create-jen-app 0.1.0

package/templates/static/lib/core/routes/scan.js

@@ -0,0 +1,148 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import { readdirSync, statSync } from "node:fs";
+import { join, relative, sep } from "node:path";
+function walk(dir) {
+    const out = [];
+    for (const name of readdirSync(dir)) {
+        const p = join(dir, name);
+        const st = statSync(p);
+        if (st.isDirectory())
+            out.push(...walk(p));
+        else
+            out.push(p);
+    }
+    return out;
+}
+function normalizeSlashes(p) {
+    return p.split(sep).join("/");
+}
+function escapeRegex(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function segmentToRegex(seg, paramNames) {
+    // (id) => ([^/]+)
+    // (...rest) => (.*)
+    if (seg.startsWith("...")) {
+        const name = seg.slice(3);
+        paramNames.push(name);
+        return "(.*)";
+    }
+    paramNames.push(seg);
+    return "([^/]+)";
+}
+function buildRoutePattern(urlPath) {
+    // Convert /user/:id into regex
+    // We store urlPath with placeholders already replaced during scan
+    const parts = urlPath.split("/").filter(Boolean);
+    const paramNames = [];
+    const regexParts = parts.map((p) => {
+        if (p.startsWith(":")) {
+            paramNames.push(p.slice(1));
+            return "([^/]+)";
+        }
+        if (p.startsWith("*")) {
+            paramNames.push(p.slice(1));
+            return "(.*)";
+        }
+        return escapeRegex(p);
+    });
+    const src = "^/" + regexParts.join("/") + "/?$";
+    return { src, paramNames };
+}
+export function scanRoutes(config) {
+    const siteRoot = join(process.cwd(), config.siteDir);
+    const files = walk(siteRoot);
+    const routes = [];
+    for (const abs of files) {
+        const rel = normalizeSlashes(relative(siteRoot, abs));
+        const extMatch = config.routes.fileExtensions.some((ext) => rel.endsWith(ext));
+        if (!extMatch)
+            continue;
+        const base = rel.split("/").pop();
+        const m = base.match(config.routes.routeFilePattern);
+        if (!m)
+            continue;
+        const name = m[1]; // inside ( )
+        const relDir = rel.split("/").slice(0, -1).join("/");
+        // name parsing:
+        // home => /
+        // about => /about
+        // id => /:id
+        // ...rest => /*rest
+        let routeSeg = name;
+        let urlSeg = "";
+        if (routeSeg === "home")
+            urlSeg = "";
+        else if (routeSeg.startsWith("..."))
+            urlSeg = "*" + routeSeg.slice(3);
+        else
+            urlSeg = routeSeg;
+        // build url path
+        let url = "/" + (relDir ? relDir + "/" : "") + urlSeg;
+        url = url.replaceAll("//", "/");
+        // Dynamic route segment detection:
+        // Routes are determined by the filename within parentheses
+        // - (home).tsx => / (root) or /{dir}/ (in subdirectory)
+        // - ($paramName).tsx => /:paramName (dynamic param, requires $ prefix)
+        // - (...restName).tsx => /*restName (catch-all, requires ... prefix)
+        // - Any other (name).tsx => /name (literal segment)
+        const rawName = name;
+        // Handle special prefixes for dynamic routing
+        if (rawName.startsWith("$") && !rawName.startsWith("...")) {
+            // ($paramName) syntax for dynamic parameters
+            const param = rawName.slice(1);
+            if (!/^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(param)) {
+                throw new Error(`Invalid parameter name: ${param} in route file ${rel}`);
+            }
+            url = "/" + (relDir ? relDir + "/" : "") + ":" + param;
+            url = url.replaceAll("//", "/");
+        }
+        else if (rawName.startsWith("...")) {
+            // (...restName) syntax for catch-all routes
+            const restName = rawName.slice(3);
+            if (!/^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(restName)) {
+                throw new Error(`Invalid rest parameter name: ${restName} in route file ${rel}`);
+            }
+            url = "/" + (relDir ? relDir + "/" : "") + "*" + restName;
+            url = url.replaceAll("//", "/");
+        }
+        else if (rawName === "home") {
+            // (home) is special - becomes root of its directory
+            url = relDir === "" ? "/" : "/" + relDir;
+        }
+        // else: (anything else) treated as literal segment
+        const { src, paramNames } = buildRoutePattern(url);
+        routes.push({
+            id: rel.replaceAll("/", "_"),
+            filePath: abs,
+            urlPath: url,
+            pattern: src,
+            paramNames,
+        });
+    }
+    routes.sort((a, b) => {
+        // more specific first
+        const aDyn = a.urlPath.includes(":") || a.urlPath.includes("*");
+        const bDyn = b.urlPath.includes(":") || b.urlPath.includes("*");
+        if (aDyn !== bDyn)
+            return aDyn ? 1 : -1;
+        return a.urlPath.localeCompare(b.urlPath);
+    });
+    return routes;
+}

package/templates/static/lib/core/types.d.ts

@@ -0,0 +1,18 @@
+import type { RenderMode } from "./config.js";
+export type RouteModule = {
+    mode?: RenderMode;
+    revalidateSeconds?: number;
+    hydrate?: boolean;
+    middleware?: any;
+    loader?: (ctx: LoaderContext) => Promise<any> | any;
+    Head?: (props: any) => any;
+    default: (props: any) => any;
+};
+export type LoaderContext = {
+    url: URL;
+    params: Record<string, string>;
+    query: Record<string, string>;
+    headers: Record<string, string>;
+    cookies: Record<string, string>;
+    data?: Record<string, any>;
+};

package/templates/static/lib/core/types.js

@@ -0,0 +1,18 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+export {};

package/templates/static/lib/css/compiler.d.ts

@@ -0,0 +1,20 @@
+export interface CompileOptions {
+    inputPath: string;
+    outputPath?: string;
+    minified?: boolean;
+    sourceMap?: boolean;
+    watch?: boolean;
+}
+export interface CompileResult {
+    css: string;
+    sourceMap?: string;
+    error?: string;
+}
+export declare class ScssCompiler {
+    compile(options: CompileOptions): CompileResult;
+    compileString(scss: string, options?: {
+        minified?: boolean;
+    }): CompileResult;
+    compileGlob(pattern: string, outputDir: string, minified?: boolean): number;
+}
+export declare function createScssCompiler(): ScssCompiler;

package/templates/static/lib/css/compiler.js

@@ -0,0 +1,87 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import { compile, compileString } from "sass";
+import { globSync } from "glob";
+import { writeFileSync, existsSync, mkdirSync } from "node:fs";
+import { dirname, join, relative } from "node:path";
+import { log } from "../shared/log.js";
+export class ScssCompiler {
+    compile(options) {
+        const { inputPath, outputPath, minified = false, sourceMap = false, } = options;
+        try {
+            if (!existsSync(inputPath)) {
+                return { css: "", error: `File not found: ${inputPath}` };
+            }
+            const result = compile(inputPath, {
+                style: minified ? "compressed" : "expanded",
+                sourceMap,
+            });
+            if (outputPath) {
+                mkdirSync(dirname(outputPath), { recursive: true });
+                writeFileSync(outputPath, result.css);
+                if (result.sourceMap && sourceMap) {
+                    writeFileSync(outputPath + ".map", JSON.stringify(result.sourceMap));
+                }
+                log.info(`[SCSS] ✓ ${relative(process.cwd(), inputPath)} → ${relative(process.cwd(), outputPath)}`);
+            }
+            return {
+                css: result.css,
+                sourceMap: result.sourceMap
+                    ? JSON.stringify(result.sourceMap)
+                    : undefined,
+            };
+        }
+        catch (err) {
+            const message = err.message || String(err);
+            log.error(`[SCSS] ✗ ${inputPath}: ${message}`);
+            return { css: "", error: message };
+        }
+    }
+    compileString(scss, options) {
+        try {
+            const result = compileString(scss, {
+                style: options?.minified ? "compressed" : "expanded",
+            });
+            return { css: result.css };
+        }
+        catch (err) {
+            const message = err.message || String(err);
+            log.error(`[SCSS] ✗ Inline compilation error: ${message}`);
+            return { css: "", error: message };
+        }
+    }
+    compileGlob(pattern, outputDir, minified = false) {
+        const files = globSync(pattern);
+        let count = 0;
+        files.forEach((file) => {
+            const rel = relative(outputDir, file);
+            const output = join(outputDir, rel.replace(/\.scss$/, ".css"));
+            const result = this.compile({
+                inputPath: file,
+                outputPath: output,
+                minified,
+            });
+            if (!result.error)
+                count++;
+        });
+        return count;
+    }
+}
+export function createScssCompiler() {
+    return new ScssCompiler();
+}

package/templates/static/lib/db/connector.d.ts

@@ -0,0 +1,4 @@
+import { DBConfig, IDBDriver } from "./types";
+export declare class DBConnector {
+    static create(config: DBConfig): IDBDriver;
+}

package/templates/static/lib/db/connector.js

@@ -0,0 +1,33 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import { JDBDriver } from "./drivers/jdb";
+import { SQLDriver } from "./drivers/sql";
+export class DBConnector {
+    static create(config) {
+        switch (config.type) {
+            case "jdb":
+                return new JDBDriver(config);
+            case "sqlite":
+            case "postgres":
+            case "mysql":
+                return new SQLDriver(config);
+            default:
+                throw new Error(`Unsupported DB type: ${config.type}`);
+        }
+    }
+}

package/templates/static/lib/db/drivers/jdb.d.ts

@@ -0,0 +1,13 @@
+import { IDBDriver, DBConfig, UnifiedQuery } from "../types";
+import { Filter, Update } from "../../jdb/types";
+export declare class JDBDriver implements IDBDriver {
+    private engine;
+    constructor(config: DBConfig);
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    query<T = any>(q: UnifiedQuery<T>): Promise<T[]>;
+    create<T = any>(collection: string, data: any): Promise<T>;
+    update<T = any>(collection: string, filter: Filter<T>, update: Update<T>): Promise<number>;
+    delete<T = any>(collection: string, filter: Filter<T>): Promise<number>;
+    count<T = any>(collection: string, filter: Filter<T>): Promise<number>;
+}

package/templates/static/lib/db/drivers/jdb.js

@@ -0,0 +1,59 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import { JDBEngine } from "../../jdb";
+export class JDBDriver {
+    engine;
+    constructor(config) {
+        const jdbConfig = config.jdb || {
+            root: "./data",
+            inMemory: false,
+        };
+        this.engine = new JDBEngine(jdbConfig);
+    }
+    async connect() {
+        await this.engine.connect();
+    }
+    async disconnect() {
+        await this.engine.disconnect();
+    }
+    async query(q) {
+        if (typeof q === "string") {
+            throw new Error("Raw string queries not supported in JDB directly. Use object syntax.");
+        }
+        if ("sql" in q) {
+            throw new Error("SQL queries not supported in JDB driver.");
+        }
+        const query = q;
+        const coll = this.engine.collection(query.find);
+        return await coll.find(query.where || {}, query.options);
+    }
+    async create(collection, data) {
+        return await this.engine.collection(collection).insert(data);
+    }
+    async update(collection, filter, update) {
+        return await this.engine
+            .collection(collection)
+            .update(filter, update, true);
+    }
+    async delete(collection, filter) {
+        return await this.engine.collection(collection).delete(filter, true);
+    }
+    async count(collection, filter) {
+        return await this.engine.collection(collection).count(filter);
+    }
+}

package/templates/static/lib/db/drivers/sql.d.ts

@@ -0,0 +1,18 @@
+import { IDBDriver, DBConfig, UnifiedQuery } from "../types";
+import { Filter, Update } from "../../jdb/types";
+/**
+  * Validate and register allowed table/collection names for security
+  */
+export declare function registerAllowedTable(tableName: string): void;
+export declare class SQLDriver implements IDBDriver {
+    private executor;
+    constructor(config: DBConfig);
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    query<T = any>(q: UnifiedQuery<T>): Promise<T[]>;
+    private translateQuery;
+    create<T = any>(collection: string, data: any): Promise<T>;
+    update<T = any>(collection: string, filter: Filter<T>, update: Update<T>): Promise<number>;
+    delete<T = any>(collection: string, filter: Filter<T>): Promise<number>;
+    count<T = any>(collection: string, filter: Filter<T>): Promise<number>;
+}

package/templates/static/lib/db/drivers/sql.js

@@ -0,0 +1,182 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+// Whitelist of allowed identifiers (table/column names) - must be explicitly allowed
+const ALLOWED_IDENTIFIERS = new Set();
+/**
+  * Safely quote SQL identifier to prevent injection
+  * Only accepts alphanumeric, underscore, dollar sign
+  * Note: Hyphen is NOT allowed as it can cause confusion with operators
+  */
+function quoteIdentifier(id) {
+    if (!id || !/^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(id)) {
+        throw new Error(`Invalid SQL identifier: ${id}. Only alphanumeric, underscore, and dollar sign allowed. Must start with letter, underscore, or dollar.`);
+    }
+    return `\`${id}\``; // Use backticks for MySQL, adjust for other databases
+}
+/**
+  * Validate and register allowed table/collection names for security
+  */
+export function registerAllowedTable(tableName) {
+    if (/^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(tableName)) {
+        ALLOWED_IDENTIFIERS.add(tableName);
+    }
+    else {
+        throw new Error(`Invalid table name: ${tableName}. Must start with letter, underscore, or dollar. Only alphanumeric, underscore, and dollar allowed.`);
+    }
+}
+/**
+ * Check if table is in allowed list
+ */
+function isTableAllowed(tableName) {
+    return ALLOWED_IDENTIFIERS.has(tableName);
+}
+/**
+ * Validate integer value (for LIMIT/OFFSET)
+ */
+function validateInteger(value) {
+    const num = parseInt(value, 10);
+    if (isNaN(num) || num < 0) {
+        throw new Error(`Invalid integer value: ${value}`);
+    }
+    return num;
+}
+export class SQLDriver {
+    executor;
+    constructor(config) {
+        if (typeof config.connection === "function") {
+            this.executor = config.connection;
+        }
+        else if (config.connection && config.connection.query) {
+            // Support objects like Pool or Client from pg/mysql
+            this.executor = (sql, params) => config.connection.query(sql, params);
+        }
+        else {
+            // Default stub that warns if no connection provided, or we could try to load a default
+            this.executor = async () => {
+                throw new Error("No SQL connection provided to SQLDriver");
+            };
+        }
+    }
+    async connect() {
+        // Connection management usually handled by the pool passed in, but we can add logic here if needed
+    }
+    async disconnect() {
+        // No-op or close pool
+    }
+    async query(q) {
+        if (typeof q === "string") {
+            return this.executor(q, []);
+        }
+        if ("sql" in q) {
+            return this.executor(q.sql, q.params || []);
+        }
+        // Convert NoSQL style to SQL (Basic translation)
+        const query = q;
+        const { sql, params } = this.translateQuery(query);
+        return this.executor(sql, params);
+    }
+    translateQuery(q) {
+        // Security: Validate table name
+        if (!isTableAllowed(q.find)) {
+            throw new Error(`Table '${q.find}' not registered. Call registerAllowedTable() first.`);
+        }
+        let sql = `SELECT * FROM ${quoteIdentifier(q.find)}`;
+        const params = [];
+        if (q.where && Object.keys(q.where).length > 0) {
+            const conditions = [];
+            const whereRecord = q.where;
+            for (const key in whereRecord) {
+                // Security: Validate column name
+                if (!/^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(key)) {
+                    throw new Error(`Invalid column name: ${key}. Must start with letter, underscore, or dollar. Only alphanumeric, underscore, and dollar allowed.`);
+                }
+                // Safely access where property
+                const val = whereRecord[key];
+                conditions.push(`${quoteIdentifier(key)} = ?`);
+                params.push(val);
+            }
+            sql += ` WHERE ${conditions.join(" AND ")}`;
+        }
+        if (q.options?.limit) {
+            // Security: Validate limit is a positive integer
+            const limit = validateInteger(q.options.limit);
+            sql += ` LIMIT ${limit}`;
+        }
+        if (q.options?.skip) {
+            // Security: Validate offset is a non-negative integer
+            const skip = validateInteger(q.options.skip);
+            sql += ` OFFSET ${skip}`;
+        }
+        return { sql, params };
+    }
+    async create(collection, data) {
+        // Security: Validate table name
+        if (!isTableAllowed(collection)) {
+            throw new Error(`Table '${collection}' not registered. Call registerAllowedTable() first.`);
+        }
+        const keys = Object.keys(data);
+        // Security: Validate all column names
+        for (const key of keys) {
+            if (!/^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(key)) {
+                throw new Error(`Invalid column name: ${key}. Must start with letter, underscore, or dollar. Only alphanumeric, underscore, and dollar allowed.`);
+            }
+        }
+        const placeholders = keys.map(() => "?").join(",");
+        const quotedKeys = keys.map((k) => quoteIdentifier(k)).join(",");
+        const sql = `INSERT INTO ${quoteIdentifier(collection)} (${quotedKeys}) VALUES (${placeholders})`;
+        const params = keys.map((k) => data[k]);
+        await this.executor(sql, params);
+        // Retrieve generic - this might need adjustment per driver for "returning" support
+        return data;
+    }
+    async update(collection, filter, update) {
+        // Basic implementation requiring WHERE clause
+        // This is complex to map generic Mongo-style updates to SQL without a robust builder
+        throw new Error("Complex update translation not implemented for Generic SQL Driver yet. Use raw SQL.");
+    }
+    async delete(collection, filter) {
+        // Security: Validate table name
+        if (!isTableAllowed(collection)) {
+            throw new Error(`Table '${collection}' not registered. Call registerAllowedTable() first.`);
+        }
+        // Validate that filter is not empty to prevent accidental full table delete
+        if (!filter || Object.keys(filter).length === 0) {
+            throw new Error("Delete requires at least one filter condition. Use truncate or raw SQL for full table deletion.");
+        }
+        const { sql, params } = this.translateQuery({
+            find: collection,
+            where: filter,
+        });
+        const deleteSql = sql.replace("SELECT \\*", "DELETE");
+        await this.executor(deleteSql, params);
+        return 1; // Unknown count without driver specific result
+    }
+    async count(collection, filter) {
+        // Security: Validate table name
+        if (!isTableAllowed(collection)) {
+            throw new Error(`Table '${collection}' not registered. Call registerAllowedTable() first.`);
+        }
+        const { sql, params } = this.translateQuery({
+            find: collection,
+            where: filter,
+        });
+        const countSql = sql.replace("SELECT *", "SELECT COUNT(*) as count");
+        const res = await this.executor(countSql, params);
+        return res[0]?.count || 0;
+    }
+}

package/templates/static/lib/db/index.d.ts

@@ -0,0 +1,19 @@
+import { DBConfig, UnifiedQuery } from "./types";
+import { Filter, Update } from "../jdb/types";
+export * from "./types";
+export * from "./drivers/jdb";
+export * from "./drivers/sql";
+export declare class DB {
+    private driver;
+    private config;
+    constructor(config: DBConfig);
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    query<T = any>(q: UnifiedQuery<T> | string, params?: any[]): Promise<T[]>;
+    find<T = any>(collection: string, filter?: Filter<T>, options?: any): Promise<T[]>;
+    findOne<T = any>(collection: string, filter: Filter<T>): Promise<T | null>;
+    create<T = any>(collection: string, data: any): Promise<T>;
+    update<T = any>(collection: string, filter: Filter<T>, update: Update<T>): Promise<number>;
+    delete<T = any>(collection: string, filter: Filter<T>): Promise<number>;
+    count<T = any>(collection: string, filter: Filter<T>): Promise<number>;
+}