🎉 init: 小龙的工作空间

cases/bookshelf-v3/backend/.gitignore

@@ -0,0 +1,7 @@
+node_modules/
+dist/
+data/
+.env
+*.db
+*.db-journal
+*.db-wal

cases/bookshelf-v3/backend/README.md

@@ -0,0 +1,132 @@
+# BookShelf — Backend API
+
+> 一款支持多端同步、Markdown 编辑和标签管理的笔记应用。
+
+## Tech Stack
+
+- **Runtime**: Node.js
+- **Framework**: Fastify 5
+- **Language**: TypeScript
+- **Database**: SQLite (better-sqlite3)
+- **Auth**: JWT + bcrypt
+
+## Getting Started
+
+```bash
+# Install dependencies
+npm install
+
+# Development (hot reload)
+npm run dev
+
+# Build
+npm run build
+
+# Production start
+npm run start
+
+# Run tests
+npm test
+```
+
+## Project Structure
+
+```
+src/
+├── index.ts          # Server entry point
+├── db/
+│   ├── schema.ts     # SQLite schema
+│   └── client.ts     # Database client
+├── routes/
+│   ├── auth.ts       # Auth routes (register/login/me)
+│   └── *.ts          # CRUD routes
+├── services/
+│   └── *.ts          # Business logic
+├── middleware/
+│   └── auth.ts       # JWT middleware
+├── types/
+│   └── index.ts      # TypeScript types
+└── __tests__/
+    └── *.test.ts     # Tests
+```
+
+## API Endpoints
+
+### Auth
+- `POST /api/auth/register` — Register
+- `POST /api/auth/login` — Login
+- `GET  /api/auth/me` — Current user (auth required)
+
+### Resources
+#### users
+- `GET    /api/users` — List all
+- `GET    /api/users/:id` — Get by ID
+- `POST   /api/users` — Create
+- `PUT    /api/users/:id` — Update
+- `DELETE /api/users/:id` — Delete
+
+#### books
+- `GET    /api/books` — List all
+- `GET    /api/books/:id` — Get by ID
+- `POST   /api/books` — Create
+- `PUT    /api/books/:id` — Update
+- `DELETE /api/books/:id` — Delete
+
+#### reading_status
+- `GET    /api/reading_status` — List all
+- `GET    /api/reading_status/:id` — Get by ID
+- `POST   /api/reading_status` — Create
+- `PUT    /api/reading_status/:id` — Update
+- `DELETE /api/reading_status/:id` — Delete
+
+#### reading_progress
+- `GET    /api/reading_progress` — List all
+- `GET    /api/reading_progress/:id` — Get by ID
+- `POST   /api/reading_progress` — Create
+- `PUT    /api/reading_progress/:id` — Update
+- `DELETE /api/reading_progress/:id` — Delete
+
+#### notes
+- `GET    /api/notes` — List all
+- `GET    /api/notes/:id` — Get by ID
+- `POST   /api/notes` — Create
+- `PUT    /api/notes/:id` — Update
+- `DELETE /api/notes/:id` — Delete
+
+#### reviews
+- `GET    /api/reviews` — List all
+- `GET    /api/reviews/:id` — Get by ID
+- `POST   /api/reviews` — Create
+- `PUT    /api/reviews/:id` — Update
+- `DELETE /api/reviews/:id` — Delete
+
+#### stats
+- `GET    /api/stats` — List all
+- `GET    /api/stats/:id` — Get by ID
+- `POST   /api/stats` — Create
+- `PUT    /api/stats/:id` — Update
+- `DELETE /api/stats/:id` — Delete
+
+#### items
+- `GET    /api/items` — List all
+- `GET    /api/items/:id` — Get by ID
+- `POST   /api/items` — Create
+- `PUT    /api/items/:id` — Update
+- `DELETE /api/items/:id` — Delete
+
+#### tags
+- `GET    /api/tags` — List all
+- `GET    /api/tags/:id` — Get by ID
+- `POST   /api/tags` — Create
+- `PUT    /api/tags/:id` — Update
+- `DELETE /api/tags/:id` — Delete
+
+#### note_tags
+- `GET    /api/note_tags` — List all
+- `GET    /api/note_tags/:id` — Get by ID
+- `POST   /api/note_tags` — Create
+- `PUT    /api/note_tags/:id` — Update
+- `DELETE /api/note_tags/:id` — Delete
+
+### System
+- `GET /api/health` — Health check

cases/bookshelf-v3/backend/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "bookshelf",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "test": "node --import tsx --test src/__tests__/*.test.ts",
+    "test:watch": "node --import tsx --test --watch src/__tests__/*.test.ts"
+  },
+  "dependencies": {
+    "fastify": "^5.0.0",
+    "@fastify/cors": "^10.0.0",
+    "@fastify/jwt": "^9.0.0",
+    "sql.js": "^1.12.0",
+    "bcrypt": "^5.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@types/bcrypt": "^5.0.0",
+    "typescript": "^5.6.0",
+    "tsx": "^4.0.0",
+    "pino-pretty": "^11.0.0"
+  }
+}

cases/bookshelf-v3/backend/src/__tests__/auth.test.ts

@@ -0,0 +1,96 @@
+// Auth routes test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("POST /api/auth/register", () => {
+  it("registers a new user", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/auth/register",
+      payload: { username: "testuser", password: "password123" },
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.token);
+    assert.equal(body.user.username, "testuser");
+    token = body.token;
+  });
+
+  it("rejects duplicate username", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/auth/register",
+      payload: { username: "testuser", password: "password123" },
+    });
+    assert.equal(res.statusCode, 409);
+  });
+
+  it("rejects short password", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/auth/register",
+      payload: { username: "user2", password: "123" },
+    });
+    assert.equal(res.statusCode, 400);
+  });
+});
+
+describe("POST /api/auth/login", () => {
+  it("logs in with correct credentials", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/auth/login",
+      payload: { username: "testuser", password: "password123" },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(body.token);
+    token = body.token;
+  });
+
+  it("rejects wrong password", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/auth/login",
+      payload: { username: "testuser", password: "wrongpassword" },
+    });
+    assert.equal(res.statusCode, 401);
+  });
+});
+
+describe("GET /api/auth/me", () => {
+  it("returns current user with valid token", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/auth/me",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.username, "testuser");
+  });
+
+  it("rejects without token", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/auth/me",
+    });
+    assert.equal(res.statusCode, 401);
+  });
+});

cases/bookshelf-v3/backend/src/__tests__/books.test.ts

@@ -0,0 +1,122 @@
+// Book CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/books", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/books",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/books", () => {
+  it("creates a book", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/books",
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "userId": "00000000-0000-0000-0000-000000000001",
+        "title": "sample-title",
+        "description": "sample-description",
+        "status": "sample-status",
+        "data": "sample-data"
+      },
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/books/:id", () => {
+  it("returns the created book", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/books/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/books/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/books/:id", () => {
+  it("updates the book", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/books/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "userId": "00000000-0000-0000-0000-000000000001",
+        "title": "sample-title",
+        "description": "sample-description",
+        "status": "sample-status",
+        "data": "sample-data"
+      },
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/books/:id", () => {
+  it("deletes the book", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/books/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/books/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

cases/bookshelf-v3/backend/src/__tests__/items.test.ts

@@ -0,0 +1,122 @@
+// Item CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/items", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/items",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/items", () => {
+  it("creates a item", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/items",
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "userId": "00000000-0000-0000-0000-000000000001",
+        "title": "sample-title",
+        "description": "sample-description",
+        "status": "sample-status",
+        "data": "sample-data"
+      },
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/items/:id", () => {
+  it("returns the created item", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/items/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/items/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/items/:id", () => {
+  it("updates the item", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/items/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "userId": "00000000-0000-0000-0000-000000000001",
+        "title": "sample-title",
+        "description": "sample-description",
+        "status": "sample-status",
+        "data": "sample-data"
+      },
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/items/:id", () => {
+  it("deletes the item", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/items/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/items/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

cases/bookshelf-v3/backend/src/__tests__/note_tags.test.ts

@@ -0,0 +1,118 @@
+// NoteTag CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/note_tags", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/note_tags",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/note_tags", () => {
+  it("creates a note_tag", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/note_tags",
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "noteId": "00000000-0000-0000-0000-000000000001",
+        "tagId": "00000000-0000-0000-0000-000000000001",
+        "PRIMARY KEY (noteId, tagId)": "sample-primary key (noteid, tagid)"
+      },
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/note_tags/:id", () => {
+  it("returns the created note_tag", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/note_tags/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/note_tags/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/note_tags/:id", () => {
+  it("updates the note_tag", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/note_tags/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "noteId": "00000000-0000-0000-0000-000000000001",
+        "tagId": "00000000-0000-0000-0000-000000000001",
+        "PRIMARY KEY (noteId, tagId)": "sample-primary key (noteid, tagid)"
+      },
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/note_tags/:id", () => {
+  it("deletes the note_tag", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/note_tags/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/note_tags/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

cases/bookshelf-v3/backend/src/__tests__/notes.test.ts

@@ -0,0 +1,122 @@
+// Note CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/notes", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/notes",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/notes", () => {
+  it("creates a note", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/notes",
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "userId": "00000000-0000-0000-0000-000000000001",
+        "title": "sample-title",
+        "description": "sample-description",
+        "status": "sample-status",
+        "data": "sample-data"
+      },
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/notes/:id", () => {
+  it("returns the created note", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/notes/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/notes/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/notes/:id", () => {
+  it("updates the note", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/notes/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "userId": "00000000-0000-0000-0000-000000000001",
+        "title": "sample-title",
+        "description": "sample-description",
+        "status": "sample-status",
+        "data": "sample-data"
+      },
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/notes/:id", () => {
+  it("deletes the note", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/notes/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/notes/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

cases/bookshelf-v3/backend/src/__tests__/reading_progress.test.ts

@@ -0,0 +1,122 @@
+// ReadingProgress CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/reading_progress", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/reading_progress",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/reading_progress", () => {
+  it("creates a reading_progress", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/reading_progress",
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "userId": "00000000-0000-0000-0000-000000000001",
+        "title": "sample-title",
+        "description": "sample-description",
+        "status": "sample-status",
+        "data": "sample-data"
+      },
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/reading_progress/:id", () => {
+  it("returns the created reading_progress", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/reading_progress/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/reading_progress/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/reading_progress/:id", () => {
+  it("updates the reading_progress", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/reading_progress/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "userId": "00000000-0000-0000-0000-000000000001",
+        "title": "sample-title",
+        "description": "sample-description",
+        "status": "sample-status",
+        "data": "sample-data"
+      },
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/reading_progress/:id", () => {
+  it("deletes the reading_progress", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/reading_progress/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/reading_progress/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

cases/bookshelf-v3/backend/src/__tests__/reading_status.test.ts

@@ -0,0 +1,122 @@
+// ReadingStatu CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/reading_status", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/reading_status",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/reading_status", () => {
+  it("creates a reading_statu", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/reading_status",
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "userId": "00000000-0000-0000-0000-000000000001",
+        "title": "sample-title",
+        "description": "sample-description",
+        "status": "sample-status",
+        "data": "sample-data"
+      },
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/reading_status/:id", () => {
+  it("returns the created reading_statu", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/reading_status/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/reading_status/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/reading_status/:id", () => {
+  it("updates the reading_statu", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/reading_status/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "userId": "00000000-0000-0000-0000-000000000001",
+        "title": "sample-title",
+        "description": "sample-description",
+        "status": "sample-status",
+        "data": "sample-data"
+      },
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/reading_status/:id", () => {
+  it("deletes the reading_statu", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/reading_status/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/reading_status/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

cases/bookshelf-v3/backend/src/__tests__/reviews.test.ts

@@ -0,0 +1,122 @@
+// Review CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/reviews", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/reviews",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/reviews", () => {
+  it("creates a review", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/reviews",
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "userId": "00000000-0000-0000-0000-000000000001",
+        "title": "sample-title",
+        "description": "sample-description",
+        "status": "sample-status",
+        "data": "sample-data"
+      },
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/reviews/:id", () => {
+  it("returns the created review", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/reviews/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/reviews/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/reviews/:id", () => {
+  it("updates the review", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/reviews/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "userId": "00000000-0000-0000-0000-000000000001",
+        "title": "sample-title",
+        "description": "sample-description",
+        "status": "sample-status",
+        "data": "sample-data"
+      },
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/reviews/:id", () => {
+  it("deletes the review", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/reviews/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/reviews/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

cases/bookshelf-v3/backend/src/__tests__/stats.test.ts

@@ -0,0 +1,122 @@
+// Stat CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/stats", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/stats",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/stats", () => {
+  it("creates a stat", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/stats",
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "userId": "00000000-0000-0000-0000-000000000001",
+        "title": "sample-title",
+        "description": "sample-description",
+        "status": "sample-status",
+        "data": "sample-data"
+      },
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/stats/:id", () => {
+  it("returns the created stat", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/stats/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/stats/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/stats/:id", () => {
+  it("updates the stat", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/stats/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "userId": "00000000-0000-0000-0000-000000000001",
+        "title": "sample-title",
+        "description": "sample-description",
+        "status": "sample-status",
+        "data": "sample-data"
+      },
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/stats/:id", () => {
+  it("deletes the stat", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/stats/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/stats/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

cases/bookshelf-v3/backend/src/__tests__/tags.test.ts

@@ -0,0 +1,116 @@
+// Tag CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/tags", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/tags",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/tags", () => {
+  it("creates a tag", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/tags",
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "name": "sample-name",
+        "color": "sample-color"
+      },
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/tags/:id", () => {
+  it("returns the created tag", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/tags/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/tags/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/tags/:id", () => {
+  it("updates the tag", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/tags/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "name": "sample-name",
+        "color": "sample-color"
+      },
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/tags/:id", () => {
+  it("deletes the tag", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/tags/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/tags/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

cases/bookshelf-v3/backend/src/__tests__/users.test.ts

@@ -0,0 +1,118 @@
+// User CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/users", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/users",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/users", () => {
+  it("creates a user", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/users",
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "phone": "sample-phone",
+        "nickname": "sample-nickname",
+        "avatarUrl": "sample-avatarurl"
+      },
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/users/:id", () => {
+  it("returns the created user", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/users/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/users/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/users/:id", () => {
+  it("updates the user", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/users/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload: {
+        "phone": "sample-phone",
+        "nickname": "sample-nickname",
+        "avatarUrl": "sample-avatarurl"
+      },
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/users/:id", () => {
+  it("deletes the user", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/users/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/users/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

cases/bookshelf-v3/backend/src/db/client.ts

@@ -0,0 +1,93 @@
+// SQLite database client (sql.js — pure WASM, no native deps)
+import initSqlJs, { type Database, type BindParams } from "sql.js";
+import { createTables } from "./schema.js";
+
+let db: Database | null = null;
+let initPromise: Promise<Database> | null = null;
+
+/** Initialize the database (call once at startup). */
+export async function initDb(dbPath?: string): Promise<Database> {
+  if (db) return db;
+  if (initPromise) return initPromise;
+
+  initPromise = (async () => {
+    const SQL = await initSqlJs();
+    const path = dbPath || process.env.DATABASE_URL || ":memory:";
+
+    // Try to load existing database from file
+    let buffer: ArrayLike<number> | undefined;
+    if (path !== ":memory:") {
+      try {
+        const fs = await import("node:fs/promises");
+        const data = await fs.readFile(path);
+        buffer = new Uint8Array(data);
+      } catch {
+        // File doesn't exist yet — start fresh
+      }
+    }
+
+    db = new SQL.Database(buffer);
+    db.run("PRAGMA foreign_keys = ON");
+    createTables(db);
+    return db;
+  })();
+
+  return initPromise;
+}
+
+/** Get the initialized database (must call initDb first). */
+export function getDb(): Database {
+  if (!db) throw new Error("Database not initialized. Call initDb() first.");
+  return db;
+}
+
+/** Save database to disk. */
+export async function saveDb(dbPath?: string): Promise<void> {
+  if (!db) return;
+  const path = dbPath || process.env.DATABASE_URL || "./data/app.db";
+  if (path === ":memory:") return;
+  const fs = await import("node:fs/promises");
+  const { dirname } = await import("node:path");
+  await fs.mkdir(dirname(path), { recursive: true });
+  const data = db.export();
+  await fs.writeFile(path, Buffer.from(data));
+}
+
+export async function closeDb(): Promise<void> {
+  if (db) {
+    await saveDb();
+    db.close();
+    db = null;
+    initPromise = null;
+  }
+}
+
+// Helper: run a query and return all rows as objects
+export function queryAll<T = Record<string, unknown>>(sql: string, params: BindParams = []): T[] {
+  const d = getDb();
+  const stmt = d.prepare(sql);
+  if (params) stmt.bind(params);
+  const results: T[] = [];
+  while (stmt.step()) {
+    const row = stmt.getAsObject();
+    results.push(row as unknown as T);
+  }
+  stmt.free();
+  return results;
+}
+
+// Helper: run a query and return the first row
+export function queryOne<T = Record<string, unknown>>(sql: string, params: BindParams = []): T | undefined {
+  const rows = queryAll<T>(sql, params);
+  return rows[0];
+}
+
+// Helper: run a mutation and return { changes, lastInsertRowid }
+export function execute(sql: string, params: BindParams = []): { changes: number; lastInsertRowid: number } {
+  const d = getDb();
+  d.run(sql, params);
+  return {
+    changes: d.getRowsModified(),
+    lastInsertRowid: 0,
+  };
+}

cases/bookshelf-v3/backend/src/db/schema.ts

@@ -0,0 +1,29 @@
+// Auto-generated SQLite schema
+import type { Database } from "sql.js";
+
+export function createTables(db: Database): void {
+  const statements = [
+  "CREATE TABLE IF NOT EXISTS users (\n  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),\n  phone TEXT UNIQUE,\n  nickname TEXT,\n  avatar_url TEXT,\n  created_at TEXT,\n  updated_at TEXT\n);",
+  "idx_users_phone ON users(phone)",
+  "CREATE TABLE IF NOT EXISTS books (\n  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),\n  user_id TEXT REFERENCES users(id),\n  title TEXT NOT NULL,\n  description TEXT,\n  status TEXT DEFAULT 'active',\n  data TEXT,\n  created_at TEXT,\n  updated_at TEXT\n);",
+  "idx_books_user ON books(user_id)",
+  "CREATE TABLE IF NOT EXISTS reading_status (\n  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),\n  user_id TEXT REFERENCES users(id),\n  title TEXT NOT NULL,\n  description TEXT,\n  status TEXT DEFAULT 'active',\n  data TEXT,\n  created_at TEXT,\n  updated_at TEXT\n);",
+  "idx_reading_status_user ON reading_status(user_id)",
+  "CREATE TABLE IF NOT EXISTS reading_progress (\n  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),\n  user_id TEXT REFERENCES users(id),\n  title TEXT NOT NULL,\n  description TEXT,\n  status TEXT DEFAULT 'active',\n  data TEXT,\n  created_at TEXT,\n  updated_at TEXT\n);",
+  "idx_reading_progress_user ON reading_progress(user_id)",
+  "CREATE TABLE IF NOT EXISTS notes (\n  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),\n  user_id TEXT REFERENCES users(id),\n  title TEXT NOT NULL,\n  description TEXT,\n  status TEXT DEFAULT 'active',\n  data TEXT,\n  created_at TEXT,\n  updated_at TEXT\n);",
+  "idx_notes_user ON notes(user_id)",
+  "CREATE TABLE IF NOT EXISTS reviews (\n  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),\n  user_id TEXT REFERENCES users(id),\n  title TEXT NOT NULL,\n  description TEXT,\n  status TEXT DEFAULT 'active',\n  data TEXT,\n  created_at TEXT,\n  updated_at TEXT\n);",
+  "idx_reviews_user ON reviews(user_id)",
+  "CREATE TABLE IF NOT EXISTS stats (\n  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),\n  user_id TEXT REFERENCES users(id),\n  title TEXT NOT NULL,\n  description TEXT,\n  status TEXT DEFAULT 'active',\n  data TEXT,\n  created_at TEXT,\n  updated_at TEXT\n);",
+  "idx_stats_user ON stats(user_id)",
+  "CREATE TABLE IF NOT EXISTS items (\n  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),\n  user_id TEXT REFERENCES users(id),\n  title TEXT NOT NULL,\n  description TEXT,\n  status TEXT DEFAULT 'active',\n  data TEXT,\n  created_at TEXT,\n  updated_at TEXT\n);",
+  "idx_items_user ON items(user_id)",
+  "CREATE TABLE IF NOT EXISTS tags (\n  id TEXT PRIMARY KEY,\n  name TEXT NOT NULL UNIQUE,\n  color TEXT\n);",
+  "CREATE TABLE IF NOT EXISTS note_tags (\n  note_id TEXT REFERENCES notes(id),\n  tag_id TEXT REFERENCES tags(id)\n);"
+  ];
+  for (const sql of statements) {
+    const trimmed = sql.trim();
+    if (trimmed) db.run(trimmed);
+  }
+}

cases/bookshelf-v3/backend/src/index.ts

@@ -0,0 +1,79 @@
+// BookShelf — Fastify Backend Server
+import Fastify from "fastify";
+import cors from "@fastify/cors";
+import fjwt from "@fastify/jwt";
+import { initDb, closeDb } from "./db/client.js";
+import { authRoutes } from "./routes/auth.js";
+import { usersRoutes } from "./routes/users.js";
+import { booksRoutes } from "./routes/books.js";
+import { reading_statusRoutes } from "./routes/reading_status.js";
+import { reading_progressRoutes } from "./routes/reading_progress.js";
+import { notesRoutes } from "./routes/notes.js";
+import { reviewsRoutes } from "./routes/reviews.js";
+import { statsRoutes } from "./routes/stats.js";
+import { itemsRoutes } from "./routes/items.js";
+import { tagsRoutes } from "./routes/tags.js";
+import { note_tagsRoutes } from "./routes/note_tags.js";
+
+const JWT_SECRET = process.env.JWT_SECRET || "change-me-in-production-50a93cd7";
+
+export async function buildApp() {
+  const app = Fastify({
+    logger: {
+      level: process.env.LOG_LEVEL || "info",
+      transport: process.env.NODE_ENV !== "production"
+        ? { target: "pino-pretty", options: { colorize: true } }
+        : undefined,
+    },
+  });
+
+  // Init database
+  await initDb();
+
+  // Plugins
+  await app.register(cors, {
+    origin: process.env.CORS_ORIGIN || "*",
+    methods: ["GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS"],
+  });
+
+  await app.register(fjwt, { secret: JWT_SECRET });
+
+  // Routes
+  await app.register(authRoutes, { prefix: "/api/auth" });
+  await app.register(usersRoutes, { prefix: "/api/users" });
+  await app.register(booksRoutes, { prefix: "/api/books" });
+  await app.register(reading_statusRoutes, { prefix: "/api/reading_status" });
+  await app.register(reading_progressRoutes, { prefix: "/api/reading_progress" });
+  await app.register(notesRoutes, { prefix: "/api/notes" });
+  await app.register(reviewsRoutes, { prefix: "/api/reviews" });
+  await app.register(statsRoutes, { prefix: "/api/stats" });
+  await app.register(itemsRoutes, { prefix: "/api/items" });
+  await app.register(tagsRoutes, { prefix: "/api/tags" });
+  await app.register(note_tagsRoutes, { prefix: "/api/note_tags" });
+
+  // Health check
+  app.get("/api/health", async () => ({ status: "ok", timestamp: new Date().toISOString() }));
+
+  // Graceful shutdown
+  app.addHook("onClose", async () => {
+    closeDb();
+  });
+
+  return app;
+}
+
+// Start server if called directly
+const port = parseInt(process.env.PORT || "3001", 10);
+const host = process.env.HOST || "0.0.0.0";
+
+async function main() {
+  const app = await buildApp();
+  try {
+    await app.listen({ port, host });
+  } catch (err) {
+    app.log.error(err);
+    process.exit(1);
+  }
+}
+
+main();

cases/bookshelf-v3/backend/src/middleware/auth.ts

@@ -0,0 +1,41 @@
+// JWT Authentication Middleware
+import type { FastifyRequest, FastifyReply } from "fastify";
+import type { JwtPayload } from "../types/index.js";
+
+/**
+ * Verify JWT token and attach user to request.
+ */
+export async function authenticate(request: FastifyRequest, reply: FastifyReply): Promise<void> {
+  try {
+    await request.jwtVerify();
+  } catch (err) {
+    reply.status(401).send({ error: "Unauthorized", message: "Invalid or expired token", statusCode: 401 });
+  }
+}
+
+/** Helper to get typed user from request (after authenticate). */
+export function getUser(request: FastifyRequest): JwtPayload {
+  return request.user as unknown as JwtPayload;
+}
+
+/**
+ * Require admin role.
+ * Must be used after authenticate.
+ */
+export async function requireAdmin(request: FastifyRequest, reply: FastifyReply): Promise<void> {
+  const user = request.user as unknown as JwtPayload | undefined;
+  if (!user || user.role !== "admin") {
+    reply.status(403).send({ error: "Forbidden", message: "Admin access required", statusCode: 403 });
+  }
+}
+
+/**
+ * Optional auth: attach user if token present, but don't fail if missing.
+ */
+export async function optionalAuth(request: FastifyRequest): Promise<void> {
+  try {
+    await request.jwtVerify();
+  } catch {
+    // No token or invalid — continue without user
+  }
+}

cases/bookshelf-v3/backend/src/routes/auth.ts

@@ -0,0 +1,121 @@
+// Authentication routes
+import type { FastifyInstance } from "fastify";
+import bcrypt from "bcrypt";
+import { queryOne, execute } from "../db/client.js";
+import { authenticate } from "../middleware/auth.js";
+import type { User, RegisterInput, LoginInput, AuthResponse } from "../types/index.js";
+
+const SALT_ROUNDS = 10;
+
+export async function authRoutes(app: FastifyInstance): Promise<void> {
+  // POST /api/auth/register
+  app.post<{ Body: RegisterInput }>("/register", async (request, reply) => {
+    const { username, password, nickname } = request.body;
+
+    if (!username || !password) {
+      return reply.status(400).send({
+        error: "Bad Request",
+        message: "Username and password are required",
+        statusCode: 400,
+      });
+    }
+
+    if (password.length < 6) {
+      return reply.status(400).send({
+        error: "Bad Request",
+        message: "Password must be at least 6 characters",
+        statusCode: 400,
+      });
+    }
+
+    const existing = queryOne("SELECT id FROM users WHERE username = ?", [username]);
+    if (existing) {
+      return reply.status(409).send({
+        error: "Conflict",
+        message: "Username already exists",
+        statusCode: 409,
+      });
+    }
+
+    const id = crypto.randomUUID();
+    const passwordHash = await bcrypt.hash(password, SALT_ROUNDS);
+    const now = new Date().toISOString();
+
+    execute(
+      "INSERT INTO users (id, username, password_hash, nickname, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)",
+      [id, username, passwordHash, nickname || username, now, now]
+    );
+
+    const user = queryOne<User>(
+      "SELECT id, username, nickname, role, created_at, updated_at FROM users WHERE id = ?",
+      [id]
+    );
+    if (!user) {
+      return reply.status(500).send({ error: "Internal Error", message: "Failed to create user", statusCode: 500 });
+    }
+
+    const token = app.jwt.sign({ userId: id, username, role: user.role });
+
+    return reply.status(201).send({ token, user } satisfies AuthResponse);
+  });
+
+  // POST /api/auth/login
+  app.post<{ Body: LoginInput }>("/login", async (request, reply) => {
+    const { username, password } = request.body;
+
+    if (!username || !password) {
+      return reply.status(400).send({
+        error: "Bad Request",
+        message: "Username and password are required",
+        statusCode: 400,
+      });
+    }
+
+    const user = queryOne<User & { password_hash: string }>(
+      "SELECT * FROM users WHERE username = ?",
+      [username]
+    );
+
+    if (!user) {
+      return reply.status(401).send({
+        error: "Unauthorized",
+        message: "Invalid username or password",
+        statusCode: 401,
+      });
+    }
+
+    const valid = await bcrypt.compare(password, user.password_hash);
+    if (!valid) {
+      return reply.status(401).send({
+        error: "Unauthorized",
+        message: "Invalid username or password",
+        statusCode: 401,
+      });
+    }
+
+    const token = app.jwt.sign({ userId: user.id, username: user.username, role: user.role });
+
+    const { password_hash, ...safeUser } = user;
+
+    return { token, user: safeUser } satisfies AuthResponse;
+  });
+
+  // GET /api/auth/me — current user info
+  app.get("/me", { onRequest: [authenticate] }, async (request, reply) => {
+    const jwtUser = request.user as unknown as { userId: string };
+    const user = queryOne<User>(
+      "SELECT id, username, nickname, role, created_at, updated_at FROM users WHERE id = ?",
+      [jwtUser.userId]
+    );
+
+    if (!user) {
+      return reply.status(404).send({
+        error: "Not Found",
+        message: "User not found",
+        statusCode: 404,
+      });
+    }
+
+    return { data: user };
+  });
+}

cases/bookshelf-v3/backend/src/routes/books.ts

@@ -0,0 +1,51 @@
+// Auto-generated Book routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { BookService } from "../services/book.js";
+import type { CreateBookInput, UpdateBookInput } from "../types/index.js";
+
+const service = new BookService();
+
+export async function booksRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/books — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/books/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Book not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/books — create
+  app.post<{ Body: CreateBookInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/books/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateBookInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Book not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/books/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "Book not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

cases/bookshelf-v3/backend/src/routes/items.ts

@@ -0,0 +1,51 @@
+// Auto-generated Item routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { ItemService } from "../services/item.js";
+import type { CreateItemInput, UpdateItemInput } from "../types/index.js";
+
+const service = new ItemService();
+
+export async function itemsRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/items — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/items/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Item not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/items — create
+  app.post<{ Body: CreateItemInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/items/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateItemInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Item not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/items/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "Item not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

cases/bookshelf-v3/backend/src/routes/note_tags.ts

@@ -0,0 +1,51 @@
+// Auto-generated NoteTag routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { NoteTagService } from "../services/note_tag.js";
+import type { CreateNoteTagInput, UpdateNoteTagInput } from "../types/index.js";
+
+const service = new NoteTagService();
+
+export async function note_tagsRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/note_tags — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/note_tags/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "NoteTag not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/note_tags — create
+  app.post<{ Body: CreateNoteTagInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/note_tags/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateNoteTagInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "NoteTag not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/note_tags/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "NoteTag not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

cases/bookshelf-v3/backend/src/routes/notes.ts

@@ -0,0 +1,51 @@
+// Auto-generated Note routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { NoteService } from "../services/note.js";
+import type { CreateNoteInput, UpdateNoteInput } from "../types/index.js";
+
+const service = new NoteService();
+
+export async function notesRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/notes — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/notes/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Note not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/notes — create
+  app.post<{ Body: CreateNoteInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/notes/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateNoteInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Note not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/notes/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "Note not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

cases/bookshelf-v3/backend/src/routes/reading_progress.ts

@@ -0,0 +1,51 @@
+// Auto-generated ReadingProgress routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { ReadingProgressService } from "../services/reading_progress.js";
+import type { CreateReadingProgressInput, UpdateReadingProgressInput } from "../types/index.js";
+
+const service = new ReadingProgressService();
+
+export async function reading_progressRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/reading_progress — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/reading_progress/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "ReadingProgress not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/reading_progress — create
+  app.post<{ Body: CreateReadingProgressInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/reading_progress/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateReadingProgressInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "ReadingProgress not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/reading_progress/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "ReadingProgress not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

cases/bookshelf-v3/backend/src/routes/reading_status.ts

@@ -0,0 +1,51 @@
+// Auto-generated ReadingStatu routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { ReadingStatuService } from "../services/reading_statu.js";
+import type { CreateReadingStatuInput, UpdateReadingStatuInput } from "../types/index.js";
+
+const service = new ReadingStatuService();
+
+export async function reading_statusRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/reading_status — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/reading_status/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "ReadingStatu not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/reading_status — create
+  app.post<{ Body: CreateReadingStatuInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/reading_status/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateReadingStatuInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "ReadingStatu not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/reading_status/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "ReadingStatu not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

cases/bookshelf-v3/backend/src/routes/reviews.ts

@@ -0,0 +1,51 @@
+// Auto-generated Review routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { ReviewService } from "../services/review.js";
+import type { CreateReviewInput, UpdateReviewInput } from "../types/index.js";
+
+const service = new ReviewService();
+
+export async function reviewsRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/reviews — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/reviews/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Review not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/reviews — create
+  app.post<{ Body: CreateReviewInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/reviews/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateReviewInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Review not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/reviews/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "Review not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

cases/bookshelf-v3/backend/src/routes/stats.ts

@@ -0,0 +1,51 @@
+// Auto-generated Stat routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { StatService } from "../services/stat.js";
+import type { CreateStatInput, UpdateStatInput } from "../types/index.js";
+
+const service = new StatService();
+
+export async function statsRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/stats — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/stats/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Stat not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/stats — create
+  app.post<{ Body: CreateStatInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/stats/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateStatInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Stat not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/stats/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "Stat not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

cases/bookshelf-v3/backend/src/routes/tags.ts

@@ -0,0 +1,51 @@
+// Auto-generated Tag routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { TagService } from "../services/tag.js";
+import type { CreateTagInput, UpdateTagInput } from "../types/index.js";
+
+const service = new TagService();
+
+export async function tagsRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/tags — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/tags/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Tag not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/tags — create
+  app.post<{ Body: CreateTagInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/tags/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateTagInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Tag not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/tags/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "Tag not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

cases/bookshelf-v3/backend/src/routes/users.ts

@@ -0,0 +1,51 @@
+// Auto-generated User routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { UserService } from "../services/user.js";
+import type { CreateUserInput, UpdateUserInput } from "../types/index.js";
+
+const service = new UserService();
+
+export async function usersRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/users — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/users/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "User not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/users — create
+  app.post<{ Body: CreateUserInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/users/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateUserInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "User not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/users/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "User not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

cases/bookshelf-v3/backend/src/services/book.ts

@@ -0,0 +1,58 @@
+// Auto-generated Book service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { Book, CreateBookInput, UpdateBookInput } from "../types/index.js";
+
+export class BookService {
+  /** List all books */
+  list(): Book[] {
+    return queryAll<Book>("SELECT * FROM books ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): Book | undefined {
+    return queryOne<Book>("SELECT * FROM books WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateBookInput): Book {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const hasCreatedAt = true;
+    const hasUpdatedAt = true;
+    const cols = ["id", "user_id", "title", "description", "status", "data", "created_at", "updated_at"];
+    const placeholders = cols.map(() => "?").join(", ");
+    const values = [id, input.userId ?? null, input.title ?? null, input.description ?? null, input.status ?? null, input.data ?? null, now, now];
+
+    execute(`INSERT INTO books (${cols.join(", ")}) VALUES (${placeholders})`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateBookInput): Book | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.userId !== undefined) { sets.push("user_id = ?"); values.push(input.userId); }
+    if (input.title !== undefined) { sets.push("title = ?"); values.push(input.title); }
+    if (input.description !== undefined) { sets.push("description = ?"); values.push(input.description); }
+    if (input.status !== undefined) { sets.push("status = ?"); values.push(input.status); }
+    if (input.data !== undefined) { sets.push("data = ?"); values.push(input.data); }
+
+    if (sets.length === 0) return existing;
+
+    sets.push("updated_at = ?");
+    values.push(new Date().toISOString());
+
+    values.push(id);
+    execute(`UPDATE books SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM books WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

cases/bookshelf-v3/backend/src/services/item.ts

@@ -0,0 +1,58 @@
+// Auto-generated Item service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { Item, CreateItemInput, UpdateItemInput } from "../types/index.js";
+
+export class ItemService {
+  /** List all items */
+  list(): Item[] {
+    return queryAll<Item>("SELECT * FROM items ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): Item | undefined {
+    return queryOne<Item>("SELECT * FROM items WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateItemInput): Item {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const hasCreatedAt = true;
+    const hasUpdatedAt = true;
+    const cols = ["id", "user_id", "title", "description", "status", "data", "created_at", "updated_at"];
+    const placeholders = cols.map(() => "?").join(", ");
+    const values = [id, input.userId ?? null, input.title ?? null, input.description ?? null, input.status ?? null, input.data ?? null, now, now];
+
+    execute(`INSERT INTO items (${cols.join(", ")}) VALUES (${placeholders})`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateItemInput): Item | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.userId !== undefined) { sets.push("user_id = ?"); values.push(input.userId); }
+    if (input.title !== undefined) { sets.push("title = ?"); values.push(input.title); }
+    if (input.description !== undefined) { sets.push("description = ?"); values.push(input.description); }
+    if (input.status !== undefined) { sets.push("status = ?"); values.push(input.status); }
+    if (input.data !== undefined) { sets.push("data = ?"); values.push(input.data); }
+
+    if (sets.length === 0) return existing;
+
+    sets.push("updated_at = ?");
+    values.push(new Date().toISOString());
+
+    values.push(id);
+    execute(`UPDATE items SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM items WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

cases/bookshelf-v3/backend/src/services/note.ts

@@ -0,0 +1,58 @@
+// Auto-generated Note service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { Note, CreateNoteInput, UpdateNoteInput } from "../types/index.js";
+
+export class NoteService {
+  /** List all notes */
+  list(): Note[] {
+    return queryAll<Note>("SELECT * FROM notes ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): Note | undefined {
+    return queryOne<Note>("SELECT * FROM notes WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateNoteInput): Note {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const hasCreatedAt = true;
+    const hasUpdatedAt = true;
+    const cols = ["id", "user_id", "title", "description", "status", "data", "created_at", "updated_at"];
+    const placeholders = cols.map(() => "?").join(", ");
+    const values = [id, input.userId ?? null, input.title ?? null, input.description ?? null, input.status ?? null, input.data ?? null, now, now];
+
+    execute(`INSERT INTO notes (${cols.join(", ")}) VALUES (${placeholders})`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateNoteInput): Note | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.userId !== undefined) { sets.push("user_id = ?"); values.push(input.userId); }
+    if (input.title !== undefined) { sets.push("title = ?"); values.push(input.title); }
+    if (input.description !== undefined) { sets.push("description = ?"); values.push(input.description); }
+    if (input.status !== undefined) { sets.push("status = ?"); values.push(input.status); }
+    if (input.data !== undefined) { sets.push("data = ?"); values.push(input.data); }
+
+    if (sets.length === 0) return existing;
+
+    sets.push("updated_at = ?");
+    values.push(new Date().toISOString());
+
+    values.push(id);
+    execute(`UPDATE notes SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM notes WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

cases/bookshelf-v3/backend/src/services/note_tag.ts

@@ -0,0 +1,54 @@
+// Auto-generated NoteTag service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { NoteTag, CreateNoteTagInput, UpdateNoteTagInput } from "../types/index.js";
+
+export class NoteTagService {
+  /** List all note_tags */
+  list(): NoteTag[] {
+    return queryAll<NoteTag>("SELECT * FROM note_tags ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): NoteTag | undefined {
+    return queryOne<NoteTag>("SELECT * FROM note_tags WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateNoteTagInput): NoteTag {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const hasCreatedAt = false;
+    const hasUpdatedAt = false;
+    const cols = ["id", "note_id", "tag_id"];
+    const placeholders = cols.map(() => "?").join(", ");
+    const values = [id, input.noteId ?? null, input.tagId ?? null];
+
+    execute(`INSERT INTO note_tags (${cols.join(", ")}) VALUES (${placeholders})`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateNoteTagInput): NoteTag | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.noteId !== undefined) { sets.push("note_id = ?"); values.push(input.noteId); }
+    if (input.tagId !== undefined) { sets.push("tag_id = ?"); values.push(input.tagId); }
+
+    if (sets.length === 0) return existing;
+
+    
+
+    values.push(id);
+    execute(`UPDATE note_tags SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM note_tags WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

cases/bookshelf-v3/backend/src/services/reading_progress.ts

@@ -0,0 +1,58 @@
+// Auto-generated ReadingProgress service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { ReadingProgress, CreateReadingProgressInput, UpdateReadingProgressInput } from "../types/index.js";
+
+export class ReadingProgressService {
+  /** List all reading_progress */
+  list(): ReadingProgress[] {
+    return queryAll<ReadingProgress>("SELECT * FROM reading_progress ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): ReadingProgress | undefined {
+    return queryOne<ReadingProgress>("SELECT * FROM reading_progress WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateReadingProgressInput): ReadingProgress {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const hasCreatedAt = true;
+    const hasUpdatedAt = true;
+    const cols = ["id", "user_id", "title", "description", "status", "data", "created_at", "updated_at"];
+    const placeholders = cols.map(() => "?").join(", ");
+    const values = [id, input.userId ?? null, input.title ?? null, input.description ?? null, input.status ?? null, input.data ?? null, now, now];
+
+    execute(`INSERT INTO reading_progress (${cols.join(", ")}) VALUES (${placeholders})`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateReadingProgressInput): ReadingProgress | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.userId !== undefined) { sets.push("user_id = ?"); values.push(input.userId); }
+    if (input.title !== undefined) { sets.push("title = ?"); values.push(input.title); }
+    if (input.description !== undefined) { sets.push("description = ?"); values.push(input.description); }
+    if (input.status !== undefined) { sets.push("status = ?"); values.push(input.status); }
+    if (input.data !== undefined) { sets.push("data = ?"); values.push(input.data); }
+
+    if (sets.length === 0) return existing;
+
+    sets.push("updated_at = ?");
+    values.push(new Date().toISOString());
+
+    values.push(id);
+    execute(`UPDATE reading_progress SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM reading_progress WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

cases/bookshelf-v3/backend/src/services/reading_statu.ts

@@ -0,0 +1,58 @@
+// Auto-generated ReadingStatu service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { ReadingStatu, CreateReadingStatuInput, UpdateReadingStatuInput } from "../types/index.js";
+
+export class ReadingStatuService {
+  /** List all reading_status */
+  list(): ReadingStatu[] {
+    return queryAll<ReadingStatu>("SELECT * FROM reading_status ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): ReadingStatu | undefined {
+    return queryOne<ReadingStatu>("SELECT * FROM reading_status WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateReadingStatuInput): ReadingStatu {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const hasCreatedAt = true;
+    const hasUpdatedAt = true;
+    const cols = ["id", "user_id", "title", "description", "status", "data", "created_at", "updated_at"];
+    const placeholders = cols.map(() => "?").join(", ");
+    const values = [id, input.userId ?? null, input.title ?? null, input.description ?? null, input.status ?? null, input.data ?? null, now, now];
+
+    execute(`INSERT INTO reading_status (${cols.join(", ")}) VALUES (${placeholders})`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateReadingStatuInput): ReadingStatu | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.userId !== undefined) { sets.push("user_id = ?"); values.push(input.userId); }
+    if (input.title !== undefined) { sets.push("title = ?"); values.push(input.title); }
+    if (input.description !== undefined) { sets.push("description = ?"); values.push(input.description); }
+    if (input.status !== undefined) { sets.push("status = ?"); values.push(input.status); }
+    if (input.data !== undefined) { sets.push("data = ?"); values.push(input.data); }
+
+    if (sets.length === 0) return existing;
+
+    sets.push("updated_at = ?");
+    values.push(new Date().toISOString());
+
+    values.push(id);
+    execute(`UPDATE reading_status SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM reading_status WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

cases/bookshelf-v3/backend/src/services/review.ts

@@ -0,0 +1,58 @@
+// Auto-generated Review service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { Review, CreateReviewInput, UpdateReviewInput } from "../types/index.js";
+
+export class ReviewService {
+  /** List all reviews */
+  list(): Review[] {
+    return queryAll<Review>("SELECT * FROM reviews ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): Review | undefined {
+    return queryOne<Review>("SELECT * FROM reviews WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateReviewInput): Review {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const hasCreatedAt = true;
+    const hasUpdatedAt = true;
+    const cols = ["id", "user_id", "title", "description", "status", "data", "created_at", "updated_at"];
+    const placeholders = cols.map(() => "?").join(", ");
+    const values = [id, input.userId ?? null, input.title ?? null, input.description ?? null, input.status ?? null, input.data ?? null, now, now];
+
+    execute(`INSERT INTO reviews (${cols.join(", ")}) VALUES (${placeholders})`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateReviewInput): Review | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.userId !== undefined) { sets.push("user_id = ?"); values.push(input.userId); }
+    if (input.title !== undefined) { sets.push("title = ?"); values.push(input.title); }
+    if (input.description !== undefined) { sets.push("description = ?"); values.push(input.description); }
+    if (input.status !== undefined) { sets.push("status = ?"); values.push(input.status); }
+    if (input.data !== undefined) { sets.push("data = ?"); values.push(input.data); }
+
+    if (sets.length === 0) return existing;
+
+    sets.push("updated_at = ?");
+    values.push(new Date().toISOString());
+
+    values.push(id);
+    execute(`UPDATE reviews SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM reviews WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

cases/bookshelf-v3/backend/src/services/stat.ts

@@ -0,0 +1,58 @@
+// Auto-generated Stat service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { Stat, CreateStatInput, UpdateStatInput } from "../types/index.js";
+
+export class StatService {
+  /** List all stats */
+  list(): Stat[] {
+    return queryAll<Stat>("SELECT * FROM stats ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): Stat | undefined {
+    return queryOne<Stat>("SELECT * FROM stats WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateStatInput): Stat {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const hasCreatedAt = true;
+    const hasUpdatedAt = true;
+    const cols = ["id", "user_id", "title", "description", "status", "data", "created_at", "updated_at"];
+    const placeholders = cols.map(() => "?").join(", ");
+    const values = [id, input.userId ?? null, input.title ?? null, input.description ?? null, input.status ?? null, input.data ?? null, now, now];
+
+    execute(`INSERT INTO stats (${cols.join(", ")}) VALUES (${placeholders})`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateStatInput): Stat | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.userId !== undefined) { sets.push("user_id = ?"); values.push(input.userId); }
+    if (input.title !== undefined) { sets.push("title = ?"); values.push(input.title); }
+    if (input.description !== undefined) { sets.push("description = ?"); values.push(input.description); }
+    if (input.status !== undefined) { sets.push("status = ?"); values.push(input.status); }
+    if (input.data !== undefined) { sets.push("data = ?"); values.push(input.data); }
+
+    if (sets.length === 0) return existing;
+
+    sets.push("updated_at = ?");
+    values.push(new Date().toISOString());
+
+    values.push(id);
+    execute(`UPDATE stats SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM stats WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

cases/bookshelf-v3/backend/src/services/tag.ts

@@ -0,0 +1,54 @@
+// Auto-generated Tag service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { Tag, CreateTagInput, UpdateTagInput } from "../types/index.js";
+
+export class TagService {
+  /** List all tags */
+  list(): Tag[] {
+    return queryAll<Tag>("SELECT * FROM tags ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): Tag | undefined {
+    return queryOne<Tag>("SELECT * FROM tags WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateTagInput): Tag {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const hasCreatedAt = false;
+    const hasUpdatedAt = false;
+    const cols = ["id", "name", "color"];
+    const placeholders = cols.map(() => "?").join(", ");
+    const values = [id, input.name ?? null, input.color ?? null];
+
+    execute(`INSERT INTO tags (${cols.join(", ")}) VALUES (${placeholders})`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateTagInput): Tag | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.name !== undefined) { sets.push("name = ?"); values.push(input.name); }
+    if (input.color !== undefined) { sets.push("color = ?"); values.push(input.color); }
+
+    if (sets.length === 0) return existing;
+
+    
+
+    values.push(id);
+    execute(`UPDATE tags SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM tags WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

cases/bookshelf-v3/backend/src/services/user.ts

@@ -0,0 +1,56 @@
+// Auto-generated User service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { User, CreateUserInput, UpdateUserInput } from "../types/index.js";
+
+export class UserService {
+  /** List all users */
+  list(): User[] {
+    return queryAll<User>("SELECT * FROM users ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): User | undefined {
+    return queryOne<User>("SELECT * FROM users WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateUserInput): User {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const hasCreatedAt = true;
+    const hasUpdatedAt = true;
+    const cols = ["id", "phone", "nickname", "avatar_url", "created_at", "updated_at"];
+    const placeholders = cols.map(() => "?").join(", ");
+    const values = [id, input.phone ?? null, input.nickname ?? null, input.avatarUrl ?? null, now, now];
+
+    execute(`INSERT INTO users (${cols.join(", ")}) VALUES (${placeholders})`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateUserInput): User | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.phone !== undefined) { sets.push("phone = ?"); values.push(input.phone); }
+    if (input.nickname !== undefined) { sets.push("nickname = ?"); values.push(input.nickname); }
+    if (input.avatarUrl !== undefined) { sets.push("avatar_url = ?"); values.push(input.avatarUrl); }
+
+    if (sets.length === 0) return existing;
+
+    sets.push("updated_at = ?");
+    values.push(new Date().toISOString());
+
+    values.push(id);
+    execute(`UPDATE users SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM users WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

cases/bookshelf-v3/backend/src/types/fastify.d.ts

@@ -0,0 +1,8 @@
+// Augment Fastify request with JWT user
+import type { JwtPayload } from "./index.js";
+
+declare module "fastify" {
+  interface FastifyRequest {
+    user?: JwtPayload;
+  }
+}

cases/bookshelf-v3/backend/src/types/index.ts

@@ -0,0 +1,288 @@
+// Auto-generated types
+
+// ─── Base ───────────────────────────────────────────
+export interface User {
+  id: string;
+  username: string;
+  nickname?: string;
+  role: string;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface Book {
+  id: string;
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface ReadingStatu {
+  id: string;
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface ReadingProgress {
+  id: string;
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface Note {
+  id: string;
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface Review {
+  id: string;
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface Stat {
+  id: string;
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface Item {
+  id: string;
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface Tag {
+  id: string;
+  name: string;
+  color?: string;
+}
+
+export interface NoteTag {
+  noteId?: string;
+  tagId?: string;
+}
+
+export interface CreateUserInput {
+  phone?: string;
+  nickname?: string;
+  avatarUrl?: string;
+}
+
+export interface CreateBookInput {
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: string;
+}
+
+export interface CreateReadingStatuInput {
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: string;
+}
+
+export interface CreateReadingProgressInput {
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: string;
+}
+
+export interface CreateNoteInput {
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: string;
+}
+
+export interface CreateReviewInput {
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: string;
+}
+
+export interface CreateStatInput {
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: string;
+}
+
+export interface CreateItemInput {
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: string;
+}
+
+export interface CreateTagInput {
+  name: string;
+  color?: string;
+}
+
+export interface CreateNoteTagInput {
+  noteId?: string;
+  tagId?: string;
+}
+
+export interface UpdateUserInput {
+  phone?: string;
+  nickname?: string;
+  avatarUrl?: string;
+}
+
+export interface UpdateBookInput {
+  userId?: string;
+  title?: string;
+  description?: string;
+  status?: string;
+  data?: string;
+}
+
+export interface UpdateReadingStatuInput {
+  userId?: string;
+  title?: string;
+  description?: string;
+  status?: string;
+  data?: string;
+}
+
+export interface UpdateReadingProgressInput {
+  userId?: string;
+  title?: string;
+  description?: string;
+  status?: string;
+  data?: string;
+}
+
+export interface UpdateNoteInput {
+  userId?: string;
+  title?: string;
+  description?: string;
+  status?: string;
+  data?: string;
+}
+
+export interface UpdateReviewInput {
+  userId?: string;
+  title?: string;
+  description?: string;
+  status?: string;
+  data?: string;
+}
+
+export interface UpdateStatInput {
+  userId?: string;
+  title?: string;
+  description?: string;
+  status?: string;
+  data?: string;
+}
+
+export interface UpdateItemInput {
+  userId?: string;
+  title?: string;
+  description?: string;
+  status?: string;
+  data?: string;
+}
+
+export interface UpdateTagInput {
+  name?: string;
+  color?: string;
+}
+
+export interface UpdateNoteTagInput {
+  noteId?: string;
+  tagId?: string;
+}
+
+// ─── Auth ───────────────────────────────────────────
+export interface LoginInput {
+  username: string;
+  password: string;
+}
+
+export interface RegisterInput {
+  username: string;
+  password: string;
+  nickname?: string;
+}
+
+export interface AuthResponse {
+  token: string;
+  user: User;
+}
+
+// ─── API ────────────────────────────────────────────
+export interface ApiResponse<T> {
+  data: T;
+  message?: string;
+}
+
+export interface PaginatedResponse<T> {
+  data: T[];
+  total: number;
+  page: number;
+  pageSize: number;
+}
+
+export interface ErrorResponse {
+  error: string;
+  message: string;
+  statusCode: number;
+}
+
+// ─── JWT ────────────────────────────────────────────
+export interface JwtPayload {
+  userId: string;
+  username: string;
+  role: string;
+  iat?: number;
+  exp?: number;
+}

cases/bookshelf-v3/backend/src/types/sql.js.d.ts

@@ -0,0 +1,27 @@
+// Type declarations for sql.js (no native types package available)
+declare module "sql.js" {
+  export interface Database {
+    run(sql: string, params?: BindParams): void;
+    exec(sql: string): void;
+    prepare(sql: string): Statement;
+    export(): Uint8Array;
+    close(): void;
+    getRowsModified(): number;
+  }
+
+  export interface Statement {
+    bind(params?: BindParams): boolean;
+    step(): boolean;
+    getAsObject<T = Record<string, unknown>>(): T;
+    getColumnNames(): string[];
+    free(): boolean;
+  }
+
+  export type BindParams = unknown[] | Record<string, unknown>;
+
+  export interface SqlJsStatic {
+    Database: new (data?: ArrayLike<number>) => Database;
+  }
+
+  export default function initSqlJs(config?: Record<string, unknown>): Promise<SqlJsStatic>;
+}

cases/bookshelf-v3/backend/tsconfig.json

@@ -0,0 +1,27 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "lib": [
+      "ES2022"
+    ],
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "declaration": true,
+    "sourceMap": true
+  },
+  "include": [
+    "src/**/*"
+  ],
+  "exclude": [
+    "node_modules",
+    "dist",
+    "src/__tests__"
+  ]
+}