@flowerforce/flowerbase 1.6.3-beta.6 → 1.7.0

package/CHANGELOG.md

@@ -1,3 +1,19 @@
+## 1.7.0 (2026-02-04)
+
+
+### 🚀 Features
+
+- setup monit page ([7638e37](https://github.com/flowerforce/flowerbase/commit/7638e37))
+
+
+### 🩹 Fixes
+
+- monit separate css js html ([e62feea](https://github.com/flowerforce/flowerbase/commit/e62feea))
+
+- error monit ([68b4a56](https://github.com/flowerforce/flowerbase/commit/68b4a56))
+
+- monit edit code function ([e25ef2b](https://github.com/flowerforce/flowerbase/commit/e25ef2b))
+
 ## 1.6.2 (2026-01-30)
 
 

package/README.md

@@ -15,7 +15,7 @@ Monitor Key capabilities:
 - Functions panel: list functions, view code (if allowed), invoke functions with custom args, and review recent invocation history.
 - Endpoints panel: list HTTP endpoints and invoke them with custom method, headers, query, and payload.
 - Users panel: search auth/custom users, create users, reset passwords, and enable/disable accounts.
-- Collections panel: list collections, inspect rules snapshot for a given user/system context, and run query/aggregate with pagination + history.
+- Collections panel: list collections, inspect rules snapshot for a given user/system context, and run queries/aggregations with pagination + history.
 
 #### 🧠 Features Summary
 | Feature                  | Status                                  |

package/dist/auth/utils.d.ts

@@ -1,3 +1,7 @@
+export declare const PASSWORD_RULES: {
+    readonly minLength: 6;
+    readonly maxLength: 128;
+};
 export declare const LOGIN_SCHEMA: {
     tags: string[];
     body: {
@@ -10,9 +14,9 @@ export declare const LOGIN_SCHEMA: {
                 maxLength: number;
             };
             password: {
+                minLength: 6;
+                maxLength: 128;
                 type: string;
-                minLength: number;
-                maxLength: number;
             };
         };
         required: string[];
@@ -45,9 +49,9 @@ export declare const RESET_CALL_SCHEMA: {
                 maxLength: number;
             };
             password: {
+                minLength: 6;
+                maxLength: 128;
                 type: string;
-                minLength: number;
-                maxLength: number;
             };
             arguments: {
                 type: string;
@@ -62,9 +66,9 @@ export declare const CONFIRM_RESET_SCHEMA: {
         type: string;
         properties: {
             password: {
+                minLength: 6;
+                maxLength: 128;
                 type: string;
-                minLength: number;
-                maxLength: number;
             };
             token: {
                 type: string;
@@ -118,9 +122,9 @@ export declare const REGISTRATION_SCHEMA: {
                 maxLength: number;
             };
             password: {
+                minLength: 6;
+                maxLength: 128;
                 type: string;
-                minLength: number;
-                maxLength: number;
             };
         };
         required: string[];

package/dist/auth/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/auth/utils.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;CAexB,CAAA;AAED,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;CAc7B,CAAA;AAED,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;CAgB7B,CAAA;AAED,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;CAWhC,CAAA;AAED,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;CAU/B,CAAA;AAED,eAAO,MAAM,YAAY;;;;;;;;;;;;;;CAAoB,CAAA;AAE7C,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;CAe/B,CAAA;AAED,oBAAY,cAAc;IACxB,KAAK,WAAW;IAChB,YAAY,cAAc;IAC1B,OAAO,aAAa;IACpB,OAAO,aAAa;IACpB,OAAO,aAAa;IACpB,KAAK,gBAAgB;IACrB,UAAU,gBAAgB;IAC1B,aAAa,WAAW;IACxB,UAAU,sBAAsB;CACjC;AAED,oBAAY,WAAW;IACrB,mBAAmB,wBAAwB;IAC3C,aAAa,mCAAmC;IAChD,oBAAoB,sCAAsC;IAC1D,sBAAsB,2BAA2B;IACjD,kBAAkB,uBAAuB;CAC1C;AAED,MAAM,WAAW,UAAU;IACzB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,aAAa,CAAA;IAC/B,iBAAiB,EAAE,cAAc,CAAA;IACjC,WAAW,CAAC,EAAE,QAAQ,CAAA;CACvB;AAED,UAAU,MAAM;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;CAClB;AACD,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE;QACN,kBAAkB,EAAE,MAAM,CAAA;KAC3B,CAAA;CACF;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,WAAW,CAAA;IACjB,IAAI,EAAE,WAAW,CAAA;IACjB,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,MAAM;IACrB,WAAW,EAAE,OAAO,CAAA;IACpB,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,iBAAiB,EAAE,MAAM,CAAA;IACzB,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,OAAO,CAAA;IAChC,gBAAgB,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,8BAA8B,EAAE,MAAM,CAAA;CACvC;AAMD;;;GAGG;AACH,eAAO,MAAM,cAAc,QAAO,UAuCjC,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAAO,oBAarC,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,eAAW,WAG3C,CAAA"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/auth/utils.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,cAAc;;;CAA4C,CAAC;AACxE,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;CAexB,CAAA;AAED,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;CAc7B,CAAA;AAED,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;CAgB7B,CAAA;AAED,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;CAWhC,CAAA;AAED,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;CAU/B,CAAA;AAED,eAAO,MAAM,YAAY;;;;;;;;;;;;;;CAAoB,CAAA;AAE7C,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;CAe/B,CAAA;AAED,oBAAY,cAAc;IACxB,KAAK,WAAW;IAChB,YAAY,cAAc;IAC1B,OAAO,aAAa;IACpB,OAAO,aAAa;IACpB,OAAO,aAAa;IACpB,KAAK,gBAAgB;IACrB,UAAU,gBAAgB;IAC1B,aAAa,WAAW;IACxB,UAAU,sBAAsB;CACjC;AAED,oBAAY,WAAW;IACrB,mBAAmB,wBAAwB;IAC3C,aAAa,mCAAmC;IAChD,oBAAoB,sCAAsC;IAC1D,sBAAsB,2BAA2B;IACjD,kBAAkB,uBAAuB;CAC1C;AAED,MAAM,WAAW,UAAU;IACzB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,aAAa,CAAA;IAC/B,iBAAiB,EAAE,cAAc,CAAA;IACjC,WAAW,CAAC,EAAE,QAAQ,CAAA;CACvB;AAED,UAAU,MAAM;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;CAClB;AACD,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE;QACN,kBAAkB,EAAE,MAAM,CAAA;KAC3B,CAAA;CACF;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,WAAW,CAAA;IACjB,IAAI,EAAE,WAAW,CAAA;IACjB,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,MAAM;IACrB,WAAW,EAAE,OAAO,CAAA;IACpB,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,iBAAiB,EAAE,MAAM,CAAA;IACzB,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,OAAO,CAAA;IAChC,gBAAgB,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,8BAA8B,EAAE,MAAM,CAAA;CACvC;AAMD;;;GAGG;AACH,eAAO,MAAM,cAAc,QAAO,UAuCjC,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAAO,oBAarC,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,eAAW,WAG3C,CAAA"}

package/dist/auth/utils.js

@@ -3,11 +3,12 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.generatePassword = exports.loadCustomUserData = exports.loadAuthConfig = exports.AUTH_ERRORS = exports.AUTH_ENDPOINTS = exports.REGISTRATION_SCHEMA = exports.RESET_SCHEMA = exports.CONFIRM_USER_SCHEMA = exports.CONFIRM_RESET_SCHEMA = exports.RESET_CALL_SCHEMA = exports.RESET_SEND_SCHEMA = exports.LOGIN_SCHEMA = void 0;
+exports.generatePassword = exports.loadCustomUserData = exports.loadAuthConfig = exports.AUTH_ERRORS = exports.AUTH_ENDPOINTS = exports.REGISTRATION_SCHEMA = exports.RESET_SCHEMA = exports.CONFIRM_USER_SCHEMA = exports.CONFIRM_RESET_SCHEMA = exports.RESET_CALL_SCHEMA = exports.RESET_SEND_SCHEMA = exports.LOGIN_SCHEMA = exports.PASSWORD_RULES = void 0;
 const crypto_1 = __importDefault(require("crypto"));
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const CHARSET = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()-_=+[]{};:,.<>?";
+exports.PASSWORD_RULES = { minLength: 6, maxLength: 128 };
 exports.LOGIN_SCHEMA = {
     tags: ['Auth'],
     body: {
@@ -19,7 +20,7 @@ exports.LOGIN_SCHEMA = {
                 minLength: 5,
                 maxLength: 254
             },
-            password: { type: 'string', minLength: 6, maxLength: 128 }
+            password: Object.assign({ type: 'string' }, exports.PASSWORD_RULES)
         },
         required: ['username', 'password']
     }
@@ -50,7 +51,7 @@ exports.RESET_CALL_SCHEMA = {
                 minLength: 5,
                 maxLength: 254
             },
-            password: { type: 'string', minLength: 6, maxLength: 128 },
+            password: Object.assign({ type: 'string' }, exports.PASSWORD_RULES),
             arguments: { type: 'array' }
         },
         required: ['email', 'password']
@@ -61,7 +62,7 @@ exports.CONFIRM_RESET_SCHEMA = {
     body: {
         type: 'object',
         properties: {
-            password: { type: 'string', minLength: 6, maxLength: 128 },
+            password: Object.assign({ type: 'string' }, exports.PASSWORD_RULES),
             token: { type: 'string' },
             tokenId: { type: 'string' }
         },
@@ -91,7 +92,7 @@ exports.REGISTRATION_SCHEMA = {
                 minLength: 5,
                 maxLength: 254
             },
-            password: { type: 'string', minLength: 6, maxLength: 128 }
+            password: Object.assign({ type: 'string' }, exports.PASSWORD_RULES)
         },
         required: ['email', 'password']
     }

package/dist/monitoring/routes/functions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"functions.d.ts","sourceRoot":"","sources":["../../../src/monitoring/routes/functions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAK9C,OAAO,EAAiB,mBAAmB,EAAmB,YAAY,EAAgC,MAAM,UAAU,CAAA;AAE1H,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,OAAO,CAAA;IAClB,WAAW,EAAE,OAAO,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAA;IACvC,kBAAkB,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAA;IACxD,eAAe,EAAE,mBAAmB,EAAE,CAAA;CACvC,CAAA;AAED,eAAO,MAAM,sBAAsB,GAAI,KAAK,eAAe,EAAE,MAAM,kBAAkB,SAyJpF,CAAA"}
+{"version":3,"file":"functions.d.ts","sourceRoot":"","sources":["../../../src/monitoring/routes/functions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAK9C,OAAO,EAAiB,mBAAmB,EAAmB,YAAY,EAAgC,MAAM,UAAU,CAAA;AAE1H,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,OAAO,CAAA;IAClB,WAAW,EAAE,OAAO,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAA;IACvC,kBAAkB,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAA;IACxD,eAAe,EAAE,mBAAmB,EAAE,CAAA;CACvC,CAAA;AAED,eAAO,MAAM,sBAAsB,GAAI,KAAK,eAAe,EAAE,MAAM,kBAAkB,SA8JpF,CAAA"}

package/dist/monitoring/routes/functions.js

@@ -144,7 +144,12 @@ const registerFunctionRoutes = (app, deps) => {
                 type: 'error',
                 source: 'monit',
                 message: `invoke ${name} failed`,
-                data: (0, utils_1.sanitize)({ error })
+                data: (0, utils_1.sanitize)({
+                    error,
+                    user: userInfo,
+                    invokedFrom: name,
+                    runAsSystem: effectiveRunAsSystem
+                })
             });
             reply.code(500);
             const details = (0, utils_1.getErrorDetails)(error);

package/dist/monitoring/routes/users.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../../src/monitoring/routes/users.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAM9C,OAAO,EAAiB,YAAY,EAAY,MAAM,UAAU,CAAA;AAEhE,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAA;CACxC,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAI,KAAK,eAAe,EAAE,MAAM,cAAc,SAkO5E,CAAA"}
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../../src/monitoring/routes/users.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAO9C,OAAO,EAAiB,YAAY,EAAY,MAAM,UAAU,CAAA;AAEhE,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAA;CACxC,CAAA;AAYD,eAAO,MAAM,kBAAkB,GAAI,KAAK,eAAe,EAAE,MAAM,cAAc,SAoP5E,CAAA"}

package/dist/monitoring/routes/users.js

@@ -14,11 +14,21 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerUserRoutes = void 0;
 const mongodb_1 = require("mongodb");
+const utils_1 = require("../../auth/utils");
 const constants_1 = require("../../constants");
 const handleUserRegistration_1 = __importDefault(require("../../shared/handleUserRegistration"));
 const handleUserRegistration_model_1 = require("../../shared/models/handleUserRegistration.model");
 const crypto_1 = require("../../utils/crypto");
-const utils_1 = require("../utils");
+const utils_2 = require("../utils");
+const validatePassword = (password) => {
+    if (password.length < utils_1.PASSWORD_RULES.minLength) {
+        return `Password must be at least ${utils_1.PASSWORD_RULES.minLength} characters`;
+    }
+    if (password.length > utils_1.PASSWORD_RULES.maxLength) {
+        return `Password must be at most ${utils_1.PASSWORD_RULES.maxLength} characters`;
+    }
+    return '';
+};
 const registerUserRoutes = (app, deps) => {
     const { prefix, addEvent } = deps;
     app.get(`${prefix}/api/users`, (req) => __awaiter(void 0, void 0, void 0, function* () {
@@ -64,7 +74,7 @@ const registerUserRoutes = (app, deps) => {
                 .toArray();
             response.auth = {
                 collection: authCollection,
-                items: authItems.map((doc) => (0, utils_1.sanitize)(doc))
+                items: authItems.map((doc) => (0, utils_2.sanitize)(doc))
             };
         }
         if ((scope === 'all' || scope === 'custom') && userCollection) {
@@ -93,7 +103,7 @@ const registerUserRoutes = (app, deps) => {
                 .toArray();
             response.custom = {
                 collection: userCollection,
-                items: customItems.map((doc) => (0, utils_1.sanitize)(doc)),
+                items: customItems.map((doc) => (0, utils_2.sanitize)(doc)),
                 pagination: {
                     page,
                     pages: totalPages,
@@ -104,6 +114,13 @@ const registerUserRoutes = (app, deps) => {
         }
         return response;
     }));
+    app.get(`${prefix}/api/users/config`, () => __awaiter(void 0, void 0, void 0, function* () {
+        return {
+            providers: (0, utils_1.loadAuthConfig)(),
+            customUserData: (0, utils_1.loadCustomUserData)(),
+            passwordRules: utils_1.PASSWORD_RULES
+        };
+    }));
     app.post(`${prefix}/api/users`, (req, reply) => __awaiter(void 0, void 0, void 0, function* () {
         var _a, _b, _c;
         const body = req.body;
@@ -113,6 +130,11 @@ const registerUserRoutes = (app, deps) => {
             reply.code(400);
             return { error: 'Missing email or password' };
         }
+        const passwordError = validatePassword(password);
+        if (passwordError) {
+            reply.code(400);
+            return { error: passwordError };
+        }
         const result = yield (0, handleUserRegistration_1.default)(app, {
             run_as_system: true,
             provider: handleUserRegistration_model_1.PROVIDER.LOCAL_USERPASS
@@ -126,12 +148,12 @@ const registerUserRoutes = (app, deps) => {
             }, { upsert: true });
         }
         addEvent({
-            id: (0, utils_1.createEventId)(),
+            id: (0, utils_2.createEventId)(),
             ts: Date.now(),
             type: 'auth',
             source: 'monit',
             message: 'user created',
-            data: (0, utils_1.sanitize)({ email, userId })
+            data: (0, utils_2.sanitize)({ email, userId })
         });
         reply.code(201);
         return { userId };
@@ -145,6 +167,11 @@ const registerUserRoutes = (app, deps) => {
             reply.code(400);
             return { error: 'Missing password' };
         }
+        const passwordError = validatePassword(password);
+        if (passwordError) {
+            reply.code(400);
+            return { error: passwordError };
+        }
         const db = app.mongo.client.db(constants_1.DB_NAME);
         const authCollection = (_a = constants_1.AUTH_CONFIG.authCollection) !== null && _a !== void 0 ? _a : 'auth_users';
         const selector = {};
@@ -167,12 +194,12 @@ const registerUserRoutes = (app, deps) => {
             return { error: 'User not found' };
         }
         addEvent({
-            id: (0, utils_1.createEventId)(),
+            id: (0, utils_2.createEventId)(),
             ts: Date.now(),
             type: 'auth',
             source: 'monit',
             message: 'password updated',
-            data: (0, utils_1.sanitize)({ selector })
+            data: (0, utils_2.sanitize)({ selector })
         });
         return { status: 'ok' };
     }));
@@ -204,12 +231,12 @@ const registerUserRoutes = (app, deps) => {
             return { error: 'User not found' };
         }
         addEvent({
-            id: (0, utils_1.createEventId)(),
+            id: (0, utils_2.createEventId)(),
             ts: Date.now(),
             type: 'auth',
             source: 'monit',
             message: `user status ${status}`,
-            data: (0, utils_1.sanitize)({ selector, status })
+            data: (0, utils_2.sanitize)({ selector, status })
         });
         return { status: 'ok' };
     }));

package/dist/services/mongodb-atlas/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/mongodb-atlas/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAyC,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAs8BrF,QAAA,MAAM,YAAY,EAAE,oBAuBlB,CAAA;AAEF,eAAe,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/mongodb-atlas/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAyC,oBAAoB,EAAE,MAAM,SAAS,CAAA;AA0+BrF,QAAA,MAAM,YAAY,EAAE,oBAuBlB,CAAA;AAEF,eAAe,YAAY,CAAA"}

package/dist/services/mongodb-atlas/index.js

@@ -15,9 +15,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const get_1 = __importDefault(require("lodash/get"));
 const isEqual_1 = __importDefault(require("lodash/isEqual"));
 const utils_1 = require("../../monitoring/utils");
-const monitoring_1 = require("../monitoring");
 const machines_1 = require("../../utils/roles/machines");
 const utils_2 = require("../../utils/roles/machines/utils");
+const monitoring_1 = require("../monitoring");
 const model_1 = require("./model");
 const utils_3 = require("./utils");
 //TODO aggiungere no-sql inject security
@@ -80,11 +80,12 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
         collection: collName
     });
     const emitMongoEvent = (operation, meta, error) => {
+        const userId = getUserId(user);
         (0, monitoring_1.emitServiceEvent)({
             type: 'mongo',
             source: 'service:mongodb-atlas',
             message: error ? `mongo ${operation} failed` : `mongo ${operation}`,
-            data: Object.assign({ operation, collection: collName, runAsSystem: !!run_as_system, rules: rulesMeta }, (meta !== null && meta !== void 0 ? meta : {})),
+            data: Object.assign(Object.assign(Object.assign({ operation, collection: collName, runAsSystem: !!run_as_system }, (userId ? { userId } : {})), { rules: rulesMeta }), (meta !== null && meta !== void 0 ? meta : {})),
             error,
             origin: monitoringOrigin
         });
@@ -109,7 +110,6 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
        */
         findOne: (...args_1) => __awaiter(void 0, [...args_1], void 0, function* (query = {}, projection, options) {
             var _a;
-            emitMongoEvent('findOne');
             try {
                 const resolvedOptions = projection || options
                     ? Object.assign(Object.assign({}, (options !== null && options !== void 0 ? options : {})), (projection ? { projection } : {})) : undefined;
@@ -153,10 +153,14 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
                         }, user)
                         : fallbackAccess(result);
                     // Return validated document or empty object if not permitted
-                    return Promise.resolve(status ? document : {});
+                    const response = status ? document : {};
+                    emitMongoEvent('findOne');
+                    return Promise.resolve(response);
                 }
                 // System mode: no validation applied
-                return collection.findOne(resolvedQuery, resolvedOptions);
+                const response = yield collection.findOne(resolvedQuery, resolvedOptions);
+                emitMongoEvent('findOne');
+                return response;
             }
             catch (error) {
                 emitMongoEvent('findOne', undefined, error);
@@ -183,7 +187,6 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
          */
         deleteOne: (...args_1) => __awaiter(void 0, [...args_1], void 0, function* (query = {}, options) {
             var _a;
-            emitMongoEvent('deleteOne');
             try {
                 if (!run_as_system) {
                     (0, utils_3.checkDenyOperation)(normalizedRules, collection.collectionName, model_1.CRUD_OPERATIONS.DELETE);
@@ -208,10 +211,14 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
                     if (!status) {
                         throw new Error('Delete not permitted');
                     }
-                    return collection.deleteOne({ $and: formattedQuery }, options);
+                    const res = yield collection.deleteOne({ $and: formattedQuery }, options);
+                    emitMongoEvent('deleteOne');
+                    return res;
                 }
                 // System mode: bypass access control
-                return collection.deleteOne(query, options);
+                const result = yield collection.deleteOne(query, options);
+                emitMongoEvent('deleteOne');
+                return result;
             }
             catch (error) {
                 emitMongoEvent('deleteOne', undefined, error);
@@ -238,7 +245,6 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
          * This ensures that only users with the correct permissions can insert data into the collection.
          */
         insertOne: (data, options) => __awaiter(void 0, void 0, void 0, function* () {
-            emitMongoEvent('insertOne');
             try {
                 if (!run_as_system) {
                     (0, utils_3.checkDenyOperation)(normalizedRules, collection.collectionName, model_1.CRUD_OPERATIONS.CREATE);
@@ -261,10 +267,13 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
                         insertedId: insertResult.insertedId.toString(),
                         document: data
                     });
+                    emitMongoEvent('insertOne');
                     return insertResult;
                 }
                 // System mode: insert without validation
-                return collection.insertOne(data, options);
+                const insertResult = yield collection.insertOne(data, options);
+                emitMongoEvent('insertOne');
+                return insertResult;
             }
             catch (error) {
                 emitMongoEvent('insertOne', undefined, error);
@@ -293,7 +302,6 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
          *  - If validation fails, throws an error; otherwise, updates the document.
          */
         updateOne: (query, data, options) => __awaiter(void 0, void 0, void 0, function* () {
-            emitMongoEvent('updateOne');
             try {
                 if (!run_as_system) {
                     (0, utils_3.checkDenyOperation)(normalizedRules, collection.collectionName, model_1.CRUD_OPERATIONS.UPDATE);
@@ -341,9 +349,13 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
                     if (!status || !areDocumentsEqual) {
                         throw new Error('Update not permitted');
                     }
-                    return collection.updateOne({ $and: safeQuery }, data, options);
+                    const res = yield collection.updateOne({ $and: safeQuery }, data, options);
+                    emitMongoEvent('updateOne');
+                    return res;
                 }
-                return collection.updateOne(query, data, options);
+                const result = yield collection.updateOne(query, data, options);
+                emitMongoEvent('updateOne');
+                return result;
             }
             catch (error) {
                 emitMongoEvent('updateOne', undefined, error);
@@ -362,7 +374,6 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
          */
         findOneAndUpdate: (query, data, options) => __awaiter(void 0, void 0, void 0, function* () {
             var _a;
-            emitMongoEvent('findOneAndUpdate');
             try {
                 if (!run_as_system) {
                     (0, utils_3.checkDenyOperation)(normalizedRules, collection.collectionName, model_1.CRUD_OPERATIONS.UPDATE);
@@ -405,6 +416,7 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
                         ? yield collection.findOneAndUpdate({ $and: safeQuery }, data, options)
                         : yield collection.findOneAndUpdate({ $and: safeQuery }, data);
                     if (!updateResult) {
+                        emitMongoEvent('findOneAndUpdate');
                         return updateResult;
                     }
                     const readRole = (0, utils_2.getWinningRole)(updateResult, user, roles);
@@ -417,11 +429,14 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
                         }, user)
                         : fallbackAccess(updateResult);
                     const sanitizedDoc = readResult.status ? ((_a = readResult.document) !== null && _a !== void 0 ? _a : updateResult) : {};
+                    emitMongoEvent('findOneAndUpdate');
                     return sanitizedDoc;
                 }
-                return options
-                    ? collection.findOneAndUpdate(query, data, options)
-                    : collection.findOneAndUpdate(query, data);
+                const updateResult = options
+                    ? yield collection.findOneAndUpdate(query, data, options)
+                    : yield collection.findOneAndUpdate(query, data);
+                emitMongoEvent('findOneAndUpdate');
+                return updateResult;
             }
             catch (error) {
                 emitMongoEvent('findOneAndUpdate', undefined, error);
@@ -449,7 +464,6 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
          * This ensures that both pre-query filtering and post-query validation are applied consistently.
          */
         find: (query = {}, projection, options) => {
-            emitMongoEvent('find');
             try {
                 const resolvedOptions = projection || options
                     ? Object.assign(Object.assign({}, (options !== null && options !== void 0 ? options : {})), (projection ? { projection } : {})) : undefined;
@@ -489,33 +503,39 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
                         })));
                         return filteredResponse.filter(Boolean);
                     });
+                    emitMongoEvent('find');
                     return cursor;
                 }
                 // System mode: return original unfiltered cursor
-                return collection.find(query, resolvedOptions);
+                const cursor = collection.find(query, resolvedOptions);
+                emitMongoEvent('find');
+                return cursor;
             }
             catch (error) {
                 emitMongoEvent('find', undefined, error);
                 throw error;
             }
         },
-        count: (query, options) => {
-            emitMongoEvent('count');
+        count: (query, options) => __awaiter(void 0, void 0, void 0, function* () {
             try {
                 if (!run_as_system) {
                     (0, utils_3.checkDenyOperation)(normalizedRules, collection.collectionName, model_1.CRUD_OPERATIONS.READ);
                     const formattedQuery = (0, utils_3.getFormattedQuery)(filters, query, user);
                     const currentQuery = formattedQuery.length ? { $and: formattedQuery } : {};
                     logService('count query', { collName, currentQuery });
-                    return collection.countDocuments(currentQuery, options);
+                    const result = yield collection.countDocuments(currentQuery, options);
+                    emitMongoEvent('count');
+                    return result;
                 }
-                return collection.countDocuments(query, options);
+                const result = yield collection.countDocuments(query, options);
+                emitMongoEvent('count');
+                return result;
             }
             catch (error) {
                 emitMongoEvent('count', undefined, error);
                 throw error;
             }
-        },
+        }),
         /**
          * Watches changes on a MongoDB collection with optional role-based filtering of change events.
          *
@@ -536,7 +556,6 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
          * This allows fine-grained control over what change events a user can observe, based on roles and filters.
          */
         watch: (pipeline = [], options) => {
-            emitMongoEvent('watch');
             try {
                 if (!run_as_system) {
                     (0, utils_3.checkDenyOperation)(normalizedRules, collection.collectionName, model_1.CRUD_OPERATIONS.READ);
@@ -589,10 +608,13 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
                             listener(filteredChange);
                         }));
                     };
+                    emitMongoEvent('watch');
                     return result;
                 }
                 // System mode: no filtering applied
-                return collection.watch(pipeline, options);
+                const result = collection.watch(pipeline, options);
+                emitMongoEvent('watch');
+                return result;
             }
             catch (error) {
                 emitMongoEvent('watch', undefined, error);
@@ -601,10 +623,11 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
         },
         //TODO -> add filter & rules in aggregate
         aggregate: (pipeline = [], options, isClient) => {
-            emitMongoEvent('aggregate');
             try {
                 if (run_as_system || !isClient) {
-                    return collection.aggregate(pipeline, options);
+                    const cursor = collection.aggregate(pipeline, options);
+                    emitMongoEvent('aggregate');
+                    return cursor;
                 }
                 (0, utils_3.checkDenyOperation)(normalizedRules, collection.collectionName, model_1.CRUD_OPERATIONS.READ);
                 const rulesConfig = collectionRules !== null && collectionRules !== void 0 ? collectionRules : { filters, roles };
@@ -631,6 +654,7 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
                 const originalCursor = collection.aggregate(guardedPipeline, options);
                 const newCursor = Object.create(originalCursor);
                 newCursor.toArray = () => __awaiter(void 0, void 0, void 0, function* () { return originalCursor.toArray(); });
+                emitMongoEvent('aggregate');
                 return newCursor;
             }
             catch (error) {
@@ -656,7 +680,6 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
          * Only documents passing validation will be inserted.
          */
         insertMany: (documents, options) => __awaiter(void 0, void 0, void 0, function* () {
-            emitMongoEvent('insertMany');
             try {
                 if (!run_as_system) {
                     (0, utils_3.checkDenyOperation)(normalizedRules, collection.collectionName, model_1.CRUD_OPERATIONS.CREATE);
@@ -677,10 +700,14 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
                     if (!canInsert) {
                         throw new Error('Insert not permitted');
                     }
-                    return collection.insertMany(documents, options);
+                    const result = yield collection.insertMany(documents, options);
+                    emitMongoEvent('insertMany');
+                    return result;
                 }
                 // If system mode is active, insert all documents without validation
-                return collection.insertMany(documents, options);
+                const result = yield collection.insertMany(documents, options);
+                emitMongoEvent('insertMany');
+                return result;
             }
             catch (error) {
                 emitMongoEvent('insertMany', undefined, error);
@@ -688,7 +715,6 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
             }
         }),
         updateMany: (query, data, options) => __awaiter(void 0, void 0, void 0, function* () {
-            emitMongoEvent('updateMany');
             try {
                 if (!run_as_system) {
                     (0, utils_3.checkDenyOperation)(normalizedRules, collection.collectionName, model_1.CRUD_OPERATIONS.UPDATE);
@@ -734,9 +760,13 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
                         console.log('check1 In updateMany --> (!areDocumentsEqual)');
                         throw new Error('Update not permitted');
                     }
-                    return collection.updateMany({ $and: formattedQuery }, data, options);
+                    const res = yield collection.updateMany({ $and: formattedQuery }, data, options);
+                    emitMongoEvent('updateMany');
+                    return res;
                 }
-                return collection.updateMany(query, data, options);
+                const result = yield collection.updateMany(query, data, options);
+                emitMongoEvent('updateMany');
+                return result;
             }
             catch (error) {
                 emitMongoEvent('updateMany', undefined, error);
@@ -759,7 +789,6 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
          *  - Deletes only the documents that the current user has permission to delete.
          */
         deleteMany: (...args_1) => __awaiter(void 0, [...args_1], void 0, function* (query = {}, options) {
-            emitMongoEvent('deleteMany');
             try {
                 if (!run_as_system) {
                     (0, utils_3.checkDenyOperation)(normalizedRules, collection.collectionName, model_1.CRUD_OPERATIONS.DELETE);
@@ -783,19 +812,25 @@ const getOperators = (collection, { rules, collName, user, run_as_system, monito
                     // Extract IDs of documents that passed validation
                     const elementsToDelete = filteredItems.filter(Boolean).map(({ _id }) => _id);
                     if (!elementsToDelete.length) {
-                        return Promise.resolve({
+                        const result = {
                             acknowledged: true,
                             deletedCount: 0
-                        });
+                        };
+                        emitMongoEvent('deleteMany');
+                        return Promise.resolve(result);
                     }
                     // Build final delete query with access control and ID filter
                     const deleteQuery = {
                         $and: [...formattedQuery, { _id: { $in: elementsToDelete } }]
                     };
-                    return collection.deleteMany(deleteQuery, options);
+                    const result = yield collection.deleteMany(deleteQuery, options);
+                    emitMongoEvent('deleteMany');
+                    return result;
                 }
                 // If running as system, bypass access control and delete directly
-                return collection.deleteMany(query, options);
+                const result = yield collection.deleteMany(query, options);
+                emitMongoEvent('deleteMany');
+                return result;
             }
             catch (error) {
                 emitMongoEvent('deleteMany', undefined, error);