vasp-cli 0.1.3 → 0.1.4

package/dist/vasp

@@ -1,6 +1,5 @@
 #!/usr/bin/env bun
 // @bun
-#!/usr/bin/env bun
 var y8=Object.create;var{getPrototypeOf:D8,defineProperty:P$,getOwnPropertyNames:x8}=Object;var L8=Object.prototype.hasOwnProperty;function s8(_){return this[_]}var B8,U8,Uq=(_,q,$)=>{var f=_!=null&&typeof _==="object";if(f){var K=q?B8??=new WeakMap:U8??=new WeakMap,P=K.get(_);if(P)return P}$=_!=null?y8(D8(_)):{};let j=q||!_||!_.__esModule?P$($,"default",{value:_,enumerable:!0}):$;for(let w of x8(_))if(!L8.call(j,w))P$(j,w,{get:s8.bind(_,w),enumerable:!0});if(f)K.set(_,j);return j};var H=(_,q)=>()=>(q||_((q={exports:{}}).exports,q),q.exports);var kq=import.meta.require;var Qq=H((A7,Fq)=>{var tq=process||{},j$=tq.argv||[],dq=tq.env||{},F8=!(!!dq.NO_COLOR||j$.includes("--no-color"))&&(!!dq.FORCE_COLOR||j$.includes("--color")||tq.platform==="win32"||(tq.stdout||{}).isTTY&&dq.TERM!=="dumb"||!!dq.CI),Q8=(_,q,$=_)=>(f)=>{let K=""+f,P=K.indexOf(q,_.length);return~P?_+qf(K,q,$,P)+q:_+K+q},qf=(_,q,$,f)=>{let K="",P=0;do K+=_.substring(P,f)+$,P=f+q.length,f=_.indexOf(q,P);while(~f);return K+_.substring(P)},v$=(_=F8)=>{let q=_?Q8:()=>String;return{isColorSupported:_,reset:q("\x1B[0m","\x1B[0m"),bold:q("\x1B[1m","\x1B[22m","\x1B[22m\x1B[1m"),dim:q("\x1B[2m","\x1B[22m","\x1B[22m\x1B[2m"),italic:q("\x1B[3m","\x1B[23m"),underline:q("\x1B[4m","\x1B[24m"),inverse:q("\x1B[7m","\x1B[27m"),hidden:q("\x1B[8m","\x1B[28m"),strikethrough:q("\x1B[9m","\x1B[29m"),black:q("\x1B[30m","\x1B[39m"),red:q("\x1B[31m","\x1B[39m"),green:q("\x1B[32m","\x1B[39m"),yellow:q("\x1B[33m","\x1B[39m"),blue:q("\x1B[34m","\x1B[39m"),magenta:q("\x1B[35m","\x1B[39m"),cyan:q("\x1B[36m","\x1B[39m"),white:q("\x1B[37m","\x1B[39m"),gray:q("\x1B[90m","\x1B[39m"),bgBlack:q("\x1B[40m","\x1B[49m"),bgRed:q("\x1B[41m","\x1B[49m"),bgGreen:q("\x1B[42m","\x1B[49m"),bgYellow:q("\x1B[43m","\x1B[49m"),bgBlue:q("\x1B[44m","\x1B[49m"),bgMagenta:q("\x1B[45m","\x1B[49m"),bgCyan:q("\x1B[46m","\x1B[49m"),bgWhite:q("\x1B[47m","\x1B[49m"),blackBright:q("\x1B[90m","\x1B[39m"),redBright:q("\x1B[91m","\x1B[39m"),greenBright:q("\x1B[92m","\x1B[39m"),yellowBright:q("\x1B[93m","\x1B[39m"),blueBright:q("\x1B[94m","\x1B[39m"),magentaBright:q("\x1B[95m","\x1B[39m"),cyanBright:q("\x1B[96m","\x1B[39m"),whiteBright:q("\x1B[97m","\x1B[39m"),bgBlackBright:q("\x1B[100m","\x1B[49m"),bgRedBright:q("\x1B[101m","\x1B[49m"),bgGreenBright:q("\x1B[102m","\x1B[49m"),bgYellowBright:q("\x1B[103m","\x1B[49m"),bgBlueBright:q("\x1B[104m","\x1B[49m"),bgMagentaBright:q("\x1B[105m","\x1B[49m"),bgCyanBright:q("\x1B[106m","\x1B[49m"),bgWhiteBright:q("\x1B[107m","\x1B[49m")}};Fq.exports=v$();Fq.exports.createColors=v$});var p=H((zf)=>{zf.__esModule=!0;zf.extend=z$;zf.indexOf=Of;zf.escapeExpression=Yf;zf.isEmpty=hf;zf.createFrame=Tf;zf.blockParams=kf;zf.appendContextPath=rf;var Pf={"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#x27;","`":"&#x60;","=":"&#x3D;"},jf=/[&<>"'`=]/g,vf=/[&<>"'`=]/;function wf(_){return Pf[_]}function z$(_){for(var q=1;q<arguments.length;q++)for(var $ in arguments[q])if(Object.prototype.hasOwnProperty.call(arguments[q],$))_[$]=arguments[q][$];return _}var j_=Object.prototype.toString;zf.toString=j_;var P_=function(q){return typeof q==="function"};if(P_(/x/))zf.isFunction=P_=function(_){return typeof _==="function"&&j_.call(_)==="[object Function]"};zf.isFunction=P_;var H$=Array.isArray||function(_){return _&&typeof _==="object"?j_.call(_)==="[object Array]":!1};zf.isArray=H$;function Of(_,q){for(var $=0,f=_.length;$<f;$++)if(_[$]===q)return $;return-1}function Yf(_){if(typeof _!=="string"){if(_&&_.toHTML)return _.toHTML();else if(_==null)return"";else if(!_)return _+"";_=""+_}if(!vf.test(_))return _;return _.replace(jf,wf)}function hf(_){if(!_&&_!==0)return!0;else if(H$(_)&&_.length===0)return!0;else return!1}function Tf(_){var q=z$({},_);return q._parent=_,q}function kf(_,q){return _.path=q,_}function rf(_,q){return(_?_+".":"")+q}});var t=H((W$,J$)=>{W$.__esModule=!0;var v_=["description","fileName","lineNumber","endLineNumber","message","name","number","stack"];function w_(_,q){var $=q&&q.loc,f=void 0,K=void 0,P=void 0,j=void 0;if($)f=$.start.line,K=$.end.line,P=$.start.column,j=$.end.column,_+=" - "+f+":"+P;var w=Error.prototype.constructor.call(this,_);for(var O=0;O<v_.length;O++)this[v_[O]]=w[v_[O]];if(Error.captureStackTrace)Error.captureStackTrace(this,w_);try{if($)if(this.lineNumber=f,this.endLineNumber=K,Object.defineProperty)Object.defineProperty(this,"column",{value:P,enumerable:!0}),Object.defineProperty(this,"endColumn",{value:j,enumerable:!0});else this.column=P,this.endColumn=j}catch(v){}}w_.prototype=Error();W$.default=w_;J$.exports=W$.default});var u$=H((Z$,m$)=>{Z$.__esModule=!0;var O_=p();Z$.default=function(_){_.registerHelper("blockHelperMissing",function(q,$){var{inverse:f,fn:K}=$;if(q===!0)return K(this);else if(q===!1||q==null)return f(this);else if(O_.isArray(q))if(q.length>0){if($.ids)$.ids=[$.name];return _.helpers.each(q,$)}else return f(this);else{if($.data&&$.ids){var P=O_.createFrame($.data);P.contextPath=O_.appendContextPath($.data.contextPath,$.name),$={data:P}}return K(q,$)}})};m$.exports=Z$.default});var A$=H((o$,n$)=>{o$.__esModule=!0;function af(_){return _&&_.__esModule?_:{default:_}}var zq=p(),bf=t(),Sf=af(bf);o$.default=function(_){_.registerHelper("each",function(q,$){if(!$)throw new Sf.default("Must pass iterator to #each");var{fn:f,inverse:K}=$,P=0,j="",w=void 0,O=void 0;if($.data&&$.ids)O=zq.appendContextPath($.data.contextPath,$.ids[0])+".";if(zq.isFunction(q))q=q.call(this);if($.data)w=zq.createFrame($.data);function v(W,m,a){if(w){if(w.key=W,w.index=m,w.first=m===0,w.last=!!a,O)w.contextPath=O+W}j=j+f(q[W],{data:w,blockParams:zq.blockParams([q[W],W],[O+W,null])})}if(q&&typeof q==="object")if(zq.isArray(q)){for(var h=q.length;P<h;P++)if(P in q)v(P,P,P===q.length-1)}else if(typeof Symbol==="function"&&q[Symbol.iterator]){var Y=[],T=q[Symbol.iterator]();for(var z=T.next();!z.done;z=T.next())Y.push(z.value);q=Y;for(var h=q.length;P<h;P++)v(P,P,P===q.length-1)}else(function(){var W=void 0;if(Object.keys(q).forEach(function(m){if(W!==void 0)v(W,P-1);W=m,P++}),W!==void 0)v(W,P-1,!0)})();if(P===0)j=K(this);return j})};n$.exports=o$.default});var e$=H((X$,p$)=>{X$.__esModule=!0;function Vf(_){return _&&_.__esModule?_:{default:_}}var Mf=t(),Nf=Vf(Mf);X$.default=function(_){_.registerHelper("helperMissing",function(){if(arguments.length===1)return;else throw new Nf.default('Missing helper: "'+arguments[arguments.length-1].name+'"')})};p$.exports=X$.default});var a$=H((G$,i$)=>{G$.__esModule=!0;function Rf(_){return _&&_.__esModule?_:{default:_}}var d$=p(),gf=t(),t$=Rf(gf);G$.default=function(_){_.registerHelper("if",function(q,$){if(arguments.length!=2)throw new t$.default("#if requires exactly one argument");if(d$.isFunction(q))q=q.call(this);if(!$.hash.includeZero&&!q||d$.isEmpty(q))return $.inverse(this);else return $.fn(this)}),_.registerHelper("unless",function(q,$){if(arguments.length!=2)throw new t$.default("#unless requires exactly one argument");return _.helpers.if.call(this,q,{fn:$.inverse,inverse:$.fn,hash:$.hash})})};i$.exports=G$.default});var C$=H((b$,S$)=>{b$.__esModule=!0;b$.default=function(_){_.registerHelper("log",function(){var q=[void 0],$=arguments[arguments.length-1];for(var f=0;f<arguments.length-1;f++)q.push(arguments[f]);var K=1;if($.hash.level!=null)K=$.hash.level;else if($.data&&$.data.level!=null)K=$.data.level;q[0]=K,_.log.apply(_,q)})};S$.exports=b$.default});var M$=H((l$,V$)=>{l$.__esModule=!0;l$.default=function(_){_.registerHelper("lookup",function(q,$,f){if(!q)return q;return f.lookupProperty(q,$)})};V$.exports=l$.default});var E$=H((N$,c$)=>{N$.__esModule=!0;function Bf(_){return _&&_.__esModule?_:{default:_}}var Hq=p(),Uf=t(),Ff=Bf(Uf);N$.default=function(_){_.registerHelper("with",function(q,$){if(arguments.length!=2)throw new Ff.default("#with requires exactly one argument");if(Hq.isFunction(q))q=q.call(this);var f=$.fn;if(!Hq.isEmpty(q)){var K=$.data;if($.data&&$.ids)K=Hq.createFrame($.data),K.contextPath=Hq.appendContextPath($.data.contextPath,$.ids[0]);return f(q,{data:K,blockParams:Hq.blockParams([q],[K&&K.contextPath])})}else return $.inverse(this)})};c$.exports=N$.default});var Y_=H((WK)=>{WK.__esModule=!0;WK.registerDefaultHelpers=zK;WK.moveHelperToHooks=HK;function L(_){return _&&_.__esModule?_:{default:_}}var _K=u$(),$K=L(_K),fK=A$(),KK=L(fK),PK=e$(),jK=L(PK),vK=a$(),wK=L(vK),OK=C$(),YK=L(OK),hK=M$(),TK=L(hK),kK=E$(),rK=L(kK);function zK(_){$K.default(_),KK.default(_),jK.default(_),wK.default(_),YK.default(_),TK.default(_),rK.default(_)}function HK(_,q,$){if(_.helpers[q]){if(_.hooks[q]=_.helpers[q],!$)delete _.helpers[q]}}});var I$=H((R$,g$)=>{R$.__esModule=!0;var uK=p();R$.default=function(_){_.registerDecorator("inline",function(q,$,f,K){var P=q;if(!$.partials)$.partials={},P=function(j,w){var O=f.partials;f.partials=uK.extend({},O,$.partials);var v=q(j,w);return f.partials=O,v};return $.partials[K.args[0]]=K.fn,P})};g$.exports=R$.default});var y$=H((dK)=>{dK.__esModule=!0;dK.registerDefaultDecorators=eK;function AK(_){return _&&_.__esModule?_:{default:_}}var XK=I$(),pK=AK(XK);function eK(_){pK.default(_)}});var h_=H((D$,x$)=>{D$.__esModule=!0;var iK=p(),fq={methodMap:["debug","info","warn","error"],level:"info",lookupLevel:function(q){if(typeof q==="string"){var $=iK.indexOf(fq.methodMap,q.toLowerCase());if($>=0)q=$;else q=parseInt(q,10)}return q},log:function(q){if(q=fq.lookupLevel(q),typeof console<"u"&&fq.lookupLevel(fq.level)<=q){var $=fq.methodMap[q];if(!console[$])$="log";for(var f=arguments.length,K=Array(f>1?f-1:0),P=1;P<f;P++)K[P-1]=arguments[P];console[$].apply(console,K)}}};D$.default=fq;x$.exports=D$.default});var L$=H((lK)=>{lK.__esModule=!0;lK.createNewLookupObject=CK;var SK=p();function CK(){for(var _=arguments.length,q=Array(_),$=0;$<_;$++)q[$]=arguments[$];return SK.extend.apply(void 0,[Object.create(null)].concat(q))}});var T_=H((DK)=>{DK.__esModule=!0;DK.createProtoAccessControl=RK;DK.resultIsAllowed=gK;DK.resetLoggedProperties=yK;function NK(_){return _&&_.__esModule?_:{default:_}}var s$=L$(),cK=h_(),EK=NK(cK),iq=Object.create(null);function RK(_){var q=Object.create(null);q.constructor=!1,q.__defineGetter__=!1,q.__defineSetter__=!1,q.__lookupGetter__=!1;var $=Object.create(null);return $.__proto__=!1,{properties:{whitelist:s$.createNewLookupObject($,_.allowedProtoProperties),defaultValue:_.allowProtoPropertiesByDefault},methods:{whitelist:s$.createNewLookupObject(q,_.allowedProtoMethods),defaultValue:_.allowProtoMethodsByDefault}}}function gK(_,q,$){if(typeof _==="function")return B$(q.methods,$);else return B$(q.properties,$)}function B$(_,q){if(_.whitelist[q]!==void 0)return _.whitelist[q]===!0;if(_.defaultValue!==void 0)return _.defaultValue;return IK(q),!1}function IK(_){if(iq[_]!==!0)iq[_]=!0,EK.default.log("error",'Handlebars: Access has been denied to resolve the property "'+_+`" because it is not an "own property" of its parent.
 You can add a runtime option to disable the check or this warning:
 See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details`)}function yK(){Object.keys(iq).forEach(function(_){delete iq[_]})}});var bq=H((vP)=>{vP.__esModule=!0;vP.HandlebarsEnvironment=z_;function U$(_){return _&&_.__esModule?_:{default:_}}var s=p(),UK=t(),k_=U$(UK),FK=Y_(),QK=y$(),qP=h_(),aq=U$(qP),_P=T_(),$P="4.7.8";vP.VERSION=$P;var fP=8;vP.COMPILER_REVISION=fP;var KP=7;vP.LAST_COMPATIBLE_COMPILER_REVISION=KP;var PP={1:"<= 1.0.rc.2",2:"== 1.0.0-rc.3",3:"== 1.0.0-rc.4",4:"== 1.x.x",5:"== 2.0.0-alpha.x",6:">= 2.0.0-beta.1",7:">= 4.0.0 <4.3.0",8:">= 4.3.0"};vP.REVISION_CHANGES=PP;var r_="[object Object]";function z_(_,q,$){this.helpers=_||{},this.partials=q||{},this.decorators=$||{},FK.registerDefaultHelpers(this),QK.registerDefaultDecorators(this)}z_.prototype={constructor:z_,logger:aq.default,log:aq.default.log,registerHelper:function(q,$){if(s.toString.call(q)===r_){if($)throw new k_.default("Arg not supported with multiple helpers");s.extend(this.helpers,q)}else this.helpers[q]=$},unregisterHelper:function(q){delete this.helpers[q]},registerPartial:function(q,$){if(s.toString.call(q)===r_)s.extend(this.partials,q);else{if(typeof $>"u")throw new k_.default('Attempting to register a partial called "'+q+'" as undefined');this.partials[q]=$}},unregisterPartial:function(q){delete this.partials[q]},registerDecorator:function(q,$){if(s.toString.call(q)===r_){if($)throw new k_.default("Arg not supported with multiple decorators");s.extend(this.decorators,q)}else this.decorators[q]=$},unregisterDecorator:function(q){delete this.decorators[q]},resetLoggedPropertyAccesses:function(){_P.resetLoggedProperties()}};var jP=aq.default.log;vP.log=jP;vP.createFrame=s.createFrame;vP.logger=aq.default});var q6=H((F$,Q$)=>{F$.__esModule=!0;function H_(_){this.string=_}H_.prototype.toString=H_.prototype.toHTML=function(){return""+this.string};F$.default=H_;Q$.exports=F$.default});var _6=H((mP)=>{mP.__esModule=!0;mP.wrapHelper=ZP;function ZP(_,q){if(typeof _!=="function")return _;var $=function(){var K=arguments[arguments.length-1];return arguments[arguments.length-1]=q(K),_.apply(this,arguments)};return $}});var j6=H((CP)=>{CP.__esModule=!0;CP.checkRevision=dP;CP.template=tP;CP.wrapProgram=Sq;CP.resolvePartial=GP;CP.invokePartial=iP;CP.noop=K6;function nP(_){return _&&_.__esModule?_:{default:_}}function AP(_){if(_&&_.__esModule)return _;else{var q={};if(_!=null){for(var $ in _)if(Object.prototype.hasOwnProperty.call(_,$))q[$]=_[$]}return q.default=_,q}}var XP=p(),M=AP(XP),pP=t(),N=nP(pP),c=bq(),$6=Y_(),eP=_6(),f6=T_();function dP(_){var q=_&&_[0]||1,$=c.COMPILER_REVISION;if(q>=c.LAST_COMPATIBLE_COMPILER_REVISION&&q<=c.COMPILER_REVISION)return;if(q<c.LAST_COMPATIBLE_COMPILER_REVISION){var f=c.REVISION_CHANGES[$],K=c.REVISION_CHANGES[q];throw new N.default("Template was precompiled with an older version of Handlebars than the current runtime. Please update your precompiler to a newer version ("+f+") or downgrade your runtime to an older version ("+K+").")}else throw new N.default("Template was precompiled with a newer version of Handlebars than the current runtime. Please update your runtime to a newer version ("+_[1]+").")}function tP(_,q){if(!q)throw new N.default("No environment passed to template");if(!_||!_.main)throw new N.default("Unknown template object: "+typeof _);_.main.decorator=_.main_d,q.VM.checkRevision(_.compiler);var $=_.compiler&&_.compiler[0]===7;function f(j,w,O){if(O.hash){if(w=M.extend({},w,O.hash),O.ids)O.ids[0]=!0}j=q.VM.resolvePartial.call(this,j,w,O);var v=M.extend({},O,{hooks:this.hooks,protoAccessControl:this.protoAccessControl}),h=q.VM.invokePartial.call(this,j,w,v);if(h==null&&q.compile)O.partials[O.name]=q.compile(j,_.compilerOptions,q),h=O.partials[O.name](w,v);if(h!=null){if(O.indent){var Y=h.split(`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vasp-cli",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "The Vasp CLI — declarative full-stack framework for Vue developers",
   "license": "Apache-2.0",
   "type": "module",

package/templates/templates/shared/.env.example.hbs

@@ -0,0 +1,14 @@
+DATABASE_URL=postgres://user:password@localhost:5432/{{kebabCase appName}}
+PORT={{backendPort}}
+VITE_API_URL=http://localhost:{{backendPort}}/api
+{{#if hasAuth}}
+JWT_SECRET=change-me-in-production
+{{#if (includes authMethods "google")}}
+GOOGLE_CLIENT_ID=
+GOOGLE_CLIENT_SECRET=
+{{/if}}
+{{#if (includes authMethods "github")}}
+GITHUB_CLIENT_ID=
+GITHUB_CLIENT_SECRET=
+{{/if}}
+{{/if}}

package/templates/templates/shared/.gitignore.hbs

@@ -0,0 +1,8 @@
+node_modules
+dist
+.output
+.nuxt
+.vasp-gen
+.env
+.env.local
+*.log

package/templates/templates/shared/auth/client/Login.vue.hbs

@@ -0,0 +1,46 @@
+<template>
+  <div class="auth-form">
+    <h2>Login</h2>
+    <form @submit.prevent="handleLogin">
+      <input v-model="username" type="text" placeholder="Username" required />
+      <input v-model="password" type="password" placeholder="Password" required />
+      <button type="submit" :disabled="loading">
+        \{{ loading ? 'Logging in...' : 'Login' }}
+      </button>
+      <p v-if="error" class="error">\{{ error }}</p>
+    </form>
+    <p>Don't have an account? <RouterLink to="/register">Register</RouterLink></p>
+{{#if (includes authMethods "google")}}
+    <a href="/auth/google" class="oauth-btn">Continue with Google</a>
+{{/if}}
+{{#if (includes authMethods "github")}}
+    <a href="/auth/github" class="oauth-btn">Continue with GitHub</a>
+{{/if}}
+  </div>
+</template>
+
+<script setup>
+import { ref } from 'vue'
+import { useRouter } from 'vue-router'
+import { useAuth } from '../vasp/auth.js'
+
+const router = useRouter()
+const { login } = useAuth()
+const username = ref('')
+const password = ref('')
+const loading = ref(false)
+const error = ref('')
+
+async function handleLogin() {
+  loading.value = true
+  error.value = ''
+  try {
+    await login(username.value, password.value)
+    router.push('/')
+  } catch (err) {
+    error.value = err?.data?.error || 'Login failed'
+  } finally {
+    loading.value = false
+  }
+}
+</script>

package/templates/templates/shared/auth/client/Register.vue.hbs

@@ -0,0 +1,42 @@
+<template>
+  <div class="auth-form">
+    <h2>Create Account</h2>
+    <form @submit.prevent="handleRegister">
+      <input v-model="username" type="text" placeholder="Username" required />
+      <input v-model="email" type="email" placeholder="Email (optional)" />
+      <input v-model="password" type="password" placeholder="Password (min 8 chars)" required />
+      <button type="submit" :disabled="loading">
+        \{{ loading ? 'Creating account...' : 'Register' }}
+      </button>
+      <p v-if="error" class="error">\{{ error }}</p>
+    </form>
+    <p>Already have an account? <RouterLink to="/login">Login</RouterLink></p>
+  </div>
+</template>
+
+<script setup>
+import { ref } from 'vue'
+import { useRouter } from 'vue-router'
+import { useAuth } from '../vasp/auth.js'
+
+const router = useRouter()
+const { register } = useAuth()
+const username = ref('')
+const email = ref('')
+const password = ref('')
+const loading = ref(false)
+const error = ref('')
+
+async function handleRegister() {
+  loading.value = true
+  error.value = ''
+  try {
+    await register(username.value, password.value, email.value || undefined)
+    router.push('/')
+  } catch (err) {
+    error.value = err?.data?.error || 'Registration failed'
+  } finally {
+    loading.value = false
+  }
+}
+</script>

package/templates/templates/shared/auth/server/index.hbs

@@ -0,0 +1,51 @@
+import { Elysia } from 'elysia'
+import { jwt } from '@elysiajs/jwt'
+import { cookie } from '@elysiajs/cookie'
+import { db } from '../db/client.{{ext}}'
+import { users } from '../../drizzle/schema.{{ext}}'
+import { eq } from 'drizzle-orm'
+{{#if (includes authMethods "usernameAndPassword")}}
+import { usernameAndPasswordRoutes } from './providers/usernameAndPassword.{{ext}}'
+{{/if}}
+{{#if (includes authMethods "google")}}
+import { googleRoutes } from './providers/google.{{ext}}'
+{{/if}}
+{{#if (includes authMethods "github")}}
+import { githubRoutes } from './providers/github.{{ext}}'
+{{/if}}
+
+const JWT_SECRET = process.env.JWT_SECRET || 'change-me-in-production'
+
+export const authPlugin = new Elysia({ name: 'auth-plugin' })
+  .use(jwt({ name: 'jwt', secret: JWT_SECRET }))
+  .use(cookie())
+
+export const authRoutes = new Elysia({ prefix: '/auth' })
+  .use(authPlugin)
+{{#if (includes authMethods "usernameAndPassword")}}
+  .use(usernameAndPasswordRoutes)
+{{/if}}
+{{#if (includes authMethods "google")}}
+  .use(googleRoutes)
+{{/if}}
+{{#if (includes authMethods "github")}}
+  .use(githubRoutes)
+{{/if}}
+  .get('/me', async ({ jwt, cookie: { token }, set }) => {
+    const payload = await jwt.verify(token?.value ?? '')
+    if (!payload || typeof payload.userId !== 'number') {
+      set.status = 401
+      return { error: 'Unauthorized' }
+    }
+    const [user] = await db.select().from(users).where(eq(users.id, payload.userId)).limit(1)
+    if (!user) {
+      set.status = 401
+      return { error: 'User not found' }
+    }
+    const { passwordHash: _ph, ...safeUser } = user
+    return safeUser
+  })
+  .post('/logout', ({ cookie: { token }, set }) => {
+    token?.remove()
+    return { ok: true }
+  })

package/templates/templates/shared/auth/server/middleware.hbs

@@ -0,0 +1,33 @@
+import { Elysia } from 'elysia'
+import { jwt } from '@elysiajs/jwt'
+import { cookie } from '@elysiajs/cookie'
+import { db } from '../db/client.{{ext}}'
+import { users } from '../../drizzle/schema.{{ext}}'
+import { eq } from 'drizzle-orm'
+
+const JWT_SECRET = process.env.JWT_SECRET || 'change-me-in-production'
+
+/**
+ * requireAuth — Elysia plugin that verifies the JWT cookie and injects `user` into the context.
+ * Use on any route that requires authentication.
+ *
+ * @example
+ * new Elysia().use(requireAuth).get('/protected', ({ user }) => user)
+ */
+export const requireAuth = new Elysia({ name: 'require-auth' })
+  .use(jwt({ name: 'jwt', secret: JWT_SECRET }))
+  .use(cookie())
+  .derive(async ({ jwt, cookie: { token }, set }) => {
+    const payload = await jwt.verify(token?.value ?? '')
+    if (!payload || typeof payload.userId !== 'number') {
+      set.status = 401
+      throw new Error('Unauthorized')
+    }
+    const [user] = await db.select().from(users).where(eq(users.id, payload.userId)).limit(1)
+    if (!user) {
+      set.status = 401
+      throw new Error('User not found')
+    }
+    const { passwordHash: _ph, ...safeUser } = user
+    return { user: safeUser }
+  })

package/templates/templates/shared/auth/server/providers/github.hbs

@@ -0,0 +1,48 @@
+import { Elysia } from 'elysia'
+import { db } from '../../db/client.{{ext}}'
+import { users } from '../../../drizzle/schema.{{ext}}'
+import { eq } from 'drizzle-orm'
+import { authPlugin } from '../index.{{ext}}'
+
+const GITHUB_CLIENT_ID = process.env.GITHUB_CLIENT_ID || ''
+const GITHUB_CLIENT_SECRET = process.env.GITHUB_CLIENT_SECRET || ''
+const REDIRECT_URI = process.env.GITHUB_REDIRECT_URI || 'http://localhost:{{backendPort}}/auth/github/callback'
+
+export const githubRoutes = new Elysia()
+  .use(authPlugin)
+  .get('/github', ({ set }) => {
+    const params = new URLSearchParams({
+      client_id: GITHUB_CLIENT_ID,
+      redirect_uri: REDIRECT_URI,
+      scope: 'read:user user:email',
+    })
+    set.redirect = `https://github.com/login/oauth/authorize?${params}`
+  })
+  .get('/github/callback', async ({ query, jwt, cookie: { token }, set }) => {
+    const { code } = query
+    if (!code) { set.status = 400; return { error: 'Missing code' } }
+
+    const tokenRes = await fetch('https://github.com/login/oauth/access_token', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
+      body: JSON.stringify({ client_id: GITHUB_CLIENT_ID, client_secret: GITHUB_CLIENT_SECRET, code }),
+    })
+    const { access_token } = await tokenRes.json()
+
+    const userRes = await fetch('https://api.github.com/user', {
+      headers: { Authorization: `Bearer ${access_token}`, Accept: 'application/json' },
+    })
+    const ghUser = await userRes.json()
+    const githubId = String(ghUser.id)
+    const email = ghUser.email || `${ghUser.login}@github.local`
+
+    let [user] = await db.select().from(users).where(eq(users.githubId, githubId)).limit(1)
+    if (!user) {
+      ;[user] = await db.insert(users).values({ username: ghUser.login, email, githubId }).returning()
+    }
+    if (!user) { set.status = 500; return { error: 'Failed to create user' } }
+
+    const tokenValue = await jwt.sign({ userId: user.id })
+    token.set({ value: tokenValue, httpOnly: true, sameSite: 'lax', path: '/' })
+    set.redirect = '/'
+  })

package/templates/templates/shared/auth/server/providers/google.hbs

@@ -0,0 +1,53 @@
+import { Elysia } from 'elysia'
+import { db } from '../../db/client.{{ext}}'
+import { users } from '../../../drizzle/schema.{{ext}}'
+import { eq } from 'drizzle-orm'
+import { authPlugin } from '../index.{{ext}}'
+
+const GOOGLE_CLIENT_ID = process.env.GOOGLE_CLIENT_ID || ''
+const GOOGLE_CLIENT_SECRET = process.env.GOOGLE_CLIENT_SECRET || ''
+const REDIRECT_URI = process.env.GOOGLE_REDIRECT_URI || 'http://localhost:{{backendPort}}/auth/google/callback'
+
+export const googleRoutes = new Elysia()
+  .use(authPlugin)
+  .get('/google', ({ set }) => {
+    const params = new URLSearchParams({
+      client_id: GOOGLE_CLIENT_ID,
+      redirect_uri: REDIRECT_URI,
+      response_type: 'code',
+      scope: 'openid email profile',
+    })
+    set.redirect = `https://accounts.google.com/o/oauth2/v2/auth?${params}`
+  })
+  .get('/google/callback', async ({ query, jwt, cookie: { token }, set }) => {
+    const { code } = query
+    if (!code) { set.status = 400; return { error: 'Missing code' } }
+
+    // Exchange code for tokens
+    const tokenRes = await fetch('https://oauth2.googleapis.com/token', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+      body: new URLSearchParams({
+        code,
+        client_id: GOOGLE_CLIENT_ID,
+        client_secret: GOOGLE_CLIENT_SECRET,
+        redirect_uri: REDIRECT_URI,
+        grant_type: 'authorization_code',
+      }),
+    })
+    const tokenData = await tokenRes.json()
+    const idToken = tokenData.id_token
+    const payload = JSON.parse(Buffer.from(idToken.split('.')[1], 'base64').toString())
+    const googleId = payload.sub
+    const email = payload.email
+
+    let [user] = await db.select().from(users).where(eq(users.googleId, googleId)).limit(1)
+    if (!user) {
+      ;[user] = await db.insert(users).values({ username: email, email, googleId }).returning()
+    }
+    if (!user) { set.status = 500; return { error: 'Failed to create user' } }
+
+    const tokenValue = await jwt.sign({ userId: user.id })
+    token.set({ value: tokenValue, httpOnly: true, sameSite: 'lax', path: '/' })
+    set.redirect = '/'
+  })

package/templates/templates/shared/auth/server/providers/usernameAndPassword.hbs

@@ -0,0 +1,69 @@
+import { Elysia, t } from 'elysia'
+import { db } from '../../db/client.{{ext}}'
+import { users } from '../../../drizzle/schema.{{ext}}'
+import { eq } from 'drizzle-orm'
+import { authPlugin } from '../index.{{ext}}'
+
+async function hashPassword(password{{#if isTypeScript}}: string{{/if}}) {
+  const encoder = new TextEncoder()
+  const data = encoder.encode(password)
+  const hash = await crypto.subtle.digest('SHA-256', data)
+  return Buffer.from(hash).toString('hex')
+}
+
+async function verifyPassword(password{{#if isTypeScript}}: string{{/if}}, hash{{#if isTypeScript}}: string{{/if}}) {
+  return (await hashPassword(password)) === hash
+}
+
+export const usernameAndPasswordRoutes = new Elysia()
+  .use(authPlugin)
+  .post(
+    '/register',
+    async ({ body, jwt, cookie: { token }, set }) => {
+      const existing = await db.select().from(users).where(eq(users.username, body.username)).limit(1)
+      if (existing.length > 0) {
+        set.status = 400
+        return { error: 'Username already taken' }
+      }
+      const passwordHash = await hashPassword(body.password)
+      const [user] = await db
+        .insert(users)
+        .values({ username: body.username, email: body.email ?? null, passwordHash })
+        .returning()
+      if (!user) {
+        set.status = 500
+        return { error: 'Failed to create user' }
+      }
+      const tokenValue = await jwt.sign({ userId: user.id })
+      token.set({ value: tokenValue, httpOnly: true, sameSite: 'lax', path: '/' })
+      const { passwordHash: _ph, ...safeUser } = user
+      return safeUser
+    },
+    {
+      body: t.Object({
+        username: t.String({ minLength: 3 }),
+        password: t.String({ minLength: 8 }),
+        email: t.Optional(t.String({ format: 'email' })),
+      }),
+    },
+  )
+  .post(
+    '/login',
+    async ({ body, jwt, cookie: { token }, set }) => {
+      const [user] = await db.select().from(users).where(eq(users.username, body.username)).limit(1)
+      if (!user || !user.passwordHash || !(await verifyPassword(body.password, user.passwordHash))) {
+        set.status = 401
+        return { error: 'Invalid username or password' }
+      }
+      const tokenValue = await jwt.sign({ userId: user.id })
+      token.set({ value: tokenValue, httpOnly: true, sameSite: 'lax', path: '/' })
+      const { passwordHash: _ph, ...safeUser } = user
+      return safeUser
+    },
+    {
+      body: t.Object({
+        username: t.String(),
+        password: t.String(),
+      }),
+    },
+  )

package/templates/templates/shared/bunfig.toml.hbs

@@ -0,0 +1,2 @@
+[install]
+exact = false

package/templates/templates/shared/drizzle/schema.hbs

@@ -0,0 +1,37 @@
+import { pgTable, serial, text, timestamp, boolean } from 'drizzle-orm/pg-core'
+{{#if isTypeScript}}
+import type { InferSelectModel, InferInsertModel } from 'drizzle-orm'
+{{/if}}
+
+{{#if hasAuth}}
+// Users table — generated by Vasp auth system
+export const users = pgTable('users', {
+  id: serial('id').primaryKey(),
+  username: text('username').notNull().unique(),
+  email: text('email').unique(),
+  passwordHash: text('password_hash'),
+  googleId: text('google_id').unique(),
+  githubId: text('github_id').unique(),
+  createdAt: timestamp('created_at').defaultNow().notNull(),
+  updatedAt: timestamp('updated_at').defaultNow().notNull(),
+})
+{{#if isTypeScript}}
+export type User = InferSelectModel<typeof users>
+export type NewUser = InferInsertModel<typeof users>
+{{/if}}
+
+{{/if}}
+{{#each cruds}}
+// {{entity}} table — add your columns below
+export const {{camelCase entity}}s = pgTable('{{camelCase entity}}s', {
+  id: serial('id').primaryKey(),
+  // TODO: Add your {{entity}} columns here
+  createdAt: timestamp('created_at').defaultNow().notNull(),
+  updatedAt: timestamp('updated_at').defaultNow().notNull(),
+})
+{{#if ../isTypeScript}}
+export type {{pascalCase entity}} = InferSelectModel<typeof {{camelCase entity}}s>
+export type New{{pascalCase entity}} = InferInsertModel<typeof {{camelCase entity}}s>
+{{/if}}
+
+{{/each}}

package/templates/templates/shared/jobs/_job.hbs

@@ -0,0 +1,24 @@
+import { getBoss } from './boss.{{ext}}'
+import { {{namedExport}} } from '{{importPath fnSource ext}}'
+
+const JOB_NAME = '{{camelCase name}}'
+
+/**
+ * Register the '{{name}}' job worker with PgBoss.
+ * Called once on server startup.
+ */
+export async function register{{pascalCase name}}Worker() {
+  const boss = await getBoss()
+  await boss.work(JOB_NAME, async (job) => {
+    await {{namedExport}}(job.data)
+  })
+}
+
+/**
+ * Schedule a '{{name}}' job.
+ * @param {unknown} data - Data to pass to the job handler
+ */
+export async function schedule{{pascalCase name}}(data) {
+  const boss = await getBoss()
+  return boss.send(JOB_NAME, data)
+}

package/templates/templates/shared/jobs/boss.hbs

@@ -0,0 +1,15 @@
+import PgBoss from 'pg-boss'
+
+const connectionString = process.env.DATABASE_URL
+if (!connectionString) throw new Error('DATABASE_URL is required for PgBoss job queue')
+
+// Singleton PgBoss instance shared across all job workers
+let boss = null
+
+export async function getBoss() {
+  if (!boss) {
+    boss = new PgBoss(connectionString)
+    await boss.start()
+  }
+  return boss
+}

package/templates/templates/shared/package.json.hbs

@@ -0,0 +1,32 @@
+{
+  "name": "{{kebabCase appName}}",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "vasp start",
+    "build": "vasp build",
+    "dev:server": "bun --hot server/index.{{ext}}",
+    "dev:client": "{{#if isSpa}}vite{{else}}nuxt dev{{/if}}"
+  },
+  "dependencies": {
+    "@vasp-framework/runtime": "^0.1.0",
+    "elysia": "^1.1.0",
+    "@elysiajs/cors": "^1.1.0",
+    "@elysiajs/static": "^1.1.0",
+    "drizzle-orm": "^0.36.0",
+    "postgres": "^3.4.0",
+    "ofetch": "^1.3.4",
+    "vue": "^3.5.0"{{#if isSpa}},
+    "vue-router": "^4.4.0"{{else}},
+    "nuxt": "^4.0.0"{{/if}}{{#if hasJobs}},
+    "pg-boss": "^10.0.0"{{/if}}
+  },
+  "devDependencies": {
+    "drizzle-kit": "^0.28.0"{{#if isSpa}},
+    "@vitejs/plugin-vue": "^5.2.0",
+    "vite": "^6.0.0"{{/if}}{{#if isTypeScript}},
+    "typescript": "^5.6.0",
+    "vue-tsc": "^2.0.0"{{/if}}
+  }
+}

package/templates/templates/shared/server/db/client.hbs

@@ -0,0 +1,12 @@
+import { drizzle } from 'drizzle-orm/postgres-js'
+import postgres from 'postgres'
+import * as schema from '../../drizzle/schema.{{ext}}'
+
+const connectionString = process.env.DATABASE_URL
+
+if (!connectionString) {
+  throw new Error('DATABASE_URL environment variable is required')
+}
+
+const client = postgres(connectionString)
+export const db = drizzle(client, { schema })

package/templates/templates/shared/server/index.hbs

@@ -0,0 +1,52 @@
+import { Elysia } from 'elysia'
+import { cors } from '@elysiajs/cors'
+import { staticPlugin } from '@elysiajs/static'
+import { db } from './db/client.{{ext}}'
+{{#if hasAuth}}
+import { authRoutes } from './auth/index.{{ext}}'
+{{/if}}
+{{#each queries}}
+import { {{camelCase name}}Route } from './routes/queries/{{camelCase name}}.{{../ext}}'
+{{/each}}
+{{#each actions}}
+import { {{camelCase name}}Route } from './routes/actions/{{camelCase name}}.{{../ext}}'
+{{/each}}
+{{#each cruds}}
+import { {{camelCase entity}}CrudRoutes } from './routes/crud/{{camelCase entity}}.{{../ext}}'
+{{/each}}
+{{#if hasRealtime}}
+import { realtimeRoutes } from './routes/realtime/index.{{ext}}'
+{{/if}}
+{{#each jobs}}
+import { {{camelCase name}}ScheduleRoute } from './routes/jobs/{{camelCase name}}Schedule.{{../ext}}'
+{{/each}}
+
+const PORT = Number(process.env.PORT) || {{backendPort}}
+
+const app = new Elysia()
+  .use(cors({
+    origin: process.env.CORS_ORIGIN || 'http://localhost:{{frontendPort}}',
+    credentials: true,
+  }))
+  .get('/api/health', () => ({ status: 'ok', version: '{{vaspVersion}}' }))
+{{#if hasAuth}}
+  .use(authRoutes)
+{{/if}}
+{{#each queries}}
+  .use({{camelCase name}}Route)
+{{/each}}
+{{#each actions}}
+  .use({{camelCase name}}Route)
+{{/each}}
+{{#each cruds}}
+  .use({{camelCase entity}}CrudRoutes)
+{{/each}}
+{{#if hasRealtime}}
+  .use(realtimeRoutes)
+{{/if}}
+{{#each jobs}}
+  .use({{camelCase name}}ScheduleRoute)
+{{/each}}
+  .listen(PORT)
+
+console.log(`🚀 Vasp backend running at http://localhost:${PORT}`)

package/templates/templates/shared/server/routes/actions/_action.hbs

@@ -0,0 +1,20 @@
+import { Elysia } from 'elysia'
+import { db } from '../../db/client.{{ext}}'
+{{#if requiresAuth}}
+import { requireAuth } from '../../auth/middleware.{{ext}}'
+{{/if}}
+import { {{namedExport}} } from '{{importPath fnSource ext}}'
+
+export const {{camelCase name}}Route = new Elysia()
+{{#if requiresAuth}}
+  .use(requireAuth)
+  .post('/api/actions/{{camelCase name}}', async ({ body, user }) => {
+    const result = await {{namedExport}}({ db, user, args: body })
+    return result
+  })
+{{else}}
+  .post('/api/actions/{{camelCase name}}', async ({ body }) => {
+    const result = await {{namedExport}}({ db, args: body })
+    return result
+  })
+{{/if}}