@opengis/fcore 0.0.27 → 0.0.29

package/LICENSE

@@ -1,3 +1,3 @@
-Copyright (c) OpenGIS. All rights reserved.
-
-Proprietary and confidential.
+Copyright (c) OpenGIS. All rights reserved.
+
+Proprietary and confidential.

package/README.md

@@ -1,72 +1,72 @@
-# @opengis/fcore
-
-Reusable backend foundation for OpenGIS Node.js applications: config, typed application context, PostgreSQL, Redis, S3 file storage, audit, trusted Resource CRUD, Core modules, Fastify integration and SQL migration runner.
-
-## Install
-
-```bash
-npm install @opengis/fcore
-```
-
-## Bootstrap
-
-```ts
-import { createFCore } from '@opengis/fcore';
-import resources from './resources/index.js';
-
-export const ctx = await createFCore({ resources });
-```
-
-```ts
-import Fastify from 'fastify';
-import fcoreFastify from '@opengis/fcore/fastify';
-import { ctx } from './app.js';
-
-const app = Fastify();
-await app.register(fcoreFastify, { ctx });
-await app.listen({ port: ctx.config.port });
-```
-
-## Resource
-
-All dynamic table/column identifiers come from registered `ResourceContract` metadata. Values are SQL parameters.
-
-## Migrations
-
-Project SQL files stay in `./migrations`. Build the package/application, then run `fcore-migrate` or import `runMigrations()`.
-
-## Module service convention
-
-Module services are plain async functions with the canonical `service(params, ctx)` signature. `ctx` is passed explicitly from `fastify.ts` to each module `route.ts`; there is no `service.ts` or `createService()` factory.
-
-## Structure
-
-```bash
-@opengis/fcore
-├── src/
-│   ├── plugins/
-│   │   ├── logger/
-│   │   ├── redis/
-│   │   ├── pg/
-│   │   ├── file/
-│   │   ├── audit/
-│   │   └── resource/
-│   ├── modules/
-│   │   ├── auth/
-│   │   ├── access/
-│   │   ├── resource/
-│   │   ├── file/
-│   │   ├── template/
-│   │   └── system/
-│   ├── migrations/
-│   ├── config.ts 		# loadConfig
-│   ├── context.ts		# createContext, set, get
-│   ├── errors.ts		# standard Errors
-│   ├── fastify.ts		# fastify Plugins  
-│   ├── fcore.ts		# createFcore 
-│   └── index.ts		# export type, methods, etc
-├── test/	
-├── engineering/
-├── package.json
-└── tsconfig.json
+# @opengis/fcore
+
+Reusable backend foundation for OpenGIS Node.js applications: config, typed application context, PostgreSQL, Redis, S3 file storage, audit, trusted Resource CRUD, Core modules, Fastify integration and SQL migration runner.
+
+## Install
+
+```bash
+npm install @opengis/fcore
+```
+
+## Bootstrap
+
+```ts
+import { createFCore } from '@opengis/fcore';
+import resources from './resources/index.js';
+
+export const ctx = await createFCore({ resources });
+```
+
+```ts
+import Fastify from 'fastify';
+import fcoreFastify from '@opengis/fcore/fastify';
+import { ctx } from './app.js';
+
+const app = Fastify();
+await app.register(fcoreFastify, { ctx });
+await app.listen({ port: ctx.config.port });
+```
+
+## Resource
+
+All dynamic table/column identifiers come from registered `ResourceContract` metadata. Values are SQL parameters.
+
+## Migrations
+
+Project SQL files stay in `./migrations`. Build the package/application, then run `fcore-migrate` or import `runMigrations()`.
+
+## Module service convention
+
+Module services are plain async functions with the canonical `service(params, ctx)` signature. `ctx` is passed explicitly from `fastify.ts` to each module `route.ts`; there is no `service.ts` or `createService()` factory.
+
+## Structure
+
+```bash
+@opengis/fcore
+├── src/
+│   ├── plugins/
+│   │   ├── logger/
+│   │   ├── redis/
+│   │   ├── pg/
+│   │   ├── file/
+│   │   ├── audit/
+│   │   └── resource/
+│   ├── modules/
+│   │   ├── auth/
+│   │   ├── access/
+│   │   ├── resource/
+│   │   ├── file/
+│   │   ├── template/
+│   │   └── system/
+│   ├── migrations/
+│   ├── config.ts 		# loadConfig
+│   ├── context.ts		# createContext, set, get
+│   ├── errors.ts		# standard Errors
+│   ├── fastify.ts		# fastify Plugins  
+│   ├── fcore.ts		# createFcore 
+│   └── index.ts		# export type, methods, etc
+├── test/	
+├── engineering/
+├── package.json
+└── tsconfig.json
 ```

package/dist/config.js

@@ -1 +1 @@
-function m(){const q=['local','./storage','cwd','/log','us-east-1','Ch7QR4e73Jg0wx0xOjm','parse','x5y30KBsEKCENT04tu6549Vxx3No1ztJ2q2K8r79S59420RaZ5','0ua4b1Tz21m47z13U3EO0uN9e0WE7hqRFbcZ72cbdWqZBzemf9cAU865xan1s81TdNpUKKfF','lax','strict','includes','logger','redis','auth'];m=function(){return q;};return m();}import'dotenv/config';const DEFAULT_LOG_RESPONSE_STATUS_CODES=[0x193,0x199,0x19d,0x19f,0x1ad];function required(P){const G=process.env[P];if(!G)throw new Error('Missing\x20environment\x20variable:\x20'+P);return G;}export function loadConfig(P={}){const Z=C,G={'env':process.env.NODE_ENV??'development','debug':process.env.DEBUG==='true','port':Number(process.env.PORT??0xbb8),'maxFileSize':+(process.env.MAX_FILE_SIZE||0x200),'rateLimit':{'disabled':process.env.RATE_LIMIT==='false','max':+(process.env.RATE_LIMIT_MAX||0x64),'timeWindow':+(process.env.RATE_LIMIT_TIME_WINDOW||0xea60)},'storageType':(process.env.STORAGE_TYPE??'s3')['toLowerCase']()==='local'||!process.env.S3_ENDPOINT?Z(0x1ad):'s3','storagePath':process.env.STORAGE_PATH??Z(0x1ae),'redactionList':(process.env.REDACTION_LIST||'password')['split'](','),'logger':{'level':process.env.LOG_LEVEL??'info','responses':process.env.LOG_RESPONSES==='true'?!![]:![],'responseCodes':process.env.LOG_RESPONSE_STATUS_CODES?process.env.LOG_RESPONSE_STATUS_CODES['split'](',')['map'](j=>j-0x0):DEFAULT_LOG_RESPONSE_STATUS_CODES,'directory':process.env.LOG_DIRECTORY||process[Z(0x1af)]()+Z(0x1b0)},'pg':{'host':process.env.PG_HOST??'localhost','port':Number(process.env.PG_PORT??0x1538),'database':process.env.PG_DATABASE??'','user':process.env.PG_USER??'','password':process.env.PG_PASSWORD??''},'redis':{'host':process.env.REDIS_HOST??'','port':Number(process.env.REDIS_PORT??0x18eb),'password':process.env.REDIS_PASSWORD,'lazyConnect':!![],'db':process.env.REDIS_DB?Number(process.env.REDIS_DB):undefined},'s3':{'endpoint':process.env.S3_ENDPOINT,'region':process.env.S3_REGION??Z(0x1b1),'bucket':process.env.S3_BUCKET??'','accessKey':process.env.S3_ACCESS_KEY,'secretKey':process.env.S3_SECRET_KEY,'folder':process.env.S3_FOLDER,'forcePathStyle':process.env.S3_FORCE_PATH_STYLE!=='false','tokenSecret':process.env.FILE_TOKEN_SECRET,'tokenTtl':Number(process.env.FILE_TOKEN_TTL??0xe10)},'auth':{'accessToken':process.env.AUTH_ACCESS_TOKEN||Z(0x1b2),'user':process.env.AUTH_USER?JSON[Z(0x1b3)](process.env.AUTH_USER):undefined,'sessionTimeout':+(process.env.AUTH_SESSION_TIMEOUT||0x258),'secret':process.env.AUTH_SECRET??Z(0x1b4),'cookieName':process.env.AUTH_COOKIE_NAME??'session_user_auth','jwtSecret':process.env.AUTH_JWT_SECRET??Z(0x1b5),'redirect':process.env.AUTH_REDIRECT??'/','twoFactorRedirect':process.env.AUTH_TWOFACTOR_REDIRECT??'/','cookieOptions':process.env.AUTH_COOKIE_OPTIONS_DOMAIN?{'domain':process.env.AUTH_COOKIE_OPTIONS_DOMAIN,'path':process.env.AUTH_COOKIE_OPTIONS_PATH||'/','httpOnly':Boolean(process.env.AUTH_COOKIE_OPTIONS_HTTP_ONLY||'true'),'secure':Boolean(process.env.AUTH_COOKIE_OPTIONS_SECURE||'true'),'sameSite':process.env.AUTH_COOKIE_OPTIONS_SAME_SITE&&[Z(0x1b6),Z(0x1b7),'none'][Z(0x1b8)](process.env.AUTH_COOKIE_OPTIONS_SAME_SITE)?process.env.AUTH_COOKIE_OPTIONS_SAME_SITE:Boolean(process.env.AUTH_COOKIE_OPTIONS_SAME_SITE||'true')}:{'path':'/','httpOnly':!![],'secure':![],'sameSite':!![]}}};return{...G,...P,'logger':{...G[Z(0x1b9)],...P['logger']},'pg':{...G['pg'],...P['pg']},'redis':{...G[Z(0x1ba)],...P['redis']},'s3':{...G['s3'],...P['s3']},'auth':{...G['auth'],...P[Z(0x1bb)]}};}function C(P,G){P=P-0x1ad;const j=m();let Z=j[P];return Z;}export{required as requireEnv};
+function O(){const u=['Missing\x20environment\x20variable:\x20','toLowerCase','./storage','password','info','split','map','cwd','/log','false','0ua4b1Tz21m47z13U3EO0uN9e0WE7hqRFbcZ72cbdWqZBzemf9cAU865xan1s81TdNpUKKfF','true','lax','none','auth'];O=function(){return u;};return O();}import'dotenv/config';function c(S,Z){S=S-0x139;const h=O();let U=h[S];return U;}const DEFAULT_LOG_RESPONSE_STATUS_CODES=[0x193,0x199,0x19d,0x19f,0x1ad];function required(S){const U=c,Z=process.env[S];if(!Z)throw new Error(U(0x139)+S);return Z;}export function loadConfig(S={}){const D=c,Z={'env':process.env.NODE_ENV??'development','debug':process.env.DEBUG==='true','port':Number(process.env.PORT??0xbb8),'maxFileSize':+(process.env.MAX_FILE_SIZE||0x200),'rateLimit':{'disabled':process.env.RATE_LIMIT==='false','max':+(process.env.RATE_LIMIT_MAX||0x64),'timeWindow':+(process.env.RATE_LIMIT_TIME_WINDOW||0xea60)},'storageType':(process.env.STORAGE_TYPE??'s3')[D(0x13a)]()==='local'||!process.env.S3_ENDPOINT?'local':'s3','storagePath':process.env.STORAGE_PATH??D(0x13b),'redactionList':(process.env.REDACTION_LIST||D(0x13c))['split'](','),'logger':{'level':process.env.LOG_LEVEL??D(0x13d),'responses':process.env.LOG_RESPONSES==='true'?!![]:![],'responseCodes':process.env.LOG_RESPONSE_STATUS_CODES?process.env.LOG_RESPONSE_STATUS_CODES[D(0x13e)](',')[D(0x13f)](h=>h-0x0):DEFAULT_LOG_RESPONSE_STATUS_CODES,'directory':process.env.LOG_DIRECTORY||process[D(0x140)]()+D(0x141)},'pg':{'host':process.env.PG_HOST??'localhost','port':Number(process.env.PG_PORT??0x1538),'database':process.env.PG_DATABASE??'','user':process.env.PG_USER??'','password':process.env.PG_PASSWORD??''},'redis':{'host':process.env.REDIS_HOST??'','port':Number(process.env.REDIS_PORT??0x18eb),'password':process.env.REDIS_PASSWORD,'lazyConnect':!![],'db':process.env.REDIS_DB?Number(process.env.REDIS_DB):undefined},'s3':{'endpoint':process.env.S3_ENDPOINT,'region':process.env.S3_REGION??'us-east-1','bucket':process.env.S3_BUCKET??'','accessKey':process.env.S3_ACCESS_KEY,'secretKey':process.env.S3_SECRET_KEY,'folder':process.env.S3_FOLDER,'forcePathStyle':process.env.S3_FORCE_PATH_STYLE!==D(0x142),'tokenSecret':process.env.FILE_TOKEN_SECRET,'tokenTtl':Number(process.env.FILE_TOKEN_TTL??0xe10)},'auth':{'accessToken':process.env.AUTH_ACCESS_TOKEN||'Ch7QR4e73Jg0wx0xOjm','user':process.env.AUTH_USER?JSON['parse'](process.env.AUTH_USER):undefined,'sessionTimeout':+(process.env.AUTH_SESSION_TIMEOUT||0x258),'secret':process.env.AUTH_SECRET??'x5y30KBsEKCENT04tu6549Vxx3No1ztJ2q2K8r79S59420RaZ5','cookieName':process.env.AUTH_COOKIE_NAME??'session_user_auth','jwtSecret':process.env.AUTH_JWT_SECRET??D(0x143),'redirect':process.env.AUTH_REDIRECT??'/','twoFactorRedirect':process.env.AUTH_TWOFACTOR_REDIRECT??'/','cookieOptions':process.env.AUTH_COOKIE_OPTIONS_DOMAIN?{'domain':process.env.AUTH_COOKIE_OPTIONS_DOMAIN,'path':process.env.AUTH_COOKIE_OPTIONS_PATH||'/','httpOnly':Boolean(process.env.AUTH_COOKIE_OPTIONS_HTTP_ONLY||D(0x144)),'secure':Boolean(process.env.AUTH_COOKIE_OPTIONS_SECURE||'true'),'sameSite':process.env.AUTH_COOKIE_OPTIONS_SAME_SITE&&[D(0x145),'strict',D(0x146)]['includes'](process.env.AUTH_COOKIE_OPTIONS_SAME_SITE)?process.env.AUTH_COOKIE_OPTIONS_SAME_SITE:Boolean(process.env.AUTH_COOKIE_OPTIONS_SAME_SITE||'true')}:{'path':'/','httpOnly':!![],'secure':![],'sameSite':!![]}}};return{...Z,...S,'logger':{...Z['logger'],...S['logger']},'pg':{...Z['pg'],...S['pg']},'redis':{...Z['redis'],...S['redis']},'s3':{...Z['s3'],...S['s3']},'auth':{...Z['auth'],...S[D(0x147)]}};}export{required as requireEnv};

package/dist/context.js

@@ -1 +1 @@
-function m(){const j=['allSettled','redis','close'];m=function(){return j;};return m();}let defaultContext;function C(P,G){P=P-0x155;const j=m();let Z=j[P];return Z;}export function setContext(P){defaultContext=P;}export function getContext(){if(!defaultContext)throw new Error('Application\x20context\x20is\x20not\x20initialized');return defaultContext;}export function createContext(P){return{...P,async 'close'(){const G=C;await Promise[G(0x155)]([P[G(0x156)]?.[G(0x157)](),P['pg']?.['end']()]),await P['logger']['close']();}};}
+let defaultContext;function c(S,Z){S=S-0x12c;const h=O();let U=h[S];return U;}export function setContext(S){defaultContext=S;}function O(){const h=['redis'];O=function(){return h;};return O();}export function getContext(){if(!defaultContext)throw new Error('Application\x20context\x20is\x20not\x20initialized');return defaultContext;}export function createContext(S){return{...S,async 'close'(){const Z=c;await Promise['allSettled']([S[Z(0x12c)]?.['close'](),S['pg']?.['end']()]),await S['logger']['close']();}};}

package/dist/errors.js

@@ -1 +1 @@
-var p=C;export class FCoreError extends Error{['code'];['statusCode'];['details'];constructor(P,G,j=0x1f4,Z){var q=C;super(G),this['code']=P,this[q(0xd3)]=j,this['details']=Z,this[q(0xd4)]=new.target.name;}}export class BadRequestError extends FCoreError{constructor(P,G){super('BAD_REQUEST_ERROR',P,0x190,G);}}export class UnauthorizedError extends FCoreError{constructor(P='Authentication\x20required'){super('UNAUTHORIZED',P,0x191);}}export class ForbiddenError extends FCoreError{constructor(P='Access\x20denied'){super('FORBIDDEN',P,0x193);}}function C(P,G){P=P-0xd3;var j=m();var Z=j[P];return Z;}export class NotFoundError extends FCoreError{constructor(P=p(0xd5)){super('NOT_FOUND',P,0x194);}}export class ConflictError extends FCoreError{constructor(P='Conflict'){super('CONFLICT',P,0x199);}}export class ValidationError extends FCoreError{constructor(P,G){super('VALIDATION_ERROR',P,0x1a6,G);}}export class UnsupportedError extends FCoreError{constructor(P=p(0xd6)){super('UNSUPPORTED',P,0x1f5);}}function m(){var X=['statusCode','name','Not\x20found','Operation\x20is\x20not\x20configured'];m=function(){return X;};return m();}
+var u=c;export class FCoreError extends Error{['code'];['statusCode'];['details'];constructor(S,Z,h=0x1f4,U){var D=c;super(Z),this[D(0x139)]=S,this['statusCode']=h,this[D(0x13a)]=U,this['name']=new.target.name;}}function O(){var q=['code','details','Access\x20denied','Not\x20found','Conflict','VALIDATION_ERROR','Operation\x20is\x20not\x20configured'];O=function(){return q;};return O();}export class BadRequestError extends FCoreError{constructor(S,Z){super('BAD_REQUEST_ERROR',S,0x190,Z);}}export class UnauthorizedError extends FCoreError{constructor(S='Authentication\x20required'){super('UNAUTHORIZED',S,0x191);}}export class ForbiddenError extends FCoreError{constructor(S=u(0x13b)){super('FORBIDDEN',S,0x193);}}export class NotFoundError extends FCoreError{constructor(S=u(0x13c)){super('NOT_FOUND',S,0x194);}}export class ConflictError extends FCoreError{constructor(S=u(0x13d)){super('CONFLICT',S,0x199);}}export class ValidationError extends FCoreError{constructor(S,Z){var e=u;super(e(0x13e),S,0x1a6,Z);}}function c(S,Z){S=S-0x139;var h=O();var U=h[S];return U;}export class UnsupportedError extends FCoreError{constructor(S=u(0x13f)){super('UNSUPPORTED',S,0x1f5);}}

package/dist/fastify.js

@@ -1 +1 @@
-import P from'fastify-plugin';import{FCoreError}from'./errors.js';import{authRoutes}from'./modules/auth/route.js';function C(P,G){P=P-0x132;const j=m();let Z=j[P];return Z;}import{fileRoutes}from'./modules/file/route.js';import{resourceRoutes}from'./modules/resource/route.js';import{systemRoutes}from'./modules/system/route.js';import{createSessionStore}from'./plugins/auth/index.js';import{ForbiddenError}from'./errors.js';import{jwtVerifyToken}from'./plugins/jwt.js';function m(){const L=['split','decorate','ctx','method','HEAD','fcore','access','permissions','addHook','preHandler','routeOptions','platform','config','raw','authorization','Bearer\x20','slice','user','Route\x20access\x20not\x20defined','type','admin','replace','resource','FST_ERR_VALIDATION','statusCode','code','logger','system','addContentTypeParser','@fastify/rate-limit','rateLimit'];m=function(){return L;};return m();}function urlencodedContentParser(G,j,Z){const q=decodeURIComponent(j['toString']())['split']('&')['reduce']((p,X)=>{const i=C,[F,A]=X[i(0x132)]('=');return{...p,[F]:A};},{});Z(null,q);}export default function fcoreFastify(G,j){return P(async Z=>{const y=C;Z[y(0x133)](y(0x134),G);const {config:q}=G,p=new Map();Z['addHook']('onRoute',F=>{const T=y,A=F['schema'],H=Array['isArray'](F[T(0x135)])?F[T(0x135)]:[F['method']];for(const b of H){if(b===T(0x136))continue;const E={'method':b,'endpoint':F['url'],'package':A?.['package']??T(0x137),'tags':A?.['tags']??[],'summary':A?.['summary']??'','description':A?.['description']??'','access':A?.[T(0x138)]??'public','permissions':A?.[T(0x139)]??[]};p['set'](b+'\x20'+F['url'],E);}}),Z[y(0x13a)](y(0x13b),async F=>{const D=y;if(F['routeOptions']['url']==='*')return!![];const A=p['get'](F[D(0x135)]+'\x20'+F[D(0x13c)]['url']),H=!F['user']&&process[D(0x13d)]==='win32'&&G['config']?.['auth']?.['user']?G[D(0x13e)]?.['auth']?.['user']:null,b=F[D(0x13f)]['headers']?.[D(0x140)],E=b?.['startsWith'](D(0x141))?b[D(0x142)](0x7):null,z=F[D(0x143)]??(E?await jwtVerifyToken(E):H);!F[D(0x143)]&&E&&process.env.AUTH_JWT_SECRET&&(F['user']=await jwtVerifyToken(E));if(!A?.['access'])throw new ForbiddenError(D(0x144));if(A[D(0x138)]==='public')return!![];if(!z)throw new ForbiddenError('User\x20required');if(A[D(0x138)]==='user'&&!A['permissions']?.['length'])return!![];if(z[D(0x145)]=='admin')return!![];if(A['access']===D(0x146))throw new ForbiddenError('Admin\x20access\x20required');for(const x of A['permissions']){const o=x?.[D(0x147)]('$resource',F['params'][D(0x148)]??'');if(!z[D(0x139)]?.['includes'](o))throw new ForbiddenError('Missing\x20permission:\x20'+o);}return!![];}),await createSessionStore(Z,G),await Z['register'](import('@fastify/multipart'),{'limits':{'fileSize':q['maxFileSize']*0x400*0x400}}),Z['setErrorHandler']((F,A,H)=>{const h=y;if(F instanceof FCoreError||F['code']===h(0x149)||F['statusCode']<0x1f4)return F[h(0x14a)]<0x1f4&&G['logger']['warn'](F),H[h(0x14b)](F['statusCode'])['send']({'error':F['code'],'message':F['message'],'details':F['details']});return G[h(0x14c)]['error'](F),(q['debug']||process.env.NODE_ENV==='test'||process.env.VITEST)&&console['error'](F),H['code'](0x1f4)['send']({'error':'INTERNAL_ERROR','message':'Internal\x20server\x20error'});});const X=F=>!j||j['includes'](F);if(X('auth'))await Z['register'](authRoutes(G));if(X('resource'))await Z['register'](resourceRoutes(G));if(X('file'))await Z['register'](fileRoutes(G));if(X(y(0x14d)))await Z['register'](systemRoutes(G,p));Z[y(0x14e)]('application/x-www-form-urlencoded',{'parseAs':'buffer'},urlencodedContentParser),!q['rateLimit']?.['disabled']?Z['register'](import(y(0x14f)),{'max':q[y(0x150)]?.['max']||0x64,'timeWindow':q['rateLimit']?.['timeWindow']||0xea60,'hook':'preHandler','global':!![],'keyGenerator':F=>(F['user']?.['id']||F['ip'])+'-'+F['raw']['url']['split']('?')[0x0]}):console['log']('⚠️\x20rate\x20limit\x20is\x20disabled');});}
+import S from'fastify-plugin';import{FCoreError}from'./errors.js';import{authRoutes}from'./modules/auth/route.js';import{fileRoutes}from'./modules/file/route.js';import{resourceRoutes}from'./modules/resource/route.js';import{systemRoutes}from'./modules/system/route.js';import{createSessionStore}from'./plugins/auth/index.js';import{ForbiddenError}from'./errors.js';function c(S,Z){S=S-0x1d5;const h=O();let U=h[S];return U;}import{jwtVerifyToken}from'./plugins/jwt.js';function urlencodedContentParser(Z,h,U){const l=c,D=decodeURIComponent(h['toString']())['split']('&')[l(0x1d5)]((u,e)=>{const [q,x]=e['split']('=');return{...u,[q]:x};},{});U(null,D);}export default function fcoreFastify(Z,h){return S(async U=>{const b=c;U['decorate'](b(0x1d6),Z);const {config:D}=Z,u=new Map();U['addHook']('onRoute',q=>{const Y=b,x=q['schema'],n=Array[Y(0x1d7)](q[Y(0x1d8)])?q['method']:[q[Y(0x1d8)]];for(const N of n){if(N==='HEAD')continue;const o={'method':N,'endpoint':q['url'],'package':x?.['package']??'fcore','tags':x?.['tags']??[],'summary':x?.[Y(0x1d9)]??'','description':x?.['description']??'','access':x?.['access']??'public','permissions':x?.[Y(0x1da)]??[]};u['set'](N+'\x20'+q['url'],o);}}),U['addHook']('preHandler',async q=>{const r=b;if(q['routeOptions'][r(0x1db)]==='*')return!![];const x=u['get'](q[r(0x1d8)]+'\x20'+q['routeOptions'][r(0x1db)]),n=!q['user']&&process['platform']==='win32'&&Z['config']?.[r(0x1dc)]?.['user']?Z['config']?.['auth']?.['user']:null,N=q[r(0x1dd)]['headers']?.[r(0x1de)],o=N?.['startsWith'](r(0x1df))?N['slice'](0x7):null,j=q['user']??(o?await jwtVerifyToken(o):n);!q['user']&&o&&process.env.AUTH_JWT_SECRET&&(q['user']=await jwtVerifyToken(o));if(!x?.['access'])throw new ForbiddenError('Route\x20access\x20not\x20defined');if(x['access']===r(0x1e0))return!![];if(!j)throw new ForbiddenError(r(0x1e1));if(x[r(0x1e2)]==='user'&&!x[r(0x1da)]?.['length'])return!![];if(j['type']=='admin')return!![];if(x['access']==='admin')throw new ForbiddenError(r(0x1e3));for(const X of x[r(0x1da)]){const i=X?.['replace']('$resource',q['params'][r(0x1e4)]??'');if(!j[r(0x1da)]?.[r(0x1e5)](i))throw new ForbiddenError('Missing\x20permission:\x20'+i);}return!![];}),await createSessionStore(U,Z),await U['register'](import(b(0x1e6)),{'limits':{'fileSize':D['maxFileSize']*0x400*0x400}}),U['setErrorHandler']((q,x,n)=>{const E=b;if(q instanceof FCoreError||q[E(0x1e7)]==='FST_ERR_VALIDATION'||q['statusCode']<0x1f4)return q['statusCode']<0x1f4&&Z['logger']['warn'](q),n[E(0x1e7)](q['statusCode'])['send']({'error':q['code'],'message':q[E(0x1e8)],'details':q['details']});return Z[E(0x1e9)]['error'](q),(D[E(0x1ea)]||process.env.NODE_ENV===E(0x1eb)||process.env.VITEST)&&console['error'](q),n[E(0x1e7)](0x1f4)[E(0x1ec)]({'error':'INTERNAL_ERROR','message':'Internal\x20server\x20error'});});const e=q=>!h||h['includes'](q);if(e('auth'))await U['register'](authRoutes(Z));if(e('resource'))await U['register'](resourceRoutes(Z));if(e('file'))await U['register'](fileRoutes(Z));if(e('system'))await U['register'](systemRoutes(Z,u));U['addContentTypeParser']('application/x-www-form-urlencoded',{'parseAs':'buffer'},urlencodedContentParser),!D['rateLimit']?.['disabled']?U['register'](import(b(0x1ed)),{'max':D['rateLimit']?.['max']||0x64,'timeWindow':D['rateLimit']?.['timeWindow']||0xea60,'hook':b(0x1ee),'global':!![],'keyGenerator':q=>(q['user']?.['id']||q['ip'])+'-'+q[b(0x1dd)]['url']['split']('?')[0x0]}):console['log'](b(0x1ef));});}function O(){const L=['reduce','ctx','isArray','method','summary','permissions','url','auth','raw','authorization','Bearer\x20','public','User\x20required','access','Admin\x20access\x20required','resource','includes','@fastify/multipart','code','message','logger','debug','test','send','@fastify/rate-limit','preHandler','⚠️\x20rate\x20limit\x20is\x20disabled'];O=function(){return L;};return O();}

package/dist/fcore.js

@@ -1 +1 @@
-function m(){const E=['accessKey','resources'];m=function(){return E;};return m();}import{loadConfig}from'./config.js';import{createContext,setContext}from'./context.js';function C(P,G){P=P-0x177;const j=m();let Z=j[P];return Z;}import{createAudit,createDatabase,createDictionary,createFileLocal,createFileS3,createLogger,createRedis,createResource}from'./plugins/index.js';export async function createFCore(P={}){const b=C,G=loadConfig(P['config']),j=createRedis(G['redis']),Z=createLogger(),q=createDatabase(G['pg']),p=G['storageType']==='local'?createFileLocal({'storagePath':G['storagePath'],'folder':G['s3']['folder'],'tokenSecret':G['s3']['tokenSecret'],'tokenTtl':G['s3']['tokenTtl']}):createFileS3({'endpoint':G['s3']['endpoint'],'region':G['s3']['region'],'bucket':G['s3']['bucket'],'accessKey':G['s3'][b(0x177)],'secretKey':G['s3']['secretKey'],'folder':G['s3']['folder'],'forcePathStyle':G['s3']['forcePathStyle'],'tokenSecret':G['s3']['tokenSecret'],'tokenTtl':G['s3']['tokenTtl']}),X=createAudit({'pg':q,'logger':Z}),F=createDictionary({'pg':q,'dictionaries':P['dictionaries']}),A=createResource({'pg':q,'logger':Z,'audit':X,'dictionary':F,'file':p});P[b(0x178)]?.['length']&&A['register'](P['resources']);const H=createContext({'config':G,'logger':Z,'redis':j,'pg':q,'file':p,'resource':A,'audit':X,'dictionary':F});return setContext(H),H;}
+import{loadConfig}from'./config.js';import{createContext,setContext}from'./context.js';import{createAudit,createDatabase,createDictionary,createFileLocal,createFileS3,createLogger,createRedis,createResource}from'./plugins/index.js';function c(S,Z){S=S-0xb7;const h=O();let U=h[S];return U;}export async function createFCore(S={}){const N=c,Z=loadConfig(S[N(0xb7)]),h=createRedis(Z['redis']),U=createLogger(),D=createDatabase(Z['pg']),u=Z[N(0xb8)]==='local'?createFileLocal({'storagePath':Z[N(0xb9)],'folder':Z['s3']['folder'],'tokenSecret':Z['s3']['tokenSecret'],'tokenTtl':Z['s3']['tokenTtl']}):createFileS3({'endpoint':Z['s3']['endpoint'],'region':Z['s3']['region'],'bucket':Z['s3']['bucket'],'accessKey':Z['s3']['accessKey'],'secretKey':Z['s3']['secretKey'],'folder':Z['s3']['folder'],'forcePathStyle':Z['s3']['forcePathStyle'],'tokenSecret':Z['s3'][N(0xba)],'tokenTtl':Z['s3']['tokenTtl']}),e=createAudit({'pg':D,'logger':U}),q=createDictionary({'pg':D,'dictionaries':S['dictionaries']}),x=createResource({'pg':D,'logger':U,'audit':e,'dictionary':q,'file':u});S['resources']?.['length']&&x['register'](S['resources']);const n=createContext({'config':Z,'logger':U,'redis':h,'pg':D,'file':u,'resource':x,'audit':e,'dictionary':q});return setContext(n),n;}function O(){const o=['config','storageType','storagePath','tokenSecret'];O=function(){return o;};return O();}

package/dist/migrations/cli.js

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-const A=C;import{runMigrations}from'./runner.js';import{loadConfig}from'../config.js';import P from'node:path';import{fileURLToPath}from'node:url';const packageMigrations=fileURLToPath(new URL('../../migrations',import.meta.url));function migrationDirectory(G){const F=C,j=G['indexOf']('--dir');if(j>=0x0){const q=G[j+0x1];if(!q)throw new Error(F(0x149));return P[F(0x14a)](q);}if(G[F(0x14b)]('--fcore'))return packageMigrations;const Z=G['find'](p=>!p['startsWith']('--'));return P['resolve'](Z??'migrations');}function C(P,G){P=P-0x149;const j=m();let Z=j[P];return Z;}function m(){const H=['--dir\x20requires\x20a\x20folder\x20path','resolve','includes','slice','run','file'];m=function(){return H;};return m();}try{const config=loadConfig(),dir=migrationDirectory(process['argv'][A(0x14c)](0x2));console['log']('Loaded\x20configuration:',{...config['pg'],'user':'****','password':'****'}),console['log']('Using\x20migration\x20directory:',dir,process['argv']['slice'](0x2));for(const r of await runMigrations({'database':config['pg'],'dir':dir}))console['log']((r['status']===A(0x14d)?'OK\x20\x20':'SKIP')+'\x20'+r[A(0x14e)]);}catch(X){console['error'](X),process['exitCode']=0x1;}
+const q=c;import{runMigrations}from'./runner.js';function O(){const n=['../../migrations','--dir','--dir\x20requires\x20a\x20folder\x20path','--fcore','find','resolve','log','****','slice','OK\x20\x20','exitCode'];O=function(){return n;};return O();}import{loadConfig}from'../config.js';import S from'node:path';import{fileURLToPath}from'node:url';const packageMigrations=fileURLToPath(new URL(q(0xe4),import.meta.url));function migrationDirectory(Z){const x=q,h=Z['indexOf'](x(0xe5));if(h>=0x0){const D=Z[h+0x1];if(!D)throw new Error(x(0xe6));return S['resolve'](D);}if(Z['includes'](x(0xe7)))return packageMigrations;const U=Z[x(0xe8)](u=>!u['startsWith']('--'));return S[x(0xe9)](U??'migrations');}function c(S,Z){S=S-0xe4;const h=O();let U=h[S];return U;}try{const config=loadConfig(),dir=migrationDirectory(process['argv']['slice'](0x2));console[q(0xea)]('Loaded\x20configuration:',{...config['pg'],'user':q(0xeb),'password':'****'}),console['log']('Using\x20migration\x20directory:',dir,process['argv'][q(0xec)](0x2));for(const r of await runMigrations({'database':config['pg'],'dir':dir}))console[q(0xea)]((r['status']==='run'?q(0xed):'SKIP')+'\x20'+r['file']);}catch(e){console['error'](e),process[q(0xee)]=0x1;}

package/dist/migrations/runner.js

@@ -1 +1 @@
-import P from'node:fs/promises';function m(){const i=['query','SELECT\x20version\x20FROM\x20schema_migrations','rows','version','readdir','endsWith','has','readFile','utf8','BEGIN','release'];m=function(){return i;};return m();}import G from'node:path';import{createDatabase}from'../plugins/pg.js';export async function runMigrations(j={}){const o=C,Z=G['resolve'](j['dir']??'migrations'),q=j['database']??databaseFromUrl(j['databaseUrl']??process.env.DATABASE_URL);if(!q)throw new Error('DATABASE_URL\x20or\x20database\x20config\x20is\x20required');const p=createDatabase(q);if(!p)throw new Error('empty\x20pg');const X=[];try{await p['query']('\x0a\x20\x20\x20\x20\x20\x20CREATE\x20TABLE\x20IF\x20NOT\x20EXISTS\x20schema_migrations\x20(\x0a\x20\x20\x20\x20\x20\x20\x20\x20version\x20varchar(255)\x20PRIMARY\x20KEY,\x0a\x20\x20\x20\x20\x20\x20\x20\x20applied_at\x20timestamptz\x20NOT\x20NULL\x20DEFAULT\x20now()\x0a\x20\x20\x20\x20\x20\x20)\x0a\x20\x20\x20\x20');const F=await p[o(0xb6)](o(0xb7)),A=new Set(F[o(0xb8)]['map'](b=>b[o(0xb9)])),H=(await P[o(0xba)](Z))['filter'](b=>b[o(0xbb)]('.sql'))['sort']();for(const b of H){if(A[o(0xbc)](b)){X['push']({'file':b,'status':'skip'});continue;}const E=await P[o(0xbd)](G['join'](Z,b),o(0xbe)),z=await p['connect']();try{await z['query'](o(0xbf)),await z['query'](E),await z[o(0xb6)]('INSERT\x20INTO\x20schema_migrations(version)\x20VALUES\x20($1)',[b]),await z['query']('COMMIT');}catch(x){await z['query']('ROLLBACK');throw x;}finally{z[o(0xc0)]();}X['push']({'file':b,'status':'run'});}return X;}finally{await p['end']();}}function C(P,G){P=P-0xb6;const j=m();let Z=j[P];return Z;}function databaseFromUrl(j){if(!j)return undefined;const Z=new URL(j);return{'host':Z['hostname'],'port':Number(Z['port']||0x1538),'database':Z['pathname']['slice'](0x1),'user':decodeURIComponent(Z['username']),'password':decodeURIComponent(Z['password'])};}
+import S from'node:fs/promises';import Z from'node:path';function O(){const l=['dir','migrations','DATABASE_URL\x20or\x20database\x20config\x20is\x20required','query','\x0a\x20\x20\x20\x20\x20\x20CREATE\x20TABLE\x20IF\x20NOT\x20EXISTS\x20schema_migrations\x20(\x0a\x20\x20\x20\x20\x20\x20\x20\x20version\x20varchar(255)\x20PRIMARY\x20KEY,\x0a\x20\x20\x20\x20\x20\x20\x20\x20applied_at\x20timestamptz\x20NOT\x20NULL\x20DEFAULT\x20now()\x0a\x20\x20\x20\x20\x20\x20)\x0a\x20\x20\x20\x20','rows','readdir','endsWith','join','connect','INSERT\x20INTO\x20schema_migrations(version)\x20VALUES\x20($1)','end'];O=function(){return l;};return O();}import{createDatabase}from'../plugins/pg.js';export async function runMigrations(h={}){const i=c,U=Z['resolve'](h[i(0x6e)]??i(0x6f)),D=h['database']??databaseFromUrl(h['databaseUrl']??process.env.DATABASE_URL);if(!D)throw new Error(i(0x70));const u=createDatabase(D);if(!u)throw new Error('empty\x20pg');const e=[];try{await u[i(0x71)](i(0x72));const q=await u['query']('SELECT\x20version\x20FROM\x20schema_migrations'),x=new Set(q[i(0x73)]['map'](N=>N['version'])),n=(await S[i(0x74)](U))['filter'](N=>N[i(0x75)]('.sql'))['sort']();for(const N of n){if(x['has'](N)){e['push']({'file':N,'status':'skip'});continue;}const o=await S['readFile'](Z[i(0x76)](U,N),'utf8'),j=await u[i(0x77)]();try{await j['query']('BEGIN'),await j['query'](o),await j['query'](i(0x78),[N]),await j[i(0x71)]('COMMIT');}catch(X){await j['query']('ROLLBACK');throw X;}finally{j['release']();}e['push']({'file':N,'status':'run'});}return e;}finally{await u[i(0x79)]();}}function c(S,Z){S=S-0x6e;const h=O();let U=h[S];return U;}function databaseFromUrl(h){if(!h)return undefined;const U=new URL(h);return{'host':U['hostname'],'port':Number(U['port']||0x1538),'database':U['pathname']['slice'](0x1),'user':decodeURIComponent(U['username']),'password':decodeURIComponent(U['password'])};}

package/dist/modules/auth/adduser-cli.js

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-const j=C;function C(P,G){P=P-0x12b;const j=m();let Z=j[P];return Z;}import{loadConfig}from'../../config.js';import{createDatabase}from'../../plugins/pg.js';import P from'./services/registration.js';function m(){const Z=['argv','error','exitCode','type'];m=function(){return Z;};return m();}const [user,password,type]=process[j(0x12b)]['slice'](0x2);if(!user||!password)console[j(0x12c)]('Usage:\x20fcore-registration\x20<login>\x20<password>\x20[type]'),process[j(0x12d)]=0x1;else{const pg=createDatabase(loadConfig()['pg']);try{const {user:data}=await P({'user':user,'password':password,'type':type},{'pg':pg});console['log']('Registered\x20user\x20'+data['id']+'\x20('+data[j(0x12e)]+')');}catch(G){console[j(0x12c)](G),process['exitCode']=0x1;}finally{await pg['end']();}}
+const h=c;import{loadConfig}from'../../config.js';function O(){const U=['Usage:\x20fcore-registration\x20<login>\x20<password>\x20[type]','log','exitCode','end'];O=function(){return U;};return O();}import{createDatabase}from'../../plugins/pg.js';import S from'./services/registration.js';function c(S,Z){S=S-0x164;const h=O();let U=h[S];return U;}const [user,password,type]=process['argv']['slice'](0x2);if(!user||!password)console['error'](h(0x164)),process['exitCode']=0x1;else{const pg=createDatabase(loadConfig()['pg']);try{const {user:data}=await S({'user':user,'password':password,'type':type},{'pg':pg});console[h(0x165)]('Registered\x20user\x20'+data['id']+'\x20('+data['type']+')');}catch(Z){console['error'](Z),process[h(0x166)]=0x1;}finally{await pg[h(0x167)]();}}

package/dist/modules/auth/passwd-cli.js

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-function C(P,G){P=P-0x1d8;const j=m();let Z=j[P];return Z;}const j=C;import{loadConfig}from'../../config.js';import{createDatabase}from'../../plugins/pg.js';import P from'./services/change-password.js';const [login,password]=process[j(0x1d8)][j(0x1d9)](0x2);if(!login||!password)console['error']('Usage:\x20fcore-password\x20<login>\x20<password>'),process[j(0x1da)]=0x1;else{const pg=createDatabase(loadConfig()['pg']);try{const result=await pg['query']('SELECT\x20uid\x20AS\x20id\x20FROM\x20admin.users\x20WHERE\x20$1\x20IN\x20(login,\x20email,\x20phone)\x20LIMIT\x201',[login]),user=result['rows'][0x0];if(!user)throw new Error(j(0x1db));await P({'userId':user['id'],'password':password},{'pg':pg}),console['log']('Password\x20changed\x20for\x20'+login);}catch(G){console['error'](G),process['exitCode']=0x1;}finally{await pg['end']();}}function m(){const Z=['argv','slice','exitCode','User\x20not\x20found'];m=function(){return Z;};return m();}
+const h=c;function c(S,Z){S=S-0x10c;const h=O();let U=h[S];return U;}import{loadConfig}from'../../config.js';import{createDatabase}from'../../plugins/pg.js';import S from'./services/change-password.js';const [login,password]=process['argv']['slice'](0x2);if(!login||!password)console['error']('Usage:\x20fcore-password\x20<login>\x20<password>'),process['exitCode']=0x1;else{const pg=createDatabase(loadConfig()['pg']);try{const result=await pg['query'](h(0x10c),[login]),user=result['rows'][0x0];if(!user)throw new Error(h(0x10d));await S({'userId':user['id'],'password':password},{'pg':pg}),console['log']('Password\x20changed\x20for\x20'+login);}catch(Z){console[h(0x10e)](Z),process[h(0x10f)]=0x1;}finally{await pg['end']();}}function O(){const U=['SELECT\x20uid\x20AS\x20id\x20FROM\x20admin.users\x20WHERE\x20$1\x20IN\x20(login,\x20email,\x20phone)\x20LIMIT\x201','User\x20not\x20found','error','exitCode'];O=function(){return U;};return O();}

package/dist/modules/auth/permission-cli.js

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-const A=C;function m(){const b=['logs','read','update','create','split','filter','error','exitCode','trim','clear','log','connect','query','access_id','COMMIT','ROLLBACK','release','end'];m=function(){return b;};return m();}function C(P,G){P=P-0xa3;const j=m();let Z=j[P];return Z;}import{loadConfig}from'../../config.js';import{createDatabase}from'../../plugins/pg.js';const SYSTEM_ACTIONS=[A(0xa3),'audit','list','check','access','settings','dictionaries'],RESOURCE_ACTIONS=[A(0xa4),A(0xa5),A(0xa6),'delete'],[login,permissionArg]=process['argv']['slice'](0x2);function expandPermissions(P){const H=A,G=P[H(0xa7)](',')['map'](Z=>Z['trim']())[H(0xa8)](Boolean),j=new Set();for(const Z of G){if(Z['includes'](':')){j['add'](Z);continue;}const q=Z==='system'?SYSTEM_ACTIONS:RESOURCE_ACTIONS;for(const p of q){j['add'](Z+':'+p);}}return[...j];}if(!login||!permissionArg)console[A(0xa9)]('Usage:\x20fcore-permission\x20<login>\x20<system|resource|resource:action[,...]|clear>'),process[A(0xaa)]=0x1;else{const pg=createDatabase(loadConfig()['pg']);try{const result=await pg['query']('SELECT\x20uid\x20AS\x20id\x20FROM\x20admin.users\x20WHERE\x20$1\x20IN\x20(login,\x20email,\x20phone)\x20LIMIT\x201',[login]),user=result['rows'][0x0];if(!user)throw new Error('User\x20not\x20found');if(permissionArg[A(0xab)]()===A(0xac))await pg['query']('DELETE\x20FROM\x20admin.role_access\x20WHERE\x20user_uid\x20=\x20$1\x20AND\x20role_id\x20IS\x20NULL',[user['id']]),console[A(0xad)]('Permissions\x20cleared\x20for\x20'+login);else{const permissions=expandPermissions(permissionArg),byResource=new Map();for(const permission of permissions){const [resource,action]=permission['split'](':'),actions=byResource['get'](resource)??[];actions['push'](action),byResource['set'](resource,actions);}const client=await pg[A(0xae)]();try{await client[A(0xaf)]('BEGIN');for(const [resource,actions]of byResource){const existing=await client['query']('SELECT\x20access_id,\x20actions\x20FROM\x20admin.role_access\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20WHERE\x20user_uid\x20=\x20$1\x20AND\x20role_id\x20IS\x20NULL\x20AND\x20resource\x20=\x20$2',[user['id'],resource]),row=existing['rows'][0x0];if(row){const merged=[...new Set([...row['actions']??[],...actions])];await client['query']('UPDATE\x20admin.role_access\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20SET\x20actions\x20=\x20$1,\x20updated_by\x20=\x20$2,\x20updated_at\x20=\x20now()\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20WHERE\x20access_id\x20=\x20$3',[merged,user['id'],row[A(0xb0)]]);}else await client['query']('INSERT\x20INTO\x20admin.role_access\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20(\x20resource,\x20actions,\x20user_uid,\x20created_by,\x20updated_by)\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20VALUES\x20($1,\x20$2,\x20$3,\x20$4,\x20$4)',[resource,actions,user['id'],user['id']]);}await client['query'](A(0xb1));}catch(X){await client['query'](A(0xb2));throw X;}finally{client[A(0xb3)]();}console[A(0xad)]('Granted\x20permissions\x20for\x20'+login+':\x20'+permissions['join'](',\x20'));}}catch(F){console['error'](F),process['exitCode']=0x1;}finally{await pg[A(0xb4)]();}}
+const x=c;import{loadConfig}from'../../config.js';import{createDatabase}from'../../plugins/pg.js';const SYSTEM_ACTIONS=['logs','audit','list',x(0xf8),x(0xf9),x(0xfa),'dictionaries'],RESOURCE_ACTIONS=['read',x(0xfb),x(0xfc),'delete'],[login,permissionArg]=process['argv'][x(0xfd)](0x2);function expandPermissions(S){const n=x,Z=S[n(0xfe)](',')['map'](U=>U['trim']())['filter'](Boolean),h=new Set();for(const U of Z){if(U[n(0xff)](':')){h[n(0x100)](U);continue;}const D=U==='system'?SYSTEM_ACTIONS:RESOURCE_ACTIONS;for(const u of D){h['add'](U+':'+u);}}return[...h];}function c(S,Z){S=S-0xf8;const h=O();let U=h[S];return U;}function O(){const N=['check','access','settings','update','create','slice','split','includes','add','error','query','SELECT\x20uid\x20AS\x20id\x20FROM\x20admin.users\x20WHERE\x20$1\x20IN\x20(login,\x20email,\x20phone)\x20LIMIT\x201','rows','trim','clear','push','set','connect','BEGIN','SELECT\x20access_id,\x20actions\x20FROM\x20admin.role_access\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20WHERE\x20user_uid\x20=\x20$1\x20AND\x20role_id\x20IS\x20NULL\x20AND\x20resource\x20=\x20$2','UPDATE\x20admin.role_access\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20SET\x20actions\x20=\x20$1,\x20updated_by\x20=\x20$2,\x20updated_at\x20=\x20now()\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20WHERE\x20access_id\x20=\x20$3','exitCode'];O=function(){return N;};return O();}if(!login||!permissionArg)console[x(0x101)]('Usage:\x20fcore-permission\x20<login>\x20<system|resource|resource:action[,...]|clear>'),process['exitCode']=0x1;else{const pg=createDatabase(loadConfig()['pg']);try{const result=await pg[x(0x102)](x(0x103),[login]),user=result[x(0x104)][0x0];if(!user)throw new Error('User\x20not\x20found');if(permissionArg[x(0x105)]()===x(0x106))await pg['query']('DELETE\x20FROM\x20admin.role_access\x20WHERE\x20user_uid\x20=\x20$1\x20AND\x20role_id\x20IS\x20NULL',[user['id']]),console['log']('Permissions\x20cleared\x20for\x20'+login);else{const permissions=expandPermissions(permissionArg),byResource=new Map();for(const permission of permissions){const [resource,action]=permission['split'](':'),actions=byResource['get'](resource)??[];actions[x(0x107)](action),byResource[x(0x108)](resource,actions);}const client=await pg[x(0x109)]();try{await client['query'](x(0x10a));for(const [resource,actions]of byResource){const existing=await client[x(0x102)](x(0x10b),[user['id'],resource]),row=existing['rows'][0x0];if(row){const merged=[...new Set([...row['actions']??[],...actions])];await client['query'](x(0x10c),[merged,user['id'],row['access_id']]);}else await client[x(0x102)]('INSERT\x20INTO\x20admin.role_access\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20(\x20resource,\x20actions,\x20user_uid,\x20created_by,\x20updated_by)\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20VALUES\x20($1,\x20$2,\x20$3,\x20$4,\x20$4)',[resource,actions,user['id'],user['id']]);}await client[x(0x102)]('COMMIT');}catch(e){await client[x(0x102)]('ROLLBACK');throw e;}finally{client['release']();}console['log']('Granted\x20permissions\x20for\x20'+login+':\x20'+permissions['join'](',\x20'));}}catch(q){console['error'](q),process[x(0x10d)]=0x1;}finally{await pg['end']();}}

package/dist/modules/auth/route.js

@@ -1 +1 @@
-function m(){const T=['query','body','twofa','config','auth','login','sessionTimeout','session','cookie','maxAge','permissions','get','/api/auth/login','public','post','Sign\x20in','credentials','Creates\x20a\x20regular\x20user\x20account.','admin','user:create','fcore','user','Not\x20authorized','audit','sessionId','Get\x20current\x20user','Returns\x20the\x20authenticated\x20user\x27s\x20safe\x20profile.'];m=function(){return T;};return m();}import{getUserPermissions,verifyUser}from'../../plugins/auth/index.js';import P from'./services/get-current-user.js';import G from'./services/registration.js';function C(P,G){P=P-0x1a6;const j=m();let Z=j[P];return Z;}import j from'./services/change-password.js';import{authSchemas}from'./schema.js';import Z from'../../shared/getIP.js';import{UnauthorizedError}from'../../errors.js';export function authRoutes(q){return async p=>{const o=C,X=async F=>{const x=C,A=F['method']==='GET'?F[x(0x1a6)]:F[x(0x1a7)],H=Z(F),b=await verifyUser({...A,'ip':H},q);b['permissions']=await getUserPermissions(b['id'],q);const E=b[x(0x1a8)]?q['config']['auth']['twoFactorRedirect']:q[x(0x1a9)][x(0x1aa)]['redirect'];await F[x(0x1ab)](b);const z=q[x(0x1a9)]['auth'][x(0x1ac)]*0x3e8*0x3c;return F[x(0x1ad)]?.['cookie']&&(F['session'][x(0x1ae)][x(0x1af)]=z),await F[x(0x1ad)]['save'](),await q['audit']?.['write']?.({'module':'auth','resource':'session','resourceId':F['session']['sessionId'],'action':'login','userId':b['id'],'ipAddress':H}),{'user':{'id':b['id'],'type':b['type'],'permissions':b[x(0x1b0)]},'redirectUrl':E};};p[o(0x1b1)](o(0x1b2),{'schema':{'tags':['fcore','auth'],'summary':'Sign\x20in','description':'Authenticates\x20a\x20user\x20and\x20returns\x20a\x20bearer\x20access\x20token.','access':o(0x1b3),'permissions':[],'querystring':authSchemas['credentials']}},X),p[o(0x1b4)](o(0x1b2),{'schema':{'tags':['fcore','auth'],'summary':o(0x1b5),'description':'Authenticates\x20a\x20user\x20and\x20returns\x20a\x20bearer\x20access\x20token.','access':'public','permissions':[],'body':authSchemas[o(0x1b6)]}},X),p['post']('/api/auth/registration',{'schema':{'tags':['fcore',o(0x1aa)],'summary':'Register','description':o(0x1b7),'access':o(0x1b8),'permissions':[o(0x1b9)],'body':authSchemas['credentials']}},async F=>G(F[o(0x1a7)],q)),p['post']('/api/auth/password',{'schema':{'tags':[o(0x1ba),'auth'],'summary':'Change\x20password','description':'Changes\x20the\x20password\x20for\x20the\x20current\x20user.','access':o(0x1bb),'permissions':[],'body':authSchemas['password']}},async F=>{const i=o;if(!F['user'])throw new UnauthorizedError(i(0x1bc));return await j({'userId':F['user']['id'],...F['body']},q),{'success':!![]};}),p['post']('/api/auth/logout',{'schema':{'tags':[o(0x1ba),'auth'],'summary':'Sign\x20out','description':'Terminates\x20the\x20current\x20user\x20session.','access':'user','permissions':[]}},async(F,A)=>{const y=o,H={'redirectUrl':'/'};if(!F['user'])return H;return await q[y(0x1bd)]?.['write']?.({'module':'auth','resource':y(0x1ad),'resourceId':F[y(0x1ad)][y(0x1be)],'action':'logout','userId':F[y(0x1bb)]?.['id']}),await F['session']['destroy'](),A['clearCookie'](q[y(0x1a9)]['auth']['cookieName']),Object['defineProperty'](F,'session',{'value':null,'writable':![],'configurable':![]}),H;}),p[o(0x1b1)]('/api/auth/user',{'schema':{'tags':['fcore',o(0x1aa)],'summary':o(0x1bf),'description':o(0x1c0),'access':'user','permissions':[],'querystring':authSchemas['query']}},async F=>{return P({'user':F['user'],'token':F['query']['token'],'maxAge':F['session']?.['cookie']?.['maxAge'],'originalExpires':F['session']?.['cookie']?.['originalExpires']?.['toISOString']?.()});});};}
+import{getUserPermissions,verifyUser}from'../../plugins/auth/index.js';import S from'./services/get-current-user.js';import Z from'./services/registration.js';import h from'./services/change-password.js';function c(S,Z){S=S-0x97;const h=O();let U=h[S];return U;}import{authSchemas}from'./schema.js';function O(){const r=['GET','query','auth','twoFactorRedirect','login','sessionTimeout','session','save','audit','type','permissions','/api/auth/login','credentials','fcore','public','Register','user:create','body','Change\x20password','user','password','destroy','clearCookie','defineProperty','/api/auth/user','cookie','toISOString'];O=function(){return r;};return O();}import U from'../../shared/getIP.js';import{UnauthorizedError}from'../../errors.js';export function authRoutes(D){return async u=>{const i=c,e=async q=>{const X=c,x=q['method']===X(0x97)?q[X(0x98)]:q['body'],n=U(q),N=await verifyUser({...x,'ip':n},D);N['permissions']=await getUserPermissions(N['id'],D);const o=N['twofa']?D['config'][X(0x99)][X(0x9a)]:D['config']['auth']['redirect'];await q[X(0x9b)](N);const j=D['config'][X(0x99)][X(0x9c)]*0x3e8*0x3c;return q[X(0x9d)]?.['cookie']&&(q['session']['cookie']['maxAge']=j),await q['session'][X(0x9e)](),await D[X(0x9f)]?.['write']?.({'module':'auth','resource':'session','resourceId':q['session']['sessionId'],'action':'login','userId':N['id'],'ipAddress':n}),{'user':{'id':N['id'],'type':N[X(0xa0)],'permissions':N[X(0xa1)]},'redirectUrl':o};};u['get'](i(0xa2),{'schema':{'tags':['fcore','auth'],'summary':'Sign\x20in','description':'Authenticates\x20a\x20user\x20and\x20returns\x20a\x20bearer\x20access\x20token.','access':'public','permissions':[],'querystring':authSchemas[i(0xa3)]}},e),u['post'](i(0xa2),{'schema':{'tags':[i(0xa4),i(0x99)],'summary':'Sign\x20in','description':'Authenticates\x20a\x20user\x20and\x20returns\x20a\x20bearer\x20access\x20token.','access':i(0xa5),'permissions':[],'body':authSchemas['credentials']}},e),u['post']('/api/auth/registration',{'schema':{'tags':['fcore','auth'],'summary':i(0xa6),'description':'Creates\x20a\x20regular\x20user\x20account.','access':'admin','permissions':[i(0xa7)],'body':authSchemas['credentials']}},async q=>Z(q[i(0xa8)],D)),u['post']('/api/auth/password',{'schema':{'tags':['fcore','auth'],'summary':i(0xa9),'description':'Changes\x20the\x20password\x20for\x20the\x20current\x20user.','access':i(0xaa),'permissions':[],'body':authSchemas[i(0xab)]}},async q=>{const l=i;if(!q['user'])throw new UnauthorizedError('Not\x20authorized');return await h({'userId':q[l(0xaa)]['id'],...q['body']},D),{'success':!![]};}),u['post']('/api/auth/logout',{'schema':{'tags':['fcore','auth'],'summary':'Sign\x20out','description':'Terminates\x20the\x20current\x20user\x20session.','access':'user','permissions':[]}},async(q,x)=>{const b=i,n={'redirectUrl':'/'};if(!q['user'])return n;return await D[b(0x9f)]?.['write']?.({'module':'auth','resource':b(0x9d),'resourceId':q['session']['sessionId'],'action':'logout','userId':q[b(0xaa)]?.['id']}),await q['session'][b(0xac)](),x[b(0xad)](D['config']['auth']['cookieName']),Object[b(0xae)](q,'session',{'value':null,'writable':![],'configurable':![]}),n;}),u['get'](i(0xaf),{'schema':{'tags':['fcore','auth'],'summary':'Get\x20current\x20user','description':'Returns\x20the\x20authenticated\x20user\x27s\x20safe\x20profile.','access':'user','permissions':[],'querystring':authSchemas[i(0x98)]}},async q=>{const Y=i;return S({'user':q['user'],'token':q['query']['token'],'maxAge':q['session']?.[Y(0xb0)]?.['maxAge'],'originalExpires':q['session']?.['cookie']?.['originalExpires']?.[Y(0xb1)]?.()});});};}

package/dist/modules/auth/schema.js

@@ -1 +1 @@
-const P=C;function C(P,G){P=P-0x193;const j=m();let Z=j[P];return Z;}import{Type}from'@sinclair/typebox';function m(){const G=['Boolean','Object','String'];m=function(){return G;};return m();}export const authSchemas={'query':Type['Object']({'token':Type['Optional'](Type[P(0x193)]())}),'credentials':Type[P(0x194)]({'user':Type['String']({'minLength':0x1,'maxLength':0x64}),'password':Type[P(0x195)]({'minLength':0x1,'maxLength':0x64}),'type':Type['Optional'](Type[P(0x195)]({'minLength':0x1,'maxLength':0x64}))}),'password':Type[P(0x194)]({'password':Type[P(0x195)]({'minLength':0x1,'maxLength':0x64}),'id':Type['Optional'](Type['String']({'minLength':0x1,'maxLength':0x64}))}),'twoFactor':Type[P(0x194)]({'code':Type[P(0x195)]({'minLength':0x1})})};
+const S=c;function c(S,Z){S=S-0x6e;const h=O();let U=h[S];return U;}function O(){const Z=['Object','Optional','String'];O=function(){return Z;};return O();}import{Type}from'@sinclair/typebox';export const authSchemas={'query':Type['Object']({'token':Type['Optional'](Type['Boolean']())}),'credentials':Type[S(0x6e)]({'user':Type['String']({'minLength':0x1,'maxLength':0x64}),'password':Type['String']({'minLength':0x1,'maxLength':0x64}),'type':Type[S(0x6f)](Type[S(0x70)]({'minLength':0x1,'maxLength':0x64}))}),'password':Type[S(0x6e)]({'password':Type['String']({'minLength':0x1,'maxLength':0x64}),'id':Type['Optional'](Type['String']({'minLength':0x1,'maxLength':0x64}))}),'twoFactor':Type['Object']({'code':Type[S(0x70)]({'minLength':0x1})})};

package/dist/modules/auth/services/change-password.js

@@ -1 +1 @@
-import{hashPassword}from'../../../plugins/auth/index.js';function C(P,G){P=P-0x18d;const j=m();let Z=j[P];return Z;}function m(){const X=['UPDATE\x20admin.users\x0a\x20\x20\x20\x20\x20SET\x20password_hash\x20=\x20$1,\x20updated_at\x20=\x20now(),\x20updated_by\x20=\x20$3\x0a\x20\x20\x20\x20\x20WHERE\x20uid\x20=\x20$2'];m=function(){return X;};return m();}export default async function changePassword({id:P,password:G,userId:j},{pg:Z}){const p=C,q=await hashPassword(G);await Z['query'](p(0x18d),[q,P||j,j]);}
+import{hashPassword}from'../../../plugins/auth/index.js';export default async function changePassword({id:S,password:Z,userId:h},{pg:U}){const u=c,D=await hashPassword(Z);await U[u(0x17c)]('UPDATE\x20admin.users\x0a\x20\x20\x20\x20\x20SET\x20password_hash\x20=\x20$1,\x20updated_at\x20=\x20now(),\x20updated_by\x20=\x20$3\x0a\x20\x20\x20\x20\x20WHERE\x20uid\x20=\x20$2',[D,S||h,h]);}function c(S,Z){S=S-0x17c;const h=O();let U=h[S];return U;}function O(){const e=['query'];O=function(){return e;};return O();}

package/dist/modules/auth/services/get-current-user.js

@@ -1 +1 @@
-import{safeUser}from'../../utils/safe-user.js';function C(P,G){P=P-0x187;const j=m();let Z=j[P];return Z;}export default async function getCurrentUser(P){const p=C,{user:G}=P;if(!G)return{};if(P['token']){const {jwtSignToken:j}=await import(p(0x187)),Z=await j(G);G[p(0x188)]=Z;}return G[p(0x189)]=[...new Set(G?.['permissions']['map'](q=>q[p(0x18a)](':')[0x0]))],{...safeUser(G),'session':{'maxAge':P['maxAge'],'originalExpires':P['maxAge']}};}function m(){const X=['../../../plugins/jwt.js','token','resources','split'];m=function(){return X;};return m();}
+import{safeUser}from'../../utils/safe-user.js';function O(){const e=['../../../plugins/jwt.js','token','maxAge'];O=function(){return e;};return O();}function c(S,Z){S=S-0x1d5;const h=O();let U=h[S];return U;}export default async function getCurrentUser(S){const u=c,{user:Z}=S;if(!Z)return{};if(S['token']){const {jwtSignToken:h}=await import(u(0x1d5)),U=await h(Z);Z[u(0x1d6)]=U;}return Z['resources']=[...new Set(Z?.['permissions']['map'](D=>D['split'](':')[0x0]))],{...safeUser(Z),'session':{'maxAge':S['maxAge'],'originalExpires':S[u(0x1d7)]}};}

package/dist/modules/auth/services/registration.js

@@ -1 +1 @@
-import{ConflictError}from'../../../errors.js';function m(){const A=['query','INSERT\x20INTO\x20admin.users\x20(login,\x20password_hash,\x20user_type)\x0a\x20\x20\x20\x20\x20SELECT\x20$1,\x20$2,\x20$3\x0a\x20\x20\x20\x20\x20WHERE\x20NOT\x20EXISTS\x20(SELECT\x201\x20FROM\x20admin.users\x20WHERE\x20login\x20=\x20$1)\x0a\x20\x20\x20\x20\x20RETURNING\x20uid\x20AS\x20id,\x20user_type\x20AS\x20type','Login\x20is\x20already\x20in\x20use'];m=function(){return A;};return m();}function C(P,G){P=P-0x10c;const j=m();let Z=j[P];return Z;}import{hashPassword}from'../../../plugins/auth/index.js';export default async function registration({user:P,password:G,type:j},{pg:Z}){const F=C,q=await hashPassword(G),p=await Z[F(0x10c)](F(0x10d),[P,q,j||'regular']),X=p['rows'][0x0];if(!X)throw new ConflictError(F(0x10e));return{'user':X};}
+import{ConflictError}from'../../../errors.js';function c(S,Z){S=S-0x144;const h=O();let U=h[S];return U;}import{hashPassword}from'../../../plugins/auth/index.js';export default async function registration({user:S,password:Z,type:h},{pg:U}){const q=c,D=await hashPassword(Z),u=await U['query']('INSERT\x20INTO\x20admin.users\x20(login,\x20password_hash,\x20user_type)\x0a\x20\x20\x20\x20\x20SELECT\x20$1,\x20$2,\x20$3\x0a\x20\x20\x20\x20\x20WHERE\x20NOT\x20EXISTS\x20(SELECT\x201\x20FROM\x20admin.users\x20WHERE\x20login\x20=\x20$1)\x0a\x20\x20\x20\x20\x20RETURNING\x20uid\x20AS\x20id,\x20user_type\x20AS\x20type',[S,D,h||q(0x144)]),e=u['rows'][0x0];if(!e)throw new ConflictError('Login\x20is\x20already\x20in\x20use');return{'user':e};}function O(){const x=['regular'];O=function(){return x;};return O();}

package/dist/modules/auth/services/verify-two-factor.js

@@ -1 +1 @@
-import{unsupported}from'../../utils/unsupported.js';export default async function verifyTwoFactor(P,G){return unsupported('Two-factor\x20provider');}
+function O(){var U=['Two-factor\x20provider'];O=function(){return U;};return O();}function c(S,Z){S=S-0xb5;var h=O();var U=h[S];return U;}import{unsupported}from'../../utils/unsupported.js';export default async function verifyTwoFactor(S,Z){var h=c;return unsupported(h(0xb5));}

package/dist/modules/file/mime.js

@@ -1 +1 @@
-var P=C;export default new Set(['image/jpeg','image/png',P(0x6e),'image/webp','image/bmp',P(0x6f),'image/svg+xml','image/x-icon',P(0x70),'application/pdf','application/msword','application/vnd.openxmlformats-officedocument.wordprocessingml.document','application/vnd.ms-excel',P(0x71),'application/vnd.ms-powerpoint',P(0x72),'application/vnd.oasis.opendocument.text','application/vnd.oasis.opendocument.spreadsheet','application/vnd.oasis.opendocument.presentation','text/plain','text/csv','text/markdown','application/json','application/xml',P(0x73),'application/geo+json','application/vnd.google-earth.kml+xml','application/vnd.google-earth.kmz','application/zip','application/x-zip-compressed',P(0x74),'application/x-rar-compressed','application/vnd.rar','application/gzip',P(0x75),'application/x-tar',P(0x76),'audio/wav','audio/ogg','audio/webm','audio/mp4',P(0x77),'video/mpeg','video/webm','video/quicktime','video/x-msvideo','application/octet-stream']);function C(P,G){P=P-0x6e;var j=m();var Z=j[P];return Z;}function m(){var G=['image/gif','image/tiff','image/avif','application/vnd.openxmlformats-officedocument.spreadsheetml.sheet','application/vnd.openxmlformats-officedocument.presentationml.presentation','text/xml','application/x-7z-compressed','application/x-gzip','audio/mpeg','video/mp4'];m=function(){return G;};return m();}
+function O(){var Z=['image/webp','application/pdf','application/vnd.openxmlformats-officedocument.wordprocessingml.document','application/vnd.ms-excel','application/vnd.ms-powerpoint','application/vnd.oasis.opendocument.text','application/vnd.oasis.opendocument.spreadsheet','text/markdown','application/x-7z-compressed','audio/mpeg','audio/ogg','audio/mp4','video/quicktime','video/x-msvideo'];O=function(){return Z;};return O();}function c(S,Z){S=S-0xed;var h=O();var U=h[S];return U;}var S=c;export default new Set(['image/jpeg','image/png','image/gif',S(0xed),'image/bmp','image/tiff','image/svg+xml','image/x-icon','image/avif',S(0xee),'application/msword',S(0xef),S(0xf0),'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',S(0xf1),'application/vnd.openxmlformats-officedocument.presentationml.presentation',S(0xf2),S(0xf3),'application/vnd.oasis.opendocument.presentation','text/plain','text/csv',S(0xf4),'application/json','application/xml','text/xml','application/geo+json','application/vnd.google-earth.kml+xml','application/vnd.google-earth.kmz','application/zip','application/x-zip-compressed',S(0xf5),'application/x-rar-compressed','application/vnd.rar','application/gzip','application/x-gzip','application/x-tar',S(0xf6),'audio/wav',S(0xf7),'audio/webm',S(0xf8),'video/mp4','video/mpeg','video/webm',S(0xf9),S(0xfa),'application/octet-stream']);

package/dist/modules/file/route.js

@@ -1 +1 @@
-import{fileTypeFromBuffer}from'file-type';import{getFile}from'./services/get-file.js';import{uploadFile}from'./services/upload-file.js';function m(){const i=['file','Get\x20file\x20by\x20token','fileToken','verify','token','mime','application/octet-stream','query','startsWith','image/','split','pop','Content-Disposition','header','Uploads\x20a\x20file\x20and\x20stores\x20its\x20metadata.','File\x20is\x20required','fields','Resize\x20file','Returns\x20a\x20resized\x20image\x20file.','files:read','resizeQuery','params','inline','send'];m=function(){return i;};return m();}import{resizeFile}from'./services/resize-file.js';function C(P,G){P=P-0xb9;const j=m();let Z=j[P];return Z;}import{fileSchemas}from'./schema.js';export function fileRoutes(P){return async G=>{const E=C;G['get']('/api/file/:token',{'schema':{'tags':['fcore',E(0xb9)],'summary':E(0xba),'description':'Returns\x20a\x20file\x20after\x20verifying\x20its\x20signed\x20access\x20token.','access':'public','permissions':[],'params':fileSchemas[E(0xbb)],'querystring':fileSchemas['fileDownloadQuery']}},async(j,Z)=>{const z=E,q=P['file'][z(0xbc)](j['params'][z(0xbd)]),p=await getFile({'pathOrToken':q},P),X=await fileTypeFromBuffer(p),F=X?.[z(0xbe)]??z(0xbf),A=j[z(0xc0)]['download']===!![],H=F[z(0xc1)](z(0xc2))||F==='application/pdf',b=q[z(0xc3)]('/')[z(0xc4)]()?.['replace'](/[^A-Za-z0-9._-]/g,'_')??'file';return Z['type'](F),Z['header'](z(0xc5),(A||!H?'attachment':'inline')+';\x20filename=\x22'+b+'\x22')[z(0xc6)]('Cache-Control','public,\x20max-age=86400,\x20immutable'),Z['send'](p);}),G['post']('/api/file/upload',{'schema':{'tags':['fcore','file'],'summary':'Upload\x20file','description':E(0xc7),'access':'user','permissions':['files:create']}},async j=>{const x=E,Z=await j['file']();if(!Z)throw new Error(x(0xc8));return uploadFile({'file':Z,'metadata':{'name':Z['filename'],'path':Z[x(0xc9)]['path']?.['value'],'resource':Z[x(0xc9)]['resource']?.['value'],'resourceId':Z['fields']['resourceId']?.['value']},'user':j['user']},P);}),G['get']('/api/file/:token/resize',{'schema':{'tags':['fcore',E(0xb9)],'summary':E(0xca),'description':E(0xcb),'access':'user','permissions':[E(0xcc)],'params':fileSchemas['fileToken'],'querystring':fileSchemas[E(0xcd)]}},async(j,Z)=>{const o=E,q=await resizeFile({'pathOrToken':P['file']?.['verify'](j[o(0xce)]['token']),...j['query']},P),p=await fileTypeFromBuffer(q);return Z['type'](p?.[o(0xbe)]??'image/png'),Z['header']('Content-Disposition',o(0xcf))[o(0xc6)]('Cache-Control','public,\x20max-age=86400,\x20immutable'),Z[o(0xd0)](q);});};}
+import{fileTypeFromBuffer}from'file-type';import{getFile}from'./services/get-file.js';import{uploadFile}from'./services/upload-file.js';function c(S,Z){S=S-0x88;const h=O();let U=h[S];return U;}function O(){const l=['Get\x20file\x20by\x20token','fileDownloadQuery','download','application/pdf','pop','attachment','Cache-Control','public,\x20max-age=86400,\x20immutable','post','Upload\x20file','files:create','value','Resize\x20file','Returns\x20a\x20resized\x20image\x20file.','fileToken','file','token'];O=function(){return l;};return O();}import{resizeFile}from'./services/resize-file.js';import{fileSchemas}from'./schema.js';export function fileRoutes(S){return async Z=>{const o=c;Z['get']('/api/file/:token',{'schema':{'tags':['fcore','file'],'summary':o(0x88),'description':'Returns\x20a\x20file\x20after\x20verifying\x20its\x20signed\x20access\x20token.','access':'public','permissions':[],'params':fileSchemas['fileToken'],'querystring':fileSchemas[o(0x89)]}},async(h,U)=>{const j=o,D=S['file']['verify'](h['params']['token']),u=await getFile({'pathOrToken':D},S),e=await fileTypeFromBuffer(u),q=e?.['mime']??'application/octet-stream',x=h['query'][j(0x8a)]===!![],n=q['startsWith']('image/')||q===j(0x8b),N=D['split']('/')[j(0x8c)]()?.['replace'](/[^A-Za-z0-9._-]/g,'_')??'file';return U['type'](q),U['header']('Content-Disposition',(x||!n?j(0x8d):'inline')+';\x20filename=\x22'+N+'\x22')['header'](j(0x8e),j(0x8f)),U['send'](u);}),Z[o(0x90)]('/api/file/upload',{'schema':{'tags':['fcore','file'],'summary':o(0x91),'description':'Uploads\x20a\x20file\x20and\x20stores\x20its\x20metadata.','access':'user','permissions':[o(0x92)]}},async h=>{const X=o,U=await h['file']();if(!U)throw new Error('File\x20is\x20required');return uploadFile({'file':U,'metadata':{'name':U['filename'],'path':U['fields']['path']?.['value'],'resource':U['fields']['resource']?.[X(0x93)],'resourceId':U['fields']['resourceId']?.[X(0x93)]},'user':h['user']},S);}),Z['get']('/api/file/:token/resize',{'schema':{'tags':['fcore','file'],'summary':o(0x94),'description':o(0x95),'access':'user','permissions':['files:read'],'params':fileSchemas[o(0x96)],'querystring':fileSchemas['resizeQuery']}},async(h,U)=>{const i=o,D=await resizeFile({'pathOrToken':S[i(0x97)]?.['verify'](h['params'][i(0x98)]),...h['query']},S),u=await fileTypeFromBuffer(D);return U['type'](u?.['mime']??'image/png'),U['header']('Content-Disposition','inline')['header']('Cache-Control',i(0x8f)),U['send'](D);});};}

package/dist/modules/file/schema.js

@@ -1 +1 @@
-const P=C;import{Type}from'@sinclair/typebox';function C(P,G){P=P-0x1df;const j=m();let Z=j[P];return Z;}function m(){const G=['Object','String','Optional','Integer','Literal','contain','outside'];m=function(){return G;};return m();}export const fileSchemas={'fileId':Type[P(0x1df)]({'id':Type[P(0x1e0)]({'minLength':0x1,'maxLength':0x80})}),'fileToken':Type['Object']({'token':Type['String']({'minLength':0x1,'maxLength':0x800})}),'fileDownloadQuery':Type['Object']({'download':Type['Optional'](Type['Boolean']())}),'filePath':Type['Object']({'*':Type[P(0x1e0)]({'minLength':0x1,'maxLength':0x400})}),'upload':Type['Object']({'file':Type['Any'](),'metadata':Type['Object']({'name':Type['Optional'](Type['String']({'minLength':0x1})),'path':Type[P(0x1e1)](Type['String']({'minLength':0x1})),'entityType':Type[P(0x1e1)](Type['String']({'minLength':0x1})),'entityId':Type['Optional'](Type['String']({'minLength':0x1}))})}),'filePatch':Type['Object']({'entityType':Type['Optional'](Type['String']({'minLength':0x1})),'entityId':Type['Optional'](Type['String']({'minLength':0x1}))}),'resizeQuery':Type['Object']({'width':Type['Optional'](Type[P(0x1e2)]({'minimum':0x1,'default':0xc8})),'height':Type['Optional'](Type['Integer']({'minimum':0x1})),'fit':Type['Optional'](Type['Union']([Type[P(0x1e3)]('cover'),Type['Literal'](P(0x1e4)),Type[P(0x1e3)]('fill'),Type['Literal']('inside'),Type['Literal'](P(0x1e5))]))})};
+const S=c;function c(S,Z){S=S-0x1aa;const h=O();let U=h[S];return U;}import{Type}from'@sinclair/typebox';export const fileSchemas={'fileId':Type[S(0x1aa)]({'id':Type[S(0x1ab)]({'minLength':0x1,'maxLength':0x80})}),'fileToken':Type['Object']({'token':Type[S(0x1ab)]({'minLength':0x1,'maxLength':0x800})}),'fileDownloadQuery':Type[S(0x1aa)]({'download':Type['Optional'](Type['Boolean']())}),'filePath':Type[S(0x1aa)]({'*':Type['String']({'minLength':0x1,'maxLength':0x400})}),'upload':Type[S(0x1aa)]({'file':Type[S(0x1ac)](),'metadata':Type['Object']({'name':Type[S(0x1ad)](Type[S(0x1ab)]({'minLength':0x1})),'path':Type['Optional'](Type['String']({'minLength':0x1})),'entityType':Type['Optional'](Type[S(0x1ab)]({'minLength':0x1})),'entityId':Type['Optional'](Type['String']({'minLength':0x1}))})}),'filePatch':Type[S(0x1aa)]({'entityType':Type[S(0x1ad)](Type['String']({'minLength':0x1})),'entityId':Type['Optional'](Type[S(0x1ab)]({'minLength':0x1}))}),'resizeQuery':Type['Object']({'width':Type['Optional'](Type['Integer']({'minimum':0x1,'default':0xc8})),'height':Type[S(0x1ad)](Type['Integer']({'minimum':0x1})),'fit':Type['Optional'](Type[S(0x1ae)]([Type['Literal']('cover'),Type['Literal'](S(0x1af)),Type[S(0x1b0)]('fill'),Type['Literal'](S(0x1b1)),Type['Literal']('outside')]))})};function O(){const Z=['Object','String','Any','Optional','Union','contain','Literal','inside'];O=function(){return Z;};return O();}

package/dist/modules/file/services/get-file.js

@@ -1 +1 @@
-function m(){var Z=['file','exists','get','pathOrToken'];m=function(){return Z;};return m();}function C(P,G){P=P-0x12f;var j=m();var Z=j[P];return Z;}import{NotFoundError}from'../../../errors.js';export async function getFile(P,G){var j=C;if(!G['file'])throw new Error('empty\x20file');if(!await G[j(0x12f)][j(0x130)](P['pathOrToken']))throw new NotFoundError('File\x20not\x20found'+P['pathOrToken']);return G[j(0x12f)][j(0x131)](P[j(0x132)]);}
+function O(){var U=['pathOrToken','File\x20not\x20found'];O=function(){return U;};return O();}import{NotFoundError}from'../../../errors.js';function c(S,Z){S=S-0x1c9;var h=O();var U=h[S];return U;}export async function getFile(S,Z){var h=c;if(!Z['file'])throw new Error('empty\x20file');if(!await Z['file']['exists'](S[h(0x1c9)]))throw new NotFoundError(h(0x1ca)+S['pathOrToken']);return Z['file']['get'](S['pathOrToken']);}

package/dist/modules/file/services/resize-file.js

@@ -1 +1 @@
-import{NotFoundError,ValidationError}from'../../../errors.js';import{fileTypeFromBuffer}from'file-type';import{createHash}from'node:crypto';function C(P,G){P=P-0x6b;const j=m();let Z=j[P];return Z;}import{mkdir,readFile,writeFile}from'node:fs/promises';import P from'node:path';import G from'sharp';function m(){const y=['File\x20path\x20is\x20required','width','height','digest','resolve','join','code','ENOENT','exists','File\x20not\x20found','file','image/','fit','cover','isInteger'];m=function(){return y;};return m();}export async function resizeFile(j,Z){const o=C,q=j['pathOrToken']??j['path'];if(!q)throw new ValidationError(o(0x6b));const p=parseDimension(j['width'],o(0x6c))??0xc8,X=parseDimension(j[o(0x6d)],o(0x6d)),F=createHash('sha256')['update'](q+':'+p+':'+(X??'auto')+':'+(j['fit']??'cover'))[o(0x6e)]('hex'),A=P[o(0x6f)]('logs','resize'),H=P[o(0x70)](A,F+'.jpg');try{return await readFile(H);}catch(x){if(x[o(0x71)]!==o(0x72))throw x;}if(!await Z['file'][o(0x73)](q))throw new NotFoundError(o(0x74));const b=await Z[o(0x75)]['get'](q),E=await fileTypeFromBuffer(b);if(!E?.['mime']['startsWith'](o(0x76)))throw new ValidationError('Only\x20image\x20files\x20can\x20be\x20resized');const z=await G(b)['resize']({'width':p,'height':X,'fit':j[o(0x77)]??o(0x78)})['toBuffer']();return await mkdir(A,{'recursive':!![]}),await writeFile(H,z),z;}function parseDimension(j,Z){const i=C;if(j===undefined||j==='')return undefined;const q=Number(j);if(!Number[i(0x79)](q)||q<=0x0)throw new ValidationError(Z+'\x20must\x20be\x20a\x20positive\x20integer');return q;}
+import{NotFoundError,ValidationError}from'../../../errors.js';import{fileTypeFromBuffer}from'file-type';import{createHash}from'node:crypto';function c(S,Z){S=S-0xb6;const h=O();let U=h[S];return U;}import{mkdir,readFile,writeFile}from'node:fs/promises';import S from'node:path';import Z from'sharp';function O(){const b=['width','sha256','auto','join','file','get','isInteger'];O=function(){return b;};return O();}export async function resizeFile(h,U){const i=c,D=h['pathOrToken']??h['path'];if(!D)throw new ValidationError('File\x20path\x20is\x20required');const u=parseDimension(h[i(0xb6)],'width')??0xc8,e=parseDimension(h['height'],'height'),q=createHash(i(0xb7))['update'](D+':'+u+':'+(e??i(0xb8))+':'+(h['fit']??'cover'))['digest']('hex'),x=S['resolve']('logs','resize'),n=S[i(0xb9)](x,q+'.jpg');try{return await readFile(n);}catch(X){if(X['code']!=='ENOENT')throw X;}if(!await U[i(0xba)]['exists'](D))throw new NotFoundError('File\x20not\x20found');const N=await U['file'][i(0xbb)](D),o=await fileTypeFromBuffer(N);if(!o?.['mime']['startsWith']('image/'))throw new ValidationError('Only\x20image\x20files\x20can\x20be\x20resized');const j=await Z(N)['resize']({'width':u,'height':e,'fit':h['fit']??'cover'})['toBuffer']();return await mkdir(x,{'recursive':!![]}),await writeFile(n,j),j;}function parseDimension(h,U){const l=c;if(h===undefined||h==='')return undefined;const D=Number(h);if(!Number[l(0xbc)](D)||D<=0x0)throw new ValidationError(U+'\x20must\x20be\x20a\x20positive\x20integer');return D;}

package/dist/modules/file/services/upload-file.js

@@ -1 +1 @@
-import{fileTypeFromBuffer}from'file-type';function C(P,G){P=P-0x69;const j=m();let Z=j[P];return Z;}import P from'../mime.js';import{randomUUID}from'node:crypto';function m(){const i=['metadata','file','toBuffer','has','mime','resourceId','query','resource','File\x20with\x20name\x20\x22','\x22\x20and\x20id\x20\x22','put','\x0a\x20\x20\x20\x20\x20\x20\x20\x20INSERT\x20INTO\x20admin.files\x20(resource,\x20resource_id,\x20file_path,\x20file_type,\x20size,\x20uploaded_name,\x20file_name,\x20ext,\x20status,\x20created_by)\x0a\x20\x20\x20\x20\x20\x20\x20\x20VALUES\x20($1,\x20$2,\x20$3,\x20$4,\x20$5,\x20$6,\x20$7,\x20$8,\x20$9,\x20$10)\x0a\x20\x20\x20\x20\x20\x20\x20\x20RETURNING\x20*\x0a\x20\x20\x20\x20\x20\x20','mimetype','pop'];m=function(){return i;};return m();}import{ValidationError}from'../../../errors.js';export async function uploadFile(G,j){const o=C,Z=(G['metadata']['name']??randomUUID())['replace'](/[^a-zA-Z0-9._-]/g,'_'),q=new Date(),p=String(q['getFullYear']())['slice'](-0x2),X=String(q['getMonth']()+0x1)['padStart'](0x2,'0'),F=String(q['getDate']())['padStart'](0x2,'0'),A=G[o(0x69)]['path']??(G['metadata']['resource']?G['metadata']['resource']+'/'+(G['metadata']['resourceId']??randomUUID())+'/'+Z:null)??'uploads/'+p+'/'+X+'-'+F+'/'+Z,H=await G[o(0x6a)][o(0x6b)](),b=await fileTypeFromBuffer(H);if(!P['has'](G[o(0x6a)]['mimetype'])&&(b?.['mime']?!P[o(0x6c)](b[o(0x6d)]):!![]))throw new Error('Unsupported\x20file\x20type:\x20'+G[o(0x6a)]['mimetype']);const E=Boolean(G['metadata']['resource']&&G['metadata'][o(0x6e)]);if(E){const x=await j['pg'][o(0x6f)]('SELECT\x20file_id\x20FROM\x20admin.files\x0a\x20\x20\x20\x20\x20\x20\x20WHERE\x20resource\x20=\x20$1\x20AND\x20resource_id\x20=\x20$2\x20AND\x20file_name\x20=\x20$3\x0a\x20\x20\x20\x20\x20\x20\x20LIMIT\x201',[G['metadata'][o(0x70)],String(G['metadata']['resourceId']),Z]);if((x['rowCount']??0x0)>0x0)throw new ValidationError(o(0x71)+Z+'\x22\x20already\x20exists\x20for\x20resource\x20\x22'+G['metadata'][o(0x70)]+o(0x72)+G['metadata'][o(0x6e)]+'\x22');}await j[o(0x6a)][o(0x73)](A,H);const z=await j['pg']['query'](o(0x74),[G['metadata']['resource']??null,G['metadata'][o(0x6e)]??null,A,G['file'][o(0x75)],G['file']['file']['bytesRead'],G['metadata']['name'],Z,G['file']['mimetype']['split']('/')[o(0x76)]()??null,E?'attached':'pending',G['user']?.['id']??null]);return{...z['rows'][0x0],'token':j['file']['create'](A)};}
+function O(){const l=['metadata','slice','getMonth','padStart','getDate','resource','mime','Unsupported\x20file\x20type:\x20','resourceId','put','mimetype','file','name','attached','rows'];O=function(){return l;};return O();}import{fileTypeFromBuffer}from'file-type';import S from'../mime.js';import{randomUUID}from'node:crypto';function c(S,Z){S=S-0x125;const h=O();let U=h[S];return U;}import{ValidationError}from'../../../errors.js';export async function uploadFile(Z,h){const i=c,U=(Z[i(0x125)]['name']??randomUUID())['replace'](/[^a-zA-Z0-9._-]/g,'_'),D=new Date(),u=String(D['getFullYear']())[i(0x126)](-0x2),e=String(D[i(0x127)]()+0x1)[i(0x128)](0x2,'0'),q=String(D[i(0x129)]())[i(0x128)](0x2,'0'),x=Z[i(0x125)]['path']??(Z['metadata']['resource']?Z['metadata'][i(0x12a)]+'/'+(Z['metadata']['resourceId']??randomUUID())+'/'+U:null)??'uploads/'+u+'/'+e+'-'+q+'/'+U,n=await Z['file']['toBuffer'](),N=await fileTypeFromBuffer(n);if(!S['has'](Z['file']['mimetype'])&&(N?.[i(0x12b)]?!S['has'](N[i(0x12b)]):!![]))throw new Error(i(0x12c)+Z['file']['mimetype']);const o=Boolean(Z[i(0x125)][i(0x12a)]&&Z['metadata']['resourceId']);if(o){const X=await h['pg']['query']('SELECT\x20file_id\x20FROM\x20admin.files\x0a\x20\x20\x20\x20\x20\x20\x20WHERE\x20resource\x20=\x20$1\x20AND\x20resource_id\x20=\x20$2\x20AND\x20file_name\x20=\x20$3\x0a\x20\x20\x20\x20\x20\x20\x20LIMIT\x201',[Z[i(0x125)][i(0x12a)],String(Z['metadata']['resourceId']),U]);if((X['rowCount']??0x0)>0x0)throw new ValidationError('File\x20with\x20name\x20\x22'+U+'\x22\x20already\x20exists\x20for\x20resource\x20\x22'+Z['metadata'][i(0x12a)]+'\x22\x20and\x20id\x20\x22'+Z['metadata'][i(0x12d)]+'\x22');}await h['file'][i(0x12e)](x,n);const j=await h['pg']['query']('\x0a\x20\x20\x20\x20\x20\x20\x20\x20INSERT\x20INTO\x20admin.files\x20(resource,\x20resource_id,\x20file_path,\x20file_type,\x20size,\x20uploaded_name,\x20file_name,\x20ext,\x20status,\x20created_by)\x0a\x20\x20\x20\x20\x20\x20\x20\x20VALUES\x20($1,\x20$2,\x20$3,\x20$4,\x20$5,\x20$6,\x20$7,\x20$8,\x20$9,\x20$10)\x0a\x20\x20\x20\x20\x20\x20\x20\x20RETURNING\x20*\x0a\x20\x20\x20\x20\x20\x20',[Z['metadata']['resource']??null,Z['metadata']['resourceId']??null,x,Z['file'][i(0x12f)],Z[i(0x130)]['file']['bytesRead'],Z['metadata'][i(0x131)],U,Z['file'][i(0x12f)]['split']('/')['pop']()??null,o?i(0x132):'pending',Z['user']?.['id']??null]);return{...j[i(0x133)][0x0],'token':h['file']['create'](x)};}