@vincent99/vlib 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (92) hide show
  1. package/LICENSE +178 -0
  2. package/README.md +107 -0
  3. package/bin/vlib.js +10 -0
  4. package/dist/AdminForm.vue_vue_type_style_index_0_lang-xCk1ywLq.js +753 -0
  5. package/dist/auth/middleware.d.ts +18 -0
  6. package/dist/auth/middleware.d.ts.map +1 -0
  7. package/dist/auth/middleware.js +44 -0
  8. package/dist/auth/middleware.js.map +1 -0
  9. package/dist/auth/password.d.ts +10 -0
  10. package/dist/auth/password.d.ts.map +1 -0
  11. package/dist/auth/password.js +44 -0
  12. package/dist/auth/password.js.map +1 -0
  13. package/dist/cli.d.ts +3 -0
  14. package/dist/cli.d.ts.map +1 -0
  15. package/dist/cli.js +104 -0
  16. package/dist/cli.js.map +1 -0
  17. package/dist/components/AdminForm.vue.d.ts +7 -0
  18. package/dist/components/AdminTable.vue.d.ts +5 -0
  19. package/dist/components/AppLayout.vue.d.ts +36 -0
  20. package/dist/components/NavSidebar.vue.d.ts +11 -0
  21. package/dist/components/TableView.vue.d.ts +52 -0
  22. package/dist/components/index.d.ts +6 -0
  23. package/dist/components/index.js +8 -0
  24. package/dist/components/types.d.ts +25 -0
  25. package/dist/db/index.d.ts +12 -0
  26. package/dist/db/index.d.ts.map +1 -0
  27. package/dist/db/index.js +84 -0
  28. package/dist/db/index.js.map +1 -0
  29. package/dist/db/migrate.d.ts +2 -0
  30. package/dist/db/migrate.d.ts.map +1 -0
  31. package/dist/db/migrate.js +94 -0
  32. package/dist/db/migrate.js.map +1 -0
  33. package/dist/index.d.ts +3 -0
  34. package/dist/index.js +11 -0
  35. package/dist/router/index.d.ts +33 -0
  36. package/dist/router/index.js +62 -0
  37. package/dist/server/api/admin.d.ts +3 -0
  38. package/dist/server/api/admin.d.ts.map +1 -0
  39. package/dist/server/api/admin.js +184 -0
  40. package/dist/server/api/admin.js.map +1 -0
  41. package/dist/server/api/auth.d.ts +3 -0
  42. package/dist/server/api/auth.d.ts.map +1 -0
  43. package/dist/server/api/auth.js +66 -0
  44. package/dist/server/api/auth.js.map +1 -0
  45. package/dist/server/index.d.ts +17 -0
  46. package/dist/server/index.d.ts.map +1 -0
  47. package/dist/server/index.js +47 -0
  48. package/dist/server/index.js.map +1 -0
  49. package/dist/types.d.ts +53 -0
  50. package/dist/types.d.ts.map +1 -0
  51. package/dist/types.js +3 -0
  52. package/dist/types.js.map +1 -0
  53. package/dist/vlib.css +1 -0
  54. package/package.json +91 -0
  55. package/src/components/AdminForm.vue +491 -0
  56. package/src/components/AdminTable.vue +269 -0
  57. package/src/components/AppLayout.vue +280 -0
  58. package/src/components/NavSidebar.vue +176 -0
  59. package/src/components/TableView.vue +379 -0
  60. package/src/components/index.ts +13 -0
  61. package/src/components/types.ts +28 -0
  62. package/templates/.env.example +4 -0
  63. package/templates/.prettierignore +3 -0
  64. package/templates/.prettierrc +6 -0
  65. package/templates/Dockerfile.ejs +31 -0
  66. package/templates/docker-compose.prod.yml.ejs +22 -0
  67. package/templates/docker-compose.yml.ejs +22 -0
  68. package/templates/eslint.config.mjs +42 -0
  69. package/templates/index.html.ejs +13 -0
  70. package/templates/package.json.ejs +44 -0
  71. package/templates/postcss.config.js.ejs +6 -0
  72. package/templates/schemas/001-initial.sql +35 -0
  73. package/templates/scripts/migrate.ts +13 -0
  74. package/templates/server/index.ts +13 -0
  75. package/templates/src/App.vue +8 -0
  76. package/templates/src/main.ts +6 -0
  77. package/templates/src/router.ts +26 -0
  78. package/templates/src/routes/_layout.vue +58 -0
  79. package/templates/src/routes/admin/_layout.vue +8 -0
  80. package/templates/src/routes/admin/index.vue +88 -0
  81. package/templates/src/routes/admin/tables/[table]/[id].vue +20 -0
  82. package/templates/src/routes/admin/tables/[table]/index.vue +10 -0
  83. package/templates/src/routes/admin/tables/[table]/new.vue +10 -0
  84. package/templates/src/routes/index.vue +34 -0
  85. package/templates/src/routes/login.vue +128 -0
  86. package/templates/src/stores/auth.ts +58 -0
  87. package/templates/src/styles/main.scss +98 -0
  88. package/templates/src/styles/variables.scss +7 -0
  89. package/templates/tailwind.config.js.ejs +27 -0
  90. package/templates/tsconfig.json.ejs +26 -0
  91. package/templates/tsconfig.server.json.ejs +17 -0
  92. package/templates/vite.config.ts.ejs +36 -0
package/dist/index.js ADDED
@@ -0,0 +1,11 @@
1
+ import { _ as r, a as o, b as d, c as s, d as t } from "./AdminForm.vue_vue_type_style_index_0_lang-xCk1ywLq.js";
2
+ import { buildRoutes as i, createAuthGuard as m } from "./router/index.js";
3
+ export {
4
+ r as AdminForm,
5
+ o as AdminTable,
6
+ d as AppLayout,
7
+ s as NavSidebar,
8
+ t as TableView,
9
+ i as buildRoutes,
10
+ m as createAuthGuard
11
+ };
@@ -0,0 +1,33 @@
1
+ import { RouteRecordRaw } from 'vue-router';
2
+ type GlobModules = Record<string, () => Promise<unknown>>;
3
+ /**
4
+ * Build Vue Router routes from a Vite import.meta.glob result.
5
+ *
6
+ * Convention:
7
+ * routes/index.vue → /
8
+ * routes/login.vue → /login
9
+ * routes/_layout.vue → layout that wraps all sibling routes
10
+ * routes/admin/_layout.vue → layout for /admin/* routes
11
+ * routes/admin/index.vue → /admin
12
+ * routes/admin/[id].vue → /admin/:id
13
+ *
14
+ * Route meta:
15
+ * By default all routes require auth.
16
+ * routes/login.vue and any file with a comment `// @no-auth` get { requiresAuth: false }
17
+ *
18
+ * Public routes (no auth required) are identified by their path:
19
+ * - /login
20
+ * - any path passed in the `publicPaths` option
21
+ */
22
+ export interface BuildRoutesOptions {
23
+ publicPaths?: string[];
24
+ }
25
+ export declare function buildRoutes(pages: GlobModules, options?: BuildRoutesOptions): RouteRecordRaw[];
26
+ /**
27
+ * Navigation guard — add to router.beforeEach to enforce auth.
28
+ */
29
+ export declare function createAuthGuard(isAuthenticated: () => boolean): (to: {
30
+ meta?: Record<string, unknown>;
31
+ path: string;
32
+ }, _from: unknown, next: (path?: string) => void) => void;
33
+ export {};
@@ -0,0 +1,62 @@
1
+ function P(i, h = {}) {
2
+ const p = /* @__PURE__ */ new Set(["/login", ...h.publicPaths ?? []]), u = Object.keys(i).map((t) => {
3
+ const e = t.replace(/^\.\/routes\//, "").replace(/\.vue$/, "").split("/"), o = e[e.length - 1], r = o === "_layout", c = o === "index", m = "/" + e.filter((l) => l !== "_layout").map((l) => l === "index" ? "" : l.replace(/^\[(.+)\]$/, ":$1")).filter(Boolean).join("/");
4
+ return {
5
+ filePath: t,
6
+ routePath: m,
7
+ segments: e,
8
+ isLayout: r,
9
+ isIndex: c,
10
+ depth: e.length
11
+ };
12
+ }), f = /* @__PURE__ */ new Map();
13
+ for (const t of u)
14
+ if (t.isLayout) {
15
+ const s = t.segments.slice(0, -1).join("/");
16
+ f.set(s, t.filePath);
17
+ }
18
+ const n = [], a = /* @__PURE__ */ new Map();
19
+ for (const [t, s] of f) {
20
+ const e = t ? "/" + t.split("/").map((r) => r.replace(/^\[(.+)\]$/, ":$1")).join("/") : "", o = {
21
+ path: e,
22
+ component: i[s],
23
+ children: [],
24
+ meta: { requiresAuth: !p.has(e) }
25
+ };
26
+ a.set(t, o), t || n.push(o);
27
+ }
28
+ for (const [t, s] of a) {
29
+ if (!t)
30
+ continue;
31
+ const e = t.split("/").slice(0, -1).join("/"), o = a.get(e);
32
+ o ? o.children.push(s) : n.push(s);
33
+ }
34
+ for (const t of u) {
35
+ if (t.isLayout)
36
+ continue;
37
+ const s = !p.has(t.routePath), e = {
38
+ path: t.routePath,
39
+ component: i[t.filePath],
40
+ meta: { requiresAuth: s }
41
+ }, o = t.segments.slice(0, -1).join("/"), r = a.get(o);
42
+ if (r) {
43
+ const c = r.path, d = t.routePath.startsWith(c) ? t.routePath.slice(c.length).replace(/^\//, "") : t.routePath;
44
+ r.children.push({
45
+ ...e,
46
+ path: d
47
+ });
48
+ } else
49
+ n.push(e);
50
+ }
51
+ return n;
52
+ }
53
+ function g(i) {
54
+ return (h, p, u) => {
55
+ var n;
56
+ ((n = h.meta) == null ? void 0 : n.requiresAuth) !== !1 && !i() ? u("/login") : u();
57
+ };
58
+ }
59
+ export {
60
+ P as buildRoutes,
61
+ g as createAuthGuard
62
+ };
@@ -0,0 +1,3 @@
1
+ import { Router } from 'express';
2
+ export declare function createAdminRouter(): Router;
3
+ //# sourceMappingURL=admin.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../src/server/api/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAKjC,wBAAgB,iBAAiB,IAAI,MAAM,CA+J1C"}
@@ -0,0 +1,184 @@
1
+ import { Router } from 'express';
2
+ import { requireAuth } from '../../auth/middleware.js';
3
+ import { listTables, getTableInfo } from '../../db/index.js';
4
+ import { hashPassword } from '../../auth/password.js';
5
+ export function createAdminRouter() {
6
+ const router = Router();
7
+ // All admin routes require auth
8
+ router.use(requireAuth);
9
+ // GET /api/admin/tables — list all non-join tables with column info
10
+ router.get('/tables', (req, res) => {
11
+ const db = req.db;
12
+ const tables = listTables(db);
13
+ const infos = tables.map((t) => getTableInfo(db, t));
14
+ res.json(infos);
15
+ });
16
+ // GET /api/admin/tables/:table — paginated rows
17
+ router.get('/tables/:table', (req, res) => {
18
+ const db = req.db;
19
+ const { table } = req.params;
20
+ if (!isValidTableName(table)) {
21
+ res.status(400).json({ error: 'Invalid table name' });
22
+ return;
23
+ }
24
+ const page = Math.max(1, parseInt(req.query.page || '1', 10));
25
+ const pageSize = Math.min(200, Math.max(1, parseInt(req.query.pageSize || '50', 10)));
26
+ const offset = (page - 1) * pageSize;
27
+ const orderBy = sanitizeColumn(req.query.orderBy) || 'rowid';
28
+ const dir = req.query.dir === 'desc' ? 'DESC' : 'ASC';
29
+ const total = db.prepare(`SELECT COUNT(*) as c FROM "${table}"`).get().c;
30
+ const rows = db
31
+ .prepare(`SELECT * FROM "${table}" ORDER BY "${orderBy}" ${dir} LIMIT ? OFFSET ?`)
32
+ .all(pageSize, offset);
33
+ res.json({ rows, total, page, pageSize });
34
+ });
35
+ // POST /api/admin/tables/:table — create row
36
+ router.post('/tables/:table', async (req, res) => {
37
+ const db = req.db;
38
+ const { table } = req.params;
39
+ if (!isValidTableName(table)) {
40
+ res.status(400).json({ error: 'Invalid table name' });
41
+ return;
42
+ }
43
+ const body = req.body;
44
+ const processed = await processRowData(db, table, body);
45
+ const cols = Object.keys(processed);
46
+ if (cols.length === 0) {
47
+ res.status(400).json({ error: 'No data provided' });
48
+ return;
49
+ }
50
+ const placeholders = cols.map(() => '?').join(', ');
51
+ const colList = cols.map((c) => `"${c}"`).join(', ');
52
+ const stmt = db.prepare(`INSERT INTO "${table}" (${colList}) VALUES (${placeholders})`);
53
+ const result = stmt.run(...Object.values(processed));
54
+ const newRow = db
55
+ .prepare(`SELECT * FROM "${table}" WHERE rowid = ?`)
56
+ .get(result.lastInsertRowid);
57
+ res.status(201).json(newRow);
58
+ });
59
+ // GET /api/admin/tables/:table/:id — get single row
60
+ router.get('/tables/:table/:id', (req, res) => {
61
+ const db = req.db;
62
+ const { table, id } = req.params;
63
+ if (!isValidTableName(table)) {
64
+ res.status(400).json({ error: 'Invalid table name' });
65
+ return;
66
+ }
67
+ const pkCol = getPrimaryKeyColumn(db, table);
68
+ const row = db
69
+ .prepare(`SELECT * FROM "${table}" WHERE "${pkCol}" = ?`)
70
+ .get(id);
71
+ if (!row) {
72
+ res.status(404).json({ error: 'Row not found' });
73
+ return;
74
+ }
75
+ res.json(row);
76
+ });
77
+ // PUT /api/admin/tables/:table/:id — update row
78
+ router.put('/tables/:table/:id', async (req, res) => {
79
+ const db = req.db;
80
+ const { table, id } = req.params;
81
+ if (!isValidTableName(table)) {
82
+ res.status(400).json({ error: 'Invalid table name' });
83
+ return;
84
+ }
85
+ const pkCol = getPrimaryKeyColumn(db, table);
86
+ const body = req.body;
87
+ const processed = await processRowData(db, table, body, true);
88
+ const cols = Object.keys(processed);
89
+ if (cols.length === 0) {
90
+ res.status(400).json({ error: 'No data provided' });
91
+ return;
92
+ }
93
+ const setClause = cols.map((c) => `"${c}" = ?`).join(', ');
94
+ db.prepare(`UPDATE "${table}" SET ${setClause} WHERE "${pkCol}" = ?`).run(...Object.values(processed), id);
95
+ const updated = db
96
+ .prepare(`SELECT * FROM "${table}" WHERE "${pkCol}" = ?`)
97
+ .get(id);
98
+ res.json(updated);
99
+ });
100
+ // DELETE /api/admin/tables/:table/:id — delete single row
101
+ router.delete('/tables/:table/:id', (req, res) => {
102
+ const db = req.db;
103
+ const { table, id } = req.params;
104
+ if (!isValidTableName(table)) {
105
+ res.status(400).json({ error: 'Invalid table name' });
106
+ return;
107
+ }
108
+ const pkCol = getPrimaryKeyColumn(db, table);
109
+ const result = db
110
+ .prepare(`DELETE FROM "${table}" WHERE "${pkCol}" = ?`)
111
+ .run(id);
112
+ if (result.changes === 0) {
113
+ res.status(404).json({ error: 'Row not found' });
114
+ return;
115
+ }
116
+ res.json({ ok: true });
117
+ });
118
+ // DELETE /api/admin/tables/:table — bulk delete (ids in body)
119
+ router.delete('/tables/:table', (req, res) => {
120
+ const db = req.db;
121
+ const { table } = req.params;
122
+ if (!isValidTableName(table)) {
123
+ res.status(400).json({ error: 'Invalid table name' });
124
+ return;
125
+ }
126
+ const { ids } = req.body;
127
+ if (!Array.isArray(ids) || ids.length === 0) {
128
+ res.status(400).json({ error: 'ids array required' });
129
+ return;
130
+ }
131
+ const pkCol = getPrimaryKeyColumn(db, table);
132
+ const placeholders = ids.map(() => '?').join(', ');
133
+ const result = db
134
+ .prepare(`DELETE FROM "${table}" WHERE "${pkCol}" IN (${placeholders})`)
135
+ .run(...ids);
136
+ res.json({ deleted: result.changes });
137
+ });
138
+ return router;
139
+ }
140
+ // ---------- helpers ----------
141
+ function isValidTableName(name) {
142
+ return /^[a-zA-Z_][a-zA-Z0-9_]*$/.test(name);
143
+ }
144
+ function sanitizeColumn(name) {
145
+ if (!name) {
146
+ return null;
147
+ }
148
+ return /^[a-zA-Z_][a-zA-Z0-9_]*$/.test(name) ? name : null;
149
+ }
150
+ function getPrimaryKeyColumn(db, table) {
151
+ const info = db.prepare(`PRAGMA table_info("${table}")`).all();
152
+ const pk = info.find((c) => c.pk > 0);
153
+ return pk?.name ?? 'id';
154
+ }
155
+ async function processRowData(db, table, body, isUpdate = false) {
156
+ const info = db.prepare(`PRAGMA table_info("${table}")`).all();
157
+ const result = {};
158
+ for (const col of info) {
159
+ if (isUpdate && col.pk > 0) {
160
+ continue;
161
+ } // don't update PK
162
+ if (!isUpdate && col.pk > 0 && col.type === 'INTEGER') {
163
+ continue;
164
+ } // auto-increment
165
+ const key = col.name;
166
+ if (!(key in body)) {
167
+ continue;
168
+ }
169
+ let val = body[key];
170
+ // Hash password columns
171
+ if (key.toLowerCase().includes('password') &&
172
+ typeof val === 'string' &&
173
+ val.trim() !== '') {
174
+ val = await hashPassword(val);
175
+ }
176
+ // Serialize objects/arrays to JSON
177
+ if (val !== null && typeof val === 'object') {
178
+ val = JSON.stringify(val);
179
+ }
180
+ result[key] = val;
181
+ }
182
+ return result;
183
+ }
184
+ //# sourceMappingURL=admin.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"admin.js","sourceRoot":"","sources":["../../../src/server/api/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,MAAM,UAAU,iBAAiB;IAC/B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,gCAAgC;IAChC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAExB,oEAAoE;IACpE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAG,CAAC;QACnB,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,gDAAgD;IAChD,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACxC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAG,CAAC;QACnB,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAE,GAAG,CAAC,KAAK,CAAC,IAAe,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACvB,GAAG,EACH,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAE,GAAG,CAAC,KAAK,CAAC,QAAmB,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAClE,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC;QACrC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,OAAiB,CAAC,IAAI,OAAO,CAAC;QACvE,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QAEtD,MAAM,KAAK,GACT,EAAE,CAAC,OAAO,CAAC,8BAA8B,KAAK,GAAG,CAAC,CAAC,GAAG,EACvD,CAAC,CAAC,CAAC;QACJ,MAAM,IAAI,GAAG,EAAE;aACZ,OAAO,CACN,kBAAkB,KAAK,eAAe,OAAO,KAAK,GAAG,mBAAmB,CACzE;aACA,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEzB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,6CAA6C;IAC7C,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,MAAM,EAAE,GAAG,GAAG,CAAC,EAAG,CAAC;QACnB,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAA+B,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB,gBAAgB,KAAK,MAAM,OAAO,aAAa,YAAY,GAAG,CAC/D,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,EAAE;aACd,OAAO,CAAC,kBAAkB,KAAK,mBAAmB,CAAC;aACnD,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,oDAAoD;IACpD,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,EAAE,GAAG,GAAG,CAAC,EAAG,CAAC;QACnB,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QACjC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC,kBAAkB,KAAK,YAAY,KAAK,OAAO,CAAC;aACxD,GAAG,CAAC,EAAE,CAAC,CAAC;QACX,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,gDAAgD;IAChD,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAG,CAAC;QACnB,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QACjC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,IAA+B,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,SAAS,WAAW,KAAK,OAAO,CAAC,CAAC,GAAG,CACvE,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAC3B,EAAE,CACH,CAAC;QACF,MAAM,OAAO,GAAG,EAAE;aACf,OAAO,CAAC,kBAAkB,KAAK,YAAY,KAAK,OAAO,CAAC;aACxD,GAAG,CAAC,EAAE,CAAC,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,0DAA0D;IAC1D,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,MAAM,EAAE,GAAG,GAAG,CAAC,EAAG,CAAC;QACnB,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QACjC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,EAAE;aACd,OAAO,CAAC,gBAAgB,KAAK,YAAY,KAAK,OAAO,CAAC;aACtD,GAAG,CAAC,EAAE,CAAC,CAAC;QACX,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,8DAA8D;IAC9D,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,EAAE,GAAG,GAAG,CAAC,EAAG,CAAC;QACnB,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,IAAoC,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,EAAE;aACd,OAAO,CAAC,gBAAgB,KAAK,YAAY,KAAK,SAAS,YAAY,GAAG,CAAC;aACvE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gCAAgC;AAEhC,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,IAAwB;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,SAAS,mBAAmB,CAC1B,EAAkC,EAClC,KAAa;IAEb,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,sBAAsB,KAAK,IAAI,CAAC,CAAC,GAAG,EAG1D,CAAC;IACH,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACtC,OAAO,EAAE,EAAE,IAAI,IAAI,IAAI,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,EAAkC,EAClC,KAAa,EACb,IAA6B,EAC7B,QAAQ,GAAG,KAAK;IAEhB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,sBAAsB,KAAK,IAAI,CAAC,CAAC,GAAG,EAI1D,CAAC;IAEH,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,QAAQ,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC,CAAC,kBAAkB;QACpB,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtD,SAAS;QACX,CAAC,CAAC,iBAAiB;QAEnB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpB,wBAAwB;QACxB,IACE,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;YACtC,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EACjB,CAAC;YACD,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAED,mCAAmC;QACnC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5C,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACpB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
@@ -0,0 +1,3 @@
1
+ import { Router } from 'express';
2
+ export declare function createAuthRouter(): Router;
3
+ //# sourceMappingURL=auth.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/server/api/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAOjC,wBAAgB,gBAAgB,IAAI,MAAM,CAuFzC"}
@@ -0,0 +1,66 @@
1
+ import { Router } from 'express';
2
+ import { v4 as uuidv4 } from 'uuid';
3
+ import { verifyPassword } from '../../auth/password.js';
4
+ import { requireAuth, SESSION_COOKIE } from '../../auth/middleware.js';
5
+ const SESSION_DURATION_DAYS = 7;
6
+ export function createAuthRouter() {
7
+ const router = Router();
8
+ // POST /api/auth/login
9
+ router.post('/login', async (req, res) => {
10
+ const { username, password } = req.body;
11
+ if (!username || !password) {
12
+ res.status(400).json({ error: 'Username and password are required' });
13
+ return;
14
+ }
15
+ const db = req.db;
16
+ const user = db
17
+ .prepare(`SELECT id, username, password, displayName FROM users WHERE username = ?`)
18
+ .get(username);
19
+ if (!user) {
20
+ res.status(401).json({ error: 'Invalid username or password' });
21
+ return;
22
+ }
23
+ const valid = await verifyPassword(password, user.password);
24
+ if (!valid) {
25
+ res.status(401).json({ error: 'Invalid username or password' });
26
+ return;
27
+ }
28
+ const sessionId = uuidv4();
29
+ const created = new Date().toISOString();
30
+ const expires = new Date(Date.now() + SESSION_DURATION_DAYS * 86400_000).toISOString();
31
+ const userAgent = req.headers['user-agent'] || '';
32
+ const ip = req.ip || '';
33
+ db.prepare(`
34
+ INSERT INTO sessions (id, userId, created, expires, userAgent, ip)
35
+ VALUES (?, ?, ?, ?, ?, ?)
36
+ `).run(sessionId, user.id, created, expires, userAgent, ip);
37
+ res.cookie(SESSION_COOKIE, sessionId, {
38
+ httpOnly: true,
39
+ secure: process.env.NODE_ENV === 'production',
40
+ sameSite: 'lax',
41
+ expires: new Date(expires),
42
+ });
43
+ res.json({
44
+ user: {
45
+ id: user.id,
46
+ username: user.username,
47
+ displayName: user.displayName,
48
+ },
49
+ });
50
+ });
51
+ // POST /api/auth/logout
52
+ router.post('/logout', requireAuth, (req, res) => {
53
+ const db = req.db;
54
+ if (req.sessionId) {
55
+ db.prepare(`DELETE FROM sessions WHERE id = ?`).run(req.sessionId);
56
+ }
57
+ res.clearCookie(SESSION_COOKIE);
58
+ res.json({ ok: true });
59
+ });
60
+ // GET /api/auth/me
61
+ router.get('/me', requireAuth, (req, res) => {
62
+ res.json({ user: req.user });
63
+ });
64
+ return router;
65
+ }
66
+ //# sourceMappingURL=auth.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/server/api/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAEvE,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,uBAAuB;IACvB,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAGlC,CAAC;QAEF,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,MAAM,EAAE,GAAG,GAAG,CAAC,EAAG,CAAC;QACnB,MAAM,IAAI,GAAG,EAAE;aACZ,OAAO,CACN,0EAA0E,CAC3E;aACA,GAAG,CAAC,QAAQ,CAOF,CAAC;QAEd,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,IAAI,CACtB,IAAI,CAAC,GAAG,EAAE,GAAG,qBAAqB,GAAG,SAAS,CAC/C,CAAC,WAAW,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QAExB,EAAE,CAAC,OAAO,CACR;;;KAGD,CACA,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAE3D,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE;YACpC,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;YAC7C,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC;SAC3B,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE;gBACJ,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,wBAAwB;IACxB,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,MAAM,EAAE,GAAG,GAAG,CAAC,EAAG,CAAC;QACnB,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,EAAE,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrE,CAAC;QACD,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,mBAAmB;IACnB,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}
@@ -0,0 +1,17 @@
1
+ import express from 'express';
2
+ export { runMigrations } from '../db/migrate.js';
3
+ export { hashPassword, verifyPassword } from '../auth/password.js';
4
+ export { getDb, listTables, getTableInfo, getSchemaVersion, setSchemaVersion, } from '../db/index.js';
5
+ export interface ServerOptions {
6
+ /** Absolute path to the SQLite database file */
7
+ dbPath: string;
8
+ /** Absolute path to the schemas directory */
9
+ schemasDir: string;
10
+ /** Absolute path to the built frontend dist directory (production only) */
11
+ staticDir?: string;
12
+ /** Port to listen on. Default: 3001 (dev) or 3000 (prod) */
13
+ port?: number;
14
+ }
15
+ export declare function createServer(options: ServerOptions): express.Express;
16
+ export declare function startServer(options: ServerOptions): void;
17
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAU9B,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EACL,KAAK,EACL,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,aAAa;IAC5B,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CA+BpE;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAUxD"}
@@ -0,0 +1,47 @@
1
+ import express from 'express';
2
+ import cookieParser from 'cookie-parser';
3
+ import path from 'path';
4
+ import fs from 'fs';
5
+ import { initDb, assertSchemaUpToDate } from '../db/index.js';
6
+ import { createAuthMiddleware } from '../auth/middleware.js';
7
+ import { createAuthRouter } from './api/auth.js';
8
+ import { createAdminRouter } from './api/admin.js';
9
+ // Re-export for convenience in consuming apps
10
+ export { runMigrations } from '../db/migrate.js';
11
+ export { hashPassword, verifyPassword } from '../auth/password.js';
12
+ export { getDb, listTables, getTableInfo, getSchemaVersion, setSchemaVersion, } from '../db/index.js';
13
+ export function createServer(options) {
14
+ const { dbPath, schemasDir } = options;
15
+ // Initialize DB and validate schema
16
+ const db = initDb(dbPath);
17
+ assertSchemaUpToDate(db, schemasDir);
18
+ const app = express();
19
+ app.set('trust proxy', 1);
20
+ app.use(express.json());
21
+ app.use(express.urlencoded({ extended: true }));
22
+ app.use(cookieParser());
23
+ // Attach DB + session to every request
24
+ app.use(createAuthMiddleware(db));
25
+ // Core API routes
26
+ app.use('/api/auth', createAuthRouter());
27
+ app.use('/api/admin', createAdminRouter());
28
+ // Serve static frontend in production
29
+ if (options.staticDir && fs.existsSync(options.staticDir)) {
30
+ app.use(express.static(options.staticDir));
31
+ // SPA fallback
32
+ app.get('*', (_req, res) => {
33
+ res.sendFile(path.join(options.staticDir, 'index.html'));
34
+ });
35
+ }
36
+ return app;
37
+ }
38
+ export function startServer(options) {
39
+ const app = createServer(options);
40
+ const port = options.port ?? (process.env.NODE_ENV === 'production' ? 3000 : 3001);
41
+ app.listen(port, () => {
42
+ console.log(`Server running on http://localhost:${port}`);
43
+ console.log(` NODE_ENV: ${process.env.NODE_ENV || 'development'}`);
44
+ console.log(` DB: ${options.dbPath}`);
45
+ });
46
+ }
47
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,YAAY,MAAM,eAAe,CAAC;AACzC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,8CAA8C;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EACL,KAAK,EACL,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAaxB,MAAM,UAAU,YAAY,CAAC,OAAsB;IACjD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAEvC,oCAAoC;IACpC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1B,oBAAoB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAErC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IAC1B,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IAExB,uCAAuC;IACvC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC;IAElC,kBAAkB;IAClB,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAE3C,sCAAsC;IACtC,IAAI,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3C,eAAe;QACf,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACzB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAsB;IAChD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,IAAI,GACR,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAExE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACpB,OAAO,CAAC,GAAG,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC"}
@@ -0,0 +1,53 @@
1
+ export interface User {
2
+ id: number;
3
+ username: string;
4
+ displayName: string | null;
5
+ preferences: Record<string, unknown>;
6
+ }
7
+ export interface Session {
8
+ id: string;
9
+ userId: number;
10
+ created: string;
11
+ expires: string;
12
+ userAgent: string;
13
+ ip: string;
14
+ }
15
+ export interface TableColumn {
16
+ cid: number;
17
+ name: string;
18
+ type: string;
19
+ notnull: number;
20
+ dflt_value: string | null;
21
+ pk: number;
22
+ }
23
+ export interface ForeignKey {
24
+ id: number;
25
+ seq: number;
26
+ table: string;
27
+ from: string;
28
+ to: string;
29
+ on_update: string;
30
+ on_delete: string;
31
+ match: string;
32
+ }
33
+ export interface TableInfo {
34
+ name: string;
35
+ columns: TableColumn[];
36
+ foreignKeys: ForeignKey[];
37
+ isJoinTable: boolean;
38
+ }
39
+ export interface PaginatedResult<T> {
40
+ rows: T[];
41
+ total: number;
42
+ page: number;
43
+ pageSize: number;
44
+ }
45
+ export interface ApiError {
46
+ error: string;
47
+ status: number;
48
+ }
49
+ export interface AuthenticatedRequest {
50
+ user?: User;
51
+ sessionId?: string;
52
+ }
53
+ //# sourceMappingURL=types.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAGD,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}
package/dist/types.js ADDED
@@ -0,0 +1,3 @@
1
+ // Shared TypeScript types for vlib
2
+ export {};
3
+ //# sourceMappingURL=types.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,mCAAmC"}
package/dist/vlib.css ADDED
@@ -0,0 +1 @@
1
+ .vl-nav{padding:var(--space-3) 0}.vl-nav__link{display:flex;align-items:center;gap:var(--space-2);padding:var(--space-2) var(--space-4);color:#ffffffd9;text-decoration:none;font-size:.9rem;border-left:3px solid transparent;transition:background .15s,color .15s,border-color .15s}.vl-nav__link:hover{background:#ffffff1a;color:#fff}.vl-nav__link--active{background:#ffffff1f;color:#fff}.vl-nav__link--exact-active{border-left-color:var(--color-accent);background:#ffffff26;color:#fff;font-weight:500}.vl-nav__link--child{padding-left:var(--space-8);font-size:.85rem}.vl-nav__link-icon{font-size:1rem;width:1.2em;text-align:center}.vl-nav__group-header{display:flex;align-items:center;gap:var(--space-2);width:100%;padding:var(--space-2) var(--space-4);background:none;border:none;color:#fff9;font-size:.75rem;font-weight:700;letter-spacing:.08em;text-transform:uppercase;cursor:pointer;text-align:left;transition:color .15s}.vl-nav__group-header:hover{color:#ffffffe6}.vl-nav__group-label{flex:1}.vl-nav__group-caret{font-size:.75rem;transition:transform .2s;display:inline-block}.vl-nav__group-caret--open{transform:rotate(90deg)}.vl-nav__group-icon{font-size:1rem;width:1.2em;text-align:center}.vl-app{display:flex;flex-direction:column;height:100vh;overflow:hidden}.vl-header{display:flex;align-items:center;justify-content:space-between;height:var(--header-height);padding:0 var(--space-4);background:var(--color-header);color:#fff;position:sticky;top:0;z-index:100;box-shadow:0 2px 4px #0003}.vl-header__left,.vl-header__right{display:flex;align-items:center;gap:var(--space-3)}.vl-header__title{font-size:1.2rem;font-weight:600;letter-spacing:.02em}.vl-hamburger{display:none;flex-direction:column;gap:5px;background:none;border:none;cursor:pointer;padding:var(--space-1)}.vl-hamburger__bar{display:block;width:22px;height:2px;background:#fff;border-radius:2px;transition:all .2s}@media(max-width:767px){.vl-hamburger{display:flex}}.vl-body{display:flex;flex:1;overflow:hidden;position:relative}.vl-sidebar-overlay{display:none;position:fixed;top:0;right:0;bottom:0;left:0;background:#0006;z-index:49}@media(max-width:767px){.vl-sidebar-overlay{display:block}}.vl-sidebar{width:var(--sidebar-width);background:var(--color-sidebar);color:#fff;overflow-y:auto;flex-shrink:0;transition:transform .25s ease}@media(max-width:767px){.vl-sidebar{position:fixed;top:var(--header-height);left:0;bottom:0;z-index:50;transform:translate(-100%)}.vl-sidebar--open{transform:translate(0)}}.vl-main{flex:1;overflow-y:auto;padding:var(--space-6);background:var(--color-background)}@media(max-width:767px){.vl-main{padding:var(--space-4)}}.vl-user-menu{position:relative}.vl-user-menu__btn{display:flex;align-items:center;gap:var(--space-2);background:#ffffff26;border:1px solid rgba(255,255,255,.3);color:#fff;padding:var(--space-1) var(--space-3);border-radius:var(--radius);cursor:pointer;font-size:.875rem;transition:background .15s}.vl-user-menu__btn:hover{background:#ffffff40}.vl-user-menu__name{max-width:160px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.vl-user-menu__dropdown{position:absolute;top:calc(100% + 6px);right:0;background:#fff;border:1px solid var(--color-border);border-radius:var(--radius);box-shadow:0 4px 12px #00000026;min-width:160px;overflow:hidden;z-index:200}.vl-user-menu__item{display:block;width:100%;text-align:left;padding:var(--space-2) var(--space-4);background:none;border:none;cursor:pointer;color:var(--color-text);font-size:.875rem;transition:background .15s}.vl-user-menu__item:hover{background:var(--color-background)}.vl-table-view{background:#fff;border-radius:var(--radius-lg);box-shadow:var(--shadow);overflow:hidden}.vl-table-view__toolbar{display:flex;align-items:center;justify-content:space-between;padding:var(--space-3) var(--space-4);border-bottom:1px solid var(--color-border);gap:var(--space-3);flex-wrap:wrap}.vl-table-view__toolbar-left,.vl-table-view__toolbar-right{display:flex;align-items:center;gap:var(--space-2)}.vl-table-view__selected-count{font-size:.875rem;color:var(--color-primary);font-weight:500}.vl-table-view__scroll{overflow-x:auto}.vl-table-view__pagination{display:flex;align-items:center;gap:var(--space-3);justify-content:center;padding:var(--space-3) var(--space-4);border-top:1px solid var(--color-border);font-size:.875rem;color:var(--color-text-secondary)}.vl-table{width:100%;border-collapse:collapse;font-size:.875rem}.vl-table__th{padding:var(--space-2) var(--space-3);text-align:left;font-weight:600;color:var(--color-text-secondary);border-bottom:2px solid var(--color-border);white-space:nowrap;background:var(--color-background)}.vl-table__th--check,.vl-table__th--actions{width:1%;white-space:nowrap}.vl-table__th--sortable{cursor:pointer;-webkit-user-select:none;user-select:none}.vl-table__th--sortable:hover{color:var(--color-primary)}.vl-table__td{padding:var(--space-2) var(--space-3);border-bottom:1px solid var(--color-border);color:var(--color-text);max-width:300px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.vl-table__td--check,.vl-table__td--actions{width:1%;white-space:nowrap}.vl-table__td--actions{display:flex;gap:var(--space-1)}.vl-table__tr{transition:background .1s}.vl-table__tr:hover{background:var(--color-background)}.vl-table__tr--selected{background:color-mix(in srgb,var(--color-primary) 8%,white)}.vl-table__tr--selected:hover{background:color-mix(in srgb,var(--color-primary) 12%,white)}.vl-table__sort-icon{margin-left:var(--space-1);color:var(--color-primary)}.vl-table__empty{padding:var(--space-8) var(--space-4);text-align:center;color:var(--color-text-secondary);font-style:italic}.vl-btn{display:inline-flex;align-items:center;gap:var(--space-1);padding:var(--space-2) var(--space-3);border-radius:var(--radius);border:1px solid var(--color-border);background:#fff;color:var(--color-text);font-size:.875rem;cursor:pointer;transition:all .15s;white-space:nowrap}.vl-btn:hover:not(:disabled){background:var(--color-background);border-color:var(--color-primary-light);color:var(--color-primary)}.vl-btn:disabled{opacity:.45;cursor:not-allowed}.vl-btn--primary{background:var(--color-primary);border-color:var(--color-primary);color:#fff}.vl-btn--primary:hover:not(:disabled){background:var(--color-primary-dark);border-color:var(--color-primary-dark);color:#fff}.vl-btn--danger{color:var(--color-danger);border-color:var(--color-danger)}.vl-btn--danger:hover:not(:disabled){background:var(--color-danger);color:#fff}.vl-btn--sm{padding:var(--space-1) var(--space-2);font-size:.8rem}.vl-admin-table__header{display:flex;align-items:center;justify-content:space-between;margin-bottom:var(--space-4)}.vl-admin-table__title{font-size:1.5rem;font-weight:700;color:var(--color-text);text-transform:capitalize}.vl-alert{padding:var(--space-3) var(--space-4);border-radius:var(--radius);margin-bottom:var(--space-4);font-size:.875rem}.vl-alert--error{background:#fef2f2;border:1px solid #fecaca;color:#dc2626}.vl-alert--success{background:#f0fdf4;border:1px solid #bbf7d0;color:#16a34a}.vl-modal-overlay{position:fixed;top:0;right:0;bottom:0;left:0;background:#00000080;display:flex;align-items:center;justify-content:center;z-index:300}.vl-modal{background:#fff;border-radius:var(--radius-lg);padding:var(--space-6);min-width:320px;max-width:480px;box-shadow:0 20px 60px #0000004d}.vl-modal__title{font-size:1.1rem;font-weight:700;margin-bottom:var(--space-3);color:var(--color-text)}.vl-modal p{color:var(--color-text-secondary);margin-bottom:var(--space-5);line-height:1.5}.vl-modal__actions{display:flex;gap:var(--space-2);justify-content:flex-end}.vl-admin-form{max-width:720px}.vl-admin-form__header{margin-bottom:var(--space-5)}.vl-admin-form__title{font-size:1.5rem;font-weight:700;color:var(--color-text);margin-top:var(--space-2)}.vl-admin-form__loading{color:var(--color-text-secondary);padding:var(--space-6);text-align:center}.vl-back-link{font-size:.875rem;color:var(--color-primary);text-decoration:none}.vl-back-link:hover{text-decoration:underline}.vl-form{background:#fff;border-radius:var(--radius-lg);box-shadow:var(--shadow);padding:var(--space-6)}.vl-form__field{margin-bottom:var(--space-4)}.vl-form__field-header{display:flex;align-items:center;gap:var(--space-2);margin-bottom:var(--space-1)}.vl-form__field-enable{width:16px;height:16px;cursor:pointer}.vl-form__label{font-size:.875rem;font-weight:600;color:var(--color-text);display:flex;align-items:center;gap:var(--space-2)}.vl-form__type{font-size:.75rem;font-weight:400;color:var(--color-text-secondary);font-family:monospace}.vl-form__required{color:var(--color-danger)}.vl-form__input{display:block;width:100%;padding:var(--space-2) var(--space-3);border:1px solid var(--color-border);border-radius:var(--radius);font-size:.875rem;color:var(--color-text);background:#fff;transition:border-color .15s,box-shadow .15s;box-sizing:border-box}.vl-form__input:focus{outline:none;border-color:var(--color-primary-light);box-shadow:0 0 0 3px color-mix(in srgb,var(--color-primary) 20%,transparent)}.vl-form__input--disabled{background:var(--color-background);color:var(--color-text-secondary);cursor:not-allowed}.vl-form__input--textarea{resize:vertical;font-family:monospace}.vl-form__checkbox{width:18px;height:18px;cursor:pointer}.vl-form__input-wrap{position:relative}.vl-form__multi-warn{font-size:.75rem;color:var(--color-danger);margin-top:var(--space-1);display:block}.vl-form__actions{display:flex;gap:var(--space-3);justify-content:flex-end;padding-top:var(--space-4);border-top:1px solid var(--color-border);margin-top:var(--space-5)}