@galadrim/galadmin 0.2.12 → 0.3.0-alpha.2.1

package/dist/types/config.d.ts

@@ -1,4 +1,14 @@
+import type { DatabaseId } from "./database";
 export type Filter = {};
+export type RootUser = {
+    role: "root";
+};
+export type RegularUser = {
+    role: string;
+    userId?: DatabaseId;
+};
+export type FilterUser = RootUser | RegularUser;
+export declare function isRegularUser(user: FilterUser): user is RegularUser;
 export type BaseTypeColumn = {
     label: string;
     hideInTable?: boolean;
@@ -81,7 +91,7 @@ export type ForeignSelectColumn = {
     selectExpression?: string;
     join?: string;
     filters?: Filter[];
-    filtersFromUser?: (userId: number, role?: string) => string;
+    filtersFromUser?: (user: FilterUser) => string;
     orderBy?: string;
     optional?: boolean;
     formatForeignValue?: (record: any) => string;
@@ -96,7 +106,7 @@ export type ForeignDatalistColumn = {
     selectExpression?: string;
     join?: string;
     filters?: Filter[];
-    filtersFromUser?: (userId: number, role?: string) => string;
+    filtersFromUser?: (user: FilterUser) => string;
     orderBy?: string;
     optional?: boolean;
     formatForeignValue?: (record: any) => string;
@@ -194,7 +204,7 @@ export type TableView = {
     isDesc?: boolean;
     limit?: number;
     filters?: string;
-    filtersFromUser?: (userId: number, role?: string) => string;
+    filtersFromUser?: (user: FilterUser) => string;
     notClickable?: boolean;
     clickToEdit?: boolean;
     openInNewTab?: boolean;
@@ -242,7 +252,7 @@ export type BaseTypePanel = {
     label: string;
     folded?: boolean;
     displayCondition?: (record: any) => boolean;
-};
+} & Pick<BaseTypeView, "roles">;
 export type CreateConfig = {
     label: string;
     recordIdKey: string;
@@ -361,7 +371,7 @@ export type AuthRole = {
 };
 export type TrustedUser = {
     role: string;
-    userId?: string | number;
+    userId?: DatabaseId;
 };
 export type Config = {
     enriched?: boolean;

package/dist/types/config.js

@@ -1,3 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.isRegularUser = isRegularUser;
+function isRegularUser(user) {
+    return user.role !== "root";
+}
 //# sourceMappingURL=config.js.map

package/dist/types/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":""}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":";;AAQA,sCAEC;AAFD,SAAgB,aAAa,CAAC,IAAgB;IAC5C,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC;AAC9B,CAAC"}

package/dist/types/database.d.ts

@@ -0,0 +1 @@
+export type DatabaseId = string | number;

package/dist/types/database.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=database.js.map

package/dist/types/database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../src/types/database.ts"],"names":[],"mappings":""}

package/dist/utils/dbManager.d.ts

@@ -1,12 +1,37 @@
+import * as mysql from "mysql";
+import * as mysql2 from "mysql2";
+import * as pg from "pg";
+type DatabaseValue = string | number | bigint | boolean | null | Date | Buffer | DatabaseValue[] | DatabaseRow;
+export type DatabaseRow = {
+    [column: string]: DatabaseValue;
+};
+type MutationResult = Pick<mysql2.ResultSetHeader, "insertId" | "affectedRows">;
+type QueryRows = DatabaseRow[] | MutationResult | QueryRows[];
+type QueryField = Pick<pg.FieldDef, "name">;
+type QueryFields = (QueryField | QueryField[] | undefined)[];
+type QueryResult = {
+    err: Error | null;
+    rows: QueryRows | undefined;
+    fields: QueryFields | undefined;
+};
+type DatabaseConfig = {
+    useMysql2?: boolean;
+    mysql?: Pick<mysql.PoolConfig, "host" | "user" | "password" | "database" | "port" | "multipleStatements">;
+    postgresql?: Pick<pg.PoolConfig, "host" | "user" | "password" | "database" | "port" | "ssl">;
+};
+type DatabasePool = {
+    query(sql: string, values: mysql2.QueryValues[], callback: (error: Error | null | undefined, result: unknown, fields?: unknown) => void): void;
+};
 export declare function quoteIdentifier(name: string, dbType: string): string;
-export declare function convertQuery(mysqlQuery: any, params: any): {
+export declare function convertQuery(mysqlQuery: string, params: mysql2.QueryValues[]): {
     pgQuery: string;
-    pgParams: any[];
+    pgParams: mysql2.QueryValues[];
 };
-export declare function quotePostgresQuery(query: any): any;
+export declare function quotePostgresQuery(query: string): string;
 export default class dbManager {
-    _db: any;
-    dbType: any;
-    init(config: any): void;
-    query(queryString: any, args?: any[]): Promise<any>;
+    _db?: DatabasePool;
+    dbType?: "MYSQL" | "POSTGRESQL";
+    init(config: DatabaseConfig): void;
+    query(queryString: string, args?: mysql2.QueryValues[]): Promise<QueryResult>;
 }
+export {};

package/dist/utils/dbManager.js

@@ -6,6 +6,53 @@ exports.quotePostgresQuery = quotePostgresQuery;
 const mysql = require("mysql");
 const mysql2 = require("mysql2");
 const pg = require("pg");
+function isDatabaseValue(value) {
+    return value === null || typeof value === "string" || typeof value === "number"
+        || typeof value === "bigint" || typeof value === "boolean"
+        || value instanceof Date || Buffer.isBuffer(value)
+        || (Array.isArray(value) ? value.every(isDatabaseValue)
+            : typeof value === "object" && Object.values(value).every(isDatabaseValue));
+}
+function isDatabaseRow(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        && !(value instanceof Date) && !Buffer.isBuffer(value)
+        && Object.values(value).every(isDatabaseValue);
+}
+function isQueryRows(value) {
+    return Array.isArray(value)
+        ? value.every(isDatabaseRow) || value.every(isQueryRows)
+        : value !== null && typeof value === "object"
+            && "insertId" in value && typeof value.insertId === "number"
+            && "affectedRows" in value && typeof value.affectedRows === "number";
+}
+function isQueryField(value) {
+    return value !== null && typeof value === "object" && "name" in value && typeof value.name === "string";
+}
+function isQueryFields(value) {
+    return Array.isArray(value) && value.every((field) => field === undefined || isQueryField(field) || (Array.isArray(field) && field.every(isQueryField)));
+}
+function readQueryResult(result, fields, postgres) {
+    let rows = result;
+    if (postgres) {
+        if (result === undefined || result === null)
+            return { rows: undefined, fields: undefined };
+        if (typeof result !== "object")
+            throw new TypeError("Invalid PostgreSQL result");
+        rows = "rows" in result ? result.rows : undefined;
+        fields = "fields" in result ? result.fields : undefined;
+    }
+    let checkedFields;
+    if (fields !== undefined) {
+        if (!isQueryFields(fields))
+            throw new TypeError("Invalid database fields");
+        checkedFields = fields;
+    }
+    if (rows === undefined || rows === null)
+        return { rows: undefined, fields: checkedFields };
+    if (isQueryRows(rows))
+        return { rows, fields: checkedFields };
+    throw new TypeError("Invalid database rows");
+}
 function quoteIdentifier(name, dbType) {
     const quoteChar = dbType === "POSTGRESQL" ? '"' : "`";
     return quoteChar + name + quoteChar;
@@ -186,7 +233,7 @@ function quotePostgresQuery(query) {
         }
         else {
             for (let x of part.split(".")) {
-                if (isNaN(x)) {
+                if (isNaN(Number(x))) {
                     wordsToAddQuotes.add(x);
                 }
             }
@@ -205,7 +252,8 @@ function quotePostgresQuery(query) {
 class dbManager {
     init(config) {
         if (config.mysql) {
-            this._db = (config.useMysql2 ? mysql2 : mysql).createPool({
+            const driver = config.useMysql2 ? mysql2 : mysql;
+            this._db = driver.createPool({
                 connectionLimit: 10,
                 host: config.mysql.host,
                 user: config.mysql.user,
@@ -237,12 +285,16 @@ class dbManager {
                 queryString = quotePostgresQuery(result.pgQuery);
                 args = result.pgParams;
             }
+            if (!this._db)
+                throw new TypeError("Cannot read properties of undefined (reading 'query')");
             this._db.query(queryString, args, (a, b, c) => {
-                if (this.dbType === "MYSQL") {
-                    resolve({ err: a, rows: b, fields: c });
-                }
-                else if (this.dbType === "POSTGRESQL") {
-                    resolve({ err: a, rows: b === null || b === void 0 ? void 0 : b.rows, fields: b === null || b === void 0 ? void 0 : b.fields });
+                if (this.dbType === "MYSQL" || this.dbType === "POSTGRESQL") {
+                    try {
+                        resolve(Object.assign({ err: a !== null && a !== void 0 ? a : null }, readQueryResult(b, c, this.dbType === "POSTGRESQL")));
+                    }
+                    catch (error) {
+                        reject(error);
+                    }
                 }
             });
         });

package/dist/utils/dbManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"dbManager.js","sourceRoot":"","sources":["../../src/utils/dbManager.ts"],"names":[],"mappings":";;AAIA,0CAGC;AAqCD,oCAqCC;AAED,gDAyIC;AA5ND,+BAA+B;AAC/B,iCAAiC;AACjC,yBAAyB;AAEzB,SAAgB,eAAe,CAAC,IAAY,EAAE,MAAc;IAC1D,MAAM,SAAS,GAAG,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACtD,OAAO,SAAS,GAAG,IAAI,GAAG,SAAS,CAAC;AACtC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,KAAa;IACvD,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAErC,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACnD,CAAC;IACD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7C,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,CAAC,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACvC,MAAM,gBAAgB,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAEtG,IAAI,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC;IACtB,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,gBAAgB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACvC,KAAK,IAAI,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,OAAO,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5D,KAAK,IAAI,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YACzB,OAAO,KAAK,GAAG,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACJ,KAAK,EAAE,CAAC;QACZ,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AACxB,CAAC;AAED,SAAgB,YAAY,CAAC,UAAU,EAAE,MAAM;IAC7C,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAElB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,SAAS,GAAG,CAAC,CAAC;IAKlB,OAAO,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,qBAAqB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAEjE,IAAI,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACpD,SAAS,GAAG,WAAW,CAAC;QAC1B,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAEtC,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC1B,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAEtB,OAAO,IAAI,IAAI,UAAU,EAAE,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9B,SAAS,EAAE,CAAC;QACd,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,EAAE,CAAC;YACd,SAAS,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAAC,KAAK;IACtC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEjC,MAAM,aAAa,GAAG;QACpB,GAAG;QACH,OAAO;QACP,GAAG;QACH,QAAQ;QACR,QAAQ;QACR,KAAK;QACL,GAAG;QACH,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,MAAM;QACN,OAAO;QACP,KAAK;QACL,IAAI;QACJ,MAAM;QACN,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,OAAO;QACP,MAAM;QACN,QAAQ;QACR,KAAK;QACL,KAAK;QACL,KAAK;QACL,MAAM;QACN,MAAM;QACN,OAAO;QACP,OAAO;QACP,IAAI;QACJ,OAAO;QACP,OAAO;QACP,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,MAAM;QACN,OAAO;QACP,OAAO;QACP,QAAQ;QACR,WAAW;QACX,MAAM;QACN,MAAM;QACN,MAAM;QACN,MAAM;QACN,KAAK;QACL,KAAK;QACL,IAAI;QACJ,UAAU;QACV,cAAc;QACd,KAAK;QACL,UAAU;QACV,QAAQ;QACR,MAAM;QACN,GAAG;QACH,OAAO;QACP,YAAY;QACZ,IAAI;QACJ,GAAG;QACH,UAAU;QACV,KAAK;QACL,KAAK;QACL,KAAK;QACL,SAAS;QACT,QAAQ;QACR,UAAU;QACV,SAAS;QACT,QAAQ;QACR,YAAY;QACZ,OAAO;QACP,MAAM;QACN,WAAW;QACX,YAAY;QACZ,SAAS;QACT,UAAU;QACV,UAAU;QACV,YAAY;QACZ,gBAAgB;QAChB,YAAY;QACZ,SAAS;QACT,WAAW;QACX,WAAW;QACX,UAAU;QACV,UAAU;QACV,UAAU;QACV,UAAU;QACV,IAAI;QACJ,UAAU;QACV,WAAW;KACZ,CAAC;IAEF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAEtC,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,QAAQ,GAAG,CAAC,QAAQ,CAAC;QACvB,CAAC;QAED,IACE,QAAQ;YACR,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YACpB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClB,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAC1C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;oBACb,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,IAAI,IAAI,gBAAgB,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CACzB,IAAI,MAAM,CAAC,gBAAgB,IAAI,cAAc,EAAE,GAAG,CAAC,EACnD,IAAI,IAAI,GAAG,CACZ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACrD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAExD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAqB,SAAS;IAI5B,IAAI,CAAC,MAAM;QACT,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;gBACxD,eAAe,EAAE,EAAE;gBACnB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;gBACvB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;gBACvB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;gBAC/B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI;gBAC/B,OAAO,EAAE,oBAAoB;gBAC7B,WAAW,EAAE,IAAI;gBAIjB,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,KAAK,IAAI;aAC7D,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;QACxB,CAAC;aAAM,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC;gBACrB,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;gBAC5B,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;gBAC5B,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACpC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACpC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI;gBACpC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG;aAC3B,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,GAAG,EAAE;QAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;gBAC/C,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACjD,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;YACzB,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBAC5B,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC1C,CAAC;qBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;oBACxC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,EAAE,MAAM,EAAE,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,EAAE,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAlDD,4BAkDC"}
+{"version":3,"file":"dbManager.js","sourceRoot":"","sources":["../../src/utils/dbManager.ts"],"names":[],"mappings":";;AAgFA,0CAGC;AAqCD,oCAqCC;AAED,gDAyIC;AAxSD,+BAA+B;AAC/B,iCAAiC;AACjC,yBAAyB;AAyBzB,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;WAC1E,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;WACvD,KAAK,YAAY,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;WAC/C,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC;YACrD,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WACtE,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;WACnD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;QACxD,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;eACxC,UAAU,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;eACzD,cAAc,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC;AAC3E,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC1G,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAC5D,KAAK,KAAK,SAAS,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AACvG,CAAC;AAMD,SAAS,eAAe,CAAC,MAAe,EAAE,MAAe,EAAE,QAAiB;IAC1E,IAAI,IAAI,GAAG,MAAM,CAAC;IAClB,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC3F,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACjF,IAAI,GAAG,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,MAAM,GAAG,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC;IACD,IAAI,aAAsC,CAAC;IAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAC3E,aAAa,GAAG,MAAM,CAAC;IACzB,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC3F,IAAI,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC9D,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,eAAe,CAAC,IAAY,EAAE,MAAc;IAC1D,MAAM,SAAS,GAAG,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACtD,OAAO,SAAS,GAAG,IAAI,GAAG,SAAS,CAAC;AACtC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,KAAa;IACvD,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAErC,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACnD,CAAC;IACD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7C,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,CAAC,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACvC,MAAM,gBAAgB,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAEtG,IAAI,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC;IACtB,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,gBAAgB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACvC,KAAK,IAAI,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,OAAO,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5D,KAAK,IAAI,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YACzB,OAAO,KAAK,GAAG,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACJ,KAAK,EAAE,CAAC;QACZ,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AACxB,CAAC;AAED,SAAgB,YAAY,CAAC,UAAkB,EAAE,MAA4B;IAC3E,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,QAAQ,GAAyB,EAAE,CAAC;IAExC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,SAAS,GAAG,CAAC,CAAC;IAKlB,OAAO,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,qBAAqB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAEjE,IAAI,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACpD,SAAS,GAAG,WAAW,CAAC;QAC1B,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAEtC,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC1B,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAEtB,OAAO,IAAI,IAAI,UAAU,EAAE,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9B,SAAS,EAAE,CAAC;QACd,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,EAAE,CAAC;YACd,SAAS,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEjC,MAAM,aAAa,GAAG;QACpB,GAAG;QACH,OAAO;QACP,GAAG;QACH,QAAQ;QACR,QAAQ;QACR,KAAK;QACL,GAAG;QACH,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,MAAM;QACN,OAAO;QACP,KAAK;QACL,IAAI;QACJ,MAAM;QACN,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,OAAO;QACP,MAAM;QACN,QAAQ;QACR,KAAK;QACL,KAAK;QACL,KAAK;QACL,MAAM;QACN,MAAM;QACN,OAAO;QACP,OAAO;QACP,IAAI;QACJ,OAAO;QACP,OAAO;QACP,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,MAAM;QACN,OAAO;QACP,OAAO;QACP,QAAQ;QACR,WAAW;QACX,MAAM;QACN,MAAM;QACN,MAAM;QACN,MAAM;QACN,KAAK;QACL,KAAK;QACL,IAAI;QACJ,UAAU;QACV,cAAc;QACd,KAAK;QACL,UAAU;QACV,QAAQ;QACR,MAAM;QACN,GAAG;QACH,OAAO;QACP,YAAY;QACZ,IAAI;QACJ,GAAG;QACH,UAAU;QACV,KAAK;QACL,KAAK;QACL,KAAK;QACL,SAAS;QACT,QAAQ;QACR,UAAU;QACV,SAAS;QACT,QAAQ;QACR,YAAY;QACZ,OAAO;QACP,MAAM;QACN,WAAW;QACX,YAAY;QACZ,SAAS;QACT,UAAU;QACV,UAAU;QACV,YAAY;QACZ,gBAAgB;QAChB,YAAY;QACZ,SAAS;QACT,WAAW;QACX,WAAW;QACX,UAAU;QACV,UAAU;QACV,UAAU;QACV,UAAU;QACV,IAAI;QACJ,UAAU;QACV,WAAW;KACZ,CAAC;IAEF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAEtC,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,QAAQ,GAAG,CAAC,QAAQ,CAAC;QACvB,CAAC;QAED,IACE,QAAQ;YACR,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YACpB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClB,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAC1C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,IAAI,IAAI,gBAAgB,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CACzB,IAAI,MAAM,CAAC,gBAAgB,IAAI,cAAc,EAAE,GAAG,CAAC,EACnD,IAAI,IAAI,GAAG,CACZ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACrD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAExD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAqB,SAAS;IAI5B,IAAI,CAAC,MAAsB;QACzB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,MAAM,GACV,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACpC,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;gBAC3B,eAAe,EAAE,EAAE;gBACnB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;gBACvB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;gBACvB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;gBAC/B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI;gBAC/B,OAAO,EAAE,oBAAoB;gBAC7B,WAAW,EAAE,IAAI;gBAIjB,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,KAAK,IAAI;aAC7D,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;QACxB,CAAC;aAAM,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC;gBACrB,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;gBAC5B,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;gBAC5B,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACpC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACpC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI;gBACpC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG;aAC3B,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,WAAmB,EAAE,OAA6B,EAAE;QAC9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;gBAC/C,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACjD,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;YACzB,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;YAC5F,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;oBAC5D,IAAI,CAAC;wBAKH,OAAO,iBAAG,GAAG,EAAE,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,IAAI,IAAK,eAAe,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,KAAK,YAAY,CAAC,EAAG,CAAC;oBACtF,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,KAAK,CAAC,CAAC;oBAChB,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AA3DD,4BA2DC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@galadrim/galadmin",
-  "version": "0.2.12",
+  "version": "0.3.0-alpha.2.1",
   "main": "dist/index.js",
   "scripts": {
     "test": "jest",
@@ -9,8 +9,8 @@
     "test:coverage": "TEST_INTEGRATION=1 jest --coverage --runInBand --projects jest.config.js jest.integration.config.js",
     "test:integration": "TEST_INTEGRATION=1 jest --config jest.integration.config.js --runInBand",
     "test:all": "npm run test:unit && npm run test:integration",
-    "build": "tsc",
-    "typecheck": "tsc --noEmit --incremental false"
+    "build": "tsc -p tsconfig.strict.json",
+    "typecheck": "tsc -p tsconfig.strict.json --noEmit"
   },
   "engines": {
     "node": ">=22"
@@ -54,12 +54,21 @@
   "devDependencies": {
     "@testcontainers/mysql": "^12.1.0",
     "@testcontainers/postgresql": "^12.1.0",
+    "@types/bcryptjs": "2.4.6",
+    "@types/connect-pg-simple": "7.0.3",
     "@types/express": "^4.17.13",
+    "@types/express-mysql-session": "3.0.8",
     "@types/express-session": "1.17.0",
     "@types/jest": "^30.0.0",
     "@types/mime": "^2.0.3",
+    "@types/multiparty": "^4.2.1",
+    "@types/mysql": "^2.15.27",
     "@types/node": "^16.18.11",
+    "@types/pg": "^8.23.1",
+    "@types/serialize-javascript": "^5.0.4",
+    "@types/ssh2-sftp-client": "^9.0.6",
     "@types/supertest": "^7.2.1",
+    "@types/uuid": "^9.0.8",
     "jest": "^29.7.0",
     "supertest": "^7.2.2",
     "testcontainers": "^12.1.0",

package/src/api/authorization.ts

@@ -0,0 +1,129 @@
+import type { BaseTypeView, TablePanel } from "../types/config";
+
+type SessionRequest = { session?: object };
+type WritableView = Pick<BaseTypeView, "roles"> & Pick<TablePanel, "tableName"> & {
+  recordViewPanels?: (Pick<TablePanel, "tableName"> & {
+    createConfig?: Pick<TablePanel, "tableName">;
+  })[];
+};
+
+// ---------------------------------------------------------------------------
+// SECURITY: server-side authorization.
+//
+// The config-filtering middleware below only decides which views the *client*
+// is shown, and sets canEdit/canCreate/canDelete flags on that served config.
+// Nothing enforced those decisions server-side, so a session with the lowest
+// role could POST directly to /updateRecord, /deleteRecord, /customQuery, …
+// and act on any view — including read-only ones — as the DB user (root).
+// This block re-checks every sensitive route against the view's declared roles.
+// ---------------------------------------------------------------------------
+export const ROOT_ROLE = "root";
+/*
+#PORTING-EDIT
+Use undefined for missing or null users and for non-object users or non-text roles from session storage.
+*/
+export const roleOf = (req: SessionRequest) => {
+  const user: unknown = req.session && Reflect.get(req.session, "user");
+  if (!user || typeof user !== "object") return undefined;
+  const role: unknown = Reflect.get(user, "role");
+  return typeof role === "string" ? role : undefined;
+};
+// Write access = the view's `roles` (root always allowed).
+export const canWriteView = (view: Pick<BaseTypeView, "roles"> | undefined, role: string | undefined) =>
+  role === ROOT_ROLE || !view || !view.roles || (role !== undefined && view.roles.includes(role));
+
+export const viewFromRequest = <T = WritableView>(req: {
+  body?: { viewIndex?: unknown };
+  query?: { viewIndex?: unknown };
+  config?: { views?: T[] };
+}): T | undefined => {
+  const idx =
+    req.body && req.body.viewIndex !== undefined
+      ? req.body.viewIndex
+      : req.query && req.query.viewIndex !== undefined
+        ? req.query.viewIndex
+        : undefined;
+  if (idx === undefined || !req.config || !req.config.views) return undefined;
+  /*
+  #PORTING-EDIT
+  Only array indices identify views; reject metadata and prototype properties before returning a view.
+  Keep property-key coercion and reject noncanonical numeric strings such as "01".
+  */
+  const key = String(idx);
+  const index = Number(key);
+  if (!Number.isInteger(index) || index < 0 || index >= req.config.views.length || String(index) !== key) {
+    return undefined;
+  }
+  return req.config.views[index];
+};
+
+// Routes that mutate data and reference their target view via viewIndex
+// (body for POST bodies, query for /uploadFile). Import routes carry the
+// viewIndex inside a multipart body and are guarded inline in their handlers.
+export const MUTATING_VIEW_ROUTES = new Set([
+  "/updateRecord",
+  "/createRecord",
+  "/deleteRecord",
+  "/deleteRecords",
+  "/deleteRecordFromPanel",
+  "/customAction",
+  "/uploadFile",
+]);
+// /duplicateRecord references its table via req.body.table (not a viewIndex),
+// so it is guarded inline in its handler instead of by the generic middleware.
+
+// Column names are interpolated into INSERT/UPDATE statements; only accept plain
+// SQL identifiers so a crafted key cannot break out of the column list.
+export const areSafeColumnNames = (data: unknown) =>
+  !data || Object.keys(data).every((k) => /^[A-Za-z0-9_]+$/.test(k));
+
+// Tables the current role is allowed to write, gathered from its writable views
+// and their creatable panels — used to bound /duplicateRecord's target table.
+export const writableTables = (req: SessionRequest & { config?: { views?: WritableView[] } }) => {
+  const role = roleOf(req);
+  const tables = new Set<string>();
+  for (const view of req.config?.views || []) {
+    if (!canWriteView(view, role)) continue;
+    if (view.tableName) tables.add(view.tableName);
+    for (const panel of view.recordViewPanels || []) {
+      if (panel.tableName) tables.add(panel.tableName);
+      if (panel.createConfig?.tableName)
+        tables.add(panel.createConfig.tableName);
+    }
+  }
+  return tables;
+};
+
+// Reject client-supplied SQL fragments (the `filters` array is concatenated
+// raw into the WHERE clause). With multipleStatements off this already blocks
+// stacked writes; the pattern also blocks UNION/comment/file exfil breakouts.
+export const looksLikeSqlBreakout = (frag: unknown) =>
+  typeof frag === "string" &&
+  /(;|--|\/\*|\bunion\b|\binto\s+(out|dump)file\b|\bsleep\s*\(|\bbenchmark\s*\(|\bload_file\s*\()/i.test(
+    frag,
+  );
+
+type HiddenColumnsView = { __hiddenColumns?: string[] };
+
+// Columns of `view` the current role may not see (cf. the config middleware below).
+export const hiddenColumnsOf = (
+  view: HiddenColumnsView | undefined,
+) => (view && view.__hiddenColumns) || [];
+
+// Removes the hidden columns from a record before it is sent.
+export const stripHiddenColumns = <T extends Record<string, unknown>>(
+  view: HiddenColumnsView | undefined,
+  record: T,
+) => {
+  for (const name of hiddenColumnsOf(view)) delete record[name];
+  return record;
+};
+
+// Whether a write payload touches a hidden column.
+export const touchesHiddenColumn = (
+  view: HiddenColumnsView | undefined,
+  data: unknown,
+) =>
+  hiddenColumnsOf(view).some(
+    (name) => data && Object.prototype.hasOwnProperty.call(data, name),
+  );

package/src/api/config.ts

@@ -0,0 +1,152 @@
+import * as crypto from "crypto";
+import type {
+  BaseTypeColumn, Config, FileUploadProperties, RichTextColumn,
+  SelectColumn, StandardColumn, Subview, View,
+} from "../types/config";
+import type dbManager from "../utils/dbManager";
+
+type Identified = { __id__?: string };
+type EnrichmentColumn = StandardColumn & Pick<BaseTypeColumn, "required">
+  & Pick<RichTextColumn, "contentField">
+  & Pick<FileUploadProperties, "s3Config" | "gcpConfig">
+  & Partial<Pick<SelectColumn, "options">> & Identified & { baseUrl?: string };
+type EnrichmentView = Identified & { subviews?: (Subview & Identified)[] } & (
+  | { type: "table"; tableName: string; primaryId?: string; columns: EnrichmentColumn[];
+      recordViewPanels?: (Identified & { type: string; createConfig?: { columns: EnrichmentColumn[] } })[] }
+  | { type: Exclude<View["type"], "table"> }
+);
+type EnrichmentConfig = Pick<Config, "mysql" | "postgresql" | "enriched"> & {
+  views: EnrichmentView[];
+};
+type SchemaColumn = {
+  TABLE_NAME?: string;
+  COLUMN_NAME?: string;
+  COLUMN_KEY?: string;
+  IS_NULLABLE?: string;
+  DATA_TYPE?: string;
+  COLUMN_TYPE?: string;
+};
+type SchemaDatabase = {
+  query(...args: Parameters<dbManager["query"]>): Promise<Partial<
+    Pick<Awaited<ReturnType<dbManager["query"]>>, "err" | "rows">
+  >>;
+};
+
+/*
+#PORTING-EDIT
+Reject non-row schema results and non-text metadata before applying it to configuration.
+PostgreSQL's lower-case metadata remains unmatched, as before.
+*/
+function readSchemaColumns(value: unknown): SchemaColumn[] {
+  if (!Array.isArray(value) || !value.every((row: unknown): row is SchemaColumn =>
+    row !== null && typeof row === "object" && !Array.isArray(row)
+    && (!("TABLE_NAME" in row) || typeof row.TABLE_NAME === "string")
+    && (!("COLUMN_NAME" in row) || typeof row.COLUMN_NAME === "string")
+    && (!("COLUMN_KEY" in row) || typeof row.COLUMN_KEY === "string")
+    && (!("IS_NULLABLE" in row) || typeof row.IS_NULLABLE === "string")
+    && (!("DATA_TYPE" in row) || typeof row.DATA_TYPE === "string")
+    && (!("COLUMN_TYPE" in row) || typeof row.COLUMN_TYPE === "string")
+  )) throw new TypeError("Invalid database schema columns");
+  return value;
+}
+
+/*
+#PORTING-EDIT
+Require enum metadata to decode to text options before assigning select options.
+*/
+function readEnumOptions(columnType: string | undefined): string[] {
+  if (columnType === undefined) throw new TypeError("Missing enum column type");
+  const options: unknown = JSON.parse(
+    columnType.replace("enum(", "[").replace(")", "]").replace(/'/g, '"'),
+  );
+  if (!Array.isArray(options) || !options.every((option: unknown) => typeof option === "string")) {
+    throw new TypeError("Invalid enum options");
+  }
+  return options;
+}
+
+export function generateUniqueIdForObject(obj: unknown) {
+  const str = JSON.stringify(obj);
+  const hash = crypto.createHash("sha256").update(str).digest("hex");
+  return hash;
+}
+
+export async function enrichConfig(config: EnrichmentConfig, db: SchemaDatabase) {
+  const { rows, err = null } = await db.query(
+    "SELECT * FROM information_schema.columns WHERE table_schema = ?",
+    [config.mysql?.database || config.postgresql?.database],
+  );
+  if (err) {
+    console.error(err);
+    return;
+  }
+  const info = readSchemaColumns(rows);
+  for (const view of config.views) {
+    if (view.type == "table") {
+      const tableName = view.tableName;
+      for (const infoEl of info) {
+        if (infoEl.TABLE_NAME == tableName && infoEl.COLUMN_KEY == "PRI") {
+          view.primaryId = infoEl.COLUMN_NAME;
+        }
+      }
+      for (const column of view.columns) {
+        enrichColumn(column, tableName, info);
+      }
+      if (view.recordViewPanels) {
+        for (const panel of view.recordViewPanels) {
+          if (panel.createConfig) {
+            for (const column of panel.createConfig.columns) {
+              enrichColumn(column, tableName, info);
+            }
+          }
+          if (!panel.__id__) {
+            panel.__id__ = generateUniqueIdForObject(panel);
+          }
+        }
+      }
+    }
+    if (view.subviews) {
+      for (const subview of view.subviews) {
+        if (!subview.__id__) {
+          subview.__id__ = generateUniqueIdForObject(subview);
+        }
+      }
+    }
+    if (!view.__id__) {
+      view.__id__ = generateUniqueIdForObject(view);
+    }
+  }
+  config.enriched = true;
+}
+
+export function enrichColumn(column: EnrichmentColumn, tableName: string, info: SchemaColumn[]) {
+  if (!column.__id__) {
+    column.__id__ = generateUniqueIdForObject(column);
+  }
+  const infoEl = info.find(
+    (x) => x.TABLE_NAME == tableName && x.COLUMN_NAME == column.name,
+  );
+  if (
+    infoEl?.IS_NULLABLE == "NO" &&
+    infoEl?.DATA_TYPE != "text" &&
+    column.required !== true &&
+    column.required !== false
+  ) {
+    column.required = true;
+  }
+  if (!column.dataType && infoEl) {
+    column.dataType = infoEl.DATA_TYPE;
+    if (column.dataType == "enum") {
+      column.dataType = "select";
+      column.options = readEnumOptions(infoEl.COLUMN_TYPE);
+    }
+  }
+  if (column.dataType == "richText") {
+    column.name = column.contentField;
+  }
+  if (column.dataType == "file" && (column.s3Config || column.gcpConfig)) {
+    const host = column.s3Config?.host || column.gcpConfig?.host;
+    const bucket = column.s3Config?.bucket || column.gcpConfig?.bucket;
+    column.baseUrl = `https://${host}/${bucket}/`;
+  }
+}

package/src/api/filterUser.ts

@@ -0,0 +1,28 @@
+import type { FilterUser } from "../types/config";
+
+/*
+#PORTING-EDIT
+Construct the checked callback identity without changing session data; root takes precedence and invalid filtered sessions are rejected.
+*/
+export function filterUserFromSession(value: unknown): FilterUser | undefined {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    return undefined;
+  }
+
+  const role: unknown = "role" in value ? value.role : undefined;
+  if (typeof role !== "string") {
+    return undefined;
+  }
+  if (role === "root") {
+    return { role };
+  }
+
+  const userId: unknown = "userId" in value ? value.userId : undefined;
+  if (userId === undefined) {
+    return { role };
+  }
+  if (typeof userId === "string" || typeof userId === "number") {
+    return { role, userId };
+  }
+  return undefined;
+}

package/src/api/importRecords.ts

@@ -0,0 +1,16 @@
+export function isImportRecords(
+  value: unknown,
+): value is Record<string, unknown>[] {
+  if (!Array.isArray(value)) {
+    return false;
+  }
+
+  for (let index = 0; index < value.length; index += 1) {
+    const record: unknown = value[index];
+    if (typeof record !== "object" || record === null || Array.isArray(record)) {
+      return false;
+    }
+  }
+
+  return true;
+}