lapeh 2.3.6 → 2.3.8

package/dist/lib/core/server.js

@@ -0,0 +1,60 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.app = void 0;
+const express_1 = __importDefault(require("express"));
+const cors_1 = __importDefault(require("cors"));
+const helmet_1 = __importDefault(require("helmet"));
+const compression_1 = __importDefault(require("compression"));
+// import { apiRouter } from "../../src/routes"; // Routes are now loaded dynamically in bootstrap.ts
+const visitor_1 = require("../middleware/visitor");
+// import { errorHandler } from "../middleware/error";
+const rateLimit_1 = require("../middleware/rateLimit");
+const requestLogger_1 = require("../middleware/requestLogger");
+const response_1 = require("../utils/response");
+exports.app = (0, express_1.default)();
+exports.app.disable("x-powered-by");
+// Compression (Gzip)
+exports.app.use((0, compression_1.default)());
+// Request Timeout Middleware (30s)
+exports.app.use((_req, res, next) => {
+    res.setTimeout(30000, () => {
+        res.status(408).send({
+            status: "error",
+            message: "Request Timeout (30s limit)",
+        });
+    });
+    next();
+});
+// Security Headers
+exports.app.use((0, helmet_1.default)({
+    contentSecurityPolicy: false, // Disarankan true jika menggunakan frontend di domain yang sama
+    crossOriginResourcePolicy: { policy: "cross-origin" },
+}));
+const corsOrigin = process.env.CORS_ORIGIN || "*";
+exports.app.use((0, cors_1.default)({
+    origin: corsOrigin,
+    credentials: true,
+    exposedHeaders: ["x-access-token", "x-access-expires-at"],
+}));
+// Logging & Parsing
+exports.app.use(requestLogger_1.requestLogger);
+exports.app.use(express_1.default.json({ limit: "10mb" })); // Limit dinaikkan untuk upload file base64/besar
+exports.app.use(express_1.default.urlencoded({ extended: true, limit: "10mb" }));
+// Rate Limiting (Global)
+exports.app.use(rateLimit_1.apiLimiter);
+exports.app.use(visitor_1.visitorCounter);
+// Health Check Endpoint
+exports.app.get("/", (_req, res) => {
+    (0, response_1.sendSuccess)(res, 200, "Lapeh API is running", {
+        status: "active",
+        timestamp: new Date(),
+        version: process.env.npm_package_version || "2.1.6",
+    });
+});
+// Routes are loaded in bootstrap.ts via app.use('/api', userApiRouter)
+// Global Error Handler
+// Note: We don't attach error handler here because we want to attach it AFTER routes are loaded in bootstrap
+// app.use(errorHandler);

package/dist/lib/middleware/auth.d.ts

@@ -0,0 +1,4 @@
+import { Request, Response, NextFunction } from "express";
+export declare function requireAuth(req: Request, res: Response, next: NextFunction): void;
+export declare function requireAdmin(req: Request, res: Response, next: NextFunction): void;
+//# sourceMappingURL=auth.d.ts.map

package/dist/lib/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../lib/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAY1D,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,QAmC1E;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,QAa3E"}

package/dist/lib/middleware/auth.js

@@ -0,0 +1,55 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requireAuth = requireAuth;
+exports.requireAdmin = requireAdmin;
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const response_1 = require("../utils/response");
+// Note: We should ideally avoid importing from controllers in middleware
+// But for now we'll keep it to maintain functionality, but point to src if needed
+// However, authController is in src (user land) or lib?
+// Wait, authController was NOT moved to lib. It is in src/controllers.
+// So this import will fail if we use relative paths.
+// But we are in lib.
+// We should probably move ACCESS_TOKEN_EXPIRES_IN_SECONDS to a config or constants file in lib.
+const ACCESS_TOKEN_EXPIRES_IN_SECONDS = 7 * 24 * 60 * 60;
+function requireAuth(req, res, next) {
+    const header = req.headers.authorization;
+    if (!header || !header.startsWith("Bearer ")) {
+        (0, response_1.sendError)(res, 401, "Unauthorized");
+        return;
+    }
+    const token = header.slice(7);
+    const secret = process.env.JWT_SECRET;
+    if (!secret) {
+        (0, response_1.sendError)(res, 500, "Server misconfigured");
+        return;
+    }
+    try {
+        const payload = jsonwebtoken_1.default.verify(token, secret);
+        req.user = { userId: payload.userId, role: payload.role };
+        const accessExpiresInSeconds = ACCESS_TOKEN_EXPIRES_IN_SECONDS;
+        const accessExpiresAt = new Date(Date.now() + accessExpiresInSeconds * 1000).toISOString();
+        const newToken = jsonwebtoken_1.default.sign({ userId: payload.userId, role: payload.role }, secret, { expiresIn: accessExpiresInSeconds });
+        res.setHeader("x-access-token", newToken);
+        res.setHeader("x-access-expires-at", accessExpiresAt);
+        next();
+    }
+    catch (err) {
+        (0, response_1.sendError)(res, 401, "Invalid token");
+    }
+}
+function requireAdmin(req, res, next) {
+    const user = req.user;
+    if (!user) {
+        (0, response_1.sendError)(res, 401, "Unauthorized");
+        return;
+    }
+    if (user.role !== "admin" && user.role !== "super_admin") {
+        (0, response_1.sendError)(res, 403, "Forbidden");
+        return;
+    }
+    next();
+}

package/dist/lib/middleware/error.d.ts

@@ -0,0 +1,3 @@
+import { Request, Response, NextFunction } from "express";
+export declare function errorHandler(err: any, req: Request, res: Response, _next: NextFunction): Response<any, Record<string, any>>;
+//# sourceMappingURL=error.d.ts.map

package/dist/lib/middleware/error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../../lib/middleware/error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAM1D,wBAAgB,YAAY,CAC1B,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,YAAY,sCA2DpB"}

package/dist/lib/middleware/error.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.errorHandler = errorHandler;
+const zod_1 = require("zod");
+const client_1 = require("@prisma/client");
+const response_1 = require("../utils/response");
+const logger_1 = require("../utils/logger");
+function errorHandler(err, req, res, _next) {
+    // 1. Zod Validation Error
+    if (err instanceof zod_1.ZodError) {
+        const formattedErrors = err.errors.map((e) => ({
+            field: e.path.join("."),
+            message: e.message,
+        }));
+        return (0, response_1.sendError)(res, 400, "Validation Error", formattedErrors);
+    }
+    // 2. Prisma Errors
+    if (err instanceof client_1.Prisma.PrismaClientKnownRequestError) {
+        // P2002: Unique constraint failed
+        if (err.code === "P2002") {
+            const target = err.meta?.target || [];
+            const fields = target.length > 0 ? target.join(", ") : "field";
+            return (0, response_1.sendError)(res, 409, `Unique constraint failed on: ${fields}`);
+        }
+        // P2003: Foreign key constraint failed
+        if (err.code === "P2003") {
+            const field = err.meta?.field_name || "unknown field";
+            return (0, response_1.sendError)(res, 400, `Foreign key constraint failed on: ${field}`);
+        }
+        // P2025: Record not found
+        if (err.code === "P2025") {
+            return (0, response_1.sendError)(res, 404, "Record not found");
+        }
+    }
+    // 3. JWT Errors
+    if (err.name === "JsonWebTokenError") {
+        return (0, response_1.sendError)(res, 401, "Invalid token");
+    }
+    if (err.name === "TokenExpiredError") {
+        return (0, response_1.sendError)(res, 401, "Token expired");
+    }
+    // 4. Syntax Error (JSON body parsing)
+    if (err instanceof SyntaxError && "body" in err) {
+        return (0, response_1.sendError)(res, 400, "Invalid JSON format");
+    }
+    // 5. Default / Custom Error
+    const code = err.statusCode || 500;
+    const msg = err.message || "Internal Server Error";
+    // Log error (file log for production, console for dev)
+    if (code === 500) {
+        logger_1.Log.error(msg, {
+            error: err,
+            path: req.path,
+            method: req.method,
+            ip: req.ip,
+            stack: err.stack,
+        });
+    }
+    return (0, response_1.sendError)(res, code, msg);
+}

package/dist/lib/middleware/multipart.d.ts

@@ -0,0 +1,4 @@
+import multer from "multer";
+export declare const parseMultipart: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+export declare const upload: multer.Multer;
+//# sourceMappingURL=multipart.d.ts.map

package/dist/lib/middleware/multipart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multipart.d.ts","sourceRoot":"","sources":["../../../lib/middleware/multipart.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,cAAc,8IAAkB,CAAC;AAI9C,eAAO,MAAM,MAAM,eAKjB,CAAC"}

package/dist/lib/middleware/multipart.js

@@ -0,0 +1,17 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.upload = exports.parseMultipart = void 0;
+const multer_1 = __importDefault(require("multer"));
+// Middleware for parsing multipart/form-data (text fields only)
+exports.parseMultipart = (0, multer_1.default)().none();
+// Middleware for parsing multipart/form-data with files
+// You can configure storage/limits here as needed
+exports.upload = (0, multer_1.default)({
+    dest: "storage/uploads/",
+    limits: {
+        fileSize: 5 * 1024 * 1024, // 5MB
+    },
+});

package/dist/lib/middleware/rateLimit.d.ts

@@ -0,0 +1,2 @@
+export declare const apiLimiter: import("express-rate-limit").RateLimitRequestHandler;
+//# sourceMappingURL=rateLimit.d.ts.map

package/dist/lib/middleware/rateLimit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimit.d.ts","sourceRoot":"","sources":["../../../lib/middleware/rateLimit.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,UAAU,sDASrB,CAAC"}

package/dist/lib/middleware/rateLimit.js

@@ -0,0 +1,19 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.apiLimiter = void 0;
+const express_rate_limit_1 = __importDefault(require("express-rate-limit"));
+// import { redis } from "../core/redis"; // Optional: Use Redis for distributed rate limiting
+// Rate limiting untuk mencegah brute force dan DDoS ringan
+exports.apiLimiter = (0, express_rate_limit_1.default)({
+    windowMs: 15 * 60 * 1000, // 15 menit
+    max: 100, // Batas 100 request per window per IP
+    standardHeaders: true, // Return rate limit info di `RateLimit-*` headers
+    legacyHeaders: false, // Disable `X-RateLimit-*` headers
+    message: {
+        success: false,
+        message: "Terlalu banyak permintaan, silakan coba lagi nanti.",
+    },
+});

package/dist/lib/middleware/requestLogger.d.ts

@@ -0,0 +1,3 @@
+import { Request, Response, NextFunction } from "express";
+export declare const requestLogger: (req: Request, res: Response, next: NextFunction) => void;
+//# sourceMappingURL=requestLogger.d.ts.map

package/dist/lib/middleware/requestLogger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestLogger.d.ts","sourceRoot":"","sources":["../../../lib/middleware/requestLogger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAG1D,eAAO,MAAM,aAAa,GACxB,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,MAAM,YAAY,SAoBnB,CAAC"}

package/dist/lib/middleware/requestLogger.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requestLogger = void 0;
+const logger_1 = require("../utils/logger");
+const requestLogger = (req, res, next) => {
+    const start = Date.now();
+    const { method, url, ip } = req;
+    // Log saat response selesai
+    res.on("finish", () => {
+        const duration = Date.now() - start;
+        const { statusCode } = res;
+        const message = `${method} ${url} ${statusCode} - ${duration}ms - ${ip}`;
+        if (statusCode >= 400) {
+            logger_1.Log.warn(message);
+        }
+        else {
+            logger_1.Log.info(message);
+        }
+    });
+    next();
+};
+exports.requestLogger = requestLogger;

package/dist/lib/middleware/visitor.d.ts

@@ -0,0 +1,3 @@
+import { Request, Response, NextFunction } from "express";
+export declare function visitorCounter(req: Request, res: Response, next: NextFunction): Promise<void>;
+//# sourceMappingURL=visitor.d.ts.map

package/dist/lib/middleware/visitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"visitor.d.ts","sourceRoot":"","sources":["../../../lib/middleware/visitor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AA0C1D,wBAAsB,cAAc,CAClC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,iBAoInB"}

package/dist/lib/middleware/visitor.js

@@ -0,0 +1,144 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.visitorCounter = visitorCounter;
+const uuid_1 = require("uuid");
+const redis_1 = require("../core/redis");
+const memoryStats = new Map();
+const globalVisitors = new Set();
+function formatDateKey(d) {
+    const dd = String(d.getDate()).padStart(2, "0");
+    const mm = String(d.getMonth() + 1).padStart(2, "0");
+    const yyyy = d.getFullYear();
+    return `${dd}-${mm}-${yyyy}`;
+}
+function parseCookies(header) {
+    const cookies = {};
+    if (!header)
+        return cookies;
+    const parts = header.split(";");
+    for (const part of parts) {
+        const [k, v] = part.split("=").map((s) => s.trim());
+        if (k && v)
+            cookies[k] = decodeURIComponent(v);
+    }
+    return cookies;
+}
+function isMobileUserAgent(ua) {
+    if (!ua)
+        return false;
+    return /Mobile|Android|iPhone|iPad|iPod/i.test(ua);
+}
+async function visitorCounter(req, res, next) {
+    const now = new Date();
+    const dateKey = formatDateKey(now);
+    const ip = req.ip ||
+        req.headers["x-forwarded-for"] ||
+        req.socket.remoteAddress ||
+        "";
+    const userAgent = req.headers["user-agent"];
+    const mobile = isMobileUserAgent(userAgent);
+    const cookies = parseCookies(req.headers.cookie);
+    let visitorId = cookies["visitor_id"];
+    if (!visitorId) {
+        visitorId = (0, uuid_1.v4)();
+        res.cookie("visitor_id", visitorId, {
+            httpOnly: true,
+            sameSite: "lax",
+            maxAge: 365 * 24 * 60 * 60 * 1000,
+        });
+    }
+    let sessionId = cookies["visitor_session_id"];
+    if (!sessionId) {
+        sessionId = (0, uuid_1.v4)();
+        res.cookie("visitor_session_id", sessionId, {
+            httpOnly: true,
+            sameSite: "lax",
+        });
+    }
+    if (redis_1.redis && redis_1.redis.status === "ready") {
+        const base = dateKey;
+        const kRequests = `requests-${base}`;
+        const kNewVisitors = `new-visitors-${base}`;
+        const kVisitors = `visitors-${base}`;
+        const kNewVisitorsMobile = `new-visitors-from-mobile-${base}`;
+        const kVisitorsMobile = `visitors-from-mobile-${base}`;
+        const kIpAddresses = `ip-addresses-${base}`;
+        const kSessions = `sessions-${base}`;
+        const kVisitorsSet = `visitors-set-${base}`;
+        const kVisitorsMobileSet = `visitors-from-mobile-set-${base}`;
+        const kIpSet = `ip-addresses-set-${base}`;
+        const kSessionsSet = `sessions-set-${base}`;
+        const kVisitorsAll = `visitors-all`;
+        try {
+            await redis_1.redis.incr(kRequests);
+            const isNewEver = await redis_1.redis.sadd(kVisitorsAll, visitorId);
+            if (isNewEver === 1) {
+                await redis_1.redis.incr(kNewVisitors);
+            }
+            const addedVisitor = await redis_1.redis.sadd(kVisitorsSet, visitorId);
+            if (addedVisitor === 1) {
+                await redis_1.redis.incr(kVisitors);
+            }
+            if (mobile) {
+                const addedMobileVisitor = await redis_1.redis.sadd(kVisitorsMobileSet, visitorId);
+                if (addedMobileVisitor === 1) {
+                    await redis_1.redis.incr(kVisitorsMobile);
+                }
+                if (isNewEver === 1) {
+                    await redis_1.redis.incr(kNewVisitorsMobile);
+                }
+            }
+            if (ip) {
+                const addedIp = await redis_1.redis.sadd(kIpSet, ip);
+                if (addedIp === 1) {
+                    await redis_1.redis.incr(kIpAddresses);
+                }
+            }
+            const addedSession = await redis_1.redis.sadd(kSessionsSet, sessionId);
+            if (addedSession === 1) {
+                await redis_1.redis.incr(kSessions);
+            }
+        }
+        catch { }
+    }
+    else {
+        let stats = memoryStats.get(dateKey);
+        if (!stats) {
+            stats = {
+                requests: 0,
+                newVisitors: 0,
+                visitors: new Set(),
+                newVisitorsMobile: 0,
+                visitorsMobile: new Set(),
+                ipAddresses: 0,
+                ipSet: new Set(),
+                sessions: 0,
+                sessionSet: new Set(),
+            };
+            memoryStats.set(dateKey, stats);
+        }
+        stats.requests += 1;
+        if (!globalVisitors.has(visitorId)) {
+            globalVisitors.add(visitorId);
+            stats.newVisitors += 1;
+            if (mobile) {
+                stats.newVisitorsMobile += 1;
+            }
+        }
+        if (!stats.visitors.has(visitorId)) {
+            stats.visitors.add(visitorId);
+        }
+        if (mobile && !stats.visitorsMobile.has(visitorId)) {
+            stats.visitorsMobile.add(visitorId);
+        }
+        if (ip && !stats.ipSet.has(ip)) {
+            stats.ipSet.add(ip);
+            stats.ipAddresses += 1;
+        }
+        if (!stats.sessionSet.has(sessionId)) {
+            stats.sessionSet.add(sessionId);
+            stats.sessions += 1;
+        }
+    }
+    next();
+}

package/dist/lib/utils/logger.d.ts

@@ -0,0 +1,11 @@
+import winston from "winston";
+import "winston-daily-rotate-file";
+declare const logger: winston.Logger;
+export declare class Log {
+    static info(message: string, meta?: any): void;
+    static error(message: string, meta?: any): void;
+    static warn(message: string, meta?: any): void;
+    static debug(message: string, meta?: any): void;
+}
+export default logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/lib/utils/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../lib/utils/logger.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,2BAA2B,CAAC;AAiDnC,QAAA,MAAM,MAAM,gBAgBV,CAAC;AAeH,qBAAa,GAAG;IACd,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG;IAIvC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG;IAIxC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG;IAIvC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG;CAGzC;AAED,eAAe,MAAM,CAAC"}

package/dist/lib/utils/logger.js

@@ -0,0 +1,81 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Log = void 0;
+const winston_1 = __importDefault(require("winston"));
+require("winston-daily-rotate-file");
+const path_1 = __importDefault(require("path"));
+const fs_1 = __importDefault(require("fs"));
+const logDirectory = path_1.default.join(process.cwd(), "storage", "logs");
+// Ensure log directory exists
+if (!fs_1.default.existsSync(logDirectory)) {
+    fs_1.default.mkdirSync(logDirectory, { recursive: true });
+}
+const dailyRotateFileTransport = new winston_1.default.transports.DailyRotateFile({
+    filename: "lapeh-%DATE%.log",
+    dirname: logDirectory,
+    datePattern: "YYYY-MM-DD",
+    zippedArchive: true,
+    maxSize: "20m",
+    maxFiles: "3d",
+    format: winston_1.default.format.combine(winston_1.default.format.timestamp({ format: "YYYY-MM-DD HH:mm:ss" }), winston_1.default.format.printf((info) => {
+        let log = `[${info.timestamp}] ${info.level.toUpperCase()}: ${info.message}`;
+        // Handle metadata (errors, etc)
+        const { timestamp, level, message, service, ...meta } = info;
+        if (Object.keys(meta).length > 0) {
+            // If meta has 'errors', nicely format it
+            if (meta.errors) {
+                log += `\nErrors: ${JSON.stringify(meta.errors, null, 2)}`;
+                delete meta.errors;
+            }
+            // If there are other meta properties remaining, log them
+            if (Object.keys(meta).length > 0 && !meta.stack && !meta.error) {
+                log += `\nMeta: ${JSON.stringify(meta)}`;
+            }
+        }
+        if (info.stack) {
+            log += `\n${info.stack}`;
+        }
+        else if (info.error && info.error.stack) {
+            log += `\n${info.error.stack}`;
+        }
+        return log;
+    })),
+});
+const logger = winston_1.default.createLogger({
+    level: process.env.LOG_LEVEL || "info",
+    format: winston_1.default.format.combine(winston_1.default.format.timestamp({ format: "YYYY-MM-DD HH:mm:ss" }), winston_1.default.format.errors({ stack: true }), winston_1.default.format.splat(), winston_1.default.format.json()),
+    defaultMeta: { service: "lapeh-service" },
+    transports: [
+        // Write all logs with importance level of `error` or less to `error.log`
+        // new winston.transports.File({ filename: 'error.log', level: 'error' }),
+        // Write all logs to `combined.log`
+        // new winston.transports.File({ filename: 'combined.log' }),
+        dailyRotateFileTransport,
+    ],
+});
+// If we're not in production then log to the `console` with the format:
+// `${info.level}: ${info.message} JSON.stringify({ ...rest }) `
+if (process.env.NODE_ENV !== "production") {
+    logger.add(new winston_1.default.transports.Console({
+        format: winston_1.default.format.combine(winston_1.default.format.colorize(), winston_1.default.format.simple()),
+    }));
+}
+class Log {
+    static info(message, meta) {
+        logger.info(message, meta);
+    }
+    static error(message, meta) {
+        logger.error(message, meta);
+    }
+    static warn(message, meta) {
+        logger.warn(message, meta);
+    }
+    static debug(message, meta) {
+        logger.debug(message, meta);
+    }
+}
+exports.Log = Log;
+exports.default = logger;

package/dist/lib/utils/pagination.d.ts

@@ -0,0 +1,19 @@
+export type PaginationQuery = {
+    page?: string | string[] | number;
+    per_page?: string | string[] | number;
+};
+export type PaginationParams = {
+    page: number;
+    perPage: number;
+    skip: number;
+    take: number;
+};
+export type PaginationMeta = {
+    page: number;
+    perPage: number;
+    total: number;
+    lastPage: number;
+};
+export declare function getPagination(query: PaginationQuery): PaginationParams;
+export declare function buildPaginationMeta(page: number, perPage: number, total: number): PaginationMeta;
+//# sourceMappingURL=pagination.d.ts.map

package/dist/lib/utils/pagination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../../lib/utils/pagination.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAmBF,wBAAgB,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,CAStE;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACZ,cAAc,CAGhB"}

package/dist/lib/utils/pagination.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPagination = getPagination;
+exports.buildPaginationMeta = buildPaginationMeta;
+function toNumber(value) {
+    if (Array.isArray(value)) {
+        if (value.length === 0)
+            return undefined;
+        return toNumber(value[0]);
+    }
+    if (typeof value === "number") {
+        return value;
+    }
+    if (typeof value === "string") {
+        const n = parseInt(value, 10);
+        if (!Number.isNaN(n)) {
+            return n;
+        }
+    }
+    return undefined;
+}
+function getPagination(query) {
+    const pageRaw = toNumber(query.page);
+    const perPageRaw = toNumber(query.per_page);
+    const page = pageRaw && pageRaw > 0 ? pageRaw : 1;
+    const perPage = perPageRaw && perPageRaw > 0 && perPageRaw <= 100 ? perPageRaw : 10;
+    const skip = (page - 1) * perPage;
+    const take = perPage;
+    return { page, perPage, skip, take };
+}
+function buildPaginationMeta(page, perPage, total) {
+    const lastPage = total === 0 ? 1 : Math.ceil(total / perPage);
+    return { page, perPage, total, lastPage };
+}

package/dist/lib/utils/response.d.ts

@@ -0,0 +1,11 @@
+import { Response } from "express";
+export declare function sendSuccess<T>(res: Response, statusCode: number, message: string, data: T): Response<any, Record<string, any>>;
+/**
+ * Mengirim response sukses dengan performa tinggi menggunakan Schema Serialization (Fastify-style).
+ * Melewati proses JSON.stringify standar yang lambat.
+ *
+ * @param serializer Fungsi serializer yang sudah dicompile dari src/core/serializer
+ */
+export declare function sendFastSuccess(res: Response, statusCode: number, serializer: (doc: any) => string, data: any): Response<any, Record<string, any>>;
+export declare function sendError<T = unknown>(res: Response, statusCode: number, message: string, errors?: T): Response<any, Record<string, any>>;
+//# sourceMappingURL=response.d.ts.map

package/dist/lib/utils/response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.d.ts","sourceRoot":"","sources":["../../../lib/utils/response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAsCnC,wBAAgB,WAAW,CAAC,CAAC,EAC3B,GAAG,EAAE,QAAQ,EACb,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,CAAC,sCAIR;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,QAAQ,EACb,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,EAChC,IAAI,EAAE,GAAG,sCASV;AAED,wBAAgB,SAAS,CAAC,CAAC,GAAG,OAAO,EACnC,GAAG,EAAE,QAAQ,EACb,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,CAAC,sCAcX"}