@opengis/fastify-table 2.5.54 → 3.0.0-beta.0

package/dist/modules/templates/services/userTemplateDir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userTemplateDir.js","names":[],"sources":["../../../../src/modules/templates/services/userTemplateDir.ts"],"sourcesContent":["const userTemplateDir: string[] = [];\r\n\r\nexport default userTemplateDir;\r\n"],"mappings":"AAAA,MAAM,EAA4B,CAAC"}

package/dist/modules/templates/templates.route.js

@@ -0,0 +1,2 @@
+import e from"./services/getTemplate.js";import t from"./services/listTemplates.js";import"./services/index.js";import{listTemplatesSchema as n}from"./templates.schema.js";const r=`fastify-table`,i=[`core`,`templates`];async function a(a){a.get(`/listTemplates/:type?`,{config:{policy:`L1`,role:`admin`,package:r,tags:i},schema:n},async({params:e})=>t({type:e.type})),a.get(`/getTemplate`,{config:{policy:`L0`,package:r,tags:i},schema:{}},async()=>e({},a.ctx))}export{a as default};
+//# sourceMappingURL=templates.route.js.map

package/dist/modules/templates/templates.route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.route.js","names":["services.listTemplates","services.getTemplate"],"sources":["../../../src/modules/templates/templates.route.ts"],"sourcesContent":["import * as services from \"./services/index.js\";\r\n\r\nimport { listTemplatesSchema } from \"./templates.schema.js\";\r\n\r\nconst packageName = \"fastify-table\";\r\nconst tags = [\"core\", \"templates\"];\r\n\r\nexport default async function templatesRoutes(app: any) {\r\n  // /api/templates\r\n  app.get(\r\n    \"/listTemplates/:type?\",\r\n    {\r\n      config: { policy: \"L1\", role: \"admin\", package: packageName, tags },\r\n      schema: listTemplatesSchema,\r\n    },\r\n    async ({ params }: { params: { type?: string } }) => {\r\n      return services.listTemplates({\r\n        type: params.type,\r\n      });\r\n    }\r\n  );\r\n\r\n  // /api/template/:type/:name\r\n  app.get(\r\n    \"/getTemplate\",\r\n    {\r\n      config: { policy: \"L0\", package: packageName, tags },\r\n      schema: {},\r\n    },\r\n    async () => {\r\n      return services.getTemplate({}, app.ctx);\r\n    }\r\n  );\r\n\r\n  /*app.get(\"/getTemplatePath\", async ({ pg }: any) => {\r\n    return services.getTemplatePath({}, pg);\r\n  });\r\n\r\n  app.get(\"/registerTemplateDir\", async ({ pg }: any) => {\r\n    return services.registerTemplateDir({}, pg);\r\n  });\r\n\r\n  // ? what is this?\r\n  app.get(\"/renderTemplate\", async ({ pg }: any) => {\r\n    return services.renderTemplate({}, pg);\r\n  });\r\n\r\n  // ? what is this?\r\n  app.get(\"/getTemplateTokens\", async ({ pg }: any) => {\r\n    return services.getTemplateTokens({}, pg);\r\n  });\r\n  */\r\n}\r\n"],"mappings":"4KAIA,MAAM,EAAc,gBACd,EAAO,CAAC,OAAQ,WAAW,EAEjC,eAA8B,EAAgB,EAAU,CAEtD,EAAI,IACF,wBACA,CACE,OAAQ,CAAE,OAAQ,KAAM,KAAM,QAAS,QAAS,EAAa,MAAK,EAClE,OAAQ,CACV,EACA,MAAO,CAAE,YACAA,EAAuB,CAC5B,KAAM,EAAO,IACf,CAAC,CAEL,EAGA,EAAI,IACF,eACA,CACE,OAAQ,CAAE,OAAQ,KAAM,QAAS,EAAa,MAAK,EACnD,OAAQ,CAAC,CACX,EACA,SACSC,EAAqB,CAAC,EAAG,EAAI,GAAG,CAE3C,CAoBF"}

package/dist/modules/templates/templates.schema.js

@@ -0,0 +1,2 @@
+const e={params:{type:`object`,additionalProperties:!1,properties:{type:{type:`string`,enum:[`form`,`table`,`cls`,`select`]}}}};export{e as listTemplatesSchema};
+//# sourceMappingURL=templates.schema.js.map

package/dist/modules/templates/templates.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.schema.js","names":[],"sources":["../../../src/modules/templates/templates.schema.ts"],"sourcesContent":["export default null;\r\n\r\nexport const listTemplatesSchema = {\r\n  params: {\r\n    type: \"object\",\r\n    additionalProperties: false,\r\n    properties: {\r\n      type: {\r\n        type: \"string\",\r\n        enum: [\"form\", \"table\", \"cls\", \"select\"],\r\n      },\r\n    },\r\n  },\r\n};\r\n"],"mappings":"AAEA,MAAa,EAAsB,CACjC,OAAQ,CACN,KAAM,SACN,qBAAsB,GACtB,WAAY,CACV,KAAM,CACJ,KAAM,SACN,KAAM,CAAC,OAAQ,QAAS,MAAO,QAAQ,CACzC,CACF,CACF,CACF"}

package/dist/node_modules/@fastify/error/index.js

@@ -0,0 +1,2 @@
+import{__commonJSMin as e,__require as t}from"../../../_virtual/_rolldown/runtime.js";var n=e(((e,n)=>{let{format:r}=t(`node:util`);function i(){return`${this.name} [${this.code}]: ${this.message}`}let a=Symbol.for(`fastify-error-generic`);function o(e,t,n=500,s=Error,c=o.captureStackTrace){let l=e===a;if(l&&(e=`FST_ERR`),!e)throw Error(`Fastify error code must not be empty`);if(!t)throw Error(`Fastify error message must not be empty`);e=e.toUpperCase(),!n&&(n=void 0);let u=Symbol.for(`fastify-error ${e}`);function d(...i){if(!new.target)return new d(...i);this.code=e,this.name=`FastifyError`,this.statusCode=n;let a=i.length-1;a!==-1&&i[a]&&typeof i[a]==`object`&&`cause`in i[a]&&(this.cause=i.pop().cause),this.message=r(t,...i),Error.stackTraceLimit&&c&&Error.captureStackTrace(this,d)}return d.prototype=Object.create(s.prototype,{constructor:{value:d,enumerable:!1,writable:!0,configurable:!0},[a]:{value:!0,enumerable:!1,writable:!1,configurable:!1},[u]:{value:!0,enumerable:!1,writable:!1,configurable:!1}}),l?Object.defineProperty(d,Symbol.hasInstance,{value(e){return e&&e[a]},configurable:!1,writable:!1,enumerable:!1}):Object.defineProperty(d,Symbol.hasInstance,{value(e){return e&&e[u]},configurable:!1,writable:!1,enumerable:!1}),d.prototype[Symbol.toStringTag]=`Error`,d.prototype.toString=i,d}o.captureStackTrace=!0;let s=o(a,`Fastify Error`,500,Error);n.exports=o,n.exports.FastifyError=s,n.exports.default=o,n.exports.createError=o}));export default n();export{n as require_error};
+//# sourceMappingURL=index.js.map

package/dist/node_modules/@fastify/error/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../../node_modules/@fastify/error/index.js"],"sourcesContent":["'use strict'\n\nconst { format } = require('node:util')\n\nfunction toString () {\n  return `${this.name} [${this.code}]: ${this.message}`\n}\n\nconst FastifyGenericErrorSymbol = Symbol.for('fastify-error-generic')\n\nfunction createError (code, message, statusCode = 500, Base = Error, captureStackTrace = createError.captureStackTrace) {\n  const shouldCreateFastifyGenericError = code === FastifyGenericErrorSymbol\n\n  if (shouldCreateFastifyGenericError) {\n    code = 'FST_ERR'\n  }\n\n  if (!code) throw new Error('Fastify error code must not be empty')\n  if (!message) throw new Error('Fastify error message must not be empty')\n\n  code = code.toUpperCase()\n  !statusCode && (statusCode = undefined)\n\n  const FastifySpecificErrorSymbol = Symbol.for(`fastify-error ${code}`)\n\n  function FastifyError (...args) {\n    if (!new.target) {\n      return new FastifyError(...args)\n    }\n\n    this.code = code\n    this.name = 'FastifyError'\n    this.statusCode = statusCode\n\n    const lastElement = args.length - 1\n    if (lastElement !== -1 && args[lastElement] && typeof args[lastElement] === 'object' && 'cause' in args[lastElement]) {\n      this.cause = args.pop().cause\n    }\n\n    this.message = format(message, ...args)\n\n    Error.stackTraceLimit && captureStackTrace && Error.captureStackTrace(this, FastifyError)\n  }\n\n  FastifyError.prototype = Object.create(Base.prototype, {\n    constructor: {\n      value: FastifyError,\n      enumerable: false,\n      writable: true,\n      configurable: true\n    },\n    [FastifyGenericErrorSymbol]: {\n      value: true,\n      enumerable: false,\n      writable: false,\n      configurable: false\n    },\n    [FastifySpecificErrorSymbol]: {\n      value: true,\n      enumerable: false,\n      writable: false,\n      configurable: false\n    }\n  })\n\n  if (shouldCreateFastifyGenericError) {\n    Object.defineProperty(FastifyError, Symbol.hasInstance, {\n      value (instance) {\n        return instance && instance[FastifyGenericErrorSymbol]\n      },\n      configurable: false,\n      writable: false,\n      enumerable: false\n    })\n  } else {\n    Object.defineProperty(FastifyError, Symbol.hasInstance, {\n      value (instance) {\n        return instance && instance[FastifySpecificErrorSymbol]\n      },\n      configurable: false,\n      writable: false,\n      enumerable: false\n    })\n  }\n\n  FastifyError.prototype[Symbol.toStringTag] = 'Error'\n\n  FastifyError.prototype.toString = toString\n\n  return FastifyError\n}\n\ncreateError.captureStackTrace = true\n\nconst FastifyErrorConstructor = createError(FastifyGenericErrorSymbol, 'Fastify Error', 500, Error)\n\nmodule.exports = createError\nmodule.exports.FastifyError = FastifyErrorConstructor\nmodule.exports.default = createError\nmodule.exports.createError = createError\n"],"x_google_ignoreList":[0],"mappings":"uGAEA,GAAM,CAAE,UAAA,EAAmB,WAAW,EAEtC,SAAS,GAAY,CACnB,MAAO,GAAG,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK,KAAK,SAC9C,CAEA,IAAM,EAA4B,OAAO,IAAI,uBAAuB,EAEpE,SAAS,EAAa,EAAM,EAAS,EAAa,IAAK,EAAO,MAAO,EAAoB,EAAY,kBAAmB,CACtH,IAAM,EAAkC,IAAS,EAMjD,GAJI,IACF,EAAO,WAGL,CAAC,EAAM,MAAU,MAAM,sCAAsC,EACjE,GAAI,CAAC,EAAS,MAAU,MAAM,yCAAyC,EAEvE,EAAO,EAAK,YAAY,EACxB,CAAC,IAAe,EAAa,IAAA,IAE7B,IAAM,EAA6B,OAAO,IAAI,iBAAiB,GAAM,EAErE,SAAS,EAAc,GAAG,EAAM,CAC9B,GAAI,CAAC,IAAI,OACP,OAAO,IAAI,EAAa,GAAG,CAAI,EAGjC,KAAK,KAAO,EACZ,KAAK,KAAO,eACZ,KAAK,WAAa,EAElB,IAAM,EAAc,EAAK,OAAS,EAC9B,IAAgB,IAAM,EAAK,IAAgB,OAAO,EAAK,IAAiB,UAAY,UAAW,EAAK,KACtG,KAAK,MAAQ,EAAK,IAAI,EAAE,OAG1B,KAAK,QAAU,EAAO,EAAS,GAAG,CAAI,EAEtC,MAAM,iBAAmB,GAAqB,MAAM,kBAAkB,KAAM,CAAY,CAC1F,CA+CA,MA7CA,GAAa,UAAY,OAAO,OAAO,EAAK,UAAW,CACrD,YAAa,CACX,MAAO,EACP,WAAY,GACZ,SAAU,GACV,aAAc,EAChB,GACC,GAA4B,CAC3B,MAAO,GACP,WAAY,GACZ,SAAU,GACV,aAAc,EAChB,GACC,GAA6B,CAC5B,MAAO,GACP,WAAY,GACZ,SAAU,GACV,aAAc,EAChB,CACF,CAAC,EAEG,EACF,OAAO,eAAe,EAAc,OAAO,YAAa,CACtD,MAAO,EAAU,CACf,OAAO,GAAY,EAAS,EAC9B,EACA,aAAc,GACd,SAAU,GACV,WAAY,EACd,CAAC,EAED,OAAO,eAAe,EAAc,OAAO,YAAa,CACtD,MAAO,EAAU,CACf,OAAO,GAAY,EAAS,EAC9B,EACA,aAAc,GACd,SAAU,GACV,WAAY,EACd,CAAC,EAGH,EAAa,UAAU,OAAO,aAAe,QAE7C,EAAa,UAAU,SAAW,EAE3B,CACT,CAEA,EAAY,kBAAoB,GAEhC,IAAM,EAA0B,EAAY,EAA2B,gBAAiB,IAAK,KAAK,EAElG,EAAO,QAAU,EACjB,EAAO,QAAQ,aAAe,EAC9B,EAAO,QAAQ,QAAU,EACzB,EAAO,QAAQ,YAAc"}

package/dist/node_modules/@fastify/error/types/index.d.ts

@@ -0,0 +1,36 @@
+//#region node_modules/@fastify/error/types/index.d.ts
+declare function createError<C extends string, SC extends number, Arg extends unknown[] = [any?, any?, any?]>(code: C, message: string, statusCode: SC, Base?: ErrorConstructor, captureStackTrace?: boolean): createError.FastifyErrorConstructor<{
+  code: C;
+  statusCode: SC;
+}, Arg>;
+declare function createError<C extends string, Arg extends unknown[] = [any?, any?, any?]>(code: C, message: string, statusCode?: number, Base?: ErrorConstructor, captureStackTrace?: boolean): createError.FastifyErrorConstructor<{
+  code: C;
+}, Arg>;
+declare function createError<Arg extends unknown[] = [any?, any?, any?]>(code: string, message: string, statusCode?: number, Base?: ErrorConstructor, captureStackTrace?: boolean): createError.FastifyErrorConstructor<{
+  code: string;
+}, Arg>;
+type CreateError = typeof createError;
+declare namespace createError {
+  export interface FastifyError extends Error {
+    code: string;
+    name: string;
+    statusCode?: number;
+  }
+  export interface FastifyErrorConstructor<E extends {
+    code: string;
+    statusCode?: number;
+  } = {
+    code: string;
+    statusCode?: number;
+  }, T extends unknown[] = [any?, any?, any?]> {
+    new (...arg: T): FastifyError & E;
+    (...arg: T): FastifyError & E;
+    readonly prototype: FastifyError & E;
+  }
+  export const FastifyError: FastifyErrorConstructor;
+  export const createError: CreateError;
+  export { createError as default };
+}
+//#endregion
+export { createError };
+//# sourceMappingURL=index.d.ts.map

package/dist/node_modules/@fastify/error/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../../../node_modules/@fastify/error/types/index.d.ts"],"x_google_ignoreList":[0],"mappings":";iBAAiB,YAAY,kBAAkB,mBAAmB,4CAChE,MAAM,GACN,iBACA,YAAY,IACZ,OAAO,kBACP,8BACC,YAAY;EAA0B,MAAM;EAAG,YAAY;GAAM;iBAEnD,YAAY,kBAAkB,4CAC7C,MAAM,GACN,iBACA,qBACA,OAAO,kBACP,8BACC,YAAY;EAA0B,MAAM;GAAK;iBAEnC,YAAY,4CAC3B,cACA,iBACA,qBACA,OAAO,kBACP,8BACC,YAAY;EAA0B;GAAgB;KAEpD,qBAAqB;kBAER;mBACC,qBAAqB;IACpC;IACA;IACA;;mBAGe,wBACf;IAAY;IAAc;;IAA0B;IAAc;KAClE;YAEO,KAAK,IAAI,eAAe;QAC3B,KAAK,IAAI,eAAe;aACnB,WAAW,eAAe;;eAGxB,cAAc;eAEd,aAAa;WACjB,eAAe"}

package/dist/plugins/access/funcs/getResources.d.ts

@@ -0,0 +1,7 @@
+//#region src/plugins/access/funcs/getResources.d.ts
+declare const resourcesList: any;
+declare const publicResourcesList: any[];
+declare const resources: any;
+//#endregion
+export { publicResourcesList, resources, resourcesList };
+//# sourceMappingURL=getResources.d.ts.map

package/dist/plugins/access/funcs/getResources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getResources.d.ts","names":[],"sources":["../../../../src/plugins/access/funcs/getResources.ts"],"mappings":";cAEM;cAIA;cASA"}

package/dist/plugins/access/funcs/getResources.js

@@ -0,0 +1,2 @@
+import{existsSync as e,readFileSync as t}from"node:fs";const n=e(`config/resources.json`)?JSON.parse(t(`config/resources.json`,`utf-8`)||`[]`):[],r=n.map(({name:e,title:t,actions:n,feature:r})=>({name:e,title:t,actions:n,feature:r})),i=n.reduce((e,t)=>({...e,[t.name]:t.table}),{}),a=n.reduce((e,t)=>({...e,[t.name]:{table:t.table,form:t.form}}),{});export{r as publicResourcesList,i as resources,n as resourcesList,a as resourcesObject};
+//# sourceMappingURL=getResources.js.map

package/dist/plugins/access/funcs/getResources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getResources.js","names":[],"sources":["../../../../src/plugins/access/funcs/getResources.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\r\n\r\nconst resourcesList = existsSync(\"config/resources.json\")\r\n  ? JSON.parse(readFileSync(\"config/resources.json\", \"utf-8\") || \"[]\")\r\n  : [];\r\n\r\nconst publicResourcesList: any[] = resourcesList.map(\r\n  ({ name, title, actions, feature }: any) => ({\r\n    name,\r\n    title,\r\n    actions,\r\n    feature,\r\n  })\r\n);\r\n\r\nconst resources = resourcesList.reduce(\r\n  (acc: any, curr: any) => ({ ...acc, [curr.name]: curr.table }),\r\n  {}\r\n);\r\n\r\nconst resourcesObject = resourcesList.reduce(\r\n  (acc: any, curr: any) => ({\r\n    ...acc,\r\n    [curr.name]: { table: curr.table, form: curr.form },\r\n  }),\r\n  {}\r\n);\r\n\r\nexport { resourcesList, publicResourcesList, resources, resourcesObject };\r\nexport default null;\r\n"],"mappings":"uDAEA,MAAM,EAAgB,EAAW,uBAAuB,EACpD,KAAK,MAAM,EAAa,wBAAyB,OAAO,GAAK,IAAI,EACjE,CAAC,EAEC,EAA6B,EAAc,KAC9C,CAAE,OAAM,QAAO,UAAS,cAAoB,CAC3C,OACA,QACA,UACA,SACF,EACF,EAEM,EAAY,EAAc,QAC7B,EAAU,KAAe,CAAE,GAAG,GAAM,EAAK,MAAO,EAAK,KAAM,GAC5D,CAAC,CACH,EAEM,EAAkB,EAAc,QACnC,EAAU,KAAe,CACxB,GAAG,GACF,EAAK,MAAO,CAAE,MAAO,EAAK,MAAO,KAAM,EAAK,IAAK,CACpD,GACA,CAAC,CACH"}

package/dist/plugins/access/funcs/getUserPermissions.d.ts

@@ -0,0 +1,11 @@
+import { CoreContext } from "../../../core.js";
+//#region src/plugins/access/funcs/getUserPermissions.d.ts
+declare function getUserPermissions({ uid, resource, table, userType }: {
+  uid?: string;
+  resource?: string;
+  table?: string;
+  userType?: string;
+}, { pg }: CoreContext): Promise<any>;
+//#endregion
+export { getUserPermissions };
+//# sourceMappingURL=getUserPermissions.d.ts.map

package/dist/plugins/access/funcs/getUserPermissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserPermissions.d.ts","names":[],"sources":["../../../../src/plugins/access/funcs/getUserPermissions.ts"],"mappings":";;iBAY8B,qBAE1B,KACA,UACA,OACA;EACG;EAAc;EAAmB;EAAgB;KACpD,MAAM,cAAW"}

package/dist/plugins/access/funcs/getUserPermissions.js

@@ -0,0 +1,9 @@
+import{resourcesList as e}from"./getResources.js";async function t({uid:t,resource:n,table:r,userType:i},{pg:a}){if(!a)throw Error(`empty pg`);if(!t)return[];if(i===`admin`)return e;let o=await a.query(`SELECT json_object_agg(conrelid::regclass, (SELECT attname FROM pg_attribute WHERE attrelid = c.conrelid AND attnum = c.conkey[1]) ) 
+      FROM pg_constraint c WHERE contype = 'p' AND connamespace::regnamespace::text = 'admin'`).then(e=>e.rows?.[0]?.json_object_agg||{}),s=o[`admin.role_access`]&&o[`admin.user_roles`]&&o[`admin.users`]&&t?await a.query(`select resource_id as name,
+        array_intersect(coalesce(a.actions, array['read']), coalesce(c.actions, array['create', 'read', 'update', 'delete'])) as actions,
+        b.name as role
+from admin.role_access a
+left join admin.roles b on a.role_id=b.role_id and b.enabled
+left join admin.user_roles c on a.role_id=c.role_id
+where resource_id is not null and $1 in (a.user_uid, c.user_uid)`,[t]).then(e=>e.rows||[]):[],c=((n?s.filter(e=>e.name===n):s)||[]).map(t=>{let n=e.find(e=>e.name===t.name);if(n)return{...n,actions:t.actions}}).filter(Boolean);return r?c.filter(e=>e.table===r):c}export{t as default};
+//# sourceMappingURL=getUserPermissions.js.map

package/dist/plugins/access/funcs/getUserPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserPermissions.js","names":[],"sources":["../../../../src/plugins/access/funcs/getUserPermissions.ts"],"sourcesContent":["import { CoreContext } from \"../../../core.js\";\r\n\r\nimport { resourcesList } from \"./getResources.js\";\r\n\r\nconst q = `select resource_id as name,\r\n        array_intersect(coalesce(a.actions, array['read']), coalesce(c.actions, array['create', 'read', 'update', 'delete'])) as actions,\r\n        b.name as role\r\nfrom admin.role_access a\r\nleft join admin.roles b on a.role_id=b.role_id and b.enabled\r\nleft join admin.user_roles c on a.role_id=c.role_id\r\nwhere resource_id is not null and $1 in (a.user_uid, c.user_uid)`;\r\n\r\nexport default async function getUserPermissions(\r\n  {\r\n    uid,\r\n    resource,\r\n    table,\r\n    userType,\r\n  }: { uid?: string; resource?: string; table?: string; userType?: string },\r\n  { pg }: CoreContext\r\n) {\r\n  if (!pg) {\r\n    throw new Error(\"empty pg\");\r\n  }\r\n\r\n  if (!uid) return [];\r\n\r\n  if (userType === \"admin\") {\r\n    return resourcesList;\r\n  }\r\n\r\n  // ? in case pg.pk not set yet\r\n  const pks = await pg\r\n    .query(\r\n      `SELECT json_object_agg(conrelid::regclass, (SELECT attname FROM pg_attribute WHERE attrelid = c.conrelid AND attnum = c.conkey[1]) ) \r\n      FROM pg_constraint c WHERE contype = 'p' AND connamespace::regnamespace::text = 'admin'`\r\n    )\r\n    .then((r: any) => r.rows?.[0]?.json_object_agg || {});\r\n\r\n  const permissions =\r\n    pks[\"admin.role_access\"] &&\r\n    pks[\"admin.user_roles\"] &&\r\n    pks[\"admin.users\"] &&\r\n    uid\r\n      ? await pg.query(q, [uid]).then((r: any) => r.rows || [])\r\n      : [];\r\n\r\n  const filteredPermissions = resource\r\n    ? permissions.filter((el: any) => el.name === resource)\r\n    : permissions;\r\n\r\n  const userPermissions1 = (filteredPermissions || [])\r\n    .map((e: any) => {\r\n      const resource = resourcesList.find((el: any) => el.name === e.name);\r\n      if (resource) {\r\n        return { ...resource, actions: e.actions };\r\n      }\r\n    })\r\n    .filter(Boolean);\r\n\r\n  const userPermissions = table\r\n    ? userPermissions1.filter((el: any) => el.table === table)\r\n    : userPermissions1;\r\n\r\n  return userPermissions;\r\n}\r\n"],"mappings":"kDAYA,eAA8B,EAC5B,CACE,MACA,WACA,QACA,YAEF,CAAE,MACF,CACA,GAAI,CAAC,EACH,MAAU,MAAM,UAAU,EAG5B,GAAI,CAAC,EAAK,MAAO,CAAC,EAElB,GAAI,IAAa,QACf,OAAO,EAIT,IAAM,EAAM,MAAM,EACf,MACC;8FAEF,EACC,KAAM,GAAW,EAAE,OAAO,IAAI,iBAAmB,CAAC,CAAC,EAEhD,EACJ,EAAI,sBACJ,EAAI,qBACJ,EAAI,gBACJ,EACI,MAAM,EAAG,MAAM;;;;;;kEAAG,CAAC,CAAG,CAAC,EAAE,KAAM,GAAW,EAAE,MAAQ,CAAC,CAAC,EACtD,CAAC,EAMD,IAJsB,EACxB,EAAY,OAAQ,GAAY,EAAG,OAAS,CAAQ,EACpD,IAE6C,CAAC,GAC/C,IAAK,GAAW,CACf,IAAM,EAAW,EAAc,KAAM,GAAY,EAAG,OAAS,EAAE,IAAI,EACnE,GAAI,EACF,MAAO,CAAE,GAAG,EAAU,QAAS,EAAE,OAAQ,CAE7C,CAAC,EACA,OAAO,OAAO,EAMjB,OAJwB,EACpB,EAAiB,OAAQ,GAAY,EAAG,QAAU,CAAK,EACvD,CAGN"}

package/dist/plugins/auth/funcs/authorizeUser.js

@@ -0,0 +1,6 @@
+import{GetContext as e}from"../../../core.js";import t from"../../redis/funcs/createRedis.js";import n from"../../hook/applyHook.js";import r from"../../../shared/services/getIP.js";import i from"./logAuth.js";const a=t({db:2}),o=+(process.env[`auth.sessionTimeout`]||600),s=+(process.env[`auth.sessionTimeoutKeep`]||43200);async function c(t,c,l=`creds-user`,u){if(!t?.uid)return`/logout`;let{config:d,logger:f,pg:p,redis:m}=e(),h=r(c);Object.assign(t,{auth_type:l,ip:h}),await c.login?.(t);let g=(c.body?.keep||c.query?.keep)===`on`?s:o,_=u||g*1e3*60;c.session?.cookie&&(c.session.cookie.maxAge=_),f.file(`auth`,{level:`DEBUG`,name:l,response:{uid:t?.uid,name:[t.sur_name,t.user_name,t.name].filter(Boolean).join(` `)}},c),l&&l.startsWith(`creds`)&&await i({uid:t?.uid,type:l,ip:h},{pg:p,logger:f,redis:m});let{href:v}=await n(`afterAuth`,{ip:h,user:t,name:l,referer:c.headers?.referer})||{};await c.session?.save?.();let y=c.headers?.referer?.match?.(/[?&]redirect=([^&]+)/)?.[1]||`/`,b=t?.twofa&&t.uid&&p;if(d.auth.oneUser){let e=`${d.pg?.database}:user:${t.uid}`,n=await m.get(e);await a.del(`session_auth:${d.pg?.database}:${n}`),await m?.set?.(e,c.session.sessionId)}if(c.method===`POST`&&(!b||c.session?.secondFactorPassed))return{redirectUrl:v||d.auth?.redirectAfter||(y.startsWith(`/`)?y:`/`),authType:l,registered:!1,user:{...t,password:void 0,salt:void 0}};if(c.method===`POST`&&b&&!c.session?.secondFactorPassed){let e=await p.query(`select
+          enabled and social_auth_url is not null as verified
+        from admin.users_social_auth
+        where uid = $1
+        and social_auth_type = $2`,[t.uid,`TOTP`]).then(e=>e.rows?.[0]?.verified||!1);return{redirectUrl:`${d.auth?.link?.[`2fa`]?.login||`/2factor`}?redirect=${y.startsWith(`/`)?y:`/`}`,authType:l,registered:!1,"2factor":{verified:e,enabled:!!t?.twofa},user:{...t,password:void 0,salt:void 0}}}let x=l===`govid`?d.auth?.[`2factor`]?.govid:!0;return t?.twofa&&x?`${d.auth?.link?.[`2fa`]?.login||`/2factor`}?redirect=`+(v||d.auth?.redirectAfter||(y.startsWith(`/`)?y:`/`)):v||(d.auth?.redirectAfter?d.auth?.redirectAfter:y.startsWith(`/`)?y:`/`)}export{c as default};
+//# sourceMappingURL=authorizeUser.js.map

package/dist/plugins/auth/funcs/authorizeUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizeUser.js","names":[],"sources":["../../../../src/plugins/auth/funcs/authorizeUser.ts"],"sourcesContent":["import { ExtendedUser } from \"../../../types/core.js\";\r\n\r\nimport { GetContext } from \"../../../core.js\";\r\n\r\nimport logAuth from \"./logAuth.js\";\r\nimport applyHook from \"../../hook/applyHook.js\";\r\n\r\nimport getIP from \"../../../shared/services/getIP.js\";\r\nimport createRedis from \"../../redis/funcs/createRedis.js\";\r\n\r\nconst rclient2 = createRedis({ db: 2 });\r\n\r\n/* \r\nsession duration by default\r\n* 10 hours = 600 minutes w/o keep (remember me checkbox)\r\n* 30 days = 720 hours = 43200 minutes w/ keep\r\n*/\r\n\r\nconst sessionTimeout = +(process.env[\"auth.sessionTimeout\"] || 600);\r\nconst sessionTimeoutKeep = +(process.env[\"auth.sessionTimeoutKeep\"] || 43200);\r\n\r\nexport default async function authorizeUser(\r\n  user: ExtendedUser,\r\n  req: any,\r\n  authType = \"creds-user\",\r\n  expire?: number\r\n) {\r\n  if (!user?.uid) return \"/logout\";\r\n\r\n  const { config, logger, pg, redis: rclient } = GetContext();\r\n\r\n  const ip = getIP(req);\r\n\r\n  Object.assign(user, { auth_type: authType, ip });\r\n  // fastify/passport\r\n  await req.login?.(user);\r\n\r\n  const st =\r\n    (req.body?.keep || req.query?.keep) === \"on\"\r\n      ? sessionTimeoutKeep\r\n      : sessionTimeout;\r\n  const maxAge = expire || st * 1000 * 60;\r\n\r\n  if (req.session?.cookie) {\r\n    req.session.cookie.maxAge = maxAge;\r\n  }\r\n\r\n  logger.file(\r\n    \"auth\",\r\n    {\r\n      level: \"DEBUG\",\r\n      name: authType,\r\n      response: {\r\n        uid: user?.uid,\r\n        name: [user.sur_name, user.user_name, user.name]\r\n          .filter(Boolean)\r\n          .join(\" \"),\r\n      },\r\n    },\r\n    req\r\n  );\r\n\r\n  if (authType && authType.startsWith(\"creds\")) {\r\n    await logAuth(\r\n      {\r\n        uid: user?.uid,\r\n        type: authType,\r\n        ip,\r\n      },\r\n      { pg, logger, redis: rclient }\r\n    );\r\n  }\r\n\r\n  const { href } =\r\n    ((await applyHook(\"afterAuth\", {\r\n      ip,\r\n      user,\r\n      name: authType,\r\n      referer: req.headers?.referer,\r\n    })) as unknown as { href?: string }) ||\r\n    ({} as unknown as { href?: string });\r\n\r\n  await req.session?.save?.();\r\n\r\n  const redirectUrl =\r\n    req.headers?.referer?.match?.(/[?&]redirect=([^&]+)/)?.[1] || \"/\";\r\n\r\n  const twofaEnabled = user?.twofa && user.uid && pg;\r\n  const registered = false; // ? check by created/updated date?\r\n\r\n  if (config.auth.oneUser) {\r\n    const userSessionKey = `${config.pg?.database}:user:${user.uid}`;\r\n    const sessionID = await rclient.get(userSessionKey);\r\n    await rclient2.del(`session_auth:${config.pg?.database}:${sessionID}`);\r\n    await rclient?.set?.(userSessionKey, req.session.sessionId);\r\n  }\r\n\r\n  if (\r\n    req.method === \"POST\" &&\r\n    (!twofaEnabled || req.session?.secondFactorPassed)\r\n  ) {\r\n    return {\r\n      redirectUrl:\r\n        href ||\r\n        config.auth?.redirectAfter ||\r\n        (redirectUrl.startsWith(\"/\") ? redirectUrl : \"/\"),\r\n      authType,\r\n      registered,\r\n      user: { ...user, password: undefined, salt: undefined },\r\n    };\r\n  }\r\n\r\n  if (\r\n    req.method === \"POST\" &&\r\n    twofaEnabled &&\r\n    !req.session?.secondFactorPassed\r\n  ) {\r\n    const verified = await pg\r\n      .query(\r\n        `select\r\n          enabled and social_auth_url is not null as verified\r\n        from admin.users_social_auth\r\n        where uid = $1\r\n        and social_auth_type = $2`,\r\n        [user.uid, \"TOTP\"]\r\n      )\r\n      .then((r: any) => r.rows?.[0]?.verified || false);\r\n\r\n    const redirect2fa = `${\r\n      config.auth?.link?.[\"2fa\"]?.login || \"/2factor\"\r\n    }?redirect=${redirectUrl.startsWith(\"/\") ? redirectUrl : \"/\"}`;\r\n\r\n    return {\r\n      redirectUrl: redirect2fa,\r\n      authType,\r\n      registered,\r\n      \"2factor\": { verified, enabled: !!user?.twofa },\r\n      user: { ...user, password: undefined, salt: undefined },\r\n    };\r\n  }\r\n\r\n  // by default, disable 2factor for id.gov.ua auth\r\n  const check = authType === \"govid\" ? config.auth?.[\"2factor\"]?.govid : true;\r\n\r\n  if (user?.twofa && check) {\r\n    return (\r\n      `${config.auth?.link?.[\"2fa\"]?.login || \"/2factor\"}?redirect=` +\r\n      (href ||\r\n        config.auth?.redirectAfter ||\r\n        (redirectUrl.startsWith(\"/\") ? redirectUrl : \"/\"))\r\n    );\r\n  }\r\n\r\n  if (href) {\r\n    return href;\r\n  }\r\n\r\n  if (config.auth?.redirectAfter) {\r\n    return config.auth?.redirectAfter;\r\n  }\r\n\r\n  return redirectUrl.startsWith(\"/\") ? redirectUrl : \"/\";\r\n}\r\n"],"mappings":"kNAUA,MAAM,EAAW,EAAY,CAAE,GAAI,CAAE,CAAC,EAQhC,EAAiB,EAAE,QAAQ,IAAI,wBAA0B,KACzD,EAAqB,EAAE,QAAQ,IAAI,4BAA8B,OAEvE,eAA8B,EAC5B,EACA,EACA,EAAW,aACX,EACA,CACA,GAAI,CAAC,GAAM,IAAK,MAAO,UAEvB,GAAM,CAAE,SAAQ,SAAQ,KAAI,MAAO,GAAY,EAAW,EAEpD,EAAK,EAAM,CAAG,EAEpB,OAAO,OAAO,EAAM,CAAE,UAAW,EAAU,IAAG,CAAC,EAE/C,MAAM,EAAI,QAAQ,CAAI,EAEtB,IAAM,GACH,EAAI,MAAM,MAAQ,EAAI,OAAO,QAAU,KACpC,EACA,EACA,EAAS,GAAU,EAAK,IAAO,GAEjC,EAAI,SAAS,SACf,EAAI,QAAQ,OAAO,OAAS,GAG9B,EAAO,KACL,OACA,CACE,MAAO,QACP,KAAM,EACN,SAAU,CACR,IAAK,GAAM,IACX,KAAM,CAAC,EAAK,SAAU,EAAK,UAAW,EAAK,IAAI,EAC5C,OAAO,OAAO,EACd,KAAK,GAAG,CACb,CACF,EACA,CACF,EAEI,GAAY,EAAS,WAAW,OAAO,GACzC,MAAM,EACJ,CACE,IAAK,GAAM,IACX,KAAM,EACN,IACF,EACA,CAAE,KAAI,SAAQ,MAAO,CAAQ,CAC/B,EAGF,GAAM,CAAE,QACJ,MAAM,EAAU,YAAa,CAC7B,KACA,OACA,KAAM,EACN,QAAS,EAAI,SAAS,OACxB,CAAC,GACA,CAAC,EAEJ,MAAM,EAAI,SAAS,OAAO,EAE1B,IAAM,EACJ,EAAI,SAAS,SAAS,QAAQ,sBAAsB,IAAI,IAAM,IAE1D,EAAe,GAAM,OAAS,EAAK,KAAO,EAGhD,GAAI,EAAO,KAAK,QAAS,CACvB,IAAM,EAAiB,GAAG,EAAO,IAAI,SAAS,QAAQ,EAAK,MACrD,EAAY,MAAM,EAAQ,IAAI,CAAc,EAClD,MAAM,EAAS,IAAI,gBAAgB,EAAO,IAAI,SAAS,GAAG,GAAW,EACrE,MAAM,GAAS,MAAM,EAAgB,EAAI,QAAQ,SAAS,CAC5D,CAEA,GACE,EAAI,SAAW,SACd,CAAC,GAAgB,EAAI,SAAS,oBAE/B,MAAO,CACL,YACE,GACA,EAAO,MAAM,gBACZ,EAAY,WAAW,GAAG,EAAI,EAAc,KAC/C,WACA,cACA,KAAM,CAAE,GAAG,EAAM,SAAU,IAAA,GAAW,KAAM,IAAA,EAAU,CACxD,EAGF,GACE,EAAI,SAAW,QACf,GACA,CAAC,EAAI,SAAS,mBACd,CACA,IAAM,EAAW,MAAM,EACpB,MACC;;;;mCAKA,CAAC,EAAK,IAAK,MAAM,CACnB,EACC,KAAM,GAAW,EAAE,OAAO,IAAI,UAAY,EAAK,EAMlD,MAAO,CACL,YAAa,GAJb,EAAO,MAAM,OAAO,QAAQ,OAAS,WACtC,YAAY,EAAY,WAAW,GAAG,EAAI,EAAc,MAIvD,WACA,cACA,UAAW,CAAE,WAAU,QAAS,CAAC,CAAC,GAAM,KAAM,EAC9C,KAAM,CAAE,GAAG,EAAM,SAAU,IAAA,GAAW,KAAM,IAAA,EAAU,CACxD,CACF,CAGA,IAAM,EAAQ,IAAa,QAAU,EAAO,OAAO,YAAY,MAAQ,GAmBvE,OAjBI,GAAM,OAAS,EAEf,GAAG,EAAO,MAAM,OAAO,QAAQ,OAAS,WAAW,aAClD,GACC,EAAO,MAAM,gBACZ,EAAY,WAAW,GAAG,EAAI,EAAc,MAI/C,IAIA,EAAO,MAAM,cACR,EAAO,MAAM,cAGf,EAAY,WAAW,GAAG,EAAI,EAAc,IACrD"}

package/dist/plugins/auth/funcs/getQuery.js

@@ -0,0 +1 @@
+import"../../../errors.js";export{};

package/dist/plugins/auth/funcs/jwt.d.ts

@@ -0,0 +1,35 @@
+declare namespace jwt_d_exports {
+  export { _default as default, scryptHash, scryptVerify, sign, verify };
+}
+declare function scryptHash(code: string): Promise<string>;
+declare function scryptVerify(stored: string, code: string): Promise<boolean>;
+declare function sign(uid: string, secret: string, exp?: number, scopes?: string[]): string;
+declare function verify(token: string, secret: string, scope?: string): {
+  valid: boolean;
+  error: string;
+  payload?: undefined;
+  header?: undefined;
+  stack?: undefined;
+} | {
+  valid: boolean;
+  payload: any;
+  header: any;
+  error?: undefined;
+  stack?: undefined;
+} | {
+  valid: boolean;
+  payload: any;
+  header: any;
+  error: string;
+  stack?: undefined;
+} | {
+  valid: boolean;
+  error: any;
+  stack: any;
+  payload?: undefined;
+  header?: undefined;
+};
+declare const _default: null;
+//#endregion
+export { jwt_d_exports };
+//# sourceMappingURL=jwt.d.ts.map

package/dist/plugins/auth/funcs/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","names":[],"sources":["../../../../src/plugins/auth/funcs/jwt.ts"],"mappings":";;;iBAgBsB,WAAW,eAAY;iBAMvB,aAAa,gBAAgB,eAAY;iBAM/C,KACd,aACA,gBACA,cACA;iBAyBc,OAAO,eAAe,gBAAgB"}

package/dist/plugins/auth/funcs/jwt.js

@@ -0,0 +1,2 @@
+import{__exportAll as e}from"../../../_virtual/_rolldown/runtime.js";import{createHmac as t,randomBytes as n,scrypt as r}from"node:crypto";import i from"node:util";var a=e({default:()=>null,scryptHash:()=>l,scryptVerify:()=>u,sign:()=>d,verify:()=>f});const o=i.promisify(r),s=process.env[`auth.jwtSecret`]||`65450754381cfaf768eeb4bb33326529b48a40ffdb6e15d84dc224dff527166f`,c=Buffer.from(JSON.stringify({alg:`HS256`,type:`JWT`})).toString(`base64`);async function l(e){let t=n(16).toString(`hex`);return`${t}:${(await o(e,t,64)).toString(`hex`)}`}async function u(e,t){let[n,r]=e.split(`:`);return r===(await o(t,n,64)).toString(`hex`)}function d(e,n,r=9e4,i){if(typeof e!=`string`)throw Error(`uid must be a string`);if(n&&typeof n!=`string`)throw Error(`secret must be a string`);if(typeof r!=`number`)throw Error(`exp must be a number`);let a=[c,Buffer.from(JSON.stringify({uid:e,scopes:i,expires:Date.now()+r,created:Date.now()})).toString(`base64`)].join(`.`);return`${a}.${t(`sha256`,n||s).update(a).digest(`base64`)}`}function f(e,n,r){if(!e)return{valid:!1,error:`not enough params: token`};if(typeof e!=`string`)return{valid:!1,error:`invalid params: token`};if(n&&typeof n!=`string`)return{valid:!1,error:`invalid params: secret`};if(r&&typeof r!=`string`)return{valid:!1,error:`invalid params: scope`};let i=e.split(`.`),a=i[2];try{let e=JSON.parse(Buffer.from(i[0],`base64`).toString()),o=JSON.parse(Buffer.from(i[1],`base64`).toString()),c=[i[0],i[1]].join(`.`),l=t(`sha256`,n||s).update(c).digest(`base64`),u=!r||!o.scopes||o.scopes?.includes?.(r);return a===l&&u?{valid:!0,payload:o,header:e}:(console.log(`JWT: invalid token`,o,r),{valid:!1,payload:o,header:e,error:a===l?`invalid scope`:`invalid signature`})}catch(e){return{valid:!1,error:e.toString(),stack:e.stack}}}export{a as jwt_exports,l as scryptHash,u as scryptVerify,d as sign,f as verify};
+//# sourceMappingURL=jwt.js.map

package/dist/plugins/auth/funcs/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","names":[],"sources":["../../../../src/plugins/auth/funcs/jwt.ts"],"sourcesContent":["import util from \"node:util\";\r\nimport { createHmac, scrypt, randomBytes } from \"node:crypto\";\r\n\r\nconst scryptAsync = util.promisify(scrypt);\r\n\r\nconst jwtSecret =\r\n  process.env[\"auth.jwtSecret\"] ||\r\n  \"65450754381cfaf768eeb4bb33326529b48a40ffdb6e15d84dc224dff527166f\";\r\n\r\nconst jwtHeader = Buffer.from(\r\n  JSON.stringify({\r\n    alg: \"HS256\",\r\n    type: \"JWT\",\r\n  })\r\n).toString(\"base64\");\r\n\r\nexport async function scryptHash(code: string) {\r\n  const salt = randomBytes(16).toString(\"hex\");\r\n  const derived = (await scryptAsync(code, salt, 64)) as Buffer; // 64 bytes\r\n  return `${salt}:${derived.toString(\"hex\")}`;\r\n}\r\n\r\nexport async function scryptVerify(stored: string, code: string) {\r\n  const [salt, keyHex] = stored.split(\":\");\r\n  const derived = (await scryptAsync(code, salt, 64)) as Buffer;\r\n  return keyHex === derived.toString(\"hex\");\r\n}\r\n\r\nexport function sign(\r\n  uid: string,\r\n  secret: string,\r\n  exp = 90000,\r\n  scopes?: string[]\r\n) {\r\n  if (typeof uid !== \"string\") throw new Error(\"uid must be a string\");\r\n  if (secret && typeof secret !== \"string\") {\r\n    throw new Error(\"secret must be a string\");\r\n  }\r\n  if (typeof exp !== \"number\") throw new Error(\"exp must be a number\");\r\n\r\n  const jwtPayload = Buffer.from(\r\n    JSON.stringify({\r\n      uid,\r\n      scopes,\r\n      expires: Date.now() + exp,\r\n      created: Date.now(),\r\n    })\r\n  ).toString(\"base64\");\r\n\r\n  const jwtEncrypted = [jwtHeader, jwtPayload].join(\".\");\r\n  const signature = createHmac(\"sha256\", secret || jwtSecret)\r\n    .update(jwtEncrypted)\r\n    .digest(\"base64\");\r\n\r\n  return `${jwtEncrypted}.${signature}`;\r\n}\r\n\r\nexport function verify(token: string, secret: string, scope?: string) {\r\n  if (!token) {\r\n    return { valid: false, error: \"not enough params: token\" };\r\n  }\r\n\r\n  if (typeof token !== \"string\") {\r\n    return { valid: false, error: \"invalid params: token\" };\r\n  }\r\n\r\n  if (secret && typeof secret !== \"string\") {\r\n    return { valid: false, error: \"invalid params: secret\" };\r\n  }\r\n\r\n  if (scope && typeof scope !== \"string\") {\r\n    return { valid: false, error: \"invalid params: scope\" };\r\n  }\r\n\r\n  const split = token.split(\".\");\r\n  const signature = split[2];\r\n\r\n  try {\r\n    const header = JSON.parse(Buffer.from(split[0], \"base64\").toString());\r\n    const payload = JSON.parse(Buffer.from(split[1], \"base64\").toString());\r\n\r\n    const jwtEncryptedExpected = [split[0], split[1]].join(\".\");\r\n    const expectedSignature = createHmac(\"sha256\", secret || jwtSecret)\r\n      .update(jwtEncryptedExpected)\r\n      .digest(\"base64\");\r\n\r\n    const isScopeValid =\r\n      !scope || !payload.scopes || payload.scopes?.includes?.(scope);\r\n\r\n    if (signature === expectedSignature && isScopeValid) {\r\n      return { valid: true, payload, header };\r\n    }\r\n\r\n    console.log(\"JWT: invalid token\", payload, scope);\r\n    return {\r\n      valid: false,\r\n      payload,\r\n      header,\r\n      error:\r\n        signature !== expectedSignature ? \"invalid signature\" : \"invalid scope\",\r\n    };\r\n  } catch (err: any) {\r\n    return { valid: false, error: err.toString(), stack: err.stack };\r\n  }\r\n}\r\n\r\nexport default null;\r\n"],"mappings":"4PAGA,MAAM,EAAc,EAAK,UAAU,CAAM,EAEnC,EACJ,QAAQ,IAAI,mBACZ,mEAEI,EAAY,OAAO,KACvB,KAAK,UAAU,CACb,IAAK,QACL,KAAM,KACR,CAAC,CACH,EAAE,SAAS,QAAQ,EAEnB,eAAsB,EAAW,EAAc,CAC7C,IAAM,EAAO,EAAY,EAAE,EAAE,SAAS,KAAK,EAE3C,MAAO,GAAG,EAAK,IAAG,MADK,EAAY,EAAM,EAAM,EAAE,GACvB,SAAS,KAAK,GAC1C,CAEA,eAAsB,EAAa,EAAgB,EAAc,CAC/D,GAAM,CAAC,EAAM,GAAU,EAAO,MAAM,GAAG,EAEvC,OAAO,KAAW,MADK,EAAY,EAAM,EAAM,EAAE,GACvB,SAAS,KAAK,CAC1C,CAEA,SAAgB,EACd,EACA,EACA,EAAM,IACN,EACA,CACA,GAAI,OAAO,GAAQ,SAAU,MAAU,MAAM,sBAAsB,EACnE,GAAI,GAAU,OAAO,GAAW,SAC9B,MAAU,MAAM,yBAAyB,EAE3C,GAAI,OAAO,GAAQ,SAAU,MAAU,MAAM,sBAAsB,EAWnE,IAAM,EAAe,CAAC,EATH,OAAO,KACxB,KAAK,UAAU,CACb,MACA,SACA,QAAS,KAAK,IAAI,EAAI,EACtB,QAAS,KAAK,IAAI,CACpB,CAAC,CACH,EAAE,SAAS,QAE+B,CAAC,EAAE,KAAK,GAAG,EAKrD,MAAO,GAAG,EAAa,GAJL,EAAW,SAAU,GAAU,CAAS,EACvD,OAAO,CAAY,EACnB,OAAO,QAEwB,GACpC,CAEA,SAAgB,EAAO,EAAe,EAAgB,EAAgB,CACpE,GAAI,CAAC,EACH,MAAO,CAAE,MAAO,GAAO,MAAO,0BAA2B,EAG3D,GAAI,OAAO,GAAU,SACnB,MAAO,CAAE,MAAO,GAAO,MAAO,uBAAwB,EAGxD,GAAI,GAAU,OAAO,GAAW,SAC9B,MAAO,CAAE,MAAO,GAAO,MAAO,wBAAyB,EAGzD,GAAI,GAAS,OAAO,GAAU,SAC5B,MAAO,CAAE,MAAO,GAAO,MAAO,uBAAwB,EAGxD,IAAM,EAAQ,EAAM,MAAM,GAAG,EACvB,EAAY,EAAM,GAExB,GAAI,CACF,IAAM,EAAS,KAAK,MAAM,OAAO,KAAK,EAAM,GAAI,QAAQ,EAAE,SAAS,CAAC,EAC9D,EAAU,KAAK,MAAM,OAAO,KAAK,EAAM,GAAI,QAAQ,EAAE,SAAS,CAAC,EAE/D,EAAuB,CAAC,EAAM,GAAI,EAAM,EAAE,EAAE,KAAK,GAAG,EACpD,EAAoB,EAAW,SAAU,GAAU,CAAS,EAC/D,OAAO,CAAoB,EAC3B,OAAO,QAAQ,EAEZ,EACJ,CAAC,GAAS,CAAC,EAAQ,QAAU,EAAQ,QAAQ,WAAW,CAAK,EAO/D,OALI,IAAc,GAAqB,EAC9B,CAAE,MAAO,GAAM,UAAS,QAAO,GAGxC,QAAQ,IAAI,qBAAsB,EAAS,CAAK,EACzC,CACL,MAAO,GACP,UACA,SACA,MACE,IAAc,EAA0C,gBAAtB,mBACtC,EACF,OAAS,EAAU,CACjB,MAAO,CAAE,MAAO,GAAO,MAAO,EAAI,SAAS,EAAG,MAAO,EAAI,KAAM,CACjE,CACF"}

package/dist/plugins/auth/funcs/logAuth.js

@@ -0,0 +1,2 @@
+import e from"../../crud/funcs/dataInsert.js";async function t({uid:t,type:n=`login`,data:r,ip:i},{pg:a,logger:o,redis:s}){return await e({table:`log.user_auth`,uid:t,data:{user_id:t,auth_date:new Date().toISOString(),auth_type:n,auth_data:r,ip:i}},{pg:a,logger:o,redis:s})}export{t as default};
+//# sourceMappingURL=logAuth.js.map

package/dist/plugins/auth/funcs/logAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logAuth.js","names":[],"sources":["../../../../src/plugins/auth/funcs/logAuth.ts"],"sourcesContent":["import dataInsert from \"../../crud/funcs/dataInsert.js\";\r\n\r\nimport { CoreContext } from \"../../../core.js\";\r\n\r\nexport default async function logAuth(\r\n  {\r\n    uid,\r\n    type = \"login\",\r\n    data,\r\n    ip,\r\n  }: {\r\n    uid: string;\r\n    type?: string;\r\n    data?: any;\r\n    ip?: string;\r\n  },\r\n  { pg, logger, redis }: CoreContext\r\n) {\r\n  const res = await dataInsert(\r\n    {\r\n      table: \"log.user_auth\",\r\n      uid,\r\n      data: {\r\n        user_id: uid,\r\n        auth_date: new Date().toISOString(),\r\n        auth_type: type,\r\n        auth_data: data,\r\n        ip,\r\n      },\r\n    },\r\n    { pg, logger, redis }\r\n  );\r\n  return res;\r\n}\r\n"],"mappings":"8CAIA,eAA8B,EAC5B,CACE,MACA,OAAO,QACP,OACA,MAOF,CAAE,KAAI,SAAQ,SACd,CAeA,OAAO,MAdW,EAChB,CACE,MAAO,gBACP,MACA,KAAM,CACJ,QAAS,EACT,UAAW,IAAI,KAAK,EAAE,YAAY,EAClC,UAAW,EACX,UAAW,EACX,IACF,CACF,EACA,CAAE,KAAI,SAAQ,OAAM,CACtB,CAEF"}

package/dist/plugins/auth/funcs/loginFile.js

@@ -0,0 +1,4 @@
+import{GetContext as e}from"../../../core.js";import{BadRequestError as t}from"../../../errors.js";import n from"./authorizeUser.js";import r from"./users.js";import i from"node:path";import{createHash as a}from"node:crypto";import{existsSync as o,readFileSync as s}from"node:fs";async function c(c,l){let{username:u,password:d}=c.method===`POST`?c.body:c.query,{config:f,logger:p}=e(),m=i.join(process.cwd(),`passwd`);if(!r?.length){if(!o(m))throw p.error(c,`passwd file not exists`),Error(`passwd file not exists`);let e=s(m,`utf8`),t=e.indexOf(`\\r\\n`)===-1?`
+`:`\r
+`;e.split(t).map(e=>{let[t,n,r=`regular`,i]=e.split(`:`);return{username:t,password:n,usertype:r,uid:i}}).forEach(e=>r.push(e))}let h=r.find(e=>e.username===u),g=a(`sha1`).update(`${d}${h?.salt||``}`).digest(`hex`);if(!h?.password||h.password!==g){let e=`Invalid user or password`;if(c.method!==`GET`)throw t(e);return l.status(302).redirect(`/login?confirm=wrong_pass&message=${e}`)}let _=await n({uid:h?.uid||f?.auth?.uid||u,user_name:u,user_type:h.usertype||`regular`},c,`creds-`+(h.usertype===`admin`?`admin`:`user`));return c.method===`GET`?l.status(302).redirect(_):l.status(200).send(_)}export{c as default};
+//# sourceMappingURL=loginFile.js.map

package/dist/plugins/auth/funcs/loginFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loginFile.js","names":[],"sources":["../../../../src/plugins/auth/funcs/loginFile.ts"],"sourcesContent":["import { FastifyReply } from \"fastify\";\r\n\r\nimport path from \"node:path\";\r\nimport { existsSync, readFileSync } from \"node:fs\";\r\nimport { createHash } from \"node:crypto\";\r\n\r\nimport users from \"./users.js\";\r\nimport authorizeUser from \"./authorizeUser.js\";\r\n\r\nimport { BadRequestError } from \"../../../errors.js\";\r\nimport { GetContext } from \"../../../core.js\";\r\n\r\nexport default async function loginFile(req: any, reply: FastifyReply) {\r\n  const { username, password } = req.method === \"POST\" ? req.body : req.query;\r\n\r\n  const { config, logger } = GetContext();\r\n\r\n  const filepath = path.join(process.cwd(), \"passwd\");\r\n  if (!users?.length) {\r\n    const fileExists = existsSync(filepath);\r\n\r\n    if (!fileExists) {\r\n      logger.error(req, \"passwd file not exists\");\r\n      throw new Error(\"passwd file not exists\");\r\n    }\r\n\r\n    // parse file on start up\r\n    const data = readFileSync(filepath, \"utf8\");\r\n    const separator = data.indexOf(\"\\\\r\\\\n\") !== -1 ? \"\\r\\n\" : \"\\n\";\r\n    const rows = data.split(separator).map((row) => {\r\n      const [name, passwd, usertype = \"regular\", uid] = row.split(\":\");\r\n      return { username: name, password: passwd, usertype, uid };\r\n    });\r\n    rows.forEach((row) => users.push(row));\r\n  }\r\n\r\n  // check user / password\r\n  const user = users.find((el) => el.username === username);\r\n  const hashPasswd = createHash(\"sha1\")\r\n    .update(`${password}${user?.salt || \"\"}`)\r\n    .digest(\"hex\");\r\n  if (!user?.password || user.password !== hashPasswd) {\r\n    const txt = \"Invalid user or password\";\r\n\r\n    if (req.method !== \"GET\") {\r\n      throw BadRequestError(txt);\r\n    }\r\n\r\n    return reply\r\n      .status(302)\r\n      .redirect(`/login?confirm=wrong_pass&message=${txt}`);\r\n  }\r\n\r\n  const resultUser = {\r\n    uid: user?.uid || config?.auth?.uid || username,\r\n    user_name: username,\r\n    user_type: user.usertype || \"regular\",\r\n  };\r\n\r\n  const authType = \"creds-\" + (user.usertype === \"admin\" ? \"admin\" : \"user\");\r\n  const href = await authorizeUser(resultUser, req, authType); // creds-admin / creds-admin\r\n  return req.method === \"GET\"\r\n    ? reply.status(302).redirect(href)\r\n    : reply.status(200).send(href);\r\n}\r\n"],"mappings":"wRAYA,eAA8B,EAAU,EAAU,EAAqB,CACrE,GAAM,CAAE,WAAU,YAAa,EAAI,SAAW,OAAS,EAAI,KAAO,EAAI,MAEhE,CAAE,SAAQ,UAAW,EAAW,EAEhC,EAAW,EAAK,KAAK,QAAQ,IAAI,EAAG,QAAQ,EAClD,GAAI,CAAC,GAAO,OAAQ,CAGlB,GAAI,CAFe,EAAW,CAEhB,EAEZ,MADA,EAAO,MAAM,EAAK,wBAAwB,EAChC,MAAM,wBAAwB,EAI1C,IAAM,EAAO,EAAa,EAAU,MAAM,EACpC,EAAY,EAAK,QAAQ,QAAQ,IAAM,GAAc;EAAT;EAKlD,EAJkB,MAAM,CAAS,EAAE,IAAK,GAAQ,CAC9C,GAAM,CAAC,EAAM,EAAQ,EAAW,UAAW,GAAO,EAAI,MAAM,GAAG,EAC/D,MAAO,CAAE,SAAU,EAAM,SAAU,EAAQ,WAAU,KAAI,CAC3D,CACG,EAAE,QAAS,GAAQ,EAAM,KAAK,CAAG,CAAC,CACvC,CAGA,IAAM,EAAO,EAAM,KAAM,GAAO,EAAG,WAAa,CAAQ,EAClD,EAAa,EAAW,MAAM,EACjC,OAAO,GAAG,IAAW,GAAM,MAAQ,IAAI,EACvC,OAAO,KAAK,EACf,GAAI,CAAC,GAAM,UAAY,EAAK,WAAa,EAAY,CACnD,IAAM,EAAM,2BAEZ,GAAI,EAAI,SAAW,MACjB,MAAM,EAAgB,CAAG,EAG3B,OAAO,EACJ,OAAO,GAAG,EACV,SAAS,qCAAqC,GAAK,CACxD,CASA,IAAM,EAAO,MAAM,EAAc,CAN/B,IAAK,GAAM,KAAO,GAAQ,MAAM,KAAO,EACvC,UAAW,EACX,UAAW,EAAK,UAAY,SAIY,EAAG,EAD5B,UAAY,EAAK,WAAa,QAAU,QAAU,OACT,EAC1D,OAAO,EAAI,SAAW,MAClB,EAAM,OAAO,GAAG,EAAE,SAAS,CAAI,EAC/B,EAAM,OAAO,GAAG,EAAE,KAAK,CAAI,CACjC"}

package/dist/plugins/auth/funcs/loginUser.js

@@ -0,0 +1,2 @@
+import{GetContext as e}from"../../../core.js";import t from"../../../config.js";import n from"../../pg/pgClients.js";import{BadRequestError as r}from"../../../errors.js";import i from"./verifyPassword.js";import a from"./authorizeUser.js";const o=e=>(e.headers?.[`x-real-ip`]||e.headers?.[`x-forwarded-for`]||e.ip||e.connection?.remoteAddress||``).split(`:`).pop();async function s(s,c){let{username:l,password:u}=(s.method===`POST`?s.body:s.query)||{},{pg:d=n.client}=s,f=o(s),{logger:p}=e();if(!t.pg){if(s.method!==`GET`)throw Error(`empty pg`);return c.status(302).redirect(`/login?confirm=wrong_pass&message=empty pg`)}if(!t.redis){if(s.method!==`GET`)throw Error(`empty redis`);return c.status(302).redirect(`/login?confirm=wrong_pass&message=empty redis`)}let{user:m,message:h=`invalid user`}=await i({username:l,password:u},{pg:d})||{};if(!m){if(p.file(`auth/warn`,{error:h,username:l,ip:f}),s.method!==`GET`)throw r(h);return c.status(302).redirect(`/login?confirm=wrong_pass&message=${h}`)}if(!m&&(s.query?.username||s.body?.username)){if(s.method!==`GET`)throw r(h);return c.status(302).redirect(`/login?confirm=wrong_pass&message=${h}`)}p.metrics(`user.login`);let g=await a(m,s,`creds-`+(m.user_type===`admin`?`admin`:`user`));return s.method===`GET`?c.status(302).redirect(g):c.status(200).send(g)}export{s as default};
+//# sourceMappingURL=loginUser.js.map

package/dist/plugins/auth/funcs/loginUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loginUser.js","names":[],"sources":["../../../../src/plugins/auth/funcs/loginUser.ts"],"sourcesContent":["import { FastifyReply } from \"fastify\";\r\n\r\nimport config from \"../../../config.js\";\r\nimport pgClients from \"../../pg/pgClients.js\";\r\nimport logger from \"../../logger/createLogger.js\";\r\n\r\nimport verifyPassword from \"./verifyPassword.js\";\r\n\r\nimport authorizeUser from \"./authorizeUser.js\";\r\n\r\nimport { BadRequestError } from \"../../../errors.js\";\r\nimport { GetContext } from \"../../../core.js\";\r\n\r\nconst getIp = (req: any) =>\r\n  (\r\n    req.headers?.[\"x-real-ip\"] ||\r\n    req.headers?.[\"x-forwarded-for\"] ||\r\n    req.ip ||\r\n    req.connection?.remoteAddress ||\r\n    \"\"\r\n  )\r\n    .split(\":\")\r\n    .pop();\r\n\r\nexport default async function loginUser(req: any, reply: FastifyReply) {\r\n  const { username, password } =\r\n    (req.method === \"POST\" ? req.body : req.query) || {};\r\n  const { pg = pgClients.client } = req;\r\n\r\n  const ip = getIp(req);\r\n\r\n  const { logger } = GetContext();\r\n\r\n  if (!config.pg) {\r\n    if (req.method !== \"GET\") {\r\n      throw Error(\"empty pg\");\r\n    }\r\n    return reply\r\n      .status(302)\r\n      .redirect(\"/login?confirm=wrong_pass&message=empty pg\");\r\n  }\r\n\r\n  if (!config.redis) {\r\n    if (req.method !== \"GET\") {\r\n      throw Error(\"empty redis\");\r\n    }\r\n    return reply\r\n      .status(302)\r\n      .redirect(\"/login?confirm=wrong_pass&message=empty redis\");\r\n  }\r\n\r\n  const { user, message = \"invalid user\" } =\r\n    (await verifyPassword(\r\n      {\r\n        username,\r\n        password,\r\n      },\r\n      { pg }\r\n    )) || {};\r\n\r\n  if (!user) {\r\n    logger.file(\"auth/warn\", { error: message, username, ip });\r\n\r\n    if (req.method !== \"GET\") {\r\n      throw BadRequestError(message);\r\n    }\r\n    return reply\r\n      .status(302)\r\n      .redirect(`/login?confirm=wrong_pass&message=${message}`);\r\n  }\r\n\r\n  if (!user && (req.query?.username || req.body?.username)) {\r\n    if (req.method !== \"GET\") {\r\n      throw BadRequestError(message);\r\n    }\r\n    return reply\r\n      .status(302)\r\n      .redirect(`/login?confirm=wrong_pass&message=${message}`);\r\n  }\r\n\r\n  logger.metrics(\"user.login\");\r\n\r\n  const authType = \"creds-\" + (user.user_type === \"admin\" ? \"admin\" : \"user\");\r\n  const result = await authorizeUser(user, req, authType); // creds-admin / creds-admin\r\n  return req.method === \"GET\"\r\n    ? reply.status(302).redirect(result)\r\n    : reply.status(200).send(result);\r\n}\r\n"],"mappings":"+OAaA,MAAM,EAAS,IAEX,EAAI,UAAU,cACd,EAAI,UAAU,oBACd,EAAI,IACJ,EAAI,YAAY,eAChB,IAEC,MAAM,GAAG,EACT,IAAI,EAET,eAA8B,EAAU,EAAU,EAAqB,CACrE,GAAM,CAAE,WAAU,aACf,EAAI,SAAW,OAAS,EAAI,KAAO,EAAI,QAAU,CAAC,EAC/C,CAAE,KAAK,EAAU,QAAW,EAE5B,EAAK,EAAM,CAAG,EAEd,CAAE,UAAW,EAAW,EAE9B,GAAI,CAAC,EAAO,GAAI,CACd,GAAI,EAAI,SAAW,MACjB,MAAM,MAAM,UAAU,EAExB,OAAO,EACJ,OAAO,GAAG,EACV,SAAS,4CAA4C,CAC1D,CAEA,GAAI,CAAC,EAAO,MAAO,CACjB,GAAI,EAAI,SAAW,MACjB,MAAM,MAAM,aAAa,EAE3B,OAAO,EACJ,OAAO,GAAG,EACV,SAAS,+CAA+C,CAC7D,CAEA,GAAM,CAAE,OAAM,UAAU,gBACrB,MAAM,EACL,CACE,WACA,UACF,EACA,CAAE,IAAG,CACP,GAAM,CAAC,EAET,GAAI,CAAC,EAAM,CAGT,GAFA,EAAO,KAAK,YAAa,CAAE,MAAO,EAAS,WAAU,IAAG,CAAC,EAErD,EAAI,SAAW,MACjB,MAAM,EAAgB,CAAO,EAE/B,OAAO,EACJ,OAAO,GAAG,EACV,SAAS,qCAAqC,GAAS,CAC5D,CAEA,GAAI,CAAC,IAAS,EAAI,OAAO,UAAY,EAAI,MAAM,UAAW,CACxD,GAAI,EAAI,SAAW,MACjB,MAAM,EAAgB,CAAO,EAE/B,OAAO,EACJ,OAAO,GAAG,EACV,SAAS,qCAAqC,GAAS,CAC5D,CAEA,EAAO,QAAQ,YAAY,EAG3B,IAAM,EAAS,MAAM,EAAc,EAAM,EADxB,UAAY,EAAK,YAAc,QAAU,QAAU,OACd,EACtD,OAAO,EAAI,SAAW,MAClB,EAAM,OAAO,GAAG,EAAE,SAAS,CAAM,EACjC,EAAM,OAAO,GAAG,EAAE,KAAK,CAAM,CACnC"}

package/dist/plugins/auth/funcs/sendNotification.js

@@ -0,0 +1,2 @@
+import e from"../../../modules/templates/services/getTemplate.js";import{handlebars as t}from"../../../handlebars/index.js";import n from"nodemailer";const r=process.env.NODE_ENV===`test`||!!process.env.VITEST,i=/(?:[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*|"(?:[\x01-\x08\x0b\x0c\x0e-\x1f\x21\x23-\x5b\x5d-\x7f]|\\[\x01-\x09\x0b\x0c\x0e-\x7f])*")@(?:(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]*[a-z0-9])?|\[(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?|[a-z0-9-]*[a-z0-9]:(?:[\x01-\x08\x0b\x0c\x0e-\x1f\x21-\x5a\x53-\x7f]|\\[\x01-\x09\x0b\x0c\x0e-\x7f])+)\])/g;async function a({table:n,template:r,id:i,message:a,data:o},{pg:s}){if(r){let a=n&&i&&s?await s.query(`select * from ${n} where ${s.pk[n]}=$1`,[i]).then(e=>e.rows?.[0]||{}):o,c=await e(`pt`,r);return t.compile(c||r||`template not found`)(a||{})}return a}async function o({to:e,from:t,subject:r,html:i,attachments:a},{config:o,logger:s}){if(!e?.length)throw Error(`empty to list`);let{mailSetting:c={}}=o;return c.service?(Object.assign(c,{rejectUnauthorized:!1}),c.port===465&&Object.assign(c,{secure:!0}),await n.createTransport(c).sendMail({from:t||c.from,to:e,subject:r,html:i,attachments:a})):(s.file(`notification/warn`,{to:e,from:t,message:`service is not defined in config`}),null)}async function s({provider:e=[`email`],from:t,to:n,template:s,table:c,message:l,title:u,data:d,id:f,nocache:p},{config:m,redis:h,pg:g,logger:_}){if(g?.readonly)return null;let v=`${g?.options?.database}:mail:${e[0]}:${n||``}${f||``}${c||``}${u||``}`,y=h?await h.setnx(v,1):!0;if(!y&&!p)return _.file(`notification/sent`,{keyTo:v,send:y,nocache:p}),`already sent: ${v}`;if(h&&await h.expire(v,1e3*600),!n.length)return null;if(!(Array.isArray(e)&&e.length))return`notification provider - must be array and not empty`;let b=await a({pg:g,table:c,template:s,id:f,message:l,data:d},{pg:g});if(e.includes(`email`)){let e=Array.isArray(n)?n.map(e=>e.match(i)?.join(`,`)):n,a=await o({attachments:[],html:b,subject:u,from:t,to:r&&m.mailSetting?.to?m.mailSetting?.to:e},{config:m,logger:_});return m.debug&&console.log(a),a}return null}export{s as default};
+//# sourceMappingURL=sendNotification.js.map

package/dist/plugins/auth/funcs/sendNotification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sendNotification.js","names":[],"sources":["../../../../src/plugins/auth/funcs/sendNotification.ts"],"sourcesContent":["import nodemailer from \"nodemailer\";\r\n\r\nimport { handlebars } from \"../../../../src/handlebars/index.js\";\r\nimport getTemplate from \"../../../modules/templates/services/getTemplate.js\";\r\nimport { CoreContext } from \"../../../core.js\";\r\n\r\nconst unittest = process.env.NODE_ENV === \"test\" || !!process.env.VITEST;\r\n\r\n// eslint-disable-next-line max-len, no-control-regex\r\nconst emailReg =\r\n  /(?:[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*|\"(?:[\\x01-\\x08\\x0b\\x0c\\x0e-\\x1f\\x21\\x23-\\x5b\\x5d-\\x7f]|\\\\[\\x01-\\x09\\x0b\\x0c\\x0e-\\x7f])*\")@(?:(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\\.)+[a-z0-9](?:[a-z0-9-]*[a-z0-9])?|\\[(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?|[a-z0-9-]*[a-z0-9]:(?:[\\x01-\\x08\\x0b\\x0c\\x0e-\\x1f\\x21-\\x5a\\x53-\\x7f]|\\\\[\\x01-\\x09\\x0b\\x0c\\x0e-\\x7f])+)\\])/g;\r\n\r\nasync function generateNotificationContent(\r\n  { table, template, id, message, data: data1 }: any,\r\n  { pg }: CoreContext\r\n) {\r\n  if (template) {\r\n    const data =\r\n      table && id && pg\r\n        ? await pg\r\n            .query(`select * from ${table} where ${pg.pk[table]}=$1`, [id])\r\n            .then((el: any) => el.rows?.[0] || {})\r\n        : data1;\r\n\r\n    const body = await getTemplate(\"pt\", template);\r\n    const html = handlebars.compile(body || template || \"template not found\")(\r\n      data || {}\r\n    );\r\n\r\n    return html;\r\n  }\r\n  return message;\r\n}\r\n\r\nasync function sendEmail(\r\n  { to, from, subject, html, attachments }: any,\r\n  { config, logger }: CoreContext\r\n) {\r\n  if (!to?.length) {\r\n    throw new Error(\"empty to list\");\r\n  }\r\n\r\n  const { mailSetting = {} } = config;\r\n\r\n  /*= == check service and setting === */\r\n  if (!mailSetting.service) {\r\n    logger.file(\"notification/warn\", {\r\n      to,\r\n      from,\r\n      message: \"service is not defined in config\",\r\n    });\r\n    return null;\r\n  }\r\n\r\n  Object.assign(mailSetting, { rejectUnauthorized: false });\r\n\r\n  if (mailSetting.port === 465) {\r\n    Object.assign(mailSetting, { secure: true });\r\n  }\r\n\r\n  const transport = nodemailer.createTransport(mailSetting);\r\n\r\n  const result = await transport.sendMail({\r\n    from: from || mailSetting.from,\r\n    to,\r\n    subject,\r\n    html,\r\n    attachments,\r\n  });\r\n  return result;\r\n}\r\n\r\nexport default async function notification(\r\n  {\r\n    provider = [\"email\"],\r\n    from,\r\n    to,\r\n    template,\r\n    table,\r\n    message,\r\n    title,\r\n    data,\r\n    id,\r\n    nocache,\r\n  }: {\r\n    provider?: string[];\r\n    from?: string;\r\n    to: string;\r\n    template?: string;\r\n    table?: string;\r\n    message?: string;\r\n    title?: string;\r\n    data?: Record<string, any>;\r\n    id?: string;\r\n    nocache?: any;\r\n  },\r\n  { config, redis, pg, logger }: CoreContext\r\n) {\r\n  if (pg?.readonly) {\r\n    return null;\r\n  }\r\n\r\n  const keyTo = `${pg?.options?.database}:mail:${provider[0]}:${to || \"\"}${\r\n    id || \"\"\r\n  }${table || \"\"}${title || \"\"}`;\r\n  const uniqueTo = redis ? await redis.setnx(keyTo, 1) : true;\r\n\r\n  if (!uniqueTo && !nocache) {\r\n    logger.file(\"notification/sent\", { keyTo, send: uniqueTo, nocache });\r\n    return `already sent: ${keyTo}`;\r\n  }\r\n  if (redis) {\r\n    await redis.expire(keyTo, 1000 * 600);\r\n  }\r\n\r\n  if (!to.length) {\r\n    return null;\r\n  }\r\n\r\n  if (!(Array.isArray(provider) && provider.length)) {\r\n    return \"notification provider - must be array and not empty\";\r\n  }\r\n\r\n  const html = await generateNotificationContent(\r\n    {\r\n      pg,\r\n      table,\r\n      template,\r\n      id,\r\n      message,\r\n      data,\r\n    },\r\n    { pg }\r\n  );\r\n\r\n  if (provider.includes(\"email\")) {\r\n    const toEmail = Array.isArray(to)\r\n      ? to.map((emails) => emails.match(emailReg)?.join(\",\"))\r\n      : to;\r\n\r\n    const result = await sendEmail(\r\n      {\r\n        attachments: [],\r\n        html,\r\n        subject: title,\r\n        from,\r\n        to:\r\n          unittest && config.mailSetting?.to ? config.mailSetting?.to : toEmail,\r\n      },\r\n      { config, logger }\r\n    );\r\n\r\n    if (config.debug) {\r\n      console.log(result);\r\n    }\r\n\r\n    return result;\r\n  }\r\n  return null;\r\n}\r\n"],"mappings":"sJAMA,MAAM,EAAW,QAAQ,IAAI,WAAa,QAAU,CAAC,CAAC,QAAQ,IAAI,OAG5D,EACJ,8aAEF,eAAe,EACb,CAAE,QAAO,WAAU,KAAI,UAAS,KAAM,GACtC,CAAE,MACF,CACA,GAAI,EAAU,CACZ,IAAM,EACJ,GAAS,GAAM,EACX,MAAM,EACH,MAAM,iBAAiB,EAAM,SAAS,EAAG,GAAG,GAAO,KAAM,CAAC,CAAE,CAAC,EAC7D,KAAM,GAAY,EAAG,OAAO,IAAM,CAAC,CAAC,EACvC,EAEA,EAAO,MAAM,EAAY,KAAM,CAAQ,EAK7C,OAJa,EAAW,QAAQ,GAAQ,GAAY,oBAAoB,EACtE,GAAQ,CAAC,CAGD,CACZ,CACA,OAAO,CACT,CAEA,eAAe,EACb,CAAE,KAAI,OAAM,UAAS,OAAM,eAC3B,CAAE,SAAQ,UACV,CACA,GAAI,CAAC,GAAI,OACP,MAAU,MAAM,eAAe,EAGjC,GAAM,CAAE,cAAc,CAAC,GAAM,EA2B7B,OAxBK,EAAY,SASjB,OAAO,OAAO,EAAa,CAAE,mBAAoB,EAAM,CAAC,EAEpD,EAAY,OAAS,KACvB,OAAO,OAAO,EAAa,CAAE,OAAQ,EAAK,CAAC,EAYtC,MATW,EAAW,gBAAgB,CAEhB,EAAE,SAAS,CACtC,KAAM,GAAQ,EAAY,KAC1B,KACA,UACA,OACA,aACF,CAAC,IAtBC,EAAO,KAAK,oBAAqB,CAC/B,KACA,OACA,QAAS,kCACX,CAAC,EACM,KAmBX,CAEA,eAA8B,EAC5B,CACE,WAAW,CAAC,OAAO,EACnB,OACA,KACA,WACA,QACA,UACA,QACA,OACA,KACA,WAaF,CAAE,SAAQ,QAAO,KAAI,UACrB,CACA,GAAI,GAAI,SACN,OAAO,KAGT,IAAM,EAAQ,GAAG,GAAI,SAAS,SAAS,QAAQ,EAAS,GAAG,GAAG,GAAM,KAClE,GAAM,KACL,GAAS,KAAK,GAAS,KACpB,EAAW,EAAQ,MAAM,EAAM,MAAM,EAAO,CAAC,EAAI,GAEvD,GAAI,CAAC,GAAY,CAAC,EAEhB,OADA,EAAO,KAAK,oBAAqB,CAAE,QAAO,KAAM,EAAU,SAAQ,CAAC,EAC5D,iBAAiB,IAM1B,GAJI,GACF,MAAM,EAAM,OAAO,EAAO,IAAO,GAAG,EAGlC,CAAC,EAAG,OACN,OAAO,KAGT,GAAI,EAAE,MAAM,QAAQ,CAAQ,GAAK,EAAS,QACxC,MAAO,sDAGT,IAAM,EAAO,MAAM,EACjB,CACE,KACA,QACA,WACA,KACA,UACA,MACF,EACA,CAAE,IAAG,CACP,EAEA,GAAI,EAAS,SAAS,OAAO,EAAG,CAC9B,IAAM,EAAU,MAAM,QAAQ,CAAE,EAC5B,EAAG,IAAK,GAAW,EAAO,MAAM,CAAQ,GAAG,KAAK,GAAG,CAAC,EACpD,EAEE,EAAS,MAAM,EACnB,CACE,YAAa,CAAC,EACd,OACA,QAAS,EACT,OACA,GACE,GAAY,EAAO,aAAa,GAAK,EAAO,aAAa,GAAK,CAClE,EACA,CAAE,SAAQ,QAAO,CACnB,EAMA,OAJI,EAAO,OACT,QAAQ,IAAI,CAAM,EAGb,CACT,CACA,OAAO,IACT"}

package/dist/plugins/auth/funcs/users.js

@@ -0,0 +1,2 @@
+const e=[];export{e as default};
+//# sourceMappingURL=users.js.map

package/dist/plugins/auth/funcs/users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.js","names":[],"sources":["../../../../src/plugins/auth/funcs/users.ts"],"sourcesContent":["const users: any[] = [];\r\nexport default users;\r\n"],"mappings":"AAAA,MAAM,EAAe,CAAC"}

package/dist/plugins/auth/funcs/verifyPassword.js

@@ -0,0 +1,2 @@
+import e from"node:crypto";import t from"apache-crypt";function n(t){return e.createHash(`md5`).update(t).digest(`hex`)}async function r({username:e,password:r},{config:i,pg:a}){if(!a)throw Error(`empty pg`);if(!e||e===``)return{message:`not enough params: username`};if(!r||r===``)return{message:`not enough params: password`};let o=await a.query(`select * from admin.users where $1 in (login,email,phone) and enabled and salt is not null limit 1`,[e]).then(e=>e.rows?.[0]||{});if(!o)return{message:`user not found`};if(o.password_new_hash_algorithm===!0){let e=await a.query(`SELECT public.crypt($1, $2)`,[r,o.salt]).then(e=>e.rows?.[0]?.crypt);return o.password===e?{user:o}:{message:`Wrong password`}}let s=``;for(let e=0;e<10;e+=1)s=n(r+s+o.salt);return s=t(s,o.salt),o.password===s?(e===`admin`&&r===`admin`&&await a.query(`update admin.users set password=$2 where uid=$1`,[o.uid,i.adminPassword||`6Z4gu2mG8R`]),{user:o}):{message:`Wrong password`}}export{r as default};
+//# sourceMappingURL=verifyPassword.js.map

package/dist/plugins/auth/funcs/verifyPassword.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyPassword.js","names":[],"sources":["../../../../src/plugins/auth/funcs/verifyPassword.ts"],"sourcesContent":["import crypt from \"apache-crypt\";\r\nimport crypto from \"node:crypto\";\r\n\r\nimport { CoreContext } from \"../../../core.js\";\r\n\r\nfunction md5(string: string) {\r\n  return crypto.createHash(\"md5\").update(string).digest(\"hex\");\r\n}\r\n\r\nexport default async function verifyPassword(\r\n  {\r\n    username,\r\n    password,\r\n  }: {\r\n    username: string;\r\n    password: string;\r\n  },\r\n  { config, pg }: CoreContext\r\n) {\r\n  if (!pg) {\r\n    throw new Error(\"empty pg\");\r\n  }\r\n\r\n  if (!username || username === \"\")\r\n    return { message: \"not enough params: username\" };\r\n  if (!password || password === \"\")\r\n    return { message: \"not enough params: password\" };\r\n\r\n  const query =\r\n    \"select * from admin.users where $1 in (login,email,phone) and enabled and salt is not null limit 1\";\r\n  const json = await pg\r\n    .query(query, [username])\r\n    .then((r: any) => r.rows?.[0] || {});\r\n\r\n  if (!json) {\r\n    return { message: \"user not found\" };\r\n  }\r\n\r\n  if (json.password_new_hash_algorithm === true) {\r\n    const hash = await pg\r\n      .query(`SELECT public.crypt($1, $2)`, [password, json.salt])\r\n      .then((r: any) => r.rows?.[0]?.crypt);\r\n    if (json.password === hash) {\r\n      return { user: json };\r\n    }\r\n    return { message: \"Wrong password\" };\r\n  }\r\n\r\n  let hash = \"\";\r\n\r\n  for (let i = 0; i < 10; i += 1) {\r\n    hash = md5(password + hash + json.salt);\r\n  }\r\n\r\n  hash = crypt(hash, json.salt);\r\n\r\n  if (json.password === hash) {\r\n    if (username === \"admin\" && password === \"admin\") {\r\n      await pg.query(\"update admin.users set password=$2 where uid=$1\", [\r\n        json.uid,\r\n        config.adminPassword || \"6Z4gu2mG8R\",\r\n      ]);\r\n    }\r\n    return { user: json };\r\n  }\r\n  return { message: \"Wrong password\" };\r\n}\r\n"],"mappings":"uDAKA,SAAS,EAAI,EAAgB,CAC3B,OAAO,EAAO,WAAW,KAAK,EAAE,OAAO,CAAM,EAAE,OAAO,KAAK,CAC7D,CAEA,eAA8B,EAC5B,CACE,WACA,YAKF,CAAE,SAAQ,MACV,CACA,GAAI,CAAC,EACH,MAAU,MAAM,UAAU,EAG5B,GAAI,CAAC,GAAY,IAAa,GAC5B,MAAO,CAAE,QAAS,6BAA8B,EAClD,GAAI,CAAC,GAAY,IAAa,GAC5B,MAAO,CAAE,QAAS,6BAA8B,EAIlD,IAAM,EAAO,MAAM,EAChB,MAAM,qGAAO,CAAC,CAAQ,CAAC,EACvB,KAAM,GAAW,EAAE,OAAO,IAAM,CAAC,CAAC,EAErC,GAAI,CAAC,EACH,MAAO,CAAE,QAAS,gBAAiB,EAGrC,GAAI,EAAK,8BAAgC,GAAM,CAC7C,IAAM,EAAO,MAAM,EAChB,MAAM,8BAA+B,CAAC,EAAU,EAAK,IAAI,CAAC,EAC1D,KAAM,GAAW,EAAE,OAAO,IAAI,KAAK,EAItC,OAHI,EAAK,WAAa,EACb,CAAE,KAAM,CAAK,EAEf,CAAE,QAAS,gBAAiB,CACrC,CAEA,IAAI,EAAO,GAEX,IAAK,IAAI,EAAI,EAAG,EAAI,GAAI,GAAK,EAC3B,EAAO,EAAI,EAAW,EAAO,EAAK,IAAI,EAcxC,MAXA,GAAO,EAAM,EAAM,EAAK,IAAI,EAExB,EAAK,WAAa,GAChB,IAAa,SAAW,IAAa,SACvC,MAAM,EAAG,MAAM,kDAAmD,CAChE,EAAK,IACL,EAAO,eAAiB,YAC1B,CAAC,EAEI,CAAE,KAAM,CAAK,GAEf,CAAE,QAAS,gBAAiB,CACrC"}

package/dist/plugins/auth/index.js

@@ -0,0 +1,2 @@
+import e from"../../config.js";import t from"../redis/funcs/createRedis.js";import{ForbiddenError as n}from"../../errors.js";import{existsSync as r}from"node:fs";import i from"@fastify/cookie";import a from"@fastify/session";import{Authenticator as o}from"@fastify/passport";import s from"fastify-session-redis-store";const c=new o,{prefix:l=`/api`}=e;async function u(t,i){let{hostname:a,headers:o,routeOptions:s}=t,{config:c,method:u,handler:d,url:f}=s||{},{policy:p}=c||{},m=u&&f&&typeof d==`function`&&f!==`*`;if(!m)return null;let h=e.debugAuth?!!t.headers?.uid&&(process.env.NODE_ENV===`test`||process.env.VITEST):void 0;(t.ip===`193.239.152.181`||t.ip===`127.0.0.1`||t.ip?.startsWith?.(`192.168.`)||e.debug)&&(h||t.headers?.token&&e.auth?.tokens?.includes?.(o.token))&&!t?.user?.uid&&(t.user={uid:t.headers?.uid?.toString?.()||`1`,user_type:t.headers?.user_type?.toString?.()||`regular`});let g=process.env.NODE_ENV===`admin`||a?.split?.(`:`)?.shift?.()===e.adminDomain||e.admin||a?.startsWith?.(`admin`),_=Array.isArray(p)?p.includes(`public`):p===`L0`;process.platform===`win32`&&!t.cookies&&(t.cookies={},t.cookies.session_auth=`test`),t.cookies?.session_auth&&!t.session?.passport?.user?.uid&&(e.auth?.disable||e.auth?.user)&&(t.session=t.session||{},t.session.passport=t.session.passport||{},t.session.passport.user={...e.auth?.user||{},uid:e.auth?.user?.uid?.toString?.()||`1`,user_rnokpp:e.auth?.user?.rnokpp,user_type:e.auth?.user?.type||`regular`},t.user=t.session.passport.user),t.user=t.user||t.session?.passport?.user||void 0;let v=r(`passwd`)&&!e.auth?.[`2factor`]||e.auth?.passwd,y=e.auth?.link?.core?.login||e?.auth?.redirect||`/login`;if(!t.user?.uid&&!e.auth?.disable&&g&&!_&&!m&&!e.auth?.disableRedirect&&!t.url.startsWith(l)&&!t.url.startsWith(`/api`)&&!t.url.includes(y)&&!t.url.includes(`.`)&&!t.url.includes(`@`))return i.redirect(`${y}?redirect=${t.url}`);let b=t.user?.auth_type===`govid`?e.auth?.[`2factor`]?.govid:!0,x=e.auth?.link?.[`2fa`]?.login||`/2factor`;if(t.user?.uid&&t.user?.twofa&&(s?.method||`GET`)===`GET`&&!t.session?.secondFactorPassed&&!v&&!e.auth?.disableRedirect&&!e.auth?.disable&&b&&(!e.auth?.[`2factorEnv`]||e.auth?.[`2factorEnv`]&&process.env.NODE_ENV===e.auth?.[`2factorEnv`]||e.auth?.[`2factorEnv`]===`admin`&&g)&&!t.url.startsWith(x)&&!s.url?.includes?.(`/logout`)&&!s.url?.includes?.(`/2fa`)&&!s.url?.includes?.(`/assets`)){if(m)throw n(`access restricted: twofa`);return i.redirect(x)}return null}function d(n){e.redis&&(n.addHook(`onRequest`,u),!(process.env.NODE_ENV===`test`||process.env.VITEST)&&(n.register(i,{parseOptions:e?.auth?.cookieOptions||{secure:!1}}),n.register(a,{secret:e?.auth?.secret||`61b820e12858570a4b0633020d4394a17903d9a9`,cookieName:`session_auth`,cookie:e?.auth?.cookieOptions||{secure:!1},store:new s({prefix:`session_auth:${e.pg?.database||`db`}:`,client:t({db:2})})}),n.register(c.initialize()),n.register(c.secureSession()),c.registerUserSerializer(async e=>({user:e})),c.registerUserDeserializer(async e=>e?.user||e)))}export{d as default};
+//# sourceMappingURL=index.js.map

package/dist/plugins/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/plugins/auth/index.ts"],"sourcesContent":["import { FastifyInstance, FastifyReply } from \"fastify\";\r\n\r\nimport { existsSync } from \"node:fs\";\r\nimport cookie from \"@fastify/cookie\";\r\nimport session from \"@fastify/session\";\r\nimport { Authenticator } from \"@fastify/passport\";\r\nimport RedisStore from \"fastify-session-redis-store\";\r\n\r\nimport config from \"../../config.js\";\r\n\r\nimport createRedis from \"../redis/funcs/createRedis.js\";\r\n\r\nimport { ExtendedRequest } from \"../../types/core.js\";\r\nimport { ForbiddenError, UnauthorizedError } from \"../../errors.js\";\r\n\r\nconst fastifyPassport = new Authenticator();\r\n\r\nconst { prefix = \"/api\" } = config;\r\n\r\nexport async function onRequest(req: ExtendedRequest, reply: FastifyReply) {\r\n  const { hostname, headers, routeOptions } = req;\r\n  const { config: routeConfig, method, handler, url } = routeOptions || {};\r\n  const { policy } = routeConfig || {};\r\n  const isApi = method && url && typeof handler === \"function\" && url !== \"*\";\r\n\r\n  // handle non-api at vite/vike\r\n  if (!isApi) {\r\n    return null;\r\n  }\r\n\r\n  // proxy from old apps to editor, bi etc.\r\n  const debugAuth = config.debugAuth\r\n    ? !!req.headers?.uid &&\r\n      (process.env.NODE_ENV === \"test\" || process.env.VITEST)\r\n    : undefined;\r\n\r\n  const validToken =\r\n    (req.ip === \"193.239.152.181\" ||\r\n      req.ip === \"127.0.0.1\" ||\r\n      req.ip?.startsWith?.(\"192.168.\") ||\r\n      config.debug) &&\r\n    (debugAuth ||\r\n      (req.headers?.token && config.auth?.tokens?.includes?.(headers.token)));\r\n\r\n  if (validToken && !req?.user?.uid) {\r\n    req.user = {\r\n      uid: req.headers?.uid?.toString?.() || \"1\",\r\n      user_type: req.headers?.user_type?.toString?.() || \"regular\",\r\n    };\r\n  }\r\n\r\n  const isAdmin =\r\n    process.env.NODE_ENV === \"admin\" ||\r\n    hostname?.split?.(\":\")?.shift?.() === config.adminDomain ||\r\n    config.admin ||\r\n    hostname?.startsWith?.(\"admin\");\r\n\r\n  const isPublic = Array.isArray(policy)\r\n    ? policy.includes(\"public\")\r\n    : policy === \"L0\";\r\n\r\n  // local development only, example: upload file via postman\r\n  if (process.platform === \"win32\" && !req.cookies) {\r\n    req.cookies = {};\r\n    req.cookies[\"session_auth\"] = \"test\";\r\n  }\r\n  if (\r\n    req.cookies?.[\"session_auth\"] &&\r\n    !req.session?.passport?.user?.uid &&\r\n    (config.auth?.disable || config.auth?.user)\r\n  ) {\r\n    req.session = req.session || {};\r\n    req.session.passport = req.session.passport || {}; // ensure passport session exists\r\n    req.session.passport.user = {\r\n      ...(config.auth?.user || {}),\r\n      uid: config.auth?.user?.uid?.toString?.() || \"1\",\r\n      user_rnokpp: config.auth?.user?.rnokpp,\r\n      user_type: config.auth?.user?.type || \"regular\",\r\n    };\r\n    req.user = req.session.passport.user;\r\n  }\r\n\r\n  // ! intentional: null || undefined > undefined\r\n  req.user = req.user || req.session?.passport?.user || undefined; // fix for user.uid errors, by default user is null, while with express passport it was {}, unauthorized user does not trigger serializer\r\n\r\n  // currently 2factor + auth with passwd file not supported\r\n  const ispasswd =\r\n    (existsSync(\"passwd\") && !config.auth?.[\"2factor\"]) || config.auth?.passwd;\r\n\r\n  const loginPageUrl =\r\n    config.auth?.link?.core?.login || config?.auth?.redirect || \"/login\";\r\n\r\n  if (\r\n    !req.user?.uid &&\r\n    !config.auth?.disable &&\r\n    isAdmin &&\r\n    !isPublic &&\r\n    !isApi &&\r\n    !config.auth?.disableRedirect &&\r\n    !req.url.startsWith(prefix) &&\r\n    !req.url.startsWith(\"/api\") &&\r\n    !req.url.includes(loginPageUrl) &&\r\n    !req.url.includes(\".\") &&\r\n    !req.url.includes(\"@\")\r\n  ) {\r\n    return reply.redirect(`${loginPageUrl}` + `?redirect=${req.url}`);\r\n  }\r\n\r\n  // by default, disable 2factor for id.gov.ua auth\r\n  const check =\r\n    req.user?.auth_type === \"govid\" ? config.auth?.[\"2factor\"]?.govid : true;\r\n\r\n  const login2faPage = config.auth?.link?.[\"2fa\"]?.login || \"/2factor\";\r\n\r\n  // example: 2factor for admin env only, while public env does not require it\r\n  const checkEnv = () => {\r\n    if (!config.auth?.[\"2factorEnv\"]) return true;\r\n    if (\r\n      (config.auth?.[\"2factorEnv\"] &&\r\n        process.env.NODE_ENV === config.auth?.[\"2factorEnv\"]) ||\r\n      (config.auth?.[\"2factorEnv\"] === \"admin\" && isAdmin)\r\n    ) {\r\n      return true;\r\n    }\r\n    return false;\r\n  };\r\n\r\n  // if 2factor is enabled globally + for user and secondFactorPassed not true => redirect to 2factor login page\r\n  if (\r\n    req.user?.uid &&\r\n    req.user?.twofa &&\r\n    // config.auth?.[\"2factor\"] &&\r\n    // !isPublic &&\r\n    (routeOptions?.method || \"GET\") === \"GET\" &&\r\n    !req.session?.secondFactorPassed &&\r\n    !ispasswd &&\r\n    !config.auth?.disableRedirect &&\r\n    !config.auth?.disable &&\r\n    check &&\r\n    checkEnv() &&\r\n    !req.url.startsWith(login2faPage) &&\r\n    !routeOptions.url?.includes?.(\"/logout\") &&\r\n    !routeOptions.url?.includes?.(\"/2fa\") &&\r\n    !routeOptions.url?.includes?.(\"/assets\")\r\n  ) {\r\n    if (isApi) {\r\n      throw ForbiddenError(\"access restricted: twofa\");\r\n    }\r\n    return reply.redirect(login2faPage);\r\n  }\r\n  return null;\r\n}\r\n\r\nfunction plugin(fastify: FastifyInstance) {\r\n  if (!config.redis) {\r\n    return;\r\n  }\r\n  fastify.addHook(\"onRequest\", onRequest);\r\n\r\n  if (process.env.NODE_ENV === \"test\" || process.env.VITEST) {\r\n    return;\r\n  }\r\n\r\n  fastify.register(cookie, {\r\n    parseOptions: config?.auth?.cookieOptions || { secure: false },\r\n  });\r\n\r\n  fastify.register(session, {\r\n    secret: config?.auth?.secret || \"61b820e12858570a4b0633020d4394a17903d9a9\",\r\n    cookieName: \"session_auth\",\r\n    cookie: config?.auth?.cookieOptions || { secure: false },\r\n    store: new RedisStore({\r\n      prefix: `session_auth:${config.pg?.database || \"db\"}:`,\r\n      client: createRedis({ db: 2 }),\r\n    }),\r\n  });\r\n\r\n  // register passport AFTER session is ready\r\n  fastify.register(fastifyPassport.initialize());\r\n  fastify.register(fastifyPassport.secureSession());\r\n\r\n  // serialize user used to store user info in session store\r\n  fastifyPassport.registerUserSerializer(async (user) => ({ user }));\r\n  // deserialize user used to add user info from session store to req\r\n  fastifyPassport.registerUserDeserializer(\r\n    async (passport: { user?: Record<string, any> }) =>\r\n      passport?.user || passport\r\n  );\r\n}\r\n\r\nexport default plugin;\r\n"],"mappings":"8TAeA,MAAM,EAAkB,IAAI,EAEtB,CAAE,SAAS,QAAW,EAE5B,eAAsB,EAAU,EAAsB,EAAqB,CACzE,GAAM,CAAE,WAAU,UAAS,gBAAiB,EACtC,CAAE,OAAQ,EAAa,SAAQ,UAAS,OAAQ,GAAgB,CAAC,EACjE,CAAE,UAAW,GAAe,CAAC,EAC7B,EAAQ,GAAU,GAAO,OAAO,GAAY,YAAc,IAAQ,IAGxE,GAAI,CAAC,EACH,OAAO,KAIT,IAAM,EAAY,EAAO,UACrB,CAAC,CAAC,EAAI,SAAS,MACd,QAAQ,IAAI,WAAa,QAAU,QAAQ,IAAI,QAChD,IAAA,IAGD,EAAI,KAAO,mBACV,EAAI,KAAO,aACX,EAAI,IAAI,aAAa,UAAU,GAC/B,EAAO,SACR,GACE,EAAI,SAAS,OAAS,EAAO,MAAM,QAAQ,WAAW,EAAQ,KAAK,IAEtD,CAAC,GAAK,MAAM,MAC5B,EAAI,KAAO,CACT,IAAK,EAAI,SAAS,KAAK,WAAW,GAAK,IACvC,UAAW,EAAI,SAAS,WAAW,WAAW,GAAK,SACrD,GAGF,IAAM,EACJ,QAAQ,IAAI,WAAa,SACzB,GAAU,QAAQ,GAAG,GAAG,QAAQ,IAAM,EAAO,aAC7C,EAAO,OACP,GAAU,aAAa,OAAO,EAE1B,EAAW,MAAM,QAAQ,CAAM,EACjC,EAAO,SAAS,QAAQ,EACxB,IAAW,KAGX,QAAQ,WAAa,SAAW,CAAC,EAAI,UACvC,EAAI,QAAU,CAAC,EACf,EAAI,QAAQ,aAAkB,QAG9B,EAAI,SAAU,cACd,CAAC,EAAI,SAAS,UAAU,MAAM,MAC7B,EAAO,MAAM,SAAW,EAAO,MAAM,QAEtC,EAAI,QAAU,EAAI,SAAW,CAAC,EAC9B,EAAI,QAAQ,SAAW,EAAI,QAAQ,UAAY,CAAC,EAChD,EAAI,QAAQ,SAAS,KAAO,CAC1B,GAAI,EAAO,MAAM,MAAQ,CAAC,EAC1B,IAAK,EAAO,MAAM,MAAM,KAAK,WAAW,GAAK,IAC7C,YAAa,EAAO,MAAM,MAAM,OAChC,UAAW,EAAO,MAAM,MAAM,MAAQ,SACxC,EACA,EAAI,KAAO,EAAI,QAAQ,SAAS,MAIlC,EAAI,KAAO,EAAI,MAAQ,EAAI,SAAS,UAAU,MAAQ,IAAA,GAGtD,IAAM,EACH,EAAW,QAAQ,GAAK,CAAC,EAAO,OAAO,YAAe,EAAO,MAAM,OAEhE,EACJ,EAAO,MAAM,MAAM,MAAM,OAAS,GAAQ,MAAM,UAAY,SAE9D,GACE,CAAC,EAAI,MAAM,KACX,CAAC,EAAO,MAAM,SACd,GACA,CAAC,GACD,CAAC,GACD,CAAC,EAAO,MAAM,iBACd,CAAC,EAAI,IAAI,WAAW,CAAM,GAC1B,CAAC,EAAI,IAAI,WAAW,MAAM,GAC1B,CAAC,EAAI,IAAI,SAAS,CAAY,GAC9B,CAAC,EAAI,IAAI,SAAS,GAAG,GACrB,CAAC,EAAI,IAAI,SAAS,GAAG,EAErB,OAAO,EAAM,SAAS,GAAG,EAAA,YAA8B,EAAI,KAAK,EAIlE,IAAM,EACJ,EAAI,MAAM,YAAc,QAAU,EAAO,OAAO,YAAY,MAAQ,GAEhE,EAAe,EAAO,MAAM,OAAO,QAAQ,OAAS,WAgB1D,GACE,EAAI,MAAM,KACV,EAAI,MAAM,QAGT,GAAc,QAAU,SAAW,OACpC,CAAC,EAAI,SAAS,oBACd,CAAC,GACD,CAAC,EAAO,MAAM,iBACd,CAAC,EAAO,MAAM,SACd,IAtBI,CAAC,EAAO,OAAO,eAEhB,EAAO,OAAO,eACb,QAAQ,IAAI,WAAa,EAAO,OAAO,eACxC,EAAO,OAAO,gBAAkB,SAAW,IAoB9C,CAAC,EAAI,IAAI,WAAW,CAAY,GAChC,CAAC,EAAa,KAAK,WAAW,SAAS,GACvC,CAAC,EAAa,KAAK,WAAW,MAAM,GACpC,CAAC,EAAa,KAAK,WAAW,SAAS,EACvC,CACA,GAAI,EACF,MAAM,EAAe,0BAA0B,EAEjD,OAAO,EAAM,SAAS,CAAY,CACpC,CACA,OAAO,IACT,CAEA,SAAS,EAAO,EAA0B,CACnC,EAAO,QAGZ,EAAQ,QAAQ,YAAa,CAAS,EAElC,UAAQ,IAAI,WAAa,QAAU,QAAQ,IAAI,UAInD,EAAQ,SAAS,EAAQ,CACvB,aAAc,GAAQ,MAAM,eAAiB,CAAE,OAAQ,EAAM,CAC/D,CAAC,EAED,EAAQ,SAAS,EAAS,CACxB,OAAQ,GAAQ,MAAM,QAAU,2CAChC,WAAY,eACZ,OAAQ,GAAQ,MAAM,eAAiB,CAAE,OAAQ,EAAM,EACvD,MAAO,IAAI,EAAW,CACpB,OAAQ,gBAAgB,EAAO,IAAI,UAAY,KAAK,GACpD,OAAQ,EAAY,CAAE,GAAI,CAAE,CAAC,CAC/B,CAAC,CACH,CAAC,EAGD,EAAQ,SAAS,EAAgB,WAAW,CAAC,EAC7C,EAAQ,SAAS,EAAgB,cAAc,CAAC,EAGhD,EAAgB,uBAAuB,KAAO,KAAU,CAAE,MAAK,EAAE,EAEjE,EAAgB,yBACd,KAAO,IACL,GAAU,MAAQ,CACtB,GACF"}

package/dist/plugins/context/index.js

@@ -0,0 +1,2 @@
+import{GetContext as e}from"../../core.js";function t(t){t.decorate(`ctx`,e())}export{t as default};
+//# sourceMappingURL=index.js.map

package/dist/plugins/context/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/plugins/context/index.ts"],"sourcesContent":["import { FastifyInstance } from \"fastify\";\r\n\r\nimport { GetContext } from \"../../core.js\";\r\n\r\nfunction plugin(app: FastifyInstance) {\r\n  app.decorate(\"ctx\", GetContext());\r\n}\r\n\r\nexport default plugin;\r\n"],"mappings":"2CAIA,SAAS,EAAO,EAAsB,CACpC,EAAI,SAAS,MAAO,EAAW,CAAC,CAClC"}

package/dist/plugins/cron/cronList.js

@@ -0,0 +1,2 @@
+const e={},t={};export{t as cronTime,e as default};
+//# sourceMappingURL=cronList.js.map

package/dist/plugins/cron/cronList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cronList.js","names":[],"sources":["../../../src/plugins/cron/cronList.ts"],"sourcesContent":["const cronList: Record<string, Function> = {};\r\nconst cronTime: Record<string, string | number> = {};\r\n\r\nexport { cronList, cronTime };\r\n\r\nexport default cronList;\r\n"],"mappings":"AAAA,MAAM,EAAqC,CAAC,EACtC,EAA4C,CAAC"}

package/dist/plugins/cron/funcs/addCron.d.ts

@@ -0,0 +1,16 @@
+//#region src/plugins/cron/funcs/addCron.d.ts
+/**
+ * interval:
+ * -   02:54 - every day
+ * -    2:03 - every day
+ * -   *1:43 - 2 times a day
+ * -  *12:03 - 2 times a day
+ * -   **:54 - every hour
+ * -   **:*3 - every 10 minutes
+ * -      60 - every minute
+ * - 10 * 60 - every 10 minutes
+ */
+declare function addCron(func: any, interval: number | string): Promise<void>;
+//#endregion
+export { addCron };
+//# sourceMappingURL=addCron.d.ts.map

package/dist/plugins/cron/funcs/addCron.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"addCron.d.ts","names":[],"sources":["../../../../src/plugins/cron/funcs/addCron.ts"],"mappings":";;;;;;;;;;;;iBAkB8B,QAAQ,WAAW,4BAAyB"}

package/dist/plugins/cron/funcs/addCron.js

@@ -0,0 +1,2 @@
+import{GetContext as e}from"../../../core.js";import t,{cronTime as n}from"../cronList.js";import r from"./runCron.js";import i from"./interval2ms.js";async function a(a,o){let{pg:s,redis:c,config:l,logger:u}=e(),{time:d={},disabled:f=[]}=l.cron||{},p=a.name||a.toString().split(`/`).at(-1).split(`'`)[0];if(f.includes(p)){u.file(`cron`,{name:p,message:`cron disabled`});return}t[p]=a;let m=d[p]||o;n[p]=m;let[h,g]=i[typeof o](m);if(g<1e3){u.file(`cron`,{name:p,error:`interval ${o} too small`});return}setTimeout(()=>{r({func:a,name:p},{pg:s,config:l,logger:u,redis:c}),setInterval(()=>{r({func:a,name:p},{pg:s,config:l,logger:u,redis:c})},g)},h)}export{a as default};
+//# sourceMappingURL=addCron.js.map

package/dist/plugins/cron/funcs/addCron.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"addCron.js","names":[],"sources":["../../../../src/plugins/cron/funcs/addCron.ts"],"sourcesContent":["import { cronList, cronTime } from \"../cronList.js\";\r\nimport { GetContext } from \"../../../core.js\";\r\n\r\nimport runCron from \"./runCron.js\";\r\nimport interval2ms from \"./interval2ms.js\";\r\n\r\n/**\r\n * interval:\r\n * -   02:54 - every day\r\n * -    2:03 - every day\r\n * -   *1:43 - 2 times a day\r\n * -  *12:03 - 2 times a day\r\n * -   **:54 - every hour\r\n * -   **:*3 - every 10 minutes\r\n * -      60 - every minute\r\n * - 10 * 60 - every 10 minutes\r\n */\r\n\r\nexport default async function addCron(func: any, interval: number | string) {\r\n  const { pg, redis, config, logger } = GetContext();\r\n  const { time = {}, disabled = [] } = config.cron || {};\r\n\r\n  const name = func.name || func.toString().split(\"/\").at(-1).split(\"'\")[0];\r\n\r\n  // if (!config.isServer) return;\r\n\r\n  if (disabled.includes(name)) {\r\n    logger.file(\"cron\", { name, message: \"cron disabled\" });\r\n    return;\r\n  }\r\n\r\n  cronList[name] = func;\r\n\r\n  const userInterval: number | string = time[name] || interval;\r\n\r\n  cronTime[name] = userInterval;\r\n\r\n  const [waitMs, intervalMs] = interval2ms[typeof interval](userInterval);\r\n\r\n  if (intervalMs < 1000) {\r\n    logger.file(\"cron\", { name, error: `interval ${interval} too small` });\r\n    return;\r\n  }\r\n\r\n  // setTimeout to w8 for the time to start\r\n  setTimeout(() => {\r\n    runCron({ func, name }, { pg, config, logger, redis });\r\n    // interval\r\n    setInterval(() => {\r\n      runCron({ func, name }, { pg, config, logger, redis });\r\n    }, intervalMs);\r\n  }, waitMs);\r\n}\r\n"],"mappings":"uJAkBA,eAA8B,EAAQ,EAAW,EAA2B,CAC1E,GAAM,CAAE,KAAI,QAAO,SAAQ,UAAW,EAAW,EAC3C,CAAE,OAAO,CAAC,EAAG,WAAW,CAAC,GAAM,EAAO,MAAQ,CAAC,EAE/C,EAAO,EAAK,MAAQ,EAAK,SAAS,EAAE,MAAM,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,GAIvE,GAAI,EAAS,SAAS,CAAI,EAAG,CAC3B,EAAO,KAAK,OAAQ,CAAE,OAAM,QAAS,eAAgB,CAAC,EACtD,MACF,CAEA,EAAS,GAAQ,EAEjB,IAAM,EAAgC,EAAK,IAAS,EAEpD,EAAS,GAAQ,EAEjB,GAAM,CAAC,EAAQ,GAAc,EAAY,OAAO,GAAU,CAAY,EAEtE,GAAI,EAAa,IAAM,CACrB,EAAO,KAAK,OAAQ,CAAE,OAAM,MAAO,YAAY,EAAS,WAAY,CAAC,EACrE,MACF,CAGA,eAAiB,CACf,EAAQ,CAAE,OAAM,MAAK,EAAG,CAAE,KAAI,SAAQ,SAAQ,OAAM,CAAC,EAErD,gBAAkB,CAChB,EAAQ,CAAE,OAAM,MAAK,EAAG,CAAE,KAAI,SAAQ,SAAQ,OAAM,CAAC,CACvD,EAAG,CAAU,CACf,EAAG,CAAM,CACX"}

package/dist/plugins/cron/funcs/interval2ms.js

@@ -0,0 +1,2 @@
+const e={everyMin:1e3*60,tenMin:1e3*60*10,everyHour:1e3*60*60,isHalfday:1e3*60*60*12,dailyHour:1e3*60*60*24},t={string:t=>{let n=new Date,r=t.match(/^(\*{2}|(\*)?(\d{1,2})):(\*(\d)|(\d{2}))/);if(!r)throw Error(`interval ${t} not suported`);let[,,i,a,,o,s]=r,c=i&&e.isHalfday||a&&e.dailyHour||o&&e.tenMin||e.everyHour;return[(((a||0)*60+ +(o||s||0))*60*1e3-(n.getTime()-n.getTimezoneOffset()*1e3*60)%c+c)%c,c]},number:e=>{let t=new Date,n=e*1e3;return[(n-(t.getTime()-t.getTimezoneOffset()*1e3*60)%n)%36e5,n]}};export{t as default};
+//# sourceMappingURL=interval2ms.js.map

package/dist/plugins/cron/funcs/interval2ms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interval2ms.js","names":[],"sources":["../../../../src/plugins/cron/funcs/interval2ms.ts"],"sourcesContent":["const intervalStringMs = {\r\n  everyMin: 1000 * 60,\r\n  tenMin: 1000 * 60 * 10,\r\n  everyHour: 1000 * 60 * 60,\r\n  isHalfday: 1000 * 60 * 60 * 12,\r\n  dailyHour: 1000 * 60 * 60 * 24,\r\n};\r\n\r\nconst interval2ms = {\r\n  string: (interval: string) => {\r\n    const date = new Date();\r\n    const intervarSplit = interval.match(\r\n      /^(\\*{2}|(\\*)?(\\d{1,2})):(\\*(\\d)|(\\d{2}))/\r\n    );\r\n\r\n    if (!intervarSplit) {\r\n      throw new Error(`interval ${interval} not suported`);\r\n    }\r\n\r\n    const [, , isHalfday, dailyHour, , tenMin, HourlyMin] = intervarSplit;\r\n    const intervalMs =\r\n      (isHalfday && intervalStringMs.isHalfday) ||\r\n      (dailyHour && intervalStringMs.dailyHour) ||\r\n      (tenMin && intervalStringMs.tenMin) ||\r\n      intervalStringMs.everyHour;\r\n    const offsetDay =\r\n      (+(dailyHour || 0) * 60 + +(tenMin || HourlyMin || 0)) * 60 * 1000;\r\n    const offsetCur =\r\n      (date.getTime() - date.getTimezoneOffset() * 1000 * 60) % intervalMs;\r\n    const waitMs = (offsetDay - offsetCur + intervalMs) % intervalMs;\r\n    return [waitMs, intervalMs];\r\n  },\r\n  number: (interval: number) => {\r\n    const date = new Date();\r\n    const intervalMs = interval * 1000;\r\n    const dateWithTZ = date.getTime() - date.getTimezoneOffset() * 1000 * 60;\r\n    const offsetCur = dateWithTZ % intervalMs;\r\n    // start every cron within 1 hour\r\n    const sixtyMinutesStartMs = 3600000;\r\n    const waitMs = (intervalMs - offsetCur) % sixtyMinutesStartMs;\r\n    return [waitMs, intervalMs];\r\n  },\r\n} as any;\r\n\r\nexport default interval2ms;\r\n"],"mappings":"AAAA,MAAM,EAAmB,CACvB,SAAU,IAAO,GACjB,OAAQ,IAAO,GAAK,GACpB,UAAW,IAAO,GAAK,GACvB,UAAW,IAAO,GAAK,GAAK,GAC5B,UAAW,IAAO,GAAK,GAAK,EAC9B,EAEM,EAAc,CAClB,OAAS,GAAqB,CAC5B,IAAM,EAAO,IAAI,KACX,EAAgB,EAAS,MAC7B,0CACF,EAEA,GAAI,CAAC,EACH,MAAU,MAAM,YAAY,EAAS,cAAc,EAGrD,GAAM,GAAK,EAAW,GAAa,EAAQ,GAAa,EAClD,EACH,GAAa,EAAiB,WAC9B,GAAa,EAAiB,WAC9B,GAAU,EAAiB,QAC5B,EAAiB,UAMnB,MAAO,IAJF,GAAa,GAAK,IAAK,EAAE,GAAU,GAAa,IAAM,GAAK,KAE7D,EAAK,QAAQ,EAAI,EAAK,kBAAkB,EAAI,IAAO,IAAM,EACpB,GAAc,EACtC,CAAU,CAC5B,EACA,OAAS,GAAqB,CAC5B,IAAM,EAAO,IAAI,KACX,EAAa,EAAW,IAM9B,MAAO,EADS,GAJG,EAAK,QAAQ,EAAI,EAAK,kBAAkB,EAAI,IAAO,IACvC,GAGW,KAC1B,CAAU,CAC5B,CACF"}

package/dist/plugins/cron/funcs/runCron.js

@@ -0,0 +1,2 @@
+import{GetContext as e}from"../../../core.js";import t from"./verifyUnique.js";async function n({func:n,name:r},{pg:i,logger:a,redis:o}=e()){if(!await t(r))return;let s=i?.options?.database;if(s)try{let e=await n({pg:i,logger:a,redis:o}),t=e?`cron`:`cron/null`;a.file(t,{db:s,name:r,result:e})}catch(e){a.file(`cron`,{db:s,name:r,error:e.toString()}),a.error(e)}}export{n as default};
+//# sourceMappingURL=runCron.js.map

package/dist/plugins/cron/funcs/runCron.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runCron.js","names":[],"sources":["../../../../src/plugins/cron/funcs/runCron.ts"],"sourcesContent":["import { GetContext } from \"../../../core.js\";\r\nimport verifyUnique from \"./verifyUnique.js\";\r\n\r\nexport default async function runCron(\r\n  {\r\n    func,\r\n    name,\r\n  }: {\r\n    func: Function;\r\n    name: string;\r\n  },\r\n  { pg, logger, redis } = GetContext()\r\n) {\r\n  const unique = await verifyUnique(name);\r\n  if (!unique) return;\r\n\r\n  const db = pg?.options?.database;\r\n  if (!db) return;\r\n\r\n  try {\r\n    const data = await func({ pg, logger, redis });\r\n    const subdir = data ? \"cron\" : \"cron/null\";\r\n    logger.file(subdir, { db, name, result: data });\r\n  } catch (err: any) {\r\n    logger.file(\"cron\", { db, name, error: err.toString() });\r\n    logger.error(err);\r\n  }\r\n}\r\n"],"mappings":"+EAGA,eAA8B,EAC5B,CACE,OACA,QAKF,CAAE,KAAI,SAAQ,SAAU,EAAW,EACnC,CAEA,GAAI,CAAC,MADgB,EAAa,CAAI,EACzB,OAEb,IAAM,EAAK,GAAI,SAAS,SACnB,KAEL,GAAI,CACF,IAAM,EAAO,MAAM,EAAK,CAAE,KAAI,SAAQ,OAAM,CAAC,EACvC,EAAS,EAAO,OAAS,YAC/B,EAAO,KAAK,EAAQ,CAAE,KAAI,OAAM,OAAQ,CAAK,CAAC,CAChD,OAAS,EAAU,CACjB,EAAO,KAAK,OAAQ,CAAE,KAAI,OAAM,MAAO,EAAI,SAAS,CAAE,CAAC,EACvD,EAAO,MAAM,CAAG,CAClB,CACF"}

package/dist/plugins/cron/funcs/verifyUnique.js

@@ -0,0 +1,2 @@
+import{GetContext as e}from"../../../core.js";import{createHash as t}from"node:crypto";const n=e=>t(`md5`).update(e).digest(`hex`);async function r(t){let{config:r,redis:i}=e();if(!i)return!0;let a=`cron:unique:${process.env.PORT||r.port||3e3+n(t)}`,o=await i.setnx(a,1),s=await i.ttl(a);return!o&&s!==-1?!1:(await i.expire(a,20),!0)}export{r as default};
+//# sourceMappingURL=verifyUnique.js.map

package/dist/plugins/cron/funcs/verifyUnique.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyUnique.js","names":[],"sources":["../../../../src/plugins/cron/funcs/verifyUnique.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\r\n\r\nimport { GetContext } from \"../../../core.js\";\r\n\r\nconst md5 = (string: string) => createHash(\"md5\").update(string).digest(\"hex\");\r\n\r\nexport default async function verifyUnique(name: string) {\r\n  const { config, redis: rclient } = GetContext();\r\n  if (!rclient) return true; // skip if redis is disabled\r\n\r\n  const cronId = process.env.PORT || config.port || 3000 + md5(name);\r\n  // one per node check\r\n  const key = `cron:unique:${cronId}`;\r\n  const unique = await rclient.setnx(key, 1);\r\n  const ttl = await rclient.ttl(key);\r\n  if (!unique && ttl !== -1) {\r\n    return false;\r\n  }\r\n  await rclient.expire(key, 20);\r\n  return true;\r\n}\r\n"],"mappings":"uFAIA,MAAM,EAAO,GAAmB,EAAW,KAAK,EAAE,OAAO,CAAM,EAAE,OAAO,KAAK,EAE7E,eAA8B,EAAa,EAAc,CACvD,GAAM,CAAE,SAAQ,MAAO,GAAY,EAAW,EAC9C,GAAI,CAAC,EAAS,MAAO,GAIrB,IAAM,EAAM,eAFG,QAAQ,IAAI,MAAQ,EAAO,MAAQ,IAAO,EAAI,CAAI,IAG3D,EAAS,MAAM,EAAQ,MAAM,EAAK,CAAC,EACnC,EAAM,MAAM,EAAQ,IAAI,CAAG,EAKjC,MAJI,CAAC,GAAU,IAAQ,GACd,IAET,MAAM,EAAQ,OAAO,EAAK,EAAE,EACrB,GACT"}

package/dist/plugins/cron/index.js

@@ -0,0 +1,2 @@
+import{GetContext as e}from"../../core.js";import t from"../pg/funcs/createPg.js";import n from"./funcs/interval2ms.js";import{createHash as r}from"node:crypto";async function i({query:e,name:t},{pg:n,redis:r,logger:i}){let a=n?.options?.database,o=`cron:unique:${t}`,s=r?await r.setnx(o,1):null,c=r?await r.ttl(o):-1;if(!(!s&&c!==-1)){r&&await r.expire(o,20);try{!n?.pk&&n&&await n.init(),process.env.trace===`true`&&console.time(`${a}:${e}`);let{command:r,rows:o=[],rowCount:s}=n?.pk?await n.query(e):{};process.env.trace===`true`&&console.timeEnd(`${a}:${e}`),i.file(`cron`,{db:a,name:t,result:{command:r,rows:o,rowCount:s}})}catch(e){process.env.trace===`true`&&console.error(t,e.toString()),i.file(`cron/error`,{db:a,name:t,error:e.toString()}),i.error(e)}}}async function a(){let{config:a,redis:o,logger:s}=e();a.cronList?.length&&a.cronList?.filter?.(e=>e.query&&!e.disabled)?.forEach?.((e,a)=>{let{interval:c,db:l,query:u}=e,d=r(`md5`).update(`${process.env.PORT||3e3}:${l}:${u}`).digest(`hex`),f=t(l);process.env.trace===`true`&&console.log(`cron-list: init`,l,a);let[p,m]=n[typeof c](c);if(m<1e3){process.env.trace===`true`&&console.error(`cron-list: skip too small interval`,l,a),s.file(`cron`,{name:d,error:`interval ${c} too small`});return}setTimeout(()=>{i({query:u,name:d},{pg:f,redis:o,logger:s}),setInterval(()=>{i({query:u,name:d},{pg:f,redis:o,logger:s})},m)},p)})}export{a as default};
+//# sourceMappingURL=index.js.map

package/dist/plugins/cron/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/plugins/cron/index.ts"],"sourcesContent":["/* eslint-disable no-console */\r\nimport { createHash } from \"node:crypto\";\r\n\r\nimport createPg from \"../pg/funcs/createPg.js\";\r\nimport interval2ms from \"./funcs/interval2ms.js\";\r\n\r\nimport { CoreContext, GetContext } from \"../../core.js\";\r\n\r\ninterface ICron {\r\n  interval: string | number;\r\n  db?: any;\r\n  query: string;\r\n  disabled?: boolean;\r\n}\r\n\r\nasync function runCron(\r\n  { query, name }: { query: string; name: string },\r\n  { pg, redis, logger }: CoreContext\r\n) {\r\n  const db = pg?.options?.database;\r\n\r\n  // verifyUnique\r\n  const key = `cron:unique:${name}`;\r\n  const unique = redis ? await redis.setnx(key, 1) : null;\r\n  const ttl = redis ? await redis.ttl(key) : -1;\r\n\r\n  if (!unique && ttl !== -1) {\r\n    // if (config.trace) console.log(name, db, query, 'skip unique');\r\n    return;\r\n  }\r\n\r\n  if (redis) {\r\n    await redis.expire(key, 20);\r\n  }\r\n\r\n  try {\r\n    if (!pg?.pk && pg) {\r\n      await pg.init();\r\n    }\r\n\r\n    if (process.env.trace === \"true\") console.time(`${db}:${query}`);\r\n    const {\r\n      command,\r\n      rows = [],\r\n      rowCount,\r\n    }: any = pg?.pk ? await pg.query(query) : {};\r\n    if (process.env.trace === \"true\") console.timeEnd(`${db}:${query}`);\r\n\r\n    logger.file(\"cron\", { db, name, result: { command, rows, rowCount } });\r\n  } catch (err: any) {\r\n    if (process.env.trace === \"true\") console.error(name, err.toString());\r\n    logger.file(\"cron/error\", { db, name, error: err.toString() });\r\n    logger.error(err);\r\n  }\r\n}\r\n\r\nasync function plugin() {\r\n  const { config, redis, logger } = GetContext();\r\n\r\n  if (config.cronList?.length) {\r\n    config.cronList\r\n      ?.filter?.((el: ICron) => el.query && !el.disabled)\r\n      ?.forEach?.((el: ICron, idx: number) => {\r\n        const { interval, db, query } = el;\r\n        const name = createHash(\"md5\")\r\n          .update(`${process.env.PORT || 3000}:${db}:${query}`)\r\n          .digest(\"hex\");\r\n        const pg = createPg(db);\r\n\r\n        if (process.env.trace === \"true\")\r\n          console.log(\"cron-list: init\", db, idx);\r\n\r\n        const [waitMs, intervalMs] = interval2ms[typeof interval](interval);\r\n\r\n        if (intervalMs < 1000) {\r\n          if (process.env.trace === \"true\")\r\n            console.error(\"cron-list: skip too small interval\", db, idx);\r\n          logger.file(\"cron\", {\r\n            name,\r\n            error: `interval ${interval} too small`,\r\n          });\r\n          return;\r\n        }\r\n\r\n        // setTimeout to w8 for the time to start\r\n        setTimeout(() => {\r\n          runCron({ query, name }, { pg, redis, logger });\r\n          // interval\r\n          setInterval(() => {\r\n            runCron({ query, name }, { pg, redis, logger });\r\n          }, intervalMs);\r\n        }, waitMs);\r\n      });\r\n  }\r\n}\r\nexport default plugin;\r\n"],"mappings":"iKAeA,eAAe,EACb,CAAE,QAAO,QACT,CAAE,KAAI,QAAO,UACb,CACA,IAAM,EAAK,GAAI,SAAS,SAGlB,EAAM,eAAe,IACrB,EAAS,EAAQ,MAAM,EAAM,MAAM,EAAK,CAAC,EAAI,KAC7C,EAAM,EAAQ,MAAM,EAAM,IAAI,CAAG,EAAI,GAEvC,MAAC,GAAU,IAAQ,IAKvB,CAAI,GACF,MAAM,EAAM,OAAO,EAAK,EAAE,EAG5B,GAAI,CACE,CAAC,GAAI,IAAM,GACb,MAAM,EAAG,KAAK,EAGZ,QAAQ,IAAI,QAAU,QAAQ,QAAQ,KAAK,GAAG,EAAG,GAAG,GAAO,EAC/D,GAAM,CACJ,UACA,OAAO,CAAC,EACR,YACO,GAAI,GAAK,MAAM,EAAG,MAAM,CAAK,EAAI,CAAC,EACvC,QAAQ,IAAI,QAAU,QAAQ,QAAQ,QAAQ,GAAG,EAAG,GAAG,GAAO,EAElE,EAAO,KAAK,OAAQ,CAAE,KAAI,OAAM,OAAQ,CAAE,UAAS,OAAM,UAAS,CAAE,CAAC,CACvE,OAAS,EAAU,CACb,QAAQ,IAAI,QAAU,QAAQ,QAAQ,MAAM,EAAM,EAAI,SAAS,CAAC,EACpE,EAAO,KAAK,aAAc,CAAE,KAAI,OAAM,MAAO,EAAI,SAAS,CAAE,CAAC,EAC7D,EAAO,MAAM,CAAG,CAClB,CArB4B,CAsB9B,CAEA,eAAe,GAAS,CACtB,GAAM,CAAE,SAAQ,QAAO,UAAW,EAAW,EAEzC,EAAO,UAAU,QACnB,EAAO,UACH,SAAU,GAAc,EAAG,OAAS,CAAC,EAAG,QAAQ,GAChD,WAAW,EAAW,IAAgB,CACtC,GAAM,CAAE,WAAU,KAAI,SAAU,EAC1B,EAAO,EAAW,KAAK,EAC1B,OAAO,GAAG,QAAQ,IAAI,MAAQ,IAAK,GAAG,EAAG,GAAG,GAAO,EACnD,OAAO,KAAK,EACT,EAAK,EAAS,CAAE,EAElB,QAAQ,IAAI,QAAU,QACxB,QAAQ,IAAI,kBAAmB,EAAI,CAAG,EAExC,GAAM,CAAC,EAAQ,GAAc,EAAY,OAAO,GAAU,CAAQ,EAElE,GAAI,EAAa,IAAM,CACjB,QAAQ,IAAI,QAAU,QACxB,QAAQ,MAAM,qCAAsC,EAAI,CAAG,EAC7D,EAAO,KAAK,OAAQ,CAClB,OACA,MAAO,YAAY,EAAS,WAC9B,CAAC,EACD,MACF,CAGA,eAAiB,CACf,EAAQ,CAAE,QAAO,MAAK,EAAG,CAAE,KAAI,QAAO,QAAO,CAAC,EAE9C,gBAAkB,CAChB,EAAQ,CAAE,QAAO,MAAK,EAAG,CAAE,KAAI,QAAO,QAAO,CAAC,CAChD,EAAG,CAAU,CACf,EAAG,CAAM,CACX,CAAC,CAEP"}

package/dist/plugins/crud/funcs/dataDelete.d.ts

@@ -0,0 +1,15 @@
+import { CoreContext } from "../../../core.js";
+//#region src/plugins/crud/funcs/dataDelete.d.ts
+declare function dataDelete({ resource, table: table1, tokenData, referer, id, uid, query, args }: {
+  resource?: string;
+  table: string;
+  tokenData?: Record<string, any>;
+  referer?: string;
+  id: string | number;
+  uid: string | number;
+  query?: string;
+  args?: any[];
+}, { pg, redis, logger }?: CoreContext): Promise<any>;
+//#endregion
+export { dataDelete };
+//# sourceMappingURL=dataDelete.d.ts.map

package/dist/plugins/crud/funcs/dataDelete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataDelete.d.ts","names":[],"sources":["../../../../src/plugins/crud/funcs/dataDelete.ts"],"mappings":";;iBAO8B,aAE1B,UACA,OAAO,QACP,WACA,SACA,IACA,KACA,OACA;EAEA;EACA;EACA,YAAY;EACZ;EACA;EACA;EACA;EACA;KAEA,IAAI,OAAO,WAAU,cAAgB"}

package/dist/plugins/crud/funcs/dataDelete.js

@@ -0,0 +1,2 @@
+import e from"../../pg/pgClients.js";import t from"../../pg/funcs/getMeta.js";import n from"./utils/logChanges.js";import r from"../../extra/extraData.js";async function i({resource:i,table:a,tokenData:o,referer:s,id:c,uid:l,query:u,args:d},{pg:f,redis:p,logger:m}={}){if(!i)throw Error(`not enough params: resource`);if(!f)throw Error(`empty pg`);let{pk:h}=await t({table:a},{pg:f})||{};f&&!f?.pk&&f.connectionParameters&&(f.options=f.connectionParameters,f.tlist=e[f.options?.database||`client`]?.tlist,f.pgType=e[f.options?.database||`client`]?.pgType,f.relkinds=e[f.options?.database||`client`]?.relkinds,f.pk=e[f.options?.database||`client`]?.pk);let g=f.pk?.[a]?a:a.replace(/"/g,``);if(!g||!h)return null;let _=`delete from ${g} WHERE ${h}::text = $1::text and ${u||`true`} returning *`,v=typeof f.query==`function`&&typeof f.release==`function`,y=v?f:await f.connect();(v||!y.pk)&&(y.options=f.options,y.tlist=f.tlist,y.pgType=f.pgType,y.relkinds=f.relkinds,y.pk=f.pk);try{v||await y.query(`begin;`);let e={};await r({table:g,form:o?.form,id:c,uid:l,row:e},y);let t=await y.query(_,[c].concat(d||[])).then(e=>e.rows?.[0]?{rowCount:1,...e.rows[0]}:{});return await n({resource:i,tokenData:o,id:c.toString(),uid:l?.toString(),type:`DELETE`},{pg:y}),p&&p.incr(`pg:${y.options?.database}:${g}:crud`),v||await y.query(`commit;`),{...t,...e}}catch(e){throw m.file(`crud/delete`,{error:e.toString(),stack:e.stack,table:g,id:c,referer:s,uid:l,form:o?.form}),v||await y.query(`rollback;`),e}finally{v||y?.release?.()}}export{i as default};
+//# sourceMappingURL=dataDelete.js.map

package/dist/plugins/crud/funcs/dataDelete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataDelete.js","names":[],"sources":["../../../../src/plugins/crud/funcs/dataDelete.ts"],"sourcesContent":["import getMeta from \"../../pg/funcs/getMeta.js\";\r\nimport pgClients from \"../../pg/pgClients.js\";\r\n\r\nimport extraData from \"../../extra/extraData.js\";\r\nimport logChanges from \"./utils/logChanges.js\";\r\nimport { CoreContext } from \"../../../core.js\";\r\n\r\nexport default async function dataDelete(\r\n  {\r\n    resource,\r\n    table: table1,\r\n    tokenData,\r\n    referer,\r\n    id,\r\n    uid,\r\n    query,\r\n    args,\r\n  }: {\r\n    resource?: string;\r\n    table: string;\r\n    tokenData?: Record<string, any>;\r\n    referer?: string;\r\n    id: string | number;\r\n    uid: string | number;\r\n    query?: string;\r\n    args?: any[];\r\n  },\r\n  { pg, redis, logger }: CoreContext = {}\r\n) {\r\n  if (!resource) {\r\n    throw new Error(\"not enough params: resource\");\r\n  }\r\n\r\n  if (!pg) {\r\n    throw new Error(\"empty pg\");\r\n  }\r\n\r\n  const { pk } = (await getMeta({ table: table1 }, { pg })) || {};\r\n\r\n  // pg client single transaction support\r\n  if (pg && !pg?.pk && pg.connectionParameters) {\r\n    pg.options = pg.connectionParameters;\r\n    pg.tlist = pgClients[pg.options?.database || \"client\"]?.tlist;\r\n    pg.pgType = pgClients[pg.options?.database || \"client\"]?.pgType;\r\n    pg.relkinds = pgClients[pg.options?.database || \"client\"]?.relkinds;\r\n    pg.pk = pgClients[pg.options?.database || \"client\"]?.pk;\r\n  }\r\n\r\n  const table = pg.pk?.[table1] ? table1 : table1.replace(/\"/g, \"\");\r\n\r\n  if (!table || !pk) return null;\r\n\r\n  const delQuery = `delete from ${table} WHERE ${pk}::text = $1::text and ${\r\n    query || \"true\"\r\n  } returning *`;\r\n\r\n  // for transactions\r\n  const isClient =\r\n    typeof pg.query === \"function\" && typeof pg.release === \"function\";\r\n  const client = isClient ? pg : await pg.connect();\r\n\r\n  if (isClient || !client.pk) {\r\n    client.options = pg.options;\r\n    client.tlist = pg.tlist;\r\n    client.pgType = pg.pgType;\r\n    client.relkinds = pg.relkinds;\r\n    client.pk = pg.pk;\r\n  }\r\n\r\n  try {\r\n    if (!isClient) {\r\n      await client.query(\"begin;\");\r\n    }\r\n\r\n    const row = {};\r\n    await extraData(\r\n      {\r\n        table,\r\n        form: tokenData?.form,\r\n        id,\r\n        uid,\r\n        row,\r\n      },\r\n      client\r\n    );\r\n\r\n    const res = await client\r\n      .query(delQuery, [id].concat(args || []))\r\n      .then((r: any) => (r.rows?.[0] ? { rowCount: 1, ...r.rows[0] } : {}));\r\n\r\n    await logChanges(\r\n      {\r\n        resource,\r\n        tokenData,\r\n        id: id.toString(),\r\n        uid: uid?.toString(),\r\n        type: \"DELETE\",\r\n      },\r\n      {\r\n        pg: client,\r\n      }\r\n    );\r\n\r\n    if (redis) {\r\n      redis.incr(`pg:${client.options?.database}:${table}:crud`);\r\n    }\r\n\r\n    if (!isClient) {\r\n      await client.query(\"commit;\");\r\n    }\r\n\r\n    return { ...res, ...row };\r\n  } catch (err: any) {\r\n    logger.file(\"crud/delete\", {\r\n      error: err.toString(),\r\n      stack: err.stack,\r\n      table,\r\n      id,\r\n      referer,\r\n      uid,\r\n      form: tokenData?.form,\r\n    });\r\n    if (!isClient) {\r\n      await client.query(\"rollback;\");\r\n    }\r\n    throw err;\r\n  } finally {\r\n    if (!isClient) {\r\n      client?.release?.();\r\n    }\r\n  }\r\n}\r\n"],"mappings":"2JAOA,eAA8B,EAC5B,CACE,WACA,MAAO,EACP,YACA,UACA,KACA,MACA,QACA,QAWF,CAAE,KAAI,QAAO,UAAwB,CAAC,EACtC,CACA,GAAI,CAAC,EACH,MAAU,MAAM,6BAA6B,EAG/C,GAAI,CAAC,EACH,MAAU,MAAM,UAAU,EAG5B,GAAM,CAAE,MAAQ,MAAM,EAAQ,CAAE,MAAO,CAAO,EAAG,CAAE,IAAG,CAAC,GAAM,CAAC,EAG1D,GAAM,CAAC,GAAI,IAAM,EAAG,uBACtB,EAAG,QAAU,EAAG,qBAChB,EAAG,MAAQ,EAAU,EAAG,SAAS,UAAY,WAAW,MACxD,EAAG,OAAS,EAAU,EAAG,SAAS,UAAY,WAAW,OACzD,EAAG,SAAW,EAAU,EAAG,SAAS,UAAY,WAAW,SAC3D,EAAG,GAAK,EAAU,EAAG,SAAS,UAAY,WAAW,IAGvD,IAAM,EAAQ,EAAG,KAAK,GAAU,EAAS,EAAO,QAAQ,KAAM,EAAE,EAEhE,GAAI,CAAC,GAAS,CAAC,EAAI,OAAO,KAE1B,IAAM,EAAW,eAAe,EAAM,SAAS,EAAG,wBAChD,GAAS,OACV,cAGK,EACJ,OAAO,EAAG,OAAU,YAAc,OAAO,EAAG,SAAY,WACpD,EAAS,EAAW,EAAK,MAAM,EAAG,QAAQ,GAE5C,GAAY,CAAC,EAAO,MACtB,EAAO,QAAU,EAAG,QACpB,EAAO,MAAQ,EAAG,MAClB,EAAO,OAAS,EAAG,OACnB,EAAO,SAAW,EAAG,SACrB,EAAO,GAAK,EAAG,IAGjB,GAAI,CACG,GACH,MAAM,EAAO,MAAM,QAAQ,EAG7B,IAAM,EAAM,CAAC,EACb,MAAM,EACJ,CACE,QACA,KAAM,GAAW,KACjB,KACA,MACA,KACF,EACA,CACF,EAEA,IAAM,EAAM,MAAM,EACf,MAAM,EAAU,CAAC,CAAE,EAAE,OAAO,GAAQ,CAAC,CAAC,CAAC,EACvC,KAAM,GAAY,EAAE,OAAO,GAAK,CAAE,SAAU,EAAG,GAAG,EAAE,KAAK,EAAG,EAAI,CAAC,CAAE,EAuBtE,OArBA,MAAM,EACJ,CACE,WACA,YACA,GAAI,EAAG,SAAS,EAChB,IAAK,GAAK,SAAS,EACnB,KAAM,QACR,EACA,CACE,GAAI,CACN,CACF,EAEI,GACF,EAAM,KAAK,MAAM,EAAO,SAAS,SAAS,GAAG,EAAM,MAAM,EAGtD,GACH,MAAM,EAAO,MAAM,SAAS,EAGvB,CAAE,GAAG,EAAK,GAAG,CAAI,CAC1B,OAAS,EAAU,CAajB,MAZA,EAAO,KAAK,cAAe,CACzB,MAAO,EAAI,SAAS,EACpB,MAAO,EAAI,MACX,QACA,KACA,UACA,MACA,KAAM,GAAW,IACnB,CAAC,EACI,GACH,MAAM,EAAO,MAAM,WAAW,EAE1B,CACR,QAAU,CACH,GACH,GAAQ,UAAU,CAEtB,CACF"}

package/dist/plugins/crud/funcs/dataInsert.d.ts

@@ -0,0 +1,14 @@
+import { CoreContext } from "../../../core.js";
+//#region src/plugins/crud/funcs/dataInsert.d.ts
+declare function dataInsert({ resource, id, table: table1, referer, data, uid, log }: {
+  resource?: string;
+  id?: string | number;
+  table: string;
+  referer?: string;
+  data: Record<string, any>;
+  uid?: string;
+  log?: Boolean;
+}, ctx?: CoreContext): Promise<any>;
+//#endregion
+export { dataInsert };
+//# sourceMappingURL=dataInsert.d.ts.map

package/dist/plugins/crud/funcs/dataInsert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataInsert.d.ts","names":[],"sources":["../../../../src/plugins/crud/funcs/dataInsert.ts"],"mappings":";;iBAW8B,aAE1B,UACA,IACA,OAAO,QACP,SACA,MACA,KACA;EAEA;EACA;EACA;EACA;EACA,MAAM;EACN;EACA,MAAM;GAER,MAAK,cAA0B"}

package/dist/plugins/crud/funcs/dataInsert.js

@@ -0,0 +1,2 @@
+import{GetContext as e}from"../../../core.js";import t from"../../pg/pgClients.js";import n from"../../pg/funcs/getMeta.js";import r from"./utils/logChanges.js";import i from"./utils/getInsertQuery.js";import a from"../../extra/extraData.js";async function o({resource:o,id:s,table:c,referer:l,data:u,uid:d,log:f=!0},p=e()){if(!o)throw Error(`not enough params: resource`);let{pg:m,logger:h,redis:g}=p;if(!m)throw Error(`empty pg`);let{pk:_}=await n({table:c},{pg:m})||{};m&&!m?.pk&&m.connectionParameters&&(m.options=m.connectionParameters,m.tlist=t[m.options?.database||`client`]?.tlist,m.pgType=t[m.options?.database||`client`]?.pgType,m.relkinds=t[m.options?.database||`client`]?.relkinds,m.pk=t[m.options?.database||`client`]?.pk);let v=m.pk?.[c]?c:c.replace(/"/g,``),{insertQuery:y,args:b=[]}=await i({table:v,data:u,id:s,uid:d},p)||{};if(!y||!b.length)return null;let x=typeof m.query==`function`&&typeof m.release==`function`,S=x?m:await m.connect();(x||!S.pk)&&(S.options=m.options,S.tlist=m.tlist,S.pgType=m.pgType,S.relkinds=m.relkinds,S.pk=m.pk);try{x||await S.query(`begin;`);let e=await S.query(y,b).then(e=>e||{}),t=e.rows?.[0]?.[_];if(!t)return null;await a({table:v,id:t,data:u,uid:d,row:e.rows[0]},{pg:S});let n={},s=Object.keys(n||{})?.filter(e=>u[e]?.length&&Array.isArray(u[e])&&n?.[e]?.table&&n?.[e]?.parent_id);return s?.length&&await Promise.all(s?.map(async r=>{let a=n[r].parent_id,o=u[a]||u?.id||e?.rows?.[0]?.[a]||t,s=await Promise.all(u[r].map(async e=>{Object.assign(e,{[a]:o});let t=await i({table:n[r].table,data:e,uid:d},{pg:S});return!t?.insertQuery||!t?.args?.length?null:(await S.query(t.insertQuery,t.args).then(e=>e.rows||[]))[0]}));Object.assign(e.rows[0],{[r]:s.filter(Boolean)})})),f&&await r({resource:o,data:u,id:t,uid:d,type:`INSERT`},{pg:S}),g&&g?.status!==`end`&&g.incr(`pg:${S.options?.database}:${v}:crud`),x||await S.query(`commit;`),{rowCount:e.rowCount,command:e.command,...e.rows[0],id:t,data:e.rows[0],rows:e.rows}}catch(e){throw h.file(`crud/insert`,{error:e.toString(),stack:e.stack,table:v,id:s,referer:l,uid:d}),x||await S.query(`rollback;`),e}finally{x||S?.release?.()}}export{o as default};
+//# sourceMappingURL=dataInsert.js.map