jxp 2.16.0 → 4.0.0

package/dist/libs/modeldir.js

@@ -0,0 +1,15 @@
+"use strict";
+const glob = require("glob");
+const path = require("path");
+const findModelDir = (dir) => {
+    if (dir === "/")
+        throw new Error("Model dir not found");
+    let result = glob.sync(path.join(dir, "**/user_model.js"));
+    if (result.length) {
+        return path.dirname(result.pop());
+    }
+    const found = findModelDir(path.join(dir, "../"));
+    return found;
+};
+module.exports = { findModelDir };
+//# sourceMappingURL=modeldir.js.map

package/dist/libs/modeldir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modeldir.js","sourceRoot":"","sources":["../../src/libs/modeldir.ts"],"names":[],"mappings":";AAAA,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAE7B,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,EAAE;IAC5B,IAAI,GAAG,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACxD,IAAI,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC;AACd,CAAC,CAAA;AAED,iBAAS,EAAE,YAAY,EAAE,CAAC"}

package/dist/libs/query_limits.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=query_limits.d.ts.map

package/dist/libs/query_limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_limits.d.ts","sourceRoot":"","sources":["../../src/libs/query_limits.ts"],"names":[],"mappings":""}

package/dist/libs/query_limits.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const errors = require("restify-errors");
+const DEFAULTS = {
+    enabled: true,
+    large_collection_threshold: 10000,
+    max: 1000,
+    default: 100,
+    require_limit_always: true,
+    skip_count_unless_paginated: true,
+};
+function getLimits(req) {
+    const limits = Object.assign({}, DEFAULTS, req.config?.query_limits);
+    const modelLimits = req.Model?.schema?.opts?.query_limits;
+    if (modelLimits && typeof modelLimits === "object") {
+        Object.assign(limits, modelLimits);
+    }
+    return limits;
+}
+function parseRequestedLimit(req) {
+    const n = parseInt(String(req.query.limit ?? ""), 10);
+    return Number.isFinite(n) && n > 0 ? n : null;
+}
+function shouldRunCount(req) {
+    const limits = getLimits(req);
+    if (limits.skip_count_unless_paginated === false)
+        return true;
+    if (req.query.count === "true" || req.query.count === true)
+        return true;
+    const page = parseInt(String(req.query.page ?? ""), 10);
+    return Number.isFinite(page) && page > 0;
+}
+function enforceListLimit(req, estimatedCount) {
+    const limits = getLimits(req);
+    if (limits.enabled === false) {
+        return parseRequestedLimit(req);
+    }
+    const requested = parseRequestedLimit(req);
+    const isLarge = estimatedCount >= limits.large_collection_threshold;
+    if (isLarge && !requested && limits.require_limit_always !== false) {
+        throw new errors.BadRequestError(`Collection "${req.modelname}" has ~${estimatedCount} documents. ` +
+            `Use ?limit=1..${limits.max} (required). For totals use GET /count/${req.modelname}.`);
+    }
+    if (requested && requested > limits.max) {
+        throw new errors.BadRequestError(`?limit=${requested} exceeds maximum ${limits.max} for "${req.modelname}".`);
+    }
+    if (requested) {
+        return requested;
+    }
+    if (limits.require_limit_always !== false && limits.default) {
+        return limits.default;
+    }
+    return null;
+}
+function applyListPagination(q, result, req, limit, count, changeUrlParams) {
+    if (!limit) {
+        return;
+    }
+    q.limit(limit);
+    result.limit = limit;
+    const page_count = count >= 0 ? Math.ceil(count / limit) : null;
+    if (page_count !== null) {
+        result.page_count = page_count;
+    }
+    let page = parseInt(String(req.query.page ?? ""), 10);
+    page = page ? page : 1;
+    result.page = page;
+    if (page_count !== null && page < page_count) {
+        result.next = changeUrlParams(req, "page", page + 1);
+    }
+    if (page > 1) {
+        result.prev = changeUrlParams(req, "page", page - 1);
+        q.skip(limit * (page - 1));
+    }
+}
+module.exports = {
+    getLimits,
+    parseRequestedLimit,
+    shouldRunCount,
+    enforceListLimit,
+    applyListPagination,
+    DEFAULTS,
+};
+//# sourceMappingURL=query_limits.js.map

package/dist/libs/query_limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_limits.js","sourceRoot":"","sources":["../../src/libs/query_limits.ts"],"names":[],"mappings":";;AAAA,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAEzC,MAAM,QAAQ,GAAG;IAChB,OAAO,EAAE,IAAI;IACb,0BAA0B,EAAE,KAAK;IACjC,GAAG,EAAE,IAAI;IACT,OAAO,EAAE,GAAG;IACZ,oBAAoB,EAAE,IAAI;IAC1B,2BAA2B,EAAE,IAAI;CACjC,CAAC;AAEF,SAAS,SAAS,CAAC,GAAG;IACrB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC;IAC1D,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAG;IAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,GAAG;IAC1B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,CAAC,2BAA2B,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxE,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAG,EAAE,cAAc;IAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,cAAc,IAAI,MAAM,CAAC,0BAA0B,CAAC;IAEpE,IAAI,OAAO,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,oBAAoB,KAAK,KAAK,EAAE,CAAC;QACpE,MAAM,IAAI,MAAM,CAAC,eAAe,CAC/B,eAAe,GAAG,CAAC,SAAS,UAAU,cAAc,cAAc;YACjE,iBAAiB,MAAM,CAAC,GAAG,0CAA0C,GAAG,CAAC,SAAS,GAAG,CACtF,CAAC;IACH,CAAC;IAED,IAAI,SAAS,IAAI,SAAS,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,IAAI,MAAM,CAAC,eAAe,CAC/B,UAAU,SAAS,oBAAoB,MAAM,CAAC,GAAG,SAAS,GAAG,CAAC,SAAS,IAAI,CAC3E,CAAC;IACH,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,CAAC,oBAAoB,KAAK,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC,OAAO,CAAC;IACvB,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe;IACzE,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO;IACR,CAAC;IACD,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,MAAM,UAAU,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,IAAI,UAAU,KAAK,IAAI,IAAI,IAAI,GAAG,UAAU,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;AACF,CAAC;AAED,MAAM,CAAC,OAAO,GAAG;IAChB,SAAS;IACT,mBAAmB;IACnB,cAAc;IACd,gBAAgB;IAChB,mBAAmB;IACnB,QAAQ;CACR,CAAC"}

package/dist/libs/query_manipulation.d.ts

@@ -0,0 +1,3 @@
+declare const fix_query: (query: any) => any;
+export { fix_query };
+//# sourceMappingURL=query_manipulation.d.ts.map

package/dist/libs/query_manipulation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_manipulation.d.ts","sourceRoot":"","sources":["../../src/libs/query_manipulation.ts"],"names":[],"mappings":"AAmCA,QAAA,MAAM,SAAS,GAAG,UAAK,QAoBtB,CAAA;AAED,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/{libs → dist/libs}/query_manipulation.js

@@ -1,7 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fix_query = void 0;
 const traverse = require("traverse");
 const ObjectId = require("mongoose").Types.ObjectId;
 const moment = require("moment");
-
 const relative_date = (offset, offset_unit, startof_unit, endof_unit) => {
     const m = moment();
     if (offset) {
@@ -9,14 +11,17 @@ const relative_date = (offset, offset_unit, startof_unit, endof_unit) => {
         if (offset > 0) {
             if (offset_unit) {
                 m.add(offset, offset_unit);
-            } else {
-                m.add(offset)
             }
-        } else {
+            else {
+                m.add(offset);
+            }
+        }
+        else {
             if (offset_unit) {
                 m.subtract(Math.abs(offset), offset_unit);
-            } else {
-                m.subtract(Math.abs(offset))
+            }
+            else {
+                m.subtract(Math.abs(offset));
             }
         }
     }
@@ -27,34 +32,30 @@ const relative_date = (offset, offset_unit, startof_unit, endof_unit) => {
         m.endOf(endof_unit);
     }
     return m.toDate();
-}
-
+};
 const fix_params = s => {
-    return s.split(",").map(i => r = i.trim().replace(/\"/g, "")).map(i => (i === "null") ? null : i);
-}
-
+    return s.split(",").map(i => i.trim().replace(/\"/g, "")).map(i => (i === "null") ? null : i);
+};
 const fix_query = query => {
-    const cleaned = traverse(query).map(function(val) {
-        const date_parts = /^(new Date\(\")([\d\.\-\+zZT\:]*)(\"\))/g.exec(val);
+    const cleaned = traverse(query).map(function (val) {
+        const date_parts = /^(new Date\(\")([\d\.\-\+zZT\:]*)(\"\))/g.exec(String(val));
         if (date_parts) {
             const newval = new Date(date_parts[2]);
             this.update(newval, true);
         }
-        const objectid_parts = /^(ObjectId\(\")([a-zA-Z\d]*)(\"\))/g.exec(val);
+        const objectid_parts = /^(ObjectId\(\")([a-zA-Z\d]*)(\"\))/g.exec(String(val));
         if (objectid_parts) {
             const newval = ObjectId(objectid_parts[2]);
             this.update(newval, true);
         }
-        const startof_parts = /^(relative_date\()(.*)(\))/g.exec(val);
+        const startof_parts = /^(relative_date\()(.*)(\))/g.exec(String(val));
         if (startof_parts) {
             const params = fix_params(startof_parts[2]);
             const newval = relative_date.apply(null, params);
             this.update(newval, true);
         }
-    })
+    });
     return cleaned;
-}
-
-module.exports = {
-    fix_query
-}
+};
+exports.fix_query = fix_query;
+//# sourceMappingURL=query_manipulation.js.map

package/dist/libs/query_manipulation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_manipulation.js","sourceRoot":"","sources":["../../src/libs/query_manipulation.ts"],"names":[],"mappings":";;;AAAA,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;AACpD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE;IACpE,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,IAAI,MAAM,EAAE,CAAC;QACT,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACb,IAAI,WAAW,EAAE,CAAC;gBACd,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC/B,CAAC;iBAAM,CAAC;gBACJ,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACjB,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,IAAI,WAAW,EAAE,CAAC;gBACd,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACJ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;YAChC,CAAC;QACL,CAAC;IACL,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACf,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACb,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AACtB,CAAC,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,CAAC,EAAE;IACnB,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClG,CAAC,CAAA;AAED,MAAM,SAAS,GAAG,KAAK,CAAC,EAAE;IACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,UAAkE,GAAY;QAC9G,MAAM,UAAU,GAAG,0CAA0C,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAChF,IAAI,UAAU,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,cAAc,GAAG,qCAAqC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/E,IAAI,cAAc,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,aAAa,GAAG,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,IAAI,aAAa,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;IACL,CAAC,CAAC,CAAA;IACF,OAAO,OAAO,CAAC;AACnB,CAAC,CAAA;AAEQ,8BAAS"}

package/dist/libs/query_sanitize.d.ts

@@ -0,0 +1,5 @@
+export declare function sanitizeFilter(filter: unknown, options?: {
+    filter_operators_deny?: string[];
+}): Record<string, unknown>;
+export declare function parseSearchObject(search: unknown): Record<string, RegExp>;
+//# sourceMappingURL=query_sanitize.d.ts.map

package/dist/libs/query_sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_sanitize.d.ts","sourceRoot":"","sources":["../../src/libs/query_sanitize.ts"],"names":[],"mappings":"AA6EA,wBAAgB,cAAc,CAC7B,MAAM,EAAE,OAAO,EACf,OAAO,CAAC,EAAE;IAAE,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAC5C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOzB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiBzE"}

package/dist/libs/query_sanitize.js

@@ -0,0 +1,109 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeFilter = sanitizeFilter;
+exports.parseSearchObject = parseSearchObject;
+const errors = require("restify-errors");
+const DEFAULT_DENY_OPERATORS = new Set([
+    "$where",
+    "$function",
+    "$accumulator",
+    "$expr",
+    "$jsonSchema",
+]);
+const MAX_REGEX_LENGTH = 256;
+const NESTED_QUANTIFIER = /(\*|\?|\+|\{)\s*(\*|\?|\+|\{)/;
+function getDenySet(custom) {
+    if (!custom || !custom.length)
+        return DEFAULT_DENY_OPERATORS;
+    return new Set([...DEFAULT_DENY_OPERATORS, ...custom]);
+}
+function validateRegex(pattern) {
+    if (pattern.length > MAX_REGEX_LENGTH) {
+        throw new errors.BadRequestError("Regex pattern too long");
+    }
+    if (NESTED_QUANTIFIER.test(pattern)) {
+        throw new errors.BadRequestError("Regex pattern not allowed");
+    }
+}
+function sanitizeRegexValue(value) {
+    if (value instanceof RegExp) {
+        validateRegex(value.source);
+        return;
+    }
+    if (typeof value === "string") {
+        validateRegex(value);
+        return;
+    }
+    if (value && typeof value === "object") {
+        const o = value;
+        if (typeof o.$regex === "string") {
+            validateRegex(o.$regex);
+        }
+    }
+}
+function walkQuery(obj, deny, depth = 0) {
+    const MAX_DEPTH = 20;
+    if (depth > MAX_DEPTH) {
+        throw new errors.BadRequestError("Query nesting too deep");
+    }
+    if (obj === null || obj === undefined)
+        return;
+    if (obj instanceof RegExp) {
+        validateRegex(obj.source);
+        return;
+    }
+    if (Array.isArray(obj)) {
+        for (const item of obj) {
+            walkQuery(item, deny, depth + 1);
+        }
+        return;
+    }
+    if (typeof obj !== "object")
+        return;
+    for (const key of Object.keys(obj)) {
+        if (key.startsWith("$") && deny.has(key)) {
+            throw new errors.BadRequestError(`Operator ${key} is not allowed`);
+        }
+        if (key === "$regex") {
+            sanitizeRegexValue(obj[key]);
+        }
+        const val = obj[key];
+        if (val instanceof RegExp) {
+            validateRegex(val.source);
+        }
+        walkQuery(val, deny, depth + 1);
+    }
+}
+function sanitizeFilter(filter, options) {
+    if (!filter || typeof filter !== "object" || Array.isArray(filter)) {
+        return filter || {};
+    }
+    const deny = getDenySet(options?.filter_operators_deny);
+    walkQuery(filter, deny);
+    return filter;
+}
+function parseSearchObject(search) {
+    const result = {};
+    if (!search)
+        return result;
+    if (typeof search === "string") {
+        return result;
+    }
+    if (typeof search !== "object" || Array.isArray(search)) {
+        return result;
+    }
+    for (const i in search) {
+        const val = search[i];
+        if (typeof val === "string") {
+            validateRegex(val);
+            result[i] = new RegExp(val, "i");
+        }
+    }
+    return result;
+}
+module.exports = {
+    sanitizeFilter,
+    parseSearchObject,
+    DEFAULT_DENY_OPERATORS: [...DEFAULT_DENY_OPERATORS],
+};
+//# sourceMappingURL=query_sanitize.js.map

package/dist/libs/query_sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_sanitize.js","sourceRoot":"","sources":["../../src/libs/query_sanitize.ts"],"names":[],"mappings":";;AA6EA,wCAUC;AAED,8CAiBC;AA1GD,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAEzC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACtC,QAAQ;IACR,WAAW;IACX,cAAc;IACd,OAAO;IACP,aAAa;CACb,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,iBAAiB,GAAG,+BAA+B,CAAC;AAE1D,SAAS,UAAU,CAAC,MAAiB;IACpC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,sBAAsB,CAAC;IAC7D,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,sBAAsB,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACrC,IAAI,OAAO,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACvC,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,wBAAwB,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAC;IAC/D,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACzC,IAAI,KAAK,YAAY,MAAM,EAAE,CAAC;QAC7B,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO;IACR,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO;IACR,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,SAAS,CAAC,GAAY,EAAE,IAAiB,EAAE,KAAK,GAAG,CAAC;IAC5D,MAAM,SAAS,GAAG,EAAE,CAAC;IACrB,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,wBAAwB,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO;IAC9C,IAAI,GAAG,YAAY,MAAM,EAAE,CAAC;QAC3B,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO;IACR,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACxB,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,OAAO;IACR,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO;IAEpC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAA8B,CAAC,EAAE,CAAC;QAC/D,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,YAAY,GAAG,iBAAiB,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACtB,kBAAkB,CAAE,GAA+B,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,GAAG,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,GAAG,YAAY,MAAM,EAAE,CAAC;YAC3B,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QACD,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;AACF,CAAC;AAED,SAAgB,cAAc,CAC7B,MAAe,EACf,OAA8C;IAE9C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpE,OAAQ,MAAkC,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACxD,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxB,OAAO,MAAiC,CAAC;AAC1C,CAAC;AAED,SAAgB,iBAAiB,CAAC,MAAe;IAChD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAC3B,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC;IACf,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,OAAO,MAAM,CAAC;IACf,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAgC,EAAE,CAAC;QAClD,MAAM,GAAG,GAAI,MAAiC,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC7B,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,CAAC,OAAO,GAAG;IAChB,cAAc;IACd,iBAAiB;IACjB,sBAAsB,EAAE,CAAC,GAAG,sBAAsB,CAAC;CACnD,CAAC"}

package/dist/libs/response_sanitize.d.ts

@@ -0,0 +1,7 @@
+export declare function sanitizeDocument(doc: unknown, stripFields?: string[]): Record<string, unknown>;
+export declare function sanitizeListResult(result: {
+    data?: unknown[];
+    [key: string]: unknown;
+}, stripFields?: string[]): void;
+export declare function sanitizeResponse(result: unknown, stripFields?: string[]): unknown;
+//# sourceMappingURL=response_sanitize.d.ts.map

package/dist/libs/response_sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response_sanitize.d.ts","sourceRoot":"","sources":["../../src/libs/response_sanitize.ts"],"names":[],"mappings":"AAuBA,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK9F;AAED,wBAAgB,kBAAkB,CACjC,MAAM,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EACpD,WAAW,CAAC,EAAE,MAAM,EAAE,GACpB,IAAI,CAGN;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CASjF"}

package/dist/libs/response_sanitize.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeDocument = sanitizeDocument;
+exports.sanitizeListResult = sanitizeListResult;
+exports.sanitizeResponse = sanitizeResponse;
+const DEFAULT_STRIP_FIELDS = ["password"];
+function stripFromObject(obj, fields) {
+    for (const key of Object.keys(obj)) {
+        if (fields.has(key)) {
+            delete obj[key];
+        }
+        else if (obj[key] && typeof obj[key] === "object" && !Array.isArray(obj[key]) && !(obj[key] instanceof Date)) {
+            stripFromObject(obj[key], fields);
+        }
+    }
+}
+function docToPlain(doc) {
+    if (!doc || typeof doc !== "object")
+        return {};
+    if (typeof doc.toObject === "function") {
+        return doc.toObject();
+    }
+    if (typeof doc._doc !== "undefined") {
+        return { ...doc._doc };
+    }
+    return { ...doc };
+}
+function sanitizeDocument(doc, stripFields) {
+    const fields = new Set(stripFields ?? DEFAULT_STRIP_FIELDS);
+    const plain = docToPlain(doc);
+    stripFromObject(plain, fields);
+    return plain;
+}
+function sanitizeListResult(result, stripFields) {
+    if (!result.data || !Array.isArray(result.data))
+        return;
+    result.data = result.data.map((row) => sanitizeDocument(row, stripFields));
+}
+function sanitizeResponse(result, stripFields) {
+    if (!result || typeof result !== "object")
+        return result;
+    const r = result;
+    if (Array.isArray(r.data)) {
+        sanitizeListResult(r, stripFields);
+    }
+    else if (r.data) {
+        r.data = sanitizeDocument(r.data, stripFields);
+    }
+    return result;
+}
+module.exports = {
+    DEFAULT_STRIP_FIELDS,
+    sanitizeDocument,
+    sanitizeListResult,
+    sanitizeResponse,
+};
+//# sourceMappingURL=response_sanitize.js.map

package/dist/libs/response_sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response_sanitize.js","sourceRoot":"","sources":["../../src/libs/response_sanitize.ts"],"names":[],"mappings":";;AAuBA,4CAKC;AAED,gDAMC;AAED,4CASC;AA/CD,MAAM,oBAAoB,GAAG,CAAC,UAAU,CAAC,CAAC;AAE1C,SAAS,eAAe,CAAC,GAA4B,EAAE,MAAmB;IACzE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;aAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC;YAChH,eAAe,CAAC,GAAG,CAAC,GAAG,CAA4B,EAAE,MAAM,CAAC,CAAC;QAC9D,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC/B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC/C,IAAI,OAAQ,GAAoD,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC1F,OAAQ,GAAmD,CAAC,QAAQ,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,OAAQ,GAA0C,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC7E,OAAO,EAAE,GAAI,GAAyC,CAAC,IAAI,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,GAAI,GAA+B,EAAE,CAAC;AAChD,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAY,EAAE,WAAsB;IACpE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAgB,kBAAkB,CACjC,MAAoD,EACpD,WAAsB;IAEtB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO;IACxD,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAgB,gBAAgB,CAAC,MAAe,EAAE,WAAsB;IACvE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IACzD,MAAM,CAAC,GAAG,MAA4B,CAAC;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,kBAAkB,CAAC,CAAwB,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;SAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAClB,CAAuB,CAAC,IAAI,GAAG,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,CAAC,OAAO,GAAG;IAChB,oBAAoB;IACpB,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;CAChB,CAAC"}

package/dist/libs/safe_error.d.ts

@@ -0,0 +1,3 @@
+/** Log full error server-side; return a safe client message for 500s. */
+export declare function safeErrorMessage(err: unknown): string;
+//# sourceMappingURL=safe_error.d.ts.map

package/dist/libs/safe_error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe_error.d.ts","sourceRoot":"","sources":["../../src/libs/safe_error.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAQrD"}

package/dist/libs/safe_error.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.safeErrorMessage = safeErrorMessage;
+/** Log full error server-side; return a safe client message for 500s. */
+function safeErrorMessage(err) {
+    if (err && typeof err === "object" && "message" in err && typeof err.message === "string") {
+        const msg = err.message;
+        if (msg.length > 0 && msg.length < 200 && !msg.includes(" at ")) {
+            return msg;
+        }
+    }
+    return "An internal error occurred";
+}
+//# sourceMappingURL=safe_error.js.map

package/dist/libs/safe_error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe_error.js","sourceRoot":"","sources":["../../src/libs/safe_error.ts"],"names":[],"mappings":";;AACA,4CAQC;AATD,yEAAyE;AACzE,SAAgB,gBAAgB,CAAC,GAAY;IAC5C,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,SAAS,IAAI,GAAG,IAAI,OAAQ,GAAa,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACtG,MAAM,GAAG,GAAI,GAAa,CAAC,OAAO,CAAC;QACnC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjE,OAAO,GAAG,CAAC;QACZ,CAAC;IACF,CAAC;IACD,OAAO,4BAA4B,CAAC;AACrC,CAAC"}

package/dist/libs/schema.d.ts

@@ -0,0 +1,14 @@
+import mongoose, { type Model } from "mongoose";
+import type { JXPDefinition, JXPSchemaOptions } from "../types/schema-fields";
+declare class JXPSchema extends mongoose.Schema {
+    opts: JXPSchemaOptions;
+    definition: JXPDefinition;
+    constructor(definition: JXPDefinition, opts?: JXPSchemaOptions);
+    setPerms(): void;
+    generateLinks(): void;
+    static Types: typeof mongoose.Schema.Types;
+    static model: <T>(name: string, schema?: JXPSchema, collection?: string) => Model<T>;
+}
+export type { JXPSchema };
+export default JXPSchema;
+//# sourceMappingURL=schema.d.ts.map

package/dist/libs/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/libs/schema.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,EAAE,EAAE,KAAK,KAAK,EAAyB,MAAM,UAAU,CAAC;AAKvE,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AA8B9E,cAAM,SAAU,SAAQ,QAAQ,CAAC,MAAM;IAC9B,IAAI,EAAE,gBAAgB,CAAC;IACvB,UAAU,EAAE,aAAa,CAAC;gBAEtB,UAAU,EAAE,aAAa,EAAE,IAAI,GAAE,gBAAqB;IAkClE,QAAQ,IAAI,IAAI;IAgBhB,aAAa,IAAI,IAAI;IA2BrB,MAAM,CAAC,KAAK,+BAAyB;IACrC,MAAM,CAAC,KAAK,EAAoC,CAAC,CAAC,EACjD,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,SAAS,EAClB,UAAU,CAAC,EAAE,MAAM,KACf,KAAK,CAAC,CAAC,CAAC,CAAC;CACd;AAED,YAAY,EAAE,SAAS,EAAE,CAAC;AAC1B,eAAe,SAAS,CAAC"}

package/dist/libs/schema.js

@@ -0,0 +1,98 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const mongoose_1 = __importDefault(require("mongoose"));
+const path_1 = __importDefault(require("path"));
+const JXPHelper = require("jxp-helper");
+const modeldir = require("./modeldir");
+const load_config_1 = require("./load-config");
+// Set some global types for JS model files using /* global ObjectId Mixed */
+global.ObjectId = mongoose_1.default.Schema.Types.ObjectId;
+global.Mixed = mongoose_1.default.Schema.Types.Mixed;
+function resolveModelDir(dir) {
+    if (path_1.default.isAbsolute(dir))
+        return dir;
+    return path_1.default.resolve(process.cwd(), dir);
+}
+function getModelDir() {
+    const fromEnv = (0, load_config_1.getModelDirFromEnv)();
+    if (fromEnv)
+        return resolveModelDir(fromEnv);
+    return modeldir.findModelDir(path_1.default.dirname(process.argv[1] ?? "."));
+}
+const getModelFileFromRef = (ref) => {
+    return path_1.default.join(getModelDir(), `${String(ref).toLowerCase()}_model`);
+};
+class JXPSchema extends mongoose_1.default.Schema {
+    constructor(definition, opts = {}) {
+        opts = Object.assign({
+            timestamps: true,
+            toJSON: { virtuals: true },
+            toObject: { virtuals: true },
+        }, opts);
+        definition = Object.assign({
+            _deleted: { type: Boolean, default: false, index: true },
+            _owner_id: { type: global.ObjectId, link: "User", map_to: "_owner", index: true },
+            _updated_by_id: { type: global.ObjectId, link: "User", map_to: "_updated_by", index: true },
+        }, definition);
+        if (!global.jxphelper) {
+            const jxp_settings = {};
+            if (global.apikey)
+                jxp_settings.apikey = global.apikey;
+            if (global.server)
+                jxp_settings.server = global.server;
+            if (jxp_settings.apikey && jxp_settings.server) {
+                global.jxphelper = new JXPHelper(jxp_settings);
+            }
+        }
+        super(definition, opts);
+        this.opts = opts;
+        this.definition = definition;
+        this.index({ createdAt: -1 });
+        this.index({ updatedAt: -1 });
+        this.setPerms();
+        this.generateLinks();
+    }
+    setPerms() {
+        // JXP stores permission strings on the schema for runtime auth checks
+        this.set("_perms", Object.assign({
+            admin: "",
+            owner: "",
+            user: "",
+            all: "",
+        }, this.opts.perms));
+    }
+    generateLinks() {
+        const loaded_files = [];
+        for (const key of Object.keys(this.definition)) {
+            let def = this.definition[key];
+            let is_array = false;
+            if (Array.isArray(def) && def[0]) {
+                def = def[0];
+                is_array = true;
+            }
+            if (!def || typeof def !== "object" || !("link" in def) || !def.link)
+                continue;
+            const virtual_name = def.map_to || def.virtual || String(def.link).toLowerCase();
+            if (!loaded_files.includes(def.link)) {
+                // eslint-disable-next-line @typescript-eslint/no-require-imports
+                const linked = require(getModelFileFromRef(def.link));
+                void (linked.default || linked);
+                loaded_files.push(def.link);
+            }
+            this.virtual(virtual_name, {
+                ref: def.link,
+                localField: key,
+                foreignField: "_id",
+                justOne: def.justOne ?? !is_array,
+                options: Object.assign({}, def.options),
+            });
+        }
+    }
+    static Types = mongoose_1.default.Schema.Types;
+    static model = mongoose_1.default.model.bind(mongoose_1.default);
+}
+exports.default = JXPSchema;
+//# sourceMappingURL=schema.js.map

package/dist/libs/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/libs/schema.ts"],"names":[],"mappings":";;;;;AAAA,wDAAuE;AACvE,gDAAwB;AACxB,wCAAyC;AACzC,uCAAwC;AACxC,+CAAmD;AAGnD,6EAA6E;AAC7E,MAAM,CAAC,QAAQ,GAAG,kBAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;AACjD,MAAM,CAAC,KAAK,GAAG,kBAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;AAE3C,SAAS,eAAe,CAAC,GAAW;IACnC,IAAI,cAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACrC,OAAO,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,WAAW;IACnB,MAAM,OAAO,GAAG,IAAA,gCAAkB,GAAE,CAAC;IACrC,IAAI,OAAO;QAAE,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,QAAQ,CAAC,YAAY,CAAC,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,GAAW,EAAU,EAAE;IACnD,OAAO,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;AACvE,CAAC,CAAC;AAWF,MAAM,SAAU,SAAQ,kBAAQ,CAAC,MAAM;IAItC,YAAY,UAAyB,EAAE,OAAyB,EAAE;QACjE,IAAI,GAAG,MAAM,CAAC,MAAM,CACnB;YACC,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC1B,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC5B,EACD,IAAI,CACJ,CAAC;QACF,UAAU,GAAG,MAAM,CAAC,MAAM,CACzB;YACC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE;YACxD,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE;YACjF,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE;SAC3F,EACD,UAAU,CACV,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACvB,MAAM,YAAY,GAAyC,EAAE,CAAC;YAC9D,IAAI,MAAM,CAAC,MAAM;gBAAE,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YACvD,IAAI,MAAM,CAAC,MAAM;gBAAE,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YACvD,IAAI,YAAY,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;gBAChD,MAAM,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC,YAAY,CAAC,CAAC;YAChD,CAAC;QACF,CAAC;QACD,KAAK,CAAC,UAA8B,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,CAAC,aAAa,EAAE,CAAC;IACtB,CAAC;IAED,QAAQ;QACP,sEAAsE;QACrE,IAA4D,CAAC,GAAG,CAChE,QAAQ,EACR,MAAM,CAAC,MAAM,CACZ;YACC,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,EAAE;YACR,GAAG,EAAE,EAAE;SACP,EACD,IAAI,CAAC,IAAI,CAAC,KAAK,CACf,CACD,CAAC;IACH,CAAC;IAED,aAAa;QACZ,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAA0C,CAAC;YACxE,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;gBACb,QAAQ,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;gBAAE,SAAS;YAC/E,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YACjF,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtC,iEAAiE;gBACjE,MAAM,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtD,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;gBAChC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE;gBAC1B,GAAG,EAAE,GAAG,CAAC,IAAI;gBACb,UAAU,EAAE,GAAG;gBACf,YAAY,EAAE,KAAK;gBACnB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,CAAC,QAAQ;gBACjC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC;aACvC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,MAAM,CAAC,KAAK,GAAG,kBAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;IACrC,MAAM,CAAC,KAAK,GAAG,kBAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAQ,CAI9B,CAAC;;AAIf,kBAAe,SAAS,CAAC"}

package/dist/libs/schema_description.d.ts

@@ -0,0 +1,3 @@
+declare const getModelFileContents: (model_dir: any) => Promise<unknown>;
+export = getModelFileContents;
+//# sourceMappingURL=schema_description.d.ts.map

package/dist/libs/schema_description.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema_description.d.ts","sourceRoot":"","sources":["../../src/libs/schema_description.ts"],"names":[],"mappings":"AAIA,QAAA,MAAM,oBAAoB,GAAI,cAAS,qBAmFtC,CAAA;AAED,SAAS,oBAAoB,CAAC"}