lapeh 2.3.6 → 2.3.8

package/src/controllers/rbacController.ts

@@ -1,478 +0,0 @@
-import { Request, Response } from "express";
-import { prisma } from "@lapeh/core/database";
-import { sendError, sendFastSuccess } from "@lapeh/utils/response";
-import { Validator } from "@lapeh/utils/validator";
-import { z } from "zod";
-import { getSerializer, createResponseSchema } from "@lapeh/core/serializer";
-
-// --- Serializers ---
-
-const roleSchema = {
-  type: "object",
-  properties: {
-    id: { type: "string" },
-    name: { type: "string" },
-    slug: { type: "string" },
-    description: { type: "string", nullable: true },
-    created_at: { type: "string", format: "date-time", nullable: true },
-    updated_at: { type: "string", format: "date-time", nullable: true },
-  },
-};
-
-const permissionSchema = {
-  type: "object",
-  properties: {
-    id: { type: "string" },
-    name: { type: "string" },
-    slug: { type: "string" },
-    description: { type: "string", nullable: true },
-    created_at: { type: "string", format: "date-time", nullable: true },
-    updated_at: { type: "string", format: "date-time", nullable: true },
-  },
-};
-
-const roleSerializer = getSerializer("role", createResponseSchema(roleSchema));
-const roleListSerializer = getSerializer(
-  "role-list",
-  createResponseSchema({ type: "array", items: roleSchema })
-);
-
-const permissionSerializer = getSerializer(
-  "permission",
-  createResponseSchema(permissionSchema)
-);
-const permissionListSerializer = getSerializer(
-  "permission-list",
-  createResponseSchema({ type: "array", items: permissionSchema })
-);
-
-const voidSerializer = getSerializer(
-  "void",
-  createResponseSchema({ type: "null" })
-);
-
-// --- Controllers ---
-
-export async function createRole(req: Request, res: Response) {
-  const validator = Validator.make(req.body || {}, {
-    name: "required|string|min:1",
-    slug: "required|string|min:1|unique:roles,slug",
-    description: "string",
-  });
-
-  if (await validator.fails()) {
-    sendError(res, 422, "Validation error", validator.errors());
-    return;
-  }
-
-  const { name, slug, description } = await validator.validated();
-  // Manual unique check removed as it is handled by validator
-
-  const role = await prisma.roles.create({
-    data: {
-      name,
-      slug,
-      description: description || null,
-      created_at: new Date(),
-      updated_at: new Date(),
-    },
-  });
-  sendFastSuccess(res, 201, roleSerializer, {
-    status: "success",
-    message: "Role created",
-    data: { ...role, id: role.id.toString() },
-  });
-}
-
-export async function listRoles(_req: Request, res: Response) {
-  const roles = await prisma.roles.findMany({
-    orderBy: { id: "asc" },
-  });
-  const serialized = roles.map((r: any) => ({ ...r, id: r.id.toString() }));
-  sendFastSuccess(res, 200, roleListSerializer, {
-    status: "success",
-    message: "Roles list",
-    data: serialized,
-  });
-}
-
-export async function updateRole(req: Request, res: Response) {
-  const { id } = req.params;
-  const roleId = BigInt(id);
-
-  const validator = Validator.make(req.body || {}, {
-    name: "string",
-    slug: `string|unique:roles,slug,${id}`,
-    description: "string",
-  });
-
-  if (await validator.fails()) {
-    sendError(res, 422, "Validation error", validator.errors());
-    return;
-  }
-  const { name, slug, description } = await validator.validated();
-
-  const role = await prisma.roles.findUnique({ where: { id: roleId } });
-  if (!role) {
-    sendError(res, 404, "Role not found");
-    return;
-  }
-  // Manual unique check removed as it is handled by validator
-  const updated = await prisma.roles.update({
-    where: { id: roleId },
-    data: {
-      name: name ?? role.name,
-      slug: slug ?? role.slug,
-      description: description ?? role.description,
-      updated_at: new Date(),
-    },
-  });
-  sendFastSuccess(res, 200, roleSerializer, {
-    status: "success",
-    message: "Role updated",
-    data: { ...updated, id: updated.id.toString() },
-  });
-}
-
-export async function deleteRole(req: Request, res: Response) {
-  const { id } = req.params;
-  const roleId = BigInt(id);
-  const role = await prisma.roles.findUnique({ where: { id: roleId } });
-  if (!role) {
-    sendError(res, 404, "Role not found");
-    return;
-  }
-  await prisma.role_permissions.deleteMany({ where: { role_id: roleId } });
-  await prisma.user_roles.deleteMany({ where: { role_id: roleId } });
-  await prisma.roles.delete({ where: { id: roleId } });
-  sendFastSuccess(res, 200, voidSerializer, {
-    status: "success",
-    message: "Role deleted",
-    data: null,
-  });
-}
-
-export async function createPermission(req: Request, res: Response) {
-  const validator = Validator.make(req.body || {}, {
-    name: "required|string|min:1",
-    slug: "required|string|min:1|unique:permissions,slug",
-    description: "string",
-  });
-
-  if (await validator.fails()) {
-    sendError(res, 422, "Validation error", validator.errors());
-    return;
-  }
-  const { name, slug, description } = await validator.validated();
-  // Manual unique check removed as it is handled by validator
-
-  const permission = await prisma.permissions.create({
-    data: {
-      name,
-      slug,
-      description: description || null,
-      created_at: new Date(),
-      updated_at: new Date(),
-    },
-  });
-  sendFastSuccess(res, 201, permissionSerializer, {
-    status: "success",
-    message: "Permission created",
-    data: { ...permission, id: permission.id.toString() },
-  });
-}
-
-export async function listPermissions(_req: Request, res: Response) {
-  const permissions = await prisma.permissions.findMany({
-    orderBy: { id: "asc" },
-  });
-  const serialized = permissions.map((p: any) => ({
-    ...p,
-    id: p.id.toString(),
-  }));
-  sendFastSuccess(res, 200, permissionListSerializer, {
-    status: "success",
-    message: "Permissions list",
-    data: serialized,
-  });
-}
-
-export async function updatePermission(req: Request, res: Response) {
-  const { id } = req.params;
-  const permissionId = BigInt(id);
-
-  const validator = Validator.make(req.body || {}, {
-    name: "string",
-    slug: `string|unique:permissions,slug,${id}`,
-    description: "string",
-  });
-
-  if (await validator.fails()) {
-    sendError(res, 422, "Validation error", validator.errors());
-    return;
-  }
-  const { name, slug, description } = await validator.validated();
-
-  const permission = await prisma.permissions.findUnique({
-    where: { id: permissionId },
-  });
-  if (!permission) {
-    sendError(res, 404, "Permission not found");
-    return;
-  }
-  // Manual unique check removed as it is handled by validator
-  const updated = await prisma.permissions.update({
-    where: { id: permissionId },
-    data: {
-      name: name ?? permission.name,
-      slug: slug ?? permission.slug,
-      description: description ?? permission.description,
-      updated_at: new Date(),
-    },
-  });
-  sendFastSuccess(res, 200, permissionSerializer, {
-    status: "success",
-    message: "Permission updated",
-    data: { ...updated, id: updated.id.toString() },
-  });
-}
-
-export async function deletePermission(req: Request, res: Response) {
-  const { id } = req.params;
-  const permissionId = BigInt(id);
-  const permission = await prisma.permissions.findUnique({
-    where: { id: permissionId },
-  });
-  if (!permission) {
-    sendError(res, 404, "Permission not found");
-    return;
-  }
-  await prisma.role_permissions.deleteMany({
-    where: { permission_id: permissionId },
-  });
-  await prisma.user_permissions.deleteMany({
-    where: { permission_id: permissionId },
-  });
-  await prisma.permissions.delete({ where: { id: permissionId } });
-  sendFastSuccess(res, 200, voidSerializer, {
-    status: "success",
-    message: "Permission deleted",
-    data: null,
-  });
-}
-
-export async function assignRoleToUser(req: Request, res: Response) {
-  const validator = Validator.make(req.body || {}, {
-    userId: z.string().min(1, "userId wajib diisi"),
-    roleId: z.string().min(1, "roleId wajib diisi"),
-  });
-
-  if (await validator.fails()) {
-    sendError(res, 422, "Validation error", validator.errors());
-    return;
-  }
-  const { userId, roleId } = await validator.validated();
-
-  const user = await prisma.users.findUnique({
-    where: { id: BigInt(userId) },
-  });
-  if (!user) {
-    sendError(res, 404, "User not found");
-    return;
-  }
-  const role = await prisma.roles.findUnique({
-    where: { id: BigInt(roleId) },
-  });
-  if (!role) {
-    sendError(res, 404, "Role not found");
-    return;
-  }
-  await prisma.user_roles.upsert({
-    where: {
-      user_id_role_id: {
-        user_id: BigInt(userId),
-        role_id: BigInt(roleId),
-      },
-    },
-    create: {
-      user_id: BigInt(userId),
-      role_id: BigInt(roleId),
-      created_at: new Date(),
-    },
-    update: {},
-  });
-  sendFastSuccess(res, 200, voidSerializer, {
-    status: "success",
-    message: "Role assigned to user",
-    data: null,
-  });
-}
-
-export async function removeRoleFromUser(req: Request, res: Response) {
-  const validator = Validator.make(req.body || {}, {
-    userId: z.string().min(1, "userId wajib diisi"),
-    roleId: z.string().min(1, "roleId wajib diisi"),
-  });
-
-  if (await validator.fails()) {
-    sendError(res, 422, "Validation error", validator.errors());
-    return;
-  }
-  const { userId, roleId } = await validator.validated();
-
-  await prisma.user_roles.deleteMany({
-    where: {
-      user_id: BigInt(userId),
-      role_id: BigInt(roleId),
-    },
-  });
-  sendFastSuccess(res, 200, voidSerializer, {
-    status: "success",
-    message: "Role removed from user",
-    data: null,
-  });
-}
-
-export async function assignPermissionToRole(req: Request, res: Response) {
-  const validator = Validator.make(req.body || {}, {
-    roleId: z.string().min(1, "roleId wajib diisi"),
-    permissionId: z.string().min(1, "permissionId wajib diisi"),
-  });
-
-  if (await validator.fails()) {
-    sendError(res, 422, "Validation error", validator.errors());
-    return;
-  }
-  const { roleId, permissionId } = await validator.validated();
-
-  const role = await prisma.roles.findUnique({
-    where: { id: BigInt(roleId) },
-  });
-  if (!role) {
-    sendError(res, 404, "Role not found");
-    return;
-  }
-  const permission = await prisma.permissions.findUnique({
-    where: { id: BigInt(permissionId) },
-  });
-  if (!permission) {
-    sendError(res, 404, "Permission not found");
-    return;
-  }
-  await prisma.role_permissions.upsert({
-    where: {
-      role_id_permission_id: {
-        role_id: BigInt(roleId),
-        permission_id: BigInt(permissionId),
-      },
-    },
-    create: {
-      role_id: BigInt(roleId),
-      permission_id: BigInt(permissionId),
-      created_at: new Date(),
-    },
-    update: {},
-  });
-  sendFastSuccess(res, 200, voidSerializer, {
-    status: "success",
-    message: "Permission assigned to role",
-    data: null,
-  });
-}
-
-export async function removePermissionFromRole(req: Request, res: Response) {
-  const validator = Validator.make(req.body || {}, {
-    roleId: z.string().min(1, "roleId wajib diisi"),
-    permissionId: z.string().min(1, "permissionId wajib diisi"),
-  });
-
-  if (await validator.fails()) {
-    sendError(res, 422, "Validation error", validator.errors());
-    return;
-  }
-  const { roleId, permissionId } = await validator.validated();
-
-  await prisma.role_permissions.deleteMany({
-    where: {
-      role_id: BigInt(roleId),
-      permission_id: BigInt(permissionId),
-    },
-  });
-  sendFastSuccess(res, 200, voidSerializer, {
-    status: "success",
-    message: "Permission removed from role",
-    data: null,
-  });
-}
-
-export async function assignPermissionToUser(req: Request, res: Response) {
-  const validator = Validator.make(req.body || {}, {
-    userId: z.string().min(1, "userId wajib diisi"),
-    permissionId: z.string().min(1, "permissionId wajib diisi"),
-  });
-
-  if (await validator.fails()) {
-    sendError(res, 422, "Validation error", validator.errors());
-    return;
-  }
-  const { userId, permissionId } = await validator.validated();
-
-  const user = await prisma.users.findUnique({
-    where: { id: BigInt(userId) },
-  });
-  if (!user) {
-    sendError(res, 404, "User not found");
-    return;
-  }
-  const permission = await prisma.permissions.findUnique({
-    where: { id: BigInt(permissionId) },
-  });
-  if (!permission) {
-    sendError(res, 404, "Permission not found");
-    return;
-  }
-  await prisma.user_permissions.upsert({
-    where: {
-      user_id_permission_id: {
-        user_id: BigInt(userId),
-        permission_id: BigInt(permissionId),
-      },
-    },
-    create: {
-      user_id: BigInt(userId),
-      permission_id: BigInt(permissionId),
-      created_at: new Date(),
-    },
-    update: {},
-  });
-  sendFastSuccess(res, 200, voidSerializer, {
-    status: "success",
-    message: "Permission assigned to user",
-    data: null,
-  });
-}
-
-export async function removePermissionFromUser(req: Request, res: Response) {
-  const validator = Validator.make(req.body || {}, {
-    userId: z.string().min(1, "userId wajib diisi"),
-    permissionId: z.string().min(1, "permissionId wajib diisi"),
-  });
-
-  if (await validator.fails()) {
-    sendError(res, 422, "Validation error", validator.errors());
-    return;
-  }
-  const { userId, permissionId } = await validator.validated();
-
-  await prisma.user_permissions.deleteMany({
-    where: {
-      user_id: BigInt(userId),
-      permission_id: BigInt(permissionId),
-    },
-  });
-  sendFastSuccess(res, 200, voidSerializer, {
-    status: "success",
-    message: "Permission removed from user",
-    data: null,
-  });
-}

package/src/models/core.prisma

@@ -1,163 +0,0 @@
-model cache {
-  key        String @id
-  value      String
-  expiration Int
-}
-
-model cache_locks {
-  key        String @id
-  owner      String
-  expiration Int
-}
-
-model failed_jobs {
-  id         BigInt   @id @default(autoincrement())
-  uuid       String   @unique
-  connection String
-  queue      String
-  payload    String
-  exception  String
-  failed_at  DateTime @default(now())
-}
-
-model job_batches {
-  id             String @id
-  name           String
-  total_jobs     Int
-  pending_jobs   Int
-  failed_jobs    Int
-  failed_job_ids String
-  options        String?
-  cancelled_at   Int?
-  created_at     Int
-  finished_at    Int?
-}
-
-model jobs {
-  id           BigInt @id @default(autoincrement())
-  queue        String
-  payload      String
-  attempts     Int
-  reserved_at  Int?
-  available_at Int
-  created_at   Int
-
-  @@index([queue])
-}
-
-model migrations {
-  id        Int    @id @default(autoincrement())
-  migration String
-  batch     Int
-}
-
-model password_reset_tokens {
-  email      String    @id
-  token      String
-  created_at DateTime?
-}
-
-model personal_access_tokens {
-  id             BigInt    @id @default(autoincrement())
-  tokenable_type String
-  tokenable_id   BigInt
-  name           String
-  token          String    @unique
-  abilities      String?
-  last_used_at   DateTime?
-  expires_at     DateTime?
-  created_at     DateTime?
-  updated_at     DateTime?
-
-  @@index([expires_at])
-  @@index([tokenable_type, tokenable_id])
-}
-
-model sessions {
-  id            String  @id
-  user_id       BigInt?
-  ip_address    String?
-  user_agent    String?
-  payload       String
-  last_activity Int
-
-  @@index([last_activity])
-  @@index([user_id])
-}
-
-model users {
-  id                BigInt    @id @default(autoincrement())
-  uuid              String    @unique
-  name              String
-  email             String    @unique
-  avatar            String?
-  avatar_url        String?
-  email_verified_at DateTime?
-  password          String
-  remember_token    String?
-  created_at        DateTime?
-  updated_at        DateTime?
-
-  user_roles       user_roles[]
-  user_permissions user_permissions[]
-}
-
-model roles {
-  id          BigInt    @id @default(autoincrement())
-  name        String
-  slug        String    @unique
-  description String?
-  created_at  DateTime?
-  updated_at  DateTime?
-
-  user_roles       user_roles[]
-  role_permissions role_permissions[]
-}
-
-model permissions {
-  id          BigInt    @id @default(autoincrement())
-  name        String
-  slug        String    @unique
-  description String?
-  created_at  DateTime?
-  updated_at  DateTime?
-
-  role_permissions role_permissions[]
-  user_permissions user_permissions[]
-}
-
-model user_roles {
-  id         BigInt    @id @default(autoincrement())
-  user_id    BigInt
-  role_id    BigInt
-  created_at DateTime?
-
-  user users @relation(fields: [user_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
-  role roles @relation(fields: [role_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
-
-  @@unique([user_id, role_id])
-}
-
-model role_permissions {
-  id            BigInt    @id @default(autoincrement())
-  role_id       BigInt
-  permission_id BigInt
-  created_at    DateTime?
-
-  role       roles       @relation(fields: [role_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
-  permission permissions @relation(fields: [permission_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
-
-  @@unique([role_id, permission_id])
-}
-
-model user_permissions {
-  id            BigInt    @id @default(autoincrement())
-  user_id       BigInt
-  permission_id BigInt
-  created_at    DateTime?
-
-  user       users       @relation(fields: [user_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
-  permission permissions @relation(fields: [permission_id], references: [id], onDelete: Cascade, onUpdate: NoAction)
-
-  @@unique([user_id, permission_id])
-}

package/src/models/pets.prisma

@@ -1,9 +0,0 @@
-
-model pets {
-  id         BigInt    @id @default(autoincrement())
-  name       String
-  species    String
-  age        Int
-  created_at DateTime?
-  updated_at DateTime?
-}

package/src/routes/auth.ts

@@ -1,74 +0,0 @@
-import { Router } from "express";
-import rateLimit from "express-rate-limit";
-// eslint-disable-next-line @typescript-eslint/no-var-requires
-const multer = require("multer");
-import path from "path";
-import fs from "fs";
-import {
-  register,
-  login,
-  me,
-  logout,
-  refreshToken,
-  updatePassword,
-  updateProfile,
-  updateAvatar,
-} from "@/controllers/authController";
-import { requireAuth } from "@lapeh/middleware/auth";
-
-const authLimiter = rateLimit({
-  windowMs: 15 * 60 * 1000,
-  max: 50,
-  standardHeaders: true,
-  legacyHeaders: false,
-});
-
-const avatarUploadDir = process.env.AVATAR_UPLOAD_DIR || "uploads/avatars";
-if (!fs.existsSync(avatarUploadDir)) {
-  fs.mkdirSync(avatarUploadDir, { recursive: true });
-}
-
-const storage = (multer as any).diskStorage({
-  destination(
-    _req: any,
-    _file: any,
-    cb: (error: Error | null, destination: string) => void
-  ) {
-    cb(null, avatarUploadDir);
-  },
-  filename(
-    _req: any,
-    file: any,
-    cb: (error: Error | null, filename: string) => void
-  ) {
-    const ext = path.extname(file.originalname);
-    const base = path.basename(file.originalname, ext);
-    const unique = Date.now() + "-" + Math.round(Math.random() * 1e9);
-    cb(null, base + "-" + unique + ext);
-  },
-});
-
-const uploadAvatar = multer({ storage });
-
-export const authRouter = Router();
-
-authRouter.post("/register", authLimiter, register);
-
-authRouter.post("/login", authLimiter, login);
-
-authRouter.get("/me", requireAuth, me);
-
-authRouter.post("/logout", requireAuth, logout);
-
-authRouter.post("/refresh", authLimiter, refreshToken);
-
-authRouter.put("/password", requireAuth, updatePassword);
-
-authRouter.put("/profile", requireAuth, updateProfile);
-
-authRouter.post(
-  "/avatar",
-  requireAuth,
-  uploadAvatar.single("avatar"),
-  updateAvatar
-);