@digitaldefiance/node-express-suite 3.6.14 → 3.6.16

package/src/backup-code.d.ts

@@ -0,0 +1,68 @@
+import { Member as BackendMember } from '@digitaldefiance/node-ecies-lib';
+import { BackupCodeString, IBackupCode } from '@digitaldefiance/suite-core-lib';
+import { Types } from '@digitaldefiance/mongoose-types';
+import { IConstants } from './interfaces';
+/**
+ * Class representing a backup code string with associated operations.
+ *
+ * v1 scheme:
+ * - Code: 32 lowercase alphanumerics (a–z0–9), displayed as 8 groups of 4: xxxx-xxxx-xxxx-xxxx-xxxx-xxxx-xxxx-xxxx
+ * - Checksum/tag: HKDF-SHA256(codeUtf8, salt, "backup-checksum") → 32 bytes (stored as hex)
+ * - KDF for encryption key: Argon2id(codeUtf8, salt) → 32 bytes
+ * - Encryption: SymmetricService AEAD (encryptedData must embed IV + authTag + ciphertext)
+ * - Wrapping: AEAD blob wrapped with system user's asymmetric key (ECIES)
+ */
+export declare class BackupCode extends BackupCodeString {
+    /** Current backup code scheme version implemented by this service. */
+    static readonly BackupCodeVersion = "1.0.0";
+    private static readonly Argon2Params;
+    constructor(code: string);
+    /**
+     * Generate the configured number of backup codes.
+     * Note: If generation alphabet/length is controlled elsewhere, prefer that path.
+     */
+    static generateBackupCodes(constants?: IConstants): Array<BackupCode>;
+    /**
+     * HKDF-Extract-and-Expand using HMAC-SHA-256.
+     *
+     * PRK = HMAC(salt, ikm)
+     * T(0) = empty
+     * T(i) = HMAC(PRK, T(i-1) || info || i)
+     * OKM = first 'length' bytes of T(1) || T(2) || ...
+     */
+    static hkdfSha256(ikm: Buffer, salt: Buffer, info: Buffer, length: number): Buffer;
+    /**
+     * v1: Derive a 32-byte encryption key from a normalized backup code using Argon2id and the per-code salt.
+     * Uses UTF-8 bytes of the normalized code (not hex).
+     */
+    static getBackupKeyV1(checksumSaltHex: string, normalizedCode: string, constants?: IConstants): Promise<Buffer>;
+    /**
+     * v1: Compute a 32-byte checksum/tag for a normalized code using HKDF-SHA256(codeUtf8, salt, "backup-checksum").
+     */
+    private static computeChecksumV1;
+    encrypt<TID extends string | Types.ObjectId | Buffer | Uint8Array = Buffer>(backupUser: BackendMember<TID>, systemUser: BackendMember<TID>, constants?: IConstants): Promise<IBackupCode>;
+    /**
+     * v1: Encrypt and wrap backup codes for a user.
+     * - Validates code format (display or normalized)
+     * - Computes HKDF checksum/tag
+     * - Derives Argon2id encryption key (32 bytes) from UTF-8 code
+     * - Encrypts the private key with AEAD and wraps with system user
+     */
+    static encryptBackupCodesV1<TID extends string | Types.ObjectId | Buffer | Uint8Array = Buffer>(backupUser: BackendMember<TID>, systemUser: BackendMember<TID>, codes: Array<BackupCode>): Promise<Array<IBackupCode>>;
+    /** Delegate to current version. */
+    static encryptBackupCodes<TID extends string | Types.ObjectId | Buffer | Uint8Array = Buffer>(backupUser: BackendMember<TID>, systemUser: BackendMember<TID>, codes: Array<BackupCode>): Promise<Array<IBackupCode>>;
+    /**
+     * v1: Validate whether a backup code exists (unused) in the provided collection.
+     * Uses constant-time comparison of binary checksums (codeUtf8 + salt).
+     */
+    static validateBackupCodeV1(encryptedBackupCodes: Array<IBackupCode>, backupCode: string, constants?: IConstants): boolean;
+    /**
+     * Validate a backup code against any supported version present in the collection.
+     */
+    static validateBackupCode(encryptedBackupCodes: Array<IBackupCode>, backupCode: string, constants?: IConstants): boolean;
+    /**
+     * Detect the version by matching checksum against stored codes; returns the matched version.
+     */
+    static detectBackupCodeVersion(encryptedBackupCodes: Array<IBackupCode>, backupCode: string, constants?: IConstants): string;
+}
+//# sourceMappingURL=backup-code.d.ts.map

package/src/backup-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-code.d.ts","sourceRoot":"","sources":["../../../../packages/digitaldefiance-node-express-suite/src/backup-code.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,MAAM,IAAI,aAAa,EACxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,gBAAgB,EAChB,WAAW,EAKZ,MAAM,iCAAiC,CAAC;AAGzC,OAAO,EAAE,KAAK,EAAE,MAAM,iCAAiC,CAAC;AAGxD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1C;;;;;;;;;GASG;AACH,qBAAa,UAAW,SAAQ,gBAAgB;IAC9C,sEAAsE;IACtE,gBAAuB,iBAAiB,WAAW;IAEnD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAOzB;gBAEC,IAAI,EAAE,MAAM;IAIxB;;;OAGG;WACoB,mBAAmB,CACxC,SAAS,GAAE,UAA+B,GACzC,KAAK,CAAC,UAAU,CAAC;IAQpB;;;;;;;OAOG;WACW,UAAU,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,MAAM;IA2BT;;;OAGG;WACiB,cAAc,CAChC,eAAe,EAAE,MAAM,EACvB,cAAc,EAAE,MAAM,EACtB,SAAS,GAAE,UAA+B,GACzC,OAAO,CAAC,MAAM,CAAC;IAiBlB;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAiBnB,OAAO,CAClB,GAAG,SAAS,MAAM,GAAG,KAAK,CAAC,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,EAElE,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,EAC9B,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,EAC9B,SAAS,GAAE,UAA+B,GACzC,OAAO,CAAC,WAAW,CAAC;IAiDvB;;;;;;OAMG;WACiB,oBAAoB,CACtC,GAAG,SAAS,MAAM,GAAG,KAAK,CAAC,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,EAElE,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,EAC9B,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,EAC9B,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,GACvB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAQ9B,mCAAmC;WACrB,kBAAkB,CAC9B,GAAG,SAAS,MAAM,GAAG,KAAK,CAAC,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,EAElE,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,EAC9B,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,EAC9B,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,GACvB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAI9B;;;OAGG;WACW,oBAAoB,CAChC,oBAAoB,EAAE,KAAK,CAAC,WAAW,CAAC,EACxC,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,UAA+B,GACzC,OAAO;IA6BV;;OAEG;WACW,kBAAkB,CAC9B,oBAAoB,EAAE,KAAK,CAAC,WAAW,CAAC,EACxC,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,UAA+B,GACzC,OAAO;IAoBV;;OAEG;WACW,uBAAuB,CACnC,oBAAoB,EAAE,KAAK,CAAC,WAAW,CAAC,EACxC,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,UAA+B,GACzC,MAAM;CA0CV"}

package/src/backup-code.js

@@ -0,0 +1,238 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BackupCode = void 0;
+const tslib_1 = require("tslib");
+const ecies_lib_1 = require("@digitaldefiance/ecies-lib");
+const node_ecies_lib_1 = require("@digitaldefiance/node-ecies-lib");
+const suite_core_lib_1 = require("@digitaldefiance/suite-core-lib");
+const argon2 = tslib_1.__importStar(require("argon2"));
+const crypto_1 = require("crypto");
+const constants_1 = require("./constants");
+const invalid_backup_code_version_1 = require("./errors/invalid-backup-code-version");
+const symmetric_1 = require("./services/symmetric");
+/**
+ * Class representing a backup code string with associated operations.
+ *
+ * v1 scheme:
+ * - Code: 32 lowercase alphanumerics (a–z0–9), displayed as 8 groups of 4: xxxx-xxxx-xxxx-xxxx-xxxx-xxxx-xxxx-xxxx
+ * - Checksum/tag: HKDF-SHA256(codeUtf8, salt, "backup-checksum") → 32 bytes (stored as hex)
+ * - KDF for encryption key: Argon2id(codeUtf8, salt) → 32 bytes
+ * - Encryption: SymmetricService AEAD (encryptedData must embed IV + authTag + ciphertext)
+ * - Wrapping: AEAD blob wrapped with system user's asymmetric key (ECIES)
+ */
+class BackupCode extends suite_core_lib_1.BackupCodeString {
+    /** Current backup code scheme version implemented by this service. */
+    static BackupCodeVersion = '1.0.0';
+    // Centralized Argon2id parameters (tunable)
+    static Argon2Params = {
+        type: argon2.argon2id,
+        hashLength: 32, // derive AES-256 key
+        timeCost: 3,
+        memoryCost: 65536, // 64 MiB
+        parallelism: 1,
+        raw: true,
+    };
+    constructor(code) {
+        super(code);
+    }
+    /**
+     * Generate the configured number of backup codes.
+     * Note: If generation alphabet/length is controlled elsewhere, prefer that path.
+     */
+    static generateBackupCodes(constants = constants_1.LocalhostConstants) {
+        const codes = [];
+        for (let i = 0; i < constants.BACKUP_CODES.Count; i++) {
+            codes.push(new BackupCode(BackupCode.generateBackupCode()));
+        }
+        return codes;
+    }
+    /**
+     * HKDF-Extract-and-Expand using HMAC-SHA-256.
+     *
+     * PRK = HMAC(salt, ikm)
+     * T(0) = empty
+     * T(i) = HMAC(PRK, T(i-1) || info || i)
+     * OKM = first 'length' bytes of T(1) || T(2) || ...
+     */
+    static hkdfSha256(ikm, salt, info, length) {
+        if (length === 0) {
+            return Buffer.alloc(0);
+        }
+        // HKDF-Extract: PRK = HMAC-Hash(salt, IKM)
+        // If salt is empty, use a string of HashLen zeros
+        const actualSalt = salt.length === 0 ? Buffer.alloc(32, 0) : salt;
+        const prk = (0, crypto_1.createHmac)('sha256', actualSalt).update(ikm).digest();
+        // HKDF-Expand
+        const blocks = [];
+        let prev = Buffer.alloc(0);
+        const n = Math.ceil(length / 32);
+        for (let i = 1; i <= n; i++) {
+            const hmac = (0, crypto_1.createHmac)('sha256', prk);
+            hmac.update(prev);
+            hmac.update(info);
+            hmac.update(Buffer.from([i]));
+            prev = Buffer.from(hmac.digest());
+            blocks.push(prev);
+        }
+        return Buffer.concat(blocks).subarray(0, length);
+    }
+    /**
+     * v1: Derive a 32-byte encryption key from a normalized backup code using Argon2id and the per-code salt.
+     * Uses UTF-8 bytes of the normalized code (not hex).
+     */
+    static async getBackupKeyV1(checksumSaltHex, normalizedCode, constants = constants_1.LocalhostConstants) {
+        if (!constants.BACKUP_CODES.NormalizedHexRegex.test(normalizedCode)) {
+            throw new suite_core_lib_1.InvalidBackupCodeError();
+        }
+        const codeBytes = Buffer.from(normalizedCode, 'utf8');
+        const checksumSalt = Buffer.from(checksumSaltHex, 'hex');
+        try {
+            const key = (await argon2.hash(codeBytes, {
+                ...BackupCode.Argon2Params,
+                salt: checksumSalt,
+            }));
+            return key; // 32-byte Buffer
+        }
+        finally {
+            codeBytes.fill(0);
+        }
+    }
+    /**
+     * v1: Compute a 32-byte checksum/tag for a normalized code using HKDF-SHA256(codeUtf8, salt, "backup-checksum").
+     */
+    static computeChecksumV1(normalizedCode, checksumSalt) {
+        const codeBytes = Buffer.from(normalizedCode, 'utf8');
+        try {
+            return BackupCode.hkdfSha256(codeBytes, checksumSalt, Buffer.from('backup-checksum'), 32);
+        }
+        finally {
+            codeBytes.fill(0);
+        }
+    }
+    async encrypt(backupUser, systemUser, constants = constants_1.LocalhostConstants) {
+        if (!backupUser.hasPrivateKey) {
+            throw new suite_core_lib_1.PrivateKeyRequiredError();
+        }
+        if (systemUser.type !== ecies_lib_1.MemberType.System) {
+            throw new suite_core_lib_1.TranslatableSuiteError(suite_core_lib_1.SuiteCoreStringKey.Error_SystemUserMustBeSystemMemberType);
+        }
+        const raw = this.value ?? '';
+        const normalized = BackupCode.normalizeCode(raw);
+        if (!(constants.BACKUP_CODES.DisplayRegex.test(raw) ||
+            constants.BACKUP_CODES.NormalizedHexRegex.test(normalized))) {
+            throw new suite_core_lib_1.InvalidBackupCodeError();
+        }
+        const checksumSalt = (0, crypto_1.randomBytes)(node_ecies_lib_1.Constants.PBKDF2.SALT_BYTES);
+        const checksumBuf = BackupCode.computeChecksumV1(normalized, checksumSalt);
+        const encryptionKey = await BackupCode.getBackupKeyV1(checksumSalt.toString('hex'), normalized, constants);
+        try {
+            const sealed = symmetric_1.SymmetricService.encryptBuffer(Buffer.from(backupUser.privateKey.value), encryptionKey);
+            const wrappedEncryptedPrivateKey = systemUser
+                .encryptData(sealed.encryptedData)
+                .toString('hex');
+            return {
+                version: BackupCode.BackupCodeVersion,
+                checksumSalt: checksumSalt.toString('hex'),
+                checksum: checksumBuf.toString('hex'),
+                encrypted: wrappedEncryptedPrivateKey,
+            };
+        }
+        finally {
+            encryptionKey.fill(0);
+            checksumBuf.fill(0);
+        }
+    }
+    /**
+     * v1: Encrypt and wrap backup codes for a user.
+     * - Validates code format (display or normalized)
+     * - Computes HKDF checksum/tag
+     * - Derives Argon2id encryption key (32 bytes) from UTF-8 code
+     * - Encrypts the private key with AEAD and wraps with system user
+     */
+    static async encryptBackupCodesV1(backupUser, systemUser, codes) {
+        const encryptedCodes = [];
+        for (const code of codes) {
+            encryptedCodes.push(await code.encrypt(backupUser, systemUser));
+        }
+        return encryptedCodes;
+    }
+    /** Delegate to current version. */
+    static encryptBackupCodes(backupUser, systemUser, codes) {
+        return BackupCode.encryptBackupCodesV1(backupUser, systemUser, codes);
+    }
+    /**
+     * v1: Validate whether a backup code exists (unused) in the provided collection.
+     * Uses constant-time comparison of binary checksums (codeUtf8 + salt).
+     */
+    static validateBackupCodeV1(encryptedBackupCodes, backupCode, constants = constants_1.LocalhostConstants) {
+        const normalizedCode = suite_core_lib_1.BackupCodeString.normalizeCode(backupCode);
+        if (!constants.BACKUP_CODES.NormalizedHexRegex.test(normalizedCode)) {
+            return false;
+        }
+        const codeBytes = Buffer.from(normalizedCode, 'utf8');
+        try {
+            for (const code of encryptedBackupCodes) {
+                if (code.version !== BackupCode.BackupCodeVersion)
+                    continue;
+                const checksumSalt = Buffer.from(code.checksumSalt, 'hex');
+                const expected = BackupCode.hkdfSha256(codeBytes, checksumSalt, Buffer.from('backup-checksum'), 32);
+                if (code.checksum.length === expected.length * 2 &&
+                    (0, crypto_1.timingSafeEqual)(Buffer.from(code.checksum, 'hex'), expected)) {
+                    return true;
+                }
+            }
+            return false;
+        }
+        finally {
+            codeBytes.fill(0);
+        }
+    }
+    /**
+     * Validate a backup code against any supported version present in the collection.
+     */
+    static validateBackupCode(encryptedBackupCodes, backupCode, constants = constants_1.LocalhostConstants) {
+        const normalizedCode = suite_core_lib_1.BackupCodeString.normalizeCode(backupCode);
+        if (!constants.BACKUP_CODES.NormalizedHexRegex.test(normalizedCode)) {
+            return false;
+        }
+        if (encryptedBackupCodes.some((c) => c.version === BackupCode.BackupCodeVersion)) {
+            return this.validateBackupCodeV1(encryptedBackupCodes.filter((c) => c.version === BackupCode.BackupCodeVersion), normalizedCode);
+        }
+        return false;
+    }
+    /**
+     * Detect the version by matching checksum against stored codes; returns the matched version.
+     */
+    static detectBackupCodeVersion(encryptedBackupCodes, backupCode, constants = constants_1.LocalhostConstants) {
+        const normalizedCode = suite_core_lib_1.BackupCodeString.normalizeCode(backupCode);
+        if (!constants.BACKUP_CODES.NormalizedHexRegex.test(normalizedCode)) {
+            throw new suite_core_lib_1.InvalidBackupCodeError();
+        }
+        const v1Set = encryptedBackupCodes.filter((c) => c.version === BackupCode.BackupCodeVersion);
+        if (v1Set.length) {
+            const codeBytes = Buffer.from(normalizedCode, 'utf8');
+            try {
+                for (const c of v1Set) {
+                    const checksumSalt = Buffer.from(c.checksumSalt, 'hex');
+                    const expected = BackupCode.hkdfSha256(codeBytes, checksumSalt, Buffer.from('backup-checksum'), 32);
+                    if (c.checksum.length === expected.length * 2 &&
+                        (0, crypto_1.timingSafeEqual)(Buffer.from(c.checksum, 'hex'), expected)) {
+                        return c.version;
+                    }
+                }
+            }
+            finally {
+                // zeroize
+                codeBytes.fill(0);
+            }
+        }
+        const versionsInSet = new Set(encryptedBackupCodes.map((c) => c.version));
+        if (versionsInSet.size > 0 &&
+            !versionsInSet.has(BackupCode.BackupCodeVersion)) {
+            throw new invalid_backup_code_version_1.InvalidBackupCodeVersionError([...versionsInSet][0]);
+        }
+        throw new suite_core_lib_1.InvalidBackupCodeError();
+    }
+}
+exports.BackupCode = BackupCode;
+//# sourceMappingURL=backup-code.js.map

package/src/backup-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-code.js","sourceRoot":"","sources":["../../../../packages/digitaldefiance-node-express-suite/src/backup-code.ts"],"names":[],"mappings":";;;;AAAA,0DAAwD;AACxD,oEAGyC;AACzC,oEAOyC;AACzC,uDAAiC;AACjC,mCAAkE;AAElE,2CAAiD;AACjD,sFAAqF;AAErF,oDAAwD;AAExD;;;;;;;;;GASG;AACH,MAAa,UAAW,SAAQ,iCAAgB;IAC9C,sEAAsE;IAC/D,MAAM,CAAU,iBAAiB,GAAG,OAAO,CAAC;IACnD,4CAA4C;IACpC,MAAM,CAAU,YAAY,GAAG;QACrC,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,UAAU,EAAE,EAAE,EAAE,qBAAqB;QACrC,QAAQ,EAAE,CAAC;QACX,UAAU,EAAE,KAAK,EAAE,SAAS;QAC5B,WAAW,EAAE,CAAC;QACd,GAAG,EAAE,IAAa;KACV,CAAC;IAEX,YAAY,IAAY;QACtB,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IAED;;;OAGG;IACI,MAAM,CAAU,mBAAmB,CACxC,YAAwB,8BAAkB;QAE1C,MAAM,KAAK,GAAsB,EAAE,CAAC;QACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,UAAU,CACtB,GAAW,EACX,IAAY,EACZ,IAAY,EACZ,MAAc;QAEd,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QAED,2CAA2C;QAC3C,kDAAkD;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,MAAM,GAAG,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QAElE,cAAc;QACd,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,KAAK,CAAC,cAAc,CAChC,eAAuB,EACvB,cAAsB,EACtB,YAAwB,8BAAkB;QAE1C,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,uCAAsB,EAAE,CAAC;QACrC,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE;gBACxC,GAAG,UAAU,CAAC,YAAY;gBAC1B,IAAI,EAAE,YAAY;aACnB,CAAC,CAAW,CAAC;YACd,OAAO,GAAG,CAAC,CAAC,iBAAiB;QAC/B,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,iBAAiB,CAC9B,cAAsB,EACtB,YAAoB;QAEpB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,OAAO,UAAU,CAAC,UAAU,CAC1B,SAAS,EACT,YAAY,EACZ,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAC9B,EAAE,CACH,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,OAAO,CAGlB,UAA8B,EAC9B,UAA8B,EAC9B,YAAwB,8BAAkB;QAE1C,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;YAC9B,MAAM,IAAI,wCAAuB,EAAE,CAAC;QACtC,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,KAAK,sBAAU,CAAC,MAAM,EAAE,CAAC;YAC1C,MAAM,IAAI,uCAAsB,CAC9B,mCAAkB,CAAC,sCAAsC,CAC1D,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACjD,IACE,CAAC,CACC,SAAS,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7C,SAAS,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAC3D,EACD,CAAC;YACD,MAAM,IAAI,uCAAsB,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,YAAY,GAAG,IAAA,oBAAW,EAAC,0BAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjE,MAAM,WAAW,GAAG,UAAU,CAAC,iBAAiB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,cAAc,CACnD,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC5B,UAAU,EACV,SAAS,CACV,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,4BAAgB,CAAC,aAAa,CAC3C,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAW,CAAC,KAAK,CAAC,EACzC,aAAa,CACd,CAAC;YACF,MAAM,0BAA0B,GAAG,UAAU;iBAC1C,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC;iBACjC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAEnB,OAAO;gBACL,OAAO,EAAE,UAAU,CAAC,iBAAiB;gBACrC,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAC1C,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACrC,SAAS,EAAE,0BAA0B;aACvB,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAGtC,UAA8B,EAC9B,UAA8B,EAC9B,KAAwB;QAExB,MAAM,cAAc,GAAuB,EAAE,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,cAAc,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,mCAAmC;IAC5B,MAAM,CAAC,kBAAkB,CAG9B,UAA8B,EAC9B,UAA8B,EAC9B,KAAwB;QAExB,OAAO,UAAU,CAAC,oBAAoB,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,oBAAoB,CAChC,oBAAwC,EACxC,UAAkB,EAClB,YAAwB,8BAAkB;QAE1C,MAAM,cAAc,GAAG,iCAAgB,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;gBACxC,IAAI,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,iBAAiB;oBAAE,SAAS;gBAC5D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;gBAC3D,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CACpC,SAAS,EACT,YAAY,EACZ,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAC9B,EAAE,CACH,CAAC;gBACF,IACE,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC;oBAC5C,IAAA,wBAAe,EAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,EAC5D,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,kBAAkB,CAC9B,oBAAwC,EACxC,UAAkB,EAClB,YAAwB,8BAAkB;QAE1C,MAAM,cAAc,GAAG,iCAAgB,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IACE,oBAAoB,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,iBAAiB,CAClD,EACD,CAAC;YACD,OAAO,IAAI,CAAC,oBAAoB,CAC9B,oBAAoB,CAAC,MAAM,CACzB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,iBAAiB,CAClD,EACD,cAAc,CACf,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,uBAAuB,CACnC,oBAAwC,EACxC,UAAkB,EAClB,YAAwB,8BAAkB;QAE1C,MAAM,cAAc,GAAG,iCAAgB,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,uCAAsB,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,iBAAiB,CAClD,CAAC;QACF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YACtD,IAAI,CAAC;gBACH,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;oBACtB,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;oBACxD,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CACpC,SAAS,EACT,YAAY,EACZ,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAC9B,EAAE,CACH,CAAC;oBACF,IACE,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC;wBACzC,IAAA,wBAAe,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,EACzD,CAAC;wBACD,OAAO,CAAC,CAAC,OAAO,CAAC;oBACnB,CAAC;gBACH,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,UAAU;gBACV,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1E,IACE,aAAa,CAAC,IAAI,GAAG,CAAC;YACtB,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAChD,CAAC;YACD,MAAM,IAAI,2DAA6B,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,IAAI,uCAAsB,EAAE,CAAC;IACrC,CAAC;;AA3TH,gCA4TC"}

package/src/builders/application-builder.d.ts

@@ -0,0 +1,34 @@
+import mongoose from '@digitaldefiance/mongoose-types';
+import { Application } from '../application';
+import { BaseRouter } from '../routers/base';
+import { AppRouter } from '../routers/app';
+import { Environment } from '../environment';
+import { IConstants } from '../interfaces/constants';
+import { ICSPConfig, IFailableResult, IServerInitResult } from '../interfaces';
+import { SchemaMap } from '../types';
+import { IBaseDocument } from '../documents';
+import { BaseApplication } from '../application-base';
+import { HelmetOptions } from 'helmet';
+import { IFlexibleCSP } from '../interfaces/flexible-csp';
+import { initMiddleware } from '../middlewares';
+export declare class ApplicationBuilder<TModelDocs extends Record<string, IBaseDocument<any>>, TInitResults extends IServerInitResult, TConstants extends IConstants = IConstants> {
+    private environment?;
+    private apiRouterFactory?;
+    private appRouterFactory?;
+    private schemaMapFactory?;
+    private databaseInitFunction?;
+    private initResultHashFunction?;
+    private cspConfig?;
+    private constants?;
+    private customInitMiddleware?;
+    withEnvironment(env: Environment): this;
+    withApiRouter(factory: (app: any) => BaseRouter): this;
+    withAppRouter(factory: (apiRouter: BaseRouter) => AppRouter): this;
+    withSchemaMap(factory: (connection: mongoose.Connection) => SchemaMap<TModelDocs>): this;
+    withDatabaseInit(initFn: (app: BaseApplication<TModelDocs, TInitResults>) => Promise<IFailableResult<TInitResults>>, hashFn: (results: TInitResults) => string): this;
+    withCSP(config: ICSPConfig | HelmetOptions | IFlexibleCSP): this;
+    withConstants(constants: TConstants): this;
+    withMiddleware(middleware: typeof initMiddleware): this;
+    build(): Application<TInitResults, TModelDocs, Environment, TConstants, AppRouter>;
+}
+//# sourceMappingURL=application-builder.d.ts.map

package/src/builders/application-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-builder.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-express-suite/src/builders/application-builder.ts"],"names":[],"mappings":"AAAA,OAAO,QAAmB,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGhD,qBAAa,kBAAkB,CAC7B,UAAU,SAAS,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,EACrD,YAAY,SAAS,iBAAiB,EACtC,UAAU,SAAS,UAAU,GAAG,UAAU;IAE1C,OAAO,CAAC,WAAW,CAAC,CAAc;IAClC,OAAO,CAAC,gBAAgB,CAAC,CAA2B;IACpD,OAAO,CAAC,gBAAgB,CAAC,CAAuC;IAChE,OAAO,CAAC,gBAAgB,CAAC,CAA6D;IACtF,OAAO,CAAC,oBAAoB,CAAC,CAA6F;IAC1H,OAAO,CAAC,sBAAsB,CAAC,CAAoC;IACnE,OAAO,CAAC,SAAS,CAAC,CAA4C;IAC9D,OAAO,CAAC,SAAS,CAAC,CAAa;IAC/B,OAAO,CAAC,oBAAoB,CAAC,CAAwB;IAErD,eAAe,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI;IAKvC,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,UAAU,GAAG,IAAI;IAKtD,aAAa,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,SAAS,GAAG,IAAI;IAKlE,aAAa,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI;IAKxF,gBAAgB,CACd,MAAM,EAAE,CAAC,GAAG,EAAE,eAAe,CAAC,UAAU,EAAE,YAAY,CAAC,KAAK,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,EAClG,MAAM,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,MAAM,GACxC,IAAI;IAMP,OAAO,CAAC,MAAM,EAAE,UAAU,GAAG,aAAa,GAAG,YAAY,GAAG,IAAI;IAKhE,aAAa,CAAC,SAAS,EAAE,UAAU,GAAG,IAAI;IAK1C,cAAc,CAAC,UAAU,EAAE,OAAO,cAAc,GAAG,IAAI;IAKvD,KAAK,IAAI,WAAW,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC;CAmBnF"}

package/src/builders/application-builder.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApplicationBuilder = void 0;
+const application_1 = require("../application");
+const suite_core_lib_1 = require("@digitaldefiance/suite-core-lib");
+class ApplicationBuilder {
+    environment;
+    apiRouterFactory;
+    appRouterFactory;
+    schemaMapFactory;
+    databaseInitFunction;
+    initResultHashFunction;
+    cspConfig;
+    constants;
+    customInitMiddleware;
+    withEnvironment(env) {
+        this.environment = env;
+        return this;
+    }
+    withApiRouter(factory) {
+        this.apiRouterFactory = factory;
+        return this;
+    }
+    withAppRouter(factory) {
+        this.appRouterFactory = factory;
+        return this;
+    }
+    withSchemaMap(factory) {
+        this.schemaMapFactory = factory;
+        return this;
+    }
+    withDatabaseInit(initFn, hashFn) {
+        this.databaseInitFunction = initFn;
+        this.initResultHashFunction = hashFn;
+        return this;
+    }
+    withCSP(config) {
+        this.cspConfig = config;
+        return this;
+    }
+    withConstants(constants) {
+        this.constants = constants;
+        return this;
+    }
+    withMiddleware(middleware) {
+        this.customInitMiddleware = middleware;
+        return this;
+    }
+    build() {
+        if (!this.environment)
+            throw new suite_core_lib_1.TranslatableSuiteError(suite_core_lib_1.SuiteCoreStringKey.Error_EnvironmentIsRequired);
+        if (!this.apiRouterFactory)
+            throw new suite_core_lib_1.TranslatableSuiteError(suite_core_lib_1.SuiteCoreStringKey.Error_ApiRouterFactoryIsRequired);
+        if (!this.schemaMapFactory)
+            throw new suite_core_lib_1.TranslatableSuiteError(suite_core_lib_1.SuiteCoreStringKey.Error_SchemaMapFactoryIsRequired);
+        if (!this.databaseInitFunction)
+            throw new suite_core_lib_1.TranslatableSuiteError(suite_core_lib_1.SuiteCoreStringKey.Error_DatabaseInitFunctionIsRequired);
+        if (!this.initResultHashFunction)
+            throw new suite_core_lib_1.TranslatableSuiteError(suite_core_lib_1.SuiteCoreStringKey.Error_InitResultHashFunctionIsRequired);
+        return new application_1.Application(this.environment, this.apiRouterFactory, this.schemaMapFactory, this.databaseInitFunction, this.initResultHashFunction, this.cspConfig, this.constants, this.appRouterFactory, this.customInitMiddleware);
+    }
+}
+exports.ApplicationBuilder = ApplicationBuilder;
+//# sourceMappingURL=application-builder.js.map

package/src/builders/application-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-builder.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-express-suite/src/builders/application-builder.ts"],"names":[],"mappings":";;;AACA,gDAA6C;AAY7C,oEAA6F;AAE7F,MAAa,kBAAkB;IAKrB,WAAW,CAAe;IAC1B,gBAAgB,CAA4B;IAC5C,gBAAgB,CAAwC;IACxD,gBAAgB,CAA8D;IAC9E,oBAAoB,CAA8F;IAClH,sBAAsB,CAAqC;IAC3D,SAAS,CAA6C;IACtD,SAAS,CAAc;IACvB,oBAAoB,CAAyB;IAErD,eAAe,CAAC,GAAgB;QAC9B,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa,CAAC,OAAiC;QAC7C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa,CAAC,OAA6C;QACzD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa,CAAC,OAAmE;QAC/E,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gBAAgB,CACd,MAAkG,EAClG,MAAyC;QAEzC,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC;QACnC,IAAI,CAAC,sBAAsB,GAAG,MAAM,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,MAAiD;QACvD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa,CAAC,SAAqB;QACjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,cAAc,CAAC,UAAiC;QAC9C,IAAI,CAAC,oBAAoB,GAAG,UAAU,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,uCAAsB,CAAC,mCAAkB,CAAC,2BAA2B,CAAC,CAAC;QACxG,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAAE,MAAM,IAAI,uCAAsB,CAAC,mCAAkB,CAAC,gCAAgC,CAAC,CAAC;QAClH,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAAE,MAAM,IAAI,uCAAsB,CAAC,mCAAkB,CAAC,gCAAgC,CAAC,CAAC;QAClH,IAAI,CAAC,IAAI,CAAC,oBAAoB;YAAE,MAAM,IAAI,uCAAsB,CAAC,mCAAkB,CAAC,oCAAoC,CAAC,CAAC;QAC1H,IAAI,CAAC,IAAI,CAAC,sBAAsB;YAAE,MAAM,IAAI,uCAAsB,CAAC,mCAAkB,CAAC,sCAAsC,CAAC,CAAC;QAE9H,OAAO,IAAI,yBAAW,CACpB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,oBAAoB,EACzB,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,oBAAoB,CAC1B,CAAC;IACJ,CAAC;CACF;AA9ED,gDA8EC"}

package/src/builders/{index.ts → index.d.ts}

@@ -1 +1,2 @@
 export * from './application-builder';
+//# sourceMappingURL=index.d.ts.map

package/src/builders/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-express-suite/src/builders/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC"}

package/src/builders/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./application-builder"), exports);
+//# sourceMappingURL=index.js.map

package/src/builders/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-express-suite/src/builders/index.ts"],"names":[],"mappings":";;;AAAA,gEAAsC"}

package/src/constants.d.ts

@@ -0,0 +1,16 @@
+import { IFECConsts } from './interfaces';
+import { IChecksumConsts } from './interfaces/checksum-consts';
+import { IConstants } from './interfaces/constants';
+import { IJwtConsts } from './interfaces/jwt-consts';
+/**
+ * Constants for checksum operations
+ * These values are critical for data integrity and MUST NOT be changed
+ * in an already established system as it will break all existing checksums.
+ */
+export declare const CHECKSUM: IChecksumConsts;
+export declare const JWT: IJwtConsts;
+export declare const FEC: IFECConsts;
+export declare const ECIES: Readonly<import("@digitaldefiance/ecies-lib").IECIESConstants>;
+export declare const createExpressConstants: (siteDomain: string, siteHostname: string, overrides?: Partial<IConstants>) => IConstants;
+export declare const LocalhostConstants: IConstants;
+//# sourceMappingURL=constants.d.ts.map

package/src/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../packages/digitaldefiance-node-express-suite/src/constants.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,QAAQ,EAAE,eAYZ,CAAC;AAEZ,eAAO,MAAM,GAAG,EAAE,UAUR,CAAC;AAEX,eAAO,MAAM,GAAG,EAAE,UAKR,CAAC;AAGX,eAAO,MAAM,KAAK,gEAA+B,CAAC;AAElD,eAAO,MAAM,sBAAsB,GACjC,YAAY,MAAM,EAClB,cAAc,MAAM,EACpB,YAAY,OAAO,CAAC,UAAU,CAAC,KAC9B,UAWF,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,UAGhC,CAAC"}

package/src/constants.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalhostConstants = exports.createExpressConstants = exports.ECIES = exports.FEC = exports.JWT = exports.CHECKSUM = void 0;
+const ecies_lib_1 = require("@digitaldefiance/ecies-lib");
+const node_ecies_lib_1 = require("@digitaldefiance/node-ecies-lib");
+const suite_core_lib_1 = require("@digitaldefiance/suite-core-lib");
+/**
+ * Constants for checksum operations
+ * These values are critical for data integrity and MUST NOT be changed
+ * in an already established system as it will break all existing checksums.
+ */
+exports.CHECKSUM = Object.freeze({
+    /** Default hash bits for SHA3 */
+    SHA3_DEFAULT_HASH_BITS: 512,
+    /** Length of a SHA3 checksum buffer in bytes */
+    SHA3_BUFFER_LENGTH: 64,
+    /** algorithm to use for checksum */
+    ALGORITHM: 'sha3-512',
+    /** encoding to use for checksum */
+    ENCODING: 'hex',
+});
+exports.JWT = {
+    /**
+     * Algorithm to use for JWT
+     */
+    ALGORITHM: 'HS256',
+    /**
+     * The expiration time for a JWT token in seconds
+     */
+    EXPIRATION_SEC: 86400,
+};
+exports.FEC = {
+    /**
+     * Maximum size of a single shard
+     */
+    MAX_SHARD_SIZE: 1048576,
+};
+// use defaults from ecies-lib
+exports.ECIES = Object.freeze(ecies_lib_1.ECIES);
+const createExpressConstants = (siteDomain, siteHostname, overrides) => {
+    return Object.freeze({
+        ...node_ecies_lib_1.Constants,
+        CHECKSUM: exports.CHECKSUM,
+        JWT: exports.JWT,
+        FEC: exports.FEC,
+        ECIES: exports.ECIES,
+        ECIES_VERSION_SIZE: 1,
+        ECIES_CIPHER_SUITE_SIZE: 1,
+        ...(0, suite_core_lib_1.createConstants)(siteDomain, siteHostname, overrides),
+    });
+};
+exports.createExpressConstants = createExpressConstants;
+exports.LocalhostConstants = (0, exports.createExpressConstants)('localhost', 'localhost');
+if (exports.CHECKSUM.SHA3_BUFFER_LENGTH !== exports.CHECKSUM.SHA3_DEFAULT_HASH_BITS / 8 ||
+    exports.CHECKSUM.SHA3_BUFFER_LENGTH !== exports.CHECKSUM.SHA3_DEFAULT_HASH_BITS / 8) {
+    throw new suite_core_lib_1.TranslatableSuiteError(suite_core_lib_1.SuiteCoreStringKey.Error_InvalidChecksumConstants);
+}
+//# sourceMappingURL=constants.js.map

package/src/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../packages/digitaldefiance-node-express-suite/src/constants.ts"],"names":[],"mappings":";;;AAAA,0DAAoE;AACpE,oEAAkF;AAClF,oEAIyC;AAMzC;;;;GAIG;AACU,QAAA,QAAQ,GAAoB,MAAM,CAAC,MAAM,CAAC;IACrD,iCAAiC;IACjC,sBAAsB,EAAE,GAAY;IAEpC,gDAAgD;IAChD,kBAAkB,EAAE,EAAW;IAE/B,oCAAoC;IACpC,SAAS,EAAE,UAAmB;IAE9B,mCAAmC;IACnC,QAAQ,EAAE,KAAc;CAChB,CAAC,CAAC;AAEC,QAAA,GAAG,GAAe;IAC7B;;OAEG;IACH,SAAS,EAAE,OAAgB;IAE3B;;OAEG;IACH,cAAc,EAAE,KAAc;CACtB,CAAC;AAEE,QAAA,GAAG,GAAe;IAC7B;;OAEG;IACH,cAAc,EAAE,OAAgB;CACxB,CAAC;AAEX,8BAA8B;AACjB,QAAA,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAa,CAAC,CAAC;AAE3C,MAAM,sBAAsB,GAAG,CACpC,UAAkB,EAClB,YAAoB,EACpB,SAA+B,EACnB,EAAE;IACd,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,0BAAkB;QACrB,QAAQ,EAAE,gBAAQ;QAClB,GAAG,EAAE,WAAG;QACR,GAAG,EAAE,WAAG;QACR,KAAK,EAAE,aAAK;QACZ,kBAAkB,EAAE,CAAC;QACrB,uBAAuB,EAAE,CAAC;QAC1B,GAAG,IAAA,gCAAe,EAAC,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC;KAC1C,CAAC,CAAC;AACnB,CAAC,CAAC;AAfW,QAAA,sBAAsB,0BAejC;AAEW,QAAA,kBAAkB,GAAe,IAAA,8BAAsB,EAClE,WAAW,EACX,WAAW,CACZ,CAAC;AAEF,IACE,gBAAQ,CAAC,kBAAkB,KAAK,gBAAQ,CAAC,sBAAsB,GAAG,CAAC;IACnE,gBAAQ,CAAC,kBAAkB,KAAK,gBAAQ,CAAC,sBAAsB,GAAG,CAAC,EACnE,CAAC;IACD,MAAM,IAAI,uCAAsB,CAC9B,mCAAkB,CAAC,8BAA8B,CAClD,CAAC;AACJ,CAAC"}

package/src/container/{index.ts → index.d.ts}

@@ -1,2 +1,3 @@
 export * from './service-container';
 export * from './service-definitions';
+//# sourceMappingURL=index.d.ts.map

package/src/container/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-express-suite/src/container/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC"}

package/src/container/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./service-container"), exports);
+tslib_1.__exportStar(require("./service-definitions"), exports);
+//# sourceMappingURL=index.js.map

package/src/container/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-express-suite/src/container/index.ts"],"names":[],"mappings":";;;AAAA,8DAAoC;AACpC,gEAAsC"}

package/src/container/service-container.d.ts

@@ -0,0 +1,11 @@
+export type ServiceFactory<T = any> = () => T;
+export declare class ServiceContainer {
+    private services;
+    private instances;
+    private singletons;
+    register<T>(key: string, factory: ServiceFactory<T>, singleton?: boolean): void;
+    get<T>(key: string): T;
+    has(key: string): boolean;
+    clear(): void;
+}
+//# sourceMappingURL=service-container.d.ts.map

package/src/container/service-container.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-container.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-express-suite/src/container/service-container.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,cAAc,CAAC,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,CAAC;AAE9C,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAqC;IACrD,OAAO,CAAC,SAAS,CAA0B;IAC3C,OAAO,CAAC,UAAU,CAAqB;IAEvC,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,UAAO,GAAG,IAAI;IAO5E,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC;IAetB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIzB,KAAK,IAAI,IAAI;CAGd"}

package/src/container/service-container.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServiceContainer = void 0;
+const suite_core_lib_1 = require("@digitaldefiance/suite-core-lib");
+class ServiceContainer {
+    services = new Map();
+    instances = new Map();
+    singletons = new Set();
+    register(key, factory, singleton = true) {
+        this.services.set(key, factory);
+        if (singleton) {
+            this.singletons.add(key);
+        }
+    }
+    get(key) {
+        if (this.singletons.has(key)) {
+            if (!this.instances.has(key)) {
+                const factory = this.services.get(key);
+                if (!factory)
+                    throw new suite_core_lib_1.TranslatableSuiteError(suite_core_lib_1.SuiteCoreStringKey.Error_ServiceIsNotRegisteredTemplate, { key });
+                this.instances.set(key, factory());
+            }
+            return this.instances.get(key);
+        }
+        const factory = this.services.get(key);
+        if (!factory)
+            throw new suite_core_lib_1.TranslatableSuiteError(suite_core_lib_1.SuiteCoreStringKey.Error_ServiceIsNotRegisteredTemplate, { key });
+        return factory();
+    }
+    has(key) {
+        return this.services.has(key);
+    }
+    clear() {
+        this.instances.clear();
+    }
+}
+exports.ServiceContainer = ServiceContainer;
+//# sourceMappingURL=service-container.js.map

package/src/container/service-container.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-container.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-express-suite/src/container/service-container.ts"],"names":[],"mappings":";;;AAAA,oEAA6F;AAI7F,MAAa,gBAAgB;IACnB,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC7C,SAAS,GAAG,IAAI,GAAG,EAAe,CAAC;IACnC,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,QAAQ,CAAI,GAAW,EAAE,OAA0B,EAAE,SAAS,GAAG,IAAI;QACnE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,GAAG,CAAI,GAAW;QAChB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,uCAAsB,CAAC,mCAAkB,CAAC,oCAAoC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;gBACjH,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,uCAAsB,CAAC,mCAAkB,CAAC,oCAAoC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACjH,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;CACF;AAlCD,4CAkCC"}

package/src/container/service-definitions.d.ts

@@ -0,0 +1,11 @@
+export declare const ServiceKeys: {
+    readonly JWT: "jwt";
+    readonly EMAIL: "email";
+    readonly ECIES: "ecies";
+    readonly KEY_WRAPPING: "keyWrapping";
+    readonly ROLE: "role";
+    readonly USER: "user";
+    readonly BACKUP_CODE: "backupCode";
+};
+export type ServiceKey = typeof ServiceKeys[keyof typeof ServiceKeys];
+//# sourceMappingURL=service-definitions.d.ts.map

package/src/container/service-definitions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-definitions.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-express-suite/src/container/service-definitions.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW;;;;;;;;CAQd,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC"}