lapeh 2.2.9 → 2.3.1

package/api-testing-duapuluh-tiga/src/models/core.prisma

@@ -0,0 +1,163 @@
+model cache {
+  key        String @id
+  value      String
+  expiration Int
+}
+
+model cache_locks {
+  key        String @id
+  owner      String
+  expiration Int
+}
+
+model failed_jobs {
+  id         BigInt   @id @default(autoincrement())
+  uuid       String   @unique
+  connection String
+  queue      String
+  payload    String
+  exception  String
+  failed_at  DateTime @default(now())
+}
+
+model job_batches {
+  id             String @id
+  name           String
+  total_jobs     Int
+  pending_jobs   Int
+  failed_jobs    Int
+  failed_job_ids String
+  options        String?
+  cancelled_at   Int?
+  created_at     Int
+  finished_at    Int?
+}
+
+model jobs {
+  id           BigInt @id @default(autoincrement())
+  queue        String
+  payload      String
+  attempts     Int
+  reserved_at  Int?
+  available_at Int
+  created_at   Int
+
+  @@index([queue])
+}
+
+model migrations {
+  id        Int    @id @default(autoincrement())
+  migration String
+  batch     Int
+}
+
+model password_reset_tokens {
+  email      String    @id
+  token      String
+  created_at DateTime?
+}
+
+model personal_access_tokens {
+  id             BigInt    @id @default(autoincrement())
+  tokenable_type String
+  tokenable_id   BigInt
+  name           String
+  token          String    @unique
+  abilities      String?
+  last_used_at   DateTime?
+  expires_at     DateTime?
+  created_at     DateTime?
+  updated_at     DateTime?
+
+  @@index([expires_at])
+  @@index([tokenable_type, tokenable_id])
+}
+
+model sessions {
+  id            String  @id
+  user_id       BigInt?
+  ip_address    String?
+  user_agent    String?
+  payload       String
+  last_activity Int
+
+  @@index([last_activity])
+  @@index([user_id])
+}
+
+model users {
+  id                BigInt    @id @default(autoincrement())
+  uuid              String    @unique
+  name              String
+  email             String    @unique
+  avatar            String?
+  avatar_url        String?
+  email_verified_at DateTime?
+  password          String
+  remember_token    String?
+  created_at        DateTime?
+  updated_at        DateTime?
+
+  user_roles       user_roles[]
+  user_permissions user_permissions[]
+}
+
+model roles {
+  id          BigInt    @id @default(autoincrement())
+  name        String
+  slug        String    @unique
+  description String?
+  created_at  DateTime?
+  updated_at  DateTime?
+
+  user_roles       user_roles[]
+  role_permissions role_permissions[]
+}
+
+model permissions {
+  id          BigInt    @id @default(autoincrement())
+  name        String
+  slug        String    @unique
+  description String?
+  created_at  DateTime?
+  updated_at  DateTime?
+
+  role_permissions role_permissions[]
+  user_permissions user_permissions[]
+}
+
+model user_roles {
+  id         BigInt    @id @default(autoincrement())
+  user_id    BigInt
+  role_id    BigInt
+  created_at DateTime?
+
+  user users @relation(fields: [user_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
+  role roles @relation(fields: [role_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
+
+  @@unique([user_id, role_id])
+}
+
+model role_permissions {
+  id            BigInt    @id @default(autoincrement())
+  role_id       BigInt
+  permission_id BigInt
+  created_at    DateTime?
+
+  role       roles       @relation(fields: [role_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
+  permission permissions @relation(fields: [permission_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
+
+  @@unique([role_id, permission_id])
+}
+
+model user_permissions {
+  id            BigInt    @id @default(autoincrement())
+  user_id       BigInt
+  permission_id BigInt
+  created_at    DateTime?
+
+  user       users       @relation(fields: [user_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
+  permission permissions @relation(fields: [permission_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
+
+  @@unique([user_id, permission_id])
+}

package/api-testing-duapuluh-tiga/src/models/pets.prisma

@@ -0,0 +1,9 @@
+
+model pets {
+  id         BigInt    @id @default(autoincrement())
+  name       String
+  species    String
+  age        Int
+  created_at DateTime?
+  updated_at DateTime?
+}

package/api-testing-duapuluh-tiga/src/routes/auth.ts

@@ -0,0 +1,74 @@
+import { Router } from "express";
+import rateLimit from "express-rate-limit";
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const multer = require("multer");
+import path from "path";
+import fs from "fs";
+import {
+  register,
+  login,
+  me,
+  logout,
+  refreshToken,
+  updatePassword,
+  updateProfile,
+  updateAvatar,
+} from "@/controllers/authController";
+import { requireAuth } from "@lapeh/middleware/auth";
+
+const authLimiter = rateLimit({
+  windowMs: 15 * 60 * 1000,
+  max: 50,
+  standardHeaders: true,
+  legacyHeaders: false,
+});
+
+const avatarUploadDir = process.env.AVATAR_UPLOAD_DIR || "uploads/avatars";
+if (!fs.existsSync(avatarUploadDir)) {
+  fs.mkdirSync(avatarUploadDir, { recursive: true });
+}
+
+const storage = (multer as any).diskStorage({
+  destination(
+    _req: any,
+    _file: any,
+    cb: (error: Error | null, destination: string) => void
+  ) {
+    cb(null, avatarUploadDir);
+  },
+  filename(
+    _req: any,
+    file: any,
+    cb: (error: Error | null, filename: string) => void
+  ) {
+    const ext = path.extname(file.originalname);
+    const base = path.basename(file.originalname, ext);
+    const unique = Date.now() + "-" + Math.round(Math.random() * 1e9);
+    cb(null, base + "-" + unique + ext);
+  },
+});
+
+const uploadAvatar = multer({ storage });
+
+export const authRouter = Router();
+
+authRouter.post("/register", authLimiter, register);
+
+authRouter.post("/login", authLimiter, login);
+
+authRouter.get("/me", requireAuth, me);
+
+authRouter.post("/logout", requireAuth, logout);
+
+authRouter.post("/refresh", authLimiter, refreshToken);
+
+authRouter.put("/password", requireAuth, updatePassword);
+
+authRouter.put("/profile", requireAuth, updateProfile);
+
+authRouter.post(
+  "/avatar",
+  requireAuth,
+  uploadAvatar.single("avatar"),
+  updateAvatar
+);

package/api-testing-duapuluh-tiga/src/routes/index.ts

@@ -0,0 +1,10 @@
+import { Router } from "express";
+import { authRouter } from "@/routes/auth";
+import { rbacRouter } from "@/routes/rbac";
+import petRouter from "@/routes/pets";
+
+export const apiRouter = Router();
+
+apiRouter.use("/auth", authRouter);
+apiRouter.use("/rbac", rbacRouter);
+apiRouter.use("/pets", petRouter);

package/api-testing-duapuluh-tiga/src/routes/pets.ts

@@ -0,0 +1,13 @@
+import { Router } from "express";
+import * as PetController from "@/controllers/petController";
+import { parseMultipart } from "@lapeh/middleware/multipart";
+
+const router = Router();
+
+router.get("/", PetController.index);
+router.get("/:id", PetController.show);
+router.post("/", parseMultipart, PetController.store);
+router.put("/:id", parseMultipart, PetController.update);
+router.delete("/:id", PetController.destroy);
+
+export default router;

package/api-testing-duapuluh-tiga/src/routes/rbac.ts

@@ -0,0 +1,42 @@
+import { Router } from "express";
+import { requireAdmin, requireAuth } from "@lapeh/middleware/auth";
+import {
+  createRole,
+  listRoles,
+  updateRole,
+  deleteRole,
+  createPermission,
+  listPermissions,
+  updatePermission,
+  deletePermission,
+  assignRoleToUser,
+  removeRoleFromUser,
+  assignPermissionToRole,
+  removePermissionFromRole,
+  assignPermissionToUser,
+  removePermissionFromUser,
+} from "@/controllers/rbacController";
+
+export const rbacRouter = Router();
+
+rbacRouter.use(requireAuth);
+rbacRouter.use(requireAdmin);
+
+rbacRouter.post("/roles", createRole);
+rbacRouter.get("/roles", listRoles);
+rbacRouter.put("/roles/:id", updateRole);
+rbacRouter.delete("/roles/:id", deleteRole);
+
+rbacRouter.post("/permissions", createPermission);
+rbacRouter.get("/permissions", listPermissions);
+rbacRouter.put("/permissions/:id", updatePermission);
+rbacRouter.delete("/permissions/:id", deletePermission);
+
+rbacRouter.post("/users/assign-role", assignRoleToUser);
+rbacRouter.post("/users/remove-role", removeRoleFromUser);
+
+rbacRouter.post("/roles/assign-permission", assignPermissionToRole);
+rbacRouter.post("/roles/remove-permission", removePermissionFromRole);
+
+rbacRouter.post("/users/assign-permission", assignPermissionToUser);
+rbacRouter.post("/users/remove-permission", removePermissionFromUser);

package/api-testing-duapuluh-tiga/tsconfig.json

@@ -0,0 +1,43 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "CommonJS",
+    "outDir": "dist",
+    "rootDir": ".",
+    "declaration": true,
+    "declarationMap": true,
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "paths": {
+      "@lapeh/*": [
+        "./node_modules/lapeh/lib/*"
+      ],
+      "@/*": [
+        "./src/*"
+      ],
+      "@lapeh/core/database": [
+        "./node_modules/lapeh/lib/core/database.ts"
+      ]
+    },
+    "baseUrl": "."
+  },
+  "include": [
+    "lib",
+    "src",
+    "prisma",
+    "generated"
+  ],
+  "exclude": [
+    "node_modules",
+    "dist"
+  ],
+  "ts-node": {
+    "ignore": [
+      "node_modules/(?!lapeh)"
+    ]
+  }
+}

package/bin/index.js

@@ -407,12 +407,24 @@ function createProject() {
     packageJson.name = projectName;
     // Add lapeh framework version to dependencies to track it like react-router
     packageJson.dependencies = packageJson.dependencies || {};
-    // For local development, we use file reference. For production publish, use version.
-    packageJson.dependencies["lapeh"] = "file:../"; 
+    
+    // Smart dependency resolution:
+    // If running from node_modules (installed via npm), use the version number.
+    // If running locally (dev mode), use the absolute file path.
+    const frameworkPackageJson = require(path.join(__dirname, '../package.json'));
+    
+    if (__dirname.includes('node_modules')) {
+       packageJson.dependencies["lapeh"] = `^${frameworkPackageJson.version}`;
+    } else {
+       // Local development
+       const lapehPath = path.resolve(__dirname, '..').replace(/\\/g, '/');
+       packageJson.dependencies["lapeh"] = `file:${lapehPath}`;
+    }
     
     // Ensure prisma CLI is available in devDependencies for the new project
     packageJson.devDependencies = packageJson.devDependencies || {};
     packageJson.devDependencies["prisma"] = "7.2.0";
+    packageJson.devDependencies["dotenv"] = "^16.4.5"; // Ensure dotenv is available for seed script
     
     // Add missing types for dev
     packageJson.devDependencies["@types/express"] = "^5.0.0";
@@ -505,6 +517,16 @@ function createProject() {
             'import { prisma } from "@lapeh/core/database"'
           );
       }
+
+      // Remove default demo data (Pets) from seed.ts ONLY if NOT using --full
+      // We want to keep users/roles as they are essential, but remove the demo 'Pets' data
+      // This matches from "// 6. Seed Pets" up to the completion log message
+      if (!isFull) {
+          seedContent = seedContent.replace(
+              /\/\/ 6\. Seed Pets[\s\S]*?console\.log\("Finished seeding 50,000 pets\."\);/, 
+              '// 6. Seed Pets (Skipped by default. Use --full to include demo data)'
+          );
+      }
       
       fs.writeFileSync(prismaSeedPath, seedContent);
     }
@@ -577,136 +599,31 @@ function createProject() {
       
       // Seed (Users & Roles are mandatory, Pets are demo data)
       console.log('   Seeding mandatory data (Users, Roles, Permissions)...');
-      // Always seed mandatory data by default or check if --full is meant for demo data only?
-      // Based on user request: "user seeder dan pets itu selalu ada karena default, jadi seharusnya tidak digenerate saat user buat project baru"
-      // Wait, user says: "user seeder and pets are always there because default, so it SHOULD NOT be generated when user creates new project, UNLESS user starts using framework and adding new tables"
-      
-      // Interpretation: The user implies that `prisma generate` and `prisma migrate` (which creates the physical tables and client code)
-      // MIGHT be redundant if the core framework already provides a pre-built client for the default models (Users, Pets).
-      // However, Prisma doesn't work like that easily because the Client is generated into node_modules/@prisma/client.
-      
-      // If the user means "don't run migration/seed unless needed", we still need to run them to have a working app.
-      // Re-reading carefully: "masalahnya user seeder dan pets itu selalu ada karane default ,jadi seharusnya tidak digenerate saat user buuat project baru , kecuali user mulai menggunakan framework ini dan menambahkan table baru untuk developmen"
-      
-      // AH! The user might mean: Since User/Pets are CORE models, the Prisma Client for them should ALREADY exist or be pre-packaged, 
-      // so we don't need to run `prisma generate` during project creation?
-      // OR: The user means the *migration files* shouldn't be generated?
-      
-      // "seharusnya tidak digenerate saat user buuat project baru" -> The user is annoyed by the `prisma generate` and `migration` step taking time?
-      // But we need the DB tables.
-      
-      // Let's assume the user wants to SKIP the `prisma generate` and `migrate` step if possible, 
-      // but that's impossible for a fresh project connecting to a fresh DB.
-      
-      // Alternative interpretation: The user thinks `prisma generate` is only for NEW tables. 
-      // But `prisma generate` is required to create the client library itself.
-      
-      // Let's look at the "Pets" part. Maybe the user considers Pets as "bloat" that shouldn't be there by default?
-      // "user seeder dan pets itu selalu ada karane default"
-      
-      // Wait, maybe the user is saying: "Since these are default, why do we need to RE-generate/RE-migrate them every time? Can't we just have them ready?"
-      // Answer: No, because every user has a different DB connection string.
-      
-      // Let's explain this to the user. Prisma Client is NOT a static library like `lodash`. It is generated based on the schema.
-      // If we don't generate it, `import { prisma }` will fail because `node_modules/@prisma/client` will be empty.
-      
-      // However, we CAN optimize.
-      // Maybe the user is asking: "Why do we generate migration files (`prisma/migrations`) for default tables?"
-      // We can ship the project WITH the migration folder for the default tables already there!
-      // If we include `prisma/migrations` in the template, `prisma migrate dev` will see they exist and just apply them, 
-      // instead of creating a NEW migration `init_setup`.
-      
-      // Let's try to verify if `prisma/migrations` is in the ignore list.
-      // Line 367: `'prisma/migrations', // Exclude existing migrations`
-      // Yes, we are explicitly excluding them!
-      
-      // If we INCLUDE the base migrations in the template, then we don't need to create a new migration on init.
-      // We just run `prisma migrate deploy` (faster) or `dev` (which will see it's in sync).
-      
-      // Let's change the strategy:
-      // 1. Remove `prisma/migrations` from ignore list.
-      // 2. But wait, the user's template might have dirty migrations.
-      
-      // Let's assume the user wants me to explain/fix the perception.
-      // But wait, the user says "seharusnya tidak digenerate".
-      
-      // Let's stick to the most robust interpretation:
-      // The user wants to avoid the overhead of generation for default stuff.
-      // But generation is fast (ms). Migration is slow.
-      
-      // If the user means the `seed` data (Pets/Users):
-      // "user seeder dan pets itu selalu ada... jadi seharusnya tidak digenerate"
-      // Maybe the user means: Don't SEED them by default?
-      // "kecuali user mulai menggunakan framework ini dan menambahkan table baru"
-      
-      // Let's assume the user is talking about the `prisma generate` process being redundant for default models.
-      // I need to explain that it IS required.
-      
-      // BUT, I can make the process cleaner.
-      // If I look at the previous context: "postinstall" script.
-      // The user is replying to my explanation about "postinstall".
-      
-      // User: "The default models (User/Pets) are always there. So they shouldn't need generation when creating a project. Generation should only happen when I add NEW tables."
-      
-      // This is a misunderstanding of how Prisma works. 
-      // Prisma Client is NOT installed via npm registry with the models pre-baked.
-      // It is an empty shell that fills itself when you run `prisma generate`.
-      
-      // My previous explanation might have been unclear.
-      // I should clarify: "Generate is mandatory to install the library itself".
-      
-      // HOWEVER, maybe I can PRE-GENERATE it?
-      // No, because it depends on the OS/Architecture of the user's machine.
-      
-      // Let's try to satisfy the user's request by skipping the explicit `prisma generate` step in the CLI 
-      // IF we rely on `prisma migrate dev` to do it automatically (it does generate client under the hood).
-      // Line 557: `execSync('npx prisma generate'...)`
-      // Line 561: `execSync('npx prisma migrate dev'...)` -> This AUTOMATICALLY runs generate.
-      
-      // So line 557 is redundant! removing it speeds things up and reduces "generation" noise.
-      
-      // Also, about "seeder":
-      // "seharusnya tidak digenerate saat user buuat project baru"
-      // If the user means the SEED FILE content.
-      // We are copying `prisma/seed.ts` from template.
-      
-      // Let's remove the redundant `prisma generate` call in line 557.
-      // And I will explain to the user WHY generation is still needed (internally) but I removed the explicit step.
-      
-      // Wait, if I remove `prisma generate`, `node scripts/compile-schema.js` must run before migrate.
-      // It does (Line 554).
-      
-      // Let's remove the explicit `prisma generate` logging and command.
       
       if (isFull) {
-        console.log('   Seeding database...');
-        execSync('npm run db:seed', { cwd: projectDir, stdio: 'inherit' });
+         try {
+             execSync('npm run db:seed', { cwd: projectDir, stdio: 'inherit' });
+         } catch (error) {
+             console.warn('⚠️  Database setup encountered an issue.');
+             console.warn('   You may need to check your .env credentials and run:');
+             console.warn(`   cd ${projectName}`);
+             console.warn('   npm run prisma:migrate');
+         }
       } else {
-        console.log('   ℹ️  Skipping database seeding (use --full to seed default data)...');
+         console.log('   ℹ️  Skipping database seeding (use --full to seed default data)...');
       }
 
-    } catch (error) {
-      console.warn('⚠️  Database setup encountered an issue.');
-      console.warn('   You may need to check your .env credentials and run:');
-      console.warn('   cd ' + projectName);
-      console.warn('   npm run prisma:migrate');
-    }
-
-    console.log(`\n✅ Project ${projectName} created successfully!`);
-
-    if (isFull) {
-      console.log(`\n🚀 Launching development server (--full detected)...`);
-      try {
-        execSync('npm run dev', { cwd: projectDir, stdio: 'inherit' });
-      } catch (error) {
-        // Graceful exit
-      }
-      console.log(`\nℹ️  Server stopped.`);
-      console.log(`   To enter project folder: cd ${projectName}`);
-    } else {
-      console.log(`\nNext steps:`);
+      console.log(`\n✅ Project ${projectName} created successfully!`);
+      console.log('\nNext steps:');
       console.log(`  cd ${projectName}`);
-      console.log(`  npm run dev`);
+      console.log('  npm run dev');
+    } catch (error) {
+      console.error('❌ Error setting up database:', error.message);
+      console.log(`\n✅ Project ${projectName} created, but database setup failed.`);
+      console.log('   Please check your database credentials in .env and run:');
+      console.log(`   cd ${projectName}`);
+      console.log('   npm run prisma:migrate');
     }
   })();
 }
+      

package/nama-proyek-baru/.env.example

@@ -0,0 +1,19 @@
+PORT=8000
+DATABASE_PROVIDER="postgresql"
+DATABASE_URL="postgresql://sianu:12341234@localhost:5432/db_example_test?schema=public"   
+
+# Used for all encryption-related tasks in the framework (JWT, etc.)
+JWT_SECRET="replace_this_with_a_secure_random_string"
+
+# Framework Timezone
+TZ="Asia/Jakarta"
+
+# Redis Configuration (Optional)
+# If REDIS_URL is not set or connection fails, the framework will automatically 
+# switch to an in-memory Redis mock (bundled). No installation required for development.
+# REDIS_URL="redis://lapeh:12341234@localhost:6379"
+# NO_REDIS="true"
+
+# To force disable Redis and use in-memory mock even if Redis is available:
+# NO_REDIS="true"
+

package/nama-proyek-baru/api-testing-duapuluh/.env.example

@@ -0,0 +1,19 @@
+PORT=8000
+DATABASE_PROVIDER="postgresql"
+DATABASE_URL="postgresql://sianu:12341234@localhost:5432/db_example_test?schema=public"   
+
+# Used for all encryption-related tasks in the framework (JWT, etc.)
+JWT_SECRET="replace_this_with_a_secure_random_string"
+
+# Framework Timezone
+TZ="Asia/Jakarta"
+
+# Redis Configuration (Optional)
+# If REDIS_URL is not set or connection fails, the framework will automatically 
+# switch to an in-memory Redis mock (bundled). No installation required for development.
+# REDIS_URL="redis://lapeh:12341234@localhost:6379"
+# NO_REDIS="true"
+
+# To force disable Redis and use in-memory mock even if Redis is available:
+# NO_REDIS="true"
+

package/nama-proyek-baru/api-testing-duapuluh/api-testing-enambelas/.env.example

@@ -0,0 +1,19 @@
+PORT=8000
+DATABASE_PROVIDER="postgresql"
+DATABASE_URL="postgresql://sianu:12341234@localhost:5432/db_example_test?schema=public"   
+
+# Used for all encryption-related tasks in the framework (JWT, etc.)
+JWT_SECRET="replace_this_with_a_secure_random_string"
+
+# Framework Timezone
+TZ="Asia/Jakarta"
+
+# Redis Configuration (Optional)
+# If REDIS_URL is not set or connection fails, the framework will automatically 
+# switch to an in-memory Redis mock (bundled). No installation required for development.
+# REDIS_URL="redis://lapeh:12341234@localhost:6379"
+# NO_REDIS="true"
+
+# To force disable Redis and use in-memory mock even if Redis is available:
+# NO_REDIS="true"
+