@openinc/parse-server-opendash 4.0.39 → 4.0.41

package/README.md

@@ -29,5 +29,6 @@ For a full list of options see the file at [CONFIG.md](https://github.com/open-i
 
 ## Development
 
+
 See the file at [DEVELOPMENT.md](https://github.com/open-inc/node-parse-server-opendash/blob/master/DEVELOPMENT.md)
 

package/dist/featuremap.json

@@ -18,6 +18,7 @@
     "OD3_Config": "CORE",
     "OD3_Contact": "CORE",
     "OD3_Core_Email": "CORE",
+    "OD3_Core_RequestTemplate": "CORE",
     "OD3_Core_Token": "CORE",
     "OD3_Dashboard": "MONITORING",
     "OD3_Documentation_Category": "DOCUMENTATION",

package/dist/functions/openinc-proxy-request-by-id.d.ts

@@ -0,0 +1,5 @@
+import { ProxyRequestParams } from "./openinc-proxy-request.common.js";
+export type ProxyRequestByIdParams = ProxyRequestParams & {
+    id: string;
+};
+export declare function init(name: string): Promise<void>;

package/dist/functions/openinc-proxy-request-by-id.js

@@ -0,0 +1,21 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.init = init;
+const node_1 = __importDefault(require("parse/node"));
+const openinc_proxy_request_common_js_1 = require("./openinc-proxy-request.common.js");
+async function init(name) {
+    node_1.default.Cloud.define(name, handleRequest, {
+        requireUser: true,
+        fields: ["id"],
+    });
+}
+async function handleRequest(request) {
+    const auth = request.master
+        ? { useMasterKey: true }
+        : { sessionToken: request.user?.getSessionToken() ?? undefined };
+    const template = await (0, openinc_proxy_request_common_js_1.findTemplateById)(request.params.id, auth);
+    return await (0, openinc_proxy_request_common_js_1.executeTemplate)(template, request.params);
+}

package/dist/functions/openinc-proxy-request.common.d.ts

@@ -0,0 +1,42 @@
+import { Core_RequestTemplate } from "../types/index.js";
+export interface ProxyRequestParams {
+    method?: string;
+    path?: string;
+    query?: Record<string, string>;
+    headers?: Record<string, string>;
+    body?: unknown;
+    placeholders?: Record<string, string>;
+}
+export interface ProxyRequestResult {
+    success: boolean;
+    status: number;
+    statusText: string;
+    headers: Record<string, string>;
+    body: unknown;
+}
+export interface ProxyAuthOptions {
+    sessionToken?: string;
+    useMasterKey?: boolean;
+}
+/**
+ * Finds the request template with the given identifier that is visible to the
+ * caller (ACL check via the caller's credentials) and has the highest
+ * priority. The returned object is re-fetched with the master key, so it
+ * includes the protected fields (secrets, headers, query, body).
+ */
+export declare function findTemplateByIdentifier(identifier: string, auth: ProxyAuthOptions): Promise<Core_RequestTemplate>;
+/**
+ * Finds the request template with the given objectId, if the caller's ACLs
+ * allow reading it. The returned object is re-fetched with the master key, so
+ * it includes the protected fields (secrets, headers, query, body).
+ */
+export declare function findTemplateById(id: string, auth: ProxyAuthOptions): Promise<Core_RequestTemplate>;
+/**
+ * Executes the request described by the template, merged with the caller
+ * provided request parts. Template values always win over caller values, so
+ * callers cannot override backend provided credentials. Placeholders
+ * ({{secrets.NAME}} and {{params.NAME}}) are only resolved inside template
+ * owned values, never inside caller input, so secrets cannot be exfiltrated
+ * by the caller.
+ */
+export declare function executeTemplate(template: Core_RequestTemplate, params: ProxyRequestParams): Promise<ProxyRequestResult>;

package/dist/functions/openinc-proxy-request.common.js

@@ -0,0 +1,230 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findTemplateByIdentifier = findTemplateByIdentifier;
+exports.findTemplateById = findTemplateById;
+exports.executeTemplate = executeTemplate;
+const node_1 = __importDefault(require("parse/node"));
+const index_js_1 = require("../types/index.js");
+const HTTP_METHODS = [
+    "GET",
+    "HEAD",
+    "POST",
+    "PUT",
+    "PATCH",
+    "DELETE",
+    "OPTIONS",
+];
+const METHODS_WITHOUT_BODY = ["GET", "HEAD"];
+const DEFAULT_TIMEOUT = 30_000;
+/**
+ * Finds the request template with the given identifier that is visible to the
+ * caller (ACL check via the caller's credentials) and has the highest
+ * priority. The returned object is re-fetched with the master key, so it
+ * includes the protected fields (secrets, headers, query, body).
+ */
+async function findTemplateByIdentifier(identifier, auth) {
+    const visible = await new node_1.default.Query(index_js_1.Core_RequestTemplate)
+        .equalTo("identifier", identifier)
+        .descending("priority")
+        .addAscending("createdAt")
+        .first(auth);
+    if (!visible) {
+        throw new node_1.default.Error(node_1.default.Error.OBJECT_NOT_FOUND, `No request template found for identifier "${identifier}".`);
+    }
+    return await fetchTemplateWithMasterKey(visible.id);
+}
+/**
+ * Finds the request template with the given objectId, if the caller's ACLs
+ * allow reading it. The returned object is re-fetched with the master key, so
+ * it includes the protected fields (secrets, headers, query, body).
+ */
+async function findTemplateById(id, auth) {
+    const visible = await new node_1.default.Query(index_js_1.Core_RequestTemplate)
+        .equalTo("objectId", id)
+        .first(auth);
+    if (!visible) {
+        throw new node_1.default.Error(node_1.default.Error.OBJECT_NOT_FOUND, `No request template found for id "${id}".`);
+    }
+    return await fetchTemplateWithMasterKey(visible.id);
+}
+/**
+ * Executes the request described by the template, merged with the caller
+ * provided request parts. Template values always win over caller values, so
+ * callers cannot override backend provided credentials. Placeholders
+ * ({{secrets.NAME}} and {{params.NAME}}) are only resolved inside template
+ * owned values, never inside caller input, so secrets cannot be exfiltrated
+ * by the caller.
+ */
+async function executeTemplate(template, params) {
+    const context = {
+        secrets: asRecord(template.get("secrets")),
+        params: params.placeholders ?? {},
+    };
+    const method = resolveMethod(template, params.method);
+    const url = buildUrl(template, params, context);
+    const headers = buildHeaders(template, params, context);
+    const body = buildBody(template, params, context, method, headers);
+    const timeout = template.get("timeout") ?? DEFAULT_TIMEOUT;
+    const response = await fetch(url, {
+        method,
+        headers,
+        body,
+        signal: AbortSignal.timeout(timeout),
+    });
+    return {
+        success: response.ok,
+        status: response.status,
+        statusText: response.statusText,
+        headers: Object.fromEntries(response.headers.entries()),
+        body: await parseResponseBody(response),
+    };
+}
+async function fetchTemplateWithMasterKey(id) {
+    return await new node_1.default.Query(index_js_1.Core_RequestTemplate).get(id, {
+        useMasterKey: true,
+    });
+}
+function resolveMethod(template, requested) {
+    const forced = template.get("method");
+    const method = String(forced || requested || "GET").toUpperCase();
+    if (!HTTP_METHODS.includes(method)) {
+        throw new node_1.default.Error(node_1.default.Error.VALIDATION_ERROR, `Unsupported HTTP method "${method}".`);
+    }
+    if (forced) {
+        return method;
+    }
+    const allowed = template.get("allowedMethods");
+    if (Array.isArray(allowed) && allowed.length > 0) {
+        const allowedUpper = allowed.map((entry) => String(entry).toUpperCase());
+        if (!allowedUpper.includes(method)) {
+            throw new node_1.default.Error(node_1.default.Error.OPERATION_FORBIDDEN, `HTTP method "${method}" is not allowed by this request template.`);
+        }
+    }
+    return method;
+}
+function buildUrl(template, params, context) {
+    let raw = resolvePlaceholders(template.get("url"), context);
+    if (params.path) {
+        if (template.get("allowPath") !== true) {
+            throw new node_1.default.Error(node_1.default.Error.OPERATION_FORBIDDEN, "This request template does not allow a custom path.");
+        }
+        raw = joinUrl(raw, params.path);
+    }
+    const url = parseUrl(raw);
+    for (const [key, value] of Object.entries(params.query ?? {})) {
+        url.searchParams.set(key, String(value));
+    }
+    const templateQuery = resolveDeep(asRecord(template.get("query")), context);
+    for (const [key, value] of Object.entries(templateQuery)) {
+        url.searchParams.set(key, String(value));
+    }
+    return url.toString();
+}
+function buildHeaders(template, params, context) {
+    const headers = new Headers();
+    for (const [key, value] of Object.entries(params.headers ?? {})) {
+        headers.set(key, String(value));
+    }
+    const templateHeaders = resolveDeep(asRecord(template.get("headers")), context);
+    for (const [key, value] of Object.entries(templateHeaders)) {
+        headers.set(key, String(value));
+    }
+    return headers;
+}
+function buildBody(template, params, context, method, headers) {
+    if (METHODS_WITHOUT_BODY.includes(method)) {
+        return undefined;
+    }
+    const templateBody = template.get("body")
+        ? resolveDeep(asRecord(template.get("body")), context)
+        : undefined;
+    const body = mergeBodies(params.body, templateBody);
+    if (body === undefined) {
+        return undefined;
+    }
+    if (typeof body === "string") {
+        return body;
+    }
+    if (!headers.has("content-type")) {
+        headers.set("content-type", "application/json");
+    }
+    return JSON.stringify(body);
+}
+/**
+ * Deep merges the template body into the caller body. On conflicts the
+ * template always wins; plain objects are merged recursively, everything else
+ * (arrays, strings, numbers, ...) is replaced.
+ */
+function mergeBodies(callerBody, templateBody) {
+    if (templateBody === undefined) {
+        return callerBody;
+    }
+    if (!isPlainObject(callerBody) || !isPlainObject(templateBody)) {
+        return templateBody;
+    }
+    const result = { ...callerBody };
+    for (const [key, value] of Object.entries(templateBody)) {
+        result[key] = mergeBodies(result[key], value);
+    }
+    return result;
+}
+function resolvePlaceholders(input, context) {
+    return input.replace(/\{\{\s*(secrets|params)\.([\w.-]+)\s*\}\}/g, (match, scope, key) => {
+        const source = scope === "secrets" ? context.secrets : context.params;
+        const value = source[key];
+        if (value === undefined || value === null) {
+            throw new node_1.default.Error(node_1.default.Error.VALIDATION_ERROR, `Unresolved placeholder ${JSON.stringify(match)} in request template.`);
+        }
+        return String(value);
+    });
+}
+function resolveDeep(value, context) {
+    if (typeof value === "string") {
+        return resolvePlaceholders(value, context);
+    }
+    if (Array.isArray(value)) {
+        return value.map((entry) => resolveDeep(entry, context));
+    }
+    if (isPlainObject(value)) {
+        return Object.fromEntries(Object.entries(value).map(([key, entry]) => [
+            key,
+            resolveDeep(entry, context),
+        ]));
+    }
+    return value;
+}
+async function parseResponseBody(response) {
+    const text = await response.text();
+    const contentType = response.headers.get("content-type") ?? "";
+    if (!contentType.includes("json")) {
+        return text;
+    }
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+}
+function parseUrl(raw) {
+    try {
+        return new URL(raw);
+    }
+    catch {
+        throw new node_1.default.Error(node_1.default.Error.VALIDATION_ERROR, `Request template contains an invalid URL.`);
+    }
+}
+function joinUrl(base, path) {
+    const trimmedBase = base.endsWith("/") ? base.slice(0, -1) : base;
+    const trimmedPath = path.startsWith("/") ? path : `/${path}`;
+    return trimmedBase + trimmedPath;
+}
+function asRecord(value) {
+    return isPlainObject(value) ? value : {};
+}
+function isPlainObject(value) {
+    return (typeof value === "object" && value !== null && !Array.isArray(value));
+}

package/dist/functions/openinc-proxy-request.d.ts

@@ -0,0 +1,5 @@
+import { ProxyRequestParams } from "./openinc-proxy-request.common.js";
+export type ProxyRequestByIdentifierParams = ProxyRequestParams & {
+    identifier: string;
+};
+export declare function init(name: string): Promise<void>;

package/dist/functions/openinc-proxy-request.js

@@ -0,0 +1,21 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.init = init;
+const node_1 = __importDefault(require("parse/node"));
+const openinc_proxy_request_common_js_1 = require("./openinc-proxy-request.common.js");
+async function init(name) {
+    node_1.default.Cloud.define(name, handleRequest, {
+        requireUser: true,
+        fields: ["identifier"],
+    });
+}
+async function handleRequest(request) {
+    const auth = request.master
+        ? { useMasterKey: true }
+        : { sessionToken: request.user?.getSessionToken() ?? undefined };
+    const template = await (0, openinc_proxy_request_common_js_1.findTemplateByIdentifier)(request.params.identifier, auth);
+    return await (0, openinc_proxy_request_common_js_1.executeTemplate)(template, request.params);
+}

package/dist/hooks/Core_RequestTemplate.d.ts

@@ -0,0 +1 @@
+export declare function init(): Promise<void>;

package/dist/hooks/Core_RequestTemplate.js

@@ -0,0 +1,24 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.init = init;
+const node_1 = __importDefault(require("parse/node"));
+const index_js_1 = require("../features/schema/index.js");
+const index_js_2 = require("../types/index.js");
+async function init() {
+    (0, index_js_1.beforeSaveHook)(index_js_2.Core_RequestTemplate, async (request) => {
+        const { object } = request;
+        await (0, index_js_1.defaultHandler)(request);
+        await (0, index_js_1.defaultAclHandler)(request);
+        const identifier = object.get("identifier");
+        if (typeof identifier !== "string" || identifier.trim() === "") {
+            throw new node_1.default.Error(node_1.default.Error.VALIDATION_ERROR, "Field 'identifier' must be a non-empty string.");
+        }
+        const url = object.get("url");
+        if (typeof url !== "string" || url.trim() === "") {
+            throw new node_1.default.Error(node_1.default.Error.VALIDATION_ERROR, "Field 'url' must be a non-empty string.");
+        }
+    });
+}

package/dist/types/Core_RequestTemplate.d.ts

@@ -0,0 +1,55 @@
+import Parse from "parse/node";
+import type { Tenant } from "./Tenant";
+import type { _User } from "./_User";
+export interface Core_RequestTemplateAttributes {
+    id: string;
+    objectId: string;
+    createdAt: Date;
+    updatedAt: Date;
+    identifier: string;
+    priority: number;
+    description?: string | undefined;
+    url: string;
+    method?: string | undefined;
+    allowedMethods?: any[] | undefined;
+    allowPath?: boolean | undefined;
+    headers?: any;
+    query?: any;
+    body?: any;
+    secrets?: any;
+    timeout?: number | undefined;
+    tenant?: Tenant | undefined;
+    user?: _User | undefined;
+}
+export declare class Core_RequestTemplate extends Parse.Object<Core_RequestTemplateAttributes> {
+    static className: string;
+    constructor(data?: Partial<Core_RequestTemplateAttributes>);
+    get identifier(): string;
+    set identifier(value: string);
+    get priority(): number;
+    set priority(value: number);
+    get description(): string | undefined;
+    set description(value: string | undefined);
+    get url(): string;
+    set url(value: string);
+    get method(): string | undefined;
+    set method(value: string | undefined);
+    get allowedMethods(): any[] | undefined;
+    set allowedMethods(value: any[] | undefined);
+    get allowPath(): boolean | undefined;
+    set allowPath(value: boolean | undefined);
+    get headers(): any;
+    set headers(value: any);
+    get query(): any;
+    set query(value: any);
+    get body(): any;
+    set body(value: any);
+    get secrets(): any;
+    set secrets(value: any);
+    get timeout(): number | undefined;
+    set timeout(value: number | undefined);
+    get tenant(): Tenant | undefined;
+    set tenant(value: Tenant | undefined);
+    get user(): _User | undefined;
+    set user(value: _User | undefined);
+}

package/dist/types/Core_RequestTemplate.js

@@ -0,0 +1,99 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Core_RequestTemplate = void 0;
+const node_1 = __importDefault(require("parse/node"));
+class Core_RequestTemplate extends node_1.default.Object {
+    static className = "OD3_Core_RequestTemplate";
+    constructor(data) {
+        super("OD3_Core_RequestTemplate", data);
+    }
+    get identifier() {
+        return super.get("identifier");
+    }
+    set identifier(value) {
+        super.set("identifier", value);
+    }
+    get priority() {
+        return super.get("priority");
+    }
+    set priority(value) {
+        super.set("priority", value);
+    }
+    get description() {
+        return super.get("description");
+    }
+    set description(value) {
+        super.set("description", value);
+    }
+    get url() {
+        return super.get("url");
+    }
+    set url(value) {
+        super.set("url", value);
+    }
+    get method() {
+        return super.get("method");
+    }
+    set method(value) {
+        super.set("method", value);
+    }
+    get allowedMethods() {
+        return super.get("allowedMethods");
+    }
+    set allowedMethods(value) {
+        super.set("allowedMethods", value);
+    }
+    get allowPath() {
+        return super.get("allowPath");
+    }
+    set allowPath(value) {
+        super.set("allowPath", value);
+    }
+    get headers() {
+        return super.get("headers");
+    }
+    set headers(value) {
+        super.set("headers", value);
+    }
+    get query() {
+        return super.get("query");
+    }
+    set query(value) {
+        super.set("query", value);
+    }
+    get body() {
+        return super.get("body");
+    }
+    set body(value) {
+        super.set("body", value);
+    }
+    get secrets() {
+        return super.get("secrets");
+    }
+    set secrets(value) {
+        super.set("secrets", value);
+    }
+    get timeout() {
+        return super.get("timeout");
+    }
+    set timeout(value) {
+        super.set("timeout", value);
+    }
+    get tenant() {
+        return super.get("tenant");
+    }
+    set tenant(value) {
+        super.set("tenant", value);
+    }
+    get user() {
+        return super.get("user");
+    }
+    set user(value) {
+        super.set("user", value);
+    }
+}
+exports.Core_RequestTemplate = Core_RequestTemplate;
+node_1.default.Object.registerSubclass("OD3_Core_RequestTemplate", Core_RequestTemplate);

package/dist/types/index.d.ts

@@ -36,6 +36,8 @@ export { Contact } from "./Contact";
 export type { ContactAttributes } from "./Contact";
 export { Core_Email } from "./Core_Email";
 export type { Core_EmailAttributes } from "./Core_Email";
+export { Core_RequestTemplate } from "./Core_RequestTemplate";
+export type { Core_RequestTemplateAttributes } from "./Core_RequestTemplate";
 export { Core_Token } from "./Core_Token";
 export type { Core_TokenAttributes } from "./Core_Token";
 export { Dashboard } from "./Dashboard";

package/dist/types/index.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.MES_OrderPlan = exports.MES_Order = exports.MES_Article = exports.Log = exports.Language = exports.Knowledge_Video = exports.Knowledge_DocumentPage = exports.Knowledge_Document = exports.Knowledge_ChatMessage = exports.Knowledge_Chat = exports.Knowledge_Category = exports.Knowledge_Article = exports.GTFS_Wheelchair_Boarding = exports.GTFS_Wheelchair_Accessible = exports.GTFS_Trip = exports.GTFS_Stop_Times = exports.GTFS_Stop = exports.GTFS_Route_Type = exports.GTFS_Route = exports.GTFS_Location_Type = exports.GTFS_Level = exports.GTFS_Direction = exports.GTFS_Calendar = exports.GTFS_Bikes_Allowed = exports.GTFS_Agency = exports.EMS_ChargePoint = exports.Documentation_Document = exports.Documentation_Config = exports.Documentation_Category = exports.Dashboard = exports.Core_Token = exports.Core_Email = exports.Contact = exports.Config = exports.Company = exports.Changelog = exports.BDE_WorkTime = exports.BDE_WorkOrder = exports.BDE_Unit = exports.BDE_Result = exports.BDE_Page = exports.BDE_ListEntry = exports.BDE_List = exports.BDE_Form = exports.BDE_Article = exports.Attachment = exports.Assets = exports.AlarmWebhook = exports.AlarmAction = exports.Alarm = void 0;
-exports.Push = exports.Permission = exports.OWPlcItem = exports.OWPlcDevice = exports.Notification_Setting = exports.Notification = exports.NavigationItem = exports.NavigationGroup = exports.Monitoring_Slideshow = exports.Monitoring_ReportImage = exports.Monitoring_ParseTableSensor = exports.Monitoring_Jobs = exports.Monitoring_DataHierachies = exports.Meta_Entry = exports.Meta_Config = exports.Maintenance_Ticket_Title = exports.Maintenance_Ticket_Source = exports.Maintenance_Ticket_QR_Code = exports.Maintenance_Ticket_Project = exports.Maintenance_Ticket_Material = exports.Maintenance_Ticket_Kanban_State_Current = exports.Maintenance_Ticket_Kanban_State = exports.Maintenance_Ticket_Issuecategory = exports.Maintenance_Ticket_FormConfig = exports.Maintenance_Ticket_Data = exports.Maintenance_Ticket_Assignment = exports.Maintenance_Ticket = exports.Maintenance_Source_File = exports.Maintenance_SourceMeta = exports.Maintenance_Schedule_Template = exports.Maintenance_Schedule_Step = exports.Maintenance_Schedule_Execution_Step = exports.Maintenance_Schedule_Execution = exports.Maintenance_Schedule = exports.Maintenance_Restriction = exports.Maintenance_Project = exports.Maintenance_Priority = exports.Maintenance_Order = exports.Maintenance_Message = exports.Maintenance_Media = exports.Maintenance_Kanban_State = exports.Maintenance_Item = exports.Maintenance_Issuecategory = exports.Maintenance_Frequency = exports.Maintenance_Duedate = exports.Maintenance_Downtime = exports.Mail_Groups = exports.MailTemplate = exports.ML_DataSelection = exports.MIAAS_MDSEndpoint = void 0;
-exports.WidgetPreset = exports.Widget = exports.WebPush = exports.VirtualKPI = exports.User_Setting = exports.UserData = exports.TenantTrustedDomain = exports.TenantMeta = exports.Tenant = exports.Spreadsheet_Workbook = exports.SourceMeta = exports.Source = exports.Share = exports.Report = exports.RAG_Request = exports.RAG_Questions = exports.RAG_Prompts = exports.RAG_Meta = exports.RAG_Interview = exports.RAG_Data = void 0;
+exports.MES_Order = exports.MES_Article = exports.Log = exports.Language = exports.Knowledge_Video = exports.Knowledge_DocumentPage = exports.Knowledge_Document = exports.Knowledge_ChatMessage = exports.Knowledge_Chat = exports.Knowledge_Category = exports.Knowledge_Article = exports.GTFS_Wheelchair_Boarding = exports.GTFS_Wheelchair_Accessible = exports.GTFS_Trip = exports.GTFS_Stop_Times = exports.GTFS_Stop = exports.GTFS_Route_Type = exports.GTFS_Route = exports.GTFS_Location_Type = exports.GTFS_Level = exports.GTFS_Direction = exports.GTFS_Calendar = exports.GTFS_Bikes_Allowed = exports.GTFS_Agency = exports.EMS_ChargePoint = exports.Documentation_Document = exports.Documentation_Config = exports.Documentation_Category = exports.Dashboard = exports.Core_Token = exports.Core_RequestTemplate = exports.Core_Email = exports.Contact = exports.Config = exports.Company = exports.Changelog = exports.BDE_WorkTime = exports.BDE_WorkOrder = exports.BDE_Unit = exports.BDE_Result = exports.BDE_Page = exports.BDE_ListEntry = exports.BDE_List = exports.BDE_Form = exports.BDE_Article = exports.Attachment = exports.Assets = exports.AlarmWebhook = exports.AlarmAction = exports.Alarm = void 0;
+exports.Permission = exports.OWPlcItem = exports.OWPlcDevice = exports.Notification_Setting = exports.Notification = exports.NavigationItem = exports.NavigationGroup = exports.Monitoring_Slideshow = exports.Monitoring_ReportImage = exports.Monitoring_ParseTableSensor = exports.Monitoring_Jobs = exports.Monitoring_DataHierachies = exports.Meta_Entry = exports.Meta_Config = exports.Maintenance_Ticket_Title = exports.Maintenance_Ticket_Source = exports.Maintenance_Ticket_QR_Code = exports.Maintenance_Ticket_Project = exports.Maintenance_Ticket_Material = exports.Maintenance_Ticket_Kanban_State_Current = exports.Maintenance_Ticket_Kanban_State = exports.Maintenance_Ticket_Issuecategory = exports.Maintenance_Ticket_FormConfig = exports.Maintenance_Ticket_Data = exports.Maintenance_Ticket_Assignment = exports.Maintenance_Ticket = exports.Maintenance_Source_File = exports.Maintenance_SourceMeta = exports.Maintenance_Schedule_Template = exports.Maintenance_Schedule_Step = exports.Maintenance_Schedule_Execution_Step = exports.Maintenance_Schedule_Execution = exports.Maintenance_Schedule = exports.Maintenance_Restriction = exports.Maintenance_Project = exports.Maintenance_Priority = exports.Maintenance_Order = exports.Maintenance_Message = exports.Maintenance_Media = exports.Maintenance_Kanban_State = exports.Maintenance_Item = exports.Maintenance_Issuecategory = exports.Maintenance_Frequency = exports.Maintenance_Duedate = exports.Maintenance_Downtime = exports.Mail_Groups = exports.MailTemplate = exports.ML_DataSelection = exports.MIAAS_MDSEndpoint = exports.MES_OrderPlan = void 0;
+exports.WidgetPreset = exports.Widget = exports.WebPush = exports.VirtualKPI = exports.User_Setting = exports.UserData = exports.TenantTrustedDomain = exports.TenantMeta = exports.Tenant = exports.Spreadsheet_Workbook = exports.SourceMeta = exports.Source = exports.Share = exports.Report = exports.RAG_Request = exports.RAG_Questions = exports.RAG_Prompts = exports.RAG_Meta = exports.RAG_Interview = exports.RAG_Data = exports.Push = void 0;
 var Alarm_1 = require("./Alarm");
 Object.defineProperty(exports, "Alarm", { enumerable: true, get: function () { return Alarm_1.Alarm; } });
 var AlarmAction_1 = require("./AlarmAction");
@@ -41,6 +41,8 @@ var Contact_1 = require("./Contact");
 Object.defineProperty(exports, "Contact", { enumerable: true, get: function () { return Contact_1.Contact; } });
 var Core_Email_1 = require("./Core_Email");
 Object.defineProperty(exports, "Core_Email", { enumerable: true, get: function () { return Core_Email_1.Core_Email; } });
+var Core_RequestTemplate_1 = require("./Core_RequestTemplate");
+Object.defineProperty(exports, "Core_RequestTemplate", { enumerable: true, get: function () { return Core_RequestTemplate_1.Core_RequestTemplate; } });
 var Core_Token_1 = require("./Core_Token");
 Object.defineProperty(exports, "Core_Token", { enumerable: true, get: function () { return Core_Token_1.Core_Token; } });
 var Dashboard_1 = require("./Dashboard");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openinc/parse-server-opendash",
-  "version": "4.0.39",
+  "version": "4.0.41",
   "description": "Parse Server Cloud Code for open.INC Stack.",
   "packageManager": "pnpm@11.9.0",
   "keywords": [

package/schema/Core_RequestTemplate.json

@@ -0,0 +1,89 @@
+{
+  "fields": {
+    "identifier": {
+      "type": "String",
+      "required": true
+    },
+    "priority": {
+      "type": "Number",
+      "required": true,
+      "defaultValue": 0
+    },
+    "description": {
+      "type": "String",
+      "required": false
+    },
+    "url": {
+      "type": "String",
+      "required": true
+    },
+    "method": {
+      "type": "String",
+      "required": false
+    },
+    "allowedMethods": {
+      "type": "Array",
+      "required": false
+    },
+    "allowPath": {
+      "type": "Boolean",
+      "required": false,
+      "defaultValue": false
+    },
+    "headers": {
+      "type": "Object",
+      "required": false
+    },
+    "query": {
+      "type": "Object",
+      "required": false
+    },
+    "body": {
+      "type": "Object",
+      "required": false
+    },
+    "secrets": {
+      "type": "Object",
+      "required": false
+    },
+    "timeout": {
+      "type": "Number",
+      "required": false
+    },
+    "tenant": {
+      "type": "Pointer",
+      "targetClass": "{{PREFIX}}Tenant",
+      "required": false
+    },
+    "user": {
+      "type": "Pointer",
+      "targetClass": "_User",
+      "required": false
+    }
+  },
+  "classLevelPermissions": {
+    "find": {
+      "requiresAuthentication": true
+    },
+    "count": {
+      "requiresAuthentication": true
+    },
+    "get": {
+      "requiresAuthentication": true
+    },
+    "create": {
+      "requiresAuthentication": true
+    },
+    "update": {
+      "requiresAuthentication": true
+    },
+    "delete": {
+      "requiresAuthentication": true
+    },
+    "addField": {},
+    "protectedFields": {
+      "*": ["secrets", "headers", "query", "body"],
+      "role:od-admin": []
+    }
+  }
+}