jxp 3.0.0 → 4.1.0

package/.env.sample

@@ -1,6 +1,43 @@
-DB_HOST=localhost
-DB_USER=root
-DB_PASSWORD=password
-DB_NAME=jxp
-DB_PORT=27017
-NODE_DOCKER_PORT=4001
+# Server
+PORT=4001
+NODE_DOCKER_PORT=4001
+API_URL=http://localhost:4001
+
+# MongoDB — use MONGO_CONNECTION_STRING or individual MONGODB_* vars
+MONGO_CONNECTION_STRING=mongodb://127.0.0.1:27017/jxp
+# MONGODB_HOST=127.0.0.1
+# MONGODB_PORT=27017
+# MONGODB_NAME=jxp
+# MONGODB_USER=
+# MONGODB_PASSWORD=
+# MONGODB_AUTH_DB=admin
+
+# Auth / tokens
+SHARED_SECRET=change-me
+TOKEN_EXPIRY=86400
+REFRESH_TOKEN_EXPIRY=2678400
+
+# Paths
+MODEL_DIR=./dist/models
+LOG_FILE=access.log
+
+# API docs browser: protected (default) | disabled | public
+# Protected: home + guides public; /docs/api and /docs/model/* need POST /login
+# DOCS_ACCESS=protected
+# DOCS_USER_EMAIL=docs@example.com
+# DOCS_COOKIE_SECURE=true
+
+# Login brute-force protection (default on): per-IP token bucket on POST /login and POST /docs/session
+# LOGIN_RATE_LIMIT_ENABLED=true
+# LOGIN_RATE_BURST=8
+# LOGIN_RATE_PER_MINUTE=12
+# LOGIN_RATE_LIMIT_XFF=true
+
+# Optional
+# APIKEY=
+# DEBUG=false
+# CACHE_ENABLED=false
+# CACHE_TTL=300
+# QUERY_LIMITS_MAX=1000
+# QUERY_LIMITS_DEFAULT=100
+# CORS_ORIGINS=http://localhost:3000,http://localhost:4001

package/README.md

@@ -22,21 +22,35 @@ JXP is an opinionated RESTful API framework that lets you make an API just by de
 
     npm install -g jxp
     jxp-setup my-app
-    cd my-ap
+    cd my-app
     npm start
 
-## Documentation
-
-* [Installation](https://jxp.readthedocs.io/en/v2.0.0/installation)
-* [Configuration](https://jxp.readthedocs.io/en/v2.0.0/configuration)
-* [Authentication](https://jxp.readthedocs.io/en/v2.0.0/authentication)
-* [Schemas](https://jxp.readthedocs.io/en/v2.0.0/schemas)
-* [Restful API](https://jxp.readthedocs.io/en/v2.0.0/api)
-* [Roles and Permissions](https://jxp.readthedocs.io/en/v2.0.0/permissions)
-* [Hooks](https://jxp.readthedocs.io/en/v2.0.0/hooks)
-* [Special Features](https://jxp.readthedocs.io/en/v2.0.0/special)
-* [Changelog](https://jxp.readthedocs.io/en/v2.0.0/changelog)
+Requires **Node.js 22+**.
 
 ## Installing from source
 
-`npm i --legacy-peer-deps`
+```bash
+npm i --legacy-peer-deps
+npm run build   # compiles TypeScript (runs on git clone install when src/ is present)
+npm start       # sample server at dist/bin/server.js
+```
+
+Requires **Node.js 22+** and MongoDB for the sample server and integration tests.
+
+## TypeScript
+
+JXP 4 is implemented in TypeScript. See [docs/typescript.md](docs/typescript.md) for building from source, consuming types in JavaScript apps, and authoring typed models.
+
+## Documentation
+
+* [TypeScript / v4 migration](docs/typescript.md)
+* [Installation](https://jxp.readthedocs.io/en/latest/installation/)
+* [Configuration](https://jxp.readthedocs.io/en/latest/configuration/)
+* [Authentication](https://jxp.readthedocs.io/en/latest/authentication/)
+* [Schemas](https://jxp.readthedocs.io/en/latest/schemas/)
+* [Restful API](https://jxp.readthedocs.io/en/latest/api/)
+* [Roles and Permissions](https://jxp.readthedocs.io/en/latest/permissions/)
+* [Hooks](https://jxp.readthedocs.io/en/latest/hooks/)
+* [Special Features](https://jxp.readthedocs.io/en/latest/special/)
+* [Changelog](https://jxp.readthedocs.io/en/latest/changelog/)
+* [Full docs](https://jxp.readthedocs.io/en/latest/)

package/dist/bin/init_db.d.ts

@@ -0,0 +1,3 @@
+#! /usr/bin/env node
+export {};
+//# sourceMappingURL=init_db.d.ts.map

package/dist/bin/init_db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init_db.d.ts","sourceRoot":"","sources":["../../src/bin/init_db.ts"],"names":[],"mappings":""}

package/dist/bin/init_db.js

@@ -0,0 +1,48 @@
+#! /usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const program = require("commander");
+const readline = require("readline-sync");
+const mongoose = require("mongoose");
+const path = require("path");
+const security = require("../libs/security");
+const { getMongoConnectionString, loadEnv } = require("../libs/load-config");
+const schemaModule = require("../libs/schema");
+global.JXPSchema = schemaModule.default || schemaModule;
+loadEnv();
+const modelDir = process.env.MODEL_DIR || path.resolve(process.cwd(), "dist/models");
+const User = require(path.join(modelDir, "user_model"));
+const UserModel = User.default || User;
+const pkg = require("../../package.json");
+program
+    .version(pkg.version)
+    .usage("[options] [dir]")
+    .option("-v, --version", "JXP version")
+    .option("-e, --email <user>", "Admin user email")
+    .option("-p, --password <password>", "Admin password")
+    .option("-u, --username <name>", "Admin user name")
+    .parse();
+const opts = program.opts();
+async function main() {
+    const email = opts.email || readline.question("Admin user email: ");
+    const password = opts.password || readline.question("Admin user password: ");
+    const name = opts.username ||
+        readline.question("Admin user name (Admin): ", { defaultInput: "Admin" });
+    await mongoose.connect(getMongoConnectionString());
+    const user = new UserModel();
+    user.email = email;
+    user.password = security.encPassword(password);
+    user.name = name;
+    user.admin = true;
+    try {
+        await user.save();
+        console.log("Created admin user", name, "<" + email + ">");
+        process.exit(0);
+    }
+    catch (err) {
+        console.log("Error:", err.message);
+        process.exit(1);
+    }
+}
+main();
+//# sourceMappingURL=init_db.js.map

package/dist/bin/init_db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init_db.js","sourceRoot":"","sources":["../../src/bin/init_db.ts"],"names":[],"mappings":";;;AACA,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACrC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAC7C,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAE7E,MAAM,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAC/C,MAAM,CAAC,SAAS,GAAG,YAAY,CAAC,OAAO,IAAI,YAAY,CAAC;AAExD,OAAO,EAAE,CAAC;AACV,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC;AACrF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;AACxD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;AAEvC,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAE1C,OAAO;KACL,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;KACpB,KAAK,CAAC,iBAAiB,CAAC;KACxB,MAAM,CAAC,eAAe,EAAE,aAAa,CAAC;KACtC,MAAM,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;KAChD,MAAM,CAAC,2BAA2B,EAAE,gBAAgB,CAAC;KACrD,MAAM,CAAC,uBAAuB,EAAE,iBAAiB,CAAC;KAClD,KAAK,EAAE,CAAC;AAEV,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;AAE5B,KAAK,UAAU,IAAI;IAClB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IAC7E,MAAM,IAAI,GACT,IAAI,CAAC,QAAQ;QACb,QAAQ,CAAC,QAAQ,CAAC,2BAA2B,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IAE3E,MAAM,QAAQ,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,SAAS,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACjB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IAClB,IAAI,CAAC;QACJ,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;AACF,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/bin/server.d.ts

@@ -0,0 +1,4 @@
+import "../libs/startup-deprecations";
+declare const server: any;
+export = server;
+//# sourceMappingURL=server.d.ts.map

package/dist/bin/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/bin/server.ts"],"names":[],"mappings":"AAUA,OAAO,8BAA8B,CAAC;AAgHtC,QAAA,MAAM,MAAM,KAAiB,CAAC;AAoB9B,SAAS,MAAM,CAAC"}

package/dist/bin/server.js

@@ -0,0 +1,132 @@
+"use strict";
+/*
+=================
+JXP - Express API
+=================
+
+Documentation:
+https://jxp.readthedocs.io/en/latest/
+
+*/
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+require("../libs/startup-deprecations");
+const path_1 = __importDefault(require("path"));
+const mongoose_1 = __importDefault(require("mongoose"));
+const JXP = require("../libs/jxp");
+const load_config_1 = require("../libs/load-config");
+const startup_1 = require("../libs/startup");
+const package_json_1 = __importDefault(require("../../package.json"));
+const apiconfig = (0, load_config_1.loadJxpConfig)();
+apiconfig.quiet_startup = true;
+apiconfig.callbacks = {
+    post: function () { },
+    put: function () { },
+    delete: function () { },
+};
+apiconfig.pre_hooks = {
+    login: (_req, _res, next) => {
+        next();
+    },
+    get: (_req, _res, next) => {
+        next();
+    },
+    getOne: (_req, _res, next) => {
+        next();
+    },
+    post: (_req, _res, next) => {
+        next();
+    },
+    put: (_req, _res, next) => {
+        next();
+    },
+    delete: (_req, _res, next) => {
+        next();
+    },
+};
+mongoose_1.default.Promise = Promise;
+mongoose_1.default.set("strictQuery", true);
+if (!apiconfig.mongo)
+    apiconfig.mongo = {};
+if (!apiconfig.mongo.options)
+    apiconfig.mongo.options = {};
+const mongo_options = Object.assign(apiconfig.mongo.options, {
+    useNewUrlParser: true,
+    useUnifiedTopology: true,
+    serverSelectionTimeoutMS: 10000,
+    socketTimeoutMS: 45000,
+    maxPoolSize: process.env.NODE_ENV === "test" ? 20 : 50,
+    minPoolSize: process.env.NODE_ENV === "test" ? 5 : 10,
+    maxIdleTimeMS: 30000,
+    connectTimeoutMS: 10000,
+    heartbeatFrequencyMS: 10000,
+    retryWrites: true,
+    retryReads: true,
+});
+const connection_string = (0, load_config_1.getMongoConnectionString)();
+const startupCtx = {
+    name: package_json_1.default.name,
+    version: package_json_1.default.version,
+    mongoUri: connection_string,
+    accessLog: path_1.default.resolve(apiconfig.log || "access.log"),
+    maxPoolSize: mongo_options.maxPoolSize,
+};
+(0, startup_1.printBanner)(startupCtx);
+(0, startup_1.printBooting)(startupCtx);
+mongoose_1.default.connect(connection_string, mongo_options);
+const db = mongoose_1.default.connection;
+let mongoConnectedAt = null;
+let httpUrl = null;
+let readyPrinted = false;
+db.on("error", (err) => {
+    console.error("MongoDB connection error:", err);
+    if (err.name === "MongoNetworkError") {
+        console.error("Network error occurred. Attempting to reconnect...");
+    }
+});
+db.once("open", () => {
+    mongoConnectedAt = new Date();
+    maybePrintReady();
+});
+mongoose_1.default.connection.on("disconnected", () => {
+    console.log("Mongoose disconnected");
+    setTimeout(() => {
+        Promise.resolve(mongoose_1.default.connect(connection_string, mongo_options)).catch((err) => {
+            console.error("Failed to reconnect to MongoDB:", err);
+        });
+    }, 5000);
+});
+mongoose_1.default.connection.on("error", (err) => {
+    console.error("Mongoose connection error:", err);
+});
+setInterval(() => {
+    const client = mongoose_1.default.connection.getClient?.();
+    const pool = client?.topology?.s
+        ?.pool?.totalConnectionCount ?? 0;
+    const maxPoolSize = mongo_options.maxPoolSize;
+    if (pool > 0 && pool > maxPoolSize * 0.8) {
+        console.warn(`Connection pool is at ${Math.round((pool / maxPoolSize) * 100)}% capacity`);
+    }
+}, 30000);
+const server = JXP(apiconfig);
+let port = process.env.NODE_DOCKER_PORT || process.env.PORT || String(apiconfig.port || 4001);
+if (process.env.NODE_ENV === "test")
+    port = "4005";
+server.listen(parseInt(String(port), 10), function () {
+    httpUrl = server.url;
+    maybePrintReady();
+});
+function maybePrintReady() {
+    if (readyPrinted || !mongoConnectedAt || !httpUrl)
+        return;
+    readyPrinted = true;
+    (0, startup_1.printReady)({
+        ...startupCtx,
+        url: httpUrl,
+        mongooseVersion: mongoose_1.default.version,
+        mongoConnectedAt,
+    });
+}
+module.exports = server;
+//# sourceMappingURL=server.js.map

package/dist/bin/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/bin/server.ts"],"names":[],"mappings":";AAAA;;;;;;;;EAQE;;;;AAEF,wCAAsC;AACtC,gDAAwB;AACxB,wDAAgC;AAChC,mCAAoC;AACpC,qDAA8E;AAC9E,6CAAwE;AACxE,sEAAqC;AAErC,MAAM,SAAS,GAAG,IAAA,2BAAa,GAAE,CAAC;AAClC,SAAS,CAAC,aAAa,GAAG,IAAI,CAAC;AAE/B,SAAS,CAAC,SAAS,GAAG;IACrB,IAAI,EAAE,cAAa,CAAC;IACpB,GAAG,EAAE,cAAa,CAAC;IACnB,MAAM,EAAE,cAAa,CAAC;CACtB,CAAC;AAEF,SAAS,CAAC,SAAS,GAAG;IACrB,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC3B,IAAI,EAAE,CAAC;IACR,CAAC;IACD,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACzB,IAAI,EAAE,CAAC;IACR,CAAC;IACD,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC5B,IAAI,EAAE,CAAC;IACR,CAAC;IACD,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC1B,IAAI,EAAE,CAAC;IACR,CAAC;IACD,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACzB,IAAI,EAAE,CAAC;IACR,CAAC;IACD,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC5B,IAAI,EAAE,CAAC;IACR,CAAC;CACD,CAAC;AAEF,kBAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;AAC3B,kBAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;AAElC,IAAI,CAAC,SAAS,CAAC,KAAK;IAAE,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC;AAC3C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO;IAAE,SAAS,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;AAC3D,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE;IAC5D,eAAe,EAAE,IAAI;IACrB,kBAAkB,EAAE,IAAI;IACxB,wBAAwB,EAAE,KAAK;IAC/B,eAAe,EAAE,KAAK;IACtB,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;IACtD,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;IACrD,aAAa,EAAE,KAAK;IACpB,gBAAgB,EAAE,KAAK;IACvB,oBAAoB,EAAE,KAAK;IAC3B,WAAW,EAAE,IAAI;IACjB,UAAU,EAAE,IAAI;CAChB,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,IAAA,sCAAwB,GAAE,CAAC;AACrD,MAAM,UAAU,GAAG;IAClB,IAAI,EAAE,sBAAG,CAAC,IAAI;IACd,OAAO,EAAE,sBAAG,CAAC,OAAO;IACpB,QAAQ,EAAE,iBAAiB;IAC3B,SAAS,EAAE,cAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,YAAY,CAAC;IACtD,WAAW,EAAE,aAAa,CAAC,WAAqB;CAChD,CAAC;AAEF,IAAA,qBAAW,EAAC,UAAU,CAAC,CAAC;AACxB,IAAA,sBAAY,EAAC,UAAU,CAAC,CAAC;AAEzB,kBAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;AAEnD,MAAM,EAAE,GAAG,kBAAQ,CAAC,UAAU,CAAC;AAC/B,IAAI,gBAAgB,GAAgB,IAAI,CAAC;AACzC,IAAI,OAAO,GAAkB,IAAI,CAAC;AAClC,IAAI,YAAY,GAAG,KAAK,CAAC;AAEzB,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;IACtB,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IAChD,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACrE,CAAC;AACF,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;IACpB,gBAAgB,GAAG,IAAI,IAAI,EAAE,CAAC;IAC9B,eAAe,EAAE,CAAC;AACnB,CAAC,CAAC,CAAC;AAEH,kBAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;IAC3C,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,UAAU,CAAC,GAAG,EAAE;QACf,OAAO,CAAC,OAAO,CAAC,kBAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;YACxF,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACJ,CAAC,EAAE,IAAI,CAAC,CAAC;AACV,CAAC,CAAC,CAAC;AAEH,kBAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;IACvC,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,WAAW,CAAC,GAAG,EAAE;IAChB,MAAM,MAAM,GAAG,kBAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC;IACjD,MAAM,IAAI,GACR,MAA8E,EAAE,QAAQ,EAAE,CAAC;QAC3F,EAAE,IAAI,EAAE,oBAAoB,IAAI,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,aAAa,CAAC,WAAqB,CAAC;IACxD,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,WAAW,GAAG,GAAG,EAAE,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,WAAW,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3F,CAAC;AACF,CAAC,EAAE,KAAK,CAAC,CAAC;AAEV,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;AAE9B,IAAI,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;AAC9F,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;IAAE,IAAI,GAAG,MAAM,CAAC;AACnD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE;IACzC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;IACrB,eAAe,EAAE,CAAC;AACnB,CAAC,CAAC,CAAC;AAEH,SAAS,eAAe;IACvB,IAAI,YAAY,IAAI,CAAC,gBAAgB,IAAI,CAAC,OAAO;QAAE,OAAO;IAC1D,YAAY,GAAG,IAAI,CAAC;IACpB,IAAA,oBAAU,EAAC;QACV,GAAG,UAAU;QACb,GAAG,EAAE,OAAO;QACZ,eAAe,EAAE,kBAAQ,CAAC,OAAO;QACjC,gBAAgB;KAChB,CAAC,CAAC;AACJ,CAAC;AAED,iBAAS,MAAM,CAAC"}

package/dist/bin/setup.d.ts

@@ -0,0 +1,3 @@
+#! /usr/bin/env node
+export {};
+//# sourceMappingURL=setup.d.ts.map

package/dist/bin/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/bin/setup.ts"],"names":[],"mappings":""}

package/dist/bin/setup.js

@@ -0,0 +1,185 @@
+#! /usr/bin/env node
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const program = require("commander");
+const path = require("path");
+const readline = require('readline-sync');
+const fs = require("fs");
+const crypto_1 = __importDefault(require("crypto"));
+const execSync = require('child_process').execSync;
+const mongoose = require("mongoose");
+const security = require("../libs/security");
+const schemaModule = require("../libs/schema");
+global.JXPSchema = schemaModule.default || schemaModule;
+const userMod = require(path.join(__dirname, "../models/user_model"));
+const User = userMod.default || userMod;
+const pkg = require('../package.json');
+const version = pkg.version;
+program
+    .version(version)
+    .usage('[options] [dir]')
+    .option('-v, --version', 'JXP version')
+    .parse(process.argv);
+async function main() {
+    try {
+        const models = ["apikey", "test", "token", "user", "usergroups", "link", "refreshtoken"];
+        const destination_path = program.args.shift() || '.';
+        // Get some defaults
+        let default_author_name = "Me";
+        let default_author_email = "me@example.com";
+        let default_app_description = "A JXP installation";
+        let default_license = "MIT";
+        let default_version = "0.0.1";
+        try {
+            default_author_name = execSync('git config --global user.name', { encoding: 'utf-8' }).trim();
+            default_author_email = execSync('git config --global user.email', { encoding: 'utf-8' }).trim();
+        }
+        catch (err) {
+            // Nothing to see here
+        }
+        let default_app_author = `${default_author_name} <${default_author_email}>`;
+        // Ask the basics
+        let default_app_name = path.basename(path.resolve(destination_path));
+        const app_name = readline.question(`App name (${default_app_name}): `, { defaultInput: default_app_name });
+        const app_description = readline.question(`App description (${default_app_description}): `, { defaultInput: default_app_description });
+        const app_license = readline.question(`Licence (${default_license}): `, { defaultInput: default_license });
+        const app_author = readline.question(`Author (${default_app_author}): `, { defaultInput: default_app_author });
+        const app_version = readline.question(`Version (${default_version}): `, { defaultInput: default_version });
+        var opts = {};
+        // Config setup
+        // opts.email = readline.question("Admin email address: ");
+        // opts.password = readline.question("Admin password: ", { hideEchoBack: true });
+        opts.port = readline.question("Port (2001): ", { defaultInput: "2001" });
+        opts.url = readline.question("URL (http://localhost:" + opts.port + "): ", { defaultInput: "http://localhost:" + opts.port });
+        const default_connection_string = `mongodb://localhost/${app_name}?retryWrites=true&w=majority`;
+        opts.connection_string = readline.question(`Mongo connection string (${default_connection_string}): `, { defaultInput: default_connection_string });
+        const email = readline.question(`Admin user email (${default_author_email}): `);
+        const name = readline.question(`Admin user name (${default_author_name}): `, { defaultInput: "Admin" });
+        const random_password = crypto_1.default.randomBytes(12).toString('base64');
+        const password = readline.question(`Admin user password (${random_password}): `, { hideEchoBack: true, defaultInput: random_password });
+        opts.shared_secret = crypto_1.default.randomBytes(20).toString('hex');
+        const package_data = {
+            "name": app_name,
+            "version": app_version,
+            "description": app_description,
+            "main": "bin/server.js",
+            "scripts": {
+                "test": "echo \"Error: no test specified\" && exit 1",
+                "start": "node bin/server.js"
+            },
+            "dependencies": {
+                "jxp": "^4.0.0",
+                "dotenv": "^16.4.7",
+                "mongoose": "6.13.9"
+            },
+            "author": app_author,
+            "license": app_license
+        };
+        await fs.promises.mkdir(destination_path, { recursive: true, mode: 0o755 });
+        write(path.join(destination_path, "package.json"), JSON.stringify(package_data, null, "\t"));
+        await mkdir(path.join(destination_path, "bin"));
+        await mkdir(path.join(destination_path, "models"));
+        await mkdir(path.join(destination_path, "logs"));
+        await cp_replace("../../templates/app.env.sample", path.join(destination_path, ".env"), opts, "{", "}");
+        await cp("../../templates/app-server.js", path.join(destination_path, "bin/server.js"));
+        for (let model of models) {
+            await cp("../models/" + model + "_model.js", path.join(destination_path, "models/" + model + "_model.js"));
+        }
+        console.log();
+        console.log("Installing dependencies...");
+        console.log();
+        execSync(`cd ${destination_path} && npm install`);
+        console.log();
+        console.log("Setting up your admin user...");
+        console.log();
+        try {
+            process.env.MONGO_CONNECTION_STRING = opts.connection_string;
+            mongoose.connect(opts.connection_string, function (err) {
+                if (err) {
+                    throw (err);
+                }
+            }, {
+                db: {
+                    safe: true
+                },
+            });
+        }
+        catch (err) {
+            console.log("WARNING: We had a problem talking to the database");
+            console.error(err);
+            return process.exit(1);
+        }
+        var user = new User();
+        user.email = email;
+        user.password = security.encPassword(password);
+        user.name = name;
+        user.admin = true;
+        user.save((err) => {
+            if (err) {
+                console.log("Error saving user");
+                console.error(err.message);
+                return process.exit(1);
+            }
+            else {
+                console.log("Created admin user", name, "<" + email + ">");
+            }
+        });
+        process.chdir(destination_path);
+        console.log("Congratulations! Your JXP server is ready to go. Happy API'ing...");
+        console.log("Next steps:");
+        console.log("0. Change to your directory");
+        console.log(`     cd ${destination_path}`);
+        console.log("1. Start your server");
+        console.log("     npm start");
+        console.log("2. Connect to your server");
+        console.log(`     ${opts.url}`);
+        return process.exit(0);
+    }
+    catch (err) {
+        console.log("Error:", err.message);
+        return process.exit(1);
+    }
+}
+/**
+ * Copy from to replacing text as we go
+ *
+ */
+function cp_replace(from, to, opts, startEnclosure = "", endEnclosure = "") {
+    startEnclosure = startEnclosure || "";
+    endEnclosure = endEnclosure || "";
+    from = path.join(__dirname, from);
+    var s = fs.readFileSync(from, "utf-8");
+    for (var i in opts) {
+        console.log(startEnclosure + i + endEnclosure, opts[i]);
+        s = s.replace(startEnclosure + i + endEnclosure, opts[i]);
+    }
+    write(to, s);
+}
+/**
+ * Copy from to
+ *
+ * @param {String} from
+ * @param {String} to
+ */
+function cp(from, to) {
+    from = path.join(__dirname, from);
+    write(to, fs.readFileSync(from, 'utf-8'));
+}
+function write(filePath, str, mode) {
+    fs.writeFileSync(filePath, str, mode !== undefined ? { mode } : undefined);
+    console.log('   \x1b[36mcreate\x1b[0m : ' + filePath);
+}
+/**
+ * Mkdir -p.
+ *
+ * @param {String} path
+ * @return {Promise}
+ */
+function mkdir(path) {
+    return fs.promises.mkdir(path, { recursive: true, mode: 0o755 });
+}
+main();
+//# sourceMappingURL=setup.js.map

package/dist/bin/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../src/bin/setup.ts"],"names":[],"mappings":";;;;;;AACA,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AACrC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAC1C,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AACzB,oDAA4B;AAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC;AACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAErC,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAC7C,MAAM,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAC/C,MAAM,CAAC,SAAS,GAAG,YAAY,CAAC,OAAO,IAAI,YAAY,CAAC;AAExD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC,CAAC;AACtE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;AAExC,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEvC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;AAE5B,OAAO;KACL,OAAO,CAAC,OAAO,CAAC;KAChB,KAAK,CAAC,iBAAiB,CAAC;KACxB,MAAM,CAAC,eAAe,EAAE,aAAa,CAAC;KACtC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAEtB,KAAK,UAAU,IAAI;IAClB,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;QACzF,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC;QACrD,oBAAoB;QACpB,IAAI,mBAAmB,GAAG,IAAI,CAAC;QAC/B,IAAI,oBAAoB,GAAG,gBAAgB,CAAC;QAC5C,IAAI,uBAAuB,GAAG,oBAAoB,CAAC;QACnD,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,eAAe,GAAG,OAAO,CAAC;QAC9B,IAAI,CAAC;YACJ,mBAAmB,GAAG,QAAQ,CAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9F,oBAAoB,GAAG,QAAQ,CAAC,gCAAgC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjG,CAAC;QAAC,OAAM,GAAG,EAAE,CAAC;YACb,sBAAsB;QACvB,CAAC;QACD,IAAI,kBAAkB,GAAG,GAAG,mBAAmB,KAAK,oBAAoB,GAAG,CAAC;QAC5E,iBAAiB;QACjB,IAAI,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,aAAa,gBAAgB,KAAK,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3G,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,uBAAuB,KAAK,EAAE,EAAE,YAAY,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACvI,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,eAAe,KAAK,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC,CAAC;QAC3G,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,kBAAkB,KAAK,EAAE,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC/G,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,eAAe,KAAK,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC,CAAC;QAC3G,IAAI,IAAI,GAA2B,EAAE,CAAC;QACtC,eAAe;QACf,2DAA2D;QAC3D,iFAAiF;QACjF,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,EAAE,YAAY,EAAE,mBAAmB,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9H,MAAM,yBAAyB,GAAG,uBAAwB,QAAS,8BAA8B,CAAC;QAClG,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC,QAAQ,CAAC,4BAA4B,yBAAyB,KAAK,EAAE,EAAE,YAAY,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACpJ,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,qBAAqB,oBAAoB,KAAK,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,mBAAmB,KAAK,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;QACxG,MAAM,eAAe,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,eAAe,KAAK,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC,CAAC;QACxI,IAAI,CAAC,aAAa,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG;YACpB,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,WAAW;YACtB,aAAa,EAAE,eAAe;YAC9B,MAAM,EAAE,eAAe;YACvB,SAAS,EAAE;gBACV,MAAM,EAAE,6CAA6C;gBACrD,OAAO,EAAE,oBAAoB;aAC7B;YACD,cAAc,EAAE;gBACf,KAAK,EAAE,QAAQ;gBACf,QAAQ,EAAE,SAAS;gBACnB,UAAU,EAAE,QAAQ;aACpB;YACD,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,WAAW;SACtB,CAAC;QACF,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7F,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;QACjD,MAAM,UAAU,CAAC,gCAAgC,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACxG,MAAM,EAAE,CAAC,+BAA+B,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAC;QACxF,KAAK,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC,YAAY,GAAG,KAAK,GAAG,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,GAAG,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC;QAC5G,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAA;QACzC,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,QAAQ,CAAC,MAAM,gBAAgB,iBAAiB,CAAC,CAAC;QAElD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAA;QAC5C,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,IAAI,CAAC;YACJ,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,IAAI,CAAC,iBAAiB,CAAC;YAC7D,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,UAAU,GAAG;gBACrD,IAAI,GAAG,EAAE,CAAC;oBACT,MAAK,CAAC,GAAG,CAAC,CAAC;gBACZ,CAAC;YAEF,CAAC,EAAE;gBACF,EAAE,EAAE;oBACH,IAAI,EAAE,IAAI;iBACV;aACD,CAAC,CAAC;QACJ,CAAC;QAAC,OAAM,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAA;YAChE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,IAAI,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBACjC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC3B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACP,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC;YAC5D,CAAC;QACF,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,WAAY,gBAAiB,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAAC,OAAM,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,GAAG,EAAE,EAAE,YAAY,GAAG,EAAE;IACzE,cAAc,GAAG,cAAc,IAAI,EAAE,CAAC;IACtC,YAAY,GAAG,YAAY,IAAI,EAAE,CAAC;IAClC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,KAAI,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,GAAG,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,cAAc,GAAG,CAAC,GAAG,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACd,CAAC;AAEA;;;;;GAKG;AACJ,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;IACnB,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,KAAK,CAAC,QAAgB,EAAE,GAAW,EAAE,IAAa;IAC1D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,QAAQ,CAAC,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AAEH,SAAS,KAAK,CAAC,IAAY;IAC1B,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/globals.d.ts

@@ -0,0 +1,14 @@
+import type JXPSchemaClass from "./libs/schema";
+import type { Schema } from "mongoose";
+import type JXPHelper from "jxp-helper";
+declare global {
+    var JXPSchema: typeof JXPSchemaClass;
+    var ObjectId: typeof Schema.Types.ObjectId;
+    var Mixed: typeof Schema.Types.Mixed;
+    var jxphelper: InstanceType<typeof JXPHelper> | undefined;
+    var apikey: string | undefined;
+    var server: string | undefined;
+    var model_dir: string | undefined;
+}
+export {};
+//# sourceMappingURL=globals.d.ts.map

package/dist/globals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"globals.d.ts","sourceRoot":"","sources":["../src/globals.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,cAAc,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,KAAK,SAAS,MAAM,YAAY,CAAC;AAExC,OAAO,CAAC,MAAM,CAAC;IAEd,IAAI,SAAS,EAAE,OAAO,cAAc,CAAC;IAErC,IAAI,QAAQ,EAAE,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;IAE3C,IAAI,KAAK,EAAE,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;IAErC,IAAI,SAAS,EAAE,YAAY,CAAC,OAAO,SAAS,CAAC,GAAG,SAAS,CAAC;IAE1D,IAAI,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/B,IAAI,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/B,IAAI,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,OAAO,EAAE,CAAC"}

package/dist/globals.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=globals.js.map

package/dist/globals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"globals.js","sourceRoot":"","sources":["../src/globals.ts"],"names":[],"mappings":""}

package/dist/libs/aggregate_guard.d.ts

@@ -0,0 +1,5 @@
+export declare function validatePipeline(pipeline: unknown[], options?: {
+    aggregate_stages_allow?: string[];
+    isAdmin?: boolean;
+}): void;
+//# sourceMappingURL=aggregate_guard.d.ts.map

package/dist/libs/aggregate_guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aggregate_guard.d.ts","sourceRoot":"","sources":["../../src/libs/aggregate_guard.ts"],"names":[],"mappings":"AAmCA,wBAAgB,gBAAgB,CAC/B,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,CAAC,EAAE;IAAE,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAChE,IAAI,CAkBN"}

package/dist/libs/aggregate_guard.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validatePipeline = validatePipeline;
+const errors = require("restify-errors");
+const DEFAULT_ALLOWED_STAGES = new Set([
+    "$match",
+    "$group",
+    "$lookup",
+    "$project",
+    "$sort",
+    "$limit",
+    "$skip",
+    "$unwind",
+    "$addFields",
+    "$set",
+    "$count",
+    "$facet",
+    "$bucket",
+    "$bucketAuto",
+    "$sample",
+    "$replaceRoot",
+    "$replaceWith",
+    "$redact",
+]);
+const ADMIN_ONLY_STAGES = new Set(["$out", "$merge", "$function"]);
+function getAllowedStages(custom) {
+    if (!custom || !custom.length)
+        return DEFAULT_ALLOWED_STAGES;
+    return new Set(custom);
+}
+function stageKeys(stage) {
+    if (!stage || typeof stage !== "object" || Array.isArray(stage))
+        return [];
+    return Object.keys(stage).filter((k) => k.startsWith("$"));
+}
+function validatePipeline(pipeline, options) {
+    if (!Array.isArray(pipeline)) {
+        throw new errors.BadRequestError("Aggregation pipeline must be an array");
+    }
+    const allowed = getAllowedStages(options?.aggregate_stages_allow);
+    const isAdmin = options?.isAdmin === true;
+    for (const stage of pipeline) {
+        const keys = stageKeys(stage);
+        for (const key of keys) {
+            if (ADMIN_ONLY_STAGES.has(key) && !isAdmin) {
+                throw new errors.ForbiddenError(`Aggregation stage ${key} requires admin`);
+            }
+            if (!allowed.has(key) && !ADMIN_ONLY_STAGES.has(key)) {
+                throw new errors.BadRequestError(`Aggregation stage ${key} is not allowed`);
+            }
+        }
+    }
+}
+module.exports = {
+    validatePipeline,
+    DEFAULT_ALLOWED_STAGES: [...DEFAULT_ALLOWED_STAGES],
+};
+//# sourceMappingURL=aggregate_guard.js.map

package/dist/libs/aggregate_guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aggregate_guard.js","sourceRoot":"","sources":["../../src/libs/aggregate_guard.ts"],"names":[],"mappings":";;AAmCA,4CAqBC;AAxDD,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAEzC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACtC,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,UAAU;IACV,OAAO;IACP,QAAQ;IACR,OAAO;IACP,SAAS;IACT,YAAY;IACZ,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,aAAa;IACb,SAAS;IACT,cAAc;IACd,cAAc;IACd,SAAS;CACT,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAEnE,SAAS,gBAAgB,CAAC,MAAiB;IAC1C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,sBAAsB,CAAC;IAC7D,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAChC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3E,OAAO,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAgB,gBAAgB,CAC/B,QAAmB,EACnB,OAAkE;IAElE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,uCAAuC,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAE1C,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC5C,MAAM,IAAI,MAAM,CAAC,cAAc,CAAC,qBAAqB,GAAG,iBAAiB,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,qBAAqB,GAAG,iBAAiB,CAAC,CAAC;YAC7E,CAAC;QACF,CAAC;IACF,CAAC;AACF,CAAC;AAED,MAAM,CAAC,OAAO,GAAG;IAChB,gBAAgB;IAChB,sBAAsB,EAAE,CAAC,GAAG,sBAAsB,CAAC;CACnD,CAAC"}

package/dist/libs/bulkwrite_guard.d.ts

@@ -0,0 +1,5 @@
+export declare function validateBulkOps(ops: unknown[], options?: {
+    bulk_operations_allow?: string[];
+    isAdmin?: boolean;
+}): void;
+//# sourceMappingURL=bulkwrite_guard.d.ts.map

package/dist/libs/bulkwrite_guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulkwrite_guard.d.ts","sourceRoot":"","sources":["../../src/libs/bulkwrite_guard.ts"],"names":[],"mappings":"AAgBA,wBAAgB,eAAe,CAC9B,GAAG,EAAE,OAAO,EAAE,EACd,OAAO,CAAC,EAAE;IAAE,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC/D,IAAI,CAuBN"}