qarpeo 0.0.0-alpha.10

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Qarpeo (https://qarpeo.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,102 @@
+# Qarpeo
+
+> The Zero-Config Edge Platform for Nuxt & Cloudflare.
+
+[![npm version](https://img.shields.io/npm/v/qarpeo.svg)](https://www.npmjs.com/package/qarpeo)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
+
+**Qarpeo** bridges Nuxt and Cloudflare Workers into a seamless, high-velocity developer experience. One package, zero manual wrangler configuration, type-safe auto-imports, and global edge persistence across all 12 Cloudflare primitives.
+
+Documentation: [https://qarpeo.com](https://qarpeo.com)
+
+---
+
+## Features
+
+- ⚡ **Zero-Config Wrangler**: Auto-generates local and production `wrangler.json` from your Nuxt config.
+- 🗄️ **Database Ready**: Native Cloudflare D1 with automatic Drizzle ORM.
+- 📦 **Key-Value & Storage**: Cloudflare KV and R2 Blob storage with typed auto-imported clients.
+- 🤖 **Edge AI & Vector Search**: Cloudflare Workers AI LLMs and Vectorize embeddings out of the box.
+- 📨 **Queues & Background Tasks**: Cloudflare Queues producer with `defineQueueHandler` consumers.
+- 🌐 **Browser Rendering**: Headless Chromium automation, screenshots, and PDFs via Cloudflare Browser Rendering.
+- 📊 **Telemetry & Rate Limiting**: Cloudflare Analytics Engine and edge rate limiting with zero external Redis.
+- 🚀 **Hyperdrive**: Pooled connections and query acceleration to external PostgreSQL and MySQL databases.
+
+---
+
+## Quick Start
+
+### 1. Install
+
+```bash
+# Using Vite+
+vp add qarpeo
+
+# Using pnpm
+pnpm add qarpeo
+
+# Using npm
+npm install qarpeo
+```
+
+### 2. Configure
+
+Enable the Cloudflare primitives you need in `nuxt.config.ts`:
+
+```ts [nuxt.config.ts]
+export default defineNuxtConfig({
+  modules: ["qarpeo"],
+
+  qarpeo: {
+    db: true,
+    blob: true,
+    kv: true,
+    ai: true,
+    browser: true,
+  },
+})
+```
+
+### 3. Use Anywhere in Server Routes
+
+All bindings are auto-imported and typed:
+
+```ts [server/api/example.get.ts]
+export default defineEventHandler(async () => {
+  // Cloudflare KV
+  await kv.set("hello", "world")
+
+  // Cloudflare D1 + Drizzle
+  const allUsers = await db.select().from(schema.users)
+
+  // Cloudflare Workers AI
+  const aiResult = await ai.run("@cf/meta/llama-3.1-8b-instruct", {
+    prompt: "Summarize edge computing in 5 words",
+  })
+
+  return { kv: await kv.get("hello"), allUsers, aiResult }
+})
+```
+
+### 4. CLI Tools (`qp` / `qarpeo`)
+
+Qarpeo includes an integrated CLI for health diagnostics, database migrations, and schema management:
+
+```bash
+# Validate Cloudflare bindings, migrations, and secrets
+pnpm qp doctor
+
+# Validate against production/remote deployment criteria
+pnpm qp doctor --remote
+
+# Generate and apply D1 migrations
+pnpm qp generate
+pnpm qp migrate
+pnpm qp migrate --remote
+```
+
+---
+
+## License
+
+[MIT](./LICENSE)

package/dist/chunks/auth-schema.mjs

@@ -0,0 +1,219 @@
+const ALL_AUTH_TABLE_NAMES = [
+  "_qarpeo_users",
+  "_qarpeo_accounts",
+  "_qarpeo_sessions",
+  "_qarpeo_two_factor",
+  "_qarpeo_authenticators",
+  "_qarpeo_organizations",
+  "_qarpeo_members",
+  "_qarpeo_invitations",
+  "_qarpeo_api_tokens"
+];
+function getActiveAuthTableNames(auth) {
+  if (!auth) return [];
+  const opts = typeof auth === "object" ? auth : {};
+  const tables = ["_qarpeo_users", "_qarpeo_accounts", "_qarpeo_sessions"];
+  if (opts.twoFactor) tables.push("_qarpeo_two_factor");
+  if (opts.webauthn) tables.push("_qarpeo_authenticators");
+  if (opts.organizations)
+    tables.push("_qarpeo_organizations", "_qarpeo_members", "_qarpeo_invitations");
+  if (opts.apiTokens) tables.push("_qarpeo_api_tokens");
+  if (opts.sso) tables.push("_qarpeo_sso_connections");
+  return tables;
+}
+function compileExtendedField(key, def) {
+  switch (def.type) {
+    case "string": {
+      let chain = `text()`;
+      if (def.default !== void 0) chain += `.default(${JSON.stringify(def.default)})`;
+      if (def.nullable === false) chain += `.notNull()`;
+      if (def.enum) chain += ` /* enum: ${def.enum.join("|")} */`;
+      return `  ${key}: ${chain},`;
+    }
+    case "number": {
+      let chain = `integer()`;
+      if (def.default !== void 0) chain += `.default(${Number(def.default)})`;
+      return `  ${key}: ${chain},`;
+    }
+    case "boolean": {
+      let chain = `integer({ mode: "boolean" })`;
+      if (def.default !== void 0) chain += `.default(${def.default ? 1 : 0})`;
+      return `  ${key}: ${chain},`;
+    }
+    case "json": {
+      return `  ${key}: text({ mode: "json" }),`;
+    }
+    default:
+      return `  ${key}: text(),`;
+  }
+}
+function generateAuthSchema(auth) {
+  const opts = typeof auth === "object" ? auth : {};
+  const extendsFields = opts.fields?.extends || {};
+  const lines = [
+    `// Auto-generated by Qarpeo Dynamic Schema Assembly (Section 6)`,
+    `// snakeCase.table maps camelCase property names \u2192 snake_case column names automatically`,
+    `import { integer, text, blob, snakeCase, index } from "drizzle-orm/sqlite-core";`,
+    ``,
+    `// \u2500\u2500\u2500 1. Users Table (Core + Tier 2 Extended Fields) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`,
+    `export const users = snakeCase.table("_qarpeo_users", {`,
+    `  id: text().primaryKey(),`,
+    `  email: text().notNull().unique(),`,
+    `  emailVerified: integer().default(0),`,
+    `  name: text(),`,
+    `  avatarUrl: text(),`
+  ];
+  if (!extendsFields.role) {
+    lines.push(`  role: text().default("user"),`);
+  }
+  for (const [key, fieldDef] of Object.entries(extendsFields)) {
+    lines.push(compileExtendedField(key, fieldDef));
+  }
+  lines.push(
+    `  createdAt: integer().notNull(),`,
+    `  updatedAt: integer().notNull(),`,
+    `});`,
+    ``,
+    `// \u2500\u2500\u2500 2. Accounts Table (OAuth Provider Links) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`,
+    `export const accounts = snakeCase.table("_qarpeo_accounts", {`,
+    `  id: text().primaryKey(),`,
+    `  userId: text().notNull().references(() => users.id, { onDelete: "cascade" }),`,
+    `  provider: text().notNull(),`,
+    `  providerAccountId: text().notNull(),`,
+    `  email: text(),`,
+    `  emailVerified: integer().default(0),`,
+    `  accessToken: text(),`,
+    `  refreshToken: text(),`,
+    `  expiresAt: integer(),`,
+    `  createdAt: integer().notNull(),`,
+    `}, (table) => [`,
+    `  index("_qarpeo_accounts_user_id_idx").on(table.userId),`,
+    `]);`,
+    ``,
+    `// \u2500\u2500\u2500 3. Sessions Table (Multi-Device Session Registry) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`,
+    `export const sessions = snakeCase.table("_qarpeo_sessions", {`,
+    `  id: text().primaryKey(),`,
+    `  userId: text().notNull().references(() => users.id, { onDelete: "cascade" }),`,
+    `  tokenHash: text().notNull(),`,
+    `  clientType: text().default("web"),`,
+    `  userAgent: text(),`,
+    `  ipAddress: text(),`,
+    `  lastActive: integer().notNull(),`,
+    `  expiresAt: integer().notNull(),`,
+    `}, (table) => [`,
+    `  index("_qarpeo_sessions_user_id_idx").on(table.userId),`,
+    `  index("_qarpeo_sessions_token_hash_idx").on(table.tokenHash),`,
+    `  index("_qarpeo_sessions_expires_at_idx").on(table.expiresAt),`,
+    `]);`
+  );
+  if (opts.twoFactor) {
+    lines.push(
+      ``,
+      `// \u2500\u2500\u2500 4. Two-Factor Authentication Table (TOTP) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`,
+      `export const twoFactor = snakeCase.table("_qarpeo_two_factor", {`,
+      `  id: text().primaryKey(),`,
+      `  userId: text().notNull().unique().references(() => users.id, { onDelete: "cascade" }),`,
+      `  secret: text().notNull(),`,
+      `  backupCodes: text().notNull(),`,
+      `  enabled: integer().default(0),`,
+      `  createdAt: integer().notNull(),`,
+      `});`
+    );
+  }
+  if (opts.webauthn) {
+    lines.push(
+      ``,
+      `// \u2500\u2500\u2500 5. WebAuthn Passkeys Table \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`,
+      `export const authenticators = snakeCase.table("_qarpeo_authenticators", {`,
+      `  id: text().primaryKey(),`,
+      `  userId: text().notNull().references(() => users.id, { onDelete: "cascade" }),`,
+      `  credentialId: text().notNull().unique(),`,
+      `  publicKey: blob({ mode: "buffer" }).notNull(),`,
+      `  counter: integer().notNull().default(0),`,
+      `  transports: text(),`,
+      `  createdAt: integer().notNull(),`,
+      `});`
+    );
+  }
+  if (opts.organizations) {
+    lines.push(
+      ``,
+      `// \u2500\u2500\u2500 6. Organizations & Teams Multi-Tenancy Tables \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`,
+      `export const organizations = snakeCase.table("_qarpeo_organizations", {`,
+      `  id: text().primaryKey(),`,
+      `  name: text().notNull(),`,
+      `  slug: text().notNull().unique(),`,
+      `  logoUrl: text(),`,
+      `  createdAt: integer().notNull(),`,
+      `});`,
+      ``,
+      `export const members = snakeCase.table("_qarpeo_members", {`,
+      `  id: text().primaryKey(),`,
+      `  organizationId: text().notNull().references(() => organizations.id, { onDelete: "cascade" }),`,
+      `  userId: text().notNull().references(() => users.id, { onDelete: "cascade" }),`,
+      `  role: text().notNull().default("member"),`,
+      `  createdAt: integer().notNull(),`,
+      `}, (table) => [`,
+      `  index("_qarpeo_members_user_id_idx").on(table.userId),`,
+      `  index("_qarpeo_members_org_id_idx").on(table.organizationId),`,
+      `]);`,
+      ``,
+      `export const invitations = snakeCase.table("_qarpeo_invitations", {`,
+      `  id: text().primaryKey(),`,
+      `  organizationId: text().notNull().references(() => organizations.id, { onDelete: "cascade" }),`,
+      `  email: text().notNull(),`,
+      `  role: text().notNull().default("member"),`,
+      `  tokenHash: text().notNull(),`,
+      `  expiresAt: integer().notNull(),`,
+      `  createdAt: integer().notNull(),`,
+      `});`
+    );
+  }
+  if (opts.apiTokens) {
+    lines.push(
+      ``,
+      `// \u2500\u2500\u2500 7. Personal Access Tokens / CLI Keys Table \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`,
+      `export const apiTokens = snakeCase.table("_qarpeo_api_tokens", {`,
+      `  id: text().primaryKey(),`,
+      `  userId: text().notNull().references(() => users.id, { onDelete: "cascade" }),`,
+      `  name: text().notNull(),`,
+      `  tokenHash: text().notNull(),`,
+      `  scopes: text().default('["*"]'),`,
+      `  lastUsedAt: integer(),`,
+      `  expiresAt: integer(),`,
+      `  createdAt: integer().notNull(),`,
+      `}, (table) => [`,
+      `  index("_qarpeo_api_tokens_user_id_idx").on(table.userId),`,
+      `]);`
+    );
+  }
+  if (opts.sso) {
+    lines.push(
+      ``,
+      `// \u2500\u2500\u2500 8. Enterprise SSO (SAML 2.0 & OIDC) Table \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`,
+      `export const ssoConnections = snakeCase.table("_qarpeo_sso_connections", {`,
+      `  id: text().primaryKey(),`,
+      `  organizationId: text().references(() => organizations.id, { onDelete: "cascade" }),`,
+      `  providerType: text().notNull(),`,
+      `  name: text().notNull(),`,
+      `  domain: text().unique(),`,
+      `  clientId: text(),`,
+      `  clientSecret: text(),`,
+      `  issuer: text(),`,
+      `  ssoUrl: text().notNull(),`,
+      `  tokenUrl: text(),`,
+      `  userinfoUrl: text(),`,
+      `  cert: text(),`,
+      `  enabled: integer().default(1),`,
+      `  createdAt: integer().notNull(),`,
+      `  updatedAt: integer().notNull(),`,
+      `}, (table) => [`,
+      `  index("_qarpeo_sso_org_id_idx").on(table.organizationId),`,
+      `  index("_qarpeo_sso_domain_idx").on(table.domain),`,
+      `]);`
+    );
+  }
+  return lines.join("\n") + "\n";
+}
+
+export { ALL_AUTH_TABLE_NAMES, generateAuthSchema, getActiveAuthTableNames };