create-ishvexa-app 1.0.0

package/templates/smartshop-app/backend/package.json

@@ -0,0 +1,26 @@
+{
+  "name": "backend",
+  "version": "1.0.0",
+  "description": "Sales management backend",
+  "type": "module",
+  "main": "src/server.js",
+  "scripts": {
+    "db:init": "bash -c 'set -a && source .env && set +a && if [ -n \"$DB_PASSWORD\" ]; then mysql -h \"$DB_HOST\" -P \"$DB_PORT\" -u \"$DB_USER\" -p\"$DB_PASSWORD\" < database/schema.sql; else mysql -h \"$DB_HOST\" -P \"$DB_PORT\" -u \"$DB_USER\" < database/schema.sql; fi'",
+    "db:reset": "bash -c 'set -a && source .env && set +a && if [ -n \"$DB_PASSWORD\" ]; then mysql -h \"$DB_HOST\" -P \"$DB_PORT\" -u \"$DB_USER\" -p\"$DB_PASSWORD\" -e \"DROP DATABASE IF EXISTS $DB_NAME;\" && mysql -h \"$DB_HOST\" -P \"$DB_PORT\" -u \"$DB_USER\" -p\"$DB_PASSWORD\" < database/schema.sql; else mysql -h \"$DB_HOST\" -P \"$DB_PORT\" -u \"$DB_USER\" -e \"DROP DATABASE IF EXISTS $DB_NAME;\" && mysql -h \"$DB_HOST\" -P \"$DB_PORT\" -u \"$DB_USER\" < database/schema.sql; fi'",
+    "dev": "nodemon src/server.js",
+    "start": "node src/server.js"
+  },
+  "author": "",
+  "license": "ISC",
+  "dependencies": {
+    "bcryptjs": "^3.0.3",
+    "cors": "^2.8.6",
+    "dotenv": "^17.4.2",
+    "express": "^5.2.1",
+    "jsonwebtoken": "^9.0.3",
+    "mysql2": "^3.22.4"
+  },
+  "devDependencies": {
+    "nodemon": "^3.1.14"
+  }
+}

package/templates/smartshop-app/backend/src/app.js

@@ -0,0 +1,57 @@
+import express from "express";
+import cors from "cors";
+import { query } from "./config/db.js";
+
+import authRoutes from "./routes/authRoutes.js";
+import productRoutes from "./routes/productRoutes.js";
+import customerRoutes from "./routes/customerRoutes.js";
+import saleRoutes from "./routes/saleRoutes.js";
+import reportRoutes from "./routes/reportRoutes.js";
+import authMiddleware from "./middleware/authMiddleware.js";
+
+const app = express();
+
+app.use(cors());
+app.use(express.json());
+
+app.get("/api/health", (_req, res) => {
+  res.json({ status: "ok", service: "SMS API" });
+});
+
+app.get("/api/health/database", async (_req, res) => {
+  try {
+    await query("SELECT 1");
+    res.json({
+      status: "ok",
+      database: "running",
+      message: "Database is running.",
+    });
+  } catch (error) {
+    // eslint-disable-next-line no-console
+    console.error("[DB HEALTH CHECK] Database check failed.");
+    // eslint-disable-next-line no-console
+    console.error(`[DB HEALTH CHECK] Code: ${error?.code || "UNKNOWN"}`);
+    // eslint-disable-next-line no-console
+    console.error(`[DB HEALTH CHECK] Message: ${error?.message || "No message provided."}`);
+    res.status(503).json({
+      status: "error",
+      database: "not running",
+      message: "Database is not running or connection failed.",
+      errorCode: error?.code || "UNKNOWN",
+      errorReason: error?.message || "No reason provided.",
+    });
+  }
+});
+
+app.use("/api/auth", authRoutes);
+app.use("/api/products", authMiddleware, productRoutes);
+app.use("/api/customers", authMiddleware, customerRoutes);
+app.use("/api/sales", authMiddleware, saleRoutes);
+app.use("/api/reports", authMiddleware, reportRoutes);
+
+app.use((error, _req, res, _next) => {
+  const message = error?.message || "Server error";
+  res.status(500).json({ message });
+});
+
+export default app;

package/templates/smartshop-app/backend/src/config/db.js

@@ -0,0 +1,52 @@
+import mysql from "mysql2/promise";
+import dotenv from "dotenv";
+
+dotenv.config();
+
+const pool = mysql.createPool({
+  host: process.env.DB_HOST || "localhost",
+  user: process.env.DB_USER || "student",
+  password: process.env.DB_PASSWORD || "",
+  database: process.env.DB_NAME || "smartshop_db",
+  port: Number(process.env.DB_PORT || 3306),
+  waitForConnections: true,
+  connectionLimit: 10,
+  queueLimit: 0,
+});
+
+const getFailureReason = (error) => {
+  const reasons = {
+    ECONNREFUSED: "MySQL server is not started or host/port is wrong.",
+    ER_ACCESS_DENIED_ERROR: "Invalid database username or password.",
+    ER_BAD_DB_ERROR: "Database name does not exist.",
+    ETIMEDOUT: "Database connection timed out.",
+  };
+
+  return reasons[error?.code] || "Unknown database connection issue.";
+};
+
+export const query = async (sql, params = []) => {
+  const [rows] = await pool.execute(sql, params);
+  return rows;
+};
+
+export const checkDatabaseConnection = async () => {
+  try {
+    await query("SELECT 1");
+    
+    console.log("[DB] Connection successful. Database is running.");
+    return { ok: true };
+  } catch (error) {
+   
+    console.error("[DB] CONNECTION FAILED");
+   
+    console.error(`[DB] Error code: ${error?.code || "UNKNOWN"}`);
+  
+    console.error(`[DB] Error message: ${error?.message || "No message provided."}`);
+
+    console.error(`[DB] Reason: ${getFailureReason(error)}`);
+    return { ok: false, error, reason: getFailureReason(error) };
+  }
+};
+
+export default pool;

package/templates/smartshop-app/backend/src/controllers/authController.js

@@ -0,0 +1,98 @@
+import bcrypt from "bcryptjs";
+import jwt from "jsonwebtoken";
+import { createUser, findUserByUsername, findUserByEmail, updatePasswordByEmail } from "../models/authModel.js";
+
+const createAccessToken = (payload) =>
+  jwt.sign(payload, process.env.JWT_SECRET || "smartshop_student_project_secret", {
+    expiresIn: "8h",
+  });
+
+const normalizeEmail = (email) => String(email || "").trim().toLowerCase();
+
+export const register = async (req, res) => {
+  const { username, email, password } = req.body;
+  if (!username || !email || !password) {
+    return res.status(400).json({ message: "Username, email and password are required." });
+  }
+  const emailNorm = normalizeEmail(email);
+  if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(emailNorm)) {
+    return res.status(400).json({ message: "Enter a valid email address." });
+  }
+
+  const existing = await findUserByUsername(username.trim());
+  if (existing.length) {
+    return res.status(409).json({ message: "Username already exists." });
+  }
+  const existingEmail = await findUserByEmail(emailNorm);
+  if (existingEmail.length) {
+    return res.status(409).json({ message: "Email already registered." });
+  }
+
+  const hashedPassword = await bcrypt.hash(password, 10);
+  const result = await createUser({ username: username.trim(), email: emailNorm, password: hashedPassword });
+  return res.status(201).json({
+    message: "Registration successful.",
+    userId: result.insertId,
+  });
+};
+
+export const login = async (req, res) => {
+  const { username, password } = req.body;
+  if (!username || !password) {
+    return res.status(400).json({ message: "Username and password are required." });
+  }
+
+  const users = await findUserByUsername(username.trim());
+  if (!users.length) {
+    return res.status(401).json({ message: "Invalid credentials." });
+  }
+
+  const user = users[0];
+  const match = await bcrypt.compare(password, user.password);
+  if (!match) {
+    return res.status(401).json({ message: "Invalid credentials." });
+  }
+
+  const token = createAccessToken({
+    userId: user.user_id,
+    username: user.username,
+    role: user.role,
+  });
+
+  return res.json({
+    message: "Login successful.",
+    token,
+    user: { user_id: user.user_id, username: user.username, role: user.role },
+  });
+};
+
+export const forgotPassword = async (req, res) => {
+  try {
+    const { email, newPassword, confirmPassword } = req.body;
+    if (!email) {
+      return res.status(400).json({ success: false, message: "Email is required." });
+    }
+    if (!newPassword) {
+      return res.status(400).json({ success: false, message: "New password is required." });
+    }
+    if (!confirmPassword) {
+      return res.status(400).json({ success: false, message: "Confirm password is required." });
+    }
+    if (newPassword !== confirmPassword) {
+      return res.status(400).json({
+        success: false,
+        message: "New password and confirm password must match.",
+      });
+    }
+    const emailNorm = normalizeEmail(email);
+    const rows = await findUserByEmail(emailNorm);
+    if (!rows.length) {
+      return res.status(404).json({ success: false, message: "User not found" });
+    }
+    const hash = await bcrypt.hash(newPassword, 10);
+    await updatePasswordByEmail(emailNorm, hash);
+    return res.json({ success: true, message: "Password reset successfully" });
+  } catch {
+    return res.status(500).json({ success: false, message: "Server error." });
+  }
+};

package/templates/smartshop-app/backend/src/controllers/customerController.js

@@ -0,0 +1,26 @@
+import * as customerModel from "../models/customerModel.js";
+
+export const getCustomers = async (req, res) => {
+  const { q } = req.query;
+  const customers = q
+    ? await customerModel.searchCustomers(q)
+    : await customerModel.getAllCustomers();
+  res.json(customers);
+};
+
+export const addCustomer = async (req, res) => {
+  const result = await customerModel.createCustomer(req.body);
+  res
+    .status(201)
+    .json({ message: "Customer created.", customerId: result.insertId });
+};
+
+export const editCustomer = async (req, res) => {
+  await customerModel.updateCustomer(req.params.id, req.body);
+  res.json({ message: "Customer updated." });
+};
+
+export const removeCustomer = async (req, res) => {
+  await customerModel.deleteCustomer(req.params.id);
+  res.json({ message: "Customer deleted." });
+};

package/templates/smartshop-app/backend/src/controllers/productController.js

@@ -0,0 +1,21 @@
+import * as productModel from "../models/productModel.js";
+
+export const getProducts = async (_req, res) => {
+  const products = await productModel.getAllProducts();
+  res.json(products);
+};
+
+export const addProduct = async (req, res) => {
+  const result = await productModel.createProduct(req.body);
+  res.status(201).json({ message: "Product created.", productId: result.insertId });
+};
+
+export const editProduct = async (req, res) => {
+  await productModel.updateProduct(req.params.id, req.body);
+  res.json({ message: "Product updated." });
+};
+
+export const removeProduct = async (req, res) => {
+  await productModel.deleteProduct(req.params.id);
+  res.json({ message: "Product deleted." });
+};

package/templates/smartshop-app/backend/src/controllers/reportController.js

@@ -0,0 +1,29 @@
+import * as reportModel from "../models/reportModel.js";
+
+export const dashboardSummary = async (_req, res) => {
+  const [summary] = await reportModel.getDashboardSummary();
+  res.json(summary);
+};
+
+export const dailySales = async (req, res) => {
+  const { date } = req.query;
+  const rows = await reportModel.getDailySalesReport(date);
+  res.json(rows);
+};
+
+export const monthlySales = async (req, res) => {
+  const { startDate, endDate } = req.query;
+  const rows = await reportModel.getMonthlySalesReport(startDate, endDate);
+  res.json(rows);
+};
+
+export const productStock = async (_req, res) => {
+  const rows = await reportModel.getProductStockReport();
+  res.json(rows);
+};
+
+export const customerPurchases = async (req, res) => {
+  const { customerName = "" } = req.query;
+  const rows = await reportModel.getCustomerPurchasesReport(customerName);
+  res.json(rows);
+};

package/templates/smartshop-app/backend/src/controllers/saleController.js

@@ -0,0 +1,11 @@
+import * as saleModel from "../models/saleModel.js";
+
+export const getSales = async (_req, res) => {
+  const sales = await saleModel.getSales();
+  res.json(sales);
+};
+
+export const recordSale = async (req, res) => {
+  const saleId = await saleModel.createSale(req.body);
+  res.status(201).json({ message: "Sale recorded.", saleId });
+};

package/templates/smartshop-app/backend/src/middleware/authMiddleware.js

@@ -0,0 +1,22 @@
+import jwt from "jsonwebtoken";
+
+const authMiddleware = (req, res, next) => {
+  const authHeader = req.headers.authorization;
+  if (!authHeader || !authHeader.startsWith("Bearer ")) {
+    return res.status(401).json({ message: "Missing authorization token." });
+  }
+
+  const token = authHeader.split(" ")[1];
+  try {
+    const decoded = jwt.verify(
+      token,
+      process.env.JWT_SECRET || "smartshop_student_project_secret"
+    );
+    req.user = decoded;
+    return next();
+  } catch {
+    return res.status(401).json({ message: "Invalid or expired token." });
+  }
+};
+
+export default authMiddleware;

package/templates/smartshop-app/backend/src/models/authModel.js

@@ -0,0 +1,24 @@
+import { query } from "../config/db.js";
+
+export const findUserByUsername = (username) =>
+  query(
+    "SELECT user_id, username, email, password, role FROM users WHERE username = ?",
+    [username]
+  );
+
+export const findUserByEmail = (email) =>
+  query(
+    "SELECT user_id, username, email, password, role FROM users WHERE email = ?",
+    [email]
+  );
+
+export const createUser = ({ username, email, password, role = "student" }) =>
+  query("INSERT INTO users (username, email, password, role) VALUES (?, ?, ?, ?)", [
+    username,
+    email,
+    password,
+    role,
+  ]);
+
+export const updatePasswordByEmail = (email, password) =>
+  query("UPDATE users SET password = ? WHERE email = ?", [password, email]);

package/templates/smartshop-app/backend/src/models/customerModel.js

@@ -0,0 +1,43 @@
+import pool, { query } from "../config/db.js";
+
+export const getAllCustomers = () =>
+  query("SELECT * FROM customers ORDER BY registration_date DESC");
+
+export const searchCustomers = (term) =>
+  query(
+    `SELECT *
+     FROM customers
+     WHERE full_name LIKE ? OR phone_number LIKE ? OR email LIKE ?
+     ORDER BY registration_date DESC`,
+    [`%${term}%`, `%${term}%`, `%${term}%`]
+  );
+
+export const createCustomer = (payload) =>
+  query(
+    `INSERT INTO customers (full_name, phone_number, email, address, registration_date)
+     VALUES (?, ?, ?, ?, NOW())`,
+    [payload.fullName, payload.phoneNumber, payload.email, payload.address]
+  );
+
+export const updateCustomer = (id, payload) =>
+  query(
+    `UPDATE customers
+     SET full_name = ?, phone_number = ?, email = ?, address = ?
+     WHERE customer_id = ?`,
+    [payload.fullName, payload.phoneNumber, payload.email, payload.address, id]
+  );
+
+export const deleteCustomer = async (id) => {
+  const connection = await pool.getConnection();
+  try {
+    await connection.beginTransaction();
+    await connection.execute("DELETE FROM sales WHERE customer_id = ?", [id]);
+    await connection.execute("DELETE FROM customers WHERE customer_id = ?", [id]);
+    await connection.commit();
+  } catch (error) {
+    await connection.rollback();
+    throw error;
+  } finally {
+    connection.release();
+  }
+};

package/templates/smartshop-app/backend/src/models/productModel.js

@@ -0,0 +1,37 @@
+import pool, { query } from "../config/db.js";
+
+export const getAllProducts = () =>
+  query("SELECT * FROM products ORDER BY created_at DESC");
+
+export const createProduct = (payload) =>
+  query(
+    `INSERT INTO products (product_name, category, quantity, price, created_at)
+     VALUES (?, ?, ?, ?, NOW())`,
+    [payload.productName, payload.category, payload.quantity, payload.price]
+  );
+
+export const updateProduct = (id, payload) =>
+  query(
+    `UPDATE products
+     SET product_name = ?, category = ?, quantity = ?, price = ?
+     WHERE product_id = ?`,
+    [payload.productName, payload.category, payload.quantity, payload.price, id]
+  );
+
+export const deleteProduct = async (id) => {
+  const connection = await pool.getConnection();
+  try {
+    await connection.beginTransaction();
+    await connection.execute("DELETE FROM sales WHERE product_id = ?", [id]);
+    await connection.execute("DELETE FROM products WHERE product_id = ?", [id]);
+    await connection.commit();
+  } catch (error) {
+    await connection.rollback();
+    throw error;
+  } finally {
+    connection.release();
+  }
+};
+
+export const getProductById = (id) =>
+  query("SELECT * FROM products WHERE product_id = ?", [id]);

package/templates/smartshop-app/backend/src/models/reportModel.js

@@ -0,0 +1,56 @@
+import { query } from "../config/db.js";
+
+export const getDailySalesReport = (date) =>
+  query(
+    `SELECT s.sale_id, c.full_name AS customer_name, p.product_name, s.quantity,
+            s.unit_price, s.total_price, s.sale_date
+     FROM sales s
+     JOIN customers c ON c.customer_id = s.customer_id
+     JOIN products p ON p.product_id = s.product_id
+     WHERE DATE(s.sale_date) = ?
+     ORDER BY s.sale_date DESC`,
+    [date]
+  );
+
+export const getMonthlySalesReport = (startDate, endDate) =>
+  query(
+    `SELECT s.sale_id, c.full_name AS customer_name, p.product_name, s.quantity,
+            s.unit_price, s.total_price, s.sale_date
+     FROM sales s
+     JOIN customers c ON c.customer_id = s.customer_id
+     JOIN products p ON p.product_id = s.product_id
+     WHERE DATE(s.sale_date) BETWEEN ? AND ?
+     ORDER BY s.sale_date DESC`,
+    [startDate, endDate]
+  );
+
+export const getProductStockReport = () =>
+  query(
+    `SELECT p.product_id, p.product_name, p.quantity AS available_stock,
+            COALESCE(SUM(s.quantity), 0) AS sold_stock
+     FROM products p
+     LEFT JOIN sales s ON s.product_id = p.product_id
+     GROUP BY p.product_id, p.product_name, p.quantity
+     ORDER BY p.product_name`
+  );
+
+export const getCustomerPurchasesReport = (customerName) =>
+  query(
+    `SELECT s.sale_id, c.full_name AS customer_name, p.product_name, s.quantity,
+            s.unit_price, s.total_price, s.sale_date
+     FROM sales s
+     JOIN customers c ON c.customer_id = s.customer_id
+     JOIN products p ON p.product_id = s.product_id
+     WHERE c.full_name LIKE ?
+     ORDER BY s.sale_date DESC`,
+    [`%${customerName}%`]
+  );
+
+export const getDashboardSummary = () =>
+  query(
+    `SELECT
+        (SELECT COUNT(*) FROM products) AS total_products,
+        (SELECT COUNT(*) FROM customers) AS total_customers,
+        (SELECT COUNT(*) FROM sales) AS total_sales,
+        (SELECT COALESCE(SUM(total_price), 0) FROM sales) AS total_revenue`
+  );

package/templates/smartshop-app/backend/src/models/saleModel.js

@@ -0,0 +1,54 @@
+import pool, { query } from "../config/db.js";
+
+export const getSales = () =>
+  query(
+    `SELECT s.sale_id, s.quantity, s.unit_price, s.total_price, s.sale_date,
+            c.customer_id, c.full_name AS customer_name,
+            p.product_id, p.product_name
+     FROM sales s
+     JOIN customers c ON c.customer_id = s.customer_id
+     JOIN products p ON p.product_id = s.product_id
+     ORDER BY s.sale_date DESC`
+  );
+
+export const createSale = async ({ customerId, productId, quantity }) => {
+  const connection = await pool.getConnection();
+  try {
+    await connection.beginTransaction();
+
+    const [products] = await connection.execute(
+      "SELECT product_id, product_name, price, quantity FROM products WHERE product_id = ? FOR UPDATE",
+      [productId]
+    );
+    if (!products.length) {
+      throw new Error("Product not found.");
+    }
+
+    const product = products[0];
+    if (Number(product.quantity) < Number(quantity)) {
+      throw new Error("Insufficient stock.");
+    }
+
+    const unitPrice = Number(product.price);
+    const totalPrice = unitPrice * Number(quantity);
+
+    const [result] = await connection.execute(
+      `INSERT INTO sales (customer_id, product_id, quantity, unit_price, total_price, sale_date)
+       VALUES (?, ?, ?, ?, ?, NOW())`,
+      [customerId, productId, quantity, unitPrice, totalPrice]
+    );
+
+    await connection.execute(
+      "UPDATE products SET quantity = quantity - ? WHERE product_id = ?",
+      [quantity, productId]
+    );
+
+    await connection.commit();
+    return result.insertId;
+  } catch (error) {
+    await connection.rollback();
+    throw error;
+  } finally {
+    connection.release();
+  }
+};

package/templates/smartshop-app/backend/src/routes/authRoutes.js

@@ -0,0 +1,10 @@
+import { Router } from "express";
+import { login, register, forgotPassword } from "../controllers/authController.js";
+
+const router = Router();
+
+router.post("/register", register);
+router.post("/login", login);
+router.post("/forgot-password", forgotPassword);
+
+export default router;

package/templates/smartshop-app/backend/src/routes/customerRoutes.js

@@ -0,0 +1,16 @@
+import { Router } from "express";
+import {
+  addCustomer,
+  editCustomer,
+  getCustomers,
+  removeCustomer,
+} from "../controllers/customerController.js";
+
+const router = Router();
+
+router.get("/", getCustomers);
+router.post("/", addCustomer);
+router.put("/:id", editCustomer);
+router.delete("/:id", removeCustomer);
+
+export default router;

package/templates/smartshop-app/backend/src/routes/productRoutes.js

@@ -0,0 +1,16 @@
+import { Router } from "express";
+import {
+  addProduct,
+  editProduct,
+  getProducts,
+  removeProduct,
+} from "../controllers/productController.js";
+
+const router = Router();
+
+router.get("/", getProducts);
+router.post("/", addProduct);
+router.put("/:id", editProduct);
+router.delete("/:id", removeProduct);
+
+export default router;

package/templates/smartshop-app/backend/src/routes/reportRoutes.js

@@ -0,0 +1,18 @@
+import { Router } from "express";
+import {
+  customerPurchases,
+  dailySales,
+  dashboardSummary,
+  monthlySales,
+  productStock,
+} from "../controllers/reportController.js";
+
+const router = Router();
+
+router.get("/dashboard", dashboardSummary);
+router.get("/daily-sales", dailySales);
+router.get("/monthly-sales", monthlySales);
+router.get("/product-stock", productStock);
+router.get("/customer-purchases", customerPurchases);
+
+export default router;

package/templates/smartshop-app/backend/src/routes/saleRoutes.js

@@ -0,0 +1,9 @@
+import { Router } from "express";
+import { getSales, recordSale } from "../controllers/saleController.js";
+
+const router = Router();
+
+router.get("/", getSales);
+router.post("/", recordSale);
+
+export default router;

package/templates/smartshop-app/backend/src/server.js

@@ -0,0 +1,19 @@
+import app from "./app.js";
+import { checkDatabaseConnection } from "./config/db.js";
+
+const PORT = Number(process.env.PORT || 5000);
+
+const startServer = async () => {
+  const dbStatus = await checkDatabaseConnection();
+
+  app.listen(PORT, () => {
+    // eslint-disable-next-line no-console
+    console.log(`SMS backend running on port ${PORT}`);
+    if (!dbStatus.ok) {
+      // eslint-disable-next-line no-console
+      console.error("[SERVER] API started, but database connection failed.");
+    }
+  });
+};
+
+startServer();