@opengis/fcore 0.0.1-beta.2 → 0.0.1-beta.21

package/dist/plugins/resource/utils/sql.js

@@ -1 +1 @@
-const _0x24f37e=_0x24b7;(function(_0x3e2eb4,_0x19d75f){const _0x4cc894=_0x24b7,_0x1ce041=_0x3e2eb4();while(!![]){try{const _0x491c0a=parseInt(_0x4cc894(0x9e))/0x1*(parseInt(_0x4cc894(0x9c))/0x2)+parseInt(_0x4cc894(0x7c))/0x3+-parseInt(_0x4cc894(0x9d))/0x4+-parseInt(_0x4cc894(0x85))/0x5+-parseInt(_0x4cc894(0x88))/0x6*(-parseInt(_0x4cc894(0x75))/0x7)+parseInt(_0x4cc894(0x9b))/0x8*(-parseInt(_0x4cc894(0x80))/0x9)+parseInt(_0x4cc894(0x83))/0xa;if(_0x491c0a===_0x19d75f)break;else _0x1ce041['push'](_0x1ce041['shift']());}catch(_0x38a5bf){_0x1ce041['push'](_0x1ce041['shift']());}}}(_0xf91d,0x9e65a));import{ValidationError}from'../../../errors.js';function _0x24b7(_0x542d31,_0x1c32e1){_0x542d31=_0x542d31-0x75;const _0xf91d0d=_0xf91d();let _0x24b767=_0xf91d0d[_0x542d31];return _0x24b767;}export const quoteIdentifier=_0x3f0244=>'\x22'+_0x3f0244[_0x24f37e(0x92)](/"/g,'\x22\x22')+'\x22';export const quoteTable=_0x4f7474=>_0x4f7474[_0x24f37e(0x77)]('.')[_0x24f37e(0x89)](quoteIdentifier)[_0x24f37e(0xa0)]('.');export function fieldColumn(_0x191889,_0x130db2){const _0x36af74=_0x24f37e,_0x2b6f1a={};_0x2b6f1a[_0x36af74(0x87)]=function(_0x4402e6,_0x281ff7){return _0x4402e6===_0x281ff7;},_0x2b6f1a[_0x36af74(0x7d)]=function(_0x3692e6,_0x2ad71e){return _0x3692e6!==_0x2ad71e;},_0x2b6f1a[_0x36af74(0x8f)]=_0x36af74(0x8d),_0x2b6f1a[_0x36af74(0x91)]=function(_0x5090bf,_0x41bc4c){return _0x5090bf!==_0x41bc4c;},_0x2b6f1a[_0x36af74(0x94)]=_0x36af74(0x8a);const _0x1e0306=_0x2b6f1a;if(_0x1e0306[_0x36af74(0x87)](_0x130db2,_0x191889[_0x36af74(0x78)])){if(_0x1e0306[_0x36af74(0x7d)](_0x1e0306[_0x36af74(0x8f)],_0x1e0306[_0x36af74(0x8f)])){const _0x2dcc94=[];for(const [_0x16626f,_0x25ee96]of _0x408edc[_0x36af74(0x96)](_0x2f0bd0)){const _0x28f20e=_0x262736[_0x36af74(0x90)][_0x16626f];if(!_0x28f20e||_0x28f20e[_0x36af74(0x7b)]===![]||_0x1e0306[_0x36af74(0x87)](_0x28f20e[_0x36af74(0x84)],![]))throw new _0x4f6ec8(_0x36af74(0x97)+_0x16626f);_0x2dcc94[_0x36af74(0x7f)]([_0x28f20e[_0x36af74(0x8b)]??_0x16626f,_0x25ee96]);}return _0x2dcc94;}else return _0x191889[_0x36af74(0x78)];}const _0x4457d2=_0x191889[_0x36af74(0x90)][_0x130db2];if(!_0x4457d2){if(_0x1e0306[_0x36af74(0x91)](_0x1e0306[_0x36af74(0x94)],_0x36af74(0x8a)))throw new _0x41e147(_0x36af74(0x93)+_0x15ccf6);else throw new ValidationError(_0x36af74(0x93)+_0x130db2);}return _0x4457d2[_0x36af74(0x8b)]??_0x130db2;}function _0xf91d(){const _0x56a962=['504hrLxhs','map','JLhcI','column','XiftU','fanWe','read','tOvOE','fields','KngqN','replace','Unknown\x20field:\x20','DRAPz','EwZqQ','entries','Field\x20is\x20not\x20writable:\x20','dRBgj','LWdfx','unshift','16zTHfmK','12JAZRiF','2309248MRNtzt','2653TVPNTL','readable','join','83363RXntiT','TKMQW','split','key','filter','HiLdQ','write','3870198IWSHKZ','HzNOj','msMVq','push','2463732xXpPJg','\x20AS\x20','SKoFj','3496610MTBQYp','writable','4411995UhIojv','PJxEE','fbeXK'];_0xf91d=function(){return _0x56a962;};return _0xf91d();}export function readableFields(_0x307a33){const _0x47300f=_0x24f37e,_0x5ead5a={'PJxEE':function(_0x2cdfcc,_0x43a84e){return _0x2cdfcc(_0x43a84e);}},_0x30e664=Object[_0x47300f(0x96)](_0x307a33[_0x47300f(0x90)])[_0x47300f(0x79)](([,_0x8ed2f4])=>_0x8ed2f4[_0x47300f(0x8e)]!==![]&&_0x8ed2f4[_0x47300f(0x9f)]!==![])[_0x47300f(0x89)](([_0x24c8e8,_0x411135])=>quoteIdentifier(_0x411135[_0x47300f(0x8b)]??_0x24c8e8)+_0x47300f(0x81)+quoteIdentifier(_0x24c8e8));return!_0x307a33[_0x47300f(0x90)][_0x307a33[_0x47300f(0x78)]]&&_0x30e664[_0x47300f(0x9a)](_0x5ead5a[_0x47300f(0x86)](quoteIdentifier,_0x307a33[_0x47300f(0x78)])),_0x30e664;}export function writableData(_0x419b7c,_0x1e824f){const _0x4495e2=_0x24f37e,_0xfe53f6={};_0xfe53f6[_0x4495e2(0x98)]=_0x4495e2(0x8c),_0xfe53f6[_0x4495e2(0x82)]=function(_0x4715fa,_0x710583){return _0x4715fa===_0x710583;},_0xfe53f6[_0x4495e2(0x99)]=function(_0x58a0d5,_0xe23781){return _0x58a0d5!==_0xe23781;},_0xfe53f6[_0x4495e2(0x76)]=_0x4495e2(0x7a),_0xfe53f6[_0x4495e2(0x7e)]=_0x4495e2(0x95);const _0x10f55a=_0xfe53f6,_0x3262a1=[];for(const [_0x3be011,_0x2c2f6a]of Object[_0x4495e2(0x96)](_0x1e824f)){if(_0x10f55a[_0x4495e2(0x98)]!==_0x4495e2(0x8c))return _0x36a2f3[_0x4495e2(0x78)];else{const _0x1db8a1=_0x419b7c[_0x4495e2(0x90)][_0x3be011];if(!_0x1db8a1||_0x1db8a1[_0x4495e2(0x7b)]===![]||_0x10f55a[_0x4495e2(0x82)](_0x1db8a1[_0x4495e2(0x84)],![])){if(_0x10f55a[_0x4495e2(0x99)](_0x10f55a[_0x4495e2(0x76)],_0x10f55a[_0x4495e2(0x7e)]))throw new ValidationError(_0x4495e2(0x97)+_0x3be011);else throw new _0x289c01(_0x4495e2(0x97)+_0x2218eb);}_0x3262a1[_0x4495e2(0x7f)]([_0x1db8a1[_0x4495e2(0x8b)]??_0x3be011,_0x2c2f6a]);}}return _0x3262a1;}export const qi=quoteIdentifier;export const qt=quoteTable;
+function r(n,k){n=n-0xee;const Z=g();let K=Z[n];return K;}import{ValidationError}from'../../../errors.js';export const quoteIdentifier=n=>'\x22'+n['replace'](/"/g,'\x22\x22')+'\x22';export const quoteTable=n=>n['split']('.')['map'](quoteIdentifier)['join']('.');export function fieldColumn(n,k){const B=r;if(k===n['key'])return n[B(0xee)];const Z=n['fields'][k];if(!Z)throw new ValidationError(B(0xef)+k);return Z['column']??k;}function g(){const R=['key','Unknown\x20field:\x20','entries','read','all','map','column','\x20AS\x20','unshift','write','date','push'];g=function(){return R;};return g();}export function readableFields(n,k){const l=r,Z=Object[l(0xf0)](n['fields'])['filter'](([,K])=>K[l(0xf1)]!==![]&&K['readable']!==![]&&(k?(K['scope']??l(0xf2))===k:!![]))[l(0xf3)](([K,d])=>quoteIdentifier(d[l(0xf4)]??K)+l(0xf5)+quoteIdentifier(K));return!n['fields'][n['key']]&&Z[l(0xf6)](quoteIdentifier(n['key'])),Z;}export function writableData(n,k){const f=r,Z=[];for(const [K,d]of Object['entries'](k)){const J=n['fields'][K];if(!J||J[f(0xf7)]===![]||J['writable']===![])throw new ValidationError('Field\x20is\x20not\x20writable:\x20'+K);if((J['write']??J['writable'])!==!![])continue;if(J['type']===f(0xf8)&&!k[K])continue;Z[f(0xf9)]([J[f(0xf4)]??K,d]);}return Z;}export const qi=quoteIdentifier;export const qt=quoteTable;

package/dist/shared/getIP.js

@@ -1 +1 @@
-const _0x3e856a=_0x34b9;function _0x34b9(_0x5d1275,_0x5ab6bc){_0x5d1275=_0x5d1275-0x122;const _0xdbca20=_0xdbca();let _0x34b9d9=_0xdbca20[_0x5d1275];return _0x34b9d9;}(function(_0xf68e46,_0x55984f){const _0x44adb5=_0x34b9,_0x2d6e21=_0xf68e46();while(!![]){try{const _0x517092=-parseInt(_0x44adb5(0x12d))/0x1+-parseInt(_0x44adb5(0x126))/0x2+parseInt(_0x44adb5(0x122))/0x3+parseInt(_0x44adb5(0x12c))/0x4*(parseInt(_0x44adb5(0x123))/0x5)+parseInt(_0x44adb5(0x129))/0x6*(-parseInt(_0x44adb5(0x132))/0x7)+parseInt(_0x44adb5(0x131))/0x8+parseInt(_0x44adb5(0x12b))/0x9*(-parseInt(_0x44adb5(0x130))/0xa);if(_0x517092===_0x55984f)break;else _0x2d6e21['push'](_0x2d6e21['shift']());}catch(_0x47d873){_0x2d6e21['push'](_0x2d6e21['shift']());}}}(_0xdbca,0x3f305));const getIP=_0x439f1a=>(_0x439f1a[_0x3e856a(0x128)]?.[_0x3e856a(0x124)]||_0x439f1a[_0x3e856a(0x128)]?.[_0x3e856a(0x12a)]||_0x439f1a['ip']||_0x439f1a[_0x3e856a(0x12e)]?.[_0x3e856a(0x125)]||'')[_0x3e856a(0x127)](':')[_0x3e856a(0x12f)]();export default getIP;function _0xdbca(){const _0x4bb4a7=['5qHdoSk','x-real-ip','remoteAddress','196932PjoWAi','split','headers','67692DlFxco','x-forwarded-for','1508652zVpRzQ','1647964cXaHOL','66562UvudAv','connection','pop','20mkbLxn','574264tddOSk','28Vchpjd','961377TXfBrG'];_0xdbca=function(){return _0x4bb4a7;};return _0xdbca();}
+function r(n,k){n=n-0x190;const Z=g();let K=Z[n];return K;}const k=r,getIP=n=>(n['headers']?.['x-real-ip']||n['headers']?.[k(0x190)]||n['ip']||n['connection']?.[k(0x191)]||'')[k(0x192)](':')['pop']();function g(){const Z=['x-forwarded-for','remoteAddress','split'];g=function(){return Z;};return g();}export default getIP;

package/dist/type.d.ts

@@ -19,5 +19,19 @@ type AccessMetadata = {
 };
 /** Повна схема Fastify і метадані маршруту API. */
 export type ApiRouteSchema = FastifySchema & AccessMetadata;
+/** Короткий опис зареєстрованого HTTP API-маршруту. */
+export interface ApiRouteShort {
+    method: string;
+    endpoint: string;
+    package: string;
+}
+/** Розширений опис маршруту з OpenAPI та access metadata. */
+export interface ApiRoute extends ApiRouteShort {
+    tags: string[];
+    summary: string;
+    description: string;
+    access: RouteAccess;
+    permissions: RoutePermission[];
+}
 export {};
 //# sourceMappingURL=type.d.ts.map

package/dist/type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../src/type.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,2CAA2C;AAC3C,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;AACtD,oFAAoF;AACpF,MAAM,MAAM,eAAe,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;AAGpD,KAAK,cAAc,GAAG;IACpB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,MAAM,EAAE,WAAW,CAAC;IACpB,2FAA2F;IAC3F,WAAW,EAAE,eAAe,EAAE,CAAC;CAChC,CAAC;AAEF,mDAAmD;AACnD,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,cAAc,CAAC"}
+{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../src/type.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,2CAA2C;AAC3C,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;AACtD,oFAAoF;AACpF,MAAM,MAAM,eAAe,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;AAGpD,KAAK,cAAc,GAAG;IACpB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,MAAM,EAAE,WAAW,CAAC;IACpB,2FAA2F;IAC3F,WAAW,EAAE,eAAe,EAAE,CAAC;CAChC,CAAC;AAEF,mDAAmD;AACnD,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,cAAc,CAAC;AAE5D,uDAAuD;AACvD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,6DAA6D;AAC7D,MAAM,WAAW,QAAS,SAAQ,aAAa;IAC7C,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,eAAe,EAAE,CAAC;CAChC"}

package/migrations/20260903120000_core_schema.sql

@@ -6,29 +6,29 @@ AS $$
     SELECT encode(gen_random_bytes(6), 'hex')::text
 $$;
 
+DROP SCHEMA IF EXISTS admin CASCADE;
 CREATE SCHEMA IF NOT EXISTS admin;
 
 
 CREATE TABLE IF NOT EXISTS admin.users (
     uid text PRIMARY KEY DEFAULT next_id(),
     login text,
-    password text NOT NULL DEFAULT '',
+    password_hash text,
     first_name text,
     middle_name text,
     last_name text,
     email text,
     phone text,
     avatar text,
+    twofa boolean NOT NULL DEFAULT false,
     enabled boolean DEFAULT true,
     user_personal_code text,
     last_activity_date timestamptz,
-    user_type text NOT NULL DEFAULT 'regular',    
-    salt text,
+    user_type text NOT NULL DEFAULT 'regular',        
     created_by text,
     updated_by text,
     created_at timestamp NOT NULL DEFAULT now(),
-    updated_at timestamp NOT NULL DEFAULT now(),
-    twofa boolean NOT NULL DEFAULT false,
+    updated_at timestamp NOT NULL DEFAULT now(),    
     UNIQUE (user_personal_code)
 );
 
@@ -107,18 +107,19 @@ CREATE TABLE IF NOT EXISTS admin.user_roles (
 
 CREATE TABLE IF NOT EXISTS admin.role_access (
     access_id text PRIMARY KEY DEFAULT next_id(),
-    route_id text NOT NULL,
+    
     role_id text REFERENCES admin.roles(role_id),
-    user_uid text,
+    user_uid text REFERENCES admin.users(uid),
     scope text,
     actions text[],
-    resource_id text,
+    resource text,
 
-    created_by text,
-    updated_by text,
+    created_by text REFERENCES admin.users(uid) ,
+    updated_by text REFERENCES admin.users(uid) ,
     created_at timestamp NOT NULL DEFAULT now(),
     updated_at timestamp NOT NULL DEFAULT now(),
-    UNIQUE (route_id, user_uid, role_id)
+    UNIQUE (resource, user_uid),
+    UNIQUE (resource, role_id)
 );
 
 
@@ -131,8 +132,8 @@ CREATE TABLE IF NOT EXISTS admin.dictionaries (
     source text NOT NULL DEFAULT 'git' CHECK (source IN ('git', 'custom')),
     editable boolean NOT NULL DEFAULT false,
     system boolean NOT NULL DEFAULT false,
-    created_by text,
-    updated_by text,
+    created_by text REFERENCES admin.users(uid) ,
+    updated_by text REFERENCES admin.users(uid) ,
     created_at timestamp NOT NULL DEFAULT now(),
     updated_at timestamp NOT NULL DEFAULT now()
 );
@@ -150,6 +151,8 @@ CREATE TABLE IF NOT EXISTS admin.dictionary_items (
     active boolean NOT NULL DEFAULT true,
     system boolean NOT NULL DEFAULT false,
     metadata jsonb,        
+    created_by text REFERENCES admin.users(uid) ,
+    updated_by text REFERENCES admin.users(uid) ,
     created_at timestamp NOT NULL DEFAULT now(),
     updated_at timestamp NOT NULL DEFAULT now(),
     UNIQUE (dictionary_id, code)
@@ -161,9 +164,9 @@ CREATE TABLE IF NOT EXISTS admin.notes (
     resource text NOT NULL,
     resource_id text NOT NULL,
     body text NOT NULL,
-    created_by text,
+    created_by text REFERENCES admin.users(uid) ,
     created_at timestamptz DEFAULT now(),
-    updated_by text,
+    updated_by text REFERENCES admin.users(uid) ,
     updated_at timestamptz DEFAULT now()
 );
 
@@ -179,14 +182,17 @@ CREATE TABLE IF NOT EXISTS admin.files (
     file_status numeric,    
     file_name text,
     size numeric,
-    ext text,
+    mime_type text,
     tags text[],
-    file_path text,    
+    file_path text,
+    field_name text,
+    status text DEFAULT 'pending', // File processing status, e.g., 'pending', 'attached'
+    expires_at timestamptz DEFAULT now() + interval '1 day',
     verified boolean DEFAULT false,
     resized boolean,
-    created_by text,
+    created_by text REFERENCES admin.users(uid) ,
     created_at timestamptz DEFAULT now(),
-    updated_by text,
+    updated_by text REFERENCES admin.users(uid) ,
     updated_at timestamptz default now()
 );
 
@@ -199,9 +205,9 @@ CREATE TABLE IF NOT EXISTS admin.settings (
     key text NOT NULL,
     value jsonb,
 
-    updated_by text,
+    updated_by text REFERENCES admin.users(uid) ,
     updated_at timestamptz NOT NULL DEFAULT now(),
-    created_by text,
+    created_by text REFERENCES admin.users(uid) ,
     created_at timestamptz NOT NULL DEFAULT now()
 );
 

package/migrations/20260903130000_move_notes_files_to_admin.sql

@@ -1,18 +1,18 @@
-CREATE SCHEMA IF NOT EXISTS admin;
-
-DO $$
-BEGIN
-    IF to_regclass('crm.notes') IS NOT NULL
-       AND to_regclass('admin.notes') IS NULL THEN
-        ALTER TABLE crm.notes SET SCHEMA admin;
-    END IF;
-
-    IF to_regclass('crm.files') IS NOT NULL
-       AND to_regclass('admin.files') IS NULL THEN
-        ALTER TABLE crm.files SET SCHEMA admin;
-    END IF;
-END
-$$;
-
-ALTER INDEX IF EXISTS crm_notes_resource_idx RENAME TO admin_notes_resource_idx;
+CREATE SCHEMA IF NOT EXISTS admin;
+
+DO $$
+BEGIN
+    IF to_regclass('crm.notes') IS NOT NULL
+       AND to_regclass('admin.notes') IS NULL THEN
+        ALTER TABLE crm.notes SET SCHEMA admin;
+    END IF;
+
+    IF to_regclass('crm.files') IS NOT NULL
+       AND to_regclass('admin.files') IS NULL THEN
+        ALTER TABLE crm.files SET SCHEMA admin;
+    END IF;
+END
+$$;
+
+ALTER INDEX IF EXISTS crm_notes_resource_idx RENAME TO admin_notes_resource_idx;
 ALTER INDEX IF EXISTS crm_notes_uid_idx RENAME TO admin_notes_uid_idx;

package/migrations/20260903130001_add_file_fields.sql

@@ -0,0 +1,5 @@
+
+alter table admin.files add column if not exists mime_type text;
+alter table admin.files add column if not exists status text default 'pending';
+alter table admin.files add column if not exists expires_at timestamptz default now() + interval '1 day';
+alter table admin.files add column if not exists field_name text;

package/migrations/20260903140000_settings_nulls_not_distinct.sql

@@ -1,19 +1,19 @@
-CREATE SCHEMA IF NOT EXISTS admin;
-
-CREATE TABLE IF NOT EXISTS admin.settings (
-    id text PRIMARY KEY DEFAULT next_id(),
-    resource text NOT NULL DEFAULT 'system',
-    resource_id text,
-    key text NOT NULL,
-    value jsonb,
-    updated_by text,
-    updated_at timestamptz NOT NULL DEFAULT now(),
-    created_by text,
-    created_at timestamptz NOT NULL DEFAULT now()
-);
-
-DROP INDEX IF EXISTS settings_resource_key_uidx;
-
-CREATE UNIQUE INDEX settings_resource_key_uidx
-    ON admin.settings (resource, resource_id, key)
+CREATE SCHEMA IF NOT EXISTS admin;
+
+CREATE TABLE IF NOT EXISTS admin.settings (
+    id text PRIMARY KEY DEFAULT next_id(),
+    resource text NOT NULL DEFAULT 'system',
+    resource_id text,
+    key text NOT NULL,
+    value jsonb,
+    updated_by text,
+    updated_at timestamptz NOT NULL DEFAULT now(),
+    created_by text,
+    created_at timestamptz NOT NULL DEFAULT now()
+);
+
+DROP INDEX IF EXISTS settings_resource_key_uidx;
+
+CREATE UNIQUE INDEX settings_resource_key_uidx
+    ON admin.settings (resource, resource_id, key)
     NULLS NOT DISTINCT;

package/migrations/20260905120000_add_user_foreign_keys.sql

@@ -0,0 +1,43 @@
+ALTER TABLE admin.users
+    ADD CONSTRAINT users_created_by_fkey
+        FOREIGN KEY (created_by) REFERENCES admin.users(uid) ON DELETE SET NULL,
+    ADD CONSTRAINT users_updated_by_fkey
+        FOREIGN KEY (updated_by) REFERENCES admin.users(uid) ON DELETE SET NULL;
+
+ALTER TABLE admin.user_roles
+    ADD CONSTRAINT user_roles_created_by_fkey
+        FOREIGN KEY (created_by) REFERENCES admin.users(uid) ON DELETE SET NULL,
+    ADD CONSTRAINT user_roles_updated_by_fkey
+        FOREIGN KEY (updated_by) REFERENCES admin.users(uid) ON DELETE SET NULL;
+
+ALTER TABLE admin.role_access
+    ADD CONSTRAINT role_access_user_uid_fkey
+        FOREIGN KEY (user_uid) REFERENCES admin.users(uid) ON DELETE CASCADE,
+    ADD CONSTRAINT role_access_created_by_fkey
+        FOREIGN KEY (created_by) REFERENCES admin.users(uid) ON DELETE SET NULL,
+    ADD CONSTRAINT role_access_updated_by_fkey
+        FOREIGN KEY (updated_by) REFERENCES admin.users(uid) ON DELETE SET NULL;
+
+ALTER TABLE admin.dictionaries
+    ADD CONSTRAINT dictionaries_created_by_fkey
+        FOREIGN KEY (created_by) REFERENCES admin.users(uid) ON DELETE SET NULL,
+    ADD CONSTRAINT dictionaries_updated_by_fkey
+        FOREIGN KEY (updated_by) REFERENCES admin.users(uid) ON DELETE SET NULL;
+
+ALTER TABLE admin.notes
+    ADD CONSTRAINT notes_created_by_fkey
+        FOREIGN KEY (created_by) REFERENCES admin.users(uid) ON DELETE SET NULL,
+    ADD CONSTRAINT notes_updated_by_fkey
+        FOREIGN KEY (updated_by) REFERENCES admin.users(uid) ON DELETE SET NULL;
+
+ALTER TABLE admin.files
+    ADD CONSTRAINT files_created_by_fkey
+        FOREIGN KEY (created_by) REFERENCES admin.users(uid) ON DELETE SET NULL,
+    ADD CONSTRAINT files_updated_by_fkey
+        FOREIGN KEY (updated_by) REFERENCES admin.users(uid) ON DELETE SET NULL;
+
+ALTER TABLE admin.settings
+    ADD CONSTRAINT settings_created_by_fkey
+        FOREIGN KEY (created_by) REFERENCES admin.users(uid) ON DELETE SET NULL,
+    ADD CONSTRAINT settings_updated_by_fkey
+        FOREIGN KEY (updated_by) REFERENCES admin.users(uid) ON DELETE SET NULL;

package/migrations/20260907090000_core_schema.sql

@@ -0,0 +1,32 @@
+DO $$
+declare
+    _password_column_exists boolean;
+BEGIN
+    IF to_regclass('admin.users') IS NOT NULL then
+
+        select true from pg_attribute where attrelid::regclass::text='admin.users' and attname='password' into _password_column_exists;
+
+        IF _password_column_exists is true then
+            alter table admin.users add column if not exists password_hash text;
+            update admin.users set password_hash = password where password is not null and password_hash is null;
+            alter table admin.users drop column if exists password;
+        END IF;
+
+        alter table admin.users add column if not exists twofa boolean not null default false;
+
+    END IF;
+
+END
+$$;
+
+CREATE OR REPLACE FUNCTION next_id()
+    RETURNS text AS
+$BODY$
+DECLARE
+
+BEGIN
+    return encode(public.gen_random_bytes(6), 'hex');
+END;
+$BODY$
+    LANGUAGE plpgsql VOLATILE
+    COST 100;

package/package.json

@@ -1,88 +1,93 @@
-{
-  "name": "@opengis/fcore",
-  "version": "0.0.1-beta.2",
-  "description": "Reusable backend foundation for OpenGIS Node.js applications",
-  "type": "module",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "files": [
-    "dist",
-    "migrations",
-    "README.md",
-    "LICENSE"
-  ],
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    },
-    "./fastify": {
-      "types": "./dist/fastify.d.ts",
-      "import": "./dist/fastify.js"
-    },
-    "./migrate": {
-      "types": "./dist/migrations/runner.d.ts",
-      "import": "./dist/migrations/runner.js"
-    }
-  },
-  "bin": {
-    "fcore-migrate": "./dist/migrations/cli.js"
-  },
-  "scripts": {
-    "clean": "rm -rf dist",
-    "build": "npm run clean && tsc -p tsconfig.json && node scripts/obfuscate.mjs",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "node --test --import tsx test/**/*.test.ts",
-    "test-env": "node --env-file=.env.test --test --import tsx test/**/env.test.ts",
-    "dev": "tsx server.ts",
-    "migrate": "node ./dist/migrations/cli.js",
-    "migration": "node --import tsx src/migrations/cli.ts",
-    "migration-test": "node --env-file=.env.test --import tsx src/migrations/cli.ts",
-    "prepublishOnly": "npm run build",
-    "prepublishOnly1": "npm run build && npm test",
-    "patch": "npm version patch && git push && npm publish",
-    "minor": "npm version minor && git push && npm publish",
-    "major": "npm version major && git push && npm publish"
-  },
-  "engines": {
-    "node": ">=20"
-  },
-  "dependencies": {
-    "@sinclair/typebox": "^0.34.52",
-    "@aws-sdk/client-s3": "3.1125.0",
-    "@aws-sdk/lib-storage": "3.1125.0",
-    "@fastify/cookie": "11.1.2",
-    "@fastify/multipart": "10.1.1",
-    "@fastify/passport": "4.0.2",
-    "@fastify/rate-limit": "11.2.0",
-    "@fastify/session": "11.1.2",
-    "apache-crypt": "1.2.6",
-    "dotenv": "17.4.2",
-    "fastify-plugin": "6.0.0",
-    "fastify-session-redis-store": "7.1.2",
-    "file-type": "22.0.2",
-    "ioredis": "6.0.0",
-    "otplib": "13.5.0",
-    "pg": "8.23.0",
-    "pino": "10.3.1",
-    "pino-abstract-transport": "3.0.0",
-    "qrcode": "1.5.4",
-    "sharp": "0.35.4"
-  },
-  "peerDependencies": {
-    "fastify": ">=5.12.1"
-  },
-  "devDependencies": {
-    "@types/node": "22.20.1",
-    "@types/passport": "1.0.17",
-    "@types/passport-local": "1.0.38",
-    "@types/pg": "8.23.1",
-    "@types/qrcode": "1.5.6",
-    "fastify": "5.12.1",
-    "javascript-obfuscator": "5.6.0",
-    "tsx": "4.23.13",
-    "typescript": "7.0.2",
-    "vitest": "4.1.11"
-  },
-  "license": "UNLICENSED"
-}
+{
+  "name": "@opengis/fcore",
+  "version": "0.0.1-beta.21",
+  "description": "Reusable backend foundation for OpenGIS Node.js applications",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "migrations",
+    "README.md",
+    "LICENSE"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./fastify": {
+      "types": "./dist/fastify.d.ts",
+      "import": "./dist/fastify.js"
+    },
+    "./migrate": {
+      "types": "./dist/migrations/runner.d.ts",
+      "import": "./dist/migrations/runner.js"
+    }
+  },
+  "bin": {
+    "fcore-migrate": "./dist/migrations/cli.js",
+    "fcore-adduser": "./dist/modules/auth/adduser-cli.js",
+    "fcore-passwd": "./dist/modules/auth/passwd-cli.js",
+    "fcore-permission": "./dist/modules/auth/permission-cli.js"
+  },
+  "scripts": {
+    "clean": "rm -rf dist",
+    "build": "npm run clean && tsc -p tsconfig.json && node scripts/obfuscate.mjs",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "node --test --import tsx test/**/*.test.ts",
+    "test-env": "node --env-file=.env.test --test --import tsx test/**/env.test.ts",
+    "dev": "bun ./server.ts",
+    "adduser": "node --import tsx ./src/modules/auth/adduser-cli.ts",
+    "passwd": "node --import tsx ./src/modules/auth/passwd-cli.ts",
+    "permission": "node --import tsx ./src/modules/auth/permission-cli.ts",
+    "migrate": "node --import tsx src/migrations/cli.ts",
+    "migration-test": "node --env-file=.env.test --import tsx src/migrations/cli.ts",
+    "prepublishOnly": "npm run build",
+    "prepublishOnly1": "npm run build && npm test",
+    "patch": "npm version patch && git push && npm publish",
+    "minor": "npm version minor && git push && npm publish",
+    "major": "npm version major && git push && npm publish"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "@aws-sdk/client-s3": "3.1125.0",
+    "@aws-sdk/lib-storage": "3.1125.0",
+    "@fastify/cookie": "11.1.2",
+    "@fastify/multipart": "10.1.1",
+    "@fastify/passport": "4.0.2",
+    "@fastify/rate-limit": "11.2.0",
+    "@fastify/session": "11.1.2",
+    "@sinclair/typebox": "^0.34.52",
+    "apache-crypt": "1.2.6",
+    "dotenv": "17.4.2",
+    "fastify-session-redis-store": "7.1.2",
+    "file-type": "22.0.2",
+    "ioredis": "6.0.0",
+    "jose": "^6.2.12",
+    "otplib": "13.5.0",
+    "pg": "8.23.0",
+    "pino": "10.3.1",
+    "pino-abstract-transport": "3.0.0",
+    "qrcode": "1.5.4",
+    "sharp": "0.35.4"
+  },
+  "peerDependencies": {
+    "fastify": ">=5.12.1"
+  },
+  "devDependencies": {
+    "@types/node": "22.20.1",
+    "@types/passport": "1.0.17",
+    "@types/passport-local": "1.0.38",
+    "@types/pg": "8.23.1",
+    "@types/qrcode": "1.5.6",
+    "fastify": "5.12.1",
+    "javascript-obfuscator": "5.6.0",
+    "tsx": "4.23.13",
+    "typescript": "7.0.2",
+    "vitest": "4.1.11"
+  },
+  "license": "UNLICENSED"
+}

package/dist/modules/auth/index.d.ts

@@ -1,9 +0,0 @@
-/**
- * Exports the public surface of this FCore module.
- */
-export * from './route.js';
-export * from './services/login.js';
-export * from './services/logout.js';
-export * from './services/get-current-user.js';
-export * from './services/verify-two-factor.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/modules/auth/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/modules/auth/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC"}

package/dist/modules/auth/index.js

@@ -1 +0,0 @@
-(function(_0x5c39f8,_0xd6c04f){var _0x279e1b=_0xb4de,_0x4e7593=_0x5c39f8();while(!![]){try{var _0x29d586=parseInt(_0x279e1b(0x156))/0x1*(parseInt(_0x279e1b(0x154))/0x2)+-parseInt(_0x279e1b(0x158))/0x3*(-parseInt(_0x279e1b(0x15a))/0x4)+parseInt(_0x279e1b(0x152))/0x5*(parseInt(_0x279e1b(0x15b))/0x6)+-parseInt(_0x279e1b(0x15c))/0x7*(-parseInt(_0x279e1b(0x153))/0x8)+parseInt(_0x279e1b(0x157))/0x9+-parseInt(_0x279e1b(0x155))/0xa*(parseInt(_0x279e1b(0x15d))/0xb)+-parseInt(_0x279e1b(0x159))/0xc;if(_0x29d586===_0xd6c04f)break;else _0x4e7593['push'](_0x4e7593['shift']());}catch(_0xd903f6){_0x4e7593['push'](_0x4e7593['shift']());}}}(_0x4a71,0x1b915));function _0xb4de(_0x382be1,_0x40b2a2){_0x382be1=_0x382be1-0x152;var _0x4a717d=_0x4a71();var _0xb4de9d=_0x4a717d[_0x382be1];return _0xb4de9d;}export*from'./route.js';export*from'./services/login.js';export*from'./services/logout.js';function _0x4a71(){var _0x43d77e=['9046HvVucd','1498158jeDUqo','8121KMDZxw','6450408oTlgQX','12mYfyQS','1130838PUeWGt','462CIMWEn','316811caqPbl','5hQPzus','22976xfjgOr','28pUMrbW','10SSBCSt'];_0x4a71=function(){return _0x43d77e;};return _0x4a71();}export*from'./services/get-current-user.js';export*from'./services/verify-two-factor.js';

package/dist/modules/auth/services/login.d.ts

@@ -1,10 +0,0 @@
-import { ContextDependencies } from "../../../context.js";
-export default function login({ ip, login, password }: {
-    ip: string;
-    login: string;
-    password: string;
-}, { config, pg, logger, redis, }: Pick<ContextDependencies, "config" | "pg" | "logger" | "redis">): Promise<{
-    user: any;
-    redirectUrl: string;
-}>;
-//# sourceMappingURL=login.d.ts.map

package/dist/modules/auth/services/login.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../src/modules/auth/services/login.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,wBAA8B,KAAK,CACjC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACxE,EACE,MAAM,EACN,EAAE,EACF,MAAM,EACN,KAAK,GACN,EAAE,IAAI,CAAC,mBAAmB,EAAE,QAAQ,GAAG,IAAI,GAAG,QAAQ,GAAG,OAAO,CAAC;;;GAiCnE"}

package/dist/modules/auth/services/login.js

@@ -1 +0,0 @@
-function _0x3438(_0x41fdb0,_0x424507){_0x41fdb0=_0x41fdb0-0x80;const _0x254c92=_0x254c();let _0x343863=_0x254c92[_0x41fdb0];return _0x343863;}(function(_0x2ffa12,_0x9c3fb3){const _0x22614c=_0x3438,_0x279a51=_0x2ffa12();while(!![]){try{const _0x3436d6=-parseInt(_0x22614c(0x85))/0x1*(-parseInt(_0x22614c(0x96))/0x2)+-parseInt(_0x22614c(0x97))/0x3+-parseInt(_0x22614c(0x94))/0x4*(parseInt(_0x22614c(0x9d))/0x5)+-parseInt(_0x22614c(0x91))/0x6*(-parseInt(_0x22614c(0x9f))/0x7)+-parseInt(_0x22614c(0x8b))/0x8*(parseInt(_0x22614c(0x8c))/0x9)+-parseInt(_0x22614c(0x88))/0xa*(parseInt(_0x22614c(0x8e))/0xb)+parseInt(_0x22614c(0x9b))/0xc;if(_0x3436d6===_0x9c3fb3)break;else _0x279a51['push'](_0x279a51['shift']());}catch(_0x38a20f){_0x279a51['push'](_0x279a51['shift']());}}}(_0x254c,0xedf53));function _0x254c(){const _0x2efe62=['nPYwU','1455bAHWvB','OwxBs','7tRfOCX','yJOub','logger','FXwMK','password','twoFactor','13SGSAaC','base','metrics','3811010DmvSCz','VRbRf','login','7600216IgUOeq','18IznTSl','link','11YcHTCT','user.login','auth','6383298wDTsnT','empty\x20pg','empty\x20user','364hHlmfU','empty\x20redis','234070gCVVen','5225298oOSGEl','SnxrE','twofa','afterLogin','29264868ibVDpd'];_0x254c=function(){return _0x2efe62;};return _0x254c();}import _0xc9e467 from'./verifyPassword.js';export default async function login({ip:_0x4021d5,login:_0xb4931d,password:_0x3c34c2},{config:_0x3b9e3d,pg:_0x4ac7be,logger:_0xa64d9d,redis:_0x2cdba8}){const _0x396696=_0x3438,_0x56396c={'nPYwU':function(_0x3a1ea3,_0x5e584a){return _0x3a1ea3(_0x5e584a);},'SnxrE':_0x396696(0x92),'FXwMK':function(_0x1d2003,_0x5f353d,_0x319df3){return _0x1d2003(_0x5f353d,_0x319df3);},'VRbRf':_0x396696(0x93),'yJOub':_0x396696(0x8f),'OwxBs':function(_0x2ee62f,_0xc728ed){return _0x2ee62f||_0xc728ed;}};if(!_0x4ac7be)throw _0x56396c[_0x396696(0x9c)](Error,_0x56396c[_0x396696(0x98)]);if(!_0x2cdba8)throw _0x56396c[_0x396696(0x9c)](Error,_0x396696(0x95));const _0x3d7e40={};_0x3d7e40[_0x396696(0x8a)]=_0xb4931d,_0x3d7e40[_0x396696(0x83)]=_0x3c34c2,_0x3d7e40['ip']=_0x4021d5;const _0x5798e5={};_0x5798e5['pg']=_0x4ac7be,_0x5798e5[_0x396696(0x81)]=_0xa64d9d;const {user:_0x468c42}=await _0x56396c[_0x396696(0x82)](_0xc9e467,_0x3d7e40,_0x5798e5);if(!_0x468c42)throw new Error(_0x56396c[_0x396696(0x89)]);_0xa64d9d[_0x396696(0x87)](_0x56396c[_0x396696(0x80)]);const _0x35d3dd=_0x468c42[_0x396696(0x99)]?_0x3b9e3d[_0x396696(0x90)][_0x396696(0x8d)]?.[_0x396696(0x84)]?.[_0x396696(0x8a)]:_0x3b9e3d[_0x396696(0x90)][_0x396696(0x8d)]?.[_0x396696(0x86)][_0x396696(0x9a)];return{'user':_0x468c42,'redirectUrl':_0x56396c[_0x396696(0x9e)](_0x35d3dd,'/')};}

package/dist/modules/auth/services/logout.d.ts

@@ -1,9 +0,0 @@
-/**
- * Implements the logout application service for its module.
- */
-import type { AppContext, User } from "../../../context.js";
-export default function logout(params: {
-    sessionId?: string;
-    user?: User;
-}, ctx: AppContext): Promise<void>;
-//# sourceMappingURL=logout.d.ts.map

package/dist/modules/auth/services/logout.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../../../src/modules/auth/services/logout.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAC5D,wBAA8B,MAAM,CAClC,MAAM,EAAE;IACN,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,IAAI,CAAC;CACb,EACD,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,IAAI,CAAC,CAQf"}

package/dist/modules/auth/services/logout.js

@@ -1 +0,0 @@
-function _0x42e0(_0x3f99d4,_0x23a702){_0x3f99d4=_0x3f99d4-0x142;var _0x5241bc=_0x5241();var _0x42e09f=_0x5241bc[_0x3f99d4];return _0x42e09f;}function _0x5241(){var _0x4dde4e=['9dmzJBI','afvgF','6150284xDNfxh','action','25642GFMjcB','audit','fQkQm','sessionId','3414815rSYKMk','723884iYPxXm','userId','resourceId','auth','resource','2659168NhRyIw','198297gcJpQI','6gStagF','module','8698480GBYnDc','session','user','write','logout'];_0x5241=function(){return _0x4dde4e;};return _0x5241();}(function(_0x4b4ccc,_0x2e595c){var _0x53bbb8=_0x42e0,_0x36a1ae=_0x4b4ccc();while(!![]){try{var _0x16cb80=parseInt(_0x53bbb8(0x152))/0x1+-parseInt(_0x53bbb8(0x14d))/0x2*(-parseInt(_0x53bbb8(0x149))/0x3)+-parseInt(_0x53bbb8(0x157))/0x4+-parseInt(_0x53bbb8(0x151))/0x5*(-parseInt(_0x53bbb8(0x142))/0x6)+parseInt(_0x53bbb8(0x14b))/0x7+-parseInt(_0x53bbb8(0x144))/0x8+-parseInt(_0x53bbb8(0x158))/0x9;if(_0x16cb80===_0x2e595c)break;else _0x36a1ae['push'](_0x36a1ae['shift']());}catch(_0x4e1419){_0x36a1ae['push'](_0x36a1ae['shift']());}}}(_0x5241,0x8639b));export default async function logout(_0x1c1dfc,_0x195c3f){var _0x35bd21=_0x42e0,_0x1e63dd={};_0x1e63dd[_0x35bd21(0x14a)]=_0x35bd21(0x155),_0x1e63dd[_0x35bd21(0x14f)]=_0x35bd21(0x145);var _0x172151=_0x1e63dd,_0x1d7a13={};_0x1d7a13[_0x35bd21(0x143)]=_0x172151[_0x35bd21(0x14a)],_0x1d7a13[_0x35bd21(0x156)]=_0x172151[_0x35bd21(0x14f)],_0x1d7a13[_0x35bd21(0x154)]=_0x1c1dfc[_0x35bd21(0x150)],_0x1d7a13[_0x35bd21(0x14c)]=_0x35bd21(0x148),_0x1d7a13[_0x35bd21(0x153)]=_0x1c1dfc[_0x35bd21(0x146)]?.['id'],await _0x195c3f[_0x35bd21(0x14e)]?.[_0x35bd21(0x147)]?.(_0x1d7a13);}

package/dist/modules/auth/services/verifyPassword.d.ts

@@ -1,11 +0,0 @@
-import { ContextDependencies } from "../../../context.js";
-export declare function hashPassword(password: string): string;
-export declare function verifyPasswordWithoutSalt(password: string, stored: string): boolean;
-export default function verifyPassword({ login, password, ip, }: {
-    login: string;
-    password: string;
-    ip: string;
-}, { pg, logger }: Pick<ContextDependencies, "pg" | "logger">): Promise<{
-    user: any;
-}>;
-//# sourceMappingURL=verifyPassword.d.ts.map

package/dist/modules/auth/services/verifyPassword.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"verifyPassword.d.ts","sourceRoot":"","sources":["../../../../src/modules/auth/services/verifyPassword.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAQ,MAAM,qBAAqB,CAAC;AAOhE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIrD;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAST;AAED,wBAA8B,cAAc,CAC1C,EACE,KAAK,EACL,QAAQ,EACR,EAAE,GACH,EAAE;IACD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;CACZ,EACD,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,GAAG,QAAQ,CAAC;;GAmE3D"}