@ozdao/martyrs 0.2.505 → 0.2.507

package/dist/orders.server.cjs

@@ -1,98 +1,16 @@
 "use strict";
 Object.defineProperties(exports, { __esModule: { value: true }, [Symbol.toStringTag]: { value: "Module" } });
-const globals_logger = require("./globals.logger-CZMgIMlM.cjs");
+require("node-cache");
 const queryProcessor = require("./queryProcessor-B_X680wC.cjs");
-const mailing = require("./mailing-q7sR8gCV.cjs");
+require("./mailing-Bs9ThyVZ.cjs");
 const profile_schema = require("./profile.schema-pidHrksV.cjs");
-const credentials_schema = require("./credentials.schema-DwhGdrwC.cjs");
 const ownership_schema = require("./ownership.schema-D1p5XSpt.cjs");
-const index = require("./index-BFxqqmgh.cjs");
+const credentials_schema = require("./credentials.schema-DwhGdrwC.cjs");
+const crud = require("./crud-JN_LFj01.cjs");
+const abac = require("./abac-6LjoG9u-.cjs");
 const axios = require("axios");
-class CRUD {
-  constructor(basePath, app, db, model, options) {
-    this.model = model;
-    this.cache = new globals_logger.Cache();
-    this.logger = new globals_logger.Logger(db);
-    this.app = app;
-    this.basePath = basePath;
-    if (!options || options && !options.disableDefaultRoutes) this.registerRoutes();
-  }
-  registerRoutes() {
-    this.app.post(`${this.basePath}/create`, this.create.bind(this));
-    this.app.get(`${this.basePath}/read`, this.read.bind(this));
-    this.app.put(`${this.basePath}/update`, this.update.bind(this));
-    this.app.delete(`${this.basePath}/delete`, this.delete.bind(this));
-  }
-  async create(req, res) {
-    try {
-      const createdData = await this.model.create(req.body);
-      await this.cache.flush();
-      res.status(201).json(createdData);
-    } catch (error) {
-      console.log(error);
-      this.logger.error("Ошибка создания данных", error);
-      res.status(500).json({ error: error.message });
-    }
-  }
-  async read(req, res) {
-    try {
-      let stages = [];
-      stages = [
-        ...queryProcessor.queryProcessorGlobals.getBasicOptions(req.query),
-        // For creator
-        queryProcessor.queryProcessorGlobals.getCreatorUserLookupStage(),
-        queryProcessor.queryProcessorGlobals.getCreatorOrganizationLookupStage(),
-        // For owner
-        queryProcessor.queryProcessorGlobals.getOwnerUserLookupStage(),
-        queryProcessor.queryProcessorGlobals.getOwnerOrganizationLookupStage(),
-        queryProcessor.queryProcessorGlobals.getAddFieldsCreatorOwnerStage(),
-        // Pagination
-        ...queryProcessor.queryProcessorGlobals.getSortingOptions(req.query.sortParam, req.query.sortOrder),
-        ...queryProcessor.queryProcessorGlobals.getPaginationOptions(req.query.skip, req.query.limit),
-        queryProcessor.queryProcessorGlobals.removeTempPropeties()
-      ];
-      const cacheKey = JSON.stringify({ stages });
-      let data = await this.cache.get(cacheKey);
-      if (!data) {
-        data = await this.model.aggregate(stages).exec();
-        await this.cache.set(cacheKey, data);
-      }
-      res.json(data);
-    } catch (error) {
-      this.logger.error(error);
-      res.status(500).json({ error: error.message });
-    }
-  }
-  async update(req, res) {
-    try {
-      const updatedData = await this.model.findOneAndUpdate({ _id: req.body._id }, req.body, {
-        new: true,
-        runValidators: true
-      });
-      if (!updatedData) {
-        throw new Error("Документ не найден.");
-      }
-      await this.cache.flush();
-      res.json(updatedData);
-    } catch (error) {
-      this.logger.error("Ошибка обновления данных", error);
-      res.status(404).json({ error: error.message });
-    }
-  }
-  async delete(req, res) {
-    try {
-      const deletedData = await this.model.findOneAndDelete({ _id: req.body._id });
-      if (!deletedData) {
-        throw new Error("Документ не найден.");
-      }
-      await this.cache.flush();
-      res.status(204).send();
-    } catch (error) {
-      this.logger.error("Ошибка удаления данных", error);
-      res.status(404).json({ error: error.message });
-    }
-  }
-}
+const globals_verifier = require("./globals.verifier-C0zj_LLo.cjs");
+const index = require("./index-BFxqqmgh.cjs");
 const controllerFactory = (db) => {
   const Order = db.order;
   const Customer = db.customer;
@@ -590,12 +508,29 @@ const ModelApplication = (db) => {
         email: {
           type: String
         }
+      },
+      text: {
+        type: String
+      },
+      chat: {
+        type: String
+      },
+      customer: {
+        type: {
+          type: String,
+          enum: ["Customer"]
+        },
+        target: {
+          type: db.mongoose.Schema.Types.ObjectId,
+          ref: "Customer"
+        }
       }
     },
     {
       timestamps: { currentTime: () => Date.now() }
     }
   );
+  ownership_schema.applyOwnershipSchema(ApplicationSchema, db);
   const Application = db.mongoose.model("Application", ApplicationSchema);
   return Application;
 };
@@ -614,10 +549,34 @@ const ModelCustomer = (db) => {
           refPath: "target.type"
         }
       },
+      source: {
+        type: String,
+        enum: ["web", "mobile", "api", "import", "manual", "referral", "social", "email"],
+        default: "web"
+      },
       referral: {
         code: {
           type: String
+        },
+        source: {
+          type: db.mongoose.Schema.Types.ObjectId,
+          ref: "Customer"
         }
+      },
+      tags: [{
+        type: String
+      }],
+      notes: {
+        type: String
+      },
+      lastActivity: {
+        type: Date,
+        default: Date.now
+      },
+      status: {
+        type: String,
+        enum: ["active", "inactive", "blocked"],
+        default: "active"
       }
     },
     {
@@ -783,125 +742,229 @@ const ModelTestimonial = (db) => {
   const Testimonial = db.mongoose.model("Testimonial", testimonialSchema);
   return Testimonial;
 };
-const { sendChatMessageTelegram } = mailing.mailing;
-const middlewareFactory = (db) => {
-  const Application = db.application;
-  const read = async (req, res) => {
-    try {
-      const applications = await Application.find({});
-      if (!applications) {
-        return res.status(404).send({ message: "Applications not found." });
-      }
-      res.status(200).send(applications);
-    } catch (err) {
-      res.status(500).send({ message: err });
+const verifierFactory$1 = function(db) {
+  const createVerifier = new globals_verifier.Verifier({
+    "contacts.name": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().min(1, "Name must be at least 1 character").max(255, "Name must not exceed 255 characters")
+    },
+    "contacts.email": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().email("Invalid email format").max(255, "Email must not exceed 255 characters")
+    },
+    "contacts.phone": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().pattern(/^\+?[1-9]\d{1,14}$/, "Invalid phone format")
+    },
+    type: {
+      rule: "optional",
+      default: "newsletter",
+      validator: globals_verifier.Validator.schema().string().oneOf(["newsletter", "support", "inquiry", "feedback", "other"])
+    },
+    text: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().max(2e3, "Text must not exceed 2000 characters")
+    },
+    chat: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().max(255, "Chat ID must not exceed 255 characters")
+    },
+    status: {
+      rule: "optional",
+      default: "created",
+      validator: globals_verifier.Validator.schema().string().oneOf(["created", "in_progress", "completed", "cancelled"])
+    },
+    owner: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().object({
+        type: globals_verifier.Validator.schema().string().oneOf(["user", "organization", "User", "Organization"]),
+        target: globals_verifier.Validator.schema().string().pattern(/^[0-9a-fA-F]{24}$/)
+      })
     }
-  };
-  const create = async (req, res) => {
-    try {
-      const application = await Application.create(req.body);
-      if (!application) {
-        return res.status(404).send({ message: "Something wrong when creating application." });
-      }
-      try {
-        const messageSent = await sendChatMessageTelegram(process.env.TELEGRAM_BOT_USERS.split(","), `New application from ${req.body}`);
-      } catch (err) {
-        console.log(err);
-      }
-      res.status(200).send(application);
-    } catch (err) {
-      res.status(500).send({ message: err });
+  });
+  const updateVerifier = new globals_verifier.Verifier({
+    _id: {
+      rule: "required",
+      validator: globals_verifier.Validator.schema().string().required("Application ID is required").pattern(/^[0-9a-fA-F]{24}$/, "Invalid ID format")
+    },
+    "contacts.name": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().min(1, "Name must be at least 1 character").max(255, "Name must not exceed 255 characters")
+    },
+    "contacts.email": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().email("Invalid email format").max(255, "Email must not exceed 255 characters")
+    },
+    "contacts.phone": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().pattern(/^\+?[1-9]\d{1,14}$/, "Invalid phone format")
+    },
+    type: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().oneOf(["newsletter", "support", "inquiry", "feedback", "other"])
+    },
+    text: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().max(2e3, "Text must not exceed 2000 characters")
+    },
+    chat: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().max(255, "Chat ID must not exceed 255 characters")
+    },
+    status: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().oneOf(["created", "in_progress", "completed", "cancelled"])
     }
-  };
-  const update = async (req, res) => {
-    try {
-      const application = await Application.findOneAndUpdate({ _id: req.params._id }, req.body, {
-        new: true
-      });
-      if (!application) {
-        return res.status(404).send({ message: "Application not found." });
-      }
-      res.status(200).send(application);
-    } catch (err) {
-      res.status(500).send({ message: err });
+  });
+  const readVerifier = new globals_verifier.Verifier({
+    _id: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().pattern(/^[0-9a-fA-F]{24}$/)
+    },
+    owner: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string()
+    },
+    status: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().oneOf(["created", "in_progress", "completed", "cancelled"])
+    },
+    type: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().oneOf(["newsletter", "support", "inquiry", "feedback", "other"])
+    },
+    skip: {
+      rule: "optional",
+      default: 0,
+      validator: globals_verifier.Validator.schema().integer().min(0)
+    },
+    limit: {
+      rule: "optional",
+      default: 20,
+      validator: globals_verifier.Validator.schema().integer().min(1).max(100)
+    },
+    sortParam: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().oneOf(["contacts.name", "contacts.email", "type", "status", "createdAt", "updatedAt"])
+    },
+    sortOrder: {
+      rule: "optional",
+      default: "desc",
+      validator: globals_verifier.Validator.schema().string().oneOf(["asc", "desc"])
     }
-  };
-  const deleteMethod = async (req, res) => {
-    try {
-      const application = await Application.findOneAndDelete({ _id: req.params._id });
-      if (!application) {
-        return res.status(404).send({ message: "Something wrong when deleting application." });
-      }
-      res.status(200).send(application);
-    } catch (err) {
-      res.status(500).send({ message: err });
+  });
+  const deleteVerifier = new globals_verifier.Verifier({
+    _id: {
+      rule: "required",
+      validator: globals_verifier.Validator.schema().string().required("Application ID is required").pattern(/^[0-9a-fA-F]{24}$/)
     }
+  });
+  return {
+    createVerifier,
+    readVerifier,
+    updateVerifier,
+    deleteVerifier
   };
-  const get = async (req, res) => {
-    try {
-      const application = await Application.findOne({ url: req.params.url });
-      if (!application) {
-        return res.status(404).send({ message: "Application not found." });
+};
+const { getInstance: getInstance$1 } = abac.ABAC;
+function setupApplicationsRoutes(app, db) {
+  const abac2 = getInstance$1(db);
+  const verifier = verifierFactory$1();
+  const applicationsCRUD = new crud.CRUD({
+    app,
+    db,
+    model: db.application,
+    modelName: "application",
+    basePath: "/api/applications",
+    auth: true,
+    verifiers: {
+      create: verifier.createVerifier,
+      read: verifier.readVerifier,
+      update: verifier.updateVerifier,
+      delete: verifier.deleteVerifier
+    },
+    abac: abac2,
+    cache: {
+      enabled: true,
+      ttl: 300,
+      tags: ["application", "orders"]
+    },
+    events: {
+      enabled: true,
+      logReads: false
+    }
+  });
+  applicationsCRUD.addAction("telegram-webhook", {
+    method: "post",
+    path: "/telegram-webhook",
+    auth: false,
+    abac: { enabled: false },
+    handler: async (req, res) => {
+      const update = req.body;
+      if (update.callback_query) {
+        const callbackQuery = update.callback_query;
+        const callbackData = callbackQuery.data;
+        const [action, applicationId] = callbackData.split("_");
+        try {
+          let updatedApplication = null;
+          switch (action) {
+            case "confirm":
+              updatedApplication = await db.application.findOneAndUpdate({ _id: applicationId }, { status: "confirmed" }, { new: true });
+              break;
+            case "lost":
+              updatedApplication = await db.application.findOneAndUpdate({ _id: applicationId }, { status: "lost" }, { new: true });
+              break;
+            case "delete":
+              updatedApplication = await db.application.findOneAndDelete({ _id: applicationId });
+              break;
+          }
+          if (!updatedApplication) {
+            console.log("Application not found or not updated.");
+          } else {
+            console.log("Application updated:", updatedApplication);
+          }
+        } catch (err) {
+          console.log("Error updating application:", err);
+        }
+        const queryId = callbackQuery.id;
+        const telegramToken = "6206215053:AAHYCYzpFZF9jDZC-TC03NSff8oo2ExqsSU";
+        axios.post(`https://api.telegram.org/bot${telegramToken}/answerCallbackQuery`, {
+          callback_query_id: queryId
+        });
       }
-      res.status(200).send(application);
-    } catch (err) {
-      res.status(500).send({ message: err });
+      res.sendStatus(200);
     }
-  };
-  const handleTelegramWebhook = async (req, res) => {
-    const update2 = req.body;
-    if (update2.callback_query) {
-      const callbackQuery = update2.callback_query;
-      const callbackData = callbackQuery.data;
-      const [action, applicationId] = callbackData.split("_");
+  });
+  applicationsCRUD.addAction("public-create", {
+    method: "post",
+    path: "/public",
+    auth: false,
+    abac: { enabled: false },
+    handler: async (req, res) => {
       try {
-        let updatedApplication = null;
-        switch (action) {
-          case "confirm":
-            updatedApplication = await Application.findOneAndUpdate({ _id: applicationId }, { status: "confirmed" }, { new: true });
-            break;
-          case "lost":
-            updatedApplication = await Application.findOneAndUpdate({ _id: applicationId }, { status: "lost" }, { new: true });
-            break;
-          case "delete":
-            updatedApplication = await Application.findOneAndDelete({ _id: applicationId });
-            break;
-        }
-        if (!updatedApplication) {
-          console.log("Application not found or not updated.");
-        } else {
-          console.log("Application updated:", updatedApplication);
-        }
-      } catch (err) {
-        console.log("Error updating application:", err);
+        const applicationData = {
+          ...req.body,
+          owner: {
+            type: "platform",
+            target: "000000000000000000000000"
+            // заглушка для отдела платформы
+          },
+          creator: {
+            type: "platform",
+            target: "000000000000000000000000"
+          }
+        };
+        const application = new db.application(applicationData);
+        const saved = await application.save();
+        res.status(201).json(saved);
+      } catch (error) {
+        console.error("Error creating public application:", error);
+        res.status(500).json({ error: error.message });
       }
-      const queryId = callbackQuery.id;
-      const telegramToken = "6206215053:AAHYCYzpFZF9jDZC-TC03NSff8oo2ExqsSU";
-      axios.post(`https://api.telegram.org/bot${telegramToken}/answerCallbackQuery`, {
-        callback_query_id: queryId
-      });
     }
-    res.sendStatus(200);
-  };
-  return {
-    read,
-    create,
-    update,
-    delete: deleteMethod,
-    handleTelegramWebhook,
-    get
-  };
-};
-const RoutesApplications = function(app, db, origins) {
-  const controller = middlewareFactory(db);
-  index.middlewareIndexFactory(db);
-  app.post("/applications", controller.create);
-  app.get("/applications", controller.read);
-  app.post("/applications/:_id", controller.update);
-  app.delete("/applications/:_id", controller.delete);
-  app.get("/applications/:_id", controller.get);
-  app.post("/applications/telegram-webhook", controller.handleTelegramWebhook);
-};
+  });
+  return applicationsCRUD;
+}
 const RoutesOrder = function(app, db, origins, publicPath) {
   const controller = controllerFactory(db);
   const middleware = index.middlewareIndexFactory(db);
@@ -934,6 +997,200 @@ const RoutesOrder = function(app, db, origins, publicPath) {
     controller.deleteOrder
   );
 };
+const verifierFactory = function(db) {
+  const createVerifier = new globals_verifier.Verifier({
+    email: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().email("Invalid email format").max(255, "Email must not exceed 255 characters")
+    },
+    phone: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().pattern(/^\+?[1-9]\d{1,14}$/, "Invalid phone format")
+    },
+    "profile.name": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().min(1, "Name must be at least 1 character").max(255, "Name must not exceed 255 characters")
+    },
+    "profile.description": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().max(1e3, "Description must not exceed 1000 characters")
+    },
+    "profile.photo": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().max(500, "Photo URL must not exceed 500 characters")
+    },
+    source: {
+      rule: "optional",
+      default: "web",
+      validator: globals_verifier.Validator.schema().string().oneOf(["web", "mobile", "api", "import", "manual", "referral", "social", "email"])
+    },
+    "referral.code": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().max(50, "Referral code must not exceed 50 characters")
+    },
+    "referral.source": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().pattern(/^[0-9a-fA-F]{24}$/, "Invalid referral source ID format")
+    },
+    tags: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().array().items(globals_verifier.Validator.schema().string().max(50)).max(20, "Cannot have more than 20 tags")
+    },
+    notes: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().max(2e3, "Notes must not exceed 2000 characters")
+    },
+    status: {
+      rule: "optional",
+      default: "active",
+      validator: globals_verifier.Validator.schema().string().oneOf(["active", "inactive", "blocked"])
+    },
+    "identity.type": {
+      rule: "required",
+      validator: globals_verifier.Validator.schema().string().oneOf(["Visitor", "User", "Organization"])
+    },
+    "identity.target": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().pattern(/^[0-9a-fA-F]{24}$/, "Invalid identity target ID format")
+    },
+    owner: {
+      rule: "required",
+      validator: globals_verifier.Validator.schema().object({
+        type: globals_verifier.Validator.schema().string().oneOf(["user", "organization", "User", "Organization"]),
+        target: globals_verifier.Validator.schema().string().pattern(/^[0-9a-fA-F]{24}$/)
+      })
+    }
+  });
+  const updateVerifier = new globals_verifier.Verifier({
+    _id: {
+      rule: "required",
+      validator: globals_verifier.Validator.schema().string().required("Customer ID is required").pattern(/^[0-9a-fA-F]{24}$/, "Invalid ID format")
+    },
+    email: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().email("Invalid email format").max(255, "Email must not exceed 255 characters")
+    },
+    phone: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().pattern(/^\+?[1-9]\d{1,14}$/, "Invalid phone format")
+    },
+    "profile.name": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().min(1, "Name must be at least 1 character").max(255, "Name must not exceed 255 characters")
+    },
+    "profile.description": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().max(1e3, "Description must not exceed 1000 characters")
+    },
+    "profile.photo": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().max(500, "Photo URL must not exceed 500 characters")
+    },
+    source: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().oneOf(["web", "mobile", "api", "import", "manual", "referral", "social", "email"])
+    },
+    "referral.code": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().max(50, "Referral code must not exceed 50 characters")
+    },
+    "referral.source": {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().pattern(/^[0-9a-fA-F]{24}$/, "Invalid referral source ID format")
+    },
+    tags: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().array().items(globals_verifier.Validator.schema().string().max(50)).max(20, "Cannot have more than 20 tags")
+    },
+    notes: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().max(2e3, "Notes must not exceed 2000 characters")
+    },
+    status: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().oneOf(["active", "inactive", "blocked"])
+    }
+  });
+  const readVerifier = new globals_verifier.Verifier({
+    _id: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().pattern(/^[0-9a-fA-F]{24}$/)
+    },
+    owner: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string()
+    },
+    status: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().oneOf(["active", "inactive", "blocked"])
+    },
+    source: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().oneOf(["web", "mobile", "api", "import", "manual", "referral", "social", "email"])
+    },
+    skip: {
+      rule: "optional",
+      default: 0,
+      validator: globals_verifier.Validator.schema().integer().min(0)
+    },
+    limit: {
+      rule: "optional",
+      default: 20,
+      validator: globals_verifier.Validator.schema().integer().min(1).max(100)
+    },
+    sortParam: {
+      rule: "optional",
+      validator: globals_verifier.Validator.schema().string().oneOf(["profile.name", "email", "phone", "lastActivity", "createdAt", "updatedAt"])
+    },
+    sortOrder: {
+      rule: "optional",
+      default: "desc",
+      validator: globals_verifier.Validator.schema().string().oneOf(["asc", "desc"])
+    }
+  });
+  const deleteVerifier = new globals_verifier.Verifier({
+    _id: {
+      rule: "required",
+      validator: globals_verifier.Validator.schema().string().required("Customer ID is required").pattern(/^[0-9a-fA-F]{24}$/)
+    }
+  });
+  return {
+    createVerifier,
+    readVerifier,
+    updateVerifier,
+    deleteVerifier
+  };
+};
+const { getInstance } = abac.ABAC;
+function setupCustomersRoutes(app, db) {
+  const abac2 = getInstance(db);
+  const verifier = verifierFactory();
+  const customersCRUD = new crud.CRUD({
+    app,
+    db,
+    model: db.customer,
+    modelName: "customer",
+    basePath: "/api/customers",
+    auth: true,
+    verifiers: {
+      create: verifier.createVerifier,
+      read: verifier.readVerifier,
+      update: verifier.updateVerifier,
+      delete: verifier.deleteVerifier
+    },
+    abac: abac2,
+    cache: {
+      enabled: true,
+      ttl: 300,
+      tags: ["customer", "orders"]
+    },
+    events: {
+      enabled: true,
+      logReads: false
+    }
+  });
+  return customersCRUD;
+}
 function initializeOrders(app, db, origins, publicPath) {
   db.order = ModelOrder(db);
   db.customer = ModelCustomer(db);
@@ -941,8 +1198,8 @@ function initializeOrders(app, db, origins, publicPath) {
   db.application = ModelApplication(db);
   if (app) {
     RoutesOrder(app, db);
-    RoutesApplications(app, db);
-    new CRUD("/api/customers", app, db, db.customer);
+    setupApplicationsRoutes(app, db);
+    setupCustomersRoutes(app, db);
   }
 }
 const models = {
@@ -950,7 +1207,8 @@ const models = {
   ModelCustomer
 };
 const routes = {
-  RoutesOrder
+  RoutesOrder,
+  RoutesCustomers: setupCustomersRoutes
 };
 const controllers = {
   FactoryOrder: controllerFactory