lapeh 2.2.8 → 2.2.9

package/api-testing-enambelas/src/models/core.prisma

@@ -0,0 +1,163 @@
+model cache {
+  key        String @id
+  value      String
+  expiration Int
+}
+
+model cache_locks {
+  key        String @id
+  owner      String
+  expiration Int
+}
+
+model failed_jobs {
+  id         BigInt   @id @default(autoincrement())
+  uuid       String   @unique
+  connection String
+  queue      String
+  payload    String
+  exception  String
+  failed_at  DateTime @default(now())
+}
+
+model job_batches {
+  id             String @id
+  name           String
+  total_jobs     Int
+  pending_jobs   Int
+  failed_jobs    Int
+  failed_job_ids String
+  options        String?
+  cancelled_at   Int?
+  created_at     Int
+  finished_at    Int?
+}
+
+model jobs {
+  id           BigInt @id @default(autoincrement())
+  queue        String
+  payload      String
+  attempts     Int
+  reserved_at  Int?
+  available_at Int
+  created_at   Int
+
+  @@index([queue])
+}
+
+model migrations {
+  id        Int    @id @default(autoincrement())
+  migration String
+  batch     Int
+}
+
+model password_reset_tokens {
+  email      String    @id
+  token      String
+  created_at DateTime?
+}
+
+model personal_access_tokens {
+  id             BigInt    @id @default(autoincrement())
+  tokenable_type String
+  tokenable_id   BigInt
+  name           String
+  token          String    @unique
+  abilities      String?
+  last_used_at   DateTime?
+  expires_at     DateTime?
+  created_at     DateTime?
+  updated_at     DateTime?
+
+  @@index([expires_at])
+  @@index([tokenable_type, tokenable_id])
+}
+
+model sessions {
+  id            String  @id
+  user_id       BigInt?
+  ip_address    String?
+  user_agent    String?
+  payload       String
+  last_activity Int
+
+  @@index([last_activity])
+  @@index([user_id])
+}
+
+model users {
+  id                BigInt    @id @default(autoincrement())
+  uuid              String    @unique
+  name              String
+  email             String    @unique
+  avatar            String?
+  avatar_url        String?
+  email_verified_at DateTime?
+  password          String
+  remember_token    String?
+  created_at        DateTime?
+  updated_at        DateTime?
+
+  user_roles       user_roles[]
+  user_permissions user_permissions[]
+}
+
+model roles {
+  id          BigInt    @id @default(autoincrement())
+  name        String
+  slug        String    @unique
+  description String?
+  created_at  DateTime?
+  updated_at  DateTime?
+
+  user_roles       user_roles[]
+  role_permissions role_permissions[]
+}
+
+model permissions {
+  id          BigInt    @id @default(autoincrement())
+  name        String
+  slug        String    @unique
+  description String?
+  created_at  DateTime?
+  updated_at  DateTime?
+
+  role_permissions role_permissions[]
+  user_permissions user_permissions[]
+}
+
+model user_roles {
+  id         BigInt    @id @default(autoincrement())
+  user_id    BigInt
+  role_id    BigInt
+  created_at DateTime?
+
+  user users @relation(fields: [user_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
+  role roles @relation(fields: [role_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
+
+  @@unique([user_id, role_id])
+}
+
+model role_permissions {
+  id            BigInt    @id @default(autoincrement())
+  role_id       BigInt
+  permission_id BigInt
+  created_at    DateTime?
+
+  role       roles       @relation(fields: [role_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
+  permission permissions @relation(fields: [permission_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
+
+  @@unique([role_id, permission_id])
+}
+
+model user_permissions {
+  id            BigInt    @id @default(autoincrement())
+  user_id       BigInt
+  permission_id BigInt
+  created_at    DateTime?
+
+  user       users       @relation(fields: [user_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
+  permission permissions @relation(fields: [permission_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
+
+  @@unique([user_id, permission_id])
+}

package/api-testing-enambelas/src/models/pets.prisma

@@ -0,0 +1,9 @@
+
+model pets {
+  id         BigInt    @id @default(autoincrement())
+  name       String
+  species    String
+  age        Int
+  created_at DateTime?
+  updated_at DateTime?
+}

package/api-testing-enambelas/src/routes/auth.ts

@@ -0,0 +1,74 @@
+import { Router } from "express";
+import rateLimit from "express-rate-limit";
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const multer = require("multer");
+import path from "path";
+import fs from "fs";
+import {
+  register,
+  login,
+  me,
+  logout,
+  refreshToken,
+  updatePassword,
+  updateProfile,
+  updateAvatar,
+} from "@/controllers/authController";
+import { requireAuth } from "@lapeh/middleware/auth";
+
+const authLimiter = rateLimit({
+  windowMs: 15 * 60 * 1000,
+  max: 50,
+  standardHeaders: true,
+  legacyHeaders: false,
+});
+
+const avatarUploadDir = process.env.AVATAR_UPLOAD_DIR || "uploads/avatars";
+if (!fs.existsSync(avatarUploadDir)) {
+  fs.mkdirSync(avatarUploadDir, { recursive: true });
+}
+
+const storage = (multer as any).diskStorage({
+  destination(
+    _req: any,
+    _file: any,
+    cb: (error: Error | null, destination: string) => void
+  ) {
+    cb(null, avatarUploadDir);
+  },
+  filename(
+    _req: any,
+    file: any,
+    cb: (error: Error | null, filename: string) => void
+  ) {
+    const ext = path.extname(file.originalname);
+    const base = path.basename(file.originalname, ext);
+    const unique = Date.now() + "-" + Math.round(Math.random() * 1e9);
+    cb(null, base + "-" + unique + ext);
+  },
+});
+
+const uploadAvatar = multer({ storage });
+
+export const authRouter = Router();
+
+authRouter.post("/register", authLimiter, register);
+
+authRouter.post("/login", authLimiter, login);
+
+authRouter.get("/me", requireAuth, me);
+
+authRouter.post("/logout", requireAuth, logout);
+
+authRouter.post("/refresh", authLimiter, refreshToken);
+
+authRouter.put("/password", requireAuth, updatePassword);
+
+authRouter.put("/profile", requireAuth, updateProfile);
+
+authRouter.post(
+  "/avatar",
+  requireAuth,
+  uploadAvatar.single("avatar"),
+  updateAvatar
+);

package/api-testing-enambelas/src/routes/index.ts

@@ -0,0 +1,10 @@
+import { Router } from "express";
+import { authRouter } from "@/routes/auth";
+import { rbacRouter } from "@/routes/rbac";
+import petRouter from "@/routes/pets";
+
+export const apiRouter = Router();
+
+apiRouter.use("/auth", authRouter);
+apiRouter.use("/rbac", rbacRouter);
+apiRouter.use("/pets", petRouter);

package/api-testing-enambelas/src/routes/pets.ts

@@ -0,0 +1,13 @@
+import { Router } from "express";
+import * as PetController from "@/controllers/petController";
+import { parseMultipart } from "@lapeh/middleware/multipart";
+
+const router = Router();
+
+router.get("/", PetController.index);
+router.get("/:id", PetController.show);
+router.post("/", parseMultipart, PetController.store);
+router.put("/:id", parseMultipart, PetController.update);
+router.delete("/:id", PetController.destroy);
+
+export default router;

package/api-testing-enambelas/src/routes/rbac.ts

@@ -0,0 +1,42 @@
+import { Router } from "express";
+import { requireAdmin, requireAuth } from "@lapeh/middleware/auth";
+import {
+  createRole,
+  listRoles,
+  updateRole,
+  deleteRole,
+  createPermission,
+  listPermissions,
+  updatePermission,
+  deletePermission,
+  assignRoleToUser,
+  removeRoleFromUser,
+  assignPermissionToRole,
+  removePermissionFromRole,
+  assignPermissionToUser,
+  removePermissionFromUser,
+} from "@/controllers/rbacController";
+
+export const rbacRouter = Router();
+
+rbacRouter.use(requireAuth);
+rbacRouter.use(requireAdmin);
+
+rbacRouter.post("/roles", createRole);
+rbacRouter.get("/roles", listRoles);
+rbacRouter.put("/roles/:id", updateRole);
+rbacRouter.delete("/roles/:id", deleteRole);
+
+rbacRouter.post("/permissions", createPermission);
+rbacRouter.get("/permissions", listPermissions);
+rbacRouter.put("/permissions/:id", updatePermission);
+rbacRouter.delete("/permissions/:id", deletePermission);
+
+rbacRouter.post("/users/assign-role", assignRoleToUser);
+rbacRouter.post("/users/remove-role", removeRoleFromUser);
+
+rbacRouter.post("/roles/assign-permission", assignPermissionToRole);
+rbacRouter.post("/roles/remove-permission", removePermissionFromRole);
+
+rbacRouter.post("/users/assign-permission", assignPermissionToUser);
+rbacRouter.post("/users/remove-permission", removePermissionFromUser);

package/api-testing-enambelas/tsconfig.json

@@ -0,0 +1,43 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "CommonJS",
+    "outDir": "dist",
+    "rootDir": ".",
+    "declaration": true,
+    "declarationMap": true,
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "paths": {
+      "@lapeh/*": [
+        "./node_modules/lapeh/lib/*"
+      ],
+      "@/*": [
+        "./src/*"
+      ],
+      "@lapeh/core/database": [
+        "./node_modules/lapeh/lib/prisma.ts"
+      ]
+    },
+    "baseUrl": "."
+  },
+  "include": [
+    "lib",
+    "src",
+    "prisma",
+    "generated"
+  ],
+  "exclude": [
+    "node_modules",
+    "dist"
+  ],
+  "ts-node": {
+    "ignore": [
+      "node_modules/(?!lapeh)"
+    ]
+  }
+}

package/api-testing-tujuhbelas/.env.example

@@ -0,0 +1,19 @@
+PORT=8000
+DATABASE_PROVIDER="postgresql"
+DATABASE_URL="postgresql://sianu:12341234@localhost:5432/db_example_test?schema=public"   
+
+# Used for all encryption-related tasks in the framework (JWT, etc.)
+JWT_SECRET="replace_this_with_a_secure_random_string"
+
+# Framework Timezone
+TZ="Asia/Jakarta"
+
+# Redis Configuration (Optional)
+# If REDIS_URL is not set or connection fails, the framework will automatically 
+# switch to an in-memory Redis mock (bundled). No installation required for development.
+# REDIS_URL="redis://lapeh:12341234@localhost:6379"
+# NO_REDIS="true"
+
+# To force disable Redis and use in-memory mock even if Redis is available:
+# NO_REDIS="true"
+

package/api-testing-tujuhbelas/api-testing-enambelas/.env.example

@@ -0,0 +1,19 @@
+PORT=8000
+DATABASE_PROVIDER="postgresql"
+DATABASE_URL="postgresql://sianu:12341234@localhost:5432/db_example_test?schema=public"   
+
+# Used for all encryption-related tasks in the framework (JWT, etc.)
+JWT_SECRET="replace_this_with_a_secure_random_string"
+
+# Framework Timezone
+TZ="Asia/Jakarta"
+
+# Redis Configuration (Optional)
+# If REDIS_URL is not set or connection fails, the framework will automatically 
+# switch to an in-memory Redis mock (bundled). No installation required for development.
+# REDIS_URL="redis://lapeh:12341234@localhost:6379"
+# NO_REDIS="true"
+
+# To force disable Redis and use in-memory mock even if Redis is available:
+# NO_REDIS="true"
+

package/api-testing-tujuhbelas/api-testing-enambelas/doc/ARCHITECTURE_GUIDE.md

@@ -0,0 +1,73 @@
+# Panduan Arsitektur: Menuju "Framework as a Dependency" (Next.js Style)
+
+Saat ini, Lapeh menggunakan pendekatan **Boilerplate** (seperti Laravel), di mana pengguna mendapatkan seluruh kode sumber (`src/`) dan bertanggung jawab atas `express`, `prisma`, dll.
+
+Untuk mengubahnya menjadi seperti **Next.js** (di mana pengguna hanya menginstall `lapeh` dan `package.json` mereka bersih), kita perlu mengubah arsitektur menjadi **Library**.
+
+## 1. Perbedaan Utama
+
+| Fitur | Boilerplate (Lapeh Saat Ini) | Library (Next.js Style) |
+| :--- | :--- | :--- |
+| **Instalasi** | `git clone` / `npx create-lapeh` | `npm install lapeh` |
+| **package.json** | Banyak dependency (`express`, `cors`, dll) | Sedikit (`lapeh`, `react`) |
+| **Scripts** | Panjang (`nodemon src/index.ts`) | Pendek (`lapeh dev`) |
+| **Core Code** | Terbuka di `src/core/` | Tersembunyi di `node_modules/lapeh` |
+| **Update** | Susah (harus merge manual) | Mudah (`npm update lapeh`) |
+
+## 2. Langkah Implementasi
+
+Saya telah memulai langkah pertama dengan menambahkan **CLI Runner** di `bin/index.js`.
+
+### A. Update CLI (`bin/index.js`) ✅ (Sudah Dilakukan)
+Saya sudah menambahkan command `dev`, `start`, dan `build` ke dalam CLI Lapeh. Ini memungkinkan pengguna menjalankan server tanpa tahu perintah aslinya.
+
+```javascript
+// Contoh penggunaan nanti:
+"scripts": {
+  "dev": "lapeh dev",
+  "build": "lapeh build",
+  "start": "lapeh start"
+}
+```
+
+### B. Struktur Project Pengguna (Target)
+Nantinya, project pengguna Lapeh hanya akan berisi file bisnis mereka:
+
+```text
+my-app/
+├── src/
+│   ├── controllers/
+│   ├── routes/
+│   └── models/
+├── lapeh.config.ts  <-- Konfigurasi framework (pengganti edit core)
+└── package.json
+```
+
+Dan `package.json` mereka akan terlihat seperti ini:
+
+```json
+{
+  "name": "my-app",
+  "dependencies": {
+    "lapeh": "^2.0.0"
+  },
+  "scripts": {
+    "dev": "lapeh dev",
+    "build": "lapeh build",
+    "start": "lapeh start"
+  }
+}
+```
+
+### C. Apa yang Harus Dilakukan Selanjutnya?
+
+1.  **Publish Package**: Anda perlu mempublish folder framework ini ke NPM (atau private registry).
+    *   Pastikan `express`, `cors`, `helmet`, dll ada di `dependencies` (bukan `devDependencies`).
+2.  **Abstraksi `src/index.ts`**:
+    *   Saat ini `src/index.ts` adalah entry point yang diedit user.
+    *   Ubah agar `lapeh dev` menjalankan server internal yang **mengimpor** routes/controller user secara dinamis (seperti Next.js pages router).
+3.  **Config Loader**:
+    *   Buat sistem pembacaan `lapeh.config.ts` untuk mengatur Port, Database URL, dll tanpa mengedit kode core.
+
+## 3. Kesimpulan
+Perubahan yang saya lakukan di `bin/index.js` adalah fondasi untuk CLI style. Untuk mencapai "Clean package.json" sepenuhnya, Anda harus memisahkan **Framework Core** (repo ini) dengan **User Project** (repo baru yang menginstall framework ini).

package/api-testing-tujuhbelas/api-testing-enambelas/doc/CHANGELOG.md

@@ -0,0 +1,77 @@
+# Dokumentasi Perubahan Lapeh Framework
+
+File ini mencatat semua perubahan, pembaruan, dan perbaikan yang dilakukan pada framework Lapeh, diurutkan berdasarkan tanggal.
+
+## [2025-12-27] - Code Quality & Standardization Update
+
+### 🚀 Fitur & Standarisasi
+
+- **Standardized Import Paths**:
+  - Implementasi path alias `@/` untuk import yang lebih bersih (e.g., `import { prisma } from "@/core/database"`).
+  - Penghapusan penggunaan relative paths yang dalam (`../../../`).
+  - Konfigurasi `tsconfig.json` tanpa `baseUrl` (mengikuti standar TypeScript 6.0+).
+- **Strict Linting & Code Quality**:
+  - Implementasi aturan **ESLint** ketat untuk mencegah "Dead Code".
+  - Error otomatis untuk variabel, parameter, dan import yang tidak digunakan (`no-unused-vars`).
+  - Script `npm run lint` dan `npm run lint:fix` untuk pembersihan kode otomatis.
+- **Fastify-Style Standardization**:
+  - Penerapan standar respon cepat (`sendFastSuccess`) di seluruh controller (`AuthController`, `RbacController`, `PetController`).
+  - Penggunaan **Schema-based Serialization** untuk performa JSON maksimal.
+  - Konversi otomatis `BigInt` ke `string` dalam respon JSON.
+
+## [2025-12-27] - High Performance & Scalability Update
+
+### 🚀 Fitur Baru
+
+- **High Performance Serialization (Fastify-Style)**:
+  - Implementasi `fast-json-stringify` untuk serialisasi JSON super cepat (2x-3x lebih cepat dari `JSON.stringify`).
+  - Helper `sendFastSuccess` di `src/utils/response.ts` untuk mem-bypass overhead Express.
+  - Caching schema serializer otomatis di `src/core/serializer.ts`.
+- **Scalability & Clustering**:
+  - Dukungan **Load Balancing** dengan Nginx.
+  - Dukungan **Redis Clustering** untuk Rate Limiter (`rate-limit-redis`).
+  - File konfigurasi `docker-compose.cluster.yml` untuk simulasi cluster lokal (1 Nginx + 2 App Instances + 1 Redis).
+- **Smart Error Handling**:
+  - Deteksi otomatis port bentrok (`EADDRINUSE`) saat startup.
+  - Memberikan saran command _copy-paste_ untuk mematikan process yang memblokir port (support Windows, Mac, Linux).
+- **SEO Optimization**:
+  - Update metadata `package.json` dan `README.md` agar framework lebih mudah ditemukan di Google/NPM.
+
+## [2025-12-27] - Pembaruan Struktur & Validasi
+
+### 🚀 Fitur Baru
+
+- **Laravel-style Validator**:
+  - Implementasi utility `Validator` baru di `src/utils/validator.ts` yang meniru gaya validasi Laravel.
+  - Mendukung rule string seperti `required|string|min:3|email`.
+  - Penambahan rule `unique` untuk pengecekan database otomatis (Prisma).
+  - Penambahan rule `mimes`, `image`, `max` (file size) untuk validasi upload file.
+  - Penambahan rule `sometimes` untuk field opsional.
+- **Framework Hardening (Keamanan & Stabilitas)**:
+  - **Rate Limiting**: Middleware anti-spam/brute-force di `src/middleware/rateLimit.ts`.
+  - **Request Logger**: Pencatatan log request masuk di `src/middleware/requestLogger.ts`.
+  - **Health Check**: Endpoint `/` kini mengembalikan status kesehatan server.
+  - **Graceful Shutdown**: Penanganan penutupan koneksi Database dan Redis yang aman saat server berhenti (`SIGTERM`/`SIGINT`).
+  - **Environment Validation**: Validasi variabel `.env` wajib (seperti `DATABASE_URL`, `JWT_SECRET`) saat startup.
+- **Struktur Folder Baru**:
+  - Pemisahan konfigurasi inti ke `src/core/` (`server.ts`, `database.ts`, `redis.ts`, `realtime.ts`) agar folder `src` lebih bersih.
+  - Sentralisasi route di `src/routes/index.ts` (WIP).
+- **CLI Improvements**:
+  - `npx lapeh <project-name> --full` kini otomatis menjalankan server dev setelah instalasi selesai, sehingga user bisa langsung melihat hasil tanpa mengetik perintah tambahan.
+
+### 🛠️ Perbaikan & Refactoring
+
+- **Controller Refactoring**:
+  - `AuthController`: Migrasi ke `Validator` baru, termasuk validasi upload avatar.
+  - `PetController`: Migrasi ke `Validator` baru.
+  - `RbacController`: Migrasi sebagian ke `Validator` baru.
+- **Pembersihan**:
+  - Penghapusan folder `src/schema/` (Zod schema lama) karena sudah digantikan oleh `Validator` utility.
+  - Penghapusan file duplikat/lama di root `src/` setelah migrasi ke `src/core/`.
+
+### 📝 Catatan Teknis
+
+- **Validator Async**: Method `fails()`, `passes()`, dan `validated()` kini bersifat `async` untuk mendukung pengecekan database (`unique`).
+- **Type Safety**: Semua perubahan telah diverifikasi dengan `npm run typecheck`.
+
+---

package/api-testing-tujuhbelas/api-testing-enambelas/doc/CHEATSHEET.md

@@ -0,0 +1,94 @@
+# Lapeh Framework Cheatsheet
+
+Referensi cepat untuk perintah dan kode yang sering digunakan.
+
+## 💻 CLI Commands
+
+| Perintah                             | Fungsi                                       |
+| :----------------------------------- | :------------------------------------------- |
+| **`npm run dev`**                    | Menjalankan server development (hot-reload). |
+| **`npm run typecheck`**              | Cek error TypeScript (tanpa compile).        |
+| **`npm run lint`**                   | Cek kode kotor/variabel tidak terpakai.      |
+| **`npm run lint:fix`**               | Perbaiki kode kotor otomatis.                |
+| **`npm run make:module <Name>`**     | Buat Controller, Route, & Model sekaligus.   |
+| **`npm run make:controller <Name>`** | Buat Controller saja.                        |
+| **`npm run make:model <Name>`**      | Buat Model Prisma saja.                      |
+| **`npm run prisma:migrate`**         | Apply perubahan schema ke DB lokal.          |
+| **`npm run db:studio`**              | Buka GUI Database.                           |
+| **`npm run db:seed`**                | Isi data dummy.                              |
+| **`npm run db:reset`**               | Hapus DB & mulai dari nol.                   |
+
+## 🛡️ Validator Rules (Laravel-Style)
+
+Gunakan di `Validator.make(data, rules)`.
+
+| Rule               | Deskripsi               | Contoh                              |
+| :----------------- | :---------------------- | :---------------------------------- | -------- |
+| `required`         | Wajib ada & tidak null. | `"required"`                        |
+| `string`           | Harus text.             | `"required                          | string"` |
+| `number`           | Harus angka.            | `"required                          | number"` |
+| `email`            | Format email valid.     | `"required                          | email"`  |
+| `min:X`            | Min panjang/nilai.      | `"min:8"` (pass), `"min:18"` (umur) |
+| `max:X`            | Max panjang/nilai.      | `"max:255"`                         |
+| `unique:table,col` | Cek unik di DB.         | `"unique:users,email"`              |
+| `exists:table,col` | Cek exist di DB.        | `"exists:roles,id"`                 |
+| `image`            | File harus gambar.      | `"required                          | image"`  |
+| `mimes:types`      | File extension.         | `"mimes:pdf,docx"`                  |
+
+## 🔑 Authentication
+
+**Middleware di Route:**
+
+```typescript
+import { requireAuth, requireAdmin } from "@/middleware/auth";
+
+router.get("/profile", requireAuth, getProfile); // Login User
+router.delete("/user", requireAuth, requireAdmin, del); // Admin Only
+```
+
+**Akses User di Controller:**
+
+```typescript
+// (req as any).user tersedia setelah requireAuth
+const userId = (req as any).user.userId;
+const role = (req as any).user.role;
+```
+
+## ⚡ Fast Response (Serializer)
+
+**1. Schema:**
+
+```typescript
+const schema = {
+  type: "object",
+  properties: {
+    id: { type: "string" },
+    name: { type: "string" },
+  },
+};
+```
+
+**2. Serializer:**
+
+```typescript
+const serializer = getSerializer("key-name", createResponseSchema(schema));
+```
+
+**3. Send:**
+
+```typescript
+sendFastSuccess(res, 200, serializer, { ...data });
+```
+
+## 📦 Redis (Cache)
+
+```typescript
+import { redis } from "@lapeh/core/redis";
+
+// Set Cache (Key, Value, Mode, Detik)
+await redis.set("profile:1", JSON.stringify(data), "EX", 3600);
+
+// Get Cache
+const cached = await redis.get("profile:1");
+if (cached) return JSON.parse(cached);
+```