@andrewcaires/api 3.0.4 → 3.0.6

package/dist/index.cjs.js

@@ -1,7 +1,7 @@
 /*!
- * @andrewcaires/api v3.0.4
+ * @andrewcaires/api v3.0.6
  * Simple api for small applications using express, jsonwebtoken, sequelize and websocket 
  * (c) 2023 Andrew Caires
  * @license: MIT
  */
-"use strict";var e=require("@andrewcaires/express"),t=require("@andrewcaires/utils.js"),r=require("ws"),s=require("sequelize"),o=require("dotenv"),n=require("fs"),i=require("jsonwebtoken"),a=require("crypto-js"),d=require("mime-types"),l=require("multer"),u=require("path");function p(e,t,r,s){var o,n=arguments.length,i=n<3?t:null===s?s=Object.getOwnPropertyDescriptor(t,r):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(e,t,r,s);else for(var a=e.length-1;a>=0;a--)(o=e[a])&&(i=(n<3?o(i):n>3?o(t,r,i):o(t,r))||i);return n>3&&i&&Object.defineProperty(t,r,i),i}function c(e,t){return function(r,s){t(r,s,e)}}function g(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function y(e,t,r,s){return new(r||(r=Promise))((function(o,n){function i(e){try{d(s.next(e))}catch(e){n(e)}}function a(e){try{d(s.throw(e))}catch(e){n(e)}}function d(e){var t;e.done?o(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(i,a)}d((s=s.apply(e,t||[])).next())}))}o.config();class m{}m.API_CONSOLE_ERROR=t.toBool(process.env.API_CONSOLE_ERROR||"false"),m.API_DB_DATABASE=process.env.API_DB_DATABASE||"",m.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",m.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",m.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),m.API_DB_TYPE=process.env.API_DB_TYPE||"",m.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",m.API_DB_LOG=t.toBool(process.env.API_DB_LOG||"false"),m.API_TABLE_PREFIX=process.env.API_TABLE_PREFIX||"",m.API_HTTP_CRT=process.env.API_HTTP_CRT||"",m.API_HTTP_KEY=process.env.API_HTTP_KEY||"",m.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),m.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",m.API_HTTP_CROSS=t.toBool(process.env.API_HTTP_CROSS||"false"),m.API_HTTP_HYBRID=t.toBool(process.env.API_HTTP_HYBRID||"false"),m.API_SLEEP_AUTH=parseInt(process.env.API_SLEEP_AUTH||"1000"),m.API_SLEEP_FORGOT=parseInt(process.env.API_SLEEP_FORGOT||"5000"),m.API_SLEEP_REGISTRY=parseInt(process.env.API_SLEEP_REGISTRY||"5000"),m.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",m.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",m.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",m.API_TOKEN_LIFETIME=parseInt(process.env.API_TOKEN_LIFETIME||"15"),m.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),m.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",m.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),m.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",m.API_WEBSOCKET_START=t.toBool(process.env.API_WEBSOCKET_START||"false");class h{static connect(e){const t="connect_"+m.API_DB_TYPE.toLowerCase();if(t in h)return h[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_memory(){return new s.Sequelize("sqlite::memory:",{logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_mysql(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_postgres(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_sqlite(e){return new s.Sequelize({dialect:"sqlite",storage:e.database,logging:m.API_DB_LOG,define:{timestamps:!1}})}}const R=h.connect({database:m.API_DB_DATABASE,username:m.API_DB_USERNAME,password:m.API_DB_PASSWORD,hostname:m.API_DB_HOST,hostport:m.API_DB_PORT});class v extends s.Model{}v.init({login:s.DataTypes.BIGINT,logout:s.DataTypes.BIGINT,secret:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,useragent:s.DataTypes.STRING},{sequelize:R,modelName:m.API_TABLE_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class A extends s.Model{}A.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class O extends s.Model{}O.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class I extends s.Model{}I.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class _ extends s.Model{}_.init({},{sequelize:R,modelName:m.API_TABLE_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),_.removeAttribute("id");class P extends s.Model{}P.init({name:s.DataTypes.STRING,email:s.DataTypes.STRING,username:s.DataTypes.STRING,password:s.DataTypes.STRING,avatar:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated"});class f extends s.Model{}f.init({},{sequelize:R,modelName:m.API_TABLE_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),f.removeAttribute("id");class T extends s.Model{}T.init({key:s.DataTypes.STRING,value:s.DataTypes.STRING},{sequelize:R,modelName:m.API_TABLE_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),T.removeAttribute("id");class E extends s.Model{}var w;E.init({type:s.DataTypes.STRING,source:s.DataTypes.STRING,message:s.DataTypes.TEXT},{sequelize:R,modelName:m.API_TABLE_PREFIX+"logs",timestamps:!0,createdAt:"created",updatedAt:!1}),P.hasMany(v),v.belongsTo(P),P.hasMany(A),A.belongsTo(P),O.hasMany(_),_.belongsTo(O),I.hasMany(_),_.belongsTo(I),P.hasMany(f),f.belongsTo(P),O.hasMany(f),f.belongsTo(O),function(e){e.ERROR="",e.INFO="",e.NONE="",e.SUCCESS="",e.WARNING=""}(w||(w={}));class b{static write(e,t,r){return y(this,void 0,void 0,(function*(){yield b.writeRaw(w.NONE,"",e,t,r)}))}static error(e,t,r){return y(this,void 0,void 0,(function*(){yield b.writeRaw(w.ERROR,"error",e,t,r)}))}static info(e,t,r){return y(this,void 0,void 0,(function*(){yield b.writeRaw(w.INFO,"info",e,t,r)}))}static success(e,t,r){return y(this,void 0,void 0,(function*(){yield b.writeRaw(w.ERROR,"success",e,t,r)}))}static warning(e,t,r){return y(this,void 0,void 0,(function*(){yield b.writeRaw(w.WARNING,"warning",e,t,r)}))}static writeConsole(e,r,s){const o=t.dateFormat(new Date,"%H:%M:%S");console.log(">",e,r+" ".repeat(10-r.length),"","|",o,"|",s)}static writeRaw(e,t,r,s,o){return y(this,void 0,void 0,(function*(){o&&b.writeConsole(e,t,r),R&&(yield E.create({type:t,source:s,message:r}).catch((()=>null)))}))}}const x=e=>n.existsSync(e)?n.readFileSync(e):void 0,S={http:x(m.API_HTTP_CRT),token:x(m.API_TOKEN_CRT)},C={http:x(m.API_HTTP_KEY),token:x(m.API_TOKEN_KEY)};class q{static error(e){b.error(e.message,"api.token",m.API_CONSOLE_ERROR)}static sign(e){return C.token?{token:i.sign(e,C.token,{algorithm:"RS256"})}:{error:"Invalid Secret"}}static user(e){return y(this,void 0,void 0,(function*(){const{error:t,decode:r}=q.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&r){const r=yield P.findOne({where:{id:e,state:!0}}).catch(q.error);if(r){const e=yield v.findOne({where:{secret:t,userId:r.id}}).catch(q.error);if(e){const t=Date.now();if(t>e.timestamp)return e.logout=t,yield e.save(),{error:"Expired token"};if(e.timestamp=t+6e4*m.API_TOKEN_LIFETIME,!e.logout)return yield e.save(),{auth:e,user:r}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e){if(!S.token)return{error:"Invalid Secret"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:i.verify(e,S.token)}}catch(e){return{error:"Invalid Token"}}}}class D extends e.Application{constructor(e){super(e,{cert:S.http,cross:m.API_HTTP_CROSS,hybrid:m.API_HTTP_HYBRID,key:C.http,path:"/api",port:m.API_HTTP_PORT,public:m.API_HTTP_PUBLIC})}error(e,t){b.info(e.message,t,m.API_CONSOLE_ERROR)}log(e,t){b.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return y(this,void 0,void 0,(function*(){yield R.sync(),yield e.listen.call(this),m.API_WEBSOCKET_START&&this.server&&(this._webSocket=new r.Server({server:this.server,verifyClient:(e,t)=>t(m.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,r)=>y(this,void 0,void 0,(function*(){r.url||(r.url="");const s=r.url.length<=1?"":r.url.replace(/\//g,".");let o;e.on("message",(t=>y(this,void 0,void 0,(function*(){if(o)try{const n=JSON.parse(t);this.emit("ws.message"+s,{data:n,message:t,req:r,user:o,ws:e})}catch(n){this.emit("ws.message"+s,{message:t,req:r,user:o,ws:e})}else{const{user:n}=yield q.user(t.toString());n&&(o=n,this.emit("ws.connection"+s,{req:r,user:o,ws:e}))}o||e.close()})))),e.on("close",(()=>{o&&this.emit("ws.close"+s,{user:o,ws:e})})),yield t.sleep(2e3),o||e.close()})))))}))}websocket(){return this._webSocket}}class j{static all(){return y(this,void 0,void 0,(function*(){const e=yield T.findAll().catch(j.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return y(this,void 0,void 0,(function*(){return((yield T.destroy({where:{key:e}}).catch(j.error))||0)>0}))}static error(e){b.error(e.message,"api.config",m.API_CONSOLE_ERROR)}static get(e){return y(this,void 0,void 0,(function*(){const t=yield T.findOne({where:{key:e}}).catch(j.error);return t&&t.value||""}))}static set(e,t){return y(this,void 0,void 0,(function*(){const[r]=(yield T.findOrCreate({where:{key:e}}).catch(j.error))||[];r&&(r.value=t,yield r.save().catch(j.error))}))}}class N{static all(e,t){return y(this,void 0,void 0,(function*(){return yield I.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:_,required:!0,include:[{model:O,required:!0,where:{state:!0},include:[{model:f,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{b.error(e.message,"api.permission",m.API_CONSOLE_ERROR)}))}))}static get(e){return y(this,void 0,void 0,(function*(){const t=yield N.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return y(this,void 0,void 0,(function*(){const r=yield N.all(e,{name:t});return!!r&&r.length>0}))}}const M=e.parameterFactory((({req:e})=>e.auth)),F=e.parameterFactory((({req:e})=>e.user)),B=(e,r)=>{const s=t.uuidv4()+"."+r;return n.existsSync(u.join(e,s))?B(e,r):s};class G extends t.EventEmitter{auth(t,r,s,o,n){return y(this,void 0,void 0,(function*(){const{auth:i,error:a,user:d}=yield q.user(s);return a?e.Responses.error(t,a):i&&d?(o&&(i.useragent=o),yield i.save(),r.auth=i,r.user=d,n()):e.Responses.error(t,"Internal Server Error")}))}error(e){b.error(e.message,"api.controller",m.API_CONSOLE_ERROR)}name(){return"api"}permission(t,r,s,o){return y(this,void 0,void 0,(function*(){return r?(yield N.is(r,o))?s():e.Responses.error(t,"Unauthorized access"):e.Responses.unauthorized(t,"Access denied")}))}read(e,t,r,s){return this.permission(e,t,r,(s||this.name())+".read")}upload(t,r,s,o){const n=(null==o?void 0:o.path)||m.API_UPLOAD_TEMP,i=l.diskStorage({destination:(e,t,r)=>r(null,n),filename:(e,t,r)=>y(this,void 0,void 0,(function*(){return r(null,B(n,d.extension(t.mimetype)||"bin"))}))}),a=1e6*((null==o?void 0:o.size)||m.API_UPLOAD_SIZE),u=l({storage:i,fileFilter(e,t,r){var s;return y(this,void 0,void 0,(function*(){const e=null===(s=null==o?void 0:o.types)||void 0===s?void 0:s.indexOf(t.mimetype);return void 0!==e&&e<0?r(new Error("File type not allowed")):r(null,!0)}))},limits:{fileSize:a}}),p=(null==o?void 0:o.count)||m.API_UPLOAD_COUNT,c=(null==o?void 0:o.field)||m.API_UPLOAD_FIELD;u.array(c,p)(r,t,(r=>r?e.Responses.error(t,r.message):s()))}validation(r,s,o,n){return y(this,void 0,void 0,(function*(){const{error:i,value:a}=yield t.Validation.object(n).parse().validateAsync(s.body);return i?e.Responses.validation(r,i):(s.body=a,o())}))}write(e,t,r,s){return this.permission(e,t,r,(s||this.name())+".write")}}p([c(0,e.Res()),c(1,e.Req()),c(2,e.Headers(m.API_TOKEN_HEADER)),c(3,e.Headers("user-agent")),c(4,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,String,Function]),g("design:returntype",Promise)],G.prototype,"auth",null),p([c(0,e.Res()),c(1,F()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],G.prototype,"permission",null),p([c(0,e.Res()),c(1,F()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",void 0)],G.prototype,"read",null),p([c(0,e.Res()),c(1,e.Req()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function,Object]),g("design:returntype",void 0)],G.prototype,"upload",null),p([c(0,e.Res()),c(1,e.Req()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function,Object]),g("design:returntype",Promise)],G.prototype,"validation",null),p([c(0,e.Res()),c(1,F()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",void 0)],G.prototype,"write",null),exports.AuthController=class extends G{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar"]}login(r,s,o,n){return y(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_AUTH);const{username:i,password:d}=s.body,l=yield P.findOne({where:{username:i}}).catch(this.error);if(!l)return n.emit("auth.failure",{req:s}),e.Responses.notfound(r,"Username not found");if(!l.state)return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Username is disabled");const u=a.SHA256(d).toString();if(l.password!=u)return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Invalid password");const p=l.id,c=t.uniqueID(),{error:g,token:y}=q.sign({id:p,secret:c});if(g)return n.emit("auth.failure",{req:s}),e.Responses.error(r,g);if(y){const t=Date.now(),n=t+6e4*m.API_TOKEN_LIFETIME,i=yield v.create({login:t,secret:c,timestamp:n,useragent:o,userId:p}).catch(this.error);if(i)return this.emit("auth.login",{auth:i,req:s,user:l}),e.Responses.data(r,{token:y})}return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Internal Server Error")}))}logout(t,r,s,o,n){return y(this,void 0,void 0,(function*(){return s&&o&&!s.logout?(s.logout=Date.now(),s.timestamp=s.logout,yield s.save(),n.emit("auth.logout",{auth:s,req:r,user:o}),e.Responses.success(t,"Disconcerted")):e.Responses.unauthorized(t,"Access denied")}))}user(r,s){return y(this,void 0,void 0,(function*(){const o=s.user;if(!o)return e.Responses.unauthorized(r,"Access denied");const n=yield N.all(o);if(n){const s=n.map((e=>e.name));return e.Responses.data(r,Object.assign(Object.assign({},t.allowedObject(this.attributes,o.toJSON())),{permissions:s}))}return e.Responses.error(r,"Internal Server Error")}))}},p([e.Post("/login"),e.Middleware("validation",{username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),c(2,e.Headers("user-agent")),c(3,e.App()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,D]),g("design:returntype",Promise)],exports.AuthController.prototype,"login",null),p([e.Get("/logout"),e.Middleware("auth"),c(0,e.Res()),c(1,e.Req()),c(2,M()),c(3,F()),c(4,e.App()),g("design:type",Function),g("design:paramtypes",[Object,Object,v,P,D]),g("design:returntype",Promise)],exports.AuthController.prototype,"logout",null),p([e.Get(),e.Middleware("auth"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.AuthController.prototype,"user",null),exports.AuthController=p([e.Controller("/auth"),e.Extends(G)],exports.AuthController),exports.ForgotController=class extends G{check(r,s){return y(this,void 0,void 0,(function*(){const{token:o}=s.body,n=yield this.findOne(o);return n&&n.user?(n.token=t.uniqueID(),yield n.save(),e.Responses.data(r,{token:n.token})):e.Responses.notfound(r,"User not found")}))}forgot(r,s){return y(this,void 0,void 0,(function*(){const{username:o}=s.body;yield t.sleep(m.API_SLEEP_FORGOT);const n=yield P.findOne({where:{username:o}}).catch(this.error);if(!n)return e.Responses.notfound(r,"User not found");const i=t.uniqueID(),a=Date.now()+6e4*m.API_TOKEN_LIFETIME,d=yield A.create({token:i,timestamp:a,state:!0,userId:n.id});return this.emit("forgot",{forgot:d,req:s,user:n}),e.Responses.success(r,"OK")}))}reset(t,r){return y(this,void 0,void 0,(function*(){const{token:s,password:o}=r.body,n=yield this.findOne(s);return n?(n.state=!1,yield n.save().catch(this.error),n.user.password=a.SHA256(o).toString(),yield n.user.save().catch(this.error),this.emit("forgot.reset",{req:r,user:n.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}findOne(e){return y(this,void 0,void 0,(function*(){return yield A.findOne({where:{token:e,state:!0},include:[{model:P,required:!0}]}).catch(this.error)}))}},p([e.Get("/check"),e.Middleware("validation",{token:t.Validation.string().required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"check",null),p([e.Get(),e.Middleware("validation",{username:t.Validation.string().min(4).required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"forgot",null),p([e.Get("/reset"),e.Middleware("validation",{token:t.Validation.string().required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"reset",null),exports.ForgotController=p([e.Controller("/forgot"),e.Extends(G)],exports.ForgotController),exports.ModelController=class extends G{add(t,r,s){return y(this,void 0,void 0,(function*(){const o=yield this.model().create(t.body,s||{}).catch(this.error);if(o){const t=o.id;return e.Responses.data(r,{id:t}),t}return e.Responses.error(r,"Internal Server Error"),0}))}all(r,o,n,i){var a,d,l,u,p;return y(this,void 0,void 0,(function*(){const c=this.model(),g=Object.assign({},n||{});g.where=Object.assign({},g.where||{});const y=null===(a=r.query.limit)||void 0===a?void 0:a.toString();y&&(g.limit=parseInt(y));const m=null===(d=r.query.offset)||void 0===d?void 0:d.toString();m&&(g.offset=parseInt(m));const h=Object.keys(c.getAttributes()),R=[],v=null===(l=r.query.asc)||void 0===l?void 0:l.toString();v&&v.length&&v.split(",").forEach((e=>{h.indexOf(e)>=0&&R.push([e,"ASC"])}));const A=null===(u=r.query.desc)||void 0===u?void 0:u.toString();A&&A.length&&A.split(",").forEach((e=>{h.indexOf(e)>=0&&R.push([e,"DESC"])})),R.length&&(g.order=R);const O=[],I=t.isArray(g.attributes)?g.attributes:h,_=null===(p=r.query.search)||void 0===p?void 0:p.toString();I.forEach((e=>{var o;if(t.isString(e)&&(_&&_.length&&O.push({[e]:{[s.Op.like]:`%${_}%`}}),"search_"+e in r.query)){const t=null===(o=r.query["search_"+e])||void 0===o?void 0:o.toString();t&&t.length&&O.push({[e]:{[s.Op.like]:`%${t}%`}})}})),O.length&&(g.where=Object.assign(Object.assign({},g.where),{[s.Op.or]:[...O]}));const P=yield c.count(Object.assign(Object.assign({},g),{col:h[0]})).catch(this.error),f=yield c.findAll(g).catch(this.error);if(f)return e.Responses.data(o,{count:P,records:i?i(f):f}),f;e.Responses.error(o,"Internal Server Error")}))}del(t,r,s){return y(this,void 0,void 0,(function*(){const{id:o}=t.params;if(!o)return e.Responses.error(r,"Internal Server Error"),0;const n=yield this.model().destroy(Object.assign(Object.assign({},s||{}),{where:{id:o}})).catch(this.error);return n?(e.Responses.success(r,"OK"),n):(e.Responses.notfound(r,"Record not found"),0)}))}error(e){e.sql?b.error(e.message+"\n"+e.sql,"api.controller.sql",m.API_CONSOLE_ERROR):super.error(e)}get(t,r,s,o){return y(this,void 0,void 0,(function*(){const n=Object.assign({},s||{});n.where=n.where?Object.assign({},n.where):{};const{id:i}=t.params,a=yield this.model().findByPk(i,n).catch(this.error);if(a)return e.Responses.data(r,o?o(a):a.toJSON()),a;null!==a?e.Responses.error(r,"Internal Server Error"):e.Responses.notfound(r,"Record not found")}))}name(){return this.model().tableName}set(t,r,s){return y(this,void 0,void 0,(function*(){const{id:o}=t.params,[n]=(yield this.model().update(t.body,Object.assign(Object.assign({},s||{}),{where:Object.assign(Object.assign({},(s||{}).where),{id:o})})).catch(this.error))||[];return n?(e.Responses.success(r,"OK"),!0):(e.Responses.success(r,"Record not changed"),!1)}))}},exports.ModelController=p([e.Extends(G)],exports.ModelController),exports.CrudController=class extends exports.ModelController{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(t,e,r,this.create())}validationSet(e,t,r){this.validation(t,e,r,this.update())}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationAdd"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationSet"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordSet",null),p([c(0,e.Req()),c(1,e.Res()),c(2,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function]),g("design:returntype",void 0)],exports.CrudController.prototype,"validationAdd",null),p([c(0,e.Req()),c(1,e.Res()),c(2,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function]),g("design:returntype",void 0)],exports.CrudController.prototype,"validationSet",null),exports.CrudController=p([e.Extends(exports.ModelController)],exports.CrudController),exports.GroupController=class extends exports.CrudController{model(){return O}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.GroupController=p([e.Controller("/groups"),e.Extends(exports.CrudController)],exports.GroupController),exports.GroupRouteController=class extends exports.ModelController{model(){return _}groupRouteAll(e,t,r){return y(this,void 0,void 0,(function*(){return this.all(t,e,{where:{groupId:r},include:[{model:I,required:!0}]},(e=>e.map((e=>e.route))))}))}groupRouteSet(r,s,o){return y(this,void 0,void 0,(function*(){const n=yield O.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){const t=n.id;if(yield _.destroy({where:{groupId:t}}),o){let e=0;for(let r=0;r<o.length;r++)e=yield I.count({where:{id:o[r]}}),e&&(yield _.create({groupId:t,routeId:o[r]}))}return e.Responses.success(r,"OK")}return t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/routes"),e.Middleware("auth"),e.Middleware("read","routes"),c(0,e.Res()),c(1,e.Req()),c(2,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,String]),g("design:returntype",Promise)],exports.GroupRouteController.prototype,"groupRouteAll",null),p([e.Put("/:id/groups"),e.Middleware("auth"),e.Middleware("write","groups"),e.Middleware("validation",{routes:t.Validation.array(t.Validation.number().parse())}),c(0,e.Res()),c(1,e.Params("id")),c(2,e.Body("routes")),g("design:type",Function),g("design:paramtypes",[Object,String,Array]),g("design:returntype",Promise)],exports.GroupRouteController.prototype,"groupRouteSet",null),exports.GroupRouteController=p([e.Controller("/groups"),e.Extends(exports.ModelController)],exports.GroupRouteController),exports.LogsController=class extends exports.ModelController{model(){return E}logsAll(e,t){return y(this,void 0,void 0,(function*(){const{source:r,type:s}=t.query,o=r&&s?{source:r,type:s}:r?{source:r}:s?{type:s}:{};return this.all(t,e,{where:o,order:[["created","DESC"]]})}))}},p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.LogsController.prototype,"logsAll",null),exports.LogsController=p([e.Controller("/logs"),e.Extends(exports.ModelController)],exports.LogsController);class L extends s.Model{}L.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"}),exports.RegisterController=class extends G{confirm(t,r){return y(this,void 0,void 0,(function*(){const s=yield L.findOne({where:{token:r,state:!0},include:[{model:P,required:!0}]}).catch(this.error);return s?(s.user.state=!0,yield s.user.save().catch(this.error),this.emit("user.confirm",{user:s.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}register(r,s,o,n){return y(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_REGISTRY);const s=yield P.findOne({where:{username:n}}).catch(this.error);if(s)return e.Responses.error(r,"Invalid Username");if(!t.isNull(s))return e.Responses.error(r,"Internal Server Error");const i=yield P.create(Object.assign(Object.assign({},o),{state:!1}));return this.emit("user.register",{user:i}),e.Responses.success(r,"OK")}))}},p([e.Get("/confirm"),e.Middleware("validation",{token:t.Validation.string().required()}),c(0,e.Res()),c(1,e.Body("token")),g("design:type",Function),g("design:paramtypes",[Object,String]),g("design:returntype",Promise)],exports.RegisterController.prototype,"confirm",null),p([e.Get(),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),c(2,e.Body()),c(3,e.Body("username")),g("design:type",Function),g("design:paramtypes",[Object,Object,Object,String]),g("design:returntype",Promise)],exports.RegisterController.prototype,"register",null),exports.RegisterController=p([e.Controller("/register"),e.Extends(G)],exports.RegisterController),exports.RouteController=class extends exports.CrudController{model(){return I}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().empty()}}},exports.RouteController=p([e.Controller("/routes"),e.Extends(exports.CrudController)],exports.RouteController),exports.SetupController=class extends G{setup(r){return y(this,void 0,void 0,(function*(){if(0==(yield P.count())){const e={description:"",state:!0},r=yield P.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),s=yield O.create(Object.assign({name:"admin"},e));yield f.create({userId:r.id,groupId:s.id});const o=["read","write"],n=["users","groups","routes"];yield t.forEachSeries(n,(r=>y(this,void 0,void 0,(function*(){yield t.forEachSeries(o,(t=>y(this,void 0,void 0,(function*(){const o=r+"."+t,n=yield I.create(Object.assign({name:o},e));yield _.create({groupId:s.id,routeId:n.id})}))))}))));const i=yield I.create(Object.assign({name:"logs.read"},e));yield _.create({groupId:s.id,routeId:i.id})}return e.Responses.success(r,"OK")}))}},p([e.Get(),c(0,e.Res()),g("design:type",Function),g("design:paramtypes",[Object]),g("design:returntype",Promise)],exports.SetupController.prototype,"setup",null),exports.SetupController=p([e.Controller("/setup"),e.Extends(G)],exports.SetupController),exports.UserController=class extends exports.ModelController{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar","description","state","created","updated"]}model(){return P}userAdd(e,t){return y(this,void 0,void 0,(function*(){return t.body.password=a.SHA256(t.body.password).toString(),yield this.add(t,e)}))}userAll(e,t){return y(this,void 0,void 0,(function*(){return this.all(t,e,{attributes:this.attributes})}))}userDel(t,r,s,o){return y(this,void 0,void 0,(function*(){return s&&s.id.toString()!=o?this.del(r,t):e.Responses.error(t,"Internal Server Error")}))}userGet(e,t){return y(this,void 0,void 0,(function*(){return this.get(t,e,{attributes:this.attributes})}))}userSet(e,t){return y(this,void 0,void 0,(function*(){return t.body.password&&(t.body.password=a.SHA256(t.body.password).toString()),this.set(t,e)}))}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required(),description:t.Validation.string().required(),state:t.Validation.boolean().parse().required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.UserController.prototype,"userAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.UserController.prototype,"userAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),c(0,e.Res()),c(1,e.Req()),c(2,F()),c(3,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,P,String]),g("design:returntype",Promise)],exports.UserController.prototype,"userDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.UserController.prototype,"userGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().empty(),email:t.Validation.string().email().empty(),username:t.Validation.string().min(4).empty(),password:t.Validation.string().min(5).empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.UserController.prototype,"userSet",null),exports.UserController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UserController),exports.UserGroupController=class extends exports.ModelController{model(){return f}userGroupsAll(e,t,r){return y(this,void 0,void 0,(function*(){return this.all(t,e,{where:{userId:r},include:[{model:O,required:!0}]},(e=>e.map((e=>e.group))))}))}userGroupsSet(r,s,o){return y(this,void 0,void 0,(function*(){const n=yield P.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){if(yield f.destroy({where:{userId:n.id}}),o){let e=0;for(let t=0;t<o.length;t++)e=yield O.count({where:{id:o[t]}}),e&&(yield f.create({userId:n.id,groupId:o[t]}))}return e.Responses.success(r,"OK")}return t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/groups"),e.Middleware("auth"),e.Middleware("read","groups"),c(0,e.Res()),c(1,e.Req()),c(2,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,String]),g("design:returntype",Promise)],exports.UserGroupController.prototype,"userGroupsAll",null),p([e.Put("/:id/groups"),e.Middleware("auth"),e.Middleware("write","groups"),e.Middleware("validation",{groups:t.Validation.array(t.Validation.number().parse())}),c(0,e.Res()),c(1,e.Params("id")),c(2,e.Body("groups")),g("design:type",Function),g("design:paramtypes",[Object,String,Array]),g("design:returntype",Promise)],exports.UserGroupController.prototype,"userGroupsSet",null),exports.UserGroupController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UserGroupController),exports.Application=D,exports.Auth=v,exports.Config=j,exports.Configs=T,exports.ControllerBase=G,exports.Database=h,exports.Env=m,exports.Forgot=A,exports.Group=O,exports.GroupRoute=_,exports.Log=b,exports.Logs=E,exports.Permission=N,exports.ReqAuth=M,exports.ReqUser=F,exports.Route=I,exports.Token=q,exports.User=P,exports.UserGroup=f,exports.crt=S,exports.key=C,exports.sequelize=R;
+"use strict";var e=require("@andrewcaires/express"),t=require("@andrewcaires/utils.js"),r=require("ws"),s=require("sequelize"),o=require("dotenv"),n=require("fs"),i=require("jsonwebtoken"),a=require("crypto-js"),d=require("mime-types"),l=require("multer"),u=require("path");function p(e,t,r,s){var o,n=arguments.length,i=n<3?t:null===s?s=Object.getOwnPropertyDescriptor(t,r):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(e,t,r,s);else for(var a=e.length-1;a>=0;a--)(o=e[a])&&(i=(n<3?o(i):n>3?o(t,r,i):o(t,r))||i);return n>3&&i&&Object.defineProperty(t,r,i),i}function c(e,t){return function(r,s){t(r,s,e)}}function g(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function y(e,t,r,s){return new(r||(r=Promise))((function(o,n){function i(e){try{d(s.next(e))}catch(e){n(e)}}function a(e){try{d(s.throw(e))}catch(e){n(e)}}function d(e){var t;e.done?o(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(i,a)}d((s=s.apply(e,t||[])).next())}))}o.config();class m{}m.API_CONSOLE_ERROR=t.toBool(process.env.API_CONSOLE_ERROR||"false"),m.API_DB_DATABASE=process.env.API_DB_DATABASE||"",m.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",m.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",m.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),m.API_DB_TYPE=process.env.API_DB_TYPE||"",m.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",m.API_DB_LOG=t.toBool(process.env.API_DB_LOG||"false"),m.API_TABLE_PREFIX=process.env.API_TABLE_PREFIX||"",m.API_HTTP_CRT=process.env.API_HTTP_CRT||"",m.API_HTTP_KEY=process.env.API_HTTP_KEY||"",m.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),m.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",m.API_HTTP_CROSS=t.toBool(process.env.API_HTTP_CROSS||"false"),m.API_HTTP_HYBRID=t.toBool(process.env.API_HTTP_HYBRID||"false"),m.API_SLEEP_AUTH=parseInt(process.env.API_SLEEP_AUTH||"1000"),m.API_SLEEP_FORGOT=parseInt(process.env.API_SLEEP_FORGOT||"5000"),m.API_SLEEP_REGISTRY=parseInt(process.env.API_SLEEP_REGISTRY||"5000"),m.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",m.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",m.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",m.API_TOKEN_LIFETIME=parseInt(process.env.API_TOKEN_LIFETIME||"15"),m.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),m.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",m.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),m.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",m.API_WEBSOCKET_START=t.toBool(process.env.API_WEBSOCKET_START||"false");class h{static connect(e){const t="connect_"+m.API_DB_TYPE.toLowerCase();if(t in h)return h[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_memory(){return new s.Sequelize("sqlite::memory:",{logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_mysql(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_postgres(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_sqlite(e){return new s.Sequelize({dialect:"sqlite",storage:e.database,logging:m.API_DB_LOG,define:{timestamps:!1}})}}const R=h.connect({database:m.API_DB_DATABASE,username:m.API_DB_USERNAME,password:m.API_DB_PASSWORD,hostname:m.API_DB_HOST,hostport:m.API_DB_PORT});class A extends s.Model{}A.init({login:s.DataTypes.BIGINT,logout:s.DataTypes.BIGINT,secret:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,useragent:s.DataTypes.STRING},{sequelize:R,modelName:m.API_TABLE_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class v extends s.Model{}v.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class O extends s.Model{}O.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class I extends s.Model{}I.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class _ extends s.Model{}_.init({},{sequelize:R,modelName:m.API_TABLE_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),_.removeAttribute("id");class P extends s.Model{}P.init({name:s.DataTypes.STRING,email:s.DataTypes.STRING,username:s.DataTypes.STRING,password:s.DataTypes.STRING,avatar:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated"});class f extends s.Model{}f.init({},{sequelize:R,modelName:m.API_TABLE_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),f.removeAttribute("id");class T extends s.Model{}T.init({key:s.DataTypes.STRING,value:s.DataTypes.STRING},{sequelize:R,modelName:m.API_TABLE_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),T.removeAttribute("id");class E extends s.Model{}var b;E.init({type:s.DataTypes.STRING,source:s.DataTypes.STRING,message:s.DataTypes.TEXT},{sequelize:R,modelName:m.API_TABLE_PREFIX+"logs",timestamps:!0,createdAt:"created",updatedAt:!1}),P.hasMany(A),A.belongsTo(P),P.hasMany(v),v.belongsTo(P),O.hasMany(_),_.belongsTo(O),I.hasMany(_),_.belongsTo(I),P.hasMany(f),f.belongsTo(P),O.hasMany(f),f.belongsTo(O),function(e){e.ERROR="",e.INFO="",e.NONE="",e.SUCCESS="",e.WARNING=""}(b||(b={}));class w{static write(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.NONE,"",e,t,r)}))}static error(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.ERROR,"error",e,t,r)}))}static info(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.INFO,"info",e,t,r)}))}static success(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.ERROR,"success",e,t,r)}))}static warning(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.WARNING,"warning",e,t,r)}))}static writeConsole(e,r,s){const o=t.dateFormat(new Date,"%H:%M:%S");console.log(">",e,r+" ".repeat(10-r.length),"","|",o,"|",s)}static writeRaw(e,t,r,s,o){return y(this,void 0,void 0,(function*(){o&&w.writeConsole(e,t,r),R&&(yield E.create({type:t,source:s,message:r}).catch((()=>null)))}))}}const x=e=>n.existsSync(e)?n.readFileSync(e):void 0,S={http:x(m.API_HTTP_CRT),token:x(m.API_TOKEN_CRT)},C={http:x(m.API_HTTP_KEY),token:x(m.API_TOKEN_KEY)};class q{static error(e){w.error(e.message,"api.token",m.API_CONSOLE_ERROR)}static sign(e){return C.token?{token:i.sign(e,C.token,{algorithm:"RS256"})}:{error:"Invalid Secret"}}static user(e){return y(this,void 0,void 0,(function*(){const{error:t,decode:r}=q.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&r){const r=yield P.findOne({where:{id:e,state:!0}}).catch(q.error);if(r){const e=yield A.findOne({where:{secret:t,userId:r.id}}).catch(q.error);if(e){const t=Date.now();if(t>e.timestamp)return e.logout=t,yield e.save(),{error:"Expired token"};if(e.timestamp=t+6e4*m.API_TOKEN_LIFETIME,!e.logout)return yield e.save(),{auth:e,user:r}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e){if(!S.token)return{error:"Invalid Secret"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:i.verify(e,S.token)}}catch(e){return{error:"Invalid Token"}}}}class D extends e.Application{constructor(e){super(e,{cert:S.http,cross:m.API_HTTP_CROSS,hybrid:m.API_HTTP_HYBRID,key:C.http,path:"/api",port:m.API_HTTP_PORT,public:m.API_HTTP_PUBLIC})}error(e,t){w.info(e.message,t,m.API_CONSOLE_ERROR)}log(e,t){w.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return y(this,void 0,void 0,(function*(){yield R.sync(),yield e.listen.call(this),m.API_WEBSOCKET_START&&this.server&&(this._webSocket=new r.Server({server:this.server,verifyClient:(e,t)=>t(m.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,r)=>y(this,void 0,void 0,(function*(){r.url||(r.url="");const s=r.url.length<=1?"":r.url.replace(/\//g,".");let o;e.on("message",(t=>y(this,void 0,void 0,(function*(){if(o)try{const n=JSON.parse(t);this.emit("ws.message"+s,{data:n,message:t,req:r,user:o,ws:e})}catch(n){this.emit("ws.message"+s,{message:t,req:r,user:o,ws:e})}else{const{user:n}=yield q.user(t.toString());n&&(o=n,this.emit("ws.connection"+s,{req:r,user:o,ws:e}))}o||e.close()})))),e.on("close",(()=>{o&&this.emit("ws.close"+s,{user:o,ws:e})})),yield t.sleep(2e3),o||e.close()})))))}))}websocket(){return this._webSocket}}class j{static all(){return y(this,void 0,void 0,(function*(){const e=yield T.findAll().catch(j.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return y(this,void 0,void 0,(function*(){return((yield T.destroy({where:{key:e}}).catch(j.error))||0)>0}))}static error(e){w.error(e.message,"api.config",m.API_CONSOLE_ERROR)}static get(e){return y(this,void 0,void 0,(function*(){const t=yield T.findOne({where:{key:e}}).catch(j.error);return t&&t.value||""}))}static set(e,t){return y(this,void 0,void 0,(function*(){const[r]=(yield T.findOrCreate({where:{key:e}}).catch(j.error))||[];r&&(r.value=t,yield r.save().catch(j.error))}))}}class N{static all(e,t){return y(this,void 0,void 0,(function*(){return yield I.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:_,required:!0,include:[{model:O,required:!0,where:{state:!0},include:[{model:f,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{w.error(e.message,"api.permission",m.API_CONSOLE_ERROR)}))}))}static get(e){return y(this,void 0,void 0,(function*(){const t=yield N.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return y(this,void 0,void 0,(function*(){const r=yield N.all(e,{name:t});return!!r&&r.length>0}))}}const M=e.parameterFactory((({req:e})=>e.auth)),F=e.parameterFactory((({req:e})=>e.user)),B=(e,r)=>{const s=t.uuidv4()+"."+r;return n.existsSync(u.join(e,s))?B(e,r):s};class G extends t.EventEmitter{auth(t,r,s,o,n){return y(this,void 0,void 0,(function*(){const{auth:i,error:a,user:d}=yield q.user(s);return a?e.Responses.error(t,a):i&&d?(o&&(i.useragent=o),yield i.save(),r.auth=i,r.user=d,n()):e.Responses.error(t,"Internal Server Error")}))}error(e){w.error(e.message,"api.controller",m.API_CONSOLE_ERROR)}name(){return"api"}permission(t,r,s,o){return y(this,void 0,void 0,(function*(){return r?(yield N.is(r,o))?s():e.Responses.error(t,"Unauthorized access"):e.Responses.unauthorized(t,"Access denied")}))}read(e,t,r,s){return this.permission(e,t,r,(s||this.name())+".read")}upload(t,r,s,o){const n=(null==o?void 0:o.path)||m.API_UPLOAD_TEMP,i=l.diskStorage({destination:(e,t,r)=>r(null,n),filename:(e,t,r)=>y(this,void 0,void 0,(function*(){return r(null,B(n,d.extension(t.mimetype)||"bin"))}))}),a=1e6*((null==o?void 0:o.size)||m.API_UPLOAD_SIZE),u=l({storage:i,fileFilter(e,t,r){var s;return y(this,void 0,void 0,(function*(){const e=null===(s=null==o?void 0:o.types)||void 0===s?void 0:s.indexOf(t.mimetype);return void 0!==e&&e<0?r(new Error("File type not allowed")):r(null,!0)}))},limits:{fileSize:a}}),p=(null==o?void 0:o.count)||m.API_UPLOAD_COUNT,c=(null==o?void 0:o.field)||m.API_UPLOAD_FIELD;u.array(c,p)(r,t,(r=>r?e.Responses.error(t,r.message):s()))}validation(r,s,o,n){return y(this,void 0,void 0,(function*(){const{error:i,value:a}=yield t.Validation.object(n).parse().validateAsync(s.body);return i?e.Responses.validation(r,i):(s.body=a,o())}))}write(e,t,r,s){return this.permission(e,t,r,(s||this.name())+".write")}}p([c(0,e.Res()),c(1,e.Req()),c(2,e.Headers(m.API_TOKEN_HEADER)),c(3,e.Headers("user-agent")),c(4,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,String,Function]),g("design:returntype",Promise)],G.prototype,"auth",null),p([c(0,e.Res()),c(1,F()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],G.prototype,"permission",null),p([c(0,e.Res()),c(1,F()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],G.prototype,"read",null),p([c(0,e.Res()),c(1,e.Req()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function,Object]),g("design:returntype",void 0)],G.prototype,"upload",null),p([c(0,e.Res()),c(1,e.Req()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function,Object]),g("design:returntype",Promise)],G.prototype,"validation",null),p([c(0,e.Res()),c(1,F()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],G.prototype,"write",null),exports.AuthController=class extends G{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar"]}login(r,s,o,n){return y(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_AUTH);const{username:i,password:d}=s.body,l=yield P.findOne({where:{username:i}}).catch(this.error);if(!l)return n.emit("auth.failure",{req:s}),e.Responses.notfound(r,"Username not found");if(!l.state)return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Username is disabled");const u=a.SHA256(d).toString();if(l.password!=u)return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Invalid password");const p=l.id,c=t.uniqueID(),{error:g,token:y}=q.sign({id:p,secret:c});if(g)return n.emit("auth.failure",{req:s}),e.Responses.error(r,g);if(y){const t=Date.now(),n=t+6e4*m.API_TOKEN_LIFETIME,i=yield A.create({login:t,secret:c,timestamp:n,useragent:o,userId:p}).catch(this.error);if(i)return this.emit("auth.login",{auth:i,req:s,user:l}),e.Responses.data(r,{token:y})}return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Internal Server Error")}))}logout(t,r,s,o,n){return y(this,void 0,void 0,(function*(){return s&&o&&!s.logout?(s.logout=Date.now(),s.timestamp=s.logout,yield s.save(),n.emit("auth.logout",{auth:s,req:r,user:o}),e.Responses.success(t,"Disconcerted")):e.Responses.unauthorized(t,"Access denied")}))}user(r,s){return y(this,void 0,void 0,(function*(){const o=s.user;if(!o)return e.Responses.unauthorized(r,"Access denied");const n=yield N.all(o);if(n){const s=n.map((e=>e.name));return e.Responses.data(r,Object.assign(Object.assign({},t.allowedObject(this.attributes,o.toJSON())),{permissions:s}))}return e.Responses.error(r,"Internal Server Error")}))}},p([e.Post("/login"),e.Middleware("validation",{username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),c(2,e.Headers("user-agent")),c(3,e.App()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,D]),g("design:returntype",Promise)],exports.AuthController.prototype,"login",null),p([e.Get("/logout"),e.Middleware("auth"),c(0,e.Res()),c(1,e.Req()),c(2,M()),c(3,F()),c(4,e.App()),g("design:type",Function),g("design:paramtypes",[Object,Object,A,P,D]),g("design:returntype",Promise)],exports.AuthController.prototype,"logout",null),p([e.Get(),e.Middleware("auth"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.AuthController.prototype,"user",null),exports.AuthController=p([e.Controller("/auth"),e.Extends(G)],exports.AuthController),exports.ForgotController=class extends G{check(r,s){return y(this,void 0,void 0,(function*(){const{token:o}=s.body,n=yield this.findOne(o);return n&&n.user?(n.token=t.uniqueID(),yield n.save(),e.Responses.data(r,{token:n.token})):e.Responses.notfound(r,"User not found")}))}forgot(r,s){return y(this,void 0,void 0,(function*(){const{username:o}=s.body;yield t.sleep(m.API_SLEEP_FORGOT);const n=yield P.findOne({where:{username:o}}).catch(this.error);if(!n)return e.Responses.notfound(r,"User not found");const i=t.uniqueID(),a=Date.now()+6e4*m.API_TOKEN_LIFETIME,d=yield v.create({token:i,timestamp:a,state:!0,userId:n.id});return this.emit("forgot",{forgot:d,req:s,user:n}),e.Responses.success(r,"OK")}))}reset(t,r){return y(this,void 0,void 0,(function*(){const{token:s,password:o}=r.body,n=yield this.findOne(s);return n?(n.state=!1,yield n.save().catch(this.error),n.user.password=a.SHA256(o).toString(),yield n.user.save().catch(this.error),this.emit("forgot.reset",{req:r,user:n.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}findOne(e){return y(this,void 0,void 0,(function*(){return yield v.findOne({where:{token:e,state:!0},include:[{model:P,required:!0}]}).catch(this.error)}))}},p([e.Get("/check"),e.Middleware("validation",{token:t.Validation.string().required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"check",null),p([e.Get(),e.Middleware("validation",{username:t.Validation.string().min(4).required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"forgot",null),p([e.Get("/reset"),e.Middleware("validation",{token:t.Validation.string().required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"reset",null),exports.ForgotController=p([e.Controller("/forgot"),e.Extends(G)],exports.ForgotController),exports.ModelController=class extends G{add(t,r,s){return y(this,void 0,void 0,(function*(){const o=yield this.model().create(t.body,s||{}).catch(this.error);if(o){const t=o.id;return e.Responses.data(r,{id:t}),t}return e.Responses.error(r,"Internal Server Error"),0}))}all(r,o,n,i){var a,d,l,u,p;return y(this,void 0,void 0,(function*(){const c=this.model(),g=Object.assign({},n||{});g.where=Object.assign({},g.where||{});const y=null===(a=r.query.limit)||void 0===a?void 0:a.toString();y&&(g.limit=parseInt(y));const m=null===(d=r.query.offset)||void 0===d?void 0:d.toString();m&&(g.offset=parseInt(m));const h=Object.keys(c.getAttributes()),R=[],A=null===(l=r.query.asc)||void 0===l?void 0:l.toString();A&&A.length&&A.split(",").forEach((e=>{h.indexOf(e)>=0&&R.push([e,"ASC"])}));const v=null===(u=r.query.desc)||void 0===u?void 0:u.toString();v&&v.length&&v.split(",").forEach((e=>{h.indexOf(e)>=0&&R.push([e,"DESC"])})),R.length&&(g.order=R);const O=[],I=t.isArray(g.attributes)?g.attributes:h,_=null===(p=r.query.search)||void 0===p?void 0:p.toString();I.forEach((e=>{var o;if(t.isString(e)&&(_&&_.length&&O.push({[e]:{[s.Op.like]:`%${_}%`}}),"search_"+e in r.query)){const t=null===(o=r.query["search_"+e])||void 0===o?void 0:o.toString();t&&t.length&&O.push({[e]:{[s.Op.like]:`%${t}%`}})}})),O.length&&(g.where=Object.assign(Object.assign({},g.where),{[s.Op.or]:[...O]}));const P=yield c.count(Object.assign(Object.assign({},g),{col:h[0]})).catch(this.error),f=yield c.findAll(g).catch(this.error);if(f)return e.Responses.data(o,{count:P,records:i?i(f):f}),f;e.Responses.error(o,"Internal Server Error")}))}del(t,r,s){return y(this,void 0,void 0,(function*(){const{id:o}=t.params;if(!o)return e.Responses.error(r,"Internal Server Error"),0;const n=yield this.model().destroy(Object.assign(Object.assign({},s||{}),{where:{id:o}})).catch(this.error);return n?(e.Responses.success(r,"OK"),n):(e.Responses.notfound(r,"Record not found"),0)}))}error(e){e.sql?w.error(e.message+"\n"+e.sql,"api.controller.sql",m.API_CONSOLE_ERROR):super.error(e)}get(t,r,s,o){return y(this,void 0,void 0,(function*(){const n=Object.assign({},s||{});n.where=n.where?Object.assign({},n.where):{};const{id:i}=t.params,a=yield this.model().findByPk(i,n).catch(this.error);if(a)return e.Responses.data(r,o?o(a):a.toJSON()),a;null!==a?e.Responses.error(r,"Internal Server Error"):e.Responses.notfound(r,"Record not found")}))}name(){return this.model().tableName}set(t,r,s){return y(this,void 0,void 0,(function*(){const{id:o}=t.params,[n]=(yield this.model().update(t.body,Object.assign(Object.assign({},s||{}),{where:Object.assign(Object.assign({},(s||{}).where),{id:o})})).catch(this.error))||[];return n?(e.Responses.success(r,"OK"),!0):(e.Responses.success(r,"Record not changed"),!1)}))}},exports.ModelController=p([e.Extends(G)],exports.ModelController),exports.CrudController=class extends exports.ModelController{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(t,e,r,this.create())}validationSet(e,t,r){this.validation(t,e,r,this.update())}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationAdd"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationSet"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordSet",null),p([c(0,e.Req()),c(1,e.Res()),c(2,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function]),g("design:returntype",void 0)],exports.CrudController.prototype,"validationAdd",null),p([c(0,e.Req()),c(1,e.Res()),c(2,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function]),g("design:returntype",void 0)],exports.CrudController.prototype,"validationSet",null),exports.CrudController=p([e.Extends(exports.ModelController)],exports.CrudController),exports.GroupController=class extends exports.CrudController{model(){return O}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.GroupController=p([e.Controller("/groups"),e.Extends(exports.CrudController)],exports.GroupController),exports.GroupRouteController=class extends exports.ModelController{model(){return _}groupRouteAll(e,t,r){return y(this,void 0,void 0,(function*(){this.all(t,e,{where:{groupId:r},include:[{model:I,required:!0}]},(e=>e.map((e=>e.route))))}))}groupRouteSet(r,s,o){return y(this,void 0,void 0,(function*(){const n=yield O.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){const t=n.id;if(yield _.destroy({where:{groupId:t}}),o){let e=0;for(let r=0;r<o.length;r++)e=yield I.count({where:{id:o[r]}}),e&&(yield _.create({groupId:t,routeId:o[r]}))}return e.Responses.success(r,"OK")}return t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/routes"),e.Middleware("auth"),e.Middleware("read","groups"),c(0,e.Res()),c(1,e.Req()),c(2,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,String]),g("design:returntype",Promise)],exports.GroupRouteController.prototype,"groupRouteAll",null),p([e.Put("/:id/routes"),e.Middleware("auth"),e.Middleware("write","groups"),e.Middleware("validation",{routes:t.Validation.array(t.Validation.number().parse())}),c(0,e.Res()),c(1,e.Params("id")),c(2,e.Body("routes")),g("design:type",Function),g("design:paramtypes",[Object,String,Array]),g("design:returntype",Promise)],exports.GroupRouteController.prototype,"groupRouteSet",null),exports.GroupRouteController=p([e.Controller("/groups"),e.Extends(exports.ModelController)],exports.GroupRouteController),exports.LogsController=class extends exports.ModelController{model(){return E}logsAll(e,t){const{source:r,type:s}=t.query,o=r&&s?{source:r,type:s}:r?{source:r}:s?{type:s}:{};this.all(t,e,{where:o,order:[["created","DESC"]]})}},p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.LogsController.prototype,"logsAll",null),exports.LogsController=p([e.Controller("/logs"),e.Extends(exports.ModelController)],exports.LogsController);class L extends s.Model{}L.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"}),exports.RegisterController=class extends G{confirm(t,r){return y(this,void 0,void 0,(function*(){const s=yield L.findOne({where:{token:r,state:!0},include:[{model:P,required:!0}]}).catch(this.error);return s?(s.user.state=!0,yield s.user.save().catch(this.error),this.emit("user.confirm",{user:s.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}register(r,s,o,n){return y(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_REGISTRY);const s=yield P.findOne({where:{username:n}}).catch(this.error);if(s)return e.Responses.error(r,"Invalid Username");if(!t.isNull(s))return e.Responses.error(r,"Internal Server Error");const i=yield P.create(Object.assign(Object.assign({},o),{state:!1}));return this.emit("user.register",{user:i}),e.Responses.success(r,"OK")}))}},p([e.Get("/confirm"),e.Middleware("validation",{token:t.Validation.string().required()}),c(0,e.Res()),c(1,e.Body("token")),g("design:type",Function),g("design:paramtypes",[Object,String]),g("design:returntype",Promise)],exports.RegisterController.prototype,"confirm",null),p([e.Get(),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),c(2,e.Body()),c(3,e.Body("username")),g("design:type",Function),g("design:paramtypes",[Object,Object,Object,String]),g("design:returntype",Promise)],exports.RegisterController.prototype,"register",null),exports.RegisterController=p([e.Controller("/register"),e.Extends(G)],exports.RegisterController),exports.RouteController=class extends exports.CrudController{model(){return I}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.RouteController=p([e.Controller("/routes"),e.Extends(exports.CrudController)],exports.RouteController),exports.SetupController=class extends G{setup(r){return y(this,void 0,void 0,(function*(){if(0==(yield P.count())){const e={description:"",state:!0},r=yield P.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),s=yield O.create(Object.assign({name:"admin"},e));yield f.create({userId:r.id,groupId:s.id});const o=["read","write"],n=["users","groups","routes"];yield t.forEachSeries(n,(r=>y(this,void 0,void 0,(function*(){yield t.forEachSeries(o,(t=>y(this,void 0,void 0,(function*(){const o=r+"."+t,n=yield I.create(Object.assign({name:o},e));yield _.create({groupId:s.id,routeId:n.id})}))))}))));const i=yield I.create(Object.assign({name:"logs.read"},e));yield _.create({groupId:s.id,routeId:i.id})}return e.Responses.success(r,"OK")}))}},p([e.Get(),c(0,e.Res()),g("design:type",Function),g("design:paramtypes",[Object]),g("design:returntype",Promise)],exports.SetupController.prototype,"setup",null),exports.SetupController=p([e.Controller("/setup"),e.Extends(G)],exports.SetupController),exports.UserController=class extends exports.ModelController{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar","description","state","created","updated"]}model(){return P}userAdd(e,t){t.body.password=a.SHA256(t.body.password).toString(),this.add(t,e)}userAll(e,t){this.all(t,e,{attributes:this.attributes})}userDel(t,r,s,o){if(!s||s.id.toString()==o)return e.Responses.error(t,"Internal Server Error");this.del(r,t)}userGet(e,t){this.get(t,e,{attributes:this.attributes})}userSet(e,t){t.body.password&&(t.body.password=a.SHA256(t.body.password).toString()),this.set(t,e)}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required(),description:t.Validation.string().required(),state:t.Validation.boolean().parse().required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),c(0,e.Res()),c(1,e.Req()),c(2,F()),c(3,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,P,String]),g("design:returntype",Object)],exports.UserController.prototype,"userDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().empty(),email:t.Validation.string().email().empty(),username:t.Validation.string().min(4).empty(),password:t.Validation.string().min(5).empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userSet",null),exports.UserController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UserController),exports.UserGroupController=class extends exports.ModelController{model(){return f}userGroupsAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:O,required:!0}]},(e=>e.map((e=>e.group))))}userGroupsSet(r,s,o){return y(this,void 0,void 0,(function*(){const n=yield P.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){if(yield f.destroy({where:{userId:n.id}}),o){let e=0;for(let t=0;t<o.length;t++)e=yield O.count({where:{id:o[t]}}),e&&(yield f.create({userId:n.id,groupId:o[t]}))}return e.Responses.success(r,"OK")}return t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/groups"),e.Middleware("auth"),e.Middleware("read","users"),c(0,e.Res()),c(1,e.Req()),c(2,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,String]),g("design:returntype",void 0)],exports.UserGroupController.prototype,"userGroupsAll",null),p([e.Put("/:id/groups"),e.Middleware("auth"),e.Middleware("write","users"),e.Middleware("validation",{groups:t.Validation.array(t.Validation.number().parse())}),c(0,e.Res()),c(1,e.Params("id")),c(2,e.Body("groups")),g("design:type",Function),g("design:paramtypes",[Object,String,Array]),g("design:returntype",Promise)],exports.UserGroupController.prototype,"userGroupsSet",null),exports.UserGroupController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UserGroupController),exports.Application=D,exports.Auth=A,exports.Config=j,exports.Configs=T,exports.ControllerBase=G,exports.Database=h,exports.Env=m,exports.Forgot=v,exports.Group=O,exports.GroupRoute=_,exports.Log=w,exports.Logs=E,exports.Permission=N,exports.ReqAuth=M,exports.ReqUser=F,exports.Route=I,exports.Token=q,exports.User=P,exports.UserGroup=f,exports.crt=S,exports.key=C,exports.sequelize=R;

package/dist/index.d.ts

@@ -1,11 +1,10 @@
 /*!
- * @andrewcaires/api v3.0.4
+ * @andrewcaires/api v3.0.6
  * Simple api for small applications using express, jsonwebtoken, sequelize and websocket 
  * (c) 2023 Andrew Caires
  * @license: MIT
  */
-import * as _andrewcaires_express from '@andrewcaires/express';
-import { Application as Application$1 } from '@andrewcaires/express';
+import { ResponseJson, Application as Application$1 } from '@andrewcaires/express';
 import WebSocket from 'ws';
 import { EventEmitter, TypeObject, ValidationBase, TypeObjectString } from '@andrewcaires/utils.js';
 import { Response, Request, NextFunction } from 'express';
@@ -93,14 +92,14 @@ interface UploadOptions {
     types?: string[];
 }
 declare abstract class ControllerBase extends EventEmitter {
-    auth(res: Response, req: Request, token: string, useragent: string, next: NextFunction): Promise<void | _andrewcaires_express.ResponseJson>;
+    auth(res: Response, req: Request, token: string, useragent: string, next: NextFunction): Promise<ResponseJson | void>;
     error(error: any): void;
     protected name(): string;
-    permission(res: Response, user: User, next: NextFunction, name: string): Promise<void | _andrewcaires_express.ResponseJson>;
-    read(res: Response, user: User, next: NextFunction, name: string): Promise<void | _andrewcaires_express.ResponseJson>;
+    permission(res: Response, user: User, next: NextFunction, name: string): Promise<ResponseJson | void>;
+    read(res: Response, user: User, next: NextFunction, name: string): Promise<ResponseJson | void>;
     upload(res: Response, req: Request, next: NextFunction, options: UploadOptions): void;
-    validation(res: Response, req: Request, next: NextFunction, options: TypeObject<ValidationBase>): Promise<void | _andrewcaires_express.ResponseJson>;
-    write(res: Response, user: User, next: NextFunction, name: string): Promise<void | _andrewcaires_express.ResponseJson>;
+    validation(res: Response, req: Request, next: NextFunction, options: TypeObject<ValidationBase>): Promise<ResponseJson | void>;
+    write(res: Response, user: User, next: NextFunction, name: string): Promise<ResponseJson | void>;
 }
 
 declare class Application extends Application$1 {
@@ -122,15 +121,15 @@ declare class Config {
 
 declare class AuthController extends ControllerBase {
     readonly attributes: string[];
-    protected login(res: Response, req: Request, useragent: string, app: Application): Promise<_andrewcaires_express.ResponseJson>;
-    protected logout(res: Response, req: Request, auth: Auth, user: User, app: Application): Promise<_andrewcaires_express.ResponseJson>;
-    protected user(res: Response, req: Request): Promise<_andrewcaires_express.ResponseJson>;
+    protected login(res: Response, req: Request, useragent: string, app: Application): Promise<ResponseJson>;
+    protected logout(res: Response, req: Request, auth: Auth, user: User, app: Application): Promise<ResponseJson>;
+    protected user(res: Response, req: Request): Promise<ResponseJson>;
 }
 
 declare class ForgotController extends ControllerBase {
-    check(res: Response, req: Request): Promise<_andrewcaires_express.ResponseJson>;
-    forgot(res: Response, req: Request): Promise<_andrewcaires_express.ResponseJson>;
-    reset(res: Response, req: Request): Promise<_andrewcaires_express.ResponseJson>;
+    check(res: Response, req: Request): Promise<ResponseJson>;
+    forgot(res: Response, req: Request): Promise<ResponseJson>;
+    reset(res: Response, req: Request): Promise<ResponseJson>;
     private findOne;
 }
 
@@ -167,18 +166,18 @@ declare class GroupController extends CrudController<Group> {
 
 declare class GroupRouteController extends ModelController<GroupRoute> {
     model(): typeof GroupRoute;
-    groupRouteAll(res: Response, req: Request, groupId: string): Promise<void | GroupRoute[]>;
-    groupRouteSet(res: Response, id: string, routes: Array<number>): Promise<_andrewcaires_express.ResponseJson>;
+    groupRouteAll(res: Response, req: Request, groupId: string): Promise<void>;
+    groupRouteSet(res: Response, id: string, routes: Array<number>): Promise<ResponseJson>;
 }
 
 declare class LogsController extends ModelController<Logs> {
     model(): typeof Logs;
-    protected logsAll(res: Response, req: Request): Promise<void | Logs[]>;
+    protected logsAll(res: Response, req: Request): void;
 }
 
 declare class RegisterController extends ControllerBase {
-    confirm(res: Response, token: string): Promise<_andrewcaires_express.ResponseJson>;
-    register(res: Response, req: Request, body: any, username: string): Promise<_andrewcaires_express.ResponseJson>;
+    confirm(res: Response, token: string): Promise<ResponseJson>;
+    register(res: Response, req: Request, body: any, username: string): Promise<ResponseJson>;
 }
 
 declare class RouteController extends CrudController<Route> {
@@ -188,23 +187,23 @@ declare class RouteController extends CrudController<Route> {
 }
 
 declare class SetupController extends ControllerBase {
-    protected setup(res: Response): Promise<_andrewcaires_express.ResponseJson>;
+    protected setup(res: Response): Promise<ResponseJson>;
 }
 
 declare class UserController extends ModelController<User> {
     private readonly attributes;
     model(): typeof User;
-    userAdd(res: Response, req: Request): Promise<number>;
-    protected userAll(res: Response, req: Request): Promise<void | User[]>;
-    protected userDel(res: Response, req: Request, user: User, id: string): Promise<number | _andrewcaires_express.ResponseJson>;
-    protected userGet(res: Response, req: Request): Promise<User | undefined>;
-    protected userSet(res: Response, req: Request): Promise<boolean>;
+    userAdd(res: Response, req: Request): void;
+    protected userAll(res: Response, req: Request): void;
+    protected userDel(res: Response, req: Request, user: User, id: string): ResponseJson | void;
+    protected userGet(res: Response, req: Request): void;
+    protected userSet(res: Response, req: Request): void;
 }
 
 declare class UserGroupController extends ModelController<UserGroup> {
     model(): typeof UserGroup;
-    userGroupsAll(res: Response, req: Request, userId: string): Promise<void | UserGroup[]>;
-    userGroupsSet(res: Response, id: string, groups: Array<number>): Promise<_andrewcaires_express.ResponseJson>;
+    userGroupsAll(res: Response, req: Request, userId: string): void;
+    userGroupsSet(res: Response, id: string, groups: Array<number>): Promise<ResponseJson>;
 }
 
 interface DatabaseOptions {

package/dist/index.esm.js

@@ -1,7 +1,7 @@
 /*!
- * @andrewcaires/api v3.0.4
+ * @andrewcaires/api v3.0.6
  * Simple api for small applications using express, jsonwebtoken, sequelize and websocket 
  * (c) 2023 Andrew Caires
  * @license: MIT
  */
-import{Application as e,parameterFactory as t,Res as r,Req as n,Headers as i,Next as s,Argument as o,Responses as d,Post as a,Middleware as u,App as c,Get as l,Controller as p,Extends as m,Delete as g,Put as y,Params as h,Body as v}from"@andrewcaires/express";import{toBool as O,dateFormat as _,sleep as I,EventEmitter as f,Validation as A,uuidv4 as P,uniqueID as E,allowedObject as b,isArray as T,isString as S,isNull as R,forEachSeries as w}from"@andrewcaires/utils.js";import j from"ws";import{Sequelize as N,DataTypes as q,Model as F,Op as D}from"sequelize";import{config as L}from"dotenv";import{existsSync as B,readFileSync as k}from"fs";import{sign as G,verify as C}from"jsonwebtoken";import{SHA256 as x}from"crypto-js";import K from"mime-types";import U from"multer";import{join as H}from"path";function z(e,t,r,n){var i,s=arguments.length,o=s<3?t:null===n?n=Object.getOwnPropertyDescriptor(t,r):n;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,r,n);else for(var d=e.length-1;d>=0;d--)(i=e[d])&&(o=(s<3?i(o):s>3?i(t,r,o):i(t,r))||o);return s>3&&o&&Object.defineProperty(t,r,o),o}function M(e,t){return function(r,n){t(r,n,e)}}function X(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function Y(e,t,r,n){return new(r||(r=Promise))((function(i,s){function o(e){try{a(n.next(e))}catch(e){s(e)}}function d(e){try{a(n.throw(e))}catch(e){s(e)}}function a(e){var t;e.done?i(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(o,d)}a((n=n.apply(e,t||[])).next())}))}L();class W{}W.API_CONSOLE_ERROR=O(process.env.API_CONSOLE_ERROR||"false"),W.API_DB_DATABASE=process.env.API_DB_DATABASE||"",W.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",W.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",W.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),W.API_DB_TYPE=process.env.API_DB_TYPE||"",W.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",W.API_DB_LOG=O(process.env.API_DB_LOG||"false"),W.API_TABLE_PREFIX=process.env.API_TABLE_PREFIX||"",W.API_HTTP_CRT=process.env.API_HTTP_CRT||"",W.API_HTTP_KEY=process.env.API_HTTP_KEY||"",W.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),W.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",W.API_HTTP_CROSS=O(process.env.API_HTTP_CROSS||"false"),W.API_HTTP_HYBRID=O(process.env.API_HTTP_HYBRID||"false"),W.API_SLEEP_AUTH=parseInt(process.env.API_SLEEP_AUTH||"1000"),W.API_SLEEP_FORGOT=parseInt(process.env.API_SLEEP_FORGOT||"5000"),W.API_SLEEP_REGISTRY=parseInt(process.env.API_SLEEP_REGISTRY||"5000"),W.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",W.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",W.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",W.API_TOKEN_LIFETIME=parseInt(process.env.API_TOKEN_LIFETIME||"15"),W.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),W.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",W.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),W.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",W.API_WEBSOCKET_START=O(process.env.API_WEBSOCKET_START||"false");class J{static connect(e){const t="connect_"+W.API_DB_TYPE.toLowerCase();if(t in J)return J[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new N(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:W.API_DB_LOG,define:{timestamps:!1}})}static connect_memory(){return new N("sqlite::memory:",{logging:W.API_DB_LOG,define:{timestamps:!1}})}static connect_mysql(e){return new N(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:W.API_DB_LOG,define:{timestamps:!1}})}static connect_postgres(e){return new N(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:W.API_DB_LOG,define:{timestamps:!1}})}static connect_sqlite(e){return new N({dialect:"sqlite",storage:e.database,logging:W.API_DB_LOG,define:{timestamps:!1}})}}const Z=J.connect({database:W.API_DB_DATABASE,username:W.API_DB_USERNAME,password:W.API_DB_PASSWORD,hostname:W.API_DB_HOST,hostport:W.API_DB_PORT});class $ extends F{}$.init({login:q.BIGINT,logout:q.BIGINT,secret:q.STRING,timestamp:q.BIGINT,useragent:q.STRING},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class Q extends F{}Q.init({token:q.STRING,timestamp:q.BIGINT,state:q.BOOLEAN},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class V extends F{}V.init({name:q.STRING,description:q.TEXT,state:q.BOOLEAN},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ee extends F{}ee.init({name:q.STRING,description:q.TEXT,state:q.BOOLEAN},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class te extends F{}te.init({},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),te.removeAttribute("id");class re extends F{}re.init({name:q.STRING,email:q.STRING,username:q.STRING,password:q.STRING,avatar:q.STRING,description:q.TEXT,state:q.BOOLEAN},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ne extends F{}ne.init({},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),ne.removeAttribute("id");class ie extends F{}ie.init({key:q.STRING,value:q.STRING},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),ie.removeAttribute("id");class se extends F{}var oe;se.init({type:q.STRING,source:q.STRING,message:q.TEXT},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"logs",timestamps:!0,createdAt:"created",updatedAt:!1}),re.hasMany($),$.belongsTo(re),re.hasMany(Q),Q.belongsTo(re),V.hasMany(te),te.belongsTo(V),ee.hasMany(te),te.belongsTo(ee),re.hasMany(ne),ne.belongsTo(re),V.hasMany(ne),ne.belongsTo(V),function(e){e.ERROR="",e.INFO="",e.NONE="",e.SUCCESS="",e.WARNING=""}(oe||(oe={}));class de{static write(e,t,r){return Y(this,void 0,void 0,(function*(){yield de.writeRaw(oe.NONE,"",e,t,r)}))}static error(e,t,r){return Y(this,void 0,void 0,(function*(){yield de.writeRaw(oe.ERROR,"error",e,t,r)}))}static info(e,t,r){return Y(this,void 0,void 0,(function*(){yield de.writeRaw(oe.INFO,"info",e,t,r)}))}static success(e,t,r){return Y(this,void 0,void 0,(function*(){yield de.writeRaw(oe.ERROR,"success",e,t,r)}))}static warning(e,t,r){return Y(this,void 0,void 0,(function*(){yield de.writeRaw(oe.WARNING,"warning",e,t,r)}))}static writeConsole(e,t,r){const n=_(new Date,"%H:%M:%S");console.log(">",e,t+" ".repeat(10-t.length),"","|",n,"|",r)}static writeRaw(e,t,r,n,i){return Y(this,void 0,void 0,(function*(){i&&de.writeConsole(e,t,r),Z&&(yield se.create({type:t,source:n,message:r}).catch((()=>null)))}))}}const ae=e=>B(e)?k(e):void 0,ue={http:ae(W.API_HTTP_CRT),token:ae(W.API_TOKEN_CRT)},ce={http:ae(W.API_HTTP_KEY),token:ae(W.API_TOKEN_KEY)};class le{static error(e){de.error(e.message,"api.token",W.API_CONSOLE_ERROR)}static sign(e){return ce.token?{token:G(e,ce.token,{algorithm:"RS256"})}:{error:"Invalid Secret"}}static user(e){return Y(this,void 0,void 0,(function*(){const{error:t,decode:r}=le.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&r){const r=yield re.findOne({where:{id:e,state:!0}}).catch(le.error);if(r){const e=yield $.findOne({where:{secret:t,userId:r.id}}).catch(le.error);if(e){const t=Date.now();if(t>e.timestamp)return e.logout=t,yield e.save(),{error:"Expired token"};if(e.timestamp=t+6e4*W.API_TOKEN_LIFETIME,!e.logout)return yield e.save(),{auth:e,user:r}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e){if(!ue.token)return{error:"Invalid Secret"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:C(e,ue.token)}}catch(e){return{error:"Invalid Token"}}}}class pe extends e{constructor(e){super(e,{cert:ue.http,cross:W.API_HTTP_CROSS,hybrid:W.API_HTTP_HYBRID,key:ce.http,path:"/api",port:W.API_HTTP_PORT,public:W.API_HTTP_PUBLIC})}error(e,t){de.info(e.message,t,W.API_CONSOLE_ERROR)}log(e,t){de.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return Y(this,void 0,void 0,(function*(){yield Z.sync(),yield e.listen.call(this),W.API_WEBSOCKET_START&&this.server&&(this._webSocket=new j.Server({server:this.server,verifyClient:(e,t)=>t(W.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,t)=>Y(this,void 0,void 0,(function*(){t.url||(t.url="");const r=t.url.length<=1?"":t.url.replace(/\//g,".");let n;e.on("message",(i=>Y(this,void 0,void 0,(function*(){if(n)try{const s=JSON.parse(i);this.emit("ws.message"+r,{data:s,message:i,req:t,user:n,ws:e})}catch(s){this.emit("ws.message"+r,{message:i,req:t,user:n,ws:e})}else{const{user:s}=yield le.user(i.toString());s&&(n=s,this.emit("ws.connection"+r,{req:t,user:n,ws:e}))}n||e.close()})))),e.on("close",(()=>{n&&this.emit("ws.close"+r,{user:n,ws:e})})),yield I(2e3),n||e.close()})))))}))}websocket(){return this._webSocket}}class me{static all(){return Y(this,void 0,void 0,(function*(){const e=yield ie.findAll().catch(me.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return Y(this,void 0,void 0,(function*(){return((yield ie.destroy({where:{key:e}}).catch(me.error))||0)>0}))}static error(e){de.error(e.message,"api.config",W.API_CONSOLE_ERROR)}static get(e){return Y(this,void 0,void 0,(function*(){const t=yield ie.findOne({where:{key:e}}).catch(me.error);return t&&t.value||""}))}static set(e,t){return Y(this,void 0,void 0,(function*(){const[r]=(yield ie.findOrCreate({where:{key:e}}).catch(me.error))||[];r&&(r.value=t,yield r.save().catch(me.error))}))}}class ge{static all(e,t){return Y(this,void 0,void 0,(function*(){return yield ee.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:te,required:!0,include:[{model:V,required:!0,where:{state:!0},include:[{model:ne,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{de.error(e.message,"api.permission",W.API_CONSOLE_ERROR)}))}))}static get(e){return Y(this,void 0,void 0,(function*(){const t=yield ge.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return Y(this,void 0,void 0,(function*(){const r=yield ge.all(e,{name:t});return!!r&&r.length>0}))}}const ye=t((({req:e})=>e.auth)),he=t((({req:e})=>e.user)),ve=(e,t)=>{const r=P()+"."+t;return B(H(e,r))?ve(e,t):r};class Oe extends f{auth(e,t,r,n,i){return Y(this,void 0,void 0,(function*(){const{auth:s,error:o,user:a}=yield le.user(r);return o?d.error(e,o):s&&a?(n&&(s.useragent=n),yield s.save(),t.auth=s,t.user=a,i()):d.error(e,"Internal Server Error")}))}error(e){de.error(e.message,"api.controller",W.API_CONSOLE_ERROR)}name(){return"api"}permission(e,t,r,n){return Y(this,void 0,void 0,(function*(){return t?(yield ge.is(t,n))?r():d.error(e,"Unauthorized access"):d.unauthorized(e,"Access denied")}))}read(e,t,r,n){return this.permission(e,t,r,(n||this.name())+".read")}upload(e,t,r,n){const i=(null==n?void 0:n.path)||W.API_UPLOAD_TEMP,s=U.diskStorage({destination:(e,t,r)=>r(null,i),filename:(e,t,r)=>Y(this,void 0,void 0,(function*(){return r(null,ve(i,K.extension(t.mimetype)||"bin"))}))}),o=1e6*((null==n?void 0:n.size)||W.API_UPLOAD_SIZE),a=U({storage:s,fileFilter(e,t,r){var i;return Y(this,void 0,void 0,(function*(){const e=null===(i=null==n?void 0:n.types)||void 0===i?void 0:i.indexOf(t.mimetype);return void 0!==e&&e<0?r(new Error("File type not allowed")):r(null,!0)}))},limits:{fileSize:o}}),u=(null==n?void 0:n.count)||W.API_UPLOAD_COUNT,c=(null==n?void 0:n.field)||W.API_UPLOAD_FIELD;a.array(c,u)(t,e,(t=>t?d.error(e,t.message):r()))}validation(e,t,r,n){return Y(this,void 0,void 0,(function*(){const{error:i,value:s}=yield A.object(n).parse().validateAsync(t.body);return i?d.validation(e,i):(t.body=s,r())}))}write(e,t,r,n){return this.permission(e,t,r,(n||this.name())+".write")}}z([M(0,r()),M(1,n()),M(2,i(W.API_TOKEN_HEADER)),M(3,i("user-agent")),M(4,s()),X("design:type",Function),X("design:paramtypes",[Object,Object,String,String,Function]),X("design:returntype",Promise)],Oe.prototype,"auth",null),z([M(0,r()),M(1,he()),M(2,s()),M(3,o()),X("design:type",Function),X("design:paramtypes",[Object,re,Function,String]),X("design:returntype",Promise)],Oe.prototype,"permission",null),z([M(0,r()),M(1,he()),M(2,s()),M(3,o()),X("design:type",Function),X("design:paramtypes",[Object,re,Function,String]),X("design:returntype",void 0)],Oe.prototype,"read",null),z([M(0,r()),M(1,n()),M(2,s()),M(3,o()),X("design:type",Function),X("design:paramtypes",[Object,Object,Function,Object]),X("design:returntype",void 0)],Oe.prototype,"upload",null),z([M(0,r()),M(1,n()),M(2,s()),M(3,o()),X("design:type",Function),X("design:paramtypes",[Object,Object,Function,Object]),X("design:returntype",Promise)],Oe.prototype,"validation",null),z([M(0,r()),M(1,he()),M(2,s()),M(3,o()),X("design:type",Function),X("design:paramtypes",[Object,re,Function,String]),X("design:returntype",void 0)],Oe.prototype,"write",null);let _e=class extends Oe{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar"]}login(e,t,r,n){return Y(this,void 0,void 0,(function*(){yield I(W.API_SLEEP_AUTH);const{username:i,password:s}=t.body,o=yield re.findOne({where:{username:i}}).catch(this.error);if(!o)return n.emit("auth.failure",{req:t}),d.notfound(e,"Username not found");if(!o.state)return n.emit("auth.failure",{req:t}),d.error(e,"Username is disabled");const a=x(s).toString();if(o.password!=a)return n.emit("auth.failure",{req:t}),d.error(e,"Invalid password");const u=o.id,c=E(),{error:l,token:p}=le.sign({id:u,secret:c});if(l)return n.emit("auth.failure",{req:t}),d.error(e,l);if(p){const n=Date.now(),i=n+6e4*W.API_TOKEN_LIFETIME,s=yield $.create({login:n,secret:c,timestamp:i,useragent:r,userId:u}).catch(this.error);if(s)return this.emit("auth.login",{auth:s,req:t,user:o}),d.data(e,{token:p})}return n.emit("auth.failure",{req:t}),d.error(e,"Internal Server Error")}))}logout(e,t,r,n,i){return Y(this,void 0,void 0,(function*(){return r&&n&&!r.logout?(r.logout=Date.now(),r.timestamp=r.logout,yield r.save(),i.emit("auth.logout",{auth:r,req:t,user:n}),d.success(e,"Disconcerted")):d.unauthorized(e,"Access denied")}))}user(e,t){return Y(this,void 0,void 0,(function*(){const r=t.user;if(!r)return d.unauthorized(e,"Access denied");const n=yield ge.all(r);if(n){const t=n.map((e=>e.name));return d.data(e,Object.assign(Object.assign({},b(this.attributes,r.toJSON())),{permissions:t}))}return d.error(e,"Internal Server Error")}))}};z([a("/login"),u("validation",{username:A.string().min(4).required(),password:A.string().min(5).required()}),M(0,r()),M(1,n()),M(2,i("user-agent")),M(3,c()),X("design:type",Function),X("design:paramtypes",[Object,Object,String,pe]),X("design:returntype",Promise)],_e.prototype,"login",null),z([l("/logout"),u("auth"),M(0,r()),M(1,n()),M(2,ye()),M(3,he()),M(4,c()),X("design:type",Function),X("design:paramtypes",[Object,Object,$,re,pe]),X("design:returntype",Promise)],_e.prototype,"logout",null),z([l(),u("auth"),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",Promise)],_e.prototype,"user",null),_e=z([p("/auth"),m(Oe)],_e);let Ie=class extends Oe{check(e,t){return Y(this,void 0,void 0,(function*(){const{token:r}=t.body,n=yield this.findOne(r);return n&&n.user?(n.token=E(),yield n.save(),d.data(e,{token:n.token})):d.notfound(e,"User not found")}))}forgot(e,t){return Y(this,void 0,void 0,(function*(){const{username:r}=t.body;yield I(W.API_SLEEP_FORGOT);const n=yield re.findOne({where:{username:r}}).catch(this.error);if(!n)return d.notfound(e,"User not found");const i=E(),s=Date.now()+6e4*W.API_TOKEN_LIFETIME,o=yield Q.create({token:i,timestamp:s,state:!0,userId:n.id});return this.emit("forgot",{forgot:o,req:t,user:n}),d.success(e,"OK")}))}reset(e,t){return Y(this,void 0,void 0,(function*(){const{token:r,password:n}=t.body,i=yield this.findOne(r);return i?(i.state=!1,yield i.save().catch(this.error),i.user.password=x(n).toString(),yield i.user.save().catch(this.error),this.emit("forgot.reset",{req:t,user:i.user}),d.success(e,"OK")):d.notfound(e,"User not found")}))}findOne(e){return Y(this,void 0,void 0,(function*(){return yield Q.findOne({where:{token:e,state:!0},include:[{model:re,required:!0}]}).catch(this.error)}))}};z([l("/check"),u("validation",{token:A.string().required()}),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",Promise)],Ie.prototype,"check",null),z([l(),u("validation",{username:A.string().min(4).required()}),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",Promise)],Ie.prototype,"forgot",null),z([l("/reset"),u("validation",{token:A.string().required(),password:A.string().min(5).required()}),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",Promise)],Ie.prototype,"reset",null),Ie=z([p("/forgot"),m(Oe)],Ie);let fe=class extends Oe{add(e,t,r){return Y(this,void 0,void 0,(function*(){const n=yield this.model().create(e.body,r||{}).catch(this.error);if(n){const e=n.id;return d.data(t,{id:e}),e}return d.error(t,"Internal Server Error"),0}))}all(e,t,r,n){var i,s,o,a,u;return Y(this,void 0,void 0,(function*(){const c=this.model(),l=Object.assign({},r||{});l.where=Object.assign({},l.where||{});const p=null===(i=e.query.limit)||void 0===i?void 0:i.toString();p&&(l.limit=parseInt(p));const m=null===(s=e.query.offset)||void 0===s?void 0:s.toString();m&&(l.offset=parseInt(m));const g=Object.keys(c.getAttributes()),y=[],h=null===(o=e.query.asc)||void 0===o?void 0:o.toString();h&&h.length&&h.split(",").forEach((e=>{g.indexOf(e)>=0&&y.push([e,"ASC"])}));const v=null===(a=e.query.desc)||void 0===a?void 0:a.toString();v&&v.length&&v.split(",").forEach((e=>{g.indexOf(e)>=0&&y.push([e,"DESC"])})),y.length&&(l.order=y);const O=[],_=T(l.attributes)?l.attributes:g,I=null===(u=e.query.search)||void 0===u?void 0:u.toString();_.forEach((t=>{var r;if(S(t)&&(I&&I.length&&O.push({[t]:{[D.like]:`%${I}%`}}),"search_"+t in e.query)){const n=null===(r=e.query["search_"+t])||void 0===r?void 0:r.toString();n&&n.length&&O.push({[t]:{[D.like]:`%${n}%`}})}})),O.length&&(l.where=Object.assign(Object.assign({},l.where),{[D.or]:[...O]}));const f=yield c.count(Object.assign(Object.assign({},l),{col:g[0]})).catch(this.error),A=yield c.findAll(l).catch(this.error);if(A)return d.data(t,{count:f,records:n?n(A):A}),A;d.error(t,"Internal Server Error")}))}del(e,t,r){return Y(this,void 0,void 0,(function*(){const{id:n}=e.params;if(!n)return d.error(t,"Internal Server Error"),0;const i=yield this.model().destroy(Object.assign(Object.assign({},r||{}),{where:{id:n}})).catch(this.error);return i?(d.success(t,"OK"),i):(d.notfound(t,"Record not found"),0)}))}error(e){e.sql?de.error(e.message+"\n"+e.sql,"api.controller.sql",W.API_CONSOLE_ERROR):super.error(e)}get(e,t,r,n){return Y(this,void 0,void 0,(function*(){const i=Object.assign({},r||{});i.where=i.where?Object.assign({},i.where):{};const{id:s}=e.params,o=yield this.model().findByPk(s,i).catch(this.error);if(o)return d.data(t,n?n(o):o.toJSON()),o;null!==o?d.error(t,"Internal Server Error"):d.notfound(t,"Record not found")}))}name(){return this.model().tableName}set(e,t,r){return Y(this,void 0,void 0,(function*(){const{id:n}=e.params,[i]=(yield this.model().update(e.body,Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{id:n})})).catch(this.error))||[];return i?(d.success(t,"OK"),!0):(d.success(t,"Record not changed"),!1)}))}};fe=z([m(Oe)],fe);let Ae=class extends fe{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(t,e,r,this.create())}validationSet(e,t,r){this.validation(t,e,r,this.update())}};z([a(),u("auth"),u("write"),u("validationAdd"),M(0,n()),M(1,r()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",void 0)],Ae.prototype,"recordAdd",null),z([l(),u("auth"),u("read"),M(0,n()),M(1,r()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",void 0)],Ae.prototype,"recordAll",null),z([g("/:id"),u("auth"),u("write"),M(0,n()),M(1,r()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",void 0)],Ae.prototype,"recordDel",null),z([l("/:id"),u("auth"),u("read"),M(0,n()),M(1,r()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",void 0)],Ae.prototype,"recordGet",null),z([y("/:id"),u("auth"),u("write"),u("validationSet"),M(0,n()),M(1,r()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",void 0)],Ae.prototype,"recordSet",null),z([M(0,n()),M(1,r()),M(2,s()),X("design:type",Function),X("design:paramtypes",[Object,Object,Function]),X("design:returntype",void 0)],Ae.prototype,"validationAdd",null),z([M(0,n()),M(1,r()),M(2,s()),X("design:type",Function),X("design:paramtypes",[Object,Object,Function]),X("design:returntype",void 0)],Ae.prototype,"validationSet",null),Ae=z([m(fe)],Ae);let Pe=class extends Ae{model(){return V}create(){return{name:A.string().required(),description:A.string().empty(""),state:A.boolean().parse().required()}}update(){return{name:A.string().empty(),description:A.string().empty(),state:A.boolean().parse().empty()}}};Pe=z([p("/groups"),m(Ae)],Pe);let Ee=class extends fe{model(){return te}groupRouteAll(e,t,r){return Y(this,void 0,void 0,(function*(){return this.all(t,e,{where:{groupId:r},include:[{model:ee,required:!0}]},(e=>e.map((e=>e.route))))}))}groupRouteSet(e,t,r){return Y(this,void 0,void 0,(function*(){const n=yield V.findByPk(t,{attributes:["id"]}).catch(this.error);if(n){const t=n.id;if(yield te.destroy({where:{groupId:t}}),r){let e=0;for(let n=0;n<r.length;n++)e=yield ee.count({where:{id:r[n]}}),e&&(yield te.create({groupId:t,routeId:r[n]}))}return d.success(e,"OK")}return R(n)?d.notfound(e,"Record not found"):d.error(e,"Internal Server Error")}))}};z([l("/:id/routes"),u("auth"),u("read","routes"),M(0,r()),M(1,n()),M(2,h("id")),X("design:type",Function),X("design:paramtypes",[Object,Object,String]),X("design:returntype",Promise)],Ee.prototype,"groupRouteAll",null),z([y("/:id/groups"),u("auth"),u("write","groups"),u("validation",{routes:A.array(A.number().parse())}),M(0,r()),M(1,h("id")),M(2,v("routes")),X("design:type",Function),X("design:paramtypes",[Object,String,Array]),X("design:returntype",Promise)],Ee.prototype,"groupRouteSet",null),Ee=z([p("/groups"),m(fe)],Ee);let be=class extends fe{model(){return se}logsAll(e,t){return Y(this,void 0,void 0,(function*(){const{source:r,type:n}=t.query,i=r&&n?{source:r,type:n}:r?{source:r}:n?{type:n}:{};return this.all(t,e,{where:i,order:[["created","DESC"]]})}))}};z([l(),u("auth"),u("read"),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",Promise)],be.prototype,"logsAll",null),be=z([p("/logs"),m(fe)],be);class Te extends F{}Te.init({token:q.STRING,timestamp:q.BIGINT,state:q.BOOLEAN},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"});let Se=class extends Oe{confirm(e,t){return Y(this,void 0,void 0,(function*(){const r=yield Te.findOne({where:{token:t,state:!0},include:[{model:re,required:!0}]}).catch(this.error);return r?(r.user.state=!0,yield r.user.save().catch(this.error),this.emit("user.confirm",{user:r.user}),d.success(e,"OK")):d.notfound(e,"User not found")}))}register(e,t,r,n){return Y(this,void 0,void 0,(function*(){yield I(W.API_SLEEP_REGISTRY);const t=yield re.findOne({where:{username:n}}).catch(this.error);if(t)return d.error(e,"Invalid Username");if(!R(t))return d.error(e,"Internal Server Error");const i=yield re.create(Object.assign(Object.assign({},r),{state:!1}));return this.emit("user.register",{user:i}),d.success(e,"OK")}))}};z([l("/confirm"),u("validation",{token:A.string().required()}),M(0,r()),M(1,v("token")),X("design:type",Function),X("design:paramtypes",[Object,String]),X("design:returntype",Promise)],Se.prototype,"confirm",null),z([l(),u("validation",{name:A.string().required(),email:A.string().email().required(),username:A.string().min(4).required(),password:A.string().min(5).required()}),M(0,r()),M(1,n()),M(2,v()),M(3,v("username")),X("design:type",Function),X("design:paramtypes",[Object,Object,Object,String]),X("design:returntype",Promise)],Se.prototype,"register",null),Se=z([p("/register"),m(Oe)],Se);let Re=class extends Ae{model(){return ee}create(){return{name:A.string().required(),description:A.string().empty(""),state:A.boolean().parse().required()}}update(){return{name:A.string().empty(),description:A.string().empty(),state:A.boolean().empty()}}};Re=z([p("/routes"),m(Ae)],Re);let we=class extends Oe{setup(e){return Y(this,void 0,void 0,(function*(){if(0==(yield re.count())){const e={description:"",state:!0},t=yield re.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),r=yield V.create(Object.assign({name:"admin"},e));yield ne.create({userId:t.id,groupId:r.id});const n=["read","write"],i=["users","groups","routes"];yield w(i,(t=>Y(this,void 0,void 0,(function*(){yield w(n,(n=>Y(this,void 0,void 0,(function*(){const i=t+"."+n,s=yield ee.create(Object.assign({name:i},e));yield te.create({groupId:r.id,routeId:s.id})}))))}))));const s=yield ee.create(Object.assign({name:"logs.read"},e));yield te.create({groupId:r.id,routeId:s.id})}return d.success(e,"OK")}))}};z([l(),M(0,r()),X("design:type",Function),X("design:paramtypes",[Object]),X("design:returntype",Promise)],we.prototype,"setup",null),we=z([p("/setup"),m(Oe)],we);let je=class extends fe{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar","description","state","created","updated"]}model(){return re}userAdd(e,t){return Y(this,void 0,void 0,(function*(){return t.body.password=x(t.body.password).toString(),yield this.add(t,e)}))}userAll(e,t){return Y(this,void 0,void 0,(function*(){return this.all(t,e,{attributes:this.attributes})}))}userDel(e,t,r,n){return Y(this,void 0,void 0,(function*(){return r&&r.id.toString()!=n?this.del(t,e):d.error(e,"Internal Server Error")}))}userGet(e,t){return Y(this,void 0,void 0,(function*(){return this.get(t,e,{attributes:this.attributes})}))}userSet(e,t){return Y(this,void 0,void 0,(function*(){return t.body.password&&(t.body.password=x(t.body.password).toString()),this.set(t,e)}))}};z([a(),u("auth"),u("write"),u("validation",{name:A.string().required(),email:A.string().email().required(),username:A.string().min(4).required(),password:A.string().min(5).required(),description:A.string().required(),state:A.boolean().parse().required()}),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",Promise)],je.prototype,"userAdd",null),z([l(),u("auth"),u("read"),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",Promise)],je.prototype,"userAll",null),z([g("/:id"),u("auth"),u("write"),M(0,r()),M(1,n()),M(2,he()),M(3,h("id")),X("design:type",Function),X("design:paramtypes",[Object,Object,re,String]),X("design:returntype",Promise)],je.prototype,"userDel",null),z([l("/:id"),u("auth"),u("read"),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",Promise)],je.prototype,"userGet",null),z([y("/:id"),u("auth"),u("write"),u("validation",{name:A.string().empty(),email:A.string().email().empty(),username:A.string().min(4).empty(),password:A.string().min(5).empty(),description:A.string().empty(),state:A.boolean().parse().empty()}),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",Promise)],je.prototype,"userSet",null),je=z([p("/users"),m(fe)],je);let Ne=class extends fe{model(){return ne}userGroupsAll(e,t,r){return Y(this,void 0,void 0,(function*(){return this.all(t,e,{where:{userId:r},include:[{model:V,required:!0}]},(e=>e.map((e=>e.group))))}))}userGroupsSet(e,t,r){return Y(this,void 0,void 0,(function*(){const n=yield re.findByPk(t,{attributes:["id"]}).catch(this.error);if(n){if(yield ne.destroy({where:{userId:n.id}}),r){let e=0;for(let t=0;t<r.length;t++)e=yield V.count({where:{id:r[t]}}),e&&(yield ne.create({userId:n.id,groupId:r[t]}))}return d.success(e,"OK")}return R(n)?d.notfound(e,"Record not found"):d.error(e,"Internal Server Error")}))}};z([l("/:id/groups"),u("auth"),u("read","groups"),M(0,r()),M(1,n()),M(2,h("id")),X("design:type",Function),X("design:paramtypes",[Object,Object,String]),X("design:returntype",Promise)],Ne.prototype,"userGroupsAll",null),z([y("/:id/groups"),u("auth"),u("write","groups"),u("validation",{groups:A.array(A.number().parse())}),M(0,r()),M(1,h("id")),M(2,v("groups")),X("design:type",Function),X("design:paramtypes",[Object,String,Array]),X("design:returntype",Promise)],Ne.prototype,"userGroupsSet",null),Ne=z([p("/users"),m(fe)],Ne);export{pe as Application,$ as Auth,_e as AuthController,me as Config,ie as Configs,Oe as ControllerBase,Ae as CrudController,J as Database,W as Env,Q as Forgot,Ie as ForgotController,V as Group,Pe as GroupController,te as GroupRoute,Ee as GroupRouteController,de as Log,se as Logs,be as LogsController,fe as ModelController,ge as Permission,Se as RegisterController,ye as ReqAuth,he as ReqUser,ee as Route,Re as RouteController,we as SetupController,le as Token,re as User,je as UserController,ne as UserGroup,Ne as UserGroupController,ue as crt,ce as key,Z as sequelize};
+import{Application as e,parameterFactory as t,Res as r,Req as n,Headers as s,Next as i,Argument as o,Responses as a,Post as d,Middleware as u,App as c,Get as l,Controller as p,Extends as m,Delete as g,Put as y,Params as h,Body as v}from"@andrewcaires/express";import{toBool as O,dateFormat as _,sleep as I,EventEmitter as A,Validation as f,uuidv4 as P,uniqueID as E,allowedObject as b,isArray as T,isString as S,isNull as R,forEachSeries as w}from"@andrewcaires/utils.js";import j from"ws";import{Sequelize as N,DataTypes as q,Model as F,Op as D}from"sequelize";import{config as L}from"dotenv";import{existsSync as B,readFileSync as k}from"fs";import{sign as G,verify as C}from"jsonwebtoken";import{SHA256 as x}from"crypto-js";import K from"mime-types";import U from"multer";import{join as H}from"path";function z(e,t,r,n){var s,i=arguments.length,o=i<3?t:null===n?n=Object.getOwnPropertyDescriptor(t,r):n;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,r,n);else for(var a=e.length-1;a>=0;a--)(s=e[a])&&(o=(i<3?s(o):i>3?s(t,r,o):s(t,r))||o);return i>3&&o&&Object.defineProperty(t,r,o),o}function M(e,t){return function(r,n){t(r,n,e)}}function X(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function Y(e,t,r,n){return new(r||(r=Promise))((function(s,i){function o(e){try{d(n.next(e))}catch(e){i(e)}}function a(e){try{d(n.throw(e))}catch(e){i(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(o,a)}d((n=n.apply(e,t||[])).next())}))}L();class W{}W.API_CONSOLE_ERROR=O(process.env.API_CONSOLE_ERROR||"false"),W.API_DB_DATABASE=process.env.API_DB_DATABASE||"",W.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",W.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",W.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),W.API_DB_TYPE=process.env.API_DB_TYPE||"",W.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",W.API_DB_LOG=O(process.env.API_DB_LOG||"false"),W.API_TABLE_PREFIX=process.env.API_TABLE_PREFIX||"",W.API_HTTP_CRT=process.env.API_HTTP_CRT||"",W.API_HTTP_KEY=process.env.API_HTTP_KEY||"",W.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),W.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",W.API_HTTP_CROSS=O(process.env.API_HTTP_CROSS||"false"),W.API_HTTP_HYBRID=O(process.env.API_HTTP_HYBRID||"false"),W.API_SLEEP_AUTH=parseInt(process.env.API_SLEEP_AUTH||"1000"),W.API_SLEEP_FORGOT=parseInt(process.env.API_SLEEP_FORGOT||"5000"),W.API_SLEEP_REGISTRY=parseInt(process.env.API_SLEEP_REGISTRY||"5000"),W.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",W.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",W.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",W.API_TOKEN_LIFETIME=parseInt(process.env.API_TOKEN_LIFETIME||"15"),W.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),W.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",W.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),W.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",W.API_WEBSOCKET_START=O(process.env.API_WEBSOCKET_START||"false");class J{static connect(e){const t="connect_"+W.API_DB_TYPE.toLowerCase();if(t in J)return J[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new N(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:W.API_DB_LOG,define:{timestamps:!1}})}static connect_memory(){return new N("sqlite::memory:",{logging:W.API_DB_LOG,define:{timestamps:!1}})}static connect_mysql(e){return new N(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:W.API_DB_LOG,define:{timestamps:!1}})}static connect_postgres(e){return new N(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:W.API_DB_LOG,define:{timestamps:!1}})}static connect_sqlite(e){return new N({dialect:"sqlite",storage:e.database,logging:W.API_DB_LOG,define:{timestamps:!1}})}}const Z=J.connect({database:W.API_DB_DATABASE,username:W.API_DB_USERNAME,password:W.API_DB_PASSWORD,hostname:W.API_DB_HOST,hostport:W.API_DB_PORT});class $ extends F{}$.init({login:q.BIGINT,logout:q.BIGINT,secret:q.STRING,timestamp:q.BIGINT,useragent:q.STRING},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class Q extends F{}Q.init({token:q.STRING,timestamp:q.BIGINT,state:q.BOOLEAN},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class V extends F{}V.init({name:q.STRING,description:q.TEXT,state:q.BOOLEAN},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ee extends F{}ee.init({name:q.STRING,description:q.TEXT,state:q.BOOLEAN},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class te extends F{}te.init({},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),te.removeAttribute("id");class re extends F{}re.init({name:q.STRING,email:q.STRING,username:q.STRING,password:q.STRING,avatar:q.STRING,description:q.TEXT,state:q.BOOLEAN},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ne extends F{}ne.init({},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),ne.removeAttribute("id");class se extends F{}se.init({key:q.STRING,value:q.STRING},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),se.removeAttribute("id");class ie extends F{}var oe;ie.init({type:q.STRING,source:q.STRING,message:q.TEXT},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"logs",timestamps:!0,createdAt:"created",updatedAt:!1}),re.hasMany($),$.belongsTo(re),re.hasMany(Q),Q.belongsTo(re),V.hasMany(te),te.belongsTo(V),ee.hasMany(te),te.belongsTo(ee),re.hasMany(ne),ne.belongsTo(re),V.hasMany(ne),ne.belongsTo(V),function(e){e.ERROR="",e.INFO="",e.NONE="",e.SUCCESS="",e.WARNING=""}(oe||(oe={}));class ae{static write(e,t,r){return Y(this,void 0,void 0,(function*(){yield ae.writeRaw(oe.NONE,"",e,t,r)}))}static error(e,t,r){return Y(this,void 0,void 0,(function*(){yield ae.writeRaw(oe.ERROR,"error",e,t,r)}))}static info(e,t,r){return Y(this,void 0,void 0,(function*(){yield ae.writeRaw(oe.INFO,"info",e,t,r)}))}static success(e,t,r){return Y(this,void 0,void 0,(function*(){yield ae.writeRaw(oe.ERROR,"success",e,t,r)}))}static warning(e,t,r){return Y(this,void 0,void 0,(function*(){yield ae.writeRaw(oe.WARNING,"warning",e,t,r)}))}static writeConsole(e,t,r){const n=_(new Date,"%H:%M:%S");console.log(">",e,t+" ".repeat(10-t.length),"","|",n,"|",r)}static writeRaw(e,t,r,n,s){return Y(this,void 0,void 0,(function*(){s&&ae.writeConsole(e,t,r),Z&&(yield ie.create({type:t,source:n,message:r}).catch((()=>null)))}))}}const de=e=>B(e)?k(e):void 0,ue={http:de(W.API_HTTP_CRT),token:de(W.API_TOKEN_CRT)},ce={http:de(W.API_HTTP_KEY),token:de(W.API_TOKEN_KEY)};class le{static error(e){ae.error(e.message,"api.token",W.API_CONSOLE_ERROR)}static sign(e){return ce.token?{token:G(e,ce.token,{algorithm:"RS256"})}:{error:"Invalid Secret"}}static user(e){return Y(this,void 0,void 0,(function*(){const{error:t,decode:r}=le.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&r){const r=yield re.findOne({where:{id:e,state:!0}}).catch(le.error);if(r){const e=yield $.findOne({where:{secret:t,userId:r.id}}).catch(le.error);if(e){const t=Date.now();if(t>e.timestamp)return e.logout=t,yield e.save(),{error:"Expired token"};if(e.timestamp=t+6e4*W.API_TOKEN_LIFETIME,!e.logout)return yield e.save(),{auth:e,user:r}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e){if(!ue.token)return{error:"Invalid Secret"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:C(e,ue.token)}}catch(e){return{error:"Invalid Token"}}}}class pe extends e{constructor(e){super(e,{cert:ue.http,cross:W.API_HTTP_CROSS,hybrid:W.API_HTTP_HYBRID,key:ce.http,path:"/api",port:W.API_HTTP_PORT,public:W.API_HTTP_PUBLIC})}error(e,t){ae.info(e.message,t,W.API_CONSOLE_ERROR)}log(e,t){ae.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return Y(this,void 0,void 0,(function*(){yield Z.sync(),yield e.listen.call(this),W.API_WEBSOCKET_START&&this.server&&(this._webSocket=new j.Server({server:this.server,verifyClient:(e,t)=>t(W.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,t)=>Y(this,void 0,void 0,(function*(){t.url||(t.url="");const r=t.url.length<=1?"":t.url.replace(/\//g,".");let n;e.on("message",(s=>Y(this,void 0,void 0,(function*(){if(n)try{const i=JSON.parse(s);this.emit("ws.message"+r,{data:i,message:s,req:t,user:n,ws:e})}catch(i){this.emit("ws.message"+r,{message:s,req:t,user:n,ws:e})}else{const{user:i}=yield le.user(s.toString());i&&(n=i,this.emit("ws.connection"+r,{req:t,user:n,ws:e}))}n||e.close()})))),e.on("close",(()=>{n&&this.emit("ws.close"+r,{user:n,ws:e})})),yield I(2e3),n||e.close()})))))}))}websocket(){return this._webSocket}}class me{static all(){return Y(this,void 0,void 0,(function*(){const e=yield se.findAll().catch(me.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return Y(this,void 0,void 0,(function*(){return((yield se.destroy({where:{key:e}}).catch(me.error))||0)>0}))}static error(e){ae.error(e.message,"api.config",W.API_CONSOLE_ERROR)}static get(e){return Y(this,void 0,void 0,(function*(){const t=yield se.findOne({where:{key:e}}).catch(me.error);return t&&t.value||""}))}static set(e,t){return Y(this,void 0,void 0,(function*(){const[r]=(yield se.findOrCreate({where:{key:e}}).catch(me.error))||[];r&&(r.value=t,yield r.save().catch(me.error))}))}}class ge{static all(e,t){return Y(this,void 0,void 0,(function*(){return yield ee.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:te,required:!0,include:[{model:V,required:!0,where:{state:!0},include:[{model:ne,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{ae.error(e.message,"api.permission",W.API_CONSOLE_ERROR)}))}))}static get(e){return Y(this,void 0,void 0,(function*(){const t=yield ge.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return Y(this,void 0,void 0,(function*(){const r=yield ge.all(e,{name:t});return!!r&&r.length>0}))}}const ye=t((({req:e})=>e.auth)),he=t((({req:e})=>e.user)),ve=(e,t)=>{const r=P()+"."+t;return B(H(e,r))?ve(e,t):r};class Oe extends A{auth(e,t,r,n,s){return Y(this,void 0,void 0,(function*(){const{auth:i,error:o,user:d}=yield le.user(r);return o?a.error(e,o):i&&d?(n&&(i.useragent=n),yield i.save(),t.auth=i,t.user=d,s()):a.error(e,"Internal Server Error")}))}error(e){ae.error(e.message,"api.controller",W.API_CONSOLE_ERROR)}name(){return"api"}permission(e,t,r,n){return Y(this,void 0,void 0,(function*(){return t?(yield ge.is(t,n))?r():a.error(e,"Unauthorized access"):a.unauthorized(e,"Access denied")}))}read(e,t,r,n){return this.permission(e,t,r,(n||this.name())+".read")}upload(e,t,r,n){const s=(null==n?void 0:n.path)||W.API_UPLOAD_TEMP,i=U.diskStorage({destination:(e,t,r)=>r(null,s),filename:(e,t,r)=>Y(this,void 0,void 0,(function*(){return r(null,ve(s,K.extension(t.mimetype)||"bin"))}))}),o=1e6*((null==n?void 0:n.size)||W.API_UPLOAD_SIZE),d=U({storage:i,fileFilter(e,t,r){var s;return Y(this,void 0,void 0,(function*(){const e=null===(s=null==n?void 0:n.types)||void 0===s?void 0:s.indexOf(t.mimetype);return void 0!==e&&e<0?r(new Error("File type not allowed")):r(null,!0)}))},limits:{fileSize:o}}),u=(null==n?void 0:n.count)||W.API_UPLOAD_COUNT,c=(null==n?void 0:n.field)||W.API_UPLOAD_FIELD;d.array(c,u)(t,e,(t=>t?a.error(e,t.message):r()))}validation(e,t,r,n){return Y(this,void 0,void 0,(function*(){const{error:s,value:i}=yield f.object(n).parse().validateAsync(t.body);return s?a.validation(e,s):(t.body=i,r())}))}write(e,t,r,n){return this.permission(e,t,r,(n||this.name())+".write")}}z([M(0,r()),M(1,n()),M(2,s(W.API_TOKEN_HEADER)),M(3,s("user-agent")),M(4,i()),X("design:type",Function),X("design:paramtypes",[Object,Object,String,String,Function]),X("design:returntype",Promise)],Oe.prototype,"auth",null),z([M(0,r()),M(1,he()),M(2,i()),M(3,o()),X("design:type",Function),X("design:paramtypes",[Object,re,Function,String]),X("design:returntype",Promise)],Oe.prototype,"permission",null),z([M(0,r()),M(1,he()),M(2,i()),M(3,o()),X("design:type",Function),X("design:paramtypes",[Object,re,Function,String]),X("design:returntype",Promise)],Oe.prototype,"read",null),z([M(0,r()),M(1,n()),M(2,i()),M(3,o()),X("design:type",Function),X("design:paramtypes",[Object,Object,Function,Object]),X("design:returntype",void 0)],Oe.prototype,"upload",null),z([M(0,r()),M(1,n()),M(2,i()),M(3,o()),X("design:type",Function),X("design:paramtypes",[Object,Object,Function,Object]),X("design:returntype",Promise)],Oe.prototype,"validation",null),z([M(0,r()),M(1,he()),M(2,i()),M(3,o()),X("design:type",Function),X("design:paramtypes",[Object,re,Function,String]),X("design:returntype",Promise)],Oe.prototype,"write",null);let _e=class extends Oe{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar"]}login(e,t,r,n){return Y(this,void 0,void 0,(function*(){yield I(W.API_SLEEP_AUTH);const{username:s,password:i}=t.body,o=yield re.findOne({where:{username:s}}).catch(this.error);if(!o)return n.emit("auth.failure",{req:t}),a.notfound(e,"Username not found");if(!o.state)return n.emit("auth.failure",{req:t}),a.error(e,"Username is disabled");const d=x(i).toString();if(o.password!=d)return n.emit("auth.failure",{req:t}),a.error(e,"Invalid password");const u=o.id,c=E(),{error:l,token:p}=le.sign({id:u,secret:c});if(l)return n.emit("auth.failure",{req:t}),a.error(e,l);if(p){const n=Date.now(),s=n+6e4*W.API_TOKEN_LIFETIME,i=yield $.create({login:n,secret:c,timestamp:s,useragent:r,userId:u}).catch(this.error);if(i)return this.emit("auth.login",{auth:i,req:t,user:o}),a.data(e,{token:p})}return n.emit("auth.failure",{req:t}),a.error(e,"Internal Server Error")}))}logout(e,t,r,n,s){return Y(this,void 0,void 0,(function*(){return r&&n&&!r.logout?(r.logout=Date.now(),r.timestamp=r.logout,yield r.save(),s.emit("auth.logout",{auth:r,req:t,user:n}),a.success(e,"Disconcerted")):a.unauthorized(e,"Access denied")}))}user(e,t){return Y(this,void 0,void 0,(function*(){const r=t.user;if(!r)return a.unauthorized(e,"Access denied");const n=yield ge.all(r);if(n){const t=n.map((e=>e.name));return a.data(e,Object.assign(Object.assign({},b(this.attributes,r.toJSON())),{permissions:t}))}return a.error(e,"Internal Server Error")}))}};z([d("/login"),u("validation",{username:f.string().min(4).required(),password:f.string().min(5).required()}),M(0,r()),M(1,n()),M(2,s("user-agent")),M(3,c()),X("design:type",Function),X("design:paramtypes",[Object,Object,String,pe]),X("design:returntype",Promise)],_e.prototype,"login",null),z([l("/logout"),u("auth"),M(0,r()),M(1,n()),M(2,ye()),M(3,he()),M(4,c()),X("design:type",Function),X("design:paramtypes",[Object,Object,$,re,pe]),X("design:returntype",Promise)],_e.prototype,"logout",null),z([l(),u("auth"),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",Promise)],_e.prototype,"user",null),_e=z([p("/auth"),m(Oe)],_e);let Ie=class extends Oe{check(e,t){return Y(this,void 0,void 0,(function*(){const{token:r}=t.body,n=yield this.findOne(r);return n&&n.user?(n.token=E(),yield n.save(),a.data(e,{token:n.token})):a.notfound(e,"User not found")}))}forgot(e,t){return Y(this,void 0,void 0,(function*(){const{username:r}=t.body;yield I(W.API_SLEEP_FORGOT);const n=yield re.findOne({where:{username:r}}).catch(this.error);if(!n)return a.notfound(e,"User not found");const s=E(),i=Date.now()+6e4*W.API_TOKEN_LIFETIME,o=yield Q.create({token:s,timestamp:i,state:!0,userId:n.id});return this.emit("forgot",{forgot:o,req:t,user:n}),a.success(e,"OK")}))}reset(e,t){return Y(this,void 0,void 0,(function*(){const{token:r,password:n}=t.body,s=yield this.findOne(r);return s?(s.state=!1,yield s.save().catch(this.error),s.user.password=x(n).toString(),yield s.user.save().catch(this.error),this.emit("forgot.reset",{req:t,user:s.user}),a.success(e,"OK")):a.notfound(e,"User not found")}))}findOne(e){return Y(this,void 0,void 0,(function*(){return yield Q.findOne({where:{token:e,state:!0},include:[{model:re,required:!0}]}).catch(this.error)}))}};z([l("/check"),u("validation",{token:f.string().required()}),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",Promise)],Ie.prototype,"check",null),z([l(),u("validation",{username:f.string().min(4).required()}),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",Promise)],Ie.prototype,"forgot",null),z([l("/reset"),u("validation",{token:f.string().required(),password:f.string().min(5).required()}),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",Promise)],Ie.prototype,"reset",null),Ie=z([p("/forgot"),m(Oe)],Ie);let Ae=class extends Oe{add(e,t,r){return Y(this,void 0,void 0,(function*(){const n=yield this.model().create(e.body,r||{}).catch(this.error);if(n){const e=n.id;return a.data(t,{id:e}),e}return a.error(t,"Internal Server Error"),0}))}all(e,t,r,n){var s,i,o,d,u;return Y(this,void 0,void 0,(function*(){const c=this.model(),l=Object.assign({},r||{});l.where=Object.assign({},l.where||{});const p=null===(s=e.query.limit)||void 0===s?void 0:s.toString();p&&(l.limit=parseInt(p));const m=null===(i=e.query.offset)||void 0===i?void 0:i.toString();m&&(l.offset=parseInt(m));const g=Object.keys(c.getAttributes()),y=[],h=null===(o=e.query.asc)||void 0===o?void 0:o.toString();h&&h.length&&h.split(",").forEach((e=>{g.indexOf(e)>=0&&y.push([e,"ASC"])}));const v=null===(d=e.query.desc)||void 0===d?void 0:d.toString();v&&v.length&&v.split(",").forEach((e=>{g.indexOf(e)>=0&&y.push([e,"DESC"])})),y.length&&(l.order=y);const O=[],_=T(l.attributes)?l.attributes:g,I=null===(u=e.query.search)||void 0===u?void 0:u.toString();_.forEach((t=>{var r;if(S(t)&&(I&&I.length&&O.push({[t]:{[D.like]:`%${I}%`}}),"search_"+t in e.query)){const n=null===(r=e.query["search_"+t])||void 0===r?void 0:r.toString();n&&n.length&&O.push({[t]:{[D.like]:`%${n}%`}})}})),O.length&&(l.where=Object.assign(Object.assign({},l.where),{[D.or]:[...O]}));const A=yield c.count(Object.assign(Object.assign({},l),{col:g[0]})).catch(this.error),f=yield c.findAll(l).catch(this.error);if(f)return a.data(t,{count:A,records:n?n(f):f}),f;a.error(t,"Internal Server Error")}))}del(e,t,r){return Y(this,void 0,void 0,(function*(){const{id:n}=e.params;if(!n)return a.error(t,"Internal Server Error"),0;const s=yield this.model().destroy(Object.assign(Object.assign({},r||{}),{where:{id:n}})).catch(this.error);return s?(a.success(t,"OK"),s):(a.notfound(t,"Record not found"),0)}))}error(e){e.sql?ae.error(e.message+"\n"+e.sql,"api.controller.sql",W.API_CONSOLE_ERROR):super.error(e)}get(e,t,r,n){return Y(this,void 0,void 0,(function*(){const s=Object.assign({},r||{});s.where=s.where?Object.assign({},s.where):{};const{id:i}=e.params,o=yield this.model().findByPk(i,s).catch(this.error);if(o)return a.data(t,n?n(o):o.toJSON()),o;null!==o?a.error(t,"Internal Server Error"):a.notfound(t,"Record not found")}))}name(){return this.model().tableName}set(e,t,r){return Y(this,void 0,void 0,(function*(){const{id:n}=e.params,[s]=(yield this.model().update(e.body,Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{id:n})})).catch(this.error))||[];return s?(a.success(t,"OK"),!0):(a.success(t,"Record not changed"),!1)}))}};Ae=z([m(Oe)],Ae);let fe=class extends Ae{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(t,e,r,this.create())}validationSet(e,t,r){this.validation(t,e,r,this.update())}};z([d(),u("auth"),u("write"),u("validationAdd"),M(0,n()),M(1,r()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",void 0)],fe.prototype,"recordAdd",null),z([l(),u("auth"),u("read"),M(0,n()),M(1,r()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",void 0)],fe.prototype,"recordAll",null),z([g("/:id"),u("auth"),u("write"),M(0,n()),M(1,r()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",void 0)],fe.prototype,"recordDel",null),z([l("/:id"),u("auth"),u("read"),M(0,n()),M(1,r()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",void 0)],fe.prototype,"recordGet",null),z([y("/:id"),u("auth"),u("write"),u("validationSet"),M(0,n()),M(1,r()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",void 0)],fe.prototype,"recordSet",null),z([M(0,n()),M(1,r()),M(2,i()),X("design:type",Function),X("design:paramtypes",[Object,Object,Function]),X("design:returntype",void 0)],fe.prototype,"validationAdd",null),z([M(0,n()),M(1,r()),M(2,i()),X("design:type",Function),X("design:paramtypes",[Object,Object,Function]),X("design:returntype",void 0)],fe.prototype,"validationSet",null),fe=z([m(Ae)],fe);let Pe=class extends fe{model(){return V}create(){return{name:f.string().required(),description:f.string().empty(""),state:f.boolean().parse().required()}}update(){return{name:f.string().empty(),description:f.string().empty(),state:f.boolean().parse().empty()}}};Pe=z([p("/groups"),m(fe)],Pe);let Ee=class extends Ae{model(){return te}groupRouteAll(e,t,r){return Y(this,void 0,void 0,(function*(){this.all(t,e,{where:{groupId:r},include:[{model:ee,required:!0}]},(e=>e.map((e=>e.route))))}))}groupRouteSet(e,t,r){return Y(this,void 0,void 0,(function*(){const n=yield V.findByPk(t,{attributes:["id"]}).catch(this.error);if(n){const t=n.id;if(yield te.destroy({where:{groupId:t}}),r){let e=0;for(let n=0;n<r.length;n++)e=yield ee.count({where:{id:r[n]}}),e&&(yield te.create({groupId:t,routeId:r[n]}))}return a.success(e,"OK")}return R(n)?a.notfound(e,"Record not found"):a.error(e,"Internal Server Error")}))}};z([l("/:id/routes"),u("auth"),u("read","groups"),M(0,r()),M(1,n()),M(2,h("id")),X("design:type",Function),X("design:paramtypes",[Object,Object,String]),X("design:returntype",Promise)],Ee.prototype,"groupRouteAll",null),z([y("/:id/routes"),u("auth"),u("write","groups"),u("validation",{routes:f.array(f.number().parse())}),M(0,r()),M(1,h("id")),M(2,v("routes")),X("design:type",Function),X("design:paramtypes",[Object,String,Array]),X("design:returntype",Promise)],Ee.prototype,"groupRouteSet",null),Ee=z([p("/groups"),m(Ae)],Ee);let be=class extends Ae{model(){return ie}logsAll(e,t){const{source:r,type:n}=t.query,s=r&&n?{source:r,type:n}:r?{source:r}:n?{type:n}:{};this.all(t,e,{where:s,order:[["created","DESC"]]})}};z([l(),u("auth"),u("read"),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",void 0)],be.prototype,"logsAll",null),be=z([p("/logs"),m(Ae)],be);class Te extends F{}Te.init({token:q.STRING,timestamp:q.BIGINT,state:q.BOOLEAN},{sequelize:Z,modelName:W.API_TABLE_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"});let Se=class extends Oe{confirm(e,t){return Y(this,void 0,void 0,(function*(){const r=yield Te.findOne({where:{token:t,state:!0},include:[{model:re,required:!0}]}).catch(this.error);return r?(r.user.state=!0,yield r.user.save().catch(this.error),this.emit("user.confirm",{user:r.user}),a.success(e,"OK")):a.notfound(e,"User not found")}))}register(e,t,r,n){return Y(this,void 0,void 0,(function*(){yield I(W.API_SLEEP_REGISTRY);const t=yield re.findOne({where:{username:n}}).catch(this.error);if(t)return a.error(e,"Invalid Username");if(!R(t))return a.error(e,"Internal Server Error");const s=yield re.create(Object.assign(Object.assign({},r),{state:!1}));return this.emit("user.register",{user:s}),a.success(e,"OK")}))}};z([l("/confirm"),u("validation",{token:f.string().required()}),M(0,r()),M(1,v("token")),X("design:type",Function),X("design:paramtypes",[Object,String]),X("design:returntype",Promise)],Se.prototype,"confirm",null),z([l(),u("validation",{name:f.string().required(),email:f.string().email().required(),username:f.string().min(4).required(),password:f.string().min(5).required()}),M(0,r()),M(1,n()),M(2,v()),M(3,v("username")),X("design:type",Function),X("design:paramtypes",[Object,Object,Object,String]),X("design:returntype",Promise)],Se.prototype,"register",null),Se=z([p("/register"),m(Oe)],Se);let Re=class extends fe{model(){return ee}create(){return{name:f.string().required(),description:f.string().empty(""),state:f.boolean().parse().required()}}update(){return{name:f.string().empty(),description:f.string().empty(),state:f.boolean().parse().empty()}}};Re=z([p("/routes"),m(fe)],Re);let we=class extends Oe{setup(e){return Y(this,void 0,void 0,(function*(){if(0==(yield re.count())){const e={description:"",state:!0},t=yield re.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),r=yield V.create(Object.assign({name:"admin"},e));yield ne.create({userId:t.id,groupId:r.id});const n=["read","write"],s=["users","groups","routes"];yield w(s,(t=>Y(this,void 0,void 0,(function*(){yield w(n,(n=>Y(this,void 0,void 0,(function*(){const s=t+"."+n,i=yield ee.create(Object.assign({name:s},e));yield te.create({groupId:r.id,routeId:i.id})}))))}))));const i=yield ee.create(Object.assign({name:"logs.read"},e));yield te.create({groupId:r.id,routeId:i.id})}return a.success(e,"OK")}))}};z([l(),M(0,r()),X("design:type",Function),X("design:paramtypes",[Object]),X("design:returntype",Promise)],we.prototype,"setup",null),we=z([p("/setup"),m(Oe)],we);let je=class extends Ae{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar","description","state","created","updated"]}model(){return re}userAdd(e,t){t.body.password=x(t.body.password).toString(),this.add(t,e)}userAll(e,t){this.all(t,e,{attributes:this.attributes})}userDel(e,t,r,n){if(!r||r.id.toString()==n)return a.error(e,"Internal Server Error");this.del(t,e)}userGet(e,t){this.get(t,e,{attributes:this.attributes})}userSet(e,t){t.body.password&&(t.body.password=x(t.body.password).toString()),this.set(t,e)}};z([d(),u("auth"),u("write"),u("validation",{name:f.string().required(),email:f.string().email().required(),username:f.string().min(4).required(),password:f.string().min(5).required(),description:f.string().required(),state:f.boolean().parse().required()}),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",void 0)],je.prototype,"userAdd",null),z([l(),u("auth"),u("read"),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",void 0)],je.prototype,"userAll",null),z([g("/:id"),u("auth"),u("write"),M(0,r()),M(1,n()),M(2,he()),M(3,h("id")),X("design:type",Function),X("design:paramtypes",[Object,Object,re,String]),X("design:returntype",Object)],je.prototype,"userDel",null),z([l("/:id"),u("auth"),u("read"),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",void 0)],je.prototype,"userGet",null),z([y("/:id"),u("auth"),u("write"),u("validation",{name:f.string().empty(),email:f.string().email().empty(),username:f.string().min(4).empty(),password:f.string().min(5).empty(),description:f.string().empty(),state:f.boolean().parse().empty()}),M(0,r()),M(1,n()),X("design:type",Function),X("design:paramtypes",[Object,Object]),X("design:returntype",void 0)],je.prototype,"userSet",null),je=z([p("/users"),m(Ae)],je);let Ne=class extends Ae{model(){return ne}userGroupsAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:V,required:!0}]},(e=>e.map((e=>e.group))))}userGroupsSet(e,t,r){return Y(this,void 0,void 0,(function*(){const n=yield re.findByPk(t,{attributes:["id"]}).catch(this.error);if(n){if(yield ne.destroy({where:{userId:n.id}}),r){let e=0;for(let t=0;t<r.length;t++)e=yield V.count({where:{id:r[t]}}),e&&(yield ne.create({userId:n.id,groupId:r[t]}))}return a.success(e,"OK")}return R(n)?a.notfound(e,"Record not found"):a.error(e,"Internal Server Error")}))}};z([l("/:id/groups"),u("auth"),u("read","users"),M(0,r()),M(1,n()),M(2,h("id")),X("design:type",Function),X("design:paramtypes",[Object,Object,String]),X("design:returntype",void 0)],Ne.prototype,"userGroupsAll",null),z([y("/:id/groups"),u("auth"),u("write","users"),u("validation",{groups:f.array(f.number().parse())}),M(0,r()),M(1,h("id")),M(2,v("groups")),X("design:type",Function),X("design:paramtypes",[Object,String,Array]),X("design:returntype",Promise)],Ne.prototype,"userGroupsSet",null),Ne=z([p("/users"),m(Ae)],Ne);export{pe as Application,$ as Auth,_e as AuthController,me as Config,se as Configs,Oe as ControllerBase,fe as CrudController,J as Database,W as Env,Q as Forgot,Ie as ForgotController,V as Group,Pe as GroupController,te as GroupRoute,Ee as GroupRouteController,ae as Log,ie as Logs,be as LogsController,Ae as ModelController,ge as Permission,Se as RegisterController,ye as ReqAuth,he as ReqUser,ee as Route,Re as RouteController,we as SetupController,le as Token,re as User,je as UserController,ne as UserGroup,Ne as UserGroupController,ue as crt,ce as key,Z as sequelize};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@andrewcaires/api",
-  "version": "3.0.4",
+  "version": "3.0.6",
   "description": "Simple api for small applications using express, jsonwebtoken, sequelize and websocket",
   "main": "./dist/index.cjs.js",
   "types": "./dist/index.d.ts",
@@ -46,13 +46,13 @@
   "homepage": "https://github.com/andrewcaires/npm/tree/main/api#readme",
   "dependencies": {
     "@andrewcaires/express": "^1.0.5",
-    "@andrewcaires/utils.js": "^0.2.12",
+    "@andrewcaires/utils.js": "^0.2.13",
     "cors": "^2.8.5",
     "crypto-js": "^4.1.1",
     "dotenv": "^16.0.3",
     "express": "^4.18.2",
     "jsonwebtoken": "^9.0.0",
-    "mariadb": "^3.1.0",
+    "mariadb": "^3.1.1",
     "mime-types": "^2.1.35",
     "multer": "^1.4.5-lts.1",
     "mysql2": "^3.2.0",
@@ -69,13 +69,13 @@
     "@types/jsonwebtoken": "^9.0.1",
     "@types/mime-types": "^2.1.1",
     "@types/multer": "^1.4.7",
-    "@types/node": "^18.15.3",
+    "@types/node": "^18.15.7",
     "@types/ws": "^8.5.4",
-    "@typescript-eslint/eslint-plugin": "^5.55.0",
-    "@typescript-eslint/parser": "^5.55.0",
+    "@typescript-eslint/eslint-plugin": "^5.56.0",
+    "@typescript-eslint/parser": "^5.56.0",
     "eslint": "^8.36.0",
-    "rollup": "^3.19.1",
-    "rollup-plugin-dts": "^5.2.0",
+    "rollup": "^3.20.2",
+    "rollup-plugin-dts": "^5.3.0",
     "ts-node": "^10.9.1",
     "ts-node-dev": "^2.0.0",
     "tslib": "^2.5.0"