@intranefr/superbackend 1.4.4 → 1.5.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (195) hide show
  1. package/.env.example +5 -0
  2. package/README.md +11 -0
  3. package/index.js +39 -1
  4. package/package.json +11 -3
  5. package/public/sdk/ui-components.iife.js +191 -0
  6. package/sdk/ui-components/browser/src/index.js +228 -0
  7. package/src/admin/endpointRegistry.js +120 -0
  8. package/src/controllers/admin.controller.js +111 -5
  9. package/src/controllers/adminBlockDefinitions.controller.js +127 -0
  10. package/src/controllers/adminBlockDefinitionsAi.controller.js +54 -0
  11. package/src/controllers/adminCache.controller.js +342 -0
  12. package/src/controllers/adminContextBlockDefinitions.controller.js +141 -0
  13. package/src/controllers/adminCrons.controller.js +388 -0
  14. package/src/controllers/adminDbBrowser.controller.js +124 -0
  15. package/src/controllers/adminEjsVirtual.controller.js +13 -3
  16. package/src/controllers/adminHeadless.controller.js +91 -2
  17. package/src/controllers/adminHealthChecks.controller.js +570 -0
  18. package/src/controllers/adminI18n.controller.js +51 -29
  19. package/src/controllers/adminLlm.controller.js +126 -2
  20. package/src/controllers/adminPages.controller.js +720 -0
  21. package/src/controllers/adminPagesContextBlocksAi.controller.js +54 -0
  22. package/src/controllers/adminProxy.controller.js +113 -0
  23. package/src/controllers/adminRateLimits.controller.js +138 -0
  24. package/src/controllers/adminRbac.controller.js +803 -0
  25. package/src/controllers/adminScripts.controller.js +320 -0
  26. package/src/controllers/adminSeoConfig.controller.js +71 -48
  27. package/src/controllers/adminTerminals.controller.js +39 -0
  28. package/src/controllers/adminUiComponents.controller.js +315 -0
  29. package/src/controllers/adminUiComponentsAi.controller.js +34 -0
  30. package/src/controllers/blogAdmin.controller.js +279 -0
  31. package/src/controllers/blogAiAdmin.controller.js +224 -0
  32. package/src/controllers/blogAutomationAdmin.controller.js +141 -0
  33. package/src/controllers/blogInternal.controller.js +26 -0
  34. package/src/controllers/blogPublic.controller.js +89 -0
  35. package/src/controllers/fileManager.controller.js +190 -0
  36. package/src/controllers/fileManagerStoragePolicy.controller.js +23 -0
  37. package/src/controllers/healthChecksPublic.controller.js +196 -0
  38. package/src/controllers/metrics.controller.js +64 -4
  39. package/src/controllers/orgAdmin.controller.js +366 -0
  40. package/src/controllers/uiComponentsPublic.controller.js +118 -0
  41. package/src/middleware/auth.js +7 -0
  42. package/src/middleware/internalCronAuth.js +29 -0
  43. package/src/middleware/rbac.js +62 -0
  44. package/src/middleware.js +879 -56
  45. package/src/models/BlockDefinition.js +27 -0
  46. package/src/models/BlogAutomationLock.js +14 -0
  47. package/src/models/BlogAutomationRun.js +39 -0
  48. package/src/models/BlogPost.js +42 -0
  49. package/src/models/CacheEntry.js +26 -0
  50. package/src/models/ConsoleEntry.js +32 -0
  51. package/src/models/ConsoleLog.js +23 -0
  52. package/src/models/ContextBlockDefinition.js +33 -0
  53. package/src/models/CronExecution.js +47 -0
  54. package/src/models/CronJob.js +70 -0
  55. package/src/models/ExternalDbConnection.js +49 -0
  56. package/src/models/FileEntry.js +22 -0
  57. package/src/models/HeadlessModelDefinition.js +10 -0
  58. package/src/models/HealthAutoHealAttempt.js +57 -0
  59. package/src/models/HealthCheck.js +132 -0
  60. package/src/models/HealthCheckRun.js +51 -0
  61. package/src/models/HealthIncident.js +49 -0
  62. package/src/models/Page.js +95 -0
  63. package/src/models/PageCollection.js +42 -0
  64. package/src/models/ProxyEntry.js +66 -0
  65. package/src/models/RateLimitCounter.js +19 -0
  66. package/src/models/RateLimitMetricBucket.js +20 -0
  67. package/src/models/RbacGrant.js +25 -0
  68. package/src/models/RbacGroup.js +16 -0
  69. package/src/models/RbacGroupMember.js +13 -0
  70. package/src/models/RbacGroupRole.js +13 -0
  71. package/src/models/RbacRole.js +25 -0
  72. package/src/models/RbacUserRole.js +13 -0
  73. package/src/models/ScriptDefinition.js +42 -0
  74. package/src/models/ScriptRun.js +22 -0
  75. package/src/models/UiComponent.js +29 -0
  76. package/src/models/UiComponentProject.js +26 -0
  77. package/src/models/UiComponentProjectComponent.js +18 -0
  78. package/src/routes/admin.routes.js +1 -0
  79. package/src/routes/adminBlog.routes.js +21 -0
  80. package/src/routes/adminBlogAi.routes.js +16 -0
  81. package/src/routes/adminBlogAutomation.routes.js +27 -0
  82. package/src/routes/adminCache.routes.js +20 -0
  83. package/src/routes/adminConsoleManager.routes.js +302 -0
  84. package/src/routes/adminCrons.routes.js +25 -0
  85. package/src/routes/adminDbBrowser.routes.js +65 -0
  86. package/src/routes/adminEjsVirtual.routes.js +2 -1
  87. package/src/routes/adminHeadless.routes.js +8 -1
  88. package/src/routes/adminHealthChecks.routes.js +28 -0
  89. package/src/routes/adminI18n.routes.js +4 -3
  90. package/src/routes/adminLlm.routes.js +4 -2
  91. package/src/routes/adminPages.routes.js +55 -0
  92. package/src/routes/adminProxy.routes.js +15 -0
  93. package/src/routes/adminRateLimits.routes.js +17 -0
  94. package/src/routes/adminRbac.routes.js +38 -0
  95. package/src/routes/adminScripts.routes.js +21 -0
  96. package/src/routes/adminSeoConfig.routes.js +5 -4
  97. package/src/routes/adminTerminals.routes.js +13 -0
  98. package/src/routes/adminUiComponents.routes.js +30 -0
  99. package/src/routes/blogInternal.routes.js +14 -0
  100. package/src/routes/blogPublic.routes.js +9 -0
  101. package/src/routes/fileManager.routes.js +62 -0
  102. package/src/routes/fileManagerStoragePolicy.routes.js +9 -0
  103. package/src/routes/healthChecksPublic.routes.js +9 -0
  104. package/src/routes/log.routes.js +43 -60
  105. package/src/routes/metrics.routes.js +4 -2
  106. package/src/routes/orgAdmin.routes.js +6 -0
  107. package/src/routes/pages.routes.js +123 -0
  108. package/src/routes/proxy.routes.js +46 -0
  109. package/src/routes/rbac.routes.js +47 -0
  110. package/src/routes/uiComponentsPublic.routes.js +9 -0
  111. package/src/routes/webhook.routes.js +2 -1
  112. package/src/routes/workflows.routes.js +4 -0
  113. package/src/services/blockDefinitionsAi.service.js +247 -0
  114. package/src/services/blog.service.js +99 -0
  115. package/src/services/blogAutomation.service.js +978 -0
  116. package/src/services/blogCronsBootstrap.service.js +184 -0
  117. package/src/services/blogPublishing.service.js +58 -0
  118. package/src/services/cacheLayer.service.js +696 -0
  119. package/src/services/consoleManager.service.js +700 -0
  120. package/src/services/consoleOverride.service.js +6 -1
  121. package/src/services/cronScheduler.service.js +350 -0
  122. package/src/services/dbBrowser.service.js +536 -0
  123. package/src/services/ejsVirtual.service.js +102 -32
  124. package/src/services/fileManager.service.js +475 -0
  125. package/src/services/fileManagerStoragePolicy.service.js +285 -0
  126. package/src/services/headlessExternalModels.service.js +292 -0
  127. package/src/services/headlessModels.service.js +26 -6
  128. package/src/services/healthChecks.service.js +650 -0
  129. package/src/services/healthChecksBootstrap.service.js +109 -0
  130. package/src/services/healthChecksScheduler.service.js +106 -0
  131. package/src/services/llmDefaults.service.js +190 -0
  132. package/src/services/migrationAssets/s3.js +2 -2
  133. package/src/services/pages.service.js +602 -0
  134. package/src/services/pagesContext.service.js +331 -0
  135. package/src/services/pagesContextBlocksAi.service.js +349 -0
  136. package/src/services/proxy.service.js +535 -0
  137. package/src/services/rateLimiter.service.js +623 -0
  138. package/src/services/rbac.service.js +212 -0
  139. package/src/services/scriptsRunner.service.js +259 -0
  140. package/src/services/terminals.service.js +152 -0
  141. package/src/services/terminalsWs.service.js +100 -0
  142. package/src/services/uiComponentsAi.service.js +299 -0
  143. package/src/services/uiComponentsCrypto.service.js +39 -0
  144. package/src/services/workflow.service.js +23 -8
  145. package/src/utils/orgRoles.js +14 -0
  146. package/src/utils/rbac/engine.js +60 -0
  147. package/src/utils/rbac/rightsRegistry.js +29 -0
  148. package/views/admin-blog-automation.ejs +877 -0
  149. package/views/admin-blog-edit.ejs +542 -0
  150. package/views/admin-blog.ejs +399 -0
  151. package/views/admin-cache.ejs +681 -0
  152. package/views/admin-console-manager.ejs +680 -0
  153. package/views/admin-crons.ejs +645 -0
  154. package/views/admin-db-browser.ejs +445 -0
  155. package/views/admin-ejs-virtual.ejs +16 -10
  156. package/views/admin-file-manager.ejs +942 -0
  157. package/views/admin-headless.ejs +294 -24
  158. package/views/admin-health-checks.ejs +725 -0
  159. package/views/admin-i18n.ejs +59 -5
  160. package/views/admin-llm.ejs +99 -1
  161. package/views/admin-organizations.ejs +528 -10
  162. package/views/admin-pages.ejs +2424 -0
  163. package/views/admin-proxy.ejs +491 -0
  164. package/views/admin-rate-limiter.ejs +625 -0
  165. package/views/admin-rbac.ejs +1331 -0
  166. package/views/admin-scripts.ejs +497 -0
  167. package/views/admin-seo-config.ejs +61 -7
  168. package/views/admin-terminals.ejs +328 -0
  169. package/views/admin-ui-components.ejs +741 -0
  170. package/views/admin-users.ejs +261 -4
  171. package/views/admin-workflows.ejs +7 -7
  172. package/views/file-manager.ejs +866 -0
  173. package/views/pages/blocks/contact.ejs +27 -0
  174. package/views/pages/blocks/cta.ejs +18 -0
  175. package/views/pages/blocks/faq.ejs +20 -0
  176. package/views/pages/blocks/features.ejs +19 -0
  177. package/views/pages/blocks/hero.ejs +13 -0
  178. package/views/pages/blocks/html.ejs +5 -0
  179. package/views/pages/blocks/image.ejs +14 -0
  180. package/views/pages/blocks/testimonials.ejs +26 -0
  181. package/views/pages/blocks/text.ejs +10 -0
  182. package/views/pages/layouts/default.ejs +51 -0
  183. package/views/pages/layouts/minimal.ejs +42 -0
  184. package/views/pages/layouts/sidebar.ejs +54 -0
  185. package/views/pages/partials/footer.ejs +13 -0
  186. package/views/pages/partials/header.ejs +12 -0
  187. package/views/pages/partials/sidebar.ejs +8 -0
  188. package/views/pages/runtime/page.ejs +10 -0
  189. package/views/pages/templates/article.ejs +20 -0
  190. package/views/pages/templates/default.ejs +12 -0
  191. package/views/pages/templates/landing.ejs +14 -0
  192. package/views/pages/templates/listing.ejs +15 -0
  193. package/views/partials/admin-image-upload-modal.ejs +221 -0
  194. package/views/partials/dashboard/nav-items.ejs +14 -0
  195. package/views/partials/llm-provider-model-picker.ejs +183 -0
@@ -0,0 +1,27 @@
1
+ const express = require('express');
2
+ const router = express.Router();
3
+
4
+ const { basicAuth } = require('../middleware/auth');
5
+ const controller = require('../controllers/blogAutomationAdmin.controller');
6
+ const rateLimiter = require('../services/rateLimiter.service');
7
+
8
+ router.use(basicAuth);
9
+ router.use(express.json({ limit: '2mb' }));
10
+
11
+ router.get('/blog-automation/config', controller.getConfig);
12
+ router.put('/blog-automation/config', controller.saveConfig);
13
+
14
+ router.get('/blog-automation/configs', controller.listConfigs);
15
+ router.post('/blog-automation/configs', controller.createConfig);
16
+ router.get('/blog-automation/configs/:id', controller.getConfigById);
17
+ router.post('/blog-automation/configs/:id/preview-prompts', controller.previewPromptsByConfigId);
18
+ router.put('/blog-automation/configs/:id', controller.updateConfigById);
19
+ router.delete('/blog-automation/configs/:id', controller.deleteConfigById);
20
+
21
+ router.get('/blog-automation/style-guide', controller.getStyleGuide);
22
+ router.put('/blog-automation/style-guide', controller.saveStyleGuide);
23
+
24
+ router.get('/blog-automation/runs', controller.listRuns);
25
+ router.post('/blog-automation/run-now', rateLimiter.limit('blogAiLimiter'), controller.runNow);
26
+
27
+ module.exports = router;
@@ -0,0 +1,20 @@
1
+ const express = require('express');
2
+ const router = express.Router();
3
+
4
+ const { basicAuth } = require('../middleware/auth');
5
+ const controller = require('../controllers/adminCache.controller');
6
+
7
+ router.use(basicAuth);
8
+
9
+ router.get('/config', controller.getConfig);
10
+ router.put('/config', controller.updateConfig);
11
+
12
+ router.get('/keys', controller.listKeys);
13
+ router.get('/entry', controller.getEntry);
14
+ router.put('/entry', controller.setEntry);
15
+ router.delete('/entry', controller.deleteEntry);
16
+
17
+ router.post('/clear', controller.clearCache);
18
+ router.get('/metrics', controller.metrics);
19
+
20
+ module.exports = router;
@@ -0,0 +1,302 @@
1
+ const express = require('express');
2
+ const router = express.Router();
3
+
4
+ const { basicAuth } = require('../middleware/auth');
5
+ const ConsoleEntry = require('../models/ConsoleEntry');
6
+ const ConsoleLog = require('../models/ConsoleLog');
7
+ const GlobalSetting = require('../models/GlobalSetting');
8
+ const consoleManager = require('../services/consoleManager.service');
9
+
10
+ function normalizeTags(val) {
11
+ if (!val) return [];
12
+ if (Array.isArray(val)) return val.map((t) => String(t).trim()).filter(Boolean);
13
+ return String(val)
14
+ .split(',')
15
+ .map((t) => t.trim())
16
+ .filter(Boolean);
17
+ }
18
+
19
+ function toInt(val, fallback) {
20
+ const n = parseInt(String(val), 10);
21
+ return Number.isFinite(n) ? n : fallback;
22
+ }
23
+
24
+ router.use(basicAuth);
25
+
26
+ router.get('/config', async (req, res) => {
27
+ try {
28
+ const cfg = await consoleManager.getConfig();
29
+ res.json({ config: cfg });
30
+ } catch (err) {
31
+ res.status(500).json({ error: err?.message || 'Failed to load config' });
32
+ }
33
+ });
34
+
35
+ router.put('/config', async (req, res) => {
36
+ try {
37
+ const cfg = req.body || {};
38
+ await consoleManager.updateConfig(cfg);
39
+ await consoleManager.applyDefaultsRetroactively(cfg);
40
+ const next = await consoleManager.getConfig();
41
+ res.json({ ok: true, config: next });
42
+ } catch (err) {
43
+ res.status(500).json({ error: err?.message || 'Failed to update config' });
44
+ }
45
+ });
46
+
47
+ router.get('/entries', async (req, res) => {
48
+ try {
49
+ const {
50
+ method,
51
+ enabled,
52
+ q,
53
+ sort = 'lastSeenAt',
54
+ order = 'desc',
55
+ page = 1,
56
+ pageSize = 50,
57
+ tags,
58
+ } = req.query;
59
+
60
+ const filter = {};
61
+
62
+ if (method && ['debug', 'log', 'info', 'warn', 'error'].includes(String(method))) {
63
+ filter.method = String(method);
64
+ }
65
+
66
+ if (enabled !== undefined) {
67
+ if (String(enabled) === 'true') filter.enabled = true;
68
+ if (String(enabled) === 'false') filter.enabled = false;
69
+ }
70
+
71
+ const tagList = normalizeTags(tags);
72
+ if (tagList.length) {
73
+ filter.tags = { $all: tagList };
74
+ }
75
+
76
+ if (q) {
77
+ filter.$or = [
78
+ { messageTemplate: { $regex: String(q), $options: 'i' } },
79
+ { topFrame: { $regex: String(q), $options: 'i' } },
80
+ { hash: { $regex: String(q), $options: 'i' } },
81
+ ];
82
+ }
83
+
84
+ const sortField = ['lastSeenAt', 'countTotal', 'firstSeenAt', 'method'].includes(sort) ? sort : 'lastSeenAt';
85
+ const sortOrder = String(order) === 'asc' ? 1 : -1;
86
+
87
+ const limit = Math.min(200, Math.max(1, toInt(pageSize, 50)));
88
+ const skip = (Math.max(1, toInt(page, 1)) - 1) * limit;
89
+
90
+ const [items, total] = await Promise.all([
91
+ ConsoleEntry.find(filter)
92
+ .sort({ [sortField]: sortOrder })
93
+ .skip(skip)
94
+ .limit(limit)
95
+ .lean(),
96
+ ConsoleEntry.countDocuments(filter),
97
+ ]);
98
+
99
+ res.json({
100
+ items,
101
+ pagination: {
102
+ total,
103
+ page: Math.max(1, toInt(page, 1)),
104
+ pageSize: limit,
105
+ totalPages: Math.ceil(total / limit),
106
+ },
107
+ });
108
+ } catch (err) {
109
+ res.status(500).json({ error: err?.message || 'Failed to list entries' });
110
+ }
111
+ });
112
+
113
+ router.put('/entries/bulk-enable', async (req, res) => {
114
+ try {
115
+ const body = req.body || {};
116
+ const hashes = Array.isArray(body.hashes) ? body.hashes.map((h) => String(h).trim()).filter(Boolean) : [];
117
+ const nextEnabled = Boolean(body.enabled);
118
+
119
+ if (!hashes.length) {
120
+ return res.status(400).json({ error: 'hashes is required' });
121
+ }
122
+
123
+ const result = await ConsoleEntry.updateMany(
124
+ { hash: { $in: hashes } },
125
+ { $set: { enabled: nextEnabled, enabledExplicit: true } },
126
+ );
127
+
128
+ res.json({ ok: true, matched: result.matchedCount ?? result.n, modified: result.modifiedCount ?? result.nModified });
129
+ } catch (err) {
130
+ res.status(500).json({ error: err?.message || 'Failed to bulk update entries' });
131
+ }
132
+ });
133
+
134
+ router.put('/entries/bulk-tags', async (req, res) => {
135
+ try {
136
+ const body = req.body || {};
137
+ const hashes = Array.isArray(body.hashes) ? body.hashes.map((h) => String(h).trim()).filter(Boolean) : [];
138
+
139
+ if (!hashes.length) {
140
+ return res.status(400).json({ error: 'hashes is required' });
141
+ }
142
+
143
+ const add = normalizeTags(body.add);
144
+ const remove = normalizeTags(body.remove);
145
+
146
+ const update = {};
147
+ if (add.length) {
148
+ update.$addToSet = { tags: { $each: add } };
149
+ }
150
+ if (remove.length) {
151
+ update.$pull = { tags: { $in: remove } };
152
+ }
153
+
154
+ if (!Object.keys(update).length) {
155
+ return res.status(400).json({ error: 'add or remove tags required' });
156
+ }
157
+
158
+ await ConsoleEntry.updateMany({ hash: { $in: hashes } }, update);
159
+
160
+ res.json({ ok: true });
161
+ } catch (err) {
162
+ res.status(500).json({ error: err?.message || 'Failed to update tags' });
163
+ }
164
+ });
165
+
166
+ router.get('/tags', async (req, res) => {
167
+ try {
168
+ const items = await ConsoleEntry.aggregate([
169
+ { $unwind: '$tags' },
170
+ { $group: { _id: '$tags', count: { $sum: 1 } } },
171
+ { $sort: { count: -1, _id: 1 } },
172
+ ]);
173
+
174
+ res.json({
175
+ items: items.map((it) => ({ tag: it._id, count: it.count })),
176
+ });
177
+ } catch (err) {
178
+ res.status(500).json({ error: err?.message || 'Failed to list tags' });
179
+ }
180
+ });
181
+
182
+ router.get('/logs', async (req, res) => {
183
+ try {
184
+ const { method, q, entryHash, page = 1, pageSize = 50, tags } = req.query;
185
+
186
+ const filter = {};
187
+
188
+ if (method && ['debug', 'log', 'info', 'warn', 'error'].includes(String(method))) {
189
+ filter.method = String(method);
190
+ }
191
+
192
+ if (entryHash) {
193
+ filter.entryHash = String(entryHash);
194
+ }
195
+
196
+ const tagList = normalizeTags(tags);
197
+ if (tagList.length) {
198
+ filter.tagsSnapshot = { $all: tagList };
199
+ }
200
+
201
+ if (q) {
202
+ filter.$or = [
203
+ { message: { $regex: String(q), $options: 'i' } },
204
+ { argsPreview: { $regex: String(q), $options: 'i' } },
205
+ { entryHash: { $regex: String(q), $options: 'i' } },
206
+ ];
207
+ }
208
+
209
+ const limit = Math.min(200, Math.max(1, toInt(pageSize, 50)));
210
+ const skip = (Math.max(1, toInt(page, 1)) - 1) * limit;
211
+
212
+ const [items, total] = await Promise.all([
213
+ ConsoleLog.find(filter)
214
+ .sort({ createdAt: -1 })
215
+ .skip(skip)
216
+ .limit(limit)
217
+ .lean(),
218
+ ConsoleLog.countDocuments(filter),
219
+ ]);
220
+
221
+ res.json({
222
+ items,
223
+ pagination: {
224
+ total,
225
+ page: Math.max(1, toInt(page, 1)),
226
+ pageSize: limit,
227
+ totalPages: Math.ceil(total / limit),
228
+ },
229
+ });
230
+ } catch (err) {
231
+ res.status(500).json({ error: err?.message || 'Failed to list logs' });
232
+ }
233
+ });
234
+
235
+ router.delete('/entries/bulk-delete', async (req, res) => {
236
+ try {
237
+ const body = req.body || {};
238
+ const hashes = Array.isArray(body.hashes) ? body.hashes.map((h) => String(h).trim()).filter(Boolean) : [];
239
+ const deleteLogs = Boolean(body.deleteLogs);
240
+
241
+ if (!hashes.length) {
242
+ return res.status(400).json({ error: 'hashes is required and cannot be empty' });
243
+ }
244
+
245
+ // Delete ConsoleEntry documents
246
+ const entryResult = await ConsoleEntry.deleteMany({ hash: { $in: hashes } });
247
+ let deletedLogs = 0;
248
+
249
+ // Optionally delete associated ConsoleLog documents
250
+ if (deleteLogs) {
251
+ const logResult = await ConsoleLog.deleteMany({ entryHash: { $in: hashes } });
252
+ deletedLogs = logResult.deletedCount ?? logResult.n;
253
+ }
254
+
255
+ res.json({
256
+ ok: true,
257
+ deletedEntries: entryResult.deletedCount ?? entryResult.n,
258
+ deletedLogs,
259
+ });
260
+ } catch (err) {
261
+ res.status(500).json({ error: err?.message || 'Failed to bulk delete entries' });
262
+ }
263
+ });
264
+
265
+ // Global Settings endpoint for console manager control
266
+ router.get('/global-setting', async (req, res) => {
267
+ try {
268
+ const globalSetting = await GlobalSetting.findOne({ key: 'CONSOLE_MANAGER_ENABLED' }).lean();
269
+ const value = globalSetting ? globalSetting.value : 'true';
270
+ res.json({ enabled: String(value) === 'true' });
271
+ } catch (err) {
272
+ res.status(500).json({ error: err?.message || 'Failed to load global setting' });
273
+ }
274
+ });
275
+
276
+ router.put('/global-setting', async (req, res) => {
277
+ try {
278
+ const { enabled } = req.body;
279
+ const enabledValue = Boolean(enabled) ? 'true' : 'false';
280
+
281
+ await GlobalSetting.findOneAndUpdate(
282
+ { key: 'CONSOLE_MANAGER_ENABLED' },
283
+ {
284
+ key: 'CONSOLE_MANAGER_ENABLED',
285
+ value: enabledValue,
286
+ type: 'string',
287
+ description: 'Enable/disable console manager initialization (requires restart)'
288
+ },
289
+ { upsert: true, new: true }
290
+ );
291
+
292
+ res.json({
293
+ ok: true,
294
+ enabled: Boolean(enabled),
295
+ message: 'Console manager global setting updated. Restart required for changes to take effect.'
296
+ });
297
+ } catch (err) {
298
+ res.status(500).json({ error: err?.message || 'Failed to update global setting' });
299
+ }
300
+ });
301
+
302
+ module.exports = router;
@@ -0,0 +1,25 @@
1
+ const express = require('express');
2
+ const router = express.Router();
3
+
4
+ const { basicAuth } = require('../middleware/auth');
5
+ const controller = require('../controllers/adminCrons.controller');
6
+
7
+ router.use(basicAuth);
8
+
9
+ router.get('/', controller.listCronJobs);
10
+ router.post('/', controller.createCronJob);
11
+ router.get('/presets', controller.getCronPresets);
12
+ router.post('/preview', controller.previewNextRuns);
13
+
14
+ router.get('/:id', controller.getCronJob);
15
+ router.put('/:id', controller.updateCronJob);
16
+ router.delete('/:id', controller.deleteCronJob);
17
+
18
+ router.post('/:id/enable', controller.enableCronJob);
19
+ router.post('/:id/disable', controller.disableCronJob);
20
+ router.post('/:id/trigger', controller.triggerCronJob);
21
+
22
+ router.get('/:id/executions', controller.getExecutionHistory);
23
+ router.get('/:id/executions/:eid', controller.getExecution);
24
+
25
+ module.exports = router;
@@ -0,0 +1,65 @@
1
+ const express = require('express');
2
+ const router = express.Router();
3
+
4
+ const { basicAuth } = require('../middleware/auth');
5
+ const { auditMiddleware } = require('../services/auditLogger');
6
+ const controller = require('../controllers/adminDbBrowser.controller');
7
+
8
+ router.use(basicAuth);
9
+
10
+ // Connection profiles
11
+ router.get('/connections', controller.listConnections);
12
+ router.get('/connections/:id', controller.getConnection);
13
+
14
+ router.post(
15
+ '/connections',
16
+ auditMiddleware('admin.db_browser.connections.create', { entityType: 'ExternalDbConnection' }),
17
+ controller.createConnection,
18
+ );
19
+
20
+ router.patch(
21
+ '/connections/:id',
22
+ auditMiddleware('admin.db_browser.connections.update', { entityType: 'ExternalDbConnection' }),
23
+ controller.updateConnection,
24
+ );
25
+
26
+ router.delete(
27
+ '/connections/:id',
28
+ auditMiddleware('admin.db_browser.connections.delete', { entityType: 'ExternalDbConnection' }),
29
+ controller.deleteConnection,
30
+ );
31
+
32
+ router.post(
33
+ '/connections/:id/test',
34
+ auditMiddleware('admin.db_browser.connections.test', { entityType: 'ExternalDbConnection' }),
35
+ controller.testConnection,
36
+ );
37
+
38
+ // Browsing
39
+ router.get(
40
+ '/connections/:id/databases',
41
+ auditMiddleware('admin.db_browser.browse.databases', { entityType: 'ExternalDbConnection' }),
42
+ controller.listDatabases,
43
+ );
44
+ router.get(
45
+ '/connections/:id/databases/:database/namespaces',
46
+ auditMiddleware('admin.db_browser.browse.namespaces', { entityType: 'ExternalDbConnection' }),
47
+ controller.listNamespaces,
48
+ );
49
+ router.get(
50
+ '/connections/:id/databases/:database/namespaces/:namespace/schema',
51
+ auditMiddleware('admin.db_browser.browse.schema', { entityType: 'ExternalDbConnection' }),
52
+ controller.getSchema,
53
+ );
54
+ router.get(
55
+ '/connections/:id/databases/:database/namespaces/:namespace/records',
56
+ auditMiddleware('admin.db_browser.browse.records', { entityType: 'ExternalDbConnection' }),
57
+ controller.listRecords,
58
+ );
59
+ router.get(
60
+ '/connections/:id/databases/:database/namespaces/:namespace/records/:recordId',
61
+ auditMiddleware('admin.db_browser.browse.record', { entityType: 'ExternalDbConnection' }),
62
+ controller.getRecord,
63
+ );
64
+
65
+ module.exports = router;
@@ -2,6 +2,7 @@ const express = require('express');
2
2
  const router = express.Router();
3
3
  const { basicAuth } = require('../middleware/auth');
4
4
  const controller = require('../controllers/adminEjsVirtual.controller');
5
+ const rateLimiter = require('../services/rateLimiter.service');
5
6
 
6
7
  router.use(basicAuth);
7
8
 
@@ -11,7 +12,7 @@ router.put('/file', controller.saveFile);
11
12
  router.post('/file/revert', controller.revertToDefault);
12
13
  router.get('/history', controller.listHistory);
13
14
  router.post('/rollback', controller.rollback);
14
- router.post('/vibe', controller.vibe);
15
+ router.post('/vibe', rateLimiter.limit('aiOperationsLimiter'), controller.vibe);
15
16
  router.post('/cache/clear', controller.clearCache);
16
17
 
17
18
  module.exports = router;
@@ -3,6 +3,7 @@ const router = express.Router();
3
3
 
4
4
  const { basicAuth } = require('../middleware/auth');
5
5
  const adminHeadlessController = require('../controllers/adminHeadless.controller');
6
+ const rateLimiter = require('../services/rateLimiter.service');
6
7
 
7
8
  router.use(basicAuth);
8
9
 
@@ -13,12 +14,18 @@ router.post('/models', adminHeadlessController.createModel);
13
14
  router.put('/models/:codeIdentifier', adminHeadlessController.updateModel);
14
15
  router.delete('/models/:codeIdentifier', adminHeadlessController.deleteModel);
15
16
 
17
+ // External models (Mongo collections)
18
+ router.get('/external/collections', adminHeadlessController.listExternalCollections);
19
+ router.post('/external/infer', adminHeadlessController.inferExternalCollection);
20
+ router.post('/external/import', adminHeadlessController.importExternalModel);
21
+ router.post('/models/:codeIdentifier/sync', adminHeadlessController.syncExternalModel);
22
+
16
23
  // Advanced JSON / bulk helpers
17
24
  router.post('/models/validate', adminHeadlessController.validateModelDefinition);
18
25
  router.post('/models/apply', adminHeadlessController.applyModelProposal);
19
26
 
20
27
  // AI model builder
21
- router.post('/ai/model-builder/chat', adminHeadlessController.aiModelBuilderChat);
28
+ router.post('/ai/model-builder/chat', rateLimiter.limit('aiOperationsLimiter'), adminHeadlessController.aiModelBuilderChat);
22
29
 
23
30
  // Admin collections CRUD (UI)
24
31
  router.get('/collections/:modelCode', adminHeadlessController.listCollectionItems);
@@ -0,0 +1,28 @@
1
+ const express = require('express');
2
+ const router = express.Router();
3
+
4
+ const { basicAuth } = require('../middleware/auth');
5
+ const controller = require('../controllers/adminHealthChecks.controller');
6
+
7
+ router.use(basicAuth);
8
+
9
+ router.get('/config', controller.getConfig);
10
+ router.put('/config', controller.updateConfig);
11
+
12
+ router.get('/', controller.listHealthChecks);
13
+ router.post('/', controller.createHealthCheck);
14
+
15
+ router.get('/:id', controller.getHealthCheck);
16
+ router.put('/:id', controller.updateHealthCheck);
17
+ router.delete('/:id', controller.deleteHealthCheck);
18
+
19
+ router.post('/:id/enable', controller.enableHealthCheck);
20
+ router.post('/:id/disable', controller.disableHealthCheck);
21
+ router.post('/:id/trigger', controller.triggerHealthCheck);
22
+
23
+ router.get('/:id/runs', controller.getRunHistory);
24
+ router.get('/:id/incidents', controller.getIncidents);
25
+ router.post('/:id/incidents/:incidentId/acknowledge', controller.acknowledgeIncident);
26
+ router.post('/:id/incidents/:incidentId/resolve', controller.resolveIncident);
27
+
28
+ module.exports = router;
@@ -3,6 +3,7 @@ const router = express.Router();
3
3
  const { basicAuth } = require('../middleware/auth');
4
4
 
5
5
  const adminI18nController = require('../controllers/adminI18n.controller');
6
+ const rateLimiter = require('../services/rateLimiter.service');
6
7
 
7
8
  router.use(basicAuth);
8
9
 
@@ -15,8 +16,8 @@ router.post('/entries', adminI18nController.createEntry);
15
16
  router.put('/entries/:id', adminI18nController.updateEntry);
16
17
  router.delete('/entries/:id', adminI18nController.deleteEntry);
17
18
 
18
- router.post('/ai/preview', adminI18nController.aiPreview);
19
- router.post('/ai/apply', adminI18nController.aiApply);
20
- router.post('/ai/translate-text', adminI18nController.aiTranslateText);
19
+ router.post('/ai/preview', rateLimiter.limit('i18nAiLimiter'), adminI18nController.aiPreview);
20
+ router.post('/ai/apply', rateLimiter.limit('i18nAiLimiter'), adminI18nController.aiApply);
21
+ router.post('/ai/translate-text', rateLimiter.limit('i18nAiLimiter'), adminI18nController.aiTranslateText);
21
22
 
22
23
  module.exports = router;
@@ -2,10 +2,12 @@ const express = require("express");
2
2
  const router = express.Router();
3
3
  const { basicAuth } = require("../middleware/auth");
4
4
  const adminLlmController = require("../controllers/adminLlm.controller");
5
+ const rateLimiter = require("../services/rateLimiter.service");
5
6
 
6
7
  router.get("/config", basicAuth, adminLlmController.getConfig);
7
- router.post("/config", basicAuth, adminLlmController.saveConfig);
8
- router.post("/prompts/:key/test", basicAuth, adminLlmController.testPrompt);
8
+ router.post("/config", basicAuth, rateLimiter.limit("llmConfigLimiter"), adminLlmController.saveConfig);
9
+ router.get("/openrouter/models", basicAuth, adminLlmController.listOpenRouterModels);
10
+ router.post("/prompts/:key/test", basicAuth, rateLimiter.limit("llmConfigLimiter"), adminLlmController.testPrompt);
9
11
  router.get("/audit", basicAuth, adminLlmController.listAudit);
10
12
  router.get("/costs", basicAuth, adminLlmController.listCosts);
11
13
 
@@ -0,0 +1,55 @@
1
+ const express = require('express');
2
+ const router = express.Router();
3
+ const { basicAuth } = require('../middleware/auth');
4
+ const controller = require('../controllers/adminPages.controller');
5
+ const adminBlockDefinitionsController = require('../controllers/adminBlockDefinitions.controller');
6
+ const adminBlockDefinitionsAiController = require('../controllers/adminBlockDefinitionsAi.controller');
7
+ const adminContextBlockDefinitionsController = require('../controllers/adminContextBlockDefinitions.controller');
8
+ const adminPagesContextBlocksAiController = require('../controllers/adminPagesContextBlocksAi.controller');
9
+ const rateLimiter = require('../services/rateLimiter.service');
10
+
11
+ router.use(basicAuth);
12
+
13
+ router.get('/collections', controller.listCollections);
14
+ router.get('/collections/:id', controller.getCollection);
15
+ router.post('/collections', controller.createCollection);
16
+ router.put('/collections/:id', controller.updateCollection);
17
+ router.delete('/collections/:id', controller.deleteCollection);
18
+
19
+ router.get('/pages', controller.listPages);
20
+ router.get('/pages/:id', controller.getPage);
21
+ router.post('/pages', controller.createPage);
22
+ router.put('/pages/:id', controller.updatePage);
23
+ router.delete('/pages/:id', controller.deletePage);
24
+
25
+ router.post('/pages/:id/publish', controller.publishPage);
26
+ router.post('/pages/:id/unpublish', controller.unpublishPage);
27
+
28
+ router.post('/pages/:id/test-context', controller.testPageContextPhase);
29
+ router.post('/pages/:id/test-block', controller.testPageContextBlock);
30
+ router.post('/test-block', controller.testContextBlockAdhoc);
31
+
32
+ router.get('/templates', controller.getAvailableTemplates);
33
+ router.get('/layouts', controller.getAvailableLayouts);
34
+ router.get('/blocks', controller.getAvailableBlocks);
35
+ router.get('/blocks-schema', controller.getBlocksSchema);
36
+
37
+ router.get('/block-definitions', adminBlockDefinitionsController.list);
38
+ router.post('/block-definitions', adminBlockDefinitionsController.create);
39
+ router.get('/block-definitions/:code', adminBlockDefinitionsController.get);
40
+ router.put('/block-definitions/:code', adminBlockDefinitionsController.update);
41
+ router.delete('/block-definitions/:code', adminBlockDefinitionsController.remove);
42
+
43
+ router.get('/context-block-definitions', adminContextBlockDefinitionsController.list);
44
+ router.post('/context-block-definitions', adminContextBlockDefinitionsController.create);
45
+ router.get('/context-block-definitions/:code', adminContextBlockDefinitionsController.get);
46
+ router.put('/context-block-definitions/:code', adminContextBlockDefinitionsController.update);
47
+ router.delete('/context-block-definitions/:code', adminContextBlockDefinitionsController.remove);
48
+
49
+ router.post('/ai/block-definitions/generate', rateLimiter.limit('aiOperationsLimiter'), adminBlockDefinitionsAiController.generate);
50
+ router.post('/ai/block-definitions/:code/propose', rateLimiter.limit('aiOperationsLimiter'), adminBlockDefinitionsAiController.propose);
51
+
52
+ router.post('/ai/context-blocks/generate', rateLimiter.limit('aiOperationsLimiter'), adminPagesContextBlocksAiController.generate);
53
+ router.post('/ai/context-blocks/propose', rateLimiter.limit('aiOperationsLimiter'), adminPagesContextBlocksAiController.propose);
54
+
55
+ module.exports = router;
@@ -0,0 +1,15 @@
1
+ const express = require('express');
2
+ const router = express.Router();
3
+
4
+ const { basicAuth } = require('../middleware/auth');
5
+ const controller = require('../controllers/adminProxy.controller');
6
+
7
+ router.use(basicAuth);
8
+
9
+ router.get('/entries', controller.list);
10
+ router.get('/entries/:id', controller.get);
11
+ router.post('/entries', controller.create);
12
+ router.put('/entries/:id', controller.update);
13
+ router.delete('/entries/:id', controller.delete);
14
+
15
+ module.exports = router;
@@ -0,0 +1,17 @@
1
+ const express = require('express');
2
+ const router = express.Router();
3
+
4
+ const { basicAuth } = require('../middleware/auth');
5
+ const adminRateLimitsController = require('../controllers/adminRateLimits.controller');
6
+
7
+ router.get('/', basicAuth, adminRateLimitsController.list);
8
+ router.get('/config', basicAuth, adminRateLimitsController.getConfig);
9
+ router.put('/config', basicAuth, adminRateLimitsController.updateConfig);
10
+ router.get('/metrics', basicAuth, adminRateLimitsController.getMetrics);
11
+
12
+ router.post('/bulk-enabled', basicAuth, adminRateLimitsController.bulkEnabled);
13
+
14
+ router.put('/:id', basicAuth, adminRateLimitsController.updateLimiter);
15
+ router.post('/:id/reset', basicAuth, adminRateLimitsController.resetLimiter);
16
+
17
+ module.exports = router;