4bnode 4.1.5 → 4.1.6

package/app-1/.env.example

@@ -1,11 +0,0 @@
-# Copy this file to .env and fill in real values.
-#   cp .env.example .env
-
-# Port the server listens on
-PORT=3000
-
-# Rate limiting (only enforced when NODE_ENV=production)
-# RATE_LIMIT_WINDOW_MS = window length in ms (900000 = 15 minutes)
-# RATE_LIMIT_MAX       = max requests per IP per window
-RATE_LIMIT_WINDOW_MS=900000
-RATE_LIMIT_MAX=500

package/app-1/README.md

@@ -1,47 +0,0 @@
-# node-skeleton-app
-
-Express 5 + Dotenv + CORS app, scaffolded by [4bnode](https://github.com/pawan-4brains/4bnode).
-
-## Getting started
-
-### 1. Install dependencies
-
-```bash
-npm install
-```
-
-### 2. Configure environment
-
-Edit `.env` in the project root and fill in the values your app needs:
-
-```bash
-PORT=3000
-# Add DATABASE_URL, API keys, etc. here
-```
-
-### 3. Run it
-
-```bash
-npm run dev
-```
-
-The app starts at `http://localhost:PORT` and the dev dashboard at `http://localhost:PORT/_dev`.
-
-## Project structure
-
-```
-.
-├── index.js              # Express app entry point
-├── package.json
-├── .env                  # Environment variables
-├── .4bnode/              # Dashboard engine & data (managed by 4bnode)
-├── public/               # Static files
-└── src/
-    ├── db.js             # MongoDB connection (after `4bnode add mongo`)
-    ├── models/           # Mongoose schemas
-    └── routes/           # API route files
-```
-
-## Extending with 4bnode
-
-Run `4bnode add` inside this project to scaffold MongoDB, CRUD, login, sockets, and more. See the [4bnode README](https://github.com/pawan-4brains/4bnode) for the full feature list.

package/app-1/ecosystem.config.cjs

@@ -1,25 +0,0 @@
-// PM2 process config for production.
-//
-//   pm2 start ecosystem.config.cjs   # start (NODE_ENV=production)
-//   pm2 save                         # remember across reboots
-//   pm2 startup                      # enable boot startup (run the printed command)
-//   pm2 logs / pm2 restart / pm2 status
-//
-// NODE_ENV=production keeps the /_dev dashboard OFF and security on. Other config
-// (PORT, MONGO_URI, secrets) comes from your .env. CommonJS (.cjs) on purpose —
-// the app itself is an ES module.
-const pkg = require("./package.json");
-
-module.exports = {
-  apps: [
-    {
-      name: pkg.name || "app",
-      script: "index.js",
-      instances: 1,
-      autorestart: true,
-      env: {
-        NODE_ENV: "production",
-      },
-    },
-  ],
-};

package/app-1/index.js

@@ -1,188 +0,0 @@
-import express from "express";
-import dotenv from "dotenv";
-import path from "path";
-import fs from "fs";
-import cors from "cors";
-import os from "os";
-import helmet from "helmet";
-import rateLimit from "express-rate-limit";
-import { createInterface } from "readline";
-import { notFound, errorHandler } from "./src/middleware/errorHandler.js";
-import connectDB from './src/db.js';
-import docsRouter from './src/docs.js';
-import uploadResumeRouter from './src/routes/upload-resume.js';
-
-// ── Environment ─────────────────────────────────────
-dotenv.config();
-
-connectDB();
-const app = express();
-// Behind reverse proxies (e.g. nginx → load balancer). Lets Express read the real
-// client IP from X-Forwarded-For so rate limiting and req.ip are correct. The number
-// is how many proxy hops to trust — adjust to your infrastructure.
-app.set("trust proxy", 2);
-const port = process.env.PORT || 3000;
-const __dirname = path.resolve();
-
-// ── Middleware ───────────────────────────────────────
-app.use(express.json({ limit: "50mb" }));
-app.use(express.urlencoded({ extended: true, limit: "50mb" }));
-app.use(cors({ origin: "*" }));
-
-// ── Dev Dashboard (local development only) ───────────
-// The dashboard at /_dev can write files and run shell commands — it is a
-// remote-code-execution surface and must NEVER be reachable in production.
-// In production it is not even imported. It additionally restricts itself to
-// loopback requests and requires a passkey (see .4bnode/dev-api.js).
-//   • production (NODE_ENV=production): OFF — set _4BNODE_DASHBOARD=on to force.
-//   • non-production: ON — set _4BNODE_DASHBOARD=off to disable.
-const dashboardEnabled =
-  process.env._4BNODE_DASHBOARD === "on" ||
-  (process.env.NODE_ENV !== "production" && process.env._4BNODE_DASHBOARD !== "off");
-if (dashboardEnabled) {
-  try {
-    const devApi = await import("./.4bnode/dev-api.js");
-    app.use("/_dev", devApi.default);
-  } catch {}
-}
-
-// ── Security (built-in by default) ───────────────────
-// Mounted AFTER the /_dev dashboard so its CDN/inline scripts aren't blocked by
-// helmet's CSP and the dashboard isn't throttled by the rate limiter.
-// helmet() defaults to a strict Content-Security-Policy (script-src 'self',
-// etc.) that blocks CDN-loaded scripts, inline <script> blocks, and cross-origin
-// assets. We widen the policy so a typical frontend/docs page works while keeping
-// the rest of helmet's protections. Tighten these directives for production.
-app.use(helmet({
-  contentSecurityPolicy: {
-    directives: {
-      defaultSrc: ["'self'"],
-      scriptSrc: ["'self'", 'https:', "'unsafe-inline'"],
-      styleSrc: ["'self'", 'https:', "'unsafe-inline'"],
-      imgSrc: ["'self'", 'data:', 'https:'],
-      connectSrc: ["'self'"],
-    },
-  },
-  crossOriginEmbedderPolicy: false,
-  // Allow other origins (e.g. a separate frontend host) to load assets served
-  // by this app. Default is 'same-origin'. Tighten to 'same-site' for production.
-  crossOriginResourcePolicy: { policy: 'cross-origin' },
-}));
-
-// ── Rate limiting ────────────────────────────────────
-// Window + cap are read from .env (RATE_LIMIT_WINDOW_MS / RATE_LIMIT_MAX) so the
-// dashboard's Security page can tune them; fall back to 15 min / 500 requests.
-const apiLimiter = rateLimit({
-  windowMs: Number(process.env.RATE_LIMIT_WINDOW_MS) || 15 * 60 * 1000,
-  max: Number(process.env.RATE_LIMIT_MAX) || 500,
-  standardHeaders: true,
-  legacyHeaders: false,
-});
-// Strict cap for authentication routes — defends against password brute-forcing.
-// Point this at your real auth routes (login / signup / password-reset).
-const authLimiter = rateLimit({
-  windowMs: 15 * 60 * 1000, // 15 minutes
-  max: 10,                  // 10 attempts per IP per window
-  standardHeaders: true,
-  legacyHeaders: false,
-});
-// Only throttle in production — in dev, repeated/hot-reload requests shouldn't hit 429.
-if (process.env.NODE_ENV === 'production') {
-  app.use('/api/auth', authLimiter); // strict limiter first, on auth routes
-  app.use(apiLimiter);               // generous global limiter for everything else
-}
-
-// ── Static Files ────────────────────────────────────
-app.use(express.static(path.join(__dirname, "public")));
-
-// ── Helpers ─────────────────────────────────────────
-function getLocalNetworkIp() {
-  const interfaces = os.networkInterfaces();
-  for (const name of Object.keys(interfaces)) {
-    for (const iface of interfaces[name]) {
-      if (iface.family === "IPv4" && !iface.internal) {
-        return iface.address;
-      }
-    }
-  }
-  return null;
-}
-
-function updateEnvPort(newPort) {
-  try {
-    if (fs.existsSync(".env")) {
-      let content = fs.readFileSync(".env", "utf8");
-      if (content.match(/^PORT=.*/m)) {
-        content = content.replace(/^PORT=.*/m, `PORT=${newPort}`);
-      } else {
-        content += `\nPORT=${newPort}`;
-      }
-      fs.writeFileSync(".env", content, "utf8");
-    }
-  } catch {}
-}
-
-function askPort(busyPort) {
-  return new Promise((resolve) => {
-    const rl = createInterface({ input: process.stdin, output: process.stdout });
-    console.log(`\nPort ${busyPort} is already in use.`);
-    rl.question(`Press Enter to use ${busyPort + 1}, or type a port number: `, (answer) => {
-      rl.close();
-      const custom = parseInt(answer.trim(), 10);
-      resolve(custom && custom > 0 ? custom : busyPort + 1);
-    });
-  });
-}
-
-
-
-app.use('/docs', docsRouter);
-
-
-
-
-
-
-
-
-
-
-
-
-app.use('/api/upload-resume', uploadResumeRouter);
-
-// ── Error handling (must be last) ──
-app.use(notFound);
-app.use(errorHandler);
-
-// ── Start Server ────────────────────────────────────
-async function startServer(tryPort) {
-  const listener = app.listen(tryPort);
-  listener.on("listening", () => {
-    const localIp = getLocalNetworkIp();
-    console.log(`App is running on http://localhost:${tryPort}`);
-    if (localIp) {
-      console.log(`App is also accessible on your local network at http://${localIp}:${tryPort}`);
-    }
-    if (tryPort !== Number(port)) {
-      updateEnvPort(tryPort);
-      console.log(`Updated .env with PORT=${tryPort}`);
-    }
-  });
-  listener.on("error", async (err) => {
-    if (err.code === "EADDRINUSE") {
-      if (!process.stdin.isTTY) {
-        // Running under pm2 / systemd / IntraApp — no terminal to prompt.
-        console.error(`Port ${tryPort} is in use and no TTY is available. Exiting.`);
-        process.exit(1);
-      }
-      const nextPort = await askPort(tryPort);
-      startServer(nextPort);
-    } else {
-      console.error(err);
-      process.exit(1);
-    }
-  });
-}
-
-startServer(Number(port));

package/app-1/package.json

@@ -1,37 +0,0 @@
-{
-  "name": "app-1",
-  "version": "1.0.0",
-  "main": "index.js",
-  "type": "module",
-  "scripts": {
-    "start": "node index.js",
-    "dev": "nodemon index.js"
-  },
-  "nodemonConfig": {
-    "watch": [
-      "."
-    ],
-    "ext": "js,mjs,cjs",
-    "ignore": [
-      "node_modules/",
-      "package.json",
-      "package-lock.json",
-      ".4bnode/"
-    ]
-  },
-  "dependencies": {
-    "cors": "^2.8.6",
-    "dotenv": "^17.3.1",
-    "express": "^5.2.1",
-    "express-rate-limit": "^7.4.0",
-    "helmet": "^8.0.0",
-    "jsonwebtoken": "^9.0.3",
-    "mongoose": "^8.24.0",
-    "multer": "^1.4.5-lts.1",
-    "nodemailer": "^6.10.1",
-    "zod": "^3.23.0"
-  },
-  "devDependencies": {
-    "nodemon": "^3.1.14"
-  }
-}

package/app-1/public/index.html

@@ -1,292 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>4bnode App</title>
-  <style>
-    * { margin: 0; padding: 0; box-sizing: border-box; }
-
-    @font-face { font-family: "Noto Sans"; src: url("/_dev/assets/fonts/NotoSans-Light.woff2") format("woff2"); font-weight: 300; font-style: normal; font-display: swap; }
-    @font-face { font-family: "Noto Sans"; src: url("/_dev/assets/fonts/NotoSans-Regular.woff2") format("woff2"); font-weight: 400; font-style: normal; font-display: swap; }
-    @font-face { font-family: "Noto Sans"; src: url("/_dev/assets/fonts/NotoSans-Medium.woff2") format("woff2"); font-weight: 500; font-style: normal; font-display: swap; }
-    @font-face { font-family: "Noto Sans"; src: url("/_dev/assets/fonts/NotoSans-SemiBold.woff2") format("woff2"); font-weight: 600; font-style: normal; font-display: swap; }
-    @font-face { font-family: "Noto Sans"; src: url("/_dev/assets/fonts/NotoSans-Bold.woff2") format("woff2"); font-weight: 700; font-style: normal; font-display: swap; }
-
-    body {
-      font-family: "Noto Sans", -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
-      background: #0a0b10;
-      color: #e2e8f0;
-      min-height: 100vh;
-      display: flex;
-      align-items: center;
-      justify-content: center;
-      overflow: hidden;
-    }
-
-    .scene {
-      position: fixed;
-      inset: 0;
-      z-index: 0;
-    }
-
-    /* Animated grid floor */
-    .grid {
-      position: absolute;
-      bottom: 0;
-      left: 50%;
-      transform: translateX(-50%) perspective(600px) rotateX(55deg);
-      width: 200%;
-      height: 70vh;
-      background-image:
-        linear-gradient(rgba(0,114,255,0.08) 1px, transparent 1px),
-        linear-gradient(90deg, rgba(0,114,255,0.08) 1px, transparent 1px);
-      background-size: 60px 60px;
-      animation: gridScroll 12s linear infinite;
-      mask-image: linear-gradient(to top, rgba(0,0,0,0.4) 0%, transparent 80%);
-      -webkit-mask-image: linear-gradient(to top, rgba(0,0,0,0.4) 0%, transparent 80%);
-    }
-
-    @keyframes gridScroll {
-      0% { background-position: 0 0; }
-      100% { background-position: 0 60px; }
-    }
-
-    /* Floating orbs */
-    .orb {
-      position: absolute;
-      border-radius: 50%;
-      filter: blur(80px);
-      opacity: 0.35;
-      animation: float 8s ease-in-out infinite;
-    }
-    .orb-1 {
-      width: 400px; height: 400px;
-      background: radial-gradient(circle, #0072ff, transparent 70%);
-      top: 10%; left: 15%;
-      animation-delay: 0s;
-    }
-    .orb-2 {
-      width: 350px; height: 350px;
-      background: radial-gradient(circle, #7b2ff7, transparent 70%);
-      top: 30%; right: 10%;
-      animation-delay: -3s;
-      animation-duration: 10s;
-    }
-    .orb-3 {
-      width: 300px; height: 300px;
-      background: radial-gradient(circle, #00c6ff, transparent 70%);
-      bottom: 15%; left: 40%;
-      animation-delay: -5s;
-      animation-duration: 12s;
-    }
-
-    @keyframes float {
-      0%, 100% { transform: translate(0, 0) scale(1); }
-      33% { transform: translate(30px, -20px) scale(1.05); }
-      66% { transform: translate(-20px, 15px) scale(0.95); }
-    }
-
-    /* Content */
-    .container {
-      position: relative;
-      z-index: 1;
-      text-align: center;
-      padding: 40px;
-      animation: fadeUp 1s ease-out;
-    }
-
-    @keyframes fadeUp {
-      from { opacity: 0; transform: translateY(30px); }
-      to { opacity: 1; transform: translateY(0); }
-    }
-
-    /* Animated node SVG */
-    .node-graphic {
-      width: 120px;
-      height: 120px;
-      margin: 0 auto 32px;
-    }
-
-    .node-ring {
-      fill: none;
-      stroke: url(#ringGrad);
-      stroke-width: 1.5;
-      stroke-dasharray: 8 6;
-      transform-origin: 60px 60px;
-      animation: spin 20s linear infinite;
-    }
-    .node-ring-2 {
-      animation: spin 15s linear infinite reverse;
-      stroke-dasharray: 12 8;
-    }
-    .node-ring-3 {
-      animation: spin 25s linear infinite;
-      stroke-dasharray: 4 10;
-    }
-
-    @keyframes spin {
-      to { transform: rotate(360deg); }
-    }
-
-    .node-dot {
-      fill: #0072ff;
-      animation: pulse 2s ease-in-out infinite;
-    }
-    .node-dot:nth-child(2) { animation-delay: 0.3s; fill: #7b2ff7; }
-    .node-dot:nth-child(3) { animation-delay: 0.6s; fill: #00c6ff; }
-    .node-dot:nth-child(4) { animation-delay: 0.9s; fill: #0072ff; }
-    .node-dot:nth-child(5) { animation-delay: 1.2s; fill: #7b2ff7; }
-    .node-dot:nth-child(6) { animation-delay: 1.5s; fill: #00c6ff; }
-
-    @keyframes pulse {
-      0%, 100% { opacity: 0.5; r: 3; }
-      50% { opacity: 1; r: 5; }
-    }
-
-    .node-line {
-      stroke: url(#lineGrad);
-      stroke-width: 0.8;
-      opacity: 0.4;
-    }
-
-    .node-center {
-      fill: url(#centerGrad);
-      filter: drop-shadow(0 0 8px rgba(0,114,255,0.4));
-    }
-
-    h1 {
-      font-size: 36px;
-      font-weight: 800;
-      letter-spacing: -0.5px;
-      margin-bottom: 12px;
-      background: linear-gradient(135deg, #ffffff 0%, #94a3b8 100%);
-      -webkit-background-clip: text;
-      -webkit-text-fill-color: transparent;
-    }
-
-    .tagline {
-      font-size: 15px;
-      color: #64748b;
-      font-weight: 400;
-      letter-spacing: 0.3px;
-      margin-bottom: 32px;
-    }
-
-    .status {
-      display: inline-flex;
-      align-items: center;
-      gap: 8px;
-      padding: 8px 20px;
-      border-radius: 100px;
-      background: rgba(16, 185, 129, 0.08);
-      border: 1px solid rgba(16, 185, 129, 0.2);
-      font-size: 13px;
-      color: #10b981;
-      font-weight: 500;
-      animation: fadeUp 1s ease-out 0.3s both;
-    }
-
-    .status-dot {
-      width: 8px;
-      height: 8px;
-      border-radius: 50%;
-      background: #10b981;
-      animation: blink 2s ease-in-out infinite;
-      box-shadow: 0 0 8px rgba(16, 185, 129, 0.5);
-    }
-
-    @keyframes blink {
-      0%, 100% { opacity: 1; }
-      50% { opacity: 0.4; }
-    }
-
-    .powered {
-      position: fixed;
-      bottom: 28px;
-      left: 0;
-      right: 0;
-      text-align: center;
-      font-size: 12px;
-      color: #334155;
-      letter-spacing: 0.3px;
-      animation: fadeUp 1s ease-out 0.6s both;
-    }
-    .powered a {
-      text-decoration: none;
-    }
-    .powered span {
-      font-weight: 600;
-      background: linear-gradient(135deg, #00c6ff, #7b2ff7);
-      -webkit-background-clip: text;
-      -webkit-text-fill-color: transparent;
-      transition: opacity 0.2s;
-    }
-    .powered a:hover span {
-      opacity: 0.75;
-    }
-  </style>
-</head>
-<body>
-
-  <div class="scene">
-    <div class="orb orb-1"></div>
-    <div class="orb orb-2"></div>
-    <div class="orb orb-3"></div>
-    <div class="grid"></div>
-  </div>
-
-  <div class="container">
-    <svg class="node-graphic" viewBox="0 0 120 120">
-      <defs>
-        <linearGradient id="ringGrad" x1="0%" y1="0%" x2="100%" y2="100%">
-          <stop offset="0%" stop-color="#0072ff" />
-          <stop offset="100%" stop-color="#7b2ff7" />
-        </linearGradient>
-        <linearGradient id="lineGrad" x1="0%" y1="0%" x2="100%" y2="100%">
-          <stop offset="0%" stop-color="#0072ff" stop-opacity="0.6" />
-          <stop offset="100%" stop-color="#7b2ff7" stop-opacity="0.2" />
-        </linearGradient>
-        <radialGradient id="centerGrad" cx="50%" cy="50%" r="50%">
-          <stop offset="0%" stop-color="#0072ff" />
-          <stop offset="100%" stop-color="#7b2ff7" />
-        </radialGradient>
-      </defs>
-
-      <!-- Connection lines -->
-      <line class="node-line" x1="60" y1="60" x2="60" y2="14" />
-      <line class="node-line" x1="60" y1="60" x2="100" y2="37" />
-      <line class="node-line" x1="60" y1="60" x2="100" y2="83" />
-      <line class="node-line" x1="60" y1="60" x2="60" y2="106" />
-      <line class="node-line" x1="60" y1="60" x2="20" y2="83" />
-      <line class="node-line" x1="60" y1="60" x2="20" y2="37" />
-
-      <!-- Rotating rings -->
-      <circle class="node-ring" cx="60" cy="60" r="50" />
-      <circle class="node-ring node-ring-2" cx="60" cy="60" r="38" />
-      <circle class="node-ring node-ring-3" cx="60" cy="60" r="26" />
-
-      <!-- Orbiting dots -->
-      <circle class="node-dot" cx="60" cy="14" r="4" />
-      <circle class="node-dot" cx="100" cy="37" r="4" />
-      <circle class="node-dot" cx="100" cy="83" r="4" />
-      <circle class="node-dot" cx="60" cy="106" r="4" />
-      <circle class="node-dot" cx="20" cy="83" r="4" />
-      <circle class="node-dot" cx="20" cy="37" r="4" />
-
-      <!-- Center node -->
-      <circle class="node-center" cx="60" cy="60" r="8" />
-    </svg>
-
-    <h1>Your app is running</h1>
-    <p class="tagline">Server is live and ready to accept requests</p>
-    <div class="status">
-      <span class="status-dot"></span>
-      All systems operational
-    </div>
-  </div>
-
-  <div class="powered">Powered by <a href="https://www.npmjs.com/package/4bnode" target="_blank" rel="noopener noreferrer"><span>4bnode</span></a></div>
-
-</body>
-</html>

package/app-1/src/db.js

@@ -1,13 +0,0 @@
-import mongoose from 'mongoose';
-
-const connectDB = async () => {
-  try {
-    const conn = await mongoose.connect(process.env.MONGO_URI);
-    console.log(`MongoDB connected: ${conn.connection.host}`);
-  } catch (err) {
-    console.error('MongoDB connection error:', err.message);
-    console.error('Check your MONGO_URI in .env and ensure MongoDB is running.');
-  }
-};
-
-export default connectDB;