@skalfa/skalfa-api-core 1.0.2

package/.github/workflows/publish.yml

@@ -0,0 +1,40 @@
+name: Publish to npm
+
+on:
+  push:
+    branches:
+      - main
+      - master
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          registry-url: https://registry.npmjs.org/
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: latest
+
+      - name: Publish if version bumped
+        run: |
+          LOCAL_VER=$(node -p "require('./package.json').version")
+          NPM_VER=$(npm view @skalfa/skalfa-api-core version 2>/dev/null || echo "0.0.0")
+          if [ "$LOCAL_VER" != "$NPM_VER" ]; then
+            echo "Publishing @skalfa/skalfa-api-core $LOCAL_VER (Registry version: $NPM_VER)"
+            bun install
+            npm run build
+            npm publish --access public
+          else
+            echo "@skalfa/skalfa-api-core is up to date ($LOCAL_VER)"
+          fi
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

package/dist/auth/auth.d.ts

@@ -0,0 +1,19 @@
+export declare const auth: {
+    createAccessToken(userId: number, req: Request, permission?: boolean): Promise<{
+        token: string;
+        tokenId: any;
+    }>;
+    revokeAccessToken(id: number): Promise<number | undefined>;
+    verifyAccessToken(token: string, req?: Request): Promise<any>;
+    createUserMailToken(userId: number): Promise<{
+        token: string;
+        tokenId: any;
+    }>;
+    verifyUserMailToken(userId: number, token: string): Promise<boolean>;
+    listUserSessions(userId: number, currentTokenId?: number): Promise<any[]>;
+    revalidateUserPermissions: typeof revalidateUserPermissions;
+    revalidateUserPermissionsByRole: typeof revalidateUserPermissionsByRole;
+};
+declare function revalidateUserPermissions(userId: number): Promise<void>;
+declare function revalidateUserPermissionsByRole(roleId: number): Promise<void>;
+export {};

package/dist/auth/auth.js

@@ -0,0 +1,227 @@
+import crypto from 'crypto';
+import bcrypt from "bcrypt";
+import { db } from '@skalfa/skalfa-orm';
+import { registry } from '@utils/registry';
+// =====================================>
+// ## Auth: User Access Token
+// =====================================>
+const TOKEN_PLAIN_LENGTH = 20;
+const AUTH_PERMISSION = process.env.AUTH_CACHE === "true";
+const AUTH_CACHE = process.env.AUTH_CACHE === "true";
+const AUTH_CACHE_TTL = Number(process.env.AUTH_CACHE_TTL || 600);
+export const auth = {
+    // =====================================>
+    // ## Auth: create access token with user id
+    // =====================================>
+    async createAccessToken(userId, req, permission = true) {
+        const plain = crypto.randomBytes(TOKEN_PLAIN_LENGTH).toString("hex");
+        const hash = await bcrypt.hash(plain, 10);
+        const agent = generateAgentId(req);
+        if (!db) {
+            // get user from db (fallback / stub for no ORM)
+            return {
+                token: `1|${plain}`,
+                tokenId: 1,
+            };
+        }
+        let permissions = [];
+        if (AUTH_PERMISSION && permission) {
+            permissions = await getUserPermissions(userId);
+        }
+        const [row] = await db("user_access_tokens").insert({
+            user_id: userId,
+            token: hash,
+            agent: agent,
+            permissions: JSON.stringify(permissions),
+            created_at: new Date(),
+        }).returning(["id"]);
+        return {
+            token: `${row.id}|${plain}`,
+            tokenId: row.id,
+        };
+    },
+    // =====================================>
+    // ## Auth: delete access token with user id
+    // =====================================>
+    async revokeAccessToken(id) {
+        if (!db) {
+            // delete user access token from db (stub for no ORM)
+            return;
+        }
+        return db.table('user_access_tokens').where("id", id).delete();
+    },
+    // =====================================>
+    // ## Auth: verify access token
+    // =====================================>
+    async verifyAccessToken(token, req) {
+        if (!token.includes("|"))
+            return null;
+        const [tokenId, plain] = token.split("|", 2);
+        const agent = req ? generateAgentId(req) : "";
+        const ip = req ? getRequestIp(req) : "";
+        const cacheKey = `auth:token:${tokenId}`;
+        if (AUTH_CACHE) {
+            const redis = registry.get('redis');
+            if (redis) {
+                const cached = await redis.get(cacheKey);
+                if (cached) {
+                    const session = JSON.parse(cached);
+                    if (session.agent !== agent)
+                        return null;
+                    return session;
+                }
+            }
+        }
+        if (!db) {
+            // get user and token from db (stub for no ORM)
+            const user = { id: 1, name: "Admin", email: "admin@example.com" };
+            const tokenRecord = { id: Number(tokenId), agent, permission: [] };
+            return { user, token: tokenRecord, permissions: [] };
+        }
+        const tokenRecord = await db("user_access_tokens").where("id", tokenId).first();
+        if (!tokenRecord)
+            return null;
+        if (tokenRecord.agent !== agent)
+            return null;
+        const valid = await bcrypt.compare(plain, tokenRecord.token);
+        if (!valid)
+            return null;
+        await db("user_access_tokens").where("id", tokenRecord.id).update({ last_used_at: new Date(), last_used_ip: ip });
+        const user = await db("users").where("id", tokenRecord.user_id).first();
+        if (AUTH_CACHE) {
+            const redis = registry.get('redis');
+            if (redis) {
+                await redis.setex(cacheKey, AUTH_CACHE_TTL, JSON.stringify({
+                    user: user,
+                    agent: tokenRecord.agent,
+                    permissions: tokenRecord.permission,
+                }));
+            }
+        }
+        return { user, token: tokenRecord, permissions: tokenRecord.permission };
+    },
+    // =====================================>
+    // ## Auth: create user mail token
+    // =====================================>
+    async createUserMailToken(userId) {
+        const token = Math.floor(100000 + Math.random() * 900000).toString();
+        if (!db) {
+            // create user mail token in db (stub for no ORM)
+            return {
+                token: token,
+                tokenId: 1
+            };
+        }
+        const hash = crypto.createHash('sha256').update(token).digest('hex');
+        const trx = await db.transaction();
+        await trx.table('user_mail_tokens').insert({
+            user_id: userId,
+            token: hash,
+            created_at: new Date(),
+        });
+        const record = await trx.table('user_mail_tokens').orderBy('id', 'desc').first();
+        await trx.commit();
+        return {
+            token: token,
+            tokenId: record.id
+        };
+    },
+    // =====================================>
+    // ## Auth: Verify user mail token
+    // =====================================>
+    async verifyUserMailToken(userId, token) {
+        if (!db) {
+            // verify user mail token in db (stub for no ORM)
+            return true;
+        }
+        const hashedToken = crypto.createHash("sha256").update(token).digest("hex");
+        const record = await db.table("user_mail_tokens")
+            .where("user_id", userId)
+            .whereNull("used_at")
+            .orderBy("id", "desc")
+            .first();
+        if (!record)
+            return false;
+        if (record.token !== hashedToken)
+            return false;
+        const createdAt = new Date(record.created_at);
+        const now = new Date();
+        const diffMinutes = (now.getTime() - createdAt.getTime()) / (1000 * 60);
+        if (diffMinutes > 10)
+            return false;
+        return true;
+    },
+    // =====================================>
+    // ## Auth: list user sessions
+    // =====================================>
+    async listUserSessions(userId, currentTokenId) {
+        if (!db) {
+            // list user sessions from db (stub for no ORM)
+            return [];
+        }
+        const rows = await db("user_access_tokens").select(["id", "agent", "created_at", "last_used_at", "last_used_ip", "expired_at"]).where("user_id", userId).orderBy("last_used_at", "desc");
+        return rows.map((r) => ({
+            ...r,
+            is_active: r.revoked_at === null,
+            is_current: r.id === currentTokenId,
+        }));
+    },
+    // =====================================>
+    // ## Auth: revalidate user permission
+    // =====================================>
+    revalidateUserPermissions: revalidateUserPermissions,
+    revalidateUserPermissionsByRole: revalidateUserPermissionsByRole,
+};
+function generateAgentId(req) {
+    const ua = req.headers.get("user-agent") ?? "";
+    const acc = req.headers.get("accept") ?? "";
+    return crypto.createHash("sha256").update(ua + acc).digest("hex");
+}
+function getRequestIp(req) {
+    return (req.headers.get("x-forwarded-for")?.split(",")[0]?.trim() || req.headers.get("x-real-ip") || "unknown");
+}
+async function getUserPermissions(userId) {
+    if (!db) {
+        // get user permissions from db (stub for no ORM)
+        return [];
+    }
+    const roleIds = await db("user_roles").where("user_id", userId).pluck("role_id");
+    if (roleIds.length === 0)
+        return [];
+    const rows = await db("permissions").whereIn("role_id", roleIds).pluck("permissions");
+    return Array.from(new Set(rows.flatMap((p) => p ?? [])));
+}
+async function revalidateUserPermissions(userId) {
+    if (!db) {
+        // revalidate user permissions in db (stub for no ORM)
+        return;
+    }
+    const permissions = await getUserPermissions(userId);
+    const tokenIds = await db("user_access_tokens").where("user_id", userId).pluck("id");
+    if (tokenIds.length === 0)
+        return;
+    await db("user_access_tokens").whereIn("id", tokenIds).update({
+        permissions: JSON.stringify(permissions),
+        updated_at: new Date(),
+    });
+    if (AUTH_CACHE) {
+        const redis = registry.get('redis');
+        if (redis) {
+            await Promise.all(tokenIds.map((id) => redis.del(`auth:token:${id}`)));
+        }
+    }
+}
+async function revalidateUserPermissionsByRole(roleId) {
+    if (!db) {
+        // revalidate user permissions by role in db (stub for no ORM)
+        return;
+    }
+    const userIds = await db("user_roles").where("role_id", roleId).pluck("user_id");
+    const queue = registry.get('queue');
+    if (queue) {
+        for (const userId of userIds) {
+            await queue.add("auth:revalidate-permission", { userId });
+        }
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/auth/auth.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAC3B,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAE1C,yCAAyC;AACzC,6BAA6B;AAC7B,yCAAyC;AACzC,MAAM,kBAAkB,GAAK,EAAE,CAAA;AAC/B,MAAM,eAAe,GAAQ,OAAO,CAAC,GAAG,CAAC,UAAU,KAAO,MAAM,CAAA;AAChE,MAAM,UAAU,GAAa,OAAO,CAAC,GAAG,CAAC,UAAU,KAAO,MAAM,CAAA;AAChE,MAAM,cAAc,GAAS,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,CAAA;AAEtE,MAAM,CAAC,MAAM,IAAI,GAAG;IAElB,yCAAyC;IACzC,4CAA4C;IAC5C,yCAAyC;IACzC,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,GAAY,EAAE,aAAsB,IAAI;QAC9E,MAAM,KAAK,GAAK,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACtE,MAAM,IAAI,GAAM,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAC5C,MAAM,KAAK,GAAK,eAAe,CAAC,GAAG,CAAC,CAAA;QAEpC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,gDAAgD;YAChD,OAAO;gBACL,KAAK,EAAE,KAAK,KAAK,EAAE;gBACnB,OAAO,EAAE,CAAC;aACX,CAAA;QACH,CAAC;QAED,IAAI,WAAW,GAAa,EAAE,CAAA;QAC9B,IAAI,eAAe,IAAI,UAAU,EAAE,CAAC;YAClC,WAAW,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAChD,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC;YAClD,OAAO,EAAS,MAAM;YACtB,KAAK,EAAW,IAAI;YACpB,KAAK,EAAW,KAAK;YACrB,WAAW,EAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;YAC3C,UAAU,EAAM,IAAI,IAAI,EAAE;SAC3B,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QAEpB,OAAO;YACL,KAAK,EAAO,GAAG,GAAG,CAAC,EAAE,IAAI,KAAK,EAAE;YAChC,OAAO,EAAK,GAAG,CAAC,EAAE;SACnB,CAAA;IACH,CAAC;IAED,yCAAyC;IACzC,4CAA4C;IAC5C,yCAAyC;IACzC,KAAK,CAAC,iBAAiB,CAAC,EAAU;QAChC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,qDAAqD;YACrD,OAAO;QACT,CAAC;QACD,OAAO,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;IAChE,CAAC;IAED,yCAAyC;IACzC,+BAA+B;IAC/B,yCAAyC;IACzC,KAAK,CAAC,iBAAiB,CAAC,KAAa,EAAE,GAAa;QAClD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QAErC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAK,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QAC9C,MAAM,KAAK,GAAgB,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1D,MAAM,EAAE,GAAmB,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAEvD,MAAM,QAAQ,GAAG,cAAc,OAAO,EAAE,CAAA;QAExC,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACnC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBACxC,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;oBAClC,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;wBAAE,OAAO,IAAI,CAAA;oBACxC,OAAO,OAAO,CAAA;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,+CAA+C;YAC/C,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAA;YACjE,MAAM,WAAW,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;YAClE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE,CAAA;QACtD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,EAAE,CAAA;QAE/E,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAA;QAC7B,IAAI,WAAW,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO,IAAI,CAAA;QAE5C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;QAC5D,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QAEvB,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;QAEjH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAA;QAEvE,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACnC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,KAAK,CAAC,KAAK,CACf,QAAQ,EACR,cAAc,EACd,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAY,IAAI;oBACpB,KAAK,EAAW,WAAW,CAAC,KAAK;oBACjC,WAAW,EAAK,WAAW,CAAC,UAAU;iBACvC,CAAC,CACH,CAAA;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,UAAU,EAAE,CAAA;IAC1E,CAAC;IAED,yCAAyC;IACzC,kCAAkC;IAClC,yCAAyC;IACzC,KAAK,CAAC,mBAAmB,CAAC,MAAc;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAEpE,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,iDAAiD;YACjD,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,CAAC;aACX,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACpE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,WAAW,EAAE,CAAA;QAElC,MAAM,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;YACzC,OAAO,EAAO,MAAM;YACpB,KAAK,EAAS,IAAI;YAClB,UAAU,EAAI,IAAI,IAAI,EAAE;SACzB,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAA;QAEhF,MAAM,GAAG,CAAC,MAAM,EAAE,CAAA;QAElB,OAAO;YACL,KAAK,EAAM,KAAK;YAChB,OAAO,EAAI,MAAM,CAAC,EAAE;SACrB,CAAA;IACH,CAAC;IAED,yCAAyC;IACzC,kCAAkC;IAClC,yCAAyC;IACzC,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,KAAa;QACrD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,iDAAiD;YACjD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;aAC9C,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC;aACxB,SAAS,CAAC,SAAS,CAAC;aACpB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,KAAK,EAAE,CAAC;QAEX,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAEzB,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC;QAE/C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAExE,IAAI,WAAW,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;QAEnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yCAAyC;IACzC,8BAA8B;IAC9B,yCAAyC;IACzC,KAAK,CAAC,gBAAgB,CAAC,MAAc,EAAE,cAAuB;QAC5D,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,+CAA+C;YAC/C,OAAO,EAAE,CAAA;QACX,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;QAEvL,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;YAC3B,GAAG,CAAC;YACJ,SAAS,EAAI,CAAC,CAAC,UAAU,KAAO,IAAI;YACpC,UAAU,EAAG,CAAC,CAAC,EAAE,KAAe,cAAc;SAC/C,CAAC,CAAC,CAAA;IACL,CAAC;IAED,yCAAyC;IACzC,sCAAsC;IACtC,yCAAyC;IACzC,yBAAyB,EAAE,yBAAyB;IACpD,+BAA+B,EAAE,+BAA+B;CACjE,CAAA;AAED,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,EAAE,GAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAM,EAAE,CAAA;IACnD,MAAM,GAAG,GAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAU,EAAE,CAAA;IAEnD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACnE,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,CAAA;AACjH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAc;IAC9C,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,iDAAiD;QACjD,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAEhF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEnC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IAErF,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CACL,IAAI,CAAC,OAAO,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAClC,CACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,MAAc;IACrD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,sDAAsD;QACtD,OAAM;IACR,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEpD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAEpF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAEjC,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC5D,WAAW,EAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;QAC3C,UAAU,EAAM,IAAI,IAAI,EAAE;KAC3B,CAAC,CAAA;IAEF,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,OAAO,CAAC,GAAG,CACf,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CACzD,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,MAAc;IAC3D,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,8DAA8D;QAC9D,OAAM;IACR,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAEhF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACnC,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,GAAG,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1 @@
+export * from "./auth";

package/dist/auth/index.js

@@ -0,0 +1,2 @@
+export * from "./auth";
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC"}

package/dist/auth.util.d.ts

@@ -0,0 +1,19 @@
+export declare const auth: {
+    createAccessToken(userId: number, req: Request, permission?: boolean): Promise<{
+        token: string;
+        tokenId: any;
+    }>;
+    revokeAccessToken(id: number): Promise<number>;
+    verifyAccessToken(token: string, req?: Request): Promise<any>;
+    createUserMailToken(userId: number): Promise<{
+        token: string;
+        tokenId: any;
+    }>;
+    verifyUserMailToken(userId: number, token: string): Promise<boolean>;
+    listUserSessions(userId: number, currentTokenId?: number): Promise<any[]>;
+    revalidateUserPermissions: typeof revalidateUserPermissions;
+    revalidateUserPermissionsByRole: typeof revalidateUserPermissionsByRole;
+};
+declare function revalidateUserPermissions(userId: number): Promise<void>;
+declare function revalidateUserPermissionsByRole(roleId: number): Promise<void>;
+export {};

package/dist/auth.util.js

@@ -0,0 +1,183 @@
+import crypto from 'crypto';
+import bcrypt from "bcrypt";
+import { db } from '@utils';
+import { registry } from './registry.util';
+// =====================================>
+// ## Auth: User Access Token
+// =====================================>
+const TOKEN_PLAIN_LENGTH = 20;
+const AUTH_PERMISSION = process.env.AUTH_CACHE === "true";
+const AUTH_CACHE = process.env.AUTH_CACHE === "true";
+const AUTH_CACHE_TTL = Number(process.env.AUTH_CACHE_TTL || 600);
+export const auth = {
+    // =====================================>
+    // ## Auth: create access token with user id
+    // =====================================>
+    async createAccessToken(userId, req, permission = true) {
+        const plain = crypto.randomBytes(TOKEN_PLAIN_LENGTH).toString("hex");
+        const hash = await bcrypt.hash(plain, 10);
+        const agent = generateAgentId(req);
+        let permissions = [];
+        if (AUTH_PERMISSION && permission) {
+            permissions = await getUserPermissions(userId);
+        }
+        const [row] = await db("user_access_tokens").insert({
+            user_id: userId,
+            token: hash,
+            agent: agent,
+            permissions: JSON.stringify(permissions),
+            created_at: new Date(),
+        }).returning(["id"]);
+        return {
+            token: `${row.id}|${plain}`,
+            tokenId: row.id,
+        };
+    },
+    // =====================================>
+    // ## Auth: delete access token with user id
+    // =====================================>
+    async revokeAccessToken(id) {
+        return db.table('user_access_tokens').where("id", id).delete();
+    },
+    // =====================================>
+    // ## Auth: verify access token
+    // =====================================>
+    async verifyAccessToken(token, req) {
+        if (!token.includes("|"))
+            return null;
+        const [tokenId, plain] = token.split("|", 2);
+        const agent = req ? generateAgentId(req) : "";
+        const ip = req ? getRequestIp(req) : "";
+        const cacheKey = `auth:token:${tokenId}`;
+        if (AUTH_CACHE) {
+            const redis = registry.get('redis');
+            if (redis) {
+                const cached = await redis.get(cacheKey);
+                if (cached) {
+                    const session = JSON.parse(cached);
+                    if (session.agent !== agent)
+                        return null;
+                    return session;
+                }
+            }
+        }
+        const tokenRecord = await db("user_access_tokens").where("id", tokenId).first();
+        if (!tokenRecord)
+            return null;
+        if (tokenRecord.agent !== agent)
+            return null;
+        const valid = await bcrypt.compare(plain, tokenRecord.token);
+        if (!valid)
+            return null;
+        await db("user_access_tokens").where("id", tokenRecord.id).update({ last_used_at: new Date(), last_used_ip: ip });
+        const user = await db("users").where("id", tokenRecord.user_id).first();
+        if (AUTH_CACHE) {
+            const redis = registry.get('redis');
+            if (redis) {
+                await redis.setex(cacheKey, AUTH_CACHE_TTL, JSON.stringify({
+                    user: user,
+                    agent: tokenRecord.agent,
+                    permissions: tokenRecord.permission,
+                }));
+            }
+        }
+        return { user, token: tokenRecord, permissions: tokenRecord.permission };
+    },
+    // =====================================>
+    // ## Auth: create user mail token
+    // =====================================>
+    async createUserMailToken(userId) {
+        const token = Math.floor(100000 + Math.random() * 900000).toString();
+        const hash = crypto.createHash('sha256').update(token).digest('hex');
+        const trx = await db.transaction();
+        await trx.table('user_mail_tokens').insert({
+            user_id: userId,
+            token: hash,
+            created_at: new Date(),
+        });
+        const record = await trx.table('user_mail_tokens').orderBy('id', 'desc').first();
+        await trx.commit();
+        return {
+            token: token,
+            tokenId: record.id
+        };
+    },
+    // =====================================>
+    // ## Auth: Verify user mail token
+    // =====================================>
+    async verifyUserMailToken(userId, token) {
+        const hashedToken = crypto.createHash("sha256").update(token).digest("hex");
+        const record = await db.table("user_mail_tokens")
+            .where("user_id", userId)
+            .whereNull("used_at")
+            .orderBy("id", "desc")
+            .first();
+        if (!record)
+            return false;
+        if (record.token !== hashedToken)
+            return false;
+        const createdAt = new Date(record.created_at);
+        const now = new Date();
+        const diffMinutes = (now.getTime() - createdAt.getTime()) / (1000 * 60);
+        if (diffMinutes > 10)
+            return false;
+        return true;
+    },
+    // =====================================>
+    // ## Auth: list user sessions
+    // =====================================>
+    async listUserSessions(userId, currentTokenId) {
+        const rows = await db("user_access_tokens").select(["id", "agent", "created_at", "last_used_at", "last_used_ip", "expired_at"]).where("user_id", userId).orderBy("last_used_at", "desc");
+        return rows.map(r => ({
+            ...r,
+            is_active: r.revoked_at === null,
+            is_current: r.id === currentTokenId,
+        }));
+    },
+    // =====================================>
+    // ## Auth: revalidate user permission
+    // =====================================>
+    revalidateUserPermissions: revalidateUserPermissions,
+    revalidateUserPermissionsByRole: revalidateUserPermissionsByRole,
+};
+function generateAgentId(req) {
+    const ua = req.headers.get("user-agent") ?? "";
+    const acc = req.headers.get("accept") ?? "";
+    return crypto.createHash("sha256").update(ua + acc).digest("hex");
+}
+function getRequestIp(req) {
+    return (req.headers.get("x-forwarded-for")?.split(",")[0]?.trim() || req.headers.get("x-real-ip") || "unknown");
+}
+async function getUserPermissions(userId) {
+    const roleIds = await db("user_roles").where("user_id", userId).pluck("role_id");
+    if (roleIds.length === 0)
+        return [];
+    const rows = await db("permissions").whereIn("role_id", roleIds).pluck("permissions");
+    return Array.from(new Set(rows.flatMap(p => p ?? [])));
+}
+async function revalidateUserPermissions(userId) {
+    const permissions = await getUserPermissions(userId);
+    const tokenIds = await db("user_access_tokens").where("user_id", userId).pluck("id");
+    if (tokenIds.length === 0)
+        return;
+    await db("user_access_tokens").whereIn("id", tokenIds).update({
+        permissions: JSON.stringify(permissions),
+        updated_at: new Date(),
+    });
+    if (AUTH_CACHE) {
+        const redis = registry.get('redis');
+        if (redis) {
+            await Promise.all(tokenIds.map(id => redis.del(`auth:token:${id}`)));
+        }
+    }
+}
+async function revalidateUserPermissionsByRole(roleId) {
+    const userIds = await db("user_roles").where("role_id", roleId).pluck("user_id");
+    const queue = registry.get('queue');
+    if (queue) {
+        for (const userId of userIds) {
+            await queue.add("auth:revalidate-permission", { userId });
+        }
+    }
+}
+//# sourceMappingURL=auth.util.js.map

package/dist/auth.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.util.js","sourceRoot":"","sources":["../src/auth.util.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAC3B,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC3B,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAI1C,yCAAyC;AACzC,6BAA6B;AAC7B,yCAAyC;AACzC,MAAM,kBAAkB,GAAK,EAAE,CAAA;AAC/B,MAAM,eAAe,GAAQ,OAAO,CAAC,GAAG,CAAC,UAAU,KAAO,MAAM,CAAA;AAChE,MAAM,UAAU,GAAa,OAAO,CAAC,GAAG,CAAC,UAAU,KAAO,MAAM,CAAA;AAChE,MAAM,cAAc,GAAS,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,CAAA;AAItE,MAAM,CAAC,MAAM,IAAI,GAAG;IAElB,yCAAyC;IACzC,4CAA4C;IAC5C,yCAAyC;IACzC,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,GAAY,EAAE,aAAsB,IAAI;QAC9E,MAAM,KAAK,GAAK,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACtE,MAAM,IAAI,GAAM,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAC5C,MAAM,KAAK,GAAK,eAAe,CAAC,GAAG,CAAC,CAAA;QAEpC,IAAI,WAAW,GAAa,EAAE,CAAA;QAC9B,IAAI,eAAe,IAAI,UAAU,EAAE,CAAC;YAClC,WAAW,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAChD,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC;YAClD,OAAO,EAAS,MAAM;YACtB,KAAK,EAAW,IAAI;YACpB,KAAK,EAAW,KAAK;YACrB,WAAW,EAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;YAC3C,UAAU,EAAM,IAAI,IAAI,EAAE;SAC3B,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QAEpB,OAAO;YACL,KAAK,EAAO,GAAG,GAAG,CAAC,EAAE,IAAI,KAAK,EAAE;YAChC,OAAO,EAAK,GAAG,CAAC,EAAE;SACnB,CAAA;IACH,CAAC;IAID,yCAAyC;IACzC,4CAA4C;IAC5C,yCAAyC;IACzC,KAAK,CAAC,iBAAiB,CAAC,EAAU;QAChC,OAAO,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;IAChE,CAAC;IAID,yCAAyC;IACzC,+BAA+B;IAC/B,yCAAyC;IACzC,KAAK,CAAC,iBAAiB,CAAC,KAAa,EAAE,GAAa;QAClD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QAErC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAK,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QAC9C,MAAM,KAAK,GAAgB,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1D,MAAM,EAAE,GAAmB,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAEvD,MAAM,QAAQ,GAAG,cAAc,OAAO,EAAE,CAAA;QAExC,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAEnC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAExC,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;oBAElC,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;wBAAE,OAAO,IAAI,CAAA;oBAExC,OAAO,OAAO,CAAA;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,EAAE,CAAA;QAE/E,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAA;QAC7B,IAAI,WAAW,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO,IAAI,CAAA;QAE5C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;QAC5D,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QAEvB,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;QAEjH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAA;QAEvE,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACnC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,KAAK,CAAC,KAAK,CACf,QAAQ,EACR,cAAc,EACd,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAY,IAAI;oBACpB,KAAK,EAAW,WAAW,CAAC,KAAK;oBACjC,WAAW,EAAK,WAAW,CAAC,UAAU;iBACvC,CAAC,CACH,CAAA;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,UAAU,EAAE,CAAA;IAC1E,CAAC;IAID,yCAAyC;IACzC,kCAAkC;IAClC,yCAAyC;IACzC,KAAK,CAAC,mBAAmB,CAAC,MAAc;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QACpE,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAEpE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,WAAW,EAAE,CAAA;QAElC,MAAM,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;YACzC,OAAO,EAAO,MAAM;YACpB,KAAK,EAAS,IAAI;YAClB,UAAU,EAAI,IAAI,IAAI,EAAE;SACzB,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAA;QAEhF,MAAM,GAAG,CAAC,MAAM,EAAE,CAAA;QAElB,OAAO;YACL,KAAK,EAAM,KAAK;YAChB,OAAO,EAAI,MAAM,CAAC,EAAE;SACrB,CAAA;IACH,CAAC;IAID,yCAAyC;IACzC,kCAAkC;IAClC,yCAAyC;IACzC,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,KAAa;QACrD,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;aAC9C,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC;aACxB,SAAS,CAAC,SAAS,CAAC;aACpB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,KAAK,EAAE,CAAC;QAEX,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAEzB,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC;QAE/C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAExE,IAAI,WAAW,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;QAEnC,OAAO,IAAI,CAAC;IACd,CAAC;IAID,yCAAyC;IACzC,8BAA8B;IAC9B,yCAAyC;IACzC,KAAK,CAAC,gBAAgB,CAAC,MAAc,EAAE,cAAuB;QAC5D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;QAEvL,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpB,GAAG,CAAC;YACJ,SAAS,EAAI,CAAC,CAAC,UAAU,KAAO,IAAI;YACpC,UAAU,EAAG,CAAC,CAAC,EAAE,KAAe,cAAc;SAC/C,CAAC,CAAC,CAAA;IACL,CAAC;IAID,yCAAyC;IACzC,sCAAsC;IACtC,yCAAyC;IACzC,yBAAyB,EAAE,yBAAyB;IACpD,+BAA+B,EAAE,+BAA+B;CACjE,CAAA;AAID,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,EAAE,GAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAM,EAAE,CAAA;IACnD,MAAM,GAAG,GAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAU,EAAE,CAAA;IAEnD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACnE,CAAC;AAGD,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,CAAA;AACjH,CAAC;AAGD,KAAK,UAAU,kBAAkB,CAAC,MAAc;IAC9C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAEhF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEnC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IAErF,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CACL,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAC3B,CACF,CAAA;AACH,CAAC;AAGD,KAAK,UAAU,yBAAyB,CAAC,MAAc;IACrD,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEpD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAEpF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAEjC,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC5D,WAAW,EAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;QAC3C,UAAU,EAAM,IAAI,IAAI,EAAE;KAC3B,CAAC,CAAA;IAEF,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,OAAO,CAAC,GAAG,CACf,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAClD,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAGD,KAAK,UAAU,+BAA+B,CAAC,MAAc;IAC3D,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAEhF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACnC,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,GAAG,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/cli.d.ts

@@ -0,0 +1 @@
+export declare function runCli(): void;

package/dist/commands/cli.js

@@ -0,0 +1,78 @@
+import fs from "fs";
+import path from "path";
+import { Command } from "commander";
+// Basic commands (always available)
+import { makeControllerCommand } from "./make/basic-controller";
+import { makeLightControllerCommand } from "./make/light-controller";
+import { barrelsCommand, watchBarrelsCommand } from "./runner/barrels";
+// ORM commands (optional)
+import { makeModelCommand } from "./make/basic-model";
+import { makeSeederCommand } from "./make/basic-seeder";
+import { makeMigrationCommand } from "./make/basic-migration";
+import { makeLightModelCommand } from "./make/light-model";
+import { makeBlueprintCommand } from "./make/blueprint";
+import { migrateCommand, migrateFreshCommand } from "./runner/migration";
+import { seederCommand } from "./runner/seeder";
+import { blueprintCommand } from "./runner/blueprint/runner";
+// Extension-specific commands
+import { makeQueueCommand } from "./make/queue";
+import { makeMailCommand } from "./make/mail";
+import { makeNotificationCommand } from "./make/notification";
+import { makeDaMigrationCommand } from "./make/da-migration";
+import { daMigrateCommand, daMigrateFreshCommand } from "./runner/da-migration";
+export function runCli() {
+    // Read package.json to dynamically detect installed extensions
+    let dependencies = {};
+    try {
+        const pkgPath = path.join(process.cwd(), "package.json");
+        if (fs.existsSync(pkgPath)) {
+            const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
+            dependencies = pkg.dependencies || {};
+        }
+    }
+    catch { }
+    const hasOrm = !!dependencies["@skalfa/skalfa-orm"];
+    const hasMail = !!dependencies["@skalfa/mail"] || !!dependencies["skalfa-mail"];
+    const hasNotification = !!dependencies["@skalfa/notification"] || !!dependencies["skalfa-notification"];
+    const hasQueue = !!dependencies["@skalfa/queue"] || !!dependencies["@skalfa/redis"] || !!dependencies["skalfa-queue"] || !!dependencies["skalfa-redis"];
+    const hasDa = !!dependencies["@skalfa/da"] || !!dependencies["skalfa-da"] || !!dependencies["@clickhouse/client"];
+    const program = new Command();
+    program.name("skalfa").description("Skalfa Local CLI").version("1.0.0");
+    // 1. Add Core / Basic commands
+    program.addCommand(makeControllerCommand);
+    program.addCommand(makeLightControllerCommand);
+    program.addCommand(barrelsCommand);
+    program.addCommand(watchBarrelsCommand);
+    // 2. Add ORM commands if installed
+    if (hasOrm) {
+        program.addCommand(makeModelCommand);
+        program.addCommand(makeMigrationCommand);
+        program.addCommand(makeSeederCommand);
+        program.addCommand(makeLightModelCommand);
+        program.addCommand(makeBlueprintCommand);
+        program.addCommand(migrateCommand);
+        program.addCommand(migrateFreshCommand);
+        program.addCommand(seederCommand);
+        program.addCommand(blueprintCommand);
+    }
+    // 3. Add Mail commands if installed
+    if (hasMail) {
+        program.addCommand(makeMailCommand);
+    }
+    // 4. Add Notification commands if installed
+    if (hasNotification) {
+        program.addCommand(makeNotificationCommand);
+    }
+    // 5. Add Queue commands if installed
+    if (hasQueue) {
+        program.addCommand(makeQueueCommand);
+    }
+    // 6. Add Data Analytics / OLAP commands if installed
+    if (hasDa) {
+        program.addCommand(makeDaMigrationCommand);
+        program.addCommand(daMigrateCommand);
+        program.addCommand(daMigrateFreshCommand);
+    }
+    program.parse(process.argv);
+}
+//# sourceMappingURL=cli.js.map

package/dist/commands/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/commands/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,oCAAoC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvE,0BAA0B;AAC1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,8BAA8B;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAEhF,MAAM,UAAU,MAAM;IACpB,+DAA+D;IAC/D,IAAI,YAAY,GAA2B,EAAE,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC;QACzD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YACzD,YAAY,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IAChF,MAAM,eAAe,GAAG,CAAC,CAAC,YAAY,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC;IACxG,MAAM,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;IACxJ,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC;IAElH,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAExE,+BAA+B;IAC/B,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC;IAC/C,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACnC,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAExC,mCAAmC;IACnC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACrC,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;QACzC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACtC,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;QAC1C,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;QACzC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QACnC,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;QACxC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAClC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACvC,CAAC;IAED,oCAAoC;IACpC,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IACtC,CAAC;IAED,4CAA4C;IAC5C,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;IAC9C,CAAC;IAED,qCAAqC;IACrC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACvC,CAAC;IAED,qDAAqD;IACrD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QAC3C,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACrC,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/make/basic-controller.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const makeControllerCommand: Command;