@andrewcaires/api 3.0.7 → 3.0.9

package/dist/index.cjs.js

@@ -1,7 +1,7 @@
 /*!
- * @andrewcaires/api v3.0.7
+ * @andrewcaires/api v3.0.9
  * Simple api for small applications using express, jsonwebtoken, sequelize and websocket 
  * (c) 2023 Andrew Caires
  * @license: MIT
  */
-"use strict";var e=require("@andrewcaires/express"),t=require("@andrewcaires/utils.js"),r=require("ws"),s=require("sequelize"),o=require("dotenv"),n=require("fs"),i=require("jsonwebtoken"),a=require("crypto-js"),d=require("mime-types"),l=require("multer"),u=require("path");function p(e,t,r,s){var o,n=arguments.length,i=n<3?t:null===s?s=Object.getOwnPropertyDescriptor(t,r):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(e,t,r,s);else for(var a=e.length-1;a>=0;a--)(o=e[a])&&(i=(n<3?o(i):n>3?o(t,r,i):o(t,r))||i);return n>3&&i&&Object.defineProperty(t,r,i),i}function c(e,t){return function(r,s){t(r,s,e)}}function g(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function y(e,t,r,s){return new(r||(r=Promise))((function(o,n){function i(e){try{d(s.next(e))}catch(e){n(e)}}function a(e){try{d(s.throw(e))}catch(e){n(e)}}function d(e){var t;e.done?o(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(i,a)}d((s=s.apply(e,t||[])).next())}))}o.config();class m{}m.API_CONSOLE_ERROR=t.toBool(process.env.API_CONSOLE_ERROR||"false"),m.API_DB_DATABASE=process.env.API_DB_DATABASE||"",m.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",m.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",m.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),m.API_DB_TYPE=process.env.API_DB_TYPE||"",m.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",m.API_DB_LOG=t.toBool(process.env.API_DB_LOG||"false"),m.API_TABLE_PREFIX=process.env.API_TABLE_PREFIX||"",m.API_HTTP_CRT=process.env.API_HTTP_CRT||"",m.API_HTTP_KEY=process.env.API_HTTP_KEY||"",m.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),m.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",m.API_HTTP_CROSS=t.toBool(process.env.API_HTTP_CROSS||"false"),m.API_HTTP_HYBRID=t.toBool(process.env.API_HTTP_HYBRID||"false"),m.API_SLEEP_AUTH=parseInt(process.env.API_SLEEP_AUTH||"1000"),m.API_SLEEP_FORGOT=parseInt(process.env.API_SLEEP_FORGOT||"5000"),m.API_SLEEP_REGISTRY=parseInt(process.env.API_SLEEP_REGISTRY||"5000"),m.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",m.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",m.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",m.API_TOKEN_LIFETIME=parseInt(process.env.API_TOKEN_LIFETIME||"15"),m.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),m.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",m.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),m.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",m.API_WEBSOCKET_START=t.toBool(process.env.API_WEBSOCKET_START||"false");class h{static connect(e){const t="connect_"+m.API_DB_TYPE.toLowerCase();if(t in h)return h[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_memory(){return new s.Sequelize("sqlite::memory:",{logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_mysql(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_postgres(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_sqlite(e){return new s.Sequelize({dialect:"sqlite",storage:e.database,logging:m.API_DB_LOG,define:{timestamps:!1}})}}const R=h.connect({database:m.API_DB_DATABASE,username:m.API_DB_USERNAME,password:m.API_DB_PASSWORD,hostname:m.API_DB_HOST,hostport:m.API_DB_PORT});class A extends s.Model{}A.init({login:s.DataTypes.BIGINT,logout:s.DataTypes.BIGINT,secret:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,useragent:s.DataTypes.STRING},{sequelize:R,modelName:m.API_TABLE_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class v extends s.Model{}v.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class O extends s.Model{}O.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class I extends s.Model{}I.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class _ extends s.Model{}_.init({},{sequelize:R,modelName:m.API_TABLE_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),_.removeAttribute("id");class P extends s.Model{}P.init({name:s.DataTypes.STRING,email:s.DataTypes.STRING,username:s.DataTypes.STRING,password:s.DataTypes.STRING,avatar:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated"});class f extends s.Model{}f.init({},{sequelize:R,modelName:m.API_TABLE_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),f.removeAttribute("id");class T extends s.Model{}T.init({key:s.DataTypes.STRING,value:s.DataTypes.STRING},{sequelize:R,modelName:m.API_TABLE_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),T.removeAttribute("id");class E extends s.Model{}var b;E.init({type:s.DataTypes.STRING,source:s.DataTypes.STRING,message:s.DataTypes.TEXT},{sequelize:R,modelName:m.API_TABLE_PREFIX+"logs",timestamps:!0,createdAt:"created",updatedAt:!1}),P.hasMany(A),A.belongsTo(P),P.hasMany(v),v.belongsTo(P),O.hasMany(_),_.belongsTo(O),I.hasMany(_),_.belongsTo(I),P.hasMany(f),f.belongsTo(P),O.hasMany(f),f.belongsTo(O),function(e){e.ERROR="",e.INFO="",e.NONE="",e.SUCCESS="",e.WARNING=""}(b||(b={}));class w{static write(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.NONE,"",e,t,r)}))}static error(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.ERROR,"error",e,t,r)}))}static info(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.INFO,"info",e,t,r)}))}static success(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.ERROR,"success",e,t,r)}))}static warning(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.WARNING,"warning",e,t,r)}))}static writeConsole(e,r,s){const o=t.dateFormat(new Date,"%H:%M:%S");console.log(">",e,r+" ".repeat(10-r.length),"","|",o,"|",s)}static writeRaw(e,t,r,s,o){return y(this,void 0,void 0,(function*(){o&&w.writeConsole(e,t,r),R&&(yield E.create({type:t,source:s,message:r}).catch((()=>null)))}))}}const x=e=>n.existsSync(e)?n.readFileSync(e):void 0,S={http:x(m.API_HTTP_CRT),token:x(m.API_TOKEN_CRT)},C={http:x(m.API_HTTP_KEY),token:x(m.API_TOKEN_KEY)};class q{static error(e){w.error(e.message,"api.token",m.API_CONSOLE_ERROR)}static sign(e){return C.token?{token:i.sign(e,C.token,{algorithm:"RS256"})}:{error:"Invalid Secret"}}static user(e){return y(this,void 0,void 0,(function*(){const{error:t,decode:r}=q.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&r){const r=yield P.findOne({where:{id:e,state:!0}}).catch(q.error);if(r){const e=yield A.findOne({where:{secret:t,userId:r.id}}).catch(q.error);if(e){const t=Date.now();if(t>e.timestamp)return e.logout=t,yield e.save(),{error:"Expired token"};if(e.timestamp=t+6e4*m.API_TOKEN_LIFETIME,!e.logout)return yield e.save(),{auth:e,user:r}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e){if(!S.token)return{error:"Invalid Secret"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:i.verify(e,S.token)}}catch(e){return{error:"Invalid Token"}}}}class D extends e.Application{constructor(e){super(e,{cert:S.http,cross:m.API_HTTP_CROSS,hybrid:m.API_HTTP_HYBRID,key:C.http,path:"/api",port:m.API_HTTP_PORT,public:m.API_HTTP_PUBLIC})}error(e,t){w.info(e.message,t,m.API_CONSOLE_ERROR)}log(e,t){w.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return y(this,void 0,void 0,(function*(){yield R.sync(),yield e.listen.call(this),m.API_WEBSOCKET_START&&this.server&&(this._webSocket=new r.Server({server:this.server,verifyClient:(e,t)=>t(m.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,r)=>y(this,void 0,void 0,(function*(){r.url||(r.url="");const s=r.url.length<=1?"":r.url.replace(/\//g,".");let o;e.on("message",(t=>y(this,void 0,void 0,(function*(){if(o)try{const n=JSON.parse(t);this.emit("ws.message"+s,{data:n,message:t,req:r,user:o,ws:e})}catch(n){this.emit("ws.message"+s,{message:t,req:r,user:o,ws:e})}else{const{user:n}=yield q.user(t.toString());n&&(o=n,this.emit("ws.connection"+s,{req:r,user:o,ws:e}))}o||e.close()})))),e.on("close",(()=>{o&&this.emit("ws.close"+s,{user:o,ws:e})})),yield t.sleep(2e3),o||e.close()})))))}))}websocket(){return this._webSocket}}class j{static all(){return y(this,void 0,void 0,(function*(){const e=yield T.findAll().catch(j.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return y(this,void 0,void 0,(function*(){return((yield T.destroy({where:{key:e}}).catch(j.error))||0)>0}))}static error(e){w.error(e.message,"api.config",m.API_CONSOLE_ERROR)}static get(e){return y(this,void 0,void 0,(function*(){const t=yield T.findOne({where:{key:e}}).catch(j.error);return t&&t.value||""}))}static set(e,t){return y(this,void 0,void 0,(function*(){const[r]=(yield T.findOrCreate({where:{key:e}}).catch(j.error))||[];r&&(r.value=t,yield r.save().catch(j.error))}))}}class N{static all(e,t){return y(this,void 0,void 0,(function*(){return yield I.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:_,required:!0,include:[{model:O,required:!0,where:{state:!0},include:[{model:f,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{w.error(e.message,"api.permission",m.API_CONSOLE_ERROR)}))}))}static get(e){return y(this,void 0,void 0,(function*(){const t=yield N.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return y(this,void 0,void 0,(function*(){const r=yield N.all(e,{name:t});return!!r&&r.length>0}))}}const M=e.parameterFactory((({req:e})=>e.auth)),F=e.parameterFactory((({req:e})=>e.user)),B=(e,r)=>{const s=t.uuidv4()+"."+r;return n.existsSync(u.join(e,s))?B(e,r):s};class G extends t.EventEmitter{auth(t,r,s,o,n){return y(this,void 0,void 0,(function*(){const{auth:i,error:a,user:d}=yield q.user(s);return a?e.Responses.error(t,a):i&&d?(o&&(i.useragent=o),yield i.save(),r.auth=i,r.user=d,n()):e.Responses.error(t,"Internal Server Error")}))}error(e){w.error(e.message,"api.controller",m.API_CONSOLE_ERROR)}name(){return"api"}permission(t,r,s,o){return y(this,void 0,void 0,(function*(){return r?(yield N.is(r,o))?s():e.Responses.error(t,"Unauthorized access"):e.Responses.unauthorized(t,"Access denied")}))}read(e,t,r,s){return this.permission(e,t,r,(s||this.name())+".read")}upload(r,s,o,n){const i=(null==n?void 0:n.path)||m.API_UPLOAD_TEMP,a=l.diskStorage({destination:(e,t,r)=>r(null,i),filename:(e,t,r)=>y(this,void 0,void 0,(function*(){return r(null,B(i,d.extension(t.mimetype)||"bin"))}))}),u=1e6*((null==n?void 0:n.size)||m.API_UPLOAD_SIZE),p=l({storage:a,fileFilter(e,r,s){var o;return y(this,void 0,void 0,(function*(){const e=null===(o=null==n?void 0:n.types)||void 0===o?void 0:o.indexOf(r.mimetype);return t.isNumber(e)&&e<0?s(new Error("File type not allowed")):s(null,!0)}))},limits:{fileSize:u}}),c=(null==n?void 0:n.count)||m.API_UPLOAD_COUNT,g=(null==n?void 0:n.field)||m.API_UPLOAD_FIELD;p.array(g,c)(s,r,(t=>t?e.Responses.error(r,t.message):o()))}validation(r,s,o,n){return y(this,void 0,void 0,(function*(){const{error:i,value:a}=yield t.Validation.object(n).parse().validateAsync(s.body);return i?e.Responses.validation(r,i):(s.body=a,o())}))}write(e,t,r,s){return this.permission(e,t,r,(s||this.name())+".write")}}p([c(0,e.Res()),c(1,e.Req()),c(2,e.Headers(m.API_TOKEN_HEADER)),c(3,e.Headers("user-agent")),c(4,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,String,Function]),g("design:returntype",Promise)],G.prototype,"auth",null),p([c(0,e.Res()),c(1,F()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],G.prototype,"permission",null),p([c(0,e.Res()),c(1,F()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],G.prototype,"read",null),p([c(0,e.Res()),c(1,e.Req()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function,Object]),g("design:returntype",void 0)],G.prototype,"upload",null),p([c(0,e.Res()),c(1,e.Req()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function,Object]),g("design:returntype",Promise)],G.prototype,"validation",null),p([c(0,e.Res()),c(1,F()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],G.prototype,"write",null),exports.AuthController=class extends G{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar"]}login(r,s,o,n){return y(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_AUTH);const{username:i,password:d}=s.body,l=yield P.findOne({where:{username:i}}).catch(this.error);if(!l)return n.emit("auth.failure",{req:s}),e.Responses.notfound(r,"Username not found");if(!l.state)return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Username is disabled");const u=a.SHA256(d).toString();if(l.password!=u)return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Invalid password");const p=l.id,c=t.uniqueID(),{error:g,token:y}=q.sign({id:p,secret:c});if(g)return n.emit("auth.failure",{req:s}),e.Responses.error(r,g);if(y){const t=Date.now(),n=t+6e4*m.API_TOKEN_LIFETIME,i=yield A.create({login:t,secret:c,timestamp:n,useragent:o,userId:p}).catch(this.error);if(i)return this.emit("auth.login",{auth:i,req:s,user:l}),e.Responses.data(r,{token:y})}return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Internal Server Error")}))}logout(t,r,s,o,n){return y(this,void 0,void 0,(function*(){return s&&o&&!s.logout?(s.logout=Date.now(),s.timestamp=s.logout,yield s.save(),n.emit("auth.logout",{auth:s,req:r,user:o}),e.Responses.success(t,"Disconcerted")):e.Responses.unauthorized(t,"Access denied")}))}user(r,s){return y(this,void 0,void 0,(function*(){const o=s.user;if(!o)return e.Responses.unauthorized(r,"Access denied");const n=yield N.all(o);if(n){const s=n.map((e=>e.name));return e.Responses.data(r,Object.assign(Object.assign({},t.allowedObject(this.attributes,o.toJSON())),{permissions:s}))}return e.Responses.error(r,"Internal Server Error")}))}},p([e.Post("/login"),e.Middleware("validation",{username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),c(2,e.Headers("user-agent")),c(3,e.App()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,D]),g("design:returntype",Promise)],exports.AuthController.prototype,"login",null),p([e.Get("/logout"),e.Middleware("auth"),c(0,e.Res()),c(1,e.Req()),c(2,M()),c(3,F()),c(4,e.App()),g("design:type",Function),g("design:paramtypes",[Object,Object,A,P,D]),g("design:returntype",Promise)],exports.AuthController.prototype,"logout",null),p([e.Get(),e.Middleware("auth"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.AuthController.prototype,"user",null),exports.AuthController=p([e.Controller("/auth"),e.Extends(G)],exports.AuthController),exports.ForgotController=class extends G{check(r,s){return y(this,void 0,void 0,(function*(){const{token:o}=s.body,n=yield this.findOne(o);return n&&n.user?(n.token=t.uniqueID(),yield n.save(),e.Responses.data(r,{token:n.token})):e.Responses.notfound(r,"User not found")}))}forgot(r,s){return y(this,void 0,void 0,(function*(){const{username:o}=s.body;yield t.sleep(m.API_SLEEP_FORGOT);const n=yield P.findOne({where:{username:o}}).catch(this.error);if(!n)return e.Responses.notfound(r,"User not found");const i=t.uniqueID(),a=Date.now()+6e4*m.API_TOKEN_LIFETIME,d=yield v.create({token:i,timestamp:a,state:!0,userId:n.id});return this.emit("forgot",{forgot:d,req:s,user:n}),e.Responses.success(r,"OK")}))}reset(t,r){return y(this,void 0,void 0,(function*(){const{token:s,password:o}=r.body,n=yield this.findOne(s);return n?(n.state=!1,yield n.save().catch(this.error),n.user.password=a.SHA256(o).toString(),yield n.user.save().catch(this.error),this.emit("forgot.reset",{req:r,user:n.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}findOne(e){return y(this,void 0,void 0,(function*(){return yield v.findOne({where:{token:e,state:!0},include:[{model:P,required:!0}]}).catch(this.error)}))}},p([e.Get("/check"),e.Middleware("validation",{token:t.Validation.string().required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"check",null),p([e.Get(),e.Middleware("validation",{username:t.Validation.string().min(4).required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"forgot",null),p([e.Get("/reset"),e.Middleware("validation",{token:t.Validation.string().required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"reset",null),exports.ForgotController=p([e.Controller("/forgot"),e.Extends(G)],exports.ForgotController),exports.ModelController=class extends G{add(t,r,s){return y(this,void 0,void 0,(function*(){const o=yield this.model().create(t.body,s||{}).catch(this.error);if(o){const t=o.id;return e.Responses.data(r,{id:t}),t}return e.Responses.error(r,"Internal Server Error"),0}))}all(r,o,n,i){var a,d,l,u,p;return y(this,void 0,void 0,(function*(){const c=this.model(),g=Object.assign({},n||{});g.where=Object.assign({},g.where||{});const y=null===(a=r.query.limit)||void 0===a?void 0:a.toString();y&&(g.limit=parseInt(y));const m=null===(d=r.query.offset)||void 0===d?void 0:d.toString();m&&(g.offset=parseInt(m));const h=Object.keys(c.getAttributes()),R=[],A=null===(l=r.query.asc)||void 0===l?void 0:l.toString();A&&A.length&&A.split(",").forEach((e=>{h.indexOf(e)>=0&&R.push([e,"ASC"])}));const v=null===(u=r.query.desc)||void 0===u?void 0:u.toString();v&&v.length&&v.split(",").forEach((e=>{h.indexOf(e)>=0&&R.push([e,"DESC"])})),R.length&&(g.order=R);const O=[],I=t.isArray(g.attributes)?g.attributes:h,_=null===(p=r.query.search)||void 0===p?void 0:p.toString();I.forEach((e=>{var o;if(t.isString(e)&&(_&&_.length&&O.push({[e]:{[s.Op.like]:`%${_}%`}}),"search_"+e in r.query)){const t=null===(o=r.query["search_"+e])||void 0===o?void 0:o.toString();t&&t.length&&O.push({[e]:{[s.Op.like]:`%${t}%`}})}})),O.length&&(g.where=Object.assign(Object.assign({},g.where),{[s.Op.or]:[...O]}));const P=yield c.count(Object.assign(Object.assign({},g),{col:h[0]})).catch(this.error),f=yield c.findAll(g).catch(this.error);if(f)return e.Responses.data(o,{count:P,records:i?i(f):f}),f;e.Responses.error(o,"Internal Server Error")}))}del(t,r,s){return y(this,void 0,void 0,(function*(){const{id:o}=t.params;if(!o)return e.Responses.error(r,"Internal Server Error"),0;const n=yield this.model().destroy(Object.assign(Object.assign({},s||{}),{where:{id:o}})).catch(this.error);return n?(e.Responses.success(r,"OK"),n):(e.Responses.notfound(r,"Record not found"),0)}))}error(e){e.sql?w.error(e.message+"\n"+e.sql,"api.controller.sql",m.API_CONSOLE_ERROR):super.error(e)}get(t,r,s,o){return y(this,void 0,void 0,(function*(){const n=Object.assign({},s||{});n.where=n.where?Object.assign({},n.where):{};const{id:i}=t.params,a=yield this.model().findByPk(i,n).catch(this.error);if(a)return e.Responses.data(r,o?o(a):a.toJSON()),a;null!==a?e.Responses.error(r,"Internal Server Error"):e.Responses.notfound(r,"Record not found")}))}name(){return this.model().tableName}set(t,r,s){return y(this,void 0,void 0,(function*(){const{id:o}=t.params,[n]=(yield this.model().update(t.body,Object.assign(Object.assign({},s||{}),{where:Object.assign(Object.assign({},(s||{}).where),{id:o})})).catch(this.error))||[];return n?(e.Responses.success(r,"OK"),!0):(e.Responses.success(r,"Record not changed"),!1)}))}},exports.ModelController=p([e.Extends(G)],exports.ModelController),exports.CrudController=class extends exports.ModelController{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(t,e,r,this.create())}validationSet(e,t,r){this.validation(t,e,r,this.update())}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationAdd"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationSet"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordSet",null),p([c(0,e.Req()),c(1,e.Res()),c(2,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function]),g("design:returntype",void 0)],exports.CrudController.prototype,"validationAdd",null),p([c(0,e.Req()),c(1,e.Res()),c(2,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function]),g("design:returntype",void 0)],exports.CrudController.prototype,"validationSet",null),exports.CrudController=p([e.Extends(exports.ModelController)],exports.CrudController),exports.GroupController=class extends exports.CrudController{model(){return O}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.GroupController=p([e.Controller("/groups"),e.Extends(exports.CrudController)],exports.GroupController),exports.GroupRouteController=class extends exports.ModelController{model(){return _}groupRouteAll(e,t,r){return y(this,void 0,void 0,(function*(){this.all(t,e,{where:{groupId:r},include:[{model:I,required:!0}]},(e=>e.map((e=>e.route))))}))}groupRouteSet(r,s,o){return y(this,void 0,void 0,(function*(){const n=yield O.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){const t=n.id;if(yield _.destroy({where:{groupId:t}}),o){let e=0;for(let r=0;r<o.length;r++)e=yield I.count({where:{id:o[r]}}),e&&(yield _.create({groupId:t,routeId:o[r]}))}return e.Responses.success(r,"OK")}return t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/routes"),e.Middleware("auth"),e.Middleware("read","groups"),c(0,e.Res()),c(1,e.Req()),c(2,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,String]),g("design:returntype",Promise)],exports.GroupRouteController.prototype,"groupRouteAll",null),p([e.Put("/:id/routes"),e.Middleware("auth"),e.Middleware("write","groups"),e.Middleware("validation",{routes:t.Validation.array(t.Validation.number().parse())}),c(0,e.Res()),c(1,e.Params("id")),c(2,e.Body("routes")),g("design:type",Function),g("design:paramtypes",[Object,String,Array]),g("design:returntype",Promise)],exports.GroupRouteController.prototype,"groupRouteSet",null),exports.GroupRouteController=p([e.Controller("/groups"),e.Extends(exports.ModelController)],exports.GroupRouteController),exports.LogsController=class extends exports.ModelController{model(){return E}logsAll(e,t){const{source:r,type:s}=t.query,o=r&&s?{source:r,type:s}:r?{source:r}:s?{type:s}:{};this.all(t,e,{where:o,order:[["created","DESC"]]})}},p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.LogsController.prototype,"logsAll",null),exports.LogsController=p([e.Controller("/logs"),e.Extends(exports.ModelController)],exports.LogsController);class L extends s.Model{}L.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"}),exports.RegisterController=class extends G{confirm(t,r){return y(this,void 0,void 0,(function*(){const s=yield L.findOne({where:{token:r,state:!0},include:[{model:P,required:!0}]}).catch(this.error);return s?(s.user.state=!0,yield s.user.save().catch(this.error),this.emit("user.confirm",{user:s.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}register(r,s,o,n){return y(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_REGISTRY);const s=yield P.findOne({where:{username:n}}).catch(this.error);if(s)return e.Responses.error(r,"Invalid Username");if(!t.isNull(s))return e.Responses.error(r,"Internal Server Error");const i=yield P.create(Object.assign(Object.assign({},o),{state:!1}));return this.emit("user.register",{user:i}),e.Responses.success(r,"OK")}))}},p([e.Get("/confirm"),e.Middleware("validation",{token:t.Validation.string().required()}),c(0,e.Res()),c(1,e.Body("token")),g("design:type",Function),g("design:paramtypes",[Object,String]),g("design:returntype",Promise)],exports.RegisterController.prototype,"confirm",null),p([e.Get(),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),c(2,e.Body()),c(3,e.Body("username")),g("design:type",Function),g("design:paramtypes",[Object,Object,Object,String]),g("design:returntype",Promise)],exports.RegisterController.prototype,"register",null),exports.RegisterController=p([e.Controller("/register"),e.Extends(G)],exports.RegisterController),exports.RouteController=class extends exports.CrudController{model(){return I}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.RouteController=p([e.Controller("/routes"),e.Extends(exports.CrudController)],exports.RouteController),exports.SetupController=class extends G{setup(r){return y(this,void 0,void 0,(function*(){if(0==(yield P.count())){const e={description:"",state:!0},r=yield P.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),s=yield O.create(Object.assign({name:"admin"},e));yield f.create({userId:r.id,groupId:s.id});const o=["read","write"],n=["users","groups","routes"];yield t.forEachSeries(n,(r=>y(this,void 0,void 0,(function*(){yield t.forEachSeries(o,(t=>y(this,void 0,void 0,(function*(){const o=r+"."+t,n=yield I.create(Object.assign({name:o},e));yield _.create({groupId:s.id,routeId:n.id})}))))}))));const i=yield I.create(Object.assign({name:"logs.read"},e));yield _.create({groupId:s.id,routeId:i.id})}return e.Responses.success(r,"OK")}))}},p([e.Get(),c(0,e.Res()),g("design:type",Function),g("design:paramtypes",[Object]),g("design:returntype",Promise)],exports.SetupController.prototype,"setup",null),exports.SetupController=p([e.Controller("/setup"),e.Extends(G)],exports.SetupController),exports.UserController=class extends exports.ModelController{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar","description","state","created","updated"]}model(){return P}userAdd(e,t){t.body.password=a.SHA256(t.body.password).toString(),this.add(t,e)}userAll(e,t){this.all(t,e,{attributes:this.attributes})}userDel(t,r,s,o){if(!s||s.id.toString()==o)return e.Responses.error(t,"Internal Server Error");this.del(r,t)}userGet(e,t){this.get(t,e,{attributes:this.attributes})}userSet(e,t){t.body.password&&(t.body.password=a.SHA256(t.body.password).toString()),this.set(t,e)}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required(),description:t.Validation.string().required(),state:t.Validation.boolean().parse().required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),c(0,e.Res()),c(1,e.Req()),c(2,F()),c(3,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,P,String]),g("design:returntype",Object)],exports.UserController.prototype,"userDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().empty(),email:t.Validation.string().email().empty(),username:t.Validation.string().min(4).empty(),password:t.Validation.string().min(5).empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userSet",null),exports.UserController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UserController),exports.UserGroupController=class extends exports.ModelController{model(){return f}userGroupsAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:O,required:!0}]},(e=>e.map((e=>e.group))))}userGroupsSet(r,s,o){return y(this,void 0,void 0,(function*(){const n=yield P.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){if(yield f.destroy({where:{userId:n.id}}),o){let e=0;for(let t=0;t<o.length;t++)e=yield O.count({where:{id:o[t]}}),e&&(yield f.create({userId:n.id,groupId:o[t]}))}return e.Responses.success(r,"OK")}return t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/groups"),e.Middleware("auth"),e.Middleware("read","users"),c(0,e.Res()),c(1,e.Req()),c(2,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,String]),g("design:returntype",void 0)],exports.UserGroupController.prototype,"userGroupsAll",null),p([e.Put("/:id/groups"),e.Middleware("auth"),e.Middleware("write","users"),e.Middleware("validation",{groups:t.Validation.array(t.Validation.number().parse())}),c(0,e.Res()),c(1,e.Params("id")),c(2,e.Body("groups")),g("design:type",Function),g("design:paramtypes",[Object,String,Array]),g("design:returntype",Promise)],exports.UserGroupController.prototype,"userGroupsSet",null),exports.UserGroupController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UserGroupController),exports.Application=D,exports.Auth=A,exports.Config=j,exports.Configs=T,exports.ControllerBase=G,exports.Database=h,exports.Env=m,exports.Forgot=v,exports.Group=O,exports.GroupRoute=_,exports.Log=w,exports.Logs=E,exports.Permission=N,exports.ReqAuth=M,exports.ReqUser=F,exports.Route=I,exports.Token=q,exports.User=P,exports.UserGroup=f,exports.crt=S,exports.key=C,exports.sequelize=R;
+"use strict";var e=require("@andrewcaires/express"),t=require("@andrewcaires/utils.js"),r=require("ws"),s=require("sequelize"),o=require("dotenv"),n=require("fs"),i=require("jsonwebtoken"),a=require("crypto-js"),d=require("mime-types"),l=require("multer"),u=require("path");function p(e,t,r,s){var o,n=arguments.length,i=n<3?t:null===s?s=Object.getOwnPropertyDescriptor(t,r):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(e,t,r,s);else for(var a=e.length-1;a>=0;a--)(o=e[a])&&(i=(n<3?o(i):n>3?o(t,r,i):o(t,r))||i);return n>3&&i&&Object.defineProperty(t,r,i),i}function c(e,t){return function(r,s){t(r,s,e)}}function g(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function y(e,t,r,s){return new(r||(r=Promise))((function(o,n){function i(e){try{d(s.next(e))}catch(e){n(e)}}function a(e){try{d(s.throw(e))}catch(e){n(e)}}function d(e){var t;e.done?o(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(i,a)}d((s=s.apply(e,t||[])).next())}))}o.config();class m{}m.API_CONSOLE_ERROR=t.toBool(process.env.API_CONSOLE_ERROR||"false"),m.API_DB_DATABASE=process.env.API_DB_DATABASE||"",m.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",m.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",m.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),m.API_DB_TYPE=process.env.API_DB_TYPE||"",m.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",m.API_DB_LOG=t.toBool(process.env.API_DB_LOG||"false"),m.API_TABLE_PREFIX=process.env.API_TABLE_PREFIX||"",m.API_HTTP_CRT=process.env.API_HTTP_CRT||"",m.API_HTTP_KEY=process.env.API_HTTP_KEY||"",m.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),m.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",m.API_HTTP_CROSS=t.toBool(process.env.API_HTTP_CROSS||"false"),m.API_HTTP_HYBRID=t.toBool(process.env.API_HTTP_HYBRID||"false"),m.API_SLEEP_AUTH=parseInt(process.env.API_SLEEP_AUTH||"1000"),m.API_SLEEP_FORGOT=parseInt(process.env.API_SLEEP_FORGOT||"5000"),m.API_SLEEP_REGISTRY=parseInt(process.env.API_SLEEP_REGISTRY||"5000"),m.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",m.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",m.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",m.API_TOKEN_LIFETIME=parseInt(process.env.API_TOKEN_LIFETIME||"15"),m.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),m.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",m.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),m.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",m.API_WEBSOCKET_START=t.toBool(process.env.API_WEBSOCKET_START||"false");class h{static connect(e){const t="connect_"+m.API_DB_TYPE.toLowerCase();if(t in h)return h[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_memory(){return new s.Sequelize("sqlite::memory:",{logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_mysql(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_postgres(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_sqlite(e){return new s.Sequelize({dialect:"sqlite",storage:e.database,logging:m.API_DB_LOG,define:{timestamps:!1}})}}const R=h.connect({database:m.API_DB_DATABASE,username:m.API_DB_USERNAME,password:m.API_DB_PASSWORD,hostname:m.API_DB_HOST,hostport:m.API_DB_PORT});class A extends s.Model{}A.init({login:s.DataTypes.BIGINT,logout:s.DataTypes.BIGINT,secret:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,useragent:s.DataTypes.STRING},{sequelize:R,modelName:m.API_TABLE_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class v extends s.Model{}v.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class O extends s.Model{}O.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class I extends s.Model{}I.init({},{sequelize:R,modelName:m.API_TABLE_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),I.removeAttribute("id");class _ extends s.Model{}_.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class P extends s.Model{}P.init({name:s.DataTypes.STRING,email:s.DataTypes.STRING,username:s.DataTypes.STRING,password:s.DataTypes.STRING,avatar:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated"});class f extends s.Model{}f.init({},{sequelize:R,modelName:m.API_TABLE_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),f.removeAttribute("id");class T extends s.Model{}T.init({key:s.DataTypes.STRING,value:s.DataTypes.STRING},{sequelize:R,modelName:m.API_TABLE_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),T.removeAttribute("id");class E extends s.Model{}E.init({type:s.DataTypes.STRING,source:s.DataTypes.STRING,message:s.DataTypes.TEXT},{sequelize:R,modelName:m.API_TABLE_PREFIX+"log",timestamps:!0,createdAt:"created",updatedAt:!1});class x extends s.Model{}var b;x.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"}),P.hasMany(A),A.belongsTo(P),P.hasMany(v),v.belongsTo(P),O.hasMany(I),I.belongsTo(O),_.hasMany(I),I.belongsTo(_),P.hasMany(f),f.belongsTo(P),O.hasMany(f),f.belongsTo(O),exports.LogsColor=void 0,(b=exports.LogsColor||(exports.LogsColor={})).ERROR="",b.INFO="",b.NONE="",b.SUCCESS="",b.WARNING="";class w{static write(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(exports.LogsColor.NONE,"",e,t,r)}))}static error(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(exports.LogsColor.ERROR,"error",e,t,r)}))}static info(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(exports.LogsColor.INFO,"info",e,t,r)}))}static success(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(exports.LogsColor.ERROR,"success",e,t,r)}))}static warning(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(exports.LogsColor.WARNING,"warning",e,t,r)}))}static writeConsole(e,r,s){const o=t.dateFormat(new Date,"%H:%M:%S");console.log(">",e,r+" ".repeat(10-r.length),"","|",o,"|",s)}static writeRaw(e,t,r,s,o){return y(this,void 0,void 0,(function*(){o&&w.writeConsole(e,t,r),R&&(yield E.create({type:t,source:s,message:r}).catch((()=>null)))}))}}const S=e=>n.existsSync(e)?n.readFileSync(e):void 0,C={http:S(m.API_HTTP_CRT),token:S(m.API_TOKEN_CRT)},q={http:S(m.API_HTTP_KEY),token:S(m.API_TOKEN_KEY)};class j{static error(e){w.error(e.message,"api.token",m.API_CONSOLE_ERROR)}static sign(e){return q.token?{token:i.sign(e,q.token,{algorithm:"RS256"})}:{error:"Invalid Secret"}}static user(e){return y(this,void 0,void 0,(function*(){const{error:t,decode:r}=j.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&r){const r=yield P.findOne({where:{id:e,state:!0}}).catch(j.error);if(r){const e=yield A.findOne({where:{secret:t,userId:r.id}}).catch(j.error);if(e){const t=Date.now();if(t>e.timestamp)return e.logout=t,yield e.save(),{error:"Expired token"};if(e.timestamp=t+6e4*m.API_TOKEN_LIFETIME,!e.logout)return yield e.save(),{auth:e,user:r}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e){if(!C.token)return{error:"Invalid Secret"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:i.verify(e,C.token)}}catch(e){return{error:"Invalid Token"}}}}class D extends e.Application{constructor(e){super(e,{cert:C.http,cross:m.API_HTTP_CROSS,hybrid:m.API_HTTP_HYBRID,key:q.http,path:"/api",port:m.API_HTTP_PORT,public:m.API_HTTP_PUBLIC})}error(e,t){w.info(e.message,t,m.API_CONSOLE_ERROR)}log(e,t){w.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return y(this,void 0,void 0,(function*(){yield R.sync(),yield e.listen.call(this),m.API_WEBSOCKET_START&&this.server&&(this._webSocket=new r.Server({server:this.server,verifyClient:(e,t)=>t(m.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,r)=>y(this,void 0,void 0,(function*(){r.url||(r.url="");const s=r.url.length<=1?"":r.url.replace(/\//g,".");let o;e.on("message",(t=>y(this,void 0,void 0,(function*(){if(o)try{const n=JSON.parse(t);this.emit("ws.message"+s,{data:n,message:t,req:r,user:o,ws:e})}catch(n){this.emit("ws.message"+s,{message:t,req:r,user:o,ws:e})}else{const{user:n}=yield j.user(t.toString());n&&(o=n,this.emit("ws.connection"+s,{req:r,user:o,ws:e}))}o||e.close()})))),e.on("close",(()=>{o&&this.emit("ws.close"+s,{user:o,ws:e})})),yield t.sleep(2e3),o||e.close()})))))}))}websocket(){return this._webSocket}}class N{static all(){return y(this,void 0,void 0,(function*(){const e=yield T.findAll().catch(N.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return y(this,void 0,void 0,(function*(){return((yield T.destroy({where:{key:e}}).catch(N.error))||0)>0}))}static error(e){w.error(e.message,"api.config",m.API_CONSOLE_ERROR)}static get(e){return y(this,void 0,void 0,(function*(){const t=yield T.findOne({where:{key:e}}).catch(N.error);return t&&t.value||""}))}static set(e,t){return y(this,void 0,void 0,(function*(){const[r]=(yield T.findOrCreate({where:{key:e}}).catch(N.error))||[];r&&(r.value=t,yield r.save().catch(N.error))}))}}class M{static all(e,t){return y(this,void 0,void 0,(function*(){return yield _.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:I,required:!0,include:[{model:O,required:!0,where:{state:!0},include:[{model:f,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{w.error(e.message,"api.permission",m.API_CONSOLE_ERROR)}))}))}static get(e){return y(this,void 0,void 0,(function*(){const t=yield M.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return y(this,void 0,void 0,(function*(){const r=yield M.all(e,{name:t});return!!r&&r.length>0}))}}const F=e.parameterFactory((({req:e})=>e.auth)),L=e.parameterFactory((({req:e})=>t.toArray(e.files))),B=e.parameterFactory((({req:e})=>e.user)),G=(e,r)=>{const s=t.uuidv4()+"."+r;return n.existsSync(u.join(e,s))?G(e,r):s};class k extends t.EventEmitter{auth(t,r,s,o,n){return y(this,void 0,void 0,(function*(){const{auth:i,error:a,user:d}=yield j.user(s);return a?e.Responses.error(t,a):i&&d?(o&&(i.useragent=o),yield i.save(),r.auth=i,r.user=d,n()):e.Responses.error(t,"Internal Server Error")}))}error(e){w.error(e.message,"api.controller",m.API_CONSOLE_ERROR)}name(){return"api"}permission(t,r,s,o){return y(this,void 0,void 0,(function*(){return r?(yield M.is(r,o))?s():e.Responses.error(t,"Unauthorized access"):e.Responses.unauthorized(t,"Access denied")}))}read(e,t,r,s){return this.permission(e,t,r,(s||this.name())+".read")}upload(r,s,o,n){const i=(null==n?void 0:n.path)||m.API_UPLOAD_TEMP,a=l.diskStorage({destination:(e,t,r)=>r(null,i),filename:(e,t,r)=>y(this,void 0,void 0,(function*(){return r(null,G(i,d.extension(t.mimetype)||"bin"))}))}),u=1e6*((null==n?void 0:n.size)||m.API_UPLOAD_SIZE),p=l({storage:a,fileFilter(e,r,s){var o;return y(this,void 0,void 0,(function*(){const e=null===(o=null==n?void 0:n.types)||void 0===o?void 0:o.indexOf(r.mimetype);return t.isNumber(e)&&e<0?s(new Error("File type not allowed")):s(null,!0)}))},limits:{fileSize:u}}),c=(null==n?void 0:n.count)||m.API_UPLOAD_COUNT,g=(null==n?void 0:n.field)||m.API_UPLOAD_FIELD;p.array(g,c)(s,r,(t=>t?e.Responses.error(r,t.message):o()))}validation(r,s,o,n){return y(this,void 0,void 0,(function*(){const{error:i,value:a}=yield t.Validation.object(n).parse().validateAsync(s.body);return i?e.Responses.validation(r,i):(s.body=a,o())}))}write(e,t,r,s){return this.permission(e,t,r,(s||this.name())+".write")}}p([c(0,e.Res()),c(1,e.Req()),c(2,e.Headers(m.API_TOKEN_HEADER)),c(3,e.Headers("user-agent")),c(4,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,String,Function]),g("design:returntype",Promise)],k.prototype,"auth",null),p([c(0,e.Res()),c(1,B()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],k.prototype,"permission",null),p([c(0,e.Res()),c(1,B()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],k.prototype,"read",null),p([c(0,e.Res()),c(1,e.Req()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function,Object]),g("design:returntype",void 0)],k.prototype,"upload",null),p([c(0,e.Res()),c(1,e.Req()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function,Object]),g("design:returntype",Promise)],k.prototype,"validation",null),p([c(0,e.Res()),c(1,B()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],k.prototype,"write",null),exports.AuthController=class extends k{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar"]}login(r,s,o,n){return y(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_AUTH);const{username:i,password:d}=s.body,l=yield P.findOne({where:{username:i}}).catch(this.error);if(!l)return n.emit("auth.failure",{req:s}),e.Responses.notfound(r,"Username not found");if(!l.state)return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Username is disabled");const u=a.SHA256(d).toString();if(l.password!=u)return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Invalid password");const p=l.id,c=t.uniqueID(),{error:g,token:y}=j.sign({id:p,secret:c});if(g)return n.emit("auth.failure",{req:s}),e.Responses.error(r,g);if(y){const t=Date.now(),n=t+6e4*m.API_TOKEN_LIFETIME,i=yield A.create({login:t,secret:c,timestamp:n,useragent:o,userId:p}).catch(this.error);if(i)return this.emit("auth.login",{auth:i,req:s,user:l}),e.Responses.data(r,{token:y})}return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Internal Server Error")}))}logout(t,r,s,o,n){return y(this,void 0,void 0,(function*(){return s&&o&&!s.logout?(s.logout=Date.now(),s.timestamp=s.logout,yield s.save(),n.emit("auth.logout",{auth:s,req:r,user:o}),e.Responses.success(t,"Disconcerted")):e.Responses.unauthorized(t,"Access denied")}))}user(r,s){return y(this,void 0,void 0,(function*(){const o=s.user;if(!o)return e.Responses.unauthorized(r,"Access denied");const n=yield M.all(o);if(n){const s=n.map((e=>e.name));return e.Responses.data(r,Object.assign(Object.assign({},t.allowedObject(this.attributes,o.toJSON())),{permissions:s}))}return e.Responses.error(r,"Internal Server Error")}))}},p([e.Post("/login"),e.Middleware("validation",{username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),c(2,e.Headers("user-agent")),c(3,e.App()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,D]),g("design:returntype",Promise)],exports.AuthController.prototype,"login",null),p([e.Get("/logout"),e.Middleware("auth"),c(0,e.Res()),c(1,e.Req()),c(2,F()),c(3,B()),c(4,e.App()),g("design:type",Function),g("design:paramtypes",[Object,Object,A,P,D]),g("design:returntype",Promise)],exports.AuthController.prototype,"logout",null),p([e.Get(),e.Middleware("auth"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.AuthController.prototype,"user",null),exports.AuthController=p([e.Controller("/auth"),e.Extends(k)],exports.AuthController),exports.ForgotController=class extends k{check(r,s){return y(this,void 0,void 0,(function*(){const{token:o}=s.body,n=yield this.findOne(o);return n&&n.user?(n.token=t.uniqueID(),yield n.save(),e.Responses.data(r,{token:n.token})):e.Responses.notfound(r,"User not found")}))}forgot(r,s){return y(this,void 0,void 0,(function*(){const{username:o}=s.body;yield t.sleep(m.API_SLEEP_FORGOT);const n=yield P.findOne({where:{username:o}}).catch(this.error);if(!n)return e.Responses.notfound(r,"User not found");const i=t.uniqueID(),a=Date.now()+6e4*m.API_TOKEN_LIFETIME,d=yield v.create({token:i,timestamp:a,state:!0,userId:n.id});return this.emit("forgot",{forgot:d,req:s,user:n}),e.Responses.success(r,"OK")}))}reset(t,r){return y(this,void 0,void 0,(function*(){const{token:s,password:o}=r.body,n=yield this.findOne(s);return n?(n.state=!1,yield n.save().catch(this.error),n.user.password=a.SHA256(o).toString(),yield n.user.save().catch(this.error),this.emit("forgot.reset",{req:r,user:n.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}findOne(e){return y(this,void 0,void 0,(function*(){return yield v.findOne({where:{token:e,state:!0},include:[{model:P,required:!0}]}).catch(this.error)}))}},p([e.Get("/check"),e.Middleware("validation",{token:t.Validation.string().required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"check",null),p([e.Get(),e.Middleware("validation",{username:t.Validation.string().min(4).required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"forgot",null),p([e.Get("/reset"),e.Middleware("validation",{token:t.Validation.string().required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"reset",null),exports.ForgotController=p([e.Controller("/forgot"),e.Extends(k)],exports.ForgotController),exports.ModelController=class extends k{add(t,r,s,o){return y(this,void 0,void 0,(function*(){const n=yield this.model().create(Object.assign(Object.assign({},t.body),o||{}),s||{}).catch(this.error);if(n){const t=n.id;return e.Responses.data(r,{id:t}),n}e.Responses.error(r,"Internal Server Error")}))}all(r,o,n,i){var a,d,l,u,p;return y(this,void 0,void 0,(function*(){const c=this.model(),g=Object.assign({},n||{});g.where=Object.assign({},g.where||{});const y=null===(a=r.query.limit)||void 0===a?void 0:a.toString();y&&(g.limit=parseInt(y));const m=null===(d=r.query.offset)||void 0===d?void 0:d.toString();m&&(g.offset=parseInt(m));const h=Object.keys(c.getAttributes()),R=[],A=null===(l=r.query.asc)||void 0===l?void 0:l.toString();A&&A.length&&A.split(",").forEach((e=>{h.indexOf(e)>=0&&R.push([e,"ASC"])}));const v=null===(u=r.query.desc)||void 0===u?void 0:u.toString();v&&v.length&&v.split(",").forEach((e=>{h.indexOf(e)>=0&&R.push([e,"DESC"])})),R.length&&(g.order=R);const O=[],I=t.isArray(g.attributes)?g.attributes:h,_=null===(p=r.query.search)||void 0===p?void 0:p.toString();I.forEach((e=>{var o;if(t.isString(e)&&(_&&_.length&&O.push({[e]:{[s.Op.like]:`%${_}%`}}),"search_"+e in r.query)){const t=null===(o=r.query["search_"+e])||void 0===o?void 0:o.toString();t&&t.length&&O.push({[e]:{[s.Op.like]:`%${t}%`}})}})),O.length&&(g.where=Object.assign(Object.assign({},g.where),{[s.Op.or]:[...O]}));const P=yield c.count(Object.assign(Object.assign({},g),{col:h[0]})).catch(this.error),f=yield c.findAll(g).catch(this.error);if(f)return e.Responses.data(o,{count:P,records:i?i(f):f}),f;e.Responses.error(o,"Internal Server Error")}))}del(t,r,s){return y(this,void 0,void 0,(function*(){const{id:o}=t.params;if(!o)return e.Responses.error(r,"Internal Server Error"),0;const n=yield this.model().destroy(Object.assign(Object.assign({},s||{}),{where:{id:o}})).catch(this.error);return n?(e.Responses.success(r,"OK"),n):(e.Responses.notfound(r,"Record not found"),0)}))}error(e){e.sql?w.error(e.message+"\n"+e.sql,"api.controller.sql",m.API_CONSOLE_ERROR):super.error(e)}get(t,r,s,o){return y(this,void 0,void 0,(function*(){const n=Object.assign({},s||{});n.where=n.where?Object.assign({},n.where):{};const{id:i}=t.params,a=yield this.model().findByPk(i,n).catch(this.error);if(a)return e.Responses.data(r,o?o(a):a.toJSON()),a;null!==a?e.Responses.error(r,"Internal Server Error"):e.Responses.notfound(r,"Record not found")}))}name(){return this.model().tableName}set(t,r,s,o){return y(this,void 0,void 0,(function*(){const{id:n}=t.params,[i]=(yield this.model().update(Object.assign(Object.assign({},t.body),o||{}),Object.assign(Object.assign({},s||{}),{where:Object.assign(Object.assign({},(s||{}).where),{id:n})})).catch(this.error))||[];return i?(e.Responses.success(r,"OK"),!0):(e.Responses.success(r,"Record not changed"),!1)}))}},exports.ModelController=p([e.Extends(k)],exports.ModelController),exports.CrudController=class extends exports.ModelController{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(t,e,r,this.create())}validationSet(e,t,r){this.validation(t,e,r,this.update())}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationAdd"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationSet"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordSet",null),p([c(0,e.Req()),c(1,e.Res()),c(2,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function]),g("design:returntype",void 0)],exports.CrudController.prototype,"validationAdd",null),p([c(0,e.Req()),c(1,e.Res()),c(2,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function]),g("design:returntype",void 0)],exports.CrudController.prototype,"validationSet",null),exports.CrudController=p([e.Extends(exports.ModelController)],exports.CrudController),exports.GroupsController=class extends exports.CrudController{model(){return O}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.GroupsController=p([e.Controller("/groups"),e.Extends(exports.CrudController)],exports.GroupsController),exports.GroupsRoutesController=class extends exports.ModelController{model(){return I}recordAll(e,t,r){return y(this,void 0,void 0,(function*(){this.all(t,e,{where:{groupId:r},include:[{model:_,required:!0}]},(e=>e.map((e=>e.route))))}))}recordSet(r,s,o){return y(this,void 0,void 0,(function*(){const n=yield O.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){const t=n.id;if(yield I.destroy({where:{groupId:t}}),o){let e=0;for(let r=0;r<o.length;r++)e=yield _.count({where:{id:o[r]}}),e&&(yield I.create({groupId:t,routeId:o[r]}))}return e.Responses.success(r,"OK")}return t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/routes"),e.Middleware("auth"),e.Middleware("read","groups"),c(0,e.Res()),c(1,e.Req()),c(2,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,String]),g("design:returntype",Promise)],exports.GroupsRoutesController.prototype,"recordAll",null),p([e.Put("/:id/routes"),e.Middleware("auth"),e.Middleware("write","groups"),e.Middleware("validation",{routes:t.Validation.array(t.Validation.number().parse())}),c(0,e.Res()),c(1,e.Params("id")),c(2,e.Body("routes")),g("design:type",Function),g("design:paramtypes",[Object,String,Array]),g("design:returntype",Promise)],exports.GroupsRoutesController.prototype,"recordSet",null),exports.GroupsRoutesController=p([e.Controller("/groups"),e.Extends(exports.ModelController)],exports.GroupsRoutesController),exports.LogsController=class extends exports.ModelController{model(){return E}recordAll(e,t){const{source:r,type:s}=t.query,o=r&&s?{source:r,type:s}:r?{source:r}:s?{type:s}:{};this.all(t,e,{where:o,order:[["created","DESC"]]})}},p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.LogsController.prototype,"recordAll",null),exports.LogsController=p([e.Controller("/logs"),e.Extends(exports.ModelController)],exports.LogsController),exports.RegisterController=class extends k{confirm(t,r){return y(this,void 0,void 0,(function*(){const s=yield x.findOne({where:{token:r,state:!0},include:[{model:P,required:!0}]}).catch(this.error);return s?(s.user.state=!0,yield s.user.save().catch(this.error),this.emit("user.confirm",{user:s.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}register(r,s,o,n){return y(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_REGISTRY);const s=yield P.findOne({where:{username:n}}).catch(this.error);if(s)return e.Responses.error(r,"Invalid Username");if(!t.isNull(s))return e.Responses.error(r,"Internal Server Error");const i=yield P.create(Object.assign(Object.assign({},o),{state:!1}));return this.emit("user.register",{user:i}),e.Responses.success(r,"OK")}))}},p([e.Get("/confirm"),e.Middleware("validation",{token:t.Validation.string().required()}),c(0,e.Res()),c(1,e.Body("token")),g("design:type",Function),g("design:paramtypes",[Object,String]),g("design:returntype",Promise)],exports.RegisterController.prototype,"confirm",null),p([e.Get(),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),c(2,e.Body()),c(3,e.Body("username")),g("design:type",Function),g("design:paramtypes",[Object,Object,Object,String]),g("design:returntype",Promise)],exports.RegisterController.prototype,"register",null),exports.RegisterController=p([e.Controller("/register"),e.Extends(k)],exports.RegisterController),exports.RoutesController=class extends exports.CrudController{model(){return _}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.RoutesController=p([e.Controller("/routes"),e.Extends(exports.CrudController)],exports.RoutesController),exports.SetupController=class extends k{setup(r){return y(this,void 0,void 0,(function*(){if(0==(yield P.count())){const e={description:"",state:!0},r=yield P.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),s=yield O.create(Object.assign({name:"admin"},e));yield f.create({userId:r.id,groupId:s.id});const o=["read","write"],n=["users","groups","routes"];yield t.forEachSeries(n,(r=>y(this,void 0,void 0,(function*(){yield t.forEachSeries(o,(t=>y(this,void 0,void 0,(function*(){const o=r+"."+t,n=yield _.create(Object.assign({name:o},e));yield I.create({groupId:s.id,routeId:n.id})}))))}))));const i=yield _.create(Object.assign({name:"logs.read"},e));yield I.create({groupId:s.id,routeId:i.id})}return e.Responses.success(r,"OK")}))}},p([e.Get(),c(0,e.Res()),g("design:type",Function),g("design:paramtypes",[Object]),g("design:returntype",Promise)],exports.SetupController.prototype,"setup",null),exports.SetupController=p([e.Controller("/setup"),e.Extends(k)],exports.SetupController),exports.UsersController=class extends exports.ModelController{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar","description","state","created","updated"]}model(){return P}recordAdd(e,t,r){this.add(r,e,{},{password:a.SHA256(t).toString()})}recordAll(e,t){this.all(t,e,{attributes:this.attributes})}recordDel(t,r,s,o){if(!s||s.id.toString()==o)return e.Responses.error(t,"Internal Server Error");this.del(r,t)}recordGet(e,t){this.get(t,e,{attributes:this.attributes})}recordSet(e,t,r){this.set(r,e,{where:{}},t?{password:a.SHA256(t).toString()}:{})}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required(),description:t.Validation.string().required(),state:t.Validation.boolean().parse().required()}),c(0,e.Res()),c(1,e.Body("password")),c(2,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,String,Object]),g("design:returntype",void 0)],exports.UsersController.prototype,"recordAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UsersController.prototype,"recordAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),c(0,e.Res()),c(1,e.Req()),c(2,B()),c(3,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,P,String]),g("design:returntype",Object)],exports.UsersController.prototype,"recordDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UsersController.prototype,"recordGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().empty(),email:t.Validation.string().email().empty(),username:t.Validation.string().min(4).empty(),password:t.Validation.string().min(5).empty().filter(""),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}),c(0,e.Res()),c(1,e.Body("password")),c(2,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,String,Object]),g("design:returntype",void 0)],exports.UsersController.prototype,"recordSet",null),exports.UsersController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UsersController),exports.UsersGroupsController=class extends exports.ModelController{model(){return f}recordAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:O,required:!0}]},(e=>e.map((e=>e.group))))}recordSet(r,s,o){return y(this,void 0,void 0,(function*(){const n=yield P.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){if(yield f.destroy({where:{userId:n.id}}),o){let e=0;for(let t=0;t<o.length;t++)e=yield O.count({where:{id:o[t]}}),e&&(yield f.create({userId:n.id,groupId:o[t]}))}return e.Responses.success(r,"OK")}return t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/groups"),e.Middleware("auth"),e.Middleware("read","users"),c(0,e.Res()),c(1,e.Req()),c(2,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,String]),g("design:returntype",void 0)],exports.UsersGroupsController.prototype,"recordAll",null),p([e.Put("/:id/groups"),e.Middleware("auth"),e.Middleware("write","users"),e.Middleware("validation",{groups:t.Validation.array(t.Validation.number().parse())}),c(0,e.Res()),c(1,e.Params("id")),c(2,e.Body("groups")),g("design:type",Function),g("design:paramtypes",[Object,String,Array]),g("design:returntype",Promise)],exports.UsersGroupsController.prototype,"recordSet",null),exports.UsersGroupsController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UsersGroupsController),exports.Application=D,exports.Auth=A,exports.Config=N,exports.Configs=T,exports.ControllerBase=k,exports.Database=h,exports.Env=m,exports.Forgot=v,exports.Group=O,exports.GroupRoute=I,exports.Log=E,exports.Logs=w,exports.Permission=M,exports.Registry=x,exports.ReqAuth=F,exports.ReqFiles=L,exports.ReqUser=B,exports.Route=_,exports.Token=j,exports.User=P,exports.UserGroup=f,exports.crt=C,exports.key=q,exports.sequelize=R;

package/dist/index.d.ts

@@ -1,12 +1,12 @@
 /*!
- * @andrewcaires/api v3.0.7
+ * @andrewcaires/api v3.0.9
  * Simple api for small applications using express, jsonwebtoken, sequelize and websocket 
  * (c) 2023 Andrew Caires
  * @license: MIT
  */
 import { ResponseJson, Application as Application$1 } from '@andrewcaires/express';
 import WebSocket from 'ws';
-import { EventEmitter, TypeObject, ValidationBase, TypeObjectString } from '@andrewcaires/utils.js';
+import { EventEmitter, TypeObject, ValidationBase, TypeObjectString, TypeObjectAny } from '@andrewcaires/utils.js';
 import { Response, Request, NextFunction } from 'express';
 import { Model, CreateOptions, Attributes, FindOptions, ModelStatic, UpdateOptions, Sequelize, WhereOptions } from 'sequelize';
 
@@ -15,14 +15,14 @@ declare class Route extends Model {
     name: string;
     description: string;
     state: boolean;
-    groups_routes: GroupRoute[];
+    groups_routes: Array<GroupRoute>;
 }
 
 declare class GroupRoute extends Model {
-    groupId: number;
     group: Group;
-    routeId: number;
+    groupId: number;
     route: Route;
+    routeId: number;
 }
 
 declare class Group extends Model {
@@ -30,15 +30,15 @@ declare class Group extends Model {
     name: string;
     description: string;
     state: boolean;
-    groups_routes: GroupRoute[];
-    users_groups: UserGroup[];
+    groups_routes: Array<GroupRoute>;
+    users_groups: Array<UserGroup>;
 }
 
 declare class UserGroup extends Model {
-    userId: number;
     user: User;
-    groupId: number;
+    userId: number;
     group: Group;
+    groupId: number;
 }
 
 declare class User extends Model {
@@ -50,7 +50,7 @@ declare class User extends Model {
     avatar: string;
     description: string;
     state: boolean;
-    users_groups: UserGroup[];
+    users_groups: Array<UserGroup>;
 }
 
 declare class Auth extends Model {
@@ -60,8 +60,13 @@ declare class Auth extends Model {
     secret: string;
     timestamp: number;
     useragent: string;
-    userId: number;
     user: User;
+    userId: number;
+}
+
+declare class Configs extends Model {
+    key: string;
+    value: string;
 }
 
 declare class Forgot extends Model {
@@ -69,21 +74,25 @@ declare class Forgot extends Model {
     token: string;
     timestamp: number;
     state: boolean;
-    userId: number;
     user: User;
+    userId: number;
 }
 
-declare class Configs extends Model {
-    key: string;
-    value: string;
-}
-
-declare class Logs extends Model {
+declare class Log extends Model {
     type: string;
     source: string;
     message: string;
 }
 
+declare class Registry extends Model {
+    id: number;
+    token: string;
+    timestamp: number;
+    state: boolean;
+    user: User;
+    userId: number;
+}
+
 interface UploadOptions {
     count?: number;
     field?: string;
@@ -136,14 +145,14 @@ declare class ForgotController extends ControllerBase {
 type FnRecord<M> = (records: M) => any;
 type FnRecords<M> = (records: Array<M>) => Array<any>;
 declare abstract class ModelController<M extends Model<M>> extends ControllerBase {
-    protected add(req: Request, res: Response, options?: CreateOptions<Attributes<M>>): Promise<number>;
+    protected add(req: Request, res: Response, options?: CreateOptions<Attributes<M>>, body?: TypeObjectAny): Promise<M | void>;
     protected all(req: Request, res: Response, options?: FindOptions<Attributes<M>>, fn?: FnRecords<M>): Promise<Array<M> | void>;
     protected del(req: Request, res: Response, options?: FindOptions<Attributes<M>>): Promise<number>;
     error(error: any): void;
-    protected get(req: Request, res: Response, options?: FindOptions<Attributes<M>>, fn?: FnRecord<M>): Promise<M | undefined>;
+    protected get(req: Request, res: Response, options?: FindOptions<Attributes<M>>, fn?: FnRecord<M>): Promise<M | void>;
     abstract model(): ModelStatic<M>;
     protected name(): string;
-    protected set(req: Request, res: Response, options?: UpdateOptions<Attributes<M>>): Promise<boolean>;
+    protected set(req: Request, res: Response, options?: UpdateOptions<Attributes<M>>, body?: TypeObjectAny): Promise<boolean>;
 }
 
 declare abstract class CrudController<M extends Model<M>> extends ModelController<M> {
@@ -158,21 +167,21 @@ declare abstract class CrudController<M extends Model<M>> extends ModelControlle
     validationSet(req: Request, res: Response, next: NextFunction): void;
 }
 
-declare class GroupController extends CrudController<Group> {
+declare class GroupsController extends CrudController<Group> {
     model(): typeof Group;
     create(): TypeObject<ValidationBase>;
     update(): TypeObject<ValidationBase>;
 }
 
-declare class GroupRouteController extends ModelController<GroupRoute> {
+declare class GroupsRoutesController extends ModelController<GroupRoute> {
     model(): typeof GroupRoute;
-    groupRouteAll(res: Response, req: Request, groupId: string): Promise<void>;
-    groupRouteSet(res: Response, id: string, routes: Array<number>): Promise<ResponseJson>;
+    recordAll(res: Response, req: Request, groupId: string): Promise<void>;
+    recordSet(res: Response, id: string, routes: Array<number>): Promise<ResponseJson>;
 }
 
-declare class LogsController extends ModelController<Logs> {
-    model(): typeof Logs;
-    protected logsAll(res: Response, req: Request): void;
+declare class LogsController extends ModelController<Log> {
+    model(): typeof Log;
+    protected recordAll(res: Response, req: Request): void;
 }
 
 declare class RegisterController extends ControllerBase {
@@ -180,7 +189,7 @@ declare class RegisterController extends ControllerBase {
     register(res: Response, req: Request, body: any, username: string): Promise<ResponseJson>;
 }
 
-declare class RouteController extends CrudController<Route> {
+declare class RoutesController extends CrudController<Route> {
     model(): typeof Route;
     create(): TypeObject<ValidationBase>;
     update(): TypeObject<ValidationBase>;
@@ -190,20 +199,20 @@ declare class SetupController extends ControllerBase {
     protected setup(res: Response): Promise<ResponseJson>;
 }
 
-declare class UserController extends ModelController<User> {
+declare class UsersController extends ModelController<User> {
     private readonly attributes;
     model(): typeof User;
-    userAdd(res: Response, req: Request): void;
-    protected userAll(res: Response, req: Request): void;
-    protected userDel(res: Response, req: Request, user: User, id: string): ResponseJson | void;
-    protected userGet(res: Response, req: Request): void;
-    protected userSet(res: Response, req: Request): void;
+    recordAdd(res: Response, password: string, req: Request): void;
+    protected recordAll(res: Response, req: Request): void;
+    protected recordDel(res: Response, req: Request, user: User, id: string): ResponseJson | void;
+    protected recordGet(res: Response, req: Request): void;
+    protected recordSet(res: Response, password: string, req: Request): void;
 }
 
-declare class UserGroupController extends ModelController<UserGroup> {
+declare class UsersGroupsController extends ModelController<UserGroup> {
     model(): typeof UserGroup;
-    userGroupsAll(res: Response, req: Request, userId: string): void;
-    userGroupsSet(res: Response, id: string, groups: Array<number>): Promise<ResponseJson>;
+    recordAll(res: Response, req: Request, userId: string): void;
+    recordSet(res: Response, id: string, groups: Array<number>): Promise<ResponseJson>;
 }
 
 interface DatabaseOptions {
@@ -253,6 +262,9 @@ declare class Env {
     static readonly API_WEBSOCKET_START: boolean;
 }
 
+declare const ReqAuth: (key?: string | undefined) => ParameterDecorator;
+declare const ReqFiles: (key?: string | undefined) => ParameterDecorator;
+declare const ReqUser: (key?: string | undefined) => ParameterDecorator;
 declare global {
     namespace Express {
         interface Request {
@@ -261,10 +273,16 @@ declare global {
         }
     }
 }
-declare const ReqAuth: (key?: string | undefined) => ParameterDecorator;
-declare const ReqUser: (key?: string | undefined) => ParameterDecorator;
 
-declare class Log {
+declare enum LogsColor {
+    ERROR = "\u001B[31m",
+    INFO = "\u001B[36m",
+    NONE = "\u001B[37m",
+    SUCCESS = "\u001B[32m",
+    WARNING = "\u001B[33m"
+}
+type LogsTypes = "error" | "info" | "success" | "warning" | "";
+declare class Logs {
     static write(message: string, source?: string, console?: boolean): Promise<void>;
     static error(message: string, source?: string, console?: boolean): Promise<void>;
     static info(message: string, source?: string, console?: boolean): Promise<void>;
@@ -309,4 +327,4 @@ declare class Token {
     static verify(token: string): TokenVerify;
 }
 
-export { Application, Auth, AuthController, Config, Configs, ControllerBase, CrudController, Database, DatabaseOptions, Env, Forgot, ForgotController, Group, GroupController, GroupRoute, GroupRouteController, Log, Logs, LogsController, ModelController, Permission, RegisterController, ReqAuth, ReqUser, Route, RouteController, SetupController, Token, User, UserController, UserGroup, UserGroupController, crt, key, sequelize };
+export { Application, Auth, AuthController, Config, Configs, ControllerBase, CrudController, Database, DatabaseOptions, Env, Forgot, ForgotController, Group, GroupRoute, GroupsController, GroupsRoutesController, Log, Logs, LogsColor, LogsController, LogsTypes, ModelController, Permission, RegisterController, Registry, ReqAuth, ReqFiles, ReqUser, Route, RoutesController, SetupController, Token, User, UserGroup, UsersController, UsersGroupsController, crt, key, sequelize };

package/dist/index.esm.js

@@ -1,7 +1,7 @@
 /*!
- * @andrewcaires/api v3.0.7
+ * @andrewcaires/api v3.0.9
  * Simple api for small applications using express, jsonwebtoken, sequelize and websocket 
  * (c) 2023 Andrew Caires
  * @license: MIT
  */
-import{Application as e,parameterFactory as t,Res as r,Req as n,Headers as s,Next as i,Argument as o,Responses as a,Post as d,Middleware as u,App as c,Get as l,Controller as p,Extends as m,Delete as g,Put as y,Params as h,Body as v}from"@andrewcaires/express";import{toBool as O,dateFormat as _,sleep as I,EventEmitter as A,isNumber as f,Validation as P,uuidv4 as E,uniqueID as b,allowedObject as T,isArray as S,isString as R,isNull as w,forEachSeries as j}from"@andrewcaires/utils.js";import N from"ws";import{Sequelize as q,DataTypes as F,Model as D,Op as L}from"sequelize";import{config as B}from"dotenv";import{existsSync as k,readFileSync as G}from"fs";import{sign as C,verify as x}from"jsonwebtoken";import{SHA256 as K}from"crypto-js";import U from"mime-types";import H from"multer";import{join as z}from"path";function M(e,t,r,n){var s,i=arguments.length,o=i<3?t:null===n?n=Object.getOwnPropertyDescriptor(t,r):n;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,r,n);else for(var a=e.length-1;a>=0;a--)(s=e[a])&&(o=(i<3?s(o):i>3?s(t,r,o):s(t,r))||o);return i>3&&o&&Object.defineProperty(t,r,o),o}function X(e,t){return function(r,n){t(r,n,e)}}function Y(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function W(e,t,r,n){return new(r||(r=Promise))((function(s,i){function o(e){try{d(n.next(e))}catch(e){i(e)}}function a(e){try{d(n.throw(e))}catch(e){i(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(o,a)}d((n=n.apply(e,t||[])).next())}))}B();class J{}J.API_CONSOLE_ERROR=O(process.env.API_CONSOLE_ERROR||"false"),J.API_DB_DATABASE=process.env.API_DB_DATABASE||"",J.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",J.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",J.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),J.API_DB_TYPE=process.env.API_DB_TYPE||"",J.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",J.API_DB_LOG=O(process.env.API_DB_LOG||"false"),J.API_TABLE_PREFIX=process.env.API_TABLE_PREFIX||"",J.API_HTTP_CRT=process.env.API_HTTP_CRT||"",J.API_HTTP_KEY=process.env.API_HTTP_KEY||"",J.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),J.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",J.API_HTTP_CROSS=O(process.env.API_HTTP_CROSS||"false"),J.API_HTTP_HYBRID=O(process.env.API_HTTP_HYBRID||"false"),J.API_SLEEP_AUTH=parseInt(process.env.API_SLEEP_AUTH||"1000"),J.API_SLEEP_FORGOT=parseInt(process.env.API_SLEEP_FORGOT||"5000"),J.API_SLEEP_REGISTRY=parseInt(process.env.API_SLEEP_REGISTRY||"5000"),J.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",J.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",J.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",J.API_TOKEN_LIFETIME=parseInt(process.env.API_TOKEN_LIFETIME||"15"),J.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),J.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",J.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),J.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",J.API_WEBSOCKET_START=O(process.env.API_WEBSOCKET_START||"false");class Z{static connect(e){const t="connect_"+J.API_DB_TYPE.toLowerCase();if(t in Z)return Z[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new q(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:J.API_DB_LOG,define:{timestamps:!1}})}static connect_memory(){return new q("sqlite::memory:",{logging:J.API_DB_LOG,define:{timestamps:!1}})}static connect_mysql(e){return new q(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:J.API_DB_LOG,define:{timestamps:!1}})}static connect_postgres(e){return new q(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:J.API_DB_LOG,define:{timestamps:!1}})}static connect_sqlite(e){return new q({dialect:"sqlite",storage:e.database,logging:J.API_DB_LOG,define:{timestamps:!1}})}}const $=Z.connect({database:J.API_DB_DATABASE,username:J.API_DB_USERNAME,password:J.API_DB_PASSWORD,hostname:J.API_DB_HOST,hostport:J.API_DB_PORT});class Q extends D{}Q.init({login:F.BIGINT,logout:F.BIGINT,secret:F.STRING,timestamp:F.BIGINT,useragent:F.STRING},{sequelize:$,modelName:J.API_TABLE_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class V extends D{}V.init({token:F.STRING,timestamp:F.BIGINT,state:F.BOOLEAN},{sequelize:$,modelName:J.API_TABLE_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ee extends D{}ee.init({name:F.STRING,description:F.TEXT,state:F.BOOLEAN},{sequelize:$,modelName:J.API_TABLE_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class te extends D{}te.init({name:F.STRING,description:F.TEXT,state:F.BOOLEAN},{sequelize:$,modelName:J.API_TABLE_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class re extends D{}re.init({},{sequelize:$,modelName:J.API_TABLE_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),re.removeAttribute("id");class ne extends D{}ne.init({name:F.STRING,email:F.STRING,username:F.STRING,password:F.STRING,avatar:F.STRING,description:F.TEXT,state:F.BOOLEAN},{sequelize:$,modelName:J.API_TABLE_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated"});class se extends D{}se.init({},{sequelize:$,modelName:J.API_TABLE_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),se.removeAttribute("id");class ie extends D{}ie.init({key:F.STRING,value:F.STRING},{sequelize:$,modelName:J.API_TABLE_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),ie.removeAttribute("id");class oe extends D{}var ae;oe.init({type:F.STRING,source:F.STRING,message:F.TEXT},{sequelize:$,modelName:J.API_TABLE_PREFIX+"logs",timestamps:!0,createdAt:"created",updatedAt:!1}),ne.hasMany(Q),Q.belongsTo(ne),ne.hasMany(V),V.belongsTo(ne),ee.hasMany(re),re.belongsTo(ee),te.hasMany(re),re.belongsTo(te),ne.hasMany(se),se.belongsTo(ne),ee.hasMany(se),se.belongsTo(ee),function(e){e.ERROR="",e.INFO="",e.NONE="",e.SUCCESS="",e.WARNING=""}(ae||(ae={}));class de{static write(e,t,r){return W(this,void 0,void 0,(function*(){yield de.writeRaw(ae.NONE,"",e,t,r)}))}static error(e,t,r){return W(this,void 0,void 0,(function*(){yield de.writeRaw(ae.ERROR,"error",e,t,r)}))}static info(e,t,r){return W(this,void 0,void 0,(function*(){yield de.writeRaw(ae.INFO,"info",e,t,r)}))}static success(e,t,r){return W(this,void 0,void 0,(function*(){yield de.writeRaw(ae.ERROR,"success",e,t,r)}))}static warning(e,t,r){return W(this,void 0,void 0,(function*(){yield de.writeRaw(ae.WARNING,"warning",e,t,r)}))}static writeConsole(e,t,r){const n=_(new Date,"%H:%M:%S");console.log(">",e,t+" ".repeat(10-t.length),"","|",n,"|",r)}static writeRaw(e,t,r,n,s){return W(this,void 0,void 0,(function*(){s&&de.writeConsole(e,t,r),$&&(yield oe.create({type:t,source:n,message:r}).catch((()=>null)))}))}}const ue=e=>k(e)?G(e):void 0,ce={http:ue(J.API_HTTP_CRT),token:ue(J.API_TOKEN_CRT)},le={http:ue(J.API_HTTP_KEY),token:ue(J.API_TOKEN_KEY)};class pe{static error(e){de.error(e.message,"api.token",J.API_CONSOLE_ERROR)}static sign(e){return le.token?{token:C(e,le.token,{algorithm:"RS256"})}:{error:"Invalid Secret"}}static user(e){return W(this,void 0,void 0,(function*(){const{error:t,decode:r}=pe.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&r){const r=yield ne.findOne({where:{id:e,state:!0}}).catch(pe.error);if(r){const e=yield Q.findOne({where:{secret:t,userId:r.id}}).catch(pe.error);if(e){const t=Date.now();if(t>e.timestamp)return e.logout=t,yield e.save(),{error:"Expired token"};if(e.timestamp=t+6e4*J.API_TOKEN_LIFETIME,!e.logout)return yield e.save(),{auth:e,user:r}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e){if(!ce.token)return{error:"Invalid Secret"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:x(e,ce.token)}}catch(e){return{error:"Invalid Token"}}}}class me extends e{constructor(e){super(e,{cert:ce.http,cross:J.API_HTTP_CROSS,hybrid:J.API_HTTP_HYBRID,key:le.http,path:"/api",port:J.API_HTTP_PORT,public:J.API_HTTP_PUBLIC})}error(e,t){de.info(e.message,t,J.API_CONSOLE_ERROR)}log(e,t){de.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return W(this,void 0,void 0,(function*(){yield $.sync(),yield e.listen.call(this),J.API_WEBSOCKET_START&&this.server&&(this._webSocket=new N.Server({server:this.server,verifyClient:(e,t)=>t(J.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,t)=>W(this,void 0,void 0,(function*(){t.url||(t.url="");const r=t.url.length<=1?"":t.url.replace(/\//g,".");let n;e.on("message",(s=>W(this,void 0,void 0,(function*(){if(n)try{const i=JSON.parse(s);this.emit("ws.message"+r,{data:i,message:s,req:t,user:n,ws:e})}catch(i){this.emit("ws.message"+r,{message:s,req:t,user:n,ws:e})}else{const{user:i}=yield pe.user(s.toString());i&&(n=i,this.emit("ws.connection"+r,{req:t,user:n,ws:e}))}n||e.close()})))),e.on("close",(()=>{n&&this.emit("ws.close"+r,{user:n,ws:e})})),yield I(2e3),n||e.close()})))))}))}websocket(){return this._webSocket}}class ge{static all(){return W(this,void 0,void 0,(function*(){const e=yield ie.findAll().catch(ge.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return W(this,void 0,void 0,(function*(){return((yield ie.destroy({where:{key:e}}).catch(ge.error))||0)>0}))}static error(e){de.error(e.message,"api.config",J.API_CONSOLE_ERROR)}static get(e){return W(this,void 0,void 0,(function*(){const t=yield ie.findOne({where:{key:e}}).catch(ge.error);return t&&t.value||""}))}static set(e,t){return W(this,void 0,void 0,(function*(){const[r]=(yield ie.findOrCreate({where:{key:e}}).catch(ge.error))||[];r&&(r.value=t,yield r.save().catch(ge.error))}))}}class ye{static all(e,t){return W(this,void 0,void 0,(function*(){return yield te.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:re,required:!0,include:[{model:ee,required:!0,where:{state:!0},include:[{model:se,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{de.error(e.message,"api.permission",J.API_CONSOLE_ERROR)}))}))}static get(e){return W(this,void 0,void 0,(function*(){const t=yield ye.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return W(this,void 0,void 0,(function*(){const r=yield ye.all(e,{name:t});return!!r&&r.length>0}))}}const he=t((({req:e})=>e.auth)),ve=t((({req:e})=>e.user)),Oe=(e,t)=>{const r=E()+"."+t;return k(z(e,r))?Oe(e,t):r};class _e extends A{auth(e,t,r,n,s){return W(this,void 0,void 0,(function*(){const{auth:i,error:o,user:d}=yield pe.user(r);return o?a.error(e,o):i&&d?(n&&(i.useragent=n),yield i.save(),t.auth=i,t.user=d,s()):a.error(e,"Internal Server Error")}))}error(e){de.error(e.message,"api.controller",J.API_CONSOLE_ERROR)}name(){return"api"}permission(e,t,r,n){return W(this,void 0,void 0,(function*(){return t?(yield ye.is(t,n))?r():a.error(e,"Unauthorized access"):a.unauthorized(e,"Access denied")}))}read(e,t,r,n){return this.permission(e,t,r,(n||this.name())+".read")}upload(e,t,r,n){const s=(null==n?void 0:n.path)||J.API_UPLOAD_TEMP,i=H.diskStorage({destination:(e,t,r)=>r(null,s),filename:(e,t,r)=>W(this,void 0,void 0,(function*(){return r(null,Oe(s,U.extension(t.mimetype)||"bin"))}))}),o=1e6*((null==n?void 0:n.size)||J.API_UPLOAD_SIZE),d=H({storage:i,fileFilter(e,t,r){var s;return W(this,void 0,void 0,(function*(){const e=null===(s=null==n?void 0:n.types)||void 0===s?void 0:s.indexOf(t.mimetype);return f(e)&&e<0?r(new Error("File type not allowed")):r(null,!0)}))},limits:{fileSize:o}}),u=(null==n?void 0:n.count)||J.API_UPLOAD_COUNT,c=(null==n?void 0:n.field)||J.API_UPLOAD_FIELD;d.array(c,u)(t,e,(t=>t?a.error(e,t.message):r()))}validation(e,t,r,n){return W(this,void 0,void 0,(function*(){const{error:s,value:i}=yield P.object(n).parse().validateAsync(t.body);return s?a.validation(e,s):(t.body=i,r())}))}write(e,t,r,n){return this.permission(e,t,r,(n||this.name())+".write")}}M([X(0,r()),X(1,n()),X(2,s(J.API_TOKEN_HEADER)),X(3,s("user-agent")),X(4,i()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,String,String,Function]),Y("design:returntype",Promise)],_e.prototype,"auth",null),M([X(0,r()),X(1,ve()),X(2,i()),X(3,o()),Y("design:type",Function),Y("design:paramtypes",[Object,ne,Function,String]),Y("design:returntype",Promise)],_e.prototype,"permission",null),M([X(0,r()),X(1,ve()),X(2,i()),X(3,o()),Y("design:type",Function),Y("design:paramtypes",[Object,ne,Function,String]),Y("design:returntype",Promise)],_e.prototype,"read",null),M([X(0,r()),X(1,n()),X(2,i()),X(3,o()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Function,Object]),Y("design:returntype",void 0)],_e.prototype,"upload",null),M([X(0,r()),X(1,n()),X(2,i()),X(3,o()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Function,Object]),Y("design:returntype",Promise)],_e.prototype,"validation",null),M([X(0,r()),X(1,ve()),X(2,i()),X(3,o()),Y("design:type",Function),Y("design:paramtypes",[Object,ne,Function,String]),Y("design:returntype",Promise)],_e.prototype,"write",null);let Ie=class extends _e{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar"]}login(e,t,r,n){return W(this,void 0,void 0,(function*(){yield I(J.API_SLEEP_AUTH);const{username:s,password:i}=t.body,o=yield ne.findOne({where:{username:s}}).catch(this.error);if(!o)return n.emit("auth.failure",{req:t}),a.notfound(e,"Username not found");if(!o.state)return n.emit("auth.failure",{req:t}),a.error(e,"Username is disabled");const d=K(i).toString();if(o.password!=d)return n.emit("auth.failure",{req:t}),a.error(e,"Invalid password");const u=o.id,c=b(),{error:l,token:p}=pe.sign({id:u,secret:c});if(l)return n.emit("auth.failure",{req:t}),a.error(e,l);if(p){const n=Date.now(),s=n+6e4*J.API_TOKEN_LIFETIME,i=yield Q.create({login:n,secret:c,timestamp:s,useragent:r,userId:u}).catch(this.error);if(i)return this.emit("auth.login",{auth:i,req:t,user:o}),a.data(e,{token:p})}return n.emit("auth.failure",{req:t}),a.error(e,"Internal Server Error")}))}logout(e,t,r,n,s){return W(this,void 0,void 0,(function*(){return r&&n&&!r.logout?(r.logout=Date.now(),r.timestamp=r.logout,yield r.save(),s.emit("auth.logout",{auth:r,req:t,user:n}),a.success(e,"Disconcerted")):a.unauthorized(e,"Access denied")}))}user(e,t){return W(this,void 0,void 0,(function*(){const r=t.user;if(!r)return a.unauthorized(e,"Access denied");const n=yield ye.all(r);if(n){const t=n.map((e=>e.name));return a.data(e,Object.assign(Object.assign({},T(this.attributes,r.toJSON())),{permissions:t}))}return a.error(e,"Internal Server Error")}))}};M([d("/login"),u("validation",{username:P.string().min(4).required(),password:P.string().min(5).required()}),X(0,r()),X(1,n()),X(2,s("user-agent")),X(3,c()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,String,me]),Y("design:returntype",Promise)],Ie.prototype,"login",null),M([l("/logout"),u("auth"),X(0,r()),X(1,n()),X(2,he()),X(3,ve()),X(4,c()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Q,ne,me]),Y("design:returntype",Promise)],Ie.prototype,"logout",null),M([l(),u("auth"),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",Promise)],Ie.prototype,"user",null),Ie=M([p("/auth"),m(_e)],Ie);let Ae=class extends _e{check(e,t){return W(this,void 0,void 0,(function*(){const{token:r}=t.body,n=yield this.findOne(r);return n&&n.user?(n.token=b(),yield n.save(),a.data(e,{token:n.token})):a.notfound(e,"User not found")}))}forgot(e,t){return W(this,void 0,void 0,(function*(){const{username:r}=t.body;yield I(J.API_SLEEP_FORGOT);const n=yield ne.findOne({where:{username:r}}).catch(this.error);if(!n)return a.notfound(e,"User not found");const s=b(),i=Date.now()+6e4*J.API_TOKEN_LIFETIME,o=yield V.create({token:s,timestamp:i,state:!0,userId:n.id});return this.emit("forgot",{forgot:o,req:t,user:n}),a.success(e,"OK")}))}reset(e,t){return W(this,void 0,void 0,(function*(){const{token:r,password:n}=t.body,s=yield this.findOne(r);return s?(s.state=!1,yield s.save().catch(this.error),s.user.password=K(n).toString(),yield s.user.save().catch(this.error),this.emit("forgot.reset",{req:t,user:s.user}),a.success(e,"OK")):a.notfound(e,"User not found")}))}findOne(e){return W(this,void 0,void 0,(function*(){return yield V.findOne({where:{token:e,state:!0},include:[{model:ne,required:!0}]}).catch(this.error)}))}};M([l("/check"),u("validation",{token:P.string().required()}),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",Promise)],Ae.prototype,"check",null),M([l(),u("validation",{username:P.string().min(4).required()}),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",Promise)],Ae.prototype,"forgot",null),M([l("/reset"),u("validation",{token:P.string().required(),password:P.string().min(5).required()}),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",Promise)],Ae.prototype,"reset",null),Ae=M([p("/forgot"),m(_e)],Ae);let fe=class extends _e{add(e,t,r){return W(this,void 0,void 0,(function*(){const n=yield this.model().create(e.body,r||{}).catch(this.error);if(n){const e=n.id;return a.data(t,{id:e}),e}return a.error(t,"Internal Server Error"),0}))}all(e,t,r,n){var s,i,o,d,u;return W(this,void 0,void 0,(function*(){const c=this.model(),l=Object.assign({},r||{});l.where=Object.assign({},l.where||{});const p=null===(s=e.query.limit)||void 0===s?void 0:s.toString();p&&(l.limit=parseInt(p));const m=null===(i=e.query.offset)||void 0===i?void 0:i.toString();m&&(l.offset=parseInt(m));const g=Object.keys(c.getAttributes()),y=[],h=null===(o=e.query.asc)||void 0===o?void 0:o.toString();h&&h.length&&h.split(",").forEach((e=>{g.indexOf(e)>=0&&y.push([e,"ASC"])}));const v=null===(d=e.query.desc)||void 0===d?void 0:d.toString();v&&v.length&&v.split(",").forEach((e=>{g.indexOf(e)>=0&&y.push([e,"DESC"])})),y.length&&(l.order=y);const O=[],_=S(l.attributes)?l.attributes:g,I=null===(u=e.query.search)||void 0===u?void 0:u.toString();_.forEach((t=>{var r;if(R(t)&&(I&&I.length&&O.push({[t]:{[L.like]:`%${I}%`}}),"search_"+t in e.query)){const n=null===(r=e.query["search_"+t])||void 0===r?void 0:r.toString();n&&n.length&&O.push({[t]:{[L.like]:`%${n}%`}})}})),O.length&&(l.where=Object.assign(Object.assign({},l.where),{[L.or]:[...O]}));const A=yield c.count(Object.assign(Object.assign({},l),{col:g[0]})).catch(this.error),f=yield c.findAll(l).catch(this.error);if(f)return a.data(t,{count:A,records:n?n(f):f}),f;a.error(t,"Internal Server Error")}))}del(e,t,r){return W(this,void 0,void 0,(function*(){const{id:n}=e.params;if(!n)return a.error(t,"Internal Server Error"),0;const s=yield this.model().destroy(Object.assign(Object.assign({},r||{}),{where:{id:n}})).catch(this.error);return s?(a.success(t,"OK"),s):(a.notfound(t,"Record not found"),0)}))}error(e){e.sql?de.error(e.message+"\n"+e.sql,"api.controller.sql",J.API_CONSOLE_ERROR):super.error(e)}get(e,t,r,n){return W(this,void 0,void 0,(function*(){const s=Object.assign({},r||{});s.where=s.where?Object.assign({},s.where):{};const{id:i}=e.params,o=yield this.model().findByPk(i,s).catch(this.error);if(o)return a.data(t,n?n(o):o.toJSON()),o;null!==o?a.error(t,"Internal Server Error"):a.notfound(t,"Record not found")}))}name(){return this.model().tableName}set(e,t,r){return W(this,void 0,void 0,(function*(){const{id:n}=e.params,[s]=(yield this.model().update(e.body,Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{id:n})})).catch(this.error))||[];return s?(a.success(t,"OK"),!0):(a.success(t,"Record not changed"),!1)}))}};fe=M([m(_e)],fe);let Pe=class extends fe{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(t,e,r,this.create())}validationSet(e,t,r){this.validation(t,e,r,this.update())}};M([d(),u("auth"),u("write"),u("validationAdd"),X(0,n()),X(1,r()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Pe.prototype,"recordAdd",null),M([l(),u("auth"),u("read"),X(0,n()),X(1,r()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Pe.prototype,"recordAll",null),M([g("/:id"),u("auth"),u("write"),X(0,n()),X(1,r()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Pe.prototype,"recordDel",null),M([l("/:id"),u("auth"),u("read"),X(0,n()),X(1,r()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Pe.prototype,"recordGet",null),M([y("/:id"),u("auth"),u("write"),u("validationSet"),X(0,n()),X(1,r()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Pe.prototype,"recordSet",null),M([X(0,n()),X(1,r()),X(2,i()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Function]),Y("design:returntype",void 0)],Pe.prototype,"validationAdd",null),M([X(0,n()),X(1,r()),X(2,i()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Function]),Y("design:returntype",void 0)],Pe.prototype,"validationSet",null),Pe=M([m(fe)],Pe);let Ee=class extends Pe{model(){return ee}create(){return{name:P.string().required(),description:P.string().empty(""),state:P.boolean().parse().required()}}update(){return{name:P.string().empty(),description:P.string().empty(),state:P.boolean().parse().empty()}}};Ee=M([p("/groups"),m(Pe)],Ee);let be=class extends fe{model(){return re}groupRouteAll(e,t,r){return W(this,void 0,void 0,(function*(){this.all(t,e,{where:{groupId:r},include:[{model:te,required:!0}]},(e=>e.map((e=>e.route))))}))}groupRouteSet(e,t,r){return W(this,void 0,void 0,(function*(){const n=yield ee.findByPk(t,{attributes:["id"]}).catch(this.error);if(n){const t=n.id;if(yield re.destroy({where:{groupId:t}}),r){let e=0;for(let n=0;n<r.length;n++)e=yield te.count({where:{id:r[n]}}),e&&(yield re.create({groupId:t,routeId:r[n]}))}return a.success(e,"OK")}return w(n)?a.notfound(e,"Record not found"):a.error(e,"Internal Server Error")}))}};M([l("/:id/routes"),u("auth"),u("read","groups"),X(0,r()),X(1,n()),X(2,h("id")),Y("design:type",Function),Y("design:paramtypes",[Object,Object,String]),Y("design:returntype",Promise)],be.prototype,"groupRouteAll",null),M([y("/:id/routes"),u("auth"),u("write","groups"),u("validation",{routes:P.array(P.number().parse())}),X(0,r()),X(1,h("id")),X(2,v("routes")),Y("design:type",Function),Y("design:paramtypes",[Object,String,Array]),Y("design:returntype",Promise)],be.prototype,"groupRouteSet",null),be=M([p("/groups"),m(fe)],be);let Te=class extends fe{model(){return oe}logsAll(e,t){const{source:r,type:n}=t.query,s=r&&n?{source:r,type:n}:r?{source:r}:n?{type:n}:{};this.all(t,e,{where:s,order:[["created","DESC"]]})}};M([l(),u("auth"),u("read"),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Te.prototype,"logsAll",null),Te=M([p("/logs"),m(fe)],Te);class Se extends D{}Se.init({token:F.STRING,timestamp:F.BIGINT,state:F.BOOLEAN},{sequelize:$,modelName:J.API_TABLE_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"});let Re=class extends _e{confirm(e,t){return W(this,void 0,void 0,(function*(){const r=yield Se.findOne({where:{token:t,state:!0},include:[{model:ne,required:!0}]}).catch(this.error);return r?(r.user.state=!0,yield r.user.save().catch(this.error),this.emit("user.confirm",{user:r.user}),a.success(e,"OK")):a.notfound(e,"User not found")}))}register(e,t,r,n){return W(this,void 0,void 0,(function*(){yield I(J.API_SLEEP_REGISTRY);const t=yield ne.findOne({where:{username:n}}).catch(this.error);if(t)return a.error(e,"Invalid Username");if(!w(t))return a.error(e,"Internal Server Error");const s=yield ne.create(Object.assign(Object.assign({},r),{state:!1}));return this.emit("user.register",{user:s}),a.success(e,"OK")}))}};M([l("/confirm"),u("validation",{token:P.string().required()}),X(0,r()),X(1,v("token")),Y("design:type",Function),Y("design:paramtypes",[Object,String]),Y("design:returntype",Promise)],Re.prototype,"confirm",null),M([l(),u("validation",{name:P.string().required(),email:P.string().email().required(),username:P.string().min(4).required(),password:P.string().min(5).required()}),X(0,r()),X(1,n()),X(2,v()),X(3,v("username")),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Object,String]),Y("design:returntype",Promise)],Re.prototype,"register",null),Re=M([p("/register"),m(_e)],Re);let we=class extends Pe{model(){return te}create(){return{name:P.string().required(),description:P.string().empty(""),state:P.boolean().parse().required()}}update(){return{name:P.string().empty(),description:P.string().empty(),state:P.boolean().parse().empty()}}};we=M([p("/routes"),m(Pe)],we);let je=class extends _e{setup(e){return W(this,void 0,void 0,(function*(){if(0==(yield ne.count())){const e={description:"",state:!0},t=yield ne.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),r=yield ee.create(Object.assign({name:"admin"},e));yield se.create({userId:t.id,groupId:r.id});const n=["read","write"],s=["users","groups","routes"];yield j(s,(t=>W(this,void 0,void 0,(function*(){yield j(n,(n=>W(this,void 0,void 0,(function*(){const s=t+"."+n,i=yield te.create(Object.assign({name:s},e));yield re.create({groupId:r.id,routeId:i.id})}))))}))));const i=yield te.create(Object.assign({name:"logs.read"},e));yield re.create({groupId:r.id,routeId:i.id})}return a.success(e,"OK")}))}};M([l(),X(0,r()),Y("design:type",Function),Y("design:paramtypes",[Object]),Y("design:returntype",Promise)],je.prototype,"setup",null),je=M([p("/setup"),m(_e)],je);let Ne=class extends fe{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar","description","state","created","updated"]}model(){return ne}userAdd(e,t){t.body.password=K(t.body.password).toString(),this.add(t,e)}userAll(e,t){this.all(t,e,{attributes:this.attributes})}userDel(e,t,r,n){if(!r||r.id.toString()==n)return a.error(e,"Internal Server Error");this.del(t,e)}userGet(e,t){this.get(t,e,{attributes:this.attributes})}userSet(e,t){t.body.password&&(t.body.password=K(t.body.password).toString()),this.set(t,e)}};M([d(),u("auth"),u("write"),u("validation",{name:P.string().required(),email:P.string().email().required(),username:P.string().min(4).required(),password:P.string().min(5).required(),description:P.string().required(),state:P.boolean().parse().required()}),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Ne.prototype,"userAdd",null),M([l(),u("auth"),u("read"),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Ne.prototype,"userAll",null),M([g("/:id"),u("auth"),u("write"),X(0,r()),X(1,n()),X(2,ve()),X(3,h("id")),Y("design:type",Function),Y("design:paramtypes",[Object,Object,ne,String]),Y("design:returntype",Object)],Ne.prototype,"userDel",null),M([l("/:id"),u("auth"),u("read"),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Ne.prototype,"userGet",null),M([y("/:id"),u("auth"),u("write"),u("validation",{name:P.string().empty(),email:P.string().email().empty(),username:P.string().min(4).empty(),password:P.string().min(5).empty(),description:P.string().empty(),state:P.boolean().parse().empty()}),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Ne.prototype,"userSet",null),Ne=M([p("/users"),m(fe)],Ne);let qe=class extends fe{model(){return se}userGroupsAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:ee,required:!0}]},(e=>e.map((e=>e.group))))}userGroupsSet(e,t,r){return W(this,void 0,void 0,(function*(){const n=yield ne.findByPk(t,{attributes:["id"]}).catch(this.error);if(n){if(yield se.destroy({where:{userId:n.id}}),r){let e=0;for(let t=0;t<r.length;t++)e=yield ee.count({where:{id:r[t]}}),e&&(yield se.create({userId:n.id,groupId:r[t]}))}return a.success(e,"OK")}return w(n)?a.notfound(e,"Record not found"):a.error(e,"Internal Server Error")}))}};M([l("/:id/groups"),u("auth"),u("read","users"),X(0,r()),X(1,n()),X(2,h("id")),Y("design:type",Function),Y("design:paramtypes",[Object,Object,String]),Y("design:returntype",void 0)],qe.prototype,"userGroupsAll",null),M([y("/:id/groups"),u("auth"),u("write","users"),u("validation",{groups:P.array(P.number().parse())}),X(0,r()),X(1,h("id")),X(2,v("groups")),Y("design:type",Function),Y("design:paramtypes",[Object,String,Array]),Y("design:returntype",Promise)],qe.prototype,"userGroupsSet",null),qe=M([p("/users"),m(fe)],qe);export{me as Application,Q as Auth,Ie as AuthController,ge as Config,ie as Configs,_e as ControllerBase,Pe as CrudController,Z as Database,J as Env,V as Forgot,Ae as ForgotController,ee as Group,Ee as GroupController,re as GroupRoute,be as GroupRouteController,de as Log,oe as Logs,Te as LogsController,fe as ModelController,ye as Permission,Re as RegisterController,he as ReqAuth,ve as ReqUser,te as Route,we as RouteController,je as SetupController,pe as Token,ne as User,Ne as UserController,se as UserGroup,qe as UserGroupController,ce as crt,le as key,$ as sequelize};
+import{Application as e,parameterFactory as t,Res as r,Req as n,Headers as i,Next as s,Argument as o,Responses as d,Post as a,Middleware as c,App as u,Get as l,Controller as p,Extends as m,Delete as g,Put as y,Params as h,Body as v}from"@andrewcaires/express";import{toBool as O,dateFormat as _,sleep as I,toArray as A,EventEmitter as f,isNumber as P,Validation as E,uuidv4 as b,uniqueID as T,allowedObject as S,isArray as R,isString as w,isNull as j,forEachSeries as N}from"@andrewcaires/utils.js";import q from"ws";import{Sequelize as F,DataTypes as D,Model as L,Op as B}from"sequelize";import{config as k}from"dotenv";import{existsSync as G,readFileSync as C}from"fs";import{sign as x,verify as K}from"jsonwebtoken";import{SHA256 as U}from"crypto-js";import H from"mime-types";import z from"multer";import{join as M}from"path";function X(e,t,r,n){var i,s=arguments.length,o=s<3?t:null===n?n=Object.getOwnPropertyDescriptor(t,r):n;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,r,n);else for(var d=e.length-1;d>=0;d--)(i=e[d])&&(o=(s<3?i(o):s>3?i(t,r,o):i(t,r))||o);return s>3&&o&&Object.defineProperty(t,r,o),o}function Y(e,t){return function(r,n){t(r,n,e)}}function W(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function J(e,t,r,n){return new(r||(r=Promise))((function(i,s){function o(e){try{a(n.next(e))}catch(e){s(e)}}function d(e){try{a(n.throw(e))}catch(e){s(e)}}function a(e){var t;e.done?i(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(o,d)}a((n=n.apply(e,t||[])).next())}))}k();class Z{}Z.API_CONSOLE_ERROR=O(process.env.API_CONSOLE_ERROR||"false"),Z.API_DB_DATABASE=process.env.API_DB_DATABASE||"",Z.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",Z.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",Z.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),Z.API_DB_TYPE=process.env.API_DB_TYPE||"",Z.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",Z.API_DB_LOG=O(process.env.API_DB_LOG||"false"),Z.API_TABLE_PREFIX=process.env.API_TABLE_PREFIX||"",Z.API_HTTP_CRT=process.env.API_HTTP_CRT||"",Z.API_HTTP_KEY=process.env.API_HTTP_KEY||"",Z.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),Z.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",Z.API_HTTP_CROSS=O(process.env.API_HTTP_CROSS||"false"),Z.API_HTTP_HYBRID=O(process.env.API_HTTP_HYBRID||"false"),Z.API_SLEEP_AUTH=parseInt(process.env.API_SLEEP_AUTH||"1000"),Z.API_SLEEP_FORGOT=parseInt(process.env.API_SLEEP_FORGOT||"5000"),Z.API_SLEEP_REGISTRY=parseInt(process.env.API_SLEEP_REGISTRY||"5000"),Z.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",Z.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",Z.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",Z.API_TOKEN_LIFETIME=parseInt(process.env.API_TOKEN_LIFETIME||"15"),Z.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),Z.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",Z.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),Z.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",Z.API_WEBSOCKET_START=O(process.env.API_WEBSOCKET_START||"false");class ${static connect(e){const t="connect_"+Z.API_DB_TYPE.toLowerCase();if(t in $)return $[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new F(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:Z.API_DB_LOG,define:{timestamps:!1}})}static connect_memory(){return new F("sqlite::memory:",{logging:Z.API_DB_LOG,define:{timestamps:!1}})}static connect_mysql(e){return new F(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:Z.API_DB_LOG,define:{timestamps:!1}})}static connect_postgres(e){return new F(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:Z.API_DB_LOG,define:{timestamps:!1}})}static connect_sqlite(e){return new F({dialect:"sqlite",storage:e.database,logging:Z.API_DB_LOG,define:{timestamps:!1}})}}const Q=$.connect({database:Z.API_DB_DATABASE,username:Z.API_DB_USERNAME,password:Z.API_DB_PASSWORD,hostname:Z.API_DB_HOST,hostport:Z.API_DB_PORT});class V extends L{}V.init({login:D.BIGINT,logout:D.BIGINT,secret:D.STRING,timestamp:D.BIGINT,useragent:D.STRING},{sequelize:Q,modelName:Z.API_TABLE_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ee extends L{}ee.init({token:D.STRING,timestamp:D.BIGINT,state:D.BOOLEAN},{sequelize:Q,modelName:Z.API_TABLE_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class te extends L{}te.init({name:D.STRING,description:D.TEXT,state:D.BOOLEAN},{sequelize:Q,modelName:Z.API_TABLE_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class re extends L{}re.init({},{sequelize:Q,modelName:Z.API_TABLE_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),re.removeAttribute("id");class ne extends L{}ne.init({name:D.STRING,description:D.TEXT,state:D.BOOLEAN},{sequelize:Q,modelName:Z.API_TABLE_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ie extends L{}ie.init({name:D.STRING,email:D.STRING,username:D.STRING,password:D.STRING,avatar:D.STRING,description:D.TEXT,state:D.BOOLEAN},{sequelize:Q,modelName:Z.API_TABLE_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated"});class se extends L{}se.init({},{sequelize:Q,modelName:Z.API_TABLE_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),se.removeAttribute("id");class oe extends L{}oe.init({key:D.STRING,value:D.STRING},{sequelize:Q,modelName:Z.API_TABLE_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),oe.removeAttribute("id");class de extends L{}de.init({type:D.STRING,source:D.STRING,message:D.TEXT},{sequelize:Q,modelName:Z.API_TABLE_PREFIX+"log",timestamps:!0,createdAt:"created",updatedAt:!1});class ae extends L{}var ce;ae.init({token:D.STRING,timestamp:D.BIGINT,state:D.BOOLEAN},{sequelize:Q,modelName:Z.API_TABLE_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"}),ie.hasMany(V),V.belongsTo(ie),ie.hasMany(ee),ee.belongsTo(ie),te.hasMany(re),re.belongsTo(te),ne.hasMany(re),re.belongsTo(ne),ie.hasMany(se),se.belongsTo(ie),te.hasMany(se),se.belongsTo(te),function(e){e.ERROR="",e.INFO="",e.NONE="",e.SUCCESS="",e.WARNING=""}(ce||(ce={}));class ue{static write(e,t,r){return J(this,void 0,void 0,(function*(){yield ue.writeRaw(ce.NONE,"",e,t,r)}))}static error(e,t,r){return J(this,void 0,void 0,(function*(){yield ue.writeRaw(ce.ERROR,"error",e,t,r)}))}static info(e,t,r){return J(this,void 0,void 0,(function*(){yield ue.writeRaw(ce.INFO,"info",e,t,r)}))}static success(e,t,r){return J(this,void 0,void 0,(function*(){yield ue.writeRaw(ce.ERROR,"success",e,t,r)}))}static warning(e,t,r){return J(this,void 0,void 0,(function*(){yield ue.writeRaw(ce.WARNING,"warning",e,t,r)}))}static writeConsole(e,t,r){const n=_(new Date,"%H:%M:%S");console.log(">",e,t+" ".repeat(10-t.length),"","|",n,"|",r)}static writeRaw(e,t,r,n,i){return J(this,void 0,void 0,(function*(){i&&ue.writeConsole(e,t,r),Q&&(yield de.create({type:t,source:n,message:r}).catch((()=>null)))}))}}const le=e=>G(e)?C(e):void 0,pe={http:le(Z.API_HTTP_CRT),token:le(Z.API_TOKEN_CRT)},me={http:le(Z.API_HTTP_KEY),token:le(Z.API_TOKEN_KEY)};class ge{static error(e){ue.error(e.message,"api.token",Z.API_CONSOLE_ERROR)}static sign(e){return me.token?{token:x(e,me.token,{algorithm:"RS256"})}:{error:"Invalid Secret"}}static user(e){return J(this,void 0,void 0,(function*(){const{error:t,decode:r}=ge.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&r){const r=yield ie.findOne({where:{id:e,state:!0}}).catch(ge.error);if(r){const e=yield V.findOne({where:{secret:t,userId:r.id}}).catch(ge.error);if(e){const t=Date.now();if(t>e.timestamp)return e.logout=t,yield e.save(),{error:"Expired token"};if(e.timestamp=t+6e4*Z.API_TOKEN_LIFETIME,!e.logout)return yield e.save(),{auth:e,user:r}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e){if(!pe.token)return{error:"Invalid Secret"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:K(e,pe.token)}}catch(e){return{error:"Invalid Token"}}}}class ye extends e{constructor(e){super(e,{cert:pe.http,cross:Z.API_HTTP_CROSS,hybrid:Z.API_HTTP_HYBRID,key:me.http,path:"/api",port:Z.API_HTTP_PORT,public:Z.API_HTTP_PUBLIC})}error(e,t){ue.info(e.message,t,Z.API_CONSOLE_ERROR)}log(e,t){ue.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return J(this,void 0,void 0,(function*(){yield Q.sync(),yield e.listen.call(this),Z.API_WEBSOCKET_START&&this.server&&(this._webSocket=new q.Server({server:this.server,verifyClient:(e,t)=>t(Z.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,t)=>J(this,void 0,void 0,(function*(){t.url||(t.url="");const r=t.url.length<=1?"":t.url.replace(/\//g,".");let n;e.on("message",(i=>J(this,void 0,void 0,(function*(){if(n)try{const s=JSON.parse(i);this.emit("ws.message"+r,{data:s,message:i,req:t,user:n,ws:e})}catch(s){this.emit("ws.message"+r,{message:i,req:t,user:n,ws:e})}else{const{user:s}=yield ge.user(i.toString());s&&(n=s,this.emit("ws.connection"+r,{req:t,user:n,ws:e}))}n||e.close()})))),e.on("close",(()=>{n&&this.emit("ws.close"+r,{user:n,ws:e})})),yield I(2e3),n||e.close()})))))}))}websocket(){return this._webSocket}}class he{static all(){return J(this,void 0,void 0,(function*(){const e=yield oe.findAll().catch(he.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return J(this,void 0,void 0,(function*(){return((yield oe.destroy({where:{key:e}}).catch(he.error))||0)>0}))}static error(e){ue.error(e.message,"api.config",Z.API_CONSOLE_ERROR)}static get(e){return J(this,void 0,void 0,(function*(){const t=yield oe.findOne({where:{key:e}}).catch(he.error);return t&&t.value||""}))}static set(e,t){return J(this,void 0,void 0,(function*(){const[r]=(yield oe.findOrCreate({where:{key:e}}).catch(he.error))||[];r&&(r.value=t,yield r.save().catch(he.error))}))}}class ve{static all(e,t){return J(this,void 0,void 0,(function*(){return yield ne.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:re,required:!0,include:[{model:te,required:!0,where:{state:!0},include:[{model:se,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{ue.error(e.message,"api.permission",Z.API_CONSOLE_ERROR)}))}))}static get(e){return J(this,void 0,void 0,(function*(){const t=yield ve.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return J(this,void 0,void 0,(function*(){const r=yield ve.all(e,{name:t});return!!r&&r.length>0}))}}const Oe=t((({req:e})=>e.auth)),_e=t((({req:e})=>A(e.files))),Ie=t((({req:e})=>e.user)),Ae=(e,t)=>{const r=b()+"."+t;return G(M(e,r))?Ae(e,t):r};class fe extends f{auth(e,t,r,n,i){return J(this,void 0,void 0,(function*(){const{auth:s,error:o,user:a}=yield ge.user(r);return o?d.error(e,o):s&&a?(n&&(s.useragent=n),yield s.save(),t.auth=s,t.user=a,i()):d.error(e,"Internal Server Error")}))}error(e){ue.error(e.message,"api.controller",Z.API_CONSOLE_ERROR)}name(){return"api"}permission(e,t,r,n){return J(this,void 0,void 0,(function*(){return t?(yield ve.is(t,n))?r():d.error(e,"Unauthorized access"):d.unauthorized(e,"Access denied")}))}read(e,t,r,n){return this.permission(e,t,r,(n||this.name())+".read")}upload(e,t,r,n){const i=(null==n?void 0:n.path)||Z.API_UPLOAD_TEMP,s=z.diskStorage({destination:(e,t,r)=>r(null,i),filename:(e,t,r)=>J(this,void 0,void 0,(function*(){return r(null,Ae(i,H.extension(t.mimetype)||"bin"))}))}),o=1e6*((null==n?void 0:n.size)||Z.API_UPLOAD_SIZE),a=z({storage:s,fileFilter(e,t,r){var i;return J(this,void 0,void 0,(function*(){const e=null===(i=null==n?void 0:n.types)||void 0===i?void 0:i.indexOf(t.mimetype);return P(e)&&e<0?r(new Error("File type not allowed")):r(null,!0)}))},limits:{fileSize:o}}),c=(null==n?void 0:n.count)||Z.API_UPLOAD_COUNT,u=(null==n?void 0:n.field)||Z.API_UPLOAD_FIELD;a.array(u,c)(t,e,(t=>t?d.error(e,t.message):r()))}validation(e,t,r,n){return J(this,void 0,void 0,(function*(){const{error:i,value:s}=yield E.object(n).parse().validateAsync(t.body);return i?d.validation(e,i):(t.body=s,r())}))}write(e,t,r,n){return this.permission(e,t,r,(n||this.name())+".write")}}X([Y(0,r()),Y(1,n()),Y(2,i(Z.API_TOKEN_HEADER)),Y(3,i("user-agent")),Y(4,s()),W("design:type",Function),W("design:paramtypes",[Object,Object,String,String,Function]),W("design:returntype",Promise)],fe.prototype,"auth",null),X([Y(0,r()),Y(1,Ie()),Y(2,s()),Y(3,o()),W("design:type",Function),W("design:paramtypes",[Object,ie,Function,String]),W("design:returntype",Promise)],fe.prototype,"permission",null),X([Y(0,r()),Y(1,Ie()),Y(2,s()),Y(3,o()),W("design:type",Function),W("design:paramtypes",[Object,ie,Function,String]),W("design:returntype",Promise)],fe.prototype,"read",null),X([Y(0,r()),Y(1,n()),Y(2,s()),Y(3,o()),W("design:type",Function),W("design:paramtypes",[Object,Object,Function,Object]),W("design:returntype",void 0)],fe.prototype,"upload",null),X([Y(0,r()),Y(1,n()),Y(2,s()),Y(3,o()),W("design:type",Function),W("design:paramtypes",[Object,Object,Function,Object]),W("design:returntype",Promise)],fe.prototype,"validation",null),X([Y(0,r()),Y(1,Ie()),Y(2,s()),Y(3,o()),W("design:type",Function),W("design:paramtypes",[Object,ie,Function,String]),W("design:returntype",Promise)],fe.prototype,"write",null);let Pe=class extends fe{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar"]}login(e,t,r,n){return J(this,void 0,void 0,(function*(){yield I(Z.API_SLEEP_AUTH);const{username:i,password:s}=t.body,o=yield ie.findOne({where:{username:i}}).catch(this.error);if(!o)return n.emit("auth.failure",{req:t}),d.notfound(e,"Username not found");if(!o.state)return n.emit("auth.failure",{req:t}),d.error(e,"Username is disabled");const a=U(s).toString();if(o.password!=a)return n.emit("auth.failure",{req:t}),d.error(e,"Invalid password");const c=o.id,u=T(),{error:l,token:p}=ge.sign({id:c,secret:u});if(l)return n.emit("auth.failure",{req:t}),d.error(e,l);if(p){const n=Date.now(),i=n+6e4*Z.API_TOKEN_LIFETIME,s=yield V.create({login:n,secret:u,timestamp:i,useragent:r,userId:c}).catch(this.error);if(s)return this.emit("auth.login",{auth:s,req:t,user:o}),d.data(e,{token:p})}return n.emit("auth.failure",{req:t}),d.error(e,"Internal Server Error")}))}logout(e,t,r,n,i){return J(this,void 0,void 0,(function*(){return r&&n&&!r.logout?(r.logout=Date.now(),r.timestamp=r.logout,yield r.save(),i.emit("auth.logout",{auth:r,req:t,user:n}),d.success(e,"Disconcerted")):d.unauthorized(e,"Access denied")}))}user(e,t){return J(this,void 0,void 0,(function*(){const r=t.user;if(!r)return d.unauthorized(e,"Access denied");const n=yield ve.all(r);if(n){const t=n.map((e=>e.name));return d.data(e,Object.assign(Object.assign({},S(this.attributes,r.toJSON())),{permissions:t}))}return d.error(e,"Internal Server Error")}))}};X([a("/login"),c("validation",{username:E.string().min(4).required(),password:E.string().min(5).required()}),Y(0,r()),Y(1,n()),Y(2,i("user-agent")),Y(3,u()),W("design:type",Function),W("design:paramtypes",[Object,Object,String,ye]),W("design:returntype",Promise)],Pe.prototype,"login",null),X([l("/logout"),c("auth"),Y(0,r()),Y(1,n()),Y(2,Oe()),Y(3,Ie()),Y(4,u()),W("design:type",Function),W("design:paramtypes",[Object,Object,V,ie,ye]),W("design:returntype",Promise)],Pe.prototype,"logout",null),X([l(),c("auth"),Y(0,r()),Y(1,n()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",Promise)],Pe.prototype,"user",null),Pe=X([p("/auth"),m(fe)],Pe);let Ee=class extends fe{check(e,t){return J(this,void 0,void 0,(function*(){const{token:r}=t.body,n=yield this.findOne(r);return n&&n.user?(n.token=T(),yield n.save(),d.data(e,{token:n.token})):d.notfound(e,"User not found")}))}forgot(e,t){return J(this,void 0,void 0,(function*(){const{username:r}=t.body;yield I(Z.API_SLEEP_FORGOT);const n=yield ie.findOne({where:{username:r}}).catch(this.error);if(!n)return d.notfound(e,"User not found");const i=T(),s=Date.now()+6e4*Z.API_TOKEN_LIFETIME,o=yield ee.create({token:i,timestamp:s,state:!0,userId:n.id});return this.emit("forgot",{forgot:o,req:t,user:n}),d.success(e,"OK")}))}reset(e,t){return J(this,void 0,void 0,(function*(){const{token:r,password:n}=t.body,i=yield this.findOne(r);return i?(i.state=!1,yield i.save().catch(this.error),i.user.password=U(n).toString(),yield i.user.save().catch(this.error),this.emit("forgot.reset",{req:t,user:i.user}),d.success(e,"OK")):d.notfound(e,"User not found")}))}findOne(e){return J(this,void 0,void 0,(function*(){return yield ee.findOne({where:{token:e,state:!0},include:[{model:ie,required:!0}]}).catch(this.error)}))}};X([l("/check"),c("validation",{token:E.string().required()}),Y(0,r()),Y(1,n()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",Promise)],Ee.prototype,"check",null),X([l(),c("validation",{username:E.string().min(4).required()}),Y(0,r()),Y(1,n()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",Promise)],Ee.prototype,"forgot",null),X([l("/reset"),c("validation",{token:E.string().required(),password:E.string().min(5).required()}),Y(0,r()),Y(1,n()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",Promise)],Ee.prototype,"reset",null),Ee=X([p("/forgot"),m(fe)],Ee);let be=class extends fe{add(e,t,r,n){return J(this,void 0,void 0,(function*(){const i=yield this.model().create(Object.assign(Object.assign({},e.body),n||{}),r||{}).catch(this.error);if(i){const e=i.id;return d.data(t,{id:e}),i}d.error(t,"Internal Server Error")}))}all(e,t,r,n){var i,s,o,a,c;return J(this,void 0,void 0,(function*(){const u=this.model(),l=Object.assign({},r||{});l.where=Object.assign({},l.where||{});const p=null===(i=e.query.limit)||void 0===i?void 0:i.toString();p&&(l.limit=parseInt(p));const m=null===(s=e.query.offset)||void 0===s?void 0:s.toString();m&&(l.offset=parseInt(m));const g=Object.keys(u.getAttributes()),y=[],h=null===(o=e.query.asc)||void 0===o?void 0:o.toString();h&&h.length&&h.split(",").forEach((e=>{g.indexOf(e)>=0&&y.push([e,"ASC"])}));const v=null===(a=e.query.desc)||void 0===a?void 0:a.toString();v&&v.length&&v.split(",").forEach((e=>{g.indexOf(e)>=0&&y.push([e,"DESC"])})),y.length&&(l.order=y);const O=[],_=R(l.attributes)?l.attributes:g,I=null===(c=e.query.search)||void 0===c?void 0:c.toString();_.forEach((t=>{var r;if(w(t)&&(I&&I.length&&O.push({[t]:{[B.like]:`%${I}%`}}),"search_"+t in e.query)){const n=null===(r=e.query["search_"+t])||void 0===r?void 0:r.toString();n&&n.length&&O.push({[t]:{[B.like]:`%${n}%`}})}})),O.length&&(l.where=Object.assign(Object.assign({},l.where),{[B.or]:[...O]}));const A=yield u.count(Object.assign(Object.assign({},l),{col:g[0]})).catch(this.error),f=yield u.findAll(l).catch(this.error);if(f)return d.data(t,{count:A,records:n?n(f):f}),f;d.error(t,"Internal Server Error")}))}del(e,t,r){return J(this,void 0,void 0,(function*(){const{id:n}=e.params;if(!n)return d.error(t,"Internal Server Error"),0;const i=yield this.model().destroy(Object.assign(Object.assign({},r||{}),{where:{id:n}})).catch(this.error);return i?(d.success(t,"OK"),i):(d.notfound(t,"Record not found"),0)}))}error(e){e.sql?ue.error(e.message+"\n"+e.sql,"api.controller.sql",Z.API_CONSOLE_ERROR):super.error(e)}get(e,t,r,n){return J(this,void 0,void 0,(function*(){const i=Object.assign({},r||{});i.where=i.where?Object.assign({},i.where):{};const{id:s}=e.params,o=yield this.model().findByPk(s,i).catch(this.error);if(o)return d.data(t,n?n(o):o.toJSON()),o;null!==o?d.error(t,"Internal Server Error"):d.notfound(t,"Record not found")}))}name(){return this.model().tableName}set(e,t,r,n){return J(this,void 0,void 0,(function*(){const{id:i}=e.params,[s]=(yield this.model().update(Object.assign(Object.assign({},e.body),n||{}),Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{id:i})})).catch(this.error))||[];return s?(d.success(t,"OK"),!0):(d.success(t,"Record not changed"),!1)}))}};be=X([m(fe)],be);let Te=class extends be{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(t,e,r,this.create())}validationSet(e,t,r){this.validation(t,e,r,this.update())}};X([a(),c("auth"),c("write"),c("validationAdd"),Y(0,n()),Y(1,r()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],Te.prototype,"recordAdd",null),X([l(),c("auth"),c("read"),Y(0,n()),Y(1,r()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],Te.prototype,"recordAll",null),X([g("/:id"),c("auth"),c("write"),Y(0,n()),Y(1,r()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],Te.prototype,"recordDel",null),X([l("/:id"),c("auth"),c("read"),Y(0,n()),Y(1,r()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],Te.prototype,"recordGet",null),X([y("/:id"),c("auth"),c("write"),c("validationSet"),Y(0,n()),Y(1,r()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],Te.prototype,"recordSet",null),X([Y(0,n()),Y(1,r()),Y(2,s()),W("design:type",Function),W("design:paramtypes",[Object,Object,Function]),W("design:returntype",void 0)],Te.prototype,"validationAdd",null),X([Y(0,n()),Y(1,r()),Y(2,s()),W("design:type",Function),W("design:paramtypes",[Object,Object,Function]),W("design:returntype",void 0)],Te.prototype,"validationSet",null),Te=X([m(be)],Te);let Se=class extends Te{model(){return te}create(){return{name:E.string().required(),description:E.string().empty(""),state:E.boolean().parse().required()}}update(){return{name:E.string().empty(),description:E.string().empty(),state:E.boolean().parse().empty()}}};Se=X([p("/groups"),m(Te)],Se);let Re=class extends be{model(){return re}recordAll(e,t,r){return J(this,void 0,void 0,(function*(){this.all(t,e,{where:{groupId:r},include:[{model:ne,required:!0}]},(e=>e.map((e=>e.route))))}))}recordSet(e,t,r){return J(this,void 0,void 0,(function*(){const n=yield te.findByPk(t,{attributes:["id"]}).catch(this.error);if(n){const t=n.id;if(yield re.destroy({where:{groupId:t}}),r){let e=0;for(let n=0;n<r.length;n++)e=yield ne.count({where:{id:r[n]}}),e&&(yield re.create({groupId:t,routeId:r[n]}))}return d.success(e,"OK")}return j(n)?d.notfound(e,"Record not found"):d.error(e,"Internal Server Error")}))}};X([l("/:id/routes"),c("auth"),c("read","groups"),Y(0,r()),Y(1,n()),Y(2,h("id")),W("design:type",Function),W("design:paramtypes",[Object,Object,String]),W("design:returntype",Promise)],Re.prototype,"recordAll",null),X([y("/:id/routes"),c("auth"),c("write","groups"),c("validation",{routes:E.array(E.number().parse())}),Y(0,r()),Y(1,h("id")),Y(2,v("routes")),W("design:type",Function),W("design:paramtypes",[Object,String,Array]),W("design:returntype",Promise)],Re.prototype,"recordSet",null),Re=X([p("/groups"),m(be)],Re);let we=class extends be{model(){return de}recordAll(e,t){const{source:r,type:n}=t.query,i=r&&n?{source:r,type:n}:r?{source:r}:n?{type:n}:{};this.all(t,e,{where:i,order:[["created","DESC"]]})}};X([l(),c("auth"),c("read"),Y(0,r()),Y(1,n()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],we.prototype,"recordAll",null),we=X([p("/logs"),m(be)],we);let je=class extends fe{confirm(e,t){return J(this,void 0,void 0,(function*(){const r=yield ae.findOne({where:{token:t,state:!0},include:[{model:ie,required:!0}]}).catch(this.error);return r?(r.user.state=!0,yield r.user.save().catch(this.error),this.emit("user.confirm",{user:r.user}),d.success(e,"OK")):d.notfound(e,"User not found")}))}register(e,t,r,n){return J(this,void 0,void 0,(function*(){yield I(Z.API_SLEEP_REGISTRY);const t=yield ie.findOne({where:{username:n}}).catch(this.error);if(t)return d.error(e,"Invalid Username");if(!j(t))return d.error(e,"Internal Server Error");const i=yield ie.create(Object.assign(Object.assign({},r),{state:!1}));return this.emit("user.register",{user:i}),d.success(e,"OK")}))}};X([l("/confirm"),c("validation",{token:E.string().required()}),Y(0,r()),Y(1,v("token")),W("design:type",Function),W("design:paramtypes",[Object,String]),W("design:returntype",Promise)],je.prototype,"confirm",null),X([l(),c("validation",{name:E.string().required(),email:E.string().email().required(),username:E.string().min(4).required(),password:E.string().min(5).required()}),Y(0,r()),Y(1,n()),Y(2,v()),Y(3,v("username")),W("design:type",Function),W("design:paramtypes",[Object,Object,Object,String]),W("design:returntype",Promise)],je.prototype,"register",null),je=X([p("/register"),m(fe)],je);let Ne=class extends Te{model(){return ne}create(){return{name:E.string().required(),description:E.string().empty(""),state:E.boolean().parse().required()}}update(){return{name:E.string().empty(),description:E.string().empty(),state:E.boolean().parse().empty()}}};Ne=X([p("/routes"),m(Te)],Ne);let qe=class extends fe{setup(e){return J(this,void 0,void 0,(function*(){if(0==(yield ie.count())){const e={description:"",state:!0},t=yield ie.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),r=yield te.create(Object.assign({name:"admin"},e));yield se.create({userId:t.id,groupId:r.id});const n=["read","write"],i=["users","groups","routes"];yield N(i,(t=>J(this,void 0,void 0,(function*(){yield N(n,(n=>J(this,void 0,void 0,(function*(){const i=t+"."+n,s=yield ne.create(Object.assign({name:i},e));yield re.create({groupId:r.id,routeId:s.id})}))))}))));const s=yield ne.create(Object.assign({name:"logs.read"},e));yield re.create({groupId:r.id,routeId:s.id})}return d.success(e,"OK")}))}};X([l(),Y(0,r()),W("design:type",Function),W("design:paramtypes",[Object]),W("design:returntype",Promise)],qe.prototype,"setup",null),qe=X([p("/setup"),m(fe)],qe);let Fe=class extends be{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar","description","state","created","updated"]}model(){return ie}recordAdd(e,t,r){this.add(r,e,{},{password:U(t).toString()})}recordAll(e,t){this.all(t,e,{attributes:this.attributes})}recordDel(e,t,r,n){if(!r||r.id.toString()==n)return d.error(e,"Internal Server Error");this.del(t,e)}recordGet(e,t){this.get(t,e,{attributes:this.attributes})}recordSet(e,t,r){this.set(r,e,{where:{}},t?{password:U(t).toString()}:{})}};X([a(),c("auth"),c("write"),c("validation",{name:E.string().required(),email:E.string().email().required(),username:E.string().min(4).required(),password:E.string().min(5).required(),description:E.string().required(),state:E.boolean().parse().required()}),Y(0,r()),Y(1,v("password")),Y(2,n()),W("design:type",Function),W("design:paramtypes",[Object,String,Object]),W("design:returntype",void 0)],Fe.prototype,"recordAdd",null),X([l(),c("auth"),c("read"),Y(0,r()),Y(1,n()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],Fe.prototype,"recordAll",null),X([g("/:id"),c("auth"),c("write"),Y(0,r()),Y(1,n()),Y(2,Ie()),Y(3,h("id")),W("design:type",Function),W("design:paramtypes",[Object,Object,ie,String]),W("design:returntype",Object)],Fe.prototype,"recordDel",null),X([l("/:id"),c("auth"),c("read"),Y(0,r()),Y(1,n()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],Fe.prototype,"recordGet",null),X([y("/:id"),c("auth"),c("write"),c("validation",{name:E.string().empty(),email:E.string().email().empty(),username:E.string().min(4).empty(),password:E.string().min(5).empty().filter(""),description:E.string().empty(),state:E.boolean().parse().empty()}),Y(0,r()),Y(1,v("password")),Y(2,n()),W("design:type",Function),W("design:paramtypes",[Object,String,Object]),W("design:returntype",void 0)],Fe.prototype,"recordSet",null),Fe=X([p("/users"),m(be)],Fe);let De=class extends be{model(){return se}recordAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:te,required:!0}]},(e=>e.map((e=>e.group))))}recordSet(e,t,r){return J(this,void 0,void 0,(function*(){const n=yield ie.findByPk(t,{attributes:["id"]}).catch(this.error);if(n){if(yield se.destroy({where:{userId:n.id}}),r){let e=0;for(let t=0;t<r.length;t++)e=yield te.count({where:{id:r[t]}}),e&&(yield se.create({userId:n.id,groupId:r[t]}))}return d.success(e,"OK")}return j(n)?d.notfound(e,"Record not found"):d.error(e,"Internal Server Error")}))}};X([l("/:id/groups"),c("auth"),c("read","users"),Y(0,r()),Y(1,n()),Y(2,h("id")),W("design:type",Function),W("design:paramtypes",[Object,Object,String]),W("design:returntype",void 0)],De.prototype,"recordAll",null),X([y("/:id/groups"),c("auth"),c("write","users"),c("validation",{groups:E.array(E.number().parse())}),Y(0,r()),Y(1,h("id")),Y(2,v("groups")),W("design:type",Function),W("design:paramtypes",[Object,String,Array]),W("design:returntype",Promise)],De.prototype,"recordSet",null),De=X([p("/users"),m(be)],De);export{ye as Application,V as Auth,Pe as AuthController,he as Config,oe as Configs,fe as ControllerBase,Te as CrudController,$ as Database,Z as Env,ee as Forgot,Ee as ForgotController,te as Group,re as GroupRoute,Se as GroupsController,Re as GroupsRoutesController,de as Log,ue as Logs,ce as LogsColor,we as LogsController,be as ModelController,ve as Permission,je as RegisterController,ae as Registry,Oe as ReqAuth,_e as ReqFiles,Ie as ReqUser,ne as Route,Ne as RoutesController,qe as SetupController,ge as Token,ie as User,se as UserGroup,Fe as UsersController,De as UsersGroupsController,pe as crt,me as key,Q as sequelize};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@andrewcaires/api",
-  "version": "3.0.7",
+  "version": "3.0.9",
   "description": "Simple api for small applications using express, jsonwebtoken, sequelize and websocket",
   "main": "./dist/index.cjs.js",
   "types": "./dist/index.d.ts",
@@ -46,7 +46,7 @@
   "homepage": "https://github.com/andrewcaires/npm/tree/main/api#readme",
   "dependencies": {
     "@andrewcaires/express": "^1.0.5",
-    "@andrewcaires/utils.js": "^0.2.13",
+    "@andrewcaires/utils.js": "^0.2.15",
     "cors": "^2.8.5",
     "crypto-js": "^4.1.1",
     "dotenv": "^16.0.3",
@@ -56,13 +56,13 @@
     "mime-types": "^2.1.35",
     "multer": "^1.4.5-lts.1",
     "mysql2": "^3.2.0",
-    "sequelize": "^6.30.0",
+    "sequelize": "^6.31.0",
     "ws": "^8.13.0"
   },
   "devDependencies": {
     "@rollup/plugin-commonjs": "^24.0.1",
-    "@rollup/plugin-terser": "^0.4.0",
-    "@rollup/plugin-typescript": "^11.0.0",
+    "@rollup/plugin-terser": "^0.4.1",
+    "@rollup/plugin-typescript": "^11.1.0",
     "@types/cors": "^2.8.13",
     "@types/crypto-js": "^4.1.1",
     "@types/express": "^4.17.17",
@@ -71,9 +71,9 @@
     "@types/multer": "^1.4.7",
     "@types/node": "^18.15.11",
     "@types/ws": "^8.5.4",
-    "@typescript-eslint/eslint-plugin": "^5.57.0",
-    "@typescript-eslint/parser": "^5.57.0",
-    "eslint": "^8.37.0",
+    "@typescript-eslint/eslint-plugin": "^5.57.1",
+    "@typescript-eslint/parser": "^5.57.1",
+    "eslint": "^8.38.0",
     "rollup": "^3.20.2",
     "rollup-plugin-dts": "^5.3.0",
     "ts-node": "^10.9.1",