@nmshd/transport 1.0.0

package/dist/modules/devices/DeviceSecretController.js

@@ -0,0 +1,163 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeviceSecretController = exports.DeviceSecretType = void 0;
+const ts_serval_1 = require("@js-soft/ts-serval");
+const crypto_1 = require("@nmshd/crypto");
+const core_1 = require("../../core");
+const CoreIds_1 = require("../../core/CoreIds");
+const TransportController_1 = require("../../core/TransportController");
+const SecretContainerCipher_1 = require("../secrets/data/SecretContainerCipher");
+const SecretContainerPlain_1 = require("../secrets/data/SecretContainerPlain");
+const DeviceSharedSecret_1 = require("./transmission/DeviceSharedSecret");
+var DeviceSecretType;
+(function (DeviceSecretType) {
+    DeviceSecretType["IdentitySynchronizationMaster"] = "identity_synchronization_master";
+    DeviceSecretType["IdentitySignature"] = "identity_signature";
+    DeviceSecretType["SharedSecretBaseKey"] = "shared_basekey";
+    DeviceSecretType["DeviceSecretBaseKey"] = "secret_basekey";
+    DeviceSecretType["DeviceSignature"] = "device_signature";
+    DeviceSecretType["DeviceCredentials"] = "device_credentials";
+})(DeviceSecretType = exports.DeviceSecretType || (exports.DeviceSecretType = {}));
+/**
+ * The SecretController which acts as a single touchpoint to access any secret within the runtime.
+ * Each access can be audited.
+ *
+ */
+class DeviceSecretController extends TransportController_1.TransportController {
+    constructor(parent, baseKey) {
+        super(TransportController_1.ControllerName.DeviceSecret, parent);
+        this.baseKey = baseKey;
+    }
+    async init() {
+        await super.init();
+        this.secrets = await this.db.getMap("DeviceSecrets");
+        return this;
+    }
+    async storeSecret(secret, name) {
+        const plainString = secret.serialize();
+        const plainBuffer = crypto_1.CoreBuffer.fromUtf8(plainString);
+        const encryptionKey = await core_1.CoreCrypto.deriveKeyFromBase(this.getBaseKey(), 1, DeviceSecretController.secretContext);
+        const cipher = await core_1.CoreCrypto.encrypt(plainBuffer, encryptionKey);
+        const date = core_1.CoreDate.utc();
+        const secretContainerInterface = {
+            cipher: cipher,
+            createdAt: date,
+            name: name,
+            id: await CoreIds_1.TransportIds.secret.generate(),
+            validFrom: date,
+            active: true
+        };
+        const container = await SecretContainerCipher_1.SecretContainerCipher.from(secretContainerInterface);
+        this.log.trace(`Created device secret id:${container.id} name:${container.name} on ${container.createdAt.toISOString()}.`);
+        await this.secrets.set(name, container.toJSON());
+        return container;
+    }
+    async loadSecret(name) {
+        const secretObj = await this.secrets.get(name);
+        if (!secretObj)
+            return;
+        const baseKey = this.getBaseKey();
+        const secret = await SecretContainerCipher_1.SecretContainerCipher.from(secretObj);
+        const decryptionKey = await core_1.CoreCrypto.deriveKeyFromBase(baseKey, 1, DeviceSecretController.secretContext);
+        const plainBuffer = await core_1.CoreCrypto.decrypt(secret.cipher, decryptionKey);
+        const plainString = plainBuffer.toUtf8();
+        const decryptedSecret = await ts_serval_1.SerializableAsync.deserializeUnknown(plainString);
+        const plainSecret = await SecretContainerPlain_1.SecretContainerPlain.from({
+            id: secret.id,
+            createdAt: secret.createdAt,
+            name: secret.name,
+            secret: decryptedSecret,
+            validFrom: secret.validFrom,
+            validTo: secret.validTo,
+            active: secret.active
+        });
+        this.log.trace(`Accessed device secret id:${plainSecret.id} name:${plainSecret.name} on ${core_1.CoreDate.utc().toISOString()}.`);
+        return plainSecret;
+    }
+    async deleteSecret(name) {
+        const secretObj = await this.secrets.get(name);
+        if (!secretObj) {
+            return false;
+        }
+        await this.secrets.delete(name);
+        this.log.trace(`Deleted device secret id:${secretObj.id} name:${secretObj.name} on ${core_1.CoreDate.utc().toISOString()}.`);
+        return true;
+    }
+    async createDeviceSharedSecret(device, deviceIndex, includeIdentityPrivateKey = false) {
+        const synchronizationKey = await this.loadSecret(DeviceSecretType.IdentitySynchronizationMaster);
+        if (!synchronizationKey || !(synchronizationKey.secret instanceof crypto_1.CryptoSecretKey)) {
+            throw core_1.TransportErrors.secrets.secretNotFound("SynchronizationKey").logWith(this._log);
+        }
+        const baseKey = await this.loadSecret(DeviceSecretType.SharedSecretBaseKey);
+        if (!baseKey || !(baseKey.secret instanceof crypto_1.CryptoSecretKey)) {
+            throw core_1.TransportErrors.secrets.secretNotFound("baseKey").logWith(this._log);
+        }
+        let identityPrivateKey;
+        if (includeIdentityPrivateKey) {
+            identityPrivateKey = await this.loadSecret(DeviceSecretType.IdentitySignature);
+            if (!identityPrivateKey || !(identityPrivateKey.secret instanceof crypto_1.CryptoSignaturePrivateKey)) {
+                throw core_1.TransportErrors.secrets.secretNotFound("IdentityKey").logWith(this._log);
+            }
+        }
+        const deviceSharedSecret = await DeviceSharedSecret_1.DeviceSharedSecret.from({
+            id: device.id,
+            createdAt: device.createdAt,
+            createdByDevice: device.createdByDevice,
+            deviceIndex: deviceIndex,
+            secretBaseKey: baseKey.secret,
+            name: device.name,
+            description: device.description,
+            synchronizationKey: synchronizationKey.secret,
+            identityPrivateKey: identityPrivateKey === null || identityPrivateKey === void 0 ? void 0 : identityPrivateKey.secret,
+            username: device.username,
+            password: device.initialPassword,
+            identity: this.parent.identity.identity
+        });
+        // TODO: JSSNMSHDD-2474 (Rollback on error)
+        return deviceSharedSecret;
+    }
+    async encryptDatawalletModificationPayload(event, index) {
+        if (!event.payload) {
+            return undefined;
+        }
+        const serializedEvent = crypto_1.CoreBuffer.fromUtf8(JSON.stringify(event.payload));
+        const privSync = await this.loadSecret(DeviceSecretType.IdentitySynchronizationMaster);
+        if (!privSync || !(privSync.secret instanceof crypto_1.CryptoSecretKey)) {
+            throw core_1.TransportErrors.secrets
+                .secretNotFound(DeviceSecretType.IdentitySynchronizationMaster)
+                .logWith(this._log);
+        }
+        const encryptionKey = await core_1.CoreCrypto.deriveKeyFromBase(privSync.secret, index, "DataSync");
+        const cipher = await core_1.CoreCrypto.encrypt(serializedEvent, encryptionKey);
+        privSync.secret.clear();
+        return cipher.toBase64();
+    }
+    async decryptDatawalletModificationPayload(payloadCipherBase64, index) {
+        if (!payloadCipherBase64) {
+            return undefined;
+        }
+        const payloadCipher = await crypto_1.CryptoCipher.fromBase64(payloadCipherBase64);
+        const privSync = await this.loadSecret(DeviceSecretType.IdentitySynchronizationMaster);
+        if (!privSync || !(privSync.secret instanceof crypto_1.CryptoSecretKey)) {
+            throw core_1.TransportErrors.secrets
+                .secretNotFound(DeviceSecretType.IdentitySynchronizationMaster)
+                .logWith(this._log);
+        }
+        const decryptionKey = await core_1.CoreCrypto.deriveKeyFromBase(privSync.secret, index, "DataSync");
+        const plaintext = await core_1.CoreCrypto.decrypt(payloadCipher, decryptionKey);
+        privSync.secret.clear();
+        const deserializedObject = JSON.parse(plaintext.toUtf8());
+        return deserializedObject;
+    }
+    getBaseKey() {
+        if (!this.baseKey) {
+            throw core_1.TransportErrors.general
+                .recordNotFound(crypto_1.CryptoSecretKey, DeviceSecretType.SharedSecretBaseKey)
+                .logWith(this._log);
+        }
+        return this.baseKey;
+    }
+}
+exports.DeviceSecretController = DeviceSecretController;
+DeviceSecretController.secretContext = "DEVICE01";
+//# sourceMappingURL=DeviceSecretController.js.map

package/dist/modules/devices/DeviceSecretController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeviceSecretController.js","sourceRoot":"","sources":["../../../src/modules/devices/DeviceSecretController.ts"],"names":[],"mappings":";;;AACA,kDAAsD;AACtD,0CAUsB;AACtB,qCAAkE;AAClE,gDAAiD;AACjD,wEAAoF;AAEpF,iFAAqG;AACrG,+EAA2E;AAI3E,0EAAsE;AAEtE,IAAY,gBAOX;AAPD,WAAY,gBAAgB;IACxB,qFAAiE,CAAA;IACjE,4DAAwC,CAAA;IACxC,0DAAsC,CAAA;IACtC,0DAAsC,CAAA;IACtC,wDAAoC,CAAA;IACpC,4DAAwC,CAAA;AAC5C,CAAC,EAPW,gBAAgB,GAAhB,wBAAgB,KAAhB,wBAAgB,QAO3B;AAED;;;;GAIG;AACH,MAAa,sBAAuB,SAAQ,yCAAmB;IAO3D,YAAmB,MAAyB,EAAE,OAAwB;QAClE,KAAK,CAAC,oCAAc,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IAC1B,CAAC;IAEM,KAAK,CAAC,IAAI;QACb,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAElB,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;QAEpD,OAAO,IAAI,CAAA;IACf,CAAC;IAEM,KAAK,CAAC,WAAW,CACpB,MAMqB,EACrB,IAAY;QAEZ,MAAM,WAAW,GAAW,MAAM,CAAC,SAAS,EAAE,CAAA;QAC9C,MAAM,WAAW,GAAe,mBAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAEhE,MAAM,aAAa,GAAoB,MAAM,iBAAU,CAAC,iBAAiB,CACrE,IAAI,CAAC,UAAU,EAAE,EACjB,CAAC,EACD,sBAAsB,CAAC,aAAa,CACvC,CAAA;QAED,MAAM,MAAM,GAAkB,MAAM,iBAAU,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;QAClF,MAAM,IAAI,GAAa,eAAQ,CAAC,GAAG,EAAE,CAAA;QACrC,MAAM,wBAAwB,GAA2B;YACrD,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,IAAI;YACV,EAAE,EAAE,MAAM,sBAAY,CAAC,MAAM,CAAC,QAAQ,EAAE;YACxC,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,IAAI;SACf,CAAA;QACD,MAAM,SAAS,GAA0B,MAAM,6CAAqB,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;QAEnG,IAAI,CAAC,GAAG,CAAC,KAAK,CACV,4BAA4B,SAAS,CAAC,EAAE,SAAS,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,CAC7G,CAAA;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAA;QAEhD,OAAO,SAAS,CAAA;IACpB,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,IAAY;QAChC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,CAAC,SAAS;YAAE,OAAM;QAEtB,MAAM,OAAO,GAAoB,IAAI,CAAC,UAAU,EAAE,CAAA;QAClD,MAAM,MAAM,GAA0B,MAAM,6CAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACjF,MAAM,aAAa,GAAoB,MAAM,iBAAU,CAAC,iBAAiB,CACrE,OAAO,EACP,CAAC,EACD,sBAAsB,CAAC,aAAa,CACvC,CAAA;QACD,MAAM,WAAW,GAAgB,MAAM,iBAAU,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;QACvF,MAAM,WAAW,GAAW,WAAW,CAAC,MAAM,EAAE,CAAA;QAEhD,MAAM,eAAe,GAAG,MAAM,6BAAiB,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAA;QAE/E,MAAM,WAAW,GAAyB,MAAM,2CAAoB,CAAC,IAAI,CAAC;YACtE,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,eAAe;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;SACxB,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,KAAK,CACV,6BAA6B,WAAW,CAAC,EAAE,SAAS,WAAW,CAAC,IAAI,OAAO,eAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,GAAG,CAC7G,CAAA;QACD,OAAO,WAAW,CAAA;IACtB,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,IAAY;QAClC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,CAAC,SAAS,EAAE;YACZ,OAAO,KAAK,CAAA;SACf;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,CAAC,GAAG,CAAC,KAAK,CACV,4BAA4B,SAAS,CAAC,EAAE,SAAS,SAAS,CAAC,IAAI,OAAO,eAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,GAAG,CACxG,CAAA;QACD,OAAO,IAAI,CAAA;IACf,CAAC;IAEM,KAAK,CAAC,wBAAwB,CACjC,MAAc,EACd,WAAmB,EACnB,yBAAyB,GAAG,KAAK;QAEjC,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,CAAA;QAChG,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC,kBAAkB,CAAC,MAAM,YAAY,wBAAe,CAAC,EAAE;YAChF,MAAM,sBAAe,CAAC,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;SACxF;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAA;QAC3E,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,YAAY,wBAAe,CAAC,EAAE;YAC1D,MAAM,sBAAe,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;SAC7E;QAED,IAAI,kBAAkB,CAAA;QACtB,IAAI,yBAAyB,EAAE;YAC3B,kBAAkB,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAA;YAC9E,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC,kBAAkB,CAAC,MAAM,YAAY,kCAAyB,CAAC,EAAE;gBAC1F,MAAM,sBAAe,CAAC,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;aACjF;SACJ;QAED,MAAM,kBAAkB,GAAG,MAAM,uCAAkB,CAAC,IAAI,CAAC;YACrD,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,WAAW,EAAE,WAAW;YACxB,aAAa,EAAE,OAAO,CAAC,MAAM;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,kBAAkB,EAAE,kBAAkB,CAAC,MAAM;YAC7C,kBAAkB,EAAE,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,MAAmC;YAC3E,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,eAAgB;YACjC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ;SAC1C,CAAC,CAAA;QAEF,2CAA2C;QAC3C,OAAO,kBAAkB,CAAA;IAC7B,CAAC;IAEM,KAAK,CAAC,oCAAoC,CAC7C,KAA6B,EAC7B,KAAa;QAEb,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;YAChB,OAAO,SAAS,CAAA;SACnB;QAED,MAAM,eAAe,GAAG,mBAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QAC1E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,CAAA;QACtF,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,YAAY,wBAAe,CAAC,EAAE;YAC5D,MAAM,sBAAe,CAAC,OAAO;iBACxB,cAAc,CAAC,gBAAgB,CAAC,6BAA6B,CAAC;iBAC9D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;SAC1B;QAED,MAAM,aAAa,GAAG,MAAM,iBAAU,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;QAE5F,MAAM,MAAM,GAAG,MAAM,iBAAU,CAAC,OAAO,CAAC,eAAe,EAAE,aAAa,CAAC,CAAA;QACvE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QACvB,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAA;IAC5B,CAAC;IAEM,KAAK,CAAC,oCAAoC,CAC7C,mBAAkC,EAClC,KAAa;QAEb,IAAI,CAAC,mBAAmB,EAAE;YACtB,OAAO,SAAS,CAAA;SACnB;QAED,MAAM,aAAa,GAAG,MAAM,qBAAY,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAA;QAExE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,CAAA;QACtF,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,YAAY,wBAAe,CAAC,EAAE;YAC5D,MAAM,sBAAe,CAAC,OAAO;iBACxB,cAAc,CAAC,gBAAgB,CAAC,6BAA6B,CAAC;iBAC9D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;SAC1B;QAED,MAAM,aAAa,GAAG,MAAM,iBAAU,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;QAE5F,MAAM,SAAS,GAAG,MAAM,iBAAU,CAAC,OAAO,CAAC,aAAa,EAAE,aAAa,CAAC,CAAA;QACxE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QAEvB,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAA;QAEzD,OAAO,kBAAkB,CAAA;IAC7B,CAAC;IAEO,UAAU;QACd,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACf,MAAM,sBAAe,CAAC,OAAO;iBACxB,cAAc,CAAC,wBAAe,EAAE,gBAAgB,CAAC,mBAAmB,CAAC;iBACrE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;SAC1B;QAED,OAAO,IAAI,CAAC,OAAO,CAAA;IACvB,CAAC;;AA3ML,wDA4MC;AAzM2B,oCAAa,GAAW,UAAU,CAAA"}

package/dist/modules/devices/DevicesController.d.ts

@@ -0,0 +1,20 @@
+import { CoreId } from "../../core";
+import { TransportController } from "../../core/TransportController";
+import { AccountController } from "../accounts/AccountController";
+import { Device } from "./local/Device";
+import { ISendDeviceParameters } from "./local/SendDeviceParameters";
+import { DeviceSharedSecret } from "./transmission/DeviceSharedSecret";
+export declare class DevicesController extends TransportController {
+    private devices;
+    private client;
+    constructor(parent: AccountController);
+    init(): Promise<DevicesController>;
+    get(id: CoreId): Promise<Device | undefined>;
+    addExistingDevice(device: Device): Promise<void>;
+    private createDevice;
+    sendDevice(parameters: ISendDeviceParameters): Promise<Device>;
+    getSharedSecret(id: CoreId): Promise<DeviceSharedSecret>;
+    update(device: Device): Promise<void>;
+    delete(device: Device): Promise<void>;
+    list(): Promise<Device[]>;
+}

package/dist/modules/devices/DevicesController.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DevicesController = void 0;
+const core_1 = require("../../core");
+const DbCollectionNames_1 = require("../../core/DbCollectionNames");
+const TransportController_1 = require("../../core/TransportController");
+const util_1 = require("../../util");
+const Challenge_1 = require("../challenges/data/Challenge");
+const DeviceAuthClient_1 = require("./backbone/DeviceAuthClient");
+const Device_1 = require("./local/Device");
+const SendDeviceParameters_1 = require("./local/SendDeviceParameters");
+class DevicesController extends TransportController_1.TransportController {
+    constructor(parent) {
+        super(TransportController_1.ControllerName.Devices, parent);
+    }
+    async init() {
+        await super.init();
+        this.client = new DeviceAuthClient_1.DeviceAuthClient(this.config, this.parent.authenticator);
+        this.devices = await this.parent.getSynchronizedCollection(DbCollectionNames_1.DbCollectionNames.Devices);
+        return this;
+    }
+    async get(id) {
+        const result = await this.devices.read(id.toString());
+        if (!result) {
+            return undefined;
+        }
+        return await Device_1.Device.from(result);
+    }
+    async addExistingDevice(device) {
+        await this.devices.create(device);
+    }
+    async createDevice(name = "", description = "", isAdmin = false) {
+        const [signedChallenge, devicePwdDn] = await Promise.all([
+            this.parent.challenges.createChallenge(Challenge_1.ChallengeType.Identity),
+            util_1.PasswordGenerator.createStrongPassword(45, 50)
+        ]);
+        this.log.trace("Device Creation Challenge signed. Creating device on backbone...");
+        const response = (await this.client.createDevice({
+            signedChallenge: signedChallenge.toJSON(),
+            devicePassword: devicePwdDn
+        })).value;
+        this.log.trace(`Created device with id ${response.id}.`);
+        const device = await Device_1.Device.from({
+            createdAt: core_1.CoreDate.from(response.createdAt),
+            createdByDevice: core_1.CoreId.from(response.createdByDevice),
+            id: core_1.CoreId.from(response.id),
+            name: name,
+            description: description,
+            type: Device_1.DeviceType.Unknown,
+            username: response.username,
+            initialPassword: devicePwdDn,
+            isAdmin: isAdmin
+        });
+        return device;
+    }
+    async sendDevice(parameters) {
+        parameters = await SendDeviceParameters_1.SendDeviceParameters.from(parameters);
+        if (!parameters.name) {
+            const devices = await this.parent.devices.list();
+            parameters.name = `Device ${devices.length + 1}`;
+        }
+        const device = await this.createDevice(parameters.name, parameters.description, parameters.isAdmin);
+        await this.devices.create(device);
+        return device;
+    }
+    async getSharedSecret(id) {
+        const deviceDoc = await this.devices.read(id.toString());
+        if (!deviceDoc) {
+            throw core_1.TransportErrors.general.recordNotFound(Device_1.Device, id.toString());
+        }
+        const count = await this.devices.count();
+        const device = await Device_1.Device.from(deviceDoc);
+        if (!device.initialPassword || device.publicKey || device.lastLoginAt) {
+            throw core_1.TransportErrors.device.alreadyOnboarded();
+        }
+        const isAdmin = device.isAdmin === true;
+        const secret = await this.parent.activeDevice.secrets.createDeviceSharedSecret(device, count, isAdmin);
+        return secret;
+    }
+    async update(device) {
+        const deviceDoc = await this.devices.read(device.id.toString());
+        if (!deviceDoc) {
+            throw core_1.TransportErrors.general.recordNotFound(Device_1.Device, device.id.toString());
+        }
+        await this.devices.update(deviceDoc, device);
+    }
+    async delete(device) {
+        await this.devices.delete(device);
+    }
+    async list() {
+        const items = await this.devices.list();
+        return await this.parseArray(items, Device_1.Device);
+    }
+}
+exports.DevicesController = DevicesController;
+//# sourceMappingURL=DevicesController.js.map

package/dist/modules/devices/DevicesController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DevicesController.js","sourceRoot":"","sources":["../../../src/modules/devices/DevicesController.ts"],"names":[],"mappings":";;;AAAA,qCAA8D;AAC9D,oEAAgE;AAChE,wEAAoF;AACpF,qCAA8C;AAE9C,4DAA4D;AAE5D,kEAA8D;AAC9D,2CAAmD;AACnD,uEAA0F;AAG1F,MAAa,iBAAkB,SAAQ,yCAAmB;IAItD,YAAmB,MAAyB;QACxC,KAAK,CAAC,oCAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACzC,CAAC;IAEM,KAAK,CAAC,IAAI;QACb,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAElB,IAAI,CAAC,MAAM,GAAG,IAAI,mCAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QAC1E,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,qCAAiB,CAAC,OAAO,CAAC,CAAA;QACrF,OAAO,IAAI,CAAA;IACf,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,EAAU;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM,EAAE;YACT,OAAO,SAAS,CAAA;SACnB;QAED,OAAO,MAAM,eAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACpC,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,MAAc;QACzC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACrC,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,EAAE,WAAW,GAAG,EAAE,EAAE,OAAO,GAAG,KAAK;QACnE,MAAM,CAAC,eAAe,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,yBAAa,CAAC,QAAQ,CAAC;YAC9D,wBAAiB,CAAC,oBAAoB,CAAC,EAAE,EAAE,EAAE,CAAC;SACjD,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAA;QAElF,MAAM,QAAQ,GAAG,CACb,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAC3B,eAAe,EAAE,eAAe,CAAC,MAAM,EAAE;YACzC,cAAc,EAAE,WAAW;SAC9B,CAAC,CACL,CAAC,KAAK,CAAA;QAEP,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,0BAA0B,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAA;QAExD,MAAM,MAAM,GAAG,MAAM,eAAM,CAAC,IAAI,CAAC;YAC7B,SAAS,EAAE,eAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC5C,eAAe,EAAE,aAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;YACtD,EAAE,EAAE,aAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,EAAE,IAAI;YACV,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,mBAAU,CAAC,OAAO;YACxB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,eAAe,EAAE,WAAW;YAC5B,OAAO,EAAE,OAAO;SACnB,CAAC,CAAA;QAEF,OAAO,MAAM,CAAA;IACjB,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,UAAiC;QACrD,UAAU,GAAG,MAAM,2CAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAExD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;YAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;YAChD,UAAU,CAAC,IAAI,GAAG,UAAU,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAA;SACnD;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;QAEnG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAEjC,OAAO,MAAM,CAAA;IACjB,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,EAAU;QACnC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAA;QACxD,IAAI,CAAC,SAAS,EAAE;YACZ,MAAM,sBAAe,CAAC,OAAO,CAAC,cAAc,CAAC,eAAM,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAA;SACtE;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;QACxC,MAAM,MAAM,GAAG,MAAM,eAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAE3C,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,WAAW,EAAE;YACnE,MAAM,sBAAe,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAA;SAClD;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,IAAI,CAAA;QAEvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;QACtG,OAAO,MAAM,CAAA;IACjB,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,MAAc;QAC9B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC/D,IAAI,CAAC,SAAS,EAAE;YACZ,MAAM,sBAAe,CAAC,OAAO,CAAC,cAAc,CAAC,eAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAA;SAC7E;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IAChD,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,MAAc;QAC9B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACrC,CAAC;IAEM,KAAK,CAAC,IAAI;QACb,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;QACvC,OAAO,MAAM,IAAI,CAAC,UAAU,CAAS,KAAK,EAAE,eAAM,CAAC,CAAA;IACvD,CAAC;CACJ;AA/GD,8CA+GC"}

package/dist/modules/devices/backbone/BackbonePostDevices.d.ts

@@ -0,0 +1,11 @@
+import { IChallengeSignedSerialized } from "../../challenges/data/ChallengeSigned";
+export interface BackbonePostDevicesRequest {
+    devicePassword: string;
+    signedChallenge: IChallengeSignedSerialized;
+}
+export interface BackbonePostDevicesResponse {
+    id: string;
+    username: string;
+    createdAt: string;
+    createdByDevice: string;
+}

package/dist/modules/devices/backbone/BackbonePostDevices.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=BackbonePostDevices.js.map

package/dist/modules/devices/backbone/BackbonePostDevices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BackbonePostDevices.js","sourceRoot":"","sources":["../../../../src/modules/devices/backbone/BackbonePostDevices.ts"],"names":[],"mappings":""}

package/dist/modules/devices/backbone/DeviceAuthClient.d.ts

@@ -0,0 +1,18 @@
+import { RESTClientAuthenticate, RESTClientLogDirective } from "../../../core";
+import { ClientResult } from "../../../core/backbone/ClientResult";
+import { BackbonePostDevicesRequest, BackbonePostDevicesResponse } from "./BackbonePostDevices";
+export interface BackbonePutDevicesPasswordRequest {
+    oldPassword: string;
+    newPassword: string;
+}
+export interface BackbonePutDevicesPushNotificationRequest {
+    platform: string;
+    handle: string;
+    installationId: string;
+}
+export declare class DeviceAuthClient extends RESTClientAuthenticate {
+    protected _logDirective: RESTClientLogDirective;
+    changeDevicePassword(input: BackbonePutDevicesPasswordRequest): Promise<ClientResult<void>>;
+    createDevice(value: BackbonePostDevicesRequest): Promise<ClientResult<BackbonePostDevicesResponse>>;
+    registerPushNotificationToken(input: BackbonePutDevicesPushNotificationRequest): Promise<ClientResult<void>>;
+}

package/dist/modules/devices/backbone/DeviceAuthClient.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeviceAuthClient = void 0;
+const core_1 = require("../../../core");
+class DeviceAuthClient extends core_1.RESTClientAuthenticate {
+    constructor() {
+        super(...arguments);
+        this._logDirective = core_1.RESTClientLogDirective.LogResponse;
+    }
+    async changeDevicePassword(input) {
+        return await this.put("/api/v1/Devices/Self/Password", input, {});
+    }
+    async createDevice(value) {
+        return await this.post("/api/v1/Devices", value, {});
+    }
+    async registerPushNotificationToken(input) {
+        return await this.put("/api/v1/Devices/Self/PushNotifications", input);
+    }
+}
+exports.DeviceAuthClient = DeviceAuthClient;
+//# sourceMappingURL=DeviceAuthClient.js.map

package/dist/modules/devices/backbone/DeviceAuthClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeviceAuthClient.js","sourceRoot":"","sources":["../../../../src/modules/devices/backbone/DeviceAuthClient.ts"],"names":[],"mappings":";;;AAAA,wCAA8E;AAe9E,MAAa,gBAAiB,SAAQ,6BAAsB;IAA5D;;QACc,kBAAa,GAAG,6BAAsB,CAAC,WAAW,CAAA;IAehE,CAAC;IAbU,KAAK,CAAC,oBAAoB,CAAC,KAAwC;QACtE,OAAO,MAAM,IAAI,CAAC,GAAG,CAAO,+BAA+B,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IAC3E,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,KAAiC;QACvD,OAAO,MAAM,IAAI,CAAC,IAAI,CAA8B,iBAAiB,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IACrF,CAAC;IAEM,KAAK,CAAC,6BAA6B,CACtC,KAAgD;QAEhD,OAAO,MAAM,IAAI,CAAC,GAAG,CAAO,wCAAwC,EAAE,KAAK,CAAC,CAAA;IAChF,CAAC;CACJ;AAhBD,4CAgBC"}

package/dist/modules/devices/backbone/DeviceClient.d.ts

@@ -0,0 +1,7 @@
+import { RESTClient, RESTClientLogDirective } from "../../../core";
+import { ClientResult } from "../../../core/backbone/ClientResult";
+import { BackbonePostDevicesRequest, BackbonePostDevicesResponse } from "./BackbonePostDevices";
+export declare class DeviceClient extends RESTClient {
+    protected _logDirective: RESTClientLogDirective;
+    createDevice(value: BackbonePostDevicesRequest): Promise<ClientResult<BackbonePostDevicesResponse>>;
+}

package/dist/modules/devices/backbone/DeviceClient.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeviceClient = void 0;
+const core_1 = require("../../../core");
+class DeviceClient extends core_1.RESTClient {
+    constructor() {
+        super(...arguments);
+        this._logDirective = core_1.RESTClientLogDirective.LogResponse;
+    }
+    async createDevice(value) {
+        return await this.post("/api/v1/Devices", value, {});
+    }
+}
+exports.DeviceClient = DeviceClient;
+//# sourceMappingURL=DeviceClient.js.map

package/dist/modules/devices/backbone/DeviceClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeviceClient.js","sourceRoot":"","sources":["../../../../src/modules/devices/backbone/DeviceClient.ts"],"names":[],"mappings":";;;AAAA,wCAAkE;AAIlE,MAAa,YAAa,SAAQ,iBAAU;IAA5C;;QACc,kBAAa,GAAG,6BAAsB,CAAC,WAAW,CAAA;IAKhE,CAAC;IAHU,KAAK,CAAC,YAAY,CAAC,KAAiC;QACvD,OAAO,MAAM,IAAI,CAAC,IAAI,CAA8B,iBAAiB,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IACrF,CAAC;CACJ;AAND,oCAMC"}

package/dist/modules/devices/local/Device.d.ts

@@ -0,0 +1,46 @@
+import { CryptoSignaturePublicKey, ICryptoSignaturePublicKey } from "@nmshd/crypto";
+import { CoreSynchronizable, ICoreSynchronizable } from "../../../core";
+import { CoreDate } from "../../../core/types/CoreDate";
+import { CoreId } from "../../../core/types/CoreId";
+export declare enum DeviceType {
+    "Unknown" = 0,
+    "Phone" = 1,
+    "Tablet" = 2,
+    "Desktop" = 3,
+    "Connector" = 4
+}
+export interface DeviceInfo {
+    operatingSystem: string;
+    type: DeviceType;
+}
+export interface IDevice extends ICoreSynchronizable {
+    isAdmin?: boolean;
+    publicKey?: ICryptoSignaturePublicKey;
+    certificate?: string;
+    name: string;
+    description?: string;
+    createdAt: CoreDate;
+    createdByDevice: CoreId;
+    operatingSystem?: string;
+    lastLoginAt?: CoreDate;
+    type: DeviceType;
+    username: string;
+    initialPassword?: string;
+}
+export declare class Device extends CoreSynchronizable implements IDevice {
+    readonly technicalProperties: string[];
+    readonly userdataProperties: string[];
+    publicKey?: CryptoSignaturePublicKey;
+    certificate?: string;
+    name: string;
+    description?: string;
+    operatingSystem?: string;
+    createdAt: CoreDate;
+    createdByDevice: CoreId;
+    lastLoginAt?: CoreDate;
+    type: DeviceType;
+    username: string;
+    initialPassword?: string;
+    isAdmin?: boolean;
+    static from(value: IDevice): Promise<Device>;
+}

package/dist/modules/devices/local/Device.js

@@ -0,0 +1,115 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var Device_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Device = exports.DeviceType = void 0;
+const ts_serval_1 = require("@js-soft/ts-serval");
+const crypto_1 = require("@nmshd/crypto");
+const ts_simple_nameof_1 = require("ts-simple-nameof");
+const core_1 = require("../../../core");
+const CoreDate_1 = require("../../../core/types/CoreDate");
+const CoreId_1 = require("../../../core/types/CoreId");
+var DeviceType;
+(function (DeviceType) {
+    DeviceType[DeviceType["Unknown"] = 0] = "Unknown";
+    DeviceType[DeviceType["Phone"] = 1] = "Phone";
+    DeviceType[DeviceType["Tablet"] = 2] = "Tablet";
+    DeviceType[DeviceType["Desktop"] = 3] = "Desktop";
+    DeviceType[DeviceType["Connector"] = 4] = "Connector";
+})(DeviceType = exports.DeviceType || (exports.DeviceType = {}));
+let Device = Device_1 = class Device extends core_1.CoreSynchronizable {
+    constructor() {
+        super(...arguments);
+        this.technicalProperties = [
+            "@type",
+            "@context",
+            (0, ts_simple_nameof_1.nameof)((d) => d.isAdmin),
+            (0, ts_simple_nameof_1.nameof)((d) => d.publicKey),
+            (0, ts_simple_nameof_1.nameof)((d) => d.certificate),
+            (0, ts_simple_nameof_1.nameof)((d) => d.operatingSystem),
+            (0, ts_simple_nameof_1.nameof)((d) => d.type),
+            (0, ts_simple_nameof_1.nameof)((d) => d.createdAt),
+            (0, ts_simple_nameof_1.nameof)((d) => d.createdByDevice),
+            (0, ts_simple_nameof_1.nameof)((d) => d.lastLoginAt),
+            (0, ts_simple_nameof_1.nameof)((d) => d.username),
+            (0, ts_simple_nameof_1.nameof)((d) => d.initialPassword)
+        ];
+        this.userdataProperties = [(0, ts_simple_nameof_1.nameof)((d) => d.name), (0, ts_simple_nameof_1.nameof)((d) => d.description)];
+    }
+    static async from(value) {
+        return await super.fromT(value, Device_1);
+    }
+};
+__decorate([
+    (0, ts_serval_1.validate)({ nullable: true }),
+    (0, ts_serval_1.serialize)(),
+    __metadata("design:type", crypto_1.CryptoSignaturePublicKey)
+], Device.prototype, "publicKey", void 0);
+__decorate([
+    (0, ts_serval_1.validate)({ nullable: true }),
+    (0, ts_serval_1.serialize)(),
+    __metadata("design:type", String)
+], Device.prototype, "certificate", void 0);
+__decorate([
+    (0, ts_serval_1.validate)(),
+    (0, ts_serval_1.serialize)(),
+    __metadata("design:type", String)
+], Device.prototype, "name", void 0);
+__decorate([
+    (0, ts_serval_1.validate)({ nullable: true }),
+    (0, ts_serval_1.serialize)(),
+    __metadata("design:type", String)
+], Device.prototype, "description", void 0);
+__decorate([
+    (0, ts_serval_1.validate)({ nullable: true }),
+    (0, ts_serval_1.serialize)(),
+    __metadata("design:type", String)
+], Device.prototype, "operatingSystem", void 0);
+__decorate([
+    (0, ts_serval_1.validate)(),
+    (0, ts_serval_1.serialize)(),
+    __metadata("design:type", CoreDate_1.CoreDate)
+], Device.prototype, "createdAt", void 0);
+__decorate([
+    (0, ts_serval_1.validate)(),
+    (0, ts_serval_1.serialize)(),
+    __metadata("design:type", CoreId_1.CoreId)
+], Device.prototype, "createdByDevice", void 0);
+__decorate([
+    (0, ts_serval_1.validate)({ nullable: true }),
+    (0, ts_serval_1.serialize)(),
+    __metadata("design:type", CoreDate_1.CoreDate)
+], Device.prototype, "lastLoginAt", void 0);
+__decorate([
+    (0, ts_serval_1.validate)(),
+    (0, ts_serval_1.serialize)(),
+    __metadata("design:type", Number)
+], Device.prototype, "type", void 0);
+__decorate([
+    (0, ts_serval_1.validate)({ nullable: true }),
+    (0, ts_serval_1.serialize)(),
+    __metadata("design:type", String)
+], Device.prototype, "username", void 0);
+__decorate([
+    (0, ts_serval_1.validate)({ nullable: true }),
+    (0, ts_serval_1.serialize)(),
+    __metadata("design:type", String)
+], Device.prototype, "initialPassword", void 0);
+__decorate([
+    (0, ts_serval_1.validate)({ nullable: true }),
+    (0, ts_serval_1.serialize)(),
+    __metadata("design:type", Boolean)
+], Device.prototype, "isAdmin", void 0);
+Device = Device_1 = __decorate([
+    (0, ts_serval_1.type)("Device")
+], Device);
+exports.Device = Device;
+//# sourceMappingURL=Device.js.map

package/dist/modules/devices/local/Device.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Device.js","sourceRoot":"","sources":["../../../../src/modules/devices/local/Device.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,kDAA8D;AAC9D,0CAAmF;AACnF,uDAAyC;AACzC,wCAAuE;AACvE,2DAAuD;AACvD,uDAAmD;AAEnD,IAAY,UAMX;AAND,WAAY,UAAU;IAClB,iDAAS,CAAA;IACT,6CAAO,CAAA;IACP,+CAAQ,CAAA;IACR,iDAAS,CAAA;IACT,qDAAW,CAAA;AACf,CAAC,EANW,UAAU,GAAV,kBAAU,KAAV,kBAAU,QAMrB;AAuBD,IAAa,MAAM,cAAnB,MAAa,MAAO,SAAQ,yBAAkB;IAA9C;;QACoB,wBAAmB,GAAG;YAClC,OAAO;YACP,UAAU;YACV,IAAA,yBAAM,EAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAChC,IAAA,yBAAM,EAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAClC,IAAA,yBAAM,EAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;YACpC,IAAA,yBAAM,EAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;YACxC,IAAA,yBAAM,EAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7B,IAAA,yBAAM,EAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAClC,IAAA,yBAAM,EAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;YACxC,IAAA,yBAAM,EAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;YACpC,IAAA,yBAAM,EAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YACjC,IAAA,yBAAM,EAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;SAC3C,CAAA;QAEe,uBAAkB,GAAG,CAAC,IAAA,yBAAM,EAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAA,yBAAM,EAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;IAqD9G,CAAC;IAHU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAc;QACnC,OAAO,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,QAAM,CAAC,CAAA;IAC3C,CAAC;CACJ,CAAA;AAjDG;IAFC,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAA,qBAAS,GAAE;8BACO,iCAAwB;yCAAA;AAI3C;IAFC,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAA,qBAAS,GAAE;;2CACe;AAI3B;IAFC,IAAA,oBAAQ,GAAE;IACV,IAAA,qBAAS,GAAE;;oCACO;AAInB;IAFC,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAA,qBAAS,GAAE;;2CACe;AAI3B;IAFC,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAA,qBAAS,GAAE;;+CACmB;AAI/B;IAFC,IAAA,oBAAQ,GAAE;IACV,IAAA,qBAAS,GAAE;8BACM,mBAAQ;yCAAA;AAI1B;IAFC,IAAA,oBAAQ,GAAE;IACV,IAAA,qBAAS,GAAE;8BACY,eAAM;+CAAA;AAI9B;IAFC,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAA,qBAAS,GAAE;8BACS,mBAAQ;2CAAA;AAI7B;IAFC,IAAA,oBAAQ,GAAE;IACV,IAAA,qBAAS,GAAE;;oCACW;AAIvB;IAFC,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAA,qBAAS,GAAE;;wCACW;AAIvB;IAFC,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAA,qBAAS,GAAE;;+CACmB;AAI/B;IAFC,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAA,qBAAS,GAAE;;uCACY;AAhEf,MAAM;IADlB,IAAA,gBAAI,EAAC,QAAQ,CAAC;GACF,MAAM,CAqElB;AArEY,wBAAM"}

package/dist/modules/devices/local/DeviceSecretCredentials.d.ts

@@ -0,0 +1,12 @@
+import { CoreId, CoreSerializableAsync, ICoreId } from "../../../core";
+export interface IDeviceSecretCredentials {
+    id: ICoreId;
+    password?: string;
+    username?: string;
+}
+export declare class DeviceSecretCredentials extends CoreSerializableAsync implements IDeviceSecretCredentials {
+    id: CoreId;
+    password?: string;
+    username?: string;
+    static from(value: IDeviceSecretCredentials): Promise<DeviceSecretCredentials>;
+}

package/dist/modules/devices/local/DeviceSecretCredentials.js

@@ -0,0 +1,40 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var DeviceSecretCredentials_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeviceSecretCredentials = void 0;
+const ts_serval_1 = require("@js-soft/ts-serval");
+const core_1 = require("../../../core");
+let DeviceSecretCredentials = DeviceSecretCredentials_1 = class DeviceSecretCredentials extends core_1.CoreSerializableAsync {
+    static async from(value) {
+        return await super.fromT(value, DeviceSecretCredentials_1);
+    }
+};
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)(),
+    __metadata("design:type", core_1.CoreId)
+], DeviceSecretCredentials.prototype, "id", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)({ nullable: true }),
+    __metadata("design:type", String)
+], DeviceSecretCredentials.prototype, "password", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)({ nullable: true }),
+    __metadata("design:type", String)
+], DeviceSecretCredentials.prototype, "username", void 0);
+DeviceSecretCredentials = DeviceSecretCredentials_1 = __decorate([
+    (0, ts_serval_1.type)("DeviceSecretCredentials")
+], DeviceSecretCredentials);
+exports.DeviceSecretCredentials = DeviceSecretCredentials;
+//# sourceMappingURL=DeviceSecretCredentials.js.map

package/dist/modules/devices/local/DeviceSecretCredentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeviceSecretCredentials.js","sourceRoot":"","sources":["../../../../src/modules/devices/local/DeviceSecretCredentials.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,kDAA8D;AAC9D,wCAAsE;AAStE,IAAa,uBAAuB,+BAApC,MAAa,uBAAwB,SAAQ,4BAAqB;IAavD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAA+B;QACpD,OAAO,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,yBAAuB,CAAC,CAAA;IAC5D,CAAC;CACJ,CAAA;AAbG;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,GAAE;8BACA,aAAM;mDAAA;AAIjB;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDACL;AAIxB;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDACL;AAXf,uBAAuB;IADnC,IAAA,gBAAI,EAAC,yBAAyB,CAAC;GACnB,uBAAuB,CAgBnC;AAhBY,0DAAuB"}

package/dist/modules/devices/local/SendDeviceParameters.d.ts

@@ -0,0 +1,13 @@
+import { CoreSerializableAsync, ICoreSerializableAsync } from "../../../core";
+export interface ISendDeviceParameters extends ICoreSerializableAsync {
+    name?: string;
+    description?: string;
+    isAdmin?: boolean;
+}
+export declare class SendDeviceParameters extends CoreSerializableAsync implements ISendDeviceParameters {
+    name?: string;
+    description?: string;
+    isAdmin?: boolean;
+    static from(value: ISendDeviceParameters): Promise<SendDeviceParameters>;
+    static deserialize(value: string): Promise<SendDeviceParameters>;
+}