Initial version

.cursorrules

@@ -0,0 +1,305 @@
+# Cursor Rules - Group 1: Development Philosophy & Coding Conventions
+1. Overall Architecture & Structure:
+   - Enforce a clear separation of concerns between the backend and the frontend:
+     - **Backend**: Use Express for routing, Passport for authentication, and Swagger for API documentation. Organize code into modules such as routes, services, and helpers.
+       - **Example**:
+         - Routes: `src/routes/auth.js` for authentication routes.
+         - Services: `src/services/auth.js` for authentication logic.
+         - Helpers: `src/helpers/wrapAsync.js` for wrapping asynchronous functions.
+     - **Frontend**: Use Next.js with React and TypeScript. Structure components using functional components, hooks, and layouts.
+       - **Example**:
+         - Pages: `pages/index.tsx` for the main page.
+         - Components: `components/Header.tsx` for the header component.
+         - Layouts: `layouts/MainLayout.tsx` for common page layouts.
+   - Ensure that backend modules and frontend components are organized for reusability and maintainability:
+     - **Backend**: Separate business logic into services and use middleware for common tasks.
+     - **Frontend**: Use reusable components and hooks to manage state and lifecycle.
+
+2. Coding Style & Formatting:
+   - For the backend (JavaScript):
+       • Use ES6+ features (const/let, arrow functions) consistently.
+       • Follow Prettier and ESLint configurations (e.g., consistent 2-space indentation, semicolons, and single quotes).
+       • Maintain clear asynchronous patterns with helper wrappers (e.g., wrapAsync).
+         - **Example from auth.js**:
+           ```javascript
+           router.post('/signin/local', wrapAsync(async (req, res) => {
+             const payload = await AuthService.signin(req.body.email, req.body.password, req);
+             res.status(200).send(payload);
+           }));
+           ```
+      • Document API endpoints with inline Swagger comments to ensure API clarity and consistency.
+         - **Example**:
+           ```javascript
+           /**
+            * @swagger
+            * /api/auth/signin:
+            *   post:
+            *     summary: Sign in a user
+            *     responses:
+            *       200:
+            *         description: Successful login
+            */
+           ```
+   - For the frontend (TypeScript/React):
+       • Use functional components with strict typing and separation of concerns.
+         - **Example**:
+           ```typescript
+           const Button: React.FC<{ onClick: () => void }> = ({ onClick }) => (
+             <button onClick={onClick}>Click me</button>
+           );
+           ```
+       • Follow naming conventions: PascalCase for components and types/interfaces, camelCase for variables, hooks, and function names.
+         - **Example**:
+           ```typescript
+           const useCustomHook = () => {
+             const [state, setState] = useState(false);
+             return [state, setState];
+           };
+           ```
+       • Utilize hooks (useEffect, useState) to manage state and lifecycle in a clear and concise manner.
+         - **Example**:
+           ```typescript
+           useEffect(() => {
+             console.log('Component mounted');
+           }, []);
+           ```
+
+3. Code Quality & Best Practices:
+   - Ensure code modularity by splitting complex logic into smaller, testable units.
+     - **Example**: In `auth.js`, routes are separated from business logic, which is handled in `AuthService`.
+   - Write self-documenting code and add comments where the logic is non-trivial.
+     - **Example**: Use descriptive function and variable names in `auth.js`, and add comments for complex asynchronous operations.
+   - Embrace declarative programming and adhere to SOLID principles.
+     - **Example**: In service functions, ensure each function has a single responsibility and dependencies are injected rather than hardcoded.
+
+4. Consistency & Tools Integration:
+   - Leverage existing tools like Prettier and ESLint to automatically enforce style and formatting rules.
+     - **Example**: Use `.prettierrc` and `.eslintrc.cjs` for configuration in your project.
+   - Use TypeScript in the frontend to ensure type safety and catch errors early.
+     - **Example**: Define interfaces and types in your React components to enforce strict typing.
+   - Maintain uniformity in API design and error handling strategies.
+     - **Example**: Consistently use Passport for authentication and a common error handling middleware in `auth.js`.
+
+## Group 2 – Naming Conventions
+1. File Naming and Structure:
+   • Frontend:
+     - Page Files: Use lower-case filenames (e.g., index.tsx) as prescribed by Next.js conventions.
+       - **Example**: `pages/index.tsx`, `pages/about.tsx`
+     - Component Files: Use PascalCase for React component files (e.g., WebSiteHeader.tsx, NavBar.tsx).
+       - **Example**: `components/Header.tsx`, `components/Footer.tsx`
+     - Directories: Use clear, descriptive names (e.g., 'pages', 'components', 'WebPageComponents').
+       - **Example**: `src/pages`, `src/components`
+   • Backend:
+     - Use lower-case filenames for modules (e.g., index.js, auth.js, projects.js).
+       - **Example**: `routes/auth.js`, `services/user.js`
+     - When needed, use hyphenation for clarity, but maintain consistency.
+       - **Example**: `helpers/wrap-async.js`
+
+2. Component and Module Naming:
+   • Frontend:
+     - React Components: Define components in PascalCase.
+     - TypeScript Interfaces/Types: Use PascalCase (e.g., WebSiteHeaderProps).
+   • Backend:
+     - Classes (if any) and constructors should be in PascalCase; most helper functions and modules use camelCase.
+
+3. Variable, Function, and Hook Naming:
+   • Use camelCase for variables and function names in both frontend and backend.
+     - **Example**:
+       ```javascript
+       const userName = 'John Doe';
+       function handleLogin() { ... }
+       ```
+   • Custom Hooks: Prefix with 'use' (e.g., useAuth, useForm).
+     - **Example**:
+       ```typescript
+       const useAuth = () => {
+         const [isAuthenticated, setIsAuthenticated] = useState(false);
+         return { isAuthenticated, setIsAuthenticated };
+       };
+       ```
+
+4. Consistency and Readability:
+   • Maintain uniform naming across the project to ensure clarity and ease of maintenance.
+     - **Example**: Use consistent naming conventions for variables, functions, and components, such as camelCase for variables and functions, and PascalCase for components.
+     - **Example**: In `auth.js`, ensure that all function names clearly describe their purpose, such as `handleLogin` or `validateUserInput`.
+
+## Group 3 – Frontend & React Best Practices
+1. Use of Functional Components & TypeScript:
+   • Build all components as functional components.
+     - **Example**:
+       ```typescript
+       const Header: React.FC = () => {
+         return <header>Header Content</header>;
+       };
+       ```
+   • Leverage TypeScript for static type checking and enforce strict prop and state types.
+     - **Example**:
+       ```typescript
+       interface ButtonProps {
+         onClick: () => void;
+       }
+       const Button: React.FC<ButtonProps> = ({ onClick }) => (
+         <button onClick={onClick}>Click me</button>
+       );
+       ```
+
+2. Effective Use of React Hooks:
+   • Utilize useState and useEffect appropriately with proper dependency arrays.
+     - **Example**:
+       ```typescript
+       const [count, setCount] = useState(0);
+       useEffect(() => {
+         console.log('Component mounted');
+       }, []);
+       ```
+   • Create custom hooks to encapsulate shared logic (e.g., useAppSelector).
+     - **Example**:
+       ```typescript
+       const useAuth = () => {
+         const [isAuthenticated, setIsAuthenticated] = useState(false);
+         return { isAuthenticated, setIsAuthenticated };
+       };
+       ```
+
+3. Component Composition & Separation of Concerns:
+   • Separate presentational (stateless) components from container components managing logic.
+     - **Example**: Use `LayoutGuest` to encapsulate common page structures.
+
+4. Code Quality & Readability:
+   • Maintain consistent formatting and adhere to Prettier and ESLint rules.
+   • Use descriptive names for variables, functions, and components.
+   • Document non-trivial logic with inline comments and consider implementing error boundaries where needed.
+   • New code must adhere to these conventions to avoid ambiguity.
+   • Use descriptive names that reflect the purpose and domain, avoiding abbreviations unless standard in the project.
+
+## Group 4 – Backend & API Guidelines
+1. API Endpoint Design & Documentation:
+   • Follow RESTful naming conventions; all route handlers should be named clearly and consistently.
+     - **Example**: Use verbs like `GET`, `POST`, `PUT`, `DELETE` to define actions, e.g., `GET /api/auth/me` to retrieve user info.
+   • Document endpoints with Swagger annotations to provide descriptions, expected request bodies, and response codes.
+     - **Example**:
+       ```javascript
+       /**
+        * @swagger
+        * /api/auth/signin:
+        *   post:
+        *     summary: Sign in a user
+        *     requestBody:
+        *       description: User credentials
+        *       content:
+        *         application/json:
+        *           schema:
+        *             $ref: "#/components/schemas/Auth"
+        *     responses:
+        *       200:
+        *         description: Successful login
+        *       400:
+        *         description: Invalid username/password supplied
+        */
+       ```
+   • Examples (for Auth endpoints):
+       - POST /api/auth/signin/local
+           • Description: Logs the user into the system.
+           • Request Body (application/json):
+               { "email": "admin@flatlogic.com", "password": "password" }
+           • Responses:
+               - 200: Successful login (returns token and user data).
+               - 400: Invalid username/password supplied.
+       - GET /api/auth/me
+           • Description: Retrieves current authorized user information.
+           • Secured via Passport JWT; uses req.currentUser.
+           • Responses:
+               - 200: Returns current user info.
+               - 400: Invalid credentials or missing user data.
+       - POST /api/auth/signup
+           • Description: Registers a new user.
+           • Request Body (application/json):
+               { "email": "admin@flatlogic.com", "password": "password" }
+           • Responses:
+               - 200: New user signed up successfully.
+               - 400: Invalid input supplied.
+               - 500: Server error.
+
+## Group 5 – Testing, Quality Assurance & Error Handling
+1. Testing Guidelines:
+   • Write unit tests for critical backend and frontend components using frameworks such as Jest, React Testing Library, and Mocha/Chai.
+     - **Example**:
+       ```javascript
+       test('should return user data', async () => {
+         const user = await getUserData();
+         expect(user).toHaveProperty('email');
+       });
+       ```
+   • Practice test-driven development and maintain high test coverage.
+   • Regularly update tests following changes in business logic.
+
+2. Quality Assurance:
+   • Enforce code quality with ESLint, Prettier, and static analysis tools.
+   • Integrate continuous testing workflows (CI/CD) to catch issues early.
+     - **Example**: Use GitHub Actions for automated testing and deployment.
+   • Ensure documentation is kept up-to-date with the implemented code.
+
+3. Error Handling:
+   • Back-end:
+       - Wrap asynchronous route handlers with a helper (e.g., wrapAsync) to capture errors.
+         - **Example**:
+           ```javascript
+           router.post('/signin', wrapAsync(async (req, res) => {
+             const user = await AuthService.signin(req.body);
+             res.send(user);
+           }));
+           ```
+       - Use centralized error handling middleware (e.g., commonErrorHandler) for uniform error responses.
+   • Front-end:
+       - Implement error boundaries in React to gracefully handle runtime errors.
+       - Display user-friendly error messages and log errors for further analysis.
+
+2. Authentication & Security:
+   • Protect endpoints by using Passport.js with JWT (e.g., passport.authenticate('jwt', { session: false })).
+     - **Example**:
+       ```javascript
+       router.get('/profile', passport.authenticate('jwt', { session: false }), (req, res) => {
+         res.send(req.user);
+       });
+       ```
+   • Ensure that secure routes check for existence of req.currentUser. If absent, return a ForbiddenError.
+
+3. Consistent Error Handling & Middleware Usage:
+   • Wrap asynchronous route handlers with helpers like wrapAsync for error propagation.
+   • Use centralized error handling middleware (e.g., commonErrorHandler) to capture and format errors uniformly.
+
+4. Modular Code Organization:
+   • Organize backend code into separate files for routes, services, and database access (e.g., auth.js, projects.js, tasks.js).
+   • Use descriptive, lowercase filenames for modules and routes.
+
+5. Endpoint Security Best Practices:
+   • Validate input data and sanitize requests where necessary.
+   • Restrict sensitive operations to authenticated users with proper role-based permissions.
+
+
+────────────────────────────────────────
+Group 6 – Accessibility, UI, and Styling Guidelines (Updated)
+────────────────────────────────────────
+1. Sidebar Styling:
+   • The sidebar is implemented in the authenticated layout via the AsideMenu component, with the actual element defined in AsideMenuLayer (located at frontend/src/components/AsideMenuLayer.tsx) as an <aside> element with id="asideMenu".
+     - **Example**:
+       ```css
+       #asideMenu {
+           background-color: #F8F4E1 !important;
+       }
+       ```
+   • When modifying sidebar styles, target #asideMenu and its child elements rather than generic selectors (e.g., avoid .app-sidebar) to ensure that the changes affect the actual rendered sidebar.
+   • Remove or override any conflicting background utilities (such as an unwanted bg-white) so our desired background color (#F8F4E1) is fully visible. Use a highly specific selector if necessary.
+   • Adjust spacing (padding/margins) at both the container (#asideMenu) and the individual menu item level to maintain a consistent, compact design.
+
+2. General Project Styling and Tailwind CSS Usage:
+   • The application leverages Tailwind CSS extensively, with core styling defined in _theme.css using the @apply directive. Any new modifications should follow this pattern to ensure consistency.
+     - **Example**:
+       ```css
+       .btn {
+           @apply bg-blue-500 text-white;
+       }
+       ```
+   • The themed blocks (like .theme-pink and .theme-green) standardize the UI's appearance. When applying custom overrides, ensure they integrate cleanly into these structures and avoid conflicts or circular dependency errors (e.g., issues when redefining utilities such as text-blue-600).
+   • Adjustments via Tailwind CSS generally require modifying class names in the components and ensuring that global overrides are applied in the correct order. Consistent use of design tokens and custom color codes (e.g., #F8F4E1) throughout the app is crucial to a cohesive design.
+   • Specificity is key. If a change isn't visually reflected as expected, inspect the rendered HTML to identify which classes are taking precedence.

.dockerignore

@@ -0,0 +1,3 @@
+backend/node_modules
+frontend/node_modules
+frontend/build

.gitignore

@@ -0,0 +1,6 @@
+/backend/node_modules
+/frontend/node_modules
+node_modules/
+*/node_modules/
+**/node_modules/
+*/build/

502.html

@@ -0,0 +1,187 @@
+<!DOCTYPE html>
+<html lang="en">
+
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Service Starting</title>
+    <style>
+        body {
+            font-family: sans-serif;
+            display: flex;
+            flex-direction: column;
+            justify-content: center;
+            align-items: center;
+            min-height: 100vh;
+            background-color: #EFF2FF;
+            margin: 0;
+            padding: 20px;
+        }
+
+        .container {
+            text-align: center;
+            padding: 30px 40px;
+            background-color: #fff;
+            border-radius: 20px;
+            margin-bottom: 20px;
+            max-width: 538px;
+            width: 100%;
+            box-shadow: 0 13px 34px 0 rgba(167, 187, 242, 0.2);
+            box-sizing: border-box;
+        }
+
+        #status-heading {
+            font-size: 24px;
+            font-weight: 700;
+            color: #02004E;
+            margin-bottom: 20px;
+        }
+
+        h2 {
+            color: #333;
+            margin-bottom: 15px;
+        }
+
+        p {
+            color: #666;
+            font-size: 1.1em;
+            margin-bottom: 10px;
+        }
+
+        .tip {
+            font-weight: 300;
+            font-size: 17px;
+            line-height: 150%;
+            letter-spacing: 0;
+            text-align: center;
+            margin-top: 30px;
+        }
+
+        .loader-container {
+            position: relative;
+            display: flex;
+            justify-content: center;
+            align-items: center;
+        }
+
+        .loader {
+            width: 100px;
+            aspect-ratio: 1;
+            border-radius: 50%;
+            background:
+                radial-gradient(farthest-side, #5C7EF1 94%, #0000) top/8px 8px no-repeat,
+                conic-gradient(#0000 30%, #5C7EF1);
+            -webkit-mask: radial-gradient(farthest-side, #0000 calc(100% - 8px), #000 0);
+            animation: l13 2s infinite linear;
+        }
+
+        @keyframes l13 {
+            100% {
+                transform: rotate(1turn)
+            }
+        }
+
+        .app-logo {
+            position: absolute;
+            width: 36px;
+        }
+
+        .panel {
+            padding: 0 18px;
+            display: none;
+            background-color: white;
+            overflow: hidden;
+            margin-top: 10px;
+        }
+        .show {
+            display: block;
+        }
+
+        .project-info {
+            border: 1px solid #8C9DFF;
+            border-radius: 10px;
+            padding: 12px 16px;
+            max-width: 600px;
+            margin: 40px auto;
+            background-color: #FBFCFF;
+        }
+
+        .project-info h2 {
+            color: #02004E;
+            font-size: 14px;
+            font-weight: 500;
+            margin-bottom: 10px;
+            text-align: left;
+        }
+
+        .project-info p {
+            color: #686791;
+            font-size: 12px;
+            font-weight: 400;
+            text-align: left;
+        }
+    </style>
+</head>
+
+<body>
+    <div class="container">
+        <h2 id="status-heading">Loading the app, just a moment…</h2>
+        <p class="tip">The application is currently launching. The page will automatically refresh once site is
+            available.</p>
+        <div class="project-info">
+            <h2>Tour Builder Platform</h2>
+            <p>Platform to build, preview (stage), and publish offline-ready interactive tours on project subdomains.</p>
+        </div>
+        <div class="loader-container">
+            <img src="https://flatlogic.com/blog/wp-content/uploads/2025/05/logo-bot-1.png" alt="App Logo"
+                class="app-logo">
+            <div class="loader"></div>
+        </div>
+        <div class="panel">
+            <video width="100%" height="315" controls loop>
+                <source
+                    src="https://flatlogic.com/blog/wp-content/uploads/2025/04/20250430_1336_professional_dynamo_spinner_simple_compose_01jt349yvtenxt7xhg8hhr85j8.mp4"
+                    type="video/mp4">
+                Your browser does not support the video tag.
+            </video>
+        </div>
+    </div>
+    <script>
+        function checkAvailability() {
+            fetch('/')
+                .then(response => {
+                    if (response.ok) {
+                        window.location.reload();
+                    } else {
+                        setTimeout(checkAvailability, 5000);
+                    }
+                })
+                .catch(() => {
+                    setTimeout(checkAvailability, 5000);
+                });
+        }
+        document.addEventListener('DOMContentLoaded', checkAvailability);
+
+        document.addEventListener('DOMContentLoaded', function () {
+            const appTitle = document.querySelector('#status-heading');
+            const panel = document.querySelector('.panel');
+            const video = panel.querySelector('video');
+            let clickCount = 0;
+
+            appTitle.addEventListener('click', function () {
+                clickCount++;
+                if (clickCount === 5) {
+                    panel.classList.toggle('show');
+                    if (panel.classList.contains('show')) {
+                        video.play();
+                    } else {
+                        video.pause();
+                    }
+                    clickCount = 0;
+                }
+            });
+        });
+    </script>
+</body>
+
+</html>

Dockerfile

@@ -0,0 +1,21 @@
+FROM node:20.15.1-alpine AS builder
+RUN apk add --no-cache git
+WORKDIR /app
+COPY frontend/package.json frontend/yarn.lock ./
+RUN yarn install --pure-lockfile
+COPY frontend .
+RUN yarn build
+
+
+
+FROM node:20.15.1-alpine
+WORKDIR /app
+COPY backend/package.json backend/yarn.lock ./
+RUN yarn install --pure-lockfile
+COPY backend .
+
+COPY --from=builder /app/build /app/public
+CMD ["yarn", "start"]
+
+
+

Dockerfile.dev

@@ -0,0 +1,85 @@
+# Base image for Node.js dependencies
+FROM node:20.15.1-alpine AS frontend-deps
+RUN apk add --no-cache git
+WORKDIR /app/frontend
+COPY frontend/package.json frontend/yarn.lock ./
+RUN yarn install --pure-lockfile
+
+FROM node:20.15.1-alpine AS backend-deps
+RUN apk add --no-cache git
+WORKDIR /app/backend
+COPY backend/package.json backend/yarn.lock ./
+RUN yarn install --pure-lockfile
+
+FROM node:20.15.1-alpine AS app-shell-deps
+RUN apk add --no-cache git
+WORKDIR /app/app-shell
+COPY app-shell/package.json app-shell/yarn.lock ./
+RUN yarn install --pure-lockfile
+
+# Nginx setup and application build
+FROM node:20.15.1-alpine AS build
+RUN apk add --no-cache git nginx curl
+RUN apk add --no-cache lsof procps
+RUN yarn global add concurrently
+
+RUN apk add --no-cache \
+    chromium \
+    nss \
+    freetype \
+    harfbuzz \
+    ttf-freefont \
+    fontconfig
+
+ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true
+ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser
+
+RUN mkdir -p /app/pids
+
+# Make sure to add yarn global bin to PATH
+ENV PATH /root/.yarn/bin:/root/.config/yarn/global/node_modules/.bin:$PATH
+
+# Copy dependencies
+WORKDIR /app
+COPY --from=frontend-deps /app/frontend /app/frontend
+COPY --from=backend-deps /app/backend /app/backend
+COPY --from=app-shell-deps /app/app-shell /app/app-shell
+
+COPY frontend /app/frontend
+COPY backend /app/backend
+COPY app-shell /app/app-shell
+COPY docker /app/docker
+
+# Copy all files from root to /app
+COPY . /app
+
+# Copy Nginx configuration
+COPY nginx.conf /etc/nginx/nginx.conf
+
+# Copy custom error page
+COPY 502.html /usr/share/nginx/html/502.html
+
+# Change owner and permissions of the error page
+RUN chown nginx:nginx /usr/share/nginx/html/502.html && \
+    chmod 644 /usr/share/nginx/html/502.html
+
+# Expose the port the app runs on
+EXPOSE 8080
+ENV NODE_ENV=dev_stage
+ENV FRONT_PORT=3001
+ENV BACKEND_PORT=3000
+ENV APP_SHELL_PORT=4000
+
+
+CMD ["sh", "-c", "\
+  yarn --cwd /app/frontend dev & echo $! > /app/pids/frontend.pid && \
+  yarn --cwd /app/backend start & echo $! > /app/pids/backend.pid && \
+  sleep 10 && nginx -g 'daemon off;' & \
+  NGINX_PID=$! && \
+  echo 'Waiting for backend (port 3000) to be available...' && \
+  while ! nc -z localhost ${BACKEND_PORT}; do \
+    sleep 2; \
+  done && \
+  echo 'Backend is up. Starting app_shell for Git check...' && \
+  yarn --cwd /app/app-shell start && \
+  wait $NGINX_PID"]

LICENSE

@@ -0,0 +1 @@
+https://flatlogic.com/

README.md

@@ -0,0 +1,244 @@
+
+
+# Tour Builder Platform
+
+
+## This project was generated by [Flatlogic Platform](https://flatlogic.com).
+
+  
+  - Frontend: [React.js](https://flatlogic.com/templates?framework%5B%5D=react&sort=default)
+  
+  
+  
+  
+  
+  
+  
+  
+
+
+  
+  - Backend: [NodeJS](https://flatlogic.com/templates?backend%5B%5D=nodejs&sort=default)
+  
+    <details><summary>Backend Folder Structure</summary>   
+    
+    The generated application has the following backend folder structure: 
+
+    `src` folder which contains your working files that will be used later to create the build. The src folder contains folders as:
+
+      - `auth` - config the library for authentication and authorization;
+
+      - `db` - contains such folders as:
+
+        - `api` - documentation that is automatically generated by jsdoc or other tools;
+
+        - `migrations` - is a skeleton of the database or all the actions that users do with the database;
+
+        - `models`- what will represent the database for the backend;
+
+        - `seeders` -  the entity that creates the data for the database.
+
+      - `routes` - this folder would contain all the routes that you have created using Express Router and what they do would be exported from a Controller file;
+
+      - `services` - contains such folders as `emails` and `notifications`.   
+    </details> 
+  
+  
+  
+  
+  
+
+
+  
+  
+  
+  - Database: PostgreSQL
+  
+
+  - app-shel: Core application framework that provides essential infrastructure services
+for the entire application.
+  -----------------------
+### We offer 2 ways how to start the project locally: by running Frontend and Backend or with Docker.
+-----------------------
+
+## To start the project:
+
+### Backend:
+
+> Please change current folder: `cd backend`
+
+
+
+#### Install local dependencies:
+`yarn install`
+
+  ------------
+
+#### Adjust local db:
+##### 1.  Install postgres:
+
+MacOS:
+
+`brew install postgres`
+
+    > if you don’t have ‘brew‘ please install it (https://brew.sh) and repeat step `brew install postgres`.
+
+Ubuntu:
+
+`sudo apt update`
+
+`sudo apt install postgresql postgresql-contrib`
+
+##### 2. Create db and admin user:
+Before run and test connection, make sure you have created a database as described in the above configuration. You can use the `psql` command to create a user and database.
+
+`psql postgres --u postgres`
+
+Next, type this command for creating a new user with password then give access for creating the database.
+
+`postgres-# CREATE ROLE admin WITH LOGIN PASSWORD 'admin_pass';`
+
+`postgres-# ALTER ROLE admin CREATEDB;`
+
+Quit `psql` then log in again using the new user that previously created.
+
+`postgres-# \q`
+
+`psql postgres -U admin`
+
+Type this command to creating a new database.
+
+`postgres=> CREATE DATABASE db_{your_project_name};`
+
+Then give that new user privileges to the new database then quit the `psql`.
+
+`postgres=> GRANT ALL PRIVILEGES ON DATABASE db_{your_project_name} TO admin;`
+
+`postgres=> \q`
+
+
+
+
+
+  ------------
+
+
+#### Create database:
+`yarn db:create`
+
+#### Start production build:
+`yarn start`
+
+
+
+
+
+### Frontend:
+
+> Please change current folder: `cd frontend`
+
+
+  
+    
+    
+    
+    
+  
+  
+  
+
+
+## To start the project with Docker:
+### Description:
+
+The project contains the **docker folder** and the `Dockerfile`.
+
+The `Dockerfile` is used to Deploy the project to Google Cloud.
+
+The **docker folder** contains a couple of helper scripts:
+
+- `docker-compose.yml` (all our services: web, backend, db are described here)
+- `start-backend.sh` (starts backend, but only after the database)
+- `wait-for-it.sh` (imported from https://github.com/vishnubob/wait-for-it)
+
+    > To avoid breaking the application, we recommend you don't edit the following files: everything that includes the **docker folder** and `Dokerfile`.
+
+## Run services:
+
+1. Install docker compose (https://docs.docker.com/compose/install/)
+
+2. Move to `docker` folder. All next steps should be done from this folder.
+
+   ``` cd docker ```
+
+3. Make executables from `wait-for-it.sh` and `start-backend.sh`:
+
+   ``` chmod +x start-backend.sh && chmod +x wait-for-it.sh ```
+
+4. Download dependend projects for services.
+
+5. Review the docker-compose.yml file. Make sure that all services have Dockerfiles. Only db service doesn't require a Dockerfile.
+
+6. Make sure you have needed ports (see them in `ports`) available on your local machine.
+
+7. Start services:
+
+   7.1. With an empty database `rm -rf data && docker-compose up`
+
+   7.2. With a stored (from previus runs) database data `docker-compose up`
+
+8. Check http://localhost:3000
+
+9. Stop services:
+
+   9.1. Just press `Ctr+C`
+
+## Most common errors:
+
+1. `connection refused`
+
+   There could be many reasons, but the most common are:
+
+  - The port is not open on the destination machine.
+
+  - The port is open on the destination machine, but its backlog of pending connections is full.
+
+  - A firewall between the client and server is blocking access (also check local firewalls).
+
+   After checking for firewalls and that the port is open, use telnet to connect to the IP/port to test connectivity. This removes any potential issues from your application.
+
+   ***MacOS:***
+
+   If you suspect that your SSH service might be down, you can run this command to find out:
+
+   `sudo service ssh status`
+
+   If the command line returns a status of down, then you’ve likely found the reason behind your connectivity error.
+
+   ***Ubuntu:***
+
+   Sometimes a connection refused error can also indicate that there is an IP address conflict on your network. You can search for possible IP conflicts by running:
+
+   `arp-scan -I eth0 -l | grep <ipaddress>`
+
+   `arp-scan -I eth0 -l | grep <ipaddress>`
+
+   and
+
+   `arping <ipaddress>`
+
+2. `yarn db:create` creates database with the assembled tables (on MacOS with Postgres database)
+
+   The workaround - put the next commands to your Postgres database terminal:
+
+   `DROP SCHEMA public CASCADE;`
+
+   `CREATE SCHEMA public;`
+
+   `GRANT ALL ON SCHEMA public TO postgres;`
+
+   `GRANT ALL ON SCHEMA public TO public;`
+
+   Afterwards, continue to start your project in the backend directory by running:
+
+   `yarn start`

backend/.env

@@ -0,0 +1,19 @@
+DB_NAME=app_39215
+DB_USER=app_39215
+DB_PASS=88dbeaf8-e906-405e-9e41-c3baadeda5c6
+DB_HOST=127.0.0.1
+DB_PORT=5432
+PORT=3000
+GOOGLE_CLIENT_ID=671001533244-kf1k1gmp6mnl0r030qmvdu6v36ghmim6.apps.googleusercontent.com
+GOOGLE_CLIENT_SECRET=Yo4qbKZniqvojzUQ60iKlxqR
+MS_CLIENT_ID=4696f457-31af-40de-897c-e00d7d4cff73
+MS_CLIENT_SECRET=m8jzZ.5UpHF3=-dXzyxiZ4e[F8OF54@p
+EMAIL_USER=AKIAVEW7G4PQUBGM52OF
+EMAIL_PASS=BLnD4hKGb6YkSz3gaQrf8fnyLi3C3/EdjOOsLEDTDPTz
+SECRET_KEY=HUEyqESqgQ1yTwzVlO6wprC9Kf1J1xuA
+PEXELS_KEY=Vc99rnmOhHhJAbgGQoKLZtsaIVfkeownoQNbTj78VemUjKh08ZYRbf18
+FILE_STORAGE_PROVIDER=s3
+AWS_ACCESS_KEY_ID=AKIAVEW7G4PQRSJGFW4P
+AWS_SECRET_ACCESS_KEY=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
+AWS_S3_BUCKET=shimahara-visual
+AWS_S3_REGION=us-east-1

backend/.eslintignore

@@ -0,0 +1,4 @@
+# Ignore generated and runtime files
+node_modules/
+tmp/
+logs/

backend/.eslintrc.cjs

@@ -0,0 +1,15 @@
+module.exports = {
+  env: {
+    node: true,
+    es2021: true
+  },
+  extends: [
+    'eslint:recommended'
+  ],
+  plugins: [
+    'import'
+  ],
+  rules: {
+    'import/no-unresolved': 'error'
+  }
+};

backend/.prettierrc

@@ -0,0 +1,11 @@
+{
+  "singleQuote": true,
+  "tabWidth": 2,
+  "printWidth": 80,
+  "trailingComma": "all",
+  "quoteProps": "as-needed",
+  "jsxSingleQuote": true,
+  "bracketSpacing": true,
+  "bracketSameLine": false,
+  "arrowParens": "always"
+}

backend/.sequelizerc

@@ -0,0 +1,7 @@
+const path = require('path');
+module.exports = {
+  "config": path.resolve("src", "db", "db.config.js"),
+  "models-path": path.resolve("src", "db", "models"),
+  "seeders-path": path.resolve("src", "db", "seeders"),
+  "migrations-path": path.resolve("src", "db", "migrations")
+};

backend/Dockerfile

@@ -0,0 +1,23 @@
+FROM node:20.15.1-alpine
+
+RUN apk update && apk add bash
+# Create app directory
+WORKDIR /usr/src/app
+
+# Install app dependencies
+# A wildcard is used to ensure both package.json AND package-lock.json are copied
+# where available (npm@5+)
+COPY package*.json ./
+
+RUN yarn install
+# If you are building your code for production
+# RUN npm ci --only=production
+
+
+# Bundle app source
+COPY . .
+
+
+EXPOSE 8080
+
+CMD [ "yarn", "start" ]

backend/README.md

@@ -0,0 +1,56 @@
+
+#Tour Builder Platform - template backend,
+
+#### Run App on local machine:
+
+##### Install local dependencies:
+- `yarn install`
+
+------------
+
+##### Adjust local db:
+###### 1.  Install postgres:
+ - MacOS:
+   - `brew install postgres`
+
+- Ubuntu:
+  - `sudo apt update`
+  - `sudo apt install postgresql postgresql-contrib`
+
+###### 2. Create db and admin user:
+ - Before run and test connection, make sure you have created a database as described in the above configuration. You can use the `psql` command to create a user and database.
+   - `psql postgres --u postgres`
+
+- Next, type this command for creating a new user with password then give access for creating the database.
+  - `postgres-# CREATE ROLE admin WITH LOGIN PASSWORD 'admin_pass';`
+  - `postgres-# ALTER ROLE admin CREATEDB;`
+
+- Quit `psql` then log in again using the new user that previously created.
+  - `postgres-# \q`
+  - `psql postgres -U admin`
+
+- Type this command to creating a new database.
+  - `postgres=> CREATE DATABASE db_tour_builder_platform;`
+
+- Then give that new user privileges to the new database then quit the `psql`.
+  - `postgres=> GRANT ALL PRIVILEGES ON DATABASE db_tour_builder_platform TO admin;`
+  - `postgres=> \q`
+ 
+------------
+
+#### Api Documentation (Swagger)
+
+http://localhost:8080/api-docs (local host)
+
+http://host_name/api-docs
+
+------------
+
+ ##### Setup database tables or update after schema change
+ - `yarn db:migrate`
+
+ ##### Seed the initial data (admin accounts, relevant for the first setup):
+ - `yarn db:seed`
+ 
+ ##### Start build:
+ - `yarn start`

backend/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "tourbuilderplatform",
+  "description": "Tour Builder Platform - template backend",
+  "scripts": {
+    "start": "npm run db:migrate && npm run db:seed && npm run watch",
+    "lint": "eslint . --ext .js",
+    "db:migrate": "sequelize-cli db:migrate",
+    "db:seed": "sequelize-cli db:seed:all",
+    "db:drop": "sequelize-cli db:drop",
+    "db:create": "sequelize-cli db:create",
+    "watch": "node watcher.js"
+  },
+  "dependencies": {
+    "@aws-sdk/client-s3": "^3.1010.0",
+    "@google-cloud/storage": "^5.18.2",
+    "axios": "^1.6.7",
+    "bcrypt": "5.1.1",
+    "chokidar": "^4.0.3",
+    "cors": "2.8.5",
+    "csv-parser": "^3.0.0",
+    "express": "4.18.2",
+    "formidable": "1.2.2",
+    "helmet": "4.1.1",
+    "json2csv": "^5.0.7",
+    "jsonwebtoken": "8.5.1",
+    "lodash": "4.17.21",
+    "moment": "2.30.1",
+    "multer": "^1.4.4",
+    "mysql2": "2.2.5",
+    "nodemailer": "6.9.9",
+    "passport": "^0.7.0",
+    "passport-google-oauth2": "^0.2.0",
+    "passport-jwt": "^4.0.1",
+    "passport-microsoft": "^0.1.0",
+    "pg": "8.4.1",
+    "pg-hstore": "2.3.4",
+    "sequelize": "6.35.2",
+    "sequelize-json-schema": "^2.1.1",
+    "sqlite": "4.0.15",
+    "swagger-jsdoc": "^6.2.8",
+    "swagger-ui-express": "^5.0.0",
+    "tedious": "^18.2.4"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "private": true,
+  "devDependencies": {
+    "cross-env": "7.0.3",
+    "eslint": "^8.23.1",
+    "eslint-plugin-import": "^2.29.1",
+    "mocha": "8.1.3",
+    "node-mocks-http": "1.9.0",
+    "nodemon": "2.0.5",
+    "sequelize-cli": "6.6.2"
+  }
+}

backend/src/ai/LocalAIApi.js

@@ -0,0 +1,488 @@
+"use strict";
+
+const fs = require("fs");
+const path = require("path");
+const http = require("http");
+const https = require("https");
+const { URL } = require("url");
+
+let CONFIG_CACHE = null;
+
+class LocalAIApi {
+  static createResponse(params, options) {
+    return createResponse(params, options);
+  }
+
+  static request(pathValue, payload, options) {
+    return request(pathValue, payload, options);
+  }
+
+  static fetchStatus(aiRequestId, options) {
+    return fetchStatus(aiRequestId, options);
+  }
+
+  static awaitResponse(aiRequestId, options) {
+    return awaitResponse(aiRequestId, options);
+  }
+
+  static extractText(response) {
+    return extractText(response);
+  }
+
+  static decodeJsonFromResponse(response) {
+    return decodeJsonFromResponse(response);
+  }
+}
+
+async function createResponse(params, options = {}) {
+  const payload = { ...(params || {}) };
+
+  if (!Array.isArray(payload.input) || payload.input.length === 0) {
+    return {
+      success: false,
+      error: "input_missing",
+      message: 'Parameter "input" is required and must be a non-empty array.',
+    };
+  }
+
+  const cfg = config();
+  if (!payload.model) {
+    payload.model = cfg.defaultModel;
+  }
+
+  const initial = await request(options.path, payload, options);
+  if (!initial.success) {
+    return initial;
+  }
+
+  const data = initial.data;
+  if (data && typeof data === "object" && data.ai_request_id) {
+    const pollTimeout = Number(options.poll_timeout ?? 300);
+    const pollInterval = Number(options.poll_interval ?? 5);
+    return await awaitResponse(data.ai_request_id, {
+      interval: pollInterval,
+      timeout: pollTimeout,
+      headers: options.headers,
+      timeout_per_call: options.timeout,
+      verify_tls: options.verify_tls,
+    });
+  }
+
+  return initial;
+}
+
+async function request(pathValue, payload = {}, options = {}) {
+  const cfg = config();
+  const resolvedPath = pathValue || options.path || cfg.responsesPath;
+
+  if (!resolvedPath) {
+    return {
+      success: false,
+      error: "project_id_missing",
+      message: "PROJECT_ID is not defined; cannot resolve AI proxy endpoint.",
+    };
+  }
+
+  if (!cfg.projectUuid) {
+    return {
+      success: false,
+      error: "project_uuid_missing",
+      message: "PROJECT_UUID is not defined; aborting AI request.",
+    };
+  }
+
+  const bodyPayload = { ...(payload || {}) };
+  if (!bodyPayload.project_uuid) {
+    bodyPayload.project_uuid = cfg.projectUuid;
+  }
+
+  const url = buildUrl(resolvedPath, cfg.baseUrl);
+  const timeout = resolveTimeout(options.timeout, cfg.timeout);
+  const verifyTls = resolveVerifyTls(options.verify_tls, cfg.verifyTls);
+
+  const headers = {
+    Accept: "application/json",
+    "Content-Type": "application/json",
+    [cfg.projectHeader]: cfg.projectUuid,
+  };
+  if (Array.isArray(options.headers)) {
+    for (const header of options.headers) {
+      if (typeof header === "string" && header.includes(":")) {
+        const [name, value] = header.split(":", 2);
+        headers[name.trim()] = value.trim();
+      }
+    }
+  }
+
+  const body = JSON.stringify(bodyPayload);
+  return sendRequest(url, "POST", body, headers, timeout, verifyTls);
+}
+
+async function fetchStatus(aiRequestId, options = {}) {
+  const cfg = config();
+  if (!cfg.projectUuid) {
+    return {
+      success: false,
+      error: "project_uuid_missing",
+      message: "PROJECT_UUID is not defined; aborting status check.",
+    };
+  }
+
+  const statusPath = resolveStatusPath(aiRequestId, cfg);
+  const url = buildUrl(statusPath, cfg.baseUrl);
+  const timeout = resolveTimeout(options.timeout, cfg.timeout);
+  const verifyTls = resolveVerifyTls(options.verify_tls, cfg.verifyTls);
+
+  const headers = {
+    Accept: "application/json",
+    [cfg.projectHeader]: cfg.projectUuid,
+  };
+  if (Array.isArray(options.headers)) {
+    for (const header of options.headers) {
+      if (typeof header === "string" && header.includes(":")) {
+        const [name, value] = header.split(":", 2);
+        headers[name.trim()] = value.trim();
+      }
+    }
+  }
+
+  return sendRequest(url, "GET", null, headers, timeout, verifyTls);
+}
+
+async function awaitResponse(aiRequestId, options = {}) {
+  const timeout = Number(options.timeout ?? 300);
+  const interval = Math.max(Number(options.interval ?? 5), 1);
+  const deadline = Date.now() + Math.max(timeout, interval) * 1000;
+
+  let isPending = true;
+
+  while (isPending) {
+    const statusResp = await fetchStatus(aiRequestId, {
+      headers: options.headers,
+      timeout: options.timeout_per_call,
+      verify_tls: options.verify_tls,
+    });
+
+    if (statusResp.success) {
+      const data = statusResp.data || {};
+      if (data && typeof data === "object") {
+        if (data.status === "success") {
+          isPending = false;
+          return {
+            success: true,
+            status: 200,
+            data: data.response || data,
+          };
+        }
+        if (data.status === "failed") {
+          isPending = false;
+          return {
+            success: false,
+            status: 500,
+            error: String(data.error || "AI request failed"),
+            data,
+          };
+        }
+      }
+    } else {
+      return statusResp;
+    }
+
+    if (Date.now() >= deadline) {
+      return {
+        success: false,
+        error: "timeout",
+        message: "Timed out waiting for AI response.",
+      };
+    }
+
+    await sleep(interval * 1000);
+  }
+}
+
+function extractText(response) {
+  const payload = response && typeof response === "object" ? response.data || response : null;
+  if (!payload || typeof payload !== "object") {
+    return "";
+  }
+
+  if (Array.isArray(payload.output)) {
+    let combined = "";
+    for (const item of payload.output) {
+      if (!item || !Array.isArray(item.content)) {
+        continue;
+      }
+      for (const block of item.content) {
+        if (
+          block &&
+          typeof block === "object" &&
+          block.type === "output_text" &&
+          typeof block.text === "string" &&
+          block.text.length > 0
+        ) {
+          combined += block.text;
+        }
+      }
+    }
+    if (combined) {
+      return combined;
+    }
+  }
+
+  if (
+    payload.choices &&
+    payload.choices[0] &&
+    payload.choices[0].message &&
+    typeof payload.choices[0].message.content === "string"
+  ) {
+    return payload.choices[0].message.content;
+  }
+
+  return "";
+}
+
+function decodeJsonFromResponse(response) {
+  const text = extractText(response);
+  if (!text) {
+    throw new Error("No text found in AI response.");
+  }
+
+  const parsed = parseJson(text);
+  if (parsed.ok && parsed.value && typeof parsed.value === "object") {
+    return parsed.value;
+  }
+
+  const stripped = stripJsonFence(text);
+  if (stripped !== text) {
+    const parsedStripped = parseJson(stripped);
+    if (parsedStripped.ok && parsedStripped.value && typeof parsedStripped.value === "object") {
+      return parsedStripped.value;
+    }
+    throw new Error(`JSON parse failed after stripping fences: ${parsedStripped.error}`);
+  }
+
+  throw new Error(`JSON parse failed: ${parsed.error}`);
+}
+
+function config() {
+  if (CONFIG_CACHE) {
+    return CONFIG_CACHE;
+  }
+
+  ensureEnvLoaded();
+
+  const baseUrl = process.env.AI_PROXY_BASE_URL || "https://flatlogic.com";
+  const projectId = process.env.PROJECT_ID || null;
+  let responsesPath = process.env.AI_RESPONSES_PATH || null;
+  if (!responsesPath && projectId) {
+    responsesPath = `/projects/${projectId}/ai-request`;
+  }
+
+  const timeout = resolveTimeout(process.env.AI_TIMEOUT, 30);
+  const verifyTls = resolveVerifyTls(process.env.AI_VERIFY_TLS, true);
+
+  CONFIG_CACHE = {
+    baseUrl,
+    responsesPath,
+    projectId,
+    projectUuid: process.env.PROJECT_UUID || null,
+    projectHeader: process.env.AI_PROJECT_HEADER || "project-uuid",
+    defaultModel: process.env.AI_DEFAULT_MODEL || "gpt-5-mini",
+    timeout,
+    verifyTls,
+  };
+
+  return CONFIG_CACHE;
+}
+
+function buildUrl(pathValue, baseUrl) {
+  const trimmed = String(pathValue || "").trim();
+  if (trimmed === "") {
+    return baseUrl;
+  }
+  if (trimmed.startsWith("http://") || trimmed.startsWith("https://")) {
+    return trimmed;
+  }
+  if (trimmed.startsWith("/")) {
+    return `${baseUrl}${trimmed}`;
+  }
+  return `${baseUrl}/${trimmed}`;
+}
+
+function resolveStatusPath(aiRequestId, cfg) {
+  const basePath = (cfg.responsesPath || "").replace(/\/+$/, "");
+  if (!basePath) {
+    return `/ai-request/${encodeURIComponent(String(aiRequestId))}/status`;
+  }
+  const normalized = basePath.endsWith("/ai-request") ? basePath : `${basePath}/ai-request`;
+  return `${normalized}/${encodeURIComponent(String(aiRequestId))}/status`;
+}
+
+function sendRequest(urlString, method, body, headers, timeoutSeconds, verifyTls) {
+  return new Promise((resolve) => {
+    let targetUrl;
+    try {
+      targetUrl = new URL(urlString);
+    } catch (err) {
+      resolve({
+        success: false,
+        error: "invalid_url",
+        message: err.message,
+      });
+      return;
+    }
+
+    const isHttps = targetUrl.protocol === "https:";
+    const requestFn = isHttps ? https.request : http.request;
+    const options = {
+      protocol: targetUrl.protocol,
+      hostname: targetUrl.hostname,
+      port: targetUrl.port || (isHttps ? 443 : 80),
+      path: `${targetUrl.pathname}${targetUrl.search}`,
+      method: method.toUpperCase(),
+      headers,
+      timeout: Math.max(Number(timeoutSeconds || 30), 1) * 1000,
+    };
+    if (isHttps) {
+      options.rejectUnauthorized = Boolean(verifyTls);
+    }
+
+    const req = requestFn(options, (res) => {
+      let responseBody = "";
+      res.setEncoding("utf8");
+      res.on("data", (chunk) => {
+        responseBody += chunk;
+      });
+      res.on("end", () => {
+        const status = res.statusCode || 0;
+        const parsed = parseJson(responseBody);
+        const payload = parsed.ok ? parsed.value : responseBody;
+
+        if (status >= 200 && status < 300) {
+          const result = {
+            success: true,
+            status,
+            data: payload,
+          };
+          if (!parsed.ok) {
+            result.json_error = parsed.error;
+          }
+          resolve(result);
+          return;
+        }
+
+        const errorMessage =
+          parsed.ok && payload && typeof payload === "object"
+            ? String(payload.error || payload.message || "AI proxy request failed")
+            : String(responseBody || "AI proxy request failed");
+
+        resolve({
+          success: false,
+          status,
+          error: errorMessage,
+          response: payload,
+          json_error: parsed.ok ? undefined : parsed.error,
+        });
+      });
+    });
+
+    req.on("timeout", () => {
+      req.destroy(new Error("request_timeout"));
+    });
+
+    req.on("error", (err) => {
+      resolve({
+        success: false,
+        error: "request_failed",
+        message: err.message,
+      });
+    });
+
+    if (body) {
+      req.write(body);
+    }
+    req.end();
+  });
+}
+
+function parseJson(value) {
+  if (typeof value !== "string" || value.trim() === "") {
+    return { ok: false, error: "empty_response" };
+  }
+  try {
+    return { ok: true, value: JSON.parse(value) };
+  } catch (err) {
+    return { ok: false, error: err.message };
+  }
+}
+
+function stripJsonFence(text) {
+  const trimmed = text.trim();
+  if (trimmed.startsWith("```json")) {
+    return trimmed.replace(/^```json/, "").replace(/```$/, "").trim();
+  }
+  if (trimmed.startsWith("```")) {
+    return trimmed.replace(/^```/, "").replace(/```$/, "").trim();
+  }
+  return text;
+}
+
+function resolveTimeout(value, fallback) {
+  const parsed = Number.parseInt(String(value ?? fallback), 10);
+  return Number.isNaN(parsed) ? Number(fallback) : parsed;
+}
+
+function resolveVerifyTls(value, fallback) {
+  if (value === undefined || value === null) {
+    return Boolean(fallback);
+  }
+  return String(value).toLowerCase() !== "false" && String(value) !== "0";
+}
+
+function ensureEnvLoaded() {
+  if (process.env.PROJECT_UUID && process.env.PROJECT_ID) {
+    return;
+  }
+
+  const envPath = path.resolve(__dirname, "../../../../.env");
+  if (!fs.existsSync(envPath)) {
+    return;
+  }
+
+  let content;
+  try {
+    content = fs.readFileSync(envPath, "utf8");
+  } catch (err) {
+    throw new Error(`Failed to read executor .env: ${err.message}`);
+  }
+
+  for (const line of content.split(/\r?\n/)) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#") || !trimmed.includes("=")) {
+      continue;
+    }
+    const [rawKey, ...rest] = trimmed.split("=");
+    const key = rawKey.trim();
+    if (!key) {
+      continue;
+    }
+    const value = rest.join("=").trim().replace(/^['"]|['"]$/g, "");
+    if (!process.env[key]) {
+      process.env[key] = value;
+    }
+  }
+}
+
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+module.exports = {
+  LocalAIApi,
+  createResponse,
+  request,
+  fetchStatus,
+  awaitResponse,
+  extractText,
+  decodeJsonFromResponse,
+};

backend/src/auth/auth.js

@@ -0,0 +1,68 @@
+const config = require('../config');
+const providers = config.providers;
+const helpers = require('../helpers');
+const db = require('../db/models');
+
+const passport = require('passport');
+const JWTstrategy = require('passport-jwt').Strategy;
+const ExtractJWT = require('passport-jwt').ExtractJwt;
+const GoogleStrategy = require('passport-google-oauth2').Strategy;
+const MicrosoftStrategy = require('passport-microsoft').Strategy;
+const UsersDBApi = require('../db/api/users');
+
+
+passport.use(new JWTstrategy({
+  passReqToCallback: true,
+  secretOrKey: config.secret_key,
+  jwtFromRequest: ExtractJWT.fromAuthHeaderAsBearerToken()
+}, async (req, token, done) => {
+  try {
+    const user = await UsersDBApi.findBy( {email: token.user.email});
+
+    if (user && user.disabled) {
+      return done (new Error(`User '${user.email}' is disabled`));
+    }
+
+    req.currentUser = user;
+
+    return done(null, user);
+  } catch (error) {
+    done(error);
+  }
+}));
+
+passport.use(new GoogleStrategy({
+    clientID: config.google.clientId,
+    clientSecret: config.google.clientSecret,
+    callbackURL: config.apiUrl + '/auth/signin/google/callback',
+    passReqToCallback: true
+  },
+  function (request, accessToken, refreshToken, profile, done) {
+    socialStrategy(profile.email, profile, providers.GOOGLE, done);
+  }
+));
+
+
+passport.use(new MicrosoftStrategy({
+    clientID: config.microsoft.clientId,
+    clientSecret: config.microsoft.clientSecret,
+    callbackURL: config.apiUrl + '/auth/signin/microsoft/callback',
+    passReqToCallback: true
+  },
+  function (request, accessToken, refreshToken, profile, done) {
+    const email = profile._json.mail || profile._json.userPrincipalName;
+    socialStrategy(email, profile, providers.MICROSOFT, done);
+  }
+));
+
+function socialStrategy(email, profile, provider, done) {
+  db.users.findOrCreate({where: {email, provider}}).then(([user]) => {
+    const body = {
+      id: user.id,
+      email: user.email,
+      name: profile.displayName,
+    };
+    const token = helpers.jwtSign({user: body});
+    return done(null, {token});
+  });
+}

backend/src/config.js

@@ -0,0 +1,116 @@
+
+
+const os = require('os');
+const fs = require('fs');
+const path = require('path');
+
+const envFilePath = path.resolve(__dirname, '../.env');
+
+if (fs.existsSync(envFilePath)) {
+  const envContent = fs.readFileSync(envFilePath, 'utf8');
+  envContent.split('\n').forEach((line) => {
+    const trimmedLine = line.trim();
+
+    if (!trimmedLine || trimmedLine.startsWith('#')) {
+      return;
+    }
+
+    const delimiterIndex = trimmedLine.indexOf('=');
+
+    if (delimiterIndex === -1) {
+      return;
+    }
+
+    const key = trimmedLine.slice(0, delimiterIndex).trim();
+    const rawValue = trimmedLine.slice(delimiterIndex + 1).trim();
+
+    if (!key || Object.prototype.hasOwnProperty.call(process.env, key)) {
+      return;
+    }
+
+    const unquotedValue = rawValue.replace(/^['"]|['"]$/g, '');
+    process.env[key] = unquotedValue;
+  });
+}
+
+const config = {
+  gcloud: {
+    bucket: "fldemo-files",
+    hash: "afeefb9d49f5b7977577876b99532ac7"
+  },
+  s3: {
+    bucket: process.env.AWS_S3_BUCKET || '',
+    region: process.env.AWS_S3_REGION || 'us-east-1',
+    accessKeyId: process.env.AWS_ACCESS_KEY_ID || '',
+    secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY || '',
+    prefix: process.env.AWS_S3_PREFIX || 'afeefb9d49f5b7977577876b99532ac7',
+  },
+  bcrypt: {
+    saltRounds: 12
+  },
+  admin_pass: "88dbeaf8",
+  user_pass: "c3baadeda5c6",
+  admin_email: "admin@flatlogic.com",
+  providers: {
+    LOCAL: 'local',
+    GOOGLE: 'google',
+    MICROSOFT: 'microsoft'
+  },
+  secret_key: process.env.SECRET_KEY || '88dbeaf8-e906-405e-9e41-c3baadeda5c6',
+  remote: '',
+  port: process.env.NODE_ENV === "production" ? "" : "8080",
+  hostUI: process.env.NODE_ENV === "production" ? "" : "http://localhost",
+  portUI: process.env.NODE_ENV === "production" ? "" : "3000",
+
+  portUIProd: process.env.NODE_ENV === "production" ? "" : ":3000",
+
+  swaggerUI: process.env.NODE_ENV === "production" ? "" : "http://localhost",
+  swaggerPort: process.env.NODE_ENV === "production" ? "" : ":8080",
+  google: {
+    clientId: process.env.GOOGLE_CLIENT_ID || '',
+    clientSecret: process.env.GOOGLE_CLIENT_SECRET || '',
+  },
+  microsoft: {
+      clientId: process.env.MS_CLIENT_ID || '',
+      clientSecret: process.env.MS_CLIENT_SECRET || '',
+  },
+  uploadDir: os.tmpdir(),
+  email: {
+    from: 'Tour Builder Platform <app@flatlogic.app>',
+    host: 'email-smtp.us-east-1.amazonaws.com',
+    port: 587,
+    auth: {
+      user: process.env.EMAIL_USER || '',
+      pass: process.env.EMAIL_PASS,
+    },
+    tls: {
+      rejectUnauthorized: process.env.EMAIL_TLS_REJECT_UNAUTHORIZED !== 'false',
+    }
+  },
+  roles: {
+
+    admin: 'Administrator',
+
+
+  
+  user: 'Analytics Viewer',
+
+  },
+
+  project_uuid: '88dbeaf8-e906-405e-9e41-c3baadeda5c6',
+  flHost: process.env.NODE_ENV === 'production' || process.env.NODE_ENV === 'dev_stage' ? 'https://flatlogic.com/projects' : 'http://localhost:3000/projects',
+
+
+  gpt_key: process.env.GPT_KEY || '',
+};
+
+config.pexelsKey = process.env.PEXELS_KEY || '';
+
+config.pexelsQuery = 'Architect drafting blueprint';
+config.host = process.env.NODE_ENV === "production" ? config.remote : "http://localhost";
+config.apiUrl = `${config.host}${config.port ? `:${config.port}` : ``}/api`;
+config.swaggerUrl = `${config.swaggerUI}${config.swaggerPort}`;
+config.uiUrl = `${config.hostUI}${config.portUI ? `:${config.portUI}` : ``}/#`;
+config.backUrl = `${config.hostUI}${config.portUI ? `:${config.portUI}` : ``}`;
+
+module.exports = config;

backend/src/db/api/access_logs.js

@@ -0,0 +1,514 @@
+
+const db = require('../models');
+const Utils = require('../utils');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class Access_logsDBApi {
+    
+
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const access_logs = await db.access_logs.create(
+            {
+                id: data.id || undefined,
+        
+        environment: data.environment
+        ||
+        null
+            ,
+            
+        path: data.path
+        ||
+        null
+            ,
+            
+        ip_address: data.ip_address
+        ||
+        null
+            ,
+            
+        user_agent: data.user_agent
+        ||
+        null
+            ,
+            
+        accessed_at: data.accessed_at
+        ||
+        null
+            ,
+            
+            importHash: data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+        await access_logs.setProject( data.project || null, {
+            transaction,
+        });
+        
+        await access_logs.setUser( data.user || null, {
+            transaction,
+        });
+        
+
+        
+
+        
+
+        return access_logs;
+    }
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const access_logsData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                environment: item.environment
+            ||
+            null
+            ,
+            
+                path: item.path
+            ||
+            null
+            ,
+            
+                ip_address: item.ip_address
+            ||
+            null
+            ,
+            
+                user_agent: item.user_agent
+            ||
+            null
+            ,
+            
+                accessed_at: item.accessed_at
+            ||
+            null
+            ,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const access_logs = await db.access_logs.bulkCreate(access_logsData, { transaction });
+
+        // For each item created, replace relation files
+        
+
+        return access_logs;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const access_logs = await db.access_logs.findByPk(id, {transaction});
+
+
+        
+
+        const updatePayload = {};
+        
+        if (data.environment !== undefined) updatePayload.environment = data.environment;
+        
+        
+        if (data.path !== undefined) updatePayload.path = data.path;
+        
+        
+        if (data.ip_address !== undefined) updatePayload.ip_address = data.ip_address;
+        
+        
+        if (data.user_agent !== undefined) updatePayload.user_agent = data.user_agent;
+        
+        
+        if (data.accessed_at !== undefined) updatePayload.accessed_at = data.accessed_at;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await access_logs.update(updatePayload, {transaction});
+
+        
+        
+        if (data.project !== undefined) {
+            await access_logs.setProject(
+              
+              data.project,
+              
+              { transaction }
+            );
+        }
+        
+        if (data.user !== undefined) {
+            await access_logs.setUser(
+              
+              data.user,
+              
+              { transaction }
+            );
+        }
+        
+
+        
+        
+
+        
+
+        return access_logs;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const access_logs = await db.access_logs.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of access_logs) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of access_logs) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return access_logs;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const access_logs = await db.access_logs.findByPk(id, options);
+
+        await access_logs.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await access_logs.destroy({
+            transaction
+        });
+
+        return access_logs;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+
+        const access_logs = await db.access_logs.findOne({
+            where,
+            transaction,
+        });
+
+        if (!access_logs) {
+            return access_logs;
+        }
+
+        const output = access_logs.get({plain: true});
+
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        output.project = await access_logs.getProject({
+            transaction
+        });
+        
+        
+        output.user = await access_logs.getUser({
+            transaction
+        });
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+      {
+        model: db.projects,
+        as: 'project',
+        
+        where: filter.project ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.project.split('|').map(term => Utils.uuid(term)) } },
+            {
+              name: {
+                [Op.or]: filter.project.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+      {
+        model: db.users,
+        as: 'user',
+        
+        where: filter.user ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.user.split('|').map(term => Utils.uuid(term)) } },
+            {
+              firstName: {
+                [Op.or]: filter.user.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+
+
+    ];
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+            if (filter.path) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'access_logs',
+                        'path',
+                        filter.path,
+                    ),
+                };
+            }
+            
+            if (filter.ip_address) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'access_logs',
+                        'ip_address',
+                        filter.ip_address,
+                    ),
+                };
+            }
+            
+            if (filter.user_agent) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'access_logs',
+                        'user_agent',
+                        filter.user_agent,
+                    ),
+                };
+            }
+            
+
+            
+            
+
+            
+            if (filter.accessed_atRange) {
+                const [start, end] = filter.accessed_atRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    accessed_at: {
+                    ...where.accessed_at,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    accessed_at: {
+                    ...where.accessed_at,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+            if (filter.environment) {
+                where = {
+                    ...where,
+                environment: filter.environment,
+            };
+            }
+            
+
+
+      
+
+      
+
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.access_logs.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'access_logs',
+                        'path',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.access_logs.findAll({
+            attributes: [ 'id', 'path' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['path', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.path,
+        }));
+    }
+
+    
+};

backend/src/db/api/asset_variants.js

@@ -0,0 +1,503 @@
+
+const db = require('../models');
+const Utils = require('../utils');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class Asset_variantsDBApi {
+    
+
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const asset_variants = await db.asset_variants.create(
+            {
+                id: data.id || undefined,
+        
+        variant_type: data.variant_type
+        ||
+        null
+            ,
+            
+        cdn_url: data.cdn_url
+        ||
+        null
+            ,
+            
+        width_px: data.width_px
+        ||
+        null
+            ,
+            
+        height_px: data.height_px
+        ||
+        null
+            ,
+            
+        size_mb: data.size_mb
+        ||
+        null
+            ,
+            
+            importHash: data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+        await asset_variants.setAsset( data.asset || null, {
+            transaction,
+        });
+        
+
+        
+
+        
+
+        return asset_variants;
+    }
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const asset_variantsData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                variant_type: item.variant_type
+            ||
+            null
+            ,
+            
+                cdn_url: item.cdn_url
+            ||
+            null
+            ,
+            
+                width_px: item.width_px
+            ||
+            null
+            ,
+            
+                height_px: item.height_px
+            ||
+            null
+            ,
+            
+                size_mb: item.size_mb
+            ||
+            null
+            ,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const asset_variants = await db.asset_variants.bulkCreate(asset_variantsData, { transaction });
+
+        // For each item created, replace relation files
+        
+
+        return asset_variants;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const asset_variants = await db.asset_variants.findByPk(id, {transaction});
+
+
+        
+
+        const updatePayload = {};
+        
+        if (data.variant_type !== undefined) updatePayload.variant_type = data.variant_type;
+        
+        
+        if (data.cdn_url !== undefined) updatePayload.cdn_url = data.cdn_url;
+        
+        
+        if (data.width_px !== undefined) updatePayload.width_px = data.width_px;
+        
+        
+        if (data.height_px !== undefined) updatePayload.height_px = data.height_px;
+        
+        
+        if (data.size_mb !== undefined) updatePayload.size_mb = data.size_mb;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await asset_variants.update(updatePayload, {transaction});
+
+        
+        
+        if (data.asset !== undefined) {
+            await asset_variants.setAsset(
+              
+              data.asset,
+              
+              { transaction }
+            );
+        }
+        
+
+        
+        
+
+        
+
+        return asset_variants;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const asset_variants = await db.asset_variants.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of asset_variants) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of asset_variants) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return asset_variants;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const asset_variants = await db.asset_variants.findByPk(id, options);
+
+        await asset_variants.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await asset_variants.destroy({
+            transaction
+        });
+
+        return asset_variants;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+
+        const asset_variants = await db.asset_variants.findOne({
+            where,
+            transaction,
+        });
+
+        if (!asset_variants) {
+            return asset_variants;
+        }
+
+        const output = asset_variants.get({plain: true});
+
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        output.asset = await asset_variants.getAsset({
+            transaction
+        });
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+      {
+        model: db.assets,
+        as: 'asset',
+        
+        where: filter.asset ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.asset.split('|').map(term => Utils.uuid(term)) } },
+            {
+              name: {
+                [Op.or]: filter.asset.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+
+
+    ];
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+            if (filter.cdn_url) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'asset_variants',
+                        'cdn_url',
+                        filter.cdn_url,
+                    ),
+                };
+            }
+            
+
+            
+            
+
+            
+            if (filter.width_pxRange) {
+                const [start, end] = filter.width_pxRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    width_px: {
+                    ...where.width_px,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    width_px: {
+                    ...where.width_px,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.height_pxRange) {
+                const [start, end] = filter.height_pxRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    height_px: {
+                    ...where.height_px,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    height_px: {
+                    ...where.height_px,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.size_mbRange) {
+                const [start, end] = filter.size_mbRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    size_mb: {
+                    ...where.size_mb,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    size_mb: {
+                    ...where.size_mb,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+            if (filter.variant_type) {
+                where = {
+                    ...where,
+                variant_type: filter.variant_type,
+            };
+            }
+            
+
+
+      
+
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.asset_variants.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'asset_variants',
+                        'variant_type',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.asset_variants.findAll({
+            attributes: [ 'id', 'variant_type' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['variant_type', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.variant_type,
+        }));
+    }
+
+    
+};

backend/src/db/api/assets.js

@@ -0,0 +1,721 @@
+
+const db = require('../models');
+const Utils = require('../utils');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class AssetsDBApi {
+    
+
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const assets = await db.assets.create(
+            {
+                id: data.id || undefined,
+        
+        name: data.name
+        ||
+        null
+            ,
+            
+        asset_type: data.asset_type
+        ||
+        null
+            ,
+            
+        cdn_url: data.cdn_url
+        ||
+        null
+            ,
+            
+        storage_key: data.storage_key
+        ||
+        null
+            ,
+            
+        mime_type: data.mime_type
+        ||
+        null
+            ,
+            
+        size_mb: data.size_mb
+        ||
+        null
+            ,
+            
+        width_px: data.width_px
+        ||
+        null
+            ,
+            
+        height_px: data.height_px
+        ||
+        null
+            ,
+            
+        duration_sec: data.duration_sec
+        ||
+        null
+            ,
+            
+        checksum: data.checksum
+        ||
+        null
+            ,
+            
+        is_public: data.is_public
+        ||
+        false
+        
+            ,
+            
+        is_deleted: data.is_deleted
+        ||
+        false
+        
+            ,
+            
+        deleted_at_time: data.deleted_at_time
+        ||
+        null
+            ,
+            
+            importHash: data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+        await assets.setProject( data.project || null, {
+            transaction,
+        });
+        
+
+        
+
+        
+
+        return assets;
+    }
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const assetsData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                name: item.name
+            ||
+            null
+            ,
+            
+                asset_type: item.asset_type
+            ||
+            null
+            ,
+            
+                cdn_url: item.cdn_url
+            ||
+            null
+            ,
+            
+                storage_key: item.storage_key
+            ||
+            null
+            ,
+            
+                mime_type: item.mime_type
+            ||
+            null
+            ,
+            
+                size_mb: item.size_mb
+            ||
+            null
+            ,
+            
+                width_px: item.width_px
+            ||
+            null
+            ,
+            
+                height_px: item.height_px
+            ||
+            null
+            ,
+            
+                duration_sec: item.duration_sec
+            ||
+            null
+            ,
+            
+                checksum: item.checksum
+            ||
+            null
+            ,
+            
+                is_public: item.is_public
+            ||
+            false
+        
+            ,
+            
+                is_deleted: item.is_deleted
+            ||
+            false
+        
+            ,
+            
+                deleted_at_time: item.deleted_at_time
+            ||
+            null
+            ,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const assets = await db.assets.bulkCreate(assetsData, { transaction });
+
+        // For each item created, replace relation files
+        
+
+        return assets;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const assets = await db.assets.findByPk(id, {transaction});
+
+
+        
+
+        const updatePayload = {};
+        
+        if (data.name !== undefined) updatePayload.name = data.name;
+        
+        
+        if (data.asset_type !== undefined) updatePayload.asset_type = data.asset_type;
+        
+        
+        if (data.cdn_url !== undefined) updatePayload.cdn_url = data.cdn_url;
+        
+        
+        if (data.storage_key !== undefined) updatePayload.storage_key = data.storage_key;
+        
+        
+        if (data.mime_type !== undefined) updatePayload.mime_type = data.mime_type;
+        
+        
+        if (data.size_mb !== undefined) updatePayload.size_mb = data.size_mb;
+        
+        
+        if (data.width_px !== undefined) updatePayload.width_px = data.width_px;
+        
+        
+        if (data.height_px !== undefined) updatePayload.height_px = data.height_px;
+        
+        
+        if (data.duration_sec !== undefined) updatePayload.duration_sec = data.duration_sec;
+        
+        
+        if (data.checksum !== undefined) updatePayload.checksum = data.checksum;
+        
+        
+        if (data.is_public !== undefined) updatePayload.is_public = data.is_public;
+        
+        
+        if (data.is_deleted !== undefined) updatePayload.is_deleted = data.is_deleted;
+        
+        
+        if (data.deleted_at_time !== undefined) updatePayload.deleted_at_time = data.deleted_at_time;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await assets.update(updatePayload, {transaction});
+
+        
+        
+        if (data.project !== undefined) {
+            await assets.setProject(
+              
+              data.project,
+              
+              { transaction }
+            );
+        }
+        
+
+        
+        
+
+        
+
+        return assets;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const assets = await db.assets.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of assets) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of assets) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return assets;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const assets = await db.assets.findByPk(id, options);
+
+        await assets.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await assets.destroy({
+            transaction
+        });
+
+        return assets;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+
+        const assets = await db.assets.findOne({
+            where,
+            transaction,
+        });
+
+        if (!assets) {
+            return assets;
+        }
+
+        const output = assets.get({plain: true});
+
+        
+        
+        
+        
+        
+        
+        
+        output.asset_variants_asset = await assets.getAsset_variants_asset({
+            transaction
+        });
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        output.project = await assets.getProject({
+            transaction
+        });
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+      {
+        model: db.projects,
+        as: 'project',
+        
+        where: filter.project ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.project.split('|').map(term => Utils.uuid(term)) } },
+            {
+              name: {
+                [Op.or]: filter.project.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+
+
+    ];
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+            if (filter.name) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'assets',
+                        'name',
+                        filter.name,
+                    ),
+                };
+            }
+            
+            if (filter.cdn_url) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'assets',
+                        'cdn_url',
+                        filter.cdn_url,
+                    ),
+                };
+            }
+            
+            if (filter.storage_key) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'assets',
+                        'storage_key',
+                        filter.storage_key,
+                    ),
+                };
+            }
+            
+            if (filter.mime_type) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'assets',
+                        'mime_type',
+                        filter.mime_type,
+                    ),
+                };
+            }
+            
+            if (filter.checksum) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'assets',
+                        'checksum',
+                        filter.checksum,
+                    ),
+                };
+            }
+            
+
+            
+            
+
+            
+            if (filter.size_mbRange) {
+                const [start, end] = filter.size_mbRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    size_mb: {
+                    ...where.size_mb,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    size_mb: {
+                    ...where.size_mb,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.width_pxRange) {
+                const [start, end] = filter.width_pxRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    width_px: {
+                    ...where.width_px,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    width_px: {
+                    ...where.width_px,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.height_pxRange) {
+                const [start, end] = filter.height_pxRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    height_px: {
+                    ...where.height_px,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    height_px: {
+                    ...where.height_px,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.duration_secRange) {
+                const [start, end] = filter.duration_secRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    duration_sec: {
+                    ...where.duration_sec,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    duration_sec: {
+                    ...where.duration_sec,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.deleted_at_timeRange) {
+                const [start, end] = filter.deleted_at_timeRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    deleted_at_time: {
+                    ...where.deleted_at_time,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    deleted_at_time: {
+                    ...where.deleted_at_time,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+            if (filter.asset_type) {
+                where = {
+                    ...where,
+                asset_type: filter.asset_type,
+            };
+            }
+            
+            if (filter.is_public) {
+                where = {
+                    ...where,
+                is_public: filter.is_public,
+            };
+            }
+            
+            if (filter.is_deleted) {
+                where = {
+                    ...where,
+                is_deleted: filter.is_deleted,
+            };
+            }
+            
+
+
+      
+
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.assets.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'assets',
+                        'name',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.assets.findAll({
+            attributes: [ 'id', 'name' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['name', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.name,
+        }));
+    }
+
+    
+};

backend/src/db/api/file.js

@@ -0,0 +1,87 @@
+const db = require('../models');
+const assert = require('assert');
+const services = require('../../services/file');
+
+module.exports = class FileDBApi {
+  static async replaceRelationFiles(
+    relation,
+    rawFiles,
+    options,
+  ) {
+    assert(relation.belongsTo, 'belongsTo is required');
+    assert(
+      relation.belongsToColumn,
+      'belongsToColumn is required',
+    );
+    assert(relation.belongsToId, 'belongsToId is required');
+
+    let files = [];
+
+    if (Array.isArray(rawFiles)) {
+      files = rawFiles;
+    } else {
+      files = rawFiles ? [rawFiles] : [];
+    }
+
+    await this._removeLegacyFiles(relation, files, options);
+    await this._addFiles(relation, files, options);
+  }
+
+  static async _addFiles(relation, files, options) {
+    const transaction = (options && options.transaction) || undefined;
+    const currentUser = (options && options.currentUser) || {id: null};
+
+    const inexistentFiles = files.filter(
+      (file) => !!file.new,
+    );
+
+    for (const file of inexistentFiles) {
+      await db.file.create(
+        {
+          belongsTo: relation.belongsTo,
+          belongsToColumn: relation.belongsToColumn,
+          belongsToId: relation.belongsToId,
+          name: file.name,
+          sizeInBytes: file.sizeInBytes,
+          privateUrl: file.privateUrl,
+          publicUrl: file.publicUrl,
+          createdById: currentUser.id,
+          updatedById: currentUser.id,
+        },
+        {
+          transaction,
+        },
+      );
+    }
+  }
+
+  static async _removeLegacyFiles(
+    relation,
+    files,
+    options,
+  ) {
+    const transaction = (options && options.transaction) || undefined;
+
+    const filesToDelete = await db.file.findAll({
+      where: {
+        belongsTo: relation.belongsTo,
+        belongsToId: relation.belongsToId,
+        belongsToColumn: relation.belongsToColumn,
+        id: {
+          [db.Sequelize.Op
+            .notIn]: files
+            .filter((file) => !file.new)
+            .map((file) => file.id)
+        },
+      },
+      transaction,
+    });
+
+    for (let file of filesToDelete) {
+      await services.deleteFile(file.privateUrl);
+      await file.destroy({
+        transaction,
+      });
+    }
+  }
+};

backend/src/db/api/page_elements.js

@@ -0,0 +1,656 @@
+
+const db = require('../models');
+const Utils = require('../utils');
+const {
+  getRuntimeEnvironment,
+  getRuntimeProjectSlug,
+} = require('./runtime-context');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class Page_elementsDBApi {
+    
+
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const page_elements = await db.page_elements.create(
+            {
+                id: data.id || undefined,
+        
+        element_type: data.element_type ?? null,
+            
+        name: data.name ?? null,
+            
+        sort_order: data.sort_order ?? 0,
+            
+        is_visible: data.is_visible ?? false,
+            
+        x_percent: data.x_percent ?? null,
+            
+        y_percent: data.y_percent ?? null,
+            
+        width_percent: data.width_percent ?? null,
+            
+        height_percent: data.height_percent ?? null,
+            
+        rotation_deg: data.rotation_deg ?? null,
+            
+        style_json: data.style_json ?? null,
+            
+        content_json: data.content_json ?? null,
+            
+            importHash: data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+        await page_elements.setPage( data.page || null, {
+            transaction,
+        });
+        
+
+        
+
+        
+
+        return page_elements;
+    }
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const page_elementsData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                element_type: item.element_type ?? null,
+            
+                name: item.name ?? null,
+            
+                sort_order: item.sort_order ?? 0,
+            
+                is_visible: item.is_visible ?? false,
+            
+                x_percent: item.x_percent ?? null,
+            
+                y_percent: item.y_percent ?? null,
+            
+                width_percent: item.width_percent ?? null,
+            
+                height_percent: item.height_percent ?? null,
+            
+                rotation_deg: item.rotation_deg ?? null,
+            
+                style_json: item.style_json ?? null,
+            
+                content_json: item.content_json ?? null,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const page_elements = await db.page_elements.bulkCreate(page_elementsData, { transaction });
+
+        // For each item created, replace relation files
+        
+
+        return page_elements;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const page_elements = await db.page_elements.findByPk(id, {transaction});
+
+
+        
+
+        const updatePayload = {};
+        
+        if (data.element_type !== undefined) updatePayload.element_type = data.element_type;
+        
+        
+        if (data.name !== undefined) updatePayload.name = data.name;
+        
+        
+        if (data.sort_order !== undefined) updatePayload.sort_order = data.sort_order;
+        
+        
+        if (data.is_visible !== undefined) updatePayload.is_visible = data.is_visible;
+        
+        
+        if (data.x_percent !== undefined) updatePayload.x_percent = data.x_percent;
+        
+        
+        if (data.y_percent !== undefined) updatePayload.y_percent = data.y_percent;
+        
+        
+        if (data.width_percent !== undefined) updatePayload.width_percent = data.width_percent;
+        
+        
+        if (data.height_percent !== undefined) updatePayload.height_percent = data.height_percent;
+        
+        
+        if (data.rotation_deg !== undefined) updatePayload.rotation_deg = data.rotation_deg;
+        
+        
+        if (data.style_json !== undefined) updatePayload.style_json = data.style_json;
+        
+        
+        if (data.content_json !== undefined) updatePayload.content_json = data.content_json;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await page_elements.update(updatePayload, {transaction});
+
+        
+        
+        if (data.page !== undefined) {
+            await page_elements.setPage(
+              
+              data.page,
+              
+              { transaction }
+            );
+        }
+        
+
+        
+        
+
+        
+
+        return page_elements;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const page_elements = await db.page_elements.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of page_elements) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of page_elements) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return page_elements;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const page_elements = await db.page_elements.findByPk(id, options);
+
+        await page_elements.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await page_elements.destroy({
+            transaction
+        });
+
+        return page_elements;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+        const runtimeEnvironment = getRuntimeEnvironment(options);
+        const runtimeProjectSlug = getRuntimeProjectSlug(options);
+        const pageInclude = {
+            model: db.tour_pages,
+            as: 'page',
+            required: Boolean(runtimeEnvironment || runtimeProjectSlug),
+            where: runtimeEnvironment ? { environment: runtimeEnvironment } : {},
+            include: runtimeProjectSlug
+                ? [{
+                    model: db.projects,
+                    as: 'project',
+                    required: true,
+                    where: { slug: runtimeProjectSlug },
+                }]
+                : [],
+        };
+
+        const page_elements = await db.page_elements.findOne(
+            { where, include: [pageInclude], transaction },
+        );
+
+        if (!page_elements) {
+            return page_elements;
+        }
+
+        const output = page_elements.get({plain: true});
+
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        output.page = await page_elements.getPage({
+            transaction
+        });
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        filter = filter || {};
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+      {
+        model: db.tour_pages,
+        as: 'page',
+        
+        where: filter.page ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.page.split('|').map(term => Utils.uuid(term)) } },
+            {
+              name: {
+                [Op.or]: filter.page.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+
+
+    ];
+        const runtimeEnvironment = getRuntimeEnvironment(options);
+        const runtimeProjectSlug = getRuntimeProjectSlug(options);
+
+        if (runtimeEnvironment) {
+            include[0].where = {
+                ...(include[0].where || {}),
+                environment: runtimeEnvironment,
+            };
+            include[0].required = true;
+        }
+
+        if (runtimeProjectSlug) {
+            include[0].include = [{
+                model: db.projects,
+                as: 'project',
+                required: true,
+                where: { slug: runtimeProjectSlug },
+            }];
+            include[0].required = true;
+        }
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+            if (filter.name) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'page_elements',
+                        'name',
+                        filter.name,
+                    ),
+                };
+            }
+            
+            if (filter.style_json) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'page_elements',
+                        'style_json',
+                        filter.style_json,
+                    ),
+                };
+            }
+            
+            if (filter.content_json) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'page_elements',
+                        'content_json',
+                        filter.content_json,
+                    ),
+                };
+            }
+            
+
+            
+            
+
+            
+            if (filter.sort_orderRange) {
+                const [start, end] = filter.sort_orderRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    sort_order: {
+                    ...where.sort_order,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    sort_order: {
+                    ...where.sort_order,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.x_percentRange) {
+                const [start, end] = filter.x_percentRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    x_percent: {
+                    ...where.x_percent,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    x_percent: {
+                    ...where.x_percent,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.y_percentRange) {
+                const [start, end] = filter.y_percentRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    y_percent: {
+                    ...where.y_percent,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    y_percent: {
+                    ...where.y_percent,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.width_percentRange) {
+                const [start, end] = filter.width_percentRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    width_percent: {
+                    ...where.width_percent,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    width_percent: {
+                    ...where.width_percent,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.height_percentRange) {
+                const [start, end] = filter.height_percentRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    height_percent: {
+                    ...where.height_percent,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    height_percent: {
+                    ...where.height_percent,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.rotation_degRange) {
+                const [start, end] = filter.rotation_degRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    rotation_deg: {
+                    ...where.rotation_deg,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    rotation_deg: {
+                    ...where.rotation_deg,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+            if (filter.element_type) {
+                where = {
+                    ...where,
+                element_type: filter.element_type,
+            };
+            }
+            
+            if (filter.is_visible) {
+                where = {
+                    ...where,
+                is_visible: filter.is_visible,
+            };
+            }
+            
+
+
+      
+
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.page_elements.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'page_elements',
+                        'name',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.page_elements.findAll({
+            attributes: [ 'id', 'name' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['name', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.name,
+        }));
+    }
+
+    
+};

backend/src/db/api/page_links.js

@@ -0,0 +1,589 @@
+
+const db = require('../models');
+const Utils = require('../utils');
+const {
+  getRuntimeEnvironment,
+  getRuntimeProjectSlug,
+} = require('./runtime-context');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class Page_linksDBApi {
+    
+
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const page_links = await db.page_links.create(
+            {
+                id: data.id || undefined,
+        
+        direction: data.direction
+        ||
+        null
+            ,
+            
+        external_url: data.external_url
+        ||
+        null
+            ,
+            
+        is_active: data.is_active
+        ||
+        false
+        
+            ,
+            
+        trigger_selector: data.trigger_selector
+        ||
+        null
+            ,
+            
+            importHash: data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+        await page_links.setFrom_page( data.from_page || null, {
+            transaction,
+        });
+        
+        await page_links.setTo_page( data.to_page || null, {
+            transaction,
+        });
+        
+        await page_links.setTransition( data.transition || null, {
+            transaction,
+        });
+        
+
+        
+
+        
+
+        return page_links;
+    }
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const page_linksData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                direction: item.direction
+            ||
+            null
+            ,
+            
+                external_url: item.external_url
+            ||
+            null
+            ,
+            
+                is_active: item.is_active
+            ||
+            false
+        
+            ,
+            
+                trigger_selector: item.trigger_selector
+            ||
+            null
+            ,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const page_links = await db.page_links.bulkCreate(page_linksData, { transaction });
+
+        // For each item created, replace relation files
+        
+
+        return page_links;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const page_links = await db.page_links.findByPk(id, {transaction});
+
+
+        
+
+        const updatePayload = {};
+        
+        if (data.direction !== undefined) updatePayload.direction = data.direction;
+        
+        
+        if (data.external_url !== undefined) updatePayload.external_url = data.external_url;
+        
+        
+        if (data.is_active !== undefined) updatePayload.is_active = data.is_active;
+        
+        
+        if (data.trigger_selector !== undefined) updatePayload.trigger_selector = data.trigger_selector;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await page_links.update(updatePayload, {transaction});
+
+        
+        
+        if (data.from_page !== undefined) {
+            await page_links.setFrom_page(
+              
+              data.from_page,
+              
+              { transaction }
+            );
+        }
+        
+        if (data.to_page !== undefined) {
+            await page_links.setTo_page(
+              
+              data.to_page,
+              
+              { transaction }
+            );
+        }
+        
+        if (data.transition !== undefined) {
+            await page_links.setTransition(
+              
+              data.transition,
+              
+              { transaction }
+            );
+        }
+        
+
+        
+        
+
+        
+
+        return page_links;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const page_links = await db.page_links.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of page_links) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of page_links) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return page_links;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const page_links = await db.page_links.findByPk(id, options);
+
+        await page_links.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await page_links.destroy({
+            transaction
+        });
+
+        return page_links;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+        const runtimeEnvironment = getRuntimeEnvironment(options);
+        const runtimeProjectSlug = getRuntimeProjectSlug(options);
+        const buildProjectInclude = () => (
+            runtimeProjectSlug
+                ? [{
+                    model: db.projects,
+                    as: 'project',
+                    required: true,
+                    where: { slug: runtimeProjectSlug },
+                }]
+                : []
+        );
+
+        const page_links = await db.page_links.findOne(
+            {
+                where,
+                include: [
+                    {
+                        model: db.tour_pages,
+                        as: 'from_page',
+                        required: Boolean(runtimeEnvironment || runtimeProjectSlug),
+                        where: runtimeEnvironment ? { environment: runtimeEnvironment } : {},
+                        include: buildProjectInclude(),
+                    },
+                    {
+                        model: db.transitions,
+                        as: 'transition',
+                        required: false,
+                        where: runtimeEnvironment ? { environment: runtimeEnvironment } : {},
+                        include: buildProjectInclude(),
+                    },
+                ],
+                transaction,
+            },
+        );
+
+        if (!page_links) {
+            return page_links;
+        }
+
+        const output = page_links.get({plain: true});
+
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        output.from_page = await page_links.getFrom_page({
+            transaction
+        });
+        
+        
+        output.to_page = await page_links.getTo_page({
+            transaction
+        });
+        
+        
+        output.transition = await page_links.getTransition({
+            transaction
+        });
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        filter = filter || {};
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+      {
+        model: db.tour_pages,
+        as: 'from_page',
+        
+        where: filter.from_page ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.from_page.split('|').map(term => Utils.uuid(term)) } },
+            {
+              name: {
+                [Op.or]: filter.from_page.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+      {
+        model: db.tour_pages,
+        as: 'to_page',
+        
+        where: filter.to_page ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.to_page.split('|').map(term => Utils.uuid(term)) } },
+            {
+              name: {
+                [Op.or]: filter.to_page.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+      {
+        model: db.transitions,
+        as: 'transition',
+        
+        where: filter.transition ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.transition.split('|').map(term => Utils.uuid(term)) } },
+            {
+              name: {
+                [Op.or]: filter.transition.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+
+
+    ];
+        const runtimeEnvironment = getRuntimeEnvironment(options);
+        const runtimeProjectSlug = getRuntimeProjectSlug(options);
+
+        if (runtimeEnvironment) {
+            include[0].where = {
+                ...(include[0].where || {}),
+                environment: runtimeEnvironment,
+            };
+            include[0].required = true;
+            include[1].where = {
+                ...(include[1].where || {}),
+                environment: runtimeEnvironment,
+            };
+            include[2].where = {
+                ...(include[2].where || {}),
+                environment: runtimeEnvironment,
+            };
+            include[2].required = false;
+        }
+
+        if (runtimeProjectSlug) {
+            include[0].include = [{
+                model: db.projects,
+                as: 'project',
+                required: true,
+                where: { slug: runtimeProjectSlug },
+            }];
+            include[0].required = true;
+            include[1].include = [{
+                model: db.projects,
+                as: 'project',
+                required: true,
+                where: { slug: runtimeProjectSlug },
+            }];
+            include[2].include = [{
+                model: db.projects,
+                as: 'project',
+                required: true,
+                where: { slug: runtimeProjectSlug },
+            }];
+            include[2].required = false;
+        }
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+            if (filter.external_url) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'page_links',
+                        'external_url',
+                        filter.external_url,
+                    ),
+                };
+            }
+            
+            if (filter.trigger_selector) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'page_links',
+                        'trigger_selector',
+                        filter.trigger_selector,
+                    ),
+                };
+            }
+            
+
+            
+            
+
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+            if (filter.direction) {
+                where = {
+                    ...where,
+                direction: filter.direction,
+            };
+            }
+            
+            if (filter.is_active) {
+                where = {
+                    ...where,
+                is_active: filter.is_active,
+            };
+            }
+            
+
+
+      
+
+      
+
+      
+
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.page_links.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'page_links',
+                        'direction',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.page_links.findAll({
+            attributes: [ 'id', 'direction' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['direction', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.direction,
+        }));
+    }
+
+    
+};

backend/src/db/api/permissions.js

@@ -0,0 +1,335 @@
+
+const db = require('../models');
+const Utils = require('../utils');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class PermissionsDBApi {
+    
+
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const permissions = await db.permissions.create(
+            {
+                id: data.id || undefined,
+        
+        name: data.name
+        ||
+        null
+            ,
+            
+            importHash: data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+
+        
+
+        
+
+        return permissions;
+    }
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const permissionsData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                name: item.name
+            ||
+            null
+            ,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const permissions = await db.permissions.bulkCreate(permissionsData, { transaction });
+
+        // For each item created, replace relation files
+        
+
+        return permissions;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const permissions = await db.permissions.findByPk(id, {transaction});
+
+
+        
+
+        const updatePayload = {};
+        
+        if (data.name !== undefined) updatePayload.name = data.name;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await permissions.update(updatePayload, {transaction});
+
+        
+        
+
+        
+        
+
+        
+
+        return permissions;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const permissions = await db.permissions.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of permissions) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of permissions) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return permissions;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const permissions = await db.permissions.findByPk(id, options);
+
+        await permissions.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await permissions.destroy({
+            transaction
+        });
+
+        return permissions;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+
+        const permissions = await db.permissions.findOne({
+            where,
+            transaction,
+        });
+
+        if (!permissions) {
+            return permissions;
+        }
+
+        const output = permissions.get({plain: true});
+
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+
+
+    ];
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+            if (filter.name) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'permissions',
+                        'name',
+                        filter.name,
+                    ),
+                };
+            }
+            
+
+            
+            
+
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+
+
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.permissions.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'permissions',
+                        'name',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.permissions.findAll({
+            attributes: [ 'id', 'name' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['name', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.name,
+        }));
+    }
+
+    
+};

backend/src/db/api/presigned_url_requests.js

@@ -0,0 +1,571 @@
+
+const db = require('../models');
+const Utils = require('../utils');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class Presigned_url_requestsDBApi {
+    
+
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const presigned_url_requests = await db.presigned_url_requests.create(
+            {
+                id: data.id || undefined,
+        
+        purpose: data.purpose
+        ||
+        null
+            ,
+            
+        asset_type: data.asset_type
+        ||
+        null
+            ,
+            
+        requested_key: data.requested_key
+        ||
+        null
+            ,
+            
+        mime_type: data.mime_type
+        ||
+        null
+            ,
+            
+        requested_size_mb: data.requested_size_mb
+        ||
+        null
+            ,
+            
+        expires_at: data.expires_at
+        ||
+        null
+            ,
+            
+        status: data.status
+        ||
+        null
+            ,
+            
+            importHash: data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+        await presigned_url_requests.setProject( data.project || null, {
+            transaction,
+        });
+        
+        await presigned_url_requests.setUser( data.user || null, {
+            transaction,
+        });
+        
+
+        
+
+        
+
+        return presigned_url_requests;
+    }
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const presigned_url_requestsData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                purpose: item.purpose
+            ||
+            null
+            ,
+            
+                asset_type: item.asset_type
+            ||
+            null
+            ,
+            
+                requested_key: item.requested_key
+            ||
+            null
+            ,
+            
+                mime_type: item.mime_type
+            ||
+            null
+            ,
+            
+                requested_size_mb: item.requested_size_mb
+            ||
+            null
+            ,
+            
+                expires_at: item.expires_at
+            ||
+            null
+            ,
+            
+                status: item.status
+            ||
+            null
+            ,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const presigned_url_requests = await db.presigned_url_requests.bulkCreate(presigned_url_requestsData, { transaction });
+
+        // For each item created, replace relation files
+        
+
+        return presigned_url_requests;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const presigned_url_requests = await db.presigned_url_requests.findByPk(id, {transaction});
+
+
+        
+
+        const updatePayload = {};
+        
+        if (data.purpose !== undefined) updatePayload.purpose = data.purpose;
+        
+        
+        if (data.asset_type !== undefined) updatePayload.asset_type = data.asset_type;
+        
+        
+        if (data.requested_key !== undefined) updatePayload.requested_key = data.requested_key;
+        
+        
+        if (data.mime_type !== undefined) updatePayload.mime_type = data.mime_type;
+        
+        
+        if (data.requested_size_mb !== undefined) updatePayload.requested_size_mb = data.requested_size_mb;
+        
+        
+        if (data.expires_at !== undefined) updatePayload.expires_at = data.expires_at;
+        
+        
+        if (data.status !== undefined) updatePayload.status = data.status;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await presigned_url_requests.update(updatePayload, {transaction});
+
+        
+        
+        if (data.project !== undefined) {
+            await presigned_url_requests.setProject(
+              
+              data.project,
+              
+              { transaction }
+            );
+        }
+        
+        if (data.user !== undefined) {
+            await presigned_url_requests.setUser(
+              
+              data.user,
+              
+              { transaction }
+            );
+        }
+        
+
+        
+        
+
+        
+
+        return presigned_url_requests;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const presigned_url_requests = await db.presigned_url_requests.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of presigned_url_requests) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of presigned_url_requests) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return presigned_url_requests;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const presigned_url_requests = await db.presigned_url_requests.findByPk(id, options);
+
+        await presigned_url_requests.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await presigned_url_requests.destroy({
+            transaction
+        });
+
+        return presigned_url_requests;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+
+        const presigned_url_requests = await db.presigned_url_requests.findOne({
+            where,
+            transaction,
+        });
+
+        if (!presigned_url_requests) {
+            return presigned_url_requests;
+        }
+
+        const output = presigned_url_requests.get({plain: true});
+
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        output.project = await presigned_url_requests.getProject({
+            transaction
+        });
+        
+        
+        output.user = await presigned_url_requests.getUser({
+            transaction
+        });
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+      {
+        model: db.projects,
+        as: 'project',
+        
+        where: filter.project ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.project.split('|').map(term => Utils.uuid(term)) } },
+            {
+              name: {
+                [Op.or]: filter.project.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+      {
+        model: db.users,
+        as: 'user',
+        
+        where: filter.user ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.user.split('|').map(term => Utils.uuid(term)) } },
+            {
+              firstName: {
+                [Op.or]: filter.user.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+
+
+    ];
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+            if (filter.requested_key) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'presigned_url_requests',
+                        'requested_key',
+                        filter.requested_key,
+                    ),
+                };
+            }
+            
+            if (filter.mime_type) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'presigned_url_requests',
+                        'mime_type',
+                        filter.mime_type,
+                    ),
+                };
+            }
+            
+            if (filter.status) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'presigned_url_requests',
+                        'status',
+                        filter.status,
+                    ),
+                };
+            }
+            
+
+            
+            
+
+            
+            if (filter.requested_size_mbRange) {
+                const [start, end] = filter.requested_size_mbRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    requested_size_mb: {
+                    ...where.requested_size_mb,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    requested_size_mb: {
+                    ...where.requested_size_mb,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.expires_atRange) {
+                const [start, end] = filter.expires_atRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    expires_at: {
+                    ...where.expires_at,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    expires_at: {
+                    ...where.expires_at,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+            if (filter.purpose) {
+                where = {
+                    ...where,
+                purpose: filter.purpose,
+            };
+            }
+            
+            if (filter.asset_type) {
+                where = {
+                    ...where,
+                asset_type: filter.asset_type,
+            };
+            }
+            
+
+
+      
+
+      
+
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.presigned_url_requests.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'presigned_url_requests',
+                        'requested_key',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.presigned_url_requests.findAll({
+            attributes: [ 'id', 'requested_key' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['requested_key', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.requested_key,
+        }));
+    }
+
+    
+};

backend/src/db/api/project_audio_tracks.js

@@ -0,0 +1,596 @@
+
+const db = require('../models');
+const Utils = require('../utils');
+const {
+  applyRuntimeEnvironment,
+  applyRuntimeProjectFilter,
+} = require('./runtime-context');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class Project_audio_tracksDBApi {
+    
+
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const project_audio_tracks = await db.project_audio_tracks.create(
+            {
+                id: data.id || undefined,
+        
+        environment: data.environment
+        ||
+        null
+            ,
+            
+        source_key: data.source_key
+        ||
+        null
+            ,
+            
+        name: data.name
+        ||
+        null
+            ,
+            
+        slug: data.slug
+        ||
+        null
+            ,
+            
+        url: data.url
+        ||
+        null
+            ,
+            
+        loop: data.loop
+        ||
+        false
+        
+            ,
+            
+        volume: data.volume
+        ||
+        null
+            ,
+            
+        sort_order: data.sort_order
+        ||
+        null
+            ,
+            
+        is_enabled: data.is_enabled
+        ||
+        false
+        
+            ,
+            
+            importHash: data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+        await project_audio_tracks.setProject( data.project || null, {
+            transaction,
+        });
+        
+
+        
+
+        
+
+        return project_audio_tracks;
+    }
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const project_audio_tracksData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                environment: item.environment
+            ||
+            null
+            ,
+            
+                source_key: item.source_key
+            ||
+            null
+            ,
+            
+                name: item.name
+            ||
+            null
+            ,
+            
+                slug: item.slug
+            ||
+            null
+            ,
+            
+                url: item.url
+            ||
+            null
+            ,
+            
+                loop: item.loop
+            ||
+            false
+        
+            ,
+            
+                volume: item.volume
+            ||
+            null
+            ,
+            
+                sort_order: item.sort_order
+            ||
+            null
+            ,
+            
+                is_enabled: item.is_enabled
+            ||
+            false
+        
+            ,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const project_audio_tracks = await db.project_audio_tracks.bulkCreate(project_audio_tracksData, { transaction });
+
+        // For each item created, replace relation files
+        
+
+        return project_audio_tracks;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const project_audio_tracks = await db.project_audio_tracks.findByPk(id, {transaction});
+
+
+        
+
+        const updatePayload = {};
+        
+        if (data.environment !== undefined) updatePayload.environment = data.environment;
+        
+        
+        if (data.source_key !== undefined) updatePayload.source_key = data.source_key;
+        
+        
+        if (data.name !== undefined) updatePayload.name = data.name;
+        
+        
+        if (data.slug !== undefined) updatePayload.slug = data.slug;
+        
+        
+        if (data.url !== undefined) updatePayload.url = data.url;
+        
+        
+        if (data.loop !== undefined) updatePayload.loop = data.loop;
+        
+        
+        if (data.volume !== undefined) updatePayload.volume = data.volume;
+        
+        
+        if (data.sort_order !== undefined) updatePayload.sort_order = data.sort_order;
+        
+        
+        if (data.is_enabled !== undefined) updatePayload.is_enabled = data.is_enabled;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await project_audio_tracks.update(updatePayload, {transaction});
+
+        
+        
+        if (data.project !== undefined) {
+            await project_audio_tracks.setProject(
+              
+              data.project,
+              
+              { transaction }
+            );
+        }
+        
+
+        
+        
+
+        
+
+        return project_audio_tracks;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const project_audio_tracks = await db.project_audio_tracks.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of project_audio_tracks) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of project_audio_tracks) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return project_audio_tracks;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const project_audio_tracks = await db.project_audio_tracks.findByPk(id, options);
+
+        await project_audio_tracks.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await project_audio_tracks.destroy({
+            transaction
+        });
+
+        return project_audio_tracks;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+        const queryWhere = applyRuntimeEnvironment({ ...where }, options);
+        const projectInclude = applyRuntimeProjectFilter(
+            {
+                model: db.projects,
+                as: 'project',
+            },
+            options,
+        );
+
+        const project_audio_tracks = await db.project_audio_tracks.findOne(
+            { where: queryWhere, include: [projectInclude], transaction },
+        );
+
+        if (!project_audio_tracks) {
+            return project_audio_tracks;
+        }
+
+        const output = project_audio_tracks.get({plain: true});
+
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        output.project = await project_audio_tracks.getProject({
+            transaction
+        });
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        filter = filter || {};
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+      {
+        model: db.projects,
+        as: 'project',
+        
+        where: filter.project ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.project.split('|').map(term => Utils.uuid(term)) } },
+            {
+              name: {
+                [Op.or]: filter.project.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+
+
+    ];
+        include[0] = applyRuntimeProjectFilter(include[0], options);
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+            if (filter.source_key) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'project_audio_tracks',
+                        'source_key',
+                        filter.source_key,
+                    ),
+                };
+            }
+            
+            if (filter.name) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'project_audio_tracks',
+                        'name',
+                        filter.name,
+                    ),
+                };
+            }
+            
+            if (filter.slug) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'project_audio_tracks',
+                        'slug',
+                        filter.slug,
+                    ),
+                };
+            }
+            
+            if (filter.url) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'project_audio_tracks',
+                        'url',
+                        filter.url,
+                    ),
+                };
+            }
+            
+
+            
+            
+
+            
+            if (filter.volumeRange) {
+                const [start, end] = filter.volumeRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    volume: {
+                    ...where.volume,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    volume: {
+                    ...where.volume,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.sort_orderRange) {
+                const [start, end] = filter.sort_orderRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    sort_order: {
+                    ...where.sort_order,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    sort_order: {
+                    ...where.sort_order,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+            if (filter.environment) {
+                where = {
+                    ...where,
+                environment: filter.environment,
+            };
+            }
+            
+            if (filter.loop) {
+                where = {
+                    ...where,
+                loop: filter.loop,
+            };
+            }
+            
+            if (filter.is_enabled) {
+                where = {
+                    ...where,
+                is_enabled: filter.is_enabled,
+            };
+            }
+            
+
+
+      
+
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        
+        where = applyRuntimeEnvironment(where, options);
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.project_audio_tracks.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'project_audio_tracks',
+                        'name',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.project_audio_tracks.findAll({
+            attributes: [ 'id', 'name' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['name', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.name,
+        }));
+    }
+
+    
+};

backend/src/db/api/project_memberships.js

@@ -0,0 +1,501 @@
+
+const db = require('../models');
+const Utils = require('../utils');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class Project_membershipsDBApi {
+    
+
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const project_memberships = await db.project_memberships.create(
+            {
+                id: data.id || undefined,
+        
+        access_level: data.access_level
+        ||
+        null
+            ,
+            
+        is_active: data.is_active
+        ||
+        false
+        
+            ,
+            
+        invited_at: data.invited_at
+        ||
+        null
+            ,
+            
+        accepted_at: data.accepted_at
+        ||
+        null
+            ,
+            
+            importHash: data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+        await project_memberships.setProject( data.project || null, {
+            transaction,
+        });
+        
+        await project_memberships.setUser( data.user || null, {
+            transaction,
+        });
+        
+
+        
+
+        
+
+        return project_memberships;
+    }
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const project_membershipsData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                access_level: item.access_level
+            ||
+            null
+            ,
+            
+                is_active: item.is_active
+            ||
+            false
+        
+            ,
+            
+                invited_at: item.invited_at
+            ||
+            null
+            ,
+            
+                accepted_at: item.accepted_at
+            ||
+            null
+            ,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const project_memberships = await db.project_memberships.bulkCreate(project_membershipsData, { transaction });
+
+        // For each item created, replace relation files
+        
+
+        return project_memberships;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const project_memberships = await db.project_memberships.findByPk(id, {transaction});
+
+
+        
+
+        const updatePayload = {};
+        
+        if (data.access_level !== undefined) updatePayload.access_level = data.access_level;
+        
+        
+        if (data.is_active !== undefined) updatePayload.is_active = data.is_active;
+        
+        
+        if (data.invited_at !== undefined) updatePayload.invited_at = data.invited_at;
+        
+        
+        if (data.accepted_at !== undefined) updatePayload.accepted_at = data.accepted_at;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await project_memberships.update(updatePayload, {transaction});
+
+        
+        
+        if (data.project !== undefined) {
+            await project_memberships.setProject(
+              
+              data.project,
+              
+              { transaction }
+            );
+        }
+        
+        if (data.user !== undefined) {
+            await project_memberships.setUser(
+              
+              data.user,
+              
+              { transaction }
+            );
+        }
+        
+
+        
+        
+
+        
+
+        return project_memberships;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const project_memberships = await db.project_memberships.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of project_memberships) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of project_memberships) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return project_memberships;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const project_memberships = await db.project_memberships.findByPk(id, options);
+
+        await project_memberships.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await project_memberships.destroy({
+            transaction
+        });
+
+        return project_memberships;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+
+        const project_memberships = await db.project_memberships.findOne({
+            where,
+            transaction,
+        });
+
+        if (!project_memberships) {
+            return project_memberships;
+        }
+
+        const output = project_memberships.get({plain: true});
+
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        output.project = await project_memberships.getProject({
+            transaction
+        });
+        
+        
+        output.user = await project_memberships.getUser({
+            transaction
+        });
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+      {
+        model: db.projects,
+        as: 'project',
+        
+        where: filter.project ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.project.split('|').map(term => Utils.uuid(term)) } },
+            {
+              name: {
+                [Op.or]: filter.project.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+      {
+        model: db.users,
+        as: 'user',
+        
+        where: filter.user ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.user.split('|').map(term => Utils.uuid(term)) } },
+            {
+              firstName: {
+                [Op.or]: filter.user.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+
+
+    ];
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+
+            
+            
+
+            
+            if (filter.invited_atRange) {
+                const [start, end] = filter.invited_atRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    invited_at: {
+                    ...where.invited_at,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    invited_at: {
+                    ...where.invited_at,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.accepted_atRange) {
+                const [start, end] = filter.accepted_atRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    accepted_at: {
+                    ...where.accepted_at,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    accepted_at: {
+                    ...where.accepted_at,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+            if (filter.access_level) {
+                where = {
+                    ...where,
+                access_level: filter.access_level,
+            };
+            }
+            
+            if (filter.is_active) {
+                where = {
+                    ...where,
+                is_active: filter.is_active,
+            };
+            }
+            
+
+
+      
+
+      
+
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.project_memberships.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'project_memberships',
+                        'access_level',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.project_memberships.findAll({
+            attributes: [ 'id', 'access_level' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['access_level', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.access_level,
+        }));
+    }
+
+    
+};

backend/src/db/api/projects.js

@@ -0,0 +1,699 @@
+
+const db = require('../models');
+const Utils = require('../utils');
+const {
+  getRuntimeEnvironment,
+  getRuntimeProjectSlug,
+} = require('./runtime-context');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class ProjectsDBApi {
+    
+
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const projects = await db.projects.create(
+            {
+                id: data.id || undefined,
+        
+        name: data.name
+        ||
+        null
+            ,
+            
+        slug: data.slug
+        ||
+        null
+            ,
+            
+        description: data.description
+        ||
+        null
+            ,
+            
+        phase: data.phase
+        ||
+        null
+            ,
+            
+        logo_url: data.logo_url
+        ||
+        null
+            ,
+            
+        favicon_url: data.favicon_url
+        ||
+        null
+            ,
+            
+        og_image_url: data.og_image_url
+        ||
+        null
+            ,
+            
+        theme_config_json: data.theme_config_json
+        ||
+        null
+            ,
+            
+        custom_css_json: data.custom_css_json
+        ||
+        null
+            ,
+            
+        cdn_base_url: data.cdn_base_url
+        ||
+        null
+            ,
+            
+        entry_page_slug: data.entry_page_slug
+        ||
+        null
+            ,
+            
+        is_deleted: data.is_deleted
+        ||
+        false
+        
+            ,
+            
+        deleted_at_time: data.deleted_at_time
+        ||
+        null
+            ,
+            
+            importHash: data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+
+        
+
+        
+
+        return projects;
+    }
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const projectsData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                name: item.name
+            ||
+            null
+            ,
+            
+                slug: item.slug
+            ||
+            null
+            ,
+            
+                description: item.description
+            ||
+            null
+            ,
+            
+                phase: item.phase
+            ||
+            null
+            ,
+            
+                logo_url: item.logo_url
+            ||
+            null
+            ,
+            
+                favicon_url: item.favicon_url
+            ||
+            null
+            ,
+            
+                og_image_url: item.og_image_url
+            ||
+            null
+            ,
+            
+                theme_config_json: item.theme_config_json
+            ||
+            null
+            ,
+            
+                custom_css_json: item.custom_css_json
+            ||
+            null
+            ,
+            
+                cdn_base_url: item.cdn_base_url
+            ||
+            null
+            ,
+            
+                entry_page_slug: item.entry_page_slug
+            ||
+            null
+            ,
+            
+                is_deleted: item.is_deleted
+            ||
+            false
+        
+            ,
+            
+                deleted_at_time: item.deleted_at_time
+            ||
+            null
+            ,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const projects = await db.projects.bulkCreate(projectsData, { transaction });
+
+        // For each item created, replace relation files
+        
+
+        return projects;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const projects = await db.projects.findByPk(id, {transaction});
+
+
+        
+
+        const updatePayload = {};
+        
+        if (data.name !== undefined) updatePayload.name = data.name;
+        
+        
+        if (data.slug !== undefined) updatePayload.slug = data.slug;
+        
+        
+        if (data.description !== undefined) updatePayload.description = data.description;
+        
+        
+        if (data.phase !== undefined) updatePayload.phase = data.phase;
+        
+        
+        if (data.logo_url !== undefined) updatePayload.logo_url = data.logo_url;
+        
+        
+        if (data.favicon_url !== undefined) updatePayload.favicon_url = data.favicon_url;
+        
+        
+        if (data.og_image_url !== undefined) updatePayload.og_image_url = data.og_image_url;
+        
+        
+        if (data.theme_config_json !== undefined) updatePayload.theme_config_json = data.theme_config_json;
+        
+        
+        if (data.custom_css_json !== undefined) updatePayload.custom_css_json = data.custom_css_json;
+        
+        
+        if (data.cdn_base_url !== undefined) updatePayload.cdn_base_url = data.cdn_base_url;
+        
+        
+        if (data.entry_page_slug !== undefined) updatePayload.entry_page_slug = data.entry_page_slug;
+        
+        
+        if (data.is_deleted !== undefined) updatePayload.is_deleted = data.is_deleted;
+        
+        
+        if (data.deleted_at_time !== undefined) updatePayload.deleted_at_time = data.deleted_at_time;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await projects.update(updatePayload, {transaction});
+
+        
+        
+
+        
+        
+
+        
+
+        return projects;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const projects = await db.projects.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of projects) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of projects) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return projects;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const projects = await db.projects.findByPk(id, options);
+
+        await projects.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await projects.destroy({
+            transaction
+        });
+
+        return projects;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+        const runtimeEnvironment = getRuntimeEnvironment(options);
+        const runtimeProjectSlug = getRuntimeProjectSlug(options);
+        const queryWhere = { ...where };
+
+        if (runtimeEnvironment) {
+            queryWhere.phase = runtimeEnvironment === 'production' 
+                ? 'production' 
+                : { [Op.in]: ['stage', 'production'] };
+        }
+
+        if (runtimeProjectSlug) {
+            queryWhere.slug = runtimeProjectSlug;
+        }
+
+        const projects = await db.projects.findOne(
+            { where: queryWhere, transaction },
+        );
+
+        if (!projects) {
+            return projects;
+        }
+
+        const output = projects.get({plain: true});
+
+        
+        
+        
+        
+        
+        output.project_memberships_project = await projects.getProject_memberships_project({
+            transaction
+        });
+        
+        
+        output.assets_project = await projects.getAssets_project({
+            transaction
+        });
+        
+        
+        
+        output.presigned_url_requests_project = await projects.getPresigned_url_requests_project({
+            transaction
+        });
+        
+        
+        output.tour_pages_project = await projects.getTour_pages_project({
+            transaction
+        });
+        
+        
+        
+        
+        output.transitions_project = await projects.getTransitions_project({
+            transaction
+        });
+        
+        
+        output.project_audio_tracks_project = await projects.getProject_audio_tracks_project({
+            transaction
+        });
+        
+        
+        output.publish_events_project = await projects.getPublish_events_project({
+            transaction
+        });
+        
+        
+        output.pwa_caches_project = await projects.getPwa_caches_project({
+            transaction
+        });
+        
+        
+        output.access_logs_project = await projects.getAccess_logs_project({
+            transaction
+        });
+        
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        filter = filter || {};
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+
+
+    ];
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+            if (filter.name) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'projects',
+                        'name',
+                        filter.name,
+                    ),
+                };
+            }
+            
+            if (filter.slug) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'projects',
+                        'slug',
+                        filter.slug,
+                    ),
+                };
+            }
+            
+            if (filter.description) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'projects',
+                        'description',
+                        filter.description,
+                    ),
+                };
+            }
+            
+            if (filter.logo_url) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'projects',
+                        'logo_url',
+                        filter.logo_url,
+                    ),
+                };
+            }
+            
+            if (filter.favicon_url) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'projects',
+                        'favicon_url',
+                        filter.favicon_url,
+                    ),
+                };
+            }
+            
+            if (filter.og_image_url) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'projects',
+                        'og_image_url',
+                        filter.og_image_url,
+                    ),
+                };
+            }
+            
+            if (filter.theme_config_json) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'projects',
+                        'theme_config_json',
+                        filter.theme_config_json,
+                    ),
+                };
+            }
+            
+            if (filter.custom_css_json) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'projects',
+                        'custom_css_json',
+                        filter.custom_css_json,
+                    ),
+                };
+            }
+            
+            if (filter.cdn_base_url) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'projects',
+                        'cdn_base_url',
+                        filter.cdn_base_url,
+                    ),
+                };
+            }
+            
+            if (filter.entry_page_slug) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'projects',
+                        'entry_page_slug',
+                        filter.entry_page_slug,
+                    ),
+                };
+            }
+            
+
+            
+            
+
+            
+            if (filter.deleted_at_timeRange) {
+                const [start, end] = filter.deleted_at_timeRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    deleted_at_time: {
+                    ...where.deleted_at_time,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    deleted_at_time: {
+                    ...where.deleted_at_time,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+            if (filter.phase) {
+                where = {
+                    ...where,
+                phase: filter.phase,
+            };
+            }
+            
+            if (filter.is_deleted) {
+                where = {
+                    ...where,
+                is_deleted: filter.is_deleted,
+            };
+            }
+            
+
+
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        const runtimeEnvironment = getRuntimeEnvironment(options);
+        const runtimeProjectSlug = getRuntimeProjectSlug(options);
+
+        if (runtimeEnvironment) {
+            where = {
+                ...where,
+                phase: runtimeEnvironment,
+            };
+        }
+
+        if (runtimeProjectSlug) {
+            where = {
+                ...where,
+                slug: runtimeProjectSlug,
+            };
+        }
+        
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.projects.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'projects',
+                        'name',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.projects.findAll({
+            attributes: [ 'id', 'name' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['name', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.name,
+        }));
+    }
+
+    
+};

backend/src/db/api/publish_events.js

@@ -0,0 +1,703 @@
+
+const db = require('../models');
+const Utils = require('../utils');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class Publish_eventsDBApi {
+    
+
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const publish_events = await db.publish_events.create(
+            {
+                id: data.id || undefined,
+        
+        title: data.title
+        ||
+        null
+            ,
+            
+        description: data.description
+        ||
+        null
+            ,
+        
+        from_environment: data.from_environment
+        ||
+        null
+            ,
+            
+        to_environment: data.to_environment
+        ||
+        null
+            ,
+            
+        started_at: data.started_at
+        ||
+        null
+            ,
+            
+        finished_at: data.finished_at
+        ||
+        null
+            ,
+            
+        status: data.status
+        ||
+        null
+            ,
+            
+        error_message: data.error_message
+        ||
+        null
+            ,
+            
+        pages_copied: data.pages_copied
+        ||
+        null
+            ,
+            
+        transitions_copied: data.transitions_copied
+        ||
+        null
+            ,
+            
+        audios_copied: data.audios_copied
+        ||
+        null
+            ,
+            
+            importHash: data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+        await publish_events.setProject( data.project || null, {
+            transaction,
+        });
+        
+        await publish_events.setUser( data.user || null, {
+            transaction,
+        });
+        
+
+        
+
+        
+
+        return publish_events;
+    }
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const publish_eventsData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                title: item.title
+            ||
+            null
+            ,
+            
+                description: item.description
+            ||
+            null
+            ,
+                
+                from_environment: item.from_environment
+            ||
+            null
+            ,
+            
+                to_environment: item.to_environment
+            ||
+            null
+            ,
+            
+                started_at: item.started_at
+            ||
+            null
+            ,
+            
+                finished_at: item.finished_at
+            ||
+            null
+            ,
+            
+                status: item.status
+            ||
+            null
+            ,
+            
+                error_message: item.error_message
+            ||
+            null
+            ,
+            
+                pages_copied: item.pages_copied
+            ||
+            null
+            ,
+            
+                transitions_copied: item.transitions_copied
+            ||
+            null
+            ,
+            
+                audios_copied: item.audios_copied
+            ||
+            null
+            ,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const publish_events = await db.publish_events.bulkCreate(publish_eventsData, { transaction });
+
+        // For each item created, replace relation files
+        
+
+        return publish_events;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const publish_events = await db.publish_events.findByPk(id, {transaction});
+
+
+        
+
+        const updatePayload = {};
+        
+        if (data.title !== undefined) updatePayload.title = data.title;
+        
+        
+        if (data.description !== undefined) updatePayload.description = data.description;
+        
+        
+        if (data.from_environment !== undefined) updatePayload.from_environment = data.from_environment;
+        
+        
+        if (data.to_environment !== undefined) updatePayload.to_environment = data.to_environment;
+        
+        
+        if (data.started_at !== undefined) updatePayload.started_at = data.started_at;
+        
+        
+        if (data.finished_at !== undefined) updatePayload.finished_at = data.finished_at;
+        
+        
+        if (data.status !== undefined) updatePayload.status = data.status;
+        
+        
+        if (data.error_message !== undefined) updatePayload.error_message = data.error_message;
+        
+        
+        if (data.pages_copied !== undefined) updatePayload.pages_copied = data.pages_copied;
+        
+        
+        if (data.transitions_copied !== undefined) updatePayload.transitions_copied = data.transitions_copied;
+        
+        
+        if (data.audios_copied !== undefined) updatePayload.audios_copied = data.audios_copied;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await publish_events.update(updatePayload, {transaction});
+
+        
+        
+        if (data.project !== undefined) {
+            await publish_events.setProject(
+              
+              data.project,
+              
+              { transaction }
+            );
+        }
+        
+        if (data.user !== undefined) {
+            await publish_events.setUser(
+              
+              data.user,
+              
+              { transaction }
+            );
+        }
+        
+
+        
+        
+
+        
+
+        return publish_events;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const publish_events = await db.publish_events.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of publish_events) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of publish_events) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return publish_events;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const publish_events = await db.publish_events.findByPk(id, options);
+
+        await publish_events.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await publish_events.destroy({
+            transaction
+        });
+
+        return publish_events;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+
+        const publish_events = await db.publish_events.findOne({
+            where,
+            transaction,
+        });
+
+        if (!publish_events) {
+            return publish_events;
+        }
+
+        const output = publish_events.get({plain: true});
+
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        output.project = await publish_events.getProject({
+            transaction
+        });
+        
+        
+        output.user = await publish_events.getUser({
+            transaction
+        });
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+      {
+        model: db.projects,
+        as: 'project',
+        
+        where: filter.project ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.project.split('|').map(term => Utils.uuid(term)) } },
+            {
+              name: {
+                [Op.or]: filter.project.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+      {
+        model: db.users,
+        as: 'user',
+        
+        where: filter.user ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.user.split('|').map(term => Utils.uuid(term)) } },
+            {
+              firstName: {
+                [Op.or]: filter.user.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+
+
+    ];
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+            if (filter.title) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'publish_events',
+                        'title',
+                        filter.title,
+                    ),
+                };
+            }
+            
+            if (filter.description) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'publish_events',
+                        'description',
+                        filter.description,
+                    ),
+                };
+            }
+            
+            
+            if (filter.error_message) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'publish_events',
+                        'error_message',
+                        filter.error_message,
+                    ),
+                };
+            }
+            
+
+            
+            
+
+            
+            if (filter.started_atRange) {
+                const [start, end] = filter.started_atRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    started_at: {
+                    ...where.started_at,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    started_at: {
+                    ...where.started_at,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.finished_atRange) {
+                const [start, end] = filter.finished_atRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    finished_at: {
+                    ...where.finished_at,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    finished_at: {
+                    ...where.finished_at,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.pages_copiedRange) {
+                const [start, end] = filter.pages_copiedRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    pages_copied: {
+                    ...where.pages_copied,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    pages_copied: {
+                    ...where.pages_copied,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.transitions_copiedRange) {
+                const [start, end] = filter.transitions_copiedRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    transitions_copied: {
+                    ...where.transitions_copied,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    transitions_copied: {
+                    ...where.transitions_copied,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.audios_copiedRange) {
+                const [start, end] = filter.audios_copiedRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    audios_copied: {
+                    ...where.audios_copied,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    audios_copied: {
+                    ...where.audios_copied,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+            if (filter.from_environment) {
+                where = {
+                    ...where,
+                from_environment: filter.from_environment,
+            };
+            }
+            
+            if (filter.to_environment) {
+                where = {
+                    ...where,
+                to_environment: filter.to_environment,
+            };
+            }
+            
+            if (filter.status) {
+                where = {
+                    ...where,
+                status: filter.status,
+            };
+            }
+            
+
+
+      
+
+      
+
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.publish_events.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'publish_events',
+                        'status',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.publish_events.findAll({
+            attributes: [ 'id', 'status' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['status', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.status,
+        }));
+    }
+
+    
+};

backend/src/db/api/pwa_caches.js

@@ -0,0 +1,499 @@
+
+const db = require('../models');
+const Utils = require('../utils');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class Pwa_cachesDBApi {
+    
+
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const pwa_caches = await db.pwa_caches.create(
+            {
+                id: data.id || undefined,
+        
+        environment: data.environment
+        ||
+        null
+            ,
+            
+        cache_version: data.cache_version
+        ||
+        null
+            ,
+            
+        manifest_json: data.manifest_json
+        ||
+        null
+            ,
+            
+        asset_list_json: data.asset_list_json
+        ||
+        null
+            ,
+            
+        generated_at: data.generated_at
+        ||
+        null
+            ,
+            
+        is_active: data.is_active
+        ||
+        false
+        
+            ,
+            
+            importHash: data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+        await pwa_caches.setProject( data.project || null, {
+            transaction,
+        });
+        
+
+        
+
+        
+
+        return pwa_caches;
+    }
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const pwa_cachesData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                environment: item.environment
+            ||
+            null
+            ,
+            
+                cache_version: item.cache_version
+            ||
+            null
+            ,
+            
+                manifest_json: item.manifest_json
+            ||
+            null
+            ,
+            
+                asset_list_json: item.asset_list_json
+            ||
+            null
+            ,
+            
+                generated_at: item.generated_at
+            ||
+            null
+            ,
+            
+                is_active: item.is_active
+            ||
+            false
+        
+            ,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const pwa_caches = await db.pwa_caches.bulkCreate(pwa_cachesData, { transaction });
+
+        // For each item created, replace relation files
+        
+
+        return pwa_caches;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const pwa_caches = await db.pwa_caches.findByPk(id, {transaction});
+
+
+        
+
+        const updatePayload = {};
+        
+        if (data.environment !== undefined) updatePayload.environment = data.environment;
+        
+        
+        if (data.cache_version !== undefined) updatePayload.cache_version = data.cache_version;
+        
+        
+        if (data.manifest_json !== undefined) updatePayload.manifest_json = data.manifest_json;
+        
+        
+        if (data.asset_list_json !== undefined) updatePayload.asset_list_json = data.asset_list_json;
+        
+        
+        if (data.generated_at !== undefined) updatePayload.generated_at = data.generated_at;
+        
+        
+        if (data.is_active !== undefined) updatePayload.is_active = data.is_active;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await pwa_caches.update(updatePayload, {transaction});
+
+        
+        
+        if (data.project !== undefined) {
+            await pwa_caches.setProject(
+              
+              data.project,
+              
+              { transaction }
+            );
+        }
+        
+
+        
+        
+
+        
+
+        return pwa_caches;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const pwa_caches = await db.pwa_caches.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of pwa_caches) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of pwa_caches) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return pwa_caches;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const pwa_caches = await db.pwa_caches.findByPk(id, options);
+
+        await pwa_caches.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await pwa_caches.destroy({
+            transaction
+        });
+
+        return pwa_caches;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+
+        const pwa_caches = await db.pwa_caches.findOne({
+            where,
+            transaction,
+        });
+
+        if (!pwa_caches) {
+            return pwa_caches;
+        }
+
+        const output = pwa_caches.get({plain: true});
+
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        output.project = await pwa_caches.getProject({
+            transaction
+        });
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+      {
+        model: db.projects,
+        as: 'project',
+        
+        where: filter.project ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.project.split('|').map(term => Utils.uuid(term)) } },
+            {
+              name: {
+                [Op.or]: filter.project.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+
+
+    ];
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+            if (filter.cache_version) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'pwa_caches',
+                        'cache_version',
+                        filter.cache_version,
+                    ),
+                };
+            }
+            
+            if (filter.manifest_json) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'pwa_caches',
+                        'manifest_json',
+                        filter.manifest_json,
+                    ),
+                };
+            }
+            
+            if (filter.asset_list_json) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'pwa_caches',
+                        'asset_list_json',
+                        filter.asset_list_json,
+                    ),
+                };
+            }
+            
+
+            
+            
+
+            
+            if (filter.generated_atRange) {
+                const [start, end] = filter.generated_atRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    generated_at: {
+                    ...where.generated_at,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    generated_at: {
+                    ...where.generated_at,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+            if (filter.environment) {
+                where = {
+                    ...where,
+                environment: filter.environment,
+            };
+            }
+            
+            if (filter.is_active) {
+                where = {
+                    ...where,
+                is_active: filter.is_active,
+            };
+            }
+            
+
+
+      
+
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.pwa_caches.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'pwa_caches',
+                        'cache_version',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.pwa_caches.findAll({
+            attributes: [ 'id', 'cache_version' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['cache_version', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.cache_version,
+        }));
+    }
+
+    
+};

backend/src/db/api/roles.js

@@ -0,0 +1,405 @@
+
+const db = require('../models');
+const Utils = require('../utils');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class RolesDBApi {
+    
+
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const roles = await db.roles.create(
+            {
+                id: data.id || undefined,
+        
+        name: data.name
+        ||
+        null
+            ,
+            
+        role_customization: data.role_customization
+        ||
+        null
+            ,
+            
+            importHash: data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+
+        
+        await roles.setPermissions(data.permissions || [], {
+            transaction,
+        });
+        
+
+        
+
+        return roles;
+    }
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const rolesData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                name: item.name
+            ||
+            null
+            ,
+            
+                role_customization: item.role_customization
+            ||
+            null
+            ,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const roles = await db.roles.bulkCreate(rolesData, { transaction });
+
+        // For each item created, replace relation files
+        
+
+        return roles;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const roles = await db.roles.findByPk(id, {transaction});
+
+
+        
+
+        const updatePayload = {};
+        
+        if (data.name !== undefined) updatePayload.name = data.name;
+        
+        
+        if (data.role_customization !== undefined) updatePayload.role_customization = data.role_customization;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await roles.update(updatePayload, {transaction});
+
+        
+        
+
+        
+        
+        if (data.permissions !== undefined) {
+            await roles.setPermissions(data.permissions, { transaction });
+        }
+        
+
+        
+
+        return roles;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const roles = await db.roles.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of roles) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of roles) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return roles;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const roles = await db.roles.findByPk(id, options);
+
+        await roles.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await roles.destroy({
+            transaction
+        });
+
+        return roles;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+
+        const roles = await db.roles.findOne({
+            where,
+            transaction,
+        });
+
+        if (!roles) {
+            return roles;
+        }
+
+        const output = roles.get({plain: true});
+
+        
+        output.users_app_role = await roles.getUsers_app_role({
+            transaction
+        });
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        output.permissions = await roles.getPermissions({
+            transaction
+        });
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+
+      {
+        model: db.permissions,
+        as: 'permissions',
+        required: false,
+      },
+
+
+    ];
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+            if (filter.name) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'roles',
+                        'name',
+                        filter.name,
+                    ),
+                };
+            }
+            
+            if (filter.role_customization) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'roles',
+                        'role_customization',
+                        filter.role_customization,
+                    ),
+                };
+            }
+            
+
+            
+            
+
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+
+
+
+      if (filter.permissions) {
+        const searchTerms = filter.permissions.split('|');
+
+        include = [
+          {
+            model: db.permissions,
+            as: 'permissions_filter',
+            required: searchTerms.length > 0,
+            where: searchTerms.length > 0 ? {
+              [Op.or]: [
+                { id: { [Op.in]: searchTerms.map(term => Utils.uuid(term)) } },
+                { 
+                  name: {
+                    [Op.or]: searchTerms.map(term => ({ [Op.iLike]: `%${term}%` }))
+                  }
+                }
+              ]
+            } : undefined
+          },
+          ...include,
+        ]
+      }
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.roles.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'roles',
+                        'name',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.roles.findAll({
+            attributes: [ 'id', 'name' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['name', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.name,
+        }));
+    }
+
+    
+};

backend/src/db/api/runtime-context.js

@@ -0,0 +1,51 @@
+function getRuntimeContext(options = {}) {
+  return (options || {}).runtimeContext || null;
+}
+
+function getRuntimeEnvironment(options = {}) {
+  const runtimeContext = getRuntimeContext(options);
+
+  if (!runtimeContext) return null;
+  if (runtimeContext.mode === 'stage') return 'stage';
+  if (runtimeContext.mode === 'production') return 'production';
+
+  return null;
+}
+
+function getRuntimeProjectSlug(options = {}) {
+  const runtimeContext = getRuntimeContext(options);
+  return runtimeContext?.projectSlug || null;
+}
+
+function applyRuntimeEnvironment(where = {}, options = {}) {
+  const environment = getRuntimeEnvironment(options);
+
+  if (!environment) return where;
+
+  return {
+    ...where,
+    environment,
+  };
+}
+
+function applyRuntimeProjectFilter(projectInclude = {}, options = {}) {
+  const projectSlug = getRuntimeProjectSlug(options);
+
+  if (!projectSlug) return projectInclude;
+
+  return {
+    ...projectInclude,
+    required: true,
+    where: {
+      ...(projectInclude.where || {}),
+      slug: projectSlug,
+    },
+  };
+}
+
+module.exports = {
+  applyRuntimeEnvironment,
+  applyRuntimeProjectFilter,
+  getRuntimeEnvironment,
+  getRuntimeProjectSlug,
+};

backend/src/db/api/tour_pages.js

@@ -0,0 +1,645 @@
+
+const db = require('../models');
+const Utils = require('../utils');
+const {
+  applyRuntimeEnvironment,
+  applyRuntimeProjectFilter,
+} = require('./runtime-context');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class Tour_pagesDBApi {
+    
+
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+        const projectId = data.project || data.projectId || null;
+
+        const tour_pages = await db.tour_pages.create(
+            {
+                id: data.id || undefined,
+        
+        environment: data.environment
+        ||
+        null
+            ,
+            
+        source_key: data.source_key
+        ||
+        null
+            ,
+            
+        name: data.name
+        ||
+        null
+            ,
+            
+        slug: data.slug
+        ||
+        null
+            ,
+            
+        sort_order: data.sort_order
+        ||
+        null
+            ,
+            
+        background_image_url: data.background_image_url
+        ||
+        null
+            ,
+            
+        background_video_url: data.background_video_url
+        ||
+        null
+            ,
+            
+        background_audio_url: data.background_audio_url
+        ||
+        null
+            ,
+            
+        background_loop: data.background_loop
+        ||
+        false
+        
+            ,
+            
+        requires_auth: data.requires_auth
+        ||
+        false
+        
+            ,
+            
+        ui_schema_json: data.ui_schema_json
+        ||
+        null
+            ,
+            projectId,
+            
+            importHash: data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+        await tour_pages.setProject(projectId, {
+            transaction,
+        });
+        
+
+        
+
+        
+
+        return tour_pages;
+    }
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const tour_pagesData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                environment: item.environment
+            ||
+            null
+            ,
+            
+                source_key: item.source_key
+            ||
+            null
+            ,
+            
+                name: item.name
+            ||
+            null
+            ,
+            
+                slug: item.slug
+            ||
+            null
+            ,
+            
+                sort_order: item.sort_order
+            ||
+            null
+            ,
+            
+                background_image_url: item.background_image_url
+            ||
+            null
+            ,
+            
+                background_video_url: item.background_video_url
+            ||
+            null
+            ,
+            
+                background_audio_url: item.background_audio_url
+            ||
+            null
+            ,
+            
+                background_loop: item.background_loop
+            ||
+            false
+        
+            ,
+            
+                requires_auth: item.requires_auth
+            ||
+            false
+        
+            ,
+            
+                ui_schema_json: item.ui_schema_json
+            ||
+            null
+            ,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const tour_pages = await db.tour_pages.bulkCreate(tour_pagesData, { transaction });
+
+        // For each item created, replace relation files
+        
+
+        return tour_pages;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const tour_pages = await db.tour_pages.findByPk(id, {transaction});
+
+
+        
+
+        const updatePayload = {};
+        
+        if (data.environment !== undefined) updatePayload.environment = data.environment;
+        
+        
+        if (data.source_key !== undefined) updatePayload.source_key = data.source_key;
+        
+        
+        if (data.name !== undefined) updatePayload.name = data.name;
+        
+        
+        if (data.slug !== undefined) updatePayload.slug = data.slug;
+        
+        
+        if (data.sort_order !== undefined) updatePayload.sort_order = data.sort_order;
+        
+        
+        if (data.background_image_url !== undefined) updatePayload.background_image_url = data.background_image_url;
+        
+        
+        if (data.background_video_url !== undefined) updatePayload.background_video_url = data.background_video_url;
+        
+        
+        if (data.background_audio_url !== undefined) updatePayload.background_audio_url = data.background_audio_url;
+        
+        
+        if (data.background_loop !== undefined) updatePayload.background_loop = data.background_loop;
+        
+        
+        if (data.requires_auth !== undefined) updatePayload.requires_auth = data.requires_auth;
+        
+        
+        if (data.ui_schema_json !== undefined) updatePayload.ui_schema_json = data.ui_schema_json;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await tour_pages.update(updatePayload, {transaction});
+
+        
+        
+        if (data.project !== undefined) {
+            await tour_pages.setProject(
+              
+              data.project,
+              
+              { transaction }
+            );
+        }
+        
+
+        
+        
+
+        
+
+        return tour_pages;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const tour_pages = await db.tour_pages.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of tour_pages) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of tour_pages) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return tour_pages;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const tour_pages = await db.tour_pages.findByPk(id, options);
+
+        await tour_pages.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await tour_pages.destroy({
+            transaction
+        });
+
+        return tour_pages;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+        const queryWhere = applyRuntimeEnvironment({ ...where }, options);
+        const projectInclude = applyRuntimeProjectFilter(
+            {
+                model: db.projects,
+                as: 'project',
+            },
+            options,
+        );
+
+        const tour_pages = await db.tour_pages.findOne(
+            { where: queryWhere, include: [projectInclude], transaction },
+        );
+
+        if (!tour_pages) {
+            return tour_pages;
+        }
+
+        const output = tour_pages.get({plain: true});
+
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        output.page_elements_page = await tour_pages.getPage_elements_page({
+            transaction
+        });
+        
+        
+        output.page_links_from_page = await tour_pages.getPage_links_from_page({
+            transaction
+        });
+        
+        output.page_links_to_page = await tour_pages.getPage_links_to_page({
+            transaction
+        });
+        
+        
+        
+        
+        
+        
+        
+        
+        output.project = await tour_pages.getProject({
+            transaction
+        });
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        filter = filter || {};
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+      {
+        model: db.projects,
+        as: 'project',
+        
+        where: filter.project ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.project.split('|').map(term => Utils.uuid(term)) } },
+            {
+              name: {
+                [Op.or]: filter.project.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+
+
+    ];
+        include[0] = applyRuntimeProjectFilter(include[0], options);
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+            if (filter.source_key) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'tour_pages',
+                        'source_key',
+                        filter.source_key,
+                    ),
+                };
+            }
+            
+            if (filter.name) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'tour_pages',
+                        'name',
+                        filter.name,
+                    ),
+                };
+            }
+            
+            if (filter.slug) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'tour_pages',
+                        'slug',
+                        filter.slug,
+                    ),
+                };
+            }
+            
+            if (filter.background_image_url) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'tour_pages',
+                        'background_image_url',
+                        filter.background_image_url,
+                    ),
+                };
+            }
+            
+            if (filter.background_video_url) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'tour_pages',
+                        'background_video_url',
+                        filter.background_video_url,
+                    ),
+                };
+            }
+            
+            if (filter.background_audio_url) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'tour_pages',
+                        'background_audio_url',
+                        filter.background_audio_url,
+                    ),
+                };
+            }
+            
+            if (filter.ui_schema_json) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'tour_pages',
+                        'ui_schema_json',
+                        filter.ui_schema_json,
+                    ),
+                };
+            }
+            
+
+            
+            
+
+            
+            if (filter.sort_orderRange) {
+                const [start, end] = filter.sort_orderRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    sort_order: {
+                    ...where.sort_order,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    sort_order: {
+                    ...where.sort_order,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+            if (filter.environment) {
+                where = {
+                    ...where,
+                environment: filter.environment,
+            };
+            }
+            
+            if (filter.background_loop) {
+                where = {
+                    ...where,
+                background_loop: filter.background_loop,
+            };
+            }
+            
+            if (filter.requires_auth) {
+                where = {
+                    ...where,
+                requires_auth: filter.requires_auth,
+            };
+            }
+            
+
+
+      
+
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        
+        where = applyRuntimeEnvironment(where, options);
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.tour_pages.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'tour_pages',
+                        'name',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.tour_pages.findAll({
+            attributes: [ 'id', 'name' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['name', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.name,
+        }));
+    }
+
+    
+};

backend/src/db/api/transitions.js

@@ -0,0 +1,565 @@
+
+const db = require('../models');
+const Utils = require('../utils');
+const {
+  applyRuntimeEnvironment,
+  applyRuntimeProjectFilter,
+} = require('./runtime-context');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class TransitionsDBApi {
+    
+
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const transitions = await db.transitions.create(
+            {
+                id: data.id || undefined,
+        
+        environment: data.environment
+        ||
+        null
+            ,
+            
+        source_key: data.source_key
+        ||
+        null
+            ,
+            
+        name: data.name
+        ||
+        null
+            ,
+            
+        slug: data.slug
+        ||
+        null
+            ,
+            
+        video_url: data.video_url
+        ||
+        null
+            ,
+            
+        audio_url: data.audio_url
+        ||
+        null
+            ,
+            
+        supports_reverse: data.supports_reverse
+        ||
+        false
+        
+            ,
+            
+        duration_sec: data.duration_sec
+        ||
+        null
+            ,
+            
+            importHash: data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+        await transitions.setProject( data.project || null, {
+            transaction,
+        });
+        
+
+        
+
+        
+
+        return transitions;
+    }
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const transitionsData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                environment: item.environment
+            ||
+            null
+            ,
+            
+                source_key: item.source_key
+            ||
+            null
+            ,
+            
+                name: item.name
+            ||
+            null
+            ,
+            
+                slug: item.slug
+            ||
+            null
+            ,
+            
+                video_url: item.video_url
+            ||
+            null
+            ,
+            
+                audio_url: item.audio_url
+            ||
+            null
+            ,
+            
+                supports_reverse: item.supports_reverse
+            ||
+            false
+        
+            ,
+            
+                duration_sec: item.duration_sec
+            ||
+            null
+            ,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const transitions = await db.transitions.bulkCreate(transitionsData, { transaction });
+
+        // For each item created, replace relation files
+        
+
+        return transitions;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const transitions = await db.transitions.findByPk(id, {transaction});
+
+
+        
+
+        const updatePayload = {};
+        
+        if (data.environment !== undefined) updatePayload.environment = data.environment;
+        
+        
+        if (data.source_key !== undefined) updatePayload.source_key = data.source_key;
+        
+        
+        if (data.name !== undefined) updatePayload.name = data.name;
+        
+        
+        if (data.slug !== undefined) updatePayload.slug = data.slug;
+        
+        
+        if (data.video_url !== undefined) updatePayload.video_url = data.video_url;
+        
+        
+        if (data.audio_url !== undefined) updatePayload.audio_url = data.audio_url;
+        
+        
+        if (data.supports_reverse !== undefined) updatePayload.supports_reverse = data.supports_reverse;
+        
+        
+        if (data.duration_sec !== undefined) updatePayload.duration_sec = data.duration_sec;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await transitions.update(updatePayload, {transaction});
+
+        
+        
+        if (data.project !== undefined) {
+            await transitions.setProject(
+              
+              data.project,
+              
+              { transaction }
+            );
+        }
+        
+
+        
+        
+
+        
+
+        return transitions;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const transitions = await db.transitions.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of transitions) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of transitions) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return transitions;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const transitions = await db.transitions.findByPk(id, options);
+
+        await transitions.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await transitions.destroy({
+            transaction
+        });
+
+        return transitions;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+        const queryWhere = applyRuntimeEnvironment({ ...where }, options);
+        const projectInclude = applyRuntimeProjectFilter(
+            {
+                model: db.projects,
+                as: 'project',
+            },
+            options,
+        );
+
+        const transitions = await db.transitions.findOne(
+            { where: queryWhere, include: [projectInclude], transaction },
+        );
+
+        if (!transitions) {
+            return transitions;
+        }
+
+        const output = transitions.get({plain: true});
+
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        output.page_links_transition = await transitions.getPage_links_transition({
+            transaction
+        });
+        
+        
+        
+        
+        
+        
+        
+        
+        output.project = await transitions.getProject({
+            transaction
+        });
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        filter = filter || {};
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+      {
+        model: db.projects,
+        as: 'project',
+        
+        where: filter.project ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.project.split('|').map(term => Utils.uuid(term)) } },
+            {
+              name: {
+                [Op.or]: filter.project.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+
+
+    ];
+        include[0] = applyRuntimeProjectFilter(include[0], options);
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+            if (filter.source_key) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'transitions',
+                        'source_key',
+                        filter.source_key,
+                    ),
+                };
+            }
+            
+            if (filter.name) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'transitions',
+                        'name',
+                        filter.name,
+                    ),
+                };
+            }
+            
+            if (filter.slug) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'transitions',
+                        'slug',
+                        filter.slug,
+                    ),
+                };
+            }
+            
+            if (filter.video_url) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'transitions',
+                        'video_url',
+                        filter.video_url,
+                    ),
+                };
+            }
+            
+            if (filter.audio_url) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'transitions',
+                        'audio_url',
+                        filter.audio_url,
+                    ),
+                };
+            }
+            
+
+            
+            
+
+            
+            if (filter.duration_secRange) {
+                const [start, end] = filter.duration_secRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    duration_sec: {
+                    ...where.duration_sec,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    duration_sec: {
+                    ...where.duration_sec,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+            if (filter.environment) {
+                where = {
+                    ...where,
+                environment: filter.environment,
+            };
+            }
+            
+            if (filter.supports_reverse) {
+                where = {
+                    ...where,
+                supports_reverse: filter.supports_reverse,
+            };
+            }
+            
+
+
+      
+
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        
+        where = applyRuntimeEnvironment(where, options);
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.transitions.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'transitions',
+                        'name',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.transitions.findAll({
+            attributes: [ 'id', 'name' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['name', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.name,
+        }));
+    }
+
+    
+};

backend/src/db/api/ui_elements.js

@@ -0,0 +1,233 @@
+const db = require('../models');
+const Utils = require('../utils');
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class Ui_elementsDBApi {
+  static async create(data, options) {
+    const currentUser = (options && options.currentUser) || { id: null };
+    const transaction = (options && options.transaction) || undefined;
+
+    const ui_elements = await db.ui_elements.create(
+      {
+        id: data.id || undefined,
+        element_type: data.element_type ?? null,
+        name: data.name ?? null,
+        settings_json: data.settings_json ?? null,
+        sort_order: data.sort_order ?? 0,
+        importHash: data.importHash || null,
+        createdById: currentUser.id,
+        updatedById: currentUser.id,
+      },
+      { transaction },
+    );
+
+    return ui_elements;
+  }
+
+  static async bulkImport(data, options) {
+    const currentUser = (options && options.currentUser) || { id: null };
+    const transaction = (options && options.transaction) || undefined;
+
+    const uiElementsData = data.map((item, index) => ({
+      id: item.id || undefined,
+      element_type: item.element_type ?? null,
+      name: item.name ?? null,
+      settings_json: item.settings_json ?? null,
+      sort_order: item.sort_order ?? 0,
+      importHash: item.importHash || null,
+      createdById: currentUser.id,
+      updatedById: currentUser.id,
+      createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+    const ui_elements = await db.ui_elements.bulkCreate(uiElementsData, { transaction });
+
+    return ui_elements;
+  }
+
+  static async update(id, data, options) {
+    const currentUser = (options && options.currentUser) || { id: null };
+    const transaction = (options && options.transaction) || undefined;
+
+    const ui_elements = await db.ui_elements.findByPk(id, { transaction });
+
+    const updatePayload = {};
+
+    if (data.element_type !== undefined) updatePayload.element_type = data.element_type;
+    if (data.name !== undefined) updatePayload.name = data.name;
+    if (data.settings_json !== undefined) updatePayload.settings_json = data.settings_json;
+    if (data.sort_order !== undefined) updatePayload.sort_order = data.sort_order;
+
+    updatePayload.updatedById = currentUser.id;
+
+    await ui_elements.update(updatePayload, { transaction });
+
+    return ui_elements;
+  }
+
+  static async deleteByIds(ids, options) {
+    const currentUser = (options && options.currentUser) || { id: null };
+    const transaction = (options && options.transaction) || undefined;
+
+    const ui_elements = await db.ui_elements.findAll({
+      where: {
+        id: {
+          [Op.in]: ids,
+        },
+      },
+      transaction,
+    });
+
+    await db.sequelize.transaction(async (innerTransaction) => {
+      for (const record of ui_elements) {
+        await record.update({ deletedBy: currentUser.id }, { transaction: innerTransaction });
+      }
+      for (const record of ui_elements) {
+        await record.destroy({ transaction: innerTransaction });
+      }
+    });
+
+    return ui_elements;
+  }
+
+  static async remove(id, options) {
+    const currentUser = (options && options.currentUser) || { id: null };
+    const transaction = (options && options.transaction) || undefined;
+
+    const ui_elements = await db.ui_elements.findByPk(id, options);
+
+    await ui_elements.update(
+      {
+        deletedBy: currentUser.id,
+      },
+      {
+        transaction,
+      },
+    );
+
+    await ui_elements.destroy({
+      transaction,
+    });
+
+    return ui_elements;
+  }
+
+  static async findBy(where, options) {
+    const transaction = (options && options.transaction) || undefined;
+
+    const ui_elements = await db.ui_elements.findOne({ where, transaction });
+
+    if (!ui_elements) {
+      return ui_elements;
+    }
+
+    return ui_elements.get({ plain: true });
+  }
+
+  static async findAll(filter, options) {
+    filter = filter || {};
+    const limit = Number(filter.limit) || 0;
+    const currentPage = Number(filter.page) || 0;
+    const offset = limit ? currentPage * limit : undefined;
+    let where = {};
+
+    if (filter.id) {
+      where = {
+        ...where,
+        id: Utils.uuid(filter.id),
+      };
+    }
+
+    if (filter.name) {
+      where = {
+        ...where,
+        [Op.and]: Utils.ilike('ui_elements', 'name', filter.name),
+      };
+    }
+
+    if (filter.element_type) {
+      where = {
+        ...where,
+        element_type: filter.element_type,
+      };
+    }
+
+    if (filter.sort_orderRange) {
+      const [start, end] = filter.sort_orderRange;
+
+      if (start !== undefined && start !== null && start !== '') {
+        where = {
+          ...where,
+          sort_order: {
+            ...where.sort_order,
+            [Op.gte]: start,
+          },
+        };
+      }
+
+      if (end !== undefined && end !== null && end !== '') {
+        where = {
+          ...where,
+          sort_order: {
+            ...where.sort_order,
+            [Op.lte]: end,
+          },
+        };
+      }
+    }
+
+    let { orderBy = null } = options || {};
+    if (!orderBy) {
+      const sort = filter.sort || 'desc';
+      const field = filter.field || 'createdAt';
+      orderBy = [[field, sort]];
+    }
+
+    const { rows, count } = await db.ui_elements.findAndCountAll({
+      where,
+      limit: limit || undefined,
+      offset,
+      order: orderBy,
+    });
+
+    return {
+      rows,
+      count,
+    };
+  }
+
+  static async findAllAutocomplete(query, limit) {
+    let where = {};
+
+    if (query) {
+      where = {
+        [Op.or]: [
+          {
+            id: {
+              [Op.eq]: Utils.uuid(query),
+            },
+          },
+          {
+            name: {
+              [Op.iLike]: `%${query}%`,
+            },
+          },
+        ],
+      };
+    }
+
+    const records = await db.ui_elements.findAll({
+      attributes: ['id', 'name'],
+      where,
+      limit: Number(limit) || undefined,
+      order: [['name', 'ASC']],
+    });
+
+    return records.map((record) => ({
+      id: record.id,
+      label: record.name,
+    }));
+  }
+};

backend/src/db/api/users.js

@@ -0,0 +1,943 @@
+
+const db = require('../models');
+const FileDBApi = require('./file');
+const crypto = require('crypto');
+const Utils = require('../utils');
+
+const bcrypt = require('bcrypt');
+const config = require('../../config');
+
+
+
+const Sequelize = db.Sequelize;
+const Op = Sequelize.Op;
+
+module.exports = class UsersDBApi {
+    
+    static async create(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+
+        const users = await db.users.create(
+            {
+                id: data.data.id || undefined,
+        
+        firstName: data.data.firstName
+        ||
+        null
+            ,
+            
+        lastName: data.data.lastName
+        ||
+        null
+            ,
+            
+        phoneNumber: data.data.phoneNumber
+        ||
+        null
+            ,
+            
+        email: data.data.email
+        ||
+        null
+            ,
+            
+        disabled: data.data.disabled
+        ||
+        false
+        
+            ,
+            
+        password: data.data.password
+        ||
+        null
+            ,
+            
+        emailVerified: data.data.emailVerified
+        ||
+        true
+        
+            ,
+            
+        emailVerificationToken: data.data.emailVerificationToken
+        ||
+        null
+            ,
+            
+        emailVerificationTokenExpiresAt: data.data.emailVerificationTokenExpiresAt
+        ||
+        null
+            ,
+            
+        passwordResetToken: data.data.passwordResetToken
+        ||
+        null
+            ,
+            
+        passwordResetTokenExpiresAt: data.data.passwordResetTokenExpiresAt
+        ||
+        null
+            ,
+            
+        provider: data.data.provider
+        ||
+        null
+            ,
+            
+            importHash: data.data.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+    },
+        { transaction },
+    );
+
+        
+        
+        if (!data.data.app_role) {
+            const role = await db.roles.findOne({
+                where: { name: 'User' },
+            });
+            if (role) {
+                await users.setApp_role(role, {
+                    transaction,
+                });
+            }
+        }else{
+            await users.setApp_role(data.data.app_role || null, {
+                transaction,
+            });
+        }
+        
+        
+
+        
+        await users.setCustom_permissions(data.data.custom_permissions || [], {
+            transaction,
+        });
+        
+
+        
+        await FileDBApi.replaceRelationFiles(
+            {
+                belongsTo: db.users.getTableName(),
+                belongsToColumn: 'avatar',
+                belongsToId: users.id,
+            },
+            data.data.avatar,
+            options,
+        );
+        
+
+        return users;
+    }
+    
+
+    
+
+    static async bulkImport(data, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        // Prepare data - wrapping individual data transformations in a map() method
+        const usersData = data.map((item, index) => ({
+                id: item.id || undefined,
+                
+                firstName: item.firstName
+            ||
+            null
+            ,
+            
+                lastName: item.lastName
+            ||
+            null
+            ,
+            
+                phoneNumber: item.phoneNumber
+            ||
+            null
+            ,
+            
+                email: item.email
+            ||
+            null
+            ,
+            
+                disabled: item.disabled
+            ||
+            false
+        
+            ,
+            
+                password: item.password
+            ||
+            null
+            ,
+            
+                emailVerified: item.emailVerified
+            ||
+            false
+        
+            ,
+            
+                emailVerificationToken: item.emailVerificationToken
+            ||
+            null
+            ,
+            
+                emailVerificationTokenExpiresAt: item.emailVerificationTokenExpiresAt
+            ||
+            null
+            ,
+            
+                passwordResetToken: item.passwordResetToken
+            ||
+            null
+            ,
+            
+                passwordResetTokenExpiresAt: item.passwordResetTokenExpiresAt
+            ||
+            null
+            ,
+            
+                provider: item.provider
+            ||
+            null
+            ,
+            
+            importHash: item.importHash || null,
+            createdById: currentUser.id,
+            updatedById: currentUser.id,
+            createdAt: new Date(Date.now() + index * 1000),
+    }));
+
+        // Bulk create items
+        const users = await db.users.bulkCreate(usersData, { transaction });
+
+        // For each item created, replace relation files
+        
+        for (let i = 0; i < users.length; i++) {
+            await FileDBApi.replaceRelationFiles(
+                {
+                    belongsTo: db.users.getTableName(),
+                    belongsToColumn: 'avatar',
+                    belongsToId: users[i].id,
+                },
+                data[i].avatar,
+                options,
+            );
+        }
+        
+
+        return users;
+    }
+
+    static async update(id, data,  options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        
+
+        const users = await db.users.findByPk(id, {transaction});
+
+
+        
+
+        if (!data?.app_role) {
+            data.app_role = users?.app_role?.id;
+        }
+        if (!data?.custom_permissions) {
+            data.custom_permissions = users?.custom_permissions?.map(item => item.id);
+        }
+
+        if (data.password) {
+            data.password = bcrypt.hashSync(
+                data.password,
+                config.bcrypt.saltRounds,
+            );
+        } else {
+            data.password = users.password;
+        }
+        
+
+        const updatePayload = {};
+        
+        if (data.firstName !== undefined) updatePayload.firstName = data.firstName;
+        
+        
+        if (data.lastName !== undefined) updatePayload.lastName = data.lastName;
+        
+        
+        if (data.phoneNumber !== undefined) updatePayload.phoneNumber = data.phoneNumber;
+        
+        
+        if (data.email !== undefined) updatePayload.email = data.email;
+        
+        
+        if (data.disabled !== undefined) updatePayload.disabled = data.disabled;
+        
+        
+        if (data.password !== undefined) updatePayload.password = data.password;
+        
+        
+        if (data.emailVerified !== undefined) updatePayload.emailVerified = data.emailVerified;
+        
+        else updatePayload.emailVerified = true;
+        
+        
+        if (data.emailVerificationToken !== undefined) updatePayload.emailVerificationToken = data.emailVerificationToken;
+        
+        
+        if (data.emailVerificationTokenExpiresAt !== undefined) updatePayload.emailVerificationTokenExpiresAt = data.emailVerificationTokenExpiresAt;
+        
+        
+        if (data.passwordResetToken !== undefined) updatePayload.passwordResetToken = data.passwordResetToken;
+        
+        
+        if (data.passwordResetTokenExpiresAt !== undefined) updatePayload.passwordResetTokenExpiresAt = data.passwordResetTokenExpiresAt;
+        
+        
+        if (data.provider !== undefined) updatePayload.provider = data.provider;
+        
+        
+        updatePayload.updatedById = currentUser.id;
+
+        await users.update(updatePayload, {transaction});
+
+        
+        
+        if (data.app_role !== undefined) {
+            await users.setApp_role(
+              
+              data.app_role,
+              
+              { transaction }
+            );
+        }
+        
+
+        
+        
+        if (data.custom_permissions !== undefined) {
+            await users.setCustom_permissions(data.custom_permissions, { transaction });
+        }
+        
+
+        
+        await FileDBApi.replaceRelationFiles(
+            {
+                belongsTo: db.users.getTableName(),
+                belongsToColumn: 'avatar',
+                belongsToId: users.id,
+            },
+            data.avatar,
+            options,
+        );
+        
+
+        return users;
+    }
+
+    static async deleteByIds(ids, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const users = await db.users.findAll({
+            where: {
+                id: {
+                    [Op.in]: ids,
+                },
+            },
+            transaction,
+        });
+
+        await db.sequelize.transaction(async (transaction) => {
+            for (const record of users) {
+                await record.update(
+                    {deletedBy: currentUser.id},
+                    {transaction}
+                );
+            }
+            for (const record of users) {
+                await record.destroy({transaction});
+            }
+        });
+
+
+        return users;
+    }
+
+    static async remove(id, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+
+        const users = await db.users.findByPk(id, options);
+
+        await users.update({
+            deletedBy: currentUser.id
+        }, {
+            transaction,
+        });
+
+        await users.destroy({
+            transaction
+        });
+
+        return users;
+    }
+
+    static async findBy(where, options) {
+        const transaction = (options && options.transaction) || undefined;
+
+        const users = await db.users.findOne({
+            where,
+            transaction,
+        });
+
+        if (!users) {
+            return users;
+        }
+
+        const output = users.get({plain: true});
+
+        
+        
+        
+        
+        
+        output.project_memberships_user = await users.getProject_memberships_user({
+            transaction
+        });
+        
+        
+        
+        
+        output.presigned_url_requests_user = await users.getPresigned_url_requests_user({
+            transaction
+        });
+        
+        
+        
+        
+        
+        
+        
+        output.publish_events_user = await users.getPublish_events_user({
+            transaction
+        });
+        
+        
+        
+        output.access_logs_user = await users.getAccess_logs_user({
+            transaction
+        });
+        
+        
+        
+        output.avatar = await users.getAvatar({
+            transaction
+        });
+        
+        
+        output.app_role = await users.getApp_role({
+            transaction
+        });
+        
+        if (output.app_role) {
+            output.app_role_permissions = await output.app_role.getPermissions({
+                transaction,
+            });
+        }
+        
+        
+        output.custom_permissions = await users.getCustom_permissions({
+            transaction
+        });
+        
+        
+
+        return output;
+    }
+
+    static async findAll(
+          filter,
+           options
+        ) {
+        const limit = filter.limit || 0;
+        let offset = 0;
+        let where = {};
+        const currentPage = +filter.page;
+
+        
+
+        
+
+        offset = currentPage * limit;
+
+    let include = [
+
+      {
+        model: db.roles,
+        as: 'app_role',
+        
+        where: filter.app_role ? {
+          [Op.or]: [
+            { id: { [Op.in]: filter.app_role.split('|').map(term => Utils.uuid(term)) } },
+            {
+              name: {
+                [Op.or]: filter.app_role.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
+              }
+            },
+          ]
+        } : {},
+        
+      },
+
+
+      {
+        model: db.permissions,
+        as: 'custom_permissions',
+        required: false,
+      },
+
+
+      {
+        model: db.file,
+        as: 'avatar',
+      },
+
+    ];
+
+        if (filter) {
+            if (filter.id) {
+                where = {
+                    ...where,
+                    ['id']: Utils.uuid(filter.id),
+                };
+            }
+
+            
+            if (filter.firstName) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'users',
+                        'firstName',
+                        filter.firstName,
+                    ),
+                };
+            }
+            
+            if (filter.lastName) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'users',
+                        'lastName',
+                        filter.lastName,
+                    ),
+                };
+            }
+            
+            if (filter.phoneNumber) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'users',
+                        'phoneNumber',
+                        filter.phoneNumber,
+                    ),
+                };
+            }
+            
+            if (filter.email) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'users',
+                        'email',
+                        filter.email,
+                    ),
+                };
+            }
+            
+            if (filter.password) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'users',
+                        'password',
+                        filter.password,
+                    ),
+                };
+            }
+            
+            if (filter.emailVerificationToken) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'users',
+                        'emailVerificationToken',
+                        filter.emailVerificationToken,
+                    ),
+                };
+            }
+            
+            if (filter.passwordResetToken) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'users',
+                        'passwordResetToken',
+                        filter.passwordResetToken,
+                    ),
+                };
+            }
+            
+            if (filter.provider) {
+                where = {
+                    ...where,
+                    [Op.and]: Utils.ilike(
+                        'users',
+                        'provider',
+                        filter.provider,
+                    ),
+                };
+            }
+            
+
+            
+            
+
+            
+            if (filter.emailVerificationTokenExpiresAtRange) {
+                const [start, end] = filter.emailVerificationTokenExpiresAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    emailVerificationTokenExpiresAt: {
+                    ...where.emailVerificationTokenExpiresAt,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    emailVerificationTokenExpiresAt: {
+                    ...where.emailVerificationTokenExpiresAt,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+            if (filter.passwordResetTokenExpiresAtRange) {
+                const [start, end] = filter.passwordResetTokenExpiresAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                    passwordResetTokenExpiresAt: {
+                    ...where.passwordResetTokenExpiresAt,
+                            [Op.gte]: start,
+                    },
+                };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                    passwordResetTokenExpiresAt: {
+                    ...where.passwordResetTokenExpiresAt,
+                            [Op.lte]: end,
+                    },
+                };
+                }
+            }
+            
+
+            if (filter.active !== undefined) {
+                where = {
+                    ...where,
+                    active: filter.active === true || filter.active === 'true'
+                };
+            }
+
+            
+            if (filter.disabled) {
+                where = {
+                    ...where,
+                disabled: filter.disabled,
+            };
+            }
+            
+            if (filter.emailVerified) {
+                where = {
+                    ...where,
+                emailVerified: filter.emailVerified,
+            };
+            }
+            
+
+
+      
+
+
+      if (filter.custom_permissions) {
+        const searchTerms = filter.custom_permissions.split('|');
+
+        include = [
+          {
+            model: db.permissions,
+            as: 'custom_permissions_filter',
+            required: searchTerms.length > 0,
+            where: searchTerms.length > 0 ? {
+              [Op.or]: [
+                { id: { [Op.in]: searchTerms.map(term => Utils.uuid(term)) } },
+                { 
+                  name: {
+                    [Op.or]: searchTerms.map(term => ({ [Op.iLike]: `%${term}%` }))
+                  }
+                }
+              ]
+            } : undefined
+          },
+          ...include,
+        ]
+      }
+
+
+            if (filter.createdAtRange) {
+                const [start, end] = filter.createdAtRange;
+
+                if (start !== undefined && start !== null && start !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.gte]: start,
+                        },
+                    };
+                }
+
+                if (end !== undefined && end !== null && end !== '') {
+                    where = {
+                        ...where,
+                        ['createdAt']: {
+                            ...where.createdAt,
+                            [Op.lte]: end,
+                        },
+                    };
+                }
+            }
+        }
+        
+
+        
+
+        const queryOptions = {
+            where,
+            include,
+            distinct: true,
+            order: filter.field && filter.sort
+                ? [[filter.field, filter.sort]]
+                : [['createdAt', 'desc']],
+            transaction: options?.transaction,
+            logging: console.log
+        };
+
+        if (!options?.countOnly) {
+            queryOptions.limit = limit ? Number(limit) : undefined;
+            queryOptions.offset = offset ? Number(offset) : undefined;
+        }
+
+        try {
+            const { rows, count } = await db.users.findAndCountAll(queryOptions);
+
+            return {
+                rows: options?.countOnly ? [] : rows,
+                count: count
+            };
+        } catch (error) {
+            console.error('Error executing query:', error);
+            throw error;
+        }
+    }
+
+    static async findAllAutocomplete(query, limit, offset, ) {
+        let where = {};
+        
+        
+
+        if (query) {
+            where = {
+                [Op.or]: [
+                    { ['id']: Utils.uuid(query) },
+                    Utils.ilike(
+                        'users',
+                        'firstName',
+                        query,
+                    ),
+                ],
+            };
+        }
+
+        const records = await db.users.findAll({
+            attributes: [ 'id', 'firstName' ],
+            where,
+            limit: limit ? Number(limit) : undefined,
+            offset: offset ? Number(offset) : undefined,
+            orderBy: [['firstName', 'ASC']],
+        });
+
+        return records.map((record) => ({
+            id: record.id,
+            label: record.firstName,
+        }));
+    }
+
+    
+    static async createFromAuth(data, options) {
+        const transaction = (options && options.transaction) || undefined;
+        const users = await db.users.create(
+            {
+                email: data.email,
+                firstName: data.firstName,
+                authenticationUid: data.authenticationUid,
+                password: data.password,
+                
+            },
+            { transaction },
+        );
+
+        const app_role = await db.roles.findOne({
+            where: { name: config.roles?.user || "User" },
+        });
+        if (app_role?.id) {
+            await users.setApp_role(app_role?.id || null, {
+                transaction,
+            });
+        }
+
+        await users.update(
+            {
+                authenticationUid: users.id,
+            },
+            { transaction },
+        );
+
+        delete users.password;
+        return users;
+    }
+
+    static async updatePassword(id, password, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+
+        const transaction = (options && options.transaction) || undefined;
+
+        const users = await db.users.findByPk(id, {
+            transaction,
+        });
+
+        await users.update(
+            {
+                password,
+                authenticationUid: id,
+                updatedById: currentUser.id,
+            },
+            { transaction },
+        );
+
+        return users;
+    }
+
+    static async generateEmailVerificationToken(email, options) {
+        return this._generateToken(['emailVerificationToken', 'emailVerificationTokenExpiresAt'], email, options);
+    }
+
+    static async generatePasswordResetToken(email, options) {
+        return this._generateToken(['passwordResetToken', 'passwordResetTokenExpiresAt'], email, options);
+    }
+
+    static async findByPasswordResetToken(token, options) {
+        const transaction = (options && options.transaction) || undefined;
+
+        return db.users.findOne({
+            where: {
+                passwordResetToken: token,
+                passwordResetTokenExpiresAt: {
+                    [db.Sequelize.Op.gt]: Date.now(),
+                },
+            },
+            transaction,
+        });
+    }
+
+    static async findByEmailVerificationToken(
+        token,
+        options,
+    ) {
+        const transaction = (options && options.transaction) || undefined;
+        return db.users.findOne({
+            where: {
+                emailVerificationToken: token,
+                emailVerificationTokenExpiresAt: {
+                    [db.Sequelize.Op.gt]: Date.now(),
+                },
+            },
+            transaction,
+        });
+    }
+
+    static async markEmailVerified(id, options) {
+        const currentUser = (options && options.currentUser) || { id: null };
+        const transaction = (options && options.transaction) || undefined;
+
+        const users = await db.users.findByPk(id, {
+            transaction,
+        });
+
+        await users.update(
+            {
+                emailVerified: true,
+                updatedById: currentUser.id,
+            },
+            { transaction },
+        );
+
+        return true;
+    }
+
+    static async _generateToken(keyNames, email, options) {
+        const currentUser = (options && options.currentUser) || {id: null};
+        const transaction = (options && options.transaction) || undefined;
+        const users = await db.users.findOne({
+            where: { email: email.toLowerCase() },
+            transaction,
+        });
+
+        const token = crypto
+            .randomBytes(20)
+            .toString('hex');
+        const tokenExpiresAt = Date.now() + 360000;
+
+        if(users){
+            await users.update(
+                {
+                    [keyNames[0]]: token,
+                    [keyNames[1]]: tokenExpiresAt,
+                    updatedById: currentUser.id,
+                },
+                {transaction},
+            );
+        }
+
+
+        return token;
+    }
+
+    
+    
+};

backend/src/db/db.config.js

@@ -0,0 +1,33 @@
+
+
+module.exports = {
+  production: {
+    dialect: 'postgres',
+    username: process.env.DB_USER,
+    password: process.env.DB_PASS,
+    database: process.env.DB_NAME,
+    host: process.env.DB_HOST,
+    port: process.env.DB_PORT,
+    logging: console.log,
+    seederStorage: 'sequelize',
+  },
+  development: {
+    username: 'postgres',
+    dialect: 'postgres',
+    password: '',
+    database: 'db_tour_builder_platform',
+    host: process.env.DB_HOST || 'localhost',
+    logging: console.log,
+    seederStorage: 'sequelize',
+  },
+    dev_stage: {
+      dialect: 'postgres',
+      username: process.env.DB_USER,
+      password: process.env.DB_PASS,
+      database: process.env.DB_NAME,
+      host: process.env.DB_HOST,
+      port: process.env.DB_PORT,
+      logging: console.log,
+      seederStorage: 'sequelize',
+    }
+};

backend/src/db/migrations/20260316000000-create-files.js

@@ -0,0 +1,124 @@
+module.exports = {
+  async up(queryInterface, Sequelize) {
+    const transaction = await queryInterface.sequelize.transaction();
+
+    try {
+      const rows = await queryInterface.sequelize.query(
+        "SELECT to_regclass('public.files') AS regclass_name;",
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+      const tableName = rows[0].regclass_name;
+
+      if (tableName) {
+        await transaction.commit();
+        return;
+      }
+
+      await queryInterface.createTable(
+        'files',
+        {
+          id: {
+            type: Sequelize.DataTypes.UUID,
+            defaultValue: Sequelize.DataTypes.UUIDV4,
+            primaryKey: true,
+          },
+          belongsTo: {
+            type: Sequelize.DataTypes.STRING(255),
+            allowNull: true,
+          },
+          belongsToId: {
+            type: Sequelize.DataTypes.UUID,
+            allowNull: true,
+          },
+          belongsToColumn: {
+            type: Sequelize.DataTypes.STRING(255),
+            allowNull: true,
+          },
+          name: {
+            type: Sequelize.DataTypes.STRING(2083),
+            allowNull: false,
+          },
+          sizeInBytes: {
+            type: Sequelize.DataTypes.INTEGER,
+            allowNull: true,
+          },
+          privateUrl: {
+            type: Sequelize.DataTypes.STRING(2083),
+            allowNull: true,
+          },
+          publicUrl: {
+            type: Sequelize.DataTypes.STRING(2083),
+            allowNull: false,
+          },
+          createdAt: {
+            type: Sequelize.DataTypes.DATE,
+            allowNull: false,
+          },
+          updatedAt: {
+            type: Sequelize.DataTypes.DATE,
+            allowNull: false,
+          },
+          deletedAt: {
+            type: Sequelize.DataTypes.DATE,
+            allowNull: true,
+          },
+          createdById: {
+            type: Sequelize.DataTypes.UUID,
+            allowNull: true,
+            references: {
+              key: 'id',
+              model: 'users',
+            },
+            onDelete: 'SET NULL',
+            onUpdate: 'CASCADE',
+          },
+          updatedById: {
+            type: Sequelize.DataTypes.UUID,
+            allowNull: true,
+            references: {
+              key: 'id',
+              model: 'users',
+            },
+            onDelete: 'SET NULL',
+            onUpdate: 'CASCADE',
+          },
+        },
+        { transaction },
+      );
+
+      await transaction.commit();
+    } catch (err) {
+      await transaction.rollback();
+      throw err;
+    }
+  },
+
+  async down(queryInterface, Sequelize) {
+    const transaction = await queryInterface.sequelize.transaction();
+
+    try {
+      const rows = await queryInterface.sequelize.query(
+        "SELECT to_regclass('public.files') AS regclass_name;",
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+      const tableName = rows[0].regclass_name;
+
+      if (!tableName) {
+        await transaction.commit();
+        return;
+      }
+
+      await queryInterface.dropTable('files', { transaction });
+      await transaction.commit();
+    } catch (err) {
+      await transaction.rollback();
+      throw err;
+    }
+  },
+};

backend/src/db/migrations/20260316001000-create-users-custom-permissions-join-table.js

@@ -0,0 +1,95 @@
+module.exports = {
+  async up(queryInterface, Sequelize) {
+    const transaction = await queryInterface.sequelize.transaction();
+
+    try {
+      const rows = await queryInterface.sequelize.query(
+        "SELECT to_regclass('public.\"usersCustom_permissionsPermissions\"') AS regclass_name;",
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+      const tableName = rows[0].regclass_name;
+
+      if (tableName) {
+        await transaction.commit();
+        return;
+      }
+
+      await queryInterface.createTable(
+        'usersCustom_permissionsPermissions',
+        {
+          createdAt: {
+            type: Sequelize.DataTypes.DATE,
+            allowNull: false,
+          },
+          updatedAt: {
+            type: Sequelize.DataTypes.DATE,
+            allowNull: false,
+          },
+          users_custom_permissionsId: {
+            type: Sequelize.DataTypes.UUID,
+            allowNull: false,
+            primaryKey: true,
+            references: {
+              model: 'users',
+              key: 'id',
+            },
+            onDelete: 'CASCADE',
+            onUpdate: 'CASCADE',
+          },
+          permissionId: {
+            type: Sequelize.DataTypes.UUID,
+            allowNull: false,
+            primaryKey: true,
+            references: {
+              model: 'permissions',
+              key: 'id',
+            },
+            onDelete: 'CASCADE',
+            onUpdate: 'CASCADE',
+          },
+        },
+        { transaction },
+      );
+
+      await queryInterface.addIndex(
+        'usersCustom_permissionsPermissions',
+        ['permissionId'],
+        { transaction },
+      );
+
+      await transaction.commit();
+    } catch (err) {
+      await transaction.rollback();
+      throw err;
+    }
+  },
+
+  async down(queryInterface, Sequelize) {
+    const transaction = await queryInterface.sequelize.transaction();
+
+    try {
+      const rows = await queryInterface.sequelize.query(
+        "SELECT to_regclass('public.\"usersCustom_permissionsPermissions\"') AS regclass_name;",
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+      const tableName = rows[0].regclass_name;
+
+      if (!tableName) {
+        await transaction.commit();
+        return;
+      }
+
+      await queryInterface.dropTable('usersCustom_permissionsPermissions', { transaction });
+      await transaction.commit();
+    } catch (err) {
+      await transaction.rollback();
+      throw err;
+    }
+  },
+};

backend/src/db/migrations/20260317090000-make-page-elements-pageid-nullable.js

@@ -0,0 +1,123 @@
+module.exports = {
+  async up(queryInterface, Sequelize) {
+    const transaction = await queryInterface.sequelize.transaction();
+
+    try {
+      const tableRows = await queryInterface.sequelize.query(
+        "SELECT to_regclass('public.page_elements') AS regclass_name;",
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+
+      if (!tableRows[0]?.regclass_name) {
+        await transaction.commit();
+        return;
+      }
+
+      const nullableRows = await queryInterface.sequelize.query(
+        `SELECT is_nullable
+         FROM information_schema.columns
+         WHERE table_schema = 'public'
+           AND table_name = 'page_elements'
+           AND column_name = 'pageId';`,
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+
+      if (!nullableRows.length || nullableRows[0].is_nullable === 'YES') {
+        await transaction.commit();
+        return;
+      }
+
+      await queryInterface.changeColumn(
+        'page_elements',
+        'pageId',
+        {
+          type: Sequelize.DataTypes.UUID,
+          allowNull: true,
+          references: {
+            model: 'tour_pages',
+            key: 'id',
+          },
+        },
+        { transaction },
+      );
+
+      await transaction.commit();
+    } catch (err) {
+      await transaction.rollback();
+      throw err;
+    }
+  },
+
+  async down(queryInterface, Sequelize) {
+    const transaction = await queryInterface.sequelize.transaction();
+
+    try {
+      const tableRows = await queryInterface.sequelize.query(
+        "SELECT to_regclass('public.page_elements') AS regclass_name;",
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+
+      if (!tableRows[0]?.regclass_name) {
+        await transaction.commit();
+        return;
+      }
+
+      const nullableRows = await queryInterface.sequelize.query(
+        `SELECT is_nullable
+         FROM information_schema.columns
+         WHERE table_schema = 'public'
+           AND table_name = 'page_elements'
+           AND column_name = 'pageId';`,
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+
+      if (!nullableRows.length || nullableRows[0].is_nullable === 'NO') {
+        await transaction.commit();
+        return;
+      }
+
+      const nullCountRows = await queryInterface.sequelize.query(
+        'SELECT COUNT(*)::int AS count FROM "page_elements" WHERE "pageId" IS NULL;',
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+
+      if (Number(nullCountRows[0]?.count || 0) > 0) {
+        throw new Error('Cannot make page_elements.pageId NOT NULL because NULL values exist.');
+      }
+
+      await queryInterface.changeColumn(
+        'page_elements',
+        'pageId',
+        {
+          type: Sequelize.DataTypes.UUID,
+          allowNull: false,
+          references: {
+            model: 'tour_pages',
+            key: 'id',
+          },
+        },
+        { transaction },
+      );
+
+      await transaction.commit();
+    } catch (err) {
+      await transaction.rollback();
+      throw err;
+    }
+  },
+};

backend/src/db/migrations/20260317091000-drop-not-null-page-elements-pageid.js

@@ -0,0 +1,105 @@
+module.exports = {
+  async up(queryInterface, Sequelize) {
+    const transaction = await queryInterface.sequelize.transaction();
+
+    try {
+      const tableRows = await queryInterface.sequelize.query(
+        "SELECT to_regclass('public.page_elements') AS regclass_name;",
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+
+      if (!tableRows[0]?.regclass_name) {
+        await transaction.commit();
+        return;
+      }
+
+      const nullableRows = await queryInterface.sequelize.query(
+        `SELECT is_nullable
+         FROM information_schema.columns
+         WHERE table_schema = 'public'
+           AND table_name = 'page_elements'
+           AND column_name = 'pageId';`,
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+
+      if (!nullableRows.length || nullableRows[0].is_nullable === 'YES') {
+        await transaction.commit();
+        return;
+      }
+
+      await queryInterface.sequelize.query(
+        'ALTER TABLE "page_elements" ALTER COLUMN "pageId" DROP NOT NULL;',
+        { transaction },
+      );
+
+      await transaction.commit();
+    } catch (err) {
+      await transaction.rollback();
+      throw err;
+    }
+  },
+
+  async down(queryInterface, Sequelize) {
+    const transaction = await queryInterface.sequelize.transaction();
+
+    try {
+      const tableRows = await queryInterface.sequelize.query(
+        "SELECT to_regclass('public.page_elements') AS regclass_name;",
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+
+      if (!tableRows[0]?.regclass_name) {
+        await transaction.commit();
+        return;
+      }
+
+      const nullableRows = await queryInterface.sequelize.query(
+        `SELECT is_nullable
+         FROM information_schema.columns
+         WHERE table_schema = 'public'
+           AND table_name = 'page_elements'
+           AND column_name = 'pageId';`,
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+
+      if (!nullableRows.length || nullableRows[0].is_nullable === 'NO') {
+        await transaction.commit();
+        return;
+      }
+
+      const nullCountRows = await queryInterface.sequelize.query(
+        'SELECT COUNT(*)::int AS count FROM "page_elements" WHERE "pageId" IS NULL;',
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+
+      if (Number(nullCountRows[0]?.count || 0) > 0) {
+        throw new Error('Cannot make page_elements.pageId NOT NULL because NULL values exist.');
+      }
+
+      await queryInterface.sequelize.query(
+        'ALTER TABLE "page_elements" ALTER COLUMN "pageId" SET NOT NULL;',
+        { transaction },
+      );
+
+      await transaction.commit();
+    } catch (err) {
+      await transaction.rollback();
+      throw err;
+    }
+  },
+};

backend/src/db/migrations/20260317100000-create-ui-elements.js

@@ -0,0 +1,108 @@
+module.exports = {
+  async up(queryInterface, Sequelize) {
+    const transaction = await queryInterface.sequelize.transaction();
+
+    try {
+      const tableRows = await queryInterface.sequelize.query(
+        "SELECT to_regclass('public.ui_elements') AS regclass_name;",
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+
+      if (tableRows[0]?.regclass_name) {
+        await transaction.commit();
+        return;
+      }
+
+      await queryInterface.createTable(
+        'ui_elements',
+        {
+          id: {
+            type: Sequelize.DataTypes.UUID,
+            defaultValue: Sequelize.DataTypes.UUIDV4,
+            primaryKey: true,
+          },
+          element_type: {
+            type: Sequelize.DataTypes.TEXT,
+            allowNull: false,
+          },
+          name: {
+            type: Sequelize.DataTypes.TEXT,
+            allowNull: true,
+          },
+          settings_json: {
+            type: Sequelize.DataTypes.TEXT,
+            allowNull: true,
+          },
+          sort_order: {
+            type: Sequelize.DataTypes.INTEGER,
+            allowNull: false,
+            defaultValue: 0,
+          },
+          createdById: {
+            type: Sequelize.DataTypes.UUID,
+            allowNull: true,
+            references: {
+              model: 'users',
+              key: 'id',
+            },
+          },
+          updatedById: {
+            type: Sequelize.DataTypes.UUID,
+            allowNull: true,
+            references: {
+              model: 'users',
+              key: 'id',
+            },
+          },
+          createdAt: { type: Sequelize.DataTypes.DATE },
+          updatedAt: { type: Sequelize.DataTypes.DATE },
+          deletedAt: { type: Sequelize.DataTypes.DATE },
+          importHash: {
+            type: Sequelize.DataTypes.STRING(255),
+            allowNull: true,
+            unique: true,
+          },
+        },
+        { transaction },
+      );
+
+      await queryInterface.addIndex('ui_elements', ['element_type'], { transaction });
+      await queryInterface.addIndex('ui_elements', ['sort_order'], { transaction });
+      await queryInterface.addIndex('ui_elements', ['deletedAt'], { transaction });
+
+      await transaction.commit();
+    } catch (error) {
+      await transaction.rollback();
+      throw error;
+    }
+  },
+
+  async down(queryInterface, Sequelize) {
+    const transaction = await queryInterface.sequelize.transaction();
+
+    try {
+      const tableRows = await queryInterface.sequelize.query(
+        "SELECT to_regclass('public.ui_elements') AS regclass_name;",
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+
+      if (!tableRows[0]?.regclass_name) {
+        await transaction.commit();
+        return;
+      }
+
+      await queryInterface.dropTable('ui_elements', { transaction });
+
+      await transaction.commit();
+    } catch (error) {
+      await transaction.rollback();
+      throw error;
+    }
+  },
+};

backend/src/db/migrations/20260317113000-add-title-description-to-publish-events.js

@@ -0,0 +1,85 @@
+module.exports = {
+  async up(queryInterface, Sequelize) {
+    const transaction = await queryInterface.sequelize.transaction();
+
+    try {
+      const tableRows = await queryInterface.sequelize.query(
+        "SELECT to_regclass('public.publish_events') AS regclass_name;",
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+
+      if (!tableRows[0]?.regclass_name) {
+        await transaction.commit();
+        return;
+      }
+
+      const tableDefinition = await queryInterface.describeTable('publish_events', { transaction });
+
+      if (!tableDefinition.title) {
+        await queryInterface.addColumn(
+          'publish_events',
+          'title',
+          {
+            type: Sequelize.DataTypes.STRING,
+            allowNull: true,
+          },
+          { transaction },
+        );
+      }
+
+      if (!tableDefinition.description) {
+        await queryInterface.addColumn(
+          'publish_events',
+          'description',
+          {
+            type: Sequelize.DataTypes.TEXT,
+            allowNull: true,
+          },
+          { transaction },
+        );
+      }
+
+      await transaction.commit();
+    } catch (error) {
+      await transaction.rollback();
+      throw error;
+    }
+  },
+
+  async down(queryInterface, Sequelize) {
+    const transaction = await queryInterface.sequelize.transaction();
+
+    try {
+      const tableRows = await queryInterface.sequelize.query(
+        "SELECT to_regclass('public.publish_events') AS regclass_name;",
+        {
+          transaction,
+          type: Sequelize.QueryTypes.SELECT,
+        },
+      );
+
+      if (!tableRows[0]?.regclass_name) {
+        await transaction.commit();
+        return;
+      }
+
+      const tableDefinition = await queryInterface.describeTable('publish_events', { transaction });
+
+      if (tableDefinition.description) {
+        await queryInterface.removeColumn('publish_events', 'description', { transaction });
+      }
+
+      if (tableDefinition.title) {
+        await queryInterface.removeColumn('publish_events', 'title', { transaction });
+      }
+
+      await transaction.commit();
+    } catch (error) {
+      await transaction.rollback();
+      throw error;
+    }
+  },
+};

backend/src/db/models/access_logs.js

@@ -0,0 +1,135 @@
+module.exports = function(sequelize, DataTypes) {
+  const access_logs = sequelize.define(
+    'access_logs',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+environment: {
+        type: DataTypes.ENUM,
+        allowNull: false,
+
+        values: [
+
+"admin",
+
+
+"stage",
+
+
+"production"
+
+        ],
+
+      },
+
+path: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+ip_address: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+user_agent: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+accessed_at: {
+        type: DataTypes.DATE,
+        allowNull: false,
+        defaultValue: DataTypes.NOW,
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+      indexes: [
+        { fields: ['projectId'] },
+        { fields: ['environment'] },
+        { fields: ['userId'] },
+        { fields: ['accessed_at'] },
+      ],
+    },
+  );
+
+  access_logs.associate = (db) => {
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+//end loop
+
+
+
+    db.access_logs.belongsTo(db.projects, {
+      as: 'project',
+      foreignKey: {
+        name: 'projectId',
+      },
+      constraints: false,
+    });
+
+    db.access_logs.belongsTo(db.users, {
+      as: 'user',
+      foreignKey: {
+        name: 'userId',
+      },
+      constraints: false,
+    });
+
+
+
+
+    db.access_logs.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.access_logs.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+
+  return access_logs;
+};
+

backend/src/db/models/asset_variants.js

@@ -0,0 +1,132 @@
+module.exports = function(sequelize, DataTypes) {
+  const asset_variants = sequelize.define(
+    'asset_variants',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+variant_type: {
+        type: DataTypes.ENUM,
+      
+      
+
+        values: [
+
+"thumbnail",
+
+
+"preview",
+
+
+"webp",
+
+
+"mp4_low",
+
+
+"mp4_high",
+
+
+"original"
+
+        ],
+
+      },
+
+cdn_url: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+width_px: {
+        type: DataTypes.INTEGER,
+      
+      
+
+      },
+
+height_px: {
+        type: DataTypes.INTEGER,
+      
+      
+
+      },
+
+size_mb: {
+        type: DataTypes.DECIMAL,
+      
+      
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+    },
+  );
+
+  asset_variants.associate = (db) => {
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+//end loop
+
+
+
+    db.asset_variants.belongsTo(db.assets, {
+      as: 'asset',
+      foreignKey: {
+        name: 'assetId',
+      },
+      constraints: false,
+    });
+
+
+
+
+    db.asset_variants.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.asset_variants.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+
+  return asset_variants;
+};
+
+

backend/src/db/models/assets.js

@@ -0,0 +1,201 @@
+module.exports = function(sequelize, DataTypes) {
+  const assets = sequelize.define(
+    'assets',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+name: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+asset_type: {
+        type: DataTypes.ENUM,
+        allowNull: false,
+
+        values: [
+
+"image",
+
+
+"video",
+
+
+"audio",
+
+
+"file"
+
+        ],
+
+      },
+
+cdn_url: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+storage_key: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+mime_type: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+size_mb: {
+        type: DataTypes.DECIMAL,
+      
+      
+
+      },
+
+width_px: {
+        type: DataTypes.INTEGER,
+      
+      
+
+      },
+
+height_px: {
+        type: DataTypes.INTEGER,
+      
+      
+
+      },
+
+duration_sec: {
+        type: DataTypes.DECIMAL,
+      
+      
+
+      },
+
+checksum: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+is_public: {
+        type: DataTypes.BOOLEAN,
+      
+        allowNull: false,
+        defaultValue: false,
+      
+      
+
+      },
+
+is_deleted: {
+        type: DataTypes.BOOLEAN,
+      
+        allowNull: false,
+        defaultValue: false,
+      
+      
+
+      },
+
+deleted_at_time: {
+        type: DataTypes.DATE,
+      
+      
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+      indexes: [
+        { fields: ['projectId'] },
+        { fields: ['asset_type'] },
+        { fields: ['is_public'] },
+        { fields: ['is_deleted'] },
+        { fields: ['deletedAt'] },
+      ],
+    },
+  );
+
+  assets.associate = (db) => {
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+
+
+
+
+
+
+    db.assets.hasMany(db.asset_variants, {
+      as: 'asset_variants_asset',
+      foreignKey: {
+          name: 'assetId',
+      },
+      constraints: false,
+    });
+
+
+
+
+
+
+
+
+
+
+
+
+//end loop
+
+
+
+    db.assets.belongsTo(db.projects, {
+      as: 'project',
+      foreignKey: {
+        name: 'projectId',
+      },
+      constraints: false,
+    });
+
+
+
+
+    db.assets.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.assets.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+
+  return assets;
+};
+

backend/src/db/models/file.js

@@ -0,0 +1,53 @@
+module.exports = function(sequelize, DataTypes) {
+  const file = sequelize.define(
+    'file',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+      belongsTo: DataTypes.STRING(255),
+      belongsToId: DataTypes.UUID,
+      belongsToColumn: DataTypes.STRING(255),
+      name: {
+        type: DataTypes.STRING(2083),
+        allowNull: false,
+        validate: {
+          notEmpty: true,
+        },
+      },
+      sizeInBytes: {
+        type: DataTypes.INTEGER,
+        allowNull: true,
+      },
+      privateUrl: {
+        type: DataTypes.STRING(2083),
+        allowNull: true,
+      },
+      publicUrl: {
+        type: DataTypes.STRING(2083),
+        allowNull: false,
+        validate: {
+          notEmpty: true,
+        },
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+    },
+  );
+
+  file.associate = (db) => {
+    db.file.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.file.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+  return file;
+};

backend/src/db/models/index.js

@@ -0,0 +1,38 @@
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const Sequelize = require('sequelize');
+const basename = path.basename(__filename);
+const env = process.env.NODE_ENV || 'development';
+const config = require("../db.config")[env];
+const db = {};
+
+let sequelize;
+console.log(env);
+if (config.use_env_variable) {
+  sequelize = new Sequelize(process.env[config.use_env_variable], config);
+} else {
+  sequelize = new Sequelize(config.database, config.username, config.password, config);
+}
+
+fs
+  .readdirSync(__dirname)
+  .filter(file => {
+    return (file.indexOf('.') !== 0) && (file !== basename) && (file.slice(-3) === '.js');
+  })
+  .forEach(file => {
+    const model = require(path.join(__dirname, file))(sequelize, Sequelize.DataTypes)
+    db[model.name] = model;
+  });
+
+Object.keys(db).forEach(modelName => {
+  if (db[modelName].associate) {
+    db[modelName].associate(db);
+  }
+});
+
+db.sequelize = sequelize;
+db.Sequelize = Sequelize;
+
+module.exports = db;

backend/src/db/models/page_elements.js

@@ -0,0 +1,190 @@
+module.exports = function(sequelize, DataTypes) {
+  const page_elements = sequelize.define(
+    'page_elements',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+element_type: {
+        type: DataTypes.ENUM,
+        allowNull: false,
+
+        values: [
+
+"nav_button",
+
+
+"spot",
+
+
+"description",
+
+
+"tooltip",
+
+
+"gallery",
+
+
+"carousel",
+
+
+"logo",
+
+
+"video_player",
+
+
+"popup"
+
+        ],
+
+      },
+
+name: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+sort_order: {
+        type: DataTypes.INTEGER,
+        allowNull: false,
+        defaultValue: 0,
+
+      },
+
+is_visible: {
+        type: DataTypes.BOOLEAN,
+      
+        allowNull: false,
+        defaultValue: false,
+      
+      
+
+      },
+
+x_percent: {
+        type: DataTypes.DECIMAL,
+      
+      
+
+      },
+
+y_percent: {
+        type: DataTypes.DECIMAL,
+      
+      
+
+      },
+
+width_percent: {
+        type: DataTypes.DECIMAL,
+      
+      
+
+      },
+
+height_percent: {
+        type: DataTypes.DECIMAL,
+      
+      
+
+      },
+
+rotation_deg: {
+        type: DataTypes.DECIMAL,
+      
+      
+
+      },
+
+style_json: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+content_json: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+      indexes: [
+        { fields: ['pageId'] },
+        { fields: ['pageId', 'sort_order'] },
+        { fields: ['is_visible'] },
+        { fields: ['deletedAt'] },
+      ],
+    },
+  );
+
+  page_elements.associate = (db) => {
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+//end loop
+
+
+
+    db.page_elements.belongsTo(db.tour_pages, {
+      as: 'page',
+      foreignKey: {
+        name: 'pageId',
+      },
+      constraints: false,
+    });
+
+
+
+
+    db.page_elements.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.page_elements.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+
+  return page_elements;
+};
+

backend/src/db/models/page_links.js

@@ -0,0 +1,141 @@
+module.exports = function(sequelize, DataTypes) {
+  const page_links = sequelize.define(
+    'page_links',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+direction: {
+        type: DataTypes.ENUM,
+        allowNull: false,
+        defaultValue: 'forward',
+
+        values: [
+
+"forward",
+
+
+"back",
+
+
+"external"
+
+        ],
+
+      },
+
+external_url: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+is_active: {
+        type: DataTypes.BOOLEAN,
+      
+        allowNull: false,
+        defaultValue: false,
+      
+      
+
+      },
+
+trigger_selector: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+      indexes: [
+        { fields: ['from_pageId'] },
+        { fields: ['to_pageId'] },
+        { fields: ['transitionId'] },
+        { fields: ['is_active'] },
+        { fields: ['deletedAt'] },
+      ],
+    },
+  );
+
+  page_links.associate = (db) => {
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+//end loop
+
+
+
+    db.page_links.belongsTo(db.tour_pages, {
+      as: 'from_page',
+      foreignKey: {
+        name: 'from_pageId',
+      },
+      constraints: false,
+    });
+
+    db.page_links.belongsTo(db.tour_pages, {
+      as: 'to_page',
+      foreignKey: {
+        name: 'to_pageId',
+      },
+      constraints: false,
+    });
+
+    db.page_links.belongsTo(db.transitions, {
+      as: 'transition',
+      foreignKey: {
+        name: 'transitionId',
+      },
+      constraints: false,
+    });
+
+
+
+
+    db.page_links.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.page_links.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+
+  return page_links;
+};
+

backend/src/db/models/permissions.js

@@ -0,0 +1,75 @@
+module.exports = function(sequelize, DataTypes) {
+  const permissions = sequelize.define(
+    'permissions',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+name: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+    },
+  );
+
+  permissions.associate = (db) => {
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+//end loop
+
+
+
+
+
+
+    db.permissions.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.permissions.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+
+  return permissions;
+};
+
+

backend/src/db/models/presigned_url_requests.js

@@ -0,0 +1,157 @@
+module.exports = function(sequelize, DataTypes) {
+  const presigned_url_requests = sequelize.define(
+    'presigned_url_requests',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+purpose: {
+        type: DataTypes.ENUM,
+      
+      
+
+        values: [
+
+"upload",
+
+
+"download"
+
+        ],
+
+      },
+
+asset_type: {
+        type: DataTypes.ENUM,
+      
+      
+
+        values: [
+
+"image",
+
+
+"video",
+
+
+"audio",
+
+
+"file"
+
+        ],
+
+      },
+
+requested_key: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+mime_type: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+requested_size_mb: {
+        type: DataTypes.DECIMAL,
+      
+      
+
+      },
+
+expires_at: {
+        type: DataTypes.DATE,
+      
+      
+
+      },
+
+status: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+    },
+  );
+
+  presigned_url_requests.associate = (db) => {
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+//end loop
+
+
+
+    db.presigned_url_requests.belongsTo(db.projects, {
+      as: 'project',
+      foreignKey: {
+        name: 'projectId',
+      },
+      constraints: false,
+    });
+
+    db.presigned_url_requests.belongsTo(db.users, {
+      as: 'user',
+      foreignKey: {
+        name: 'userId',
+      },
+      constraints: false,
+    });
+
+
+
+
+    db.presigned_url_requests.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.presigned_url_requests.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+
+  return presigned_url_requests;
+};
+
+

backend/src/db/models/project_audio_tracks.js

@@ -0,0 +1,157 @@
+module.exports = function(sequelize, DataTypes) {
+  const project_audio_tracks = sequelize.define(
+    'project_audio_tracks',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+environment: {
+        type: DataTypes.ENUM,
+      
+      
+
+        values: [
+
+"dev",
+
+
+"stage",
+
+
+"production"
+
+        ],
+
+      },
+
+source_key: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+name: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+slug: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+url: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+loop: {
+        type: DataTypes.BOOLEAN,
+      
+        allowNull: false,
+        defaultValue: false,
+      
+      
+
+      },
+
+volume: {
+        type: DataTypes.DECIMAL,
+      
+      
+
+      },
+
+sort_order: {
+        type: DataTypes.INTEGER,
+      
+      
+
+      },
+
+is_enabled: {
+        type: DataTypes.BOOLEAN,
+      
+        allowNull: false,
+        defaultValue: false,
+      
+      
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+    },
+  );
+
+  project_audio_tracks.associate = (db) => {
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+//end loop
+
+
+
+    db.project_audio_tracks.belongsTo(db.projects, {
+      as: 'project',
+      foreignKey: {
+        name: 'projectId',
+      },
+      constraints: false,
+    });
+
+
+
+
+    db.project_audio_tracks.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.project_audio_tracks.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+
+  return project_audio_tracks;
+};
+
+

backend/src/db/models/project_memberships.js

@@ -0,0 +1,136 @@
+module.exports = function(sequelize, DataTypes) {
+  const project_memberships = sequelize.define(
+    'project_memberships',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+access_level: {
+        type: DataTypes.ENUM,
+        allowNull: false,
+        defaultValue: 'viewer',
+
+        values: [
+
+"owner",
+
+
+"editor",
+
+
+"reviewer",
+
+
+"viewer"
+
+        ],
+
+      },
+
+is_active: {
+        type: DataTypes.BOOLEAN,
+      
+        allowNull: false,
+        defaultValue: false,
+      
+      
+
+      },
+
+invited_at: {
+        type: DataTypes.DATE,
+      
+      
+
+      },
+
+accepted_at: {
+        type: DataTypes.DATE,
+      
+      
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+      indexes: [
+        { fields: ['projectId'] },
+        { fields: ['userId'] },
+        { fields: ['projectId', 'userId'], unique: true },
+        { fields: ['is_active'] },
+        { fields: ['deletedAt'] },
+      ],
+    },
+  );
+
+  project_memberships.associate = (db) => {
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+//end loop
+
+
+
+    db.project_memberships.belongsTo(db.projects, {
+      as: 'project',
+      foreignKey: {
+        name: 'projectId',
+      },
+      constraints: false,
+    });
+
+    db.project_memberships.belongsTo(db.users, {
+      as: 'user',
+      foreignKey: {
+        name: 'userId',
+      },
+      constraints: false,
+    });
+
+
+
+
+    db.project_memberships.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.project_memberships.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+
+  return project_memberships;
+};
+

backend/src/db/models/projects.js

@@ -0,0 +1,249 @@
+module.exports = function(sequelize, DataTypes) {
+  const projects = sequelize.define(
+    'projects',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+name: {
+        type: DataTypes.TEXT,
+        allowNull: false,
+
+      },
+
+slug: {
+        type: DataTypes.TEXT,
+        allowNull: false,
+        unique: true,
+
+      },
+
+description: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+phase: {
+        type: DataTypes.ENUM,
+        allowNull: false,
+        defaultValue: 'dev',
+
+        values: [
+
+"dev",
+
+
+"stage",
+
+
+"production"
+
+        ],
+
+      },
+
+logo_url: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+favicon_url: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+og_image_url: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+theme_config_json: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+custom_css_json: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+cdn_base_url: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+entry_page_slug: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+is_deleted: {
+        type: DataTypes.BOOLEAN,
+      
+        allowNull: false,
+        defaultValue: false,
+      
+      
+
+      },
+
+deleted_at_time: {
+        type: DataTypes.DATE,
+      
+      
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+      indexes: [
+        { fields: ['slug'], unique: true },
+        { fields: ['phase'] },
+        { fields: ['deletedAt'] },
+      ],
+    },
+  );
+
+  projects.associate = (db) => {
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+
+
+
+
+    db.projects.hasMany(db.project_memberships, {
+      as: 'project_memberships_project',
+      foreignKey: {
+          name: 'projectId',
+      },
+      constraints: false,
+    });
+
+
+    db.projects.hasMany(db.assets, {
+      as: 'assets_project',
+      foreignKey: {
+          name: 'projectId',
+      },
+      constraints: false,
+    });
+
+
+
+    db.projects.hasMany(db.presigned_url_requests, {
+      as: 'presigned_url_requests_project',
+      foreignKey: {
+          name: 'projectId',
+      },
+      constraints: false,
+    });
+
+
+    db.projects.hasMany(db.tour_pages, {
+      as: 'tour_pages_project',
+      foreignKey: {
+          name: 'projectId',
+      },
+      constraints: false,
+    });
+
+
+
+
+    db.projects.hasMany(db.transitions, {
+      as: 'transitions_project',
+      foreignKey: {
+          name: 'projectId',
+      },
+      constraints: false,
+    });
+
+
+    db.projects.hasMany(db.project_audio_tracks, {
+      as: 'project_audio_tracks_project',
+      foreignKey: {
+          name: 'projectId',
+      },
+      constraints: false,
+    });
+
+
+    db.projects.hasMany(db.publish_events, {
+      as: 'publish_events_project',
+      foreignKey: {
+          name: 'projectId',
+      },
+      constraints: false,
+    });
+
+
+    db.projects.hasMany(db.pwa_caches, {
+      as: 'pwa_caches_project',
+      foreignKey: {
+          name: 'projectId',
+      },
+      constraints: false,
+    });
+
+
+    db.projects.hasMany(db.access_logs, {
+      as: 'access_logs_project',
+      foreignKey: {
+          name: 'projectId',
+      },
+      constraints: false,
+    });
+
+
+
+//end loop
+
+
+
+
+
+
+    db.projects.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.projects.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+
+  return projects;
+};
+

backend/src/db/models/publish_events.js

@@ -0,0 +1,200 @@
+module.exports = function(sequelize, DataTypes) {
+  const publish_events = sequelize.define(
+    'publish_events',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+title: {
+        type: DataTypes.STRING,
+        allowNull: true,
+
+      },
+
+description: {
+        type: DataTypes.TEXT,
+        allowNull: true,
+
+      },
+
+from_environment: {
+        type: DataTypes.ENUM,
+        allowNull: false,
+
+        values: [
+
+"dev",
+
+
+"stage",
+
+
+"production"
+
+        ],
+
+      },
+
+to_environment: {
+        type: DataTypes.ENUM,
+        allowNull: false,
+
+        values: [
+
+"dev",
+
+
+"stage",
+
+
+"production"
+
+        ],
+
+      },
+
+started_at: {
+        type: DataTypes.DATE,
+      
+      
+
+      },
+
+finished_at: {
+        type: DataTypes.DATE,
+      
+      
+
+      },
+
+status: {
+        type: DataTypes.ENUM,
+        allowNull: false,
+        defaultValue: 'queued',
+
+        values: [
+
+"queued",
+
+
+"running",
+
+
+"success",
+
+
+"failed"
+
+        ],
+
+      },
+
+error_message: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+pages_copied: {
+        type: DataTypes.INTEGER,
+      
+      
+
+      },
+
+transitions_copied: {
+        type: DataTypes.INTEGER,
+      
+      
+
+      },
+
+audios_copied: {
+        type: DataTypes.INTEGER,
+      
+      
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+      indexes: [
+        { fields: ['projectId'] },
+        { fields: ['userId'] },
+        { fields: ['status'] },
+        { fields: ['started_at'] },
+      ],
+    },
+  );
+
+  publish_events.associate = (db) => {
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+//end loop
+
+
+
+    db.publish_events.belongsTo(db.projects, {
+      as: 'project',
+      foreignKey: {
+        name: 'projectId',
+      },
+      constraints: false,
+    });
+
+    db.publish_events.belongsTo(db.users, {
+      as: 'user',
+      foreignKey: {
+        name: 'userId',
+      },
+      constraints: false,
+    });
+
+
+
+
+    db.publish_events.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.publish_events.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+
+  return publish_events;
+};

backend/src/db/models/pwa_caches.js

@@ -0,0 +1,130 @@
+module.exports = function(sequelize, DataTypes) {
+  const pwa_caches = sequelize.define(
+    'pwa_caches',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+environment: {
+        type: DataTypes.ENUM,
+      
+      
+
+        values: [
+
+"stage",
+
+
+"production"
+
+        ],
+
+      },
+
+cache_version: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+manifest_json: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+asset_list_json: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+generated_at: {
+        type: DataTypes.DATE,
+      
+      
+
+      },
+
+is_active: {
+        type: DataTypes.BOOLEAN,
+      
+        allowNull: false,
+        defaultValue: false,
+      
+      
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+    },
+  );
+
+  pwa_caches.associate = (db) => {
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+//end loop
+
+
+
+    db.pwa_caches.belongsTo(db.projects, {
+      as: 'project',
+      foreignKey: {
+        name: 'projectId',
+      },
+      constraints: false,
+    });
+
+
+
+
+    db.pwa_caches.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.pwa_caches.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+
+  return pwa_caches;
+};
+
+

backend/src/db/models/roles.js

@@ -0,0 +1,108 @@
+module.exports = function(sequelize, DataTypes) {
+  const roles = sequelize.define(
+    'roles',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+name: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+role_customization: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+    },
+  );
+
+  roles.associate = (db) => {
+
+    db.roles.belongsToMany(db.permissions, {
+      as: 'permissions',
+      foreignKey: {
+        name: 'roles_permissionsId',
+      },
+      constraints: false,
+      through: 'rolesPermissionsPermissions',
+    });
+
+    db.roles.belongsToMany(db.permissions, {
+      as: 'permissions_filter',
+      foreignKey: {
+        name: 'roles_permissionsId',
+      },
+      constraints: false,
+      through: 'rolesPermissionsPermissions',
+    });
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+    db.roles.hasMany(db.users, {
+      as: 'users_app_role',
+      foreignKey: {
+          name: 'app_roleId',
+      },
+      constraints: false,
+    });
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+//end loop
+
+
+
+
+
+
+    db.roles.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.roles.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+
+  return roles;
+};
+
+

backend/src/db/models/tour_pages.js

@@ -0,0 +1,198 @@
+module.exports = function(sequelize, DataTypes) {
+  const tour_pages = sequelize.define(
+    'tour_pages',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+environment: {
+        type: DataTypes.ENUM,
+        allowNull: false,
+        defaultValue: 'dev',
+
+        values: [
+
+"dev",
+
+
+"stage",
+
+
+"production"
+
+        ],
+
+      },
+
+source_key: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+name: {
+        type: DataTypes.TEXT,
+        allowNull: false,
+
+      },
+
+slug: {
+        type: DataTypes.TEXT,
+        allowNull: false,
+
+      },
+
+sort_order: {
+        type: DataTypes.INTEGER,
+        allowNull: false,
+        defaultValue: 0,
+
+      },
+
+background_image_url: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+background_video_url: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+background_audio_url: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+background_loop: {
+        type: DataTypes.BOOLEAN,
+      
+        allowNull: false,
+        defaultValue: false,
+      
+      
+
+      },
+
+requires_auth: {
+        type: DataTypes.BOOLEAN,
+      
+        allowNull: false,
+        defaultValue: false,
+      
+      
+
+      },
+
+ui_schema_json: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+      indexes: [
+        { fields: ['projectId'] },
+        { fields: ['projectId', 'environment', 'slug'], unique: true },
+        { fields: ['projectId', 'environment', 'sort_order'] },
+        { fields: ['deletedAt'] },
+      ],
+    },
+  );
+
+  tour_pages.associate = (db) => {
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+
+
+
+
+
+
+
+
+
+    db.tour_pages.hasMany(db.page_elements, {
+      as: 'page_elements_page',
+      foreignKey: {
+          name: 'pageId',
+      },
+      constraints: false,
+    });
+
+
+    db.tour_pages.hasMany(db.page_links, {
+      as: 'page_links_from_page',
+      foreignKey: {
+          name: 'from_pageId',
+      },
+      constraints: false,
+    });
+
+    db.tour_pages.hasMany(db.page_links, {
+      as: 'page_links_to_page',
+      foreignKey: {
+          name: 'to_pageId',
+      },
+      constraints: false,
+    });
+
+
+
+
+
+
+
+
+//end loop
+
+
+
+    db.tour_pages.belongsTo(db.projects, {
+      as: 'project',
+      foreignKey: {
+        name: 'projectId',
+      },
+      constraints: false,
+    });
+
+
+
+
+    db.tour_pages.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.tour_pages.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+
+  return tour_pages;
+};
+

backend/src/db/models/transitions.js

@@ -0,0 +1,157 @@
+module.exports = function(sequelize, DataTypes) {
+  const transitions = sequelize.define(
+    'transitions',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+environment: {
+        type: DataTypes.ENUM,
+        allowNull: false,
+        defaultValue: 'dev',
+
+        values: [
+
+"dev",
+
+
+"stage",
+
+
+"production"
+
+        ],
+
+      },
+
+source_key: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+name: {
+        type: DataTypes.TEXT,
+        allowNull: false,
+
+      },
+
+slug: {
+        type: DataTypes.TEXT,
+        allowNull: false,
+
+      },
+
+video_url: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+audio_url: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+supports_reverse: {
+        type: DataTypes.BOOLEAN,
+      
+        allowNull: false,
+        defaultValue: false,
+      
+      
+
+      },
+
+duration_sec: {
+        type: DataTypes.DECIMAL,
+      
+      
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+      indexes: [
+        { fields: ['projectId'] },
+        { fields: ['projectId', 'environment', 'slug'], unique: true },
+        { fields: ['deletedAt'] },
+      ],
+    },
+  );
+
+  transitions.associate = (db) => {
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+
+
+
+
+
+
+
+
+
+
+    db.transitions.hasMany(db.page_links, {
+      as: 'page_links_transition',
+      foreignKey: {
+          name: 'transitionId',
+      },
+      constraints: false,
+    });
+
+
+
+
+
+
+
+
+//end loop
+
+
+
+    db.transitions.belongsTo(db.projects, {
+      as: 'project',
+      foreignKey: {
+        name: 'projectId',
+      },
+      constraints: false,
+    });
+
+
+
+
+    db.transitions.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.transitions.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+
+  return transitions;
+};
+

backend/src/db/models/ui_elements.js

@@ -0,0 +1,50 @@
+module.exports = function (sequelize, DataTypes) {
+  const ui_elements = sequelize.define(
+    'ui_elements',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+      element_type: {
+        type: DataTypes.TEXT,
+        allowNull: false,
+      },
+      name: {
+        type: DataTypes.TEXT,
+      },
+      settings_json: {
+        type: DataTypes.TEXT,
+      },
+      sort_order: {
+        type: DataTypes.INTEGER,
+        allowNull: false,
+        defaultValue: 0,
+      },
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+      indexes: [{ fields: ['element_type'] }, { fields: ['sort_order'] }, { fields: ['deletedAt'] }],
+    },
+  );
+
+  ui_elements.associate = (db) => {
+    db.ui_elements.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.ui_elements.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+  return ui_elements;
+};

backend/src/db/models/users.js

@@ -0,0 +1,273 @@
+const config = require('../../config');
+const providers = config.providers;
+const crypto = require('crypto');
+const bcrypt = require('bcrypt');
+
+module.exports = function(sequelize, DataTypes) {
+  const users = sequelize.define(
+    'users',
+    {
+      id: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        primaryKey: true,
+      },
+
+firstName: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+lastName: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+phoneNumber: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+email: {
+        type: DataTypes.TEXT,
+        allowNull: false,
+        unique: true,
+
+      },
+
+disabled: {
+        type: DataTypes.BOOLEAN,
+      
+        allowNull: false,
+        defaultValue: false,
+      
+      
+
+      },
+
+password: {
+        type: DataTypes.TEXT,
+        allowNull: false,
+
+      },
+
+emailVerified: {
+        type: DataTypes.BOOLEAN,
+      
+        allowNull: false,
+        defaultValue: false,
+      
+      
+
+      },
+
+emailVerificationToken: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+emailVerificationTokenExpiresAt: {
+        type: DataTypes.DATE,
+      
+      
+
+      },
+
+passwordResetToken: {
+        type: DataTypes.TEXT,
+      
+      
+
+      },
+
+passwordResetTokenExpiresAt: {
+        type: DataTypes.DATE,
+      
+      
+
+      },
+
+provider: {
+        type: DataTypes.TEXT,
+        allowNull: false,
+        defaultValue: providers.LOCAL,
+
+      },
+
+      importHash: {
+        type: DataTypes.STRING(255),
+        allowNull: true,
+        unique: true,
+      },
+    },
+    {
+      timestamps: true,
+      paranoid: true,
+      freezeTableName: true,
+      indexes: [
+        { fields: ['email'], unique: true },
+        { fields: ['app_roleId'] },
+        { fields: ['deletedAt'] },
+      ],
+    },
+  );
+
+  users.associate = (db) => {
+
+    db.users.belongsToMany(db.permissions, {
+      as: 'custom_permissions',
+      foreignKey: {
+        name: 'users_custom_permissionsId',
+      },
+      constraints: false,
+      through: 'usersCustom_permissionsPermissions',
+    });
+
+    db.users.belongsToMany(db.permissions, {
+      as: 'custom_permissions_filter',
+      foreignKey: {
+        name: 'users_custom_permissionsId',
+      },
+      constraints: false,
+      through: 'usersCustom_permissionsPermissions',
+    });
+
+
+/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
+
+
+
+
+
+
+    db.users.hasMany(db.project_memberships, {
+      as: 'project_memberships_user',
+      foreignKey: {
+          name: 'userId',
+      },
+      constraints: false,
+    });
+
+
+
+
+    db.users.hasMany(db.presigned_url_requests, {
+      as: 'presigned_url_requests_user',
+      foreignKey: {
+          name: 'userId',
+      },
+      constraints: false,
+    });
+
+
+
+
+
+
+
+    db.users.hasMany(db.publish_events, {
+      as: 'publish_events_user',
+      foreignKey: {
+          name: 'userId',
+      },
+      constraints: false,
+    });
+
+
+
+    db.users.hasMany(db.access_logs, {
+      as: 'access_logs_user',
+      foreignKey: {
+          name: 'userId',
+      },
+      constraints: false,
+    });
+
+
+
+//end loop
+
+
+
+    db.users.belongsTo(db.roles, {
+      as: 'app_role',
+      foreignKey: {
+        name: 'app_roleId',
+      },
+      constraints: false,
+    });
+
+
+
+    db.users.hasMany(db.file, {
+      as: 'avatar',
+      foreignKey: 'belongsToId',
+      constraints: false,
+      scope: {
+        belongsTo: db.users.getTableName(),
+        belongsToColumn: 'avatar',
+      },
+    });
+
+
+    db.users.belongsTo(db.users, {
+      as: 'createdBy',
+    });
+
+    db.users.belongsTo(db.users, {
+      as: 'updatedBy',
+    });
+  };
+
+
+    users.beforeCreate((users) => {
+        users = trimStringFields(users);
+
+    if (users.provider !== providers.LOCAL && Object.values(providers).indexOf(users.provider) > -1) {
+        users.emailVerified = true;
+
+        if (!users.password) {
+            const password = crypto
+                .randomBytes(20)
+                .toString('hex');
+
+            const hashedPassword = bcrypt.hashSync(
+            password,
+            config.bcrypt.saltRounds,
+        );
+
+            users.password = hashedPassword
+            }
+        }
+    });
+
+  users.beforeUpdate((users) => {
+    trimStringFields(users);
+  });
+  
+
+  return users;
+};
+
+
+function trimStringFields(users) {
+  users.email = users.email.trim();
+
+  users.firstName = users.firstName
+    ? users.firstName.trim()
+    : null;
+
+  users.lastName = users.lastName
+    ? users.lastName.trim()
+    : null;
+
+  return users;
+}

backend/src/db/reset.js

@@ -0,0 +1,16 @@
+const db = require('./models');
+const {execSync} = require("child_process");
+
+console.log('Resetting Database');
+
+db.sequelize
+  .sync({ force: true })
+  .then(() => {
+    execSync("sequelize db:seed:all");
+    console.log('OK');
+    process.exit();
+  })
+  .catch((error) => {
+    console.error(error);
+    process.exit(1);
+  });

backend/src/db/seeders/20200430130759-admin-user.js

@@ -0,0 +1,66 @@
+'use strict';
+const bcrypt = require("bcrypt");
+const config = require("../../config");
+
+const ids = [
+    '193bf4b5-9f07-4bd5-9a43-e7e41f3e96af',
+    'af5a87be-8f9c-4630-902a-37a60b7005ba',
+    '5bc531ab-611f-41f3-9373-b7cc5d09c93d',
+]
+
+module.exports = {
+  up: async (queryInterface) => {
+    let admin_hash = bcrypt.hashSync(config.admin_pass, config.bcrypt.saltRounds);
+    let user_hash = bcrypt.hashSync(config.user_pass, config.bcrypt.saltRounds);
+
+    try {
+    await queryInterface.bulkInsert('users', [
+      {
+        id: ids[0],
+        firstName: 'Admin',
+        email: config.admin_email,
+        emailVerified: true,
+        provider: config.providers.LOCAL,
+        password: admin_hash,
+        createdAt: new Date(),
+        updatedAt: new Date()
+      },
+      {
+        id: ids[1],
+        firstName: 'John',
+        email: 'john@doe.com',
+        emailVerified: true,
+        provider: config.providers.LOCAL,
+        password: user_hash,
+        createdAt: new Date(),
+        updatedAt: new Date()
+      },
+      {
+        id: ids[2],
+        firstName: 'Client',
+        email: 'client@hello.com',
+        emailVerified: true,
+        provider: config.providers.LOCAL,
+        password: user_hash,
+        createdAt: new Date(),
+        updatedAt: new Date()
+      },
+    ]);
+    } catch (error) {
+      console.error('Error during bulkInsert:', error);
+      throw error;
+    }
+  },
+  down: async (queryInterface, Sequelize) => {
+    try {
+    await queryInterface.bulkDelete('users', {
+      id: {
+        [Sequelize.Op.in]: ids,
+      },
+    }, {});
+  } catch (error) {
+    console.error('Error during bulkDelete:', error);
+    throw error;
+  }
+}
+}

backend/src/db/utils.js

@@ -0,0 +1,27 @@
+const validator = require('validator');
+const { v4: uuid } = require('uuid');
+const Sequelize = require('./models').Sequelize;
+
+module.exports = class Utils {
+  static uuid(value) {
+    let id = value;
+
+    if (!validator.isUUID(id)) {
+      id = uuid();
+    }
+
+    return id;
+  }
+
+  static ilike(model, column, value) {
+    return Sequelize.where(
+      Sequelize.fn(
+        'lower',
+        Sequelize.col(`${model}.${column}`),
+      ),
+      {
+        [Sequelize.Op.like]: `%${value}%`.toLowerCase(),
+      },
+    );
+  }
+};

backend/src/helpers.js

@@ -0,0 +1,25 @@
+const jwt = require('jsonwebtoken');
+const config = require('./config');
+
+module.exports = class Helpers {
+  static wrapAsync(fn) {
+    return function (req, res, next) {
+      fn(req, res, next).catch(next);
+    };
+  }
+
+  static commonErrorHandler(error, req, res) {
+    const statusCode = error.code || error.status;
+
+    if ([400, 401, 403, 404, 409, 422].includes(statusCode)) {
+      return res.status(statusCode).send(error.message);
+    }
+
+    console.error(error);
+    return res.status(500).send('Internal server error');
+  }
+
+  static jwtSign(data) {
+    return jwt.sign(data, config.secret_key, {expiresIn: '6h'});
+  }
+};

backend/src/index.js

@@ -0,0 +1,233 @@
+const express = require('express');
+const cors = require('cors');
+const helmet = require('helmet');
+const app = express();
+const passport = require('passport');
+const path = require('path');
+const fs = require('fs');
+const bodyParser = require('body-parser');
+const config = require('./config');
+const swaggerUI = require('swagger-ui-express');
+const swaggerJsDoc = require('swagger-jsdoc');
+
+const authRoutes = require('./routes/auth');
+const fileRoutes = require('./routes/file');
+const searchRoutes = require('./routes/search');
+const sqlRoutes = require('./routes/sql');
+const pexelsRoutes = require('./routes/pexels');
+
+const openaiRoutes = require('./routes/openai');
+
+
+
+const usersRoutes = require('./routes/users');
+
+const rolesRoutes = require('./routes/roles');
+
+const permissionsRoutes = require('./routes/permissions');
+
+const projectsRoutes = require('./routes/projects');
+
+const project_membershipsRoutes = require('./routes/project_memberships');
+
+const assetsRoutes = require('./routes/assets');
+
+const asset_variantsRoutes = require('./routes/asset_variants');
+
+const presigned_url_requestsRoutes = require('./routes/presigned_url_requests');
+
+const tour_pagesRoutes = require('./routes/tour_pages');
+
+const page_elementsRoutes = require('./routes/page_elements');
+const ui_elementsRoutes = require('./routes/ui_elements');
+
+const page_linksRoutes = require('./routes/page_links');
+
+const transitionsRoutes = require('./routes/transitions');
+
+const project_audio_tracksRoutes = require('./routes/project_audio_tracks');
+
+const publish_eventsRoutes = require('./routes/publish_events');
+
+const pwa_cachesRoutes = require('./routes/pwa_caches');
+
+const access_logsRoutes = require('./routes/access_logs');
+
+const publishRoutes = require('./routes/publish');
+const runtimeContextRoutes = require('./routes/runtime-context');
+const { runtimeContextMiddleware } = require('./middlewares/runtime-context');
+const {
+  blockNonPublicRuntimeListEndpoints,
+  sanitizePublicRuntimeListResponse,
+} = require('./middlewares/runtime-public');
+
+
+const getBaseUrl = (url) => {
+  if (!url) return '';
+  return url.endsWith('/api') ? url.slice(0, -4) : url;
+};
+
+const options = {
+  definition: {
+    openapi: "3.0.0",
+      info: {
+        version: "1.0.0",
+        title: "Tour Builder Platform",
+        description: "Tour Builder Platform Online REST API for Testing and Prototyping application. You can perform all major operations with your entities - create, delete and etc.",
+      },
+    servers: [
+      {
+        url: getBaseUrl(process.env.NEXT_PUBLIC_BACK_API) || config.swaggerUrl,
+        description: "Development server",
+      }
+    ],
+    components: {
+      securitySchemes: {
+        bearerAuth: {
+          type: 'http',
+          scheme: 'bearer',
+          bearerFormat: 'JWT',
+        }
+      },
+      responses: {
+        UnauthorizedError: {
+          description: "Access token is missing or invalid"
+        }
+      }
+    },
+    security: [{
+      bearerAuth: []
+    }]
+  },
+  apis: ["./src/routes/*.js"],
+};
+
+const specs = swaggerJsDoc(options);
+app.use('/api-docs', function (req, res, next) {
+    swaggerUI.host = getBaseUrl(process.env.NEXT_PUBLIC_BACK_API) || req.get('host');
+    next()
+  }, swaggerUI.serve, swaggerUI.setup(specs))
+
+app.enable('trust proxy');
+app.use(
+  helmet({
+    contentSecurityPolicy: false,
+    crossOriginEmbedderPolicy: false,
+  }),
+);
+app.use(cors({origin: true}));
+require('./auth/auth');
+
+app.use(bodyParser.json({ limit: '1mb' }));
+app.use(bodyParser.urlencoded({ extended: true, limit: '1mb' }));
+app.use(runtimeContextMiddleware);
+const jwtAuth = passport.authenticate('jwt', { session: false });
+
+const requireRuntimeReadOrAuth = (req, res, next) => {
+  const runtimeMode = req.runtimeContext?.mode;
+  const isReadOnlyRequest = ['GET', 'OPTIONS'].includes(req.method);
+  const hasAuthHeader = Boolean(req.headers.authorization);
+
+  if (runtimeMode === 'production' && isReadOnlyRequest && !hasAuthHeader) {
+    req.isRuntimePublicRequest = true;
+    return next();
+  }
+
+  req.isRuntimePublicRequest = false;
+  return jwtAuth(req, res, next);
+};
+
+app.use('/api/auth', authRoutes);
+app.use('/api/file', fileRoutes);
+app.use('/api/pexels', pexelsRoutes);
+app.use('/api/runtime-context', runtimeContextRoutes);
+
+
+app.use('/api/users', jwtAuth, usersRoutes);
+
+app.use('/api/roles', jwtAuth, rolesRoutes);
+
+app.use('/api/permissions', jwtAuth, permissionsRoutes);
+
+const mountRuntimeEntityRoute = (path, entityName, router) => {
+  app.use(
+    path,
+    requireRuntimeReadOrAuth,
+    blockNonPublicRuntimeListEndpoints,
+    sanitizePublicRuntimeListResponse(entityName),
+    router,
+  );
+};
+
+mountRuntimeEntityRoute('/api/projects', 'projects', projectsRoutes);
+
+app.use('/api/project_memberships', jwtAuth, project_membershipsRoutes);
+
+app.use('/api/assets', jwtAuth, assetsRoutes);
+
+app.use('/api/asset_variants', jwtAuth, asset_variantsRoutes);
+
+app.use('/api/presigned_url_requests', jwtAuth, presigned_url_requestsRoutes);
+
+mountRuntimeEntityRoute('/api/tour_pages', 'tour_pages', tour_pagesRoutes);
+
+mountRuntimeEntityRoute('/api/page_elements', 'page_elements', page_elementsRoutes);
+app.use('/api/ui-elements', jwtAuth, ui_elementsRoutes);
+
+mountRuntimeEntityRoute('/api/page_links', 'page_links', page_linksRoutes);
+
+mountRuntimeEntityRoute('/api/transitions', 'transitions', transitionsRoutes);
+
+mountRuntimeEntityRoute('/api/project_audio_tracks', 'project_audio_tracks', project_audio_tracksRoutes);
+
+app.use('/api/publish_events', jwtAuth, publish_eventsRoutes);
+
+app.use('/api/pwa_caches', jwtAuth, pwa_cachesRoutes);
+
+app.use('/api/access_logs', jwtAuth, access_logsRoutes);
+
+app.use('/api/publish', jwtAuth, publishRoutes);
+
+app.use(
+    '/api/openai',
+    jwtAuth,
+    openaiRoutes,
+);
+app.use(
+    '/api/ai',
+    jwtAuth,
+    openaiRoutes,
+);
+
+app.use(
+  '/api/search',
+  jwtAuth,
+  searchRoutes);
+app.use(
+  '/api/sql',
+  jwtAuth,
+  sqlRoutes);
+
+  
+const publicDir = path.join(
+  __dirname,
+  '../public',
+);
+
+if (fs.existsSync(publicDir)) {
+  app.use('/', express.static(publicDir));
+
+  app.get('*', function(request, response) {
+    response.sendFile(
+      path.resolve(publicDir, 'index.html'),
+    );
+  });
+}
+
+const PORT = process.env.NODE_ENV === 'dev_stage' ? 3000 : 8080;
+
+  app.listen(PORT, () => {
+    console.log(`Listening on port ${PORT}`);
+  });
+
+module.exports = app;

backend/src/middlewares/check-permissions.js

@@ -0,0 +1,165 @@
+
+const ValidationError = require('../services/notifications/errors/validation');
+const RolesDBApi = require('../db/api/roles');
+
+// Cache for the 'Public' role object
+let publicRoleCache = null;
+
+// Function to asynchronously fetch and cache the 'Public' role
+async function fetchAndCachePublicRole() {
+    try {
+        // Use RolesDBApi to find the role by name 'Public'
+        publicRoleCache = await RolesDBApi.findBy({ name: 'Public' });
+
+        if (!publicRoleCache) {
+            console.error("WARNING: Role 'Public' not found in database during middleware startup. Check your migrations.");
+            // The system might not function correctly without this role. May need to throw an error or use a fallback stub.
+        } else {
+            console.log("'Public' role successfully loaded and cached.");
+        }
+    } catch (error) {
+        console.error("Error fetching 'Public' role during middleware startup:", error);
+        // Handle the error during startup fetch
+        throw error; // Important to know if the app can proceed without the Public role
+    }
+}
+
+// Trigger the role fetching when the check-permissions.js module is imported/loaded
+// This should happen during application startup when routes are being configured.
+fetchAndCachePublicRole().catch(error => {
+    // Handle the case where the fetchAndCachePublicRole promise is rejected
+    console.error("Critical error during permissions middleware initialization:", error);
+    // Decide here if the process should exit if the Public role is essential.
+    // process.exit(1);
+});
+
+/**
+ * Middleware creator to check if the current user (or Public role) has a specific permission.
+ * @param {string} permission - The name of the required permission.
+ * @return {import("express").RequestHandler} Express middleware function.
+ */
+function checkPermissions(permission) {
+    return async (req, res, next) => {
+        const { currentUser } = req;
+
+        // 1. Check self-access bypass (only if the user is authenticated)
+        if (currentUser && (currentUser.id === req.params.id || currentUser.id === req.body.id)) {
+            return next(); // User has access to their own resource
+        }
+
+        // 2. Check Custom Permissions (only if the user is authenticated)
+        if (currentUser) {
+            // Ensure custom_permissions is an array before using find
+            const customPermissions = Array.isArray(currentUser.custom_permissions)
+                ? currentUser.custom_permissions
+                : [];
+            const userPermission = customPermissions.find(
+                (cp) => cp.name === permission,
+            );
+            if (userPermission) {
+                return next(); // User has a custom permission
+            }
+        }
+
+        // 3. Determine the "effective" role for permission check
+        let effectiveRole = null;
+        try {
+            if (currentUser && currentUser.app_role) {
+                // User is authenticated and has an assigned role
+                effectiveRole = currentUser.app_role;
+            } else {
+                // User is NOT authenticated OR is authenticated but has no role
+                // Use the cached 'Public' role
+                if (!publicRoleCache) {
+                    // If the cache is unexpectedly empty (e.g., startup error caught),
+                    // we can try fetching the role again synchronously (less ideal) or just deny access.
+                    console.error("Public role cache is empty. Attempting synchronous fetch...");
+                    // Less efficient fallback option:
+                    effectiveRole = await RolesDBApi.findBy({ name: 'Public' }); // Could be slow
+                    if (!effectiveRole) {
+                        // If even the synchronous attempt failed
+                        return next(new Error("Internal Server Error: Public role missing and cannot be fetched."));
+                    }
+                } else {
+                    effectiveRole = publicRoleCache; // Use the cached object
+                }
+            }
+
+            // Check if we got a valid role object
+            if (!effectiveRole) {
+                return next(new Error("Internal Server Error: Could not determine effective role."));
+            }
+
+            // 4. Check Permissions on the "effective" role
+            // Assume the effectiveRole object (from app_role or RolesDBApi) has a getPermissions() method
+            // or a 'permissions' property (if permissions are eagerly loaded).
+            let rolePermissions = [];
+            if (typeof effectiveRole.getPermissions === 'function') {
+                rolePermissions = await effectiveRole.getPermissions(); // Get permissions asynchronously if the method exists
+            } else if (Array.isArray(effectiveRole.permissions)) {
+                rolePermissions = effectiveRole.permissions; // Or take from property if permissions are pre-loaded
+            } else {
+                console.error("Role object lacks getPermissions() method or permissions property:", effectiveRole);
+                return next(new Error("Internal Server Error: Invalid role object format."));
+            }
+
+
+            if (rolePermissions.find((p) => p.name === permission)) {
+                next(); // The "effective" role has the required permission
+            } else {
+                // The "effective" role does not have the required permission
+                const roleName = effectiveRole.name || 'unknown role';
+                next(new ValidationError('auth.forbidden', `Role '${roleName}' denied access to '${permission}'.`));
+            }
+
+        } catch (e) {
+            // Handle errors during role or permission fetching
+            console.error("Error during permission check:", e);
+            next(e); // Pass the error to the next middleware
+        }
+    };
+}
+
+const METHOD_MAP = {
+  POST: 'CREATE',
+  GET: 'READ',
+  PUT: 'UPDATE',
+  PATCH: 'UPDATE',
+  DELETE: 'DELETE',
+};
+
+const RUNTIME_PUBLIC_READ_ENTITIES = new Set([
+  'PROJECTS',
+  'TOUR_PAGES',
+  'PAGE_ELEMENTS',
+  'PAGE_LINKS',
+  'TRANSITIONS',
+  'PROJECT_AUDIO_TRACKS',
+]);
+
+/**
+ * Middleware creator to check standard CRUD permissions based on HTTP method and entity name.
+ * @param {string} name - The name of the entity.
+ * @return {import("express").RequestHandler} Express middleware function.
+ */
+function checkCrudPermissions(name) {
+    return (req, res, next) => {
+        const isRuntimePublicRead = req.isRuntimePublicRequest === true
+          && req.method === 'GET'
+          && RUNTIME_PUBLIC_READ_ENTITIES.has(name.toUpperCase());
+
+        if (isRuntimePublicRead) {
+            return next();
+        }
+
+        // Dynamically determine the permission name (e.g., 'READ_USERS')
+        const permissionName = `${METHOD_MAP[req.method]}_${name.toUpperCase()}`;
+        // Call the checkPermissions middleware with the determined permission
+        return checkPermissions(permissionName)(req, res, next);
+    };
+}
+
+module.exports = {
+    checkPermissions,
+    checkCrudPermissions,
+};

backend/src/middlewares/runtime-context.js

@@ -0,0 +1,106 @@
+const DEFAULT_ROOT_DOMAIN = process.env.PLATFORM_ROOT_DOMAIN || 'platform.com';
+const DEFAULT_ADMIN_SUBDOMAIN = process.env.ADMIN_SUBDOMAIN || 'admin';
+const DEFAULT_STAGE_SUBDOMAIN = process.env.STAGE_SUBDOMAIN || 'stage';
+
+function stripPort(hostname = '') {
+  return hostname.split(':')[0].toLowerCase();
+}
+
+function getRequestHost(req) {
+  const forwardedHost = req.headers['x-forwarded-host'];
+  const hostHeader = Array.isArray(forwardedHost) ? forwardedHost[0] : forwardedHost || req.headers.host;
+  return stripPort(hostHeader || '');
+}
+
+function detectRuntimeContext(hostname) {
+  const host = stripPort(hostname);
+
+  if (!host) {
+    return {
+      mode: 'unknown',
+      projectSlug: null,
+      host,
+      rootDomain: DEFAULT_ROOT_DOMAIN,
+    };
+  }
+
+  if (host === 'localhost' || host === '127.0.0.1') {
+    return {
+      mode: 'admin',
+      projectSlug: null,
+      host,
+      rootDomain: DEFAULT_ROOT_DOMAIN,
+    };
+  }
+
+  const rootParts = DEFAULT_ROOT_DOMAIN.split('.').filter(Boolean);
+  const hostParts = host.split('.').filter(Boolean);
+
+  if (hostParts.length > rootParts.length) {
+    const suffix = hostParts.slice(-rootParts.length).join('.');
+
+    if (suffix === DEFAULT_ROOT_DOMAIN) {
+      const prefixParts = hostParts.slice(0, -rootParts.length);
+
+      if (prefixParts.length === 1 && prefixParts[0] === DEFAULT_ADMIN_SUBDOMAIN) {
+        return {
+          mode: 'admin',
+          projectSlug: null,
+          host,
+          rootDomain: DEFAULT_ROOT_DOMAIN,
+        };
+      }
+
+      if (
+        prefixParts.length === 2 &&
+        prefixParts[0] === DEFAULT_STAGE_SUBDOMAIN &&
+        prefixParts[1] !== DEFAULT_ADMIN_SUBDOMAIN
+      ) {
+        return {
+          mode: 'stage',
+          projectSlug: prefixParts[1],
+          host,
+          rootDomain: DEFAULT_ROOT_DOMAIN,
+        };
+      }
+
+      if (
+        prefixParts.length === 1 &&
+        ![DEFAULT_ADMIN_SUBDOMAIN, DEFAULT_STAGE_SUBDOMAIN].includes(prefixParts[0])
+      ) {
+        return {
+          mode: 'production',
+          projectSlug: prefixParts[0],
+          host,
+          rootDomain: DEFAULT_ROOT_DOMAIN,
+        };
+      }
+    }
+  }
+
+  return {
+    mode: 'unknown',
+    projectSlug: null,
+    host,
+    rootDomain: DEFAULT_ROOT_DOMAIN,
+  };
+}
+
+function runtimeContextMiddleware(req, res, next) {
+  const host = getRequestHost(req);
+  const context = detectRuntimeContext(host);
+
+  req.runtimeContext = context;
+
+  res.setHeader('x-runtime-mode', context.mode);
+  if (context.projectSlug) {
+    res.setHeader('x-runtime-project', context.projectSlug);
+  }
+
+  next();
+}
+
+module.exports = {
+  runtimeContextMiddleware,
+  detectRuntimeContext,
+};

backend/src/middlewares/runtime-public.js

@@ -0,0 +1,153 @@
+const PUBLIC_RUNTIME_ALLOWED_PATH = '/';
+
+const PUBLIC_RUNTIME_ENTITY_FIELDS = {
+  projects: [
+    'id',
+    'name',
+    'slug',
+    'description',
+    'phase',
+    'logo_url',
+    'favicon_url',
+    'og_image_url',
+    'theme_config_json',
+    'custom_css_json',
+    'cdn_base_url',
+    'entry_page_slug',
+  ],
+  tour_pages: [
+    'id',
+    'projectId',
+    'environment',
+    'source_key',
+    'name',
+    'slug',
+    'sort_order',
+    'background_image_url',
+    'background_video_url',
+    'background_audio_url',
+    'background_loop',
+    'requires_auth',
+    'ui_schema_json',
+  ],
+  page_elements: [
+    'id',
+    'pageId',
+    'element_type',
+    'name',
+    'sort_order',
+    'is_visible',
+    'x_percent',
+    'y_percent',
+    'width_percent',
+    'height_percent',
+    'rotation_deg',
+    'style_json',
+    'content_json',
+  ],
+  page_links: [
+    'id',
+    'from_pageId',
+    'to_pageId',
+    'transitionId',
+    'direction',
+    'external_url',
+    'is_active',
+    'trigger_selector',
+  ],
+  transitions: [
+    'id',
+    'projectId',
+    'environment',
+    'source_key',
+    'name',
+    'slug',
+    'video_url',
+    'audio_url',
+    'supports_reverse',
+    'duration_sec',
+  ],
+  project_audio_tracks: [
+    'id',
+    'projectId',
+    'environment',
+    'source_key',
+    'name',
+    'slug',
+    'url',
+    'loop',
+    'volume',
+    'sort_order',
+    'is_enabled',
+  ],
+};
+
+const pickFields = (record, fields) => {
+  if (!record || typeof record !== 'object') {
+    return record;
+  }
+
+  return fields.reduce((acc, field) => {
+    if (Object.prototype.hasOwnProperty.call(record, field)) {
+      acc[field] = record[field];
+    }
+
+    return acc;
+  }, {});
+};
+
+const isPublicRuntimeReadRequest = (req) => {
+  return req.isRuntimePublicRequest === true && req.method === 'GET';
+};
+
+const blockNonPublicRuntimeListEndpoints = (req, res, next) => {
+  if (!isPublicRuntimeReadRequest(req)) {
+    return next();
+  }
+
+  if (req.path !== PUBLIC_RUNTIME_ALLOWED_PATH) {
+    return res.status(404).send({ message: 'Not found' });
+  }
+
+  if (req.query.filetype === 'csv') {
+    return res.status(404).send({ message: 'Not found' });
+  }
+
+  return next();
+};
+
+const sanitizePublicRuntimeListResponse = (entityName) => {
+  const fields = PUBLIC_RUNTIME_ENTITY_FIELDS[entityName] || [];
+
+  return (req, res, next) => {
+    if (!isPublicRuntimeReadRequest(req) || req.path !== PUBLIC_RUNTIME_ALLOWED_PATH || fields.length === 0) {
+      return next();
+    }
+
+    const originalSend = res.send.bind(res);
+
+    res.send = (body) => {
+      if (!body || typeof body !== 'object') {
+        return originalSend(body);
+      }
+
+      if (!Array.isArray(body.rows)) {
+        return originalSend(body);
+      }
+
+      const sanitizedRows = body.rows.map((row) => pickFields(row, fields));
+
+      return originalSend({
+        ...body,
+        rows: sanitizedRows,
+      });
+    };
+
+    return next();
+  };
+};
+
+module.exports = {
+  blockNonPublicRuntimeListEndpoints,
+  sanitizePublicRuntimeListResponse,
+};

backend/src/middlewares/upload.js

@@ -0,0 +1,9 @@
+const util = require('util');
+const Multer = require('multer');
+
+let processFile = Multer({
+  storage: Multer.memoryStorage(),
+}).single("file");
+
+let processFileMiddleware = util.promisify(processFile);
+module.exports = processFileMiddleware;

backend/src/routes/access_logs.js

@@ -0,0 +1,436 @@
+
+const express = require('express');
+
+const Access_logsService = require('../services/access_logs');
+const Access_logsDBApi = require('../db/api/access_logs');
+const wrapAsync = require('../helpers').wrapAsync;
+
+
+const router = express.Router();
+
+const { parse } = require('json2csv');
+
+
+const {
+    checkCrudPermissions,
+} = require('../middlewares/check-permissions');
+
+router.use(checkCrudPermissions('access_logs'));
+
+
+/**
+ *  @swagger
+ *  components:
+ *    schemas:
+ *      Access_logs:
+ *        type: object
+ *        properties:
+ 
+ *          path:
+ *            type: string
+ *            default: path
+ *          ip_address:
+ *            type: string
+ *            default: ip_address
+ *          user_agent:
+ *            type: string
+ *            default: user_agent
+ 
+ 
+ 
+ *          
+ */
+
+/**
+ *  @swagger
+ * tags:
+ *   name: Access_logs
+ *   description: The Access_logs managing API
+ */
+
+/**
+*  @swagger
+*  /api/access_logs:
+*    post:
+*      security:
+*        - bearerAuth: []
+*      tags: [Access_logs]
+*      summary: Add new item
+*      description: Add new item
+*      requestBody:
+*        required: true
+*        content:
+*          application/json:
+*            schema:
+*              properties:
+*                data:
+*                  description: Data of the updated item
+*                  type: object
+*                  $ref: "#/components/schemas/Access_logs"
+*      responses:
+*        200:
+*          description: The item was successfully added
+*          content:
+*            application/json:
+*              schema:
+*                $ref: "#/components/schemas/Access_logs"
+*        401:
+*          $ref: "#/components/responses/UnauthorizedError"
+*        405:
+*          description: Invalid input data
+*        500:
+*          description: Some server error
+*/
+router.post('/', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Access_logsService.create(req.body.data, req.currentUser, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+ * @swagger
+ * /api/budgets/bulk-import:
+ *  post:
+ *    security:
+ *      - bearerAuth: []
+ *    tags: [Access_logs]
+ *    summary: Bulk import items
+ *    description: Bulk import items
+ *    requestBody:
+ *      required: true
+ *      content:
+ *        application/json:
+ *         schema:
+ *          properties:
+ *            data:
+ *              description: Data of the updated items
+ *              type: array
+ *              items:
+ *                $ref: "#/components/schemas/Access_logs"
+ *    responses:
+ *      200:
+ *        description: The items were successfully imported
+ *    content:
+ *      application/json:
+ *        schema:
+ *          $ref: "#/components/schemas/Access_logs"
+ *      401:
+ *        $ref: "#/components/responses/UnauthorizedError"
+ *      405:
+ *        description: Invalid input data
+ *      500:
+ *        description: Some server error
+ *
+ */
+router.post('/bulk-import', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Access_logsService.bulkImport(req, res, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/access_logs/{id}:
+  *    put:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Access_logs]
+  *      summary: Update the data of the selected item
+  *      description: Update the data of the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to update
+  *          required: true
+  *          schema:
+  *            type: string
+  *      requestBody:
+  *        description: Set new item data
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                id:
+  *                  description: ID of the updated item
+  *                  type: string
+  *                data:
+  *                  description: Data of the updated item
+  *                  type: object
+  *                  $ref: "#/components/schemas/Access_logs"
+  *              required:
+  *                - id
+  *      responses:
+  *        200:
+  *          description: The item data was successfully updated
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Access_logs"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.put('/:id', wrapAsync(async (req, res) => {
+  await Access_logsService.update(req.body.data, req.body.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  * @swagger
+  *  /api/access_logs/{id}:
+  *    delete:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Access_logs]
+  *      summary: Delete the selected item
+  *      description: Delete the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to delete
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: The item was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Access_logs"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.delete('/:id', wrapAsync(async (req, res) => {
+  await Access_logsService.remove(req.params.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/access_logs/deleteByIds:
+  *    post:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Access_logs]
+  *      summary: Delete the selected item list
+  *      description: Delete the selected item list
+  *      requestBody:
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                ids:
+  *                  description: IDs of the updated items
+  *                  type: array
+  *      responses:
+  *        200:
+  *          description: The items was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Access_logs"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Items not found
+  *        500:
+  *          description: Some server error
+  */
+router.post('/deleteByIds', wrapAsync(async (req, res) => {
+    await Access_logsService.deleteByIds(req.body.data, req.currentUser);
+    const payload = true;
+    res.status(200).send(payload);
+  }));
+
+/**
+  *  @swagger
+  *  /api/access_logs:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Access_logs]
+  *      summary: Get all access_logs
+  *      description: Get all access_logs
+  *      responses:
+  *        200:
+  *          description: Access_logs list successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                type: array
+  *                items:
+  *                  $ref: "#/components/schemas/Access_logs"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Data not found
+  *        500:
+  *          description: Some server error
+*/
+router.get('/', wrapAsync(async (req, res) => {
+  const filetype = req.query.filetype
+  
+  const currentUser = req.currentUser;
+  const payload = await Access_logsDBApi.findAll(
+    req.query,  { currentUser }
+  );
+  if (filetype && filetype === 'csv') {
+    const fields = ['id','path','ip_address','user_agent',
+        
+        
+      'accessed_at',
+        ];
+    const opts = { fields };
+    try {
+      const csv = parse(payload.rows, opts);
+      res.status(200).attachment(csv);
+      res.send(csv)
+
+    } catch (err) {
+      console.error(err);
+    }
+  } else {
+    res.status(200).send(payload);
+  }
+
+}));
+
+/**
+ *  @swagger
+ *  /api/access_logs/count:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Access_logs]
+ *      summary: Count all access_logs
+ *      description: Count all access_logs
+ *      responses:
+ *        200:
+ *          description: Access_logs count successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Access_logs"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/count', wrapAsync(async (req, res) => {
+  
+    const currentUser = req.currentUser;
+    const payload = await Access_logsDBApi.findAll(
+        req.query,
+         null, 
+        { countOnly: true, currentUser }
+    );
+
+    res.status(200).send(payload);
+}));
+
+/**
+ *  @swagger
+ *  /api/access_logs/autocomplete:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Access_logs]
+ *      summary: Find all access_logs that match search criteria
+ *      description: Find all access_logs that match search criteria
+ *      responses:
+ *        200:
+ *          description: Access_logs list successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Access_logs"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/autocomplete', async (req, res) => {
+  
+  const payload = await Access_logsDBApi.findAllAutocomplete(
+    req.query.query,
+    req.query.limit,
+    req.query.offset,
+    
+  );
+
+  res.status(200).send(payload);
+});
+
+/**
+  * @swagger
+  *  /api/access_logs/{id}:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Access_logs]
+  *      summary: Get selected item
+  *      description: Get selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: ID of item to get
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: Selected item successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Access_logs"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.get('/:id', wrapAsync(async (req, res) => {
+  const payload = await Access_logsDBApi.findBy(
+    { id: req.params.id },
+  );
+  
+  
+
+  res.status(200).send(payload);
+}));
+
+router.use('/', require('../helpers').commonErrorHandler);
+
+module.exports = router;

backend/src/routes/asset_variants.js

@@ -0,0 +1,439 @@
+
+const express = require('express');
+
+const Asset_variantsService = require('../services/asset_variants');
+const Asset_variantsDBApi = require('../db/api/asset_variants');
+const wrapAsync = require('../helpers').wrapAsync;
+
+
+const router = express.Router();
+
+const { parse } = require('json2csv');
+
+
+const {
+    checkCrudPermissions,
+} = require('../middlewares/check-permissions');
+
+router.use(checkCrudPermissions('asset_variants'));
+
+
+/**
+ *  @swagger
+ *  components:
+ *    schemas:
+ *      Asset_variants:
+ *        type: object
+ *        properties:
+ 
+ *          cdn_url:
+ *            type: string
+ *            default: cdn_url
+ 
+ *          width_px:
+ *            type: integer
+ *            format: int64
+ *          height_px:
+ *            type: integer
+ *            format: int64
+ 
+ *          size_mb:
+ *            type: integer
+ *            format: int64
+ 
+ *          
+ */
+
+/**
+ *  @swagger
+ * tags:
+ *   name: Asset_variants
+ *   description: The Asset_variants managing API
+ */
+
+/**
+*  @swagger
+*  /api/asset_variants:
+*    post:
+*      security:
+*        - bearerAuth: []
+*      tags: [Asset_variants]
+*      summary: Add new item
+*      description: Add new item
+*      requestBody:
+*        required: true
+*        content:
+*          application/json:
+*            schema:
+*              properties:
+*                data:
+*                  description: Data of the updated item
+*                  type: object
+*                  $ref: "#/components/schemas/Asset_variants"
+*      responses:
+*        200:
+*          description: The item was successfully added
+*          content:
+*            application/json:
+*              schema:
+*                $ref: "#/components/schemas/Asset_variants"
+*        401:
+*          $ref: "#/components/responses/UnauthorizedError"
+*        405:
+*          description: Invalid input data
+*        500:
+*          description: Some server error
+*/
+router.post('/', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Asset_variantsService.create(req.body.data, req.currentUser, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+ * @swagger
+ * /api/budgets/bulk-import:
+ *  post:
+ *    security:
+ *      - bearerAuth: []
+ *    tags: [Asset_variants]
+ *    summary: Bulk import items
+ *    description: Bulk import items
+ *    requestBody:
+ *      required: true
+ *      content:
+ *        application/json:
+ *         schema:
+ *          properties:
+ *            data:
+ *              description: Data of the updated items
+ *              type: array
+ *              items:
+ *                $ref: "#/components/schemas/Asset_variants"
+ *    responses:
+ *      200:
+ *        description: The items were successfully imported
+ *    content:
+ *      application/json:
+ *        schema:
+ *          $ref: "#/components/schemas/Asset_variants"
+ *      401:
+ *        $ref: "#/components/responses/UnauthorizedError"
+ *      405:
+ *        description: Invalid input data
+ *      500:
+ *        description: Some server error
+ *
+ */
+router.post('/bulk-import', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Asset_variantsService.bulkImport(req, res, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/asset_variants/{id}:
+  *    put:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Asset_variants]
+  *      summary: Update the data of the selected item
+  *      description: Update the data of the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to update
+  *          required: true
+  *          schema:
+  *            type: string
+  *      requestBody:
+  *        description: Set new item data
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                id:
+  *                  description: ID of the updated item
+  *                  type: string
+  *                data:
+  *                  description: Data of the updated item
+  *                  type: object
+  *                  $ref: "#/components/schemas/Asset_variants"
+  *              required:
+  *                - id
+  *      responses:
+  *        200:
+  *          description: The item data was successfully updated
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Asset_variants"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.put('/:id', wrapAsync(async (req, res) => {
+  await Asset_variantsService.update(req.body.data, req.body.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  * @swagger
+  *  /api/asset_variants/{id}:
+  *    delete:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Asset_variants]
+  *      summary: Delete the selected item
+  *      description: Delete the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to delete
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: The item was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Asset_variants"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.delete('/:id', wrapAsync(async (req, res) => {
+  await Asset_variantsService.remove(req.params.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/asset_variants/deleteByIds:
+  *    post:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Asset_variants]
+  *      summary: Delete the selected item list
+  *      description: Delete the selected item list
+  *      requestBody:
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                ids:
+  *                  description: IDs of the updated items
+  *                  type: array
+  *      responses:
+  *        200:
+  *          description: The items was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Asset_variants"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Items not found
+  *        500:
+  *          description: Some server error
+  */
+router.post('/deleteByIds', wrapAsync(async (req, res) => {
+    await Asset_variantsService.deleteByIds(req.body.data, req.currentUser);
+    const payload = true;
+    res.status(200).send(payload);
+  }));
+
+/**
+  *  @swagger
+  *  /api/asset_variants:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Asset_variants]
+  *      summary: Get all asset_variants
+  *      description: Get all asset_variants
+  *      responses:
+  *        200:
+  *          description: Asset_variants list successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                type: array
+  *                items:
+  *                  $ref: "#/components/schemas/Asset_variants"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Data not found
+  *        500:
+  *          description: Some server error
+*/
+router.get('/', wrapAsync(async (req, res) => {
+  const filetype = req.query.filetype
+  
+  const currentUser = req.currentUser;
+  const payload = await Asset_variantsDBApi.findAll(
+    req.query,  { currentUser }
+  );
+  if (filetype && filetype === 'csv') {
+    const fields = ['id','cdn_url',
+        'width_px','height_px',
+        'size_mb',
+      
+        ];
+    const opts = { fields };
+    try {
+      const csv = parse(payload.rows, opts);
+      res.status(200).attachment(csv);
+      res.send(csv)
+
+    } catch (err) {
+      console.error(err);
+    }
+  } else {
+    res.status(200).send(payload);
+  }
+
+}));
+
+/**
+ *  @swagger
+ *  /api/asset_variants/count:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Asset_variants]
+ *      summary: Count all asset_variants
+ *      description: Count all asset_variants
+ *      responses:
+ *        200:
+ *          description: Asset_variants count successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Asset_variants"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/count', wrapAsync(async (req, res) => {
+  
+    const currentUser = req.currentUser;
+    const payload = await Asset_variantsDBApi.findAll(
+        req.query,
+         null, 
+        { countOnly: true, currentUser }
+    );
+
+    res.status(200).send(payload);
+}));
+
+/**
+ *  @swagger
+ *  /api/asset_variants/autocomplete:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Asset_variants]
+ *      summary: Find all asset_variants that match search criteria
+ *      description: Find all asset_variants that match search criteria
+ *      responses:
+ *        200:
+ *          description: Asset_variants list successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Asset_variants"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/autocomplete', async (req, res) => {
+  
+  const payload = await Asset_variantsDBApi.findAllAutocomplete(
+    req.query.query,
+    req.query.limit,
+    req.query.offset,
+    
+  );
+
+  res.status(200).send(payload);
+});
+
+/**
+  * @swagger
+  *  /api/asset_variants/{id}:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Asset_variants]
+  *      summary: Get selected item
+  *      description: Get selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: ID of item to get
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: Selected item successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Asset_variants"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.get('/:id', wrapAsync(async (req, res) => {
+  const payload = await Asset_variantsDBApi.findBy(
+    { id: req.params.id },
+  );
+  
+  
+
+  res.status(200).send(payload);
+}));
+
+router.use('/', require('../helpers').commonErrorHandler);
+
+module.exports = router;

backend/src/routes/assets.js

@@ -0,0 +1,454 @@
+
+const express = require('express');
+
+const AssetsService = require('../services/assets');
+const AssetsDBApi = require('../db/api/assets');
+const wrapAsync = require('../helpers').wrapAsync;
+
+
+const router = express.Router();
+
+const { parse } = require('json2csv');
+
+
+const {
+    checkCrudPermissions,
+} = require('../middlewares/check-permissions');
+
+router.use(checkCrudPermissions('assets'));
+
+
+/**
+ *  @swagger
+ *  components:
+ *    schemas:
+ *      Assets:
+ *        type: object
+ *        properties:
+ 
+ *          name:
+ *            type: string
+ *            default: name
+ *          cdn_url:
+ *            type: string
+ *            default: cdn_url
+ *          storage_key:
+ *            type: string
+ *            default: storage_key
+ *          mime_type:
+ *            type: string
+ *            default: mime_type
+ *          checksum:
+ *            type: string
+ *            default: checksum
+ 
+ *          width_px:
+ *            type: integer
+ *            format: int64
+ *          height_px:
+ *            type: integer
+ *            format: int64
+ 
+ *          size_mb:
+ *            type: integer
+ *            format: int64
+ *          duration_sec:
+ *            type: integer
+ *            format: int64
+ 
+ *          
+ */
+
+/**
+ *  @swagger
+ * tags:
+ *   name: Assets
+ *   description: The Assets managing API
+ */
+
+/**
+*  @swagger
+*  /api/assets:
+*    post:
+*      security:
+*        - bearerAuth: []
+*      tags: [Assets]
+*      summary: Add new item
+*      description: Add new item
+*      requestBody:
+*        required: true
+*        content:
+*          application/json:
+*            schema:
+*              properties:
+*                data:
+*                  description: Data of the updated item
+*                  type: object
+*                  $ref: "#/components/schemas/Assets"
+*      responses:
+*        200:
+*          description: The item was successfully added
+*          content:
+*            application/json:
+*              schema:
+*                $ref: "#/components/schemas/Assets"
+*        401:
+*          $ref: "#/components/responses/UnauthorizedError"
+*        405:
+*          description: Invalid input data
+*        500:
+*          description: Some server error
+*/
+router.post('/', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await AssetsService.create(req.body.data, req.currentUser, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+ * @swagger
+ * /api/budgets/bulk-import:
+ *  post:
+ *    security:
+ *      - bearerAuth: []
+ *    tags: [Assets]
+ *    summary: Bulk import items
+ *    description: Bulk import items
+ *    requestBody:
+ *      required: true
+ *      content:
+ *        application/json:
+ *         schema:
+ *          properties:
+ *            data:
+ *              description: Data of the updated items
+ *              type: array
+ *              items:
+ *                $ref: "#/components/schemas/Assets"
+ *    responses:
+ *      200:
+ *        description: The items were successfully imported
+ *    content:
+ *      application/json:
+ *        schema:
+ *          $ref: "#/components/schemas/Assets"
+ *      401:
+ *        $ref: "#/components/responses/UnauthorizedError"
+ *      405:
+ *        description: Invalid input data
+ *      500:
+ *        description: Some server error
+ *
+ */
+router.post('/bulk-import', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await AssetsService.bulkImport(req, res, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/assets/{id}:
+  *    put:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Assets]
+  *      summary: Update the data of the selected item
+  *      description: Update the data of the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to update
+  *          required: true
+  *          schema:
+  *            type: string
+  *      requestBody:
+  *        description: Set new item data
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                id:
+  *                  description: ID of the updated item
+  *                  type: string
+  *                data:
+  *                  description: Data of the updated item
+  *                  type: object
+  *                  $ref: "#/components/schemas/Assets"
+  *              required:
+  *                - id
+  *      responses:
+  *        200:
+  *          description: The item data was successfully updated
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Assets"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.put('/:id', wrapAsync(async (req, res) => {
+  await AssetsService.update(req.body.data, req.body.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  * @swagger
+  *  /api/assets/{id}:
+  *    delete:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Assets]
+  *      summary: Delete the selected item
+  *      description: Delete the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to delete
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: The item was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Assets"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.delete('/:id', wrapAsync(async (req, res) => {
+  await AssetsService.remove(req.params.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/assets/deleteByIds:
+  *    post:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Assets]
+  *      summary: Delete the selected item list
+  *      description: Delete the selected item list
+  *      requestBody:
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                ids:
+  *                  description: IDs of the updated items
+  *                  type: array
+  *      responses:
+  *        200:
+  *          description: The items was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Assets"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Items not found
+  *        500:
+  *          description: Some server error
+  */
+router.post('/deleteByIds', wrapAsync(async (req, res) => {
+    await AssetsService.deleteByIds(req.body.data, req.currentUser);
+    const payload = true;
+    res.status(200).send(payload);
+  }));
+
+/**
+  *  @swagger
+  *  /api/assets:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Assets]
+  *      summary: Get all assets
+  *      description: Get all assets
+  *      responses:
+  *        200:
+  *          description: Assets list successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                type: array
+  *                items:
+  *                  $ref: "#/components/schemas/Assets"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Data not found
+  *        500:
+  *          description: Some server error
+*/
+router.get('/', wrapAsync(async (req, res) => {
+  const filetype = req.query.filetype
+  
+  const currentUser = req.currentUser;
+  const payload = await AssetsDBApi.findAll(
+    req.query,  { currentUser }
+  );
+  if (filetype && filetype === 'csv') {
+    const fields = ['id','name','cdn_url','storage_key','mime_type','checksum',
+        'width_px','height_px',
+        'size_mb','duration_sec',
+      'deleted_at_time',
+        ];
+    const opts = { fields };
+    try {
+      const csv = parse(payload.rows, opts);
+      res.status(200).attachment(csv);
+      res.send(csv)
+
+    } catch (err) {
+      console.error(err);
+    }
+  } else {
+    res.status(200).send(payload);
+  }
+
+}));
+
+/**
+ *  @swagger
+ *  /api/assets/count:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Assets]
+ *      summary: Count all assets
+ *      description: Count all assets
+ *      responses:
+ *        200:
+ *          description: Assets count successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Assets"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/count', wrapAsync(async (req, res) => {
+  
+    const currentUser = req.currentUser;
+    const payload = await AssetsDBApi.findAll(
+        req.query,
+         null, 
+        { countOnly: true, currentUser }
+    );
+
+    res.status(200).send(payload);
+}));
+
+/**
+ *  @swagger
+ *  /api/assets/autocomplete:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Assets]
+ *      summary: Find all assets that match search criteria
+ *      description: Find all assets that match search criteria
+ *      responses:
+ *        200:
+ *          description: Assets list successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Assets"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/autocomplete', async (req, res) => {
+  
+  const payload = await AssetsDBApi.findAllAutocomplete(
+    req.query.query,
+    req.query.limit,
+    req.query.offset,
+    
+  );
+
+  res.status(200).send(payload);
+});
+
+/**
+  * @swagger
+  *  /api/assets/{id}:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Assets]
+  *      summary: Get selected item
+  *      description: Get selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: ID of item to get
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: Selected item successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Assets"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.get('/:id', wrapAsync(async (req, res) => {
+  const payload = await AssetsDBApi.findBy(
+    { id: req.params.id },
+  );
+  
+  
+
+  res.status(200).send(payload);
+}));
+
+router.use('/', require('../helpers').commonErrorHandler);
+
+module.exports = router;

backend/src/routes/auth.js

@@ -0,0 +1,292 @@
+const express = require('express');
+const passport = require('passport');
+
+const config = require('../config');
+const AuthService = require('../services/auth');
+const ForbiddenError = require('../services/notifications/errors/forbidden');
+const EmailSender = require('../services/email');
+const wrapAsync = require('../helpers').wrapAsync;
+
+const router = express.Router();
+const authRateLimitStore = new Map();
+
+const createMemoryRateLimiter = ({
+  keyPrefix,
+  maxRequests,
+  windowMs,
+}) => (req, res, next) => {
+  const key = `${keyPrefix}:${req.ip || 'unknown'}`;
+  const now = Date.now();
+  const current = authRateLimitStore.get(key);
+
+  if (!current || current.expiresAt <= now) {
+    authRateLimitStore.set(key, { count: 1, expiresAt: now + windowMs });
+    return next();
+  }
+
+  if (current.count >= maxRequests) {
+    return res.status(429).send({
+      message: 'Too many requests. Please try again later.',
+    });
+  }
+
+  current.count += 1;
+  authRateLimitStore.set(key, current);
+  return next();
+};
+
+const signinLimiter = createMemoryRateLimiter({
+  keyPrefix: 'signin',
+  maxRequests: 10,
+  windowMs: 15 * 60 * 1000,
+});
+
+const signupLimiter = createMemoryRateLimiter({
+  keyPrefix: 'signup',
+  maxRequests: 5,
+  windowMs: 60 * 60 * 1000,
+});
+
+const passwordResetLimiter = createMemoryRateLimiter({
+  keyPrefix: 'password-reset',
+  maxRequests: 5,
+  windowMs: 60 * 60 * 1000,
+});
+
+function safeParseUrl(value) {
+  if (!value || typeof value !== 'string') {
+    return null;
+  }
+
+  try {
+    return new URL(value);
+  } catch (error) {
+    try {
+      return new URL(`https://${value}`);
+    } catch (innerError) {
+      return null;
+    }
+  }
+}
+
+function getRequestHost(req) {
+  const uiUrl = safeParseUrl(config.uiUrl);
+  const fallbackHost = uiUrl ? uiUrl.origin : config.backUrl || 'http://localhost:3000';
+  const origin = safeParseUrl(req.headers.origin);
+  const referer = safeParseUrl(req.headers.referer);
+
+  if (uiUrl && origin && origin.host === uiUrl.host) {
+    return origin.origin;
+  }
+
+  if (uiUrl && referer && referer.host === uiUrl.host) {
+    return referer.origin;
+  }
+
+  if (origin && !uiUrl) {
+    return origin.origin;
+  }
+
+  if (referer && !uiUrl) {
+    return referer.origin;
+  }
+
+  return fallbackHost;
+}
+
+/**
+ *  @swagger
+ *  components:
+ *    schemas:
+ *      Auth:
+ *        type: object
+ *        required:
+ *          - email
+ *          - password
+ *        properties:
+ *          email:
+ *            type: string
+ *            default: admin@flatlogic.com
+ *            description: User email
+ *          password:
+ *            type: string
+ *            default: password
+ *            description: User password
+ */
+
+/**
+ * @swagger
+ * tags:
+ *   name: Auth
+ *   description: Authorization operations
+ */
+
+/**
+ * @swagger
+ *  /api/auth/signin/local:
+ *    post:
+ *      tags: [Auth]
+ *      summary: Logs user into the system
+ *      description: Logs user into the system
+ *      requestBody:
+ *        description: Set valid user email and password
+ *        content:
+ *          application/json:
+ *            schema:
+ *              $ref: "#/components/schemas/Auth"
+ *      responses:
+ *        200:
+ *          description: Successful login
+ *        400:
+ *          description: Invalid username/password supplied
+ *      x-codegen-request-body-name: body
+ */
+
+router.post('/signin/local', signinLimiter, wrapAsync(async (req, res) => {
+  const payload = await AuthService.signin(req.body.email, req.body.password, req,);
+  res.status(200).send(payload);
+}));
+
+/**
+ * @swagger
+ *  /api/auth/me:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Auth]
+ *      summary: Get current authorized user info
+ *      description: Get current authorized user info
+ *      responses:
+ *        200:
+ *          description: Successful retrieval of current authorized user data
+ *        400:
+ *          description: Invalid username/password supplied
+ *      x-codegen-request-body-name: body
+ */
+
+router.get('/me', passport.authenticate('jwt', {session: false}), (req, res) => {
+  if (!req.currentUser || !req.currentUser.id) {
+    throw new ForbiddenError();
+  }
+
+  const payload = req.currentUser;
+  delete payload.password;
+  res.status(200).send(payload);
+});
+
+router.put('/password-reset', wrapAsync(async (req, res) => {
+  const payload = await AuthService.passwordReset(req.body.token, req.body.password, req,);
+  res.status(200).send(payload);
+}));
+
+router.put('/password-update', passport.authenticate('jwt', {session: false}), wrapAsync(async (req, res) => {
+  const payload = await AuthService.passwordUpdate(req.body.currentPassword, req.body.newPassword, req);
+  res.status(200).send(payload);
+}));
+
+router.post('/send-email-address-verification-email', passport.authenticate('jwt', {session: false}), wrapAsync(async (req, res) => {
+  if (!req.currentUser) {
+    throw new ForbiddenError();
+  }
+
+  await AuthService.sendEmailAddressVerificationEmail(req.currentUser.email);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+router.post('/send-password-reset-email', passwordResetLimiter, wrapAsync(async (req, res) => {
+  const host = getRequestHost(req);
+  await AuthService.sendPasswordResetEmail(req.body.email, 'register', host);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+ * @swagger
+ *  /api/auth/signup:
+ *    post:
+ *      tags: [Auth]
+ *      summary: Register new user into the system
+ *      description: Register new user into the system
+ *      requestBody:
+ *        description: Set valid user email and password
+ *        content:
+ *          application/json:
+ *            schema:
+ *              $ref: "#/components/schemas/Auth"
+ *      responses:
+ *        200:
+ *          description: New user successfully signed up
+ *        400:
+ *          description: Invalid username/password supplied
+ *        500:
+ *          description: Some server error
+ *      x-codegen-request-body-name: body
+ */
+
+router.post('/signup', signupLimiter, wrapAsync(async (req, res) => {
+  const host = getRequestHost(req);
+  const payload = await AuthService.signup(
+      req.body.email,
+      req.body.password,
+      
+      req,
+      host,
+    )
+  res.status(200).send(payload);
+}));
+
+router.put('/profile', passport.authenticate('jwt', {session: false}), wrapAsync(async (req, res) => {
+  if (!req.currentUser || !req.currentUser.id) {
+    throw new ForbiddenError();
+  }
+
+  await AuthService.updateProfile(req.body.profile, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+router.put('/verify-email', wrapAsync(async (req, res) => {
+  const payload = await AuthService.verifyEmail(req.body.token, req, req.headers.referer)
+  res.status(200).send(payload);
+}));
+
+router.get('/email-configured', (req, res) => {
+  const payload = EmailSender.isConfigured;
+  res.status(200).send(payload);
+});
+
+router.get('/signin/google', (req, res, next) => {
+  passport.authenticate("google", {scope: ["profile", "email"], state: req.query.app})(req, res, next);
+});
+
+router.get('/signin/google/callback', passport.authenticate("google", {failureRedirect: "/login", session: false}),
+
+  function (req, res) {
+    socialRedirect(res, req.query.state, req.user.token, config);
+  }
+);
+
+router.get('/signin/microsoft', (req, res, next) => {
+  passport.authenticate("microsoft", {
+    scope: ["https://graph.microsoft.com/user.read openid"],
+    state: req.query.app
+  })(req, res, next);
+});
+
+router.get('/signin/microsoft/callback', passport.authenticate("microsoft", {
+    failureRedirect: "/login",
+    session: false
+  }),
+  function (req, res) {
+    socialRedirect(res, req.query.state, req.user.token, config);
+  }
+);
+
+router.use('/', require('../helpers').commonErrorHandler);
+
+function socialRedirect(res, state, token, config) {
+  res.redirect(config.uiUrl + "/login?token=" + token);
+}
+
+module.exports = router;

backend/src/routes/file.js

@@ -0,0 +1,48 @@
+const express = require('express');
+const passport = require('passport');
+const services = require('../services/file');
+const router = express.Router();
+
+router.get('/download', (req, res) => {
+  services.downloadFile(req, res);
+});
+
+router.post('/upload/:table/:field', passport.authenticate('jwt', {session: false}), (req, res) => {
+  const fileName = `${req.params.table}/${req.params.field}`;
+
+  services.uploadFile(fileName, req, res);
+});
+
+router.post(
+  '/upload-sessions/init',
+  passport.authenticate('jwt', { session: false }),
+  (req, res) => {
+    services.initUploadSession(req, res);
+  },
+);
+
+router.get(
+  '/upload-sessions/:sessionId',
+  passport.authenticate('jwt', { session: false }),
+  (req, res) => {
+    services.getUploadSession(req, res);
+  },
+);
+
+router.put(
+  '/upload-sessions/:sessionId/chunks/:chunkIndex',
+  passport.authenticate('jwt', { session: false }),
+  (req, res) => {
+    services.uploadChunk(req, res);
+  },
+);
+
+router.post(
+  '/upload-sessions/:sessionId/finalize',
+  passport.authenticate('jwt', { session: false }),
+  (req, res) => {
+    services.finalizeUploadSession(req, res);
+  },
+);
+
+module.exports = router;

backend/src/routes/openai.js

@@ -0,0 +1,328 @@
+const express = require('express');
+const db = require('../db/models');
+const wrapAsync = require('../helpers').wrapAsync;
+const router = express.Router();
+const sjs = require('sequelize-json-schema');
+const { getWidget, askGpt } = require('../services/openai');
+const { LocalAIApi } = require('../ai/LocalAIApi');
+
+const loadRolesModules = () => {
+    try {
+        return {
+            RolesService: require('../services/roles'),
+            RolesDBApi: require('../db/api/roles'),
+        };
+    } catch (error) {
+        console.error('Roles modules are missing. Advanced roles are required for this endpoint.', error);
+        const err = new Error('Roles modules are missing. Advanced roles are required for this endpoint.');
+        err.originalError = error;
+        throw err;
+    }
+};
+
+/**
+ * @swagger
+ * /api/roles/roles-info/{infoId}:
+ *   delete:
+ *     security:
+ *       - bearerAuth: []
+ *     tags: [Roles]
+ *     summary: Remove role information by ID
+ *     description: Remove specific role information by ID
+ *     parameters:
+ *       - in: path
+ *         name: infoId
+ *         description: ID of role information to remove
+ *         required: true
+ *         schema:
+ *           type: string
+ *       - in: query
+ *         name: userId
+ *         description: ID of the user
+ *         required: true
+ *         schema:
+ *           type: string
+ *       - in: query
+ *         name: key
+ *         description: Key of the role information to remove
+ *         required: true
+ *         schema:
+ *           type: string
+ *     responses:
+ *       200:
+ *         description: Role information successfully removed
+ *         content:
+ *           application/json:
+ *             schema:
+ *               type: object
+ *               properties:
+ *                 user:
+ *                   type: string
+ *                   description: The user information
+ *       400:
+ *         description: Invalid ID or key supplied
+ *       401:
+ *         $ref: "#/components/responses/UnauthorizedError"
+ *       404:
+ *         description: Role not found
+ *       500:
+ *         description: Some server error
+ */
+
+router.delete(
+    '/roles-info/:infoId',
+    wrapAsync(async (req, res) => {
+        const { RolesService } = loadRolesModules();
+        const role = await RolesService.removeRoleInfoById(
+            req.query.infoId,
+            req.query.roleId,
+            req.query.key,
+            req.currentUser,
+        );
+
+        res.status(200).send(role);
+    }),
+);
+
+/**
+ * @swagger
+ * /api/roles/role-info/{roleId}:
+ *   get:
+ *     security:
+ *       - bearerAuth: []
+ *     tags: [Roles]
+ *     summary: Get role information by key
+ *     description: Get specific role information by key
+ *     parameters:
+ *       - in: path
+ *         name: roleId
+ *         description: ID of role to get information for
+ *         required: true
+ *         schema:
+ *           type: string
+ *       - in: query
+ *         name: key
+ *         description: Key of the role information to retrieve
+ *         required: true
+ *         schema:
+ *           type: string
+ *     responses:
+ *       200:
+ *         description: Role information successfully received
+ *         content:
+ *           application/json:
+ *             schema:
+ *               type: object
+ *               properties:
+ *                 info:
+ *                   type: string
+ *                   description: The role information
+ *       400:
+ *         description: Invalid ID or key supplied
+ *       401:
+ *         $ref: "#/components/responses/UnauthorizedError"
+ *       404:
+ *         description: Role not found
+ *       500:
+ *         description: Some server error
+ */
+
+router.get(
+    '/info-by-key',
+    wrapAsync(async (req, res) => {
+        const { RolesService, RolesDBApi } = loadRolesModules();
+        const roleId = req.query.roleId;
+        const key = req.query.key;
+        const currentUser = req.currentUser;
+        let info = await RolesService.getRoleInfoByKey(
+            key,
+            roleId,
+            currentUser,
+        );
+        const role = await RolesDBApi.findBy({ id: roleId });
+        if (!role?.role_customization) {
+            await Promise.all(["pie", "bar"].map(async (e) => {
+                const schema = await sjs.getSequelizeSchema(db.sequelize, {});
+                const payload = {
+                    description: `Create some cool ${e} chart`,
+                    modelDefinition: schema.definitions,
+                };
+                const widgetId = await getWidget(payload, currentUser?.id, roleId);
+                if (widgetId) {
+                    await RolesService.addRoleInfo(
+                        roleId,
+                        currentUser?.id,
+                        'widgets',
+                        widgetId,
+                        req.currentUser,
+                    );
+                }
+            }))
+            info = await RolesService.getRoleInfoByKey(
+                key,
+                roleId,
+                currentUser,
+            );
+        }
+        res.status(200).send(info);
+    }),
+);
+
+router.post(
+    '/create_widget',
+    wrapAsync(async (req, res) => {
+        const { RolesService } = loadRolesModules();
+        const { description, userId, roleId } = req.body;
+
+        const currentUser = req.currentUser;
+        const schema = await sjs.getSequelizeSchema(db.sequelize, {});
+        const payload = {
+            description,
+            modelDefinition: schema.definitions,
+        };
+
+        const widgetId = await getWidget(payload, userId, roleId);
+
+        if (widgetId) {
+            await RolesService.addRoleInfo(
+                roleId,
+                userId,
+                'widgets',
+                widgetId,
+                currentUser,
+            );
+
+            return res.status(200).send(widgetId);
+        } else {
+            return res.status(400).send(widgetId);
+        }
+    }),
+);
+
+/**
+ * @swagger
+ * /api/openai/response:
+ *   post:
+ *     security:
+ *       - bearerAuth: []
+ *     tags: [OpenAI]
+ *     summary: Proxy a Responses API request
+ *     description: Sends the payload to the Flatlogic AI proxy and returns the response.
+ *     requestBody:
+ *       required: true
+ *       content:
+ *         application/json:
+ *           schema:
+ *             type: object
+ *             properties:
+ *               input:
+ *                 type: array
+ *                 description: List of messages with roles and content.
+ *                 items:
+ *                   type: object
+ *                   properties:
+ *                     role:
+ *                       type: string
+ *                     content:
+ *                       type: string
+ *               options:
+ *                 type: object
+ *                 description: Optional polling controls.
+ *                 properties:
+ *                   poll_interval:
+ *                     type: number
+ *                   poll_timeout:
+ *                     type: number
+ *     responses:
+ *       200:
+ *         description: AI response received
+ *       400:
+ *         description: Invalid request
+ *       401:
+ *         $ref: "#/components/responses/UnauthorizedError"
+ *       502:
+ *         description: Proxy error
+ */
+router.post(
+    '/response',
+    wrapAsync(async (req, res) => {
+        const body = req.body || {};
+        const options = body.options || {};
+        const payload = { ...body };
+        delete payload.options;
+
+        const response = await LocalAIApi.createResponse(payload, options);
+
+        if (response.success) {
+            return res.status(200).send(response);
+        }
+
+        console.error('AI proxy error:', response);
+        const status = response.error === 'input_missing' ? 400 : 502;
+        return res.status(status).send(response);
+    }),
+);
+
+/**
+ * @swagger
+ * /api/openai/ask:
+ *   post:
+ *     security:
+ *       - bearerAuth: []
+ *     tags: [OpenAI]
+ *     summary: Ask a question to ChatGPT
+ *     description: Send a question through the Flatlogic AI proxy and get a response
+ *     requestBody:
+ *       required: true
+ *       content:
+ *         application/json:
+ *           schema:
+ *             type: object
+ *             properties:
+ *               prompt:
+ *                 type: string
+ *                 description: The question to ask ChatGPT
+ *     responses:
+ *       200:
+ *         description: Question successfully answered
+ *         content:
+ *           application/json:
+ *             schema:
+ *               type: object
+ *               properties:
+ *                 success:
+ *                   type: boolean
+ *                   description: Whether the request was successful
+ *                 data:
+ *                   type: string
+ *                   description: The answer from ChatGPT
+ *       400:
+ *         description: Invalid request
+ *       401:
+ *         $ref: "#/components/responses/UnauthorizedError"
+ *       500:
+ *         description: Some server error
+ */
+router.post(
+    '/ask-gpt',
+    wrapAsync(async (req, res) => {
+        const { prompt } = req.body;
+        if (!prompt) {
+            return res.status(400).send({
+                success: false,
+                error: 'Prompt is required',
+            });
+        }
+
+        const response = await askGpt(prompt);
+
+        if (response.success) {
+            return res.status(200).send(response);
+        } else {
+            return res.status(500).send(response);
+        }
+    }),
+);
+
+
+module.exports = router;

backend/src/routes/organizationLogin.js

@@ -0,0 +1,2 @@
+
+

backend/src/routes/page_elements.js

@@ -0,0 +1,458 @@
+
+const express = require('express');
+
+const Page_elementsService = require('../services/page_elements');
+const Page_elementsDBApi = require('../db/api/page_elements');
+const wrapAsync = require('../helpers').wrapAsync;
+
+
+const router = express.Router();
+
+const { parse } = require('json2csv');
+
+
+const {
+    checkCrudPermissions,
+} = require('../middlewares/check-permissions');
+
+router.use(checkCrudPermissions('page_elements'));
+
+
+/**
+ *  @swagger
+ *  components:
+ *    schemas:
+ *      Page_elements:
+ *        type: object
+ *        properties:
+ 
+ *          name:
+ *            type: string
+ *            default: name
+ *          style_json:
+ *            type: string
+ *            default: style_json
+ *          content_json:
+ *            type: string
+ *            default: content_json
+ 
+ *          sort_order:
+ *            type: integer
+ *            format: int64
+ 
+ *          x_percent:
+ *            type: integer
+ *            format: int64
+ *          y_percent:
+ *            type: integer
+ *            format: int64
+ *          width_percent:
+ *            type: integer
+ *            format: int64
+ *          height_percent:
+ *            type: integer
+ *            format: int64
+ *          rotation_deg:
+ *            type: integer
+ *            format: int64
+ 
+ *          
+ */
+
+/**
+ *  @swagger
+ * tags:
+ *   name: Page_elements
+ *   description: The Page_elements managing API
+ */
+
+/**
+*  @swagger
+*  /api/page_elements:
+*    post:
+*      security:
+*        - bearerAuth: []
+*      tags: [Page_elements]
+*      summary: Add new item
+*      description: Add new item
+*      requestBody:
+*        required: true
+*        content:
+*          application/json:
+*            schema:
+*              properties:
+*                data:
+*                  description: Data of the updated item
+*                  type: object
+*                  $ref: "#/components/schemas/Page_elements"
+*      responses:
+*        200:
+*          description: The item was successfully added
+*          content:
+*            application/json:
+*              schema:
+*                $ref: "#/components/schemas/Page_elements"
+*        401:
+*          $ref: "#/components/responses/UnauthorizedError"
+*        405:
+*          description: Invalid input data
+*        500:
+*          description: Some server error
+*/
+router.post('/', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Page_elementsService.create(req.body.data, req.currentUser, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+ * @swagger
+ * /api/budgets/bulk-import:
+ *  post:
+ *    security:
+ *      - bearerAuth: []
+ *    tags: [Page_elements]
+ *    summary: Bulk import items
+ *    description: Bulk import items
+ *    requestBody:
+ *      required: true
+ *      content:
+ *        application/json:
+ *         schema:
+ *          properties:
+ *            data:
+ *              description: Data of the updated items
+ *              type: array
+ *              items:
+ *                $ref: "#/components/schemas/Page_elements"
+ *    responses:
+ *      200:
+ *        description: The items were successfully imported
+ *    content:
+ *      application/json:
+ *        schema:
+ *          $ref: "#/components/schemas/Page_elements"
+ *      401:
+ *        $ref: "#/components/responses/UnauthorizedError"
+ *      405:
+ *        description: Invalid input data
+ *      500:
+ *        description: Some server error
+ *
+ */
+router.post('/bulk-import', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Page_elementsService.bulkImport(req, res, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/page_elements/{id}:
+  *    put:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Page_elements]
+  *      summary: Update the data of the selected item
+  *      description: Update the data of the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to update
+  *          required: true
+  *          schema:
+  *            type: string
+  *      requestBody:
+  *        description: Set new item data
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                id:
+  *                  description: ID of the updated item
+  *                  type: string
+  *                data:
+  *                  description: Data of the updated item
+  *                  type: object
+  *                  $ref: "#/components/schemas/Page_elements"
+  *              required:
+  *                - id
+  *      responses:
+  *        200:
+  *          description: The item data was successfully updated
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Page_elements"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.put('/:id', wrapAsync(async (req, res) => {
+  await Page_elementsService.update(req.body.data, req.body.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  * @swagger
+  *  /api/page_elements/{id}:
+  *    delete:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Page_elements]
+  *      summary: Delete the selected item
+  *      description: Delete the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to delete
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: The item was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Page_elements"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.delete('/:id', wrapAsync(async (req, res) => {
+  await Page_elementsService.remove(req.params.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/page_elements/deleteByIds:
+  *    post:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Page_elements]
+  *      summary: Delete the selected item list
+  *      description: Delete the selected item list
+  *      requestBody:
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                ids:
+  *                  description: IDs of the updated items
+  *                  type: array
+  *      responses:
+  *        200:
+  *          description: The items was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Page_elements"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Items not found
+  *        500:
+  *          description: Some server error
+  */
+router.post('/deleteByIds', wrapAsync(async (req, res) => {
+    await Page_elementsService.deleteByIds(req.body.data, req.currentUser);
+    const payload = true;
+    res.status(200).send(payload);
+  }));
+
+/**
+  *  @swagger
+  *  /api/page_elements:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Page_elements]
+  *      summary: Get all page_elements
+  *      description: Get all page_elements
+  *      responses:
+  *        200:
+  *          description: Page_elements list successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                type: array
+  *                items:
+  *                  $ref: "#/components/schemas/Page_elements"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Data not found
+  *        500:
+  *          description: Some server error
+*/
+router.get('/', wrapAsync(async (req, res) => {
+  const filetype = req.query.filetype
+  
+  const currentUser = req.currentUser;
+  const runtimeContext = req.runtimeContext;
+  const payload = await Page_elementsDBApi.findAll(
+    req.query,  { currentUser, runtimeContext }
+  );
+  if (filetype && filetype === 'csv') {
+    const fields = ['id','name','style_json','content_json',
+        'sort_order',
+        'x_percent','y_percent','width_percent','height_percent','rotation_deg',
+      
+        ];
+    const opts = { fields };
+    try {
+      const csv = parse(payload.rows, opts);
+      res.status(200).attachment(csv);
+      res.send(csv)
+
+    } catch (err) {
+      console.error(err);
+    }
+  } else {
+    res.status(200).send(payload);
+  }
+
+}));
+
+/**
+ *  @swagger
+ *  /api/page_elements/count:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Page_elements]
+ *      summary: Count all page_elements
+ *      description: Count all page_elements
+ *      responses:
+ *        200:
+ *          description: Page_elements count successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Page_elements"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/count', wrapAsync(async (req, res) => {
+  
+    const currentUser = req.currentUser;
+    const runtimeContext = req.runtimeContext;
+    const payload = await Page_elementsDBApi.findAll(
+        req.query,
+         null, 
+        { countOnly: true, currentUser, runtimeContext }
+    );
+
+    res.status(200).send(payload);
+}));
+
+/**
+ *  @swagger
+ *  /api/page_elements/autocomplete:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Page_elements]
+ *      summary: Find all page_elements that match search criteria
+ *      description: Find all page_elements that match search criteria
+ *      responses:
+ *        200:
+ *          description: Page_elements list successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Page_elements"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/autocomplete', async (req, res) => {
+  
+  const payload = await Page_elementsDBApi.findAllAutocomplete(
+    req.query.query,
+    req.query.limit,
+    req.query.offset,
+    
+  );
+
+  res.status(200).send(payload);
+});
+
+/**
+  * @swagger
+  *  /api/page_elements/{id}:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Page_elements]
+  *      summary: Get selected item
+  *      description: Get selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: ID of item to get
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: Selected item successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Page_elements"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.get('/:id', wrapAsync(async (req, res) => {
+  const runtimeContext = req.runtimeContext;
+  const payload = await Page_elementsDBApi.findBy(
+    { id: req.params.id },
+    { runtimeContext },
+  );
+  
+  
+
+  res.status(200).send(payload);
+}));
+
+router.use('/', require('../helpers').commonErrorHandler);
+
+module.exports = router;

backend/src/routes/page_links.js

@@ -0,0 +1,437 @@
+
+const express = require('express');
+
+const Page_linksService = require('../services/page_links');
+const Page_linksDBApi = require('../db/api/page_links');
+const wrapAsync = require('../helpers').wrapAsync;
+
+
+const router = express.Router();
+
+const { parse } = require('json2csv');
+
+
+const {
+    checkCrudPermissions,
+} = require('../middlewares/check-permissions');
+
+router.use(checkCrudPermissions('page_links'));
+
+
+/**
+ *  @swagger
+ *  components:
+ *    schemas:
+ *      Page_links:
+ *        type: object
+ *        properties:
+ 
+ *          external_url:
+ *            type: string
+ *            default: external_url
+ *          trigger_selector:
+ *            type: string
+ *            default: trigger_selector
+ 
+ 
+ 
+ *          
+ */
+
+/**
+ *  @swagger
+ * tags:
+ *   name: Page_links
+ *   description: The Page_links managing API
+ */
+
+/**
+*  @swagger
+*  /api/page_links:
+*    post:
+*      security:
+*        - bearerAuth: []
+*      tags: [Page_links]
+*      summary: Add new item
+*      description: Add new item
+*      requestBody:
+*        required: true
+*        content:
+*          application/json:
+*            schema:
+*              properties:
+*                data:
+*                  description: Data of the updated item
+*                  type: object
+*                  $ref: "#/components/schemas/Page_links"
+*      responses:
+*        200:
+*          description: The item was successfully added
+*          content:
+*            application/json:
+*              schema:
+*                $ref: "#/components/schemas/Page_links"
+*        401:
+*          $ref: "#/components/responses/UnauthorizedError"
+*        405:
+*          description: Invalid input data
+*        500:
+*          description: Some server error
+*/
+router.post('/', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Page_linksService.create(req.body.data, req.currentUser, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+ * @swagger
+ * /api/budgets/bulk-import:
+ *  post:
+ *    security:
+ *      - bearerAuth: []
+ *    tags: [Page_links]
+ *    summary: Bulk import items
+ *    description: Bulk import items
+ *    requestBody:
+ *      required: true
+ *      content:
+ *        application/json:
+ *         schema:
+ *          properties:
+ *            data:
+ *              description: Data of the updated items
+ *              type: array
+ *              items:
+ *                $ref: "#/components/schemas/Page_links"
+ *    responses:
+ *      200:
+ *        description: The items were successfully imported
+ *    content:
+ *      application/json:
+ *        schema:
+ *          $ref: "#/components/schemas/Page_links"
+ *      401:
+ *        $ref: "#/components/responses/UnauthorizedError"
+ *      405:
+ *        description: Invalid input data
+ *      500:
+ *        description: Some server error
+ *
+ */
+router.post('/bulk-import', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Page_linksService.bulkImport(req, res, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/page_links/{id}:
+  *    put:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Page_links]
+  *      summary: Update the data of the selected item
+  *      description: Update the data of the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to update
+  *          required: true
+  *          schema:
+  *            type: string
+  *      requestBody:
+  *        description: Set new item data
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                id:
+  *                  description: ID of the updated item
+  *                  type: string
+  *                data:
+  *                  description: Data of the updated item
+  *                  type: object
+  *                  $ref: "#/components/schemas/Page_links"
+  *              required:
+  *                - id
+  *      responses:
+  *        200:
+  *          description: The item data was successfully updated
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Page_links"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.put('/:id', wrapAsync(async (req, res) => {
+  await Page_linksService.update(req.body.data, req.body.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  * @swagger
+  *  /api/page_links/{id}:
+  *    delete:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Page_links]
+  *      summary: Delete the selected item
+  *      description: Delete the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to delete
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: The item was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Page_links"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.delete('/:id', wrapAsync(async (req, res) => {
+  await Page_linksService.remove(req.params.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/page_links/deleteByIds:
+  *    post:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Page_links]
+  *      summary: Delete the selected item list
+  *      description: Delete the selected item list
+  *      requestBody:
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                ids:
+  *                  description: IDs of the updated items
+  *                  type: array
+  *      responses:
+  *        200:
+  *          description: The items was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Page_links"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Items not found
+  *        500:
+  *          description: Some server error
+  */
+router.post('/deleteByIds', wrapAsync(async (req, res) => {
+    await Page_linksService.deleteByIds(req.body.data, req.currentUser);
+    const payload = true;
+    res.status(200).send(payload);
+  }));
+
+/**
+  *  @swagger
+  *  /api/page_links:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Page_links]
+  *      summary: Get all page_links
+  *      description: Get all page_links
+  *      responses:
+  *        200:
+  *          description: Page_links list successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                type: array
+  *                items:
+  *                  $ref: "#/components/schemas/Page_links"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Data not found
+  *        500:
+  *          description: Some server error
+*/
+router.get('/', wrapAsync(async (req, res) => {
+  const filetype = req.query.filetype
+  
+  const currentUser = req.currentUser;
+  const runtimeContext = req.runtimeContext;
+  const payload = await Page_linksDBApi.findAll(
+    req.query,  { currentUser, runtimeContext }
+  );
+  if (filetype && filetype === 'csv') {
+    const fields = ['id','external_url','trigger_selector',
+        
+        
+      
+        ];
+    const opts = { fields };
+    try {
+      const csv = parse(payload.rows, opts);
+      res.status(200).attachment(csv);
+      res.send(csv)
+
+    } catch (err) {
+      console.error(err);
+    }
+  } else {
+    res.status(200).send(payload);
+  }
+
+}));
+
+/**
+ *  @swagger
+ *  /api/page_links/count:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Page_links]
+ *      summary: Count all page_links
+ *      description: Count all page_links
+ *      responses:
+ *        200:
+ *          description: Page_links count successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Page_links"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/count', wrapAsync(async (req, res) => {
+  
+    const currentUser = req.currentUser;
+    const runtimeContext = req.runtimeContext;
+    const payload = await Page_linksDBApi.findAll(
+        req.query,
+         null, 
+        { countOnly: true, currentUser, runtimeContext }
+    );
+
+    res.status(200).send(payload);
+}));
+
+/**
+ *  @swagger
+ *  /api/page_links/autocomplete:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Page_links]
+ *      summary: Find all page_links that match search criteria
+ *      description: Find all page_links that match search criteria
+ *      responses:
+ *        200:
+ *          description: Page_links list successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Page_links"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/autocomplete', async (req, res) => {
+  
+  const payload = await Page_linksDBApi.findAllAutocomplete(
+    req.query.query,
+    req.query.limit,
+    req.query.offset,
+    
+  );
+
+  res.status(200).send(payload);
+});
+
+/**
+  * @swagger
+  *  /api/page_links/{id}:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Page_links]
+  *      summary: Get selected item
+  *      description: Get selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: ID of item to get
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: Selected item successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Page_links"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.get('/:id', wrapAsync(async (req, res) => {
+  const runtimeContext = req.runtimeContext;
+  const payload = await Page_linksDBApi.findBy(
+    { id: req.params.id },
+    { runtimeContext },
+  );
+  
+  
+
+  res.status(200).send(payload);
+}));
+
+router.use('/', require('../helpers').commonErrorHandler);
+
+module.exports = router;

backend/src/routes/permissions.js

@@ -0,0 +1,429 @@
+
+const express = require('express');
+
+const PermissionsService = require('../services/permissions');
+const PermissionsDBApi = require('../db/api/permissions');
+const wrapAsync = require('../helpers').wrapAsync;
+
+
+const router = express.Router();
+
+const { parse } = require('json2csv');
+
+
+const {
+    checkCrudPermissions,
+} = require('../middlewares/check-permissions');
+
+router.use(checkCrudPermissions('permissions'));
+
+
+/**
+ *  @swagger
+ *  components:
+ *    schemas:
+ *      Permissions:
+ *        type: object
+ *        properties:
+ 
+ *          name:
+ *            type: string
+ *            default: name
+ 
+ 
+ 
+ */
+
+/**
+ *  @swagger
+ * tags:
+ *   name: Permissions
+ *   description: The Permissions managing API
+ */
+
+/**
+*  @swagger
+*  /api/permissions:
+*    post:
+*      security:
+*        - bearerAuth: []
+*      tags: [Permissions]
+*      summary: Add new item
+*      description: Add new item
+*      requestBody:
+*        required: true
+*        content:
+*          application/json:
+*            schema:
+*              properties:
+*                data:
+*                  description: Data of the updated item
+*                  type: object
+*                  $ref: "#/components/schemas/Permissions"
+*      responses:
+*        200:
+*          description: The item was successfully added
+*          content:
+*            application/json:
+*              schema:
+*                $ref: "#/components/schemas/Permissions"
+*        401:
+*          $ref: "#/components/responses/UnauthorizedError"
+*        405:
+*          description: Invalid input data
+*        500:
+*          description: Some server error
+*/
+router.post('/', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await PermissionsService.create(req.body.data, req.currentUser, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+ * @swagger
+ * /api/budgets/bulk-import:
+ *  post:
+ *    security:
+ *      - bearerAuth: []
+ *    tags: [Permissions]
+ *    summary: Bulk import items
+ *    description: Bulk import items
+ *    requestBody:
+ *      required: true
+ *      content:
+ *        application/json:
+ *         schema:
+ *          properties:
+ *            data:
+ *              description: Data of the updated items
+ *              type: array
+ *              items:
+ *                $ref: "#/components/schemas/Permissions"
+ *    responses:
+ *      200:
+ *        description: The items were successfully imported
+ *    content:
+ *      application/json:
+ *        schema:
+ *          $ref: "#/components/schemas/Permissions"
+ *      401:
+ *        $ref: "#/components/responses/UnauthorizedError"
+ *      405:
+ *        description: Invalid input data
+ *      500:
+ *        description: Some server error
+ *
+ */
+router.post('/bulk-import', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await PermissionsService.bulkImport(req, res, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/permissions/{id}:
+  *    put:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Permissions]
+  *      summary: Update the data of the selected item
+  *      description: Update the data of the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to update
+  *          required: true
+  *          schema:
+  *            type: string
+  *      requestBody:
+  *        description: Set new item data
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                id:
+  *                  description: ID of the updated item
+  *                  type: string
+  *                data:
+  *                  description: Data of the updated item
+  *                  type: object
+  *                  $ref: "#/components/schemas/Permissions"
+  *              required:
+  *                - id
+  *      responses:
+  *        200:
+  *          description: The item data was successfully updated
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Permissions"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.put('/:id', wrapAsync(async (req, res) => {
+  await PermissionsService.update(req.body.data, req.body.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  * @swagger
+  *  /api/permissions/{id}:
+  *    delete:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Permissions]
+  *      summary: Delete the selected item
+  *      description: Delete the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to delete
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: The item was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Permissions"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.delete('/:id', wrapAsync(async (req, res) => {
+  await PermissionsService.remove(req.params.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/permissions/deleteByIds:
+  *    post:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Permissions]
+  *      summary: Delete the selected item list
+  *      description: Delete the selected item list
+  *      requestBody:
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                ids:
+  *                  description: IDs of the updated items
+  *                  type: array
+  *      responses:
+  *        200:
+  *          description: The items was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Permissions"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Items not found
+  *        500:
+  *          description: Some server error
+  */
+router.post('/deleteByIds', wrapAsync(async (req, res) => {
+    await PermissionsService.deleteByIds(req.body.data, req.currentUser);
+    const payload = true;
+    res.status(200).send(payload);
+  }));
+
+/**
+  *  @swagger
+  *  /api/permissions:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Permissions]
+  *      summary: Get all permissions
+  *      description: Get all permissions
+  *      responses:
+  *        200:
+  *          description: Permissions list successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                type: array
+  *                items:
+  *                  $ref: "#/components/schemas/Permissions"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Data not found
+  *        500:
+  *          description: Some server error
+*/
+router.get('/', wrapAsync(async (req, res) => {
+  const filetype = req.query.filetype
+  
+  const currentUser = req.currentUser;
+  const payload = await PermissionsDBApi.findAll(
+    req.query,  { currentUser }
+  );
+  if (filetype && filetype === 'csv') {
+    const fields = ['id','name',
+        
+        
+      
+        ];
+    const opts = { fields };
+    try {
+      const csv = parse(payload.rows, opts);
+      res.status(200).attachment(csv);
+      res.send(csv)
+
+    } catch (err) {
+      console.error(err);
+    }
+  } else {
+    res.status(200).send(payload);
+  }
+
+}));
+
+/**
+ *  @swagger
+ *  /api/permissions/count:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Permissions]
+ *      summary: Count all permissions
+ *      description: Count all permissions
+ *      responses:
+ *        200:
+ *          description: Permissions count successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Permissions"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/count', wrapAsync(async (req, res) => {
+  
+    const currentUser = req.currentUser;
+    const payload = await PermissionsDBApi.findAll(
+        req.query,
+         null, 
+        { countOnly: true, currentUser }
+    );
+
+    res.status(200).send(payload);
+}));
+
+/**
+ *  @swagger
+ *  /api/permissions/autocomplete:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Permissions]
+ *      summary: Find all permissions that match search criteria
+ *      description: Find all permissions that match search criteria
+ *      responses:
+ *        200:
+ *          description: Permissions list successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Permissions"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/autocomplete', async (req, res) => {
+  
+  const payload = await PermissionsDBApi.findAllAutocomplete(
+    req.query.query,
+    req.query.limit,
+    req.query.offset,
+    
+  );
+
+  res.status(200).send(payload);
+});
+
+/**
+  * @swagger
+  *  /api/permissions/{id}:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Permissions]
+  *      summary: Get selected item
+  *      description: Get selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: ID of item to get
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: Selected item successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Permissions"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.get('/:id', wrapAsync(async (req, res) => {
+  const payload = await PermissionsDBApi.findBy(
+    { id: req.params.id },
+  );
+  
+  
+
+  res.status(200).send(payload);
+}));
+
+router.use('/', require('../helpers').commonErrorHandler);
+
+module.exports = router;

backend/src/routes/pexels.js

@@ -0,0 +1,104 @@
+const express = require('express');
+const router = express.Router();
+const { pexelsKey, pexelsQuery } = require('../config');
+const fetch = require('node-fetch');
+
+const KEY = pexelsKey;
+
+router.get('/image', async (req, res) => {
+  const headers = {
+    Authorization: `${KEY}`,
+  };
+  const query = pexelsQuery || 'nature';
+  const orientation = 'portrait';
+  const perPage = 1;
+  const url = `https://api.pexels.com/v1/search?query=${query}&orientation=${orientation}&per_page=${perPage}&page=1`;
+
+  try {
+    const response = await fetch(url, { headers });
+    const data = await response.json();
+    res.status(200).json(data.photos[0]);
+  } catch (error) {
+    res.status(200).json({ error: 'Failed to fetch image' });
+  }
+});
+
+router.get('/video', async (req, res) => {
+  const headers = {
+    Authorization: `${KEY}`,
+  };
+  const query = pexelsQuery || 'nature';
+  const orientation = 'portrait';
+  const perPage = 1;
+  const url = `https://api.pexels.com/videos/search?query=${query}&orientation=${orientation}&per_page=${perPage}&page=1`;
+
+  try {
+    const response = await fetch(url, { headers });
+    const data = await response.json();
+    res.status(200).json(data.videos[0]);
+  } catch (error) {
+    res.status(200).json({ error: 'Failed to fetch video' });
+  }
+});
+
+router.get('/multiple-images', async (req, res) => {
+  const headers = {
+    Authorization: `${KEY}`,
+  };
+
+  const queries = req.query.queries
+    ? req.query.queries.split(',')
+    : ['home', 'apple', 'pizza', 'mountains', 'cat'];
+  const orientation = 'square';
+  const perPage = 1;
+
+  const fallbackImage = {
+    src: 'https://images.pexels.com/photos/8199252/pexels-photo-8199252.jpeg',
+    photographer: 'Yan Krukau',
+    photographer_url: 'https://www.pexels.com/@yankrukov',
+  };
+  const fetchFallbackImage = async () => {
+    try {
+      const response = await fetch('https://picsum.photos/600');
+      return {
+        src: response.url,
+        photographer: 'Random Picsum',
+        photographer_url: 'https://picsum.photos/',
+      };
+    } catch (error) {
+      return fallbackImage; 
+    }
+  };
+  const fetchImage = async (query) => {
+    const url = `https://api.pexels.com/v1/search?query=${query}&orientation=${orientation}&per_page=${perPage}&page=1`;
+    const response = await fetch(url, { headers });
+    const data = await response.json();
+    return data.photos[0] || null;
+  };
+
+  const imagePromises = queries.map((query) => fetchImage(query));
+  const imagesResults = await Promise.allSettled(imagePromises);
+
+  const formattedImages = await Promise.all(imagesResults.map(async (result) => {
+    if (result.status === 'fulfilled' && result.value) {
+      const image = result.value;
+      return {
+        src: image.src?.original || fallbackImage.src,
+        photographer: image.photographer || fallbackImage.photographer,
+        photographer_url: image.photographer_url || fallbackImage.photographer_url,
+      };
+    } else {
+      const fallback = await fetchFallbackImage();
+      return {
+        src: fallback.src || '',
+        photographer: fallback.photographer || 'Unknown',
+        photographer_url: fallback.photographer_url || '',
+      };
+    }
+  }));
+   
+
+  res.json(formattedImages);
+});
+
+module.exports = router;

backend/src/routes/presigned_url_requests.js

@@ -0,0 +1,440 @@
+
+const express = require('express');
+
+const Presigned_url_requestsService = require('../services/presigned_url_requests');
+const Presigned_url_requestsDBApi = require('../db/api/presigned_url_requests');
+const wrapAsync = require('../helpers').wrapAsync;
+
+
+const router = express.Router();
+
+const { parse } = require('json2csv');
+
+
+const {
+    checkCrudPermissions,
+} = require('../middlewares/check-permissions');
+
+router.use(checkCrudPermissions('presigned_url_requests'));
+
+
+/**
+ *  @swagger
+ *  components:
+ *    schemas:
+ *      Presigned_url_requests:
+ *        type: object
+ *        properties:
+ 
+ *          requested_key:
+ *            type: string
+ *            default: requested_key
+ *          mime_type:
+ *            type: string
+ *            default: mime_type
+ *          status:
+ *            type: string
+ *            default: status
+ 
+ 
+ *          requested_size_mb:
+ *            type: integer
+ *            format: int64
+ 
+ *          
+ *          
+ */
+
+/**
+ *  @swagger
+ * tags:
+ *   name: Presigned_url_requests
+ *   description: The Presigned_url_requests managing API
+ */
+
+/**
+*  @swagger
+*  /api/presigned_url_requests:
+*    post:
+*      security:
+*        - bearerAuth: []
+*      tags: [Presigned_url_requests]
+*      summary: Add new item
+*      description: Add new item
+*      requestBody:
+*        required: true
+*        content:
+*          application/json:
+*            schema:
+*              properties:
+*                data:
+*                  description: Data of the updated item
+*                  type: object
+*                  $ref: "#/components/schemas/Presigned_url_requests"
+*      responses:
+*        200:
+*          description: The item was successfully added
+*          content:
+*            application/json:
+*              schema:
+*                $ref: "#/components/schemas/Presigned_url_requests"
+*        401:
+*          $ref: "#/components/responses/UnauthorizedError"
+*        405:
+*          description: Invalid input data
+*        500:
+*          description: Some server error
+*/
+router.post('/', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Presigned_url_requestsService.create(req.body.data, req.currentUser, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+ * @swagger
+ * /api/budgets/bulk-import:
+ *  post:
+ *    security:
+ *      - bearerAuth: []
+ *    tags: [Presigned_url_requests]
+ *    summary: Bulk import items
+ *    description: Bulk import items
+ *    requestBody:
+ *      required: true
+ *      content:
+ *        application/json:
+ *         schema:
+ *          properties:
+ *            data:
+ *              description: Data of the updated items
+ *              type: array
+ *              items:
+ *                $ref: "#/components/schemas/Presigned_url_requests"
+ *    responses:
+ *      200:
+ *        description: The items were successfully imported
+ *    content:
+ *      application/json:
+ *        schema:
+ *          $ref: "#/components/schemas/Presigned_url_requests"
+ *      401:
+ *        $ref: "#/components/responses/UnauthorizedError"
+ *      405:
+ *        description: Invalid input data
+ *      500:
+ *        description: Some server error
+ *
+ */
+router.post('/bulk-import', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Presigned_url_requestsService.bulkImport(req, res, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/presigned_url_requests/{id}:
+  *    put:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Presigned_url_requests]
+  *      summary: Update the data of the selected item
+  *      description: Update the data of the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to update
+  *          required: true
+  *          schema:
+  *            type: string
+  *      requestBody:
+  *        description: Set new item data
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                id:
+  *                  description: ID of the updated item
+  *                  type: string
+  *                data:
+  *                  description: Data of the updated item
+  *                  type: object
+  *                  $ref: "#/components/schemas/Presigned_url_requests"
+  *              required:
+  *                - id
+  *      responses:
+  *        200:
+  *          description: The item data was successfully updated
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Presigned_url_requests"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.put('/:id', wrapAsync(async (req, res) => {
+  await Presigned_url_requestsService.update(req.body.data, req.body.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  * @swagger
+  *  /api/presigned_url_requests/{id}:
+  *    delete:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Presigned_url_requests]
+  *      summary: Delete the selected item
+  *      description: Delete the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to delete
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: The item was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Presigned_url_requests"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.delete('/:id', wrapAsync(async (req, res) => {
+  await Presigned_url_requestsService.remove(req.params.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/presigned_url_requests/deleteByIds:
+  *    post:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Presigned_url_requests]
+  *      summary: Delete the selected item list
+  *      description: Delete the selected item list
+  *      requestBody:
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                ids:
+  *                  description: IDs of the updated items
+  *                  type: array
+  *      responses:
+  *        200:
+  *          description: The items was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Presigned_url_requests"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Items not found
+  *        500:
+  *          description: Some server error
+  */
+router.post('/deleteByIds', wrapAsync(async (req, res) => {
+    await Presigned_url_requestsService.deleteByIds(req.body.data, req.currentUser);
+    const payload = true;
+    res.status(200).send(payload);
+  }));
+
+/**
+  *  @swagger
+  *  /api/presigned_url_requests:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Presigned_url_requests]
+  *      summary: Get all presigned_url_requests
+  *      description: Get all presigned_url_requests
+  *      responses:
+  *        200:
+  *          description: Presigned_url_requests list successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                type: array
+  *                items:
+  *                  $ref: "#/components/schemas/Presigned_url_requests"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Data not found
+  *        500:
+  *          description: Some server error
+*/
+router.get('/', wrapAsync(async (req, res) => {
+  const filetype = req.query.filetype
+  
+  const currentUser = req.currentUser;
+  const payload = await Presigned_url_requestsDBApi.findAll(
+    req.query,  { currentUser }
+  );
+  if (filetype && filetype === 'csv') {
+    const fields = ['id','requested_key','mime_type','status',
+        
+        'requested_size_mb',
+      'expires_at',
+        ];
+    const opts = { fields };
+    try {
+      const csv = parse(payload.rows, opts);
+      res.status(200).attachment(csv);
+      res.send(csv)
+
+    } catch (err) {
+      console.error(err);
+    }
+  } else {
+    res.status(200).send(payload);
+  }
+
+}));
+
+/**
+ *  @swagger
+ *  /api/presigned_url_requests/count:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Presigned_url_requests]
+ *      summary: Count all presigned_url_requests
+ *      description: Count all presigned_url_requests
+ *      responses:
+ *        200:
+ *          description: Presigned_url_requests count successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Presigned_url_requests"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/count', wrapAsync(async (req, res) => {
+  
+    const currentUser = req.currentUser;
+    const payload = await Presigned_url_requestsDBApi.findAll(
+        req.query,
+         null, 
+        { countOnly: true, currentUser }
+    );
+
+    res.status(200).send(payload);
+}));
+
+/**
+ *  @swagger
+ *  /api/presigned_url_requests/autocomplete:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Presigned_url_requests]
+ *      summary: Find all presigned_url_requests that match search criteria
+ *      description: Find all presigned_url_requests that match search criteria
+ *      responses:
+ *        200:
+ *          description: Presigned_url_requests list successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Presigned_url_requests"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/autocomplete', async (req, res) => {
+  
+  const payload = await Presigned_url_requestsDBApi.findAllAutocomplete(
+    req.query.query,
+    req.query.limit,
+    req.query.offset,
+    
+  );
+
+  res.status(200).send(payload);
+});
+
+/**
+  * @swagger
+  *  /api/presigned_url_requests/{id}:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Presigned_url_requests]
+  *      summary: Get selected item
+  *      description: Get selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: ID of item to get
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: Selected item successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Presigned_url_requests"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.get('/:id', wrapAsync(async (req, res) => {
+  const payload = await Presigned_url_requestsDBApi.findBy(
+    { id: req.params.id },
+  );
+  
+  
+
+  res.status(200).send(payload);
+}));
+
+router.use('/', require('../helpers').commonErrorHandler);
+
+module.exports = router;

backend/src/routes/project_audio_tracks.js

@@ -0,0 +1,449 @@
+
+const express = require('express');
+
+const Project_audio_tracksService = require('../services/project_audio_tracks');
+const Project_audio_tracksDBApi = require('../db/api/project_audio_tracks');
+const wrapAsync = require('../helpers').wrapAsync;
+
+
+const router = express.Router();
+
+const { parse } = require('json2csv');
+
+
+const {
+    checkCrudPermissions,
+} = require('../middlewares/check-permissions');
+
+router.use(checkCrudPermissions('project_audio_tracks'));
+
+
+/**
+ *  @swagger
+ *  components:
+ *    schemas:
+ *      Project_audio_tracks:
+ *        type: object
+ *        properties:
+ 
+ *          source_key:
+ *            type: string
+ *            default: source_key
+ *          name:
+ *            type: string
+ *            default: name
+ *          slug:
+ *            type: string
+ *            default: slug
+ *          url:
+ *            type: string
+ *            default: url
+ 
+ *          sort_order:
+ *            type: integer
+ *            format: int64
+ 
+ *          volume:
+ *            type: integer
+ *            format: int64
+ 
+ *          
+ */
+
+/**
+ *  @swagger
+ * tags:
+ *   name: Project_audio_tracks
+ *   description: The Project_audio_tracks managing API
+ */
+
+/**
+*  @swagger
+*  /api/project_audio_tracks:
+*    post:
+*      security:
+*        - bearerAuth: []
+*      tags: [Project_audio_tracks]
+*      summary: Add new item
+*      description: Add new item
+*      requestBody:
+*        required: true
+*        content:
+*          application/json:
+*            schema:
+*              properties:
+*                data:
+*                  description: Data of the updated item
+*                  type: object
+*                  $ref: "#/components/schemas/Project_audio_tracks"
+*      responses:
+*        200:
+*          description: The item was successfully added
+*          content:
+*            application/json:
+*              schema:
+*                $ref: "#/components/schemas/Project_audio_tracks"
+*        401:
+*          $ref: "#/components/responses/UnauthorizedError"
+*        405:
+*          description: Invalid input data
+*        500:
+*          description: Some server error
+*/
+router.post('/', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Project_audio_tracksService.create(req.body.data, req.currentUser, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+ * @swagger
+ * /api/budgets/bulk-import:
+ *  post:
+ *    security:
+ *      - bearerAuth: []
+ *    tags: [Project_audio_tracks]
+ *    summary: Bulk import items
+ *    description: Bulk import items
+ *    requestBody:
+ *      required: true
+ *      content:
+ *        application/json:
+ *         schema:
+ *          properties:
+ *            data:
+ *              description: Data of the updated items
+ *              type: array
+ *              items:
+ *                $ref: "#/components/schemas/Project_audio_tracks"
+ *    responses:
+ *      200:
+ *        description: The items were successfully imported
+ *    content:
+ *      application/json:
+ *        schema:
+ *          $ref: "#/components/schemas/Project_audio_tracks"
+ *      401:
+ *        $ref: "#/components/responses/UnauthorizedError"
+ *      405:
+ *        description: Invalid input data
+ *      500:
+ *        description: Some server error
+ *
+ */
+router.post('/bulk-import', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Project_audio_tracksService.bulkImport(req, res, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/project_audio_tracks/{id}:
+  *    put:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Project_audio_tracks]
+  *      summary: Update the data of the selected item
+  *      description: Update the data of the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to update
+  *          required: true
+  *          schema:
+  *            type: string
+  *      requestBody:
+  *        description: Set new item data
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                id:
+  *                  description: ID of the updated item
+  *                  type: string
+  *                data:
+  *                  description: Data of the updated item
+  *                  type: object
+  *                  $ref: "#/components/schemas/Project_audio_tracks"
+  *              required:
+  *                - id
+  *      responses:
+  *        200:
+  *          description: The item data was successfully updated
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Project_audio_tracks"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.put('/:id', wrapAsync(async (req, res) => {
+  await Project_audio_tracksService.update(req.body.data, req.body.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  * @swagger
+  *  /api/project_audio_tracks/{id}:
+  *    delete:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Project_audio_tracks]
+  *      summary: Delete the selected item
+  *      description: Delete the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to delete
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: The item was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Project_audio_tracks"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.delete('/:id', wrapAsync(async (req, res) => {
+  await Project_audio_tracksService.remove(req.params.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/project_audio_tracks/deleteByIds:
+  *    post:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Project_audio_tracks]
+  *      summary: Delete the selected item list
+  *      description: Delete the selected item list
+  *      requestBody:
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                ids:
+  *                  description: IDs of the updated items
+  *                  type: array
+  *      responses:
+  *        200:
+  *          description: The items was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Project_audio_tracks"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Items not found
+  *        500:
+  *          description: Some server error
+  */
+router.post('/deleteByIds', wrapAsync(async (req, res) => {
+    await Project_audio_tracksService.deleteByIds(req.body.data, req.currentUser);
+    const payload = true;
+    res.status(200).send(payload);
+  }));
+
+/**
+  *  @swagger
+  *  /api/project_audio_tracks:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Project_audio_tracks]
+  *      summary: Get all project_audio_tracks
+  *      description: Get all project_audio_tracks
+  *      responses:
+  *        200:
+  *          description: Project_audio_tracks list successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                type: array
+  *                items:
+  *                  $ref: "#/components/schemas/Project_audio_tracks"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Data not found
+  *        500:
+  *          description: Some server error
+*/
+router.get('/', wrapAsync(async (req, res) => {
+  const filetype = req.query.filetype
+  
+  const currentUser = req.currentUser;
+  const runtimeContext = req.runtimeContext;
+  const payload = await Project_audio_tracksDBApi.findAll(
+    req.query,  { currentUser, runtimeContext }
+  );
+  if (filetype && filetype === 'csv') {
+    const fields = ['id','source_key','name','slug','url',
+        'sort_order',
+        'volume',
+      
+        ];
+    const opts = { fields };
+    try {
+      const csv = parse(payload.rows, opts);
+      res.status(200).attachment(csv);
+      res.send(csv)
+
+    } catch (err) {
+      console.error(err);
+    }
+  } else {
+    res.status(200).send(payload);
+  }
+
+}));
+
+/**
+ *  @swagger
+ *  /api/project_audio_tracks/count:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Project_audio_tracks]
+ *      summary: Count all project_audio_tracks
+ *      description: Count all project_audio_tracks
+ *      responses:
+ *        200:
+ *          description: Project_audio_tracks count successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Project_audio_tracks"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/count', wrapAsync(async (req, res) => {
+  
+    const currentUser = req.currentUser;
+    const runtimeContext = req.runtimeContext;
+    const payload = await Project_audio_tracksDBApi.findAll(
+        req.query,
+         null, 
+        { countOnly: true, currentUser, runtimeContext }
+    );
+
+    res.status(200).send(payload);
+}));
+
+/**
+ *  @swagger
+ *  /api/project_audio_tracks/autocomplete:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Project_audio_tracks]
+ *      summary: Find all project_audio_tracks that match search criteria
+ *      description: Find all project_audio_tracks that match search criteria
+ *      responses:
+ *        200:
+ *          description: Project_audio_tracks list successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Project_audio_tracks"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/autocomplete', async (req, res) => {
+  
+  const payload = await Project_audio_tracksDBApi.findAllAutocomplete(
+    req.query.query,
+    req.query.limit,
+    req.query.offset,
+    
+  );
+
+  res.status(200).send(payload);
+});
+
+/**
+  * @swagger
+  *  /api/project_audio_tracks/{id}:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Project_audio_tracks]
+  *      summary: Get selected item
+  *      description: Get selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: ID of item to get
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: Selected item successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Project_audio_tracks"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.get('/:id', wrapAsync(async (req, res) => {
+  const runtimeContext = req.runtimeContext;
+  const payload = await Project_audio_tracksDBApi.findBy(
+    { id: req.params.id },
+    { runtimeContext },
+  );
+  
+  
+
+  res.status(200).send(payload);
+}));
+
+router.use('/', require('../helpers').commonErrorHandler);
+
+module.exports = router;

backend/src/routes/project_memberships.js

@@ -0,0 +1,427 @@
+
+const express = require('express');
+
+const Project_membershipsService = require('../services/project_memberships');
+const Project_membershipsDBApi = require('../db/api/project_memberships');
+const wrapAsync = require('../helpers').wrapAsync;
+
+
+const router = express.Router();
+
+const { parse } = require('json2csv');
+
+
+const {
+    checkCrudPermissions,
+} = require('../middlewares/check-permissions');
+
+router.use(checkCrudPermissions('project_memberships'));
+
+
+/**
+ *  @swagger
+ *  components:
+ *    schemas:
+ *      Project_memberships:
+ *        type: object
+ *        properties:
+ 
+ 
+ 
+ 
+ *          
+ */
+
+/**
+ *  @swagger
+ * tags:
+ *   name: Project_memberships
+ *   description: The Project_memberships managing API
+ */
+
+/**
+*  @swagger
+*  /api/project_memberships:
+*    post:
+*      security:
+*        - bearerAuth: []
+*      tags: [Project_memberships]
+*      summary: Add new item
+*      description: Add new item
+*      requestBody:
+*        required: true
+*        content:
+*          application/json:
+*            schema:
+*              properties:
+*                data:
+*                  description: Data of the updated item
+*                  type: object
+*                  $ref: "#/components/schemas/Project_memberships"
+*      responses:
+*        200:
+*          description: The item was successfully added
+*          content:
+*            application/json:
+*              schema:
+*                $ref: "#/components/schemas/Project_memberships"
+*        401:
+*          $ref: "#/components/responses/UnauthorizedError"
+*        405:
+*          description: Invalid input data
+*        500:
+*          description: Some server error
+*/
+router.post('/', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Project_membershipsService.create(req.body.data, req.currentUser, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+ * @swagger
+ * /api/budgets/bulk-import:
+ *  post:
+ *    security:
+ *      - bearerAuth: []
+ *    tags: [Project_memberships]
+ *    summary: Bulk import items
+ *    description: Bulk import items
+ *    requestBody:
+ *      required: true
+ *      content:
+ *        application/json:
+ *         schema:
+ *          properties:
+ *            data:
+ *              description: Data of the updated items
+ *              type: array
+ *              items:
+ *                $ref: "#/components/schemas/Project_memberships"
+ *    responses:
+ *      200:
+ *        description: The items were successfully imported
+ *    content:
+ *      application/json:
+ *        schema:
+ *          $ref: "#/components/schemas/Project_memberships"
+ *      401:
+ *        $ref: "#/components/responses/UnauthorizedError"
+ *      405:
+ *        description: Invalid input data
+ *      500:
+ *        description: Some server error
+ *
+ */
+router.post('/bulk-import', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Project_membershipsService.bulkImport(req, res, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/project_memberships/{id}:
+  *    put:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Project_memberships]
+  *      summary: Update the data of the selected item
+  *      description: Update the data of the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to update
+  *          required: true
+  *          schema:
+  *            type: string
+  *      requestBody:
+  *        description: Set new item data
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                id:
+  *                  description: ID of the updated item
+  *                  type: string
+  *                data:
+  *                  description: Data of the updated item
+  *                  type: object
+  *                  $ref: "#/components/schemas/Project_memberships"
+  *              required:
+  *                - id
+  *      responses:
+  *        200:
+  *          description: The item data was successfully updated
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Project_memberships"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.put('/:id', wrapAsync(async (req, res) => {
+  await Project_membershipsService.update(req.body.data, req.body.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  * @swagger
+  *  /api/project_memberships/{id}:
+  *    delete:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Project_memberships]
+  *      summary: Delete the selected item
+  *      description: Delete the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to delete
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: The item was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Project_memberships"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.delete('/:id', wrapAsync(async (req, res) => {
+  await Project_membershipsService.remove(req.params.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/project_memberships/deleteByIds:
+  *    post:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Project_memberships]
+  *      summary: Delete the selected item list
+  *      description: Delete the selected item list
+  *      requestBody:
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                ids:
+  *                  description: IDs of the updated items
+  *                  type: array
+  *      responses:
+  *        200:
+  *          description: The items was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Project_memberships"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Items not found
+  *        500:
+  *          description: Some server error
+  */
+router.post('/deleteByIds', wrapAsync(async (req, res) => {
+    await Project_membershipsService.deleteByIds(req.body.data, req.currentUser);
+    const payload = true;
+    res.status(200).send(payload);
+  }));
+
+/**
+  *  @swagger
+  *  /api/project_memberships:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Project_memberships]
+  *      summary: Get all project_memberships
+  *      description: Get all project_memberships
+  *      responses:
+  *        200:
+  *          description: Project_memberships list successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                type: array
+  *                items:
+  *                  $ref: "#/components/schemas/Project_memberships"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Data not found
+  *        500:
+  *          description: Some server error
+*/
+router.get('/', wrapAsync(async (req, res) => {
+  const filetype = req.query.filetype
+  
+  const currentUser = req.currentUser;
+  const payload = await Project_membershipsDBApi.findAll(
+    req.query,  { currentUser }
+  );
+  if (filetype && filetype === 'csv') {
+    const fields = ['id',
+        
+        
+      'invited_at','accepted_at',
+        ];
+    const opts = { fields };
+    try {
+      const csv = parse(payload.rows, opts);
+      res.status(200).attachment(csv);
+      res.send(csv)
+
+    } catch (err) {
+      console.error(err);
+    }
+  } else {
+    res.status(200).send(payload);
+  }
+
+}));
+
+/**
+ *  @swagger
+ *  /api/project_memberships/count:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Project_memberships]
+ *      summary: Count all project_memberships
+ *      description: Count all project_memberships
+ *      responses:
+ *        200:
+ *          description: Project_memberships count successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Project_memberships"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/count', wrapAsync(async (req, res) => {
+  
+    const currentUser = req.currentUser;
+    const payload = await Project_membershipsDBApi.findAll(
+        req.query,
+         null, 
+        { countOnly: true, currentUser }
+    );
+
+    res.status(200).send(payload);
+}));
+
+/**
+ *  @swagger
+ *  /api/project_memberships/autocomplete:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Project_memberships]
+ *      summary: Find all project_memberships that match search criteria
+ *      description: Find all project_memberships that match search criteria
+ *      responses:
+ *        200:
+ *          description: Project_memberships list successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Project_memberships"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/autocomplete', async (req, res) => {
+  
+  const payload = await Project_membershipsDBApi.findAllAutocomplete(
+    req.query.query,
+    req.query.limit,
+    req.query.offset,
+    
+  );
+
+  res.status(200).send(payload);
+});
+
+/**
+  * @swagger
+  *  /api/project_memberships/{id}:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Project_memberships]
+  *      summary: Get selected item
+  *      description: Get selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: ID of item to get
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: Selected item successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Project_memberships"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.get('/:id', wrapAsync(async (req, res) => {
+  const payload = await Project_membershipsDBApi.findBy(
+    { id: req.params.id },
+  );
+  
+  
+
+  res.status(200).send(payload);
+}));
+
+router.use('/', require('../helpers').commonErrorHandler);
+
+module.exports = router;

backend/src/routes/projects.js

@@ -0,0 +1,476 @@
+
+const express = require('express');
+
+const ProjectsService = require('../services/projects');
+const ProjectsDBApi = require('../db/api/projects');
+const wrapAsync = require('../helpers').wrapAsync;
+
+
+const router = express.Router();
+
+const { parse } = require('json2csv');
+
+
+const {
+    checkCrudPermissions,
+} = require('../middlewares/check-permissions');
+
+router.use(checkCrudPermissions('projects'));
+
+const isUuidV4 = (value) =>
+  /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value);
+
+
+/**
+ *  @swagger
+ *  components:
+ *    schemas:
+ *      Projects:
+ *        type: object
+ *        properties:
+ 
+ *          name:
+ *            type: string
+ *            default: name
+ *          slug:
+ *            type: string
+ *            default: slug
+ *          description:
+ *            type: string
+ *            default: description
+ *          logo_url:
+ *            type: string
+ *            default: logo_url
+ *          favicon_url:
+ *            type: string
+ *            default: favicon_url
+ *          og_image_url:
+ *            type: string
+ *            default: og_image_url
+ *          theme_config_json:
+ *            type: string
+ *            default: theme_config_json
+ *          custom_css_json:
+ *            type: string
+ *            default: custom_css_json
+ *          cdn_base_url:
+ *            type: string
+ *            default: cdn_base_url
+ *          entry_page_slug:
+ *            type: string
+ *            default: entry_page_slug
+ 
+ 
+ 
+ *          
+ */
+
+/**
+ *  @swagger
+ * tags:
+ *   name: Projects
+ *   description: The Projects managing API
+ */
+
+/**
+*  @swagger
+*  /api/projects:
+*    post:
+*      security:
+*        - bearerAuth: []
+*      tags: [Projects]
+*      summary: Add new item
+*      description: Add new item
+*      requestBody:
+*        required: true
+*        content:
+*          application/json:
+*            schema:
+*              properties:
+*                data:
+*                  description: Data of the updated item
+*                  type: object
+*                  $ref: "#/components/schemas/Projects"
+*      responses:
+*        200:
+*          description: The item was successfully added
+*          content:
+*            application/json:
+*              schema:
+*                $ref: "#/components/schemas/Projects"
+*        401:
+*          $ref: "#/components/responses/UnauthorizedError"
+*        405:
+*          description: Invalid input data
+*        500:
+*          description: Some server error
+*/
+router.post('/', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    const payload = await ProjectsService.create(req.body.data, req.currentUser, true, link.host);
+    res.status(200).send(payload);
+}));
+
+router.post('/:id/clone', wrapAsync(async (req, res) => {
+    if (!isUuidV4(req.params.id)) {
+      return res.status(400).send('Invalid project id');
+    }
+
+    const payload = await ProjectsService.cloneFromProject(req.params.id, req.currentUser);
+    res.status(200).send(payload);
+}));
+
+/**
+ * @swagger
+ * /api/budgets/bulk-import:
+ *  post:
+ *    security:
+ *      - bearerAuth: []
+ *    tags: [Projects]
+ *    summary: Bulk import items
+ *    description: Bulk import items
+ *    requestBody:
+ *      required: true
+ *      content:
+ *        application/json:
+ *         schema:
+ *          properties:
+ *            data:
+ *              description: Data of the updated items
+ *              type: array
+ *              items:
+ *                $ref: "#/components/schemas/Projects"
+ *    responses:
+ *      200:
+ *        description: The items were successfully imported
+ *    content:
+ *      application/json:
+ *        schema:
+ *          $ref: "#/components/schemas/Projects"
+ *      401:
+ *        $ref: "#/components/responses/UnauthorizedError"
+ *      405:
+ *        description: Invalid input data
+ *      500:
+ *        description: Some server error
+ *
+ */
+router.post('/bulk-import', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await ProjectsService.bulkImport(req, res, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/projects/{id}:
+  *    put:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Projects]
+  *      summary: Update the data of the selected item
+  *      description: Update the data of the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to update
+  *          required: true
+  *          schema:
+  *            type: string
+  *      requestBody:
+  *        description: Set new item data
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                id:
+  *                  description: ID of the updated item
+  *                  type: string
+  *                data:
+  *                  description: Data of the updated item
+  *                  type: object
+  *                  $ref: "#/components/schemas/Projects"
+  *              required:
+  *                - id
+  *      responses:
+  *        200:
+  *          description: The item data was successfully updated
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Projects"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.put('/:id', wrapAsync(async (req, res) => {
+  await ProjectsService.update(req.body.data, req.body.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  * @swagger
+  *  /api/projects/{id}:
+  *    delete:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Projects]
+  *      summary: Delete the selected item
+  *      description: Delete the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to delete
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: The item was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Projects"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.delete('/:id', wrapAsync(async (req, res) => {
+  await ProjectsService.remove(req.params.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/projects/deleteByIds:
+  *    post:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Projects]
+  *      summary: Delete the selected item list
+  *      description: Delete the selected item list
+  *      requestBody:
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                ids:
+  *                  description: IDs of the updated items
+  *                  type: array
+  *      responses:
+  *        200:
+  *          description: The items was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Projects"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Items not found
+  *        500:
+  *          description: Some server error
+  */
+router.post('/deleteByIds', wrapAsync(async (req, res) => {
+    await ProjectsService.deleteByIds(req.body.data, req.currentUser);
+    const payload = true;
+    res.status(200).send(payload);
+  }));
+
+/**
+  *  @swagger
+  *  /api/projects:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Projects]
+  *      summary: Get all projects
+  *      description: Get all projects
+  *      responses:
+  *        200:
+  *          description: Projects list successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                type: array
+  *                items:
+  *                  $ref: "#/components/schemas/Projects"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Data not found
+  *        500:
+  *          description: Some server error
+*/
+router.get('/', wrapAsync(async (req, res) => {
+  const filetype = req.query.filetype
+  
+  const currentUser = req.currentUser;
+  const runtimeContext = req.runtimeContext;
+  const payload = await ProjectsDBApi.findAll(
+    req.query,  { currentUser, runtimeContext }
+  );
+  if (filetype && filetype === 'csv') {
+    const fields = ['id','name','slug','description','logo_url','favicon_url','og_image_url','theme_config_json','custom_css_json','cdn_base_url','entry_page_slug',
+        
+        
+      'deleted_at_time',
+        ];
+    const opts = { fields };
+    try {
+      const csv = parse(payload.rows, opts);
+      res.status(200).attachment(csv);
+      res.send(csv)
+
+    } catch (err) {
+      console.error(err);
+    }
+  } else {
+    res.status(200).send(payload);
+  }
+
+}));
+
+/**
+ *  @swagger
+ *  /api/projects/count:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Projects]
+ *      summary: Count all projects
+ *      description: Count all projects
+ *      responses:
+ *        200:
+ *          description: Projects count successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Projects"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/count', wrapAsync(async (req, res) => {
+  
+    const currentUser = req.currentUser;
+    const runtimeContext = req.runtimeContext;
+    const payload = await ProjectsDBApi.findAll(
+        req.query,
+         null, 
+        { countOnly: true, currentUser, runtimeContext }
+    );
+
+    res.status(200).send(payload);
+}));
+
+/**
+ *  @swagger
+ *  /api/projects/autocomplete:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Projects]
+ *      summary: Find all projects that match search criteria
+ *      description: Find all projects that match search criteria
+ *      responses:
+ *        200:
+ *          description: Projects list successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Projects"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/autocomplete', async (req, res) => {
+  
+  const payload = await ProjectsDBApi.findAllAutocomplete(
+    req.query.query,
+    req.query.limit,
+    req.query.offset,
+    
+  );
+
+  res.status(200).send(payload);
+});
+
+/**
+  * @swagger
+  *  /api/projects/{id}:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Projects]
+  *      summary: Get selected item
+  *      description: Get selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: ID of item to get
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: Selected item successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Projects"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.get('/:id', wrapAsync(async (req, res) => {
+  if (!isUuidV4(req.params.id)) {
+    return res.status(400).send('Invalid project id');
+  }
+
+  const runtimeContext = req.runtimeContext;
+  const payload = await ProjectsDBApi.findBy(
+    { id: req.params.id },
+    { runtimeContext },
+  );
+  
+  
+
+  res.status(200).send(payload);
+}));
+
+router.use('/', require('../helpers').commonErrorHandler);
+
+module.exports = router;

backend/src/routes/publish.js

@@ -0,0 +1,21 @@
+const express = require('express');
+const PublishService = require('../services/publish');
+const wrapAsync = require('../helpers').wrapAsync;
+const { checkCrudPermissions } = require('../middlewares/check-permissions');
+
+const router = express.Router();
+
+router.use(checkCrudPermissions('publish_events'));
+
+const publishHandler = wrapAsync(async (req, res) => {
+  const { projectId, title, description } = req.body;
+  const result = await PublishService.publishToProduction(projectId, req.currentUser, title, description);
+  res.status(200).send(result);
+});
+
+router.post('/', publishHandler);
+router.post('/publish', publishHandler);
+
+router.use('/', require('../helpers').commonErrorHandler);
+
+module.exports = router;

backend/src/routes/publish_events.js

@@ -0,0 +1,441 @@
+
+const express = require('express');
+
+const Publish_eventsService = require('../services/publish_events');
+const Publish_eventsDBApi = require('../db/api/publish_events');
+const wrapAsync = require('../helpers').wrapAsync;
+
+
+const router = express.Router();
+
+const { parse } = require('json2csv');
+
+
+const {
+    checkCrudPermissions,
+} = require('../middlewares/check-permissions');
+
+router.use(checkCrudPermissions('publish_events'));
+
+
+/**
+ *  @swagger
+ *  components:
+ *    schemas:
+ *      Publish_events:
+ *        type: object
+ *        properties:
+ 
+ *          error_message:
+ *            type: string
+ *            default: error_message
+ 
+ *          pages_copied:
+ *            type: integer
+ *            format: int64
+ *          transitions_copied:
+ *            type: integer
+ *            format: int64
+ *          audios_copied:
+ *            type: integer
+ *            format: int64
+ 
+ 
+ *          
+ *          
+ *          
+ */
+
+/**
+ *  @swagger
+ * tags:
+ *   name: Publish_events
+ *   description: The Publish_events managing API
+ */
+
+/**
+*  @swagger
+*  /api/publish_events:
+*    post:
+*      security:
+*        - bearerAuth: []
+*      tags: [Publish_events]
+*      summary: Add new item
+*      description: Add new item
+*      requestBody:
+*        required: true
+*        content:
+*          application/json:
+*            schema:
+*              properties:
+*                data:
+*                  description: Data of the updated item
+*                  type: object
+*                  $ref: "#/components/schemas/Publish_events"
+*      responses:
+*        200:
+*          description: The item was successfully added
+*          content:
+*            application/json:
+*              schema:
+*                $ref: "#/components/schemas/Publish_events"
+*        401:
+*          $ref: "#/components/responses/UnauthorizedError"
+*        405:
+*          description: Invalid input data
+*        500:
+*          description: Some server error
+*/
+router.post('/', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Publish_eventsService.create(req.body.data, req.currentUser, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+ * @swagger
+ * /api/budgets/bulk-import:
+ *  post:
+ *    security:
+ *      - bearerAuth: []
+ *    tags: [Publish_events]
+ *    summary: Bulk import items
+ *    description: Bulk import items
+ *    requestBody:
+ *      required: true
+ *      content:
+ *        application/json:
+ *         schema:
+ *          properties:
+ *            data:
+ *              description: Data of the updated items
+ *              type: array
+ *              items:
+ *                $ref: "#/components/schemas/Publish_events"
+ *    responses:
+ *      200:
+ *        description: The items were successfully imported
+ *    content:
+ *      application/json:
+ *        schema:
+ *          $ref: "#/components/schemas/Publish_events"
+ *      401:
+ *        $ref: "#/components/responses/UnauthorizedError"
+ *      405:
+ *        description: Invalid input data
+ *      500:
+ *        description: Some server error
+ *
+ */
+router.post('/bulk-import', wrapAsync(async (req, res) => {
+    const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
+    const link = new URL(referer);
+    await Publish_eventsService.bulkImport(req, res, true, link.host);
+    const payload = true;
+    res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/publish_events/{id}:
+  *    put:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Publish_events]
+  *      summary: Update the data of the selected item
+  *      description: Update the data of the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to update
+  *          required: true
+  *          schema:
+  *            type: string
+  *      requestBody:
+  *        description: Set new item data
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                id:
+  *                  description: ID of the updated item
+  *                  type: string
+  *                data:
+  *                  description: Data of the updated item
+  *                  type: object
+  *                  $ref: "#/components/schemas/Publish_events"
+  *              required:
+  *                - id
+  *      responses:
+  *        200:
+  *          description: The item data was successfully updated
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Publish_events"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.put('/:id', wrapAsync(async (req, res) => {
+  await Publish_eventsService.update(req.body.data, req.body.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  * @swagger
+  *  /api/publish_events/{id}:
+  *    delete:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Publish_events]
+  *      summary: Delete the selected item
+  *      description: Delete the selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: Item ID to delete
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: The item was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Publish_events"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.delete('/:id', wrapAsync(async (req, res) => {
+  await Publish_eventsService.remove(req.params.id, req.currentUser);
+  const payload = true;
+  res.status(200).send(payload);
+}));
+
+/**
+  *  @swagger
+  *  /api/publish_events/deleteByIds:
+  *    post:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Publish_events]
+  *      summary: Delete the selected item list
+  *      description: Delete the selected item list
+  *      requestBody:
+  *        required: true
+  *        content:
+  *          application/json:
+  *            schema:
+  *              properties:
+  *                ids:
+  *                  description: IDs of the updated items
+  *                  type: array
+  *      responses:
+  *        200:
+  *          description: The items was successfully deleted
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Publish_events"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Items not found
+  *        500:
+  *          description: Some server error
+  */
+router.post('/deleteByIds', wrapAsync(async (req, res) => {
+    await Publish_eventsService.deleteByIds(req.body.data, req.currentUser);
+    const payload = true;
+    res.status(200).send(payload);
+  }));
+
+/**
+  *  @swagger
+  *  /api/publish_events:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Publish_events]
+  *      summary: Get all publish_events
+  *      description: Get all publish_events
+  *      responses:
+  *        200:
+  *          description: Publish_events list successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                type: array
+  *                items:
+  *                  $ref: "#/components/schemas/Publish_events"
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Data not found
+  *        500:
+  *          description: Some server error
+*/
+router.get('/', wrapAsync(async (req, res) => {
+  const filetype = req.query.filetype
+  
+  const currentUser = req.currentUser;
+  const payload = await Publish_eventsDBApi.findAll(
+    req.query,  { currentUser }
+  );
+  if (filetype && filetype === 'csv') {
+    const fields = ['id','title','description','error_message',
+        'pages_copied','transitions_copied','audios_copied',
+        
+      'started_at','finished_at',
+        ];
+    const opts = { fields };
+    try {
+      const csv = parse(payload.rows, opts);
+      res.status(200).attachment(csv);
+      res.send(csv)
+
+    } catch (err) {
+      console.error(err);
+    }
+  } else {
+    res.status(200).send(payload);
+  }
+
+}));
+
+/**
+ *  @swagger
+ *  /api/publish_events/count:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Publish_events]
+ *      summary: Count all publish_events
+ *      description: Count all publish_events
+ *      responses:
+ *        200:
+ *          description: Publish_events count successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Publish_events"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/count', wrapAsync(async (req, res) => {
+  
+    const currentUser = req.currentUser;
+    const payload = await Publish_eventsDBApi.findAll(
+        req.query,
+         null, 
+        { countOnly: true, currentUser }
+    );
+
+    res.status(200).send(payload);
+}));
+
+/**
+ *  @swagger
+ *  /api/publish_events/autocomplete:
+ *    get:
+ *      security:
+ *        - bearerAuth: []
+ *      tags: [Publish_events]
+ *      summary: Find all publish_events that match search criteria
+ *      description: Find all publish_events that match search criteria
+ *      responses:
+ *        200:
+ *          description: Publish_events list successfully received
+ *          content:
+ *            application/json:
+ *              schema:
+ *                type: array
+ *                items:
+ *                  $ref: "#/components/schemas/Publish_events"
+ *        401:
+ *          $ref: "#/components/responses/UnauthorizedError"
+ *        404:
+ *          description: Data not found
+ *        500:
+ *          description: Some server error
+ */
+router.get('/autocomplete', async (req, res) => {
+  
+  const payload = await Publish_eventsDBApi.findAllAutocomplete(
+    req.query.query,
+    req.query.limit,
+    req.query.offset,
+    
+  );
+
+  res.status(200).send(payload);
+});
+
+/**
+  * @swagger
+  *  /api/publish_events/{id}:
+  *    get:
+  *      security:
+  *        - bearerAuth: []
+  *      tags: [Publish_events]
+  *      summary: Get selected item
+  *      description: Get selected item
+  *      parameters:
+  *        - in: path
+  *          name: id
+  *          description: ID of item to get
+  *          required: true
+  *          schema:
+  *            type: string
+  *      responses:
+  *        200:
+  *          description: Selected item successfully received
+  *          content:
+  *            application/json:
+  *              schema:
+  *                $ref: "#/components/schemas/Publish_events"
+  *        400:
+  *          description: Invalid ID supplied
+  *        401:
+  *          $ref: "#/components/responses/UnauthorizedError"
+  *        404:
+  *          description: Item not found
+  *        500:
+  *          description: Some server error
+  */
+router.get('/:id', wrapAsync(async (req, res) => {
+  const payload = await Publish_eventsDBApi.findBy(
+    { id: req.params.id },
+  );
+  
+  
+
+  res.status(200).send(payload);
+}));
+
+router.use('/', require('../helpers').commonErrorHandler);
+
+module.exports = router;