@aruvili/api 0.1.0

package/src/config.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Meta Framework - Centralized Configuration Module
+ * Validates all required environment variables at startup.
+ */
+export declare const config: {
+    port: number;
+    nodeEnv: string;
+    isProduction: boolean;
+    databaseUrl: string;
+    dbPoolMax: number;
+    dbIdleTimeout: number;
+    dbConnectTimeout: number;
+    dbStatementTimeout: string;
+    jwtSecret: string;
+    jwtExpiresIn: number;
+    bcryptRounds: number;
+    corsOrigins: string[];
+    rateLimitMax: number;
+    rateLimitWindowMs: number;
+    bodyLimitBytes: number;
+};
+//# sourceMappingURL=config.d.ts.map

package/src/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;CAuBlB,CAAC"}

package/src/config.js

@@ -0,0 +1,34 @@
+/**
+ * Meta Framework - Centralized Configuration Module
+ * Validates all required environment variables at startup.
+ */
+function requireEnv(key, fallback) {
+    const value = process.env[key] || fallback;
+    if (!value && process.env.NODE_ENV === 'production') {
+        console.error(`[CONFIG FATAL] Required environment variable ${key} is not set.`);
+        process.exit(1);
+    }
+    return value || '';
+}
+export const config = {
+    // Server
+    port: parseInt(process.env.PORT || '3000'),
+    nodeEnv: process.env.NODE_ENV || 'development',
+    isProduction: process.env.NODE_ENV === 'production',
+    // Database
+    databaseUrl: requireEnv('DATABASE_URL', 'postgresql://postgres:postgres@localhost:5432/meta_db'),
+    dbPoolMax: parseInt(process.env.DB_POOL_MAX || '20'),
+    dbIdleTimeout: parseInt(process.env.DB_IDLE_TIMEOUT || '30000'),
+    dbConnectTimeout: parseInt(process.env.DB_CONNECT_TIMEOUT || '5000'),
+    dbStatementTimeout: process.env.DB_STATEMENT_TIMEOUT || '30000',
+    // Auth
+    jwtSecret: requireEnv('JWT_SECRET', 'dev-secret-change-in-production'),
+    jwtExpiresIn: parseInt(process.env.JWT_EXPIRES_IN || '86400'), // 24 hours
+    bcryptRounds: parseInt(process.env.BCRYPT_ROUNDS || '12'),
+    // Security
+    corsOrigins: (process.env.CORS_ORIGINS || '*').split(',').map(s => s.trim()),
+    rateLimitMax: parseInt(process.env.RATE_LIMIT_MAX || '100'),
+    rateLimitWindowMs: parseInt(process.env.RATE_LIMIT_WINDOW_MS || '60000'),
+    bodyLimitBytes: parseInt(process.env.BODY_LIMIT_BYTES || '1048576'), // 1MB
+};
+//# sourceMappingURL=config.js.map

package/src/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,SAAS,UAAU,CAAC,GAAW,EAAE,QAAiB;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QACpD,OAAO,CAAC,KAAK,CAAC,gDAAgD,GAAG,cAAc,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,IAAI,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,SAAS;IACT,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa;IAC9C,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;IAEnD,WAAW;IACX,WAAW,EAAE,UAAU,CAAC,cAAc,EAAE,uDAAuD,CAAC;IAChG,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC;IACpD,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC;IAC/D,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC;IACpE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO;IAE/D,OAAO;IACP,SAAS,EAAE,UAAU,CAAC,YAAY,EAAE,iCAAiC,CAAC;IACtE,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,EAAE,WAAW;IAC1E,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC;IAEzD,WAAW;IACX,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,KAAK,CAAC;IAC3D,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC;IACxE,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS,CAAC,EAAE,MAAM;CAC5E,CAAC"}

package/src/config.ts

@@ -0,0 +1,38 @@
+/**
+ * Meta Framework - Centralized Configuration Module
+ * Validates all required environment variables at startup.
+ */
+
+function requireEnv(key: string, fallback?: string): string {
+  const value = process.env[key] || fallback;
+  if (!value && process.env.NODE_ENV === 'production') {
+    console.error(`[CONFIG FATAL] Required environment variable ${key} is not set.`);
+    process.exit(1);
+  }
+  return value || '';
+}
+
+export const config = {
+  // Server
+  port: parseInt(process.env.PORT || '3000'),
+  nodeEnv: process.env.NODE_ENV || 'development',
+  isProduction: process.env.NODE_ENV === 'production',
+
+  // Database
+  databaseUrl: requireEnv('DATABASE_URL', 'postgresql://postgres:postgres@localhost:5432/meta_db'),
+  dbPoolMax: parseInt(process.env.DB_POOL_MAX || '20'),
+  dbIdleTimeout: parseInt(process.env.DB_IDLE_TIMEOUT || '30000'),
+  dbConnectTimeout: parseInt(process.env.DB_CONNECT_TIMEOUT || '5000'),
+  dbStatementTimeout: process.env.DB_STATEMENT_TIMEOUT || '30000',
+
+  // Auth
+  jwtSecret: requireEnv('JWT_SECRET', 'dev-secret-change-in-production'),
+  jwtExpiresIn: parseInt(process.env.JWT_EXPIRES_IN || '86400'), // 24 hours
+  bcryptRounds: parseInt(process.env.BCRYPT_ROUNDS || '12'),
+
+  // Security
+  corsOrigins: (process.env.CORS_ORIGINS || '*').split(',').map(s => s.trim()),
+  rateLimitMax: parseInt(process.env.RATE_LIMIT_MAX || '100'),
+  rateLimitWindowMs: parseInt(process.env.RATE_LIMIT_WINDOW_MS || '60000'),
+  bodyLimitBytes: parseInt(process.env.BODY_LIMIT_BYTES || '1048576'), // 1MB
+};

package/src/context.d.ts

@@ -0,0 +1,7 @@
+import { AsyncLocalStorage } from 'async_hooks';
+export interface RequestContextStore {
+    tenantId?: string;
+    user?: any;
+}
+export declare const requestContext: AsyncLocalStorage<RequestContextStore>;
+//# sourceMappingURL=context.d.ts.map

package/src/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,GAAG,CAAC;CACZ;AAED,eAAO,MAAM,cAAc,wCAA+C,CAAC"}

package/src/context.js

@@ -0,0 +1,3 @@
+import { AsyncLocalStorage } from 'async_hooks';
+export const requestContext = new AsyncLocalStorage();
+//# sourceMappingURL=context.js.map

package/src/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAOhD,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,iBAAiB,EAAuB,CAAC"}

package/src/context.ts

@@ -0,0 +1,8 @@
+import { AsyncLocalStorage } from 'async_hooks';
+
+export interface RequestContextStore {
+  tenantId?: string;
+  user?: any;
+}
+
+export const requestContext = new AsyncLocalStorage<RequestContextStore>();

package/src/controllers/index.d.ts

@@ -0,0 +1,39 @@
+import pg from 'pg';
+export interface ControllerContext {
+    db: pg.PoolClient;
+    user: {
+        email: string;
+        roles: string[];
+    };
+}
+export declare abstract class DocTypeController {
+    before_insert(doc: any, ctx: ControllerContext): Promise<void>;
+    after_insert(doc: any, ctx: ControllerContext): Promise<void>;
+    before_save(doc: any, ctx: ControllerContext): Promise<void>;
+    on_update(doc: any, oldDoc: any, ctx: ControllerContext): Promise<void>;
+    before_delete(doc: any, ctx: ControllerContext): Promise<void>;
+    on_trash(doc: any, ctx: ControllerContext): Promise<void>;
+    before_submit(doc: any, ctx: ControllerContext): Promise<void>;
+    on_submit(doc: any, ctx: ControllerContext): Promise<void>;
+    before_cancel(doc: any, ctx: ControllerContext): Promise<void>;
+    on_cancel(doc: any, ctx: ControllerContext): Promise<void>;
+}
+declare class ControllerRegistry {
+    private controllers;
+    register(doctypeName: string, controller: DocTypeController): void;
+    get(doctypeName: string): DocTypeController | undefined;
+    private trigger;
+    triggerBeforeInsert(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerAfterInsert(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerBeforeSave(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerOnUpdate(n: string, doc: any, old: any, ctx: ControllerContext): Promise<void>;
+    triggerBeforeDelete(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerOnTrash(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerBeforeSubmit(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerOnSubmit(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerBeforeCancel(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerOnCancel(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+}
+export declare const controllerRegistry: ControllerRegistry;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/src/controllers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC;IAClB,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC1C;AAED,8BAAsB,iBAAiB;IAC/B,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9D,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAC7D,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAC5D,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IACvE,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IACzD,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9D,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1D,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9D,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;CACjE;AAED,cAAM,kBAAkB;IACtB,OAAO,CAAC,WAAW,CAAwC;IAEpD,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB;IAI3D,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;YAIhD,OAAO;IAOf,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC/D,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC9D,iBAAiB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC7D,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IACrE,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC/D,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC1D,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC/D,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC3D,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC/D,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;CAClE;AAED,eAAO,MAAM,kBAAkB,oBAA2B,CAAC"}

package/src/controllers/index.js

@@ -0,0 +1,39 @@
+export class DocTypeController {
+    async before_insert(doc, ctx) { }
+    async after_insert(doc, ctx) { }
+    async before_save(doc, ctx) { }
+    async on_update(doc, oldDoc, ctx) { }
+    async before_delete(doc, ctx) { }
+    async on_trash(doc, ctx) { }
+    async before_submit(doc, ctx) { }
+    async on_submit(doc, ctx) { }
+    async before_cancel(doc, ctx) { }
+    async on_cancel(doc, ctx) { }
+}
+class ControllerRegistry {
+    controllers = new Map();
+    register(doctypeName, controller) {
+        this.controllers.set(doctypeName, controller);
+    }
+    get(doctypeName) {
+        return this.controllers.get(doctypeName);
+    }
+    async trigger(name, method, ...args) {
+        const ctrl = this.get(name);
+        if (ctrl && typeof ctrl[method] === 'function') {
+            await ctrl[method](...args);
+        }
+    }
+    async triggerBeforeInsert(n, doc, ctx) { await this.trigger(n, 'before_insert', doc, ctx); }
+    async triggerAfterInsert(n, doc, ctx) { await this.trigger(n, 'after_insert', doc, ctx); }
+    async triggerBeforeSave(n, doc, ctx) { await this.trigger(n, 'before_save', doc, ctx); }
+    async triggerOnUpdate(n, doc, old, ctx) { await this.trigger(n, 'on_update', doc, old, ctx); }
+    async triggerBeforeDelete(n, doc, ctx) { await this.trigger(n, 'before_delete', doc, ctx); }
+    async triggerOnTrash(n, doc, ctx) { await this.trigger(n, 'on_trash', doc, ctx); }
+    async triggerBeforeSubmit(n, doc, ctx) { await this.trigger(n, 'before_submit', doc, ctx); }
+    async triggerOnSubmit(n, doc, ctx) { await this.trigger(n, 'on_submit', doc, ctx); }
+    async triggerBeforeCancel(n, doc, ctx) { await this.trigger(n, 'before_cancel', doc, ctx); }
+    async triggerOnCancel(n, doc, ctx) { await this.trigger(n, 'on_cancel', doc, ctx); }
+}
+export const controllerRegistry = new ControllerRegistry();
+//# sourceMappingURL=index.js.map

package/src/controllers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAOA,MAAM,OAAgB,iBAAiB;IACrC,KAAK,CAAC,aAAa,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IACvE,KAAK,CAAC,YAAY,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IACtE,KAAK,CAAC,WAAW,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IACrE,KAAK,CAAC,SAAS,CAAC,GAAQ,EAAE,MAAW,EAAE,GAAsB,IAAkB,CAAC;IAChF,KAAK,CAAC,aAAa,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IACvE,KAAK,CAAC,QAAQ,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IAClE,KAAK,CAAC,aAAa,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IACvE,KAAK,CAAC,SAAS,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IACnE,KAAK,CAAC,aAAa,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IACvE,KAAK,CAAC,SAAS,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;CACpE;AAED,MAAM,kBAAkB;IACd,WAAW,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEpD,QAAQ,CAAC,WAAmB,EAAE,UAA6B;QAChE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IAEM,GAAG,CAAC,WAAmB;QAC5B,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,MAAc,EAAE,GAAG,IAAW;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,IAAI,IAAI,OAAQ,IAAY,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;YACxD,MAAO,IAAY,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5H,KAAK,CAAC,kBAAkB,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1H,KAAK,CAAC,iBAAiB,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACxH,KAAK,CAAC,eAAe,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACnI,KAAK,CAAC,mBAAmB,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5H,KAAK,CAAC,cAAc,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAClH,KAAK,CAAC,mBAAmB,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5H,KAAK,CAAC,eAAe,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACpH,KAAK,CAAC,mBAAmB,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5H,KAAK,CAAC,eAAe,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;CACrH;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,EAAE,CAAC"}

package/src/controllers/index.ts

@@ -0,0 +1,51 @@
+import pg from 'pg';
+
+export interface ControllerContext {
+  db: pg.PoolClient;
+  user: { email: string; roles: string[] };
+}
+
+export abstract class DocTypeController {
+  async before_insert(doc: any, ctx: ControllerContext): Promise<void> {}
+  async after_insert(doc: any, ctx: ControllerContext): Promise<void> {}
+  async before_save(doc: any, ctx: ControllerContext): Promise<void> {}
+  async on_update(doc: any, oldDoc: any, ctx: ControllerContext): Promise<void> {}
+  async before_delete(doc: any, ctx: ControllerContext): Promise<void> {}
+  async on_trash(doc: any, ctx: ControllerContext): Promise<void> {}
+  async before_submit(doc: any, ctx: ControllerContext): Promise<void> {}
+  async on_submit(doc: any, ctx: ControllerContext): Promise<void> {}
+  async before_cancel(doc: any, ctx: ControllerContext): Promise<void> {}
+  async on_cancel(doc: any, ctx: ControllerContext): Promise<void> {}
+}
+
+class ControllerRegistry {
+  private controllers = new Map<string, DocTypeController>();
+
+  public register(doctypeName: string, controller: DocTypeController) {
+    this.controllers.set(doctypeName, controller);
+  }
+
+  public get(doctypeName: string): DocTypeController | undefined {
+    return this.controllers.get(doctypeName);
+  }
+
+  private async trigger(name: string, method: string, ...args: any[]) {
+    const ctrl = this.get(name);
+    if (ctrl && typeof (ctrl as any)[method] === 'function') {
+      await (ctrl as any)[method](...args);
+    }
+  }
+
+  async triggerBeforeInsert(n: string, doc: any, ctx: ControllerContext) { await this.trigger(n, 'before_insert', doc, ctx); }
+  async triggerAfterInsert(n: string, doc: any, ctx: ControllerContext) { await this.trigger(n, 'after_insert', doc, ctx); }
+  async triggerBeforeSave(n: string, doc: any, ctx: ControllerContext) { await this.trigger(n, 'before_save', doc, ctx); }
+  async triggerOnUpdate(n: string, doc: any, old: any, ctx: ControllerContext) { await this.trigger(n, 'on_update', doc, old, ctx); }
+  async triggerBeforeDelete(n: string, doc: any, ctx: ControllerContext) { await this.trigger(n, 'before_delete', doc, ctx); }
+  async triggerOnTrash(n: string, doc: any, ctx: ControllerContext) { await this.trigger(n, 'on_trash', doc, ctx); }
+  async triggerBeforeSubmit(n: string, doc: any, ctx: ControllerContext) { await this.trigger(n, 'before_submit', doc, ctx); }
+  async triggerOnSubmit(n: string, doc: any, ctx: ControllerContext) { await this.trigger(n, 'on_submit', doc, ctx); }
+  async triggerBeforeCancel(n: string, doc: any, ctx: ControllerContext) { await this.trigger(n, 'before_cancel', doc, ctx); }
+  async triggerOnCancel(n: string, doc: any, ctx: ControllerContext) { await this.trigger(n, 'on_cancel', doc, ctx); }
+}
+
+export const controllerRegistry = new ControllerRegistry();

package/src/db.d.ts

@@ -0,0 +1,6 @@
+import pg from 'pg';
+export declare const pool: import("pg").Pool;
+export declare function query(text: string, params?: any[]): Promise<any>;
+export declare function withTransaction<T>(callback: (client: pg.PoolClient) => Promise<T>): Promise<T>;
+export declare function closePool(): Promise<void>;
+//# sourceMappingURL=db.d.ts.map

package/src/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAIpB,eAAO,MAAM,IAAI,mBAMf,CAAC;AAMH,wBAAsB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,gBA2BvD;AAED,wBAAsB,eAAe,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAuBpG;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAE/C"}

package/src/db.js

@@ -0,0 +1,74 @@
+import pg from 'pg';
+import { config } from './config.js';
+import { requestContext } from './context.js';
+export const pool = new pg.Pool({
+    connectionString: config.databaseUrl,
+    max: config.dbPoolMax,
+    idleTimeoutMillis: config.dbIdleTimeout,
+    connectionTimeoutMillis: config.dbConnectTimeout,
+    allowExitOnIdle: false
+});
+pool.on('error', (err) => {
+    console.error('[DB POOL ERROR] Unexpected error on idle client:', err);
+});
+export async function query(text, params) {
+    if (globalThis.dbMock) {
+        return globalThis.dbMock.query(text, params);
+    }
+    const start = Date.now();
+    const client = await pool.connect();
+    try {
+        const store = requestContext.getStore();
+        const tenantId = store?.tenantId || 'public';
+        await client.query(`SET search_path TO ${tenantId}, public`);
+        const result = await client.query(text, params);
+        const duration = Date.now() - start;
+        if (duration > 1000) {
+            console.warn(`[DB SLOW QUERY] ${duration}ms: ${text.substring(0, 120)}...`);
+        }
+        return result;
+    }
+    catch (error) {
+        const duration = Date.now() - start;
+        console.error(`[DB QUERY ERROR] ${duration}ms | ${text.substring(0, 120)} | ${error.message}`);
+        throw error;
+    }
+    finally {
+        try {
+            await client.query('RESET search_path');
+        }
+        catch (_) { }
+        client.release();
+    }
+}
+export async function withTransaction(callback) {
+    if (globalThis.dbMock) {
+        return globalThis.dbMock.withTransaction(callback);
+    }
+    const client = await pool.connect();
+    try {
+        const store = requestContext.getStore();
+        const tenantId = store?.tenantId || 'public';
+        await client.query('BEGIN');
+        await client.query(`SET search_path TO ${tenantId}, public`);
+        await client.query(`SET LOCAL statement_timeout = '${config.dbStatementTimeout}'`);
+        const result = await callback(client);
+        await client.query('COMMIT');
+        return result;
+    }
+    catch (error) {
+        await client.query('ROLLBACK');
+        throw error;
+    }
+    finally {
+        try {
+            await client.query('RESET search_path');
+        }
+        catch (_) { }
+        client.release();
+    }
+}
+export async function closePool() {
+    await pool.end();
+}
+//# sourceMappingURL=db.js.map

package/src/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC,WAAW;IACpC,GAAG,EAAE,MAAM,CAAC,SAAS;IACrB,iBAAiB,EAAE,MAAM,CAAC,aAAa;IACvC,uBAAuB,EAAE,MAAM,CAAC,gBAAgB;IAChD,eAAe,EAAE,KAAK;CACvB,CAAC,CAAC;AAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;IACvB,OAAO,CAAC,KAAK,CAAC,kDAAkD,EAAE,GAAG,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,MAAc;IACtD,IAAK,UAAkB,CAAC,MAAM,EAAE,CAAC;QAC/B,OAAQ,UAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,IAAI,QAAQ,CAAC;QAC7C,MAAM,MAAM,CAAC,KAAK,CAAC,sBAAsB,QAAQ,UAAU,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACpC,IAAI,QAAQ,GAAG,IAAI,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,mBAAmB,QAAQ,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACpC,OAAO,CAAC,KAAK,CAAC,oBAAoB,QAAQ,QAAQ,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/F,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAA,CAAC;QACd,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAI,QAA+C;IACtF,IAAK,UAAkB,CAAC,MAAM,EAAE,CAAC;QAC/B,OAAQ,UAAkB,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,IAAI,QAAQ,CAAC;QAC7C,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,MAAM,CAAC,KAAK,CAAC,sBAAsB,QAAQ,UAAU,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,KAAK,CAAC,kCAAkC,MAAM,CAAC,kBAAkB,GAAG,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/B,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAA,CAAC;QACd,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;AACnB,CAAC"}

package/src/db.ts

@@ -0,0 +1,73 @@
+import pg from 'pg';
+import { config } from './config.js';
+import { requestContext } from './context.js';
+
+export const pool = new pg.Pool({
+  connectionString: config.databaseUrl,
+  max: config.dbPoolMax,
+  idleTimeoutMillis: config.dbIdleTimeout,
+  connectionTimeoutMillis: config.dbConnectTimeout,
+  allowExitOnIdle: false
+});
+
+pool.on('error', (err) => {
+  console.error('[DB POOL ERROR] Unexpected error on idle client:', err);
+});
+
+export async function query(text: string, params?: any[]) {
+  if ((globalThis as any).dbMock) {
+    return (globalThis as any).dbMock.query(text, params);
+  }
+  const start = Date.now();
+  const client = await pool.connect();
+  try {
+    const store = requestContext.getStore();
+    const tenantId = store?.tenantId || 'public';
+    await client.query(`SET search_path TO ${tenantId}, public`);
+
+    const result = await client.query(text, params);
+    const duration = Date.now() - start;
+    if (duration > 1000) {
+      console.warn(`[DB SLOW QUERY] ${duration}ms: ${text.substring(0, 120)}...`);
+    }
+    return result;
+  } catch (error: any) {
+    const duration = Date.now() - start;
+    console.error(`[DB QUERY ERROR] ${duration}ms | ${text.substring(0, 120)} | ${error.message}`);
+    throw error;
+  } finally {
+    try {
+      await client.query('RESET search_path');
+    } catch (_) {}
+    client.release();
+  }
+}
+
+export async function withTransaction<T>(callback: (client: pg.PoolClient) => Promise<T>): Promise<T> {
+  if ((globalThis as any).dbMock) {
+    return (globalThis as any).dbMock.withTransaction(callback);
+  }
+  const client = await pool.connect();
+  try {
+    const store = requestContext.getStore();
+    const tenantId = store?.tenantId || 'public';
+    await client.query('BEGIN');
+    await client.query(`SET search_path TO ${tenantId}, public`);
+    await client.query(`SET LOCAL statement_timeout = '${config.dbStatementTimeout}'`);
+    const result = await callback(client);
+    await client.query('COMMIT');
+    return result;
+  } catch (error) {
+    await client.query('ROLLBACK');
+    throw error;
+  } finally {
+    try {
+      await client.query('RESET search_path');
+    } catch (_) {}
+    client.release();
+  }
+}
+
+export async function closePool(): Promise<void> {
+  await pool.end();
+}

package/src/index.ts

@@ -0,0 +1,178 @@
+import { Hono } from 'hono';
+import { cors } from 'hono/cors';
+import { config } from './config.js';
+import { metaRouter } from './routes/meta.js';
+import { crudRouter } from './routes/crud.js';
+import { authRouter } from './routes/auth.js';
+import { authMiddleware } from './middleware/auth.js';
+import { rbacMiddleware } from './middleware/rbac.js';
+import { rateLimitMiddleware } from './middleware/rate-limit.js';
+import { bodyLimitMiddleware } from './middleware/body-limit.js';
+import { query, closePool } from './db.js';
+import { filesRouter } from './routes/files.js';
+import { tenantMiddleware } from './middleware/tenant.js';
+import crypto from 'crypto';
+
+const app = new Hono<{ Variables: { request_id: string; user?: any } }>();
+
+// Global Middleware Stack
+
+// CORS
+app.use('*', cors({
+  origin: config.corsOrigins.includes('*') ? '*' : config.corsOrigins,
+  allowMethods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
+  allowHeaders: ['Content-Type', 'Authorization'],
+  exposeHeaders: ['X-Request-ID', 'X-RateLimit-Limit', 'X-RateLimit-Remaining', 'X-RateLimit-Reset'],
+  maxAge: 86400
+}));
+
+// Request ID + structured logging
+app.use('*', async (c, next) => {
+  const requestId = crypto.randomUUID();
+  c.set('request_id', requestId);
+  c.header('X-Request-ID', requestId);
+  const start = Date.now();
+  await next();
+  console.log(JSON.stringify({
+    level: 'info', type: 'http', method: c.req.method, url: c.req.url,
+    status: c.res.status, duration_ms: Date.now() - start, request_id: requestId
+  }));
+});
+
+// Tenant Isolation Context
+app.use('*', tenantMiddleware);
+
+// Body size limit
+app.use('*', bodyLimitMiddleware);
+
+// Rate limiting
+app.use('*', rateLimitMiddleware);
+
+// Error handler - hide details in production
+app.onError((err, c) => {
+  const requestId = c.get('request_id') || crypto.randomUUID();
+  console.error(JSON.stringify({
+    level: 'error', type: 'exception', request_id: requestId,
+    message: err.message, stack: config.isProduction ? undefined : err.stack
+  }));
+  return c.json({
+    error: 'Internal Server Error', request_id: requestId,
+    ...(config.isProduction ? {} : { message: err.message })
+  }, 500);
+});
+
+// === Public Routes (no auth required) ===
+app.get('/api/health', (c) => c.json({ status: 'ok', timestamp: new Date().toISOString() }));
+app.route('/api/auth', authRouter);
+app.route('/api/meta', metaRouter);
+
+// === Protected Routes ===
+app.use('/api/files/*', authMiddleware);
+app.route('/api/files', filesRouter);
+
+app.use('/api/doctype/*', authMiddleware, rbacMiddleware);
+app.route('/api/doctype/:doctype', crudRouter);
+
+// === Bootstrap ===
+async function bootstrapDatabase() {
+  console.log('[BOOT] Initializing system database schemas...');
+  try {
+    // System tables
+    await query(`CREATE TABLE IF NOT EXISTS _tenants (
+      id VARCHAR(100) PRIMARY KEY,
+      name VARCHAR(255) NOT NULL,
+      domain VARCHAR(255),
+      created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW()
+    );`);
+
+    await query(`CREATE TABLE IF NOT EXISTS _doctype_meta (
+      name VARCHAR(255) PRIMARY KEY, uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+      definition JSONB NOT NULL, created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
+      updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW());`);
+
+    await query(`CREATE TABLE IF NOT EXISTS _doctype_migration_history (
+      id SERIAL PRIMARY KEY, uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+      doctype_name VARCHAR(255) NOT NULL, version INTEGER NOT NULL,
+      ddl_executed TEXT NOT NULL, executed_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
+      executed_by VARCHAR(255));`);
+
+    await query(`CREATE TABLE IF NOT EXISTS _doctype_definition_history (
+      id SERIAL PRIMARY KEY, uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+      doctype_name VARCHAR(255) REFERENCES _doctype_meta(name) ON DELETE CASCADE,
+      version INTEGER NOT NULL,
+      definition JSONB NOT NULL,
+      changed_by VARCHAR(255) NOT NULL,
+      changed_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
+      ddl_applied TEXT,
+      notes TEXT);`);
+
+    await query(`CREATE TABLE IF NOT EXISTS _naming_series (
+      prefix VARCHAR(100) PRIMARY KEY, uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+      current_value INTEGER NOT NULL DEFAULT 0);`);
+
+    await query(`CREATE TABLE IF NOT EXISTS _audit_log (
+      id BIGSERIAL PRIMARY KEY, uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+      doctype_name VARCHAR(255) NOT NULL, docname VARCHAR(255) NOT NULL,
+      action VARCHAR(50) NOT NULL, changed_by VARCHAR(255) NOT NULL,
+      changed_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(), diff JSONB NOT NULL);`);
+
+    // User management table
+    await query(`CREATE TABLE IF NOT EXISTS _users (
+      name VARCHAR(255) PRIMARY KEY, uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+      email VARCHAR(255) UNIQUE NOT NULL, full_name VARCHAR(255) DEFAULT '',
+      hashed_password TEXT NOT NULL, roles JSONB DEFAULT '["Guest"]',
+      enabled BOOLEAN DEFAULT true, last_login TIMESTAMP WITH TIME ZONE,
+      created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
+      updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW());`);
+
+    // Files attachment tracking table
+    await query(`CREATE TABLE IF NOT EXISTS _files (
+      name VARCHAR(255) PRIMARY KEY, uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+      file_name VARCHAR(255) NOT NULL, file_url VARCHAR(255) NOT NULL,
+      file_size INTEGER NOT NULL, mime_type VARCHAR(100) NOT NULL,
+      attached_to_doctype VARCHAR(255), attached_to_name VARCHAR(255),
+      attached_to_field VARCHAR(255), created_by VARCHAR(255),
+      created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW());`);
+
+    // System indexes
+    await query(`CREATE INDEX IF NOT EXISTS idx_audit_log_doctype ON _audit_log (doctype_name, docname);`);
+    await query(`CREATE INDEX IF NOT EXISTS idx_audit_log_changed_at ON _audit_log (changed_at);`);
+    await query(`CREATE INDEX IF NOT EXISTS idx_users_email ON _users (email);`);
+
+    console.log('[BOOT] System database schemas initialized successfully.');
+  } catch (err) {
+    console.error('[BOOT ERROR] Failed to initialize system schemas:', err);
+    process.exit(1);
+  }
+}
+
+bootstrapDatabase().then(() => {
+  console.log(`[BOOT] Server launching on http://localhost:${config.port}`);
+  if (!config.isProduction) {
+    console.log('[BOOT] Running in DEVELOPMENT mode. Set NODE_ENV=production for production.');
+  }
+});
+
+// Graceful shutdown
+const shutdown = async () => {
+  console.log('[SHUTDOWN] Graceful shutdown initiated...');
+  await closePool();
+  process.exit(0);
+};
+process.on('SIGTERM', shutdown);
+process.on('SIGINT', shutdown);
+
+export default { port: config.port, fetch: app.fetch };
+
+export { metaRouter } from './routes/meta.js';
+export { crudRouter } from './routes/crud.js';
+export { authRouter } from './routes/auth.js';
+export { filesRouter } from './routes/files.js';
+export { tenantMiddleware } from './middleware/tenant.js';
+export { bodyLimitMiddleware } from './middleware/body-limit.js';
+export { rateLimitMiddleware } from './middleware/rate-limit.js';
+export { authMiddleware } from './middleware/auth.js';
+export { rbacMiddleware } from './middleware/rbac.js';
+export { query, withTransaction } from './db.js';
+export { config } from './config.js';
+