@galadrim/galadmin 0.2.12 → 0.3.0-alpha.2.1

package/dist/api.js

@@ -1,210 +1,55 @@
 "use strict";
-var __rest = (this && this.__rest) || function (s, e) {
-    var t = {};
-    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
-        t[p] = s[p];
-    if (s != null && typeof Object.getOwnPropertySymbols === "function")
-        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
-            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
-                t[p[i]] = s[p[i]];
-        }
-    return t;
-};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.touchesHiddenColumn = exports.stripHiddenColumns = exports.hiddenColumnsOf = exports.looksLikeSqlBreakout = exports.writableTables = exports.areSafeColumnNames = exports.MUTATING_VIEW_ROUTES = exports.viewFromRequest = exports.canWriteView = exports.roleOf = exports.ROOT_ROLE = void 0;
-exports.generateUniqueIdForObject = generateUniqueIdForObject;
-exports.sqlAnd = sqlAnd;
-exports.getFormattedValue = getFormattedValue;
-exports.evalExpression = evalExpression;
-exports.formatValueForInsertion = formatValueForInsertion;
-exports.collectAllowedQueries = collectAllowedQueries;
-exports.enrichConfig = enrichConfig;
-exports.enrichColumn = enrichColumn;
+exports.formatValueForInsertion = exports.evalExpression = exports.getFormattedValue = exports.collectAllowedQueries = exports.sqlAnd = exports.enrichColumn = exports.enrichConfig = exports.generateUniqueIdForObject = exports.looksLikeSqlBreakout = exports.touchesHiddenColumn = exports.stripHiddenColumns = exports.hiddenColumnsOf = exports.writableTables = exports.areSafeColumnNames = exports.MUTATING_VIEW_ROUTES = exports.viewFromRequest = exports.canWriteView = exports.roleOf = exports.ROOT_ROLE = void 0;
 const express = require("express");
-const multiparty = require("multiparty");
-const fs = require("fs");
-const path = require("path");
-const crypto = require("crypto");
-const mime = require("mime");
-const client_s3_1 = require("@aws-sdk/client-s3");
-const s3_request_presigner_1 = require("@aws-sdk/s3-request-presigner");
-const storage_1 = require("@google-cloud/storage");
-const imageDimensions_1 = require("./utils/imageDimensions");
-const serializeJs = require("serialize-javascript");
-const SftpClient = require("ssh2-sftp-client");
-const rollup = require("rollup");
-const plugin_babel_1 = require("@rollup/plugin-babel");
-const plugin_node_resolve_1 = require("@rollup/plugin-node-resolve");
-const axios_1 = require("axios");
-const uuid_1 = require("uuid");
-const dbManager_1 = require("./utils/dbManager");
-function generateUniqueIdForObject(obj) {
-    const str = JSON.stringify(obj);
-    const hash = crypto.createHash("sha256").update(str).digest("hex");
-    return hash;
-}
-exports.ROOT_ROLE = "root";
-const roleOf = (req) => req.session && req.session.user && req.session.user.role;
-exports.roleOf = roleOf;
-const canWriteView = (view, role) => role === exports.ROOT_ROLE || !view || !view.roles || view.roles.includes(role);
-exports.canWriteView = canWriteView;
-const viewFromRequest = (req) => {
-    const idx = req.body && req.body.viewIndex !== undefined
-        ? req.body.viewIndex
-        : req.query && req.query.viewIndex !== undefined
-            ? req.query.viewIndex
-            : undefined;
-    if (idx === undefined || !req.config || !req.config.views)
-        return undefined;
-    return req.config.views[idx];
-};
-exports.viewFromRequest = viewFromRequest;
-exports.MUTATING_VIEW_ROUTES = new Set([
-    "/updateRecord",
-    "/createRecord",
-    "/deleteRecord",
-    "/deleteRecords",
-    "/deleteRecordFromPanel",
-    "/customAction",
-    "/uploadFile",
-]);
-const areSafeColumnNames = (data) => !data || Object.keys(data).every((k) => /^[A-Za-z0-9_]+$/.test(k));
-exports.areSafeColumnNames = areSafeColumnNames;
-const writableTables = (req) => {
-    var _a, _b;
-    const role = (0, exports.roleOf)(req);
-    const tables = new Set();
-    for (const view of ((_a = req.config) === null || _a === void 0 ? void 0 : _a.views) || []) {
-        if (!(0, exports.canWriteView)(view, role))
-            continue;
-        if (view.tableName)
-            tables.add(view.tableName);
-        for (const panel of view.recordViewPanels || []) {
-            if (panel.tableName)
-                tables.add(panel.tableName);
-            if ((_b = panel.createConfig) === null || _b === void 0 ? void 0 : _b.tableName)
-                tables.add(panel.createConfig.tableName);
-        }
-    }
-    return tables;
-};
-exports.writableTables = writableTables;
-const looksLikeSqlBreakout = (frag) => typeof frag === "string" &&
-    /(;|--|\/\*|\bunion\b|\binto\s+(out|dump)file\b|\bsleep\s*\(|\bbenchmark\s*\(|\bload_file\s*\()/i.test(frag);
-exports.looksLikeSqlBreakout = looksLikeSqlBreakout;
-function sqlAnd(conditions) {
-    const existingConditions = [];
-    for (const condition of conditions) {
-        if (condition && condition.length > 0) {
-            existingConditions.push(condition);
-        }
-    }
-    if (existingConditions.length <= 1) {
-        return existingConditions[0] || null;
-    }
-    else {
-        let result = "";
-        for (let i = 0; i < existingConditions.length; i++) {
-            if (i > 0) {
-                result += " AND ";
-            }
-            result += "(" + existingConditions[i] + ")";
-        }
-        return result;
-    }
-}
-async function getFormattedValue(column, record) {
-    let value;
-    try {
-        record.options = column.options;
-        if (column.formatValueForExport) {
-            value = await column.formatValueForExport(record);
-        }
-        else if (column.formattedValue) {
-            value = evalExpression(column.formattedValue, record);
-        }
-        else if (column.formatValue) {
-            value = await column.formatValue(record);
-        }
-        else if (column.dataType == "tinyint") {
-            value = record[column.name] == 1 ? "Oui" : "Non";
-        }
-        else {
-            value = record[column.name];
-        }
-        return value === null || typeof value == "undefined" ? "" : value;
-    }
-    catch (err) {
-        return value || "";
-    }
-}
-function evalExpression(expression, data) {
-    let varString = "";
-    let statement = "";
-    try {
-        for (let key in data) {
-            statement =
-                "var " +
-                    key +
-                    " = " +
-                    (typeof data[key] === "string"
-                        ? "'" +
-                            data[key]
-                                .replace(/'/g, "\\'")
-                                .replace(/\n/g, "")
-                                .replace(/\r/g, "") +
-                            "'"
-                        : typeof data[key] === "object"
-                            ? JSON.stringify(data[key])
-                            : data[key]) +
-                    ";";
-            varString += statement;
-        }
-        const result = eval(varString + expression);
-        return result;
-    }
-    catch (e) {
-        console.log("Problème d'évaluation de l'expression", statement);
-        console.error(e);
-        return "Error";
-    }
-}
-function formatValueForInsertion(value, dbType) {
-    if (value !== 0 && !value) {
-        return "NULL";
-    }
-    if (value instanceof Date) {
-        return value.toISOString();
-    }
-    if (typeof value === "string") {
-        if (dbType === "POSTGRESQL") {
-            return "'" + value.replace(/'/g, "''") + "'";
-        }
-        else {
-            return "'" + value.replace(/'/g, "\\'") + "'";
-        }
-    }
-    if (typeof value === "object") {
-        return "'" + JSON.stringify(value).replace(/'/g, "\\'") + "'";
-    }
-    if (typeof value === "boolean") {
-        return value ? "TRUE" : "FALSE";
-    }
-    if (typeof value === "number") {
-        return value;
-    }
-    return value;
-}
-const hiddenColumnsOf = (view) => (view && view.__hiddenColumns) || [];
-exports.hiddenColumnsOf = hiddenColumnsOf;
-const stripHiddenColumns = (view, record) => {
-    for (const name of (0, exports.hiddenColumnsOf)(view))
-        delete record[name];
-    return record;
-};
-exports.stripHiddenColumns = stripHiddenColumns;
-const touchesHiddenColumn = (view, data) => (0, exports.hiddenColumnsOf)(view).some((name) => data && Object.prototype.hasOwnProperty.call(data, name));
-exports.touchesHiddenColumn = touchesHiddenColumn;
+require("./api/request");
+const authorization_1 = require("./api/authorization");
+const config_1 = require("./api/config");
+const queries_1 = require("./api/queries");
+const config_2 = require("./api/routes/config");
+const customComponent_1 = require("./api/routes/customComponent");
+const adjacentRecordId_1 = require("./api/routes/adjacentRecordId");
+const foreignSelectRecords_1 = require("./api/routes/foreignSelectRecords");
+const records_1 = require("./api/routes/records");
+const recordsExport_1 = require("./api/routes/recordsExport");
+const recordsImport_1 = require("./api/routes/recordsImport");
+const subrecordsImport_1 = require("./api/routes/subrecordsImport");
+const record_1 = require("./api/routes/record");
+const updateRecord_1 = require("./api/routes/updateRecord");
+const customAction_1 = require("./api/routes/customAction");
+const deleteRecord_1 = require("./api/routes/deleteRecord");
+const deleteRecordFromPanel_1 = require("./api/routes/deleteRecordFromPanel");
+const deleteRecords_1 = require("./api/routes/deleteRecords");
+const notificationBadges_1 = require("./api/routes/notificationBadges");
+const duplicateRecord_1 = require("./api/routes/duplicateRecord");
+const createRecord_1 = require("./api/routes/createRecord");
+const customQuery_1 = require("./api/routes/customQuery");
+const uploadFileFromBetterRichTextInput_1 = require("./api/routes/uploadFileFromBetterRichTextInput");
+const uploadFile_1 = require("./api/routes/uploadFile");
+const searchCompanies_1 = require("./api/routes/searchCompanies");
+var authorization_2 = require("./api/authorization");
+Object.defineProperty(exports, "ROOT_ROLE", { enumerable: true, get: function () { return authorization_2.ROOT_ROLE; } });
+Object.defineProperty(exports, "roleOf", { enumerable: true, get: function () { return authorization_2.roleOf; } });
+Object.defineProperty(exports, "canWriteView", { enumerable: true, get: function () { return authorization_2.canWriteView; } });
+Object.defineProperty(exports, "viewFromRequest", { enumerable: true, get: function () { return authorization_2.viewFromRequest; } });
+Object.defineProperty(exports, "MUTATING_VIEW_ROUTES", { enumerable: true, get: function () { return authorization_2.MUTATING_VIEW_ROUTES; } });
+Object.defineProperty(exports, "areSafeColumnNames", { enumerable: true, get: function () { return authorization_2.areSafeColumnNames; } });
+Object.defineProperty(exports, "writableTables", { enumerable: true, get: function () { return authorization_2.writableTables; } });
+Object.defineProperty(exports, "hiddenColumnsOf", { enumerable: true, get: function () { return authorization_2.hiddenColumnsOf; } });
+Object.defineProperty(exports, "stripHiddenColumns", { enumerable: true, get: function () { return authorization_2.stripHiddenColumns; } });
+Object.defineProperty(exports, "touchesHiddenColumn", { enumerable: true, get: function () { return authorization_2.touchesHiddenColumn; } });
+Object.defineProperty(exports, "looksLikeSqlBreakout", { enumerable: true, get: function () { return authorization_2.looksLikeSqlBreakout; } });
+var config_3 = require("./api/config");
+Object.defineProperty(exports, "generateUniqueIdForObject", { enumerable: true, get: function () { return config_3.generateUniqueIdForObject; } });
+Object.defineProperty(exports, "enrichConfig", { enumerable: true, get: function () { return config_3.enrichConfig; } });
+Object.defineProperty(exports, "enrichColumn", { enumerable: true, get: function () { return config_3.enrichColumn; } });
+var queries_2 = require("./api/queries");
+Object.defineProperty(exports, "sqlAnd", { enumerable: true, get: function () { return queries_2.sqlAnd; } });
+Object.defineProperty(exports, "collectAllowedQueries", { enumerable: true, get: function () { return queries_2.collectAllowedQueries; } });
+var values_1 = require("./api/values");
+Object.defineProperty(exports, "getFormattedValue", { enumerable: true, get: function () { return values_1.getFormattedValue; } });
+Object.defineProperty(exports, "evalExpression", { enumerable: true, get: function () { return values_1.evalExpression; } });
+Object.defineProperty(exports, "formatValueForInsertion", { enumerable: true, get: function () { return values_1.formatValueForInsertion; } });
 exports.default = (db, config) => {
     const app = express();
     app.use((req, res, next) => {
@@ -230,7 +75,8 @@ exports.default = (db, config) => {
                             column.roles.includes(req.session.user.role));
                     return Object.assign(Object.assign({}, view), { columns: view.columns.filter(allowed), __hiddenColumns: view.columns
                             .filter((column) => !allowed(column))
-                            .map((column) => column.name) });
+                            .map((column) => column.name)
+                            .filter((name) => name != null) });
                 }
                 else {
                     return view;
@@ -240,1207 +86,54 @@ exports.default = (db, config) => {
     });
     app.use(async (req, res, next) => {
         if (!req.config.enriched) {
-            await enrichConfig(req.config, db);
+            await (0, config_1.enrichConfig)(req.config, db);
         }
         next();
     });
     app.use((req, res, next) => {
-        const role = (0, exports.roleOf)(req);
+        const role = (0, authorization_1.roleOf)(req);
         if (req.body && Array.isArray(req.body.filters)) {
-            if (req.body.filters.some(exports.looksLikeSqlBreakout)) {
+            if (req.body.filters.some(authorization_1.looksLikeSqlBreakout)) {
                 return res.status(400).send({ error: "Invalid filter" });
             }
         }
-        if (exports.MUTATING_VIEW_ROUTES.has(req.path)) {
-            const view = (0, exports.viewFromRequest)(req);
-            if (!view || !(0, exports.canWriteView)(view, role)) {
+        if (authorization_1.MUTATING_VIEW_ROUTES.has(req.path)) {
+            const view = (0, authorization_1.viewFromRequest)(req);
+            if (!view || !(0, authorization_1.canWriteView)(view, role)) {
                 return res.sendStatus(403);
             }
         }
         next();
     });
-    async function getRecords(params, computeCount = false) {
-        var _a;
-        let queryString = "";
-        if (params.filters) {
-            queryString = " WHERE (" + params.filters + ")";
-        }
-        if (params.query) {
-            const columns = params.columns;
-            let isNewCondition = true;
-            for (let i in columns) {
-                if (columns[i].searchable !== false &&
-                    (columns[i].searchableName || columns[i].name)) {
-                    if (queryString.length == 0) {
-                        queryString += " WHERE (";
-                    }
-                    else if (isNewCondition) {
-                        queryString += " AND (";
-                    }
-                    else {
-                        queryString += " OR ";
-                    }
-                    if (columns[i].searchableName) {
-                        queryString += columns[i].searchableName;
-                    }
-                    else if (columns[i].name) {
-                        queryString += columns[i].name
-                            .split(".")
-                            .map((x) => (0, dbManager_1.quoteIdentifier)(x, db.dbType))
-                            .join(".");
-                    }
-                    const searchEscaped = db.dbType === "POSTGRESQL"
-                        ? params.query.replace(/'/g, "''")
-                        : params.query.replace(/'/g, "\\'");
-                    queryString += " LIKE '%" + searchEscaped + "%'";
-                    isNewCondition = false;
-                }
-            }
-            queryString += ")";
-        }
-        const limit = params.allRecords ? 999999 : parseInt(params.limit);
-        const query = params.customQuery ||
-            `SELECT
-            ${params.selectExpression || "*"}
-        FROM ${params.table}
-        ${params.join || ""}
-        ${queryString}
-        ${params.groupBy ? "GROUP BY " + params.groupBy : ""}
-        ${params.having ? " HAVING " + params.having : ""}
-        ${params.orderBy || params.primaryId ? " ORDER BY " + (params.orderBy || `${params.table}.${params.primaryId}`) : ""}`;
-        const { err, rows } = await db.query(`${query} LIMIT ${limit} OFFSET ${Math.max((params.page - 1) * limit, 0)}`);
-        if (err) {
-            console.error(err);
-            return {
-                error: err,
-            };
-        }
-        let count = undefined;
-        if (computeCount) {
-            const { err: countErr, rows: countRows } = await db.query(`SELECT COUNT(*) AS count FROM (${query}) s`);
-            if (countErr) {
-                const { rows: allRows } = await db.query(query);
-                count = allRows.length;
-            }
-            else {
-                count = ((_a = countRows === null || countRows === void 0 ? void 0 : countRows[0]) === null || _a === void 0 ? void 0 : _a.count) || 0;
-            }
-        }
-        return {
-            rows,
-            queryString,
-            input: {
-                query,
-                params,
-            },
-            count,
-        };
-    }
-    async function findRecordByPosition(params) {
-        return await getRecords(Object.assign(params, {
-            page: parseInt(params.position) + parseInt(params.offset),
-            limit: 1,
-        }));
-    }
-    app.get("/config", async (req, res) => {
-        try {
-            const _a = req.config, { mysql, auth, sessionSecret } = _a, safeConfig = __rest(_a, ["mysql", "auth", "sessionSecret"]);
-            res.send({
-                config: serializeJs(safeConfig),
-            });
-        }
-        catch (e) {
-            console.error(e);
-            res.sendStatus(500);
-        }
-    });
-    app.get("/customComponent", async (req, res) => {
-        try {
-            const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, "../src/front/package.json"), "utf-8"));
-            const external = Object.keys(pkg.dependencies || {});
-            const bundle = await rollup.rollup({
-                input: path.join(__dirname, "../../", req.query.componentPath),
-                plugins: [
-                    (0, plugin_node_resolve_1.default)(),
-                    (0, plugin_babel_1.default)({
-                        configFile: path.join(__dirname, "../babel.config"),
-                        babelHelpers: "bundled",
-                    }),
-                ],
-                external,
-            });
-            const { output } = await bundle.generate({
-                format: "cjs",
-                exports: "auto",
-            });
-            res.send(output[0].code);
-        }
-        catch (err) {
-            console.error(err);
-            res.sendStatus(500);
-        }
-    });
-    app.post("/adjacentRecordId", async function (req, res, next) {
-        const { rows, error } = await findRecordByPosition(req.body);
-        if (error) {
-            return res.status(500).send(error);
-        }
-        const recordId = rows[0] ? rows[0][req.body.primaryId] : null;
-        res.send({
-            recordId: recordId,
-        });
-    });
-    app.post("/foreignSelectRecords", async (req, res, next) => {
-        var _a, _b, _c, _d, _e;
-        const view = req.config.views[req.body.viewIndex];
-        const column = [
-            ...view.columns,
-            ...(((_c = (_b = (_a = view.recordViewPanels) === null || _a === void 0 ? void 0 : _a.map((x) => { var _a; return (_a = x === null || x === void 0 ? void 0 : x.createConfig) === null || _a === void 0 ? void 0 : _a.columns; })) === null || _b === void 0 ? void 0 : _b.filter((x) => x)) === null || _c === void 0 ? void 0 : _c.flat()) || []),
-        ].find((x) => x.__id__ === req.body.columnId);
-        const queryEscaped = db.dbType === "POSTGRESQL"
-            ? (_d = req.body.query) === null || _d === void 0 ? void 0 : _d.replace(/'/g, "''")
-            : (_e = req.body.query) === null || _e === void 0 ? void 0 : _e.replace(/'/g, "\\'");
-        const { rows: records, error } = await getRecords({
-            table: column.table,
-            page: 1,
-            filters: sqlAnd([
-                column.filters,
-                req.body.query
-                    ? `${column.searchableName} LIKE '${column.wholeSearch ? "%" : ""}${queryEscaped}%'`
-                    : null,
-                column.filtersFromUser
-                    ? column.filtersFromUser(req.session.user.userId, req.session.user.role)
-                    : null,
-            ]),
-            join: column.join,
-            selectExpression: column.selectExpression,
-            orderBy: column.orderBy,
-            limit: column.limit || 1000,
-        });
-        if (error) {
-            return res.status(500).send(error);
-        }
-        const options = await Promise.all(records.map(async (record) => {
-            let label;
-            if (column.formatForeignValue) {
-                label = await column.formatForeignValue(record);
-            }
-            else if (column.formatValue) {
-                label = await column.formatValue(record);
-            }
-            else if (column.formattedValue) {
-                label = evalExpression(column.formattedValue, record);
-            }
-            else {
-                label = record[column.name];
-            }
-            const value = record[column.foreignName] || record[column.name];
-            return {
-                value,
-                label,
-            };
-        }));
-        res.send(options);
-    });
-    app.post("/records", async function (req, res, next) {
-        const view = req.config.views[req.body.viewIndex];
-        const isDesc = req.body.isDesc === null ? view.isDesc : req.body.isDesc;
-        const subview = view.subviews && req.body.subviewIndex !== undefined
-            ? view.subviews[req.body.subviewIndex]
-            : null;
-        const orderBy = req.body.orderBy || (subview === null || subview === void 0 ? void 0 : subview.orderBy) || view.orderBy;
-        const { rows: records, input, error, count, } = await getRecords({
-            table: view.tableName,
-            page: req.body.page,
-            filters: sqlAnd([
-                view.filters,
-                subview === null || subview === void 0 ? void 0 : subview.filters,
-                ...req.body.filters,
-                view.filtersFromUser
-                    ? view.filtersFromUser(req.session.user.userId, req.session.user.role)
-                    : null,
-            ]),
-            having: subview === null || subview === void 0 ? void 0 : subview.having,
-            customQuery: view.customQuery,
-            join: view.join,
-            selectExpression: view.selectExpression,
-            orderBy: [
-                orderBy ? `${orderBy} ${isDesc ? "DESC" : "ASC"}` : null,
-                view.primaryId,
-            ]
-                .filter((x) => x)
-                .join(", "),
-            primaryId: view.primaryId,
-            query: req.body.query,
-            groupBy: view.groupBy,
-            columns: view.columns,
-            limit: view.limit || 10,
-        }, true);
-        if (error) {
-            return res.status(500).send(error);
-        }
-        for (const column of view.columns) {
-            if (column.formatValue) {
-                for (const record of records) {
-                    record[`__formatValue-${column.__id__}__`] =
-                        await column.formatValue(record);
-                }
-            }
-        }
-        for (const record of records)
-            (0, exports.stripHiddenColumns)(view, record);
-        res.send({
-            records,
-            input,
-            count,
-        });
-    });
+    const { getRecords, findRecordByPosition } = (0, queries_1.default)(db);
+    app.get("/config", (0, config_2.default)());
+    app.get("/customComponent", (0, customComponent_1.default)(__dirname));
+    app.post("/adjacentRecordId", (0, adjacentRecordId_1.default)(findRecordByPosition));
+    app.post("/foreignSelectRecords", (0, foreignSelectRecords_1.default)(db, getRecords));
+    app.post("/records", (0, records_1.default)(getRecords));
     const formattedValueToFunction = {};
-    app.post("/recordsExport", async function (req, res) {
-        const view = req.config.views[req.body.viewIndex];
-        const orderBy = req.body.orderBy || view.orderBy;
-        const isDesc = req.body.isDesc === null ? view.isDesc : req.body.isDesc;
-        const subview = view.subviews && req.body.subviewIndex !== undefined
-            ? view.subviews[req.body.subviewIndex]
-            : null;
-        const { rows: records, error } = await getRecords({
-            table: view.tableName,
-            page: 1,
-            allRecords: true,
-            filters: sqlAnd([
-                view.filters,
-                subview === null || subview === void 0 ? void 0 : subview.filters,
-                req.body.filters,
-                view.filtersFromUser
-                    ? view.filtersFromUser(req.session.user.userId, req.session.user.role)
-                    : null,
-            ]),
-            having: subview === null || subview === void 0 ? void 0 : subview.having,
-            customQuery: view.customQuery,
-            join: view.join,
-            selectExpression: view.selectExpression,
-            orderBy: orderBy ? `${orderBy} ${isDesc ? "DESC" : "ASC"}` : null,
-            primaryId: view.primaryId,
-            query: req.body.query,
-            groupBy: view.groupBy,
-            columns: view.columns,
-            limit: view.limit || 10,
-        });
-        if (error) {
-            return res.status(500).send(error);
-        }
-        let output = "";
-        const columns = view.columns;
-        for (let j = 0; j < columns.length; j++) {
-            if (!columns[j].hideInTable || columns[j].includeInExport) {
-                if (j > 0)
-                    output += ";";
-                output += columns[j].label;
-            }
-        }
-        for (let i in records) {
-            const el = records[i];
-            output += "\r\n";
-            for (let j = 0; j < columns.length; j++) {
-                if (!columns[j].hideInTable || columns[j].includeInExport) {
-                    if (j > 0)
-                        output += ";";
-                    if (columns[j].dataType == "textarea") {
-                        output += '"';
-                    }
-                    output += await getFormattedValue(columns[j], el);
-                    if (columns[j].dataType == "textarea") {
-                        output += '"';
-                    }
-                }
-            }
-        }
-        res.send({
-            content: output,
-        });
-    });
-    app.post("/recordsImport", async function (req, res) {
-        const form = new multiparty.Form();
-        form.parse(req, async function (err, fields, files) {
-            if (err) {
-                return res.status(500).send(err);
-            }
-            const view = req.config.views[fields.viewIndex[0]];
-            if (!view || !(0, exports.canWriteView)(view, (0, exports.roleOf)(req))) {
-                return res.sendStatus(403);
-            }
-            if (typeof view.parseImportFile !== "function") {
-                return res
-                    .status(500)
-                    .send('"parseImportFile" doit être défini dans la configuration de la vue.');
-            }
-            const records = await view.parseImportFile(files.data[0]);
-            const columns = [];
-            if (records.length === 0) {
-                return res.send({
-                    affectedRows: 0,
-                });
-            }
-            try {
-                for (let record of records) {
-                    for (let key in record) {
-                        if (!columns.includes(key)) {
-                            columns.push(key);
-                        }
-                    }
-                }
-                if (columns.some((name) => (0, exports.hiddenColumnsOf)(view).includes(name))) {
-                    return res.sendStatus(403);
-                }
-                let queryString;
-                if (db.dbType === "POSTGRESQL") {
-                    queryString = `INSERT INTO ?? (${columns.map((x) => (0, dbManager_1.quoteIdentifier)(x, db.dbType)).join(", ")}) VALUES`;
-                    for (let record of records) {
-                        const valuesList = columns
-                            .map((x) => formatValueForInsertion(record[x], db.dbType))
-                            .join(", ");
-                        queryString += ` (${valuesList}),`;
-                    }
-                    queryString =
-                        queryString.slice(0, -1) +
-                            ` ON CONFLICT (${view.importFileUniqueField}) DO UPDATE SET `;
-                    for (let column of columns) {
-                        queryString += `${(0, dbManager_1.quoteIdentifier)(column, db.dbType)} = EXCLUDED.${(0, dbManager_1.quoteIdentifier)(column, db.dbType)},`;
-                    }
-                }
-                else {
-                    queryString =
-                        "INSERT INTO ?? (" +
-                            columns.map((x) => (0, dbManager_1.quoteIdentifier)(x, db.dbType)).join(", ") +
-                            ") VALUES";
-                    for (let record of records) {
-                        queryString +=
-                            " (" +
-                                columns
-                                    .map((x) => formatValueForInsertion(record[x], db.dbType))
-                                    .join(", ") +
-                                "),";
-                    }
-                    queryString = queryString.slice(0, -1) + " ON DUPLICATE KEY UPDATE";
-                    for (let column of columns) {
-                        queryString += ` ${(0, dbManager_1.quoteIdentifier)(column, db.dbType)} = VALUES(${(0, dbManager_1.quoteIdentifier)(column, db.dbType)}),`;
-                    }
-                }
-                queryString = queryString.slice(0, -1);
-                const { err, rows: r } = await db.query(queryString, [view.tableName]);
-                if (err) {
-                    console.error(err);
-                    return res.status(500).send({
-                        err,
-                        message: "Une erreur est survenue.",
-                    });
-                }
-                res.send({
-                    affectedRows: r.affectedRows,
-                });
-            }
-            catch (err) {
-                console.error(err);
-                res.status(500).send({
-                    err,
-                    message: "Une erreur est survenue.",
-                });
-            }
-        });
-    });
-    app.post("/subrecordsImport", async function (req, res) {
-        const form = new multiparty.Form();
-        form.parse(req, async function (err, fields, files) {
-            if (err) {
-                return res.status(500).send(err);
-            }
-            const view = req.config.views[fields.viewIndex[0]];
-            const panel = view
-                ? view.recordViewPanels[fields.panelIndex[0]]
-                : undefined;
-            if (!view ||
-                !(0, exports.canWriteView)(view, (0, exports.roleOf)(req)) ||
-                !panel ||
-                !(0, exports.canWriteView)(panel, (0, exports.roleOf)(req))) {
-                return res.sendStatus(403);
-            }
-            if (typeof panel.parseImportFile !== "function") {
-                return res
-                    .status(500)
-                    .send('"parseImportFile" doit être défini dans la configuration du panneau.');
-            }
-            if (!Boolean(panel.createConfig)) {
-                return res
-                    .status(500)
-                    .send('"createConfig" doit être défini dans la configuration du panneau.');
-            }
-            const records = await panel.parseImportFile(files.data[0], fields.recordId[0]);
-            const columns = [];
-            if (records.length === 0) {
-                return res.send({
-                    affectedRows: 0,
-                });
-            }
-            try {
-                for (let record of records) {
-                    for (let key in record) {
-                        if (!columns.includes(key)) {
-                            columns.push(key);
-                        }
-                    }
-                }
-                let queryString = "INSERT IGNORE INTO ?? (" +
-                    (0, dbManager_1.quoteIdentifier)(panel.createConfig.recordIdKey, db.dbType) +
-                    ", " +
-                    columns.map((x) => (0, dbManager_1.quoteIdentifier)(x, db.dbType)).join(", ") +
-                    ") VALUES";
-                for (let record of records) {
-                    queryString +=
-                        " (" +
-                            fields.recordId[0] +
-                            ", " +
-                            columns
-                                .map((x) => formatValueForInsertion(record[x], db.dbType))
-                                .join(", ") +
-                            "),";
-                }
-                queryString = queryString.slice(0, -1) + " ON DUPLICATE KEY UPDATE";
-                for (let column of columns) {
-                    queryString += ` ${(0, dbManager_1.quoteIdentifier)(column, db.dbType)} = VALUES(${(0, dbManager_1.quoteIdentifier)(column, db.dbType)}),`;
-                }
-                const { err, rows: r } = await db.query(queryString.slice(0, -1), [
-                    panel.tableName,
-                ]);
-                if (err) {
-                    console.error(err);
-                    return res.status(500).send({
-                        err,
-                        message: "Une erreur est survenue.",
-                    });
-                }
-                res.send({
-                    affectedRows: r.affectedRows,
-                });
-            }
-            catch (err) {
-                console.error(err);
-                res.status(500).send({
-                    err,
-                    message: "Une erreur est survenue.",
-                });
-            }
-        });
-    });
-    app.get("/record", async function (req, res) {
-        const view = req.config.views[req.query.viewIndex];
-        const { err, rows } = await db.query("SELECT " +
-            (view.selectExpression || "*") +
-            " FROM ?? " +
-            (view.join || "") +
-            " WHERE ?? = ?", [
-            view.tableName,
-            view.tableName + "." + view.primaryId,
-            req.query.recordId,
-        ]);
-        if (err) {
-            return res.status(500).send(err);
-        }
-        if (rows.length > 0) {
-            const record = rows[0];
-            for (const column of view.columns) {
-                if (column.formatValue) {
-                    record[`__formatValue-${column.__id__}__`] =
-                        await column.formatValue(record);
-                }
-            }
-            res.send((0, exports.stripHiddenColumns)(view, record));
-        }
-        else {
-            res.sendStatus(404);
-        }
-    });
-    app.post("/updateRecord", async function (req, res, next) {
-        const view = req.config.views[req.body.viewIndex];
-        if (!(0, exports.areSafeColumnNames)(req.body.data)) {
-            return res.status(400).send({ error: "Invalid column name" });
-        }
-        if ((0, exports.touchesHiddenColumn)(view, req.body.data)) {
-            return res.sendStatus(403);
-        }
-        for (let key in req.body.data) {
-            if (req.body.data[key] == "NULL" ||
-                req.body.data[key] === "" ||
-                req.body.data[key] === "Invalid date") {
-                req.body.data[key] = null;
-            }
-        }
-        if (Object.keys(req.body.data).length === 0) {
-            return res.sendStatus(200);
-        }
-        const queryExpression = Object.keys(req.body.data)
-            .map((x) => `${(0, dbManager_1.quoteIdentifier)(x, db.dbType)} = ?`)
-            .join(", ");
-        const queryParameters = Object.keys(req.body.data).map((x) => req.body.data[x]);
-        const { err } = await db.query(`UPDATE ?? SET ${queryExpression} WHERE ?? = ?`, [
-            view.tableName,
-            ...queryParameters,
-            view.primaryId,
-            req.body.primaryValue,
-        ]);
-        if (err) {
-            return res.status(500).send(err);
-        }
-        if (view.editCallback) {
-            try {
-                await axios_1.default.post(view.editCallback, {
-                    id: req.body.primaryValue,
-                    data: req.body.data,
-                    previousData: req.body.previousData,
-                });
-            }
-            catch (e) { }
-        }
-        if (view.editCallbackFunction) {
-            await view.editCallbackFunction({
-                id: req.body.primaryValue,
-                data: req.body.data,
-            });
-        }
-        res.sendStatus(200);
-    });
-    app.post("/customAction", async function (req, res, next) {
-        const view = req.config.views[req.body.viewIndex];
-        const action = view.customActions[req.body.actionIndex];
-        for (const recordId of req.body.selectedRecordIds) {
-            try {
-                const { rows } = await db.query("SELECT " +
-                    (view.selectExpression || "*") +
-                    " FROM ?? " +
-                    (view.join || "") +
-                    " WHERE ?? = ?", [view.tableName, view.tableName + "." + view.primaryId, recordId]);
-                const record = rows[0];
-                const actionResult = await action.action(record, req.session.user.userId);
-                if (actionResult) {
-                    return res.send({
-                        success: true,
-                        message: actionResult,
-                    });
-                }
-            }
-            catch (err) {
-                console.error(err);
-                return res.send({
-                    success: false,
-                    error: err,
-                });
-            }
-        }
-        res.send({
-            success: true,
-            message: action.successMessage,
-        });
-    });
-    app.post("/deleteRecord", async function (req, res) {
-        const view = req.config.views[req.body.viewIndex];
-        const { rows, err: err2 } = await db.query("SELECT " +
-            (view.selectExpression || "*") +
-            " FROM ?? " +
-            (view.join || "") +
-            " WHERE ?? = ?", [
-            view.tableName,
-            view.tableName + "." + view.primaryId,
-            req.body.primaryValue,
-        ]);
-        if (err2) {
-            return res.status(500).send(err2);
-        }
-        const deletedRecord = rows[0];
-        if (!deletedRecord) {
-            return res.status(404).send("Record not found");
-        }
-        const { err } = await db.query("DELETE FROM ?? WHERE ?? = ?", [
-            view.tableName,
-            view.primaryId,
-            req.body.primaryValue,
-        ]);
-        if (err) {
-            return res.status(500).send(err);
-        }
-        if (view.deleteCallback) {
-            try {
-                await axios_1.default.post(view.deleteCallback, {
-                    id: req.body.primaryValue,
-                });
-            }
-            catch (e) { }
-        }
-        if (view.deleteCallbackFunction) {
-            await view.deleteCallbackFunction({
-                id: req.body.primaryValue,
-                deletedRecord,
-            });
-        }
-        res.sendStatus(200);
-    });
-    app.post("/deleteRecordFromPanel", async function (req, res) {
-        const view = req.config.views[req.body.viewIndex];
-        const panel = view.recordViewPanels.find((x) => x.__id__ === req.body.panelId);
-        const { rows, err: err2 } = await db.query("SELECT * FROM ?? WHERE ?? = ?", [panel.tableName, panel.primaryId, req.body.primaryValue]);
-        if (err2) {
-            return res.status(500).send(err2);
-        }
-        const deletedRecord = rows[0];
-        const { err } = await db.query("DELETE FROM ?? WHERE ?? = ?", [
-            panel.tableName,
-            panel.primaryId,
-            req.body.primaryValue,
-        ]);
-        if (err) {
-            return res.status(500).send(err);
-        }
-        if (panel.deleteCallback) {
-            try {
-                await axios_1.default.post(panel.deleteCallback, {
-                    id: req.body.primaryValue,
-                });
-            }
-            catch (e) { }
-        }
-        if (panel.deleteCallbackFunction) {
-            await panel.deleteCallbackFunction({
-                id: req.body.primaryValue,
-                deletedRecord,
-            });
-        }
-        res.sendStatus(200);
-    });
-    app.post("/deleteRecords", async function (req, res, next) {
-        const view = req.config.views[req.body.viewIndex];
-        const placeholders = req.body.primaryValues.map(() => "?").join(", ");
-        const { err } = await db.query(`DELETE FROM ?? WHERE ?? IN(${placeholders})`, [view.tableName, view.primaryId, ...req.body.primaryValues]);
-        if (err) {
-            return res.status(500).send(err);
-        }
-        res.sendStatus(200);
-    });
-    app.get("/notificationBadges", async function (req, res) {
-        const notificationBadges = {};
-        async function checkAndGetNotificationBadge(obj) {
-            if (obj.notificationBadge) {
-                const { err, rows } = await db.query(obj.notificationBadge.query);
-                if (err) {
-                    console.error(err);
-                }
-                else if (rows.length > 0 &&
-                    rows[0][obj.notificationBadge.attribute]) {
-                    const notificationBadge = rows[0][obj.notificationBadge.attribute];
-                    if (!obj.notificationBadge.displayCondition ||
-                        obj.notificationBadge.displayCondition(notificationBadge)) {
-                        notificationBadges[obj.__id__] = notificationBadge;
-                    }
-                }
-            }
-        }
-        for (const view of req.config.views) {
-            await checkAndGetNotificationBadge(view);
-            if (view.subviews) {
-                for (const subview of view.subviews) {
-                    await checkAndGetNotificationBadge(subview);
-                }
-            }
-        }
-        res.send(notificationBadges);
-    });
-    app.post("/duplicateRecord", async function (req, res, next) {
-        var _a;
-        const allowedTables = (0, exports.writableTables)(req);
-        const requestedTables = [
-            req.body.table,
-            ...(((_a = req.body.duplicateConfig) === null || _a === void 0 ? void 0 : _a.foreignTables) || []).map((t) => t.table),
-        ];
-        if (requestedTables.some((t) => !allowedTables.has(t))) {
-            return res.sendStatus(403);
-        }
-        const primaryId = req.body.duplicateConfig.primaryId;
-        const { err, rows } = await db.query("SELECT * FROM ?? WHERE ?? = ?", [
-            req.body.table,
-            primaryId,
-            req.body.primaryValue,
-        ]);
-        if (err) {
-            return res.status(500).send(err);
-        }
-        const record = rows[0];
-        const data = {};
-        for (let field of req.body.duplicateConfig.fields) {
-            data[field] = record[field];
-        }
-        const { err: err2, rows: r } = await db.query("INSERT IGNORE INTO ?? SET ?", [req.body.table, data]);
-        if (err2) {
-            return res.status(500).send(err);
-        }
-        const newRecordId = r.insertId;
-        for (let foreignTable of req.body.duplicateConfig.foreignTables) {
-            const { err, rows } = await db.query("SELECT * FROM ?? WHERE ?? = ?", [
-                foreignTable.table,
-                primaryId,
-                req.body.primaryValue,
-            ]);
-            if (err)
-                console.log(err);
-            for (let record of rows) {
-                const data = {};
-                data[primaryId] = newRecordId;
-                for (let field of foreignTable.fields) {
-                    data[field] = record[field];
-                }
-                await db.query("INSERT IGNORE INTO ?? SET ?", [
-                    foreignTable.table,
-                    data,
-                ]);
-            }
-        }
-        res.sendStatus(200);
-    });
-    app.post("/createRecord", async function (req, res, next) {
-        var _a, _b, _c;
-        const view = req.config.views[req.body.viewIndex];
-        const hasPanel = req.body.panelIndex !== undefined && req.body.panelIndex !== null;
-        const panel = hasPanel ? view.recordViewPanels[req.body.panelIndex] : null;
-        if (!hasPanel && (0, exports.touchesHiddenColumn)(view, req.body.data)) {
-            return res.sendStatus(403);
-        }
-        try {
-            for (let key in req.body.data) {
-                if (req.body.data[key] == "NULL" ||
-                    req.body.data[key] === "Invalid date") {
-                    req.body.data[key] = null;
-                }
-            }
-            if (panel) {
-                req.body.data[panel.createConfig.recordIdKey] = req.body.recordId;
-            }
-            const primaryColumn = (_b = (_a = (view || panel)) === null || _a === void 0 ? void 0 : _a.columns) === null || _b === void 0 ? void 0 : _b.find((x) => x.name === (view || panel).primaryId);
-            if ((primaryColumn === null || primaryColumn === void 0 ? void 0 : primaryColumn.dataType) == "uuid") {
-                req.body.data[primaryColumn.name] = (0, uuid_1.v4)();
-            }
-            const createPayload = JSON.parse(JSON.stringify(req.body.data));
-            const columns = panel ? panel.createConfig.columns : view.columns;
-            for (let key in createPayload) {
-                if (((_c = columns === null || columns === void 0 ? void 0 : columns.find((x) => x.name === key)) === null || _c === void 0 ? void 0 : _c.includedInCreatePayload) ===
-                    false) {
-                    delete createPayload[key];
-                }
-            }
-            if (!(0, exports.areSafeColumnNames)(createPayload)) {
-                return res.status(400).send({ error: "Invalid column name" });
-            }
-            const queryExpression = Object.keys(createPayload)
-                .map((x) => (0, dbManager_1.quoteIdentifier)(x, db.dbType))
-                .join(", ");
-            const queryPlaceholders = Object.keys(createPayload)
-                .map((x) => "?")
-                .join(", ");
-            const queryParameters = Object.keys(createPayload).map((x) => createPayload[x]);
-            const { err, rows: r } = await db.query(`INSERT INTO ?? (${queryExpression}) VALUES(${queryPlaceholders})`, [panel ? panel.tableName : view.tableName, ...queryParameters]);
-            if (err) {
-                console.error(err);
-                return res.status(500).send({
-                    err,
-                    message: err.code === "ER_DUP_ENTRY"
-                        ? "Cet élément existe déjà."
-                        : "Une erreur est survenue.",
-                });
-            }
-            if (panel ? panel.createCallback : view.createCallback) {
-                try {
-                    await axios_1.default.post(panel ? panel.createCallback : view.createCallback, {
-                        id: r.insertId,
-                        data: req.body.data,
-                    });
-                }
-                catch (e) { }
-            }
-            if (panel ? panel.createCallbackFunction : view.createCallbackFunction) {
-                try {
-                    await (panel ? panel.createCallbackFunction : view.createCallbackFunction)({
-                        id: r.insertId,
-                        data: req.body.data,
-                    });
-                }
-                catch (callbackErr) {
-                    console.error(callbackErr);
-                }
-            }
-            res.send({
-                id: r.insertId,
-            });
-        }
-        catch (err) {
-            console.error(err);
-            res.status(500).send({
-                err,
-                message: "Une erreur est survenue.",
-            });
-        }
-    });
-    const CONFIG_USES_CUSTOM_QUERY = collectAllowedQueries(config.views).size > 0;
+    app.post("/recordsExport", (0, recordsExport_1.default)(getRecords));
+    app.post("/recordsImport", (0, recordsImport_1.default)(db));
+    app.post("/subrecordsImport", (0, subrecordsImport_1.default)(db));
+    app.get("/record", (0, record_1.default)(db));
+    app.post("/updateRecord", (0, updateRecord_1.default)(db));
+    app.post("/customAction", (0, customAction_1.default)(db));
+    app.post("/deleteRecord", (0, deleteRecord_1.default)(db));
+    app.post("/deleteRecordFromPanel", (0, deleteRecordFromPanel_1.default)(db));
+    app.post("/deleteRecords", (0, deleteRecords_1.default)(db));
+    app.get("/notificationBadges", (0, notificationBadges_1.default)(db));
+    app.post("/duplicateRecord", (0, duplicateRecord_1.default)(db));
+    app.post("/createRecord", (0, createRecord_1.default)(db));
+    const CONFIG_USES_CUSTOM_QUERY = (0, queries_1.collectAllowedQueries)(config.views).size > 0;
     if (!CONFIG_USES_CUSTOM_QUERY) {
         app.get("/customQuery", (req, res) => res.sendStatus(404));
     }
     else {
-        app.get("/customQuery", async function (req, res, next) {
-            const template = typeof req.query.query === "string" ? req.query.query : "";
-            const allowed = collectAllowedQueries(req.config.views);
-            if (!allowed.has(template.trim())) {
-                return res.status(403).send({ error: "Query not allowed" });
-            }
-            if (!/^\s*\(?\s*(select|with)\b/i.test(template) || /;/.test(template)) {
-                return res
-                    .status(400)
-                    .send({ error: "Only read-only queries are allowed" });
-            }
-            const placeholderCount = (template.match(/\?/g) || []).length;
-            const params = new Array(placeholderCount).fill(req.query.primaryValue);
-            const { err, rows } = await db.query(template, params);
-            if (err) {
-                return res.status(500).send(err);
-            }
-            if (req.query.viewIndex && req.query.panelIndex) {
-                const panel = req.config.views[req.query.viewIndex].recordViewPanels[req.query.panelIndex];
-                if (panel.formatValue) {
-                    for (const row of rows) {
-                        for (const key in panel.formatValue) {
-                            row[key] = await panel.formatValue[key](row);
-                        }
-                    }
-                }
-            }
-            res.send(rows);
-        });
+        app.get("/customQuery", (0, customQuery_1.default)(db));
     }
-    function uploadFile(column, fileParamName, req, res) {
-        if (column.s3Config || column.gcpConfig) {
-            const form = new multiparty.Form();
-            form.parse(req, async function (err, fields, files) {
-                var _a;
-                if (err) {
-                    return res.status(500).send(err);
-                }
-                const originalFilename = files[fileParamName][0].originalFilename;
-                const contentType = mime.getType(originalFilename) || "application/octet-stream";
-                const extension = originalFilename.match(/(?:\.([^.]+))?$/)[1];
-                let aspectRatio = null;
-                if (["png", "jpeg", "jpg", "gif"].includes(extension)) {
-                    try {
-                        const dimensions = await (0, imageDimensions_1.getImageDimensions)(files[fileParamName][0].path);
-                        if (dimensions) {
-                            aspectRatio = dimensions.height / dimensions.width;
-                        }
-                    }
-                    catch (_b) {
-                    }
-                }
-                const originalFilenameWithoutExtension = originalFilename.replace("." + extension, "");
-                if (column.gcpConfig) {
-                    const gcpConfig = column.gcpConfig;
-                    const path = (gcpConfig.subfolder ? gcpConfig.subfolder + "/" : "") +
-                        originalFilenameWithoutExtension +
-                        "-" +
-                        Math.random().toString().substr(2) +
-                        "." +
-                        extension;
-                    const storage = new storage_1.Storage();
-                    const bucketName = gcpConfig.bucket;
-                    storage
-                        .bucket(bucketName)
-                        .upload(files[fileParamName][0].path, {
-                        destination: path,
-                    })
-                        .then(() => {
-                        res.status(200).send({
-                            path: gcpConfig.pathTransform
-                                ? gcpConfig.pathTransform(path)
-                                : path,
-                            aspectRatio,
-                            originalFilename,
-                        });
-                    })
-                        .catch((e) => {
-                        res.status(500).send(e);
-                    });
-                }
-                else {
-                    const s3Config = column.s3Config;
-                    const path = (s3Config.subfolder ? s3Config.subfolder + "/" : "") +
-                        originalFilenameWithoutExtension +
-                        "-" +
-                        Math.random().toString().substr(2) +
-                        "." +
-                        extension;
-                    const rawHost = String(s3Config.host || "");
-                    const endpoint = /^https?:\/\//i.test(rawHost)
-                        ? rawHost
-                        : `https://${rawHost}`;
-                    const s3 = new client_s3_1.S3Client(Object.assign(Object.assign({ endpoint, region: s3Config.region }, (s3Config.accessKeyId && {
-                        credentials: {
-                            accessKeyId: s3Config.accessKeyId,
-                            secretAccessKey: (_a = s3Config.secretAccessKey) !== null && _a !== void 0 ? _a : "",
-                        },
-                    })), { forcePathStyle: false }));
-                    if (s3Config.signedUrlNeeded) {
-                        (0, s3_request_presigner_1.getSignedUrl)(s3, new client_s3_1.PutObjectCommand({
-                            Bucket: s3Config.bucket,
-                            Key: path,
-                            ContentType: contentType,
-                        }), { expiresIn: 150 })
-                            .then((signedUrl) => axios_1.default.put(signedUrl, fs.readFileSync(files[fileParamName][0].path), {
-                            maxContentLength: 100000000000,
-                            maxBodyLength: 100000000000,
-                            headers: {
-                                "Content-Type": contentType,
-                            },
-                        }))
-                            .then(() => {
-                            res.status(200).send({
-                                path: s3Config.pathTransform
-                                    ? s3Config.pathTransform(path)
-                                    : path,
-                                aspectRatio,
-                                originalFilename,
-                            });
-                        })
-                            .catch((e) => {
-                            res.status(500).send(e);
-                        });
-                    }
-                    else {
-                        s3.send(new client_s3_1.PutObjectCommand({
-                            Body: fs.readFileSync(files[fileParamName][0].path),
-                            Bucket: s3Config.bucket,
-                            ContentType: contentType,
-                            ACL: "public-read",
-                            Key: path,
-                        }))
-                            .then(() => {
-                            res.send({
-                                url: `https://${s3Config.host}/${s3Config.bucket}/${path}`,
-                                path: s3Config.pathTransform
-                                    ? s3Config.pathTransform(path)
-                                    : path,
-                                aspectRatio,
-                                originalFilename,
-                            });
-                        })
-                            .catch((err) => res.status(500).send(err));
-                    }
-                }
-            });
-        }
-        else if (column.sftpConfig) {
-            if (!column.publicPath) {
-                return res
-                    .status(500)
-                    .send("You need to pass publicPath parameter when using sftpConfig");
-            }
-            const form = new multiparty.Form();
-            form.parse(req, function (err, fields, files) {
-                if (err) {
-                    return res.status(500).send(err);
-                }
-                const pathSplitted = files[fileParamName][0].path.split(/[\/\\]+/);
-                const filename = pathSplitted[pathSplitted.length - 1];
-                (async () => {
-                    const sftp = new SftpClient();
-                    await sftp.connect({
-                        host: column.sftpConfig.host,
-                        port: 22,
-                        username: column.sftpConfig.user,
-                        password: column.sftpConfig.password,
-                    });
-                    await sftp.fastPut(files[fileParamName][0].path, column.publicPath +
-                        (column.subdirectory ? "/" + column.subdirectory : "") +
-                        "/" +
-                        filename);
-                    await sftp.end();
-                    res.send({
-                        path: filename,
-                        originalFilename: files[fileParamName][0].originalFilename,
-                    });
-                    fs.unlinkSync(files[fileParamName][0].path);
-                })();
-            });
-        }
-        else {
-            const form = new multiparty.Form({
-                uploadDir: column.publicPath + column.subdirectory,
-            });
-            form.parse(req, function (err, fields, files) {
-                if (err) {
-                    return res.status(500).send(err);
-                }
-                res.send({
-                    path: files[fileParamName][0].path.replace(column.publicPath, ""),
-                    originalFilename: files[fileParamName][0].originalFilename,
-                });
-            });
-        }
-    }
-    app.post("/uploadFileFromBetterRichTextInput", async function (req, res, next) {
-        var _a;
-        const role = (0, exports.roleOf)(req);
-        const { viewIndex, columnId } = req.query;
-        if (typeof viewIndex !== "string" ||
-            !/^\d+$/.test(viewIndex) ||
-            typeof columnId !== "string") {
-            return res.sendStatus(403);
-        }
-        const view = req.config.views[viewIndex];
-        if (!view || !(0, exports.canWriteView)(view, role)) {
-            return res.sendStatus(403);
-        }
-        const column = [
-            ...(view.columns || []),
-            ...(((_a = view.recordViewPanels) === null || _a === void 0 ? void 0 : _a.flatMap((panel) => { var _a; return ((_a = panel.createConfig) === null || _a === void 0 ? void 0 : _a.columns) || []; })) || []),
-        ].find((column) => column.__id__ === columnId);
-        if (!column || (column.roles && !column.roles.includes(role))) {
-            return res.sendStatus(403);
-        }
-        if (column.dataType !== "betterRichText" || !column.fileUploadProperties) {
-            return res.status(400).send({ error: "Invalid rich-text upload column" });
-        }
-        uploadFile(column.fileUploadProperties, "upload", req, res);
-    });
-    app.post("/uploadFile", async function (req, res, next) {
-        var _a, _b, _c;
-        const view = req.config.views[req.query.viewIndex];
-        const column = [
-            ...view.columns,
-            ...(((_c = (_b = (_a = view.recordViewPanels) === null || _a === void 0 ? void 0 : _a.map((x) => { var _a; return (_a = x === null || x === void 0 ? void 0 : x.createConfig) === null || _a === void 0 ? void 0 : _a.columns; })) === null || _b === void 0 ? void 0 : _b.filter((x) => x)) === null || _c === void 0 ? void 0 : _c.flat()) || []),
-        ].find((x) => x.__id__ == req.query.columnId);
-        uploadFile(column, "file", req, res);
-    });
-    app.get("/searchCompanies", async (req, res) => {
-        const processedQuery = req.query.query.replaceAll(" ", "-");
-        try {
-            const response = await axios_1.default.get(`https://public.opendatasoft.com/api/explore/v2.1/catalog/datasets/economicref-france-sirene-v3/records`, {
-                params: {
-                    where: `denominationunitelegale LIKE '${processedQuery}*' OR siret LIKE '${processedQuery}*'`,
-                    limit: 100,
-                },
-            });
-            const results = response.data.results
-                .filter((etablissement) => etablissement.etatadministratifetablissement === "Actif")
-                .map((etablissement) => ({
-                id: Math.random().toString().slice(2),
-                companyName: etablissement.denominationunitelegale,
-                siret: etablissement.siret,
-                siren: etablissement.siren,
-                address: `${etablissement.numerovoieetablissement || ""} ${etablissement.typevoieetablissement || ""} ${etablissement.libellevoieetablissement || ""}`,
-                city: etablissement.libellecommuneetablissement,
-                zipCode: etablissement.codepostaletablissement,
-                activityNumber: etablissement.activiteprincipaleunitelegale,
-            }))
-                .slice(0, 30);
-            res.send(results);
-        }
-        catch (e) {
-            res.send([]);
-        }
-    });
+    app.post("/uploadFileFromBetterRichTextInput", (0, uploadFileFromBetterRichTextInput_1.default)());
+    app.post("/uploadFile", (0, uploadFile_1.default)());
+    app.get("/searchCompanies", (0, searchCompanies_1.default)());
     return app;
 };
-function collectAllowedQueries(node, acc = new Set()) {
-    if (!node || typeof node !== "object")
-        return acc;
-    if (Array.isArray(node)) {
-        for (const item of node)
-            collectAllowedQueries(item, acc);
-        return acc;
-    }
-    for (const key of Object.keys(node)) {
-        const value = node[key];
-        if (typeof value === "string" && (key === "query" || /Query$/.test(key))) {
-            acc.add(value.trim());
-        }
-        else if (value && typeof value === "object") {
-            collectAllowedQueries(value, acc);
-        }
-    }
-    return acc;
-}
-async function enrichConfig(config, db) {
-    var _a, _b;
-    const { rows: info, err } = await db.query("SELECT * FROM information_schema.columns WHERE table_schema = ?", [((_a = config.mysql) === null || _a === void 0 ? void 0 : _a.database) || ((_b = config.postgresql) === null || _b === void 0 ? void 0 : _b.database)]);
-    if (err) {
-        console.error(err);
-        return;
-    }
-    for (const view of config.views) {
-        if (view.type == "table") {
-            const tableName = view.tableName;
-            for (const infoEl of info) {
-                if (infoEl.TABLE_NAME == tableName && infoEl.COLUMN_KEY == "PRI") {
-                    view.primaryId = infoEl.COLUMN_NAME;
-                }
-            }
-            for (const column of view.columns) {
-                enrichColumn(column, tableName, info);
-            }
-            if (view.recordViewPanels) {
-                for (const panel of view.recordViewPanels) {
-                    if (panel.createConfig) {
-                        for (const column of panel.createConfig.columns) {
-                            enrichColumn(column, tableName, info);
-                        }
-                    }
-                    if (!panel.__id__) {
-                        panel.__id__ = generateUniqueIdForObject(panel);
-                    }
-                }
-            }
-        }
-        if (view.subviews) {
-            for (const subview of view.subviews) {
-                if (!subview.__id__) {
-                    subview.__id__ = generateUniqueIdForObject(subview);
-                }
-            }
-        }
-        if (!view.__id__) {
-            view.__id__ = generateUniqueIdForObject(view);
-        }
-    }
-    config.enriched = true;
-}
-function enrichColumn(column, tableName, info) {
-    var _a, _b, _c, _d;
-    if (!column.__id__) {
-        column.__id__ = generateUniqueIdForObject(column);
-    }
-    const infoEl = info.find((x) => x.TABLE_NAME == tableName && x.COLUMN_NAME == column.name);
-    if ((infoEl === null || infoEl === void 0 ? void 0 : infoEl.IS_NULLABLE) == "NO" &&
-        (infoEl === null || infoEl === void 0 ? void 0 : infoEl.DATA_TYPE) != "text" &&
-        column.required !== true &&
-        column.required !== false) {
-        column.required = true;
-    }
-    if (!column.dataType && infoEl) {
-        column.dataType = infoEl.DATA_TYPE;
-        if (column.dataType == "enum") {
-            column.dataType = "select";
-            column.options = JSON.parse(infoEl.COLUMN_TYPE.replace("enum(", "[")
-                .replace(")", "]")
-                .replace(/'/g, '"'));
-        }
-    }
-    if (column.dataType == "richText") {
-        column.name = column.contentField;
-    }
-    if (column.dataType == "file" && (column.s3Config || column.gcpConfig)) {
-        const host = ((_a = column.s3Config) === null || _a === void 0 ? void 0 : _a.host) || ((_b = column.gcpConfig) === null || _b === void 0 ? void 0 : _b.host);
-        const bucket = ((_c = column.s3Config) === null || _c === void 0 ? void 0 : _c.bucket) || ((_d = column.gcpConfig) === null || _d === void 0 ? void 0 : _d.bucket);
-        column.baseUrl = `https://${host}/${bucket}/`;
-    }
-}
 //# sourceMappingURL=api.js.map