insforge 0.3.2 → 1.2.10

package/backend/src/utils/utils.ts

@@ -0,0 +1,114 @@
+import crypto from 'crypto';
+import { ColumnType, type AuthConfigSchema } from '@insforge/shared-schemas';
+
+/**
+ * Generates a user-friendly error message listing all password requirements
+ * @param config - Authentication configuration with password requirements
+ * @returns A formatted message listing all enabled password requirements
+ */
+export function getPasswordRequirementsMessage(config: AuthConfigSchema): string {
+  const requirements: string[] = [];
+
+  requirements.push(`at least ${config.passwordMinLength} characters long`);
+
+  if (config.requireNumber) {
+    requirements.push('at least one number');
+  }
+
+  if (config.requireLowercase) {
+    requirements.push('at least one lowercase letter');
+  }
+
+  if (config.requireUppercase) {
+    requirements.push('at least one uppercase letter');
+  }
+
+  if (config.requireSpecialChar) {
+    requirements.push('at least one special character');
+  }
+
+  return `Password must contain ${requirements.join(', ')}`;
+}
+
+export const convertSqlTypeToColumnType = (sqlType: string): ColumnType | string => {
+  switch (sqlType.toLowerCase()) {
+    case 'uuid':
+      return ColumnType.UUID;
+    case 'timestamptz':
+    case 'timestamp with time zone':
+      return ColumnType.DATETIME;
+    case 'date':
+      return ColumnType.DATE;
+    case 'integer':
+    case 'bigint':
+    case 'smallint':
+    case 'int':
+    case 'int2':
+    case 'int4':
+    case 'serial':
+    case 'serial2':
+    case 'serial4':
+    case 'serial8':
+    case 'smallserial':
+    case 'bigserial':
+      return ColumnType.INTEGER;
+    case 'double precision':
+    case 'real':
+    case 'numeric':
+    case 'float':
+    case 'float4':
+    case 'float8':
+    case 'decimal':
+      return ColumnType.FLOAT;
+    case 'boolean':
+    case 'bool':
+      return ColumnType.BOOLEAN;
+    case 'json':
+    case 'jsonb':
+    case 'array':
+      return ColumnType.JSON;
+    case 'text':
+    case 'varchar':
+    case 'char':
+    case 'character varying':
+    case 'character':
+      return ColumnType.STRING;
+    default:
+      return sqlType.slice(0, 5);
+  }
+};
+
+/**
+ * Generate a UUID v4
+ * @returns A UUID v4 string
+ */
+export function generateUUID(): string {
+  return crypto.randomUUID();
+}
+
+/**
+ * Generate a random numeric string of specified length
+ * @param length - The length of the numeric string to generate
+ * @returns A random string containing only digits (0-9)
+ */
+export function generateNumericCode(length: number): string {
+  // Generate each digit independently
+  let result = '';
+  for (let i = 0; i < length; i++) {
+    result += crypto.randomInt(0, 10).toString();
+  }
+
+  return result;
+}
+
+/**
+ * Generate a cryptographically secure random token
+ * @param bytes - Number of random bytes to generate (default: 32)
+ * @returns Hex-encoded string (length = bytes * 2 characters)
+ * @example
+ * generateSecureToken(32) // Returns 64-character hex string (256 bits entropy)
+ * generateSecureToken(16) // Returns 32-character hex string (128 bits entropy)
+ */
+export function generateSecureToken(bytes: number = 32): string {
+  return crypto.randomBytes(bytes).toString('hex');
+}

package/backend/src/utils/validations.ts

@@ -1,10 +1,46 @@
-import { AppError } from '@/api/middleware/error.js';
+import { AppError } from '@/api/middlewares/error.js';
 import { ERROR_CODES } from '@/types/error-constants.js';
+import type { AuthConfigSchema } from '@insforge/shared-schemas';
 
 export function validateEmail(email: string) {
   return /^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$/.test(email);
 }
 
+/**
+ * Validates password against authentication configuration requirements
+ * @param password - The password to validate
+ * @param config - Authentication configuration with password requirements
+ * @returns true if password meets all requirements, false otherwise
+ */
+export function validatePassword(password: string, config: AuthConfigSchema): boolean {
+  // Check minimum length
+  if (password.length < config.passwordMinLength) {
+    return false;
+  }
+
+  // Check for number requirement
+  if (config.requireNumber && !/\d/.test(password)) {
+    return false;
+  }
+
+  // Check for lowercase requirement
+  if (config.requireLowercase && !/[a-z]/.test(password)) {
+    return false;
+  }
+
+  // Check for uppercase requirement
+  if (config.requireUppercase && !/[A-Z]/.test(password)) {
+    return false;
+  }
+
+  // Check for special character requirement
+  if (config.requireSpecialChar && !/[!@#$%^&*()_+\-=[\]{};\\|,.<>/?]/.test(password)) {
+    return false;
+  }
+
+  return true;
+}
+
 /**
  * Validates PostgreSQL identifier names (tables, columns, etc.)
  * Prevents SQL injection and ensures valid PostgreSQL identifiers
@@ -25,7 +61,7 @@ const IDENTIFIER_REGEX = /^[^"\x00-\x1F\x7F]+$/;
  * @throws AppError if invalid
  */
 export function validateIdentifier(identifier: string, type: string = 'identifier'): boolean {
-  if (!identifier || identifier.trim().length === 0) {
+  if (!identifier || !identifier.trim()) {
     throw new AppError(
       `Invalid ${type} name: cannot be empty`,
       400,
@@ -52,7 +88,7 @@ export function validateIdentifier(identifier: string, type: string = 'identifie
  * @returns true if valid, false if invalid
  */
 export function isValidIdentifier(identifier: string): boolean {
-  return Boolean(identifier && identifier.trim().length > 0 && IDENTIFIER_REGEX.test(identifier));
+  return Boolean(identifier && identifier.trim() && IDENTIFIER_REGEX.test(identifier));
 }
 
 /**
@@ -85,7 +121,7 @@ export function validateTableName(tableName: string): boolean {
  * @returns Safe error message
  */
 export function getIdentifierErrorMessage(identifier: string, type: string = 'identifier'): string {
-  if (!identifier || identifier.trim().length === 0) {
+  if (!identifier || !identifier.trim()) {
     return `Invalid ${type} name: cannot be empty`;
   }
   if (!IDENTIFIER_REGEX.test(identifier)) {

package/backend/tests/local/test-ai-config.sh

@@ -0,0 +1,129 @@
+#!/bin/bash
+
+# AI Configuration test script
+
+SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+source "$SCRIPT_DIR/../test-config.sh"
+
+echo "🧪 Testing AI configuration..."
+
+API_BASE="$TEST_API_BASE"
+ADMIN_TOKEN=""
+CONFIG_ID=""
+TEST_MODEL_ID="test-gpt-3.5-turbo"  # Use consistent test model ID - cleanup will remove it
+
+# Get admin token
+echo "🔑 Getting admin token..."
+ADMIN_TOKEN=$(get_admin_token)
+
+if [ -z "$ADMIN_TOKEN" ]; then
+    print_fail "Failed to get admin token"
+    exit 1
+fi
+print_success "Got admin token"
+echo ""
+
+# 1. Create AI configuration with unique test model ID
+echo "📝 Creating AI configuration (model: $TEST_MODEL_ID)..."
+create_response=$(curl -s -w "\n%{http_code}" -X POST "$API_BASE/ai/configurations" \
+    -H "Authorization: Bearer $ADMIN_TOKEN" \
+    -H "Content-Type: application/json" \
+    -d "{
+        \"inputModality\": [\"text\"],
+        \"outputModality\": [\"text\"],
+        \"provider\": \"openai\",
+        \"modelId\": \"$TEST_MODEL_ID\",
+        \"systemPrompt\": \"You are a helpful assistant.\"
+    }")
+
+status=$(echo "$create_response" | tail -n 1)
+body=$(echo "$create_response" | sed '$d')
+
+if [ "$status" -eq 201 ]; then
+    print_success "AI configuration created"
+    CONFIG_ID=$(echo "$body" | grep -o '"id":"[^"]*"' | cut -d'"' -f4)
+    echo "Config ID: $CONFIG_ID"
+    # Register for cleanup even if tests fail later
+    if [ -n "$CONFIG_ID" ]; then
+        register_test_ai_config "$CONFIG_ID"
+    fi
+else
+    print_fail "Failed to create AI configuration (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+# 2. List all configurations
+echo "📋 Listing all AI configurations..."
+list_response=$(curl -s -w "\n%{http_code}" -X GET "$API_BASE/ai/configurations" \
+    -H "Authorization: Bearer $ADMIN_TOKEN")
+
+status=$(echo "$list_response" | tail -n 1)
+body=$(echo "$list_response" | sed '$d')
+
+if [ "$status" -eq 200 ] && echo "$body" | grep -q "$CONFIG_ID"; then
+    print_success "Listed configurations successfully"
+else
+    print_fail "Failed to list configurations (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+# 3. Update configuration
+echo "✏️ Updating AI configuration..."
+update_response=$(curl -s -w "\n%{http_code}" -X PATCH "$API_BASE/ai/configurations/$CONFIG_ID" \
+    -H "Authorization: Bearer $ADMIN_TOKEN" \
+    -H "Content-Type: application/json" \
+    -d '{
+        "systemPrompt": "You are an expert coding assistant."
+    }')
+
+status=$(echo "$update_response" | tail -n 1)
+body=$(echo "$update_response" | sed '$d')
+
+if [ "$status" -eq 200 ]; then
+    print_success "AI configuration updated"
+else
+    print_fail "Failed to update configuration (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+# 4. Get models list
+echo "🤖 Getting available models..."
+models_response=$(curl -s -w "\n%{http_code}" -X GET "$API_BASE/ai/models" \
+    -H "Authorization: Bearer $ADMIN_TOKEN")
+
+status=$(echo "$models_response" | tail -n 1)
+body=$(echo "$models_response" | sed '$d')
+
+if [ "$status" -eq 200 ]; then
+    print_success "Retrieved models list"
+else
+    print_fail "Failed to get models (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+# 5. Delete configuration
+echo "🗑️ Deleting AI configuration..."
+delete_response=$(curl -s -w "\n%{http_code}" -X DELETE "$API_BASE/ai/configurations/$CONFIG_ID" \
+    -H "Authorization: Bearer $ADMIN_TOKEN")
+
+status=$(echo "$delete_response" | tail -n 1)
+body=$(echo "$delete_response" | sed '$d')
+
+if [ "$status" -eq 200 ]; then
+    print_success "AI configuration deleted"
+else
+    print_fail "Failed to delete configuration (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+print_success "🎉 AI configuration test completed!"

package/backend/tests/local/test-ai-usage.sh

@@ -0,0 +1,80 @@
+#!/bin/bash
+
+# AI Usage tracking test script
+
+SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+source "$SCRIPT_DIR/../test-config.sh"
+
+echo "🧪 Testing AI usage tracking..."
+
+API_BASE="$TEST_API_BASE"
+ADMIN_TOKEN=""
+
+# Get admin token
+echo "🔑 Getting admin token..."
+ADMIN_TOKEN=$(get_admin_token)
+
+if [ -z "$ADMIN_TOKEN" ]; then
+    print_fail "Failed to get admin token"
+    exit 1
+fi
+print_success "Got admin token"
+echo ""
+
+# 1. Get usage summary
+echo "📊 Getting usage summary..."
+summary_response=$(curl -s -w "\n%{http_code}" -X GET "$API_BASE/ai/usage/summary" \
+    -H "Authorization: Bearer $ADMIN_TOKEN")
+
+status=$(echo "$summary_response" | tail -n 1)
+body=$(echo "$summary_response" | sed '$d')
+
+if [ "$status" -eq 200 ]; then
+    print_success "Retrieved usage summary"
+    echo "Response: $body" | head -c 200
+    echo ""
+else
+    print_fail "Failed to get usage summary (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+# 2. Get paginated usage records
+echo "📋 Getting usage records with pagination..."
+usage_response=$(curl -s -w "\n%{http_code}" -X GET "$API_BASE/ai/usage?limit=10&offset=0" \
+    -H "Authorization: Bearer $ADMIN_TOKEN")
+
+status=$(echo "$usage_response" | tail -n 1)
+body=$(echo "$usage_response" | sed '$d')
+
+if [ "$status" -eq 200 ]; then
+    print_success "Retrieved usage records"
+else
+    print_fail "Failed to get usage records (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+# 3. Get usage with date range
+echo "📅 Getting usage with date range filter..."
+start_date=$(date -u +"%Y-%m-%dT%H:%M:%SZ" -d "7 days ago" 2>/dev/null || date -u -v-7d +"%Y-%m-%dT%H:%M:%SZ" 2>/dev/null || date -u +"%Y-%m-%dT%H:%M:%SZ")
+end_date=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+
+date_response=$(curl -s -w "\n%{http_code}" -X GET "$API_BASE/ai/usage?startDate=$start_date&endDate=$end_date&limit=10&offset=0" \
+    -H "Authorization: Bearer $ADMIN_TOKEN")
+
+status=$(echo "$date_response" | tail -n 1)
+body=$(echo "$date_response" | sed '$d')
+
+if [ "$status" -eq 200 ]; then
+    print_success "Retrieved usage with date filter"
+else
+    print_fail "Failed to get usage with date filter (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+print_success "🎉 AI usage tracking test completed!"

package/backend/tests/local/test-auth-router.sh

@@ -37,7 +37,7 @@ test_endpoint() {
             -d "$data")
     fi
 
-    body=$(echo "$response" | head -n -1)
+    body=$(echo "$response" | sed '$d')
     status=$(echo "$response" | tail -n 1)
 
     if [ "$status" -ge 200 ] && [ "$status" -lt 300 ]; then

package/backend/tests/local/test-e2e.sh

@@ -196,7 +196,7 @@ test_endpoint "Upload file" "$response" "201"
 
 # 12. Test Download File
 print_info "12. Testing Download File"
-response=$(curl -s -w "\n%{http_code}" "$TEST_API_BASE/storage/buckets/$TEST_BUCKET/objects/test-file.txt" \
+response=$(curl -s -L -w "\n%{http_code}" "$TEST_API_BASE/storage/buckets/$TEST_BUCKET/objects/test-file.txt" \
   -H "Authorization: Bearer $API_KEY" \
   -o /tmp/test-download.txt)
 test_endpoint "Download file" "$response" "200"

package/backend/tests/local/test-functions.sh

@@ -0,0 +1,123 @@
+#!/bin/bash
+
+# Serverless Functions test script
+
+SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+source "$SCRIPT_DIR/../test-config.sh"
+
+echo "🧪 Testing serverless functions..."
+
+API_BASE="$TEST_API_BASE"
+ADMIN_TOKEN=""
+FUNCTION_SLUG="test_func_$(date +%s)"
+
+# Get admin token
+echo "🔑 Getting admin token..."
+ADMIN_TOKEN=$(get_admin_token)
+
+if [ -z "$ADMIN_TOKEN" ]; then
+    print_fail "Failed to get admin token"
+    exit 1
+fi
+print_success "Got admin token"
+echo ""
+
+# 1. Create function
+echo "📝 Creating serverless function..."
+create_response=$(curl -s -w "\n%{http_code}" -X POST "$API_BASE/functions" \
+    -H "Authorization: Bearer $ADMIN_TOKEN" \
+    -H "Content-Type: application/json" \
+    -d '{
+        "name": "Test Function",
+        "slug": "'$FUNCTION_SLUG'",
+        "code": "export default async function handler(req) { return new Response(\"Hello World\"); }",
+        "status": "active"
+    }')
+
+status=$(echo "$create_response" | tail -n 1)
+body=$(echo "$create_response" | sed '$d')
+
+if [ "$status" -eq 201 ]; then
+    print_success "Function created"
+    echo "Slug: $FUNCTION_SLUG"
+else
+    print_fail "Failed to create function (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+# 2. List all functions
+echo "📋 Listing all functions..."
+list_response=$(curl -s -w "\n%{http_code}" -X GET "$API_BASE/functions" \
+    -H "Authorization: Bearer $ADMIN_TOKEN")
+
+status=$(echo "$list_response" | tail -n 1)
+body=$(echo "$list_response" | sed '$d')
+
+if [ "$status" -eq 200 ] && echo "$body" | grep -q "$FUNCTION_SLUG"; then
+    print_success "Listed functions successfully"
+else
+    print_fail "Failed to list functions (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+# 3. Get function details
+echo "🔍 Getting function details..."
+get_response=$(curl -s -w "\n%{http_code}" -X GET "$API_BASE/functions/$FUNCTION_SLUG" \
+    -H "Authorization: Bearer $ADMIN_TOKEN")
+
+status=$(echo "$get_response" | tail -n 1)
+body=$(echo "$get_response" | sed '$d')
+
+if [ "$status" -eq 200 ] && echo "$body" | grep -q '"code"'; then
+    print_success "Retrieved function details with code"
+else
+    print_fail "Failed to get function details (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+# 4. Update function
+echo "✏️ Updating function..."
+update_response=$(curl -s -w "\n%{http_code}" -X PUT "$API_BASE/functions/$FUNCTION_SLUG" \
+    -H "Authorization: Bearer $ADMIN_TOKEN" \
+    -H "Content-Type: application/json" \
+    -d '{
+        "code": "export default async function handler(req) { return new Response(\"Updated\"); }",
+        "status": "draft"
+    }')
+
+status=$(echo "$update_response" | tail -n 1)
+body=$(echo "$update_response" | sed '$d')
+
+if [ "$status" -eq 200 ]; then
+    print_success "Function updated"
+else
+    print_fail "Failed to update function (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+# 5. Delete function
+echo "🗑️ Deleting function..."
+delete_response=$(curl -s -w "\n%{http_code}" -X DELETE "$API_BASE/functions/$FUNCTION_SLUG" \
+    -H "Authorization: Bearer $ADMIN_TOKEN")
+
+status=$(echo "$delete_response" | tail -n 1)
+body=$(echo "$delete_response" | sed '$d')
+
+if [ "$status" -eq 200 ]; then
+    print_success "Function deleted"
+else
+    print_fail "Failed to delete function (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+print_success "🎉 Serverless functions test completed!"

package/backend/tests/local/test-logs.sh

@@ -0,0 +1,132 @@
+#!/bin/bash
+
+# Logs and Audit test script
+
+SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+source "$SCRIPT_DIR/../test-config.sh"
+
+echo "🧪 Testing logs and audit..."
+
+API_BASE="$TEST_API_BASE"
+ADMIN_TOKEN=""
+
+# Get admin token
+echo "🔑 Getting admin token..."
+ADMIN_TOKEN=$(get_admin_token)
+
+if [ -z "$ADMIN_TOKEN" ]; then
+    print_fail "Failed to get admin token"
+    exit 1
+fi
+print_success "Got admin token"
+echo ""
+
+# 1. Get audit logs
+echo "📋 Getting audit logs..."
+audit_response=$(curl -s -w "\n%{http_code}" -X GET "$API_BASE/logs/audits?limit=10&offset=0" \
+    -H "Authorization: Bearer $ADMIN_TOKEN")
+
+status=$(echo "$audit_response" | tail -n 1)
+body=$(echo "$audit_response" | sed '$d')
+
+if [ "$status" -eq 200 ] || [ "$status" -eq 206 ]; then
+    print_success "Retrieved audit logs"
+    echo "Response: $body" | head -c 200
+    echo ""
+else
+    print_fail "Failed to get audit logs (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+# 2. Get audit logs filtered by module
+echo "🔍 Getting audit logs filtered by module..."
+module_response=$(curl -s -w "\n%{http_code}" -X GET "$API_BASE/logs/audits?module=AUTH&limit=10" \
+    -H "Authorization: Bearer $ADMIN_TOKEN")
+
+status=$(echo "$module_response" | tail -n 1)
+body=$(echo "$module_response" | sed '$d')
+
+if [ "$status" -eq 200 ] || [ "$status" -eq 206 ]; then
+    print_success "Retrieved filtered audit logs"
+else
+    print_fail "Failed to get filtered audit logs (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+# 3. Get audit statistics
+echo "📊 Getting audit statistics..."
+stats_response=$(curl -s -w "\n%{http_code}" -X GET "$API_BASE/logs/audits/stats?days=7" \
+    -H "Authorization: Bearer $ADMIN_TOKEN")
+
+status=$(echo "$stats_response" | tail -n 1)
+body=$(echo "$stats_response" | sed '$d')
+
+if [ "$status" -eq 200 ] || [ "$status" -eq 500 ]; then
+    if [ "$status" -eq 500 ]; then
+        print_info "Audit statistics endpoint returned 500 (may not be fully implemented)"
+    else
+        print_success "Retrieved audit statistics"
+    fi
+else
+    print_fail "Failed to get audit statistics (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+# 4. Get log sources
+echo "📂 Getting log sources..."
+sources_response=$(curl -s -w "\n%{http_code}" -X GET "$API_BASE/logs/sources" \
+    -H "Authorization: Bearer $ADMIN_TOKEN")
+
+status=$(echo "$sources_response" | tail -n 1)
+body=$(echo "$sources_response" | sed '$d')
+
+if [ "$status" -eq 200 ]; then
+    print_success "Retrieved log sources"
+else
+    print_fail "Failed to get log sources (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+# 5. Search logs
+echo "🔎 Searching logs..."
+search_response=$(curl -s -w "\n%{http_code}" -X GET "$API_BASE/logs/search?q=test&limit=10" \
+    -H "Authorization: Bearer $ADMIN_TOKEN")
+
+status=$(echo "$search_response" | tail -n 1)
+body=$(echo "$search_response" | sed '$d')
+
+if [ "$status" -eq 200 ] || [ "$status" -eq 206 ]; then
+    print_success "Searched logs successfully"
+else
+    print_fail "Failed to search logs (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+# 6. Get log stats
+echo "📈 Getting log statistics..."
+log_stats_response=$(curl -s -w "\n%{http_code}" -X GET "$API_BASE/logs/stats" \
+    -H "Authorization: Bearer $ADMIN_TOKEN")
+
+status=$(echo "$log_stats_response" | tail -n 1)
+body=$(echo "$log_stats_response" | sed '$d')
+
+if [ "$status" -eq 200 ]; then
+    print_success "Retrieved log statistics"
+else
+    print_fail "Failed to get log statistics (status: $status)"
+    echo "Response: $body"
+    track_test_failure
+fi
+echo ""
+
+print_success "🎉 Logs and audit test completed!"