@kollors/deep-json-server 1.0.0-alpha.5 → 1.0.0-alpha.7

package/dist/bin/deep-json-server.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import process from 'node:process';
-import { runCli } from '../src/cli.js';
+import { runCli } from '../src/cli/index.js';
 try {
     await runCli();
 }

package/dist/bin/deep-json-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"deep-json-server.js","sourceRoot":"","sources":["../../bin/deep-json-server.ts"],"names":[],"mappings":";AAEA,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC,IAAI,CAAC;IACH,MAAM,MAAM,EAAE,CAAC;AACjB,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC"}
+{"version":3,"file":"deep-json-server.js","sourceRoot":"","sources":["../../bin/deep-json-server.ts"],"names":[],"mappings":";AAEA,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C,IAAI,CAAC;IACH,MAAM,MAAM,EAAE,CAAC;AACjB,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC"}

package/dist/index.d.ts

@@ -1,10 +1,14 @@
-export type { DatabaseConfig, DeepJsonServerConfig, FilesConfig, GraphqlConfig, MemoryFile, OpenapiConfig, ServerConfig } from './src/config.js';
-export type { ServerFeatures } from './src/features.js';
+export type { AuthConfig, AuthSession, AuthUser, AuthUserRecord } from './src/auth/contract.js';
+export { hashPassword } from './src/auth/public.js';
+export type { EntityDefinition, Field, ModelSchema } from './src/core/model.js';
 export type { FileUpdate } from './src/files/contract.js';
 export type { FileMetadata } from './src/files/http.js';
-export type { EntityDefinition, Field, ModelSchema } from './src/model.js';
-export type { OpenapiOptions } from './src/schema.js';
-export { generateGraphql, generateOpenapi, writeGraphql, writeOpenapi } from './src/schema.js';
-export type { ServerFacade } from './src/server.js';
-export { createServer } from './src/server.js';
-export type { OpenapiDocument } from './src/types.js';
+export { generateGraphql, writeGraphql } from './src/graphql/lazy.js';
+export type { GraphqlOptions } from './src/graphql/public.js';
+export { generateOpenapi, writeOpenapi } from './src/openapi/lazy.js';
+export type { OpenapiOptions } from './src/openapi/public.js';
+export type { OpenapiDocument } from './src/openapi/types.js';
+export type { DatabaseConfig, DeepJsonServerConfig, FilesConfig, GraphqlConfig, MemoryFile, OpenapiConfig, ServerConfig } from './src/server/config.js';
+export type { ServerFacade } from './src/server/create.js';
+export { createServer } from './src/server/create.js';
+export type { ServerFeatures } from './src/server/features.js';

package/dist/index.js

@@ -1,3 +1,5 @@
-export { generateGraphql, generateOpenapi, writeGraphql, writeOpenapi } from './src/schema.js';
-export { createServer } from './src/server.js';
+export { hashPassword } from './src/auth/public.js';
+export { generateGraphql, writeGraphql } from './src/graphql/lazy.js';
+export { generateOpenapi, writeOpenapi } from './src/openapi/lazy.js';
+export { createServer } from './src/server/create.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/F,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAIpD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAEtE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAKtE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/src/auth/contract.d.ts

@@ -0,0 +1,27 @@
+export interface AuthUser {
+    id: string;
+    username: string;
+    isAdmin: boolean;
+}
+export interface AuthUserRecord extends Omit<AuthUser, 'isAdmin'> {
+    isAdmin?: boolean;
+    passwordHash: string;
+}
+export interface AuthConfig {
+    users: string | AuthUserRecord[];
+    /** Session lifetime in seconds. Defaults to one hour. */
+    expiresIn?: number;
+}
+export interface AuthSession {
+    accessToken: string;
+    expiresIn: number;
+    user: AuthUser;
+}
+export declare const AUTH_PATHS: {
+    readonly login: '/auth/login';
+    readonly me: '/auth/me';
+    readonly logout: '/auth/logout';
+};
+export declare const DEFAULT_SESSION_SECONDS = 3600;
+export declare const MAX_USERNAME_LENGTH = 256;
+export declare const MAX_PASSWORD_LENGTH = 1024;

package/dist/src/auth/contract.js

@@ -0,0 +1,5 @@
+export const AUTH_PATHS = { login: '/auth/login', me: '/auth/me', logout: '/auth/logout' };
+export const DEFAULT_SESSION_SECONDS = 3600;
+export const MAX_USERNAME_LENGTH = 256;
+export const MAX_PASSWORD_LENGTH = 1024;
+//# sourceMappingURL=contract.js.map

package/dist/src/auth/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../../src/auth/contract.ts"],"names":[],"mappings":"AAmBA,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAW,CAAC;AACpG,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAC5C,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC"}

package/dist/src/auth/password.d.ts

@@ -0,0 +1,13 @@
+/** Проверяет формат строки с параметрами scrypt, солью и хешем; пароль не проверяет.
+ * @example validPasswordHash('plain text') → false.
+ */
+export declare const validPasswordHash: (value: unknown) => value is string;
+/** Создаёт хеш пароля со случайной солью и сохраняет параметры вычисления в строке.
+ * @example hashPassword('secret') → Promise<string> вида 'scrypt$16384$8$5$<соль>$<хеш>'; результат случаен.
+ */
+export declare function hashPassword(password: string): Promise<string>;
+/** Сравнивает пароль с сохранённым хешем за постоянное время после вычисления scrypt.
+ * @example verifyPassword('secret', await hashPassword('secret')) → true; другой пароль → false.
+ */
+export declare function verifyPassword(password: string, encoded: string): Promise<boolean>;
+export declare const DUMMY_HASH: string;

package/dist/src/auth/password.js

@@ -0,0 +1,37 @@
+import { randomBytes, scrypt, timingSafeEqual } from 'node:crypto';
+import { MAX_PASSWORD_LENGTH } from './contract.js';
+// OWASP scrypt profile: N=2^14, r=8, p=5 (16 MiB memory).
+const PREFIX = 'scrypt$16384$8$5';
+const HASH_PATTERN = /^scrypt\$16384\$8\$5\$([0-9a-f]{32})\$([0-9a-f]{64})$/;
+/** Проверяет формат строки с параметрами scrypt, солью и хешем; пароль не проверяет.
+ * @example validPasswordHash('plain text') → false.
+ */
+export const validPasswordHash = (value) => typeof value === 'string' && HASH_PATTERN.test(value);
+/** Вычисляет 32 байта scrypt для пароля и заданной соли.
+ * @example derive('secret', Buffer.alloc(16)) → Promise<Buffer> длиной 32 байта; одинаковые входы дают одинаковый результат.
+ */
+const derive = (password, salt) => new Promise((resolve, reject) => {
+    scrypt(password, salt, 32, { N: 16384, r: 8, p: 5 }, (error, key) => (error ? reject(error) : resolve(key)));
+});
+/** Создаёт хеш пароля со случайной солью и сохраняет параметры вычисления в строке.
+ * @example hashPassword('secret') → Promise<string> вида 'scrypt$16384$8$5$<соль>$<хеш>'; результат случаен.
+ */
+export async function hashPassword(password) {
+    if (typeof password !== 'string' || !password.length || password.length > MAX_PASSWORD_LENGTH)
+        throw new Error(`Password must contain 1..${MAX_PASSWORD_LENGTH} characters`);
+    const salt = randomBytes(16);
+    const hash = await derive(password, salt);
+    return `${PREFIX}$${salt.toString('hex')}$${hash.toString('hex')}`;
+}
+/** Сравнивает пароль с сохранённым хешем за постоянное время после вычисления scrypt.
+ * @example verifyPassword('secret', await hashPassword('secret')) → true; другой пароль → false.
+ */
+export async function verifyPassword(password, encoded) {
+    const parts = HASH_PATTERN.exec(encoded);
+    if (!parts)
+        return false;
+    const actual = await derive(password, Buffer.from(parts[1], 'hex'));
+    return timingSafeEqual(actual, Buffer.from(parts[2], 'hex'));
+}
+export const DUMMY_HASH = `${PREFIX}$${'0'.repeat(32)}$${'0'.repeat(64)}`;
+//# sourceMappingURL=password.js.map

package/dist/src/auth/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../src/auth/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEpD,0DAA0D;AAC1D,MAAM,MAAM,GAAG,kBAAkB,CAAC;AAClC,MAAM,YAAY,GAAG,uDAAuD,CAAC;AAC7E;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5H;;GAEG;AACH,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAmB,EAAE,CACjE,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC/G,CAAC,CAAC,CAAC;AACL;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,mBAAmB,aAAa,CAAC,CAAC;IAC7K,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1C,OAAO,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACrE,CAAC;AACD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,OAAe;IACpE,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACpE,OAAO,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AAC/D,CAAC;AACD,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC"}

package/dist/src/auth/public.d.ts

@@ -0,0 +1,3 @@
+export type { AuthConfig, AuthSession, AuthUser, AuthUserRecord } from './contract.js';
+/** Creates a salted password hash for an auth user fixture. */
+export declare function hashPassword(password: string): Promise<string>;

package/dist/src/auth/public.js

@@ -0,0 +1,5 @@
+/** Creates a salted password hash for an auth user fixture. */
+export async function hashPassword(password) {
+    return (await import('./password.js')).hashPassword(password);
+}
+//# sourceMappingURL=public.js.map

package/dist/src/auth/public.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.js","sourceRoot":"","sources":["../../../src/auth/public.ts"],"names":[],"mappings":"AACA,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,OAAO,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;AAChE,CAAC"}

package/dist/src/auth/routes.d.ts

@@ -0,0 +1,6 @@
+import type { FastifyInstance } from 'fastify';
+import type { AuthService } from './service.js';
+/** Регистрирует вход, выход и получение текущего пользователя, запрещая кеширование ответов.
+ * @example После регистрации ответы содержат Cache-Control: no-store; функция возвращает undefined.
+ */
+export declare function registerAuthRoutes(server: FastifyInstance, auth: AuthService): void;

package/dist/src/auth/routes.js

@@ -0,0 +1,15 @@
+import { AUTH_PATHS } from './contract.js';
+/** Регистрирует вход, выход и получение текущего пользователя, запрещая кеширование ответов.
+ * @example После регистрации ответы содержат Cache-Control: no-store; функция возвращает undefined.
+ */
+export function registerAuthRoutes(server, auth) {
+    server.register(async (app) => {
+        app.addHook('onRequest', async (_request, reply) => {
+            reply.header('Cache-Control', 'no-store');
+        });
+        app.post(AUTH_PATHS.login, async (request) => auth.login(request.body));
+        app.get(AUTH_PATHS.me, async (request) => auth.me(request.headers.authorization));
+        app.post(AUTH_PATHS.logout, async (request) => auth.logout(request.headers.authorization));
+    });
+}
+//# sourceMappingURL=routes.js.map

package/dist/src/auth/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/auth/routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG3C;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAuB,EAAE,IAAiB;IAC3E,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5B,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;YACjD,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACxE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QAClF,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/auth/service.d.ts

@@ -0,0 +1,39 @@
+import { type AuthConfig, type AuthSession, type AuthUser, type AuthUserRecord } from './contract.js';
+export declare class AuthService {
+    private users;
+    private expiresIn;
+    private sessions;
+    private pendingLogins;
+    private closed;
+    constructor(users: Map<string, AuthUserRecord>, expiresIn: number);
+    /** Проверяет пароль, создаёт сессию и возвращает токен с публичными данными пользователя.
+     * @example Корректные username и password → { accessToken, expiresIn, user }; неверный пароль → исключение.
+     */
+    login(body: unknown): Promise<AuthSession>;
+    /** Проверяет Bearer-токен и возвращает копию публичных данных пользователя.
+     * @example Заголовок 'Bearer <действительный токен>' → { id, username, isAdmin }.
+     */
+    me(authorization: unknown): AuthUser;
+    /** Проверяет токен и удаляет соответствующую сессию.
+     * @example Действительный токен → { success: true }; повторный выход с ним → ошибка.
+     */
+    logout(authorization: unknown): {
+        success: boolean;
+    };
+    /** Запрещает новые входы и очищает учётные записи и сессии в памяти.
+     * @example close() → undefined; последующий login() → отказ.
+     */
+    close(): void;
+    /** Находит сессию по хешу токена и проверяет срок; просроченную сессию удаляет.
+     * @example Действительный Bearer-токен → [ключ, сессия]; отсутствующий или истёкший → ошибка.
+     */
+    private session;
+    /** Удаляет из памяти сессии, срок которых истёк к текущему моменту.
+     * @example Одна истёкшая и одна действующая сессия → остаётся одна действующая; результат undefined.
+     */
+    private prune;
+}
+/** Читает и проверяет учётные записи из массива или файла и создаёт хранилище сессий в памяти.
+ * @example createAuthService({ users: [] }) → Promise<AuthService>; повторяющиеся id → ошибка.
+ */
+export declare function createAuthService(config: AuthConfig): Promise<AuthService>;

package/dist/src/auth/service.js

@@ -0,0 +1,143 @@
+import { createHash, randomBytes } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import { domainError } from '../core/errors.js';
+import { hasOnlyKeys, isObject } from '../core/utils.js';
+import { DEFAULT_SESSION_SECONDS, MAX_PASSWORD_LENGTH, MAX_USERNAME_LENGTH } from './contract.js';
+import { DUMMY_HASH, validPasswordHash, verifyPassword } from './password.js';
+/** Создаёт исключение отсутствия действительной сессии без раскрытия причины отказа.
+ * @example unauthorized() → Error с code = 'UNAUTHENTICATED'.
+ */
+const unauthorized = () => domainError('UNAUTHENTICATED', 'Invalid credentials or expired session');
+/** Вычисляет SHA-256 строки в шестнадцатеричном виде для хранения вместо исходного токена.
+ * @example tokenKey('abc') → 'ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad'.
+ */
+const tokenKey = (token) => createHash('sha256').update(token).digest('hex');
+/** Возвращает публичные поля пользователя в новом объекте; отсутствие isAdmin означает false.
+ * @example publicUser({ id: '1', username: 'anna' }) → { id: '1', username: 'anna', isAdmin: false }.
+ */
+const publicUser = (user) => ({ id: user.id, username: user.username, isAdmin: user.isAdmin ?? false });
+export class AuthService {
+    users;
+    expiresIn;
+    sessions = new Map();
+    pendingLogins = 0;
+    closed = false;
+    constructor(users, expiresIn) {
+        this.users = users;
+        this.expiresIn = expiresIn;
+    }
+    /** Проверяет пароль, создаёт сессию и возвращает токен с публичными данными пользователя.
+     * @example Корректные username и password → { accessToken, expiresIn, user }; неверный пароль → исключение.
+     */
+    async login(body) {
+        if (!isObject(body) ||
+            !hasOnlyKeys(body, ['username', 'password']) ||
+            typeof body.username !== 'string' ||
+            !body.username.length ||
+            body.username.length > MAX_USERNAME_LENGTH ||
+            typeof body.password !== 'string' ||
+            !body.password.length ||
+            body.password.length > MAX_PASSWORD_LENGTH)
+            throw domainError('INVALID_INPUT', 'Supply username and password');
+        if (this.closed)
+            throw unauthorized();
+        if (this.pendingLogins >= 4)
+            throw domainError('TOO_MANY_REQUESTS', 'Too many simultaneous login attempts');
+        this.pendingLogins++;
+        let user;
+        let valid;
+        try {
+            user = this.users.get(body.username);
+            valid = await verifyPassword(body.password, user?.passwordHash ?? DUMMY_HASH);
+        }
+        finally {
+            this.pendingLogins--;
+        }
+        if (!user || !valid || this.closed)
+            throw unauthorized();
+        this.prune();
+        if (this.sessions.size >= 10000)
+            throw domainError('TOO_MANY_REQUESTS', 'Session limit reached');
+        const accessToken = randomBytes(32).toString('base64url');
+        const identity = publicUser(user);
+        this.sessions.set(tokenKey(accessToken), { user: identity, expiresAt: Date.now() + this.expiresIn * 1000 });
+        return { accessToken, expiresIn: this.expiresIn, user: publicUser(identity) };
+    }
+    /** Проверяет Bearer-токен и возвращает копию публичных данных пользователя.
+     * @example Заголовок 'Bearer <действительный токен>' → { id, username, isAdmin }.
+     */
+    me(authorization) {
+        const [, session] = this.session(authorization);
+        return publicUser(session.user);
+    }
+    /** Проверяет токен и удаляет соответствующую сессию.
+     * @example Действительный токен → { success: true }; повторный выход с ним → ошибка.
+     */
+    logout(authorization) {
+        const [key] = this.session(authorization);
+        this.sessions.delete(key);
+        return { success: true };
+    }
+    /** Запрещает новые входы и очищает учётные записи и сессии в памяти.
+     * @example close() → undefined; последующий login() → отказ.
+     */
+    close() {
+        this.closed = true;
+        this.sessions.clear();
+        this.users.clear();
+    }
+    /** Находит сессию по хешу токена и проверяет срок; просроченную сессию удаляет.
+     * @example Действительный Bearer-токен → [ключ, сессия]; отсутствующий или истёкший → ошибка.
+     */
+    session(authorization) {
+        if (typeof authorization !== 'string')
+            throw unauthorized();
+        const match = /^Bearer ([A-Za-z0-9_-]{43})$/i.exec(authorization);
+        if (!match)
+            throw unauthorized();
+        const key = tokenKey(match[1]);
+        const session = this.sessions.get(key);
+        if (!session || session.expiresAt <= Date.now()) {
+            this.sessions.delete(key);
+            throw unauthorized();
+        }
+        return [key, session];
+    }
+    /** Удаляет из памяти сессии, срок которых истёк к текущему моменту.
+     * @example Одна истёкшая и одна действующая сессия → остаётся одна действующая; результат undefined.
+     */
+    prune() {
+        const now = Date.now();
+        for (const [key, session] of this.sessions)
+            if (session.expiresAt <= now)
+                this.sessions.delete(key);
+    }
+}
+/** Читает и проверяет учётные записи из массива или файла и создаёт хранилище сессий в памяти.
+ * @example createAuthService({ users: [] }) → Promise<AuthService>; повторяющиеся id → ошибка.
+ */
+export async function createAuthService(config) {
+    const records = typeof config.users === 'string' ? JSON.parse(await readFile(config.users, 'utf8')) : config.users;
+    if (!Array.isArray(records))
+        throw new Error('Auth users must be an array');
+    const users = new Map();
+    const ids = new Set();
+    for (const record of records) {
+        if (!isObject(record) ||
+            !hasOnlyKeys(record, ['id', 'username', 'passwordHash', 'isAdmin']) ||
+            typeof record.id !== 'string' ||
+            !record.id.trim() ||
+            typeof record.username !== 'string' ||
+            !record.username.trim() ||
+            record.username.length > MAX_USERNAME_LENGTH ||
+            !validPasswordHash(record.passwordHash) ||
+            (record.isAdmin !== undefined && typeof record.isAdmin !== 'boolean'))
+            throw new Error('Auth users require id, username and a valid passwordHash');
+        if (ids.has(record.id) || users.has(record.username))
+            throw new Error('Auth user ids and usernames must be unique');
+        ids.add(record.id);
+        users.set(record.username, { id: record.id, username: record.username, passwordHash: record.passwordHash, isAdmin: record.isAdmin ?? false });
+    }
+    return new AuthService(users, config.expiresIn ?? DEFAULT_SESSION_SECONDS);
+}
+//# sourceMappingURL=service.js.map

package/dist/src/auth/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/auth/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAyE,uBAAuB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzK,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE9E;;GAEG;AACH,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,iBAAiB,EAAE,wCAAwC,CAAC,CAAC;AACpG;;GAEG;AACH,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrF;;GAEG;AACH,MAAM,UAAU,GAAG,CAAC,IAAyD,EAAY,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;AAKvK,MAAM,OAAO,WAAW;IAKZ,KAAK;IACL,SAAS;IALX,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,aAAa,GAAG,CAAC,CAAC;IAClB,MAAM,GAAG,KAAK,CAAC;IACvB,YACU,KAAkC,EAClC,SAAiB;qBADjB,KAAK;yBACL,SAAS;IAChB,CAAC;IAEJ;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,IAAa;QACvB,IACE,CAAC,QAAQ,CAAC,IAAI,CAAC;YACf,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;YACjC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;YACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,mBAAmB;YAC1C,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;YACjC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;YACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,mBAAmB;YAE1C,MAAM,WAAW,CAAC,eAAe,EAAE,8BAA8B,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,YAAY,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC;YAAE,MAAM,WAAW,CAAC,mBAAmB,EAAE,sCAAsC,CAAC,CAAC;QAC5G,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,IAAgC,CAAC;QACrC,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,IAAI,UAAU,CAAC,CAAC;QAChF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,YAAY,EAAE,CAAC;QACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,KAAK;YAAE,MAAM,WAAW,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,CAAC;QACjG,MAAM,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,EAAE,CAAC,CAAC;QAC5G,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;IAChF,CAAC;IACD;;OAEG;IACH,EAAE,CAAC,aAAsB;QACvB,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAChD,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IACD;;OAEG;IACH,MAAM,CAAC,aAAsB;QAC3B,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IACD;;OAEG;IACK,OAAO,CAAC,aAAsB;QACpC,IAAI,OAAO,aAAa,KAAK,QAAQ;YAAE,MAAM,YAAY,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK;YAAE,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAChD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACxB,CAAC;IACD;;OAEG;IACK,KAAK;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,OAAO,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtG,CAAC;CACF;AACD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAkB;IACxD,MAAM,OAAO,GAAY,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IAC5H,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IACE,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjB,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;YACnE,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;YAC7B,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;YACjB,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACnC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE;YACvB,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,mBAAmB;YAC5C,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC;YACvC,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC;YAErE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACpH,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;IAChJ,CAAC;IACD,OAAO,IAAI,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,IAAI,uBAAuB,CAAC,CAAC;AAC7E,CAAC"}

package/dist/src/cli/index.d.ts

@@ -0,0 +1,7 @@
+import { createConfiguredServer } from '../server/create.js';
+/** Разбирает аргументы командной строки и запускает сервер либо экспорт; справку и версию пишет в stdout.
+ * @example runCli(['--help']) → Promise<void> и текст справки без запуска сервера.
+ */
+export declare function runCli(args?: string[], services?: {
+    createServer: typeof createConfiguredServer;
+}): Promise<void>;

package/dist/src/{cli.js → cli/index.js}

@@ -1,17 +1,20 @@
 import process from 'node:process';
-import { configure, configureGeneration, readConfigModule } from './config.js';
-import { DEFAULT_HOST, DEFAULT_PORT, VERSION } from './constants.js';
-import { resolveFeatures } from './features.js';
-import { inputPaths, validateExportPaths } from './paths.js';
-import { generateGraphql, generateOpenapi, writeGraphql, writeOpenapi } from './schema.js';
-import { createConfiguredServer } from './server.js';
-import { isObject } from './utils.js';
+import { DEFAULT_HOST, DEFAULT_PORT, VERSION } from '../core/constants.js';
+import { inputPaths, validateExportPaths } from '../core/paths.js';
+import { isObject } from '../core/utils.js';
+import { generateGraphql, writeGraphql } from '../graphql/lazy.js';
+import { generateOpenapi, writeOpenapi } from '../openapi/lazy.js';
+import { configure, configureGeneration, readConfigModule } from '../server/config.js';
+import { createConfiguredServer } from '../server/create.js';
+import { resolveFeatures } from '../server/features.js';
 const HELP_TEXT = `Deep JSON Server
 
 Usage:
   deep-json-server [options] <server.config.js>
   deep-json-server generate <openapi|graphql|openapi,graphql> <server.config.js>
 
+  --timestamps    Track record creation and update times
+  --soft-delete   Mark deleted records instead of removing them
   --files         Enable file routes
   --graphql       Enable the GraphQL endpoint
   --openapi       Enable the OpenAPI endpoint
@@ -21,6 +24,9 @@ Usage:
   --version, -v   Show version
 
 Files are enabled when configured. Generate writes schemas to the configured paths.`;
+/** Разбирает аргументы командной строки и запускает сервер либо экспорт; справку и версию пишет в stdout.
+ * @example runCli(['--help']) → Promise<void> и текст справки без запуска сервера.
+ */
 export async function runCli(args = process.argv.slice(2), services = { createServer: createConfiguredServer }) {
     if (args.includes('--help') || args.includes('-h')) {
         process.stdout.write(`${HELP_TEXT}\n`);
@@ -33,6 +39,7 @@ export async function runCli(args = process.argv.slice(2), services = { createSe
     const positional = [];
     const seen = new Set();
     const features = {};
+    const recordFlags = {};
     let host;
     let port;
     for (let index = 0; index < args.length; index++) {
@@ -41,7 +48,7 @@ export async function runCli(args = process.argv.slice(2), services = { createSe
             positional.push(arg);
             continue;
         }
-        if (!['--files', '--graphql', '--openapi', '--host', '--port'].includes(arg) || seen.has(arg))
+        if (!['--files', '--graphql', '--openapi', '--timestamps', '--soft-delete', '--host', '--port'].includes(arg) || seen.has(arg))
             throw new Error(`Неизвестный параметр или повтор: ${arg}`);
         seen.add(arg);
         if (arg === '--host' || arg === '--port') {
@@ -56,6 +63,10 @@ export async function runCli(args = process.argv.slice(2), services = { createSe
                 port = Number(value);
             }
         }
+        else if (arg === '--timestamps')
+            recordFlags.timestamps = true;
+        else if (arg === '--soft-delete')
+            recordFlags.softDelete = true;
         else
             features[arg.slice(2)] = true;
     }
@@ -76,8 +87,12 @@ export async function runCli(args = process.argv.slice(2), services = { createSe
         throw new Error('config.server must be an object');
     const overrides = { host: host ?? serverOptions.host ?? process.env.HOST ?? DEFAULT_HOST, port: port ?? serverOptions.port ?? Number(process.env.PORT ?? DEFAULT_PORT) };
     const config = generate
-        ? configureGeneration(source.config, formats, source.directory, source.path, { ...overrides, files: features.files })
-        : configure({ ...source.config, server: { ...serverOptions, ...overrides } }, source.directory, source.path);
+        ? configureGeneration(source.config, formats, source.directory, source.path, { ...overrides, files: features.files, ...recordFlags })
+        : configure({
+            ...source.config,
+            ...(Object.keys(recordFlags).length ? { database: { ...(isObject(source.config.database) ? source.config.database : {}), ...recordFlags } } : {}),
+            server: { ...serverOptions, ...overrides },
+        }, source.directory, source.path);
     if (generate) {
         if (!config.database.schema)
             throw new Error('Generation requires an explicit model schema');
@@ -91,6 +106,9 @@ export async function runCli(args = process.argv.slice(2), services = { createSe
         const openapi = formats.includes('openapi')
             ? await generateOpenapi(config.database.schema, {
                 files: config.files != null,
+                auth: config.auth != null,
+                timestamps: config.database.timestamps,
+                softDelete: config.database.softDelete,
                 host: config.server.host,
                 port: config.server.port,
                 pageSize: config.server.pageSize,
@@ -98,7 +116,9 @@ export async function runCli(args = process.argv.slice(2), services = { createSe
                 info: config.openapi.info,
             })
             : undefined;
-        const graphql = formats.includes('graphql') ? await generateGraphql(config.database.schema) : undefined;
+        const graphql = formats.includes('graphql')
+            ? await generateGraphql(config.database.schema, { auth: config.auth != null, timestamps: config.database.timestamps, softDelete: config.database.softDelete })
+            : undefined;
         if (openapi) {
             await writeOpenapi(openapi, config.openapi.path);
             process.stdout.write(`OpenAPI: ${config.openapi.path}\n`);
@@ -113,4 +133,4 @@ export async function runCli(args = process.argv.slice(2), services = { createSe
     await server.listen();
     server.log.info('Deep JSON Server started');
 }
-//# sourceMappingURL=cli.js.map
+//# sourceMappingURL=index.js.map

package/dist/src/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAuB,MAAM,uBAAuB,CAAC;AAE7E,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;oFAgBkE,CAAC;AACrF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,GAAoD,EAAE,YAAY,EAAE,sBAAsB,EAAE;IAC7J,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,IAAI,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,WAAW,GAAmD,EAAE,CAAC;IACvE,IAAI,IAAwB,CAAC;IAC7B,IAAI,IAAwB,CAAC;IAC7B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;QAC3L,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;YAChF,IAAI,GAAG,KAAK,QAAQ;gBAAE,IAAI,GAAG,KAAK,CAAC;iBAC9B,CAAC;gBACJ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBAC5D,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,KAAK,cAAc;YAAE,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC;aAC5D,IAAI,GAAG,KAAK,eAAe;YAAE,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC;;YAC3D,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAyB,CAAC,GAAG,IAAI,CAAC;IAC7D,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC;IAC9C,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACtE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/K,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACtI,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACnG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,aAAa,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,YAAY,EAAE,IAAI,EAAE,IAAI,IAAI,aAAa,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,YAAY,CAAC,EAAE,CAAC;IACzK,MAAM,MAAM,GAAG,QAAQ;QACrB,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,WAAW,EAM/H,CAAC;QACJ,CAAC,CAAC,SAAS,CACP;YACE,GAAG,MAAM,CAAC,MAAM;YAChB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjJ,MAAM,EAAE,EAAE,GAAG,aAAa,EAAE,GAAG,SAAS,EAAE;SAC3C,EACD,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,IAAI,CACZ,CAAC;IACN,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC7F,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,MAA+B,CAAC,CAAC,IAAI,CAAC;YAC1D,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,OAAO,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,MAAM,mBAAmB,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAClG,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YACzC,CAAC,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAC5C,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;gBAC3B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI;gBACzB,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;gBACtC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;gBACtC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;gBACxB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;gBACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;gBAChC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW;gBACtC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;aAC1B,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YACzC,CAAC,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9J,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAK,CAAC,CAAC;YAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAK,CAAC,CAAC;YAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAClG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACtB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAC9C,CAAC"}

package/dist/src/{constants.d.ts → core/constants.d.ts}

@@ -3,4 +3,4 @@ export declare const DEFAULT_MAX_FILE_SIZE: number;
 export declare const DEFAULT_MAX_PAGE_SIZE = 100;
 export declare const DEFAULT_PAGE_SIZE = 10;
 export declare const DEFAULT_PORT = 4001;
-export declare const VERSION = "1.0.0-alpha.5";
+export declare const VERSION = "1.0.0-alpha.7";

package/dist/src/{constants.js → core/constants.js}

@@ -3,5 +3,5 @@ export const DEFAULT_MAX_FILE_SIZE = 100 * 1024 * 1024;
 export const DEFAULT_MAX_PAGE_SIZE = 100;
 export const DEFAULT_PAGE_SIZE = 10;
 export const DEFAULT_PORT = 4001;
-export const VERSION = '1.0.0-alpha.5';
+export const VERSION = '1.0.0-alpha.7';
 //# sourceMappingURL=constants.js.map

package/dist/src/core/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/core/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CAAC;AACxC,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC,MAAM,CAAC,MAAM,OAAO,GAAG,eAAe,CAAC"}

package/dist/src/core/database.d.ts

@@ -0,0 +1,50 @@
+import type { RecordOptions } from './lifecycle/options.js';
+import type { ModelSchema } from './model.js';
+import type { DatabaseData, DatabaseRecord } from './types.js';
+export type DatabaseConfig = Pick<RecordOptions, 'timestamps' | 'softDelete'> & ({
+    data: DatabaseData;
+    path?: never;
+    schema?: ModelSchema | string;
+} | {
+    data?: never;
+    path: string;
+    schema?: ModelSchema | string;
+});
+export interface DatabaseContainer {
+    data: DatabaseData;
+    counters?: Record<string, number>;
+}
+export interface DatabaseStore {
+    database: DatabaseContainer;
+    path?: string;
+    read(): Promise<DatabaseData>;
+    update<T>(operation: (database: DatabaseContainer) => T): Promise<T>;
+}
+/** Проверяет сериализуемое JSON-значение; отвергает циклы, разреженные массивы, NaN и бесконечности.
+ * @example validateJsonValue({ a: [1, null] }, 'data') → undefined; NaN → ошибка.
+ */
+export declare const validateJsonValue: (value: unknown, path: string, ancestors?: WeakSet<object>) => void;
+/** Проверяет объект коллекций, записи и уникальность ключей; возвращает исходный объект.
+ * @example validateDatabase({ notes: [{ id: '1' }] }) → тот же объект; повторный id → ошибка.
+ */
+export declare const validateDatabase: (data: unknown, primaryKeys?: Map<string, string>) => DatabaseData;
+/** Читает UTF-8 JSON-файл и проверяет, что верхний уровень является объектом.
+ * @example Файл с {"a":1} → Promise<{ a: 1 }>; файл с [] → ошибка.
+ */
+export declare const readJsonObjectFile: (path: string, label: string) => Promise<Record<string, unknown>>;
+/** Читает файл и проверяет коллекции и первичные ключи.
+ * @example Файл с {"notes":[]} → Promise<{ notes: [] }>.
+ */
+export declare const readDatabaseFile: (databasePath: string, keys?: Map<string, string>) => Promise<DatabaseData>;
+/** Создаёт дисковое хранилище или хранилище в памяти по настройкам.
+ * @example createDatabaseStore({ data: { notes: [] } }) → Promise<DatabaseStore>.
+ */
+export declare const createDatabaseStore: (config: DatabaseConfig, keys?: Map<string, string>) => Promise<DatabaseStore>;
+/** Ищет индекс записи, сравнивая строковые представления id.
+ * @example findItemIndex([{ id: 1 }], '1') → 0; пустой массив → -1.
+ */
+export declare const findItemIndex: (collection: DatabaseRecord[], id: unknown) => number;
+/** Генерирует случайный строковый id, отсутствующий в переданной коллекции.
+ * @example createId([]) → строка из 11 символов; конкретное значение зависит от генератора случайных чисел.
+ */
+export declare const createId: (collection: DatabaseRecord[]) => string;