@qwickapps/server 1.7.0 → 1.7.1

package/dist-ui-lib/src/api/controlPanelApi.d.ts

@@ -245,9 +245,18 @@ export interface WidgetContribution {
     title: string;
     /** Component name to render (matched by frontend widget registry) */
     component: string;
+    /**
+     * Widget type/category - determines which page(s) can display this widget
+     * - 'status': System health, service status, monitoring metrics (Dashboard)
+     * - 'maintenance': Operational tasks like seeding, service control, config (Maintenance page)
+     * - 'analytics': Charts, graphs, usage metrics (Dashboard or Analytics page)
+     * - 'monitoring': Performance, logs, real-time data (Monitoring page)
+     * - 'custom': Custom widgets for specific use cases
+     */
+    type: 'status' | 'maintenance' | 'analytics' | 'monitoring' | 'custom';
     /** Priority for ordering (lower = first, default: 100) */
     priority?: number;
-    /** Whether this widget is shown by default */
+    /** Whether this widget is shown by default on its designated page */
     showByDefault?: boolean;
     pluginId: string;
 }

package/dist-ui-lib/src/dashboard/PluginWidgetRenderer.d.ts

@@ -7,6 +7,8 @@
  * Copyright (c) 2025 QwickApps.com. All rights reserved.
  */
 interface PluginWidgetRendererProps {
+    /** Filter widgets by type (e.g., 'status' for dashboard, 'maintenance' for maintenance page) */
+    widgetType?: 'status' | 'maintenance' | 'analytics' | 'monitoring' | 'custom';
     /** Only show widgets marked as showByDefault (default: true) */
     defaultOnly?: boolean;
     /** Additional widget IDs to show (beyond showByDefault) */
@@ -15,5 +17,5 @@ interface PluginWidgetRendererProps {
 /**
  * Renders widgets from plugins that have registered them via the server API
  */
-export declare function PluginWidgetRenderer({ defaultOnly, additionalWidgetIds, }: PluginWidgetRendererProps): import("react/jsx-runtime").JSX.Element | null;
+export declare function PluginWidgetRenderer({ widgetType, defaultOnly, additionalWidgetIds, }: PluginWidgetRendererProps): import("react/jsx-runtime").JSX.Element | null;
 export {};

package/dist-ui-lib/src/dashboard/widgets/CacheMaintenanceWidget.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Cache Maintenance Widget
+ *
+ * Provides cache management operations:
+ * - View cache statistics
+ * - Clear cache (flush all keys)
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export declare function CacheMaintenanceWidget(): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/dashboard/widgets/DatabaseOpsWidget.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Database Operations Widget
+ *
+ * Provides database backup, restore, and maintenance operations.
+ * Part of the maintenance plugin.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export declare function DatabaseOpsWidget(): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/dashboard/widgets/EnvironmentConfigWidget.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Environment Configuration Widget
+ *
+ * Displays and allows editing environment variables.
+ * Part of the maintenance plugin.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export declare function EnvironmentConfigWidget(): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/dashboard/widgets/LogsMaintenanceWidget.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Logs Maintenance Widget
+ *
+ * Provides log management operations:
+ * - View log statistics
+ * - Clear log files
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export declare function LogsMaintenanceWidget(): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/dashboard/widgets/SeedManagementWidget.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Seed Management Widget
+ *
+ * Displays available seed scripts and allows executing them.
+ * Part of the maintenance plugin.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export declare function SeedManagementWidget(): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/dashboard/widgets/ServiceControlWidget.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Service Control Widget
+ *
+ * Provides controls for starting, stopping, and restarting services.
+ * Part of the maintenance plugin.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export declare function ServiceControlWidget(): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/dashboard/widgets/index.d.ts

@@ -9,3 +9,9 @@ export { AuthStatusWidget } from './AuthStatusWidget';
 export { NotificationsStatsWidget } from './NotificationsStatsWidget';
 export { CMSStatusWidget } from './CMSStatusWidget';
 export { CMSMaintenanceWidget } from './CMSMaintenanceWidget';
+export { SeedManagementWidget } from './SeedManagementWidget';
+export { ServiceControlWidget } from './ServiceControlWidget';
+export { EnvironmentConfigWidget } from './EnvironmentConfigWidget';
+export { DatabaseOpsWidget } from './DatabaseOpsWidget';
+export { LogsMaintenanceWidget } from './LogsMaintenanceWidget';
+export { CacheMaintenanceWidget } from './CacheMaintenanceWidget';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qwickapps/server",
-  "version": "1.7.0",
+  "version": "1.7.1",
   "description": "Plugin-based application server framework for building websites, APIs, admin dashboards, and full-stack products",
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",
@@ -41,7 +41,9 @@
     "test:e2e": "playwright test",
     "test:e2e:ui": "playwright test --ui",
     "test:e2e:headed": "playwright test --headed",
-    "demo": "npx tsx examples/demo-server.ts",
+    "demo": "npm run build:server && pnpm tsx examples/demo-server.ts",
+    "demo:gateway": "npm run build:server && pnpm tsx examples/demo-gateway.ts",
+    "demo:all": "npm run build:server && pnpm tsx examples/demo-all.ts",
     "type-check": "tsc --noEmit",
     "type-check:ui": "cd ui && tsc --noEmit",
     "validate:clean-install": "./qa/clean-install/validate.sh",
@@ -81,6 +83,7 @@
     "ioredis": "^5.4.0",
     "jsdom": "^25.0.0",
     "pg": "^8.13.0",
+    "pg-mem": "^3.0.5",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
     "react-router-dom": "^6.30.1",

package/src/core/control-panel.ts

@@ -41,10 +41,12 @@ import { createCorePlugin } from '../plugins/core/index.js';
 // Get the package root directory for serving UI assets
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
-// Handle both src/core and dist/core paths - go up to find package root
-const packageRoot = __dirname.includes('/src/')
-  ? join(__dirname, '..', '..')
-  : join(__dirname, '..', '..');
+// Handle both src/core and dist/src/core paths - go up to find package root
+// - src/core/control-panel.ts → go up 2 levels to package root
+// - dist/src/core/control-panel.js → go up 3 levels to package root
+const packageRoot = __dirname.includes('/dist/src/')
+  ? join(__dirname, '..', '..', '..') // dist/src/core → package root (3 levels)
+  : join(__dirname, '..', '..'); // src/core → package root (2 levels)
 const uiDistPath = join(packageRoot, 'dist-ui');
 
 // Read @qwickapps/server package version

package/src/core/gateway.ts

@@ -37,8 +37,31 @@ import { fileURLToPath } from 'url';
 // Get QwickApps Server version from package.json
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
-const serverPackageJson = JSON.parse(readFileSync(join(__dirname, '..', '..', 'package.json'), 'utf-8'));
-const QWICKAPPS_SERVER_VERSION = serverPackageJson.version || '1.0.0';
+
+// Find package.json by walking up directories
+// Recommended approach for libraries that work in both source and compiled contexts
+function findPackageJson(): string {
+  let currentDir = __dirname;
+  // Walk up max 5 levels looking for the correct package.json
+  for (let i = 0; i < 5; i++) {
+    try {
+      const packagePath = join(currentDir, 'package.json');
+      if (existsSync(packagePath)) {
+        const pkg = JSON.parse(readFileSync(packagePath, 'utf-8'));
+        // Verify it's the right package
+        if (pkg.name === '@qwickapps/server') {
+          return pkg.version || '1.0.0';
+        }
+      }
+    } catch {
+      // Continue searching
+    }
+    currentDir = join(currentDir, '..');
+  }
+  return '1.0.0';
+}
+
+const QWICKAPPS_SERVER_VERSION = findPackageJson();
 
 /**
  * Maintenance mode configuration for a mounted app

package/src/core/plugin-registry.ts

@@ -185,7 +185,7 @@ export interface PageContribution {
 }
 
 /**
- * Widget contribution for dashboards
+ * Widget contribution for dashboards and pages
  */
 export interface WidgetContribution {
   /** Unique ID for this widget */
@@ -194,9 +194,22 @@ export interface WidgetContribution {
   title: string;
   /** Component name to render (matched by frontend widget registry) */
   component: string;
+  /**
+   * Widget type/category - determines which page(s) can display this widget
+   * - 'status': System health, service status, monitoring metrics (Dashboard)
+   * - 'maintenance': Operational tasks like seeding, service control, config (Maintenance page)
+   * - 'analytics': Charts, graphs, usage metrics (Dashboard or Analytics page)
+   * - 'monitoring': Performance, logs, real-time data (Monitoring page)
+   * - 'custom': Custom widgets for specific use cases
+   */
+  type: 'status' | 'maintenance' | 'analytics' | 'monitoring' | 'custom';
   /** Priority for ordering (lower = first, default: 100) */
   priority?: number;
-  /** Whether this widget is shown by default (default: false) */
+  /**
+   * Whether this widget is shown by default on its page (default: false)
+   * true = widget appears by default in the initial layout
+   * false = widget is available but admin must add it manually
+   */
   showByDefault?: boolean;
   /** Default size */
   defaultSize?: { width: number; height: number };

package/src/index.ts

@@ -116,6 +116,7 @@ export {
   linkUserIdentifiers,
   findOrCreateUser,
   postgresUserStore,
+  inMemoryUserStore,
   // Bans plugin (separate from Users, depends on Users)
   createBansPlugin,
   getBanStore,
@@ -126,6 +127,7 @@ export {
   unbanUser,
   listActiveBans,
   postgresBanStore,
+  inMemoryBanStore,
   // API Keys plugin (M2M authentication, depends on Users)
   createApiKeysPlugin,
   getApiKeysStore,
@@ -158,6 +160,21 @@ export {
   requireAnyEntitlement,
   requireAllEntitlements,
   postgresEntitlementSource,
+  inMemoryEntitlementSource,
+  // Preferences plugin
+  createPreferencesPlugin,
+  getPreferencesStore,
+  getPreferences,
+  updatePreferences,
+  deletePreferences,
+  getDefaultPreferences,
+  postgresPreferencesStore,
+  deepMerge,
+  // Tenants plugin (multi-tenant data isolation, depends on Users)
+  createTenantsPlugin,
+  getTenantStore,
+  postgresTenantStore,
+  inMemoryTenantStore,
   // Rate Limit plugin
   createRateLimitPlugin,
   createRateLimitPluginFromEnv,
@@ -276,6 +293,14 @@ export {
   getActivityLog,
   postgresParentalStore,
   kidsAdapter,
+  // Notifications plugin
+  createNotificationsPlugin,
+  NotificationsManager,
+  getNotificationsManager,
+  hasNotificationsManager,
+  broadcastToDevice,
+  broadcastToUser,
+  broadcastToAll,
   // QwickBrain plugin
   createQwickBrainPlugin,
   getConnectionStatus,
@@ -355,6 +380,26 @@ export type {
   UserEntitlement,
   CachedEntitlements,
   EntitlementStats,
+  // Preferences plugin types
+  PreferencesPluginConfig,
+  PreferencesStore,
+  UserPreferences,
+  PostgresPreferencesStoreConfig,
+  PreferencesApiConfig,
+  // Tenants plugin types
+  TenantsPluginConfig,
+  TenantStore,
+  TenantType,
+  Tenant,
+  CreateTenantInput,
+  UpdateTenantInput,
+  TenantSearchParams,
+  TenantListResponse,
+  TenantMembership,
+  CreateTenantMembershipInput,
+  UpdateTenantMembershipInput,
+  TenantWithMembership,
+  PostgresTenantStoreConfig,
   // Rate Limit plugin types
   RateLimitPluginConfig,
   RateLimitEnvPluginOptions,
@@ -445,6 +490,14 @@ export type {
   ParentalApiConfig,
   PostgresParentalStoreConfig,
   KidsAdapterConfig,
+  // Notifications plugin types
+  NotificationsPluginConfig,
+  SSEClient,
+  NotifyPayload,
+  SSEEvent,
+  NotificationsStats,
+  ConnectionHealth,
+  NotificationsManagerInterface,
   // QwickBrain plugin types
   QwickBrainPluginConfig,
   MCPToolDefinition,

package/src/plugins/api-keys/stores/postgres-store.ts

@@ -266,6 +266,36 @@ export function postgresApiKeyStore(config: PostgresApiKeyStoreConfig): ApiKeySt
         CREATE INDEX IF NOT EXISTS idx_${tableName}_key_hash ON ${tableFullName}(key_hash);
       `);
 
+      // Migration: Add user_id column if it doesn't exist (for existing installations)
+      await pool.query(`
+        DO $$
+        DECLARE
+          row_count INTEGER;
+        BEGIN
+          IF NOT EXISTS (
+            SELECT 1 FROM information_schema.columns
+            WHERE table_schema = '${schema}'
+            AND table_name = '${tableName}'
+            AND column_name = 'user_id'
+          ) THEN
+            -- Check if table has data
+            EXECUTE 'SELECT COUNT(*) FROM ${tableFullName}' INTO row_count;
+
+            IF row_count > 0 THEN
+              -- If table has data, cannot add NOT NULL column
+              -- This requires manual migration or data cleanup
+              RAISE EXCEPTION 'Cannot add user_id column: table ${tableFullName} contains % rows. Please migrate data or clear the table first.', row_count;
+            ELSE
+              -- Table is empty, safe to add NOT NULL column
+              ALTER TABLE ${tableFullName}
+              ADD COLUMN user_id UUID NOT NULL REFERENCES "public"."users"(id) ON DELETE CASCADE;
+
+              CREATE INDEX IF NOT EXISTS idx_${tableName}_user_id ON ${tableFullName}(user_id);
+            END IF;
+          END IF;
+        END $$;
+      `);
+
       // Enable RLS if configured
       if (enableRLS) {
         await pool.query(`

package/src/plugins/auth/auth-plugin.ts

@@ -42,6 +42,7 @@ export function createAuthPlugin(config: AuthPluginConfig): Plugin {
 
     async onStart(_pluginConfig: PluginConfig, registry: PluginRegistry): Promise<void> {
       const app = registry.getApp();
+      const router = registry.getRouter();
 
       // Store adapters for helper access
       currentAdapter = config.adapter;
@@ -72,8 +73,9 @@ export function createAuthPlugin(config: AuthPluginConfig): Plugin {
         }
       }
 
-      // Add the auth checking middleware
-      app.use(createAuthMiddleware());
+      // Add the auth checking middleware to router (not app)
+      // This ensures it processes requests to /api/* routes
+      router.use(createAuthMiddleware());
 
       // Register auth status route
       registry.addRoute({

package/src/plugins/auth/env-config.ts

@@ -790,6 +790,7 @@ export function registerAuthConfigRoutes(registry: PluginRegistry): void {
     id: 'auth-status',
     title: 'Authentication',
     component: 'AuthStatusWidget',
+    type: 'status',
     priority: 40, // Show before integrations
     showByDefault: true,
     pluginId: 'auth',

package/src/plugins/bans/index.ts

@@ -28,7 +28,7 @@ export type {
 } from './types.js';
 
 // Stores
-export { postgresBanStore } from './stores/index.js';
+export { postgresBanStore, inMemoryBanStore } from './stores/index.js';
 
 // UI Components
 export { BansStatusWidget } from './BansStatusWidget.js';

package/src/plugins/bans/stores/in-memory-store.ts

@@ -0,0 +1,106 @@
+/**
+ * In-memory Ban Store for Demo/Testing
+ *
+ * Implements the BanStore interface with in-memory storage.
+ * Supports temporary and permanent bans with expiration.
+ */
+
+export function createInMemoryBanStore() {
+  const bans = new Map<string, any>();
+  let idCounter = 1;
+
+  function isActiveBan(ban: any): boolean {
+    if (!ban.is_active) return false;
+    if (ban.expires_at && new Date(ban.expires_at) <= new Date()) return false;
+    return true;
+  }
+
+  return {
+    name: 'in-memory',
+
+    async initialize() {
+      console.log('[InMemoryBanStore] Initialized');
+    },
+
+    async isBanned(userId: string) {
+      for (const ban of bans.values()) {
+        if (ban.user_id === userId && isActiveBan(ban)) {
+          return true;
+        }
+      }
+      return false;
+    },
+
+    async getActiveBan(userId: string) {
+      for (const ban of bans.values()) {
+        if (ban.user_id === userId && isActiveBan(ban)) {
+          return ban;
+        }
+      }
+      return null;
+    },
+
+    async createBan(input: any) {
+      const id = String(idCounter++);
+      const now = new Date();
+      const ban = {
+        id,
+        user_id: input.user_id,
+        reason: input.reason,
+        banned_by: input.banned_by || 'system',
+        banned_at: now,
+        expires_at: input.duration ? new Date(now.getTime() + input.duration * 1000) : null,
+        is_active: true,
+        metadata: input.metadata || {},
+      };
+      bans.set(id, ban);
+      return ban;
+    },
+
+    async removeBan(input: any) {
+      for (const ban of bans.values()) {
+        if (ban.user_id === input.user_id && isActiveBan(ban)) {
+          ban.is_active = false;
+          ban.removed_at = new Date();
+          ban.removed_by = input.removed_by;
+          return true;
+        }
+      }
+      return false;
+    },
+
+    async listBans(userId: string) {
+      const userBans: any[] = [];
+      for (const ban of bans.values()) {
+        if (ban.user_id === userId) {
+          userBans.push(ban);
+        }
+      }
+      return userBans;
+    },
+
+    async listActiveBans(options: { limit?: number; offset?: number } = {}) {
+      const activeBans = Array.from(bans.values()).filter(isActiveBan);
+      const total = activeBans.length;
+      const offset = options.offset || 0;
+      const limit = options.limit || 50;
+      const result = activeBans.slice(offset, offset + limit);
+      return { bans: result, total };
+    },
+
+    async cleanupExpiredBans() {
+      let cleaned = 0;
+      for (const ban of bans.values()) {
+        if (ban.is_active && ban.expires_at && new Date(ban.expires_at) <= new Date()) {
+          ban.is_active = false;
+          cleaned++;
+        }
+      }
+      return cleaned;
+    },
+
+    async shutdown() {
+      console.log('[InMemoryBanStore] Shutdown');
+    },
+  };
+}

package/src/plugins/bans/stores/index.ts

@@ -5,3 +5,4 @@
  */
 
 export { postgresBanStore } from './postgres-store.js';
+export { createInMemoryBanStore as inMemoryBanStore } from './in-memory-store.js';

package/src/plugins/cache-plugin.test.ts

@@ -141,12 +141,12 @@ describe('Cache Plugin', () => {
       expect(hasCache('test')).toBe(true);
     });
 
-    it('should log debug message on successful connection', async () => {
+    it('should log info message on successful connection', async () => {
       const plugin = createCachePlugin(mockConfig, 'test');
       await plugin.onStart({}, mockRegistry);
 
       const logger = mockRegistry.getLogger('cache:test');
-      expect(logger.debug).toHaveBeenCalledWith(
+      expect(logger.info).toHaveBeenCalledWith(
         expect.stringContaining('connected')
       );
     });