axiodb 9.7.9 → 10.8.11

package/lib/Services/Auth/PermissionChecker.helper.d.ts

@@ -0,0 +1,21 @@
+/**
+ * In-process cache of roleName -> permission keys, avoiding a disk read on every
+ * single request. Hydrated once at server bootstrap (AuthSeeder) and kept in sync
+ * whenever a new role is created (AuthService.createRole).
+ */
+declare class PermissionChecker {
+    private static instance;
+    private readonly rolePermissions;
+    static getInstance(): PermissionChecker;
+    setRolePermissions(roleName: string, permissions: string[]): void;
+    hydrate(roles: {
+        roleName: string;
+        permissions: string[];
+    }[]): void;
+    getPermissionsForRole(roleName: string): string[];
+    roleHasPermission(roleName: string, permissionKey: string): boolean;
+    roleExists(roleName: string): boolean;
+    listRoleNames(): string[];
+}
+declare const _default: PermissionChecker;
+export default _default;

package/lib/Services/Auth/PermissionChecker.helper.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * In-process cache of roleName -> permission keys, avoiding a disk read on every
+ * single request. Hydrated once at server bootstrap (AuthSeeder) and kept in sync
+ * whenever a new role is created (AuthService.createRole).
+ */
+class PermissionChecker {
+    constructor() {
+        this.rolePermissions = new Map();
+    }
+    static getInstance() {
+        if (!PermissionChecker.instance) {
+            PermissionChecker.instance = new PermissionChecker();
+        }
+        return PermissionChecker.instance;
+    }
+    setRolePermissions(roleName, permissions) {
+        this.rolePermissions.set(roleName, permissions);
+    }
+    hydrate(roles) {
+        for (const role of roles) {
+            this.rolePermissions.set(role.roleName, role.permissions);
+        }
+    }
+    getPermissionsForRole(roleName) {
+        var _a;
+        return (_a = this.rolePermissions.get(roleName)) !== null && _a !== void 0 ? _a : [];
+    }
+    roleHasPermission(roleName, permissionKey) {
+        return this.getPermissionsForRole(roleName).includes(permissionKey);
+    }
+    roleExists(roleName) {
+        return this.rolePermissions.has(roleName);
+    }
+    listRoleNames() {
+        return Array.from(this.rolePermissions.keys());
+    }
+}
+exports.default = PermissionChecker.getInstance();
+//# sourceMappingURL=PermissionChecker.helper.js.map

package/lib/Services/Auth/PermissionChecker.helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionChecker.helper.js","sourceRoot":"","sources":["../../../source/Services/Auth/PermissionChecker.helper.ts"],"names":[],"mappings":";;AAAA;;;;GAIG;AACH,MAAM,iBAAiB;IAAvB;QAEmB,oBAAe,GAA0B,IAAI,GAAG,EAAE,CAAC;IAkCtE,CAAC;IAhCQ,MAAM,CAAC,WAAW;QACvB,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC;YAChC,iBAAiB,CAAC,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACvD,CAAC;QACD,OAAO,iBAAiB,CAAC,QAAQ,CAAC;IACpC,CAAC;IAEM,kBAAkB,CAAC,QAAgB,EAAE,WAAqB;QAC/D,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAClD,CAAC;IAEM,OAAO,CAAC,KAAoD;QACjE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAEM,qBAAqB,CAAC,QAAgB;;QAC3C,aAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,mCAAI,EAAE,CAAC;IAClD,CAAC;IAEM,iBAAiB,CAAC,QAAgB,EAAE,aAAqB;QAC9D,OAAO,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACtE,CAAC;IAEM,UAAU,CAAC,QAAgB;QAChC,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAEM,aAAa;QAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;CACF;kBAEc,iBAAiB,CAAC,WAAW,EAAE"}

package/lib/Services/Auth/SessionStore.service.d.ts

@@ -0,0 +1,23 @@
+import { SessionRecord } from "../../config/Interfaces/Auth/auth.interface";
+/**
+ * In-memory-only session store for the Control Server. Sessions never touch disk
+ * and are lost on process restart by design - this is the literal "store the
+ * session on server in memory only" requirement.
+ */
+declare class SessionStore {
+    private static instance;
+    private readonly sessions;
+    private sweepIntervalHandle;
+    static getInstance(): SessionStore;
+    createSession(username: string, role: string, mustChangePassword: boolean): SessionRecord;
+    getSession(sid: string): SessionRecord | null;
+    touchSession(sid: string): void;
+    updateSessionMustChangePassword(sid: string, mustChangePassword: boolean): void;
+    revokeSession(sid: string): void;
+    revokeSessionsForUser(username: string): void;
+    countActiveSessions(): number;
+    startCleanupSweep(): void;
+    stopCleanupSweep(): void;
+}
+declare const _default: SessionStore;
+export default _default;

package/lib/Services/Auth/SessionStore.service.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const crypto_1 = require("crypto");
+const Permissions_1 = require("../../config/Keys/Permissions");
+/**
+ * In-memory-only session store for the Control Server. Sessions never touch disk
+ * and are lost on process restart by design - this is the literal "store the
+ * session on server in memory only" requirement.
+ */
+class SessionStore {
+    constructor() {
+        this.sessions = new Map();
+    }
+    static getInstance() {
+        if (!SessionStore.instance) {
+            SessionStore.instance = new SessionStore();
+        }
+        return SessionStore.instance;
+    }
+    createSession(username, role, mustChangePassword) {
+        const sid = (0, crypto_1.randomBytes)(32).toString("hex");
+        const now = Date.now();
+        const record = {
+            sid,
+            username,
+            role,
+            mustChangePassword,
+            createdAt: now,
+            lastSeenAt: now,
+            expiresAt: now + Permissions_1.SESSION_TTL_MS,
+        };
+        this.sessions.set(sid, record);
+        return record;
+    }
+    getSession(sid) {
+        const record = this.sessions.get(sid);
+        if (!record) {
+            return null;
+        }
+        if (record.expiresAt <= Date.now()) {
+            this.sessions.delete(sid);
+            return null;
+        }
+        return record;
+    }
+    touchSession(sid) {
+        const record = this.sessions.get(sid);
+        if (!record) {
+            return;
+        }
+        const now = Date.now();
+        record.lastSeenAt = now;
+        record.expiresAt = now + Permissions_1.SESSION_TTL_MS;
+    }
+    updateSessionMustChangePassword(sid, mustChangePassword) {
+        const record = this.sessions.get(sid);
+        if (record) {
+            record.mustChangePassword = mustChangePassword;
+        }
+    }
+    revokeSession(sid) {
+        this.sessions.delete(sid);
+    }
+    revokeSessionsForUser(username) {
+        for (const [sid, record] of this.sessions) {
+            if (record.username === username) {
+                this.sessions.delete(sid);
+            }
+        }
+    }
+    countActiveSessions() {
+        return this.sessions.size;
+    }
+    startCleanupSweep() {
+        if (this.sweepIntervalHandle) {
+            return;
+        }
+        this.sweepIntervalHandle = setInterval(() => {
+            const now = Date.now();
+            for (const [sid, record] of this.sessions) {
+                if (record.expiresAt <= now) {
+                    this.sessions.delete(sid);
+                }
+            }
+        }, Permissions_1.SESSION_SWEEP_INTERVAL_MS);
+        this.sweepIntervalHandle.unref();
+    }
+    stopCleanupSweep() {
+        if (this.sweepIntervalHandle) {
+            clearInterval(this.sweepIntervalHandle);
+            this.sweepIntervalHandle = undefined;
+        }
+    }
+}
+exports.default = SessionStore.getInstance();
+//# sourceMappingURL=SessionStore.service.js.map

package/lib/Services/Auth/SessionStore.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionStore.service.js","sourceRoot":"","sources":["../../../source/Services/Auth/SessionStore.service.ts"],"names":[],"mappings":";;AAAA,mCAAqC;AAErC,+DAA0F;AAE1F;;;;GAIG;AACH,MAAM,YAAY;IAAlB;QAEmB,aAAQ,GAA+B,IAAI,GAAG,EAAE,CAAC;IA4FpE,CAAC;IAzFQ,MAAM,CAAC,WAAW;QACvB,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC3B,YAAY,CAAC,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;QAC7C,CAAC;QACD,OAAO,YAAY,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAEM,aAAa,CAAC,QAAgB,EAAE,IAAY,EAAE,kBAA2B;QAC9E,MAAM,GAAG,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAkB;YAC5B,GAAG;YACH,QAAQ;YACR,IAAI;YACJ,kBAAkB;YAClB,SAAS,EAAE,GAAG;YACd,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,GAAG,GAAG,4BAAc;SAChC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,UAAU,CAAC,GAAW;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,YAAY,CAAC,GAAW;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;QACxB,MAAM,CAAC,SAAS,GAAG,GAAG,GAAG,4BAAc,CAAC;IAC1C,CAAC;IAEM,+BAA+B,CAAC,GAAW,EAAE,kBAA2B;QAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QACjD,CAAC;IACH,CAAC;IAEM,aAAa,CAAC,GAAW;QAC9B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAEM,qBAAqB,CAAC,QAAgB;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAEM,mBAAmB;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAEM,iBAAiB;QACtB,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE;YAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC1C,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;oBAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC,EAAE,uCAAyB,CAAC,CAAC;QAC9B,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;IACnC,CAAC;IAEM,gBAAgB;QACrB,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACxC,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAC;QACvC,CAAC;IACH,CAAC;CACF;kBAEc,YAAY,CAAC,WAAW,EAAE"}

package/lib/Services/Indexation.operation.js

@@ -28,6 +28,8 @@ const StatusCode_1 = require("../config/Keys/StatusCode");
 const response_helper_1 = __importDefault(require("../Helper/response.helper"));
 const server_1 = __importDefault(require("../server/config/server"));
 const server_2 = __importDefault(require("../tcp/config/server"));
+const AuthSeeder_service_1 = __importDefault(require("./Auth/AuthSeeder.service"));
+const Permissions_1 = require("../config/Keys/Permissions");
 /**
  * Class representing the AxioDB database.
  * @param {AxioDBOptions} options - Configuration options for AxioDB
@@ -84,6 +86,7 @@ class AxioDB {
                 }
             }
             if (this.GUI) {
+                yield new AuthSeeder_service_1.default(this).seedIfNeeded(); // Ensure config DB, RBAC seed data exist before accepting requests
                 Console_helper_1.default.green("Starting AxioDB Control Server...");
                 (0, server_1.default)(this); // Start the web Control Server with the AxioDB instance
             }
@@ -142,14 +145,16 @@ class AxioDB {
             const totalSize = yield this.folderManager.GetDirectorySize(path_1.default.resolve(this.currentPATH));
             // check if all data is returned
             if ("data" in totalDatabases && "data" in totalSize) {
+                // Hide the reserved RBAC "config" database from user-facing database listings
+                const visibleDatabases = totalDatabases.data.filter((db) => db.toLowerCase() !== Permissions_1.RESERVED_DB_NAME);
                 const FinalDatabaseInfo = {
                     CurrentPath: this.currentPATH,
                     RootName: this.RootName,
                     TotalSize: parseFloat(totalSize.data),
-                    TotalDatabases: `${totalDatabases.data.length} Databases`,
-                    ListOfDatabases: totalDatabases.data,
+                    TotalDatabases: `${visibleDatabases.length} Databases`,
+                    ListOfDatabases: visibleDatabases,
                     DatabaseMap: this.DatabaseMap,
-                    AllDatabasesPaths: totalDatabases.data.map((db) => path_1.default.join(this.currentPATH, db)),
+                    AllDatabasesPaths: visibleDatabases.map((db) => path_1.default.join(this.currentPATH, db)),
                 };
                 return this.ResponseHelper.Success(FinalDatabaseInfo);
             }

package/lib/Services/Indexation.operation.js.map

@@ -1 +1 @@
-{"version":3,"file":"Indexation.operation.js","sourceRoot":"","sources":["../../source/Services/Indexation.operation.ts"],"names":[],"mappings":";AAAA,uDAAuD;;;;;;;;;;;;;;;AAEvD,mBAAmB;AACnB,mFAA2D;AAC3D,uFAA+D;AAC/D,8CAA8C;AAC9C,gDAAwB;AACxB,uFAAqD;AACrD,kDAAkD;AAElD,iBAAiB;AACjB,kFAAmD;AACnD,8EAA+C;AAC/C,0DAAwD;AACxD,gFAAuD;AAQvD,qEAAgE;AAEhE,kEAAyD;AAEzD;;;;;;;;;;GAUG;AACH;IAYE,YAAY,OAAO,GAAkB,EAAE;QAH/B,QAAG,GAAY,cAAO,CAAC,eAAe,CAAC;QACvC,QAAG,GAAY,KAAK,CAAC;QAG3B,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;QAExB,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QAEnD,iBAAiB;QAEjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,cAAO,CAAC,SAAS,CAAC,CAAC,oBAAoB;QACnE,IAAI,CAAC,WAAW,GAAG,cAAI,CAAC,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,uBAAuB;QAC3E,IAAI,CAAC,WAAW,GAAG,IAAI,qBAAW,EAAE,CAAC,CAAC,mCAAmC;QACzE,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAa,EAAE,CAAC,CAAC,qCAAqC;QAC/E,IAAI,CAAC,SAAS,GAAG,IAAI,0BAAS,EAAE,CAAC,CAAC,iCAAiC;QACnE,IAAI,CAAC,cAAc,GAAG,IAAI,yBAAc,EAAE,CAAC,CAAC,sCAAsC;QAClF,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,6BAA6B;QACpD,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC,CAAC,6BAA6B;QAChF,IAAI,CAAC,GAAG,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,cAAO,CAAC,eAAe,CAAC,CAAC,iBAAiB;QAC/E,IAAI,CAAC,GAAG,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB;IAC/D,CAAC;IAED;;;;;;;;OAQG;IACW,cAAc;;YAC1B,IAAI,CAAC,WAAW,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,yBAAyB;YAExF,oCAAoC;YACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAE1E,IAAI,MAAM,CAAC,UAAU,KAAK,wBAAW,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CACzD,IAAI,CAAC,WAAW,CACjB,CAAC;gBAEF,IAAI,UAAU,CAAC,UAAU,KAAK,wBAAW,CAAC,EAAE,EAAE,CAAC;oBAC7C,MAAM,IAAI,KAAK,CACb,mCAAmC,UAAU,CAAC,UAAU,EAAE,CAC3D,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAC,CAAC;gBACZ,wBAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACnD,IAAA,gBAAyB,EAAC,IAAI,CAAC,CAAC,CAAC,wDAAwD;YAC3F,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,wBAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBAC/C,IAAA,gBAAqB,EAAC,IAAI,CAAC,CAAC,CAAC,gDAAgD;YAC/E,CAAC;QACH,CAAC;KAAA;IAED;;;OAGG;IACH,IAAW,OAAO;QAChB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACU,QAAQ,CAAC,MAAc;;YAClC,MAAM,MAAM,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAEnD,uCAAuC;YACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAChE,IAAI,MAAM,CAAC,UAAU,KAAK,wBAAW,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;gBACjD,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,4BAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3C,6CAA6C;YAC7C,gFAAgF;YAChF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;KAAA;IAED,wCAAwC;IACxC;;;;;;;;;;;;OAYG;IACU,eAAe;;YAC1B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAC3D,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAC/B,CAAC;YAEF,QAAQ;YAER,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CACzD,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAC/B,CAAC;YACF,gCAAgC;YAChC,IAAI,MAAM,IAAI,cAAc,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;gBACpD,MAAM,iBAAiB,GAAsB;oBAC3C,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;oBACrC,cAAc,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,YAAY;oBACzD,eAAe,EAAE,cAAc,CAAC,IAAI;oBACpC,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,iBAAiB,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAU,EAAE,EAAE,CACxD,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAChC;iBACF,CAAC;gBACF,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;KAAA;IAED;;;;;;;;;;;;;OAaG;IACU,gBAAgB,CAAC,MAAc;;YAC1C,MAAM,MAAM,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAChE,OAAO,MAAM,CAAC,UAAU,KAAK,wBAAW,CAAC,EAAE,CAAC;QAC9C,CAAC;KAAA;IAED,kBAAkB;IAClB;;;;;;;;;;OAUG;IACU,cAAc,CACzB,MAAc;;YAEd,MAAM,MAAM,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAEhE,IAAI,MAAM,CAAC,UAAU,KAAK,wBAAW,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;gBACjD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B;gBAC3D,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAChC,aAAa,MAAM,uBAAuB,CAC3C,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,aAAa,MAAM,iBAAiB,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;KAAA;CACF"}
+{"version":3,"file":"Indexation.operation.js","sourceRoot":"","sources":["../../source/Services/Indexation.operation.ts"],"names":[],"mappings":";AAAA,uDAAuD;;;;;;;;;;;;;;;AAEvD,mBAAmB;AACnB,mFAA2D;AAC3D,uFAA+D;AAC/D,8CAA8C;AAC9C,gDAAwB;AACxB,uFAAqD;AACrD,kDAAkD;AAElD,iBAAiB;AACjB,kFAAmD;AACnD,8EAA+C;AAC/C,0DAAwD;AACxD,gFAAuD;AAQvD,qEAAgE;AAEhE,kEAAyD;AACzD,mFAAmD;AACnD,4DAA8D;AAE9D;;;;;;;;;;GAUG;AACH;IAYE,YAAY,OAAO,GAAkB,EAAE;QAH/B,QAAG,GAAY,cAAO,CAAC,eAAe,CAAC;QACvC,QAAG,GAAY,KAAK,CAAC;QAG3B,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;QAExB,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QAEnD,iBAAiB;QAEjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,cAAO,CAAC,SAAS,CAAC,CAAC,oBAAoB;QACnE,IAAI,CAAC,WAAW,GAAG,cAAI,CAAC,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,uBAAuB;QAC3E,IAAI,CAAC,WAAW,GAAG,IAAI,qBAAW,EAAE,CAAC,CAAC,mCAAmC;QACzE,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAa,EAAE,CAAC,CAAC,qCAAqC;QAC/E,IAAI,CAAC,SAAS,GAAG,IAAI,0BAAS,EAAE,CAAC,CAAC,iCAAiC;QACnE,IAAI,CAAC,cAAc,GAAG,IAAI,yBAAc,EAAE,CAAC,CAAC,sCAAsC;QAClF,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,6BAA6B;QACpD,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC,CAAC,6BAA6B;QAChF,IAAI,CAAC,GAAG,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,cAAO,CAAC,eAAe,CAAC,CAAC,iBAAiB;QAC/E,IAAI,CAAC,GAAG,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB;IAC/D,CAAC;IAED;;;;;;;;OAQG;IACW,cAAc;;YAC1B,IAAI,CAAC,WAAW,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,yBAAyB;YAExF,oCAAoC;YACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAE1E,IAAI,MAAM,CAAC,UAAU,KAAK,wBAAW,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CACzD,IAAI,CAAC,WAAW,CACjB,CAAC;gBAEF,IAAI,UAAU,CAAC,UAAU,KAAK,wBAAW,CAAC,EAAE,EAAE,CAAC;oBAC7C,MAAM,IAAI,KAAK,CACb,mCAAmC,UAAU,CAAC,UAAU,EAAE,CAC3D,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAC,CAAC;gBACZ,MAAM,IAAI,4BAAU,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,mEAAmE;gBAC9G,wBAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACnD,IAAA,gBAAyB,EAAC,IAAI,CAAC,CAAC,CAAC,wDAAwD;YAC3F,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,wBAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBAC/C,IAAA,gBAAqB,EAAC,IAAI,CAAC,CAAC,CAAC,gDAAgD;YAC/E,CAAC;QACH,CAAC;KAAA;IAED;;;OAGG;IACH,IAAW,OAAO;QAChB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACU,QAAQ,CAAC,MAAc;;YAClC,MAAM,MAAM,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAEnD,uCAAuC;YACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAChE,IAAI,MAAM,CAAC,UAAU,KAAK,wBAAW,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;gBACjD,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,4BAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3C,6CAA6C;YAC7C,gFAAgF;YAChF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;KAAA;IAED,wCAAwC;IACxC;;;;;;;;;;;;OAYG;IACU,eAAe;;YAC1B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAC3D,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAC/B,CAAC;YAEF,QAAQ;YAER,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CACzD,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAC/B,CAAC;YACF,gCAAgC;YAChC,IAAI,MAAM,IAAI,cAAc,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;gBACpD,8EAA8E;gBAC9E,MAAM,gBAAgB,GAAa,cAAc,CAAC,IAAI,CAAC,MAAM,CAC3D,CAAC,EAAU,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,8BAAgB,CACtD,CAAC;gBACF,MAAM,iBAAiB,GAAsB;oBAC3C,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;oBACrC,cAAc,EAAE,GAAG,gBAAgB,CAAC,MAAM,YAAY;oBACtD,eAAe,EAAE,gBAAgB;oBACjC,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,iBAAiB,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAU,EAAE,EAAE,CACrD,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAChC;iBACF,CAAC;gBACF,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;KAAA;IAED;;;;;;;;;;;;;OAaG;IACU,gBAAgB,CAAC,MAAc;;YAC1C,MAAM,MAAM,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAChE,OAAO,MAAM,CAAC,UAAU,KAAK,wBAAW,CAAC,EAAE,CAAC;QAC9C,CAAC;KAAA;IAED,kBAAkB;IAClB;;;;;;;;;;OAUG;IACU,cAAc,CACzB,MAAc;;YAEd,MAAM,MAAM,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAEhE,IAAI,MAAM,CAAC,UAAU,KAAK,wBAAW,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;gBACjD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B;gBAC3D,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAChC,aAAa,MAAM,uBAAuB,CAC3C,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,aAAa,MAAM,iBAAiB,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;KAAA;CACF"}

package/lib/config/Interfaces/Auth/auth.interface.d.ts

@@ -0,0 +1,70 @@
+/** Document shape stored in the `config.users` collection. */
+export interface UserDocument {
+    documentId?: string;
+    username: string;
+    passwordHash: string;
+    role: string;
+    mustChangePassword: boolean;
+    isActive: boolean;
+    createdAt: string;
+    updatedAt?: string;
+}
+/** Document shape stored in the `config.roles` collection. */
+export interface RoleDocument {
+    documentId?: string;
+    roleName: string;
+    permissions: string[];
+    isSystemRole: boolean;
+    createdAt: string;
+}
+/** Document shape stored in the `config.permissions` collection. */
+export interface PermissionDocument {
+    documentId?: string;
+    key: string;
+    group: string;
+    description: string;
+}
+/** In-memory session record kept only for the lifetime of the server process. */
+export interface SessionRecord {
+    sid: string;
+    username: string;
+    role: string;
+    mustChangePassword: boolean;
+    createdAt: number;
+    lastSeenAt: number;
+    expiresAt: number;
+}
+/** Payload embedded (base64url-encoded) inside the session cookie. Never trust `username`/`role` from this - it only carries the lookup key. */
+export interface CookiePayload {
+    sid: string;
+    iat: number;
+}
+/** Public shape returned to the frontend describing the authenticated caller. */
+export interface AuthenticatedUser {
+    username: string;
+    role: string;
+    mustChangePassword: boolean;
+}
+export interface LoginRequestBody {
+    username: string;
+    password: string;
+}
+export interface ChangePasswordRequestBody {
+    currentPassword: string;
+    newPassword: string;
+}
+export interface CreateUserRequestBody {
+    username: string;
+    password: string;
+    role: string;
+}
+export interface ResetPasswordRequestBody {
+    newPassword: string;
+}
+export interface UpdateUserRoleRequestBody {
+    role: string;
+}
+export interface CreateRoleRequestBody {
+    roleName: string;
+    permissions: string[];
+}

package/lib/config/Interfaces/Auth/auth.interface.js

@@ -0,0 +1,4 @@
+"use strict";
+// Interfaces for the Control Server RBAC + Authentication feature.
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=auth.interface.js.map

package/lib/config/Interfaces/Auth/auth.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.interface.js","sourceRoot":"","sources":["../../../../source/config/Interfaces/Auth/auth.interface.ts"],"names":[],"mappings":";AAAA,mEAAmE"}

package/lib/config/Keys/Permissions.d.ts

@@ -0,0 +1,51 @@
+export declare const PERMISSIONS: {
+    readonly DB_VIEW: "db:view";
+    readonly DB_CREATE: "db:create";
+    readonly DB_DELETE: "db:delete";
+    readonly DB_EXPORT: "db:export";
+    readonly DB_IMPORT: "db:import";
+    readonly COLLECTION_VIEW: "collection:view";
+    readonly COLLECTION_CREATE: "collection:create";
+    readonly COLLECTION_DELETE: "collection:delete";
+    readonly DOCUMENT_VIEW: "document:view";
+    readonly DOCUMENT_QUERY: "document:query";
+    readonly DOCUMENT_CREATE: "document:create";
+    readonly DOCUMENT_UPDATE: "document:update";
+    readonly DOCUMENT_DELETE: "document:delete";
+    readonly DOCUMENT_AGGREGATE: "document:aggregate";
+    readonly DASHBOARD_VIEW: "dashboard:view";
+    readonly USER_VIEW: "user:view";
+    readonly USER_CREATE: "user:create";
+    readonly USER_UPDATE_ROLE: "user:update-role";
+    readonly USER_RESET_PASSWORD: "user:reset-password";
+    readonly USER_DELETE: "user:delete";
+    readonly ROLE_VIEW: "role:view";
+    readonly ROLE_CREATE: "role:create";
+};
+export type PermissionKey = (typeof PERMISSIONS)[keyof typeof PERMISSIONS];
+interface PermissionCatalogueEntry {
+    key: PermissionKey;
+    group: string;
+    description: string;
+}
+export declare const PERMISSION_CATALOGUE: PermissionCatalogueEntry[];
+export declare const ALL_PERMISSION_KEYS: string[];
+export declare const SUPER_ADMIN_ROLE = "Super Admin";
+export declare const ADMIN_ROLE = "Admin";
+export declare const VIEW_ROLE = "View";
+export declare const PREDEFINED_ROLES: {
+    roleName: string;
+    permissions: string[];
+}[];
+export declare const RESERVED_DB_NAME = "config";
+/** The `config` database backs the RBAC system and must never be reachable through the generic Database/Collection/Operation routes. */
+export declare function isReservedDatabaseName(name: string): boolean;
+export declare const CONFIG_USERS_COLLECTION = "users";
+export declare const CONFIG_ROLES_COLLECTION = "roles";
+export declare const CONFIG_PERMISSIONS_COLLECTION = "permissions";
+export declare const DEFAULT_ADMIN_USERNAME = "admin";
+export declare const DEFAULT_ADMIN_PASSWORD = "admin";
+export declare const SESSION_COOKIE_NAME = "axiodb_session";
+export declare const SESSION_TTL_MS: number;
+export declare const SESSION_SWEEP_INTERVAL_MS: number;
+export {};

package/lib/config/Keys/Permissions.js

@@ -0,0 +1,101 @@
+"use strict";
+// Predefined permission catalogue and role matrix for the Control Server's RBAC system.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SESSION_SWEEP_INTERVAL_MS = exports.SESSION_TTL_MS = exports.SESSION_COOKIE_NAME = exports.DEFAULT_ADMIN_PASSWORD = exports.DEFAULT_ADMIN_USERNAME = exports.CONFIG_PERMISSIONS_COLLECTION = exports.CONFIG_ROLES_COLLECTION = exports.CONFIG_USERS_COLLECTION = exports.RESERVED_DB_NAME = exports.PREDEFINED_ROLES = exports.VIEW_ROLE = exports.ADMIN_ROLE = exports.SUPER_ADMIN_ROLE = exports.ALL_PERMISSION_KEYS = exports.PERMISSION_CATALOGUE = exports.PERMISSIONS = void 0;
+exports.isReservedDatabaseName = isReservedDatabaseName;
+exports.PERMISSIONS = {
+    DB_VIEW: "db:view",
+    DB_CREATE: "db:create",
+    DB_DELETE: "db:delete",
+    DB_EXPORT: "db:export",
+    DB_IMPORT: "db:import",
+    COLLECTION_VIEW: "collection:view",
+    COLLECTION_CREATE: "collection:create",
+    COLLECTION_DELETE: "collection:delete",
+    DOCUMENT_VIEW: "document:view",
+    DOCUMENT_QUERY: "document:query",
+    DOCUMENT_CREATE: "document:create",
+    DOCUMENT_UPDATE: "document:update",
+    DOCUMENT_DELETE: "document:delete",
+    DOCUMENT_AGGREGATE: "document:aggregate",
+    DASHBOARD_VIEW: "dashboard:view",
+    USER_VIEW: "user:view",
+    USER_CREATE: "user:create",
+    USER_UPDATE_ROLE: "user:update-role",
+    USER_RESET_PASSWORD: "user:reset-password",
+    USER_DELETE: "user:delete",
+    ROLE_VIEW: "role:view",
+    ROLE_CREATE: "role:create",
+};
+exports.PERMISSION_CATALOGUE = [
+    { key: exports.PERMISSIONS.DB_VIEW, group: "Database", description: "View the list of databases and dashboard database counts" },
+    { key: exports.PERMISSIONS.DB_CREATE, group: "Database", description: "Create new databases" },
+    { key: exports.PERMISSIONS.DB_DELETE, group: "Database", description: "Delete databases" },
+    { key: exports.PERMISSIONS.DB_EXPORT, group: "Database", description: "Export a database as a compressed archive" },
+    { key: exports.PERMISSIONS.DB_IMPORT, group: "Database", description: "Import a database from a compressed archive" },
+    { key: exports.PERMISSIONS.COLLECTION_VIEW, group: "Collection", description: "View collections inside a database" },
+    { key: exports.PERMISSIONS.COLLECTION_CREATE, group: "Collection", description: "Create new collections" },
+    { key: exports.PERMISSIONS.COLLECTION_DELETE, group: "Collection", description: "Delete collections" },
+    { key: exports.PERMISSIONS.DOCUMENT_VIEW, group: "Document", description: "View documents inside a collection" },
+    { key: exports.PERMISSIONS.DOCUMENT_QUERY, group: "Document", description: "Query documents with filters" },
+    { key: exports.PERMISSIONS.DOCUMENT_CREATE, group: "Document", description: "Create new documents" },
+    { key: exports.PERMISSIONS.DOCUMENT_UPDATE, group: "Document", description: "Update existing documents" },
+    { key: exports.PERMISSIONS.DOCUMENT_DELETE, group: "Document", description: "Delete documents" },
+    { key: exports.PERMISSIONS.DOCUMENT_AGGREGATE, group: "Document", description: "Run aggregation pipelines" },
+    { key: exports.PERMISSIONS.DASHBOARD_VIEW, group: "Dashboard", description: "View dashboard statistics" },
+    { key: exports.PERMISSIONS.USER_VIEW, group: "User Management", description: "View the list of users" },
+    { key: exports.PERMISSIONS.USER_CREATE, group: "User Management", description: "Create new users" },
+    { key: exports.PERMISSIONS.USER_UPDATE_ROLE, group: "User Management", description: "Change a user's assigned role" },
+    { key: exports.PERMISSIONS.USER_RESET_PASSWORD, group: "User Management", description: "Reset a user's password" },
+    { key: exports.PERMISSIONS.USER_DELETE, group: "User Management", description: "Delete a user" },
+    { key: exports.PERMISSIONS.ROLE_VIEW, group: "Role Management", description: "View the list of roles and the permission catalogue" },
+    { key: exports.PERMISSIONS.ROLE_CREATE, group: "Role Management", description: "Create new roles from the predefined permission catalogue" },
+];
+exports.ALL_PERMISSION_KEYS = exports.PERMISSION_CATALOGUE.map((entry) => entry.key);
+const DATA_PLANE_PERMISSIONS = [
+    exports.PERMISSIONS.DB_VIEW,
+    exports.PERMISSIONS.DB_CREATE,
+    exports.PERMISSIONS.DB_DELETE,
+    exports.PERMISSIONS.DB_EXPORT,
+    exports.PERMISSIONS.DB_IMPORT,
+    exports.PERMISSIONS.COLLECTION_VIEW,
+    exports.PERMISSIONS.COLLECTION_CREATE,
+    exports.PERMISSIONS.COLLECTION_DELETE,
+    exports.PERMISSIONS.DOCUMENT_VIEW,
+    exports.PERMISSIONS.DOCUMENT_QUERY,
+    exports.PERMISSIONS.DOCUMENT_CREATE,
+    exports.PERMISSIONS.DOCUMENT_UPDATE,
+    exports.PERMISSIONS.DOCUMENT_DELETE,
+    exports.PERMISSIONS.DOCUMENT_AGGREGATE,
+    exports.PERMISSIONS.DASHBOARD_VIEW,
+];
+const VIEW_ONLY_PERMISSIONS = [
+    exports.PERMISSIONS.DB_VIEW,
+    exports.PERMISSIONS.COLLECTION_VIEW,
+    exports.PERMISSIONS.DOCUMENT_VIEW,
+    exports.PERMISSIONS.DOCUMENT_QUERY,
+    exports.PERMISSIONS.DOCUMENT_AGGREGATE,
+    exports.PERMISSIONS.DASHBOARD_VIEW,
+];
+exports.SUPER_ADMIN_ROLE = "Super Admin";
+exports.ADMIN_ROLE = "Admin";
+exports.VIEW_ROLE = "View";
+exports.PREDEFINED_ROLES = [
+    { roleName: exports.SUPER_ADMIN_ROLE, permissions: exports.ALL_PERMISSION_KEYS },
+    { roleName: exports.ADMIN_ROLE, permissions: DATA_PLANE_PERMISSIONS },
+    { roleName: exports.VIEW_ROLE, permissions: VIEW_ONLY_PERMISSIONS },
+];
+exports.RESERVED_DB_NAME = "config";
+/** The `config` database backs the RBAC system and must never be reachable through the generic Database/Collection/Operation routes. */
+function isReservedDatabaseName(name) {
+    return typeof name === "string" && name.toLowerCase() === exports.RESERVED_DB_NAME;
+}
+exports.CONFIG_USERS_COLLECTION = "users";
+exports.CONFIG_ROLES_COLLECTION = "roles";
+exports.CONFIG_PERMISSIONS_COLLECTION = "permissions";
+exports.DEFAULT_ADMIN_USERNAME = "admin";
+exports.DEFAULT_ADMIN_PASSWORD = "admin";
+exports.SESSION_COOKIE_NAME = "axiodb_session";
+exports.SESSION_TTL_MS = 24 * 60 * 60 * 1000; // 24 hours
+exports.SESSION_SWEEP_INTERVAL_MS = 5 * 60 * 1000; // 5 minutes
+//# sourceMappingURL=Permissions.js.map

package/lib/config/Keys/Permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Permissions.js","sourceRoot":"","sources":["../../../source/config/Keys/Permissions.ts"],"names":[],"mappings":";AAAA,wFAAwF;;;;AAE3E,QAAA,WAAW,GAAG;IACzB,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;IAEtB,eAAe,EAAE,iBAAiB;IAClC,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;IAEtC,aAAa,EAAE,eAAe;IAC9B,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,iBAAiB;IAClC,eAAe,EAAE,iBAAiB;IAClC,eAAe,EAAE,iBAAiB;IAClC,kBAAkB,EAAE,oBAAoB;IAExC,cAAc,EAAE,gBAAgB;IAEhC,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;IAC1B,gBAAgB,EAAE,kBAAkB;IACpC,mBAAmB,EAAE,qBAAqB;IAC1C,WAAW,EAAE,aAAa;IAE1B,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;CAClB,CAAC;AAUE,QAAA,oBAAoB,GAA+B;IAC9D,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,0DAA0D,EAAE;IACxH,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,sBAAsB,EAAE;IACtF,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAClF,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,2CAA2C,EAAE;IAC3G,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,6CAA6C,EAAE;IAE7G,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,eAAe,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,oCAAoC,EAAE;IAC5G,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,wBAAwB,EAAE;IAClG,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE;IAE9F,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,oCAAoC,EAAE;IACxG,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,8BAA8B,EAAE;IACnG,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC5F,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,2BAA2B,EAAE;IACjG,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE;IACxF,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,kBAAkB,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,2BAA2B,EAAE;IAEpG,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,2BAA2B,EAAE;IAEjG,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,wBAAwB,EAAE;IAC/F,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAC3F,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,+BAA+B,EAAE;IAC7G,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,mBAAmB,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,yBAAyB,EAAE;IAC1G,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,eAAe,EAAE;IAExF,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,qDAAqD,EAAE;IAC5H,EAAE,GAAG,EAAE,QAAA,WAAW,CAAC,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,2DAA2D,EAAE;CACrI,CAAC;AAEW,QAAA,mBAAmB,GAAa,QAAA,oBAAoB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAE5F,MAAM,sBAAsB,GAAa;IACvC,QAAA,WAAW,CAAC,OAAO;IACnB,QAAA,WAAW,CAAC,SAAS;IACrB,QAAA,WAAW,CAAC,SAAS;IACrB,QAAA,WAAW,CAAC,SAAS;IACrB,QAAA,WAAW,CAAC,SAAS;IACrB,QAAA,WAAW,CAAC,eAAe;IAC3B,QAAA,WAAW,CAAC,iBAAiB;IAC7B,QAAA,WAAW,CAAC,iBAAiB;IAC7B,QAAA,WAAW,CAAC,aAAa;IACzB,QAAA,WAAW,CAAC,cAAc;IAC1B,QAAA,WAAW,CAAC,eAAe;IAC3B,QAAA,WAAW,CAAC,eAAe;IAC3B,QAAA,WAAW,CAAC,eAAe;IAC3B,QAAA,WAAW,CAAC,kBAAkB;IAC9B,QAAA,WAAW,CAAC,cAAc;CAC3B,CAAC;AAEF,MAAM,qBAAqB,GAAa;IACtC,QAAA,WAAW,CAAC,OAAO;IACnB,QAAA,WAAW,CAAC,eAAe;IAC3B,QAAA,WAAW,CAAC,aAAa;IACzB,QAAA,WAAW,CAAC,cAAc;IAC1B,QAAA,WAAW,CAAC,kBAAkB;IAC9B,QAAA,WAAW,CAAC,cAAc;CAC3B,CAAC;AAEW,QAAA,gBAAgB,GAAG,aAAa,CAAC;AACjC,QAAA,UAAU,GAAG,OAAO,CAAC;AACrB,QAAA,SAAS,GAAG,MAAM,CAAC;AAEnB,QAAA,gBAAgB,GAAkD;IAC7E,EAAE,QAAQ,EAAE,QAAA,gBAAgB,EAAE,WAAW,EAAE,QAAA,mBAAmB,EAAE;IAChE,EAAE,QAAQ,EAAE,QAAA,UAAU,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC7D,EAAE,QAAQ,EAAE,QAAA,SAAS,EAAE,WAAW,EAAE,qBAAqB,EAAE;CAC5D,CAAC;AAEW,QAAA,gBAAgB,GAAG,QAAQ,CAAC;AAEzC,wIAAwI;AACxI,gCAAuC,IAAY;IACjD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,QAAA,gBAAgB,CAAC;AAC7E,CAAC;AAEY,QAAA,uBAAuB,GAAG,OAAO,CAAC;AAClC,QAAA,uBAAuB,GAAG,OAAO,CAAC;AAClC,QAAA,6BAA6B,GAAG,aAAa,CAAC;AAE9C,QAAA,sBAAsB,GAAG,OAAO,CAAC;AACjC,QAAA,sBAAsB,GAAG,OAAO,CAAC;AAEjC,QAAA,mBAAmB,GAAG,gBAAgB,CAAC;AACvC,QAAA,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW;AACjD,QAAA,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY"}

package/lib/server/config/keys.d.ts

@@ -9,7 +9,7 @@ export declare enum ServerKeys {
     DEFAULT_KEY_ROUNDS = 1
 }
 export declare const CORS_CONFIG: {
-    ORIGIN: string;
+    ORIGIN: string[];
     METHODS: string[];
     ALLOWED_HEADERS: string[];
     EXPOSED_HEADERS: string[];
@@ -18,7 +18,7 @@ export declare const CORS_CONFIG: {
 };
 export declare const staticPath: string;
 interface MainRoutesInterface {
-    method: "GET" | "POST" | "PUT" | "DELETE";
+    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
     path: string;
     description: string;
     payload?: Record<string, any>;

package/lib/server/config/keys.js

@@ -18,8 +18,12 @@ var ServerKeys;
     ServerKeys[ServerKeys["DEFAULT_KEY_ROUNDS"] = 1] = "DEFAULT_KEY_ROUNDS";
 })(ServerKeys || (exports.ServerKeys = ServerKeys = {}));
 // Config for CORS
+// NOTE: ORIGIN cannot be "*" while ALLOW_CREDENTIALS is true - browsers reject
+// wildcard origins on credentialed (cookie-bearing) requests. 5173 is the GUI's
+// Vite dev server; 27018 is where the built GUI is served from in production
+// (same-origin there, so CORS doesn't matter for that case).
 exports.CORS_CONFIG = {
-    ORIGIN: "*",
+    ORIGIN: ["http://localhost:5173", "http://localhost:27018"],
     METHODS: ["GET", "HEAD", "PUT", "PATCH", "POST", "DELETE"],
     ALLOWED_HEADERS: ["Content-Type", "Authorization"],
     EXPOSED_HEADERS: ["Content-Length", "X-Requested-With"],
@@ -195,6 +199,84 @@ exports.AvailableRoutes = [
             },
         ],
     },
+    {
+        groupName: "Authentication",
+        description: "Login, session, and self-service password endpoints",
+        Paths: [
+            {
+                method: "POST",
+                path: "/api/auth/login",
+                description: "Authenticate with username/password and start a session",
+                payload: { username: "string", password: "string" },
+            },
+            {
+                method: "POST",
+                path: "/api/auth/logout",
+                description: "End the current session",
+            },
+            {
+                method: "GET",
+                path: "/api/auth/me",
+                description: "Get the currently authenticated user's role and permissions",
+            },
+            {
+                method: "PATCH",
+                path: "/api/auth/change-password",
+                description: "Change the current user's own password",
+                payload: { currentPassword: "string", newPassword: "string" },
+            },
+        ],
+    },
+    {
+        groupName: "User & Role Management",
+        description: "Super Admin-only endpoints for managing users and roles",
+        Paths: [
+            {
+                method: "GET",
+                path: "/api/auth/users",
+                description: "List all users",
+            },
+            {
+                method: "POST",
+                path: "/api/auth/users",
+                description: "Create a new user",
+                payload: { username: "string", password: "string", role: "string" },
+            },
+            {
+                method: "PATCH",
+                path: "/api/auth/users/:username/role",
+                description: "Change a user's assigned role",
+                payload: { role: "string" },
+            },
+            {
+                method: "PATCH",
+                path: "/api/auth/users/:username/reset-password",
+                description: "Reset a user's password (forces change on next login)",
+                payload: { newPassword: "string" },
+            },
+            {
+                method: "DELETE",
+                path: "/api/auth/users/:username",
+                description: "Delete a user",
+            },
+            {
+                method: "GET",
+                path: "/api/auth/roles",
+                description: "List all roles",
+            },
+            {
+                method: "POST",
+                path: "/api/auth/roles",
+                description: "Create a new role from the predefined permission catalogue",
+                payload: { roleName: "string", permissions: "array" },
+            },
+            {
+                method: "GET",
+                path: "/api/auth/roles/permissions",
+                description: "List the full predefined permission catalogue",
+            },
+        ],
+    },
 ];
 exports.AuthorInfo = {
     name: "Ankan Saha",

package/lib/server/config/keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../source/server/config/keys.ts"],"names":[],"mappings":";;;;;;AAAA,uDAAuD;AACvD,gDAAwB;AAExB,IAAY,UASX;AATD,WAAY,UAAU;IACpB,+CAAY,CAAA;IACZ,mCAAqB,CAAA;IACrB,wCAA0B,CAAA;IAC1B,kDAAoC,CAAA;IACpC,oDAAsC,CAAA;IACtC,uEAAyD,CAAA;IACzD,iDAAwB,IAAI,CAAC,GAAG,EAAE,2BAAA,CAAA;IAClC,uEAAsB,CAAA;AACxB,CAAC,EATW,UAAU,aAAV,UAAU,GAAV,UAAU,QASrB;AAED,kBAAkB;AACL,QAAA,WAAW,GAAG;IACzB,MAAM,EAAE,GAAG;IACX,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;IAC1D,eAAe,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;IAClD,eAAe,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;IACvD,OAAO,EAAE,KAAK,EAAE,sBAAsB;IACtC,iBAAiB,EAAE,IAAI;CACxB,CAAC;AAEW,QAAA,UAAU,GAAW,cAAI,CAAC,OAAO,CAC5C,SAAS,EACT,uBAAuB,CACxB,CAAC;AAcF,SAAS;AACI,QAAA,eAAe,GAA0B;IACpD;QACE,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,uBAAuB;QACpC,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,2CAA2C;aACzD;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,+CAA+C;aAC7D;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,+BAA+B;aAC7C;SACF;KACF;IACD;QACE,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,+BAA+B;QAC5C,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,oBAAoB;gBAC1B,WAAW,EAAE,6BAA6B;aAC3C;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,0BAA0B;gBAChC,WAAW,EAAE,uBAAuB;gBACpC,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;iBACf;aACF;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,0BAA0B;gBAChC,WAAW,EAAE,mBAAmB;gBAChC,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;iBACf;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,iCAAiC;gBACvC,WAAW,EAAE,wCAAwC;aACtD;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,0BAA0B;gBAChC,WAAW,EAAE,0CAA0C;gBACvD,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM;iBACb;aACF;SACF;KACF;IACD;QACE,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,iCAAiC;QAC9C,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,mCAAmC;gBACzC,WAAW,EAAE,+BAA+B;aAC7C;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,oCAAoC;gBAC1C,WAAW,EAAE,yBAAyB;gBACtC,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,cAAc,EAAE,QAAQ;oBACxB,MAAM,EAAE,SAAS;oBACjB,GAAG,EAAE,QAAQ;iBACd;aACF;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,0DAA0D;gBAChE,WAAW,EAAE,qBAAqB;aACnC;SACF;KACF;IACD;QACE,SAAS,EAAE,iBAAiB;QAC5B,WAAW,EAAE,2BAA2B;QACxC,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,qCAAqC;gBAClD,IAAI,EAAE,gDAAgD;aACvD;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,8CAA8C;gBAC3D,IAAI,EAAE,yDAAyD;gBAC/D,OAAO,EAAE;oBACP,KAAK,EAAE,QAAQ;iBAChB;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,gDAAgD;gBAC7D,IAAI,EAAE,4DAA4D;aACnE;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,uCAAuC;gBACpD,IAAI,EAAE,8CAA8C;gBACpD,OAAO,EAAE;oBACP,QAAQ,EAAE,iCAAiC;iBAC5C;aACF;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,uCAAuC;gBACpD,IAAI,EAAE,mDAAmD;gBACzD,OAAO,EAAE;oBACP,SAAS,EAAE,0CAA0C;iBACtD;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,mDAAmD;gBAChE,IAAI,EAAE,+DAA+D;gBACrE,OAAO,EAAE;oBACP,QAAQ,EAAE,iCAAiC;iBAC5C;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,sDAAsD;gBACnE,IAAI,EAAE,8DAA8D;gBACpE,OAAO,EAAE;oBACP,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE,QAAQ;iBACjB;aACF;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,mDAAmD;gBAChE,IAAI,EAAE,+DAA+D;aACtE;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,sDAAsD;gBACnE,IAAI,EAAE,yEAAyE;gBAC/E,OAAO,EAAE;oBACP,KAAK,EAAE,QAAQ;iBAChB;aACF;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EACT,gFAAgF;gBAClF,IAAI,EAAE,iDAAiD;gBACvD,OAAO,EAAE;oBACP,WAAW,EAAE,OAAO;iBACrB;aACF;SACF;KACF;CACF,CAAC;AAWW,QAAA,UAAU,GAAmB;IACxC,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,mBAAmB;IAChC,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,6BAA6B;IACpC,QAAQ,EAAE,2CAA2C;IACrD,MAAM,EAAE,8BAA8B;CACvC,CAAC"}
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../source/server/config/keys.ts"],"names":[],"mappings":";;;;;;AAAA,uDAAuD;AACvD,gDAAwB;AAExB,IAAY,UASX;AATD,WAAY,UAAU;IACpB,+CAAY,CAAA;IACZ,mCAAqB,CAAA;IACrB,wCAA0B,CAAA;IAC1B,kDAAoC,CAAA;IACpC,oDAAsC,CAAA;IACtC,uEAAyD,CAAA;IACzD,iDAAwB,IAAI,CAAC,GAAG,EAAE,2BAAA,CAAA;IAClC,uEAAsB,CAAA;AACxB,CAAC,EATW,UAAU,aAAV,UAAU,GAAV,UAAU,QASrB;AAED,kBAAkB;AAClB,+EAA+E;AAC/E,gFAAgF;AAChF,6EAA6E;AAC7E,6DAA6D;AAChD,QAAA,WAAW,GAAG;IACzB,MAAM,EAAE,CAAC,uBAAuB,EAAE,wBAAwB,CAAC;IAC3D,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;IAC1D,eAAe,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;IAClD,eAAe,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;IACvD,OAAO,EAAE,KAAK,EAAE,sBAAsB;IACtC,iBAAiB,EAAE,IAAI;CACxB,CAAC;AAEW,QAAA,UAAU,GAAW,cAAI,CAAC,OAAO,CAC5C,SAAS,EACT,uBAAuB,CACxB,CAAC;AAcF,SAAS;AACI,QAAA,eAAe,GAA0B;IACpD;QACE,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,uBAAuB;QACpC,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,2CAA2C;aACzD;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,+CAA+C;aAC7D;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,+BAA+B;aAC7C;SACF;KACF;IACD;QACE,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,+BAA+B;QAC5C,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,oBAAoB;gBAC1B,WAAW,EAAE,6BAA6B;aAC3C;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,0BAA0B;gBAChC,WAAW,EAAE,uBAAuB;gBACpC,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;iBACf;aACF;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,0BAA0B;gBAChC,WAAW,EAAE,mBAAmB;gBAChC,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;iBACf;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,iCAAiC;gBACvC,WAAW,EAAE,wCAAwC;aACtD;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,0BAA0B;gBAChC,WAAW,EAAE,0CAA0C;gBACvD,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM;iBACb;aACF;SACF;KACF;IACD;QACE,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,iCAAiC;QAC9C,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,mCAAmC;gBACzC,WAAW,EAAE,+BAA+B;aAC7C;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,oCAAoC;gBAC1C,WAAW,EAAE,yBAAyB;gBACtC,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,cAAc,EAAE,QAAQ;oBACxB,MAAM,EAAE,SAAS;oBACjB,GAAG,EAAE,QAAQ;iBACd;aACF;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,0DAA0D;gBAChE,WAAW,EAAE,qBAAqB;aACnC;SACF;KACF;IACD;QACE,SAAS,EAAE,iBAAiB;QAC5B,WAAW,EAAE,2BAA2B;QACxC,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,qCAAqC;gBAClD,IAAI,EAAE,gDAAgD;aACvD;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,8CAA8C;gBAC3D,IAAI,EAAE,yDAAyD;gBAC/D,OAAO,EAAE;oBACP,KAAK,EAAE,QAAQ;iBAChB;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,gDAAgD;gBAC7D,IAAI,EAAE,4DAA4D;aACnE;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,uCAAuC;gBACpD,IAAI,EAAE,8CAA8C;gBACpD,OAAO,EAAE;oBACP,QAAQ,EAAE,iCAAiC;iBAC5C;aACF;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,uCAAuC;gBACpD,IAAI,EAAE,mDAAmD;gBACzD,OAAO,EAAE;oBACP,SAAS,EAAE,0CAA0C;iBACtD;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,mDAAmD;gBAChE,IAAI,EAAE,+DAA+D;gBACrE,OAAO,EAAE;oBACP,QAAQ,EAAE,iCAAiC;iBAC5C;aACF;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,sDAAsD;gBACnE,IAAI,EAAE,8DAA8D;gBACpE,OAAO,EAAE;oBACP,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE,QAAQ;iBACjB;aACF;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,mDAAmD;gBAChE,IAAI,EAAE,+DAA+D;aACtE;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,sDAAsD;gBACnE,IAAI,EAAE,yEAAyE;gBAC/E,OAAO,EAAE;oBACP,KAAK,EAAE,QAAQ;iBAChB;aACF;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,WAAW,EACT,gFAAgF;gBAClF,IAAI,EAAE,iDAAiD;gBACvD,OAAO,EAAE;oBACP,WAAW,EAAE,OAAO;iBACrB;aACF;SACF;KACF;IACD;QACE,SAAS,EAAE,gBAAgB;QAC3B,WAAW,EAAE,qDAAqD;QAClE,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,yDAAyD;gBACtE,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE;aACpD;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,kBAAkB;gBACxB,WAAW,EAAE,yBAAyB;aACvC;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,cAAc;gBACpB,WAAW,EAAE,6DAA6D;aAC3E;YACD;gBACE,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,2BAA2B;gBACjC,WAAW,EAAE,wCAAwC;gBACrD,OAAO,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE;aAC9D;SACF;KACF;IACD;QACE,SAAS,EAAE,wBAAwB;QACnC,WAAW,EAAE,yDAAyD;QACtE,KAAK,EAAE;YACL;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,gBAAgB;aAC9B;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,mBAAmB;gBAChC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;aACpE;YACD;gBACE,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,gCAAgC;gBACtC,WAAW,EAAE,+BAA+B;gBAC5C,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC5B;YACD;gBACE,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,0CAA0C;gBAChD,WAAW,EAAE,uDAAuD;gBACpE,OAAO,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE;aACnC;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,2BAA2B;gBACjC,WAAW,EAAE,eAAe;aAC7B;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,gBAAgB;aAC9B;YACD;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,4DAA4D;gBACzE,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE;aACtD;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,6BAA6B;gBACnC,WAAW,EAAE,+CAA+C;aAC7D;SACF;KACF;CACF,CAAC;AAWW,QAAA,UAAU,GAAmB;IACxC,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,mBAAmB;IAChC,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,6BAA6B;IACpC,QAAQ,EAAE,2CAA2C;IACrD,MAAM,EAAE,8BAA8B;CACvC,CAAC"}