@remnawave/backend-contract 2.8.24 → 2.8.26

package/build/frontend/commands/system/get-bandwidth-stats.command.js

@@ -9,7 +9,7 @@ var GetBandwidthStatsCommand;
 (function (GetBandwidthStatsCommand) {
     GetBandwidthStatsCommand.url = api_1.REST_API.SYSTEM.STATS.BANDWIDTH_STATS;
     GetBandwidthStatsCommand.TSQ_url = GetBandwidthStatsCommand.url;
-    GetBandwidthStatsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.STATS.BANDWIDTH_STATS, 'get', 'Get Bandwidth Stats');
+    GetBandwidthStatsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.STATS.BANDWIDTH_STATS, 'get', 'Get Bandwidth Stats', { scope: 'bandwidth-stats', kind: 'read' });
     GetBandwidthStatsCommand.RequestQuerySchema = zod_1.z.object({
         tz: zod_1.z.string().optional(),
     });

package/build/frontend/commands/system/get-metadata.command.js

@@ -8,7 +8,7 @@ var GetMetadataCommand;
 (function (GetMetadataCommand) {
     GetMetadataCommand.url = api_1.REST_API.SYSTEM.METADATA;
     GetMetadataCommand.TSQ_url = GetMetadataCommand.url;
-    GetMetadataCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.METADATA, 'get', 'Get Remnawave Information');
+    GetMetadataCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.METADATA, 'get', 'Get Remnawave Information', { scope: 'metadata', kind: 'read' });
     GetMetadataCommand.ResponseSchema = zod_1.z.object({
         response: zod_1.z.object({
             version: zod_1.z.string(),

package/build/frontend/commands/system/get-nodes-metrics.command.js

@@ -8,7 +8,7 @@ var GetNodesMetricsCommand;
 (function (GetNodesMetricsCommand) {
     GetNodesMetricsCommand.url = api_1.REST_API.SYSTEM.STATS.NODES_METRICS;
     GetNodesMetricsCommand.TSQ_url = GetNodesMetricsCommand.url;
-    GetNodesMetricsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.STATS.NODES_METRICS, 'get', 'Get Nodes Metrics');
+    GetNodesMetricsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.STATS.NODES_METRICS, 'get', 'Get Nodes Metrics', { scope: 'nodes-metrics', kind: 'read' });
     GetNodesMetricsCommand.ResponseSchema = zod_1.z.object({
         response: zod_1.z.object({
             nodes: zod_1.z.array(zod_1.z.object({

package/build/frontend/commands/system/get-nodes-statistics.js

@@ -8,7 +8,7 @@ var GetNodesStatisticsCommand;
 (function (GetNodesStatisticsCommand) {
     GetNodesStatisticsCommand.url = api_1.REST_API.SYSTEM.STATS.NODES_STATS;
     GetNodesStatisticsCommand.TSQ_url = GetNodesStatisticsCommand.url;
-    GetNodesStatisticsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.STATS.NODES_STATS, 'get', 'Get Nodes Statistics');
+    GetNodesStatisticsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.STATS.NODES_STATS, 'get', 'Get Nodes Statistics', { scope: 'nodes-statistics', kind: 'read' });
     GetNodesStatisticsCommand.RequestQuerySchema = zod_1.z.object({
         tz: zod_1.z.string().optional(),
     });

package/build/frontend/commands/system/get-recap.command.js

@@ -8,7 +8,7 @@ var GetRecapCommand;
 (function (GetRecapCommand) {
     GetRecapCommand.url = api_1.REST_API.SYSTEM.STATS.RECAP;
     GetRecapCommand.TSQ_url = GetRecapCommand.url;
-    GetRecapCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.STATS.RECAP, 'get', 'Get Recap');
+    GetRecapCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.STATS.RECAP, 'get', 'Get Recap', { scope: 'recap', kind: 'read' });
     GetRecapCommand.ResponseSchema = zod_1.z.object({
         response: zod_1.z.object({
             thisMonth: zod_1.z.object({

package/build/frontend/commands/system/get-remnawave-health.command.js

@@ -8,7 +8,7 @@ var GetRemnawaveHealthCommand;
 (function (GetRemnawaveHealthCommand) {
     GetRemnawaveHealthCommand.url = api_1.REST_API.SYSTEM.HEALTH;
     GetRemnawaveHealthCommand.TSQ_url = GetRemnawaveHealthCommand.url;
-    GetRemnawaveHealthCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.HEALTH, 'get', 'Get Remnawave Health');
+    GetRemnawaveHealthCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.HEALTH, 'get', 'Get Remnawave Health', { scope: 'remnawave-health', kind: 'read' });
     GetRemnawaveHealthCommand.ResponseSchema = zod_1.z.object({
         response: zod_1.z.object({
             runtimeMetrics: zod_1.z.array(zod_1.z.object({

package/build/frontend/commands/system/get-stats.command.js

@@ -9,7 +9,7 @@ var GetStatsCommand;
 (function (GetStatsCommand) {
     GetStatsCommand.url = api_1.REST_API.SYSTEM.STATS.SYSTEM_STATS;
     GetStatsCommand.TSQ_url = GetStatsCommand.url;
-    GetStatsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.STATS.SYSTEM_STATS, 'get', 'Get Stats');
+    GetStatsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.STATS.SYSTEM_STATS, 'get', 'Get Stats', { scope: 'stats', kind: 'read' });
     GetStatsCommand.RequestQuerySchema = zod_1.z.object({
         tz: zod_1.z.string().optional(),
     });

package/build/frontend/commands/system/testers/test-srr-matcher.command.js

@@ -9,7 +9,7 @@ var TestSrrMatcherCommand;
 (function (TestSrrMatcherCommand) {
     TestSrrMatcherCommand.url = api_1.REST_API.SYSTEM.TESTERS.SRR_MATCHER;
     TestSrrMatcherCommand.TSQ_url = TestSrrMatcherCommand.url;
-    TestSrrMatcherCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.TESTERS.SRR_MATCHER, 'post', 'Test SRR Matcher');
+    TestSrrMatcherCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.TESTERS.SRR_MATCHER, 'post', 'Test SRR Matcher', { scope: 'test-srr-matcher', kind: 'write' });
     TestSrrMatcherCommand.RequestSchema = zod_1.z.object({
         responseRules: models_1.ResponseRulesConfigSchema,
     });

package/build/frontend/commands/system/tools/encrypt-happ-cryptolink.command.js

@@ -8,7 +8,7 @@ var EncryptHappCryptoLinkCommand;
 (function (EncryptHappCryptoLinkCommand) {
     EncryptHappCryptoLinkCommand.url = api_1.REST_API.SYSTEM.TOOLS.ENCRYPT_HAPP_CRYPTO_LINK;
     EncryptHappCryptoLinkCommand.TSQ_url = EncryptHappCryptoLinkCommand.url;
-    EncryptHappCryptoLinkCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.TOOLS.ENCRYPT_HAPP_CRYPTO_LINK, 'post', 'Encrypt Happ Crypto Link');
+    EncryptHappCryptoLinkCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.TOOLS.ENCRYPT_HAPP_CRYPTO_LINK, 'post', 'Encrypt Happ Crypto Link', { scope: 'encrypt-happ-crypto-link', kind: 'read' });
     EncryptHappCryptoLinkCommand.RequestSchema = zod_1.z.object({
         linkToEncrypt: zod_1.z.string().url(),
     });

package/build/frontend/commands/system/tools/generate-x25519.command.js

@@ -8,7 +8,7 @@ var GenerateX25519Command;
 (function (GenerateX25519Command) {
     GenerateX25519Command.url = api_1.REST_API.SYSTEM.TOOLS.GENERATE_X25519;
     GenerateX25519Command.TSQ_url = GenerateX25519Command.url;
-    GenerateX25519Command.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.TOOLS.GENERATE_X25519, 'get', 'Generate 30 X25519 keypairs');
+    GenerateX25519Command.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.SYSTEM_ROUTES.TOOLS.GENERATE_X25519, 'get', 'Generate 30 X25519 keypairs', { scope: 'generate-x25519', kind: 'read' });
     GenerateX25519Command.ResponseSchema = zod_1.z.object({
         response: zod_1.z.object({
             keypairs: zod_1.z.array(zod_1.z.object({

package/build/frontend/commands/users/actions/disable-user.command.js

@@ -9,7 +9,7 @@ var DisableUserCommand;
 (function (DisableUserCommand) {
     DisableUserCommand.url = api_1.REST_API.USERS.ACTIONS.DISABLE;
     DisableUserCommand.TSQ_url = DisableUserCommand.url(':uuid');
-    DisableUserCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.ACTIONS.DISABLE(':uuid'), 'post', 'Disable user');
+    DisableUserCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.ACTIONS.DISABLE(':uuid'), 'post', 'Disable user', { scope: 'disable', kind: 'write' });
     DisableUserCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/users/actions/enable-user.command.js

@@ -9,7 +9,7 @@ var EnableUserCommand;
 (function (EnableUserCommand) {
     EnableUserCommand.url = api_1.REST_API.USERS.ACTIONS.ENABLE;
     EnableUserCommand.TSQ_url = EnableUserCommand.url(':uuid');
-    EnableUserCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.ACTIONS.ENABLE(':uuid'), 'post', 'Enable user');
+    EnableUserCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.ACTIONS.ENABLE(':uuid'), 'post', 'Enable user', { scope: 'enable', kind: 'write' });
     EnableUserCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/users/actions/reset-user-traffic.command.js

@@ -9,7 +9,7 @@ var ResetUserTrafficCommand;
 (function (ResetUserTrafficCommand) {
     ResetUserTrafficCommand.url = api_1.REST_API.USERS.ACTIONS.RESET_TRAFFIC;
     ResetUserTrafficCommand.TSQ_url = ResetUserTrafficCommand.url(':uuid');
-    ResetUserTrafficCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.ACTIONS.RESET_TRAFFIC(':uuid'), 'post', 'Reset user traffic');
+    ResetUserTrafficCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.ACTIONS.RESET_TRAFFIC(':uuid'), 'post', 'Reset user traffic', { scope: 'reset-traffic', kind: 'write' });
     ResetUserTrafficCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/users/actions/revoke-user-subscription.command.js

@@ -9,7 +9,7 @@ var RevokeUserSubscriptionCommand;
 (function (RevokeUserSubscriptionCommand) {
     RevokeUserSubscriptionCommand.url = api_1.REST_API.USERS.ACTIONS.REVOKE_SUBSCRIPTION;
     RevokeUserSubscriptionCommand.TSQ_url = RevokeUserSubscriptionCommand.url(':uuid');
-    RevokeUserSubscriptionCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.ACTIONS.REVOKE_SUBSCRIPTION(':uuid'), 'post', 'Revoke user subscription');
+    RevokeUserSubscriptionCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.ACTIONS.REVOKE_SUBSCRIPTION(':uuid'), 'post', 'Revoke user subscription', { scope: 'revoke-subscription', kind: 'write' });
     RevokeUserSubscriptionCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/users/bulk/bulk-delete-users-by-status.command.js

@@ -9,7 +9,7 @@ var BulkDeleteUsersByStatusCommand;
 (function (BulkDeleteUsersByStatusCommand) {
     BulkDeleteUsersByStatusCommand.url = api_1.REST_API.USERS.BULK.DELETE_BY_STATUS;
     BulkDeleteUsersByStatusCommand.TSQ_url = BulkDeleteUsersByStatusCommand.url;
-    BulkDeleteUsersByStatusCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.DELETE_BY_STATUS, 'post', 'Bulk delete users by status');
+    BulkDeleteUsersByStatusCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.DELETE_BY_STATUS, 'post', 'Bulk delete users by status', { scope: 'bulk-delete-by-status', kind: 'write' });
     BulkDeleteUsersByStatusCommand.RequestSchema = zod_1.z.object({
         status: models_1.UsersSchema.shape.status,
     });

package/build/frontend/commands/users/bulk/bulk-delete-users.command.js

@@ -8,7 +8,7 @@ var BulkDeleteUsersCommand;
 (function (BulkDeleteUsersCommand) {
     BulkDeleteUsersCommand.url = api_1.REST_API.USERS.BULK.DELETE;
     BulkDeleteUsersCommand.TSQ_url = BulkDeleteUsersCommand.url;
-    BulkDeleteUsersCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.DELETE, 'post', 'Bulk delete users by UUIDs');
+    BulkDeleteUsersCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.DELETE, 'post', 'Bulk delete users by UUIDs', { scope: 'bulk-delete', kind: 'write' });
     BulkDeleteUsersCommand.RequestSchema = zod_1.z.object({
         uuids: zod_1.z
             .array(zod_1.z.string().uuid())

package/build/frontend/commands/users/bulk/bulk-extend-expiration-date.command.js

@@ -8,7 +8,7 @@ var BulkExtendExpirationDateCommand;
 (function (BulkExtendExpirationDateCommand) {
     BulkExtendExpirationDateCommand.url = api_1.REST_API.USERS.BULK.EXTEND_EXPIRATION_DATE;
     BulkExtendExpirationDateCommand.TSQ_url = BulkExtendExpirationDateCommand.url;
-    BulkExtendExpirationDateCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.EXTEND_EXPIRATION_DATE, 'post', 'Extend expiration date for specified users by days');
+    BulkExtendExpirationDateCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.EXTEND_EXPIRATION_DATE, 'post', 'Extend expiration date for specified users by days', { scope: 'bulk-extend-expiration-date', kind: 'write' });
     BulkExtendExpirationDateCommand.RequestSchema = zod_1.z.object({
         uuids: zod_1.z
             .array(zod_1.z.string().uuid())

package/build/frontend/commands/users/bulk/bulk-reset-traffic-users.command.js

@@ -8,7 +8,7 @@ var BulkResetTrafficUsersCommand;
 (function (BulkResetTrafficUsersCommand) {
     BulkResetTrafficUsersCommand.url = api_1.REST_API.USERS.BULK.RESET_TRAFFIC;
     BulkResetTrafficUsersCommand.TSQ_url = BulkResetTrafficUsersCommand.url;
-    BulkResetTrafficUsersCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.RESET_TRAFFIC, 'post', 'Bulk reset traffic users by UUIDs');
+    BulkResetTrafficUsersCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.RESET_TRAFFIC, 'post', 'Bulk reset traffic users by UUIDs', { scope: 'bulk-reset-traffic', kind: 'write' });
     BulkResetTrafficUsersCommand.RequestSchema = zod_1.z.object({
         uuids: zod_1.z
             .array(zod_1.z.string().uuid())

package/build/frontend/commands/users/bulk/bulk-revoke-users-subscription.command.js

@@ -8,7 +8,7 @@ var BulkRevokeUsersSubscriptionCommand;
 (function (BulkRevokeUsersSubscriptionCommand) {
     BulkRevokeUsersSubscriptionCommand.url = api_1.REST_API.USERS.BULK.REVOKE_SUBSCRIPTION;
     BulkRevokeUsersSubscriptionCommand.TSQ_url = BulkRevokeUsersSubscriptionCommand.url;
-    BulkRevokeUsersSubscriptionCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.REVOKE_SUBSCRIPTION, 'post', 'Revoke users subscription by User UUIDs');
+    BulkRevokeUsersSubscriptionCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.REVOKE_SUBSCRIPTION, 'post', 'Revoke users subscription by User UUIDs', { scope: 'bulk-revoke-subscription', kind: 'write' });
     BulkRevokeUsersSubscriptionCommand.RequestSchema = zod_1.z.object({
         uuids: zod_1.z
             .array(zod_1.z.string().uuid())

package/build/frontend/commands/users/bulk/bulk-update-users-squads.command.js

@@ -8,7 +8,7 @@ var BulkUpdateUsersSquadsCommand;
 (function (BulkUpdateUsersSquadsCommand) {
     BulkUpdateUsersSquadsCommand.url = api_1.REST_API.USERS.BULK.UPDATE_SQUADS;
     BulkUpdateUsersSquadsCommand.TSQ_url = BulkUpdateUsersSquadsCommand.url;
-    BulkUpdateUsersSquadsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.UPDATE_SQUADS, 'post', 'Bulk update users internal squads by UUIDs');
+    BulkUpdateUsersSquadsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.UPDATE_SQUADS, 'post', 'Bulk update users internal squads by UUIDs', { scope: 'bulk-update-squads', kind: 'write' });
     BulkUpdateUsersSquadsCommand.RequestSchema = zod_1.z.object({
         uuids: zod_1.z
             .array(zod_1.z.string().uuid())

package/build/frontend/commands/users/bulk/bulk-update-users.command.js

@@ -10,7 +10,7 @@ var BulkUpdateUsersCommand;
 (function (BulkUpdateUsersCommand) {
     BulkUpdateUsersCommand.url = api_1.REST_API.USERS.BULK.UPDATE;
     BulkUpdateUsersCommand.TSQ_url = BulkUpdateUsersCommand.url;
-    BulkUpdateUsersCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.UPDATE, 'post', 'Bulk update users by UUIDs');
+    BulkUpdateUsersCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.UPDATE, 'post', 'Bulk update users by UUIDs', { scope: 'bulk-update-users', kind: 'write' });
     BulkUpdateUsersCommand.RequestSchema = zod_1.z.object({
         uuids: zod_1.z
             .array(zod_1.z.string().uuid())

package/build/frontend/commands/users/bulk-all/bulk-all-extend-expiration-date.command.js

@@ -8,7 +8,7 @@ var BulkAllExtendExpirationDateCommand;
 (function (BulkAllExtendExpirationDateCommand) {
     BulkAllExtendExpirationDateCommand.url = api_1.REST_API.USERS.BULK.ALL.EXTEND_EXPIRATION_DATE;
     BulkAllExtendExpirationDateCommand.TSQ_url = BulkAllExtendExpirationDateCommand.url;
-    BulkAllExtendExpirationDateCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.ALL.EXTEND_EXPIRATION_DATE, 'post', 'Extend expiration date for all users by days');
+    BulkAllExtendExpirationDateCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.ALL.EXTEND_EXPIRATION_DATE, 'post', 'Extend expiration date for all users by days', { scope: 'bulk-all-extend-expiration-date', kind: 'write' });
     BulkAllExtendExpirationDateCommand.RequestSchema = zod_1.z.object({
         extendDays: zod_1.z.number().int().min(1, 'Extend days must be greater than 0'),
     });

package/build/frontend/commands/users/bulk-all/bulk-all-reset-traffic-users.command.js

@@ -8,7 +8,7 @@ var BulkAllResetTrafficUsersCommand;
 (function (BulkAllResetTrafficUsersCommand) {
     BulkAllResetTrafficUsersCommand.url = api_1.REST_API.USERS.BULK.ALL.RESET_TRAFFIC;
     BulkAllResetTrafficUsersCommand.TSQ_url = BulkAllResetTrafficUsersCommand.url;
-    BulkAllResetTrafficUsersCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.ALL.RESET_TRAFFIC, 'post', 'Reset user used traffic for all users');
+    BulkAllResetTrafficUsersCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.ALL.RESET_TRAFFIC, 'post', 'Reset user used traffic for all users', { scope: 'bulk-all-reset-traffic', kind: 'write' });
     BulkAllResetTrafficUsersCommand.ResponseSchema = zod_1.z.object({
         response: zod_1.z.object({
             eventSent: zod_1.z.boolean(),

package/build/frontend/commands/users/bulk-all/bulk-all-update-users.command.js

@@ -10,7 +10,7 @@ var BulkAllUpdateUsersCommand;
 (function (BulkAllUpdateUsersCommand) {
     BulkAllUpdateUsersCommand.url = api_1.REST_API.USERS.BULK.ALL.UPDATE;
     BulkAllUpdateUsersCommand.TSQ_url = BulkAllUpdateUsersCommand.url;
-    BulkAllUpdateUsersCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.ALL.UPDATE, 'post', 'Bulk update all users');
+    BulkAllUpdateUsersCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.BULK.ALL.UPDATE, 'post', 'Bulk update all users', { scope: 'bulk-all-update-users', kind: 'write' });
     BulkAllUpdateUsersCommand.RequestSchema = zod_1.z.object({
         status: models_1.UsersSchema.shape.status.optional(),
         trafficLimitBytes: zod_1.z.optional(zod_1.z

package/build/frontend/commands/users/create-user.command.js

@@ -9,7 +9,7 @@ var CreateUserCommand;
 (function (CreateUserCommand) {
     CreateUserCommand.url = api_1.REST_API.USERS.CREATE;
     CreateUserCommand.TSQ_url = CreateUserCommand.url;
-    CreateUserCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.CREATE, 'post', 'Create a new user');
+    CreateUserCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.CREATE, 'post', 'Create a new user', { scope: 'create', kind: 'write' });
     CreateUserCommand.RequestSchema = zod_1.z.object({
         username: zod_1.z
             .string({

package/build/frontend/commands/users/delete-user.command.js

@@ -8,7 +8,7 @@ var DeleteUserCommand;
 (function (DeleteUserCommand) {
     DeleteUserCommand.url = api_1.REST_API.USERS.DELETE;
     DeleteUserCommand.TSQ_url = DeleteUserCommand.url(':uuid');
-    DeleteUserCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.DELETE(':uuid'), 'delete', 'Delete user');
+    DeleteUserCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.DELETE(':uuid'), 'delete', 'Delete user', { scope: 'delete', kind: 'write' });
     DeleteUserCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/users/get-all-users.command.js

@@ -9,7 +9,10 @@ var GetAllUsersCommand;
 (function (GetAllUsersCommand) {
     GetAllUsersCommand.url = api_1.REST_API.USERS.GET;
     GetAllUsersCommand.TSQ_url = GetAllUsersCommand.url;
-    GetAllUsersCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET, 'get', 'Get all users');
+    GetAllUsersCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET, 'get', 'Get all users', {
+        scope: 'list',
+        kind: 'read',
+    });
     GetAllUsersCommand.RequestQuerySchema = models_1.TanstackQueryRequestQuerySchema;
     GetAllUsersCommand.ResponseSchema = zod_1.z.object({
         response: zod_1.z.object({

package/build/frontend/commands/users/get-by/get-user-by-email.command.js

@@ -9,7 +9,7 @@ var GetUserByEmailCommand;
 (function (GetUserByEmailCommand) {
     GetUserByEmailCommand.url = api_1.REST_API.USERS.GET_BY.EMAIL;
     GetUserByEmailCommand.TSQ_url = GetUserByEmailCommand.url(':email');
-    GetUserByEmailCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET_BY.EMAIL(':email'), 'get', 'Get users by email');
+    GetUserByEmailCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET_BY.EMAIL(':email'), 'get', 'Get users by email', { scope: 'by-email', kind: 'read' });
     GetUserByEmailCommand.RequestSchema = zod_1.z.object({
         email: zod_1.z.string().email(),
     });

package/build/frontend/commands/users/get-by/get-user-by-id.command.js

@@ -9,7 +9,7 @@ var GetUserByIdCommand;
 (function (GetUserByIdCommand) {
     GetUserByIdCommand.url = api_1.REST_API.USERS.GET_BY.ID;
     GetUserByIdCommand.TSQ_url = GetUserByIdCommand.url(':id');
-    GetUserByIdCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET_BY.ID(':id'), 'get', 'Get user by ID');
+    GetUserByIdCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET_BY.ID(':id'), 'get', 'Get user by ID', { scope: 'by-id', kind: 'read' });
     GetUserByIdCommand.RequestSchema = zod_1.z.object({
         id: zod_1.z.coerce.bigint(),
     });

package/build/frontend/commands/users/get-by/get-user-by-short-uuid.command.js

@@ -9,7 +9,7 @@ var GetUserByShortUuidCommand;
 (function (GetUserByShortUuidCommand) {
     GetUserByShortUuidCommand.url = api_1.REST_API.USERS.GET_BY.SHORT_UUID;
     GetUserByShortUuidCommand.TSQ_url = GetUserByShortUuidCommand.url(':shortUuid');
-    GetUserByShortUuidCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET_BY.SHORT_UUID(':shortUuid'), 'get', 'Get user by Short UUID');
+    GetUserByShortUuidCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET_BY.SHORT_UUID(':shortUuid'), 'get', 'Get user by Short UUID', { scope: 'by-short-uuid', kind: 'read' });
     GetUserByShortUuidCommand.RequestSchema = zod_1.z.object({
         shortUuid: zod_1.z.string(),
     });

package/build/frontend/commands/users/get-by/get-user-by-tag.command.js

@@ -9,7 +9,7 @@ var GetUserByTagCommand;
 (function (GetUserByTagCommand) {
     GetUserByTagCommand.url = api_1.REST_API.USERS.GET_BY.TAG;
     GetUserByTagCommand.TSQ_url = GetUserByTagCommand.url(':tag');
-    GetUserByTagCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET_BY.TAG(':tag'), 'get', 'Get users by tag');
+    GetUserByTagCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET_BY.TAG(':tag'), 'get', 'Get users by tag', { scope: 'by-tag', kind: 'read' });
     GetUserByTagCommand.RequestSchema = zod_1.z.object({
         tag: zod_1.z
             .string()

package/build/frontend/commands/users/get-by/get-user-by-telegram-id.command.js

@@ -9,7 +9,7 @@ var GetUserByTelegramIdCommand;
 (function (GetUserByTelegramIdCommand) {
     GetUserByTelegramIdCommand.url = api_1.REST_API.USERS.GET_BY.TELEGRAM_ID;
     GetUserByTelegramIdCommand.TSQ_url = GetUserByTelegramIdCommand.url(':telegramId');
-    GetUserByTelegramIdCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET_BY.TELEGRAM_ID(':telegramId'), 'get', 'Get users by telegram ID');
+    GetUserByTelegramIdCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET_BY.TELEGRAM_ID(':telegramId'), 'get', 'Get users by telegram ID', { scope: 'by-telegram-id', kind: 'read' });
     GetUserByTelegramIdCommand.RequestSchema = zod_1.z.object({
         telegramId: zod_1.z.string(),
     });

package/build/frontend/commands/users/get-by/get-user-by-username.command.js

@@ -9,7 +9,7 @@ var GetUserByUsernameCommand;
 (function (GetUserByUsernameCommand) {
     GetUserByUsernameCommand.url = api_1.REST_API.USERS.GET_BY.USERNAME;
     GetUserByUsernameCommand.TSQ_url = GetUserByUsernameCommand.url(':username');
-    GetUserByUsernameCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET_BY.USERNAME(':username'), 'get', 'Get user by username');
+    GetUserByUsernameCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET_BY.USERNAME(':username'), 'get', 'Get user by username', { scope: 'by-username', kind: 'read' });
     GetUserByUsernameCommand.RequestSchema = zod_1.z.object({
         username: zod_1.z.string(),
     });

package/build/frontend/commands/users/get-user-accessible-nodes.command.js

@@ -8,7 +8,7 @@ var GetUserAccessibleNodesCommand;
 (function (GetUserAccessibleNodesCommand) {
     GetUserAccessibleNodesCommand.url = api_1.REST_API.USERS.ACCESSIBLE_NODES;
     GetUserAccessibleNodesCommand.TSQ_url = GetUserAccessibleNodesCommand.url(':uuid');
-    GetUserAccessibleNodesCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.ACCESSIBLE_NODES(':uuid'), 'get', 'Get user accessible nodes');
+    GetUserAccessibleNodesCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.ACCESSIBLE_NODES(':uuid'), 'get', 'Get user accessible nodes', { scope: 'accessible-nodes', kind: 'read' });
     GetUserAccessibleNodesCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/users/get-user-by-uuid.command.js

@@ -9,7 +9,7 @@ var GetUserByUuidCommand;
 (function (GetUserByUuidCommand) {
     GetUserByUuidCommand.url = api_1.REST_API.USERS.GET_BY_UUID;
     GetUserByUuidCommand.TSQ_url = GetUserByUuidCommand.url(':uuid');
-    GetUserByUuidCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET_BY_UUID(':uuid'), 'get', 'Get user by UUID');
+    GetUserByUuidCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.GET_BY_UUID(':uuid'), 'get', 'Get user by UUID', { scope: 'by-uuid', kind: 'read' });
     GetUserByUuidCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/users/get-user-subscription-request-history.command.js

@@ -8,7 +8,7 @@ var GetUserSubscriptionRequestHistoryCommand;
 (function (GetUserSubscriptionRequestHistoryCommand) {
     GetUserSubscriptionRequestHistoryCommand.url = api_1.REST_API.USERS.SUBSCRIPTION_REQUEST_HISTORY;
     GetUserSubscriptionRequestHistoryCommand.TSQ_url = GetUserSubscriptionRequestHistoryCommand.url(':uuid');
-    GetUserSubscriptionRequestHistoryCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.SUBSCRIPTION_REQUEST_HISTORY(':uuid'), 'get', 'Get user subscription request history, recent 24 records');
+    GetUserSubscriptionRequestHistoryCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.SUBSCRIPTION_REQUEST_HISTORY(':uuid'), 'get', 'Get user subscription request history, recent 24 records', { scope: 'subscription-request-history', kind: 'read' });
     GetUserSubscriptionRequestHistoryCommand.RequestSchema = zod_1.z.object({
         uuid: zod_1.z.string().uuid(),
     });

package/build/frontend/commands/users/resolve-user.command.js

@@ -8,7 +8,7 @@ var ResolveUserCommand;
 (function (ResolveUserCommand) {
     ResolveUserCommand.url = api_1.REST_API.USERS.RESOLVE;
     ResolveUserCommand.TSQ_url = ResolveUserCommand.url;
-    ResolveUserCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.RESOLVE, 'post', 'Resolve a user');
+    ResolveUserCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.RESOLVE, 'post', 'Resolve a user', { scope: 'resolve', kind: 'read' });
     ResolveUserCommand.RequestSchema = zod_1.z
         .object({
         uuid: zod_1.z.string().uuid().optional(),

package/build/frontend/commands/users/tags/get-all-tags.command.js

@@ -8,7 +8,7 @@ var GetAllTagsCommand;
 (function (GetAllTagsCommand) {
     GetAllTagsCommand.url = api_1.REST_API.USERS.TAGS.GET;
     GetAllTagsCommand.TSQ_url = GetAllTagsCommand.url;
-    GetAllTagsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.TAGS.GET, 'get', 'Get all existing user tags');
+    GetAllTagsCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.TAGS.GET, 'get', 'Get all existing user tags', { scope: 'list-tags', kind: 'read' });
     GetAllTagsCommand.ResponseSchema = zod_1.z.object({
         response: zod_1.z.object({
             tags: zod_1.z.array(zod_1.z.string()),

package/build/frontend/commands/users/update-user.command.js

@@ -9,7 +9,7 @@ var UpdateUserCommand;
 (function (UpdateUserCommand) {
     UpdateUserCommand.url = api_1.REST_API.USERS.UPDATE;
     UpdateUserCommand.TSQ_url = UpdateUserCommand.url;
-    UpdateUserCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.UPDATE, 'patch', 'Update a user by UUID or username');
+    UpdateUserCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.USERS_ROUTES.UPDATE, 'patch', 'Update a user by UUID or username', { scope: 'update', kind: 'write' });
     UpdateUserCommand.RequestSchema = zod_1.z
         .object({
         username: zod_1.z.optional(zod_1.z.string().describe('Username of the user')),

package/build/frontend/constants/endpoint-details/endpoint-details.js

@@ -1,11 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getEndpointDetails = getEndpointDetails;
-function getEndpointDetails(controllerUrl, requestMethod, methodDescription, methodLongDescription) {
+function getEndpointDetails(controllerUrl, requestMethod, methodDescription, scopeOptions, methodLongDescription) {
     return {
         CONTROLLER_URL: controllerUrl,
         REQUEST_METHOD: requestMethod,
         METHOD_DESCRIPTION: methodDescription,
         METHOD_LONG_DESCRIPTION: methodLongDescription,
+        SCOPE: scopeOptions.scope,
+        SCOPE_KIND: scopeOptions.kind,
     };
 }

package/build/frontend/constants/errors/errors.js

@@ -1140,4 +1140,9 @@ exports.ERRORS = {
         message: 'Update hosts error',
         httpCode: 500,
     },
+    INVALID_API_TOKEN_SCOPE: {
+        code: 'A229',
+        message: 'One or more provided API token scopes are invalid',
+        httpCode: 400,
+    },
 };

package/build/frontend/constants/index.js

@@ -26,6 +26,7 @@ __exportStar(require("./nodes"), exports);
 __exportStar(require("./oauth2"), exports);
 __exportStar(require("./response-rules"), exports);
 __exportStar(require("./roles"), exports);
+__exportStar(require("./scopes"), exports);
 __exportStar(require("./subscription-template"), exports);
 __exportStar(require("./templates"), exports);
 __exportStar(require("./users"), exports);

package/build/frontend/constants/scopes/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./scope"), exports);

package/build/frontend/constants/scopes/scope.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildEndpointScope = exports.buildActionScope = exports.buildResourceScope = exports.normalizeControllerUrl = exports.SCOPE_WILDCARD = exports.SCOPE_ACTION = void 0;
+exports.SCOPE_ACTION = {
+    READ: 'read',
+    WRITE: 'write',
+};
+exports.SCOPE_WILDCARD = '*';
+const normalizeControllerUrl = (controllerUrl) => {
+    const segments = controllerUrl
+        .split('/')
+        .filter(Boolean)
+        .map((segment) => (segment.startsWith(':') ? `{${segment.slice(1)}}` : segment));
+    return `/${segments.join('/')}`;
+};
+exports.normalizeControllerUrl = normalizeControllerUrl;
+const buildResourceScope = (resource) => `${resource}:${exports.SCOPE_WILDCARD}`;
+exports.buildResourceScope = buildResourceScope;
+const buildActionScope = (resource, action) => `${resource}:${action}`;
+exports.buildActionScope = buildActionScope;
+const buildEndpointScope = (resource, scopeSlug) => `${resource}:${scopeSlug}`;
+exports.buildEndpointScope = buildEndpointScope;

package/build/frontend/models/api-tokens.schema.js

@@ -6,6 +6,7 @@ exports.ApiTokensSchema = zod_1.z.object({
     uuid: zod_1.z.string().uuid(),
     token: zod_1.z.string(),
     tokenName: zod_1.z.string(),
+    scopes: zod_1.z.array(zod_1.z.string()),
     createdAt: zod_1.z
         .string()
         .datetime()

package/build/frontend/models/hosts.schema.js

@@ -17,7 +17,7 @@ exports.HostsSchema = zod_1.z.object({
     fingerprint: zod_1.z.string().nullable(),
     isDisabled: zod_1.z.boolean(),
     securityLayer: zod_1.z.nativeEnum(hosts_1.SECURITY_LAYERS).default(hosts_1.SECURITY_LAYERS.DEFAULT),
-    xHttpExtraParams: zod_1.z.nullable(zod_1.z.unknown()),
+    xhttpExtraParams: zod_1.z.nullable(zod_1.z.unknown()),
     muxParams: zod_1.z.nullable(zod_1.z.unknown()),
     sockoptParams: zod_1.z.nullable(zod_1.z.unknown()),
     finalMask: zod_1.z.nullable(zod_1.z.unknown()),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnawave/backend-contract",
-  "version": "2.8.24",
+  "version": "2.8.26",
   "public": true,
   "license": "AGPL-3.0-only",
   "description": "A contract library for Remnawave Backend. It can be used in backend and frontend.",