@underpostnet/underpost 2.97.1 → 2.98.0

package/README.md

@@ -18,7 +18,7 @@
 
 <!-- badges -->
 
-[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/2.97.1)](https://socket.dev/npm/package/underpost/overview/2.97.1) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
+[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/2.98.0)](https://socket.dev/npm/package/underpost/overview/2.98.0) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
 
 <!-- end-badges -->
 
@@ -66,7 +66,7 @@ Run dev client server
 npm run dev
 ```
 <!-- -->
-## underpost ci/cd cli v2.97.1
+## underpost ci/cd cli v2.98.0
 
 ### Usage: `underpost [options] [command]`
   ```

package/cli.md

@@ -1,4 +1,4 @@
-## underpost ci/cd cli v2.97.1
+## underpost ci/cd cli v2.98.0
 
 ### Usage: `underpost [options] [command]`
   ```
@@ -589,6 +589,8 @@ Options:
   --paths <paths>                            Comma-separated list of paths to filter database operations.
   --ns <ns-name>                             Kubernetes namespace context for database operations (defaults to "default").
   --macro-rollback-export <n-commits-reset>  Exports a macro rollback script that reverts the last n commits (Git integration required).
+  --clean-fs-collection                      Cleans orphaned File documents from collections that are not referenced by any models.
+  --clean-fs-dry-run                         Dry run mode - shows what would be deleted without actually deleting (use with --clean-fs-collection).
   --dev                                      Sets the development cli context
   --kubeadm                                  Enables the kubeadm context for database operations.
   --kind                                     Enables the kind context for database operations.

package/conf.js

@@ -39,6 +39,7 @@ const DefaultConf = /**/ {
           'LogOut',
           'Router',
           'Account',
+          'PublicProfile',
           'Auth',
           'FullScreen',
           'RichText',
@@ -91,6 +92,7 @@ const DefaultConf = /**/ {
         { path: '/account', client: 'Default', ssr: 'Default' },
         { path: '/docs', client: 'Default', ssr: 'Default' },
         { path: '/recover', client: 'Default', ssr: 'Default' },
+        { path: '/u', client: 'Default', ssr: 'Default' },
         { path: '/default-management', client: 'Default', ssr: 'Default' },
         { client: 'Default', ssr: 'Default', path: '/404', title: '404 Not Found' },
         { client: 'Default', ssr: 'Default', path: '/500', title: '500 Server Error' },

package/manifests/deployment/dd-default-development/deployment.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-blue
-          image: localhost/rockylinux9-underpost:v2.97.1
+          image: localhost/rockylinux9-underpost:v2.98.0
           #          resources:
           #            requests:
           #              memory: "124Ki"
@@ -100,7 +100,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-green
-          image: localhost/rockylinux9-underpost:v2.97.1
+          image: localhost/rockylinux9-underpost:v2.98.0
           #          resources:
           #            requests:
           #              memory: "124Ki"

package/manifests/deployment/dd-test-development/deployment.yaml

@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
         - name: dd-test-development-blue
-          image: localhost/rockylinux9-underpost:v2.97.1
+          image: localhost/rockylinux9-underpost:v2.98.0
 
           command:
             - /bin/sh
@@ -103,7 +103,7 @@ spec:
     spec:
       containers:
         - name: dd-test-development-green
-          image: localhost/rockylinux9-underpost:v2.97.1
+          image: localhost/rockylinux9-underpost:v2.98.0
 
           command:
             - /bin/sh

package/package.json

@@ -2,7 +2,7 @@
     "type": "module",
     "main": "src/index.js",
     "name": "@underpostnet/underpost",
-    "version": "2.97.1",
+    "version": "2.98.0",
     "description": "pwa api rest template",
     "scripts": {
         "start": "env-cmd -f .env.production node --max-old-space-size=8192 src/server",

package/scripts/rocky-pwa.sh

@@ -0,0 +1,200 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# rocky-pwa.sh
+# Purpose: Build and install a PWA as a native application on Rocky Linux (RHEL).
+# Usage: sudo ./rocky-pwa.sh <URL> <APP_NAME>
+
+if [[ $EUID -ne 0 ]]; then
+   echo "ERROR: This script must be run as root." >&2
+   exit 1
+fi
+
+if [[ $# -lt 2 ]]; then
+    echo "Usage: $0 <URL> <APP_NAME>"
+    echo "Example: $0 'https://underpost.net' 'Underpost'"
+    exit 1
+fi
+
+TARGET_URL="$1"
+RAW_NAME="$2"
+# Sanitize name for filesystem (My App -> My_App)
+APP_NAME="${RAW_NAME// /_}"
+DEST_DIR="/opt/$APP_NAME"
+
+echo ">>> Starting PWA installation for '$APP_NAME' ($TARGET_URL)"
+
+# ------------------------------------------------------------------------------
+# 1. Install Dependencies
+# ------------------------------------------------------------------------------
+echo ">>> Installing system dependencies..."
+# Common Electron/Nativefier requirements
+dnf install -y nodejs desktop-file-utils libXScrnSaver libX11 libXrandr \
+    alsa-lib atk at-spi2-core cups-libs wget curl grep \
+    || echo "Warning: specific package install failed, proceeding in case they exist..."
+
+# ------------------------------------------------------------------------------
+# 2. Install/Update Nativefier
+# ------------------------------------------------------------------------------
+if ! command -v nativefier &> /dev/null; then
+    echo ">>> Installing nativefier..."
+    npm install -g nativefier || echo "Warning: Global install had issues. Attempting to run via npx..."
+fi
+
+# ------------------------------------------------------------------------------
+# 3. Build Application
+# ------------------------------------------------------------------------------
+BUILD_TMP=$(mktemp -d)
+trap 'rm -rf "$BUILD_TMP"' EXIT
+
+echo ">>> Building application in temporary directory..."
+cd "$BUILD_TMP"
+
+# --single-instance: Only allow one window
+# --internal-urls ".*": Don't open links in external browser (keep user inside app)
+npx --yes nativefier --name "$APP_NAME" \
+    --platform linux \
+    --arch x64 \
+    --single-instance \
+    --internal-urls ".*" \
+    "$TARGET_URL"
+
+# ------------------------------------------------------------------------------
+# 4. Install to /opt
+# ------------------------------------------------------------------------------
+# Nativefier creates a folder named like "Underpost-linux-x64"
+BUILT_FOLDER=$(find . -maxdepth 1 -type d -name "*-linux-x64" | head -n 1)
+
+if [[ -z "$BUILT_FOLDER" ]]; then
+    echo "ERROR: Build failed. No output directory found."
+    exit 1
+fi
+
+echo ">>> Installing to $DEST_DIR..."
+rm -rf "$DEST_DIR"
+mv "$BUILT_FOLDER" "$DEST_DIR"
+
+# Fix ownership
+chown -R root:root "$DEST_DIR"
+chmod -R 755 "$DEST_DIR"
+
+# ------------------------------------------------------------------------------
+# 5. Locate Executable & Fix Nested Structure
+# ------------------------------------------------------------------------------
+# Sometimes Nativefier nests: /opt/App/App-linux-x64/App
+# We want: /opt/App/App
+# Check if the DEST_DIR contains only one folder which is also named *-linux-x64
+NESTED_DIR=$(find "$DEST_DIR" -mindepth 1 -maxdepth 1 -type d -name "*-linux-x64" | head -n 1)
+
+if [[ -n "$NESTED_DIR" ]]; then
+    echo ">>> Flattening nested directory structure..."
+    # Move contents up
+    mv "$NESTED_DIR"/* "$DEST_DIR/"
+    rmdir "$NESTED_DIR"
+fi
+
+# Find the binary
+EXECUTABLE="$DEST_DIR/$APP_NAME"
+if [[ ! -f "$EXECUTABLE" ]]; then
+    # Try finding any executable file that isn't a library or helper
+    EXECUTABLE=$(find "$DEST_DIR" -maxdepth 2 -type f -executable ! -name "*.so*" ! -name "chrome_sandbox" ! -name "*.sh" | head -n 1)
+fi
+
+if [[ -z "$EXECUTABLE" || ! -f "$EXECUTABLE" ]]; then
+    echo "ERROR: Could not locate executable file in $DEST_DIR"
+    exit 1
+fi
+
+echo ">>> Found binary: $EXECUTABLE"
+
+# ------------------------------------------------------------------------------
+# 6. System Integration (Symlink, Icon, Desktop File)
+# ------------------------------------------------------------------------------
+BIN_LINK="/usr/local/bin/$APP_NAME"
+echo ">>> Creating symlink at $BIN_LINK..."
+ln -sf "$EXECUTABLE" "$BIN_LINK"
+
+# Handle Icon
+ICON_DEST="/usr/share/pixmaps/$APP_NAME.png"
+FOUND_ICON=""
+
+# 1. Look in resources
+if [[ -f "$DEST_DIR/resources/app/icon.png" ]]; then
+    FOUND_ICON="$DEST_DIR/resources/app/icon.png"
+elif [[ -f "$DEST_DIR/resources/app/icon.ico" ]]; then
+    FOUND_ICON="$DEST_DIR/resources/app/icon.ico"
+fi
+
+# 2. If not found, try to download from PWA manifest (Simplified)
+if [[ -z "$FOUND_ICON" ]]; then
+    echo ">>> Icon not found in build. Attempting to fetch from website..."
+    # Simple heuristic: try to grab apple-touch-icon or shortcut icon
+    ICON_URL=$(curl -sL "$TARGET_URL" | grep -oP 'rel="(apple-touch-icon|icon|shortcut icon)" href="\K[^"]+' | head -n 1)
+
+    if [[ -n "$ICON_URL" ]]; then
+        # Handle relative URLs
+        if [[ "$ICON_URL" != http* ]]; then
+             # Remove trailing slash from base if present and leading slash from path
+             BASE_URL="${TARGET_URL%/}"
+             PATH_URL="${ICON_URL#/}"
+             ICON_URL="$BASE_URL/$PATH_URL"
+        fi
+
+        echo ">>> Downloading icon from $ICON_URL..."
+        wget -q -O "$BUILD_TMP/downloaded_icon" "$ICON_URL" || true
+        if [[ -s "$BUILD_TMP/downloaded_icon" ]]; then
+            FOUND_ICON="$BUILD_TMP/downloaded_icon"
+        fi
+    fi
+fi
+
+if [[ -n "$FOUND_ICON" ]]; then
+    cp "$FOUND_ICON" "$ICON_DEST"
+    chmod 644 "$ICON_DEST"
+    echo ">>> Icon installed to $ICON_DEST"
+else
+    echo ">>> WARNING: No icon found. Desktop entry will use generic icon."
+fi
+
+# Desktop File
+DESKTOP_FILE="/usr/share/applications/$APP_NAME.desktop"
+echo ">>> Creating desktop entry at $DESKTOP_FILE..."
+
+cat > "$DESKTOP_FILE" <<EOF
+[Desktop Entry]
+Name=$RAW_NAME
+Exec=$BIN_LINK %U
+Icon=$APP_NAME
+Type=Application
+StartupNotify=true
+Categories=Network;Web;
+Terminal=false
+StartupWMClass=$APP_NAME
+EOF
+
+# Update cache
+if command -v update-desktop-database &> /dev/null; then
+    update-desktop-database /usr/share/applications || true
+fi
+
+# ------------------------------------------------------------------------------
+# 7. Create /bin wrapper with --no-sandbox flag
+# ------------------------------------------------------------------------------
+BIN_WRAPPER="/bin/$APP_NAME"
+echo ">>> Creating wrapper script at $BIN_WRAPPER..."
+
+cat > "$BIN_WRAPPER" <<EOF
+#!/usr/bin/env bash
+exec '$DEST_DIR/$APP_NAME' --no-sandbox "\$@"
+EOF
+
+chmod 755 "$BIN_WRAPPER"
+echo ">>> Wrapper script created: $BIN_WRAPPER"
+
+echo "------------------------------------------------------"
+echo " Installation Complete!"
+echo " App Name:  $RAW_NAME"
+echo " Command:   $APP_NAME"
+echo " Location:  $DEST_DIR"
+echo " Wrapper:   $BIN_WRAPPER"
+echo "------------------------------------------------------"

package/src/api/core/core.service.js

@@ -8,11 +8,6 @@ const CoreService = {
   post: async (req, res, options) => {
     /** @type {import('./core.model.js').CoreModel} */
     const Core = DataBaseProvider.instance[`${options.host}${options.path}`].mongoose.models.Core;
-    if (req.path.startsWith('/sh')) {
-      if (req.body.stdout) return shellExec(req.body.sh, { stdout: true });
-      shellExec(req.body.sh, { async: true });
-      return 'Command "' + req.body.sh + '" running';
-    }
     return await new Core(req.body).save();
   },
   get: async (req, res, options) => {

package/src/api/default/default.service.js

@@ -1,5 +1,6 @@
 import { DataBaseProvider } from '../../db/DataBaseProvider.js';
 import { loggerFactory } from '../../server/logger.js';
+import { DataQuery } from '../../server/data-query.js';
 
 const logger = loggerFactory(import.meta);
 
@@ -13,12 +14,13 @@ const DefaultService = {
     /** @type {import('./default.model.js').DefaultModel} */
     const Default = DataBaseProvider.instance[`${options.host}${options.path}`].mongoose.models.Default;
     if (req.params.id) return await Default.findById(req.params.id);
-    const { query, page = 1, limit = 10, sort = { updatedAt: -1 } } = req.query;
-    const queryPayload = query ? JSON.parse(query) : {};
-    const skip = (page - 1) * limit;
+
+    // Parse query parameters using DataQuery helper
+    const { query, sort, skip, limit, page } = DataQuery.parse(req.query);
+
     const [data, total] = await Promise.all([
-      Default.find(queryPayload).sort(sort).limit(limit).skip(skip),
-      Default.countDocuments(queryPayload),
+      Default.find(query).sort(sort).limit(limit).skip(skip),
+      Default.countDocuments(query),
     ]);
 
     const totalPages = Math.ceil(total / limit);

package/src/api/document/document.model.js

@@ -60,7 +60,7 @@ const DocumentDto = {
       return {
         path: 'userId',
         model: 'User',
-        select: '_id email username profileImageId',
+        select: '_id role username profileImageId briefDescription',
         populate: {
           path: 'profileImageId',
           model: 'File',

package/src/api/document/document.router.js

@@ -16,6 +16,11 @@ const DocumentRouter = (options) => {
   router.put(`/:id`, authMiddleware, async (req, res) => await DocumentController.put(req, res, options));
   router.put(`/`, authMiddleware, async (req, res) => await DocumentController.put(req, res, options));
   router.patch(`/:id/copy-share-link`, async (req, res) => await DocumentController.patch(req, res, options));
+  router.patch(
+    `/:id/toggle-public`,
+    authMiddleware,
+    async (req, res) => await DocumentController.patch(req, res, options),
+  );
   router.delete(`/:id`, authMiddleware, async (req, res) => await DocumentController.delete(req, res, options));
   router.delete(`/`, authMiddleware, async (req, res) => await DocumentController.delete(req, res, options));
   return router;