OAAA;AAC3C,wGAAqG;AAA5F,4JAAA,mCAAmC,OAAA;AAC5C,4FAA0F;AAAjF,iJAAA,8BAA8B,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/_modules/account-security/index.ts"],"names":[],"mappings":";;;AAAA,uFAA0F;AAAjF,wJAAA,oCAAoC,OAAA;AAC7C,yFAA4F;AAAnF,0JAAA,qCAAqC,OAAA;AAC9C,qFAAwF;AAA/E,sJAAA,mCAAmC,OAAA;AAC5C,2GAEsD;AADpD,2KAAA,6CAA6C,OAAA;AAE/C,oGAAkG;AAAzF,yJAAA,kCAAkC,OAAA;AAC3C,wHAEgE;AAD9D,4KAAA,2CAA2C,OAAA;AAE7C,oHAE8D;AAD5D,wKAAA,yCAAyC,OAAA;AAE3C,wGAAqG;AAA5F,4JAAA,mCAAmC,OAAA;AAC5C,4FAA0F;AAAjF,iJAAA,8BAA8B,OAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@futdevpro/nts-dynamo",
-  "version": "01.15.224",
+  "version": "01.15.226",
   "description": "Dynamic NodeTS (NodeJS-Typescript), MongoDB Backend System Framework by Future Development Program Ltd.",
   "DyBu_settings": {
     "packageType": "server-package",