@restforgejs/platform 5.1.16 → 5.1.20

package/generators/cli/fast-track.js

@@ -33,6 +33,12 @@ const { spawnSync } = require('node:child_process');
 // mengembalikan IR model dengan relasi ter-normalisasi (sumber FK yang andal).
 const { loadSchemaPath } = require('../lib/dbschema-kit/loader');
 
+// Pembaca .env (parse KEY=VALUE, preserve diabaikan) dan resolver default config.
+// Dipakai agar nilai fast-track mengikuti file config yang sudah ada, bukan
+// semata DEFAULTS hardcode.
+const { readEnvFile } = require('../lib/utils/env-manager');
+const { getDefaultConfig, resolveConfigFilePath } = require('../lib/utils/config-resolver');
+
 // ---------------------------------------------------------------------------
 // Default konfigurasi (selaras dengan restforge-playbook/fast-track.mjs)
 // ---------------------------------------------------------------------------
@@ -162,7 +168,7 @@ function createPrompter() {
         });
     };
 
-    return { ask, close: () => rl.close() };
+    return { ask, close: () => rl.close(), rl };
 }
 
 /**
@@ -275,11 +281,70 @@ function checkDesigner() {
     console.log(leader('  > restforge-designer', `${version || 'installed'}  OK`, 32));
 }
 
+// ---------------------------------------------------------------------------
+// Resolusi file config sumber nilai (mengikuti file config yang sudah ada)
+// ---------------------------------------------------------------------------
+
+/** Daftar nama file .env di folder config/ (non-rekursif). */
+function listConfigEnvFiles(cwd) {
+    const dir = path.join(cwd, 'config');
+    if (!fs.existsSync(dir)) return [];
+    return fs.readdirSync(dir, { withFileTypes: true })
+        .filter((e) => e.isFile() && e.name.endsWith('.env'))
+        .map((e) => e.name);
+}
+
+/**
+ * Tentukan file config yang menjadi SUMBER nilai prompt fast-track, lalu baca
+ * nilainya. Prioritas:
+ *   1. --config eksplisit            -> hormati nama itu.
+ *   2. Tepat 1 file .env di config/  -> pakai file itu.
+ *   3. >1 file .env di config/       -> pakai default (config get-default /
+ *      .restforge/defaults.json); bila default belum di-set -> berhenti.
+ *   4. 0 file                        -> fallback DEFAULT_CONFIG_FILE tanpa
+ *      pre-fill (init akan membuat file ini, perilaku lama).
+ *
+ * @returns {{ configName: string, fileCfg: Object }} fileCfg = nilai env
+ *          terbaca ({} bila file belum ada).
+ */
+function resolveSourceConfig(cwd, explicitConfig) {
+    let configName;
+
+    if (explicitConfig) {
+        configName = explicitConfig;
+    } else {
+        const files = listConfigEnvFiles(cwd);
+        if (files.length === 1) {
+            configName = files[0];
+        } else if (files.length > 1) {
+            const def = getDefaultConfig(cwd);
+            if (!def) {
+                console.log('');
+                console.log(`  ERROR: ${files.length} config files found in config/ but no default is set.`);
+                console.log('  Set which one fast-track should follow:');
+                console.log('');
+                console.log('    npx restforge config set-default --config=<file>');
+                console.log('');
+                console.log('  Or pass it explicitly: fast-track ... --config=<file>');
+                console.log('');
+                throw stop('multiple config files, no default set');
+            }
+            configName = def.config;
+        } else {
+            // 0 file: pertahankan perilaku lama (init akan membuat file ini).
+            return { configName: DEFAULT_CONFIG_FILE, fileCfg: {} };
+        }
+    }
+
+    const { data } = readEnvFile(resolveConfigFilePath(configName, cwd));
+    return { configName, fileCfg: data || {} };
+}
+
 // ---------------------------------------------------------------------------
 // Fase input konfigurasi (LICENSE + database), mengikuti fast-track.mjs
 // ---------------------------------------------------------------------------
 
-async function collectConfig(args, ask) {
+async function collectConfig(args, ask, fileCfg = {}) {
     console.log('');
     console.log(rule('='));
     console.log('  RESTForge Fast-Track  —  Configuration');
@@ -295,37 +360,39 @@ async function collectConfig(args, ask) {
 
     const cfg = {};
 
-    // LICENSE: bila --license diberikan, dipakai sebagai default prompt.
-    const licenseDefault = args.license || DEFAULTS.LICENSE;
+    // LICENSE: bila --license diberikan dipakai sebagai default; jika tidak,
+    // ikuti file config bila ada, baru jatuh ke DEFAULTS.
+    const licenseDefault = args.license || fileCfg.LICENSE || DEFAULTS.LICENSE;
     cfg.LICENSE = await askField('LICENSE', licenseDefault);
 
     // Alamat & port. Label user-facing REST_API_PORT, namun TETAP disimpan dan
     // ditulis ke db-connection.env sebagai SERVER_PORT (key yang dikonsumsi
     // `restforge serve`). WEB_SERVER_PORT adalah port frontend (`npx serve`),
-    // dialirkan via `payload migrate --port` — tidak masuk runtime config.
-    cfg.SERVER_ADDRESS = await askField('SERVER_ADDRESS', DEFAULTS.SERVER_ADDRESS);
-    cfg.SERVER_PORT = await askField('REST_API_PORT', DEFAULTS.SERVER_PORT);
+    // dialirkan via `payload migrate --port` — tidak masuk runtime config, jadi
+    // selalu dari DEFAULTS (tidak tersimpan di file env).
+    cfg.SERVER_ADDRESS = await askField('SERVER_ADDRESS', fileCfg.SERVER_ADDRESS || DEFAULTS.SERVER_ADDRESS);
+    cfg.SERVER_PORT = await askField('REST_API_PORT', fileCfg.SERVER_PORT || DEFAULTS.SERVER_PORT);
     cfg.WEB_SERVER_PORT = await askField('WEB_SERVER_PORT', DEFAULTS.WEB_SERVER_PORT);
 
     // DB_TYPE menentukan atribut yang diminta berikutnya.
     console.log('');
     console.log('  Available DB_TYPE: postgresql, mysql, oracle, sqlite');
-    cfg.DB_TYPE = (await askField('DB_TYPE', DEFAULTS.DB_TYPE)).toLowerCase();
+    cfg.DB_TYPE = (await askField('DB_TYPE', fileCfg.DB_TYPE || DEFAULTS.DB_TYPE)).toLowerCase();
 
     if (cfg.DB_TYPE === 'sqlite') {
         console.log('');
         console.log('  SQLite mode: DB_HOST, DB_PORT, DB_USER, DB_PASSWORD are ignored.');
         console.log('  The database file path is set in DB_FILE.');
         console.log('');
-        cfg.DB_FILE = await askField('DB_FILE (.db file path)', DEFAULTS.DB_FILE);
+        cfg.DB_FILE = await askField('DB_FILE (.db file path)', fileCfg.DB_FILE || DEFAULTS.DB_FILE);
         cfg.DB_NAME = cfg.DB_FILE;
     } else {
         const dbDef = DB_TYPE_DEFAULTS[cfg.DB_TYPE] || {};
-        cfg.DB_HOST = await askField('DB_HOST', DEFAULTS.DB_HOST);
-        cfg.DB_PORT = await askField('DB_PORT', dbDef.DB_PORT || DEFAULTS.DB_PORT);
-        cfg.DB_USER = await askField('DB_USER', dbDef.DB_USER || DEFAULTS.DB_USER);
-        cfg.DB_PASSWORD = await askField('DB_PASSWORD', DEFAULTS.DB_PASSWORD);
-        cfg.DB_NAME = await askField('DB_NAME', dbDef.DB_NAME || DEFAULTS.DB_NAME);
+        cfg.DB_HOST = await askField('DB_HOST', fileCfg.DB_HOST || DEFAULTS.DB_HOST);
+        cfg.DB_PORT = await askField('DB_PORT', fileCfg.DB_PORT || dbDef.DB_PORT || DEFAULTS.DB_PORT);
+        cfg.DB_USER = await askField('DB_USER', fileCfg.DB_USER || dbDef.DB_USER || DEFAULTS.DB_USER);
+        cfg.DB_PASSWORD = await askField('DB_PASSWORD', fileCfg.DB_PASSWORD || DEFAULTS.DB_PASSWORD);
+        cfg.DB_NAME = await askField('DB_NAME', fileCfg.DB_NAME || dbDef.DB_NAME || DEFAULTS.DB_NAME);
     }
 
     return cfg;
@@ -335,21 +402,277 @@ async function collectConfig(args, ask) {
 // Fase pemilihan scope generate (menu)
 // ---------------------------------------------------------------------------
 
-async function selectScope(ask) {
-    console.log('');
-    console.log('  Select what to generate:');
-    console.log('');
-    console.log('    1. Generate REST API Only');
-    console.log('    2. Generate REST API with Frontend Application');
+// Item menu scope (teks tampil sama persis dengan menu angka lama agar perubahan
+// hanya pada CARA memilih, bukan label). `key` memetakan ke SCOPES.
+const SCOPE_MENU = [
+    { key: '1', text: 'Generate REST API Only' },
+    { key: '2', text: 'Generate REST API with Frontend Application' }
+];
+
+/**
+ * Selektor menu interaktif gaya CLI installer (create-next-app): tombol panah
+ * ↑/↓ menggeser sorotan, Enter mengeksekusi pilihan. HANYA untuk TTY interaktif;
+ * pemanggil wajib menyediakan fallback non-TTY (lihat selectScope).
+ *
+ * Handoff stdin: `createPrompter` memegang readline di process.stdin. Selama menu
+ * aktif, readline di-pause DAN listener `keypress`-nya dilepas sementara (disimpan
+ * lalu dipulihkan) agar tidak ada line-editing yang ikut bereaksi terhadap tombol.
+ * Setelah pilihan dibuat, raw mode, listener, dan readline dikembalikan ke semula
+ * sehingga prompt-prompt berikutnya tetap berfungsi normal.
+ *
+ * @param {Object} opts
+ * @param {string} opts.title - Judul menu
+ * @param {string[]} opts.items - Teks tiap opsi
+ * @param {number} opts.initialIndex - Indeks sorotan awal
+ * @param {Object} opts.prompter - Hasil createPrompter (untuk pause/resume rl)
+ * @returns {Promise<number>} indeks opsi yang dipilih
+ */
+function arrowSelect({ title, items, initialIndex, prompter }) {
+    return new Promise((resolve) => {
+        const stdin = process.stdin;
+        const rl = prompter && prompter.rl;
+        let index = Math.max(0, Math.min(initialIndex || 0, items.length - 1));
+
+        // Suspend prompter: pause readline + lepas listener keypress-nya agar hanya
+        // handler menu yang aktif (mencegah echo/line-edit ganda).
+        if (rl && typeof rl.pause === 'function') rl.pause();
+        readline.emitKeypressEvents(stdin);
+        const savedKeypress = stdin.listeners('keypress').slice();
+        for (const l of savedKeypress) stdin.removeListener('keypress', l);
+
+        const prevRaw = stdin.isRaw === true;
+        if (typeof stdin.setRawMode === 'function') stdin.setRawMode(true);
+        stdin.resume();
+
+        console.log('');
+        console.log(`  ${title}`);
+        console.log('');
+
+        const renderLines = () => {
+            for (let i = 0; i < items.length; i++) {
+                const active = i === index;
+                const pointer = active ? '>' : ' ';
+                const label = active ? `\x1b[36m${items[i]}\x1b[0m` : items[i];
+                process.stdout.write(`\x1b[2K  ${pointer} ${label}\n`);
+            }
+        };
+        const moveCursorUp = () => process.stdout.write(`\x1b[${items.length}A`);
+
+        renderLines();
+
+        const cleanup = () => {
+            stdin.removeListener('keypress', onKeypress);
+            if (typeof stdin.setRawMode === 'function') stdin.setRawMode(prevRaw);
+            for (const l of savedKeypress) stdin.on('keypress', l);
+            if (rl && typeof rl.resume === 'function') rl.resume();
+        };
+
+        const onKeypress = (_str, key) => {
+            if (!key) return;
+            if (key.name === 'up') {
+                index = (index - 1 + items.length) % items.length;
+                moveCursorUp();
+                renderLines();
+            } else if (key.name === 'down') {
+                index = (index + 1) % items.length;
+                moveCursorUp();
+                renderLines();
+            } else if (key.name === 'return' || key.name === 'enter') {
+                cleanup();
+                process.stdout.write('\n');
+                resolve(index);
+            } else if (key.ctrl && key.name === 'c') {
+                cleanup();
+                process.stdout.write('\n');
+                process.exit(130); // konvensi SIGINT
+            }
+        };
+
+        stdin.on('keypress', onKeypress);
+    });
+}
+
+async function selectScope(prompter) {
+    const ask = prompter.ask;
+
+    // Fallback non-TTY (input di-pipe: smoke/CI/transcript): pertahankan PERSIS
+    // prompt angka lama. Selektor panah butuh raw TTY mode yang tidak tersedia di
+    // sini, jadi fallback menjaga alur non-interaktif tetap berfungsi byte-identik.
+    if (!process.stdin.isTTY) {
+        console.log('');
+        console.log('  Select what to generate:');
+        console.log('');
+        for (const m of SCOPE_MENU) console.log(`    ${m.key}. ${m.text}`);
+        console.log('');
+
+        let scope = null;
+        while (!scope) {
+            const choice = (await ask(`  Choice (1-2) [${DEFAULT_SCOPE}]: `)).trim() || DEFAULT_SCOPE;
+            scope = SCOPES[choice];
+            if (!scope) console.log('  Invalid choice. Enter 1 or 2.');
+        }
+        return scope;
+    }
+
+    // TTY interaktif: selektor panah ↑/↓ + Enter.
+    const initialIndex = SCOPE_MENU.findIndex((m) => m.key === DEFAULT_SCOPE);
+    const chosen = await arrowSelect({
+        title: 'Select what to generate:',
+        items: SCOPE_MENU.map((m) => m.text),
+        initialIndex: initialIndex >= 0 ? initialIndex : 0,
+        prompter
+    });
+    return SCOPES[SCOPE_MENU[chosen].key];
+}
+
+// ---------------------------------------------------------------------------
+// Fase pemilihan plugin designer + toggle authentication
+// ---------------------------------------------------------------------------
+
+// Plugin default bila pilihan tidak tersedia / parsing list gagal.
+const DESIGNER_DEFAULT_PLUGIN = 'vanilla-js-basic';
+
+// Default konfigurasi auth, selaras dengan `restforge-designer init`
+// (mod.rs: auth_app_code/auth_api_url/idle_timeout). Dipakai saat user memilih
+// mengaktifkan authentication pada plugin yang mendukung (Auth != No).
+const DESIGNER_AUTH_DEFAULTS = {
+    appCode: 'K5BK0H3ATT',
+    authApiUrl: 'https://restforge.dev/api/auth',
+    idleTimeoutMinutes: 30
+};
+
+const ANSI_RE = /\x1b\[[0-9;]*m/g;
+
+/**
+ * Jalankan `restforge-designer plugins list` dan kembalikan stdout mentah, atau
+ * null bila gagal (binary tidak ada / exit non-zero). Tidak butuh aktivasi license
+ * (list hanya membaca metadata plugin built-in).
+ */
+function runDesignerPluginsList() {
+    const r = spawnSync('cmd', ['/S', '/C', 'restforge-designer plugins list'], { encoding: 'utf8' });
+    if (r.error || r.status !== 0) return null;
+    return r.stdout || '';
+}
+
+/**
+ * Parse output tabel `plugins list` (comfy-table UTF8_FULL) menjadi array
+ * `{ id, auth }`. Baris data ditandai border luar `│` + separator kolom `┆`;
+ * baris pemisah (├ ╞ ┌ └) dan header (`ID`) dilewati. ANSI di-strip dulu. Kolom
+ * Auth (indeks 3) menentukan apakah plugin mendukung authentication.
+ *
+ * Catatan: tidak ada output JSON di designer, jadi parsing tabel adalah satu-satunya
+ * antarmuka. Parser defensif: bila 0 baris terbaca, pemanggil fallback ke default.
+ */
+function parseDesignerPlugins(stdout) {
+    const out = [];
+    const seen = new Set();
+    for (const rawLine of String(stdout || '').split(/\r?\n/)) {
+        const line = rawLine.replace(ANSI_RE, '');
+        // Baris data wajib punya border luar `│`; separator inner bisa `┆` (UTF8_FULL)
+        // atau `│`. Baris pemisah (├ ┌ └ ╞) tidak mengandung `│`, jadi otomatis lewat.
+        if (!line.includes('│')) continue;
+        const cells = line.split(/[│┆]/).map((c) => c.trim()).filter((c) => c.length > 0);
+        // Minimal 4 kolom (ID, Name, Version, Auth). Baris wrap continuation berkolom
+        // sedikit tersaring di sini.
+        if (cells.length < 4) continue;
+        const id = cells[0];
+        if (id === 'ID' || seen.has(id)) continue;
+        seen.add(id);
+        out.push({ id, auth: cells[3] || '' });
+    }
+    return out;
+}
+
+/** Plugin mendukung authentication bila kolom Auth bukan kosong dan bukan "No". */
+function pluginHasAuth(auth) {
+    const v = String(auth || '').trim().toLowerCase();
+    return v !== '' && v !== 'no';
+}
+
+/**
+ * Pilih plugin designer (sebelum generate) lalu tentukan toggle auth. Menetapkan
+ * `ctx.plugin` dan `ctx.authEnabled`. Menampilkan tabel `plugins list` asli sebagai
+ * konteks, lalu selektor panah (TTY) atau prompt angka (non-TTY). Untuk plugin yang
+ * mendukung auth (mis. vanilla-js-auth/custom), tanyakan apakah auth diaktifkan;
+ * vanilla-js-basic (Auth No) langsung tanpa pertanyaan.
+ *
+ * Fallback aman: bila list gagal di-parse, pakai DESIGNER_DEFAULT_PLUGIN tanpa auth.
+ */
+async function selectDesignerPlugin(ctx, prompter) {
+    const raw = runDesignerPluginsList();
+    const plugins = raw ? parseDesignerPlugins(raw) : [];
+
     console.log('');
+    if (raw && raw.trim()) console.log(raw.trimEnd());
 
-    let scope = null;
-    while (!scope) {
-        const choice = (await ask(`  Choice (1-2) [${DEFAULT_SCOPE}]: `)).trim() || DEFAULT_SCOPE;
-        scope = SCOPES[choice];
-        if (!scope) console.log('  Invalid choice. Enter 1 or 2.');
+    if (plugins.length === 0) {
+        console.log(`  (could not read plugin list; using default '${DESIGNER_DEFAULT_PLUGIN}')`);
+        ctx.plugin = DESIGNER_DEFAULT_PLUGIN;
+        ctx.authEnabled = false;
+        return;
     }
-    return scope;
+
+    const defaultIdx = Math.max(0, plugins.findIndex((p) => p.id === DESIGNER_DEFAULT_PLUGIN));
+    const items = plugins.map((p) => `${p.id}  (auth: ${p.auth || 'No'})`);
+
+    let chosenIdx;
+    if (process.stdin.isTTY) {
+        chosenIdx = await arrowSelect({
+            title: 'Select a designer plugin:',
+            items,
+            initialIndex: defaultIdx,
+            prompter
+        });
+    } else {
+        console.log('');
+        console.log('  Select a designer plugin:');
+        console.log('');
+        items.forEach((it, i) => console.log(`    ${i + 1}. ${it}`));
+        console.log('');
+        const def = String(defaultIdx + 1);
+        chosenIdx = null;
+        while (chosenIdx === null) {
+            const c = (await prompter.ask(`  Choice (1-${plugins.length}) [${def}]: `)).trim() || def;
+            const idx = parseInt(c, 10) - 1;
+            if (idx >= 0 && idx < plugins.length) chosenIdx = idx;
+            else console.log(`  Invalid choice. Enter 1-${plugins.length}.`);
+        }
+    }
+
+    const chosen = plugins[chosenIdx];
+    ctx.plugin = chosen.id;
+
+    if (pluginHasAuth(chosen.auth)) {
+        const ans = (await prompter.ask(`  Use authentication for '${chosen.id}'? (Y/n): `)).trim().toLowerCase();
+        ctx.authEnabled = !(ans === 'n' || ans === 'no');
+    } else {
+        ctx.authEnabled = false;
+    }
+}
+
+/**
+ * Suntikkan blok auth ke payload agregator frontend agar plugin auth (deteksi via
+ * `payload.auth.is_some()`) men-generate aplikasi dengan authentication. Bentuk blok
+ * mengikuti `restforge-designer init` (init.rs): top-level `auth` + `appConfig.authAppCode`.
+ * Mengembalikan true bila berhasil ditulis.
+ */
+function injectDesignerAuth(aggregatorPath) {
+    if (!fs.existsSync(aggregatorPath)) return false;
+    let payload;
+    try {
+        payload = JSON.parse(fs.readFileSync(aggregatorPath, 'utf8'));
+    } catch (_err) {
+        return false;
+    }
+    if (!payload.appConfig || typeof payload.appConfig !== 'object') payload.appConfig = {};
+    payload.appConfig.authAppCode = DESIGNER_AUTH_DEFAULTS.appCode;
+    payload.auth = {
+        appCode: DESIGNER_AUTH_DEFAULTS.appCode,
+        authApiUrl: DESIGNER_AUTH_DEFAULTS.authApiUrl,
+        idleTimeoutMinutes: DESIGNER_AUTH_DEFAULTS.idleTimeoutMinutes
+    };
+    fs.writeFileSync(aggregatorPath, JSON.stringify(payload, null, 2));
+    return true;
 }
 
 // ---------------------------------------------------------------------------
@@ -370,6 +693,9 @@ async function confirmDefaultMode(ctx, ask) {
     console.log(`  REST API   : ${ctx.cfg.SERVER_ADDRESS}:${ctx.cfg.SERVER_PORT}   (SERVER_PORT)`);
     console.log(`  Web server : ${ctx.cfg.SERVER_ADDRESS}:${ctx.cfg.WEB_SERVER_PORT}`);
     console.log(`  Database   : ${describeDatabase(ctx.cfg)}`);
+    if (ctx.scope.frontend) {
+        console.log(`  Plugin     : ${ctx.plugin || DESIGNER_DEFAULT_PLUGIN}${ctx.authEnabled ? '   (auth enabled)' : ''}`);
+    }
     console.log('  Mode       : sync   (use --overwrite to drop & regenerate)');
     console.log('');
     const answer = (await ask('  Continue? (Y/n): ')).trim().toLowerCase();
@@ -390,6 +716,9 @@ async function confirmOverwriteMode(ctx, ask) {
     console.log(`  Generate : ${ctx.scope.label}`);
     console.log(`  License  : ${maskLicense(ctx.cfg.LICENSE)}`);
     console.log(`  Database : ${describeDatabase(ctx.cfg)}`);
+    if (ctx.scope.frontend) {
+        console.log(`  Plugin   : ${ctx.plugin || DESIGNER_DEFAULT_PLUGIN}${ctx.authEnabled ? '   (auth enabled)' : ''}`);
+    }
     console.log('');
     console.log('  The following actions will run:');
     if (ctx.scope.backend) {
@@ -682,6 +1011,9 @@ function runFrontendPipeline(ctx) {
     const cfgArg = `--config=${ctx.configFlag}`;
     const frontendDir = path.join(ctx.cwd, 'frontend');
     const appCode = ctx.project;
+    // Plugin terpilih (default basic bila selectDesignerPlugin tidak dijalankan).
+    const plugin = ctx.plugin || DESIGNER_DEFAULT_PLUGIN;
+    const pluginArg = `--plugin=${plugin}`;
 
     phase('[F1/3] Migrate RDF -> UDF (per tabel, agregator di-akumulasi)');
     fs.mkdirSync(path.join(frontendDir, 'payload'), { recursive: true });
@@ -693,7 +1025,17 @@ function runFrontendPipeline(ctx) {
             console.log(`  (skip ${t.kebab}: auto-discovered via JOIN from child)`);
             continue;
         }
-        run(`npx restforge payload migrate --project=${ctx.project} --name=${t.kebab}.json --output=frontend/payload ${cfgArg} --port=${ctx.cfg.WEB_SERVER_PORT} --overwrite`, ctx.cwd);
+        run(`npx restforge payload migrate --project=${ctx.project} --name=${t.kebab}.json --output=frontend/payload ${cfgArg} --port=${ctx.cfg.WEB_SERVER_PORT} ${pluginArg} --overwrite`, ctx.cwd);
+    }
+
+    // Auth: suntik blok auth ke agregator sebelum generate bila user mengaktifkannya.
+    // Plugin auth mendeteksi mode lewat keberadaan blok `auth` di payload (init.rs).
+    if (ctx.authEnabled) {
+        const aggregatorPath = path.join(frontendDir, 'payload', `${appCode}.json`);
+        const ok = injectDesignerAuth(aggregatorPath);
+        console.log(ok
+            ? `  ~ authentication enabled in ${appCode}.json (authAppCode=${DESIGNER_AUTH_DEFAULTS.appCode})`
+            : `  [WARN] could not inject auth block into ${aggregatorPath}; app will generate without auth`);
     }
 
     phase('[F2/3] Activate restforge-designer');
@@ -702,7 +1044,7 @@ function runFrontendPipeline(ctx) {
     phase('[F3/3] Generate frontend application');
     // Hapus index.html lama agar landing page diregenerasi sesuai set page terbaru.
     run(`if exist apps\\${ctx.project}\\index.html del /Q apps\\${ctx.project}\\index.html`, frontendDir, { allowNonZero: true });
-    run(`restforge-designer generate --payload=payload/${appCode}.json --output=./apps/${ctx.project} --overwrite`, frontendDir);
+    run(`restforge-designer generate --payload=payload/${appCode}.json --output=./apps/${ctx.project} ${pluginArg} --overwrite`, frontendDir);
 }
 
 /**
@@ -859,8 +1201,8 @@ module.exports = {
         config: {
             type: 'string',
             required: false,
-            default: DEFAULT_CONFIG_FILE,
-            description: 'Nama file env target di folder config/ (ditulis dari input; default db-connection.env)'
+            default: null,
+            description: 'Nama file env target di folder config/. Bila kosong, fast-track mengikuti file config yang ada: 1 file dipakai langsung, >1 file pakai config get-default'
         },
         license: {
             type: 'string',
@@ -887,11 +1229,16 @@ module.exports = {
 
         const prompter = createPrompter();
         try {
+            // 0) Resolusi file config sumber: tentukan file mana yang diikuti dan
+            //    baca nilainya untuk pre-fill default prompt.
+            const { configName, fileCfg } = resolveSourceConfig(cwd, args.config);
+
             // 1) Input konfigurasi (LICENSE + database), gaya fast-track.mjs.
-            const cfg = await collectConfig(args, prompter.ask);
+            //    Default tiap field mengikuti fileCfg bila tersedia.
+            const cfg = await collectConfig(args, prompter.ask, fileCfg);
 
             // 2) Menu pemilihan scope generate (REST API / frontend / all).
-            const scope = await selectScope(prompter.ask);
+            const scope = await selectScope(prompter);
 
             // 3) Preflight designer hanya bila scope mencakup frontend.
             if (scope.frontend) {
@@ -902,7 +1249,7 @@ module.exports = {
                 cwd,
                 project: args.project,
                 schemaFlag: args['schema-path'],
-                configFlag: args.config,
+                configFlag: configName,
                 tables,
                 cfg,
                 scope,
@@ -929,14 +1276,21 @@ module.exports = {
                 }
             }
 
-            // 4) Preview + konfirmasi (sesuai mode).
+            // 4) Pemilihan plugin designer + toggle auth (hanya bila frontend).
+            //    Sebelum preview agar pilihan ikut tampil di ringkasan & dipakai
+            //    pipeline frontend (payload migrate --plugin + generate --plugin).
+            if (ctx.scope.frontend) {
+                await selectDesignerPlugin(ctx, prompter);
+            }
+
+            // 5) Preview + konfirmasi (sesuai mode).
             if (ctx.overwrite) {
                 await confirmOverwriteMode(ctx, prompter.ask);
             } else {
                 await confirmDefaultMode(ctx, prompter.ask);
             }
 
-            // 5) Eksekusi sesuai scope.
+            // 6) Eksekusi sesuai scope.
             if (ctx.scope.backend) {
                 runBackendPipeline(ctx);
                 // Launcher start REST API mandiri (sesuai OS), di folder kerja.
@@ -948,7 +1302,7 @@ module.exports = {
 
             printFinalSummary(ctx);
 
-            // 6) Tawarkan menjalankan service: runtime server (backend) lalu
+            // 7) Tawarkan menjalankan service: runtime server (backend) lalu
             //    aplikasi frontend, masing-masing di window CMD baru.
             if (ctx.scope.backend) {
                 await maybeRunServer(ctx, prompter.ask);
@@ -966,5 +1320,9 @@ module.exports = {
 // terpisah tanpa menjalankan pipeline penuh. Pada penggunaan CLI normal env ini
 // tidak di-set sehingga export tetap berupa contract murni.
 if (process.env.FASTTRACK_TEST === '1') {
-    module.exports.__test = { loadModels, buildTableEntries, fkColumnsForEntry, tableToKebab };
+    module.exports.__test = {
+        loadModels, buildTableEntries, fkColumnsForEntry, tableToKebab,
+        parseDesignerPlugins, pluginHasAuth, injectDesignerAuth,
+        DESIGNER_DEFAULT_PLUGIN, DESIGNER_AUTH_DEFAULTS
+    };
 }

package/generators/cli/processor/create.js

@@ -403,7 +403,7 @@ function createEndpointFile(moduleDir, moduleName, endpointName, payload) {
 
     const endpointExists = fs.existsSync(endpointFilePath);
     if (endpointExists) {
-        console.log(`  [UPDATE] ${endpointName}.js — endpoint router di-regenerate.`);
+        console.log(`  [UPDATE] ${endpointName}.js — endpoint router di-regenerate.`);
     }
 
     const importProcessors = payload.processor.map(proc => {
@@ -438,7 +438,7 @@ function createEndpointFile(moduleDir, moduleName, endpointName, payload) {
                 const reason = isMutationMethod
                     ? `method ${method.toUpperCase()} is a mutation operation`
                     : `SQL contains mutation statement`;
-                console.log(`  [WARN] cache.enabled ignored for processor "${proc.name}" — ${reason}. Cache only applies to read (SELECT) operations.`);
+                console.log(`  [WARN] cache.enabled ignored for processor "${proc.name}" — ${reason}. Cache only applies to read (SELECT) operations.`);
                 hasCache = false;
             }
         }
@@ -523,7 +523,7 @@ module.exports = router;`;
 
     fs.writeFileSync(endpointFilePath, endpointContent);
     if (!endpointExists) {
-        console.log(`  [NEW] ${endpointName}.js — endpoint router created successfully.`);
+        console.log(`  [NEW] ${endpointName}.js — endpoint router created successfully.`);
     }
 }
 
@@ -562,17 +562,17 @@ function createProcessorFiles(moduleDir, moduleName, endpointName, payload, forc
 
         if (fs.existsSync(processorFilePath)) {
             if (!force) {
-                console.log(`  [SKIP] ${proc.name}.js — file already exists, custom code preserved.`);
+                console.log(`  [SKIP] ${proc.name}.js — file already exists, custom code preserved.`);
                 skippedCount++;
                 continue;
             }
-            console.log(`  [ARCHIVE+OVERWRITE] ${proc.name}.js — file archived then regenerated.`);
+            console.log(`  [ARCHIVE+OVERWRITE] ${proc.name}.js — file archived then regenerated.`);
             archivedCount++;
         }
 
         const processorContent = generateProcessor(proc, payloadDir);
         fs.writeFileSync(processorFilePath, processorContent);
-        console.log(`  [NEW] ${proc.name}.js — scaffold created successfully.`);
+        console.log(`  [NEW] ${proc.name}.js — scaffold created successfully.`);
         createdCount++;
     }
 
@@ -745,7 +745,7 @@ ${validationCode}
       //   { sql: 'UPDATE ...', params: [...] }
       // ]);
 
-      // Placeholder — ganti dengan implementasi sebenarnya
+      // Placeholder — ganti dengan implementasi sebenarnya
       const result = [];
 
       return createResponse(200, '${successMessage}', result);