@scriptdb/server 1.0.8 → 1.1.0

package/README.md

@@ -394,13 +394,94 @@ npm run typecheck
 npm run lint
 ```
 
-## Security Considerations
+## CLI Tool
 
-1. **Use TLS in production**: Always enable secure connections
-2. **Strong passwords**: Use bcrypt hashes for stored passwords
-3. **Network security**: Configure firewalls and limit access
-4. **Regular updates**: Keep dependencies updated
-5. **Monitor logs**: Regularly check for suspicious activity
+ScriptDB provides a CLI tool for easy server management:
+
+```bash
+# Install CLI globally
+npm install -g @scriptdb/cli
+
+# Start server in foreground
+scriptdb start
+
+# Start server in background (daemon mode with PM2)
+scriptdb start -d
+
+# Check server status
+scriptdb status
+
+# View real-time logs
+scriptdb logs
+
+# Monitor performance
+scriptdb monit
+
+# Stop server
+scriptdb stop
+
+# Restart server
+scriptdb restart -d
+
+# Start interactive shell
+scriptdb shell
+
+# Install packages to ScriptDB
+scriptdb add lodash
+
+# Install packages locally
+scriptdb add --local lodash
+```
+
+### CLI Configuration
+
+The CLI reads configuration from `~/.scriptdb/config.json`:
+
+```json
+{
+  "host": "localhost",
+  "port": 1234,
+  "users": [
+    {
+      "username": "admin",
+      "password": "your-password",
+      "hash": false
+    }
+  ],
+  "folder": "databases",
+  "secure": false
+}
+```
+
+### Process Management
+
+The CLI uses PM2 for daemon mode, providing:
+
+- Automatic restart on failure
+- Log management
+- Performance monitoring
+- Cluster mode support
+
+PM2 files are stored in `~/.scriptdb/`:
+- `ecosystem.config.js` - PM2 configuration
+- `pm2-*.log` - Log files
+
+## Changelog
+
+### 1.1.0 (2025-01-16)
+
+**Added**
+- Native `scriptdb logs` command to view real-time logs
+- Native `scriptdb monit` command to monitor performance
+- Native `scriptdb restart` command to restart the server
+- Native `scriptdb stop` command to stop the server
+- ESLint configuration for TypeScript linting
+
+**Fixed**
+- Fixed TypeScript type mismatch in users config normalization
+- Fixed TypeScript "used before assigned" error for storage variable
+- Fixed TypeScript module resolution errors
+- Improved error handling and Windows compatibility
 
 ## License
 

package/dist/index.js

@@ -2912,6 +2912,7 @@ class Protocal {
   IP_FAIL_WINDOW_MS;
   MAX_LOGIN_ATTEMPTS;
   LOCK_DURATION_MS;
+  ENABLE_IP_LOCKOUT;
   MAX_MESSAGE_BYTES;
   MAX_MESSAGES_PER_CONNECTION;
   CONNECTION_TIMEOUT_MS;
@@ -3025,9 +3026,10 @@ class Protocal {
     });
     this.loginAttemptCache = new Map;
     this.ipAttemptCache = new Map;
-    this.IP_FAIL_WINDOW_MS = options.ipFailWindowMs || 15 * 60 * 1000;
-    this.MAX_LOGIN_ATTEMPTS = options.maxLoginAttempts || 5;
-    this.LOCK_DURATION_MS = options.lockDurationMs || 15 * 60 * 1000;
+    this.IP_FAIL_WINDOW_MS = options.ipFailWindowMs || fileConfig.ipFailWindowMs || 15 * 60 * 1000;
+    this.MAX_LOGIN_ATTEMPTS = options.maxLoginAttempts || fileConfig.maxLoginAttempts || 5;
+    this.LOCK_DURATION_MS = options.lockDurationMs || fileConfig.lockDurationMs || 15 * 60 * 1000;
+    this.ENABLE_IP_LOCKOUT = options.enableIpLockout !== undefined ? options.enableIpLockout : fileConfig.enableIpLockout !== undefined ? fileConfig.enableIpLockout : true;
     this.MAX_MESSAGE_BYTES = options.maxMessageBytes || 64 * 1024;
     this.MAX_MESSAGES_PER_CONNECTION = options.maxMessagesPerConnection || 1000;
     this.CONNECTION_TIMEOUT_MS = typeof options.connectionTimeoutMs === "number" ? options.connectionTimeoutMs : typeof fileConfig.connectionTimeoutMs === "number" ? fileConfig.connectionTimeoutMs : 0;
@@ -3473,32 +3475,34 @@ class Protocal {
                   err: e && e.message || String(e)
                 });
               }
-              const nowTs = Date.now();
-              const ipRec = this.ipAttemptCache.get(remoteIP) || {
-                attempts: 0,
-                lockedUntil: 0,
-                expiresAt: nowTs + this._attemptCacheTTL
-              };
-              ipRec.attempts = (ipRec.attempts || 0) + 1;
-              ipRec.expiresAt = nowTs + this._attemptCacheTTL;
-              if (ipRec.attempts >= this.MAX_LOGIN_ATTEMPTS) {
-                ipRec.lockedUntil = nowTs + this.LOCK_DURATION_MS;
-                this.audit("ip.lockout", {
-                  ip: remoteIP,
-                  attempts: ipRec.attempts
-                });
-              }
-              this.ipAttemptCache.set(remoteIP, ipRec);
-              if (ipRec.lockedUntil && ipRec.lockedUntil > nowTs) {
-                this.audit("ip.locked", { ip: remoteIP });
-                try {
-                  sendWithBackpressure({
-                    command: "login",
-                    message: "LOCKED_IP",
-                    data: null
+              if (this.ENABLE_IP_LOCKOUT) {
+                const nowTs = Date.now();
+                const ipRec = this.ipAttemptCache.get(remoteIP) || {
+                  attempts: 0,
+                  lockedUntil: 0,
+                  expiresAt: nowTs + this._attemptCacheTTL
+                };
+                ipRec.attempts = (ipRec.attempts || 0) + 1;
+                ipRec.expiresAt = nowTs + this._attemptCacheTTL;
+                if (ipRec.attempts >= this.MAX_LOGIN_ATTEMPTS) {
+                  ipRec.lockedUntil = nowTs + this.LOCK_DURATION_MS;
+                  this.audit("ip.lockout", {
+                    ip: remoteIP,
+                    attempts: ipRec.attempts
                   });
-                } catch (e) {}
-                break;
+                }
+                this.ipAttemptCache.set(remoteIP, ipRec);
+                if (ipRec.lockedUntil && ipRec.lockedUntil > nowTs) {
+                  this.audit("ip.locked", { ip: remoteIP });
+                  try {
+                    sendWithBackpressure({
+                      command: "login",
+                      message: "LOCKED_IP",
+                      data: null
+                    });
+                  } catch (e) {}
+                  break;
+                }
               }
               const now = Date.now();
               const record = this.loginAttemptCache.get(username) || {
@@ -4313,9 +4317,8 @@ export const ${databaseName} = {};
         if (this.users && Array.isArray(this.users) && this.users.length > 0) {
           const u = this.users[0] || { username: "" };
           const uname = u.username || null;
-          const pwd = typeof u.password === "string" && u.password ? u.password : null;
-          if (uname && pwd) {
-            cred = encodeURIComponent(String(uname)) + ":" + encodeURIComponent(String(pwd)) + "@";
+          if (uname && typeof u.password === "string" && u.password) {
+            cred = encodeURIComponent(String(uname)) + ":" + "*****" + "@";
           } else if (uname) {
             cred = encodeURIComponent(String(uname)) + "@";
           }
@@ -4356,7 +4359,7 @@ import { spawn } from "node:child_process";
 import Storage from "@scriptdb/storage";
 var pkgData = `{
   "name": "scriptdb-workspace",
-  "version": "1.0.8",
+  "version": "1.1.0",
   "description": "ScriptDB workspace for custom scripts, services, and databases",
   "private": true,
   "devDependencies": {
@@ -4443,6 +4446,10 @@ var configDefault = {
   GITHUB_URL: "",
   GITHUB_TOKEN: "",
   GITHUB_BRANCH: "main",
+  enableIpLockout: true,
+  ipFailWindowMs: 900000,
+  maxLoginAttempts: 5,
+  lockDurationMs: 900000,
   users: [
     {
       username: "admin",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scriptdb/server",
-  "version": "1.0.8",
+  "version": "1.1.0",
   "description": "server module resolver for script database",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -41,10 +41,10 @@
     "typescript": "^5.0.0"
   },
   "dependencies": {
-    "@scriptdb/client": "^1.0.8",
-    "@scriptdb/storage": "^1.0.8",
-    "@scriptdb/system-modules": "^1.0.8",
-    "@scriptdb/vm": "^1.0.8",
+    "@scriptdb/client": "^1.1.0",
+    "@scriptdb/storage": "^1.1.0",
+    "@scriptdb/system-modules": "^1.1.0",
+    "@scriptdb/vm": "^1.1.0",
     "@types/ws": "^8.18.1",
     "bcryptjs": "^3.0.3",
     "bottleneck": "^2.19.5",