@serve.zone/dcrouter 13.17.0 → 13.17.2

package/dist_ts/opsserver/handlers/stats.handler.js

@@ -0,0 +1,461 @@
+import * as plugins from '../../plugins.js';
+import * as interfaces from '../../../dist_ts_interfaces/index.js';
+import { MetricsManager } from '../../monitoring/index.js';
+import { SecurityLogger } from '../../security/classes.securitylogger.js';
+import { commitinfo } from '../../00_commitinfo_data.js';
+export class StatsHandler {
+    opsServerRef;
+    constructor(opsServerRef) {
+        this.opsServerRef = opsServerRef;
+        this.registerHandlers();
+    }
+    registerHandlers() {
+        // All stats endpoints register directly on viewRouter (valid identity required via middleware)
+        const router = this.opsServerRef.viewRouter;
+        // Server Statistics Handler
+        router.addTypedHandler(new plugins.typedrequest.TypedHandler('getServerStatistics', async (dataArg, toolsArg) => {
+            const stats = await this.collectServerStats();
+            return {
+                stats: {
+                    uptime: stats.uptime,
+                    startTime: Date.now() - (stats.uptime * 1000),
+                    memoryUsage: stats.memoryUsage,
+                    cpuUsage: stats.cpuUsage,
+                    activeConnections: stats.activeConnections,
+                    totalConnections: stats.totalConnections,
+                    requestsPerSecond: stats.requestsPerSecond,
+                    throughput: stats.throughput,
+                },
+                history: dataArg.includeHistory ? stats.history : undefined,
+            };
+        }));
+        // Email Statistics Handler
+        router.addTypedHandler(new plugins.typedrequest.TypedHandler('getEmailStatistics', async (dataArg, toolsArg) => {
+            const emailServer = this.opsServerRef.dcRouterRef.emailServer;
+            if (!emailServer) {
+                return {
+                    stats: {
+                        sent: 0,
+                        received: 0,
+                        bounced: 0,
+                        queued: 0,
+                        failed: 0,
+                        averageDeliveryTime: 0,
+                        deliveryRate: 0,
+                        bounceRate: 0,
+                    },
+                };
+            }
+            const stats = await this.collectEmailStats();
+            return {
+                stats: {
+                    sent: stats.sentToday,
+                    received: stats.receivedToday,
+                    bounced: Math.floor(stats.sentToday * stats.bounceRate / 100),
+                    queued: stats.queueSize,
+                    failed: 0,
+                    averageDeliveryTime: 0,
+                    deliveryRate: stats.deliveryRate,
+                    bounceRate: stats.bounceRate,
+                },
+                domainBreakdown: dataArg.includeDetails ? stats.domainBreakdown : undefined,
+            };
+        }));
+        // DNS Statistics Handler
+        router.addTypedHandler(new plugins.typedrequest.TypedHandler('getDnsStatistics', async (dataArg, toolsArg) => {
+            const dnsServer = this.opsServerRef.dcRouterRef.dnsServer;
+            if (!dnsServer) {
+                return {
+                    stats: {
+                        totalQueries: 0,
+                        cacheHits: 0,
+                        cacheMisses: 0,
+                        cacheHitRate: 0,
+                        activeDomains: 0,
+                        averageResponseTime: 0,
+                        queryTypes: {},
+                    },
+                };
+            }
+            const stats = await this.collectDnsStats();
+            return {
+                stats: {
+                    totalQueries: stats.totalQueries,
+                    cacheHits: stats.cacheHits,
+                    cacheMisses: stats.cacheMisses,
+                    cacheHitRate: stats.cacheHitRate,
+                    activeDomains: stats.topDomains.length,
+                    averageResponseTime: 0,
+                    queryTypes: stats.queryTypes,
+                },
+                domainBreakdown: dataArg.includeQueryTypes ? stats.domainBreakdown : undefined,
+            };
+        }));
+        // Queue Status Handler
+        router.addTypedHandler(new plugins.typedrequest.TypedHandler('getQueueStatus', async (dataArg, toolsArg) => {
+            const emailServer = this.opsServerRef.dcRouterRef.emailServer;
+            const queues = [];
+            if (emailServer) {
+                const status = await this.getQueueStatus();
+                queues.push({
+                    name: dataArg.queueName || 'default',
+                    size: status.pending,
+                    processing: status.active,
+                    failed: status.failed,
+                    retrying: status.retrying,
+                    averageProcessingTime: 0,
+                });
+            }
+            return {
+                queues,
+                totalItems: queues.reduce((sum, q) => sum + q.size + q.processing + q.failed + q.retrying, 0),
+            };
+        }));
+        // Health Status Handler
+        router.addTypedHandler(new plugins.typedrequest.TypedHandler('getHealthStatus', async (dataArg, toolsArg) => {
+            const health = await this.checkHealthStatus();
+            return {
+                health: {
+                    healthy: health.healthy,
+                    uptime: process.uptime(),
+                    services: health.services.reduce((acc, service) => {
+                        acc[service.name] = {
+                            status: service.status,
+                            message: service.message,
+                            lastCheck: Date.now(),
+                        };
+                        return acc;
+                    }, {}),
+                    version: commitinfo.version,
+                },
+            };
+        }));
+        // Combined Metrics Handler - More efficient for frontend polling
+        router.addTypedHandler(new plugins.typedrequest.TypedHandler('getCombinedMetrics', async (dataArg, toolsArg) => {
+            const sections = dataArg.sections || {
+                server: true,
+                email: true,
+                dns: true,
+                security: true,
+                network: true,
+            };
+            const metrics = {};
+            // Run all metrics collection in parallel
+            const promises = [];
+            if (sections.server) {
+                promises.push(this.collectServerStats().then(stats => {
+                    metrics.server = {
+                        uptime: stats.uptime,
+                        startTime: Date.now() - (stats.uptime * 1000),
+                        memoryUsage: stats.memoryUsage,
+                        cpuUsage: stats.cpuUsage,
+                        activeConnections: stats.activeConnections,
+                        totalConnections: stats.totalConnections,
+                        requestsPerSecond: stats.requestsPerSecond,
+                        throughput: stats.throughput,
+                    };
+                }));
+            }
+            if (sections.email) {
+                promises.push(this.collectEmailStats().then(stats => {
+                    // Get time-series data from MetricsManager
+                    const timeSeries = this.opsServerRef.dcRouterRef.metricsManager
+                        ? this.opsServerRef.dcRouterRef.metricsManager.getEmailTimeSeries(24)
+                        : undefined;
+                    metrics.email = {
+                        sent: stats.sentToday,
+                        received: stats.receivedToday,
+                        bounced: Math.floor(stats.sentToday * stats.bounceRate / 100),
+                        queued: stats.queueSize,
+                        failed: 0,
+                        averageDeliveryTime: 0,
+                        deliveryRate: stats.deliveryRate,
+                        bounceRate: stats.bounceRate,
+                        timeSeries,
+                    };
+                }));
+            }
+            if (sections.dns) {
+                promises.push(this.collectDnsStats().then(stats => {
+                    // Get time-series data from MetricsManager
+                    const timeSeries = this.opsServerRef.dcRouterRef.metricsManager
+                        ? this.opsServerRef.dcRouterRef.metricsManager.getDnsTimeSeries(24)
+                        : undefined;
+                    metrics.dns = {
+                        totalQueries: stats.totalQueries,
+                        cacheHits: stats.cacheHits,
+                        cacheMisses: stats.cacheMisses,
+                        cacheHitRate: stats.cacheHitRate,
+                        activeDomains: stats.topDomains.length,
+                        averageResponseTime: 0,
+                        queryTypes: stats.queryTypes,
+                        timeSeries,
+                        recentQueries: stats.recentQueries,
+                    };
+                }));
+            }
+            if (sections.security && this.opsServerRef.dcRouterRef.metricsManager) {
+                promises.push(this.opsServerRef.dcRouterRef.metricsManager.getSecurityStats().then(stats => {
+                    // Get recent events from the SecurityLogger singleton
+                    const securityLogger = SecurityLogger.getInstance();
+                    const recentEvents = securityLogger.getRecentEvents(50).map((evt) => ({
+                        timestamp: evt.timestamp,
+                        level: evt.level,
+                        type: evt.type,
+                        message: evt.message,
+                        details: evt.details,
+                        ipAddress: evt.ipAddress,
+                        domain: evt.domain,
+                        success: evt.success,
+                    }));
+                    metrics.security = {
+                        blockedIPs: stats.blockedIPs,
+                        reputationScores: {},
+                        spamDetected: stats.spamDetected,
+                        malwareDetected: stats.malwareDetected,
+                        phishingDetected: stats.phishingDetected,
+                        authenticationFailures: stats.authFailures,
+                        suspiciousActivities: stats.totalThreatsBlocked,
+                        recentEvents,
+                    };
+                }));
+            }
+            if (sections.network && this.opsServerRef.dcRouterRef.metricsManager) {
+                promises.push((async () => {
+                    const stats = await this.opsServerRef.dcRouterRef.metricsManager.getNetworkStats();
+                    const serverStats = await this.collectServerStats();
+                    // Build per-IP bandwidth lookup from throughputByIP
+                    const ipBandwidth = new Map();
+                    if (stats.throughputByIP) {
+                        for (const [ip, tp] of stats.throughputByIP) {
+                            ipBandwidth.set(ip, { in: tp.in, out: tp.out });
+                        }
+                    }
+                    // Build connectionDetails from real per-IP data
+                    const connectionDetails = [];
+                    for (const [ip, count] of stats.connectionsByIP) {
+                        const tp = stats.throughputByIP?.get(ip);
+                        connectionDetails.push({
+                            remoteAddress: ip,
+                            protocol: 'https',
+                            state: 'connected',
+                            startTime: 0,
+                            bytesIn: tp?.in || 0,
+                            bytesOut: tp?.out || 0,
+                        });
+                    }
+                    metrics.network = {
+                        totalBandwidth: {
+                            in: stats.throughputRate.bytesInPerSecond,
+                            out: stats.throughputRate.bytesOutPerSecond,
+                        },
+                        totalBytes: {
+                            in: stats.totalDataTransferred.bytesIn,
+                            out: stats.totalDataTransferred.bytesOut,
+                        },
+                        activeConnections: serverStats.activeConnections,
+                        connectionDetails,
+                        topEndpoints: stats.topIPs.map(ip => ({
+                            endpoint: ip.ip,
+                            connections: ip.count,
+                            bandwidth: ipBandwidth.get(ip.ip) || { in: 0, out: 0 },
+                        })),
+                        topEndpointsByBandwidth: stats.topIPsByBandwidth.map(ip => ({
+                            endpoint: ip.ip,
+                            connections: ip.count,
+                            bandwidth: { in: ip.bwIn, out: ip.bwOut },
+                        })),
+                        domainActivity: stats.domainActivity || [],
+                        throughputHistory: stats.throughputHistory || [],
+                        requestsPerSecond: stats.requestsPerSecond || 0,
+                        requestsTotal: stats.requestsTotal || 0,
+                        backends: stats.backends || [],
+                        frontendProtocols: stats.frontendProtocols || null,
+                        backendProtocols: stats.backendProtocols || null,
+                    };
+                })());
+            }
+            if (sections.radius) {
+                promises.push((async () => {
+                    const radiusServer = this.opsServerRef.dcRouterRef.radiusServer;
+                    if (!radiusServer)
+                        return;
+                    const stats = radiusServer.getStats();
+                    const accountingStats = radiusServer.getAccountingManager().getStats();
+                    metrics.radius = {
+                        running: stats.running,
+                        uptime: stats.uptime,
+                        authRequests: stats.authRequests,
+                        authAccepts: stats.authAccepts,
+                        authRejects: stats.authRejects,
+                        accountingRequests: stats.accountingRequests,
+                        activeSessions: stats.activeSessions,
+                        totalInputBytes: accountingStats.totalInputBytes,
+                        totalOutputBytes: accountingStats.totalOutputBytes,
+                    };
+                })());
+            }
+            if (sections.vpn) {
+                promises.push((async () => {
+                    const vpnManager = this.opsServerRef.dcRouterRef.vpnManager;
+                    const vpnConfig = this.opsServerRef.dcRouterRef.options.vpnConfig;
+                    if (!vpnManager)
+                        return;
+                    const connected = await vpnManager.getConnectedClients();
+                    metrics.vpn = {
+                        running: vpnManager.running,
+                        subnet: vpnManager.getSubnet(),
+                        registeredClients: vpnManager.listClients().length,
+                        connectedClients: connected.length,
+                        wgListenPort: vpnConfig?.wgListenPort ?? 51820,
+                    };
+                })());
+            }
+            await Promise.all(promises);
+            return {
+                metrics,
+                timestamp: Date.now(),
+            };
+        }));
+    }
+    async collectServerStats() {
+        // Get metrics from MetricsManager if available
+        if (this.opsServerRef.dcRouterRef.metricsManager) {
+            const serverStats = await this.opsServerRef.dcRouterRef.metricsManager.getServerStats();
+            return {
+                uptime: serverStats.uptime,
+                cpuUsage: serverStats.cpuUsage,
+                memoryUsage: serverStats.memoryUsage,
+                requestsPerSecond: serverStats.requestsPerSecond,
+                activeConnections: serverStats.activeConnections,
+                totalConnections: serverStats.totalConnections,
+                throughput: serverStats.throughput,
+                history: [], // TODO: Implement history tracking
+            };
+        }
+        // Fallback to basic stats if MetricsManager not available
+        const uptime = process.uptime();
+        const memUsage = process.memoryUsage();
+        const cpuUsage = plugins.os.loadavg()[0] * 100 / plugins.os.cpus().length;
+        return {
+            uptime,
+            cpuUsage: {
+                user: cpuUsage * 0.7,
+                system: cpuUsage * 0.3,
+            },
+            memoryUsage: {
+                heapUsed: memUsage.heapUsed,
+                heapTotal: memUsage.heapTotal,
+                external: memUsage.external,
+                rss: memUsage.rss,
+            },
+            requestsPerSecond: 0,
+            activeConnections: 0,
+            totalConnections: 0,
+            throughput: { bytesIn: 0, bytesOut: 0, bytesInPerSecond: 0, bytesOutPerSecond: 0 },
+            history: [],
+        };
+    }
+    async collectEmailStats() {
+        // Get metrics from MetricsManager if available
+        if (this.opsServerRef.dcRouterRef.metricsManager) {
+            const emailStats = await this.opsServerRef.dcRouterRef.metricsManager.getEmailStats();
+            return {
+                sentToday: emailStats.sentToday,
+                receivedToday: emailStats.receivedToday,
+                bounceRate: emailStats.bounceRate,
+                deliveryRate: emailStats.deliveryRate,
+                queueSize: emailStats.queueSize,
+            };
+        }
+        // Fallback if MetricsManager not available
+        return {
+            sentToday: 0,
+            receivedToday: 0,
+            bounceRate: 0,
+            deliveryRate: 100,
+            queueSize: 0,
+        };
+    }
+    async collectDnsStats() {
+        // Get metrics from MetricsManager if available
+        if (this.opsServerRef.dcRouterRef.metricsManager) {
+            const dnsStats = await this.opsServerRef.dcRouterRef.metricsManager.getDnsStats();
+            return {
+                queriesPerSecond: dnsStats.queriesPerSecond,
+                totalQueries: dnsStats.totalQueries,
+                cacheHits: dnsStats.cacheHits,
+                cacheMisses: dnsStats.cacheMisses,
+                cacheHitRate: dnsStats.cacheHitRate,
+                topDomains: dnsStats.topDomains,
+                queryTypes: dnsStats.queryTypes,
+                recentQueries: dnsStats.recentQueries,
+            };
+        }
+        // Fallback if MetricsManager not available
+        return {
+            queriesPerSecond: 0,
+            totalQueries: 0,
+            cacheHits: 0,
+            cacheMisses: 0,
+            cacheHitRate: 0,
+            topDomains: [],
+            queryTypes: {},
+        };
+    }
+    async getQueueStatus() {
+        // TODO: Implement actual queue status collection
+        return {
+            pending: 0,
+            active: 0,
+            failed: 0,
+            retrying: 0,
+            items: [],
+        };
+    }
+    async checkHealthStatus() {
+        const dcRouter = this.opsServerRef.dcRouterRef;
+        const health = dcRouter.serviceManager.getHealth();
+        const services = health.services.map((svc) => {
+            let status;
+            switch (svc.state) {
+                case 'running':
+                    status = 'healthy';
+                    break;
+                case 'starting':
+                case 'degraded':
+                    status = 'degraded';
+                    break;
+                case 'failed':
+                    status = svc.criticality === 'critical' ? 'unhealthy' : 'degraded';
+                    break;
+                case 'stopped':
+                case 'stopping':
+                default:
+                    status = 'degraded';
+                    break;
+            }
+            let message;
+            if (svc.state === 'failed' && svc.lastError) {
+                message = svc.lastError;
+            }
+            else if (svc.retryCount > 0 && svc.state !== 'running') {
+                message = `Retry attempt ${svc.retryCount}`;
+            }
+            return { name: svc.name, status, message };
+        });
+        const healthy = health.overall === 'healthy';
+        return {
+            healthy,
+            services,
+            checks: [
+                {
+                    name: 'Memory Usage',
+                    passed: process.memoryUsage().heapUsed < (plugins.os.totalmem() * 0.9),
+                    message: 'Memory usage within limits',
+                },
+            ],
+        };
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/opsserver/handlers/target-profile.handler.d.ts

@@ -0,0 +1,10 @@
+import * as plugins from '../../plugins.js';
+import type { OpsServer } from '../classes.opsserver.js';
+import * as interfaces from '../../../dist_ts_interfaces/index.js';
+export declare class TargetProfileHandler {
+    private opsServerRef;
+    typedrouter: plugins.typedrequest.TypedRouter<interfaces.typedrequestInterfaces.ITypedRequest>;
+    constructor(opsServerRef: OpsServer);
+    private requireAuth;
+    private registerHandlers;
+}

package/dist_ts/opsserver/handlers/target-profile.handler.js

@@ -0,0 +1,117 @@
+import * as plugins from '../../plugins.js';
+import * as interfaces from '../../../dist_ts_interfaces/index.js';
+export class TargetProfileHandler {
+    opsServerRef;
+    typedrouter = new plugins.typedrequest.TypedRouter();
+    constructor(opsServerRef) {
+        this.opsServerRef = opsServerRef;
+        this.opsServerRef.typedrouter.addTypedRouter(this.typedrouter);
+        this.registerHandlers();
+    }
+    async requireAuth(request, requiredScope) {
+        if (request.identity?.jwt) {
+            try {
+                const isAdmin = await this.opsServerRef.adminHandler.adminIdentityGuard.exec({
+                    identity: request.identity,
+                });
+                if (isAdmin)
+                    return request.identity.userId;
+            }
+            catch { /* fall through */ }
+        }
+        if (request.apiToken) {
+            const tokenManager = this.opsServerRef.dcRouterRef.apiTokenManager;
+            if (tokenManager) {
+                const token = await tokenManager.validateToken(request.apiToken);
+                if (token) {
+                    if (!requiredScope || tokenManager.hasScope(token, requiredScope)) {
+                        return token.createdBy;
+                    }
+                    throw new plugins.typedrequest.TypedResponseError('insufficient scope');
+                }
+            }
+        }
+        throw new plugins.typedrequest.TypedResponseError('unauthorized');
+    }
+    registerHandlers() {
+        // Get all target profiles
+        this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('getTargetProfiles', async (dataArg) => {
+            await this.requireAuth(dataArg, 'target-profiles:read');
+            const manager = this.opsServerRef.dcRouterRef.targetProfileManager;
+            if (!manager) {
+                return { profiles: [] };
+            }
+            return { profiles: manager.listProfiles() };
+        }));
+        // Get a single target profile
+        this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('getTargetProfile', async (dataArg) => {
+            await this.requireAuth(dataArg, 'target-profiles:read');
+            const manager = this.opsServerRef.dcRouterRef.targetProfileManager;
+            if (!manager) {
+                return { profile: null };
+            }
+            return { profile: manager.getProfile(dataArg.id) || null };
+        }));
+        // Create a target profile
+        this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('createTargetProfile', async (dataArg) => {
+            const userId = await this.requireAuth(dataArg, 'target-profiles:write');
+            const manager = this.opsServerRef.dcRouterRef.targetProfileManager;
+            if (!manager) {
+                return { success: false, message: 'Target profile manager not initialized' };
+            }
+            const id = await manager.createProfile({
+                name: dataArg.name,
+                description: dataArg.description,
+                domains: dataArg.domains,
+                targets: dataArg.targets,
+                routeRefs: dataArg.routeRefs,
+                createdBy: userId,
+            });
+            return { success: true, id };
+        }));
+        // Update a target profile
+        this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('updateTargetProfile', async (dataArg) => {
+            await this.requireAuth(dataArg, 'target-profiles:write');
+            const manager = this.opsServerRef.dcRouterRef.targetProfileManager;
+            if (!manager) {
+                return { success: false, message: 'Not initialized' };
+            }
+            await manager.updateProfile(dataArg.id, {
+                name: dataArg.name,
+                description: dataArg.description,
+                domains: dataArg.domains,
+                targets: dataArg.targets,
+                routeRefs: dataArg.routeRefs,
+            });
+            // Re-apply routes and refresh VPN client security to update access
+            await this.opsServerRef.dcRouterRef.routeConfigManager?.applyRoutes();
+            await this.opsServerRef.dcRouterRef.vpnManager?.refreshAllClientSecurity();
+            return { success: true };
+        }));
+        // Delete a target profile
+        this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('deleteTargetProfile', async (dataArg) => {
+            await this.requireAuth(dataArg, 'target-profiles:write');
+            const manager = this.opsServerRef.dcRouterRef.targetProfileManager;
+            if (!manager) {
+                return { success: false, message: 'Not initialized' };
+            }
+            const result = await manager.deleteProfile(dataArg.id, dataArg.force);
+            if (result.success) {
+                // Re-apply routes and refresh VPN client security to update access
+                await this.opsServerRef.dcRouterRef.routeConfigManager?.applyRoutes();
+                await this.opsServerRef.dcRouterRef.vpnManager?.refreshAllClientSecurity();
+            }
+            return result;
+        }));
+        // Get VPN clients using a target profile
+        this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('getTargetProfileUsage', async (dataArg) => {
+            await this.requireAuth(dataArg, 'target-profiles:read');
+            const manager = this.opsServerRef.dcRouterRef.targetProfileManager;
+            if (!manager) {
+                return { clients: [] };
+            }
+            return { clients: await manager.getProfileUsage(dataArg.id) };
+        }));
+    }
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidGFyZ2V0LXByb2ZpbGUuaGFuZGxlci5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uL3RzL29wc3NlcnZlci9oYW5kbGVycy90YXJnZXQtcHJvZmlsZS5oYW5kbGVyLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sS0FBSyxPQUFPLE1BQU0sa0JBQWtCLENBQUM7QUFFNUMsT0FBTyxLQUFLLFVBQVUsTUFBTSxpQ0FBaUMsQ0FBQztBQUU5RCxNQUFNLE9BQU8sb0JBQW9CO0lBR1g7SUFGYixXQUFXLEdBQUcsSUFBSSxPQUFPLENBQUMsWUFBWSxDQUFDLFdBQVcsRUFBRSxDQUFDO0lBRTVELFlBQW9CLFlBQXVCO1FBQXZCLGlCQUFZLEdBQVosWUFBWSxDQUFXO1FBQ3pDLElBQUksQ0FBQyxZQUFZLENBQUMsV0FBVyxDQUFDLGNBQWMsQ0FBQyxJQUFJLENBQUMsV0FBVyxDQUFDLENBQUM7UUFDL0QsSUFBSSxDQUFDLGdCQUFnQixFQUFFLENBQUM7SUFDMUIsQ0FBQztJQUVPLEtBQUssQ0FBQyxXQUFXLENBQ3ZCLE9BQW9FLEVBQ3BFLGFBQThDO1FBRTlDLElBQUksT0FBTyxDQUFDLFFBQVEsRUFBRSxHQUFHLEVBQUUsQ0FBQztZQUMxQixJQUFJLENBQUM7Z0JBQ0gsTUFBTSxPQUFPLEdBQUcsTUFBTSxJQUFJLENBQUMsWUFBWSxDQUFDLFlBQVksQ0FBQyxrQkFBa0IsQ0FBQyxJQUFJLENBQUM7b0JBQzNFLFFBQVEsRUFBRSxPQUFPLENBQUMsUUFBUTtpQkFDM0IsQ0FBQyxDQUFDO2dCQUNILElBQUksT0FBTztvQkFBRSxPQUFPLE9BQU8sQ0FBQyxRQUFRLENBQUMsTUFBTSxDQUFDO1lBQzlDLENBQUM7WUFBQyxNQUFNLENBQUMsQ0FBQyxrQkFBa0IsQ0FBQyxDQUFDO1FBQ2hDLENBQUM7UUFFRCxJQUFJLE9BQU8sQ0FBQyxRQUFRLEVBQUUsQ0FBQztZQUNyQixNQUFNLFlBQVksR0FBRyxJQUFJLENBQUMsWUFBWSxDQUFDLFdBQVcsQ0FBQyxlQUFlLENBQUM7WUFDbkUsSUFBSSxZQUFZLEVBQUUsQ0FBQztnQkFDakIsTUFBTSxLQUFLLEdBQUcsTUFBTSxZQUFZLENBQUMsYUFBYSxDQUFDLE9BQU8sQ0FBQyxRQUFRLENBQUMsQ0FBQztnQkFDakUsSUFBSSxLQUFLLEVBQUUsQ0FBQztvQkFDVixJQUFJLENBQUMsYUFBYSxJQUFJLFlBQVksQ0FBQyxRQUFRLENBQUMsS0FBSyxFQUFFLGFBQWEsQ0FBQyxFQUFFLENBQUM7d0JBQ2xFLE9BQU8sS0FBSyxDQUFDLFNBQVMsQ0FBQztvQkFDekIsQ0FBQztvQkFDRCxNQUFNLElBQUksT0FBTyxDQUFDLFlBQVksQ0FBQyxrQkFBa0IsQ0FBQyxvQkFBb0IsQ0FBQyxDQUFDO2dCQUMxRSxDQUFDO1lBQ0gsQ0FBQztRQUNILENBQUM7UUFFRCxNQUFNLElBQUksT0FBTyxDQUFDLFlBQVksQ0FBQyxrQkFBa0IsQ0FBQyxjQUFjLENBQUMsQ0FBQztJQUNwRSxDQUFDO0lBRU8sZ0JBQWdCO1FBQ3RCLDBCQUEwQjtRQUMxQixJQUFJLENBQUMsV0FBVyxDQUFDLGVBQWUsQ0FDOUIsSUFBSSxPQUFPLENBQUMsWUFBWSxDQUFDLFlBQVksQ0FDbkMsbUJBQW1CLEVBQ25CLEtBQUssRUFBRSxPQUFPLEVBQUUsRUFBRTtZQUNoQixNQUFNLElBQUksQ0FBQyxXQUFXLENBQUMsT0FBTyxFQUFFLHNCQUFzQixDQUFDLENBQUM7WUFDeEQsTUFBTSxPQUFPLEdBQUcsSUFBSSxDQUFDLFlBQVksQ0FBQyxXQUFXLENBQUMsb0JBQW9CLENBQUM7WUFDbkUsSUFBSSxDQUFDLE9BQU8sRUFBRSxDQUFDO2dCQUNiLE9BQU8sRUFBRSxRQUFRLEVBQUUsRUFBRSxFQUFFLENBQUM7WUFDMUIsQ0FBQztZQUNELE9BQU8sRUFBRSxRQUFRLEVBQUUsT0FBTyxDQUFDLFlBQVksRUFBRSxFQUFFLENBQUM7UUFDOUMsQ0FBQyxDQUNGLENBQ0YsQ0FBQztRQUVGLDhCQUE4QjtRQUM5QixJQUFJLENBQUMsV0FBVyxDQUFDLGVBQWUsQ0FDOUIsSUFBSSxPQUFPLENBQUMsWUFBWSxDQUFDLFlBQVksQ0FDbkMsa0JBQWtCLEVBQ2xCLEtBQUssRUFBRSxPQUFPLEVBQUUsRUFBRTtZQUNoQixNQUFNLElBQUksQ0FBQyxXQUFXLENBQUMsT0FBTyxFQUFFLHNCQUFzQixDQUFDLENBQUM7WUFDeEQsTUFBTSxPQUFPLEdBQUcsSUFBSSxDQUFDLFlBQVksQ0FBQyxXQUFXLENBQUMsb0JBQW9CLENBQUM7WUFDbkUsSUFBSSxDQUFDLE9BQU8sRUFBRSxDQUFDO2dCQUNiLE9BQU8sRUFBRSxPQUFPLEVBQUUsSUFBSSxFQUFFLENBQUM7WUFDM0IsQ0FBQztZQUNELE9BQU8sRUFBRSxPQUFPLEVBQUUsT0FBTyxDQUFDLFVBQVUsQ0FBQyxPQUFPLENBQUMsRUFBRSxDQUFDLElBQUksSUFBSSxFQUFFLENBQUM7UUFDN0QsQ0FBQyxDQUNGLENBQ0YsQ0FBQztRQUVGLDBCQUEwQjtRQUMxQixJQUFJLENBQUMsV0FBVyxDQUFDLGVBQWUsQ0FDOUIsSUFBSSxPQUFPLENBQUMsWUFBWSxDQUFDLFlBQVksQ0FDbkMscUJBQXFCLEVBQ3JCLEtBQUssRUFBRSxPQUFPLEVBQUUsRUFBRTtZQUNoQixNQUFNLE1BQU0sR0FBRyxNQUFNLElBQUksQ0FBQyxXQUFXLENBQUMsT0FBTyxFQUFFLHVCQUF1QixDQUFDLENBQUM7WUFDeEUsTUFBTSxPQUFPLEdBQUcsSUFBSSxDQUFDLFlBQVksQ0FBQyxXQUFXLENBQUMsb0JBQW9CLENBQUM7WUFDbkUsSUFBSSxDQUFDLE9BQU8sRUFBRSxDQUFDO2dCQUNiLE9BQU8sRUFBRSxPQUFPLEVBQUUsS0FBSyxFQUFFLE9BQU8sRUFBRSx3Q0FBd0MsRUFBRSxDQUFDO1lBQy9FLENBQUM7WUFDRCxNQUFNLEVBQUUsR0FBRyxNQUFNLE9BQU8sQ0FBQyxhQUFhLENBQUM7Z0JBQ3JDLElBQUksRUFBRSxPQUFPLENBQUMsSUFBSTtnQkFDbEIsV0FBVyxFQUFFLE9BQU8sQ0FBQyxXQUFXO2dCQUNoQyxPQUFPLEVBQUUsT0FBTyxDQUFDLE9BQU87Z0JBQ3hCLE9BQU8sRUFBRSxPQUFPLENBQUMsT0FBTztnQkFDeEIsU0FBUyxFQUFFLE9BQU8sQ0FBQyxTQUFTO2dCQUM1QixTQUFTLEVBQUUsTUFBTTthQUNsQixDQUFDLENBQUM7WUFDSCxPQUFPLEVBQUUsT0FBTyxFQUFFLElBQUksRUFBRSxFQUFFLEVBQUUsQ0FBQztRQUMvQixDQUFDLENBQ0YsQ0FDRixDQUFDO1FBRUYsMEJBQTBCO1FBQzFCLElBQUksQ0FBQyxXQUFXLENBQUMsZUFBZSxDQUM5QixJQUFJLE9BQU8sQ0FBQyxZQUFZLENBQUMsWUFBWSxDQUNuQyxxQkFBcUIsRUFDckIsS0FBSyxFQUFFLE9BQU8sRUFBRSxFQUFFO1lBQ2hCLE1BQU0sSUFBSSxDQUFDLFdBQVcsQ0FBQyxPQUFPLEVBQUUsdUJBQXVCLENBQUMsQ0FBQztZQUN6RCxNQUFNLE9BQU8sR0FBRyxJQUFJLENBQUMsWUFBWSxDQUFDLFdBQVcsQ0FBQyxvQkFBb0IsQ0FBQztZQUNuRSxJQUFJLENBQUMsT0FBTyxFQUFFLENBQUM7Z0JBQ2IsT0FBTyxFQUFFLE9BQU8sRUFBRSxLQUFLLEVBQUUsT0FBTyxFQUFFLGlCQUFpQixFQUFFLENBQUM7WUFDeEQsQ0FBQztZQUNELE1BQU0sT0FBTyxDQUFDLGFBQWEsQ0FBQyxPQUFPLENBQUMsRUFBRSxFQUFFO2dCQUN0QyxJQUFJLEVBQUUsT0FBTyxDQUFDLElBQUk7Z0JBQ2xCLFdBQVcsRUFBRSxPQUFPLENBQUMsV0FBVztnQkFDaEMsT0FBTyxFQUFFLE9BQU8sQ0FBQyxPQUFPO2dCQUN4QixPQUFPLEVBQUUsT0FBTyxDQUFDLE9BQU87Z0JBQ3hCLFNBQVMsRUFBRSxPQUFPLENBQUMsU0FBUzthQUM3QixDQUFDLENBQUM7WUFDSCxtRUFBbUU7WUFDbkUsTUFBTSxJQUFJLENBQUMsWUFBWSxDQUFDLFdBQVcsQ0FBQyxrQkFBa0IsRUFBRSxXQUFXLEVBQUUsQ0FBQztZQUN0RSxNQUFNLElBQUksQ0FBQyxZQUFZLENBQUMsV0FBVyxDQUFDLFVBQVUsRUFBRSx3QkFBd0IsRUFBRSxDQUFDO1lBQzNFLE9BQU8sRUFBRSxPQUFPLEVBQUUsSUFBSSxFQUFFLENBQUM7UUFDM0IsQ0FBQyxDQUNGLENBQ0YsQ0FBQztRQUVGLDBCQUEwQjtRQUMxQixJQUFJLENBQUMsV0FBVyxDQUFDLGVBQWUsQ0FDOUIsSUFBSSxPQUFPLENBQUMsWUFBWSxDQUFDLFlBQVksQ0FDbkMscUJBQXFCLEVBQ3JCLEtBQUssRUFBRSxPQUFPLEVBQUUsRUFBRTtZQUNoQixNQUFNLElBQUksQ0FBQyxXQUFXLENBQUMsT0FBTyxFQUFFLHVCQUF1QixDQUFDLENBQUM7WUFDekQsTUFBTSxPQUFPLEdBQUcsSUFBSSxDQUFDLFlBQVksQ0FBQyxXQUFXLENBQUMsb0JBQW9CLENBQUM7WUFDbkUsSUFBSSxDQUFDLE9BQU8sRUFBRSxDQUFDO2dCQUNiLE9BQU8sRUFBRSxPQUFPLEVBQUUsS0FBSyxFQUFFLE9BQU8sRUFBRSxpQkFBaUIsRUFBRSxDQUFDO1lBQ3hELENBQUM7WUFDRCxNQUFNLE1BQU0sR0FBRyxNQUFNLE9BQU8sQ0FBQyxhQUFhLENBQUMsT0FBTyxDQUFDLEVBQUUsRUFBRSxPQUFPLENBQUMsS0FBSyxDQUFDLENBQUM7WUFDdEUsSUFBSSxNQUFNLENBQUMsT0FBTyxFQUFFLENBQUM7Z0JBQ25CLG1FQUFtRTtnQkFDbkUsTUFBTSxJQUFJLENBQUMsWUFBWSxDQUFDLFdBQVcsQ0FBQyxrQkFBa0IsRUFBRSxXQUFXLEVBQUUsQ0FBQztnQkFDdEUsTUFBTSxJQUFJLENBQUMsWUFBWSxDQUFDLFdBQVcsQ0FBQyxVQUFVLEVBQUUsd0JBQXdCLEVBQUUsQ0FBQztZQUM3RSxDQUFDO1lBQ0QsT0FBTyxNQUFNLENBQUM7UUFDaEIsQ0FBQyxDQUNGLENBQ0YsQ0FBQztRQUVGLHlDQUF5QztRQUN6QyxJQUFJLENBQUMsV0FBVyxDQUFDLGVBQWUsQ0FDOUIsSUFBSSxPQUFPLENBQUMsWUFBWSxDQUFDLFlBQVksQ0FDbkMsdUJBQXVCLEVBQ3ZCLEtBQUssRUFBRSxPQUFPLEVBQUUsRUFBRTtZQUNoQixNQUFNLElBQUksQ0FBQyxXQUFXLENBQUMsT0FBTyxFQUFFLHNCQUFzQixDQUFDLENBQUM7WUFDeEQsTUFBTSxPQUFPLEdBQUcsSUFBSSxDQUFDLFlBQVksQ0FBQyxXQUFXLENBQUMsb0JBQW9CLENBQUM7WUFDbkUsSUFBSSxDQUFDLE9BQU8sRUFBRSxDQUFDO2dCQUNiLE9BQU8sRUFBRSxPQUFPLEVBQUUsRUFBRSxFQUFFLENBQUM7WUFDekIsQ0FBQztZQUNELE9BQU8sRUFBRSxPQUFPLEVBQUUsTUFBTSxPQUFPLENBQUMsZUFBZSxDQUFDLE9BQU8sQ0FBQyxFQUFFLENBQUMsRUFBRSxDQUFDO1FBQ2hFLENBQUMsQ0FDRixDQUNGLENBQUM7SUFDSixDQUFDO0NBQ0YifQ==

package/dist_ts/opsserver/handlers/users.handler.d.ts

@@ -0,0 +1,12 @@
+import type { OpsServer } from '../classes.opsserver.js';
+/**
+ * Read-only handler for OpsServer user accounts. Registers on adminRouter,
+ * so admin middleware enforces auth + role check before the handler runs.
+ * User data is owned by AdminHandler; this handler just exposes a safe
+ * projection of it via TypedRequest.
+ */
+export declare class UsersHandler {
+    private opsServerRef;
+    constructor(opsServerRef: OpsServer);
+    private registerHandlers;
+}