Database schema setup

.env.example

@@ -9,6 +9,7 @@ REFRESH_TOKEN_EXPIRES_IN=7d
 DATABASE_URL=postgresql://postgres:postgres@localhost:5432/vibeline
 CORS_ORIGIN=http://localhost:3000,http://localhost:3002
 APP_URL=http://localhost:3002
+DEMO_SEED_PASSWORD=Demo123!
 
 # SMTP (required for email verification/password reset flows)
 SMTP_HOST=smtp.example.com

.gitignore

@@ -1,6 +1,8 @@
 # dependencies
 node_modules
 
+desigining-flow.md
+coding-practices.md
 # env
 .env
 .env.*

README.md

@@ -43,5 +43,9 @@ Web app runs on `http://localhost:3002` and API on `http://localhost:5001`.
 - `pnpm lint` lint all workspaces
 - `pnpm typecheck` strict typecheck
 - `pnpm build` production builds
+- `pnpm validate` run lint + typecheck + build in sequence
 
-More detail: `docs/architecture.md`
+More detail:
+
+- `docs/architecture.md`
+- `docs/engineering-standards.md`

apps/server/drizzle/0003_add_users_lookup_indexes.sql

@@ -0,0 +1,5 @@
+CREATE INDEX IF NOT EXISTS "users_created_at_idx" ON "users" ("created_at");
+CREATE INDEX IF NOT EXISTS "users_verification_token_idx" ON "users" ("verification_token");
+CREATE INDEX IF NOT EXISTS "users_verification_code_idx" ON "users" ("verification_code");
+CREATE INDEX IF NOT EXISTS "users_password_reset_token_idx" ON "users" ("password_reset_token");
+CREATE INDEX IF NOT EXISTS "users_password_reset_code_idx" ON "users" ("password_reset_code");

apps/server/drizzle/meta/_journal.json

@@ -22,6 +22,13 @@
       "when": 1771621438507,
       "tag": "0002_add_password_reset_code",
       "breakpoints": true
+    },
+    {
+      "idx": 3,
+      "version": "7",
+      "when": 1771780000000,
+      "tag": "0003_add_users_lookup_indexes",
+      "breakpoints": true
     }
   ]
 }

apps/server/package.json

@@ -9,6 +9,7 @@
     "start": "node dist/server.cjs",
     "lint": "eslint src --ext .ts",
     "typecheck": "tsc --noEmit",
+    "test": "node --import tsx --test $(find tests -name '*.test.ts')",
     "db:generate": "drizzle-kit generate",
     "db:migrate": "tsx src/db/migrate.ts",
     "db:seed": "tsx src/db/seed.ts"

apps/server/src/config/env.ts

@@ -20,7 +20,7 @@ const envSchema = z.object({
     .default('false'),
   INVITE_FROM_EMAIL: z.string().email(),
 
-  APP_URL: z.string().url().default('http://localhost:3000'),
+  APP_URL: z.string().url().default('http://localhost:3002'),
 
   // Google OAuth
   GOOGLE_CLIENT_ID: z.string().optional(),

apps/server/src/config/logger.ts

@@ -3,31 +3,21 @@ import type { FastifyServerOptions } from 'fastify';
 
 import { env } from '@/config/env';
 
-export const loggerConfig: FastifyServerOptions['logger'] =
-  env.NODE_ENV === 'development'
-    ? {
-        transport: {
-          target: 'pino-pretty',
-          options: {
-            singleLine: true,
-            colorize: true,
-            translateTime: 'SYS:standard'
-          }
-        }
-      }
-    : true;
+const prettyTransport = {
+  transport: {
+    target: 'pino-pretty',
+    options: {
+      singleLine: true,
+      colorize: true,
+      translateTime: 'SYS:standard'
+    }
+  }
+} as const;
 
-export const logger = pino(
-  env.NODE_ENV === 'development'
-    ? {
-        transport: {
-          target: 'pino-pretty',
-          options: {
-            singleLine: true,
-            colorize: true,
-            translateTime: 'SYS:standard'
-          }
-        }
-      }
-    : {}
-);
+const usePrettyLogger = env.NODE_ENV === 'development';
+
+export const loggerConfig: FastifyServerOptions['logger'] = usePrettyLogger
+  ? prettyTransport
+  : true;
+
+export const logger = pino(usePrettyLogger ? prettyTransport : {});

apps/server/src/db/schema.ts

@@ -1,27 +1,32 @@
-import {
-  boolean,
-  pgTable,
-  text,
-  timestamp
-} from 'drizzle-orm/pg-core';
+import { boolean, index, pgTable, text, timestamp } from 'drizzle-orm/pg-core';
 
-export const users = pgTable('users', {
-  id: text('id').primaryKey(),
-  email: text('email').notNull().unique(),
-  displayName: text('display_name').notNull(),
-  avatarUrl: text('avatar_url'),
-  role: text('role').notNull().default('user'),
-  emailVerified: boolean('email_verified').notNull().default(false),
-  passwordHash: text('password_hash').notNull(),
-  verificationToken: text('verification_token'),
-  verificationCode: text('verification_code'),
-  verificationTokenExpiresAt: timestamp('verification_token_expires_at', {
-    withTimezone: true
-  }),
-  passwordResetToken: text('password_reset_token'),
-  passwordResetCode: text('password_reset_code'),
-  passwordResetTokenExpiresAt: timestamp('password_reset_token_expires_at', {
-    withTimezone: true
-  }),
-  createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow()
-});
+export const users = pgTable(
+  'users',
+  {
+    id: text('id').primaryKey(),
+    email: text('email').notNull().unique(),
+    displayName: text('display_name').notNull(),
+    avatarUrl: text('avatar_url'),
+    role: text('role').notNull().default('user'),
+    emailVerified: boolean('email_verified').notNull().default(false),
+    passwordHash: text('password_hash').notNull(),
+    verificationToken: text('verification_token'),
+    verificationCode: text('verification_code'),
+    verificationTokenExpiresAt: timestamp('verification_token_expires_at', {
+      withTimezone: true
+    }),
+    passwordResetToken: text('password_reset_token'),
+    passwordResetCode: text('password_reset_code'),
+    passwordResetTokenExpiresAt: timestamp('password_reset_token_expires_at', {
+      withTimezone: true
+    }),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => ({
+    createdAtIdx: index('users_created_at_idx').on(table.createdAt),
+    verificationTokenIdx: index('users_verification_token_idx').on(table.verificationToken),
+    verificationCodeIdx: index('users_verification_code_idx').on(table.verificationCode),
+    passwordResetTokenIdx: index('users_password_reset_token_idx').on(table.passwordResetToken),
+    passwordResetCodeIdx: index('users_password_reset_code_idx').on(table.passwordResetCode)
+  })
+);

apps/server/src/db/seed.ts

@@ -13,28 +13,28 @@ import { eq } from 'drizzle-orm';
 import { db } from './client';
 import { users } from './schema';
 
-const ADMIN_PASSWORD = process.env.ADMIN_SEED_PASSWORD ?? 'Admin123!';
+const DEMO_PASSWORD = process.env.DEMO_SEED_PASSWORD ?? 'Demo123!';
+const DEMO_EMAIL = 'demo@vibeline.dev';
 
 async function seed() {
-  const adminExists = await db.query.users.findFirst({
-    where: eq(users.email, 'admin@vibeline.dev')
+  const demoUserExists = await db.query.users.findFirst({
+    where: eq(users.email, DEMO_EMAIL)
   });
 
-  if (!adminExists) {
-    const passwordHash = await hash(ADMIN_PASSWORD, 12);
+  if (!demoUserExists) {
+    const passwordHash = await hash(DEMO_PASSWORD, 12);
     await db.insert(users).values({
-      id: 'u_admin',
-      email: 'admin@vibeline.dev',
-      displayName: 'Workspace Admin',
-      role: 'admin',
+      id: 'u_demo',
+      email: DEMO_EMAIL,
+      displayName: 'Demo User',
+      role: 'user',
       emailVerified: true,
       passwordHash
     });
-    console.log('Created admin user (admin@vibeline.dev)');
+    console.log(`Created demo user (${DEMO_EMAIL})`);
   } else {
-    console.log('Admin user already exists');
+    console.log('Demo user already exists');
   }
-
 }
 
 seed()

apps/server/src/middleware/error.middleware.ts

@@ -5,7 +5,10 @@ import { env } from '@/config/env';
 
 const allowedOrigins = env.CORS_ORIGIN.split(',').map((o) => o.trim());
 
-const setCorsHeaders = (request: { headers: { origin?: string } }, reply: { header: (name: string, value: string) => void }) => {
+const setCorsHeaders = (
+  request: { headers: { origin?: string } },
+  reply: { header: (name: string, value: string) => void }
+) => {
   const origin = request.headers.origin;
   if (origin && allowedOrigins.includes(origin)) {
     reply.header('Access-Control-Allow-Origin', origin);

apps/server/src/modules/auth/auth.artifacts.ts

@@ -0,0 +1,28 @@
+import { randomBytes } from 'node:crypto';
+
+const SIX_DIGIT_UPPER_BOUND = 1_000_000;
+
+const generateHexToken = () => randomBytes(32).toString('hex');
+
+const generateSixDigitCode = () => {
+  const value = randomBytes(4).readUInt32BE(0) % SIX_DIGIT_UPPER_BOUND;
+  return value.toString().padStart(6, '0');
+};
+
+const generateExpiryTimestamp = (hours: number) => {
+  const expiry = new Date();
+  expiry.setHours(expiry.getHours() + hours);
+  return expiry.toISOString();
+};
+
+export const createVerificationArtifacts = () => ({
+  verificationToken: generateHexToken(),
+  verificationCode: generateSixDigitCode(),
+  verificationTokenExpiresAt: generateExpiryTimestamp(24)
+});
+
+export const createPasswordResetArtifacts = () => ({
+  passwordResetToken: generateHexToken(),
+  passwordResetCode: generateSixDigitCode(),
+  passwordResetTokenExpiresAt: generateExpiryTimestamp(1)
+});