@serve.zone/dcrouter 13.17.0 → 13.17.3

package/dist_ts/db/documents/classes.vpn-client.doc.js

@@ -0,0 +1,172 @@
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+import * as plugins from '../../plugins.js';
+import { DcRouterDb } from '../classes.dcrouter-db.js';
+const getDb = () => DcRouterDb.getInstance().getDb();
+let VpnClientDoc = (() => {
+    let _classDecorators = [plugins.smartdata.Collection(() => getDb())];
+    let _classDescriptor;
+    let _classExtraInitializers = [];
+    let _classThis;
+    let _classSuper = plugins.smartdata.SmartDataDbDoc;
+    let _clientId_decorators;
+    let _clientId_initializers = [];
+    let _clientId_extraInitializers = [];
+    let _enabled_decorators;
+    let _enabled_initializers = [];
+    let _enabled_extraInitializers = [];
+    let _targetProfileIds_decorators;
+    let _targetProfileIds_initializers = [];
+    let _targetProfileIds_extraInitializers = [];
+    let _description_decorators;
+    let _description_initializers = [];
+    let _description_extraInitializers = [];
+    let _assignedIp_decorators;
+    let _assignedIp_initializers = [];
+    let _assignedIp_extraInitializers = [];
+    let _noisePublicKey_decorators;
+    let _noisePublicKey_initializers = [];
+    let _noisePublicKey_extraInitializers = [];
+    let _wgPublicKey_decorators;
+    let _wgPublicKey_initializers = [];
+    let _wgPublicKey_extraInitializers = [];
+    let _wgPrivateKey_decorators;
+    let _wgPrivateKey_initializers = [];
+    let _wgPrivateKey_extraInitializers = [];
+    let _createdAt_decorators;
+    let _createdAt_initializers = [];
+    let _createdAt_extraInitializers = [];
+    let _updatedAt_decorators;
+    let _updatedAt_initializers = [];
+    let _updatedAt_extraInitializers = [];
+    let _expiresAt_decorators;
+    let _expiresAt_initializers = [];
+    let _expiresAt_extraInitializers = [];
+    let _destinationAllowList_decorators;
+    let _destinationAllowList_initializers = [];
+    let _destinationAllowList_extraInitializers = [];
+    let _destinationBlockList_decorators;
+    let _destinationBlockList_initializers = [];
+    let _destinationBlockList_extraInitializers = [];
+    let _useHostIp_decorators;
+    let _useHostIp_initializers = [];
+    let _useHostIp_extraInitializers = [];
+    let _useDhcp_decorators;
+    let _useDhcp_initializers = [];
+    let _useDhcp_extraInitializers = [];
+    let _staticIp_decorators;
+    let _staticIp_initializers = [];
+    let _staticIp_extraInitializers = [];
+    let _forceVlan_decorators;
+    let _forceVlan_initializers = [];
+    let _forceVlan_extraInitializers = [];
+    let _vlanId_decorators;
+    let _vlanId_initializers = [];
+    let _vlanId_extraInitializers = [];
+    var VpnClientDoc = class extends _classSuper {
+        static { _classThis = this; }
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+            _clientId_decorators = [plugins.smartdata.unI(), plugins.smartdata.svDb()];
+            _enabled_decorators = [plugins.smartdata.svDb()];
+            _targetProfileIds_decorators = [plugins.smartdata.svDb()];
+            _description_decorators = [plugins.smartdata.svDb()];
+            _assignedIp_decorators = [plugins.smartdata.svDb()];
+            _noisePublicKey_decorators = [plugins.smartdata.svDb()];
+            _wgPublicKey_decorators = [plugins.smartdata.svDb()];
+            _wgPrivateKey_decorators = [plugins.smartdata.svDb()];
+            _createdAt_decorators = [plugins.smartdata.svDb()];
+            _updatedAt_decorators = [plugins.smartdata.svDb()];
+            _expiresAt_decorators = [plugins.smartdata.svDb()];
+            _destinationAllowList_decorators = [plugins.smartdata.svDb()];
+            _destinationBlockList_decorators = [plugins.smartdata.svDb()];
+            _useHostIp_decorators = [plugins.smartdata.svDb()];
+            _useDhcp_decorators = [plugins.smartdata.svDb()];
+            _staticIp_decorators = [plugins.smartdata.svDb()];
+            _forceVlan_decorators = [plugins.smartdata.svDb()];
+            _vlanId_decorators = [plugins.smartdata.svDb()];
+            __esDecorate(null, null, _clientId_decorators, { kind: "field", name: "clientId", static: false, private: false, access: { has: obj => "clientId" in obj, get: obj => obj.clientId, set: (obj, value) => { obj.clientId = value; } }, metadata: _metadata }, _clientId_initializers, _clientId_extraInitializers);
+            __esDecorate(null, null, _enabled_decorators, { kind: "field", name: "enabled", static: false, private: false, access: { has: obj => "enabled" in obj, get: obj => obj.enabled, set: (obj, value) => { obj.enabled = value; } }, metadata: _metadata }, _enabled_initializers, _enabled_extraInitializers);
+            __esDecorate(null, null, _targetProfileIds_decorators, { kind: "field", name: "targetProfileIds", static: false, private: false, access: { has: obj => "targetProfileIds" in obj, get: obj => obj.targetProfileIds, set: (obj, value) => { obj.targetProfileIds = value; } }, metadata: _metadata }, _targetProfileIds_initializers, _targetProfileIds_extraInitializers);
+            __esDecorate(null, null, _description_decorators, { kind: "field", name: "description", static: false, private: false, access: { has: obj => "description" in obj, get: obj => obj.description, set: (obj, value) => { obj.description = value; } }, metadata: _metadata }, _description_initializers, _description_extraInitializers);
+            __esDecorate(null, null, _assignedIp_decorators, { kind: "field", name: "assignedIp", static: false, private: false, access: { has: obj => "assignedIp" in obj, get: obj => obj.assignedIp, set: (obj, value) => { obj.assignedIp = value; } }, metadata: _metadata }, _assignedIp_initializers, _assignedIp_extraInitializers);
+            __esDecorate(null, null, _noisePublicKey_decorators, { kind: "field", name: "noisePublicKey", static: false, private: false, access: { has: obj => "noisePublicKey" in obj, get: obj => obj.noisePublicKey, set: (obj, value) => { obj.noisePublicKey = value; } }, metadata: _metadata }, _noisePublicKey_initializers, _noisePublicKey_extraInitializers);
+            __esDecorate(null, null, _wgPublicKey_decorators, { kind: "field", name: "wgPublicKey", static: false, private: false, access: { has: obj => "wgPublicKey" in obj, get: obj => obj.wgPublicKey, set: (obj, value) => { obj.wgPublicKey = value; } }, metadata: _metadata }, _wgPublicKey_initializers, _wgPublicKey_extraInitializers);
+            __esDecorate(null, null, _wgPrivateKey_decorators, { kind: "field", name: "wgPrivateKey", static: false, private: false, access: { has: obj => "wgPrivateKey" in obj, get: obj => obj.wgPrivateKey, set: (obj, value) => { obj.wgPrivateKey = value; } }, metadata: _metadata }, _wgPrivateKey_initializers, _wgPrivateKey_extraInitializers);
+            __esDecorate(null, null, _createdAt_decorators, { kind: "field", name: "createdAt", static: false, private: false, access: { has: obj => "createdAt" in obj, get: obj => obj.createdAt, set: (obj, value) => { obj.createdAt = value; } }, metadata: _metadata }, _createdAt_initializers, _createdAt_extraInitializers);
+            __esDecorate(null, null, _updatedAt_decorators, { kind: "field", name: "updatedAt", static: false, private: false, access: { has: obj => "updatedAt" in obj, get: obj => obj.updatedAt, set: (obj, value) => { obj.updatedAt = value; } }, metadata: _metadata }, _updatedAt_initializers, _updatedAt_extraInitializers);
+            __esDecorate(null, null, _expiresAt_decorators, { kind: "field", name: "expiresAt", static: false, private: false, access: { has: obj => "expiresAt" in obj, get: obj => obj.expiresAt, set: (obj, value) => { obj.expiresAt = value; } }, metadata: _metadata }, _expiresAt_initializers, _expiresAt_extraInitializers);
+            __esDecorate(null, null, _destinationAllowList_decorators, { kind: "field", name: "destinationAllowList", static: false, private: false, access: { has: obj => "destinationAllowList" in obj, get: obj => obj.destinationAllowList, set: (obj, value) => { obj.destinationAllowList = value; } }, metadata: _metadata }, _destinationAllowList_initializers, _destinationAllowList_extraInitializers);
+            __esDecorate(null, null, _destinationBlockList_decorators, { kind: "field", name: "destinationBlockList", static: false, private: false, access: { has: obj => "destinationBlockList" in obj, get: obj => obj.destinationBlockList, set: (obj, value) => { obj.destinationBlockList = value; } }, metadata: _metadata }, _destinationBlockList_initializers, _destinationBlockList_extraInitializers);
+            __esDecorate(null, null, _useHostIp_decorators, { kind: "field", name: "useHostIp", static: false, private: false, access: { has: obj => "useHostIp" in obj, get: obj => obj.useHostIp, set: (obj, value) => { obj.useHostIp = value; } }, metadata: _metadata }, _useHostIp_initializers, _useHostIp_extraInitializers);
+            __esDecorate(null, null, _useDhcp_decorators, { kind: "field", name: "useDhcp", static: false, private: false, access: { has: obj => "useDhcp" in obj, get: obj => obj.useDhcp, set: (obj, value) => { obj.useDhcp = value; } }, metadata: _metadata }, _useDhcp_initializers, _useDhcp_extraInitializers);
+            __esDecorate(null, null, _staticIp_decorators, { kind: "field", name: "staticIp", static: false, private: false, access: { has: obj => "staticIp" in obj, get: obj => obj.staticIp, set: (obj, value) => { obj.staticIp = value; } }, metadata: _metadata }, _staticIp_initializers, _staticIp_extraInitializers);
+            __esDecorate(null, null, _forceVlan_decorators, { kind: "field", name: "forceVlan", static: false, private: false, access: { has: obj => "forceVlan" in obj, get: obj => obj.forceVlan, set: (obj, value) => { obj.forceVlan = value; } }, metadata: _metadata }, _forceVlan_initializers, _forceVlan_extraInitializers);
+            __esDecorate(null, null, _vlanId_decorators, { kind: "field", name: "vlanId", static: false, private: false, access: { has: obj => "vlanId" in obj, get: obj => obj.vlanId, set: (obj, value) => { obj.vlanId = value; } }, metadata: _metadata }, _vlanId_initializers, _vlanId_extraInitializers);
+            __esDecorate(null, _classDescriptor = { value: _classThis }, _classDecorators, { kind: "class", name: _classThis.name, metadata: _metadata }, null, _classExtraInitializers);
+            VpnClientDoc = _classThis = _classDescriptor.value;
+            if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+            __runInitializers(_classThis, _classExtraInitializers);
+        }
+        clientId = __runInitializers(this, _clientId_initializers, void 0);
+        enabled = (__runInitializers(this, _clientId_extraInitializers), __runInitializers(this, _enabled_initializers, void 0));
+        targetProfileIds = (__runInitializers(this, _enabled_extraInitializers), __runInitializers(this, _targetProfileIds_initializers, void 0));
+        description = (__runInitializers(this, _targetProfileIds_extraInitializers), __runInitializers(this, _description_initializers, void 0));
+        assignedIp = (__runInitializers(this, _description_extraInitializers), __runInitializers(this, _assignedIp_initializers, void 0));
+        noisePublicKey = (__runInitializers(this, _assignedIp_extraInitializers), __runInitializers(this, _noisePublicKey_initializers, void 0));
+        wgPublicKey = (__runInitializers(this, _noisePublicKey_extraInitializers), __runInitializers(this, _wgPublicKey_initializers, void 0));
+        wgPrivateKey = (__runInitializers(this, _wgPublicKey_extraInitializers), __runInitializers(this, _wgPrivateKey_initializers, void 0));
+        createdAt = (__runInitializers(this, _wgPrivateKey_extraInitializers), __runInitializers(this, _createdAt_initializers, void 0));
+        updatedAt = (__runInitializers(this, _createdAt_extraInitializers), __runInitializers(this, _updatedAt_initializers, void 0));
+        expiresAt = (__runInitializers(this, _updatedAt_extraInitializers), __runInitializers(this, _expiresAt_initializers, void 0));
+        destinationAllowList = (__runInitializers(this, _expiresAt_extraInitializers), __runInitializers(this, _destinationAllowList_initializers, void 0));
+        destinationBlockList = (__runInitializers(this, _destinationAllowList_extraInitializers), __runInitializers(this, _destinationBlockList_initializers, void 0));
+        useHostIp = (__runInitializers(this, _destinationBlockList_extraInitializers), __runInitializers(this, _useHostIp_initializers, void 0));
+        useDhcp = (__runInitializers(this, _useHostIp_extraInitializers), __runInitializers(this, _useDhcp_initializers, void 0));
+        staticIp = (__runInitializers(this, _useDhcp_extraInitializers), __runInitializers(this, _staticIp_initializers, void 0));
+        forceVlan = (__runInitializers(this, _staticIp_extraInitializers), __runInitializers(this, _forceVlan_initializers, void 0));
+        vlanId = (__runInitializers(this, _forceVlan_extraInitializers), __runInitializers(this, _vlanId_initializers, void 0));
+        constructor() {
+            super();
+            __runInitializers(this, _vlanId_extraInitializers);
+        }
+        static async findAll() {
+            return await VpnClientDoc.getInstances({});
+        }
+    };
+    return VpnClientDoc = _classThis;
+})();
+export { VpnClientDoc };
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/db/documents/classes.vpn-server-keys.doc.d.ts

@@ -0,0 +1,10 @@
+import * as plugins from '../../plugins.js';
+export declare class VpnServerKeysDoc extends plugins.smartdata.SmartDataDbDoc<VpnServerKeysDoc, VpnServerKeysDoc> {
+    configId: string;
+    noisePrivateKey: string;
+    noisePublicKey: string;
+    wgPrivateKey: string;
+    wgPublicKey: string;
+    constructor();
+    static load(): Promise<VpnServerKeysDoc | null>;
+}

package/dist_ts/db/documents/classes.vpn-server-keys.doc.js

@@ -0,0 +1,94 @@
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+import * as plugins from '../../plugins.js';
+import { DcRouterDb } from '../classes.dcrouter-db.js';
+const getDb = () => DcRouterDb.getInstance().getDb();
+let VpnServerKeysDoc = (() => {
+    let _classDecorators = [plugins.smartdata.Collection(() => getDb())];
+    let _classDescriptor;
+    let _classExtraInitializers = [];
+    let _classThis;
+    let _classSuper = plugins.smartdata.SmartDataDbDoc;
+    let _configId_decorators;
+    let _configId_initializers = [];
+    let _configId_extraInitializers = [];
+    let _noisePrivateKey_decorators;
+    let _noisePrivateKey_initializers = [];
+    let _noisePrivateKey_extraInitializers = [];
+    let _noisePublicKey_decorators;
+    let _noisePublicKey_initializers = [];
+    let _noisePublicKey_extraInitializers = [];
+    let _wgPrivateKey_decorators;
+    let _wgPrivateKey_initializers = [];
+    let _wgPrivateKey_extraInitializers = [];
+    let _wgPublicKey_decorators;
+    let _wgPublicKey_initializers = [];
+    let _wgPublicKey_extraInitializers = [];
+    var VpnServerKeysDoc = class extends _classSuper {
+        static { _classThis = this; }
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+            _configId_decorators = [plugins.smartdata.unI(), plugins.smartdata.svDb()];
+            _noisePrivateKey_decorators = [plugins.smartdata.svDb()];
+            _noisePublicKey_decorators = [plugins.smartdata.svDb()];
+            _wgPrivateKey_decorators = [plugins.smartdata.svDb()];
+            _wgPublicKey_decorators = [plugins.smartdata.svDb()];
+            __esDecorate(null, null, _configId_decorators, { kind: "field", name: "configId", static: false, private: false, access: { has: obj => "configId" in obj, get: obj => obj.configId, set: (obj, value) => { obj.configId = value; } }, metadata: _metadata }, _configId_initializers, _configId_extraInitializers);
+            __esDecorate(null, null, _noisePrivateKey_decorators, { kind: "field", name: "noisePrivateKey", static: false, private: false, access: { has: obj => "noisePrivateKey" in obj, get: obj => obj.noisePrivateKey, set: (obj, value) => { obj.noisePrivateKey = value; } }, metadata: _metadata }, _noisePrivateKey_initializers, _noisePrivateKey_extraInitializers);
+            __esDecorate(null, null, _noisePublicKey_decorators, { kind: "field", name: "noisePublicKey", static: false, private: false, access: { has: obj => "noisePublicKey" in obj, get: obj => obj.noisePublicKey, set: (obj, value) => { obj.noisePublicKey = value; } }, metadata: _metadata }, _noisePublicKey_initializers, _noisePublicKey_extraInitializers);
+            __esDecorate(null, null, _wgPrivateKey_decorators, { kind: "field", name: "wgPrivateKey", static: false, private: false, access: { has: obj => "wgPrivateKey" in obj, get: obj => obj.wgPrivateKey, set: (obj, value) => { obj.wgPrivateKey = value; } }, metadata: _metadata }, _wgPrivateKey_initializers, _wgPrivateKey_extraInitializers);
+            __esDecorate(null, null, _wgPublicKey_decorators, { kind: "field", name: "wgPublicKey", static: false, private: false, access: { has: obj => "wgPublicKey" in obj, get: obj => obj.wgPublicKey, set: (obj, value) => { obj.wgPublicKey = value; } }, metadata: _metadata }, _wgPublicKey_initializers, _wgPublicKey_extraInitializers);
+            __esDecorate(null, _classDescriptor = { value: _classThis }, _classDecorators, { kind: "class", name: _classThis.name, metadata: _metadata }, null, _classExtraInitializers);
+            VpnServerKeysDoc = _classThis = _classDescriptor.value;
+            if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+            __runInitializers(_classThis, _classExtraInitializers);
+        }
+        configId = __runInitializers(this, _configId_initializers, 'vpn-server-keys');
+        noisePrivateKey = (__runInitializers(this, _configId_extraInitializers), __runInitializers(this, _noisePrivateKey_initializers, void 0));
+        noisePublicKey = (__runInitializers(this, _noisePrivateKey_extraInitializers), __runInitializers(this, _noisePublicKey_initializers, void 0));
+        wgPrivateKey = (__runInitializers(this, _noisePublicKey_extraInitializers), __runInitializers(this, _wgPrivateKey_initializers, void 0));
+        wgPublicKey = (__runInitializers(this, _wgPrivateKey_extraInitializers), __runInitializers(this, _wgPublicKey_initializers, void 0));
+        constructor() {
+            super();
+            __runInitializers(this, _wgPublicKey_extraInitializers);
+        }
+        static async load() {
+            return await VpnServerKeysDoc.getInstance({ configId: 'vpn-server-keys' });
+        }
+    };
+    return VpnServerKeysDoc = _classThis;
+})();
+export { VpnServerKeysDoc };
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/db/documents/index.d.ts

@@ -0,0 +1,20 @@
+export * from './classes.cached.email.js';
+export * from './classes.cached.ip.reputation.js';
+export * from './classes.route.doc.js';
+export * from './classes.api-token.doc.js';
+export * from './classes.source-profile.doc.js';
+export * from './classes.target-profile.doc.js';
+export * from './classes.network-target.doc.js';
+export * from './classes.vpn-server-keys.doc.js';
+export * from './classes.vpn-client.doc.js';
+export * from './classes.acme-cert.doc.js';
+export * from './classes.proxy-cert.doc.js';
+export * from './classes.cert-backoff.doc.js';
+export * from './classes.remote-ingress-edge.doc.js';
+export * from './classes.vlan-mappings.doc.js';
+export * from './classes.accounting-session.doc.js';
+export * from './classes.dns-provider.doc.js';
+export * from './classes.domain.doc.js';
+export * from './classes.dns-record.doc.js';
+export * from './classes.acme-config.doc.js';
+export * from './classes.email-domain.doc.js';

package/dist_ts/db/documents/index.js

@@ -0,0 +1,30 @@
+// Cached/TTL document classes
+export * from './classes.cached.email.js';
+export * from './classes.cached.ip.reputation.js';
+// Config document classes
+export * from './classes.route.doc.js';
+export * from './classes.api-token.doc.js';
+export * from './classes.source-profile.doc.js';
+export * from './classes.target-profile.doc.js';
+export * from './classes.network-target.doc.js';
+// VPN document classes
+export * from './classes.vpn-server-keys.doc.js';
+export * from './classes.vpn-client.doc.js';
+// Certificate document classes
+export * from './classes.acme-cert.doc.js';
+export * from './classes.proxy-cert.doc.js';
+export * from './classes.cert-backoff.doc.js';
+// Remote ingress document classes
+export * from './classes.remote-ingress-edge.doc.js';
+// RADIUS document classes
+export * from './classes.vlan-mappings.doc.js';
+export * from './classes.accounting-session.doc.js';
+// DNS / Domain management document classes
+export * from './classes.dns-provider.doc.js';
+export * from './classes.domain.doc.js';
+export * from './classes.dns-record.doc.js';
+// ACME configuration (singleton)
+export * from './classes.acme-config.doc.js';
+// Email domain management
+export * from './classes.email-domain.doc.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi90cy9kYi9kb2N1bWVudHMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsOEJBQThCO0FBQzlCLGNBQWMsMkJBQTJCLENBQUM7QUFDMUMsY0FBYyxtQ0FBbUMsQ0FBQztBQUVsRCwwQkFBMEI7QUFDMUIsY0FBYyx3QkFBd0IsQ0FBQztBQUN2QyxjQUFjLDRCQUE0QixDQUFDO0FBQzNDLGNBQWMsaUNBQWlDLENBQUM7QUFDaEQsY0FBYyxpQ0FBaUMsQ0FBQztBQUNoRCxjQUFjLGlDQUFpQyxDQUFDO0FBRWhELHVCQUF1QjtBQUN2QixjQUFjLGtDQUFrQyxDQUFDO0FBQ2pELGNBQWMsNkJBQTZCLENBQUM7QUFFNUMsK0JBQStCO0FBQy9CLGNBQWMsNEJBQTRCLENBQUM7QUFDM0MsY0FBYyw2QkFBNkIsQ0FBQztBQUM1QyxjQUFjLCtCQUErQixDQUFDO0FBRTlDLGtDQUFrQztBQUNsQyxjQUFjLHNDQUFzQyxDQUFDO0FBRXJELDBCQUEwQjtBQUMxQixjQUFjLGdDQUFnQyxDQUFDO0FBQy9DLGNBQWMscUNBQXFDLENBQUM7QUFFcEQsMkNBQTJDO0FBQzNDLGNBQWMsK0JBQStCLENBQUM7QUFDOUMsY0FBYyx5QkFBeUIsQ0FBQztBQUN4QyxjQUFjLDZCQUE2QixDQUFDO0FBRTVDLGlDQUFpQztBQUNqQyxjQUFjLDhCQUE4QixDQUFDO0FBRTdDLDBCQUEwQjtBQUMxQixjQUFjLCtCQUErQixDQUFDIn0=

package/dist_ts/db/index.d.ts

@@ -0,0 +1,4 @@
+export * from './classes.dcrouter-db.js';
+export * from './classes.cached.document.js';
+export * from './classes.cache.cleaner.js';
+export * from './documents/index.js';

package/dist_ts/db/index.js

@@ -0,0 +1,9 @@
+// Unified database manager
+export * from './classes.dcrouter-db.js';
+// TTL base class and constants
+export * from './classes.cached.document.js';
+// Cache cleaner
+export * from './classes.cache.cleaner.js';
+// Document classes
+export * from './documents/index.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi90cy9kYi9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSwyQkFBMkI7QUFDM0IsY0FBYywwQkFBMEIsQ0FBQztBQUV6QywrQkFBK0I7QUFDL0IsY0FBYyw4QkFBOEIsQ0FBQztBQUU3QyxnQkFBZ0I7QUFDaEIsY0FBYyw0QkFBNEIsQ0FBQztBQUUzQyxtQkFBbUI7QUFDbkIsY0FBYyxzQkFBc0IsQ0FBQyJ9

package/dist_ts/dns/index.d.ts

@@ -0,0 +1,2 @@
+export * from './manager.dns.js';
+export * from './providers/index.js';

package/dist_ts/dns/index.js

@@ -0,0 +1,3 @@
+export * from './manager.dns.js';
+export * from './providers/index.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi90cy9kbnMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsY0FBYyxrQkFBa0IsQ0FBQztBQUNqQyxjQUFjLHNCQUFzQixDQUFDIn0=

package/dist_ts/dns/manager.dns.d.ts

@@ -0,0 +1,267 @@
+import * as plugins from '../plugins.js';
+import { DnsProviderDoc, DomainDoc, DnsRecordDoc } from '../db/documents/index.js';
+import type { IDcRouterOptions } from '../classes.dcrouter.js';
+import type { IDnsProviderClient } from './providers/interfaces.js';
+import type { TDnsRecordType, TDnsRecordSource } from '../../dist_ts_interfaces/data/dns-record.js';
+import type { TDnsProviderType, TDnsProviderCredentials, IDnsProviderPublic, IProviderDomainListing } from '../../dist_ts_interfaces/data/dns-provider.js';
+/**
+ * DnsManager — owns runtime DNS state on top of the embedded DnsServer.
+ *
+ * Responsibilities:
+ *  - Load Domain/DnsRecord docs from the DB on start
+ *  - First-boot seeding from legacy constructor config (dnsScopes/dnsRecords/dnsNsDomains)
+ *  - Register dcrouter-hosted domain records with smartdns.DnsServer at startup
+ *  - Provide CRUD methods used by OpsServer handlers (dcrouter-hosted domains hit
+ *    smartdns, provider domains hit the provider API)
+ *  - Expose a provider lookup used by the ACME DNS-01 wiring in setupSmartProxy()
+ *
+ * Provider-managed domains are NEVER served from the embedded DnsServer — the
+ * provider stays authoritative. We only mirror their records locally for the UI
+ * and to track providerRecordIds for updates / deletes.
+ */
+export declare class DnsManager {
+    private options;
+    /**
+     * Reference to the active smartdns DnsServer (set by DcRouter once it exists).
+     * May be undefined if dnsScopes/dnsNsDomains aren't configured.
+     */
+    dnsServer?: plugins.smartdns.dnsServerMod.DnsServer;
+    /**
+     * Cached provider clients, keyed by DnsProviderDoc.id.
+     * Created lazily when a provider is first needed.
+     */
+    private providerClients;
+    constructor(options: IDcRouterOptions);
+    /**
+     * Called from DcRouter after DcRouterDb is up. Performs first-boot seeding
+     * from legacy constructor config if (and only if) the DB is empty.
+     */
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    /**
+     * Wire the embedded DnsServer instance after it has been created by
+     * DcRouter.setupDnsWithSocketHandler(). After this, local records on
+     * dcrouter-hosted domains loaded from the DB are registered with the server.
+     */
+    attachDnsServer(dnsServer: plugins.smartdns.dnsServerMod.DnsServer): Promise<void>;
+    /**
+     * If no DomainDocs exist yet but the constructor has legacy DNS fields,
+     * seed them as dcrouter-hosted (`domain.source: 'dcrouter'`) zones with
+     * local (`record.source: 'local'`) records. On subsequent boots (DB has
+     * entries), constructor config is ignored with a warning.
+     */
+    private seedFromConstructorConfigIfEmpty;
+    private findParentDomain;
+    /**
+     * Register all records from dcrouter-hosted domains in the DB with the
+     * embedded DnsServer. Called once after attachDnsServer().
+     */
+    private applyDcrouterDomainsToDnsServer;
+    /**
+     * Register a single record with the embedded DnsServer. The handler closure
+     * captures the record fields, so updates require a re-register cycle.
+     */
+    private registerRecordWithDnsServer;
+    private parseRecordData;
+    /**
+     * Get the provider client for a given DnsProviderDoc id, instantiating
+     * (and caching) it on first use.
+     */
+    getProviderClientById(providerId: string): Promise<IDnsProviderClient | null>;
+    /**
+     * Find the IDnsProviderClient that owns the given FQDN (by walking up its
+     * labels to find a matching DomainDoc with `source === 'provider'`).
+     * Returns null if no provider claims this FQDN.
+     *
+     * Used by:
+     *  - SmartAcme DNS-01 wiring in setupSmartProxy()
+     *  - DnsRecordHandler when creating provider records
+     */
+    getProviderClientForDomain(fqdn: string): Promise<IDnsProviderClient | null>;
+    /**
+     * Find the DomainDoc that covers a given FQDN, regardless of source
+     * (dcrouter-hosted or provider-managed). Uses longest-suffix match.
+     */
+    findDomainForFqdn(fqdn: string): Promise<DomainDoc | null>;
+    /**
+     * Delete all DNS records matching a name and type under a domain.
+     * Used for ACME challenge cleanup (may have multiple TXT records at the same name).
+     */
+    deleteRecordsByNameAndType(domainId: string, name: string, type: TDnsRecordType): Promise<void>;
+    /**
+     * True if any domain is under management (dcrouter-hosted or provider-managed).
+     * Used by setupSmartProxy() to decide whether to wire SmartAcme with a DNS-01 handler.
+     */
+    hasAnyManagedDomain(): Promise<boolean>;
+    /**
+     * Build an IConvenientDnsProvider that routes ACME DNS-01 challenges through
+     * the DnsManager abstraction. Challenges are dispatched via createRecord() /
+     * deleteRecord(), which transparently handle both dcrouter-hosted zones
+     * (embedded DnsServer) and provider-managed zones (e.g. Cloudflare API).
+     *
+     * Only domains under management (with a DomainDoc in DB) are supported —
+     * this acts as the management gate for certificate issuance.
+     */
+    buildAcmeConvenientDnsProvider(): plugins.tsclass.network.IConvenientDnsProvider;
+    listProviders(): Promise<IDnsProviderPublic[]>;
+    getProvider(id: string): Promise<IDnsProviderPublic | null>;
+    createProvider(args: {
+        name: string;
+        type: TDnsProviderType;
+        credentials: TDnsProviderCredentials;
+        createdBy: string;
+    }): Promise<string>;
+    updateProvider(id: string, args: {
+        name?: string;
+        credentials?: TDnsProviderCredentials;
+    }): Promise<boolean>;
+    deleteProvider(id: string, force: boolean): Promise<{
+        success: boolean;
+        message?: string;
+    }>;
+    testProvider(id: string): Promise<{
+        ok: boolean;
+        error?: string;
+        testedAt: number;
+    }>;
+    listProviderDomains(providerId: string): Promise<IProviderDomainListing[]>;
+    listDomains(): Promise<DomainDoc[]>;
+    getDomain(id: string): Promise<DomainDoc | null>;
+    /**
+     * Create a dcrouter-hosted (authoritative) domain. dcrouter will serve
+     * DNS records for this domain via the embedded smartdns.DnsServer.
+     */
+    createDcrouterDomain(args: {
+        name: string;
+        description?: string;
+        createdBy: string;
+    }): Promise<string>;
+    /**
+     * Import one or more domains from a provider, pulling all of their DNS
+     * records into local DnsRecordDocs.
+     */
+    importDomainsFromProvider(args: {
+        providerId: string;
+        domainNames: string[];
+        createdBy: string;
+    }): Promise<string[]>;
+    updateDomain(id: string, args: {
+        description?: string;
+    }): Promise<boolean>;
+    /**
+     * Delete a domain and all of its DNS records. For provider domains, only
+     * removes the local mirror — does NOT touch the provider.
+     * For dcrouter-hosted domains, also unregisters records from the embedded
+     * DnsServer.
+     *
+     * Note: smartdns has no public unregister-by-name API in the version pinned
+     * here, so local record deletes only take effect after a restart. The DB
+     * is the source of truth and the next start will not register the deleted
+     * record.
+     */
+    deleteDomain(id: string): Promise<boolean>;
+    /**
+     * Force-resync a provider-managed domain: re-pull all records from the
+     * provider API, replacing the cached DnsRecordDocs.
+     */
+    syncDomain(id: string): Promise<{
+        success: boolean;
+        recordCount?: number;
+        message?: string;
+    }>;
+    listRecordsForDomain(domainId: string): Promise<DnsRecordDoc[]>;
+    getRecord(id: string): Promise<DnsRecordDoc | null>;
+    /**
+     * Migrate a domain between dcrouter-hosted and provider-managed.
+     * Transfers all records to the target and updates domain metadata.
+     */
+    migrateDomain(args: {
+        id: string;
+        targetSource: 'dcrouter' | 'provider';
+        targetProviderId?: string;
+        deleteExistingProviderRecords?: boolean;
+    }): Promise<{
+        success: boolean;
+        recordsMigrated?: number;
+        message?: string;
+    }>;
+    /**
+     * Migrate domain from dcrouter-hosted (or another provider) to an external DNS provider.
+     */
+    private migrateToDnsProvider;
+    /**
+     * Migrate domain from provider-managed to dcrouter-hosted (authoritative).
+     */
+    private migrateToDcrouter;
+    createRecord(args: {
+        domainId: string;
+        name: string;
+        type: TDnsRecordType;
+        value: string;
+        ttl?: number;
+        proxied?: boolean;
+        createdBy: string;
+    }): Promise<{
+        success: boolean;
+        id?: string;
+        message?: string;
+    }>;
+    updateRecord(args: {
+        id: string;
+        name?: string;
+        value?: string;
+        ttl?: number;
+        proxied?: boolean;
+    }): Promise<{
+        success: boolean;
+        message?: string;
+    }>;
+    deleteRecord(id: string): Promise<{
+        success: boolean;
+        message?: string;
+    }>;
+    /**
+     * Unregister a record's handler from the embedded DnsServer.
+     */
+    unregisterRecordFromDnsServer(rec: DnsRecordDoc): void;
+    private createSyncedRecord;
+    /**
+     * Convert a DnsProviderDoc to its public, secret-stripped representation
+     * for the OpsServer API.
+     */
+    toPublicProvider(doc: DnsProviderDoc): IDnsProviderPublic;
+    /**
+     * Convert a DomainDoc to its plain interface representation.
+     */
+    toPublicDomain(doc: DomainDoc): {
+        id: string;
+        name: string;
+        source: 'dcrouter' | 'provider';
+        providerId?: string;
+        authoritative: boolean;
+        nameservers?: string[];
+        externalZoneId?: string;
+        lastSyncedAt?: number;
+        description?: string;
+        createdAt: number;
+        updatedAt: number;
+        createdBy: string;
+    };
+    /**
+     * Convert a DnsRecordDoc to its plain interface representation.
+     */
+    toPublicRecord(doc: DnsRecordDoc): {
+        id: string;
+        domainId: string;
+        name: string;
+        type: TDnsRecordType;
+        value: string;
+        ttl: number;
+        proxied?: boolean;
+        source: TDnsRecordSource;
+        providerRecordId?: string;
+        createdAt: number;
+        updatedAt: number;
+        createdBy: string;
+    };
+}