@remnawave/backend-contract 2.8.24 → 2.8.26

package/build/frontend/api/controllers/api-tokens.js

@@ -6,4 +6,5 @@ exports.API_TOKENS_ROUTES = {
     CREATE: '',
     DELETE: (uuid) => `${uuid}`,
     GET: '',
+    GET_SCOPES: 'scopes',
 };

package/build/frontend/api/controllers-info.js

@@ -5,109 +5,136 @@ exports.CONTROLLERS_INFO = {
     AUTH: {
         tag: 'Auth Controller',
         description: 'Used to authenticate admin users.',
+        resource: 'auth',
     },
     PASSKEYS: {
         tag: 'Passkeys Controller',
         description: 'Management of Passkeys.',
+        resource: 'passkeys',
     },
     API_TOKENS: {
         tag: 'API Tokens Controller',
         description: "Manage API tokens to use in your code. This controller can't be used with API token, only with Admin JWT token",
+        resource: 'api-tokens',
     },
     USERS: {
         tag: 'Users Controller',
         description: 'Manage users, change their status, reset traffic, etc.',
+        resource: 'users',
     },
     USERS_BULK_ACTIONS: {
         tag: 'Users Bulk Actions Controller',
         description: 'Bulk actions with users.',
+        resource: 'users',
     },
     HWID_USER_DEVICES: {
         tag: 'HWID User Devices Controller',
         description: '',
+        resource: 'hwid-user-devices',
     },
     SUBSCRIPTION: {
         tag: '[Public] Subscription Controller',
         description: 'Public Subscription Controller. Methods of this controller are not protected with auth. Use it only for public requests.',
+        resource: 'subscription',
     },
     SUBSCRIPTIONS: {
         tag: '[Protected] Subscriptions Controller',
         description: 'Methods of this controller are protected with auth, most of them is returning the same informations as public Subscription Controller.',
+        resource: 'subscriptions',
     },
     NODES: {
         tag: 'Nodes Controller',
         description: '',
+        resource: 'nodes',
     },
     NODE_PLUGINS: {
         tag: 'Node Plugins Controller',
         description: '',
+        resource: 'node-plugins',
     },
     BANDWIDTH_STATS: {
         tag: 'Bandwidth Stats Controller',
         description: '',
+        resource: 'bandwidth-stats',
     },
     IP_CONTROL: {
         tag: 'IP Management Controller',
         description: 'Management of IP addresses and connections.',
+        resource: 'ip-control',
     },
     CONFIG_PROFILES: {
         tag: 'Config Profiles Controller',
         description: 'Management of Config Profiles.',
+        resource: 'config-profiles',
     },
     INTERNAL_SQUADS: {
         tag: 'Internal Squads Controller',
         description: 'Management of Internal Squads.',
+        resource: 'internal-squads',
     },
     EXTERNAL_SQUADS: {
         tag: 'External Squads Controller',
         description: 'Management of External Squads.',
+        resource: 'external-squads',
     },
     HOSTS: {
         tag: 'Hosts Controller',
         description: '',
+        resource: 'hosts',
     },
     HOSTS_BULK_ACTIONS: {
         tag: 'Hosts Bulk Actions Controller',
         description: '',
+        resource: 'hosts',
     },
     SUBSCRIPTION_TEMPLATE: {
         tag: 'Subscription Template Controller',
         description: '',
+        resource: 'subscription-template',
     },
     SUBSCRIPTION_SETTINGS: {
         tag: 'Subscription Settings Controller',
         description: '',
+        resource: 'subscription-settings',
     },
     INFRA_BILLING: {
         tag: 'Infra Billing Controller',
         description: '',
+        resource: 'infra-billing',
     },
     SYSTEM: {
         tag: 'System Controller',
         description: '',
+        resource: 'system',
     },
     KEYGEN: {
         tag: 'Keygen Controller',
         description: 'Generation of SECRET_KEY for Remnawave Node.',
+        resource: 'keygen',
     },
     SUBSCRIPTION_REQUEST_HISTORY: {
         tag: 'Subscription Request History Controller',
         description: '',
+        resource: 'subscription-request-history',
     },
     SNIPPETS: {
         tag: 'Snippets Controller',
         description: '',
+        resource: 'snippets',
     },
     REMNAAWAVE_SETTINGS: {
         tag: 'Remnawave Settings Controller',
         description: '',
+        resource: 'remnawave-settings',
     },
     SUBSCRIPTION_PAGE_CONFIGS: {
         tag: 'Subscription Page Configs Controller',
         description: '',
+        resource: 'subscription-page-configs',
     },
     METADATA: {
         tag: 'Metadata Controller',
         description: 'Manage arbitrary metadata for Users and Nodes.',
+        resource: 'metadata',
     },
 };

package/build/frontend/api/routes.js

@@ -65,6 +65,7 @@ exports.REST_API = {
         CREATE: `${exports.ROOT}/${CONTROLLERS.API_TOKENS_CONTROLLER}/${CONTROLLERS.API_TOKENS_ROUTES.CREATE}`,
         DELETE: (uuid) => `${exports.ROOT}/${CONTROLLERS.API_TOKENS_CONTROLLER}/${CONTROLLERS.API_TOKENS_ROUTES.DELETE(uuid)}`,
         GET: `${exports.ROOT}/${CONTROLLERS.API_TOKENS_CONTROLLER}/${CONTROLLERS.API_TOKENS_ROUTES.GET}`,
+        GET_SCOPES: `${exports.ROOT}/${CONTROLLERS.API_TOKENS_CONTROLLER}/${CONTROLLERS.API_TOKENS_ROUTES.GET_SCOPES}`,
     },
     KEYGEN: {
         GET: `${exports.ROOT}/${CONTROLLERS.KEYGEN_CONTROLLER}/${CONTROLLERS.KEYGEN_ROUTES.GET}`,

package/build/frontend/commands/api-tokens/create.command.js

@@ -2,20 +2,19 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CreateApiTokenCommand = void 0;
 const zod_1 = require("zod");
+const api_tokens_schema_1 = require("../../models/api-tokens.schema");
 const api_1 = require("../../api");
 const constants_1 = require("../../constants");
 var CreateApiTokenCommand;
 (function (CreateApiTokenCommand) {
     CreateApiTokenCommand.url = api_1.REST_API.API_TOKENS.CREATE;
     CreateApiTokenCommand.TSQ_url = CreateApiTokenCommand.url;
-    CreateApiTokenCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.API_TOKENS_ROUTES.CREATE, 'post', 'Create a new API token', 'This endpoint is forbidden to use via "API-key". It can only be used with an admin JWT-token.');
+    CreateApiTokenCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.API_TOKENS_ROUTES.CREATE, 'post', 'Create a new API token', { scope: 'create', kind: 'write' }, 'This endpoint is forbidden to use via "API-key". It can only be used with an admin JWT-token.');
     CreateApiTokenCommand.RequestSchema = zod_1.z.object({
         tokenName: zod_1.z.string(),
+        scopes: zod_1.z.array(zod_1.z.string()).optional().default(['*']),
     });
     CreateApiTokenCommand.ResponseSchema = zod_1.z.object({
-        response: zod_1.z.object({
-            token: zod_1.z.string(),
-            uuid: zod_1.z.string(),
-        }),
+        response: api_tokens_schema_1.ApiTokensSchema,
     });
 })(CreateApiTokenCommand || (exports.CreateApiTokenCommand = CreateApiTokenCommand = {}));

package/build/frontend/commands/api-tokens/delete.command.js

@@ -8,7 +8,7 @@ var DeleteApiTokenCommand;
 (function (DeleteApiTokenCommand) {
     DeleteApiTokenCommand.url = api_1.REST_API.API_TOKENS.DELETE;
     DeleteApiTokenCommand.TSQ_url = DeleteApiTokenCommand.url(':uuid');
-    DeleteApiTokenCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.API_TOKENS_ROUTES.DELETE(':uuid'), 'delete', 'Delete an API token by UUID', 'This endpoint is forbidden to use via "API-key". It can be used only with an admin JWT-token.');
+    DeleteApiTokenCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.API_TOKENS_ROUTES.DELETE(':uuid'), 'delete', 'Delete an API token by UUID', { scope: 'delete', kind: 'write' }, 'This endpoint is forbidden to use via "API-key". It can be used only with an admin JWT-token.');
     DeleteApiTokenCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/api-tokens/find.command.js

@@ -9,7 +9,7 @@ var FindAllApiTokensCommand;
 (function (FindAllApiTokensCommand) {
     FindAllApiTokensCommand.url = api_1.REST_API.API_TOKENS.GET;
     FindAllApiTokensCommand.TSQ_url = FindAllApiTokensCommand.url;
-    FindAllApiTokensCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.API_TOKENS_ROUTES.GET, 'get', 'Get all API tokens', 'This endpoint is forbidden to use via "API-key". It can only be used with admin JWT-token.');
+    FindAllApiTokensCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.API_TOKENS_ROUTES.GET, 'get', 'Get all API tokens', { scope: 'list', kind: 'read' }, 'This endpoint is forbidden to use via "API-key". It can only be used with admin JWT-token.');
     FindAllApiTokensCommand.ResponseSchema = zod_1.z.object({
         response: zod_1.z.object({
             apiKeys: zod_1.z.array(api_tokens_schema_1.ApiTokensSchema),

package/build/frontend/commands/api-tokens/get-scopes.command.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetApiTokenScopesCommand = void 0;
+const zod_1 = require("zod");
+const api_1 = require("../../api");
+const constants_1 = require("../../constants");
+var GetApiTokenScopesCommand;
+(function (GetApiTokenScopesCommand) {
+    GetApiTokenScopesCommand.url = api_1.REST_API.API_TOKENS.GET_SCOPES;
+    GetApiTokenScopesCommand.TSQ_url = GetApiTokenScopesCommand.url;
+    GetApiTokenScopesCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.API_TOKENS_ROUTES.GET_SCOPES, 'get', 'Get available API token scopes', { scope: 'list-scopes', kind: 'read' }, 'Returns the catalog of scopes that can be granted to an API token, grouped by resource. Forbidden via "API-key", admin JWT only.');
+    GetApiTokenScopesCommand.EndpointScopeSchema = zod_1.z.object({
+        key: zod_1.z.string(),
+        kind: zod_1.z.enum(['read', 'write']),
+        method: zod_1.z.string(),
+        path: zod_1.z.string(),
+        description: zod_1.z.string(),
+    });
+    GetApiTokenScopesCommand.ResourceScopesSchema = zod_1.z.object({
+        resource: zod_1.z.string(),
+        resourceScopes: zod_1.z.array(zod_1.z.string()),
+        endpoints: zod_1.z.array(GetApiTokenScopesCommand.EndpointScopeSchema),
+    });
+    GetApiTokenScopesCommand.ResponseSchema = zod_1.z.object({
+        response: zod_1.z.object({
+            wildcard: zod_1.z.string(),
+            resources: zod_1.z.array(GetApiTokenScopesCommand.ResourceScopesSchema),
+        }),
+    });
+})(GetApiTokenScopesCommand || (exports.GetApiTokenScopesCommand = GetApiTokenScopesCommand = {}));

package/build/frontend/commands/api-tokens/index.js

@@ -17,3 +17,4 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./create.command"), exports);
 __exportStar(require("./delete.command"), exports);
 __exportStar(require("./find.command"), exports);
+__exportStar(require("./get-scopes.command"), exports);

package/build/frontend/commands/auth/get-status.command.js

@@ -8,7 +8,7 @@ var GetStatusCommand;
 (function (GetStatusCommand) {
     GetStatusCommand.url = api_1.REST_API.AUTH.GET_STATUS;
     GetStatusCommand.TSQ_url = GetStatusCommand.url;
-    GetStatusCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.AUTH_ROUTES.GET_STATUS, 'get', 'Get the status of the authentication');
+    GetStatusCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.AUTH_ROUTES.GET_STATUS, 'get', 'Get the status of the authentication', { scope: 'get-status', kind: 'read' });
     GetStatusCommand.ResponseSchema = zod_1.z.object({
         response: zod_1.z.object({
             isLoginAllowed: zod_1.z.boolean(),

package/build/frontend/commands/auth/login.command.js

@@ -8,7 +8,7 @@ var LoginCommand;
 (function (LoginCommand) {
     LoginCommand.url = api_1.REST_API.AUTH.LOGIN;
     LoginCommand.TSQ_url = LoginCommand.url;
-    LoginCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.AUTH_ROUTES.LOGIN, 'post', 'Login as superadmin');
+    LoginCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.AUTH_ROUTES.LOGIN, 'post', 'Login as superadmin', { scope: 'login', kind: 'write' });
     LoginCommand.RequestSchema = zod_1.z.object({
         username: zod_1.z.string(),
         password: zod_1.z.string(),

package/build/frontend/commands/auth/oauth2/authorize.command.js

@@ -8,7 +8,7 @@ var OAuth2AuthorizeCommand;
 (function (OAuth2AuthorizeCommand) {
     OAuth2AuthorizeCommand.url = api_1.REST_API.AUTH.OAUTH2.AUTHORIZE;
     OAuth2AuthorizeCommand.TSQ_url = OAuth2AuthorizeCommand.url;
-    OAuth2AuthorizeCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.AUTH_ROUTES.OAUTH2.AUTHORIZE, 'post', 'Initiate OAuth2 authorization');
+    OAuth2AuthorizeCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.AUTH_ROUTES.OAUTH2.AUTHORIZE, 'post', 'Initiate OAuth2 authorization', { scope: 'authorize', kind: 'read' });
     OAuth2AuthorizeCommand.RequestSchema = zod_1.z.object({
         provider: zod_1.z.nativeEnum(constants_1.OAUTH2_PROVIDERS),
     });

package/build/frontend/commands/auth/oauth2/callback.command.js

@@ -8,7 +8,7 @@ var OAuth2CallbackCommand;
 (function (OAuth2CallbackCommand) {
     OAuth2CallbackCommand.url = api_1.REST_API.AUTH.OAUTH2.CALLBACK;
     OAuth2CallbackCommand.TSQ_url = OAuth2CallbackCommand.url;
-    OAuth2CallbackCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.AUTH_ROUTES.OAUTH2.CALLBACK, 'post', 'Callback from OAuth2');
+    OAuth2CallbackCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.AUTH_ROUTES.OAUTH2.CALLBACK, 'post', 'Callback from OAuth2', { scope: 'callback', kind: 'write' });
     OAuth2CallbackCommand.RequestSchema = zod_1.z.object({
         provider: zod_1.z.nativeEnum(constants_1.OAUTH2_PROVIDERS),
         code: zod_1.z.string(),

package/build/frontend/commands/auth/passkey/get-authentication-options.command.js

@@ -8,7 +8,7 @@ var GetPasskeyAuthenticationOptionsCommand;
 (function (GetPasskeyAuthenticationOptionsCommand) {
     GetPasskeyAuthenticationOptionsCommand.url = api_1.REST_API.AUTH.PASSKEY.GET_AUTHENTICATION_OPTIONS;
     GetPasskeyAuthenticationOptionsCommand.TSQ_url = GetPasskeyAuthenticationOptionsCommand.url;
-    GetPasskeyAuthenticationOptionsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.AUTH_ROUTES.PASSKEY.GET_AUTHENTICATION_OPTIONS, 'get', 'Get the authentication options for passkey');
+    GetPasskeyAuthenticationOptionsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.AUTH_ROUTES.PASSKEY.GET_AUTHENTICATION_OPTIONS, 'get', 'Get the authentication options for passkey', { scope: 'get-authentication-options', kind: 'read' });
     GetPasskeyAuthenticationOptionsCommand.ResponseSchema = zod_1.z.object({
         response: zod_1.z.unknown(),
     });

package/build/frontend/commands/auth/passkey/verify-authentication.command.js

@@ -8,7 +8,7 @@ var VerifyPasskeyAuthenticationCommand;
 (function (VerifyPasskeyAuthenticationCommand) {
     VerifyPasskeyAuthenticationCommand.url = api_1.REST_API.AUTH.PASSKEY.VERIFY_AUTHENTICATION;
     VerifyPasskeyAuthenticationCommand.TSQ_url = VerifyPasskeyAuthenticationCommand.url;
-    VerifyPasskeyAuthenticationCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.AUTH_ROUTES.PASSKEY.VERIFY_AUTHENTICATION, 'post', 'Verify the authentication for passkey');
+    VerifyPasskeyAuthenticationCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.AUTH_ROUTES.PASSKEY.VERIFY_AUTHENTICATION, 'post', 'Verify the authentication for passkey', { scope: 'verify-authentication', kind: 'write' });
     VerifyPasskeyAuthenticationCommand.RequestSchema = zod_1.z.object({
         response: zod_1.z.unknown(),
     });

package/build/frontend/commands/auth/register.command.js

@@ -8,7 +8,7 @@ var RegisterCommand;
 (function (RegisterCommand) {
     RegisterCommand.url = api_1.REST_API.AUTH.REGISTER;
     RegisterCommand.TSQ_url = RegisterCommand.url;
-    RegisterCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.AUTH_ROUTES.REGISTER, 'post', 'Register as superadmin');
+    RegisterCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.AUTH_ROUTES.REGISTER, 'post', 'Register as superadmin', { scope: 'register', kind: 'write' });
     RegisterCommand.RequestSchema = zod_1.z.object({
         username: zod_1.z.string(),
         password: zod_1.z

package/build/frontend/commands/bandwidth-stats/legacy/get-legacy-stats-node-user-usage.command.js

@@ -8,7 +8,7 @@ var GetLegacyStatsNodeUserUsageCommand;
 (function (GetLegacyStatsNodeUserUsageCommand) {
     GetLegacyStatsNodeUserUsageCommand.url = api_1.REST_API.BANDWIDTH_STATS.LEGACY.NODES.GET_USERS;
     GetLegacyStatsNodeUserUsageCommand.TSQ_url = GetLegacyStatsNodeUserUsageCommand.url(':uuid');
-    GetLegacyStatsNodeUserUsageCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.BANDWIDTH_STATS_ROUTES.LEGACY.NODES.GET_USERS(':uuid'), 'get', 'Get Node User Usage by Range and Node UUID (Legacy)');
+    GetLegacyStatsNodeUserUsageCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.BANDWIDTH_STATS_ROUTES.LEGACY.NODES.GET_USERS(':uuid'), 'get', 'Get Node User Usage by Range and Node UUID (Legacy)', { scope: 'node-users-usage-legacy', kind: 'read' });
     GetLegacyStatsNodeUserUsageCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/bandwidth-stats/legacy/get-legacy-user-usage.command.js

@@ -8,7 +8,7 @@ var GetLegacyStatsUserUsageCommand;
 (function (GetLegacyStatsUserUsageCommand) {
     GetLegacyStatsUserUsageCommand.url = api_1.REST_API.BANDWIDTH_STATS.LEGACY.USERS.GET_BY_UUID;
     GetLegacyStatsUserUsageCommand.TSQ_url = GetLegacyStatsUserUsageCommand.url(':uuid');
-    GetLegacyStatsUserUsageCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.BANDWIDTH_STATS_ROUTES.LEGACY.USERS.GET_BY_UUID(':uuid'), 'get', 'Get User Usage by Range (Legacy)');
+    GetLegacyStatsUserUsageCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.BANDWIDTH_STATS_ROUTES.LEGACY.USERS.GET_BY_UUID(':uuid'), 'get', 'Get User Usage by Range (Legacy)', { scope: 'user-usage-legacy', kind: 'read' });
     GetLegacyStatsUserUsageCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/bandwidth-stats/nodes/get-stats-node-users-usage.command.js

@@ -8,7 +8,7 @@ var GetStatsNodeUsersUsageCommand;
 (function (GetStatsNodeUsersUsageCommand) {
     GetStatsNodeUsersUsageCommand.url = api_1.REST_API.BANDWIDTH_STATS.NODES.GET_USERS;
     GetStatsNodeUsersUsageCommand.TSQ_url = GetStatsNodeUsersUsageCommand.url(':uuid');
-    GetStatsNodeUsersUsageCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.BANDWIDTH_STATS_ROUTES.NODES.GET_USERS(':uuid'), 'get', 'Get Node Users Usage by Node UUID');
+    GetStatsNodeUsersUsageCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.BANDWIDTH_STATS_ROUTES.NODES.GET_USERS(':uuid'), 'get', 'Get Node Users Usage by Node UUID', { scope: 'node-users-usage', kind: 'read' });
     GetStatsNodeUsersUsageCommand.RequestQuerySchema = zod_1.z.object({
         start: zod_1.z.string().date(),
         end: zod_1.z.string().date(),

package/build/frontend/commands/bandwidth-stats/nodes/get-stats-nodes-usage.command.js

@@ -8,7 +8,7 @@ var GetStatsNodesUsageCommand;
 (function (GetStatsNodesUsageCommand) {
     GetStatsNodesUsageCommand.url = api_1.REST_API.BANDWIDTH_STATS.NODES.GET;
     GetStatsNodesUsageCommand.TSQ_url = GetStatsNodesUsageCommand.url;
-    GetStatsNodesUsageCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.BANDWIDTH_STATS_ROUTES.NODES.GET, 'get', 'Get Nodes Usage by Range');
+    GetStatsNodesUsageCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.BANDWIDTH_STATS_ROUTES.NODES.GET, 'get', 'Get Nodes Usage by Range', { scope: 'nodes-usage', kind: 'read' });
     GetStatsNodesUsageCommand.RequestQuerySchema = zod_1.z.object({
         start: zod_1.z.string().date(),
         end: zod_1.z.string().date(),

package/build/frontend/commands/bandwidth-stats/nodes/get-stats-nodes-users-usage.command.js

@@ -8,7 +8,7 @@ var GetStatsNodesUsersUsageCommand;
 (function (GetStatsNodesUsersUsageCommand) {
     GetStatsNodesUsersUsageCommand.url = api_1.REST_API.BANDWIDTH_STATS.NODES.GET_USERS_BY_NODES;
     GetStatsNodesUsersUsageCommand.TSQ_url = GetStatsNodesUsersUsageCommand.url;
-    GetStatsNodesUsersUsageCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.BANDWIDTH_STATS_ROUTES.NODES.GET_USERS_BY_NODES, 'post', 'Get Nodes Users Usage by Nodes UUIDs');
+    GetStatsNodesUsersUsageCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.BANDWIDTH_STATS_ROUTES.NODES.GET_USERS_BY_NODES, 'post', 'Get Nodes Users Usage by Nodes UUIDs', { scope: 'nodes-users-usage', kind: 'read' });
     GetStatsNodesUsersUsageCommand.RequestQuerySchema = zod_1.z.object({
         start: zod_1.z.string().date(),
         end: zod_1.z.string().date(),

package/build/frontend/commands/bandwidth-stats/users/get-stats-user-usage.command.js

@@ -8,7 +8,7 @@ var GetStatsUserUsageCommand;
 (function (GetStatsUserUsageCommand) {
     GetStatsUserUsageCommand.url = api_1.REST_API.BANDWIDTH_STATS.USERS.GET_BY_UUID;
     GetStatsUserUsageCommand.TSQ_url = GetStatsUserUsageCommand.url(':uuid');
-    GetStatsUserUsageCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.BANDWIDTH_STATS_ROUTES.USERS.GET_BY_UUID(':uuid'), 'get', 'Get User Usage by Range');
+    GetStatsUserUsageCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.BANDWIDTH_STATS_ROUTES.USERS.GET_BY_UUID(':uuid'), 'get', 'Get User Usage by Range', { scope: 'user-usage', kind: 'read' });
     GetStatsUserUsageCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/config-profiles/actions/reorder.command.js

@@ -9,7 +9,7 @@ var ReorderConfigProfileCommand;
 (function (ReorderConfigProfileCommand) {
     ReorderConfigProfileCommand.url = api_1.REST_API.CONFIG_PROFILES.ACTIONS.REORDER;
     ReorderConfigProfileCommand.TSQ_url = ReorderConfigProfileCommand.url;
-    ReorderConfigProfileCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.ACTIONS.REORDER, 'post', 'Reorder config profiles');
+    ReorderConfigProfileCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.ACTIONS.REORDER, 'post', 'Reorder config profiles', { scope: 'reorder', kind: 'write' });
     ReorderConfigProfileCommand.RequestSchema = zod_1.z.object({
         items: zod_1.z.array(models_1.ConfigProfileSchema.pick({
             viewPosition: true,

package/build/frontend/commands/config-profiles/create-config-profile.command.js

@@ -9,7 +9,7 @@ var CreateConfigProfileCommand;
 (function (CreateConfigProfileCommand) {
     CreateConfigProfileCommand.url = api_1.REST_API.CONFIG_PROFILES.CREATE;
     CreateConfigProfileCommand.TSQ_url = CreateConfigProfileCommand.url;
-    CreateConfigProfileCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.CREATE, 'post', 'Create config profile');
+    CreateConfigProfileCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.CREATE, 'post', 'Create config profile', { scope: 'create', kind: 'write' });
     CreateConfigProfileCommand.RequestSchema = zod_1.z.object({
         name: zod_1.z
             .string()

package/build/frontend/commands/config-profiles/delete-config-profile.command.js

@@ -8,7 +8,7 @@ var DeleteConfigProfileCommand;
 (function (DeleteConfigProfileCommand) {
     DeleteConfigProfileCommand.url = api_1.REST_API.CONFIG_PROFILES.DELETE;
     DeleteConfigProfileCommand.TSQ_url = DeleteConfigProfileCommand.url(':uuid');
-    DeleteConfigProfileCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.DELETE(':uuid'), 'delete', 'Delete config profile');
+    DeleteConfigProfileCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.DELETE(':uuid'), 'delete', 'Delete config profile', { scope: 'delete', kind: 'write' });
     DeleteConfigProfileCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/config-profiles/get-all-inbounds.command.js

@@ -9,7 +9,7 @@ var GetAllInboundsCommand;
 (function (GetAllInboundsCommand) {
     GetAllInboundsCommand.url = api_1.REST_API.CONFIG_PROFILES.GET_ALL_INBOUNDS;
     GetAllInboundsCommand.TSQ_url = GetAllInboundsCommand.url;
-    GetAllInboundsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.GET_ALL_INBOUNDS, 'get', 'Get all inbounds from all config profiles');
+    GetAllInboundsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.GET_ALL_INBOUNDS, 'get', 'Get all inbounds from all config profiles', { scope: 'list-inbounds', kind: 'read' });
     GetAllInboundsCommand.ResponseSchema = zod_1.z.object({
         response: zod_1.z.object({
             total: zod_1.z.number(),

package/build/frontend/commands/config-profiles/get-computed-config-profile-by-uuid.command.js

@@ -9,7 +9,7 @@ var GetComputedConfigProfileByUuidCommand;
 (function (GetComputedConfigProfileByUuidCommand) {
     GetComputedConfigProfileByUuidCommand.url = api_1.REST_API.CONFIG_PROFILES.GET_COMPUTED_CONFIG_BY_PROFILE_UUID;
     GetComputedConfigProfileByUuidCommand.TSQ_url = GetComputedConfigProfileByUuidCommand.url(':uuid');
-    GetComputedConfigProfileByUuidCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.GET_COMPUTED_CONFIG_BY_PROFILE_UUID(':uuid'), 'get', 'Get computed config profile by uuid');
+    GetComputedConfigProfileByUuidCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.GET_COMPUTED_CONFIG_BY_PROFILE_UUID(':uuid'), 'get', 'Get computed config profile by uuid', { scope: 'get-computed', kind: 'read' });
     GetComputedConfigProfileByUuidCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/config-profiles/get-config-profile-by-uuid.command.js

@@ -9,7 +9,7 @@ var GetConfigProfileByUuidCommand;
 (function (GetConfigProfileByUuidCommand) {
     GetConfigProfileByUuidCommand.url = api_1.REST_API.CONFIG_PROFILES.GET_BY_UUID;
     GetConfigProfileByUuidCommand.TSQ_url = GetConfigProfileByUuidCommand.url(':uuid');
-    GetConfigProfileByUuidCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.GET_BY_UUID(':uuid'), 'get', 'Get config profile by uuid');
+    GetConfigProfileByUuidCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.GET_BY_UUID(':uuid'), 'get', 'Get config profile by uuid', { scope: 'get', kind: 'read' });
     GetConfigProfileByUuidCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/config-profiles/get-config-profiles.command.js

@@ -9,7 +9,7 @@ var GetConfigProfilesCommand;
 (function (GetConfigProfilesCommand) {
     GetConfigProfilesCommand.url = api_1.REST_API.CONFIG_PROFILES.GET;
     GetConfigProfilesCommand.TSQ_url = GetConfigProfilesCommand.url;
-    GetConfigProfilesCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.GET, 'get', 'Get config profiles');
+    GetConfigProfilesCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.GET, 'get', 'Get config profiles', { scope: 'list', kind: 'read' });
     GetConfigProfilesCommand.ResponseSchema = zod_1.z.object({
         response: zod_1.z.object({
             total: zod_1.z.number(),

package/build/frontend/commands/config-profiles/get-inbounds-by-profile-uuid.command.js

@@ -9,7 +9,7 @@ var GetInboundsByProfileUuidCommand;
 (function (GetInboundsByProfileUuidCommand) {
     GetInboundsByProfileUuidCommand.url = api_1.REST_API.CONFIG_PROFILES.GET_INBOUNDS_BY_PROFILE_UUID;
     GetInboundsByProfileUuidCommand.TSQ_url = GetInboundsByProfileUuidCommand.url(':uuid');
-    GetInboundsByProfileUuidCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.GET_INBOUNDS_BY_PROFILE_UUID(':uuid'), 'get', 'Get inbounds by profile uuid');
+    GetInboundsByProfileUuidCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.GET_INBOUNDS_BY_PROFILE_UUID(':uuid'), 'get', 'Get inbounds by profile uuid', { scope: 'list-profile-inbounds', kind: 'read' });
     GetInboundsByProfileUuidCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/config-profiles/update-config-profile.command.js

@@ -9,7 +9,7 @@ var UpdateConfigProfileCommand;
 (function (UpdateConfigProfileCommand) {
     UpdateConfigProfileCommand.url = api_1.REST_API.CONFIG_PROFILES.UPDATE;
     UpdateConfigProfileCommand.TSQ_url = UpdateConfigProfileCommand.url;
-    UpdateConfigProfileCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.UPDATE, 'patch', 'Update Core Config in specific config profile');
+    UpdateConfigProfileCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.CONFIG_PROFILES_ROUTES.UPDATE, 'patch', 'Update Core Config in specific config profile', { scope: 'update', kind: 'write' });
     UpdateConfigProfileCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid('UUID must be a valid UUID'),
         name: zod_1.z

package/build/frontend/commands/external-squads/actions/reorder.command.js

@@ -9,7 +9,7 @@ var ReorderExternalSquadCommand;
 (function (ReorderExternalSquadCommand) {
     ReorderExternalSquadCommand.url = api_1.REST_API.EXTERNAL_SQUADS.ACTIONS.REORDER;
     ReorderExternalSquadCommand.TSQ_url = ReorderExternalSquadCommand.url;
-    ReorderExternalSquadCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.ACTIONS.REORDER, 'post', 'Reorder external squads');
+    ReorderExternalSquadCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.ACTIONS.REORDER, 'post', 'Reorder external squads', { scope: 'reorder', kind: 'write' });
     ReorderExternalSquadCommand.RequestSchema = zod_1.z.object({
         items: zod_1.z.array(models_1.ExternalSquadSchema.pick({
             viewPosition: true,

package/build/frontend/commands/external-squads/bulk-actions/add-users-to-external-squad.command.js

@@ -8,7 +8,7 @@ var AddUsersToExternalSquadCommand;
 (function (AddUsersToExternalSquadCommand) {
     AddUsersToExternalSquadCommand.url = api_1.REST_API.EXTERNAL_SQUADS.BULK_ACTIONS.ADD_USERS;
     AddUsersToExternalSquadCommand.TSQ_url = AddUsersToExternalSquadCommand.url(':uuid');
-    AddUsersToExternalSquadCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.BULK_ACTIONS.ADD_USERS(':uuid'), 'post', 'Add all users to external squad');
+    AddUsersToExternalSquadCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.BULK_ACTIONS.ADD_USERS(':uuid'), 'post', 'Add all users to external squad', { scope: 'add-users', kind: 'write' });
     AddUsersToExternalSquadCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/external-squads/bulk-actions/delete-users-from-external-squad.command.js

@@ -8,7 +8,7 @@ var DeleteUsersFromExternalSquadCommand;
 (function (DeleteUsersFromExternalSquadCommand) {
     DeleteUsersFromExternalSquadCommand.url = api_1.REST_API.EXTERNAL_SQUADS.BULK_ACTIONS.REMOVE_USERS;
     DeleteUsersFromExternalSquadCommand.TSQ_url = DeleteUsersFromExternalSquadCommand.url(':uuid');
-    DeleteUsersFromExternalSquadCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.BULK_ACTIONS.REMOVE_USERS(':uuid'), 'delete', 'Delete users from external squad');
+    DeleteUsersFromExternalSquadCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.BULK_ACTIONS.REMOVE_USERS(':uuid'), 'delete', 'Delete users from external squad', { scope: 'remove-users', kind: 'write' });
     DeleteUsersFromExternalSquadCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/external-squads/create-external-squad.command.js

@@ -9,7 +9,7 @@ var CreateExternalSquadCommand;
 (function (CreateExternalSquadCommand) {
     CreateExternalSquadCommand.url = api_1.REST_API.EXTERNAL_SQUADS.CREATE;
     CreateExternalSquadCommand.TSQ_url = CreateExternalSquadCommand.url;
-    CreateExternalSquadCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.CREATE, 'post', 'Create external squad');
+    CreateExternalSquadCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.CREATE, 'post', 'Create external squad', { scope: 'create', kind: 'write' });
     CreateExternalSquadCommand.RequestSchema = zod_1.z.object({
         name: zod_1.z
             .string()

package/build/frontend/commands/external-squads/delete-external-squad.command.js

@@ -8,7 +8,7 @@ var DeleteExternalSquadCommand;
 (function (DeleteExternalSquadCommand) {
     DeleteExternalSquadCommand.url = api_1.REST_API.EXTERNAL_SQUADS.DELETE;
     DeleteExternalSquadCommand.TSQ_url = DeleteExternalSquadCommand.url(':uuid');
-    DeleteExternalSquadCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.DELETE(':uuid'), 'delete', 'Delete external squad');
+    DeleteExternalSquadCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.DELETE(':uuid'), 'delete', 'Delete external squad', { scope: 'delete', kind: 'write' });
     DeleteExternalSquadCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/external-squads/get-external-squad-by-uuid.command.js

@@ -9,7 +9,7 @@ var GetExternalSquadByUuidCommand;
 (function (GetExternalSquadByUuidCommand) {
     GetExternalSquadByUuidCommand.url = api_1.REST_API.EXTERNAL_SQUADS.GET_BY_UUID;
     GetExternalSquadByUuidCommand.TSQ_url = GetExternalSquadByUuidCommand.url(':uuid');
-    GetExternalSquadByUuidCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.GET_BY_UUID(':uuid'), 'get', 'Get external squad by uuid');
+    GetExternalSquadByUuidCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.GET_BY_UUID(':uuid'), 'get', 'Get external squad by uuid', { scope: 'get', kind: 'read' });
     GetExternalSquadByUuidCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/external-squads/get-external-squads.command.js

@@ -9,7 +9,7 @@ var GetExternalSquadsCommand;
 (function (GetExternalSquadsCommand) {
     GetExternalSquadsCommand.url = api_1.REST_API.EXTERNAL_SQUADS.GET;
     GetExternalSquadsCommand.TSQ_url = GetExternalSquadsCommand.url;
-    GetExternalSquadsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.GET, 'get', 'Get all external squads');
+    GetExternalSquadsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.GET, 'get', 'Get all external squads', { scope: 'list', kind: 'read' });
     GetExternalSquadsCommand.ResponseSchema = zod_1.z.object({
         response: zod_1.z.object({
             total: zod_1.z.number(),

package/build/frontend/commands/external-squads/update-external-squad.command.js

@@ -9,7 +9,7 @@ var UpdateExternalSquadCommand;
 (function (UpdateExternalSquadCommand) {
     UpdateExternalSquadCommand.url = api_1.REST_API.EXTERNAL_SQUADS.UPDATE;
     UpdateExternalSquadCommand.TSQ_url = UpdateExternalSquadCommand.url;
-    UpdateExternalSquadCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.UPDATE, 'patch', 'Update external squad');
+    UpdateExternalSquadCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.EXTERNAL_SQUADS_ROUTES.UPDATE, 'patch', 'Update external squad', { scope: 'update', kind: 'write' });
     UpdateExternalSquadCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
         name: zod_1.z

package/build/frontend/commands/hosts/bulk/delete-many-hosts.command.js

@@ -9,7 +9,7 @@ var BulkDeleteHostsCommand;
 (function (BulkDeleteHostsCommand) {
     BulkDeleteHostsCommand.url = api_1.REST_API.HOSTS.BULK.DELETE_HOSTS;
     BulkDeleteHostsCommand.TSQ_url = BulkDeleteHostsCommand.url;
-    BulkDeleteHostsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.HOSTS_ROUTES.BULK.DELETE_HOSTS, 'post', 'Delete hosts by UUIDs');
+    BulkDeleteHostsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.HOSTS_ROUTES.BULK.DELETE_HOSTS, 'post', 'Delete hosts by UUIDs', { scope: 'bulk-delete', kind: 'write' });
     BulkDeleteHostsCommand.RequestSchema = zod_1.z.object({
         uuids: zod_1.z.array(zod_1.z.string().uuid()),
     });

package/build/frontend/commands/hosts/bulk/disable-many-hosts.command.js

@@ -9,7 +9,7 @@ var BulkDisableHostsCommand;
 (function (BulkDisableHostsCommand) {
     BulkDisableHostsCommand.url = api_1.REST_API.HOSTS.BULK.DISABLE_HOSTS;
     BulkDisableHostsCommand.TSQ_url = BulkDisableHostsCommand.url;
-    BulkDisableHostsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.HOSTS_ROUTES.BULK.DISABLE_HOSTS, 'post', 'Disable hosts by UUIDs');
+    BulkDisableHostsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.HOSTS_ROUTES.BULK.DISABLE_HOSTS, 'post', 'Disable hosts by UUIDs', { scope: 'bulk-disable', kind: 'write' });
     BulkDisableHostsCommand.RequestSchema = zod_1.z.object({
         uuids: zod_1.z.array(zod_1.z.string().uuid()),
     });

package/build/frontend/commands/hosts/bulk/enable-many-hosts.command.js

@@ -9,7 +9,7 @@ var BulkEnableHostsCommand;
 (function (BulkEnableHostsCommand) {
     BulkEnableHostsCommand.url = api_1.REST_API.HOSTS.BULK.ENABLE_HOSTS;
     BulkEnableHostsCommand.TSQ_url = BulkEnableHostsCommand.url;
-    BulkEnableHostsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.HOSTS_ROUTES.BULK.ENABLE_HOSTS, 'post', 'Enable hosts by UUIDs');
+    BulkEnableHostsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.HOSTS_ROUTES.BULK.ENABLE_HOSTS, 'post', 'Enable hosts by UUIDs', { scope: 'bulk-enable', kind: 'write' });
     BulkEnableHostsCommand.RequestSchema = zod_1.z.object({
         uuids: zod_1.z.array(zod_1.z.string().uuid()),
     });

package/build/frontend/commands/hosts/bulk/update-many-hosts.command.js

@@ -10,7 +10,7 @@ var UpdateManyHostsCommand;
 (function (UpdateManyHostsCommand) {
     UpdateManyHostsCommand.url = api_1.REST_API.HOSTS.BULK.UPDATE;
     UpdateManyHostsCommand.TSQ_url = UpdateManyHostsCommand.url;
-    UpdateManyHostsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.HOSTS_ROUTES.BULK.UPDATE, 'patch', 'Update many hosts');
+    UpdateManyHostsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.HOSTS_ROUTES.BULK.UPDATE, 'patch', 'Update many hosts', { scope: 'bulk-update', kind: 'write' });
     UpdateManyHostsCommand.RequestSchema = update_command_1.UpdateHostCommand.RequestSchema.omit({ uuid: true })
         .partial()
         .extend({