create-velox-app 0.4.2 → 0.4.4

package/dist/templates/shared.js

@@ -1,8 +1,12 @@
 /**
- * Shared Template Files
+ * Shared Template Constants
  *
- * Common files used by all templates (config, gitignore, etc.)
+ * Common constants used across all templates.
  */
+import { createRequire } from 'node:module';
+// Read version from package.json dynamically
+const require = createRequire(import.meta.url);
+const packageJson = require('../../package.json');
 // ============================================================================
 // Version Constant
 // ============================================================================
@@ -10,292 +14,5 @@
  * VeloxTS framework version for generated projects.
  * This is automatically updated during releases via changesets.
  */
-export const VELOXTS_VERSION = '0.3.1';
-// ============================================================================
-// TypeScript Config
-// ============================================================================
-export function generateTsConfig() {
-    return JSON.stringify({
-        $schema: 'https://json.schemastore.org/tsconfig',
-        compilerOptions: {
-            target: 'ES2022',
-            module: 'ES2022',
-            moduleResolution: 'bundler',
-            lib: ['ES2022'],
-            strict: true,
-            esModuleInterop: true,
-            skipLibCheck: true,
-            resolveJsonModule: true,
-            allowSyntheticDefaultImports: true,
-            forceConsistentCasingInFileNames: true,
-            isolatedModules: true,
-            noUnusedLocals: true,
-            noUnusedParameters: true,
-            noFallthroughCasesInSwitch: true,
-            declaration: false,
-            declarationMap: false,
-            rootDir: './src',
-            outDir: './dist',
-        },
-        include: ['src/**/*'],
-        exclude: ['node_modules', 'dist', '**/*.test.ts', '**/*.spec.ts'],
-    }, null, 2);
-}
-// ============================================================================
-// tsup Config
-// ============================================================================
-export function generateTsupConfig() {
-    return `import { defineConfig } from 'tsup';
-
-export default defineConfig({
-  entry: ['src/index.ts'],
-  format: ['esm'],
-  target: 'node18',
-  clean: true,
-  dts: false,
-  sourcemap: true,
-});
-`;
-}
-// ============================================================================
-// Environment Files
-// ============================================================================
-export function generateGitignore() {
-    return `# Dependencies
-node_modules/
-
-# Build output
-dist/
-*.tsbuildinfo
-
-# Environment variables
-.env
-.env.local
-
-# Database
-*.db
-*.db-journal
-
-# Generated Prisma client
-src/generated/
-
-# Logs
-logs/
-*.log
-
-# OS
-.DS_Store
-Thumbs.db
-
-# IDE
-.vscode/
-.idea/
-*.swp
-*.swo
-
-# Turbo
-.turbo/
-`;
-}
-// ============================================================================
-// Prisma Config (Prisma 7.x)
-// ============================================================================
-export function generatePrismaConfig() {
-    return `/**
- * Prisma Configuration (Prisma 7.x)
- *
- * Database URL is now configured here instead of schema.prisma.
- * See: https://www.prisma.io/docs/orm/more/upgrade-guides/upgrading-versions/upgrading-to-prisma-7
- */
-
-import 'dotenv/config';
-import { defineConfig } from 'prisma/config';
-
-export default defineConfig({
-  earlyAccess: true,
-  schema: './prisma/schema.prisma',
-  datasource: {
-    url: process.env.DATABASE_URL!,
-  },
-});
-`;
-}
-// ============================================================================
-// Config Files
-// ============================================================================
-export function generateConfigIndex() {
-    return `/**
- * Configuration Exports
- */
-
-export * from './app.js';
-`;
-}
-export function generateConfigApp() {
-    return `/**
- * Application Configuration
- */
-
-export interface AppConfig {
-  port: number;
-  host: string;
-  logger: boolean;
-  apiPrefix: string;
-  env: 'development' | 'production' | 'test';
-}
-
-export function createConfig(): AppConfig {
-  return {
-    port: Number(process.env.PORT) || 3210,
-    host: process.env.HOST || '0.0.0.0',
-    logger: process.env.LOG_LEVEL !== 'silent',
-    apiPrefix: process.env.API_PREFIX || '/api',
-    env: (process.env.NODE_ENV as AppConfig['env']) || 'development',
-  };
-}
-
-export const config = createConfig();
-`;
-}
-// ============================================================================
-// Health Procedures
-// ============================================================================
-export function generateHealthProcedures() {
-    return `/**
- * Health Check Procedures
- */
-
-import { VELOX_VERSION, defineProcedures, procedure, z } from '@veloxts/velox';
-
-export const healthProcedures = defineProcedures('health', {
-  getHealth: procedure()
-    .rest({ method: 'GET', path: '/health' })
-    .output(
-      z.object({
-        status: z.literal('ok'),
-        version: z.string(),
-        timestamp: z.string().datetime(),
-        uptime: z.number(),
-      })
-    )
-    .query(async () => ({
-      status: 'ok' as const,
-      version: VELOX_VERSION,
-      timestamp: new Date().toISOString(),
-      uptime: process.uptime(),
-    })),
-});
-`;
-}
-// ============================================================================
-// Static Files
-// ============================================================================
-export function generateIndexHtml() {
-    return `<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>VeloxTS App</title>
-  <style>
-    * { box-sizing: border-box; margin: 0; padding: 0; }
-    body { font-family: system-ui, sans-serif; background: #f5f5f5; padding: 20px; }
-    .container { max-width: 800px; margin: 0 auto; }
-    h1 { margin-bottom: 20px; color: #333; }
-    .card { background: white; border-radius: 8px; padding: 20px; margin-bottom: 20px; box-shadow: 0 1px 3px rgba(0,0,0,0.1); }
-    .card h2 { margin-bottom: 15px; color: #555; font-size: 1.1rem; }
-    button { background: #007bff; color: white; border: none; padding: 8px 16px; border-radius: 4px; cursor: pointer; }
-    button:hover { background: #0056b3; }
-  </style>
-</head>
-<body>
-  <div class="container">
-    <h1>Welcome to VeloxTS</h1>
-    <div class="card">
-      <h2>Your app is running!</h2>
-      <p>Visit <code>/api/health</code> to check the API status.</p>
-      <p>Visit <code>/api/users</code> to see the users endpoint.</p>
-    </div>
-  </div>
-</body>
-</html>
-`;
-}
-// ============================================================================
-// README
-// ============================================================================
-export function generateReadme(config) {
-    return `# ${config.projectName}
-
-A VeloxTS application - TypeScript full-stack framework.
-
-## Getting Started
-
-### Install Dependencies
-
-\`\`\`bash
-${config.packageManager} install
-\`\`\`
-
-### Setup Database
-
-\`\`\`bash
-${config.packageManager} db:push
-\`\`\`
-
-### Start Development Server
-
-\`\`\`bash
-${config.packageManager} dev
-\`\`\`
-
-The app will start at http://localhost:3210
-
-## Project Structure
-
-\`\`\`
-src/
-├── config/          # Application configuration
-├── database/        # Database client
-├── procedures/      # API procedures (business logic)
-├── schemas/         # Zod validation schemas
-└── index.ts         # Application entry point
-\`\`\`
-
-## Available Scripts
-
-- \`${config.packageManager} dev\` - Start development server with hot reload
-- \`${config.packageManager} build\` - Build for production
-- \`${config.packageManager} start\` - Start production server
-- \`${config.packageManager} db:push\` - Sync database schema
-- \`${config.packageManager} db:studio\` - Open Prisma Studio
-
-## Learn More
-
-- [VeloxTS Documentation](https://veloxts.dev)
-- [TypeScript](https://www.typescriptlang.org/)
-- [Fastify](https://fastify.dev/)
-- [Prisma](https://www.prisma.io/)
-
-## License
-
-MIT
-`;
-}
-// ============================================================================
-// Shared Files Generator
-// ============================================================================
-export function generateSharedFiles(config) {
-    return [
-        { path: 'tsconfig.json', content: generateTsConfig() },
-        { path: 'tsup.config.ts', content: generateTsupConfig() },
-        { path: '.gitignore', content: generateGitignore() },
-        { path: 'prisma.config.ts', content: generatePrismaConfig() },
-        { path: 'README.md', content: generateReadme(config) },
-        { path: 'src/config/index.ts', content: generateConfigIndex() },
-        { path: 'src/config/app.ts', content: generateConfigApp() },
-        { path: 'src/procedures/health.ts', content: generateHealthProcedures() },
-        { path: 'public/index.html', content: generateIndexHtml() },
-    ];
-}
+export const VELOXTS_VERSION = packageJson.version ?? '0.0.0-unknown';
 //# sourceMappingURL=shared.js.map

package/dist/templates/shared.js.map

@@ -1 +1 @@
-{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/templates/shared.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AAEvC,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,OAAO,EAAE,uCAAuC;QAChD,eAAe,EAAE;YACf,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;YAChB,gBAAgB,EAAE,SAAS;YAC3B,GAAG,EAAE,CAAC,QAAQ,CAAC;YACf,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,IAAI;YAClB,iBAAiB,EAAE,IAAI;YACvB,4BAA4B,EAAE,IAAI;YAClC,gCAAgC,EAAE,IAAI;YACtC,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;YACpB,kBAAkB,EAAE,IAAI;YACxB,0BAA0B,EAAE,IAAI;YAChC,WAAW,EAAE,KAAK;YAClB,cAAc,EAAE,KAAK;YACrB,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,QAAQ;SACjB;QACD,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,OAAO,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,CAAC;KAClE,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E,MAAM,UAAU,kBAAkB;IAChC,OAAO;;;;;;;;;;CAUR,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,MAAM,UAAU,iBAAiB;IAC/B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCR,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E,MAAM,UAAU,oBAAoB;IAClC,OAAO;;;;;;;;;;;;;;;;;CAiBR,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,MAAM,UAAU,mBAAmB;IACjC,OAAO;;;;;CAKR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO;;;;;;;;;;;;;;;;;;;;;;;CAuBR,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,MAAM,UAAU,wBAAwB;IACtC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;CAwBR,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,MAAM,UAAU,iBAAiB;IAC/B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BR,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,OAAO,KAAK,MAAM,CAAC,WAAW;;;;;;;;;EAS9B,MAAM,CAAC,cAAc;;;;;;EAMrB,MAAM,CAAC,cAAc;;;;;;EAMrB,MAAM,CAAC,cAAc;;;;;;;;;;;;;;;;;;MAkBjB,MAAM,CAAC,cAAc;MACrB,MAAM,CAAC,cAAc;MACrB,MAAM,CAAC,cAAc;MACrB,MAAM,CAAC,cAAc;MACrB,MAAM,CAAC,cAAc;;;;;;;;;;;;CAY1B,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E,MAAM,UAAU,mBAAmB,CAAC,MAAsB;IACxD,OAAO;QACL,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE;QACtD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE;QACzD,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE;QACpD,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE;QAC7D,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE;QACtD,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,mBAAmB,EAAE,EAAE;QAC/D,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE;QAC3D,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE;QACzE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE;KAC5D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/templates/shared.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,6CAA6C;AAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAwB,CAAC;AAEzE,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAW,WAAW,CAAC,OAAO,IAAI,eAAe,CAAC"}

package/dist/templates/source/api/config/app.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Application Configuration
+ */
+export interface AppConfig {
+    port: number;
+    host: string;
+    logger: boolean;
+    apiPrefix: string;
+    env: 'development' | 'production' | 'test';
+}
+export declare function createConfig(): AppConfig;
+export declare const config: AppConfig;
+//# sourceMappingURL=app.d.ts.map

package/dist/templates/source/api/config/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../../../src/templates/source/api/config/app.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,aAAa,GAAG,YAAY,GAAG,MAAM,CAAC;CAC5C;AAED,wBAAgB,YAAY,IAAI,SAAS,CAQxC;AAED,eAAO,MAAM,MAAM,WAAiB,CAAC"}

package/dist/templates/source/api/config/app.js

@@ -0,0 +1,14 @@
+/**
+ * Application Configuration
+ */
+export function createConfig() {
+    return {
+        port: Number(process.env.PORT) || __API_PORT__,
+        host: process.env.HOST || '0.0.0.0',
+        logger: process.env.LOG_LEVEL !== 'silent',
+        apiPrefix: process.env.API_PREFIX || '/api',
+        env: process.env.NODE_ENV || 'development',
+    };
+}
+export const config = createConfig();
+//# sourceMappingURL=app.js.map

package/dist/templates/source/api/config/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../../../src/templates/source/api/config/app.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH,MAAM,UAAU,YAAY;IAC1B,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY;QAC9C,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS;QACnC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,QAAQ;QAC1C,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM;QAC3C,GAAG,EAAG,OAAO,CAAC,GAAG,CAAC,QAA6B,IAAI,aAAa;KACjE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC"}

package/dist/templates/source/api/config/auth.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Authentication Configuration
+ *
+ * JWT-based authentication configuration.
+ *
+ * SECURITY: JWT secrets are required from environment variables.
+ * The app will fail to start in production without them.
+ */
+import type { AuthPluginOptions } from '@veloxts/velox';
+/**
+ * In-memory token revocation store.
+ *
+ * PRODUCTION NOTE: Replace with Redis or database-backed store for:
+ * - Persistence across server restarts
+ * - Horizontal scaling (multiple server instances)
+ */
+declare class InMemoryTokenStore {
+    private revokedTokens;
+    private usedRefreshTokens;
+    private cleanupInterval;
+    constructor();
+    revoke(jti: string, expiresInMs?: number): void;
+    isRevoked(jti: string): boolean;
+    markRefreshTokenUsed(jti: string, userId: string): void;
+    isRefreshTokenUsed(jti: string): string | undefined;
+    revokeAllUserTokens(userId: string): void;
+    private cleanup;
+}
+export declare const tokenStore: InMemoryTokenStore;
+export declare function parseUserRoles(rolesJson: string | null): string[];
+export declare function createAuthConfig(): AuthPluginOptions;
+export declare const authConfig: AuthPluginOptions;
+export {};
+//# sourceMappingURL=auth.d.ts.map

package/dist/templates/source/api/config/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../../src/templates/source/api/config/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAgExD;;;;;;GAMG;AACH,cAAM,kBAAkB;IACtB,OAAO,CAAC,aAAa,CAAkC;IACvD,OAAO,CAAC,iBAAiB,CAAkC;IAC3D,OAAO,CAAC,eAAe,CAA+B;;IAMtD,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,GAAE,MAAgC,GAAG,IAAI;IAIxE,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAU/B,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAKvD,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAInD,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAOzC,OAAO,CAAC,OAAO;CAQhB;AAED,eAAO,MAAM,UAAU,oBAA2B,CAAC;AAQnD,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,EAAE,CAkBjE;AAyBD,wBAAgB,gBAAgB,IAAI,iBAAiB,CAmBpD;AAED,eAAO,MAAM,UAAU,mBAAqB,CAAC"}

package/dist/templates/source/api/config/auth.js

@@ -0,0 +1,165 @@
+/**
+ * Authentication Configuration
+ *
+ * JWT-based authentication configuration.
+ *
+ * SECURITY: JWT secrets are required from environment variables.
+ * The app will fail to start in production without them.
+ */
+import { prisma } from '../database/index.js';
+// ============================================================================
+// Environment Variable Validation
+// ============================================================================
+/**
+ * Gets required JWT secrets from environment variables.
+ * Throws a clear error in production if secrets are not configured.
+ */
+function getRequiredSecrets() {
+    const jwtSecret = process.env.JWT_SECRET;
+    const refreshSecret = process.env.JWT_REFRESH_SECRET;
+    const isDevelopment = process.env.NODE_ENV !== 'production';
+    if (!jwtSecret || !refreshSecret) {
+        if (isDevelopment) {
+            console.warn('\n' +
+                '='.repeat(70) +
+                '\n' +
+                '  WARNING: JWT secrets not configured!\n' +
+                '  Using temporary development secrets. DO NOT USE IN PRODUCTION!\n' +
+                '\n' +
+                '  To configure secrets, add to .env:\n' +
+                '    JWT_SECRET=<generate with: openssl rand -base64 64>\n' +
+                '    JWT_REFRESH_SECRET=<generate with: openssl rand -base64 64>\n' +
+                '='.repeat(70) +
+                '\n');
+            return {
+                jwtSecret: jwtSecret || `dev-only-jwt-secret-${Math.random().toString(36).substring(2).repeat(4)}`,
+                refreshSecret: refreshSecret ||
+                    `dev-only-refresh-secret-${Math.random().toString(36).substring(2).repeat(4)}`,
+            };
+        }
+        throw new Error('\n' +
+            'CRITICAL: JWT secrets are required but not configured.\n' +
+            '\n' +
+            'Required environment variables:\n' +
+            '  - JWT_SECRET: Secret for signing access tokens (64+ characters)\n' +
+            '  - JWT_REFRESH_SECRET: Secret for signing refresh tokens (64+ characters)\n' +
+            '\n' +
+            'Generate secure secrets with:\n' +
+            '  openssl rand -base64 64\n' +
+            '\n' +
+            'Add them to your environment or .env file before starting the server.\n');
+    }
+    return { jwtSecret, refreshSecret };
+}
+// ============================================================================
+// Token Revocation Store
+// ============================================================================
+/**
+ * In-memory token revocation store.
+ *
+ * PRODUCTION NOTE: Replace with Redis or database-backed store for:
+ * - Persistence across server restarts
+ * - Horizontal scaling (multiple server instances)
+ */
+class InMemoryTokenStore {
+    revokedTokens = new Map();
+    usedRefreshTokens = new Map();
+    cleanupInterval = null;
+    constructor() {
+        this.cleanupInterval = setInterval(() => this.cleanup(), 5 * 60 * 1000);
+    }
+    revoke(jti, expiresInMs = 7 * 24 * 60 * 60 * 1000) {
+        this.revokedTokens.set(jti, Date.now() + expiresInMs);
+    }
+    isRevoked(jti) {
+        const expiry = this.revokedTokens.get(jti);
+        if (!expiry)
+            return false;
+        if (Date.now() > expiry) {
+            this.revokedTokens.delete(jti);
+            return false;
+        }
+        return true;
+    }
+    markRefreshTokenUsed(jti, userId) {
+        this.usedRefreshTokens.set(jti, userId);
+        setTimeout(() => this.usedRefreshTokens.delete(jti), 7 * 24 * 60 * 60 * 1000);
+    }
+    isRefreshTokenUsed(jti) {
+        return this.usedRefreshTokens.get(jti);
+    }
+    revokeAllUserTokens(userId) {
+        console.warn(`[Security] Token reuse detected for user ${userId}. ` +
+            'All tokens should be revoked. Implement proper user->token mapping for production.');
+    }
+    cleanup() {
+        const now = Date.now();
+        for (const [jti, expiry] of this.revokedTokens.entries()) {
+            if (now > expiry) {
+                this.revokedTokens.delete(jti);
+            }
+        }
+    }
+}
+export const tokenStore = new InMemoryTokenStore();
+// ============================================================================
+// Role Parsing
+// ============================================================================
+const ALLOWED_ROLES = ['user', 'admin', 'moderator', 'editor'];
+export function parseUserRoles(rolesJson) {
+    if (!rolesJson)
+        return ['user'];
+    try {
+        const parsed = JSON.parse(rolesJson);
+        if (!Array.isArray(parsed)) {
+            return ['user'];
+        }
+        const validRoles = parsed
+            .filter((role) => typeof role === 'string')
+            .filter((role) => ALLOWED_ROLES.includes(role));
+        return validRoles.length > 0 ? validRoles : ['user'];
+    }
+    catch {
+        return ['user'];
+    }
+}
+// ============================================================================
+// User Loader
+// ============================================================================
+async function userLoader(userId) {
+    const user = await prisma.user.findUnique({
+        where: { id: userId },
+    });
+    if (!user)
+        return null;
+    return {
+        id: user.id,
+        email: user.email,
+        name: user.name,
+        roles: parseUserRoles(user.roles),
+    };
+}
+// ============================================================================
+// Auth Configuration
+// ============================================================================
+export function createAuthConfig() {
+    const { jwtSecret, refreshSecret } = getRequiredSecrets();
+    return {
+        jwt: {
+            secret: jwtSecret,
+            refreshSecret: refreshSecret,
+            accessTokenExpiry: '15m',
+            refreshTokenExpiry: '7d',
+            issuer: 'velox-app',
+            audience: 'velox-app-client',
+        },
+        userLoader,
+        isTokenRevoked: async (jti) => tokenStore.isRevoked(jti),
+        rateLimit: {
+            max: 100,
+            windowMs: 60000,
+        },
+    };
+}
+export const authConfig = createAuthConfig();
+//# sourceMappingURL=auth.js.map

package/dist/templates/source/api/config/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../../../src/templates/source/api/config/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,+EAA+E;AAC/E,kCAAkC;AAClC,+EAA+E;AAE/E;;;GAGG;AACH,SAAS,kBAAkB;IACzB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACzC,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAErD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;IAE5D,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC;QACjC,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CACV,IAAI;gBACF,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACd,IAAI;gBACJ,0CAA0C;gBAC1C,oEAAoE;gBACpE,IAAI;gBACJ,wCAAwC;gBACxC,2DAA2D;gBAC3D,mEAAmE;gBACnE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACd,IAAI,CACP,CAAC;YACF,OAAO;gBACL,SAAS,EACP,SAAS,IAAI,uBAAuB,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACzF,aAAa,EACX,aAAa;oBACb,2BAA2B,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;aACjF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,KAAK,CACb,IAAI;YACF,0DAA0D;YAC1D,IAAI;YACJ,mCAAmC;YACnC,qEAAqE;YACrE,8EAA8E;YAC9E,IAAI;YACJ,iCAAiC;YACjC,6BAA6B;YAC7B,IAAI;YACJ,yEAAyE,CAC5E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;AACtC,CAAC;AAED,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,kBAAkB;IACd,aAAa,GAAwB,IAAI,GAAG,EAAE,CAAC;IAC/C,iBAAiB,GAAwB,IAAI,GAAG,EAAE,CAAC;IACnD,eAAe,GAA0B,IAAI,CAAC;IAEtD;QACE,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,CAAC,GAAW,EAAE,cAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QAC/D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,CAAC;IACxD,CAAC;IAED,SAAS,CAAC,GAAW;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YACxB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oBAAoB,CAAC,GAAW,EAAE,MAAc;QAC9C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAChF,CAAC;IAED,kBAAkB,CAAC,GAAW;QAC5B,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,mBAAmB,CAAC,MAAc;QAChC,OAAO,CAAC,IAAI,CACV,4CAA4C,MAAM,IAAI;YACpD,oFAAoF,CACvF,CAAC;IACJ,CAAC;IAEO,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YACzD,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;gBACjB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,kBAAkB,EAAE,CAAC;AAEnD,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAExE,MAAM,UAAU,cAAc,CAAC,SAAwB;IACrD,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAE9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,UAAU,GAAG,MAAM;aACtB,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;aAC1D,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAsC,CAAC,CAAC,CAAC;QAEpF,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E,KAAK,UAAU,UAAU,CAAC,MAAc;IACtC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QACxC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,MAAM,UAAU,gBAAgB;IAC9B,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAE1D,OAAO;QACL,GAAG,EAAE;YACH,MAAM,EAAE,SAAS;YACjB,aAAa,EAAE,aAAa;YAC5B,iBAAiB,EAAE,KAAK;YACxB,kBAAkB,EAAE,IAAI;YACxB,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,kBAAkB;SAC7B;QACD,UAAU;QACV,cAAc,EAAE,KAAK,EAAE,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC;QAChE,SAAS,EAAE;YACT,GAAG,EAAE,GAAG;YACR,QAAQ,EAAE,KAAK;SAChB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC"}

package/dist/templates/source/api/config/index.auth.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Configuration Exports
+ */
+export * from './app.js';
+export * from './auth.js';
+//# sourceMappingURL=index.auth.d.ts.map

package/dist/templates/source/api/config/index.auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.auth.d.ts","sourceRoot":"","sources":["../../../../../src/templates/source/api/config/index.auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC"}

package/dist/templates/source/api/config/index.auth.js

@@ -0,0 +1,6 @@
+/**
+ * Configuration Exports
+ */
+export * from './app.js';
+export * from './auth.js';
+//# sourceMappingURL=index.auth.js.map

package/dist/templates/source/api/config/index.auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.auth.js","sourceRoot":"","sources":["../../../../../src/templates/source/api/config/index.auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC"}

package/dist/templates/source/api/config/index.default.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Configuration Exports
+ */
+export * from './app.js';
+//# sourceMappingURL=index.default.d.ts.map

package/dist/templates/source/api/config/index.default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.default.d.ts","sourceRoot":"","sources":["../../../../../src/templates/source/api/config/index.default.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,UAAU,CAAC"}

package/dist/templates/source/api/config/index.default.js

@@ -0,0 +1,5 @@
+/**
+ * Configuration Exports
+ */
+export * from './app.js';
+//# sourceMappingURL=index.default.js.map

package/dist/templates/source/api/config/index.default.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.default.js","sourceRoot":"","sources":["../../../../../src/templates/source/api/config/index.default.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,UAAU,CAAC"}

package/dist/templates/source/api/database/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Database Client (Prisma 7.x)
+ *
+ * Prisma 7 requires:
+ * - Generated client from custom output path
+ * - Driver adapter for database connections
+ */
+export declare const prisma: any;
+//# sourceMappingURL=index.d.ts.map

package/dist/templates/source/api/database/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/templates/source/api/database/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH,eAAO,MAAM,MAAM,KAAgC,CAAC"}

package/dist/templates/source/api/database/index.js

@@ -0,0 +1,18 @@
+/**
+ * Database Client (Prisma 7.x)
+ *
+ * Prisma 7 requires:
+ * - Generated client from custom output path
+ * - Driver adapter for database connections
+ */
+import { PrismaBetterSqlite3 } from '@prisma/adapter-better-sqlite3';
+import { PrismaClient } from '../generated/prisma/client.js';
+// Validate DATABASE_URL is set
+if (!process.env.DATABASE_URL) {
+    throw new Error('DATABASE_URL environment variable is required');
+}
+// Create SQLite adapter with database URL from environment
+const adapter = new PrismaBetterSqlite3({ url: process.env.DATABASE_URL });
+// Export configured Prisma client
+export const prisma = new PrismaClient({ adapter });
+//# sourceMappingURL=index.js.map

package/dist/templates/source/api/database/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/templates/source/api/database/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D,+BAA+B;AAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;IAC9B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;AACnE,CAAC;AAED,2DAA2D;AAC3D,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;AAE3E,kCAAkC;AAClC,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC"}

package/dist/templates/source/api/index.auth.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Application Entry Point
+ */
+import 'dotenv/config';
+//# sourceMappingURL=index.auth.d.ts.map

package/dist/templates/source/api/index.auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.auth.d.ts","sourceRoot":"","sources":["../../../../src/templates/source/api/index.auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,eAAe,CAAC"}