4bnode 4.1.2 → 4.1.3

package/app-1/README.md

@@ -0,0 +1,47 @@
+# node-skeleton-app
+
+Express 5 + Dotenv + CORS app, scaffolded by [4bnode](https://github.com/pawan-4brains/4bnode).
+
+## Getting started
+
+### 1. Install dependencies
+
+```bash
+npm install
+```
+
+### 2. Configure environment
+
+Edit `.env` in the project root and fill in the values your app needs:
+
+```bash
+PORT=3000
+# Add DATABASE_URL, API keys, etc. here
+```
+
+### 3. Run it
+
+```bash
+npm run dev
+```
+
+The app starts at `http://localhost:PORT` and the dev dashboard at `http://localhost:PORT/_dev`.
+
+## Project structure
+
+```
+.
+├── index.js              # Express app entry point
+├── package.json
+├── .env                  # Environment variables
+├── .4bnode/              # Dashboard engine & data (managed by 4bnode)
+├── public/               # Static files
+└── src/
+    ├── db.js             # MongoDB connection (after `4bnode add mongo`)
+    ├── models/           # Mongoose schemas
+    └── routes/           # API route files
+```
+
+## Extending with 4bnode
+
+Run `4bnode add` inside this project to scaffold MongoDB, CRUD, login, sockets, and more. See the [4bnode README](https://github.com/pawan-4brains/4bnode) for the full feature list.

package/app-1/ecosystem.config.cjs

@@ -0,0 +1,25 @@
+// PM2 process config for production.
+//
+//   pm2 start ecosystem.config.cjs   # start (NODE_ENV=production)
+//   pm2 save                         # remember across reboots
+//   pm2 startup                      # enable boot startup (run the printed command)
+//   pm2 logs / pm2 restart / pm2 status
+//
+// NODE_ENV=production keeps the /_dev dashboard OFF and security on. Other config
+// (PORT, MONGO_URI, secrets) comes from your .env. CommonJS (.cjs) on purpose —
+// the app itself is an ES module.
+const pkg = require("./package.json");
+
+module.exports = {
+  apps: [
+    {
+      name: pkg.name || "app",
+      script: "index.js",
+      instances: 1,
+      autorestart: true,
+      env: {
+        NODE_ENV: "production",
+      },
+    },
+  ],
+};

package/app-1/index.js

@@ -0,0 +1,145 @@
+import express from "express";
+import dotenv from "dotenv";
+import path from "path";
+import fs from "fs";
+import cors from "cors";
+import os from "os";
+import helmet from "helmet";
+import rateLimit from "express-rate-limit";
+import { createInterface } from "readline";
+import { notFound, errorHandler } from "./src/middleware/errorHandler.js";
+import connectDB from './src/db.js';
+import docsRouter from './src/docs.js';
+import productsRouter from './src/routes/products.js';
+
+// ── Environment ─────────────────────────────────────
+dotenv.config();
+
+connectDB();
+const app = express();
+// Behind reverse proxies (e.g. nginx → load balancer). Lets Express read the real
+// client IP from X-Forwarded-For so rate limiting and req.ip are correct. The number
+// is how many proxy hops to trust — adjust to your infrastructure.
+app.set("trust proxy", 2);
+const port = process.env.PORT || 3000;
+const __dirname = path.resolve();
+
+// ── Middleware ───────────────────────────────────────
+app.use(express.json({ limit: "50mb" }));
+app.use(express.urlencoded({ extended: true, limit: "50mb" }));
+app.use(cors({ origin: "*" }));
+
+// ── Dev Dashboard (local development only) ───────────
+// The dashboard at /_dev can write files and run shell commands — it is a
+// remote-code-execution surface and must NEVER be reachable in production.
+// In production it is not even imported. It additionally restricts itself to
+// loopback requests and requires a passkey (see .4bnode/dev-api.js).
+//   • production (NODE_ENV=production): OFF — set _4BNODE_DASHBOARD=on to force.
+//   • non-production: ON — set _4BNODE_DASHBOARD=off to disable.
+const dashboardEnabled =
+  process.env._4BNODE_DASHBOARD === "on" ||
+  (process.env.NODE_ENV !== "production" && process.env._4BNODE_DASHBOARD !== "off");
+if (dashboardEnabled) {
+  try {
+    const devApi = await import("./.4bnode/dev-api.js");
+    app.use("/_dev", devApi.default);
+  } catch {}
+}
+
+// ── Security (built-in by default) ───────────────────
+// Mounted AFTER the /_dev dashboard so its CDN/inline scripts aren't blocked by
+// helmet's CSP and the dashboard isn't throttled by the rate limiter.
+app.use(helmet());
+
+// ── Rate limiting ────────────────────────────────────
+// Tune via .env: RATE_LIMIT_WINDOW_MS (ms) and RATE_LIMIT_MAX (per window).
+const apiLimiter = rateLimit({
+  windowMs: Number(process.env.RATE_LIMIT_WINDOW_MS) || 15 * 60 * 1000,
+  max: Number(process.env.RATE_LIMIT_MAX) || 100,
+  standardHeaders: true,
+  legacyHeaders: false,
+});
+app.use(apiLimiter);
+
+// ── Static Files ────────────────────────────────────
+app.use(express.static(path.join(__dirname, "public")));
+
+// ── Helpers ─────────────────────────────────────────
+function getLocalNetworkIp() {
+  const interfaces = os.networkInterfaces();
+  for (const name of Object.keys(interfaces)) {
+    for (const iface of interfaces[name]) {
+      if (iface.family === "IPv4" && !iface.internal) {
+        return iface.address;
+      }
+    }
+  }
+  return null;
+}
+
+function updateEnvPort(newPort) {
+  try {
+    if (fs.existsSync(".env")) {
+      let content = fs.readFileSync(".env", "utf8");
+      if (content.match(/^PORT=.*/m)) {
+        content = content.replace(/^PORT=.*/m, `PORT=${newPort}`);
+      } else {
+        content += `\nPORT=${newPort}`;
+      }
+      fs.writeFileSync(".env", content, "utf8");
+    }
+  } catch {}
+}
+
+function askPort(busyPort) {
+  return new Promise((resolve) => {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    console.log(`\nPort ${busyPort} is already in use.`);
+    rl.question(`Press Enter to use ${busyPort + 1}, or type a port number: `, (answer) => {
+      rl.close();
+      const custom = parseInt(answer.trim(), 10);
+      resolve(custom && custom > 0 ? custom : busyPort + 1);
+    });
+  });
+}
+
+
+app.use('/docs', docsRouter);
+
+app.use('/api/products', productsRouter);
+
+// ── Error handling (must be last) ──
+app.use(notFound);
+app.use(errorHandler);
+
+// ── Start Server ────────────────────────────────────
+async function startServer(tryPort) {
+  const listener = app.listen(tryPort);
+  listener.on("listening", () => {
+    const localIp = getLocalNetworkIp();
+    console.log(`App is running on http://localhost:${tryPort}`);
+    if (localIp) {
+      console.log(`App is also accessible on your local network at http://${localIp}:${tryPort}`);
+    }
+    if (tryPort !== Number(port)) {
+      updateEnvPort(tryPort);
+      console.log(`Updated .env with PORT=${tryPort}`);
+    }
+  });
+  listener.on("error", async (err) => {
+    if (err.code === "EADDRINUSE") {
+      if (!process.stdin.isTTY) {
+        // Running under pm2 / systemd / IntraApp — no terminal to prompt.
+        console.error(`Port ${tryPort} is in use and no TTY is available. Exiting.`);
+        process.exit(1);
+      }
+      const nextPort = await askPort(tryPort);
+      startServer(nextPort);
+    } else {
+      console.error(err);
+      process.exit(1);
+    }
+  });
+}
+
+startServer(Number(port));

package/app-1/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "app-1",
+  "version": "1.0.0",
+  "main": "index.js",
+  "type": "module",
+  "scripts": {
+    "start": "node index.js",
+    "dev": "nodemon index.js"
+  },
+  "nodemonConfig": {
+    "watch": [
+      "."
+    ],
+    "ext": "js,mjs,cjs",
+    "ignore": [
+      "node_modules/",
+      "package.json",
+      "package-lock.json",
+      ".4bnode/"
+    ]
+  },
+  "dependencies": {
+    "cors": "^2.8.6",
+    "dotenv": "^17.3.1",
+    "express": "^5.2.1",
+    "express-rate-limit": "^7.4.0",
+    "helmet": "^8.0.0",
+    "jsonwebtoken": "^9.0.3",
+    "mongoose": "^8.24.0",
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "nodemon": "^3.1.14"
+  }
+}

package/app-1/public/index.html

@@ -0,0 +1,292 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>4bnode App</title>
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+
+    @font-face { font-family: "Noto Sans"; src: url("/_dev/assets/fonts/NotoSans-Light.woff2") format("woff2"); font-weight: 300; font-style: normal; font-display: swap; }
+    @font-face { font-family: "Noto Sans"; src: url("/_dev/assets/fonts/NotoSans-Regular.woff2") format("woff2"); font-weight: 400; font-style: normal; font-display: swap; }
+    @font-face { font-family: "Noto Sans"; src: url("/_dev/assets/fonts/NotoSans-Medium.woff2") format("woff2"); font-weight: 500; font-style: normal; font-display: swap; }
+    @font-face { font-family: "Noto Sans"; src: url("/_dev/assets/fonts/NotoSans-SemiBold.woff2") format("woff2"); font-weight: 600; font-style: normal; font-display: swap; }
+    @font-face { font-family: "Noto Sans"; src: url("/_dev/assets/fonts/NotoSans-Bold.woff2") format("woff2"); font-weight: 700; font-style: normal; font-display: swap; }
+
+    body {
+      font-family: "Noto Sans", -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
+      background: #0a0b10;
+      color: #e2e8f0;
+      min-height: 100vh;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      overflow: hidden;
+    }
+
+    .scene {
+      position: fixed;
+      inset: 0;
+      z-index: 0;
+    }
+
+    /* Animated grid floor */
+    .grid {
+      position: absolute;
+      bottom: 0;
+      left: 50%;
+      transform: translateX(-50%) perspective(600px) rotateX(55deg);
+      width: 200%;
+      height: 70vh;
+      background-image:
+        linear-gradient(rgba(0,114,255,0.08) 1px, transparent 1px),
+        linear-gradient(90deg, rgba(0,114,255,0.08) 1px, transparent 1px);
+      background-size: 60px 60px;
+      animation: gridScroll 12s linear infinite;
+      mask-image: linear-gradient(to top, rgba(0,0,0,0.4) 0%, transparent 80%);
+      -webkit-mask-image: linear-gradient(to top, rgba(0,0,0,0.4) 0%, transparent 80%);
+    }
+
+    @keyframes gridScroll {
+      0% { background-position: 0 0; }
+      100% { background-position: 0 60px; }
+    }
+
+    /* Floating orbs */
+    .orb {
+      position: absolute;
+      border-radius: 50%;
+      filter: blur(80px);
+      opacity: 0.35;
+      animation: float 8s ease-in-out infinite;
+    }
+    .orb-1 {
+      width: 400px; height: 400px;
+      background: radial-gradient(circle, #0072ff, transparent 70%);
+      top: 10%; left: 15%;
+      animation-delay: 0s;
+    }
+    .orb-2 {
+      width: 350px; height: 350px;
+      background: radial-gradient(circle, #7b2ff7, transparent 70%);
+      top: 30%; right: 10%;
+      animation-delay: -3s;
+      animation-duration: 10s;
+    }
+    .orb-3 {
+      width: 300px; height: 300px;
+      background: radial-gradient(circle, #00c6ff, transparent 70%);
+      bottom: 15%; left: 40%;
+      animation-delay: -5s;
+      animation-duration: 12s;
+    }
+
+    @keyframes float {
+      0%, 100% { transform: translate(0, 0) scale(1); }
+      33% { transform: translate(30px, -20px) scale(1.05); }
+      66% { transform: translate(-20px, 15px) scale(0.95); }
+    }
+
+    /* Content */
+    .container {
+      position: relative;
+      z-index: 1;
+      text-align: center;
+      padding: 40px;
+      animation: fadeUp 1s ease-out;
+    }
+
+    @keyframes fadeUp {
+      from { opacity: 0; transform: translateY(30px); }
+      to { opacity: 1; transform: translateY(0); }
+    }
+
+    /* Animated node SVG */
+    .node-graphic {
+      width: 120px;
+      height: 120px;
+      margin: 0 auto 32px;
+    }
+
+    .node-ring {
+      fill: none;
+      stroke: url(#ringGrad);
+      stroke-width: 1.5;
+      stroke-dasharray: 8 6;
+      transform-origin: 60px 60px;
+      animation: spin 20s linear infinite;
+    }
+    .node-ring-2 {
+      animation: spin 15s linear infinite reverse;
+      stroke-dasharray: 12 8;
+    }
+    .node-ring-3 {
+      animation: spin 25s linear infinite;
+      stroke-dasharray: 4 10;
+    }
+
+    @keyframes spin {
+      to { transform: rotate(360deg); }
+    }
+
+    .node-dot {
+      fill: #0072ff;
+      animation: pulse 2s ease-in-out infinite;
+    }
+    .node-dot:nth-child(2) { animation-delay: 0.3s; fill: #7b2ff7; }
+    .node-dot:nth-child(3) { animation-delay: 0.6s; fill: #00c6ff; }
+    .node-dot:nth-child(4) { animation-delay: 0.9s; fill: #0072ff; }
+    .node-dot:nth-child(5) { animation-delay: 1.2s; fill: #7b2ff7; }
+    .node-dot:nth-child(6) { animation-delay: 1.5s; fill: #00c6ff; }
+
+    @keyframes pulse {
+      0%, 100% { opacity: 0.5; r: 3; }
+      50% { opacity: 1; r: 5; }
+    }
+
+    .node-line {
+      stroke: url(#lineGrad);
+      stroke-width: 0.8;
+      opacity: 0.4;
+    }
+
+    .node-center {
+      fill: url(#centerGrad);
+      filter: drop-shadow(0 0 8px rgba(0,114,255,0.4));
+    }
+
+    h1 {
+      font-size: 36px;
+      font-weight: 800;
+      letter-spacing: -0.5px;
+      margin-bottom: 12px;
+      background: linear-gradient(135deg, #ffffff 0%, #94a3b8 100%);
+      -webkit-background-clip: text;
+      -webkit-text-fill-color: transparent;
+    }
+
+    .tagline {
+      font-size: 15px;
+      color: #64748b;
+      font-weight: 400;
+      letter-spacing: 0.3px;
+      margin-bottom: 32px;
+    }
+
+    .status {
+      display: inline-flex;
+      align-items: center;
+      gap: 8px;
+      padding: 8px 20px;
+      border-radius: 100px;
+      background: rgba(16, 185, 129, 0.08);
+      border: 1px solid rgba(16, 185, 129, 0.2);
+      font-size: 13px;
+      color: #10b981;
+      font-weight: 500;
+      animation: fadeUp 1s ease-out 0.3s both;
+    }
+
+    .status-dot {
+      width: 8px;
+      height: 8px;
+      border-radius: 50%;
+      background: #10b981;
+      animation: blink 2s ease-in-out infinite;
+      box-shadow: 0 0 8px rgba(16, 185, 129, 0.5);
+    }
+
+    @keyframes blink {
+      0%, 100% { opacity: 1; }
+      50% { opacity: 0.4; }
+    }
+
+    .powered {
+      position: fixed;
+      bottom: 28px;
+      left: 0;
+      right: 0;
+      text-align: center;
+      font-size: 12px;
+      color: #334155;
+      letter-spacing: 0.3px;
+      animation: fadeUp 1s ease-out 0.6s both;
+    }
+    .powered a {
+      text-decoration: none;
+    }
+    .powered span {
+      font-weight: 600;
+      background: linear-gradient(135deg, #00c6ff, #7b2ff7);
+      -webkit-background-clip: text;
+      -webkit-text-fill-color: transparent;
+      transition: opacity 0.2s;
+    }
+    .powered a:hover span {
+      opacity: 0.75;
+    }
+  </style>
+</head>
+<body>
+
+  <div class="scene">
+    <div class="orb orb-1"></div>
+    <div class="orb orb-2"></div>
+    <div class="orb orb-3"></div>
+    <div class="grid"></div>
+  </div>
+
+  <div class="container">
+    <svg class="node-graphic" viewBox="0 0 120 120">
+      <defs>
+        <linearGradient id="ringGrad" x1="0%" y1="0%" x2="100%" y2="100%">
+          <stop offset="0%" stop-color="#0072ff" />
+          <stop offset="100%" stop-color="#7b2ff7" />
+        </linearGradient>
+        <linearGradient id="lineGrad" x1="0%" y1="0%" x2="100%" y2="100%">
+          <stop offset="0%" stop-color="#0072ff" stop-opacity="0.6" />
+          <stop offset="100%" stop-color="#7b2ff7" stop-opacity="0.2" />
+        </linearGradient>
+        <radialGradient id="centerGrad" cx="50%" cy="50%" r="50%">
+          <stop offset="0%" stop-color="#0072ff" />
+          <stop offset="100%" stop-color="#7b2ff7" />
+        </radialGradient>
+      </defs>
+
+      <!-- Connection lines -->
+      <line class="node-line" x1="60" y1="60" x2="60" y2="14" />
+      <line class="node-line" x1="60" y1="60" x2="100" y2="37" />
+      <line class="node-line" x1="60" y1="60" x2="100" y2="83" />
+      <line class="node-line" x1="60" y1="60" x2="60" y2="106" />
+      <line class="node-line" x1="60" y1="60" x2="20" y2="83" />
+      <line class="node-line" x1="60" y1="60" x2="20" y2="37" />
+
+      <!-- Rotating rings -->
+      <circle class="node-ring" cx="60" cy="60" r="50" />
+      <circle class="node-ring node-ring-2" cx="60" cy="60" r="38" />
+      <circle class="node-ring node-ring-3" cx="60" cy="60" r="26" />
+
+      <!-- Orbiting dots -->
+      <circle class="node-dot" cx="60" cy="14" r="4" />
+      <circle class="node-dot" cx="100" cy="37" r="4" />
+      <circle class="node-dot" cx="100" cy="83" r="4" />
+      <circle class="node-dot" cx="60" cy="106" r="4" />
+      <circle class="node-dot" cx="20" cy="83" r="4" />
+      <circle class="node-dot" cx="20" cy="37" r="4" />
+
+      <!-- Center node -->
+      <circle class="node-center" cx="60" cy="60" r="8" />
+    </svg>
+
+    <h1>Your app is running</h1>
+    <p class="tagline">Server is live and ready to accept requests</p>
+    <div class="status">
+      <span class="status-dot"></span>
+      All systems operational
+    </div>
+  </div>
+
+  <div class="powered">Powered by <a href="https://www.npmjs.com/package/4bnode" target="_blank" rel="noopener noreferrer"><span>4bnode</span></a></div>
+
+</body>
+</html>

package/app-1/src/db.js

@@ -0,0 +1,13 @@
+import mongoose from 'mongoose';
+
+const connectDB = async () => {
+  try {
+    const conn = await mongoose.connect(process.env.MONGO_URI);
+    console.log(`MongoDB connected: ${conn.connection.host}`);
+  } catch (err) {
+    console.error('MongoDB connection error:', err.message);
+    console.error('Check your MONGO_URI in .env and ensure MongoDB is running.');
+  }
+};
+
+export default connectDB;