Skip to content
All work

Keystone

Open-source access-control middleware that talks to door terminals directly.

role
Sole developer
for
Personal, open source
period
May 2026 - Present
status
In development
View source
8
queue workers
67
tests in CI
18
data models

Overview

Keystone drives Hikvision access terminals over their ISAPI interface so a business can manage doors, users and cards without paying for vendor licensing.

How it is built

REST/WSReact dashboardlive event feedNestJS APIRBAC, signed webhooksPostgreSQLPrisma, 18 modelsBullMQ on Redis8 workersDriver layerHikvision or mockDoor terminalsISAPI over the LAN
Simplified architecture. Arrows show the main request and data flow.

What I built

  • Designed a vendor-neutral driver interface with a Hikvision driver and a failure-injecting mock for testing.
  • Built 8 BullMQ workers for device sync, reconciliation, event intake, health checks and signed webhook delivery.
  • Security throughout - argon2id passwords, AES-GCM encrypted device secrets, rotating refresh tokens with lockout, Ed25519-signed webhooks and an XXE-safe XML parser.

Architecture

  • pnpm monorepo with separate API, worker, event receiver and React dashboard apps.
  • GitHub Actions runs lint, typecheck, tests, CodeQL and gitleaks on every push.

Results

  • Source on GitHub; face enrolment and MFA are still in progress.

Stack

NestJS, PostgreSQL, Prisma, BullMQ, Redis, React, Socket.IO, Docker