sovrium 0.0.2

package/README.md

@@ -0,0 +1,321 @@
+<h3 align="center">Build business apps with config. Own your data forever.</h3>
+
+<p align="center">
+  The open-source alternative to Airtable, Retool, and Notion.<br />
+  Self-hosted. Configuration-driven. No vendor lock-in.
+</p>
+
+<p align="center">
+  <a href="https://github.com/sovrium/sovrium/blob/main/LICENSE.md"><img src="https://img.shields.io/badge/license-BSL--1.1-blue" alt="License" /></a>
+  <a href="SPEC-PROGRESS.md"><img src="https://img.shields.io/badge/specs-99%25_passing-brightgreen" alt="Specs" /></a>
+  <a href="https://bun.sh"><img src="https://img.shields.io/badge/runtime-Bun_1.3-f472b6" alt="Bun" /></a>
+  <a href="https://www.typescriptlang.org"><img src="https://img.shields.io/badge/TypeScript-5.9-3178c6" alt="TypeScript" /></a>
+</p>
+
+<p align="center">
+  <a href="VISION.md">Vision</a> &middot;
+  <a href="SPEC-PROGRESS.md">Roadmap</a> &middot;
+  <a href="CLAUDE.md">Docs</a> &middot;
+  <a href="https://github.com/sovrium/sovrium/issues">Issues</a>
+</p>
+
+---
+
+## What is Sovrium?
+
+Sovrium turns **configuration files** into full-featured web applications -- database, auth, API, and UI included.
+
+No code generation. No external services. Just config and `sovrium start`.
+
+**Choose your format** -- YAML for readability, TypeScript for type safety:
+
+```yaml
+# sovrium.yaml
+name: my-crm
+
+tables:
+  - id: 1
+    name: contacts
+    fields:
+      - id: 1
+        name: email
+        type: email
+      - id: 2
+        name: name
+        type: single-line-text
+      - id: 3
+        name: company
+        type: single-line-text
+
+auth:
+  emailAndPassword: true
+
+pages:
+  - name: home
+    path: /
+    sections:
+      - type: h1
+        content: Welcome to My CRM
+```
+
+<details>
+<summary>Or use TypeScript for IDE completion</summary>
+
+```typescript
+// app.ts
+import { start } from 'sovrium'
+
+await start({
+  name: 'my-crm',
+  tables: [
+    {
+      id: 1,
+      name: 'contacts',
+      fields: [
+        { id: 1, name: 'email', type: 'email' },
+        { id: 2, name: 'name', type: 'single-line-text' },
+        { id: 3, name: 'company', type: 'single-line-text' },
+      ],
+    },
+  ],
+  auth: { emailAndPassword: true },
+  pages: [
+    {
+      name: 'home',
+      path: '/',
+      sections: [{ type: 'h1', content: 'Welcome to My CRM' }],
+    },
+  ],
+})
+```
+
+</details>
+
+```bash
+sovrium start sovrium.yaml   # Run with YAML
+bun run app.ts               # Or run with TypeScript
+# -> http://localhost:3000
+```
+
+---
+
+## Why Sovrium?
+
+**The problem**: Organizations pay $10k+/month for 20+ SaaS tools, with data scattered everywhere and zero control.
+
+**The solution**: One self-hosted platform that does what you need, configured in files you own.
+
+|                     |     Sovrium     |  SaaS Tools  |
+| ------------------- | :-------------: | :----------: |
+| **Data ownership**  |  Your servers   | Vendor cloud |
+| **Monthly cost**    | $0 (infra only) | $20-50/user  |
+| **Vendor lock-in**  |      None       |   Complete   |
+| **Customization**   |    Unlimited    |   Limited    |
+| **Version control** |   Git-native    |     None     |
+
+---
+
+## Quick Start
+
+**Requirements**: [Bun](https://bun.sh) 1.3+ and [PostgreSQL](https://www.postgresql.org/) 15+
+
+```bash
+# Install
+bun add sovrium
+
+# Create config
+cat > sovrium.yaml << EOF
+name: my-app
+pages:
+  - name: home
+    path: /
+    sections:
+      - type: h1
+        content: Hello World
+EOF
+
+# Run
+sovrium start sovrium.yaml
+
+# Or use environment variable (JSON, YAML, or URL)
+APP_SCHEMA='{"name":"my-app"}' sovrium start
+APP_SCHEMA='name: my-app' sovrium start
+APP_SCHEMA='https://example.com/app.yaml' sovrium start
+```
+
+---
+
+## Features
+
+### Database & Tables
+
+Define your data model in config. Sovrium creates PostgreSQL tables, handles migrations, and exposes a full REST API automatically.
+
+- **44+ field types** -- text, numeric, date/time, selection, media, relational, user tracking, and advanced types (formula, JSON, geolocation, barcode, autonumber, and more)
+- **Relationships** -- one-to-many and many-to-many with lookup and rollup fields
+- **Views** -- filtered, sorted, and grouped views with field-level visibility
+- **Indexes and constraints** -- primary keys, unique constraints, check constraints
+- **Soft delete** -- built-in trash with restore capability
+- **Permissions** -- role-based table and field-level access control
+- **Schema evolution** -- migration system for safe schema changes
+
+### REST API
+
+Every table gets a full CRUD API with no additional code.
+
+- **Records** -- create, read, update, delete with field validation
+- **Batch operations** -- bulk create, update, and upsert
+- **Filtering and sorting** -- query records with field-based filters
+- **Pagination** -- cursor and offset-based pagination
+- **Activity logs** -- audit trail for all record changes
+- **Rate limiting** -- configurable per-endpoint rate limits
+
+### Authentication
+
+Production-ready auth out of the box.
+
+- **Email/password** -- sign up, sign in, email verification, password reset
+- **Magic link** -- passwordless email authentication
+- **Two-factor** -- TOTP-based 2FA
+- **OAuth** -- social login providers
+- **Roles** -- admin, member, viewer with custom roles
+- **Admin plugin** -- user management, banning, impersonation
+- **Session management** -- list, revoke, and manage active sessions
+
+### Pages & UI
+
+Server-rendered pages with a component-based system.
+
+- **Dynamic routing** -- path-based page routing
+- **Sections** -- composable content sections with theming support
+- **Reusable components** -- define once with `$ref`, customize with `$vars`
+- **SEO metadata** -- title, description, Open Graph, structured data
+- **Scripts** -- custom head and body scripts per page
+
+### Theming
+
+Design system configuration for consistent styling.
+
+- **Colors** -- primary, secondary, accent, and semantic color tokens
+- **Fonts** -- custom font families with Google Fonts support
+- **Spacing, shadows, border-radius** -- design tokens applied globally
+- **Animations** -- configurable keyframe animations
+- **Breakpoints** -- responsive design breakpoints
+
+### Internationalization
+
+Multi-language support built in.
+
+- **Language configuration** -- define supported languages and default
+- **Translation tokens** -- `$t:` syntax for referencing translations in pages
+- **Browser detection** -- automatic language detection
+- **Persistence** -- remember user language preference
+
+### CLI
+
+- `sovrium start` -- run the application from a config file
+- `sovrium build` -- generate a static site from config
+- Supports YAML, JSON, and TypeScript config files
+
+---
+
+## Architecture
+
+```
+Config File (YAML/JSON/TS)
+    |
+    v
+Effect Schema (validation)
+    |
+    v
+Sovrium Runtime
+    |
+    +---> PostgreSQL (tables, records, migrations)
+    +---> Hono (REST API + SSR)
+    +---> Better Auth (sessions, OAuth, 2FA)
+    +---> React + Tailwind (server-rendered UI)
+```
+
+### Stack
+
+|                                           |                |
+| :---------------------------------------- | :------------- |
+| [Bun](https://bun.sh)                     | Runtime        |
+| [Hono](https://hono.dev)                  | Web framework  |
+| [Drizzle](https://orm.drizzle.team)       | Database ORM   |
+| [Effect](https://effect.website)          | Type-safe FP   |
+| [React 19](https://react.dev)             | UI (SSR)       |
+| [Tailwind CSS 4](https://tailwindcss.com) | Styling        |
+| [Better Auth](https://better-auth.com)    | Authentication |
+
+### Project Structure
+
+```
+src/
+  domain/          # Business logic, Effect Schema models
+    models/app/    # App configuration schema (tables, auth, pages, theme, ...)
+    models/api/    # API contracts (Zod schemas for OpenAPI)
+  application/     # Use cases, Effect programs
+  infrastructure/  # Database, auth, CSS compiler, email, logging
+  presentation/    # API routes, CLI, React components, styling
+specs/             # 2,200+ E2E tests (Playwright)
+docs/              # Architecture and infrastructure documentation
+```
+
+---
+
+## Status
+
+**Sovrium is under active development.**
+
+The specification and testing phase is nearly complete: **2,270 out of 2,283 E2E tests are passing** across 225 spec files, covering 272 user stories with 2,394 acceptance criteria. A TDD automation pipeline handles test implementation, averaging 15+ specs fixed per day.
+
+| Domain     | Spec Files | Tests | Status |
+| ---------- | ---------: | ----: | ------ |
+| API        |         67 |   627 | 100%   |
+| App Schema |        131 | 1,398 | 99%    |
+| CLI        |          9 |   108 | 100%   |
+| Migrations |         17 |   139 | 100%   |
+| Templates  |          1 |    11 | 100%   |
+
+Track progress in detail: [SPEC-PROGRESS.md](SPEC-PROGRESS.md)
+
+---
+
+## Development
+
+```bash
+bun install                   # Install dependencies
+bun run start                 # Run application
+bun run quality --skip-e2e    # Lint, format, typecheck, unit tests
+bun test:unit                 # Unit tests only
+bun test:e2e:regression       # E2E regression tests
+bun run progress              # Spec analysis and progress report
+```
+
+---
+
+## Contributing
+
+We welcome contributions! See [CLAUDE.md](CLAUDE.md) for coding standards and architecture details.
+
+```bash
+git clone https://github.com/sovrium/sovrium
+cd sovrium && bun install
+```
+
+---
+
+## License
+
+[BSL-1.1](LICENSE.md) -- Free for internal and non-commercial use. Becomes Apache 2.0 on January 1, 2029.
+
+---
+
+<p align="center">
+  <sub><strong>Own your data. Own your tools. Own your future.</strong></sub>
+</p>
+
+<p align="center">
+  <sub>&copy; 2025 ESSENTIAL SERVICES &middot; <a href="TRADEMARK.md">Trademark</a></sub>
+</p>

package/drizzle/0000_melted_kabuki.sql

@@ -0,0 +1,163 @@
+CREATE SCHEMA "auth";
+--> statement-breakpoint
+CREATE SCHEMA "system";
+--> statement-breakpoint
+CREATE TABLE "auth"."account" (
+	"id" text PRIMARY KEY NOT NULL,
+	"account_id" text NOT NULL,
+	"provider_id" text NOT NULL,
+	"user_id" text NOT NULL,
+	"access_token" text,
+	"refresh_token" text,
+	"id_token" text,
+	"access_token_expires_at" timestamp with time zone,
+	"refresh_token_expires_at" timestamp with time zone,
+	"scope" text,
+	"password" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "auth"."session" (
+	"id" text PRIMARY KEY NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"token" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"ip_address" text,
+	"user_agent" text,
+	"user_id" text NOT NULL,
+	"impersonated_by" text,
+	CONSTRAINT "session_token_unique" UNIQUE("token")
+);
+--> statement-breakpoint
+CREATE TABLE "auth"."two_factor" (
+	"id" text PRIMARY KEY NOT NULL,
+	"user_id" text NOT NULL,
+	"secret" text NOT NULL,
+	"backup_codes" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "auth"."user" (
+	"id" text PRIMARY KEY NOT NULL,
+	"name" text NOT NULL,
+	"email" text NOT NULL,
+	"email_verified" boolean DEFAULT false NOT NULL,
+	"image" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"role" text,
+	"banned" boolean DEFAULT false,
+	"ban_reason" text,
+	"ban_expires" timestamp with time zone,
+	"two_factor_enabled" boolean DEFAULT false,
+	CONSTRAINT "user_email_unique" UNIQUE("email")
+);
+--> statement-breakpoint
+CREATE TABLE "auth"."verification" (
+	"id" text PRIMARY KEY NOT NULL,
+	"identifier" text NOT NULL,
+	"value" text NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "system"."migration_history" (
+	"id" serial PRIMARY KEY NOT NULL,
+	"version" integer NOT NULL,
+	"checksum" text NOT NULL,
+	"schema" jsonb,
+	"applied_at" timestamp DEFAULT now(),
+	"rolled_back_at" timestamp
+);
+--> statement-breakpoint
+CREATE TABLE "system"."migration_log" (
+	"id" serial PRIMARY KEY NOT NULL,
+	"operation" text NOT NULL,
+	"from_version" integer,
+	"to_version" integer,
+	"reason" text,
+	"status" text NOT NULL,
+	"created_at" timestamp DEFAULT now()
+);
+--> statement-breakpoint
+CREATE TABLE "system"."schema_checksum" (
+	"id" text PRIMARY KEY NOT NULL,
+	"checksum" text NOT NULL,
+	"schema" jsonb NOT NULL,
+	"updated_at" timestamp DEFAULT now()
+);
+--> statement-breakpoint
+CREATE TABLE "system"."activity_logs" (
+	"id" text PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"user_id" text,
+	"session_id" text,
+	"action" text NOT NULL,
+	"table_name" text NOT NULL,
+	"table_id" text,
+	"record_id" text NOT NULL,
+	"changes" jsonb,
+	"ip_address" text,
+	"user_agent" text
+);
+--> statement-breakpoint
+CREATE TABLE "system"."analytics_page_views" (
+	"id" text PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"timestamp" timestamp with time zone DEFAULT now() NOT NULL,
+	"app_name" text DEFAULT 'default' NOT NULL,
+	"page_path" text NOT NULL,
+	"page_title" text,
+	"visitor_hash" text NOT NULL,
+	"session_hash" text DEFAULT gen_random_uuid() NOT NULL,
+	"is_entrance" boolean DEFAULT false NOT NULL,
+	"referrer_url" text,
+	"referrer_domain" text,
+	"utm_source" text,
+	"utm_medium" text,
+	"utm_campaign" text,
+	"utm_content" text,
+	"utm_term" text,
+	"device_type" text,
+	"browser_name" text,
+	"os_name" text,
+	"language" text,
+	"screen_width" smallint,
+	"screen_height" smallint
+);
+--> statement-breakpoint
+CREATE TABLE "system"."record_comments" (
+	"id" text PRIMARY KEY NOT NULL,
+	"record_id" text NOT NULL,
+	"table_id" text NOT NULL,
+	"user_id" text NOT NULL,
+	"content" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"deleted_at" timestamp with time zone
+);
+--> statement-breakpoint
+ALTER TABLE "auth"."account" ADD CONSTRAINT "account_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "auth"."session" ADD CONSTRAINT "session_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "auth"."two_factor" ADD CONSTRAINT "two_factor_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "system"."activity_logs" ADD CONSTRAINT "activity_logs_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "system"."record_comments" ADD CONSTRAINT "record_comments_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "account_userId_idx" ON "auth"."account" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "session_userId_idx" ON "auth"."session" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "twoFactor_secret_idx" ON "auth"."two_factor" USING btree ("secret");--> statement-breakpoint
+CREATE INDEX "twoFactor_userId_idx" ON "auth"."two_factor" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "verification_identifier_idx" ON "auth"."verification" USING btree ("identifier");--> statement-breakpoint
+CREATE INDEX "activity_logs_created_at_idx" ON "system"."activity_logs" USING btree ("created_at");--> statement-breakpoint
+CREATE INDEX "activity_logs_user_created_at_idx" ON "system"."activity_logs" USING btree ("user_id","created_at");--> statement-breakpoint
+CREATE INDEX "activity_logs_table_record_idx" ON "system"."activity_logs" USING btree ("table_name","record_id");--> statement-breakpoint
+CREATE INDEX "activity_logs_action_idx" ON "system"."activity_logs" USING btree ("action");--> statement-breakpoint
+CREATE INDEX "analytics_pv_app_timestamp_idx" ON "system"."analytics_page_views" USING btree ("app_name","timestamp");--> statement-breakpoint
+CREATE INDEX "analytics_pv_app_visitor_timestamp_idx" ON "system"."analytics_page_views" USING btree ("app_name","visitor_hash","timestamp");--> statement-breakpoint
+CREATE INDEX "analytics_pv_app_path_timestamp_idx" ON "system"."analytics_page_views" USING btree ("app_name","page_path","timestamp");--> statement-breakpoint
+CREATE INDEX "analytics_pv_app_referrer_idx" ON "system"."analytics_page_views" USING btree ("app_name","referrer_domain");--> statement-breakpoint
+CREATE INDEX "analytics_pv_app_utm_source_idx" ON "system"."analytics_page_views" USING btree ("app_name","utm_source");--> statement-breakpoint
+CREATE INDEX "analytics_pv_app_device_idx" ON "system"."analytics_page_views" USING btree ("app_name","device_type");--> statement-breakpoint
+CREATE INDEX "record_comments_record_created_idx" ON "system"."record_comments" USING btree ("table_id","record_id","created_at");--> statement-breakpoint
+CREATE INDEX "record_comments_user_created_idx" ON "system"."record_comments" USING btree ("user_id","created_at");--> statement-breakpoint
+CREATE INDEX "record_comments_deleted_at_idx" ON "system"."record_comments" USING btree ("deleted_at");