stock-management 1.0.0

package/backend/package.json

@@ -0,0 +1,20 @@
+{
+  "name": "backend",
+  "version": "1.0.0",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "ISC",
+  "description": "",
+  "dependencies": {
+    "bcryptjs": "^3.0.3",
+    "cors": "^2.8.6",
+    "dotenv": "^17.4.2",
+    "express": "^5.2.1",
+    "jsonwebtoken": "^9.0.3",
+    "mysql2": "^3.22.3"
+  }
+}

package/backend/routes/Auth.js

@@ -0,0 +1,94 @@
+const express = require('express');
+const bcrypt = require('bcryptjs'); 
+const jwt = require('jsonwebtoken'); 
+require('dotenv').config();
+
+const router = express.Router();
+const db = require('../db'); 
+
+// ==================== REGISTER ====================
+router.post('/users', async (req, res) => {
+    const { username, email, password, role } = req.body;
+
+    // 
+    if (!username || !email || !password) {
+        return res.status(400).json({ message: "Uzuza ibyasabwe byose (username, email, password)" });
+    }
+
+    try {
+        // 2. Reba niba email isanzwe mu bashyitsi
+        const [existingUser] = await db.query('SELECT * FROM users WHERE email = ?', [email]);
+        if (existingUser.length > 0) {
+            return res.status(400).json({ message: "Iyi email isanzwe ikoreshwa!" });
+        }
+
+        // 3. Hashing password (Umutekano)
+        const salt = await bcrypt.genSalt(10);
+        const hashedPassword = await bcrypt.hash(password, salt);
+
+        // 4. Shyira umuser muri Database (role default ni 'user' niba idatanzwe)
+        const userRole = role || 'user';
+        const query = 'INSERT INTO users (username, email, password, role) VALUES (?, ?, ?, ?)';
+        
+        // HAKOSOWE: Hari hasigaye .promise() kugira ngo async/await ikore
+        await db.query(query, [username, email, hashedPassword, userRole]);
+
+        return res.status(201).json({ message: "Umukoresha (User) wegeranyijwe neza!" });
+
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({ message: "Hari ikibazo cyabaye kuri server", error: error.message });
+    }
+});
+
+// ==================== LOGIN ====================
+router.post('/login', async (req, res) => {
+    const { email, password } = req.body;
+
+    // 1. Reba niba amakuru yatanzwe
+    if (!email || !password) {
+        return res.status(400).json({ message: "Uzuza email na password!" });
+    }
+
+    try {
+        // 2. Shaka umuser ukoresheje email
+        const [users] = await db.query('SELECT * FROM users WHERE email = ?', [email]);
+        if (users.length === 0) {
+            return res.status(400).json({ message: "Email cyangwa Password ntabwo ari byo!" });
+        }
+
+        const user = users[0];
+
+        // 3. Ganisha password yanditswe n'iri muri database (Bcrypt compare)
+        const isMatch = await bcrypt.compare(password, user.password);
+        if (!isMatch) {
+            return res.status(400).json({ message: "Email cyangwa Password ntabwo ari byo!" });
+        }
+
+        // 4. Kora JWT Token (Igihe azamara ari logged in)
+        // Shingira kuri JWT_SECRET iri muli .env file yawe
+        const token = jwt.sign(
+            { id: user.id, role: user.role },
+            process.env.JWT_SECRET || 'izina_ry_ibanga_ryiza', 
+            { expiresIn: '1h' } // Icyura igihe nyuma y'isaha imwe
+        );
+
+        // 5. Garura amakuru n'umutekano (Token) muli Frontend
+        return res.status(200).json({
+            message: "Uyinjiye neza!",
+            token: token,
+            user: {
+                id: user.id,
+                username: user.username,
+                email: user.email,
+                role: user.role
+            }
+        });
+
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({ message: "Hari ikibazo cyabaye kuri server", error: error.message });
+    }
+});
+
+module.exports = router;

package/backend/routes/ProductIn.js

@@ -0,0 +1,72 @@
+const express = require('express');
+const mysql = require('mysql2');
+require('dotenv').config();
+
+const db = require('../db');
+const router = express.Router();
+
+// ===================== CREATE A PRODUCT IN =====================
+router.post('/', async (req, res) => {
+    const { productcode, date, quantity, uniqueprice, totalprice } = req.body;
+    
+    if (!productcode || !date || !quantity || !uniqueprice || !totalprice) {
+        return res.status(400).json({ message: "Uzuza amakuru yose asabwa!" });
+    }
+
+    try {
+        const [result] = await db.query(
+            'INSERT INTO product_in (ProductCode, Date, Quantity, UniquePrice, Totalprice) VALUES (?, ?, ?, ?, ?)',
+            [productcode, date, quantity, uniqueprice, totalprice]
+        );
+        return res.status(201).json({ message: "Product in created successfully", productInId: result.insertId });
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({ message: "Hari ikibazo cyabaye kuri server", error: error.message });
+    }
+});
+        
+// ===================== GET ALL PRODUCT IN ============================
+router.get('/', async (req, res) => {
+    try {
+        // HAKOSOWE: id yongeweho kugira ngo ifatswe neza mu guhindura cyangwa gusiba
+        const [rows] = await db.query(
+            'SELECT id, ProductCode AS productcode, Date AS date, Quantity AS quantity, UniquePrice AS uniqueprice, Totalprice AS totalprice FROM product_in ORDER BY id DESC'
+        );
+        return res.status(200).json(rows);
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({ message: "Hari ikibazo cyabaye kuri server", error: error.message });
+    }
+});
+
+// ======================== UPDATE A PRODUCT IN ===========================
+router.put('/:id', async (req, res) => {
+    const { productcode, date, quantity, uniqueprice, totalprice } = req.body;
+    const { id } = req.params;
+    
+    try {
+        await db.query(
+            'UPDATE product_in SET ProductCode = ?, Date = ?, Quantity = ?, UniquePrice = ?, Totalprice = ? WHERE id = ?',
+            [productcode, date, quantity, uniqueprice, totalprice, id]
+        );
+        return res.status(200).json({ message: "Product in updated successfully" });
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({ message: "Hari ikibazo cyabaye kuri server", error: error.message });
+    }
+});
+
+// ========================= DELETE A PRODUCT IN ======================
+router.delete('/:id', async (req, res) => {
+    const { id } = req.params;
+    
+    try {
+        await db.query('DELETE FROM product_in WHERE id = ?', [id]);
+        return res.status(200).json({ message: "Product in deleted successfully" });
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({ message: "Hari ikibazo cyabaye kuri server", error: error.message });
+    }
+});
+
+module.exports = router;

package/backend/routes/ProductOut.js

@@ -0,0 +1,133 @@
+const express = require('express');
+const db = require('../db');
+const router = express.Router();
+require('dotenv').config();
+// ===================== CREATE A PRODUCT OUT (POST) =====================
+router.post('/', async (req, res) => {
+    const { ProductCode, Date, Quantity, UniquePrice, Totalprice } = req.body;
+    
+    if (!ProductCode || !Date || !Quantity || !UniquePrice || !Totalprice) {
+        return res.status(400).json({ message: "All fields are required! Genzura niba code, itariki, ingano n'igiciro byuzuye." });
+    }
+
+    try {
+        // 1. Kubara ibyinjiye byose (Total Stock In) kuri icyo gicuruzwa
+        const [sumIn] = await db.query(
+            'SELECT SUM(Quantity) AS totalIn FROM product_in WHERE ProductCode = ?', 
+            [ProductCode]
+        );
+        const totalAvailableIn = Number(sumIn[0].totalIn || 0);
+
+        // 2. Kubara ibyasohotse byose basanzwe bafite muli stoki
+        const [sumOut] = await db.query(
+            'SELECT SUM(Quantity) AS totalOut FROM product_out WHERE ProductCode = ?', 
+            [ProductCode]
+        );
+        const totalAlreadyOut = Number(sumOut[0].totalOut || 0);
+
+        // 3. Kubara ingano isigaye mu bubiko (Current Stock)
+        const currentStock = totalAvailableIn - totalAlreadyOut;
+
+        // 4. Kugenzura niba ingano bashaka gusohora ihari
+        if (Number(Quantity) > currentStock) {
+            return res.status(400).json({ 
+                message: `Ntabwo bikunze! Ingano ushaka gusohora (${Quantity}) iruta iyasigaye muli stoki (${currentStock}).` 
+            });
+        }
+
+        // 5. Niba ihari, reka twemeze kwinjira
+        const [result] = await db.query(
+            'INSERT INTO product_out (ProductCode, Date, Quantity, UniquePrice, Totalprice) VALUES (?, ?, ?, ?, ?)',
+            [ProductCode, Date, Quantity, UniquePrice, Totalprice]
+        );
+        return res.status(201).json({ message: "Product out created successfully", productOutId: result.insertId });
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({ message: "Hari ikibazo cyabaye kuri server", error: error.message });
+    }
+});
+
+// ===================== GET ALL PRODUCT OUT (READ) =====================
+router.get('/', async (req, res) => {
+    try {
+        const [productOutList] = await db.query('SELECT * FROM product_out ORDER BY id DESC');
+        return res.status(200).json({ message: "Product out data retrieved successfully", productOutList });
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({ message: "Hari ikibazo cyabaye kuri server", error: error.message });
+    }
+});
+
+// ===================== UPDATE A PRODUCT OUT (UPDATE) =====================
+router.put('/:id', async (req, res) => {
+    const { ProductCode, Date, Quantity, UniquePrice, Totalprice } = req.body;
+    const { id } = req.params;
+
+    if (!ProductCode || !Date || !Quantity || !UniquePrice || !Totalprice) {
+        return res.status(400).json({ message: "All fields are required for update" });
+    }
+
+    try {
+        // 1. Gufata ingano ya kera y'iki gicuruzwa cyari gifite kuri uyu murongo (Gukuraho amakosa yo kwisuzugura)
+        const [currentRecord] = await db.query('SELECT Quantity FROM product_out WHERE id = ?', [id]);
+        if (currentRecord.length === 0) {
+            return res.status(404).json({ message: "Nta product out yabonetse ifite iyo ID" });
+        }
+        const oldQuantity = Number(currentRecord[0].Quantity || 0);
+
+        // 2. Kubara ibyinjiye byose muli Stock In
+        const [sumIn] = await db.query(
+            'SELECT SUM(Quantity) AS totalIn FROM product_in WHERE ProductCode = ?', 
+            [ProductCode]
+        );
+        const totalAvailableIn = Number(sumIn[0].totalIn || 0);
+
+        // 3. Kubara ibyasohotse byose uretse iyi turimo guhindura ubu (Other records)
+        const [sumOut] = await db.query(
+            'SELECT SUM(Quantity) AS totalOut FROM product_out WHERE ProductCode = ? AND id != ?', 
+            [ProductCode, id]
+        );
+        const totalOtherOut = Number(sumOut[0].totalOut || 0);
+
+        // 4. Ingano yose ishobora gushirwaho (Max available for update)
+        const maxAvailableStock = totalAvailableIn - totalOtherOut;
+
+        // 5. Gupima niba ingano nshya bayemera
+        if (Number(Quantity) > maxAvailableStock) {
+            return res.status(400).json({ 
+                message: `Ntabwo bikunze muli Update! Ingano nshya ushaka gushyiraho (${Quantity}) iruta iyasigaye muli stoki (${maxAvailableStock}).` 
+            });
+        }
+
+        // 6. Gukora Update
+        const [result] = await db.query(
+            'UPDATE product_out SET ProductCode = ?, Date = ?, Quantity = ?, UniquePrice = ?, Totalprice = ? WHERE id = ?',
+            [ProductCode, Date, Quantity, UniquePrice, Totalprice, id]
+        );
+        
+        return res.status(200).json({ message: "Product out updated successfully" });
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({ message: "Hari ikibazo cyabaye kuri server", error: error.message });
+    }
+});
+
+// ===================== DELETE A PRODUCT OUT (DELETE) =====================
+router.delete('/:id', async (req, res) => {
+    const { id } = req.params;
+
+    try {
+        const [result] = await db.query('DELETE FROM product_out WHERE id = ?', [id]);
+
+        if (result.affectedRows === 0) {
+            return res.status(404).json({ message: "Nta product out yabonetse ifite iyo ID" });
+        }
+
+        return res.status(200).json({ message: "Product out deleted successfully" });
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({ message: "Hari ikibazo cyabaye kuri server", error: error.message });
+    }
+});
+
+module.exports = router;

package/backend/routes/product.js

@@ -0,0 +1,102 @@
+const express = require('express');
+const mysql = require('mysql2');
+require('dotenv').config();
+const db = require('../db'); // Iyi ifite promise tayari
+const router = express.Router();
+
+// ===================== 1. SOMA (GET ALL PRODUCTS) =====================
+router.get('/', async (req, res) => {
+    try {
+        // HAKOSOWE: Hakuwemo .promise() kuko db yacu yo muri db.js isanzwe iyifite
+        const [rows] = await db.query(
+            'SELECT productcode, productname, description, price FROM products'
+        );
+        
+        // Kugarura data kandi 'productcode' igakora nka 'id' muri React
+        const formattedRows = rows.map(row => ({
+            id: row.productcode || row.ProductCode, 
+            productcode: row.productcode || row.ProductCode,
+            ProductCode: row.productcode || row.ProductCode,
+            productname: row.productname || row.ProductName,
+            ProductName: row.productname || row.ProductName,
+            description: row.description || row.Description || '',
+            Description: row.description || row.Description || '',
+            price: row.price !== undefined ? row.price : row.Price,
+            Price: row.price !== undefined ? row.price : row.Price
+        }));
+
+        return res.status(200).json(formattedRows); 
+    } catch (error) {
+        console.error("Error in GET /api/products:", error);
+        return res.status(500).json({ message: "Hari ikibazo cyabaye kuri server", error: error.message });
+    }
+});
+
+// ===================== 2. REMA (CREATE A NEW PRODUCT) =====================
+router.post('/', async (req, res) => {
+    const productcode = req.body.productcode || req.body.ProductCode;
+    const productname = req.body.productname || req.body.ProductName;
+    const description = req.body.description || req.body.Description;
+    const price = req.body.price !== undefined ? req.body.price : req.body.Price;
+
+    if (!productcode || !productname) {
+        return res.status(400).json({ message: "Code n'Izina ry'igicuruzwa bigomba kuzuzwa!" });
+    }
+
+    const prodDesc = description || '';
+    const prodPrice = price || 0; 
+
+    try {
+        // HAKOSOWE: Hakuwemo .promise()
+        const [result] = await db.query(
+            'INSERT INTO products (productcode, productname, description, price) VALUES (?, ?, ?, ?)',
+            [productcode, productname, prodDesc, prodPrice]
+        );
+        return res.status(201).json({ message: "Product created successfully", productId: productcode });
+    } catch (error) {
+        console.error("Error in POST /api/products:", error);
+        return res.status(500).json({ message: "Hari ikibazo cyabaye kuri server", error: error.message });
+    }
+});
+
+// ====================== 3. HINDURA (UPDATE A PRODUCT) =====================
+router.put('/:id', async (req, res) => {
+    const { id } = req.params; // Iyi id izaba irimo ya productcode ya gicuruzwa
+    
+    const productcode = req.body.productcode || req.body.ProductCode;
+    const productname = req.body.productname || req.body.ProductName;
+    const description = req.body.description || req.body.Description;
+    const price = req.body.price !== undefined ? req.body.price : req.body.Price;
+
+    if (!productcode || !productname) {
+        return res.status(400).json({ message: "Code n'Izina ry'igicuruzwa bigomba kuzuzwa!" });
+    }
+
+    try {
+        // HAKOSOWE: Gukoresha 'WHERE productcode = ?' kuko nta nkingi ya 'id' iri kuri table
+        await db.query(
+            'UPDATE products SET productname = ?, description = ?, price = ? WHERE productcode = ?',
+            [productname, description || '', price || 0, id]
+        );
+        return res.status(200).json({ message: "Product updated successfully" });
+    } catch (error) {
+        console.error("Error in PUT /api/products:", error);
+        return res.status(500).json({ message: "Hari ikibazo cyabaye kuri server", error: error.message });
+    }
+});
+
+// ====================== 4. SIBA (DELETE A PRODUCT) =====================
+router.delete('/:id', async (req, res) => {
+    const { id } = req.params; // Iyi nayo ni productcode iba ije
+
+    try {
+        // HAKOSOWE: Gukoresha 'WHERE productcode = ?' aho gukoresha 'id' idahari
+        await db.query('DELETE FROM products WHERE productcode = ?', [id]);
+        return res.status(200).json({ message: "Product deleted successfully" });
+    } catch (error) {
+        console.error("Error in DELETE /api/products:", error);
+        return res.status(500).json({ message: "Hari ikibazo cyabaye kuri server", error: error.message });
+    }
+});
+
+module.exports = router;

package/backend/server.js

@@ -0,0 +1,34 @@
+const express = require('express');
+const mysql = require('mysql2');
+const cors = require('cors');
+require('dotenv').config();
+
+const app = express();
+const db = require('./db');
+
+app.use(express.json());
+app.use(cors());
+
+// ===================== IMPORT ROUTERS =====================
+// HAKOSOWE: Inzira n'amazina byashyizwe neza nk'uko biri ku ifoto yawe
+const AuthRoutes = require('./routes/Auth');
+const productRoutes = require('./routes/product');
+const productInRoutes = require('./routes/ProductIn');
+const productOutRoutes = require('./routes/ProductOut');
+
+
+// ===================== USE ROUTERS =====================
+
+app.use('/api/auth', AuthRoutes);
+app.use('/api/products', productRoutes);
+app.use('/api/product-in', productInRoutes);
+app.use('/api/product-out', productOutRoutes);
+
+
+// ===================== SERVER START =====================
+const PORT = process.env.PORT || 5000;
+app.listen(PORT, () => {
+    console.log(`Server is running on port ${PORT}`);
+});
+
+module.exports = app;

package/frontend/README.md

@@ -0,0 +1,18 @@
+# React + Vite
+
+This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.
+
+Currently, two official plugins are available:
+
+- [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react) uses [Oxc](https://oxc.rs)
+- [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc) uses [SWC](https://swc.rs/)
+
+## React Compiler
+
+The React Compiler is enabled on this template. See [this documentation](https://react.dev/learn/react-compiler) for more information.
+
+Note: This will impact Vite dev & build performances.
+
+## Expanding the ESLint configuration
+
+If you are developing a production application, we recommend using TypeScript with type-aware lint rules enabled. Check out the [TS template](https://github.com/vitejs/vite/tree/main/packages/create-vite/template-react-ts) for information on how to integrate TypeScript and [`typescript-eslint`](https://typescript-eslint.io) in your project.

package/frontend/eslint.config.js

@@ -0,0 +1,21 @@
+import js from '@eslint/js'
+import globals from 'globals'
+import reactHooks from 'eslint-plugin-react-hooks'
+import reactRefresh from 'eslint-plugin-react-refresh'
+import { defineConfig, globalIgnores } from 'eslint/config'
+
+export default defineConfig([
+  globalIgnores(['dist']),
+  {
+    files: ['**/*.{js,jsx}'],
+    extends: [
+      js.configs.recommended,
+      reactHooks.configs.flat.recommended,
+      reactRefresh.configs.vite,
+    ],
+    languageOptions: {
+      globals: globals.browser,
+      parserOptions: { ecmaFeatures: { jsx: true } },
+    },
+  },
+])

package/frontend/index.html

@@ -0,0 +1,13 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>frontend</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.jsx"></script>
+  </body>
+</html>