@fastify-core/base 1.0.0

package/README.md

@@ -0,0 +1,229 @@
+# Fastify Core
+
+Fastify Core là một library backend dùng cho ứng dụng Fastify, tập trung vào các thành phần thường gặp trong hệ thống API: model layer, request handling, file upload, JWT, validation, route và utility helpers.
+
+Dự án này được thiết kế để dùng như một package npm cho các ứng dụng Node.js / Fastify, đặc biệt là khi bạn cần một nền tảng backend nhanh, gọn và có sẵn các helper phổ biến.
+
+## Tính năng
+
+- BaseModel cho truy vấn MySQL CRUD, where builder, pagination, query raw
+- FastRequest để đọc request, xử lý form-data, export file upload
+- FileUpload để upload, resize/check type, move file giữa thư mục
+- JWTApp để tạo và verify token
+- Validation để validate dữ liệu theo rule
+- Route để quản lý danh sách route theo module
+- Common utilities cho password, slug, date, random, keyword, v.v.
+- CSRF protection helper cho request có thay đổi state
+
+## Yêu cầu
+
+- Node.js >= 24
+- Fastify >= 5
+- MySQL / mysql2
+- TypeScript (khuyến nghị)
+
+## Cài đặt
+
+```bash
+npm install @fastify-core/base
+```
+
+## Import
+
+```ts
+import {
+  BaseModel,
+  FastRequest,
+  FileUpload,
+  JWTApp,
+  Route,
+  Validation,
+  makePassword,
+  checkPassword,
+  slugify,
+  ensureCsrfProtection,
+} from '@fastify-core/base';
+```
+
+## Ví dụ sử dụng
+
+### 1. Tạo model
+
+```ts
+import { BaseModel } from '@fastify-core/base';
+import type { Pool } from 'mysql2/promise';
+
+export class UserModel extends BaseModel<any> {
+  table = 'users';
+
+  constructor(pool: Pool) {
+    super(pool);
+  }
+}
+```
+
+### 2. Validate dữ liệu
+
+```ts
+import { Validation } from '@fastify-core/base';
+
+const payload = {
+  email: 'admin@example.com',
+  password: '123456',
+};
+
+const rules = {
+  email: 'required|minLen(5)',
+  password: 'required|minLen(6)',
+};
+
+try {
+  await new Validation().runValidate(payload, rules);
+  console.log('Valid');
+} catch (error: any) {
+  console.error(error.message);
+}
+```
+
+### 3. Xử lý request
+
+```ts
+import { FastRequest } from '@fastify-core/base';
+
+fastify.post('/user', async (request) => {
+  const req = new FastRequest(request as any);
+  await req.start();
+
+  const name = req.getPost('name', '', 'stripTags');
+  const age = req.getPost('age', 0, 'int');
+
+  await req.end();
+
+  return { name, age };
+});
+```
+
+### 4. Upload file
+
+```ts
+import { FileUpload } from '@fastify-core/base';
+
+const files = { avatar: [/* file object */] } as any;
+const uploader = new FileUpload(files, 'static');
+
+const uploaded = await uploader.uploadFile('avatar', 'users');
+console.log(uploaded);
+```
+
+### 5. JWT
+
+```ts
+import { JWTApp } from '@fastify-core/base';
+
+const token = JWTApp.createToken({ id: 1, fullname: 'Admin' }, request);
+const payload = JWTApp.verifyToken(request);
+```
+
+### 6. CSRF
+
+```ts
+import { ensureCsrfProtection } from '@fastify-core/base';
+
+const result = ensureCsrfProtection(request, session);
+if (!result.allowed) {
+  throw new Error(result.reason || 'csrf_invalid');
+}
+```
+
+## API chính
+
+### BaseModel
+
+BaseModel hỗ trợ các method cơ bản như:
+
+- `findOne(filter)`
+- `find(filter)`
+- `save(item, conn?)`
+- `update(data, filter, conn?)`
+- `query(sql, params?, conn?)`
+- `buildWhere(filter, als?)`
+- `getConnection()`
+
+### FastRequest
+
+- `start()`
+- `end()`
+- `isPost()`
+- `isGet()`
+- `getPost(name, defaultValue, type)`
+- `getParam(name, defaultValue, type)`
+- `get(name, defaultValue, type)`
+- `getHeader(key)`
+
+### FileUpload
+
+- `uploadFile(fieldName, folders)`
+- `uploadFiles(fieldName, folders)`
+- `checkFile(fieldName, type)`
+- `copyFiles(files)`
+- `removeFile(fileName, uploadType)`
+- `removeFiles(paths, uploadType)`
+
+### Validation
+
+Validation hỗ trợ rule như:
+
+- `required`
+- `requiredId`
+- `minLen(6)`
+- `maxLen(255)`
+- `equalLen(10)`
+- `rangeNum(1, 50)`
+- `min(10)`
+- `max(100)`
+- `integer`
+
+## Common helpers
+
+Một số utility có sẵn:
+
+- `makePassword(value)`
+- `checkPassword(value, hash)`
+- `randomText(length)`
+- `removeVietnameseTones(str)`
+- `slugify(text)`
+- `generateKeywords(text)`
+- `parseDate(date)`
+- `formatDate(date, format)`
+- `toMySQLDateNowVN()`
+- `sumArrCol(items, col)`
+
+## Route
+
+Route giúp quản lý route tập trung và sinh CRUD nhanh:
+
+```ts
+const route = new Route();
+route.add('/admin/user', [
+  { link: '/list', module: 'user', controller: UserController, action: 'index' },
+  { link: '/detail/:id', module: 'user', controller: UserController, action: 'detail' },
+]);
+
+route.addGS('/admin/product', ProductController, 'product');
+```
+
+## Environment variables
+
+Một số tính năng JWT hoặc session cần biến môi trường:
+
+```bash
+JWT_SECRET_KEY=your_secret_key
+JWT_KEY=your_verify_token
+JWT_AUD=your_audience
+JWT_ISS=your_issuer
+JWT_TIMEOUT=3600
+```
+
+## Lưu ý về publish package
+
+Package hiện đang cấu hình export theo kiểu ESM, nên khi dùng trong môi trường Node/TypeScript cần đảm bảo project của bạn hỗ trợ ESM nếu import theo kiểu module.

package/dist/index.d.mts

@@ -0,0 +1,952 @@
+import * as Decimal from "decimal.js";
+import { Pool, PoolConnection } from "mysql2/promise";
+import { FastifyRequest } from "fastify";
+import { SessionStore } from "@fastify/session";
+//#region src/BaseModel.d.ts
+interface IBaseModel<T = any> {
+  table: string;
+  isDeleted: boolean;
+  errors: string[];
+  fieldName(key: string): string;
+  save(item: Partial<T>, conn?: PoolConnection): Promise<T | false>;
+  findOne(filter: Record<string, any>): Promise<T | null>;
+  find(filter: Record<string, any>): Promise<T[]>;
+  query(sql: string, params?: any[], conn?: PoolConnection): any;
+  update(data: Record<string, any>, filter: Record<string, any>, conn?: PoolConnection): Promise<number>;
+}
+interface PaginationResult<T> {
+  page: number;
+  length: number;
+  pageTotal: number;
+  recordTotal: number;
+  items: T[];
+}
+interface JoinType {
+  table: string;
+  on: string;
+  type: string;
+  fields: string[];
+}
+interface ModifiedType {
+  [field: string]: {
+    smodel: IBaseModel<any>;
+    tkey: string;
+    skey: string;
+    fmap: string;
+  };
+}
+/**
+ * Abstract base model class.
+ * Provides common database operations such as
+ * CRUD, query building, pagination and validation.
+ *
+ * @template T Entity type, must contain `id`
+ */
+declare abstract class BaseModel<T extends Record<string, any> & {
+  id: number;
+}> {
+  abstract table: string;
+  protected pool: Pool;
+  isDeleted: boolean;
+  errors: string[];
+  vdObject: any;
+  modifieds: ModifiedType | undefined;
+  /**
+   * Create model instance
+   * @param pool MySQL connection pool
+   */
+  constructor(pool: Pool);
+  fieldName(key: string): string;
+  getErrors(): string[];
+  getConnection(): Promise<PoolConnection>;
+  /**
+   * Validate data using Validation rules
+   *
+   * @param item Data to validate
+   * @param vdObject Validation rules
+   */
+  validate(item: Partial<T>, vdObject?: Record<string, any>): Promise<void>;
+  /**
+   * Execute SQL query using pool or provided connection
+   */
+  query(sql: string, params?: any[], conn?: PoolConnection): Promise<[import("mysql2").QueryResult, import("mysql2").FieldPacket[]]>;
+  /**
+   * Synchronize mapped fields from related models
+   *
+   * Used to auto-fill display fields from foreign keys
+   *
+   * @param data Target data
+   */
+  modifiedSync<T extends Record<string, any>>(data: any): Promise<T>;
+  /**
+   * Build SQL WHERE clause from filter object
+   *
+   * Supports advanced operators such as:
+   * `$in`, `$nin`, `$ne`, `$gt`, `$gte`, `$lt`, `$lte`, `$between`, `$like`
+   *
+   * @param filter Query filter object
+   * @param als Optional table alias
+   */
+  buildWhere(filter: Record<string, any>, als?: string): {
+    sql: string;
+    params: any[];
+  };
+  /**
+   * Count records matching filter
+   *
+   * @param filter Query conditions
+   */
+  count(filter?: Record<string, any>): Promise<number>;
+  /**
+   * Insert a new record
+   *
+   * @param data Insert data
+   * @param conn Optional DB connection
+   */
+  insert(data: Record<string, any>, conn?: PoolConnection): Promise<number>;
+  /**
+   * Update records by condition
+   */
+  update(data: Record<string, any>, filter: Record<string, any>, conn?: PoolConnection): Promise<number>;
+  /**
+   * Advanced update with dynamic where conditions
+   *
+   * @param data Update values
+   * @param filter Query conditions
+   * @param conn Optional DB connection
+   */
+  updateAdv(data?: Record<string, any>, filter?: Record<string, any>, conn?: PoolConnection): Promise<any>;
+  /**
+   * Insert or update record by primary key
+   *
+   * - If `item.id` exists → update
+   * - Otherwise → insert
+   *
+   * @param item Entity data
+   * @param conn Optional DB connection
+   */
+  save(item: Partial<T>, conn?: PoolConnection): Promise<T | false>;
+  /**
+   * Validate and save record
+   *
+   * @throws Error when validation or save fails
+   */
+  vdSave(item: any, vdObject?: any | false, conn?: PoolConnection): Promise<T | null>;
+  /**
+   * Batch update multiple records using CASE WHEN
+   *
+   * @param rows Data rows
+   * @param key Primary key field
+   */
+  updateMany(rows: any[], key: string, conn?: PoolConnection): Promise<void>;
+  /**
+   * Bulk insert or update (UPSERT) records
+   *
+   * @param rows Data rows
+   * @param key Primary key field
+   */
+  updateAndCreateMany(rows: any[], key: string, conn?: PoolConnection): Promise<void>;
+  /**
+   * Find records with advanced options
+   *
+   * @param filter Query conditions
+   * @param order Sort options
+   * @param join Join configuration
+   * @param select Custom select fields
+   * @param limit Limit result count
+   */
+  find(filter?: Record<string, any>, order?: Record<string, string> | false, join?: JoinType | JoinType[] | false, select?: string | string[] | false, limit?: number): Promise<T[]>;
+  findOne(filter?: Record<string, any>, order?: Record<string, string> | false, join?: JoinType | JoinType[] | false, select?: string | string[] | false): Promise<T | null>;
+  findById(id: number, filter?: Record<string, any>): Promise<T | null>;
+  deleteOne(filter: Record<string, any>, conn?: PoolConnection): Promise<boolean>;
+  deleteById(id: number, conn?: PoolConnection): Promise<boolean>;
+  deleteMany(filter: Record<string, any>, limit?: number, conn?: PoolConnection): Promise<boolean>;
+  isField(field: string, table?: string): Promise<boolean>;
+  isFields(fields?: string[]): Promise<string[]>;
+  /**
+   * Get mapped display value from a related model.
+   *
+   * This method is commonly used to convert a foreign key value
+   * into a human-readable field (e.g. `name`, `title`) from another table.
+   *
+   * It will only query the related model when:
+   * - `fieldVal` is provided
+   * - `fieldVal` is different from the previous value (`itemOld`)
+   *
+   * @param field       Target field name in current model
+   * @param fieldVal    New value of the field (usually a foreign key ID)
+   * @param mdClass     Related model class instance used to fetch data
+   * @param itemOld     Previous record data (used to detect value changes)
+   * @param fieldMap    Field name in related model to map from (default: `"name"`)
+   *
+   * @returns Mapped display value from related model,
+   *          or empty string if not found or unchanged
+   *
+   * @example
+   * ```ts
+   * // Convert categoryId → categoryName
+   * const categoryName = await productModel.getMapName(
+   *   "categoryId",
+   *   product.categoryId,
+   *   categoryModel,
+   *   oldProduct,
+   *   "name"
+   * );
+   * ```
+   */
+  getMapName(field: string, fieldVal: any, mdClass: any, itemOld?: any, fieldMap?: string): Promise<any>;
+  /**
+   * Find records with pagination support
+   *
+   * @param filter Query conditions
+   * @param order Sort options
+   * @param join Join configuration
+   * @param select Custom select fields
+   * @param page Page number (starts from 1)
+   * @param limit Items per page
+   */
+  findWithPagination(filter?: Record<string, any>, order?: Record<string, string> | false, join?: JoinType | JoinType[] | false, select?: string | string[] | false, page?: number, limit?: number): Promise<PaginationResult<T>>;
+}
+//#endregion
+//#region src/Common.d.ts
+/**
+ * 🔐 Mã hoá mật khẩu bằng argon2
+ * @param value Chuỗi mật khẩu gốc
+ * @returns Chuỗi mật khẩu đã được hash
+ */
+declare function makePassword(value: any): Promise<string>;
+/**
+ * 🔐 Kiểm tra mật khẩu với hash
+ * @param value Mật khẩu người dùng nhập
+ * @param hashedValue Mật khẩu đã hash lưu trong DB
+ * @returns true nếu khớp, false nếu không
+ */
+declare function checkPassword(value: any, hashedValue: any): Promise<boolean>;
+/**
+ * 🔢 Tạo chuỗi random
+ * @param length Độ dài chuỗi
+ * @param az Có bao gồm chữ cái hay không
+ * @returns Chuỗi random
+ */
+declare function randomText(length: number, az?: boolean): string;
+/**
+ * 🅰️ Loại bỏ dấu tiếng Việt, chuyển về chữ thường
+ * @param str Chuỗi đầu vào
+ * @returns Chuỗi không dấu, lowercase
+ */
+declare function removeVietnameseTones(str: string): string;
+/**
+ * 🔗 Tạo slug thân thiện URL
+ * @param text Chuỗi đầu vào
+ * @returns slug dạng kebab-case
+ */
+declare function slugify(text: string): string;
+/**
+ * 🌐 Gọi API bằng fetch
+ * @param url Endpoint API
+ * @param data Payload gửi đi
+ * @param type Method HTTP (POST | GET | PUT | DELETE)
+ * @param ctype Content-Type
+ * @param headers Header bổ sung
+ * @returns JSON response
+ */
+declare function callFetchApi(url: string, data?: any, type?: string, ctype?: string, headers?: Record<string, any>): Promise<any>;
+/**
+ * 🧠 Tạo chuỗi keyword phục vụ search
+ * @param text Chuỗi đầu vào
+ * @returns Chuỗi keyword, phân tách bằng dấu phẩy
+ */
+declare function generateKeywords(text?: string): string;
+/**
+ * 📅 Parse ngày an toàn
+ * @param date Chuỗi hoặc Date
+ * @returns Date object hợp lệ
+ * @throws Error nếu ngày không hợp lệ
+ */
+declare function parseDate(date: string | Date): Date;
+/**
+ * 📅 Format ngày theo pattern
+ * @param date Date hoặc string
+ * @param format Pattern (YYYY-MM-DD HH:mm:ss)
+ * @returns Chuỗi ngày đã format
+ */
+declare function formatDate(date: Date, format?: string): string;
+/**
+ * 📆 Lấy khoảng thời gian của tháng
+ * @param year Năm
+ * @param month Tháng (1-12)
+ * @returns Object { start, end }
+ */
+declare function getMonthRange(year: number, month: number): {
+  start: Date;
+  end: Date;
+};
+/**
+ * 📆 Lấy danh sách ngày trong tháng
+ * @param year Năm
+ * @param month Tháng (1-12)
+ * @returns Mảng số ngày
+ */
+declare function getDaysInMonth(year: number, month: number): number[];
+/**
+ * 🇻🇳 Lấy thời gian hiện tại theo timezone Việt Nam (MySQL format)
+ * @returns Chuỗi datetime yyyy-MM-dd HH:mm:ss
+ */
+declare function toMySQLDateNowVN(): string;
+/**
+ * 📥 Lấy giá trị object an toàn
+ * @param item Object
+ * @param key Tên key
+ * @param df Giá trị mặc định
+ * @returns Giá trị hoặc default
+ */
+declare function getValue(item: any, key: any, df?: any): any;
+/**
+ * ➕ Tính tổng 1 cột trong mảng object
+ * @param items Mảng object
+ * @param col Tên cột
+ * @returns Tổng giá trị
+ */
+declare function sumArrCol<T extends Record<string, number>>(items: T[], col: keyof T): number;
+/**
+ * 🏛️ Chuyển số nguyên sang chữ số La Mã
+ * @param num Số nguyên dương cần chuyển (>= 1)
+ * @returns Chuỗi chữ số La Mã (VD: 4 -> IV, 9 -> IX)
+ * @note Không kiểm tra giới hạn trên, nên chỉ dùng cho số hợp lý (thường < 4000)
+ */
+declare function toRoman(num: number): string;
+/**
+ * 🔘 Lấy trạng thái Hoạt động / Khóa
+ * @param id Giá trị trạng thái (1 | 0 | false)
+ * @param color Có trả về HTML badge hay không
+ * @returns
+ *  - Nếu id === false: trả về toàn bộ danh sách trạng thái
+ *  - Nếu color = true: trả về chuỗi HTML badge
+ *  - Ngược lại: trả về tên trạng thái
+ */
+declare function getActiveStatus(id: string | boolean | number, color?: boolean): string | {
+  id: number;
+  name: string;
+  color: string;
+}[];
+/**
+ * 📢 Lấy trạng thái Xuất bản / Nháp
+ * @param id Giá trị trạng thái (1 | 0 | false)
+ * @param color Có trả về HTML badge hay không
+ * @returns Tên trạng thái, badge HTML hoặc danh sách trạng thái
+ */
+declare function getPublishStatus(id: string | boolean | number, color?: boolean): string | {
+  id: number;
+  name: string;
+  color: string;
+}[];
+/**
+ * ✅❌ Lấy trạng thái Có / Không
+ * @param id Giá trị boolean dạng số (1 | 0 | false)
+ * @param color Có trả về HTML badge hay không
+ * @returns Tên trạng thái hoặc badge HTML
+ */
+declare function getTrueFlaseStatus(id: string | boolean | number, color?: boolean): string | {
+  id: number;
+  name: string;
+  color: string;
+}[];
+/**
+ * 🔀 Lấy các phần tử khác nhau giữa 2 mảng
+ * @param arr1 Mảng thứ nhất
+ * @param arr2 Mảng thứ hai
+ * @returns Mảng chứa các phần tử chỉ xuất hiện ở một trong hai mảng
+ */
+declare function getDiffArr(arr1: any[], arr2: any[]): any[];
+/**
+ * 📦 Kiểm tra mảng arr1 có phải là tập con của arr2 hay không
+ * @param arr1 Mảng cần kiểm tra
+ * @param arr2 Mảng cha
+ * @returns true nếu mọi phần tử arr1 đều tồn tại trong arr2
+ */
+declare function isSubArr(arr1: any[], arr2: any[]): boolean;
+/**
+ * ➖ Lấy các phần tử chỉ có trong mảng thứ nhất
+ * @param arr1 Mảng gốc
+ * @param arr2 Mảng so sánh
+ * @returns Mảng các phần tử chỉ tồn tại trong arr1
+ */
+declare function getArrOnlyInFirst(arr1: any[], arr2: any[]): any[];
+/**
+ * 📤 Lấy danh sách giá trị của một cột trong mảng object
+ * @param arr Mảng object
+ * @param field Tên field cần lấy
+ * @returns Mảng giá trị của field
+ */
+declare function getArrColumn(arr: any[], field: string): any[];
+/**
+ * ➕ Tính tổng một cột trong mảng object với điều kiện tùy chọn
+ * @param arr Mảng object
+ * @param sumColumn Tên cột cần tính tổng
+ * @param conditions Điều kiện lọc (optional)
+ * @returns Tổng giá trị thỏa điều kiện
+ */
+declare function sumArrColumn<T extends Record<string, any>>(arr: T[], sumColumn: keyof T, conditions?: Partial<T>): number;
+/**
+ * 🔢 Chuyển chuỗi số sang Decimal.js an toàn
+ * @param value Chuỗi hoặc số (có thể chứa ký tự khác)
+ * @returns Decimal instance
+ */
+declare function decimalNumber(value: string | number): Decimal.Decimal;
+/**
+ * 🧾 Parse JSON an toàn từ nhiều kiểu dữ liệu
+ * @param input Dữ liệu đầu vào (string | object | array)
+ * @param df Giá trị mặc định nếu parse lỗi
+ * @returns Object | Array | df
+ */
+declare function stringToJson(input: any, df?: Record<string, any>): any;
+/**
+ * 🌐 Lấy danh sách ngôn ngữ
+ * @param ids Danh sách id cần lọc hoặc false để lấy tất cả
+ * @returns Mảng ngôn ngữ
+ */
+declare function getLangs(ids?: number[] | false): {
+  id: number;
+  name: string;
+}[];
+//#endregion
+//#region src/Csrf.d.ts
+declare function isStateChangingMethod(method: string): boolean;
+declare function getCsrfTokenFromRequest(req: any): any;
+declare function ensureCsrfProtection(req: any, session: any, options?: any): {
+  allowed: boolean;
+  reason: null;
+} | {
+  allowed: boolean;
+  reason: string;
+};
+//#endregion
+//#region src/FastRequest.d.ts
+/**
+ * Kiểu dữ liệu file upload tạm
+ */
+interface FileType$1 {
+  filename: string;
+  basename: string;
+  ext: string;
+  mimetype: string;
+  path: string;
+}
+/**
+ * FastRequest
+ * ==================================================
+ * Class wrapper cho FastifyRequest
+ *
+ * Công dụng chính:
+ * - Parse request body (json, multipart/form-data)
+ * - Xử lý upload file tạm thời
+ * - Lấy dữ liệu GET / POST / PARAM / HEADER
+ * - Filter & validate dữ liệu đầu vào an toàn
+ *
+ * Thường dùng cho:
+ * - Controller
+ * - API xử lý form
+ * - Import / export / upload file
+ */
+declare class FastRequest {
+  [x: string]: any;
+  /** Fastify request gốc */
+  private req;
+  /** Body sau khi parse */
+  private body;
+  /** Danh sách file upload theo field */
+  files: {
+    [key: string]: FileType$1[];
+  };
+  /**
+   * Khởi tạo Request wrapper
+   *
+   * @param req FastifyRequest
+   */
+  constructor(req: FastifyRequest);
+  /**
+   * Start xử lý request
+   *
+   * Công dụng:
+   * - Parse body thường (JSON)
+   * - Parse multipart/form-data
+   * - Lưu file upload vào thư mục tạm
+   * - Gom field & file theo đúng format
+   */
+  start: () => Promise<void>;
+  /**
+   * Cleanup request
+   *
+   * Công dụng:
+   * - Xóa file upload tạm sau khi xử lý xong
+   */
+  end: () => Promise<void>;
+  /** Check method POST */
+  isPost(): boolean;
+  /** Check method GET */
+  isGet(): boolean;
+  /** Check AJAX request */
+  isAjax(): boolean;
+  /**
+   * Lấy dữ liệu POST
+   *
+   * @param name Tên field
+   * @param defaultValue Giá trị mặc định
+   * @param type Kiểu filter
+   *
+   * @returns Giá trị đã filter
+   */
+  getPost(name?: string, defaultValue?: any, type?: string): any;
+  /**
+   * Lấy dữ liệu POST dạng đa ngôn ngữ
+   *
+   * Ví dụ field: title{vi}, title{en}
+   */
+  getLangPost(name: string, defaultValue?: any, type?: string): any;
+  /**
+   * Lấy param từ URL
+   */
+  getParam(name: string, defaultValue?: any, type?: string): any;
+  /**
+   * Lấy query string
+   */
+  get(name?: string, defaultValue?: any, type?: string): any;
+  /** Check tồn tại query */
+  has(names: string | string[]): boolean;
+  /** Check tồn tại post */
+  hasPost(names: string | string[]): boolean;
+  /** Lấy header */
+  getHeader(key: string): string;
+  /**
+   * Filter & validate dữ liệu an toàn
+   *
+   * @param input Dữ liệu đầu vào
+   * @param type Kiểu filter
+   * @param defaultValue Giá trị fallback
+   */
+  static filterSafeData(input: any, type?: string, defaultValue?: any): any;
+  /** Parse raw JSON input */
+  private static parseRawInput;
+  /** Filter HTML tránh XSS */
+  private static filterHtml;
+  /** Filter mảng ID number */
+  private static filterIds;
+  /** Filter mảng ID string */
+  private static filterStringIds;
+  /** Filter mảng string */
+  private static filterStrings;
+  /** Filter ID dạng LIKE "%id%" */
+  private static filterDQuoteIds;
+}
+//#endregion
+//#region src/FileUpload.d.ts
+/**
+ * Kiểu dữ liệu file upload
+ */
+interface FileType {
+  filename: string;
+  basename: string;
+  ext: string;
+  mimetype: string;
+  path: string;
+}
+/**
+ * Class xử lý upload / kiểm tra / quản lý file
+ */
+declare class FileUpload {
+  /**
+   * Danh sách file nhận từ request (theo field)
+   */
+  private files;
+  /**
+   * Loại thư mục upload (static | public | uploads)
+   */
+  private uploadType;
+  constructor(files: {
+    [key: string]: FileType[];
+  }, uploadType?: string);
+  /**
+   * Copy danh sách file từ src sang dist
+   * Dùng khi cần nhân bản file đã tồn tại
+   */
+  copyFiles(files: any[]): Promise<void>;
+  /**
+   * Upload 1 file theo field name
+   * @returns đường dẫn file sau upload hoặc false
+   */
+  uploadFile(fieldName?: string, folders?: string): Promise<string | false>;
+  /**
+   * Upload nhiều file theo field name
+   * @returns mảng đường dẫn file sau upload
+   */
+  uploadFiles(fieldName?: string, folders?: string): Promise<string[]>;
+  /**
+   * Upload 1 file cụ thể
+   * - Tự tạo tên file theo timestamp
+   * - Tạo folder nếu chưa tồn tại
+   * - Move file từ temp sang thư mục upload
+   */
+  upload(file: FileType, folders?: string): Promise<string | false>;
+  /**
+   * Kiểm tra file upload theo loại (OfficeFile, ImgFile, VideoFile, ...)
+   * Gọi dynamic method: check + type
+   */
+  checkFile(fieldName?: string, type?: string): Promise<void>;
+  /**
+   * Xóa nhiều file
+   */
+  static removeFiles: (pathFiles: string[] | boolean, uploadType?: string) => boolean;
+  /**
+   * Xóa 1 file theo đường dẫn
+   */
+  static removeFile: (fileName: string | false, uploadType?: string) => boolean;
+  /**
+   * Đổi tên file bằng cách thêm timestamp
+   */
+  static renameFile: (fileName: string) => string;
+  /**
+   * Lấy thư mục upload theo loại
+   */
+  static getUploadDir(uploadType?: string): string;
+  /**
+   * Check file mặc định (ảnh + office)
+   */
+  static checkDefFile(fileName: string, ftype: string, isTry?: boolean): boolean;
+  /**
+   * Check file Office
+   */
+  static checkOfficeFile(fileName: string, ftype: string): void;
+  /**
+   * Check file hình ảnh
+   */
+  static checkImgFile(fileName: string, ftype: string): void;
+  /**
+   * Check file video
+   */
+  static checkVideoFile(fileName: string, ftype: string): void;
+}
+//#endregion
+//#region src/JWTApp.d.ts
+declare class JWTApp {
+  static createToken(user: any, req: any): string;
+  static verifyToken(req: FastifyRequest & {
+    cookies?: any;
+  }): any;
+  static checkSecretKey(key: string): void;
+}
+//#endregion
+//#region src/Models.d.ts
+type ModelConstructor<T extends BaseModel<any> = BaseModel<any>> = new (pool: Pool) => T;
+type Models<T extends Record<string, ModelConstructor>> = { [K in keyof T]: InstanceType<T[K]>; };
+declare function createModels<T extends Record<string, ModelConstructor>>(modelMap: T, pool: Pool): Models<T>;
+declare function initModels<T extends Record<string, ModelConstructor>>(modelMap: T, pool: Pool): Models<T>;
+declare function getModels<T>(): T;
+//#endregion
+//#region src/MySQLSessionStore.d.ts
+declare class MySQLSessionStore implements SessionStore {
+  private pool;
+  constructor(pool: Pool);
+  get(sid: string, cb: (err: any, session?: any | null) => void): Promise<void>;
+  set(sid: string, session: any, cb: (err?: any) => void): Promise<void>;
+  destroy(sid: string, cb: (err?: any) => void): Promise<void>;
+}
+//#endregion
+//#region src/Route.d.ts
+/**
+ * RouterType
+ * ==================================================
+ * Interface mô tả 1 route trong hệ thống
+ *
+ * @property link       Đường dẫn URL
+ * @property module     Tên module (phân quyền / phân nhóm)
+ * @property controller Controller xử lý request
+ * @property action     Method trong controller
+ * @property method     HTTP method (get | post | put | delete...)
+ * @property rateLimit  Giới hạn request (optional)
+ */
+interface RouterType {
+  link: string;
+  module: string;
+  controller: any;
+  action: string;
+  method?: string;
+  rateLimit?: number;
+  rateLimitConfig?: {
+    max: number;
+    timeWindow: string;
+    blockDuration?: number;
+  };
+}
+/**
+ * Route
+ * ==================================================
+ * Class quản lý danh sách route toàn hệ thống
+ *
+ * Công dụng chính:
+ * - Gom route theo module
+ * - Tự động prefix URL
+ * - Sinh nhanh các route CRUD chuẩn (GS)
+ *
+ * Thường dùng cho:
+ * - Khai báo routing tập trung
+ * - Auto register route cho Fastify / Express
+ */
+declare class Route {
+  /** Danh sách route */
+  private routes;
+  /**
+   * Lấy HTTP method của route
+   *
+   * @param router RouterType
+   * @returns method (mặc định: GET)
+   */
+  static getMethod(router: any): any;
+  /**
+   * Thêm danh sách route với prefix
+   *
+   * @param prefix Prefix URL (vd: /admin/user)
+   * @param routeList Danh sách route con
+   *
+   * @example
+   * route.add('/admin/user', [
+   *   { link: '/list', module: 'user', controller: UserController, action: 'index' }
+   * ])
+   */
+  add(prefix: string, routeList?: RouterType[]): void;
+  /**
+   * addGS (Get - Set)
+   * ==================================================
+   * Tự động sinh bộ route CRUD chuẩn cho 1 module
+   *
+   * Các route được tạo:
+   * - GET    /getList
+   * - GET    /detail/:code
+   * - POST   /create
+   * - POST   /edit/:code
+   * - POST   /copy
+   * - POST   /import
+   * - GET    /export
+   * - GET    /delete/:code
+   * - POST   /delete
+   *
+   * @param link Base URL (vd: /admin/product)
+   * @param controller Controller xử lý
+   * @param module Tên module
+   */
+  addGS(link: string, controller: any, module: string): void;
+  /**
+   * Lấy toàn bộ danh sách route
+   *
+   * @returns RouterType[]
+   */
+  getRouter(): RouterType[];
+}
+//#endregion
+//#region src/Utils.d.ts
+declare function sanitizeAuditPayload(value: any, parentKey?: string): any;
+declare function buildAuditLogData(item: any, itemOld: any, ignoreFields?: never[]): {
+  difference: any;
+  item: any;
+};
+declare function getCorsOriginPolicy(corsOrigins: any, isProduction: boolean | number): any;
+//#endregion
+//#region src/Validation.d.ts
+declare class Validation {
+  private md?;
+  constructor(md?: IBaseModel<any>);
+  private errors;
+  runValidate(item: any, vdObject?: Record<string, any>): Promise<void>;
+  /**
+   * Start the validation using values and rules passed in data
+   * @param  array  data
+   * @param  bool   skip To skip validations as soon as one of the rules fails+
+   * @throws Error if rule method doesn't exist
+   * @return bool
+   */
+  validate(validation: any, skip?: boolean): Promise<boolean>;
+  /**
+   * Determine if a given rule has arguments, Ex: max(4)
+   *
+   * @param  string  rule
+   * @return bool
+   */
+  private isruleHasArgs;
+  /**
+   * get rule name for rules that have args
+   *
+   * @param  string  rule
+   * @return string
+   */
+  private getRuleName;
+  /**
+   * get arguments for rules that have args
+   *
+   * @param  string  rule
+   * @return array
+   */
+  private getRuleArgs;
+  /**
+   * Add an error
+   *
+   * @param  string  rule
+   * @param  string  placeholder for filed
+   * @param  mixed   value
+   * @param  array   args
+   *
+   */
+  private addError;
+  /**
+   * Checks if validation has passed.
+   *
+   * @return bool
+   */
+  passes(): boolean;
+  /**
+   * get all errors
+   * @return array
+   */
+  getErrors(): string[];
+  /**
+   * clear all existing errors
+   * @return bool
+   */
+  clearErrors(): void;
+  /** *********************************************** **/
+  /** **************    Validations    ************** **/
+  /** *********************************************** **/
+  /**
+   * Is value not empty?
+   * @param  mixed  value
+   * @return bool
+   */
+  private required;
+  /**
+   * Is value not empty?
+   * @param  mixed  value
+   * @return bool
+   */
+  private requiredId;
+  /**
+   * min string length
+   * @param  string  str
+   * @param  array  args(min)
+   * @return bool
+   */
+  private minLen;
+  private equalLen;
+  /**
+   * max string length
+   *
+   * @param  string  str
+   * @param  array  args(max)
+   *
+   * @return bool
+   */
+  private maxLen;
+  /**
+   * check if number between given range of numbers
+   *
+   * @param  int     num
+   * @param  array   args(min,max)
+   * @return bool
+   */
+  private rangeNum;
+  /**
+   * check if number between given range of numbers
+   *
+   * @param  int     num
+   * @param  array   args(min,max)
+   * @return bool
+   */
+  private max;
+  private min;
+  /**
+   * check if value is a valid number
+   *
+   * @param  string|integer  value
+   * @return bool
+   */
+  private integer;
+  /**
+   * check if value(s) is in a given array
+   *
+   * @param  string|array  value
+   * @param  array         arr
+   * @return bool
+   */
+  private inArray;
+  private inArrayNumber;
+  /**
+   * check if value is contains alphabetic characters and numbers
+   *
+   * @param  mixed   value
+   * @return bool
+   */
+  private alphaNum;
+  /**
+   * check if value is contains alphabetic characters and numbers
+   *
+   * @param  mixed   value
+   * @return bool
+   */
+  private number;
+  /**
+   * check if value is contains alphabetic characters, numbers and spaces
+   *
+   * @param  mixed   value
+   * @return bool
+   */
+  private alphaNumWithSpaces;
+  /**
+   * check if password has at least
+   * - one lowercase letter
+   * - one uppercase letter
+   * - one number
+   * - one special(non-word) character
+   */
+  private password;
+  /**
+   * - Phone VN
+   */
+  private phoneVn;
+  /**
+   * check if value is equals to another value(strings)
+   *
+   * @param  string  value
+   * @param  array   args(value)
+   * @return bool
+   */
+  private equals;
+  /**
+   * check if value is not equal to another value(strings)
+   *
+   * @param  string  value
+   * @param  array   args(value)
+   * @return bool
+   */
+  private notEqual;
+  /**
+   * check if value is a valid email
+   *
+   * @param  string  email
+   * @return bool
+   */
+  private email;
+  /** *********************************************** **/
+  /** ************  Database Validations  *********** **/
+  /** *********************************************** **/
+  /**
+   * check if a value of a column is unique.
+   *
+   * @param  string  value
+   * @param  array   args(table, column)
+   * @return bool
+   */
+  private unique;
+  /** *********************************************** **/
+  /** ************   Default Messages     *********** **/
+  /** *********************************************** **/
+  private static defaultMessages;
+}
+//#endregion
+export { BaseModel, FastRequest, FileUpload, IBaseModel, JWTApp, JoinType, ModelConstructor, Models, ModifiedType, MySQLSessionStore, PaginationResult, Route, RouterType, Validation, buildAuditLogData, callFetchApi, checkPassword, createModels, decimalNumber, ensureCsrfProtection, formatDate, generateKeywords, getActiveStatus, getArrColumn, getArrOnlyInFirst, getCorsOriginPolicy, getCsrfTokenFromRequest, getDaysInMonth, getDiffArr, getLangs, getModels, getMonthRange, getPublishStatus, getTrueFlaseStatus, getValue, initModels, isStateChangingMethod, isSubArr, makePassword, parseDate, randomText, removeVietnameseTones, sanitizeAuditPayload, slugify, stringToJson, sumArrCol, sumArrColumn, toMySQLDateNowVN, toRoman };

package/dist/index.mjs

@@ -0,0 +1 @@
+import e from"argon2";import{format as t}from"date-fns-tz";import*as n from"decimal.js";import r from"fs";import i from"path";import{format as a,isValid as o,parseISO as s}from"date-fns";import{pipeline as c}from"stream/promises";import l from"jsonwebtoken";var u=class e{md;constructor(e){this.md=e}errors=[];async runValidate(e,t={}){if(Object.entries(t).length===0)return;let n=[];for(let r in t){if(!Object.prototype.hasOwnProperty.call(t,r))continue;let i=t[r],a=e?.id||0,o=e?.[r]??``,s=this?.md?.fieldName(r)??r;n.push({field:r,value:o,rules:i,fieldName:s,id:a})}if(n.length&&(await this.validate(n),this.getErrors().length)){let e=this.getErrors().join(`, `);throw Error(e)}}async validate(e,t=!1){let n=!0;for await(let r of e){let e=r.filed,i=r.id,a=r.fieldName,o=r.value,s=r.rules;s=s.split(`|`);for await(let r of s){let s=r,c=[];if(this.isruleHasArgs(r)?(s=this.getRuleName(r),c=this.getRuleArgs(r)):c=e,!(s in this))throw Error(`Method doesnt exists: `+s);if(!await this[s](o,c,i)&&(this.addError(s,a,o,c),n=!1,t))return!1}}return n}isruleHasArgs(e){return e.split(`(`)[1]!==void 0}getRuleName(e){return e.split(`(`)[0]}getRuleArgs(e){e=e.trim();let t=e.split(`(`)[1];return t=t.endsWith(`)`)?t.slice(0,-1):t,t.split(`,`)}addError(t,n,r,i=[]){if(t){let a=e.defaultMessages(t);a?a.trim()!==``&&(r=typeof r==`string`?r:``,a=a.replace(`{placeholder}`,n),a=a.replace(`{value}`,r),i=typeof i==`string`?[i]:i,i.forEach((e,t)=>{a=a.replace(`{${t}}`,e)}),this.errors.push(a)):this.errors.push(`The value you entered for `+n+` is invalid`)}}passes(){return this.errors.length===0}getErrors(){return this.errors}clearErrors(){this.errors=[]}required(e){return e==null?!1:typeof e!=`string`||e.trim()!==``}requiredId(e){if(e==null)return!1;if(typeof e==`string`){if(e.trim()===``)return!1}else if(typeof e==`number`&&e===0)return!1;return!0}minLen(e,t){return e.length>=parseInt(t[0])}equalLen(e,t){return e.length===parseInt(t[0])}maxLen(e,t){return e.length<=parseInt(t[0])}rangeNum(e,t){return e>=parseInt(t[0])&&e<=parseInt(t[1])}max(e,t){return e<=Number(t[0])}min(e,t){return e>=Number(t[0])}integer(e){return!Number.isNaN(parseInt(e))}inArray(e,t){if(typeof e==`object`){for(let n in e)if(!(n in t))return!1;return!0}return e in t}inArrayNumber(e,t){let n=t.map(Number);return typeof e==`object`?e.every(e=>n.includes(e)):n.includes(e)}alphaNum(e){return!e||/^[a-z0-9]+$/i.test(e)}number(e){if(typeof e==`number`&&(e>2**53-1||e<-(2**53-1)))throw Error(`INVALID_SAFE_NUMBER`);return typeof e==`number`}alphaNumWithSpaces(e){return!e||/^[a-z0-9 ]+$/i.test(e)}password(e){return!e||/^(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[@#!%^&*])[0-9a-zA-Z@#!%^&*.]{8,32}/.test(e)}phoneVn(e){return!e||/^[03|05|07|08|09]{2}[0-9]{8}/.test(e)}equals(e,t){return e===t[0]}notEqual(e,t){return e!==t[0]}email(e){return!e||/^([A-Za-z0-9_.-])+@([A-Za-z0-9_.-]+)\.([A-Za-z]{2,4})$/.test(e)}async unique(e,t,n){try{if(!this.md)throw Error(`invalid_md`);let r=`SELECT id FROM \`${t[0].trim()}\` WHERE \`${t[1].trim()}\` = ?`,i=[e];this.md.isDeleted&&(r+=` AND isDeleted = 0`),n&&(r+=` AND id != ?`,i.push(n));let[a]=await this.md.query(r,i);return a.length===0}catch(e){return console.log(e),!1}}static defaultMessages(e){return{required:`{placeholder} không thể trống`,requiredId:`{placeholder} không hợp lệ`,minLen:`{placeholder} không thể nhỏ hơn {0} ký tự`,equalLen:`{placeholder} phải có {0} ký tự`,phoneVn:`{placeholder} không phải thuê bao Việt Nam`,findOne:`{placeholder} không tồn tại`,maxLen:`{placeholder} không thể lớn hơn {0} ký tự`,min:`{placeholder} không thể nhỏ hơn {0}`,max:`{placeholder} không thể lớn hơn {0}`,rangeNum:`{placeholder} phải nằm trong khoản từ {0} đến {1}`,integer:`{placeholder} phải là số`,number:`{placeholder} không đúng định dạng`,inArray:`{placeholder} không hợp lệ`,inArrayNumber:`{placeholder} không hợp lệ`,alphaNum:`Chỉ cho phép chữ cái và số cho {placeholder}`,alphaNumWithSpaces:`Chỉ cho phép chữ cái, số và khoảng trắng cho {placeholder}`,password:`Vui lòng nhập mật khẩu dài 8-32 ký tự, có ký tự chữ số, chữ hoa và chữ thường, ký tự @#$!%^&*`,equals:`{placeholder} không đúng`,notEqual:`{placeholder} không thể bằng {0}`,email:`Email không đúng định dạng`,unique:`{placeholder} đã được sử dụng`}[e]??null}},d=class{pool;isDeleted=!1;errors=[];vdObject;modifieds;constructor(e){this.pool=e}fieldName(e){return e}getErrors(){return this.errors}async getConnection(){return await this.pool.getConnection()}async validate(e,t={}){await new u(this).runValidate(e,t)}async query(e,t,n){return n?n.query(e,t):this.pool.query(e,t)}async modifiedSync(e){if(!this.modifieds)return e;for(let t in this.modifieds){let{smodel:n,tkey:r,skey:i,fmap:a}=this.modifieds[t];if(!e[r])continue;let o=await n.findOne({[i]:e[r]});o&&(e[t]=o[a]||``)}return e}buildWhere(e,t){let n={...e};this.isDeleted&&n.isDeleted===void 0?n.isDeleted=0:this.isDeleted||delete n.isDeleted;let r=[],i=e=>e.split(`.`).map(e=>`\`${e}\``).join(`.`),a=e=>typeof e==`boolean`?+!!e:e,o=e=>{let n=[];for(let s in e){let c=e[s];if(s===`$or`&&Array.isArray(c)){let e=c.map(e=>o(e)).filter(Boolean).map(e=>`(${e})`);e.length&&n.push(`(${e.join(` OR `)})`);continue}if(s===`$and`&&Array.isArray(c)){let e=c.map(e=>o(e)).filter(Boolean).map(e=>`(${e})`);e.length&&n.push(`(${e.join(` AND `)})`);continue}let l=t?`${i(t)}.${i(s)}`:i(s);if(c===null){n.push(`${l} IS NULL`);continue}if(typeof c==`object`&&c&&!Array.isArray(c)){let e=[];for(let t in c){let n=c[t];switch(t){case`$in`:n.length?(e.push(`${l} IN (${n.map(()=>`?`).join(`,`)})`),r.push(...n.map(a))):e.push(`1=0`);break;case`$nin`:n.length?(e.push(`${l} NOT IN (${n.map(()=>`?`).join(`,`)})`),r.push(...n.map(a))):e.push(`1=1`);break;case`$ne`:n===null?e.push(`${l} IS NOT NULL`):(e.push(`${l} <> ?`),r.push(a(n)));break;case`$gt`:e.push(`${l} > ?`),r.push(a(n));break;case`$gte`:e.push(`${l} >= ?`),r.push(a(n));break;case`$lt`:e.push(`${l} < ?`),r.push(a(n));break;case`$lte`:e.push(`${l} <= ?`),r.push(a(n));break;case`$between`:if(!Array.isArray(n)||n.length!==2)throw Error(`$between requires [min, max]`);e.push(`${l} BETWEEN ? AND ?`),r.push(a(n[0]),a(n[1]));break;case`$like`:e.push(`${l} LIKE ?`),r.push(`%${n}%`);break;case`$likeIn`:if(!n.length)e.push(`1=0`);else{let t=n.map(()=>`${l} LIKE ?`).join(` OR `);e.push(`(${t})`),r.push(...n.map(e=>`%${e}%`))}break;default:throw Error(`Unsupported operator: ${t}`)}}e.length&&n.push(`(${e.join(` AND `)})`)}else n.push(`${l} = ?`),r.push(a(c))}return n.join(` AND `)};return{sql:o(n)||`1=1`,params:r}}async count(e={}){let t=`SELECT COUNT(*) AS total FROM \`${this.table}\``,n=[],r=this.buildWhere(e);r.sql&&(t+=` WHERE ${r.sql}`,n=r.params);let[i]=await this.query(t,n);return i?.[0]?.total??0}async insert(e,t){let n=Object.keys(e),r=Object.values(e),i=Array(n.length).fill(`?`).join(`, `),a=`INSERT INTO \`${this.table}\` (\`${n.join("`, `")}\`) VALUES (${i})`,[o]=await this.query(a,r,t);return o.insertId}async update(e,t,n){let r=Object.keys(e),i=Object.keys(t);if(r.length===0)return 0;if(i.length===0)throw Error(`Điều kiện lọc (filter) không được rỗng.`);let a=Object.values(e),o=r.map(e=>`\`${e}\`=?`).join(`, `),s=Object.values(t),c=i.map(e=>`\`${e}\`=?`).join(` AND `),l=[...a,...s],u=`UPDATE \`${this.table}\` SET ${o} WHERE ${c}`,[d]=await this.query(u,l,n);return d.affectedRows}async updateAdv(e={},t={},n){try{if(!Object.keys(e).length)return;let r=this.buildWhere(t),i=[],a=[];for(let[t,n]of Object.entries(e))i.push(`\`${t}\` = ?`),a.push(n);let o=`UPDATE \`${this.table}\` SET ${i.join(`, `)}`;r.sql&&(o+=` WHERE ${r.sql}`,a.push(...r.params));let[s]=await this.query(o,a,n);return s.affectedRows}catch(e){throw console.log(e.message),Error(`invalid_update_is_deleted`)}}async save(e,t){try{if(e.id){let n={...e};if(delete n.id,Object.keys(n).length===0)return e;let r={id:e.id};return await this.update(n,r,t),e}{let n=e;return e.id=await this.insert(n,t),e}}catch(e){return console.log(e.message),this.errors.push(e.message),!1}}async vdSave(e,t=!1,n){e=await this.modifiedSync(e),t&&await this.validate(e,t);let r=await this.save(e,n);if(!r){let e=this.getErrors().join(`, `);throw Error(e)}return r}async updateMany(e,t,n){if(e.length)try{let r=Object.keys(e[0]).filter(e=>e!==t),i=e.map(e=>e[t]),a=r.map(n=>`\`${n}\` = CASE \`${t}\` ${e.map(e=>`WHEN ? THEN ?`).join(` `)} ELSE \`${n}\` END`).join(`, `),o=[];r.forEach(n=>{e.forEach(e=>{o.push(e[t]),o.push(e[n])})}),o.push(...i);let s=`UPDATE \`${this.table}\` SET ${a} WHERE \`${t}\` IN (${i.map(()=>`?`).join(`,`)});`;await this.query(s,o,n)}catch(e){throw console.log(e.message),Error(`invalid_update_many`)}}async updateAndCreateMany(e,t,n){if(e.length)try{let r=Object.keys(e[0]),i=r.map(e=>`\`${e}\``),a=e.map(()=>`(${r.map(()=>`?`).join(`,`)})`).join(`,`),o=e.flatMap(e=>r.map(t=>e[t])),s=r.filter(e=>e!==t).map(e=>`\`${e}\` = VALUES(\`${e}\`)`).join(`, `),c=`INSERT INTO \`${this.table}\` (${i.join(`,`)}) VALUES ${a}`;s&&(c+=` ON DUPLICATE KEY UPDATE ${s}`),c+=`;`,await this.query(c,o,n)}catch(e){throw console.log(e.message),Error(`invalid_update_and_create`)}}async find(e={},t=!1,n=!1,r=!1,i=0){let a=`SELECT * FROM \`${this.table}\``,o=[];if(n){let e=Array.isArray(n)?n:[n],t=[];for(let n of e){let e=n.type?n.type.toUpperCase():`LEFT JOIN`;a+=` ${e} \`${n.table}\` ON ${n.on}`,n.fields&&n.fields.length&&t.push(n.fields.map(e=>`\`${n.table}\`.${e} AS ${n.table}_${e}`).join(`, `))}t.length&&(a=a.replace(`SELECT *`,`SELECT \`${this.table}\`.*, ${t.join(`, `)}`))}let s=this.buildWhere(e);if(s.sql&&(a+=` WHERE ${s.sql}`,o=o.concat(s.params)),r&&(Array.isArray(r)&&(r=r.join(`, `)),a=a.replace(`SELECT *`,`SELECT ${r}`)),t){let e=Object.entries(t).map(([e,t])=>`${e} ${t.toUpperCase()}`);e.length&&(a+=` ORDER BY ${e.join(`, `)}`)}i&&(a+=` LIMIT ?`,o.push(i));let[c]=await this.query(a,o);return c}async findOne(e={},t=!1,n=!1,r=!1){let i=await this.find(e,t,n,r,1);return i&&i.length?i[0]:null}async findById(e,t={}){return t.id=e,await this.findOne(t)}async deleteOne(e,t){return await this.deleteMany(e,1,t)}async deleteById(e,t){let n={};return n.id=e,await this.deleteOne(n,t)}async deleteMany(e,t=0,n){let r=this.buildWhere(e);if(!r.sql)throw Error(`deleteMany requires a filter condition`);let i=`DELETE FROM \`${this.table}\` WHERE ${r.sql}`;t&&(i+=` LIMIT `+t);let[a]=await this.query(i,r.params,n);return!!a.affectedRows&&a.affectedRows>0}async isField(e,t=this.table){return(await this.query(`SHOW COLUMNS FROM \`${t}\` LIKE '${e}'`)).length>0}async isFields(e=[]){if(!e.length)return[];let t=(await this.query(`SHOW COLUMNS FROM \`${this.table}\``)).map(e=>e.Field);if(e.filter(e=>!t.includes(e)).length>0)throw Error(`invalid_fields`);return e}async getMapName(e,t,n,r,i=`name`){if(t&&t!==r?.[e]){let r=await n.findOne({[e]:t});return r&&r[i]?r[i]:``}return``}async findWithPagination(e={},t=!1,n=!1,r=!1,i=1,a=10){i=Math.max(1,i);let o=(i-1)*a,s=`FROM \`${this.table}\``,c=[],l=`SELECT \`${this.table}\`.*`;if(n){let e=Array.isArray(n)?n:[n],t=[];for(let n of e){let e=n.type?n.type.toUpperCase():`LEFT JOIN`;s+=` ${e} \`${n.table}\` ON ${n.on}`,n.fields?.length&&t.push(n.fields.map(e=>`\`${n.table}\`.${e} AS ${n.table}_${e}`).join(`, `))}t.length&&(l=`SELECT \`${this.table}\`.*, ${t.join(`, `)}`)}let u=this.buildWhere(e);u.sql&&(s+=` WHERE ${u.sql}`,c=c.concat(u.params)),r&&(Array.isArray(r)&&(r=r.join(`, `)),l=`SELECT ${r}`);let d=`SELECT COUNT(*) AS total ${s}`,[f]=await this.query(d,c),p=f?.[0]?.total||0,m=`${l} ${s}`;if(t){let e=Object.entries(t).map(([e,t])=>`${e} ${t.toUpperCase()}`);e.length&&(m+=` ORDER BY ${e.join(`, `)}`)}m+=` LIMIT ? OFFSET ?`;let h=c.concat([a,o]),[g]=await this.query(m,h);return{page:i,length:a,pageTotal:Math.ceil(p/a),recordTotal:p,items:g||[]}}};async function f(t){return await e.hash(t)}async function p(t,n){return await e.verify(n,t)}function m(e,t=!1){let n=``,r=`0123456789`;r=t?`ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz`+r:r;for(let t=0;t<e;t++)n+=r.charAt(Math.floor(Math.random()*r.length));return n}function h(e){return e?String(e).normalize(`NFD`).replace(/[\u0300-\u036f]/g,``).replace(/đ/g,`d`).replace(/Đ/g,`D`).toLowerCase():``}function g(e){return e.toString().toLowerCase().normalize(`NFD`).replace(/[\u0300-\u036f]/g,``).replace(/[^a-z0-9\s-]/g,``).trim().replace(/\s+/g,`-`).replace(/-+/g,`-`)}async function _(e,t={},n=`POST`,r=`application/json`,i={}){let a={method:n,headers:{"Content-Type":r,...i}};return n===`POST`&&(a.body=JSON.stringify(t)),await(await fetch(e,a)).json()}function v(e=``){return e?e.toLowerCase().replace(/[^a-z0-9\s]/g,``).split(/\s+/).filter((e,t,n)=>e.length>2&&n.indexOf(e)===t).join(`, `):``}function y(e){let t=e instanceof Date?e:new Date(e);if(isNaN(t.getTime()))throw Error(`Ngày không hợp lệ: `+e);return t}function b(e,t=`YYYY-MM-DD HH:mm:ss`){if(!e)return``;let n=typeof e==`string`?new Date(e):e;if(isNaN(n.getTime()))return``;let r=e=>e.toString().padStart(2,`0`),i={YYYY:n.getFullYear().toString(),MM:r(n.getMonth()+1),DD:r(n.getDate()),HH:r(n.getHours()),mm:r(n.getMinutes()),ss:r(n.getSeconds())};return t.replace(/YYYY|MM|DD|HH|mm|ss/g,e=>i[e])}function x(e,t){return{start:new Date(e,t-1,1),end:new Date(e,t,0,23,59,59,999)}}function S(e,t){let n=new Date(e,t,0).getDate();return Array.from({length:n},(e,t)=>t+1)}function C(){return t(new Date,`yyyy-MM-dd HH:mm:ss`,{timeZone:`Asia/Ho_Chi_Minh`})}function w(e,t,n=``){return e?.[t]===void 0?n:e[t]}function T(e,t){return e?.reduce((e,n)=>e+(n[t]??0),0)||0}function E(e){let t=[{value:1e3,numeral:`M`},{value:900,numeral:`CM`},{value:500,numeral:`D`},{value:400,numeral:`CD`},{value:100,numeral:`C`},{value:90,numeral:`XC`},{value:50,numeral:`L`},{value:40,numeral:`XL`},{value:10,numeral:`X`},{value:9,numeral:`IX`},{value:5,numeral:`V`},{value:4,numeral:`IV`},{value:1,numeral:`I`}],n=``;for(let{value:r,numeral:i}of t)for(;e>=r;)n+=i,e-=r;return n}function D(e,t=!1){let n=[{id:1,name:`Hoạt động`,color:`success`},{id:0,name:`Khóa`,color:`danger`}];if(e===!1)return n;let r=n.find(t=>t.id===e);return r?t?`<span class="badge badge-sm bg-gradient-${r.color}">${r.name}</span>`:r.name:``}function O(e,t=!1){let n=[{id:1,name:`Xuất bản`,color:`success`},{id:0,name:`Nháp`,color:`danger`}];if(e===!1)return n;let r=n.find(t=>t.id===e);return r?t?`<span class="badge badge-sm bg-gradient-${r.color}">${r.name}</span>`:r.name:``}function k(e,t=!1){let n=[{id:1,name:`Có`,color:`success`},{id:0,name:`Không`,color:`secondary`}];if(e===!1)return n;let r=n.find(t=>t.id===e);return r?t?`<span class="badge badge-sm bg-gradient-${r.color}">${r.name}</span>`:r.name:``}function A(e,t){let n=new Set(e),r=new Set(t);return[...e.filter(e=>!r.has(e)),...t.filter(e=>!n.has(e))]}function j(e,t){let n=new Set(t);return e.every(e=>n.has(e))}function M(e,t){if(!Array.isArray(e)||!Array.isArray(t))return[];let n=new Set(t);return e.filter(e=>!n.has(e))}function N(e,t){if(!Array.isArray(e)||e.length===0)return[];if(!t)return e;let n=Array(e.length);for(let r=0;r<e.length;r++){let i=e[r];n[r]=i&&typeof i==`object`?i[t]:void 0}return n}function P(e,t,n){return e.reduce((e,r)=>{let i=!0;if(n&&(i=Object.entries(n).every(([e,t])=>r[e]===t)),i){let n=r[t];return e+(typeof n==`number`?n:0)}return e},0)}function F(e){let t=String(e).replace(/[^\d.]/g,``);return t?new n.Decimal(t):new n.Decimal(0)}function I(e,t={}){if(Array.isArray(e)||typeof e==`object`&&e)return e;if(typeof e==`number`)return t;if(typeof e==`string`)try{let n=JSON.parse(e);return Array.isArray(n)||typeof n==`object`&&n?n:t}catch(e){return console.log(e),t}return t}function L(e=!1){let t=[{id:1,name:`Tiếng Việt`}];return e===!1?t:t.filter(t=>e.includes(t.id))}const R=new Set([`POST`,`PUT`,`PATCH`,`DELETE`]);function z(e){return R.has(String(e).toUpperCase())}function B(e){let t=e?.headers?.[`x-csrf-token`]||e?.headers?.[`X-CSRF-Token`],n=e?.body?.csrfToken||e?.body?.csrf_token;return t||n||``}function V(e,t,n={}){if(!z(e?.method||`GET`))return{allowed:!0,reason:null};let r=t?.csrfToken||n.expectedToken||``,i=B(e);return!r||!i||r!==i?{allowed:!1,reason:`missing_csrf_token`}:{allowed:!0,reason:null}}var H=class e{files;uploadType=`static`;constructor(e,t=`static`){this.files=e,this.uploadType=t}async copyFiles(t){if(t.length){let n=e.getUploadDir(this.uploadType);for await(let e of t){let t=i.join(n,e.src);if(r.existsSync(t)){let a=i.join(n,e.dist);await r.promises.copyFile(t,a)}}}}async uploadFile(e=`filedname`,t=``){try{let n=this.files[e];return!n||!n[0]?!1:await this.upload(n[0],t)}catch(e){throw Error(e)}}async uploadFiles(e=`filedname`,t=``){try{let n=[],r=this.files[e];if(!r||!r.length)return[];for await(let e of r){let r=await this.upload(e,t);r&&n.push(r)}return n}catch(e){throw Error(e)}}async upload(t,n=``){try{let a=Date.now()+`___`+t.filename,o=e.getUploadDir(this.uploadType),s=n?i.join(o,n):o;r.existsSync(s)||r.mkdirSync(s,{recursive:!0});let c=i.join(s,a);return r.existsSync(t.path)?(await r.promises.rename(t.path,c),n?i.posix.join(n,a):a):!1}catch(e){throw Error(e)}}async checkFile(t=`file`,n=`OfficeFile`){try{let r=this.files[t];if(!r)return;for await(let t of r){let r=`check`+n;if(!(r in e))throw Error(`Method does not exist: `+r);e[r](t.filename,t.mimetype);return}return}catch(e){throw Error(e)}}static removeFiles=(e,t=`static`)=>{if(e===!1||!Array.isArray(e))return!1;for(let n of e)this.removeFile(n,t);return!0};static removeFile=(t,n=`static`)=>{if(!t)return!1;let a=i.join(e.getUploadDir(n),t);return r.existsSync(a)&&r.unlinkSync(a),!0};static renameFile=e=>{let t=i.extname(e);return`${i.basename(e,t)}_${Date.now()}${t}`};static getUploadDir(e=`static`){return e==`static`?i.join(i.resolve(),`public`,`static`):e==`public`?i.join(i.resolve(),`public`):e==`uploads`?i.join(i.resolve(),`uploads`):``}static checkDefFile(e,t,n=!0){if(!/(.*)\.(png|jpeg|jpg|ico|pdf|xls|xlsx|doc|docx|ppt|pptx)$/i.test(e)){if(n)throw Error(`Định dạng tập tin ${e} không được phép`);return!1}if(![`image/x-icon`,`image/jpeg`,`image/png`,`image/jpg`,`application/pdf`,`application/msword`,`application/vnd.ms-excel`,`application/vnd.ms-powerpoint`,`application/vnd.openxmlformats-officedocument.presentationml.presentation`,`application/vnd.openxmlformats-officedocument.spreadsheetml.sheet`,`application/vnd.openxmlformats-officedocument.wordprocessingml.document`].includes(t)){if(n)throw Error(`Định dạng tập tin ${e} không được phép`);return!1}return!0}static checkOfficeFile(e,t){try{if(!/(.*)\.(pdf|xls|xlsx|doc|docx|ppt|pptx)$/i.test(e)||![`application/pdf`,`application/msword`,`application/vnd.ms-excel`,`application/vnd.ms-powerpoint`,`application/vnd.openxmlformats-officedocument.presentationml.presentation`,`application/vnd.openxmlformats-officedocument.spreadsheetml.sheet`,`application/vnd.openxmlformats-officedocument.wordprocessingml.document`].includes(t))throw Error(`Tập tin ${e} không đúng định dạng (.pdf,.xls,.xlsx,.doc,.docx,.ppt,.pptx)`)}catch(e){throw Error(e)}}static checkImgFile(e,t){try{if(!/(.*)\.(png|jpeg|jpg|ico)$/i.test(e)||![`image/jpeg`,`image/png`,`image/jpg`,`image/x-icon`].includes(t))throw Error(`Ảnh ${e} không đúng định dạng (.png,.jpeg,.jpg,.ico)`)}catch(e){throw Error(e)}}static checkVideoFile(e,t){try{if(!/(.*)\.(mp4|mkv|webm|mov|avi)$/i.test(e)||![`video/mp4`,`video/mkv`,`video/webm`,`video/mov`,`video/avi`].includes(t))throw Error(`Video ${e} không đúng định dạng (.mp4,.mkv,.webm,.mov,.avi)`)}catch(e){throw Error(e)}}},U=class e{req;body={};files={};constructor(e){this.req=e}start=async()=>{if(this.req.body)this.body=this.req.body;else if(this.req.isMultipart()){let e=i.join(i.resolve(),`uploads`,`tmb`);r.existsSync(e)||r.mkdirSync(e,{recursive:!0});for await(let t of this.req.parts())if(t.type===`field`)this.body[t.fieldname]===void 0?this.body[t.fieldname]=t.value:Array.isArray(this.body[t.fieldname])?this.body[t.fieldname].push(t.value):this.body[t.fieldname]=[this.body[t.fieldname],t.value];else if(H.checkDefFile(t.filename,t.mimetype,!1)){let n=i.extname(t.filename),a=g(i.basename(t.filename,n)),o=a+n,s=i.join(e,o);try{await c(t.file,r.createWriteStream(s))}catch(e){e.code===`ABORT_ERR`?console.error(`Người dùng hủy upload.`):e.code===`ERR_STREAM_PREMATURE_CLOSE`?console.error(`Stream đóng sớm bất thường.`):console.error(`Lỗi upload:`,e.message)}this.files[t.fieldname]===void 0&&(this.files[t.fieldname]=[]),this.files[t.fieldname].push({filename:o,basename:a,path:s,mimetype:t.mimetype,ext:n})}}};end=async()=>{let e=Object.values(this.files);for await(let t of e)for await(let e of t)r.existsSync(e.path)&&r.unlinkSync(e.path)};isPost(){return this.req.method===`POST`}isGet(){return this.req.method===`GET`}isAjax(){return this.req.headers[`x-requested-with`]===`XMLHttpRequest`}getPost(t=``,n=``,r=`stripTags`){if(t===``)return this.body;if(!this.hasPost(t))return n;let i=this.body[t];return i?.value!==void 0&&(i=i.value),e.filterSafeData(i,r,n)}getLangPost(t,n=``,r=`stripTags`){if(!t)return n;let i=t.match(/^([^{]+)\{([^}]+)\}$/);if(!i)return n;let a=i[1],o=i[2],s=this.body?.[a];typeof s==`string`&&(s=I(s));let c=s?.[o];return e.filterSafeData(c,r,n)}getParam(t,n=null,r=`stripTags`){let i=this.req.params;return!i||!i[t]?n:e.filterSafeData(i[t],r)}get(t=``,n=``,r=`stripTags`){let i=this.req.query;return t===``?i:this.has(t)?e.filterSafeData(i[t],r):n}has(e){let t=this.req.query;return Array.isArray(e)?e.every(e=>t[e]!==void 0):t[e]!==void 0}hasPost(e){return Array.isArray(e)?e.every(e=>this.body[e]!==void 0):this.body[e]!==void 0}getHeader(e){return this.req.headers[e.toLowerCase()]?.toString()||``}static filterSafeData(t,n=`stripTags`,r=``){if(typeof t==`number`)return t;if(n===`ids`)return Array.isArray(t)?e.filterIds(t):e.filterIds([t]);if(n===`stringIds`)return Array.isArray(t)?e.filterStringIds(t):e.filterStringIds([t]);if(n===`strings`)return Array.isArray(t)?e.filterStrings(t):e.filterStrings([t]);if(n===`dQuoteIds`)return Array.isArray(t)?e.filterDQuoteIds(t):e.filterDQuoteIds([t]);if(n===`int`||n===`number`){let e=Number(t);if(e>2**53-1)throw Error(`invalid_max_safe_integer`);if(e<-(2**53-1))throw Error(`invalid_min_safe_integer`);return Number.isNaN(e)?r:n===`int`?Math.trunc(e):e}if(n===`decimal`)return F(t);if(typeof t==`string`){if(n===`stripTags`)return t.replace(/<[^>]*>?/gm,``).trim();if(n===`html`)return e.filterHtml(t);if(n===`date`||n===`datetime`){let e=s(t);return o(e)?a(e,n===`date`?`yyyy-MM-dd`:`yyyy-MM-dd HH:mm:ss`):null}}return n===`raw`?e.parseRawInput(t):typeof t===n?t:``}static parseRawInput(e){if(typeof e!=`string`)return e;try{return JSON.parse(e)}catch{return e}}static filterHtml(e){return typeof e==`string`?e.replace(/<(script|style|meta)[^>]*>[\s\S]*?<\/\1>|<(script|style|meta)[^>]*\/?>/gi,``):``}static filterIds(e){if(typeof e==`string`){let t=I(e,void 0);if(Array.isArray(t))e=t;else if(!Number.isNaN(Number(e)))e=[Number(e)];else return[]}return Array.isArray(e)?[...new Set(e.map(e=>Number(e)).filter(e=>!Number.isNaN(e)))]:[]}static filterStringIds(e){return typeof e==`string`&&(e=I(e,[])),Array.isArray(e)?this.filterIds(e).map(e=>e.toString()):[]}static filterStrings(e){return[...new Set(e.map(e=>this.filterSafeData(e,`stripTags`)))]}static filterDQuoteIds(e){return this.filterIds(e).map(e=>`%"${e}"%`)}},W=class{static createToken(e,t){let{JWT_KEY:n,JWT_AUD:r,JWT_ISS:i}=process.env,a=Number(process.env.JWT_TIMEOUT||3600),o=t.ip,s=t.headers[`user-agent`],c=Math.floor(Date.now()/1e3),u={iss:i,aud:r,sub:e.id,name:e.fullname,ip:o,us:s,iat:c,exp:c+a,expired:(c+a)*1e3};return l.sign(u,n||``,{algorithm:`HS256`})}static verifyToken(e){let{JWT_KEY:t}=process.env,n=e.cookies?.accessToken;if(!n)throw Error(`invalid_cookie_access_token`);let r=l.verify(n,t||``,{ignoreExpiration:!0});if(!r?.sub)throw Error(`invalid_userId_access_token`);let i=e.headers[`user-agent`]||`unkowwn`;if(r.us!==i)throw Error(`invalid_us_access_token`);if(r.ip&&r.ip!==e.ip)throw Error(`invalid_ip_access_token`);return r.accessToken=n,r}static checkSecretKey(e){if(!process.env.JWT_SECRET_KEY)throw Error(`missing_jwt_secret_key`);if(e!=process.env.JWT_SECRET_KEY)throw Error(`invalid_secret_key`)}};let G=null;function K(e,t){return Object.fromEntries(Object.entries(e).map(([e,n])=>[e,new n(t)]))}function q(e,t){return G||=K(e,t),G}function J(){if(!G)throw Error(`Models chưa init`);return G}var Y=class{pool;constructor(e){this.pool=e}async get(e,t){try{let[n]=await this.pool.query(`SELECT data FROM sessions WHERE sid = ?`,[e]);if(!n.length)return t(null,null);t(null,JSON.parse(n[0].data))}catch(e){t(e)}}async set(e,t,n){try{let r=JSON.stringify(t);await this.pool.query(`INSERT INTO sessions (sid, data, expires) VALUES (?, ?, DATE_ADD(NOW(), INTERVAL 14 DAY)) ON DUPLICATE KEY UPDATE data = VALUES(data), expires = VALUES(expires)`,[e,r]),n(null)}catch(e){n(e)}}async destroy(e,t){try{await this.pool.query(`DELETE FROM sessions WHERE sid = ?`,[e]),t(null)}catch(e){t(e)}}},X=class{routes=[];static getMethod(e){return e.method?e.method:`get`}add(e,t=[]){let n=[];t.forEach(t=>{t.link=e+t.link,n.push(t)}),this.routes=this.routes.length?[...this.routes,...n]:n}addGS(e,t,n){let r=[{link:e+`/getList`,module:n,controller:t,action:`index`},{link:e+`/detail/:code([0-9]+)`,module:n,controller:t,action:`detail`},{link:e+`/create`,module:n,controller:t,action:`update`,method:`post`},{link:e+`/edit/:code([0-9]+)`,module:n,controller:t,action:`update`,method:`post`},{link:e+`/copy`,module:n,controller:t,action:`copy`,method:`post`},{link:e+`/import`,module:n,controller:t,action:`import`,method:`post`},{link:e+`/export`,module:n,controller:t,action:`export`},{link:e+`/delete/:code([0-9]+)`,module:n,controller:t,action:`deleteOne`},{link:e+`/delete`,module:n,controller:t,action:`delete`,method:`post`}];this.routes=this.routes.length?[...this.routes,...r]:r}getRouter(){return this.routes}};const Z=new Set([`password`,`token`,`accessToken`,`refreshToken`,`secret`,`apiKey`,`authorization`]);function Q(e,t=``){return e==null||typeof e==`string`||typeof e==`number`||typeof e==`boolean`?e:Array.isArray(e)?e.map(e=>Q(e,t)):typeof e==`object`?Object.entries(e).reduce((e,[t,n])=>{let r=t.toLowerCase();return Z.has(r)||r.includes(`password`)||r.includes(`token`)||r.includes(`secret`)||(e[t]=Q(n,t)),e},{}):e}function $(e,t,n=[]){let r=new Set([...n,`updatedAt`,`createdAt`,`__v`]),i={},a={};return Object.keys(e??{}).forEach(n=>{if(r.has(n))return;let o=t?.[n],s=e?.[n];o!==s&&(i[n]={old:o,new:s}),a[n]=s}),{difference:Q(i),item:Q(a)}}function ee(e,t){return e.length>0?e:!t}export{d as BaseModel,U as FastRequest,H as FileUpload,W as JWTApp,Y as MySQLSessionStore,X as Route,u as Validation,$ as buildAuditLogData,_ as callFetchApi,p as checkPassword,K as createModels,F as decimalNumber,V as ensureCsrfProtection,b as formatDate,v as generateKeywords,D as getActiveStatus,N as getArrColumn,M as getArrOnlyInFirst,ee as getCorsOriginPolicy,B as getCsrfTokenFromRequest,S as getDaysInMonth,A as getDiffArr,L as getLangs,J as getModels,x as getMonthRange,O as getPublishStatus,k as getTrueFlaseStatus,w as getValue,q as initModels,z as isStateChangingMethod,j as isSubArr,f as makePassword,y as parseDate,m as randomText,h as removeVietnameseTones,Q as sanitizeAuditPayload,g as slugify,I as stringToJson,T as sumArrCol,P as sumArrColumn,C as toMySQLDateNowVN,E as toRoman};

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@fastify-core/base",
+  "version": "1.0.0",
+  "type": "module",
+  "description": "",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs"
+    }
+  },
+  "files": [
+    "dist",
+    "scripts/postinstall.cjs",
+    "README.md"
+  ],
+  "scripts": {
+    "test": "tsc --noEmit && oxlint .",
+    "build": "tsdown",
+    "pack": "npm run build && npm pack",
+    "prepublishOnly": "npm run build",
+    "postinstall": "node scripts/postinstall.cjs"
+  },
+  "keywords": [],
+  "author": "MIT",
+  "license": "ISC",
+  "peerDependencies": {
+    "@fastify/mysql": "^5.0.2",
+    "@fastify/session": "^11.1.2",
+    "argon2": "^0.45.0",
+    "date-fns": "^4.4.0",
+    "date-fns-tz": "^3.2.0",
+    "decimal.js": "^10.6.0",
+    "dotenv": "^17.4.2",
+    "fastify": "^5.10.0",
+    "jsonwebtoken": "^9.0.3",
+    "mysql2": "^3.23.3"
+  },
+  "devDependencies": {
+    "@fastify/mysql": "^5.0.2",
+    "@fastify/session": "^11.1.2",
+    "@types/jsonwebtoken": "^9.0.10",
+    "@types/node": "^26.2.0",
+    "argon2": "^0.45.0",
+    "date-fns": "^4.4.0",
+    "date-fns-tz": "^3.2.0",
+    "decimal.js": "^10.6.0",
+    "dotenv": "^17.4.2",
+    "fastify": "^5.10.0",
+    "jsonwebtoken": "^9.0.3",
+    "mysql2": "^3.23.3",
+    "oxlint": "^1.74.0",
+    "ts-node": "^10.9.2",
+    "tsdown": "^0.22.14",
+    "typescript": "^6.0.3"
+  },
+  "engines": {
+    "node": ">=24"
+  }
+}

package/scripts/postinstall.cjs

@@ -0,0 +1,80 @@
+const fs = require('fs');
+const path = require('path');
+const { spawn } = require('child_process');
+
+try {
+  // 1. Xác định thư mục gốc dự án
+  const projectRoot = process.env.INIT_CWD || (() => {
+    let currentDir = __dirname;
+    while (currentDir !== path.parse(currentDir).root) {
+      if (path.basename(currentDir) === 'node_modules') {
+        return path.dirname(currentDir);
+      }
+      currentDir = path.dirname(currentDir);
+    }
+    return null;
+  })();
+
+  if (projectRoot) {
+    const projectPackageJsonPath = path.join(projectRoot, 'package.json');
+
+    // 🌟 THAY ĐỔI Ở ĐÂY: Nếu file package.json KHÔNG tồn tại, tự động tạo mới một file rỗng hợp lệ
+    if (!fs.existsSync(projectPackageJsonPath)) {
+      const defaultPkg = {
+        name: path.basename(projectRoot) || "my-admin-project",
+        version: "1.0.0",
+        private: true,
+        dependencies: {}
+      };
+      fs.writeFileSync(projectPackageJsonPath, JSON.stringify(defaultPkg, null, 2), 'utf-8');
+    }
+
+    // 2. Đọc peerDependencies của thư viện
+    const myPackageJsonPath = path.resolve(__dirname, '../package.json');
+    const myPackageJson = JSON.parse(fs.readFileSync(myPackageJsonPath, 'utf-8'));
+    const peerDeps = myPackageJson.peerDependencies || {};
+    const peerDepsStr = JSON.stringify(peerDeps);
+
+    // 3. Tách một tiến trình độc lập chạy bằng Node.js ngầm
+    const child = spawn('node', ['-e', `
+      setTimeout(() => {
+        const fs = require('fs');
+        try {
+          const targetPath = '${projectPackageJsonPath.replace(/\\/g, '\\\\')}';
+          
+          // Đọc file (lúc này chắc chắn đã tồn tại vì ta đã tạo ở tiến trình cha)
+          let projectPkg = {};
+          if (fs.existsSync(targetPath)) {
+            projectPkg = JSON.parse(fs.readFileSync(targetPath, 'utf-8'));
+          }
+
+          if (!projectPkg.dependencies) projectPkg.dependencies = {};
+          
+          const peerDeps = ${peerDepsStr};
+          let hasChanged = false;
+          
+          Object.keys(peerDeps).forEach((dep) => {
+            const inDeps = projectPkg.dependencies && projectPkg.dependencies[dep];
+            const inDevDeps = projectPkg.devDependencies && projectPkg.devDependencies[dep];
+            if (!inDeps && !inDevDeps) {
+              projectPkg.dependencies[dep] = peerDeps[dep];
+              hasChanged = true;
+            }
+          });
+          
+          if (hasChanged) {
+            fs.writeFileSync(targetPath, JSON.stringify(projectPkg, null, 2), 'utf-8');
+            console.log('\\n\\x1b[32m%s\\x1b[0m', '✅ [MaterialUI Admin] Đã tự động tạo và chèn các dependencies thành công!');
+          }
+        } catch(e) {}
+      }, 1500);
+    `], {
+      detached: true,
+      stdio: 'ignore'
+    });
+
+    child.unref();
+  }
+} catch (error) {
+  // Bỏ qua lỗi dev
+}