biz-a-cli 2.3.16 → 2.3.18

package/bin/app.js

@@ -0,0 +1,313 @@
+#!/usr/bin/env node
+
+import yargs from "yargs"
+import axios from "axios"
+import fs from "fs"
+import { runInNewContext } from "vm"
+import uglify from "uglify-js"
+import * as tar from "tar"
+import { verify, sign, privateDecrypt, constants as cryptoConstants, randomBytes, createCipheriv } from "node:crypto"
+import { basename } from "node:path"
+import { env } from "../envs/env.js"
+import * as vm from 'node:vm'
+
+const keyFolderPath = process.argv[1].substring(0, process.argv[1].lastIndexOf("\\bin")) + "\\key"
+
+yargs(process.argv.slice(2))
+.option("s", {
+    alias: "server",
+    describe: "Server URL (ex: https://biz-a.herokuapp.com or http://192.168.1.1 or https://finaapi.imamatek.com)",
+    type: "string",
+    demandOption: true
+})
+.option("i", {
+    alias: "dbIndex",
+    describe: "database index",
+    type: "number",
+    demandOption: true
+})
+.option("sub", {
+    alias: "subdomain",
+    describe: "Subdomain",
+    type: "string",
+    demandOption: false
+})
+.option("p", {
+    alias: "apiPort",
+    describe: "FINA API Port",
+    type: "string",
+    demandOption: false,
+    default : "212"
+})
+.command('add', 'Add Biz-A Application',
+    {
+        'd': {
+            alias: "workingDir",
+            describe: "Path to templates directory",
+            type: "string",
+            demandOption: false,
+            default: process.cwd(),
+        },
+        'v': {
+            alias: "verbose",
+            describe: "Print info to console",
+            type: "boolean",
+            demandOption: false,
+            default: false,
+        }
+    },
+    async (options)=>{
+
+        function printInfo(msg){if (options.verbose) {console.log(msg)}}
+
+        const prepareKeys = async ()=>{
+            const data = Buffer.from(JSON.stringify({issuer: 'CLI', acquirer: 'Client'})).toString('base64')
+            const privateKey = fs.readFileSync(`${keyFolderPath}\\cliPrivate.pem`)
+            const signature = sign('sha256', data, {key: privateKey, passphrase: 'Biz-A@cli', padding: cryptoConstants.RSA_PKCS1_PSS_PADDING}).toString('base64')
+            const res = await axios.get(env.BIZA_SERVER_LINK+'/api/issuerKey', {params: {data, signature}})
+            if ((res.data.data!=null) && verify('sha256', res.data.data, {key: fs.readFileSync(`${keyFolderPath}\\serverPublic.pem`), padding: cryptoConstants.RSA_PKCS1_PSS_PADDING}, Buffer.from(res.data.signature, 'base64'))) {
+                const resData = JSON.parse(Buffer.from(res.data.data, 'base64').toString())
+                const decryptedAESKey = privateDecrypt({key: privateKey, passphrase: 'Biz-A@cli', padding: cryptoConstants.RSA_PKCS1_OAEP_PADDING}, Buffer.from(resData.issuer.key, 'base64')).toString()
+                const cliSignature = (signedData)=>sign('sha256', signedData, {key: privateKey, passphrase: 'Biz-A@cli', padding: cryptoConstants.RSA_PKCS1_PSS_PADDING}).toString('base64')
+                const acquirerData = Buffer.from(JSON.stringify(resData.acquirer)).toString('base64')
+                const signature = cliSignature(acquirerData)
+                return {encryptKey: decryptedAESKey, metadata: {acquirer: {data: acquirerData, signature}}}
+            }
+            else {
+                return null
+            }
+        }
+
+        function replacer(key, value) {
+        /*
+            // with line break
+            if (typeof value == 'function') {
+                let arr = value.toString().replace(/(\r\n|\n|\r)/gm, "°").split("°");
+                if (arr.length < 3) throw 'Function must be minimal 3 lines';
+                return [
+                    'window.Function',
+                    getParam(arr[0]),
+                    arr.slice(1, arr.length - 1)
+                ];
+            } else {
+                return value;
+            }
+        */
+
+            // without line break
+            if (typeof value == 'function') {
+                const fnScript = value.toString()
+                let params, body = ''
+                if (fnScript.indexOf('{')==-1) {
+                    const arr = fnScript.split('=>')
+                    params = arr[0]
+                    body = arr.slice(1).join()
+                } else {
+                    params = fnScript.split('{')[0]
+                    body = fnScript.substring(fnScript.indexOf('{')+1,  fnScript.lastIndexOf('}'))
+                }
+                params = params.replace(/(\s|=>|\(|\)|function)/gim, '')
+                printInfo(['window.Function', params, body])
+                return ['window.Function', params, body]
+            } else {
+                return value;
+            }
+        }
+
+        const minifiedIt = async (fileName) => {
+            const dataFile = fs.readFileSync(fileName);
+            printInfo(`===================\n${fileName.toUpperCase()}\n===================`)
+
+            const minifyResult = uglify.minify(dataFile.toString(), {compress: false, mangle: false})
+            if (minifyResult.error ) {throw (`${fileName} : ` + minifyResult.error)}
+            let jsMinData = minifyResult.code
+            jsMinData = jsMinData.replace('module.exports=get;', '') // Ex : at "executeBlockLib.js" of Imamatek App, will throw error. We need this line code for testing or debugging
+            const minifiedBuffer = Buffer.from(jsMinData)
+            printInfo(['Minify : \n', minifiedBuffer.toString()].join(''))
+
+            let stringifyData = ''
+            const isJsonFile = fileName.split('.').pop().toLowerCase().match(/^(json)$/)
+
+            // compile using node.js VM
+            try {
+                printInfo('Running script with VM')
+                if (isJsonFile) {
+                    const vmResult = runInNewContext(minifiedBuffer.toString())
+                    stringifyData = vmResult ? JSON.stringify((typeof vmResult=='function') ? vmResult() : (vmResult || ''), replacer) : ''
+                } else {
+                    // for handling "get" function in local scope (let, var, const)
+                    const sandbox = vm.createContext({script: ''});
+                    vm.runInContext(
+                        minifiedBuffer.toString() + "\n script = (typeof get=='undefined') ? '' : (typeof get=='function') ? get() : (get||'')",
+                        sandbox
+                    )
+                    stringifyData = JSON.stringify(sandbox.script, replacer)
+                }
+            } catch (err){
+                printInfo(`${fileName} : ` + err) // Do not log it as error, we will try to compile the script using ES6 Import
+                stringifyData = ''
+            }
+
+            const isEmptyScript = (scriptText)=>((typeof scriptText=='undefined') || (scriptText===null) || (scriptText.trim()==='""') || (typeof scriptText=='string' && scriptText.trim().length==0))
+
+            // compile using ES6 Import
+            if (isEmptyScript(stringifyData)) {
+                try {
+                    printInfo('Running script with Import function')
+                    const lib = await import(`file://${process.cwd()}\\${fileName}`, isJsonFile ? {assert: {type: "json"}} : {})
+                    stringifyData = JSON.stringify((typeof lib.default=='function') ? lib.default() : (lib.default || ''), replacer).replace(/  /g,'') // remove trailing whitespace
+                    // stringifyData = stringifyData.replace(/\\r\\n/g,'') // remove line break. We can not do this because "inline css" still requires line breaks
+                } catch (error){
+                    throw(`${fileName} : ` + error)
+                }
+            }
+
+            if (isEmptyScript(stringifyData)) {
+                throw(`${fileName} : ` + 'Failed to compile template script.\nPlease make sure the script is correct and not returning empty result')
+            } else {
+                printInfo('Array function :')
+                printInfo(['Stringify : \n', stringifyData].join(''))
+            }
+            // console.log('RESULT =>', stringifyData)
+            printInfo('===================')
+            return Buffer.from(stringifyData)
+        }
+
+        const encryptIt = (data, encryptKey)=>{
+            const initializeVector = randomBytes(16) // "iv" is unique for each template file
+            const cipher = createCipheriv('aes-256-cbc', Buffer.from(encryptKey, 'base64'), initializeVector)
+            return Buffer.concat([initializeVector, cipher.update(data), cipher.final()]) // we put "iv" at beginning of cipherText, seperate it when doing decryption
+        }
+
+        const compressIt = (fileName, folderPath)=>{
+            // tar v7.1.0 -> tested 10x times, 2-3x times last compressed file have empty content
+            // tar v.7.4.0 -> tested 1000x times, all files have content (used app.test.js)
+            let compressSuccess = false
+            const maxRetry = 10
+            let retryCount = 0
+            do {
+                tar.c({file: fileName, cwd: folderPath, gzip: {level:9}, strict: true, sync: true}, fs.readdirSync(folderPath))
+                compressSuccess = true
+                tar.t({file: fileName, cwd: folderPath, sync: true, onentry: (entry)=>{
+                    if (entry.size==0) {
+                        compressSuccess = false
+                    }
+                }})
+                if (compressSuccess==false) {
+                    fs.unlinkSync(fileName)
+                    retryCount++
+                }
+            }
+            while ((compressSuccess==false) && (retryCount<=maxRetry))
+        }
+
+        const getFileList = ()=>{
+            return (fs.readdirSync(process.cwd())).filter((fileName)=>{
+                const stat = fs.statSync(fileName)
+                return stat.isFile() && (stat.size>0) && ((fileName.split('.').pop().toLowerCase().match(/^(js)$/) || (fileName.toLowerCase()=='menu.json')))
+            })
+        }
+
+        async function addApp() {
+            /*
+            hex    => 2 char = 1 bytes     => can be encrypted
+            base64 => 4 char = 3 bytes     => can be encrypted. Smaller size compare to Hex
+            utf8   => 1 char = 1 - 4 bytes => can not be encrypted, encryption need precise bytes per Character. Smallest Size compare to Hex and base64
+            */
+            process.chdir(options.workingDir)
+            try {
+                const bundlingStart = performance.now()
+                const rootFolder = './upload/'
+                const bundleName = basename(process.cwd()).trim().replace(' ', '').toLowerCase()
+                const bundleFolder = rootFolder+bundleName+'/'
+                const files = getFileList()
+                if (files.length>0) {
+                    const keys = await prepareKeys()
+                    let processedFile = 0
+                    fs.rmSync(rootFolder, {force: true, recursive: true})
+                    fs.mkdirSync(bundleFolder, {recursive: true})
+                    for (const file of files) {
+                        const fileName = file.toLowerCase();
+// if (['finalib.js', 'solib.js'].indexOf(fileName)==-1) {continue}
+                        const minifiedData = await minifiedIt(fileName);
+                        const encryptedData = encryptIt(minifiedData, keys.encryptKey)
+                        if (fileName=='menu.json') {
+                            keys.metadata['menu'] = encryptedData.toString('base64')
+                        } else {
+                            fs.writeFileSync(bundleFolder+fileName, encryptedData.toString('base64'))
+                        }
+                        processedFile++
+                    }
+                    const bundleFile = `${rootFolder}${bundleName}.tgz`
+                    compressIt(bundleFile, bundleFolder)
+                    console.log(`Finished packing ${processedFile} files into "${bundleFile}" (${((performance.now()-bundlingStart)/1000).toFixed(2)}s)`)
+
+                    // send to FINAPI
+                    const uploadingStart = performance.now()
+                    const data = (fs.readFileSync(bundleFile)).toString('base64') // *.tgz to base64String
+                    const baseUrl = 'fina/rest/TOrmMethod/%22setApp%22'
+                    const url = options.sub ?
+                        `${options.server}/hub/${baseUrl}?subdomain=${options.sub}` :
+                        `${options.server}:${options.apiPort}/${baseUrl}`
+                    const headers = {'Content-Type': 'text/plain'}
+                    const param = { _parameters: [options.dbIndex, bundleName, data, keys.metadata] }
+                    const res = await axios.post(url, param, { headers: headers });
+                    if (res.data.success) {
+                        console.log(`Finished uploading "${bundleFile}" (${((performance.now()-uploadingStart)/1000).toFixed(2)}s)`)
+                        fs.rmSync(rootFolder, {force: true, recursive: true})
+                    } else {
+                        console.error(res.data.error)
+                    }
+                }
+            } catch (e) {
+                console.error(e.response?.data ? e.response.data : e)
+            }
+        }
+
+        await addApp()
+    }
+)
+.command('remove', 'Remove Biz-A Application',
+    {
+        'n': {
+            alias: "appName",
+            describe: "Application name",
+            type: "string",
+            demandOption: true,
+            default: ""
+        }
+    },
+    (options)=>{
+        (async () => {
+            try {
+                const baseUrl = 'fina/rest/TOrmMethod/%22deleteApp%22'
+                const url = options.sub ?
+                    `${options.server}/hub/${baseUrl}?subdomain=${options.sub}` :
+                    `${options.server}:${options.apiPort}/${baseUrl}`
+                const headers = {'Content-Type': 'text/plain'}
+                const deleteApps = options.appName.trim().replaceAll(' ', '').toLowerCase()
+                const param = { _parameters: [options.dbIndex, deleteApps] }
+                const res = await axios.post(url, param, { headers: headers });
+                if (res.data?.success) {
+                    if (deleteApps=='') {
+                        console.log('All apps removed')
+                    } else {
+                        const failedList = (res.data._f && (typeof res.data._f=='string')) ? res.data._f.trim().replaceAll(' ', '').toLowerCase().split(',') : []
+                        const removeList = deleteApps.split(',')
+                        removeList.forEach((app)=>{
+                            console.log(`${app} ${failedList.indexOf(app)==-1 ? 'removed' : 'not found'}`)
+                        })
+                    }
+                } else {
+                    console.error(res.data.error)
+                }
+                return res
+            } catch (e) {
+                const errMsg = (e.response?.data ? e.response.data : e)
+                console.error(errMsg)
+                return errMsg
+            }
+        })()
+    }
+)
+.parse();

package/bin/hub.js

@@ -1,4 +1,4 @@
-#!/usr/bin/env node
+#!/usr/bin/env node
 
 import yargs from 'yargs';
 import { io as ioc } from "socket.io-client";

package/bin/proxy.js

@@ -1,4 +1,4 @@
-#!/usr/bin/env node
+#!/usr/bin/env node
 
 import express from 'express';
 import cors from 'cors';

package/bin/watcher.js

@@ -1,4 +1,4 @@
-#!/usr/bin/env node
+#!/usr/bin/env node
 
 import express from 'express';
 import cors from 'cors';

package/envs/env.dev.js

@@ -5,7 +5,8 @@ export const envDev = {
   CDM_MONGO_LINK: 'mongodb+srv://imm_cdm:' +
     encodeURIComponent('imm@2019') + '@imm-cdm-dev.rf6wr.mongodb.net/?retryWrites=true&w=majority',
   COMPANY_REGISTER: 'companyregister-dev',
-  BIZA_SERVER_LINK: 'https://biz-a-dev-41e7c93a25e5.herokuapp.com'
+  // BIZA_SERVER_LINK: 'https://biz-a-dev-41e7c93a25e5.herokuapp.com'
   // BIZA_SERVER_LINK: 'https://www.ptimf.id/biz-a-dev.com'
   // BIZA_SERVER_LINK: 'http://localhost:3000'
+  BIZA_SERVER_LINK: 'http://59.60.1.22:3000'
 };

package/envs/env.js

@@ -5,5 +5,6 @@ export const env = {
   CDM_MONGO_LINK: 'mongodb+srv://imm_cdm:' +
     encodeURIComponent('imm@2019') + '@imm-cdm.ohcqt.mongodb.net/?retryWrites=true&w=majority',
   COMPANY_REGISTER: 'companyregister',
-  BIZA_SERVER_LINK: 'https://biz-a.herokuapp.com'
+  // BIZA_SERVER_LINK: 'https://biz-a.herokuapp.com'
+  BIZA_SERVER_LINK: 'http://localhost:3000'
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "biz-a-cli",
   "nameDev": "biz-a-cli-dev",
-  "version": "2.3.16",
+  "version": "2.3.18",
   "versionDev": "0.0.30",
   "description": "",
   "main": "bin/index.js",
@@ -24,7 +24,8 @@
     "hub": "bin/hub.js",
     "watcher": "bin/watcher.js",
     "uploadapp": "bin/uploadApp.js",
-    "deleteapp": "bin/deleteApp.js"
+    "deleteapp": "bin/deleteApp.js",
+    "biza": "bin/app.js"
   },
   "dependencies": {
     "axios": "^1.6.8",
@@ -36,7 +37,7 @@
     "nodemailer": "^6.9.12",
     "socket.io-client": "^4.7.5",
     "socket.io-stream": "^0.9.1",
-    "tar": "^7.1.0",
+    "tar": "^7.4.0",
     "uglify-js": "^3.17.4",
     "web-push": "^3.6.7",
     "winston": "^3.13.0",
@@ -47,6 +48,11 @@
     "socket.io": "^4.7.5"
   },
   "jest": {
-    "transform": {}
+    "transform": {},
+    "testMatch": [
+      "<rootDir>/tests/**",
+      "!<rootDir>/tests/mockData",
+      "!<rootDir>/tests/mockData/**"
+    ]
   }
 }

package/readme.md

@@ -0,0 +1,62 @@
+# **This package is used to setup applications within your Biz-A Platform.**
+
+## I. Add BizA App
+
+  ### a. Using Static IP
+
+    BizA Add -s [IP of FINA API] -p [default: 212] -i [dbindex] -d [full or relative path to app folder]
+
+    Example :
+        BizA add -s http://192.168.1.1 -i 2 -d “c:\biza templates\imamatek”
+        BizA Add -s http://192.168.1.1 -p 1205 -i 2 -d “c:\biza templates\imamatek”
+
+  ### b. Using BizA Hub
+
+    BizA Add -s [BizA Hub Server] -i [dbindex] --sub [subdomain of BizA Hub Server] -d [full or relative path to app folder]
+
+    Example :
+        BizA Add -s https://biz-a.hub.com -i 2 –-sub imm -d “c:\biza templates\imamatek”
+
+  ### c. Using Domain / Sub Domain
+
+    BizA Add -s [Domain] -i [dbindex] -d [full or relative path to app folder]
+
+    Example:
+        BizA Add-s https://my.domain.com -i 2 -d “c:\biza templates\imamatek”
+
+### To get list of full argument, please type
+
+    BizA Add --help
+
+
+
+## II. Remove BizA App
+
+  ### a. Using Static IP
+
+    BizA remove -s [IP of FINA API] -p [default: 212] -i [dbindex] -n [appname | multiple appname]
+
+    Example :
+        BizA Remove -s http://192.168.1.1 -i 2
+        BizA Remove -s http://192.168.1.1 -p 1205 -i 2 -n “imamatek”
+        BizA Remove -s http://192.168.1.1 -p 1205 -i 2 -n “imamatek, spos”
+
+  ### b. Using BizA Hub
+
+    BizA Remove -s [BizA Hub Server] -i [dbindex] --sub [subdomain of BizA Hub Server] -n [appname | multiple appname]
+
+    Example :
+        BizA Remove -s https://biz-a.hub.com -i 2 –sub imm -n “imamatek”
+
+  ### c. Using Domain / Sub Domain
+
+    BizA Remove -s [Domain] -i [dbindex] -n [appname | multiple appname]
+
+    Example:
+        BizA Remove -s https://my.domain.com -i 2 -n “imamatek”
+
+### To get list of full argument, please type
+
+    BizA Add --help
+
+:warning: $${\color{red}**The *uploadBizA*, *uploadApp*, *deleteApp* commands are deprecated and will be removed in the future.**}$$

package/tests/app.test.js

@@ -0,0 +1,384 @@
+import fs from "fs"
+import { jest } from '@jest/globals'
+import { Duplex } from 'node:stream'
+import { finished } from 'node:stream/promises'
+import { createDecipheriv } from 'node:crypto'
+import * as tar from "tar"
+
+describe('Biz-A Apps CLI', ()=>{
+
+    let originalOptions, originalCWD, axios
+    const logSpy = jest.spyOn(global.console, 'log')
+    const errorSpy = jest.spyOn(global.console, 'error')
+
+    async function runCommand(...options){
+        process.argv[1] = process.cwd()+'\\bin' // mock the key root folder
+        process.argv = [process.argv[0], process.argv[1], ...options]
+        await import('../bin/app.js')
+
+        // All below functions does not wait for ES6 import promises
+        // await jest.runAllTimersAsync()
+        // jest.runAllTimers()
+        // jest.runAllTicks()
+
+        await new Promise(process.nextTick) // wait for all import promise (including ES6 import promises) to be resolved
+    }
+
+    beforeEach(async ()=>{
+        originalOptions = process.argv
+        originalCWD = process.cwd()
+
+        // mock default export first with unstable_mockModule
+        jest.unstable_mockModule('axios', ()=>{return {default: jest.fn()}})
+        axios = (await import('axios')).default
+
+        // then we can mock classes, functions, variables, and objects inside mocked module when doing dynamic import using jest.fn()
+        axios.get = jest.fn()
+        axios.post = jest.fn()
+    })
+
+    afterEach(()=>{
+        jest.resetModules()
+        jest.resetAllMocks()
+        process.argv = originalOptions
+        process.chdir(originalCWD)
+    })
+
+    describe('Add App', ()=>{
+        const mockDataFolder = './tests/mockData/'
+        const appName = 'mockApp'
+        const appFolderName = mockDataFolder + appName+ '/';
+
+        function mockValidTemplates(scriptList){
+            fs.rmSync(appFolderName, {force: true, recursive: true})
+            fs.mkdirSync(appFolderName, {recursive: true})
+            for (const [key, value] of Object.entries(scriptList)){
+                fs.writeFileSync(appFolderName+key, value.act)
+            }
+        }
+
+        function mockIssuerKeyResponse(){
+            axios.get.mockResolvedValue({
+                data:{
+                    // this data containing 'mockAESKey', which is encrypted using CLI Private key
+                    data: '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',
+                    // sign using BizA Server PrivateKey, to be verified by BizA CLI using Server PublicKey
+                    signature: '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'
+                }
+            })
+            axios.post.mockResolvedValue({data: {success: true}, status: 200})
+        }
+
+        beforeEach(()=>{
+            fs.rmSync(mockDataFolder, {recursive: true, force: true})
+        })
+
+        afterAll(()=>{
+            fs.rmSync(mockDataFolder, {recursive: true, force: true})
+        })
+
+        const stressTestCount = 10;
+        it.each(Array(stressTestCount).fill().map((v,i)=>i+1))(`shall compress and encrypt app scripts (stress test %p of ${stressTestCount})`, async ()=>{
+            const mockScripts = {
+                'a.js' : {
+                    act: 'get = function () {return {modelA: {}}}',
+                    exp: '{"modelA":{}}'
+                },
+                'b.js' : {
+                    act: 'const get = function () {\nreturn {"modelB": {id: null}}};',
+                    exp: '{"modelB":{"id":null}}'
+                },
+                'c.js' : {
+                    act: 'let get = function () {return {modelC: {}, function: {func: () => { \nreturn ["lib"];\n}\n}}};',
+                    exp: '{"modelC":{},"function":{"func":["window.Function","","return[\\\"lib\\\"]"]}}'
+                },
+                'd.js' : {
+                    act: 'var get = function () {return {model: {}, tableName: "", fields: [], function: {}}};\nmodule.exports = get;',
+                    exp: '{"model":{},"tableName":"","fields":[],"function":{}}'
+                },
+                'menu.json' : {
+                    // act: JSON.stringify([
+                        act: `[
+                        {"menuName": "", "caption": "Home", "link": ["./main"],"subMenu": []},
+                        {"menuName": "", "caption": "Personalia","link": [], "subMenu": [
+                            {"menuName": "","caption": "Data Master","link": [], "subMenu": []},
+                            {
+                                "menuName": "",
+                                "caption": "Gaji",
+                                "link": [],
+                                "subMenu": [
+                                    {
+                                        "menuName": "",
+                                        "caption": "Parameter",
+                                        "link": [
+                                            "./form",
+                                            "gajiparam",
+                                            null
+                                        ],
+                                        "subMenu": []
+                                    },
+                                    {
+                                        "menuName": "",
+                                        "caption": "Perubahan",
+                                        "link": [],
+                                        "subMenu": [
+                                            {
+                                                "menuName": "",
+                                                "caption": "Form Perubahan Gaji",
+                                                "link": [
+                                                    "./form",
+                                                    "gajiubah",
+                                                    null
+                                                ],
+                                                "subMenu": []
+                                            },
+                                            {
+                                                "menuName": "",
+                                                "caption": "Daftar Perubahan Gaji",
+                                                "link": [
+                                                    "./list",
+                                                    "gajiubahdaftar"
+                                                ],
+                                                "subMenu": []
+                                            }
+                                        ]
+                                    }
+                                ]
+                            }
+                        ]}
+                    ]`,
+                    // ]),
+                    // not saved as templates file, but as metadata of curret App
+                    exp: "[{\"menuName\":\"\",\"caption\":\"Home\",\"link\":[\"./main\"],\"subMenu\":[]},{\"menuName\":\"\",\"caption\":\"Personalia\",\"link\":[],\"subMenu\":[{\"menuName\":\"\",\"caption\":\"Data Master\",\"link\":[],\"subMenu\":[]},{\"menuName\":\"\",\"caption\":\"Gaji\",\"link\":[],\"subMenu\":[{\"menuName\":\"\",\"caption\":\"Parameter\",\"link\":[\"./form\",\"gajiparam\",null],\"subMenu\":[]},{\"menuName\":\"\",\"caption\":\"Perubahan\",\"link\":[],\"subMenu\":[{\"menuName\":\"\",\"caption\":\"Form Perubahan Gaji\",\"link\":[\"./form\",\"gajiubah\",null],\"subMenu\":[]},{\"menuName\":\"\",\"caption\":\"Daftar Perubahan Gaji\",\"link\":[\"./list\",\"gajiubahdaftar\"],\"subMenu\":[]}]}]}]}]"
+                }
+            }
+
+            mockValidTemplates(mockScripts)
+            mockIssuerKeyResponse()
+            const mockAESKey = Buffer.from('hAnHadaJXJaq/9fCFMNmjkrB61CBPXJid6vbtXgG8Ug=', 'base64')
+
+            await runCommand('add', '-s', 'https://a.b.c', '-p', '1205', '-i', '2', '-d', appFolderName)
+
+            expect(axios.get.mock.calls).toHaveLength(1)
+            const getArgs = axios.get.mock.calls[0]
+            expect(getArgs).toHaveLength(2)
+            expect(getArgs[0]).toBe('http://localhost:3000/api/issuerKey')
+            expect(getArgs[1]).toHaveProperty('params')
+            const params = getArgs[1].params
+            expect(params).toHaveProperty('data')
+            expect(params.data).toBe('eyJpc3N1ZXIiOiJDTEkiLCJhY3F1aXJlciI6IkNsaWVudCJ9') // BizA CLI Private key
+            expect(params).toHaveProperty('signature')
+            expect(params.signature).not.toBeNull() // PSS signature is not deterministic
+
+            expect(axios.post.mock.calls).toHaveLength(1)
+            const postArgs = axios.post.mock.calls[0]
+            expect(postArgs).toHaveLength(3)
+            expect(postArgs[0]).toBe('https://a.b.c:1205/fina/rest/TOrmMethod/%22setApp%22')
+
+            const apiParams = postArgs[1]._parameters
+            expect(apiParams[0]).toBe(2)
+            expect(apiParams[1]).toBe(appName.toLowerCase())
+
+            // encrypted template scripts is not deterministic, because IV (initialize vector) using 16 random bytes
+            const templateBuffer = Buffer.from(apiParams[2], 'base64')
+            const decryptScripts = {}
+            const stream = new Duplex()
+            stream.push(templateBuffer)
+            stream.push(null)
+            stream.pipe(
+                // tar.x -> will extract and write to file
+                // tar.t -> only extract
+                tar.t({
+                    strict: true
+                    , sync: true
+                    , onReadEntry: entry=>{
+                        const chunks = [];
+                        entry.on('data', chunk => chunks.push(chunk));
+                        entry.on('end', () => {
+                            expect(entry.path.trim().toLowerCase()).not.toBe('menu.json') // shall save "menu.json" as App.metadata
+                            const cipherText = Buffer.from(Buffer.concat(chunks).toString(), 'base64')
+                            const decryptInitializeVector = cipherText.subarray(0, 16)
+                            const decryptData = cipherText.subarray(16)
+                            const decipher = createDecipheriv('aes-256-cbc', mockAESKey, decryptInitializeVector)
+                            const decrypted = Buffer.concat([decipher.update(decryptData), decipher.final()])
+                            decryptScripts[entry.path] = decrypted.toString()
+                        })
+                    }
+                })
+                .on('finish', ()=>stream.end())
+            )
+            await finished(stream) // wait for untar process to finish
+            for (const [fileName, script] of Object.entries(decryptScripts)){
+                expect(script).toBe(mockScripts[fileName].exp)
+            }
+
+            // app.metadata : {
+            //     "acquirer": { // generate by BizA Server
+            //         "data": "", //containing AES Key for template script encryption or deccryption, which is encrypted using BizA Client publicKey
+            //         "signature": "", // sign using BizA CLI Private key, to be verified by BizA Client using CLI Public Key
+            //     },
+            //     "menu" : "" // contain encrypted "menu.json"
+            // }
+            expect(apiParams[3]).toHaveProperty('acquirer')
+            expect(apiParams[3].acquirer).toHaveProperty('data')
+            expect(apiParams[3].acquirer.data).toBe('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')
+            expect(apiParams[3].acquirer).toHaveProperty('signature')
+            expect(apiParams[3].acquirer.signature).not.toBeNull() // PSS signature is not deterministic
+
+            expect(apiParams[3]).toHaveProperty('menu') // shall save "menu.json" as App.metadata
+            expect(apiParams[3].menu).not.toBeNull() // IV (initialize vector) using 16 random bytes
+
+            expect(postArgs[2]).toStrictEqual({"headers": {"Content-Type": "text/plain"}})
+
+            expect(logSpy.mock.calls[0][0]).toContain(`Finished packing ${Object.keys(mockScripts).length} files into "./upload/${appName.toLowerCase()}.tgz"`)
+            expect(logSpy.mock.calls[1][0]).toContain(`Finished uploading "./upload/${appName.toLocaleLowerCase()}.tgz"`)
+        })
+
+/*        it('Invalid script syntax', async ()=>{
+            mockValidTemplates({
+                'a.js' : {act: 'get = function () {return {modelA: {}}'} // missing close closure at the end
+            })
+            mockIssuerKeyResponse()
+            await runCommand('add', '-s', 'https://a.b.c', '-p', '1205', '-i', '2', '-d', appFolderName, "-v")
+
+            expect(logSpy.mock.calls.length).toBe(1)
+            expect(logSpy.mock.calls[0][0]).toBe('===================\nA.JS\n===================')
+
+            expect(errorSpy.mock.calls.length).toBe(1)
+            expect(errorSpy.mock.calls[0][0]).toBe('a.js : SyntaxError: Unexpected token: eof, expected: punc «}»')
+        })
+
+        it('Failed to compile script with node sandbox and ES6 Import', async ()=>{
+            mockValidTemplates({
+                'a.js' : {act: 'get = function () {return {modelA: {}}}\n modul.expor = get;\n'} // wrong "module.export"
+            })
+            mockIssuerKeyResponse()
+            await runCommand('add', '-s', 'https://a.b.c', '-p', '1205', '-i', '2', '-d', appFolderName, "-v")
+
+            expect(logSpy.mock.calls.length).toBe(5)
+            expect(logSpy.mock.calls[0][0]).toBe('===================\nA.JS\n===================')
+            expect(logSpy.mock.calls[1][0]).toBe('Minify : \nget=function(){return{modelA:{}}};modul.expor=get;')
+            expect(logSpy.mock.calls[2][0]).toBe('Running script with VM') // node sandbox (VN) error as console.log
+            expect(logSpy.mock.calls[3][0]).toBe('a.js : ReferenceError: modul is not defined')
+            expect(logSpy.mock.calls[4][0]).toBe('Running script with Import function')
+
+            expect(errorSpy.mock.calls.length).toBe(1)
+            expect(errorSpy.mock.calls[0][0]).toBe("a.js : ReferenceError: modul is not defined") // ES6 import error
+        })
+
+        it('Shall not allow empty script', async ()=>{
+            mockValidTemplates({
+                'a.js' : {act: 'get = function () {}'} // empty script
+            })
+            mockIssuerKeyResponse()
+            await runCommand('add', '-s', 'https://a.b.c', '-p', '1205', '-i', '2', '-d', appFolderName, "-v")
+
+            expect(logSpy.mock.calls.length).toBe(4)
+            expect(logSpy.mock.calls[0][0]).toBe('===================\nA.JS\n===================')
+            expect(logSpy.mock.calls[1][0]).toBe('Minify : \nget=function(){};')
+            expect(logSpy.mock.calls[2][0]).toBe('Running script with VM') // node sandbox (VN) error as console.log
+            expect(logSpy.mock.calls[3][0]).toBe('Running script with Import function')
+
+            expect(errorSpy.mock.calls.length).toBe(1)
+            expect(errorSpy.mock.calls[0][0]).toBe('a.js : Failed to compile template script.\nPlease make sure the script is correct and not returning empty result') // ES6 import error
+        }) */
+
+        const errorHandlingTestCases = [
+            // [test case name, scripts, expectedFn()]
+            [
+                'Invalid script syntax',
+                {act: 'get = function () {return {modelA: {}}'}, // missing close closure at the end',
+                ()=>{
+                    expect(logSpy.mock.calls.length).toBe(1)
+                    expect(logSpy.mock.calls[0][0]).toBe('===================\nA.JS\n===================')
+
+                    expect(errorSpy.mock.calls.length).toBe(1)
+                    expect(errorSpy.mock.calls[0][0]).toBe('a.js : SyntaxError: Unexpected token: eof, expected: punc «}»')
+                }
+            ],
+            [
+                'Failed to compile script with node sandbox and ES6 Import',
+                {act: 'get = function () {return {modelA: {}}}\n modul.expor = get;\n'}, // wrong "module.export"
+                ()=>{
+                    expect(logSpy.mock.calls.length).toBe(5)
+                    expect(logSpy.mock.calls[0][0]).toBe('===================\nA.JS\n===================')
+                    expect(logSpy.mock.calls[1][0]).toBe('Minify : \nget=function(){return{modelA:{}}};modul.expor=get;')
+                    expect(logSpy.mock.calls[2][0]).toBe('Running script with VM') // node sandbox (VN) error as console.log
+                    expect(logSpy.mock.calls[3][0]).toBe('a.js : ReferenceError: modul is not defined')
+                    expect(logSpy.mock.calls[4][0]).toBe('Running script with Import function')
+
+                    expect(errorSpy.mock.calls.length).toBe(1)
+                    expect(errorSpy.mock.calls[0][0]).toBe("a.js : ReferenceError: modul is not defined") // ES6 import error
+                }
+            ],
+            [
+                'Shall not allow empty script',
+                {act: 'get = function () {}'}, // empty script
+                ()=>{
+                    expect(logSpy.mock.calls.length).toBe(4)
+                    expect(logSpy.mock.calls[0][0]).toBe('===================\nA.JS\n===================')
+                    expect(logSpy.mock.calls[1][0]).toBe('Minify : \nget=function(){};')
+                    expect(logSpy.mock.calls[2][0]).toBe('Running script with VM') // node sandbox (VN) error as console.log
+                    expect(logSpy.mock.calls[3][0]).toBe('Running script with Import function')
+
+                    expect(errorSpy.mock.calls.length).toBe(1)
+                    expect(errorSpy.mock.calls[0][0]).toBe('a.js : Failed to compile template script.\nPlease make sure the script is correct and not returning empty result')
+                }
+            ],
+        ]
+        it.each(errorHandlingTestCases)('%p', async (name, scripts, expectedFn)=>{
+            mockValidTemplates({'a.js' : scripts})
+            mockIssuerKeyResponse()
+            await runCommand('add', '-s', 'https://a.b.c', '-p', '1205', '-i', '2', '-d', appFolderName, "-v")
+            expectedFn()
+        })
+
+    })
+
+    describe('Remove App', ()=>{
+        it('shall remove specific apps', async ()=>{
+            axios.post.mockResolvedValue({data: {success: true}, status: 200})
+
+            await runCommand('remove', '-s', 'https://finaapi.imamatek.com', '-p', '1205', '-i', '1', '-n', 'myApp')
+
+            expect(axios.post.mock.calls).toHaveLength(1)
+            expect(axios.post).toHaveBeenCalledWith(
+                'https://finaapi.imamatek.com:1205/fina/rest/TOrmMethod/%22deleteApp%22',
+                {_parameters: [1, 'myapp']},
+                {headers: {'Content-Type': 'text/plain'}}
+            )
+            expect(logSpy).toHaveBeenCalledWith('myapp removed')
+        })
+
+        it('shall remove multiple apps', async ()=>{
+            axios.post.mockResolvedValue({data: {success: true, _f: 'notExistApp'}, status: 200})
+
+            await runCommand('remove', '-i', '2', '-s', 'https://www.AA.io', '-p', '2708', '-n', 'firstApp, notExistApp, secondApp')
+
+            expect(axios.post.mock.calls).toHaveLength(1)
+            expect(axios.post).toHaveBeenCalledWith(
+                'https://www.AA.io:2708/fina/rest/TOrmMethod/%22deleteApp%22',
+                {_parameters: [2, 'firstapp,notexistapp,secondapp']},
+                {headers: {'Content-Type': 'text/plain'}}
+            )
+            expect(logSpy).toHaveBeenCalledWith('firstapp removed')
+            expect(logSpy).toHaveBeenCalledWith('secondapp removed')
+            expect(logSpy).toHaveBeenCalledWith('notexistapp not found')
+        })
+
+        it('shall remove all apps', async ()=>{
+            axios.post.mockResolvedValue({data: {success: true}, _f: '', status: 200})
+
+            await runCommand('remove', '-s', 'https://finaapi.imamatek.com', '-p', '1205', '-i', '2')
+
+            expect(axios.post.mock.calls).toHaveLength(1)
+            expect(axios.post).toHaveBeenCalledWith(
+                'https://finaapi.imamatek.com:1205/fina/rest/TOrmMethod/%22deleteApp%22',
+                {_parameters: [2, '']},
+                {headers: {'Content-Type': 'text/plain'}}
+            )
+            expect(logSpy).toHaveBeenCalledWith('All apps removed')
+        })
+    })
+
+})