backend-plus 2.7.0-beta.0 → 2.7.0-beta.11

package/lib/backend-plus.js

@@ -29,6 +29,7 @@ var packagejson = require(process.cwd()+'/package.json');
 var stackTrace = require('stack-trace');
 var locatePath = require('@upgraded/locate-path');
 var jsYaml = require('js-yaml');
+var tabPlus = require('tab-plus');
 var nodemailer = require('nodemailer');
 var os = require('os');
 const cors = require('cors');
@@ -73,7 +74,7 @@ if(dashDashDir>0){
     console.log('cwd',process.cwd());
 }
 
-/** 
+/**
   * @param {string} text
   * @return {string}
   */
@@ -81,14 +82,14 @@ function md5(text){
     return crypto.createHash('md5').update(text).digest('hex');
 }
 
-const DEFAULT_ITERATIONS = 4096; 
+const DEFAULT_ITERATIONS = 4096;
 const HASH_ALGORITHM = 'sha256';
 
 // primera version de scram sha 256. El Verifier completo tenía 64 bytes.
-const LEGACY_KEY_LENGTH = 64; 
+const LEGACY_KEY_LENGTH = 64;
 
 // Formato nuevo/PG-Compatible: El Client Key tiene 32 bytes (SHA-256).
-const SCRAM_KEY_LENGTH = 32; 
+const SCRAM_KEY_LENGTH = 32;
 
 const bufferToBase64 = (buffer) => buffer.toString('base64');
 
@@ -96,31 +97,31 @@ const bufferToBase64 = (buffer) => buffer.toString('base64');
  * Función central para PBKDF2 (Acepta KEY_LEN para compatibilidad).
  * Devuelve la clave derivada con la longitud especificada.
  */
-async function deriveKey(password, saltBuffer, iterations, keyLength) { 
+async function deriveKey(password, saltBuffer, iterations, keyLength) {
     return new Promise((resolve, reject) => {
         crypto.pbkdf2(
-            password, 
+            password,
             saltBuffer,
-            iterations, 
+            iterations,
             keyLength,
-            HASH_ALGORITHM, 
+            HASH_ALGORITHM,
             (err, derivedKey) => {
                 if (err) return reject(err);
-                resolve(derivedKey); 
+                resolve(derivedKey);
             }
         );
     });
 }
 
 async function generateScramVerifier(password) {
-    const saltBuffer = crypto.randomBytes(16); 
+    const saltBuffer = crypto.randomBytes(16);
     const saltBase64 = bufferToBase64(saltBuffer);
 
     const Hi = await deriveKey(
-        password, 
-        saltBuffer, 
+        password,
+        saltBuffer,
         DEFAULT_ITERATIONS,
-        SCRAM_KEY_LENGTH 
+        SCRAM_KEY_LENGTH
     );
     const clientKey = crypto.createHmac('sha256', Hi).update('Client Key').digest();
     const serverKey = crypto.createHmac('sha256', Hi).update('Server Key').digest();
@@ -144,27 +145,27 @@ async function verifyScramPG(password, storedScramString) {
     if (!storedScramString.startsWith('SCRAM-SHA-256$')) {
         return false;
     }
-    
+
     const parts = storedScramString.split('$');
     if (parts.length !== 3) {
         return false;
     }
-        
+
     const [storedIterations, saltBase64] = parts[1].split(':');
     const [storedKeyBase64, serverKeyBase64] = parts[2].split(':'); // Asume StoredKey y ServerKey
 
     if (!saltBase64 || !storedKeyBase64 || !serverKeyBase64 || isNaN(parseInt(storedIterations))) {
         return false;
     }
-    
+
     const iterations = parseInt(storedIterations);
     const saltBuffer = Buffer.from(saltBase64, 'base64');
     const storedKeyBuffer = Buffer.from(storedKeyBase64, 'base64');
     const serverKeyBuffer = Buffer.from(serverKeyBase64, 'base64');
 
     const Hi = await deriveKey(
-        password, 
-        saltBuffer, 
+        password,
+        saltBuffer,
         iterations,
         SCRAM_KEY_LENGTH
     );
@@ -203,21 +204,21 @@ async function verifyScramLegacy(password, storedScramString) {
     if (parts.length !== 3) {
         throw new Error('Formato SCRAM almacenado inválido.');
     }
-        
+
     // Obtiene iteraciones y salt de la segunda parte (ej: '4096:SALT_BASE64')
     const [storedIterations, storedSalt] = parts[1].split(':');
     const storedVerifier = parts[2];
-    
+
     if (!storedSalt || !storedVerifier || isNaN(parseInt(storedIterations))) {
         throw new Error('Datos de SCRAM incompletos o malformados.');
     }
-    
+
     const iterations = parseInt(storedIterations);
 
     // Deriva la clave de la contraseña ingresada
     const generatedVerifierBuffer = await deriveKey(
-        password, 
-        storedSalt, 
+        password,
+        storedSalt,
         iterations,
         LEGACY_KEY_LENGTH
     );
@@ -313,7 +314,7 @@ AppBackend.prototype.configStaticConfig = function configStaticConfig(){
           min-version: 12
           fkOnUpdate: cascade
           max: 50
-        log: 
+        log:
           db:
             until: 2001-01-01 00:00
             last-error: false
@@ -326,7 +327,7 @@ AppBackend.prototype.configStaticConfig = function configStaticConfig(){
             "":
               local-path: for-client
           bin: {}
-        client-setup: 
+        client-setup:
           skin: ""
           lang: en
           version: 1.0
@@ -589,7 +590,7 @@ function MemoryPerodicallySaved(session){
 })}
 
 /**
- * @param {string} text 
+ * @param {string} text
  */
 AppBackend.prototype.jsonPass = function jsonPass(text){
     return JSON.stringify(text,null,'    ').replace(/\n(.*".*(pass|clave|secret).*":\s*").*(",?)\n/gi,'\n$1********$3\n');
@@ -751,7 +752,7 @@ AppBackend.prototype.start = function start(opts){
         while(iPosDbDump && iPosDbDump<process.argv.length && !process.argv[iPosDbDump].startsWith('--')){
             dumps.push(process.argv[iPosDbDump]);
             iPosDbDump++;
-        } 
+        }
         opts["dump-db"]={
             complete:!dumps.length,
             tableNames:dumps instanceof Array?dumps:null,
@@ -888,8 +889,8 @@ AppBackend.prototype.start = function start(opts){
                 }
                 be.db = pg;
                 be.dbUserNameExpr="get_app_user()";
-                be.dbUserRolExpr=`(select ${be.db.quoteIdent(be.config.login.rolFieldName)} 
-                    from ${be.config.login.schema?be.db.quoteIdent(be.config.login.schema)+'.':''}${be.db.quoteIdent(be.config.login.table)} 
+                be.dbUserRolExpr=`(select ${be.db.quoteIdent(be.config.login.rolFieldName)}
+                    from ${be.config.login.schema?be.db.quoteIdent(be.config.login.schema)+'.':''}${be.db.quoteIdent(be.config.login.table)}
                     where ${be.db.quoteIdent(be.config.login.userFieldName)} = ${be.dbUserNameExpr})`
             }).then(function(){
                 if(opts["dump-db"]){
@@ -1032,6 +1033,7 @@ AppBackend.prototype.start = function start(opts){
                         console.log(err);
                         throw err;
                     }
+                    await pg.setAllTypes(client);
                     var data = await client.query("SELECT current_timestamp as cts").fetchUniqueRow();
                     if(verboseStartup){
                         console.log('NOW in Database',data.row.cts);
@@ -1047,7 +1049,7 @@ AppBackend.prototype.start = function start(opts){
                 },function(){ /*OK, login.jade must not be here */ }),
                 fs.stat('client/login.jade').then(function(){
                     return Path.resolve(be.rootPath,'client/login');
-                },function(){ 
+                },function(){
                     return Path.join(__dirname,'../for-client/login');
                 }).then(function(loginFile){
                     be.config.login.plus.loginPageServe=function(req,res,next){
@@ -1164,7 +1166,7 @@ AppBackend.prototype.start = function start(opts){
             if(verboseStartup){
                 console.log('-------------------');
                 console.log(
-                    'be.config.login', 
+                    'be.config.login',
                     be.jsonPass(be.config.login)
                 );
             }
@@ -1193,7 +1195,7 @@ AppBackend.prototype.start = function start(opts){
                 }
             });
             const updatePassword = async ({client, username, password, setUpdateDate, errorIfNoResult}) => {
-                const {table, passFieldName, userFieldName, passUpdatedAtFieldName, passAlgorithmFieldName, schema} = be.config.login;                
+                const {table, passFieldName, userFieldName, passUpdatedAtFieldName, passAlgorithmFieldName, schema} = be.config.login;
                 const hashPass = await generateScramVerifier(password);
                 let params = [username, hashPass];
                 let setters = [`${be.db.quoteIdent(passFieldName)} = $2`];
@@ -1204,9 +1206,9 @@ AppBackend.prototype.start = function start(opts){
                 if(setUpdateDate && passUpdatedAtFieldName){
                     setters.push(`${be.db.quoteIdent(passUpdatedAtFieldName)} = current_timestamp`)
                 }
-                        
+
                 const result = await client.query(`
-                    UPDATE ${(schema ? be.db.quoteIdent(schema) + '.' : '') + be.db.quoteIdent(table)} 
+                    UPDATE ${(schema ? be.db.quoteIdent(schema) + '.' : '') + be.db.quoteIdent(table)}
                         SET ${setters.join(', ')}
                         WHERE ${be.db.quoteIdent(userFieldName)} = $1
                         returning 1 as ok
@@ -1236,7 +1238,7 @@ AppBackend.prototype.start = function start(opts){
                                     [userFieldName]
                                 )
                             ).concat(passFieldName);
-                        
+
                         const sql = "SELECT  "+infoFieldList.map(function(fieldOrPair){ return fieldOrPair.split(' as ').map(function(ident){ return be.db.quoteIdent(ident)}).join(' as '); })+
                                 ", "+be.config.login.activeClausule+" as active "+
                                 ", "+be.config.login.lockedClausule+" as locked "+
@@ -1264,7 +1266,7 @@ AppBackend.prototype.start = function start(opts){
                                 if(await verifyScramPG(password, user[passFieldName])){
                                     isScramValid = true;
                                 }
-                                
+
                                 // 2. Intento con formato Legacy (64 bytes)
                                 else if(await verifyScramLegacy(password, user[passFieldName])){
                                     isScramValid = true;
@@ -1274,7 +1276,7 @@ AppBackend.prototype.start = function start(opts){
                                     done(null,false,{message:be.messages.unlogged.login.userOrPassFail});
                                     return
                                 }
-                            }else{                         
+                            }else{
                                 if (md5(password+username.toLowerCase()) === user[passFieldName]){
                                     needsMigration = true;
                                 }else{
@@ -1288,7 +1290,7 @@ AppBackend.prototype.start = function start(opts){
                                 if (be.config.log["pass-migration"]) console.log('Migración completada.');
                             }
                         }
-                        //continua validando                    
+                        //continua validando
                         if(data.rowCount==1){
                             if(!data.row.active){
                                 done(null,false,{message:be.messages.unlogged.login.inactiveFail});
@@ -1344,7 +1346,7 @@ AppBackend.prototype.start = function start(opts){
                 const data = await client.query(
                     `SELECT *
                         FROM ${(schema ? be.db.quoteIdent(schema) + '.' : '')}${be.db.quoteIdent(table)}
-                        WHERE ${be.db.quoteIdent(userFieldName)} = $1`, 
+                        WHERE ${be.db.quoteIdent(userFieldName)} = $1`,
                     [username]
                 ).fetchOneRowIfExists();
                 if (data.rowCount !== 1) {
@@ -1360,7 +1362,7 @@ AppBackend.prototype.start = function start(opts){
                             ok = await verifyScramLegacy(oldPassword, storedHash);
                         }
                     } else { //Intento MD5
-                        const md5Hash = md5(oldPassword + username.toLowerCase()); 
+                        const md5Hash = md5(oldPassword + username.toLowerCase());
                         ok = (md5Hash === storedHash);
                     }
                     if (!ok) {
@@ -1454,7 +1456,7 @@ AppBackend.prototype.start = function start(opts){
             to: be.config.mailer?.supervise?.to,
             subject: `npm start ${be.config["client-setup"]?.title || packagejson.name} ok ✔️`,
             text:`Inicio del servicio: ${new Date().toJSON()}
-            
+
             Contexto: ${os.userInfo().username} ${process.cwd()}
             `
         }, {ignoreNoMailer:true, event:'restart-ok'})
@@ -1462,7 +1464,7 @@ AppBackend.prototype.start = function start(opts){
         if(err.dumping=='ok'){
             console.log('db struct dumped');
             process.exit(0);
-            return; 
+            return;
         }
         console.log('ERROR',err.stack || err);
         if(err.context){
@@ -1476,11 +1478,11 @@ AppBackend.prototype.start = function start(opts){
             to: be.config.mailer?.supervise?.to,
             subject: `npm start ${be.config["client-setup"]?.title || packagejson.name} fallido 🛑`,
             text:`Falla en el inicio del servicio: ${new Date().toJSON()}
-            
+
             Contexto: ${os.userInfo().username} ${process.cwd()}
 
             Mensaje: ${err.message}
-            
+
             ${err.stack}
             `
         }, {ignoreNoMailer:true, event:'restart-fail'})
@@ -1549,7 +1551,7 @@ AppBackend.prototype.checkDatabaseStructure = async function checkDatabaseStruct
                 throw err;
             }
             try{
-                await client.query(`select ${be.db.quoteIdentList(be.config.login.forget.mailFields)} 
+                await client.query(`select ${be.db.quoteIdentList(be.config.login.forget.mailFields)}
                     from ${be.config.login.schema?be.db.quoteIdent(be.config.login.schema)+'.':''}${be.config.login.table} limit 1`).fetchOneRowIfExists();
             }catch(err){
                 var mensaje = `
@@ -1564,7 +1566,7 @@ AppBackend.prototype.checkDatabaseStructure = async function checkDatabaseStruct
         }
     }
     var bitacoraTableName = be.config.server.bitacoraTableName || 'bitacora';
-    var bitacoraId = await client.query(`SELECT data_type 
+    var bitacoraId = await client.query(`SELECT data_type
         FROM information_schema.columns
         WHERE /*table_schema = 'his' AND*/ table_name = '${bitacoraTableName}' AND column_name = 'id'
     `).fetchOneRowIfExists();
@@ -1609,9 +1611,9 @@ AppBackend.prototype.postConfig = function postConfig(){
 AppBackend.prototype.getContext = function getContext(req){
     var be = this;
     return {
-        be, user:req.user, session:req.session, 
-        username:req.user && req.user[be.config.login.userFieldName], 
-        machineId:req.machineId, 
+        be, user:req.user, session:req.session,
+        username:req.user && req.user[be.config.login.userFieldName],
+        machineId:req.machineId,
         navigator:(req.userAgent||{}).shortDescription||'?'
     };
 }
@@ -1641,7 +1643,7 @@ AppBackend.prototype.generateInsertSQL = function generateInsertSQL(schemaName,
     var cleanValues = [];
     for (var key in insertElement) {
         cleanKeys.push(db.quoteIdent(key));
-        cleanValues.push(db.quoteNullable(insertElement[key]));    
+        cleanValues.push(db.quoteNullable(insertElement[key]));
     }
     var sql =  `INSERT INTO ${db.quoteIdent(schemaName)}.${db.quoteIdent(tableName)}
         (${cleanKeys.join(',')}) VALUES (${cleanValues.join(',')}) returning id`;
@@ -1659,7 +1661,7 @@ AppBackend.prototype.updateUpdateSQL = function updateUpdateSQL(schemaName, tabl
     for (var key in updateConditions) {
         filterPairs.push(be.db.quoteIdent(key) + " = " + be.db.quoteLiteral(updateConditions[key]));
     };
-    var sql =  `UPDATE ${db.quoteIdent(schemaName)}.${db.quoteIdent(tableName)} 
+    var sql =  `UPDATE ${db.quoteIdent(schemaName)}.${db.quoteIdent(tableName)}
         SET ${setPairs.join(',')}
         WHERE ${filterPairs.join(' AND ')}`;
     return sql;
@@ -1667,7 +1669,7 @@ AppBackend.prototype.updateUpdateSQL = function updateUpdateSQL(schemaName, tabl
 
 
 /** @param {boolean} forUnlogged */
-AppBackend.prototype.addProcedureServices = function addProcedureServices(forUnlogged){ 
+AppBackend.prototype.addProcedureServices = function addProcedureServices(forUnlogged){
     var be = this;
     if(forUnlogged){
         var app = express();
@@ -1685,7 +1687,7 @@ AppBackend.prototype.addProcedureServices = function addProcedureServices(forUnl
         be.procedures = defs;
         be.clientSetup.procedure = be.procedure;
         app.get('/client-setup',async function(req, res, next){
-            if(forUnlogged && req.user){ 
+            if(forUnlogged && req.user){
                 // este pedido es para unlogged y está logueado, va al próximo
                 next();
             }else{
@@ -1715,12 +1717,12 @@ AppBackend.prototype.addProcedureServices = function addProcedureServices(forUnl
             if(!isLowerIdent(procedureDef.action)){
                 console.error('**** DEPRECATED ***** procedureDef action '+JSON.stringify(procedureDef.action)+' must be a Lower Ident');
             }
-            app[procedureDef.method]('/'+procedureDef.action, 
+            app[procedureDef.method]('/'+procedureDef.action,
             /**
-             * 
-             * @param {Request} req 
-             * @param {Response} res 
-             * @param {import('express').NextFunction} next 
+             *
+             * @param {Request} req
+             * @param {Response} res
+             * @param {import('express').NextFunction} next
              */
             async function(req, res, next){
                 const BITACORA_SCHEMA = be.config.server.bitacoraSchema;
@@ -1773,9 +1775,9 @@ AppBackend.prototype.addProcedureServices = function addProcedureServices(forUnl
                         init_date: initDatetimeString,
                     };
                     var getFinalStatusBitacoraElement = function getFinalStatusBitacoraElement(){
-                        return { 
-                            end_date: getDatetimeString(), 
-                            end_status: status, 
+                        return {
+                            end_date: getDatetimeString(),
+                            end_status: status,
                             has_error: hasError
                         }
                     }
@@ -1805,12 +1807,12 @@ AppBackend.prototype.addProcedureServices = function addProcedureServices(forUnl
                         var params = getParams();
                         if(status){
                             //terminó ejecucion
-                            updateElement[procedureDef.bitacora.targetTableBitacoraFields.end_date] = getDatetimeString(); 
+                            updateElement[procedureDef.bitacora.targetTableBitacoraFields.end_date] = getDatetimeString();
                             updateElement[procedureDef.bitacora.targetTableBitacoraFields.end_status] = status;
                             updateElement[procedureDef.bitacora.targetTableBitacoraFields.has_error] = hasError;
                         }else{
                             //empezó ejecucion
-                            updateElement[procedureDef.bitacora.targetTableBitacoraFields.init_date] = initDatetimeString; 
+                            updateElement[procedureDef.bitacora.targetTableBitacoraFields.init_date] = initDatetimeString;
                         }
                         await be.inTransaction(req,async function(client){
                             targetTableUpdateFieldsCondition.forEach(function(field){
@@ -2114,7 +2116,7 @@ AppBackend.prototype.optsGenericForFiles = function optsGenericForFiles(req, opt
     return changing(be.optsGenericForAll||{},{
         allowedExts:be.exts.normal,
         jade:{
-            skin:skin, 
+            skin:skin,
             skinUrl:skinUrl,
             formTitle:title,
             ...(opts?.withFlash ? {flash:req?.flash?.()} : {}),
@@ -2133,8 +2135,8 @@ AppBackend.prototype.unloggedLandPage = function unloggedLandPage(req){
         html.h2({style:'text-align:center; margin-top:15%; font-family:arial, sans-serif'},[be.messages.server.notLoggedIn]),
         html.h2({style:'text-align:center'},[html.code([
             html.a({
-                id:'goto-login', 
-                style:'border:0.5px solid blue; border-radius: 6px; padding: 6px', 
+                id:'goto-login',
+                style:'border:0.5px solid blue; border-radius: 6px; padding: 6px',
                 href:Path.posix.join(be.config.server["base-url"],(be.config.login.plus.loginUrlPath||'/login'))
             },'login')
         ])]),
@@ -2157,8 +2159,8 @@ AppBackend.prototype.addUnloggedServices = function addUnloggedServices(mainApp,
                     var now = bestGlobals.datetime.now();
                     var token = crypto.randomUUID();
                     var {rows} = await client.query(`select ${be.db.quoteIdent(be.config.login.userFieldName)} as username
-                        from ${be.config.login.schema?be.db.quoteIdent(be.config.login.schema)+'.':''}${be.db.quoteIdent(be.config.login.table)} 
-                        where $1 in (${be.db.quoteIdentList(be.config.login.forget.mailFields)}) 
+                        from ${be.config.login.schema?be.db.quoteIdent(be.config.login.schema)+'.':''}${be.db.quoteIdent(be.config.login.table)}
+                        where $1 in (${be.db.quoteIdentList(be.config.login.forget.mailFields)})
                           and ${be.config.login.activeClausule}
                           and ${be.config.login.lockedClausule} is not true
                     `, [req.body.email.toLowerCase()]).fetchAll();
@@ -2266,21 +2268,21 @@ AppBackend.prototype.addUnloggedServices = function addUnloggedServices(mainApp,
     // http://localhost:3033/img/login-logo-icon.png
     mainApp.get(Path.posix.join(baseUrl,'/img/login-logo-icon.png'), async function(req,res,next){
         var buscar = [
-            'unlogged/img/login-logo-icon.svg', 
-            'dist/unlogged/img/login-logo-icon.svg', 
-            'dist/client/unlogged/img/login-logo-icon.svg', 
-            'unlogged/img/login-logo-icon.png', 
-            'dist/unlogged/img/login-logo-icon.png', 
-            'dist/client/unlogged/img/login-logo-icon.png', 
-            'unlogged/img/logo.png', 
-            'dist/unlogged/img/logo.png', 
-            'dist/client/unlogged/img/logo.png', 
-            'client/img/logo.png', 
-            'dist/client/img/logo.png', 
-            'dist/client/client/img/logo.png', 
+            'unlogged/img/login-logo-icon.svg',
+            'dist/unlogged/img/login-logo-icon.svg',
+            'dist/client/unlogged/img/login-logo-icon.svg',
+            'unlogged/img/login-logo-icon.png',
+            'dist/unlogged/img/login-logo-icon.png',
+            'dist/client/unlogged/img/login-logo-icon.png',
+            'unlogged/img/logo.png',
+            'dist/unlogged/img/logo.png',
+            'dist/client/unlogged/img/logo.png',
+            'client/img/logo.png',
+            'dist/client/img/logo.png',
+            'dist/client/client/img/logo.png',
             'unlogged/img/logo-128.png',
             'dist/unlogged/img/logo-128.png',
-            'dist/client/unlogged/img/logo-128.png' 
+            'dist/client/unlogged/img/logo-128.png'
         ];
         buscar = buscar.map(n=>be.rootPath+'/'+n);
         buscar.push(__dirname+'/../for-client/img/login-logo-icon.png');
@@ -2295,7 +2297,7 @@ AppBackend.prototype.addUnloggedServices = function addUnloggedServices(mainApp,
     be.clientIncludesCompleted(null).filter(x => x.module).forEach(function (moduleDef) {
         if(baseUrl=='/'){
             baseUrl='';
-        }   
+        }
         let baseLib = baseUrl + '/' + (moduleDef.path ? moduleDef.path : be.esJavascript(moduleDef.type)? 'lib': 'css');
         resolve_module_dir(moduleDef.module, moduleDef.modPath, moduleDef.file ?? '.')
         try {
@@ -2319,7 +2321,7 @@ AppBackend.prototype.addUnloggedServices = function addUnloggedServices(mainApp,
     // ----------------------------------------------------
     var skin=be.config['client-setup'].skin;
     var skinUrl=(skin?skin+'/':'');
-    var optsGenericForFilesUnlogged=be.optsGenericForFiles(); 
+    var optsGenericForFilesUnlogged=be.optsGenericForFiles();
     var skinPaths=[Path.join(be.rootPath,'skins')];
     if(be.config.server.skins[skin]['local-path']){
         skinPaths=skinPaths.concat(be.config.server.skins[skin]['local-path']).map(function(path){
@@ -2372,12 +2374,14 @@ AppBackend.prototype.getVisibleMenu = function getVisibleMenu(menu, context){
 
 AppBackend.prototype.clientIncludes = function clientIncludes(req, opts) {
     const hideBEPlusInclusions = opts === true || opts && typeof opts == "object" && opts.hideBEPlusInclusions;
-    opts = opts === true ? {} : opts || {}; 
+    opts = opts === true ? {} : opts || {};
     var list = [];
     if (!hideBEPlusInclusions) {
         list = [
             // { type: 'js', module: 'xlsx', modPath: 'dist', file: 'xlsx.core.min.js' },
-            { type: 'js', module: 'xlsx', modPath: 'dist', file: 'xlsx.full.min.js' },
+            { type: 'js', module: 'fflate', modPath: '../umd', file: 'index.js' },
+            { type: 'js', module: 'xlsx-now', modPath: '../../umd', file: 'xlsx-now.umd.js' },
+            { type: 'js', module: 'xlsx-now', modPath: '../../umd', file: 'xlsx-now-browser.umd.js' },
             { type: 'js', module: 'require-bro' },
             { type: 'js', module: 'js-yaml', modPath: 'browser', file: 'js-yaml.umd.min.js' },
             { type: 'js', module: 'cast-error' },
@@ -2463,7 +2467,7 @@ AppBackend.prototype.clientModules = function clientModules(req, opts) {
 }
 
 /**
- * @param {string} tableName 
+ * @param {string} tableName
  * @param {(tableDef:typesOpe.TableDefinition, context?:TableContext)=>void} appenderFunction
  */
 AppBackend.prototype.appendToTableDefinition = function appendToTableDefinition(tableName, appenderFunction){
@@ -2520,16 +2524,16 @@ AppBackend.prototype.csss = function csss(hideBEPlusInclusions){
 AppBackend.prototype.scanSkinFiles = function scanSkinFiles() {
     var be = this;
     var skinName = be.config['client-setup'].skin;
-    be.activeSkinFiles = new Set(); 
+    be.activeSkinFiles = new Set();
 
     var skinConfig = be.config.server.skins && be.config.server.skins[skinName];
 
     if (skinName && skinConfig && skinConfig['local-path']) {
         try {
             var skinPath = Path.join(Path.resolve(skinConfig['local-path']), skinName);
-            
+
             if (fs.existsSync(skinPath)) {
-                
+
                 const walk = (currentPath) => {
                     const entries = fs.readdirSync(currentPath, { withFileTypes: true });
 
@@ -2544,7 +2548,7 @@ AppBackend.prototype.scanSkinFiles = function scanSkinFiles() {
                                 var relativePath = Path.relative(skinPath, fullPath)
                                     .replace(/\\/g, '/')
                                     .replace(/^\//, '');
-                                
+
                                 be.activeSkinFiles.add(relativePath);
                             }
                         }
@@ -2631,7 +2635,7 @@ AppBackend.prototype.mainPage = function mainPage(req, offlineMode, opts){
 
             var lastDotIndex = css.lastIndexOf('.');
             var cssBase = (lastDotIndex !== -1) ? css.substring(0, lastDotIndex) : css;
-            
+
             var existsInSkin = EXTENSIONES_SKIN.some(function(ext) {
                 return be.activeSkinFiles.has(cssBase + ext);
             });
@@ -2897,7 +2901,7 @@ AppBackend.prototype.validateBitacora = function validateBitacora(procedureDef){
         var tableDefFields = be.tableStructures[procedureDef.bitacora.targetTable](contextForDump).fields;
         var targetTableBitacoraFields = procedureDef.bitacora.targetTableBitacoraFields;
         for (var fieldForSearch in targetTableBitacoraFields) {
-            var searchResult = tableDefFields.find(function findByName(field) { 
+            var searchResult = tableDefFields.find(function findByName(field) {
                 return field.name === targetTableBitacoraFields[fieldForSearch];
             });
             if(!searchResult){
@@ -2905,12 +2909,12 @@ AppBackend.prototype.validateBitacora = function validateBitacora(procedureDef){
             }
         }
         var targetTableUpdateFieldsCondition = procedureDef.bitacora.targetTableUpdateFieldsCondition || ['init_date','end_date','has_error', 'end_status'];
-        if(targetTableUpdateFieldsCondition){  
+        if(targetTableUpdateFieldsCondition){
             if(targetTableUpdateFieldsCondition.length == 0){
                 throw Error("Bitacora bad definition in core function '" + procedureDef.action + "', targetTableUpdateFieldsCondition must to be defined for table '" + procedureDef.bitacora.targetTable + "'.");
             }
             targetTableUpdateFieldsCondition.forEach(function(fieldName){
-                var searchResult = tableDefFields.find(function findByName(field) { 
+                var searchResult = tableDefFields.find(function findByName(field) {
                     return field.name === fieldName;
                 });
                 if(!searchResult){
@@ -3036,11 +3040,13 @@ AppBackend.prototype.dumpDbTableFields = function dumpDbTableFields(tableDef, op
             }
             fields.push(
                 '  '+db.quoteIdent(fieldDef.name)+
-                ' '+(fieldDef.dataLength?(fieldType=='text'?'varchar':fieldType)+'('+fieldDef.dataLength+')':fieldType)+
+                ' '+(fieldDef.dataLength?(fieldType=='text'?'varchar':fieldType)+'('+fieldDef.dataLength+
+                    (fieldDef.dataDecimals?','+fieldDef.dataDecimals:'')
+                +')':fieldType)+
                 ( be.specialSqlDefaultExpressions[fieldDef.defaultDbValue] != null ? ' default ' + be.specialSqlDefaultExpressions[fieldDef.defaultDbValue]
-                : fieldDef.defaultDbValue != null ? ' default ' + fieldDef.defaultDbValue 
+                : fieldDef.defaultDbValue != null ? ' default ' + fieldDef.defaultDbValue
                 : be.specialSqlDefaultExpressions[fieldDef.specialDefaultValue] != null ? ' default ' + be.specialSqlDefaultExpressions[fieldDef.specialDefaultValue]
-                : fieldDef.defaultValue != null ? ' default ' + db.quoteLiteral(fieldDef.defaultValue) 
+                : fieldDef.defaultValue != null ? ' default ' + db.quoteLiteral(fieldDef.defaultValue)
                 : ''
                 ) +
                 (be.isGeneratedSequence(fieldDef.sequence)?' generated always as identity':'')+
@@ -3193,7 +3199,7 @@ AppBackend.prototype.dumpDbSchemaPartial = async function dumpDbSchemaPartial(pa
                 lines.push(');');
                 //TODO: REFACTOR: Hacerlo mas sencillo
                 // este codigo se encarga de convertir a rights de sql nuestros propios rights
-                // por ej (import -> [insert, update]) 
+                // por ej (import -> [insert, update])
                 var allows = tableDef.allow;
                 var appToSqlRights = {'import': ['insert', 'update'], 'export': ['select'], 'deleteAll': ['delete']};
                 [ 'import', 'export', 'deleteAll'].filter(function(right){
@@ -3250,7 +3256,7 @@ AppBackend.prototype.dumpDbSchemaPartial = async function dumpDbSchemaPartial(pa
                     var prefix = 'alter table '+cualQuoteTableName+' add '+
                         (cons.consName?'constraint '+db.quoteIdent(cons.consName)+' ':'');
                     switch(cons.constraintType){
-                    case 'unique': 
+                    case 'unique':
                         sql='('+cons.fields.map(function(field){ return db.quoteIdent(field); }).join(', ')+')';
                         if(cons.where){
                             if(cons.consName == null){
@@ -3262,10 +3268,10 @@ AppBackend.prototype.dumpDbSchemaPartial = async function dumpDbSchemaPartial(pa
                             prefix += 'unique ';
                         }
                     break;
-                    case 'check': 
+                    case 'check':
                         sql='check ('+cons.expr+')';
                     break;
-                    case 'exclude': 
+                    case 'exclude':
                         sql=`exclude using ${cons.using} (${cons.fields.map(f => typeof f == "string"?`${f} WITH =`:`${f.fieldName} WITH ${f.operator}`).join(', ')})${cons.where ? ` WHERE (${cons.where})`:``}`;
                     break;
                     default:
@@ -3308,7 +3314,7 @@ AppBackend.prototype.dumpDbSchemaPartial = async function dumpDbSchemaPartial(pa
                                 (polcom.using?     ` USING ( ${polcom.using} )`:'')+
                                 (polcom.check?` WITH CHECK ( ${polcom.check} )`:'')+';'
                             );
-                        }                        
+                        }
                     });
                 }
             }else{
@@ -3349,7 +3355,7 @@ begin
     else
         select ${be.config.login.infoFieldList.map(fieldName => db.quoteIdent(fieldName)).join(', ')}
             into ${be.config.login.infoFieldList.map(fieldName => db.quoteIdent('v_'+fieldName)).join(', ')}
-            
+
             from ${(be.config.login.from ?? (
                 (be.config.login.schema?be.db.quoteIdent(be.config.login.schema)+'.':'')+
                 be.db.quoteIdent(be.config.login.table)))}
@@ -3360,7 +3366,7 @@ begin
         set backend_plus._mode = normal;
     end if;
     perform set_config('backend_plus._user', p_username, false);
-end;    
+end;
 $body$;
 
     `)
@@ -3374,7 +3380,7 @@ $body$;
             var allTableContent = await fs.readFile('install/local-dump.psql','utf-8');
             var startIndex = allTableContent.indexOf('-- Data for Name: ');
             console.log('startIndex', startIndex);
-            var lastUseful = allTableContent.lastIndexOf('\nSELECT pg_catalog.setval') 
+            var lastUseful = allTableContent.lastIndexOf('\nSELECT pg_catalog.setval')
             console.log('lastUseful', lastUseful);
             if (lastUseful == -1) lastUseful = allTableContent.lastIndexOf('\n\\.\n');
             console.log('lastUseful', lastUseful);
@@ -3454,6 +3460,7 @@ $body$;
                     });
                     rows=lines;
                 }else{
+                    /* PARSEO DEL ARCHIVO .TAB */
                     var lines=content.split(/\r?\n/)
                         .filter(line => !(/^[-| ]*$/.test(line)) )
                         .map(line => splitRawRowIntoRow(line))
@@ -3487,14 +3494,61 @@ $body$;
                                             throw Error("no se encuentra la columna "+filteredFieldDef[i]+" en "+tableName);
                                         }
                                         return value==='' ? (
-                                            def.allowEmptyText && ('nullable' in def) && !def.nullable ? "''" : 'null' 
+                                            def.allowEmptyText && ('nullable' in def) && !def.nullable ? "''" : 'null'
                                         ) : db.quoteNullable(value);
                                     }).join(', ')+")";
                                 }).join(',\n')+';\n';
                         }
                         dataText.push(dataString);
+                        if(process.env.TRY_TAB_PLUS){
+                            var tabPlusEmptySymbol = Symbol('empty');
+                            var parsedTabPlus = tabPlus.parseTab(content, {emptyField: tabPlusEmptySymbol});
+                            var tabPlusFields = parsedTabPlus.fields;
+                            var tabPlusRows = parsedTabPlus.rows;
+                            /* a partir de acá: solo construcción de SQL a partir de {fields,rows}, sin volver a tocar el parseo */
+                            var filteredFieldDefTabPlus = tabPlusFields.filter(filterField);
+                            var dataStringTabPlus;
+                            if(tablesWithStrictSequence[tableName]){
+                                dataStringTabPlus="COPY "+db.quoteIdent(tableName)+" ("+
+                                    filteredFieldDefTabPlus.map(db.quoteIdent).join(', ')+
+                                    ') FROM stdin;\n'+
+                                    tabPlusRows.map(function(line){
+                                        return line.filter(function(_,i){ return filterField(tabPlusFields[i]);}).map(function(value,i){
+                                            var def = tableDef.field[filteredFieldDefTabPlus[i]];
+                                            return value===tabPlusEmptySymbol ? (
+                                                    def.allowEmptyText && ('nullable' in def) && !def.nullable ? '' : '\\N'
+                                                ): value.replace(/\\/g,'\\\\').replace(/\t/g,'\\t').replace(/\n/g,'\\n').replace(/\r/g,'\\r');
+                                        }).join('\t')+'\n';
+                                    }).join('')+'\\.\n';
+                            }else{
+                                dataStringTabPlus="insert into "+db.quoteIdent(tableName)+" ("+
+                                    filteredFieldDefTabPlus.map(db.quoteIdent).join(', ')+
+                                    ') values\n'+
+                                    tabPlusRows.map(function(line){
+                                        return "("+line.filter(function(_,i){ return filterField(tabPlusFields[i]);}).map(function(value,i){
+                                            var def = tableDef.field[filteredFieldDefTabPlus[i]];
+                                            if(def == null) {
+                                                throw Error("no se encuentra la columna "+filteredFieldDefTabPlus[i]+" en "+tableName);
+                                            }
+                                            return value===tabPlusEmptySymbol ? (
+                                                def.allowEmptyText && ('nullable' in def) && !def.nullable ? "''" : 'null'
+                                            ) : db.quoteNullable(value);
+                                        }).join(', ')+")";
+                                    }).join(',\n')+';\n';
+                            }
+                            if(dataStringTabPlus !== dataString){
+                                var oldSqlPath = path.replace(/\.tab$/,'')+'-old-local.sql';
+                                var newSqlPath = path.replace(/\.tab$/,'')+'-new-local.sql';
+                                fs.writeFileSync(oldSqlPath, dataString, {encoding:'UTF8'});
+                                fs.writeFileSync(newSqlPath, dataStringTabPlus, {encoding:'UTF8'});
+                                if (process.env.TRY_TAB_PLUS == 'ON-ERROR-STOP') {
+                                    throw new Error('TRY_TAB_PLUS: el parseo con tab-plus difiere del parseo anterior para '+tableName+' ('+path+'). Ver '+oldSqlPath+' y '+newSqlPath);
+                                } else {
+                                    console.log('TRY_TAB_PLUS: el parseo con tab-plus difiere del parseo anterior para '+tableName+' ('+path+'). Ver '+oldSqlPath+' y '+newSqlPath);
+                                }
+                            }
+                        }
                     }
-                    // tablesWithStrictSequence[tableName]
                 }
             }).catch(function(err){
                 if(err.code=='ENOENT'){
@@ -3522,7 +3576,7 @@ $body$;
         ]
         .map(async function(fileNames){
             if (!fileNames) return '';
-            var i = 0; 
+            var i = 0;
             return (await Promise.all(fileNames.map(async fileName => {
                 var content;
                 do {
@@ -3574,7 +3628,7 @@ $body$;
         '\n-- functions\n' + functionLines.join('\n')+
         '\n-- lines \n' + lines.join('\n')+
         (complete? ('\n\n-- pre-ADAPTs\n'+texts[1]+'\n\n') : '' )+
-        (complete? ('\n\n-- DATA\n'+ dataText.join('\n')) : '' )+ 
+        (complete? ('\n\n-- DATA\n'+ dataText.join('\n')) : '' )+
         (complete? ('\n\n-- ADAPTs\n'+ texts[2]+'\n\n') : '' )+
         '\n-- conss\n' + consLines.join('\n')+
         '\n-- FKs\n' + fkLines.join('\n')+
@@ -3604,14 +3658,17 @@ AppBackend.prototype.getDbFunctions = async function (){
 AppBackend.prototype.dumpDbSchema = async function dumpDbSchema(opts){
     var be = this;
     var {mainSql,enancePart} = await be.dumpDbSchemaPartial(
-        opts.complete?be.tableStructures:likeAr(be.tableStructures).filter((_, name)=>opts.tableNames.includes(name)), 
+        opts.complete?be.tableStructures:likeAr(be.tableStructures).filter((_, name)=>opts.tableNames.includes(name)),
         opts
     )
     mainSql=be.config.install.dump.db.extensions.map(function(extension){
         return ({
-            gist: "create extension if not exists btree_gist;",
-            pg_trgm: "create extension if not exists pg_trgm;",
-            pgcrypto: "create extension if not exists pgcrypto;"
+            cube          : "create extension if not exists cube          ;",
+            earthdistance : "create extension if not exists earthdistance ;",
+            gist          : "create extension if not exists btree_gist    ;",
+            pg_trgm       : "create extension if not exists pg_trgm       ;",
+            pgcrypto      : "create extension if not exists pgcrypto      ;",
+            postgis       : "create extension if not exists postgis       ;",
         }[extension]||('--unknown exension '+extension))+'\n';
     }).join('')+mainSql;
     await fs.writeFile('local-db-dump.sql', mainSql);
@@ -3684,7 +3741,7 @@ AppBackend.prototype.transformInput = function transformInput(fieldDef, value){
     return value;
 }
 
-/** 
+/**
  * xxxparam {{ action:string, parameters:any, conRegistro:boolean, conPadron:boolean, fileName?:string, csvFileName?:string, csvSeparator?:string, queries:{titulo:string, sql:string, params:string[]}[] }}
  * @param {{title:string, rows:Record<string, any>[]}[]} result
  * @returns {Promise<void>}
@@ -3782,7 +3839,7 @@ AppBackend.prototype.exportacionesGenerico = async function exportacionesGeneric
         ))
     }
     return [
-        ...(fileName?[{url:fileName, label:csvFileName?'xlsx de control':fileName}]:[]), 
+        ...(fileName?[{url:fileName, label:csvFileName?'xlsx de control':fileName}]:[]),
         ...(csvFileName?[{url:csvFileName, label:fileName?'csv (formato UTF-8)':csvFileName}]:[]),
     ];
 }