node-opcua-role-set-server 2.183.0 → 2.184.0

package/dist/install_user_management.js

@@ -1,14 +1,11 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.installUserManagement = installUserManagement;
-const node_opcua_constants_1 = require("node-opcua-constants");
-const node_opcua_role_set_common_1 = require("node-opcua-role-set-common");
-const node_opcua_status_code_1 = require("node-opcua-status-code");
-const node_opcua_types_1 = require("node-opcua-types");
-const node_opcua_variant_1 = require("node-opcua-variant");
-const audit_js_1 = require("./audit.js");
-const bind_user_management_js_1 = require("./bind_user_management.js");
-const harden_js_1 = require("./harden.js");
+import { MethodIds, ObjectIds, VariableIds } from "node-opcua-constants";
+import { ArchiveStore, InMemoryUserManagementStore } from "node-opcua-role-set-common";
+import { StatusCodes } from "node-opcua-status-code";
+import { Range, UserManagementDataType, UserNameIdentityToken } from "node-opcua-types";
+import { DataType, VariantArrayType } from "node-opcua-variant";
+import { raiseAuditMethodEvent } from "./audit.js";
+import { makeAddUserHandler, makeChangePasswordHandler, makeModifyUserHandler, makeRemoveUserHandler } from "./bind_user_management.js";
+import { hardenAdminOnly, hardenEncryptedOnly } from "./harden.js";
 /** PasswordOptionsMask bit values (OPC 10000-18 §5.2.2). */
 const PasswordOptions = {
     RequiresUpperCaseCharacters: 1 << 5,
@@ -30,7 +27,7 @@ function makeSessionCloser(engine) {
         // snapshot first: closeSession mutates the engine's session map
         for (const session of getSessions.call(engine)) {
             const token = session.userIdentityToken;
-            if (token instanceof node_opcua_types_1.UserNameIdentityToken && token.userName === userName) {
+            if (token instanceof UserNameIdentityToken && token.userName === userName) {
                 closeSession.call(engine, session.authenticationToken, /* deleteSubscriptions */ true, "Terminated");
                 closed += 1;
             }
@@ -57,22 +54,22 @@ function passwordOptionsMask(policy) {
  * available (the standard nodeset must be loaded so the `UserManagement`
  * Object exists).
  */
-async function installUserManagement(server, options) {
+export async function installUserManagement(server, options) {
     const addressSpace = server.engine.addressSpace;
     if (!addressSpace) {
         throw new Error("installUserManagement: address space is not available. Call this after server.start().");
     }
-    const userManagement = addressSpace.findNode(node_opcua_constants_1.ObjectIds.UserManagement);
+    const userManagement = addressSpace.findNode(ObjectIds.UserManagement);
     if (!userManagement) {
         throw new Error("installUserManagement: UserManagement Object (i=24290) not found in address space.");
     }
     const policy = options?.policy ?? {};
-    const store = options?.store ?? new node_opcua_role_set_common_1.InMemoryUserManagementStore(policy);
+    const store = options?.store ?? new InMemoryUserManagementStore(policy);
     // Consolidated-archive coordination: hydrate persisted users (salted hashes)
     // and register the `users` section so a shared coordinator persists them
     // alongside the role configuration.
     const persistence = options?.persistence ??
-        (options?.persistencePath ? new node_opcua_role_set_common_1.ArchiveStore(options.persistencePath, { secret: options.persistenceSecret }) : undefined);
+        (options?.persistencePath ? new ArchiveStore(options.persistencePath, { secret: options.persistenceSecret }) : undefined);
     if (persistence && store.importUsers) {
         const archive = await persistence.load();
         if (archive?.users)
@@ -82,12 +79,12 @@ async function installUserManagement(server, options) {
     if (persistence && exportUsers) {
         persistence.setUsersProvider(() => exportUsers());
     }
-    const usersVar = addressSpace.findNode(node_opcua_constants_1.VariableIds.UserManagement_Users);
+    const usersVar = addressSpace.findNode(VariableIds.UserManagement_Users);
     function refreshUsers() {
         usersVar?.setValueFromSource({
-            dataType: node_opcua_variant_1.DataType.ExtensionObject,
-            arrayType: node_opcua_variant_1.VariantArrayType.Array,
-            value: store.getUsers().map((u) => new node_opcua_types_1.UserManagementDataType({
+            dataType: DataType.ExtensionObject,
+            arrayType: VariantArrayType.Array,
+            value: store.getUsers().map((u) => new UserManagementDataType({
                 userName: u.userName,
                 userConfiguration: u.userConfiguration,
                 description: u.description
@@ -108,7 +105,7 @@ async function installUserManagement(server, options) {
             ? (userName) => {
                 const closed = closeSessionsForUser(userName);
                 if (closed > 0) {
-                    (0, audit_js_1.raiseAuditMethodEvent)(serverObject, "AuditUpdateMethodEventType", {
+                    raiseAuditMethodEvent(serverObject, "AuditUpdateMethodEventType", {
                         sourceNode: userManagement.nodeId,
                         sourceName: "Method/UserDeactivated",
                         clientUserId: userName,
@@ -119,12 +116,12 @@ async function installUserManagement(server, options) {
             }
             : undefined,
         onAudit: (audit) => {
-            (0, audit_js_1.raiseAuditMethodEvent)(serverObject, "AuditUpdateMethodEventType", {
+            raiseAuditMethodEvent(serverObject, "AuditUpdateMethodEventType", {
                 sourceNode: userManagement.nodeId,
                 sourceName: `Method/${audit.method}`,
                 methodId: audit.methodNodeId,
                 clientUserId: audit.callerUserName,
-                status: audit.statusCode === node_opcua_status_code_1.StatusCodes.Good,
+                status: audit.statusCode === StatusCodes.Good,
                 message: `${audit.method}('${audit.targetUserName}') by '${audit.callerUserName}' → ${audit.statusCode.name}`
                 // NOTE: inputArguments deliberately omitted — they contain passwords
             });
@@ -134,19 +131,19 @@ async function installUserManagement(server, options) {
     // Users list, which reveals account names) are SecurityAdmin-only over an
     // encrypted channel; ChangePassword stays callable by any authenticated user
     // but still requires encryption (§4.4.1 / §5.2.8).
-    (0, harden_js_1.hardenAdminOnly)(bindMethod(addressSpace, node_opcua_constants_1.MethodIds.UserManagement_AddUser, (0, bind_user_management_js_1.makeAddUserHandler)(methodOptions)));
-    (0, harden_js_1.hardenAdminOnly)(bindMethod(addressSpace, node_opcua_constants_1.MethodIds.UserManagement_ModifyUser, (0, bind_user_management_js_1.makeModifyUserHandler)(methodOptions)));
-    (0, harden_js_1.hardenAdminOnly)(bindMethod(addressSpace, node_opcua_constants_1.MethodIds.UserManagement_RemoveUser, (0, bind_user_management_js_1.makeRemoveUserHandler)(methodOptions)));
-    (0, harden_js_1.hardenEncryptedOnly)(bindMethod(addressSpace, node_opcua_constants_1.MethodIds.UserManagement_ChangePassword, (0, bind_user_management_js_1.makeChangePasswordHandler)(methodOptions)));
-    (0, harden_js_1.hardenAdminOnly)(usersVar);
+    hardenAdminOnly(bindMethod(addressSpace, MethodIds.UserManagement_AddUser, makeAddUserHandler(methodOptions)));
+    hardenAdminOnly(bindMethod(addressSpace, MethodIds.UserManagement_ModifyUser, makeModifyUserHandler(methodOptions)));
+    hardenAdminOnly(bindMethod(addressSpace, MethodIds.UserManagement_RemoveUser, makeRemoveUserHandler(methodOptions)));
+    hardenEncryptedOnly(bindMethod(addressSpace, MethodIds.UserManagement_ChangePassword, makeChangePasswordHandler(methodOptions)));
+    hardenAdminOnly(usersVar);
     // Publish the password policy and the initial (empty) user list.
-    const lengthVar = addressSpace.findNode(node_opcua_constants_1.VariableIds.UserManagement_PasswordLength);
+    const lengthVar = addressSpace.findNode(VariableIds.UserManagement_PasswordLength);
     lengthVar?.setValueFromSource({
-        dataType: node_opcua_variant_1.DataType.ExtensionObject,
-        value: new node_opcua_types_1.Range({ low: policy.minLength ?? 0, high: policy.maxLength ?? 0 })
+        dataType: DataType.ExtensionObject,
+        value: new Range({ low: policy.minLength ?? 0, high: policy.maxLength ?? 0 })
     });
-    const optionsVar = addressSpace.findNode(node_opcua_constants_1.VariableIds.UserManagement_PasswordOptions);
-    optionsVar?.setValueFromSource({ dataType: node_opcua_variant_1.DataType.UInt32, value: passwordOptionsMask(policy) });
+    const optionsVar = addressSpace.findNode(VariableIds.UserManagement_PasswordOptions);
+    optionsVar?.setValueFromSource({ dataType: DataType.UInt32, value: passwordOptionsMask(policy) });
     refreshUsers();
     return { store };
 }

package/dist/install_user_management.js.map

@@ -1 +1 @@
-{"version":3,"file":"install_user_management.js","sourceRoot":"","sources":["../source/install_user_management.ts"],"names":[],"mappings":";;AAiIA,sDA8GC;AAnOD,+DAAyE;AAEzE,2EAKoC;AACpC,mEAAqD;AACrD,uDAAwF;AACxF,2DAAgE;AAChE,yCAAmD;AACnD,uEAMmC;AACnC,2CAAmE;AAEnE,4DAA4D;AAC5D,MAAM,eAAe,GAAG;IACpB,2BAA2B,EAAE,CAAC,IAAI,CAAC;IACnC,2BAA2B,EAAE,CAAC,IAAI,CAAC;IACnC,uBAAuB,EAAE,CAAC,IAAI,CAAC;IAC/B,yBAAyB,EAAE,CAAC,IAAI,CAAC;CAC3B,CAAC;AAoDX;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,MAA0C;IACjE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAC7C,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,CAAC,QAAgB,EAAU,EAAE;QAChC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,gEAAgE;QAChE,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,iBAAiB,CAAC;YACxC,IAAI,KAAK,YAAY,wCAAqB,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACxE,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;gBACrG,MAAM,IAAI,CAAC,CAAC;YAChB,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC,CAAC;AACN,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAsB;IAC/C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,MAAM,CAAC,gBAAgB;QAAE,IAAI,IAAI,eAAe,CAAC,2BAA2B,CAAC;IACjF,IAAI,MAAM,CAAC,gBAAgB;QAAE,IAAI,IAAI,eAAe,CAAC,2BAA2B,CAAC;IACjF,IAAI,MAAM,CAAC,YAAY;QAAE,IAAI,IAAI,eAAe,CAAC,uBAAuB,CAAC;IACzE,IAAI,MAAM,CAAC,cAAc;QAAE,IAAI,IAAI,eAAe,CAAC,yBAAyB,CAAC;IAC7E,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,qBAAqB,CACvC,MAAgC,EAChC,OAAsC;IAEtC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;IAChD,IAAI,CAAC,YAAY,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAC9G,CAAC;IAED,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,CAAC,gCAAS,CAAC,cAAc,CAAoB,CAAC;IAC1F,IAAI,CAAC,cAAc,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IAC1G,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI,wDAA2B,CAAC,MAAM,CAAC,CAAC;IAExE,6EAA6E;IAC7E,yEAAyE;IACzE,oCAAoC;IACpC,MAAM,WAAW,GACb,OAAO,EAAE,WAAW;QACpB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,yCAAY,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9H,IAAI,WAAW,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK;YAAE,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;QAC7B,WAAW,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,kCAAW,CAAC,oBAAoB,CAAsB,CAAC;IAC9F,SAAS,YAAY;QACjB,QAAQ,EAAE,kBAAkB,CAAC;YACzB,QAAQ,EAAE,6BAAQ,CAAC,eAAe;YAClC,SAAS,EAAE,qCAAgB,CAAC,KAAK;YACjC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,GAAG,CACvB,CAAC,CAAC,EAAE,EAAE,CACF,IAAI,yCAAsB,CAAC;gBACvB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;gBACtC,WAAW,EAAE,CAAC,CAAC,WAAW;aAC7B,CAAC,CACT;SACJ,CAAC,CAAC;IACP,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,YAAY,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC;IAC9D,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,aAAa,GAA8B;QAC7C,KAAK;QACL,UAAU,EAAE,KAAK,IAAI,EAAE;YACnB,YAAY,EAAE,CAAC;YACf,MAAM,WAAW,EAAE,IAAI,EAAE,CAAC;QAC9B,CAAC;QACD,iBAAiB,EAAE,oBAAoB;YACnC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE;gBACT,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;gBAC9C,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;oBACb,IAAA,gCAAqB,EAAC,YAAY,EAAE,4BAA4B,EAAE;wBAC9D,UAAU,EAAE,cAAc,CAAC,MAAM;wBACjC,UAAU,EAAE,wBAAwB;wBACpC,YAAY,EAAE,QAAQ;wBACtB,MAAM,EAAE,IAAI;wBACZ,OAAO,EAAE,cAAc,MAAM,2CAA2C,QAAQ,GAAG;qBACtF,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YACH,CAAC,CAAC,SAAS;QACf,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACf,IAAA,gCAAqB,EAAC,YAAY,EAAE,4BAA4B,EAAE;gBAC9D,UAAU,EAAE,cAAc,CAAC,MAAM;gBACjC,UAAU,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;gBACpC,QAAQ,EAAE,KAAK,CAAC,YAAY;gBAC5B,YAAY,EAAE,KAAK,CAAC,cAAc;gBAClC,MAAM,EAAE,KAAK,CAAC,UAAU,KAAK,oCAAW,CAAC,IAAI;gBAC7C,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc,UAAU,KAAK,CAAC,cAAc,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE;gBAC7G,qEAAqE;aACxE,CAAC,CAAC;QACP,CAAC;KACJ,CAAC;IAEF,yEAAyE;IACzE,0EAA0E;IAC1E,6EAA6E;IAC7E,mDAAmD;IACnD,IAAA,2BAAe,EAAC,UAAU,CAAC,YAAY,EAAE,gCAAS,CAAC,sBAAsB,EAAE,IAAA,4CAAkB,EAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC/G,IAAA,2BAAe,EAAC,UAAU,CAAC,YAAY,EAAE,gCAAS,CAAC,yBAAyB,EAAE,IAAA,+CAAqB,EAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACrH,IAAA,2BAAe,EAAC,UAAU,CAAC,YAAY,EAAE,gCAAS,CAAC,yBAAyB,EAAE,IAAA,+CAAqB,EAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACrH,IAAA,+BAAmB,EACf,UAAU,CAAC,YAAY,EAAE,gCAAS,CAAC,6BAA6B,EAAE,IAAA,mDAAyB,EAAC,aAAa,CAAC,CAAC,CAC9G,CAAC;IACF,IAAA,2BAAe,EAAC,QAAQ,CAAC,CAAC;IAE1B,iEAAiE;IACjE,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,kCAAW,CAAC,6BAA6B,CAAsB,CAAC;IACxG,SAAS,EAAE,kBAAkB,CAAC;QAC1B,QAAQ,EAAE,6BAAQ,CAAC,eAAe;QAClC,KAAK,EAAE,IAAI,wBAAK,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;KAChF,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,kCAAW,CAAC,8BAA8B,CAAsB,CAAC;IAC1G,UAAU,EAAE,kBAAkB,CAAC,EAAE,QAAQ,EAAE,6BAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAElG,YAAY,EAAE,CAAC;IAEf,OAAO,EAAE,KAAK,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,UAAU,CACf,YAA2B,EAC3B,YAAoB,EACpB,OAA8C;IAE9C,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAoB,CAAC;IACtE,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC;AAClB,CAAC"}
+{"version":3,"file":"install_user_management.js","sourceRoot":"","sources":["../source/install_user_management.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEzE,OAAO,EACH,YAAY,EACZ,2BAA2B,EAG9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAEH,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,qBAAqB,EACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEnE,4DAA4D;AAC5D,MAAM,eAAe,GAAG;IACpB,2BAA2B,EAAE,CAAC,IAAI,CAAC;IACnC,2BAA2B,EAAE,CAAC,IAAI,CAAC;IACnC,uBAAuB,EAAE,CAAC,IAAI,CAAC;IAC/B,yBAAyB,EAAE,CAAC,IAAI,CAAC;CAC3B,CAAC;AAoDX;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,MAA0C;IACjE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAC7C,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,CAAC,QAAgB,EAAU,EAAE;QAChC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,gEAAgE;QAChE,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,iBAAiB,CAAC;YACxC,IAAI,KAAK,YAAY,qBAAqB,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACxE,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;gBACrG,MAAM,IAAI,CAAC,CAAC;YAChB,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC,CAAC;AACN,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAsB;IAC/C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,MAAM,CAAC,gBAAgB;QAAE,IAAI,IAAI,eAAe,CAAC,2BAA2B,CAAC;IACjF,IAAI,MAAM,CAAC,gBAAgB;QAAE,IAAI,IAAI,eAAe,CAAC,2BAA2B,CAAC;IACjF,IAAI,MAAM,CAAC,YAAY;QAAE,IAAI,IAAI,eAAe,CAAC,uBAAuB,CAAC;IACzE,IAAI,MAAM,CAAC,cAAc;QAAE,IAAI,IAAI,eAAe,CAAC,yBAAyB,CAAC;IAC7E,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACvC,MAAgC,EAChC,OAAsC;IAEtC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;IAChD,IAAI,CAAC,YAAY,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAC9G,CAAC;IAED,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAoB,CAAC;IAC1F,IAAI,CAAC,cAAc,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IAC1G,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI,2BAA2B,CAAC,MAAM,CAAC,CAAC;IAExE,6EAA6E;IAC7E,yEAAyE;IACzE,oCAAoC;IACpC,MAAM,WAAW,GACb,OAAO,EAAE,WAAW;QACpB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9H,IAAI,WAAW,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK;YAAE,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;QAC7B,WAAW,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,oBAAoB,CAAsB,CAAC;IAC9F,SAAS,YAAY;QACjB,QAAQ,EAAE,kBAAkB,CAAC;YACzB,QAAQ,EAAE,QAAQ,CAAC,eAAe;YAClC,SAAS,EAAE,gBAAgB,CAAC,KAAK;YACjC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,GAAG,CACvB,CAAC,CAAC,EAAE,EAAE,CACF,IAAI,sBAAsB,CAAC;gBACvB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;gBACtC,WAAW,EAAE,CAAC,CAAC,WAAW;aAC7B,CAAC,CACT;SACJ,CAAC,CAAC;IACP,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,YAAY,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC;IAC9D,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,aAAa,GAA8B;QAC7C,KAAK;QACL,UAAU,EAAE,KAAK,IAAI,EAAE;YACnB,YAAY,EAAE,CAAC;YACf,MAAM,WAAW,EAAE,IAAI,EAAE,CAAC;QAC9B,CAAC;QACD,iBAAiB,EAAE,oBAAoB;YACnC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE;gBACT,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;gBAC9C,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;oBACb,qBAAqB,CAAC,YAAY,EAAE,4BAA4B,EAAE;wBAC9D,UAAU,EAAE,cAAc,CAAC,MAAM;wBACjC,UAAU,EAAE,wBAAwB;wBACpC,YAAY,EAAE,QAAQ;wBACtB,MAAM,EAAE,IAAI;wBACZ,OAAO,EAAE,cAAc,MAAM,2CAA2C,QAAQ,GAAG;qBACtF,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YACH,CAAC,CAAC,SAAS;QACf,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACf,qBAAqB,CAAC,YAAY,EAAE,4BAA4B,EAAE;gBAC9D,UAAU,EAAE,cAAc,CAAC,MAAM;gBACjC,UAAU,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;gBACpC,QAAQ,EAAE,KAAK,CAAC,YAAY;gBAC5B,YAAY,EAAE,KAAK,CAAC,cAAc;gBAClC,MAAM,EAAE,KAAK,CAAC,UAAU,KAAK,WAAW,CAAC,IAAI;gBAC7C,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc,UAAU,KAAK,CAAC,cAAc,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE;gBAC7G,qEAAqE;aACxE,CAAC,CAAC;QACP,CAAC;KACJ,CAAC;IAEF,yEAAyE;IACzE,0EAA0E;IAC1E,6EAA6E;IAC7E,mDAAmD;IACnD,eAAe,CAAC,UAAU,CAAC,YAAY,EAAE,SAAS,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC/G,eAAe,CAAC,UAAU,CAAC,YAAY,EAAE,SAAS,CAAC,yBAAyB,EAAE,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACrH,eAAe,CAAC,UAAU,CAAC,YAAY,EAAE,SAAS,CAAC,yBAAyB,EAAE,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACrH,mBAAmB,CACf,UAAU,CAAC,YAAY,EAAE,SAAS,CAAC,6BAA6B,EAAE,yBAAyB,CAAC,aAAa,CAAC,CAAC,CAC9G,CAAC;IACF,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE1B,iEAAiE;IACjE,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,6BAA6B,CAAsB,CAAC;IACxG,SAAS,EAAE,kBAAkB,CAAC;QAC1B,QAAQ,EAAE,QAAQ,CAAC,eAAe;QAClC,KAAK,EAAE,IAAI,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;KAChF,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,8BAA8B,CAAsB,CAAC;IAC1G,UAAU,EAAE,kBAAkB,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAElG,YAAY,EAAE,CAAC;IAEf,OAAO,EAAE,KAAK,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,UAAU,CACf,YAA2B,EAC3B,YAAoB,EACpB,OAA8C;IAE9C,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAoB,CAAC;IACtE,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/role_set_resolver.d.ts

@@ -21,3 +21,4 @@ export declare class RoleSetResolver {
     constructor(store: IIdentityMappingStore, restrictionStore?: IRoleRestrictionStore | undefined);
     resolveRoles(userIdentityToken: AnyUserIdentityToken, context?: ResolutionContext): NodeId[];
 }
+//# sourceMappingURL=role_set_resolver.d.ts.map

package/dist/role_set_resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role_set_resolver.d.ts","sourceRoot":"","sources":["../source/role_set_resolver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EACR,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACpB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;GAQG;AACH,qBAAa,eAAe;IAEpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAFtC,YACqB,KAAK,EAAE,qBAAqB,EAC5B,gBAAgB,CAAC,EAAE,qBAAqB,YAAA,EACzD;IAEG,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAOlG;CACJ"}

package/dist/role_set_resolver.js

@@ -1,6 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RoleSetResolver = void 0;
 /**
  * Adapts an {@link IIdentityMappingStore} (and an optional
  * {@link IRoleRestrictionStore}) to the `IRoleResolver` contract so it can be
@@ -10,7 +7,7 @@ exports.RoleSetResolver = void 0;
  * restriction store is provided and a resolution context is available — the
  * Session's application/endpoint comply with the Role's restrictions.
  */
-class RoleSetResolver {
+export class RoleSetResolver {
     store;
     restrictionStore;
     constructor(store, restrictionStore) {
@@ -26,5 +23,4 @@ class RoleSetResolver {
         return roles.filter((roleId) => restrictionStore.complies(roleId, context));
     }
 }
-exports.RoleSetResolver = RoleSetResolver;
 //# sourceMappingURL=role_set_resolver.js.map

package/dist/role_set_resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"role_set_resolver.js","sourceRoot":"","sources":["../source/role_set_resolver.ts"],"names":[],"mappings":";;;AAcA;;;;;;;;GAQG;AACH,MAAa,eAAe;IAEH;IACA;IAFrB,YACqB,KAA4B,EAC5B,gBAAwC;QADxC,UAAK,GAAL,KAAK,CAAuB;QAC5B,qBAAgB,GAAhB,gBAAgB,CAAwB;IAC1D,CAAC;IAEG,YAAY,CAAC,iBAAuC,EAAE,OAA2B;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC/C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;CACJ;AAdD,0CAcC"}
+{"version":3,"file":"role_set_resolver.js","sourceRoot":"","sources":["../source/role_set_resolver.ts"],"names":[],"mappings":"AAcA;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAe;IAEH,KAAK;IACL,gBAAgB;IAFrC,YACqB,KAA4B,EAC5B,gBAAwC;qBADxC,KAAK;gCACL,gBAAgB;IAClC,CAAC;IAEG,YAAY,CAAC,iBAAuC,EAAE,OAA2B;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC/C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;CACJ"}

package/dist/security_checks.d.ts

@@ -23,3 +23,4 @@ export declare function checkSecurityAdminAccess(context: ISessionContext): Call
  * @returns a denial result, or `null` if the channel is acceptable.
  */
 export declare function checkEncryptedChannel(context: ISessionContext): CallMethodResultOptions | null;
+//# sourceMappingURL=security_checks.d.ts.map

package/dist/security_checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security_checks.d.ts","sourceRoot":"","sources":["../source/security_checks.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGrE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAIvE;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,eAAe,GAAG,uBAAuB,GAAG,IAAI,CAOjG;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG,uBAAuB,GAAG,IAAI,CAS9F"}

package/dist/security_checks.js

@@ -1,20 +1,16 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.checkSecurityAdminAccess = checkSecurityAdminAccess;
-exports.checkEncryptedChannel = checkEncryptedChannel;
-const node_opcua_nodeid_1 = require("node-opcua-nodeid");
-const node_opcua_role_set_common_1 = require("node-opcua-role-set-common");
-const node_opcua_status_code_1 = require("node-opcua-status-code");
-const node_opcua_types_1 = require("node-opcua-types");
+import { sameNodeId } from "node-opcua-nodeid";
+import { WellKnownRoleIds } from "node-opcua-role-set-common";
+import { StatusCodes } from "node-opcua-status-code";
+import { MessageSecurityMode } from "node-opcua-types";
 /**
  * Verify the calling session holds the SecurityAdmin role.
  * @returns a `Bad_UserAccessDenied` denial, or `null` if authorized.
  */
-function checkSecurityAdminAccess(context) {
+export function checkSecurityAdminAccess(context) {
     const roles = context.getCurrentUserRoles();
-    const hasSecurityAdmin = roles.some((r) => (0, node_opcua_nodeid_1.sameNodeId)(r, node_opcua_role_set_common_1.WellKnownRoleIds.SecurityAdmin));
+    const hasSecurityAdmin = roles.some((r) => sameNodeId(r, WellKnownRoleIds.SecurityAdmin));
     if (!hasSecurityAdmin) {
-        return { statusCode: node_opcua_status_code_1.StatusCodes.BadUserAccessDenied };
+        return { statusCode: StatusCodes.BadUserAccessDenied };
     }
     return null;
 }
@@ -28,13 +24,13 @@ function checkSecurityAdminAccess(context) {
  *
  * @returns a denial result, or `null` if the channel is acceptable.
  */
-function checkEncryptedChannel(context) {
+export function checkEncryptedChannel(context) {
     const securityMode = context.session?.channel?.securityMode;
     if (securityMode === undefined) {
         return null; // mode unknown (in-process) → cannot enforce
     }
-    if (securityMode !== node_opcua_types_1.MessageSecurityMode.SignAndEncrypt) {
-        return { statusCode: node_opcua_status_code_1.StatusCodes.BadSecurityModeInsufficient };
+    if (securityMode !== MessageSecurityMode.SignAndEncrypt) {
+        return { statusCode: StatusCodes.BadSecurityModeInsufficient };
     }
     return null;
 }

package/dist/security_checks.js.map

@@ -1 +1 @@
-{"version":3,"file":"security_checks.js","sourceRoot":"","sources":["../source/security_checks.ts"],"names":[],"mappings":";;AAkBA,4DAOC;AAYD,sDASC;AAtCD,yDAA+C;AAC/C,2EAA8D;AAE9D,mEAAqD;AACrD,uDAAuD;AAEvD;;;GAGG;AACH,SAAgB,wBAAwB,CAAC,OAAwB;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAC5C,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,8BAAU,EAAC,CAAC,EAAE,6CAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1F,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpB,OAAO,EAAE,UAAU,EAAE,oCAAW,CAAC,mBAAmB,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,qBAAqB,CAAC,OAAwB;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC;IAC5D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,CAAC,6CAA6C;IAC9D,CAAC;IACD,IAAI,YAAY,KAAK,sCAAmB,CAAC,cAAc,EAAE,CAAC;QACtD,OAAO,EAAE,UAAU,EAAE,oCAAW,CAAC,2BAA2B,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC"}
+{"version":3,"file":"security_checks.js","sourceRoot":"","sources":["../source/security_checks.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAwB;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAC5C,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1F,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpB,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,mBAAmB,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAwB;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC;IAC5D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,CAAC,6CAA6C;IAC9D,CAAC;IACD,IAAI,YAAY,KAAK,mBAAmB,CAAC,cAAc,EAAE,CAAC;QACtD,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,2BAA2B,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/dist/user_management_user_manager.d.ts

@@ -41,3 +41,4 @@ export interface IManagedUserManager {
  */
 export declare function createUserManager(userStore: IUserManagementStore, identityStore: IIdentityMappingStore): IManagedUserManager;
 export {};
+//# sourceMappingURL=user_management_user_manager.d.ts.map

package/dist/user_management_user_manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user_management_user_manager.d.ts","sourceRoot":"","sources":["../source/user_management_user_manager.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAc,KAAK,MAAM,EAAE,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,KAAK,EAAwB,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACpH,OAAO,EAAE,KAAK,UAAU,EAAe,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,KAAK,uBAAuB,EAAgD,MAAM,kBAAkB,CAAC;AAE9G,oFAAoF;AACpF,UAAU,WAAW;IACjB,YAAY,CAAC,IAAI,MAAM,CAAC;IACxB,sFAAsF;IACtF,sBAAsB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,2EAA2E;AAC3E,KAAK,iBAAiB,GAAG,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,YAAY,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;AAE7E,MAAM,WAAW,mBAAmB;IAChC;;;;OAIG;IACH,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC3G,uFAAuF;IACvF,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACzC;;;;OAIG;IACH,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,EAAE,CAAC;IAC9D;;;;OAIG;IACH,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IACpE,yEAAyE;IACzE,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CAC5D;AAID;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,oBAAoB,EAAE,aAAa,EAAE,qBAAqB,GAAG,mBAAmB,CAoD5H"}

package/dist/user_management_user_manager.js

@@ -1,6 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createUserManager = createUserManager;
 /**
  * @module node-opcua-role-set-server
  *
@@ -20,20 +17,20 @@ exports.createUserManager = createUserManager;
  * The server `userManager` invokes `isValidUser` with `this` bound to the
  * ServerSession, which is how the SessionId is captured (non-breaking).
  */
-const node_opcua_constants_1 = require("node-opcua-constants");
-const node_opcua_nodeid_1 = require("node-opcua-nodeid");
-const node_opcua_status_code_1 = require("node-opcua-status-code");
-const node_opcua_types_1 = require("node-opcua-types");
+import { WellKnownRoles } from "node-opcua-constants";
+import { makeNodeId } from "node-opcua-nodeid";
+import { StatusCodes } from "node-opcua-status-code";
+import { UserConfigurationMask, UserNameIdentityToken } from "node-opcua-types";
 const has = (mask, bit) => (mask & bit) === bit;
 /**
  * Create a server `userManager` backed by the given user store. Roles are
  * resolved from `identityStore` (a UserName identity rule per user); while a
  * user must change the password, only the Anonymous Role is granted.
  */
-function createUserManager(userStore, identityStore) {
+export function createUserManager(userStore, identityStore) {
     const lastAuthStatus = new Map();
     const statusBySession = new Map();
-    const anonymousOnly = () => [(0, node_opcua_nodeid_1.makeNodeId)(node_opcua_constants_1.WellKnownRoles.Anonymous)];
+    const anonymousOnly = () => [makeNodeId(WellKnownRoles.Anonymous)];
     return {
         lastAuthStatus,
         getSessionAuthStatus(sessionId) {
@@ -52,17 +49,17 @@ function createUserManager(userStore, identityStore) {
                 }
                 // flag the session so ActivateSession returns Good_PasswordChangeRequired
                 if (this) {
-                    this.passwordChangeRequired = result.statusCode === node_opcua_status_code_1.StatusCodes.GoodPasswordChangeRequired;
+                    this.passwordChangeRequired = result.statusCode === StatusCodes.GoodPasswordChangeRequired;
                 }
-                callback(null, result.statusCode === node_opcua_status_code_1.StatusCodes.Good || result.statusCode === node_opcua_status_code_1.StatusCodes.GoodPasswordChangeRequired);
+                callback(null, result.statusCode === StatusCodes.Good || result.statusCode === StatusCodes.GoodPasswordChangeRequired);
             }, (err) => callback(err instanceof Error ? err : new Error(String(err))));
         },
         getUserRoles(userName) {
             const user = userStore.getUsers().find((u) => u.userName === userName);
-            if (user && has(user.userConfiguration, node_opcua_types_1.UserConfigurationMask.MustChangePassword)) {
+            if (user && has(user.userConfiguration, UserConfigurationMask.MustChangePassword)) {
                 return anonymousOnly();
             }
-            const token = new node_opcua_types_1.UserNameIdentityToken({ userName });
+            const token = new UserNameIdentityToken({ userName });
             return identityStore.resolveRoles(token);
         },
         getIdentitiesForRole(role) {

package/dist/user_management_user_manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"user_management_user_manager.js","sourceRoot":"","sources":["../source/user_management_user_manager.ts"],"names":[],"mappings":";;AAmEA,8CAoDC;AAvHD;;;;;;;;;;;;;;;;;;GAkBG;AACH,+DAAsD;AACtD,yDAA6E;AAE7E,mEAAsE;AACtE,uDAA8G;AAqC9G,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,GAAW,EAAW,EAAE,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC;AAEzE;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,SAA+B,EAAE,aAAoC;IACnG,MAAM,cAAc,GAAG,IAAI,GAAG,EAAsB,CAAC;IACrD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtD,MAAM,aAAa,GAAG,GAAa,EAAE,CAAC,CAAC,IAAA,8BAAU,EAAC,qCAAc,CAAC,SAAS,CAAC,CAAC,CAAC;IAE7E,OAAO;QACH,cAAc;QAEd,oBAAoB,CAAC,SAAqB;YACtC,OAAO,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,gBAAgB,CAAoB,QAAgB,EAAE,QAAgB,EAAE,QAA2B;YAC/F,qEAAqE;YACrE,6BAA6B;YAC7B,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAC3C,CAAC,MAAM,EAAE,EAAE;gBACP,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;gBAChD,gEAAgE;gBAChE,uCAAuC;gBACvC,MAAM,SAAS,GAAG,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC;gBACzC,IAAI,SAAS,EAAE,CAAC;oBACZ,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;gBACjE,CAAC;gBACD,0EAA0E;gBAC1E,IAAI,IAAI,EAAE,CAAC;oBACP,IAAI,CAAC,sBAAsB,GAAG,MAAM,CAAC,UAAU,KAAK,oCAAW,CAAC,0BAA0B,CAAC;gBAC/F,CAAC;gBACD,QAAQ,CACJ,IAAI,EACJ,MAAM,CAAC,UAAU,KAAK,oCAAW,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,oCAAW,CAAC,0BAA0B,CACzG,CAAC;YACN,CAAC,EACD,CAAC,GAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAClF,CAAC;QACN,CAAC;QAED,YAAY,CAAC,QAAgB;YACzB,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YACvE,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,wCAAqB,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAChF,OAAO,aAAa,EAAE,CAAC;YAC3B,CAAC;YACD,MAAM,KAAK,GAAyB,IAAI,wCAAqB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5E,OAAO,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,oBAAoB,CAAC,IAAY;YAC7B,wEAAwE;YACxE,iEAAiE;YACjE,OAAO,aAAa,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"user_management_user_manager.js","sourceRoot":"","sources":["../source/user_management_user_manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAgC,MAAM,mBAAmB,CAAC;AAE7E,OAAO,EAAmB,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAgC,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAqC9G,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,GAAW,EAAW,EAAE,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC;AAEzE;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAA+B,EAAE,aAAoC;IACnG,MAAM,cAAc,GAAG,IAAI,GAAG,EAAsB,CAAC;IACrD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtD,MAAM,aAAa,GAAG,GAAa,EAAE,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;IAE7E,OAAO;QACH,cAAc;QAEd,oBAAoB,CAAC,SAAqB;YACtC,OAAO,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,gBAAgB,CAAoB,QAAgB,EAAE,QAAgB,EAAE,QAA2B;YAC/F,qEAAqE;YACrE,6BAA6B;YAC7B,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAC3C,CAAC,MAAM,EAAE,EAAE;gBACP,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;gBAChD,gEAAgE;gBAChE,uCAAuC;gBACvC,MAAM,SAAS,GAAG,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC;gBACzC,IAAI,SAAS,EAAE,CAAC;oBACZ,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;gBACjE,CAAC;gBACD,0EAA0E;gBAC1E,IAAI,IAAI,EAAE,CAAC;oBACP,IAAI,CAAC,sBAAsB,GAAG,MAAM,CAAC,UAAU,KAAK,WAAW,CAAC,0BAA0B,CAAC;gBAC/F,CAAC;gBACD,QAAQ,CACJ,IAAI,EACJ,MAAM,CAAC,UAAU,KAAK,WAAW,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,WAAW,CAAC,0BAA0B,CACzG,CAAC;YACN,CAAC,EACD,CAAC,GAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAClF,CAAC;QACN,CAAC;QAED,YAAY,CAAC,QAAgB;YACzB,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YACvE,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAChF,OAAO,aAAa,EAAE,CAAC;YAC3B,CAAC;YACD,MAAM,KAAK,GAAyB,IAAI,qBAAqB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5E,OAAO,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,oBAAoB,CAAC,IAAY;YAC7B,wEAAwE;YACxE,iEAAiE;YACjE,OAAO,aAAa,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;KACJ,CAAC;AACN,CAAC"}

package/dist/variant_args.d.ts

@@ -11,3 +11,4 @@ export declare function asString(v: Variant | undefined): string | null;
 export declare function asBoolean(v: Variant | undefined): boolean;
 /** The UserConfigurationMask value of an argument (missing / non-numeric → `0`). */
 export declare function asMask(v: Variant | undefined): UserConfigurationMask;
+//# sourceMappingURL=variant_args.d.ts.map

package/dist/variant_args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"variant_args.d.ts","sourceRoot":"","sources":["../source/variant_args.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD,2EAA2E;AAC3E,wBAAgB,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAE9D;AAED,0EAA0E;AAC1E,wBAAgB,SAAS,CAAC,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAEzD;AAED,oFAAoF;AACpF,wBAAgB,MAAM,CAAC,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,qBAAqB,CAEpE"}

package/dist/variant_args.js

@@ -1,18 +1,13 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.asString = asString;
-exports.asBoolean = asBoolean;
-exports.asMask = asMask;
 /** The string value of an argument, or `null` if absent / not a string. */
-function asString(v) {
+export function asString(v) {
     return v && typeof v.value === "string" ? v.value : null;
 }
 /** The boolean value of an argument (missing / non-boolean → `false`). */
-function asBoolean(v) {
+export function asBoolean(v) {
     return !!v && v.value === true;
 }
 /** The UserConfigurationMask value of an argument (missing / non-numeric → `0`). */
-function asMask(v) {
+export function asMask(v) {
     return (v && typeof v.value === "number" ? v.value : 0);
 }
 //# sourceMappingURL=variant_args.js.map

package/dist/variant_args.js.map

@@ -1 +1 @@
-{"version":3,"file":"variant_args.js","sourceRoot":"","sources":["../source/variant_args.ts"],"names":[],"mappings":";;AASA,4BAEC;AAGD,8BAEC;AAGD,wBAEC;AAbD,2EAA2E;AAC3E,SAAgB,QAAQ,CAAC,CAAsB;IAC3C,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,0EAA0E;AAC1E,SAAgB,SAAS,CAAC,CAAsB;IAC5C,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC;AACnC,CAAC;AAED,oFAAoF;AACpF,SAAgB,MAAM,CAAC,CAAsB;IACzC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAA0B,CAAC;AACrF,CAAC"}
+{"version":3,"file":"variant_args.js","sourceRoot":"","sources":["../source/variant_args.ts"],"names":[],"mappings":"AAQA,2EAA2E;AAC3E,MAAM,UAAU,QAAQ,CAAC,CAAsB;IAC3C,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,CAAsB;IAC5C,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC;AACnC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,MAAM,CAAC,CAAsB;IACzC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAA0B,CAAC;AACrF,CAAC"}

package/package.json

@@ -1,6 +1,7 @@
 {
     "name": "node-opcua-role-set-server",
-    "version": "2.183.0",
+    "type": "module",
+    "version": "2.184.0",
     "description": "pure nodejs OPCUA SDK - server-side role-set management (OPC 10000-18)",
     "scripts": {
         "build": "tsc -b",
@@ -19,22 +20,22 @@
         "node": ">=22.13.0"
     },
     "dependencies": {
-        "node-opcua-address-space": "2.183.0",
-        "node-opcua-address-space-base": "2.183.0",
-        "node-opcua-constants": "2.183.0",
-        "node-opcua-data-model": "2.183.0",
-        "node-opcua-debug": "2.183.0",
-        "node-opcua-nodeid": "2.183.0",
-        "node-opcua-role-set-common": "2.183.0",
-        "node-opcua-service-call": "2.183.0",
-        "node-opcua-status-code": "2.183.0",
-        "node-opcua-types": "2.183.0",
-        "node-opcua-variant": "2.183.0"
+        "node-opcua-address-space": "2.184.0",
+        "node-opcua-address-space-base": "2.184.0",
+        "node-opcua-constants": "2.184.0",
+        "node-opcua-data-model": "2.184.0",
+        "node-opcua-debug": "2.184.0",
+        "node-opcua-nodeid": "2.184.0",
+        "node-opcua-role-set-common": "2.184.0",
+        "node-opcua-service-call": "2.184.0",
+        "node-opcua-status-code": "2.184.0",
+        "node-opcua-types": "2.184.0",
+        "node-opcua-variant": "2.184.0"
     },
     "devDependencies": {
-        "node-opcua-leak-detector": "2.183.0",
-        "node-opcua-nodesets": "2.183.0",
-        "node-opcua-test-helpers": "2.183.0"
+        "node-opcua-leak-detector": "2.184.0",
+        "node-opcua-nodesets": "2.184.0",
+        "node-opcua-test-helpers": "2.184.0"
     },
     "author": "Etienne Rossignon",
     "license": "MIT",
@@ -51,7 +52,7 @@
         "internet of things"
     ],
     "homepage": "http://node-opcua.github.io/",
-    "gitHead": "d9a9af54d162f0fbb8d287e168aaeeda2d5c38b7",
+    "gitHead": "441a5c63e3a4202eb8de8597acac77a3a49248b7",
     "files": [
         "dist",
         "source"