🎉 init: 小龙的工作空间

output/warehouse-mgmt/.gitignore

@@ -0,0 +1,8 @@
+node_modules/
+dist/
+.next/
+data/
+.env
+*.db
+*.db-journal
+*.db-wal

output/warehouse-mgmt/README.md

@@ -0,0 +1,111 @@
+# NoteApp — Fullstack Project
+
+> 一款支持多端同步、Markdown 编辑和标签管理的笔记应用。
+
+## Architecture
+
+```
+apps/
+├── web/        # Next.js 15 + TypeScript + Tailwind CSS
+└── api/        # Fastify 5 + TypeScript + SQLite (sql.js)
+
+packages/
+├── shared-types/   # @shared/types — shared TypeScript interfaces
+└── shared-config/  # @shared/config — shared configuration
+```
+
+## Quick Start
+
+```bash
+# Install all dependencies (root + workspaces)
+npm install
+
+# Start both frontend and backend in dev mode
+npm run dev
+
+# Or start individually
+npm run dev:web    # http://localhost:3000
+npm run dev:api    # http://localhost:3001
+```
+
+## Build
+
+```bash
+# Build everything
+npm run build
+
+# Or individually
+npm run build:web
+npm run build:api
+```
+
+## Testing
+
+```bash
+# Run API tests
+npm test
+```
+
+## API Endpoints
+
+### Auth
+- `POST /api/auth/register`
+- `POST /api/auth/login`
+- `GET  /api/auth/me`
+
+### Resources
+#### users
+- `GET    /api/users` — List
+- `GET    /api/users/:id` — Get
+- `POST   /api/users` — Create
+- `PUT    /api/users/:id` — Update
+- `DELETE /api/users/:id` — Delete
+
+#### items
+- `GET    /api/items` — List
+- `GET    /api/items/:id` — Get
+- `POST   /api/items` — Create
+- `PUT    /api/items/:id` — Update
+- `DELETE /api/items/:id` — Delete
+
+#### stock_in
+- `GET    /api/stock_in` — List
+- `GET    /api/stock_in/:id` — Get
+- `POST   /api/stock_in` — Create
+- `PUT    /api/stock_in/:id` — Update
+- `DELETE /api/stock_in/:id` — Delete
+
+#### stock_out
+- `GET    /api/stock_out` — List
+- `GET    /api/stock_out/:id` — Get
+- `POST   /api/stock_out` — Create
+- `PUT    /api/stock_out/:id` — Update
+- `DELETE /api/stock_out/:id` — Delete
+
+#### stocktaking
+- `GET    /api/stocktaking` — List
+- `GET    /api/stocktaking/:id` — Get
+- `POST   /api/stocktaking` — Create
+- `PUT    /api/stocktaking/:id` — Update
+- `DELETE /api/stocktaking/:id` — Delete
+
+#### stock_alerts
+- `GET    /api/stock_alerts` — List
+- `GET    /api/stock_alerts/:id` — Get
+- `POST   /api/stock_alerts` — Create
+- `PUT    /api/stock_alerts/:id` — Update
+- `DELETE /api/stock_alerts/:id` — Delete
+
+#### warehouse
+- `GET    /api/warehouse` — List
+- `GET    /api/warehouse/:id` — Get
+- `POST   /api/warehouse` — Create
+- `PUT    /api/warehouse/:id` — Update
+- `DELETE /api/warehouse/:id` — Delete
+
+### System
+- `GET /api/health` — Health check
+
+## Environment Variables
+
+See `.env.example` for all available configuration.

output/warehouse-mgmt/apps/api/.gitignore

@@ -0,0 +1,7 @@
+node_modules/
+dist/
+data/
+.env
+*.db
+*.db-journal
+*.db-wal

output/warehouse-mgmt/apps/api/README.md

@@ -0,0 +1,104 @@
+# NoteApp — Backend API
+
+> 一款支持多端同步、Markdown 编辑和标签管理的笔记应用。
+
+## Tech Stack
+
+- **Runtime**: Node.js
+- **Framework**: Fastify 5
+- **Language**: TypeScript
+- **Database**: SQLite (better-sqlite3)
+- **Auth**: JWT + bcrypt
+
+## Getting Started
+
+```bash
+# Install dependencies
+npm install
+
+# Development (hot reload)
+npm run dev
+
+# Build
+npm run build
+
+# Production start
+npm run start
+
+# Run tests
+npm test
+```
+
+## Project Structure
+
+```
+src/
+├── index.ts          # Server entry point
+├── db/
+│   ├── schema.ts     # SQLite schema
+│   └── client.ts     # Database client
+├── routes/
+│   ├── auth.ts       # Auth routes (register/login/me)
+│   └── *.ts          # CRUD routes
+├── services/
+│   └── *.ts          # Business logic
+├── middleware/
+│   └── auth.ts       # JWT middleware
+├── types/
+│   └── index.ts      # TypeScript types
+└── __tests__/
+    └── *.test.ts     # Tests
+```
+
+## API Endpoints
+
+### Auth
+- `POST /api/auth/register` — Register
+- `POST /api/auth/login` — Login
+- `GET  /api/auth/me` — Current user (auth required)
+
+### Resources
+#### items
+- `GET    /api/items` — List all
+- `GET    /api/items/:id` — Get by ID
+- `POST   /api/items` — Create
+- `PUT    /api/items/:id` — Update
+- `DELETE /api/items/:id` — Delete
+
+#### stock_in
+- `GET    /api/stock_in` — List all
+- `GET    /api/stock_in/:id` — Get by ID
+- `POST   /api/stock_in` — Create
+- `PUT    /api/stock_in/:id` — Update
+- `DELETE /api/stock_in/:id` — Delete
+
+#### stock_out
+- `GET    /api/stock_out` — List all
+- `GET    /api/stock_out/:id` — Get by ID
+- `POST   /api/stock_out` — Create
+- `PUT    /api/stock_out/:id` — Update
+- `DELETE /api/stock_out/:id` — Delete
+
+#### stocktaking
+- `GET    /api/stocktaking` — List all
+- `GET    /api/stocktaking/:id` — Get by ID
+- `POST   /api/stocktaking` — Create
+- `PUT    /api/stocktaking/:id` — Update
+- `DELETE /api/stocktaking/:id` — Delete
+
+#### stock_alerts
+- `GET    /api/stock_alerts` — List all
+- `GET    /api/stock_alerts/:id` — Get by ID
+- `POST   /api/stock_alerts` — Create
+- `PUT    /api/stock_alerts/:id` — Update
+- `DELETE /api/stock_alerts/:id` — Delete
+
+#### warehouse
+- `GET    /api/warehouse` — List all
+- `GET    /api/warehouse/:id` — Get by ID
+- `POST   /api/warehouse` — Create
+- `PUT    /api/warehouse/:id` — Update
+- `DELETE /api/warehouse/:id` — Delete
+
+### System
+- `GET /api/health` — Health check

output/warehouse-mgmt/apps/api/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "noteapp-api",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "test": "node --import tsx --test src/__tests__/*.test.ts",
+    "test:watch": "node --import tsx --test --watch src/__tests__/*.test.ts"
+  },
+  "dependencies": {
+    "fastify": "^5.0.0",
+    "@fastify/cors": "^10.0.0",
+    "@fastify/jwt": "^9.0.0",
+    "sql.js": "^1.12.0",
+    "bcrypt": "^5.1.0",
+    "@shared/types": "*",
+    "@shared/config": "*"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@types/bcrypt": "^5.0.0",
+    "typescript": "^5.6.0",
+    "tsx": "^4.0.0",
+    "pino-pretty": "^11.0.0"
+  }
+}

output/warehouse-mgmt/apps/api/src/__tests__/auth.test.ts

@@ -0,0 +1,96 @@
+// Auth routes test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("POST /api/auth/register", () => {
+  it("registers a new user", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/auth/register",
+      payload: { username: "testuser", password: "password123" },
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.token);
+    assert.equal(body.user.username, "testuser");
+    token = body.token;
+  });
+
+  it("rejects duplicate username", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/auth/register",
+      payload: { username: "testuser", password: "password123" },
+    });
+    assert.equal(res.statusCode, 409);
+  });
+
+  it("rejects short password", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/auth/register",
+      payload: { username: "user2", password: "123" },
+    });
+    assert.equal(res.statusCode, 400);
+  });
+});
+
+describe("POST /api/auth/login", () => {
+  it("logs in with correct credentials", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/auth/login",
+      payload: { username: "testuser", password: "password123" },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(body.token);
+    token = body.token;
+  });
+
+  it("rejects wrong password", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/auth/login",
+      payload: { username: "testuser", password: "wrongpassword" },
+    });
+    assert.equal(res.statusCode, 401);
+  });
+});
+
+describe("GET /api/auth/me", () => {
+  it("returns current user with valid token", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/auth/me",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.username, "testuser");
+  });
+
+  it("rejects without token", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/auth/me",
+    });
+    assert.equal(res.statusCode, 401);
+  });
+});

output/warehouse-mgmt/apps/api/src/__tests__/items.test.ts

@@ -0,0 +1,119 @@
+// Items CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+let payload: Record<string, unknown>;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+
+  // Resolve user FK references with the registered user's real ID
+  payload = {
+          "userId": regRes.json().user.id,
+          "title": "sample-title",
+          "description": "sample-description",
+          "data": "sample-data"
+      };
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/items", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/items",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/items", () => {
+  it("creates a item", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/items",
+      headers: { authorization: `Bearer ${token}` },
+      payload,
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/items/:id", () => {
+  it("returns the created item", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/items/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/items/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/items/:id", () => {
+  it("updates the item", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/items/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload,
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/items/:id", () => {
+  it("deletes the item", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/items/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/items/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

output/warehouse-mgmt/apps/api/src/__tests__/stock_alerts.test.ts

@@ -0,0 +1,119 @@
+// StockAlerts CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+let payload: Record<string, unknown>;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+
+  // Resolve user FK references with the registered user's real ID
+  payload = {
+          "userId": regRes.json().user.id,
+          "productName": "sample-productname",
+          "currentQty": 1,
+          "threshold": 1
+      };
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/stock_alerts", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/stock_alerts",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/stock_alerts", () => {
+  it("creates a stock_alert", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/stock_alerts",
+      headers: { authorization: `Bearer ${token}` },
+      payload,
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/stock_alerts/:id", () => {
+  it("returns the created stock_alert", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/stock_alerts/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/stock_alerts/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/stock_alerts/:id", () => {
+  it("updates the stock_alert", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/stock_alerts/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload,
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/stock_alerts/:id", () => {
+  it("deletes the stock_alert", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/stock_alerts/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/stock_alerts/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

output/warehouse-mgmt/apps/api/src/__tests__/stock_in.test.ts

@@ -0,0 +1,120 @@
+// StockIn CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+let payload: Record<string, unknown>;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+
+  // Resolve user FK references with the registered user's real ID
+  payload = {
+          "userId": regRes.json().user.id,
+          "productName": "sample-productname",
+          "quantity": 1,
+          "supplier": "sample-supplier",
+          "receivedBy": "sample-receivedby"
+      };
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/stock_in", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/stock_in",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/stock_in", () => {
+  it("creates a stock_in", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/stock_in",
+      headers: { authorization: `Bearer ${token}` },
+      payload,
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/stock_in/:id", () => {
+  it("returns the created stock_in", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/stock_in/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/stock_in/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/stock_in/:id", () => {
+  it("updates the stock_in", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/stock_in/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload,
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/stock_in/:id", () => {
+  it("deletes the stock_in", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/stock_in/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/stock_in/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

output/warehouse-mgmt/apps/api/src/__tests__/stock_out.test.ts

@@ -0,0 +1,121 @@
+// StockOut CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+let payload: Record<string, unknown>;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+
+  // Resolve user FK references with the registered user's real ID
+  payload = {
+          "userId": regRes.json().user.id,
+          "productName": "sample-productname",
+          "quantity": 1,
+          "recipient": "sample-recipient",
+          "approvedBy": "sample-approvedby",
+          "shippedAt": "sample-shippedat"
+      };
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/stock_out", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/stock_out",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/stock_out", () => {
+  it("creates a stock_out", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/stock_out",
+      headers: { authorization: `Bearer ${token}` },
+      payload,
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/stock_out/:id", () => {
+  it("returns the created stock_out", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/stock_out/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/stock_out/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/stock_out/:id", () => {
+  it("updates the stock_out", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/stock_out/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload,
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/stock_out/:id", () => {
+  it("deletes the stock_out", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/stock_out/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/stock_out/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

output/warehouse-mgmt/apps/api/src/__tests__/stocktaking.test.ts

@@ -0,0 +1,121 @@
+// Stocktaking CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+let payload: Record<string, unknown>;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+
+  // Resolve user FK references with the registered user's real ID
+  payload = {
+          "userId": regRes.json().user.id,
+          "warehouse": "sample-warehouse",
+          "productName": "sample-productname",
+          "expectedQty": 1,
+          "actualQty": 1,
+          "diff": 1
+      };
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/stocktaking", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/stocktaking",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/stocktaking", () => {
+  it("creates a stocktaking", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/stocktaking",
+      headers: { authorization: `Bearer ${token}` },
+      payload,
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/stocktaking/:id", () => {
+  it("returns the created stocktaking", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/stocktaking/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/stocktaking/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/stocktaking/:id", () => {
+  it("updates the stocktaking", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/stocktaking/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload,
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/stocktaking/:id", () => {
+  it("deletes the stocktaking", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/stocktaking/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/stocktaking/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

output/warehouse-mgmt/apps/api/src/__tests__/warehouse.test.ts

@@ -0,0 +1,120 @@
+// Warehouse CRUD test
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { buildApp } from "../index.js";
+import type { FastifyInstance } from "fastify";
+
+let app: FastifyInstance;
+let token: string;
+let createdId: string;
+let payload: Record<string, unknown>;
+
+before(async () => {
+  process.env.JWT_SECRET = "test-secret";
+  process.env.DATABASE_URL = ":memory:";
+  app = await buildApp();
+  await app.ready();
+
+  // Register and login to get a token
+  const regRes = await app.inject({
+    method: "POST",
+    url: "/api/auth/register",
+    payload: { username: `test_${Date.now()}`, password: "password123" },
+  });
+  token = regRes.json().token;
+
+  // Resolve user FK references with the registered user's real ID
+  payload = {
+          "userId": regRes.json().user.id,
+          "productName": "sample-productname",
+          "quantity": 1,
+          "supplier": "sample-supplier",
+          "receivedBy": "sample-receivedby"
+      };
+});
+
+after(async () => {
+  await app.close();
+});
+
+describe("GET /api/warehouse", () => {
+  it("returns empty list", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: "/api/warehouse",
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.ok(Array.isArray(body.data));
+  });
+});
+
+describe("POST /api/warehouse", () => {
+  it("creates a warehouse", async () => {
+    const res = await app.inject({
+      method: "POST",
+      url: "/api/warehouse",
+      headers: { authorization: `Bearer ${token}` },
+      payload,
+    });
+    assert.equal(res.statusCode, 201);
+    const body = res.json();
+    assert.ok(body.data.id);
+    createdId = body.data.id;
+  });
+});
+
+describe("GET /api/warehouse/:id", () => {
+  it("returns the created warehouse", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/warehouse/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 200);
+    const body = res.json();
+    assert.equal(body.data.id, createdId);
+  });
+
+  it("returns 404 for nonexistent id", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/warehouse/nonexistent`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});
+
+describe("PUT /api/warehouse/:id", () => {
+  it("updates the warehouse", async () => {
+    const res = await app.inject({
+      method: "PUT",
+      url: `/api/warehouse/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+      payload,
+    });
+    assert.equal(res.statusCode, 200);
+  });
+});
+
+describe("DELETE /api/warehouse/:id", () => {
+  it("deletes the warehouse", async () => {
+    const res = await app.inject({
+      method: "DELETE",
+      url: `/api/warehouse/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 204);
+  });
+
+  it("returns 404 after delete", async () => {
+    const res = await app.inject({
+      method: "GET",
+      url: `/api/warehouse/${createdId}`,
+      headers: { authorization: `Bearer ${token}` },
+    });
+    assert.equal(res.statusCode, 404);
+  });
+});

output/warehouse-mgmt/apps/api/src/db/client.ts

@@ -0,0 +1,93 @@
+// SQLite database client (sql.js — pure WASM, no native deps)
+import initSqlJs, { type Database, type BindParams } from "sql.js";
+import { createTables } from "./schema.js";
+
+let db: Database | null = null;
+let initPromise: Promise<Database> | null = null;
+
+/** Initialize the database (call once at startup). */
+export async function initDb(dbPath?: string): Promise<Database> {
+  if (db) return db;
+  if (initPromise) return initPromise;
+
+  initPromise = (async () => {
+    const SQL = await initSqlJs();
+    const path = dbPath || process.env.DATABASE_URL || ":memory:";
+
+    // Try to load existing database from file
+    let buffer: ArrayLike<number> | undefined;
+    if (path !== ":memory:") {
+      try {
+        const fs = await import("node:fs/promises");
+        const data = await fs.readFile(path);
+        buffer = new Uint8Array(data);
+      } catch {
+        // File doesn't exist yet — start fresh
+      }
+    }
+
+    db = new SQL.Database(buffer);
+    db.run("PRAGMA foreign_keys = ON");
+    createTables(db);
+    return db;
+  })();
+
+  return initPromise;
+}
+
+/** Get the initialized database (must call initDb first). */
+export function getDb(): Database {
+  if (!db) throw new Error("Database not initialized. Call initDb() first.");
+  return db;
+}
+
+/** Save database to disk. */
+export async function saveDb(dbPath?: string): Promise<void> {
+  if (!db) return;
+  const path = dbPath || process.env.DATABASE_URL || "./data/app.db";
+  if (path === ":memory:") return;
+  const fs = await import("node:fs/promises");
+  const { dirname } = await import("node:path");
+  await fs.mkdir(dirname(path), { recursive: true });
+  const data = db.export();
+  await fs.writeFile(path, Buffer.from(data));
+}
+
+export async function closeDb(): Promise<void> {
+  if (db) {
+    await saveDb();
+    db.close();
+    db = null;
+    initPromise = null;
+  }
+}
+
+// Helper: run a query and return all rows as objects
+export function queryAll<T = Record<string, unknown>>(sql: string, params: BindParams = []): T[] {
+  const d = getDb();
+  const stmt = d.prepare(sql);
+  if (params) stmt.bind(params);
+  const results: T[] = [];
+  while (stmt.step()) {
+    const row = stmt.getAsObject();
+    results.push(row as unknown as T);
+  }
+  stmt.free();
+  return results;
+}
+
+// Helper: run a query and return the first row
+export function queryOne<T = Record<string, unknown>>(sql: string, params: BindParams = []): T | undefined {
+  const rows = queryAll<T>(sql, params);
+  return rows[0];
+}
+
+// Helper: run a mutation and return { changes, lastInsertRowid }
+export function execute(sql: string, params: BindParams = []): { changes: number; lastInsertRowid: number } {
+  const d = getDb();
+  d.run(sql, params);
+  return {
+    changes: d.getRowsModified(),
+    lastInsertRowid: 0,
+  };
+}

output/warehouse-mgmt/apps/api/src/db/schema.ts

@@ -0,0 +1,18 @@
+// Auto-generated SQLite schema
+import type { Database } from "sql.js";
+
+export function createTables(db: Database): void {
+  const statements = [
+  "CREATE TABLE IF NOT EXISTS users (\n  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),\n  username TEXT NOT NULL UNIQUE,\n  password_hash TEXT NOT NULL,\n  nickname TEXT,\n  role TEXT DEFAULT 'user',\n  phone TEXT,\n  avatar_url TEXT,\n  created_at TEXT,\n  updated_at TEXT\n);",
+  "CREATE TABLE IF NOT EXISTS items (\n  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),\n  user_id TEXT REFERENCES users(id),\n  title TEXT NOT NULL,\n  description TEXT,\n  status TEXT,\n  data TEXT,\n  created_at TEXT,\n  updated_at TEXT\n);",
+  "CREATE TABLE IF NOT EXISTS stock_in (\n  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),\n  user_id TEXT REFERENCES users(id),\n  product_name TEXT NOT NULL,\n  quantity INTEGER NOT NULL,\n  supplier TEXT,\n  received_by TEXT,\n  received_at TEXT,\n  created_at TEXT,\n  updated_at TEXT\n);",
+  "CREATE TABLE IF NOT EXISTS stock_out (\n  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),\n  user_id TEXT REFERENCES users(id),\n  product_name TEXT NOT NULL,\n  quantity INTEGER NOT NULL,\n  recipient TEXT,\n  approved_by TEXT,\n  shipped_at TEXT,\n  created_at TEXT,\n  updated_at TEXT\n);",
+  "CREATE TABLE IF NOT EXISTS stocktaking (\n  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),\n  user_id TEXT REFERENCES users(id),\n  warehouse TEXT,\n  product_name TEXT,\n  expected_qty INTEGER,\n  actual_qty INTEGER,\n  diff INTEGER,\n  stocktaken_at TEXT,\n  created_at TEXT,\n  updated_at TEXT\n);",
+  "CREATE TABLE IF NOT EXISTS stock_alerts (\n  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),\n  user_id TEXT REFERENCES users(id),\n  product_name TEXT NOT NULL,\n  current_qty INTEGER,\n  threshold INTEGER,\n  alerted_at TEXT,\n  created_at TEXT,\n  updated_at TEXT\n);",
+  "CREATE TABLE IF NOT EXISTS warehouse (\n  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),\n  user_id TEXT REFERENCES users(id),\n  product_name TEXT NOT NULL,\n  quantity INTEGER NOT NULL,\n  supplier TEXT,\n  received_by TEXT,\n  received_at TEXT,\n  created_at TEXT,\n  updated_at TEXT\n);"
+  ];
+  for (const sql of statements) {
+    const trimmed = sql.trim();
+    if (trimmed) db.run(trimmed);
+  }
+}

output/warehouse-mgmt/apps/api/src/index.ts

@@ -0,0 +1,75 @@
+// NoteApp — Fastify Backend Server
+import Fastify from "fastify";
+import cors from "@fastify/cors";
+import fjwt from "@fastify/jwt";
+import { initDb, closeDb } from "./db/client.js";
+import { authRoutes } from "./routes/auth.js";
+import { itemsRoutes } from "./routes/items.js";
+import { stock_inRoutes } from "./routes/stock_in.js";
+import { stock_outRoutes } from "./routes/stock_out.js";
+import { stocktakingRoutes } from "./routes/stocktaking.js";
+import { stock_alertsRoutes } from "./routes/stock_alerts.js";
+import { warehouseRoutes } from "./routes/warehouse.js";
+
+const JWT_SECRET = process.env.JWT_SECRET || "change-me-in-production-d9c63547";
+
+export async function buildApp() {
+  const app = Fastify({
+    logger: {
+      level: process.env.LOG_LEVEL || "info",
+      transport: process.env.NODE_ENV !== "production"
+        ? { target: "pino-pretty", options: { colorize: true } }
+        : undefined,
+    },
+  });
+
+  // Init database
+  await initDb();
+
+  // Plugins
+  await app.register(cors, {
+    origin: process.env.CORS_ORIGIN || "*",
+    methods: ["GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS"],
+  });
+
+  await app.register(fjwt, { secret: JWT_SECRET });
+
+  // Routes
+  await app.register(authRoutes, { prefix: "/api/auth" });
+  await app.register(itemsRoutes, { prefix: "/api/items" });
+  await app.register(stock_inRoutes, { prefix: "/api/stock_in" });
+  await app.register(stock_outRoutes, { prefix: "/api/stock_out" });
+  await app.register(stocktakingRoutes, { prefix: "/api/stocktaking" });
+  await app.register(stock_alertsRoutes, { prefix: "/api/stock_alerts" });
+  await app.register(warehouseRoutes, { prefix: "/api/warehouse" });
+
+  // Health check
+  app.get("/api/health", async () => ({ status: "ok", timestamp: new Date().toISOString() }));
+
+  // Graceful shutdown
+  app.addHook("onClose", async () => {
+    closeDb();
+  });
+
+  return app;
+}
+
+// Start server if called directly (not when imported by tests)
+const port = parseInt(process.env.PORT || "3001", 10);
+const host = process.env.HOST || "0.0.0.0";
+
+async function main() {
+  const app = await buildApp();
+  try {
+    await app.listen({ port, host });
+  } catch (err) {
+    app.log.error(err);
+    process.exit(1);
+  }
+}
+
+// Guard: only run when executed directly, not when imported
+const isMain = process.argv[1] && (import.meta.url === `file://${process.argv[1]}` || import.meta.url.endsWith(process.argv[1]) || process.argv[1].endsWith("/src/index.ts") || process.argv[1].endsWith("/src/index.js"));
+if (isMain) {
+  main();
+}

output/warehouse-mgmt/apps/api/src/middleware/auth.ts

@@ -0,0 +1,41 @@
+// JWT Authentication Middleware
+import type { FastifyRequest, FastifyReply } from "fastify";
+import type { JwtPayload } from "../types/index.js";
+
+/**
+ * Verify JWT token and attach user to request.
+ */
+export async function authenticate(request: FastifyRequest, reply: FastifyReply): Promise<void> {
+  try {
+    await request.jwtVerify();
+  } catch (err) {
+    reply.status(401).send({ error: "Unauthorized", message: "Invalid or expired token", statusCode: 401 });
+  }
+}
+
+/** Helper to get typed user from request (after authenticate). */
+export function getUser(request: FastifyRequest): JwtPayload {
+  return request.user as unknown as JwtPayload;
+}
+
+/**
+ * Require admin role.
+ * Must be used after authenticate.
+ */
+export async function requireAdmin(request: FastifyRequest, reply: FastifyReply): Promise<void> {
+  const user = request.user as unknown as JwtPayload | undefined;
+  if (!user || user.role !== "admin") {
+    reply.status(403).send({ error: "Forbidden", message: "Admin access required", statusCode: 403 });
+  }
+}
+
+/**
+ * Optional auth: attach user if token present, but don't fail if missing.
+ */
+export async function optionalAuth(request: FastifyRequest): Promise<void> {
+  try {
+    await request.jwtVerify();
+  } catch {
+    // No token or invalid — continue without user
+  }
+}

output/warehouse-mgmt/apps/api/src/routes/auth.ts

@@ -0,0 +1,121 @@
+// Authentication routes
+import type { FastifyInstance } from "fastify";
+import bcrypt from "bcrypt";
+import { queryOne, execute } from "../db/client.js";
+import { authenticate } from "../middleware/auth.js";
+import type { User, RegisterInput, LoginInput, AuthResponse } from "../types/index.js";
+
+const SALT_ROUNDS = 10;
+
+export async function authRoutes(app: FastifyInstance): Promise<void> {
+  // POST /api/auth/register
+  app.post<{ Body: RegisterInput }>("/register", async (request, reply) => {
+    const { username, password, nickname } = request.body;
+
+    if (!username || !password) {
+      return reply.status(400).send({
+        error: "Bad Request",
+        message: "Username and password are required",
+        statusCode: 400,
+      });
+    }
+
+    if (password.length < 6) {
+      return reply.status(400).send({
+        error: "Bad Request",
+        message: "Password must be at least 6 characters",
+        statusCode: 400,
+      });
+    }
+
+    const existing = queryOne("SELECT id FROM users WHERE username = ?", [username]);
+    if (existing) {
+      return reply.status(409).send({
+        error: "Conflict",
+        message: "Username already exists",
+        statusCode: 409,
+      });
+    }
+
+    const id = crypto.randomUUID();
+    const passwordHash = await bcrypt.hash(password, SALT_ROUNDS);
+    const now = new Date().toISOString();
+
+    execute(
+      "INSERT INTO users (id, username, password_hash, nickname, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)",
+      [id, username, passwordHash, nickname || username, now, now]
+    );
+
+    const user = queryOne<User>(
+      "SELECT id, username, nickname, role, created_at, updated_at FROM users WHERE id = ?",
+      [id]
+    );
+    if (!user) {
+      return reply.status(500).send({ error: "Internal Error", message: "Failed to create user", statusCode: 500 });
+    }
+
+    const token = app.jwt.sign({ userId: id, username, role: user.role });
+
+    return reply.status(201).send({ token, user } satisfies AuthResponse);
+  });
+
+  // POST /api/auth/login
+  app.post<{ Body: LoginInput }>("/login", async (request, reply) => {
+    const { username, password } = request.body;
+
+    if (!username || !password) {
+      return reply.status(400).send({
+        error: "Bad Request",
+        message: "Username and password are required",
+        statusCode: 400,
+      });
+    }
+
+    const user = queryOne<User & { password_hash: string }>(
+      "SELECT * FROM users WHERE username = ?",
+      [username]
+    );
+
+    if (!user) {
+      return reply.status(401).send({
+        error: "Unauthorized",
+        message: "Invalid username or password",
+        statusCode: 401,
+      });
+    }
+
+    const valid = await bcrypt.compare(password, user.password_hash);
+    if (!valid) {
+      return reply.status(401).send({
+        error: "Unauthorized",
+        message: "Invalid username or password",
+        statusCode: 401,
+      });
+    }
+
+    const token = app.jwt.sign({ userId: user.id, username: user.username, role: user.role });
+
+    const { password_hash, ...safeUser } = user;
+
+    return { token, user: safeUser } satisfies AuthResponse;
+  });
+
+  // GET /api/auth/me — current user info
+  app.get("/me", { onRequest: [authenticate] }, async (request, reply) => {
+    const jwtUser = request.user as unknown as { userId: string };
+    const user = queryOne<User>(
+      "SELECT id, username, nickname, role, created_at, updated_at FROM users WHERE id = ?",
+      [jwtUser.userId]
+    );
+
+    if (!user) {
+      return reply.status(404).send({
+        error: "Not Found",
+        message: "User not found",
+        statusCode: 404,
+      });
+    }
+
+    return { data: user };
+  });
+}

output/warehouse-mgmt/apps/api/src/routes/items.ts

@@ -0,0 +1,51 @@
+// Auto-generated Items routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { ItemsService } from "../services/item.js";
+import type { CreateItemsInput, UpdateItemsInput } from "../types/index.js";
+
+const service = new ItemsService();
+
+export async function itemsRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/items — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/items/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Items not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/items — create
+  app.post<{ Body: CreateItemsInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/items/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateItemsInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Items not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/items/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "Items not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

output/warehouse-mgmt/apps/api/src/routes/stock_alerts.ts

@@ -0,0 +1,51 @@
+// Auto-generated StockAlerts routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { StockAlertsService } from "../services/stock_alert.js";
+import type { CreateStockAlertsInput, UpdateStockAlertsInput } from "../types/index.js";
+
+const service = new StockAlertsService();
+
+export async function stock_alertsRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/stock_alerts — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/stock_alerts/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "StockAlerts not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/stock_alerts — create
+  app.post<{ Body: CreateStockAlertsInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/stock_alerts/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateStockAlertsInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "StockAlerts not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/stock_alerts/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "StockAlerts not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

output/warehouse-mgmt/apps/api/src/routes/stock_in.ts

@@ -0,0 +1,51 @@
+// Auto-generated StockIn routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { StockInService } from "../services/stock_in.js";
+import type { CreateStockInInput, UpdateStockInInput } from "../types/index.js";
+
+const service = new StockInService();
+
+export async function stock_inRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/stock_in — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/stock_in/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "StockIn not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/stock_in — create
+  app.post<{ Body: CreateStockInInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/stock_in/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateStockInInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "StockIn not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/stock_in/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "StockIn not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

output/warehouse-mgmt/apps/api/src/routes/stock_out.ts

@@ -0,0 +1,51 @@
+// Auto-generated StockOut routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { StockOutService } from "../services/stock_out.js";
+import type { CreateStockOutInput, UpdateStockOutInput } from "../types/index.js";
+
+const service = new StockOutService();
+
+export async function stock_outRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/stock_out — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/stock_out/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "StockOut not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/stock_out — create
+  app.post<{ Body: CreateStockOutInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/stock_out/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateStockOutInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "StockOut not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/stock_out/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "StockOut not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

output/warehouse-mgmt/apps/api/src/routes/stocktaking.ts

@@ -0,0 +1,51 @@
+// Auto-generated Stocktaking routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { StocktakingService } from "../services/stocktaking.js";
+import type { CreateStocktakingInput, UpdateStocktakingInput } from "../types/index.js";
+
+const service = new StocktakingService();
+
+export async function stocktakingRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/stocktaking — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/stocktaking/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Stocktaking not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/stocktaking — create
+  app.post<{ Body: CreateStocktakingInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/stocktaking/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateStocktakingInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Stocktaking not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/stocktaking/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "Stocktaking not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

output/warehouse-mgmt/apps/api/src/routes/warehouse.ts

@@ -0,0 +1,51 @@
+// Auto-generated Warehouse routes
+import type { FastifyInstance } from "fastify";
+import { authenticate } from "../middleware/auth.js";
+import { WarehouseService } from "../services/warehouse.js";
+import type { CreateWarehouseInput, UpdateWarehouseInput } from "../types/index.js";
+
+const service = new WarehouseService();
+
+export async function warehouseRoutes(app: FastifyInstance): Promise<void> {
+  // All routes require authentication
+  app.addHook("onRequest", authenticate);
+
+  // GET /api/warehouse — list
+  app.get("/", async (request, reply) => {
+    const items = service.list();
+    return { data: items };
+  });
+
+  // GET /api/warehouse/:id — get by id
+  app.get<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const item = service.getById(request.params.id);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Warehouse not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // POST /api/warehouse — create
+  app.post<{ Body: CreateWarehouseInput }>("/", async (request, reply) => {
+    const item = service.create(request.body);
+    return reply.status(201).send({ data: item });
+  });
+
+  // PUT /api/warehouse/:id — update
+  app.put<{ Params: { id: string }; Body: UpdateWarehouseInput }>("/:id", async (request, reply) => {
+    const item = service.update(request.params.id, request.body);
+    if (!item) {
+      return reply.status(404).send({ error: "Not Found", message: "Warehouse not found", statusCode: 404 });
+    }
+    return { data: item };
+  });
+
+  // DELETE /api/warehouse/:id — delete
+  app.delete<{ Params: { id: string } }>("/:id", async (request, reply) => {
+    const deleted = service.delete(request.params.id);
+    if (!deleted) {
+      return reply.status(404).send({ error: "Not Found", message: "Warehouse not found", statusCode: 404 });
+    }
+    return reply.status(204).send();
+  });
+}

output/warehouse-mgmt/apps/api/src/services/item.ts

@@ -0,0 +1,54 @@
+// Auto-generated Items service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { Items, CreateItemsInput, UpdateItemsInput } from "../types/index.js";
+
+export class ItemsService {
+  /** List all items */
+  list(): Items[] {
+    return queryAll<Items>("SELECT * FROM items ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): Items | undefined {
+    return queryOne<Items>("SELECT * FROM items WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateItemsInput): Items {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const cols = ["id", "user_id", "title", "description", "data", "created_at", "updated_at"];
+    const values = [id, input.userId ?? null, input.title ?? null, input.description ?? null, input.data ?? null, now, now];
+
+    execute(`INSERT INTO items (${cols.join(", ")}) VALUES (?, ?, ?, ?, ?, ?, ?)`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateItemsInput): Items | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.userId !== undefined) { sets.push("user_id = ?"); values.push(input.userId); }
+    if (input.title !== undefined) { sets.push("title = ?"); values.push(input.title); }
+    if (input.description !== undefined) { sets.push("description = ?"); values.push(input.description); }
+    if (input.data !== undefined) { sets.push("data = ?"); values.push(input.data); }
+
+    if (sets.length === 0) return existing;
+
+    sets.push("updated_at = ?");
+    values.push(new Date().toISOString());
+
+    values.push(id);
+    execute(`UPDATE items SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM items WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

output/warehouse-mgmt/apps/api/src/services/stock_alert.ts

@@ -0,0 +1,54 @@
+// Auto-generated StockAlerts service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { StockAlerts, CreateStockAlertsInput, UpdateStockAlertsInput } from "../types/index.js";
+
+export class StockAlertsService {
+  /** List all stock_alerts */
+  list(): StockAlerts[] {
+    return queryAll<StockAlerts>("SELECT * FROM stock_alerts ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): StockAlerts | undefined {
+    return queryOne<StockAlerts>("SELECT * FROM stock_alerts WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateStockAlertsInput): StockAlerts {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const cols = ["id", "user_id", "product_name", "current_qty", "threshold", "created_at", "updated_at"];
+    const values = [id, input.userId ?? null, input.productName ?? null, input.currentQty ?? null, input.threshold ?? null, now, now];
+
+    execute(`INSERT INTO stock_alerts (${cols.join(", ")}) VALUES (?, ?, ?, ?, ?, ?, ?)`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateStockAlertsInput): StockAlerts | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.userId !== undefined) { sets.push("user_id = ?"); values.push(input.userId); }
+    if (input.productName !== undefined) { sets.push("product_name = ?"); values.push(input.productName); }
+    if (input.currentQty !== undefined) { sets.push("current_qty = ?"); values.push(input.currentQty); }
+    if (input.threshold !== undefined) { sets.push("threshold = ?"); values.push(input.threshold); }
+
+    if (sets.length === 0) return existing;
+
+    sets.push("updated_at = ?");
+    values.push(new Date().toISOString());
+
+    values.push(id);
+    execute(`UPDATE stock_alerts SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM stock_alerts WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

output/warehouse-mgmt/apps/api/src/services/stock_in.ts

@@ -0,0 +1,55 @@
+// Auto-generated StockIn service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { StockIn, CreateStockInInput, UpdateStockInInput } from "../types/index.js";
+
+export class StockInService {
+  /** List all stock_in */
+  list(): StockIn[] {
+    return queryAll<StockIn>("SELECT * FROM stock_in ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): StockIn | undefined {
+    return queryOne<StockIn>("SELECT * FROM stock_in WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateStockInInput): StockIn {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const cols = ["id", "user_id", "product_name", "quantity", "supplier", "received_by", "created_at", "updated_at"];
+    const values = [id, input.userId ?? null, input.productName ?? null, input.quantity ?? null, input.supplier ?? null, input.receivedBy ?? null, now, now];
+
+    execute(`INSERT INTO stock_in (${cols.join(", ")}) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateStockInInput): StockIn | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.userId !== undefined) { sets.push("user_id = ?"); values.push(input.userId); }
+    if (input.productName !== undefined) { sets.push("product_name = ?"); values.push(input.productName); }
+    if (input.quantity !== undefined) { sets.push("quantity = ?"); values.push(input.quantity); }
+    if (input.supplier !== undefined) { sets.push("supplier = ?"); values.push(input.supplier); }
+    if (input.receivedBy !== undefined) { sets.push("received_by = ?"); values.push(input.receivedBy); }
+
+    if (sets.length === 0) return existing;
+
+    sets.push("updated_at = ?");
+    values.push(new Date().toISOString());
+
+    values.push(id);
+    execute(`UPDATE stock_in SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM stock_in WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

output/warehouse-mgmt/apps/api/src/services/stock_out.ts

@@ -0,0 +1,56 @@
+// Auto-generated StockOut service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { StockOut, CreateStockOutInput, UpdateStockOutInput } from "../types/index.js";
+
+export class StockOutService {
+  /** List all stock_out */
+  list(): StockOut[] {
+    return queryAll<StockOut>("SELECT * FROM stock_out ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): StockOut | undefined {
+    return queryOne<StockOut>("SELECT * FROM stock_out WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateStockOutInput): StockOut {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const cols = ["id", "user_id", "product_name", "quantity", "recipient", "approved_by", "shipped_at", "created_at", "updated_at"];
+    const values = [id, input.userId ?? null, input.productName ?? null, input.quantity ?? null, input.recipient ?? null, input.approvedBy ?? null, input.shippedAt ?? null, now, now];
+
+    execute(`INSERT INTO stock_out (${cols.join(", ")}) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateStockOutInput): StockOut | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.userId !== undefined) { sets.push("user_id = ?"); values.push(input.userId); }
+    if (input.productName !== undefined) { sets.push("product_name = ?"); values.push(input.productName); }
+    if (input.quantity !== undefined) { sets.push("quantity = ?"); values.push(input.quantity); }
+    if (input.recipient !== undefined) { sets.push("recipient = ?"); values.push(input.recipient); }
+    if (input.approvedBy !== undefined) { sets.push("approved_by = ?"); values.push(input.approvedBy); }
+    if (input.shippedAt !== undefined) { sets.push("shipped_at = ?"); values.push(input.shippedAt); }
+
+    if (sets.length === 0) return existing;
+
+    sets.push("updated_at = ?");
+    values.push(new Date().toISOString());
+
+    values.push(id);
+    execute(`UPDATE stock_out SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM stock_out WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

output/warehouse-mgmt/apps/api/src/services/stocktaking.ts

@@ -0,0 +1,56 @@
+// Auto-generated Stocktaking service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { Stocktaking, CreateStocktakingInput, UpdateStocktakingInput } from "../types/index.js";
+
+export class StocktakingService {
+  /** List all stocktaking */
+  list(): Stocktaking[] {
+    return queryAll<Stocktaking>("SELECT * FROM stocktaking ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): Stocktaking | undefined {
+    return queryOne<Stocktaking>("SELECT * FROM stocktaking WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateStocktakingInput): Stocktaking {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const cols = ["id", "user_id", "warehouse", "product_name", "expected_qty", "actual_qty", "diff", "created_at", "updated_at"];
+    const values = [id, input.userId ?? null, input.warehouse ?? null, input.productName ?? null, input.expectedQty ?? null, input.actualQty ?? null, input.diff ?? null, now, now];
+
+    execute(`INSERT INTO stocktaking (${cols.join(", ")}) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateStocktakingInput): Stocktaking | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.userId !== undefined) { sets.push("user_id = ?"); values.push(input.userId); }
+    if (input.warehouse !== undefined) { sets.push("warehouse = ?"); values.push(input.warehouse); }
+    if (input.productName !== undefined) { sets.push("product_name = ?"); values.push(input.productName); }
+    if (input.expectedQty !== undefined) { sets.push("expected_qty = ?"); values.push(input.expectedQty); }
+    if (input.actualQty !== undefined) { sets.push("actual_qty = ?"); values.push(input.actualQty); }
+    if (input.diff !== undefined) { sets.push("diff = ?"); values.push(input.diff); }
+
+    if (sets.length === 0) return existing;
+
+    sets.push("updated_at = ?");
+    values.push(new Date().toISOString());
+
+    values.push(id);
+    execute(`UPDATE stocktaking SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM stocktaking WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

output/warehouse-mgmt/apps/api/src/services/warehouse.ts

@@ -0,0 +1,55 @@
+// Auto-generated Warehouse service
+import { queryAll, queryOne, execute } from "../db/client.js";
+import type { Warehouse, CreateWarehouseInput, UpdateWarehouseInput } from "../types/index.js";
+
+export class WarehouseService {
+  /** List all warehouse */
+  list(): Warehouse[] {
+    return queryAll<Warehouse>("SELECT * FROM warehouse ORDER BY created_at DESC");
+  }
+
+  /** Get by ID */
+  getById(id: string): Warehouse | undefined {
+    return queryOne<Warehouse>("SELECT * FROM warehouse WHERE id = ?", [id]);
+  }
+
+  /** Create */
+  create(input: CreateWarehouseInput): Warehouse {
+    const id = crypto.randomUUID();
+    const now = new Date().toISOString();
+    const cols = ["id", "user_id", "product_name", "quantity", "supplier", "received_by", "created_at", "updated_at"];
+    const values = [id, input.userId ?? null, input.productName ?? null, input.quantity ?? null, input.supplier ?? null, input.receivedBy ?? null, now, now];
+
+    execute(`INSERT INTO warehouse (${cols.join(", ")}) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`, values);
+    return this.getById(id)!;
+  }
+
+  /** Update */
+  update(id: string, input: UpdateWarehouseInput): Warehouse | undefined {
+    const existing = this.getById(id);
+    if (!existing) return undefined;
+
+    const sets: string[] = [];
+    const values: unknown[] = [];
+    if (input.userId !== undefined) { sets.push("user_id = ?"); values.push(input.userId); }
+    if (input.productName !== undefined) { sets.push("product_name = ?"); values.push(input.productName); }
+    if (input.quantity !== undefined) { sets.push("quantity = ?"); values.push(input.quantity); }
+    if (input.supplier !== undefined) { sets.push("supplier = ?"); values.push(input.supplier); }
+    if (input.receivedBy !== undefined) { sets.push("received_by = ?"); values.push(input.receivedBy); }
+
+    if (sets.length === 0) return existing;
+
+    sets.push("updated_at = ?");
+    values.push(new Date().toISOString());
+
+    values.push(id);
+    execute(`UPDATE warehouse SET ${sets.join(", ")} WHERE id = ?`, values);
+    return this.getById(id)!;
+  }
+
+  /** Delete */
+  delete(id: string): boolean {
+    const result = execute("DELETE FROM warehouse WHERE id = ?", [id]);
+    return result.changes > 0;
+  }
+}

output/warehouse-mgmt/apps/api/src/types/fastify.d.ts

@@ -0,0 +1,8 @@
+// Augment Fastify request with JWT user
+import type { JwtPayload } from "./index.js";
+
+declare module "fastify" {
+  interface FastifyRequest {
+    user?: JwtPayload;
+  }
+}

output/warehouse-mgmt/apps/api/src/types/index.ts

@@ -0,0 +1,169 @@
+// Import and re-export shared entity types
+import type {
+  User,
+  Items,
+  StockIn,
+  StockOut,
+  Stocktaking,
+  StockAlerts,
+  Warehouse,
+  ApiResponse,
+  PaginatedResponse,
+  ErrorResponse,
+} from "@shared/types";
+
+export type {
+  User,
+  Items,
+  StockIn,
+  StockOut,
+  Stocktaking,
+  StockAlerts,
+  Warehouse,
+  ApiResponse,
+  PaginatedResponse,
+  ErrorResponse,
+};
+
+// Auto-generated types (from Model Contract)
+
+export interface CreateUserInput {
+  username: string;
+  passwordHash: string;
+  nickname?: string;
+  role?: string;
+  phone?: string;
+  avatarUrl?: string;
+}
+
+export interface CreateItemsInput {
+  userId?: string;
+  title: string;
+  description?: string;
+  data?: Record<string, unknown>;
+}
+
+export interface CreateStockInInput {
+  userId?: string;
+  productName: string;
+  quantity: number;
+  supplier?: string;
+  receivedBy?: string;
+}
+
+export interface CreateStockOutInput {
+  userId?: string;
+  productName: string;
+  quantity: number;
+  recipient?: string;
+  approvedBy?: string;
+  shippedAt?: string;
+}
+
+export interface CreateStocktakingInput {
+  userId?: string;
+  warehouse?: string;
+  productName?: string;
+  expectedQty?: number;
+  actualQty?: number;
+  diff?: number;
+}
+
+export interface CreateStockAlertsInput {
+  userId?: string;
+  productName: string;
+  currentQty?: number;
+  threshold?: number;
+}
+
+export interface CreateWarehouseInput {
+  userId?: string;
+  productName: string;
+  quantity: number;
+  supplier?: string;
+  receivedBy?: string;
+}
+
+export interface UpdateUserInput {
+  username?: string;
+  passwordHash?: string;
+  nickname?: string;
+  role?: string;
+  phone?: string;
+  avatarUrl?: string;
+}
+
+export interface UpdateItemsInput {
+  userId?: string;
+  title?: string;
+  description?: string;
+  data?: Record<string, unknown>;
+}
+
+export interface UpdateStockInInput {
+  userId?: string;
+  productName?: string;
+  quantity?: number;
+  supplier?: string;
+  receivedBy?: string;
+}
+
+export interface UpdateStockOutInput {
+  userId?: string;
+  productName?: string;
+  quantity?: number;
+  recipient?: string;
+  approvedBy?: string;
+  shippedAt?: string;
+}
+
+export interface UpdateStocktakingInput {
+  userId?: string;
+  warehouse?: string;
+  productName?: string;
+  expectedQty?: number;
+  actualQty?: number;
+  diff?: number;
+}
+
+export interface UpdateStockAlertsInput {
+  userId?: string;
+  productName?: string;
+  currentQty?: number;
+  threshold?: number;
+}
+
+export interface UpdateWarehouseInput {
+  userId?: string;
+  productName?: string;
+  quantity?: number;
+  supplier?: string;
+  receivedBy?: string;
+}
+
+// ─── Auth ───────────────────────────────────────────
+export interface LoginInput {
+  username: string;
+  password: string;
+}
+
+export interface RegisterInput {
+  username: string;
+  password: string;
+  nickname?: string;
+}
+
+export interface AuthResponse {
+  token: string;
+  user: User;
+}
+
+// ─── API ────────────────────────────────────────────
+// ─── JWT ────────────────────────────────────────────
+export interface JwtPayload {
+  userId: string;
+  username: string;
+  role: string;
+  iat?: number;
+  exp?: number;
+}

output/warehouse-mgmt/apps/api/src/types/sql.js.d.ts

@@ -0,0 +1,27 @@
+// Type declarations for sql.js (no native types package available)
+declare module "sql.js" {
+  export interface Database {
+    run(sql: string, params?: BindParams): void;
+    exec(sql: string): void;
+    prepare(sql: string): Statement;
+    export(): Uint8Array;
+    close(): void;
+    getRowsModified(): number;
+  }
+
+  export interface Statement {
+    bind(params?: BindParams): boolean;
+    step(): boolean;
+    getAsObject<T = Record<string, unknown>>(): T;
+    getColumnNames(): string[];
+    free(): boolean;
+  }
+
+  export type BindParams = unknown[] | Record<string, unknown>;
+
+  export interface SqlJsStatic {
+    Database: new (data?: ArrayLike<number>) => Database;
+  }
+
+  export default function initSqlJs(config?: Record<string, unknown>): Promise<SqlJsStatic>;
+}

output/warehouse-mgmt/apps/api/tsconfig.json

@@ -0,0 +1,27 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "lib": [
+      "ES2022"
+    ],
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "declaration": true,
+    "sourceMap": true
+  },
+  "include": [
+    "src/**/*"
+  ],
+  "exclude": [
+    "node_modules",
+    "dist",
+    "src/__tests__"
+  ]
+}

output/warehouse-mgmt/apps/web/app/globals.css

@@ -0,0 +1,8 @@
+@tailwind base;
+@tailwind components;
+@tailwind utilities;
+
+body {
+  -webkit-font-smoothing: antialiased;
+  -moz-osx-font-smoothing: grayscale;
+}

output/warehouse-mgmt/apps/web/app/items/page.tsx

@@ -0,0 +1,51 @@
+"use client";
+
+import { useState } from "react";
+import { Card } from "@/components/ui/Card";
+import { Button } from "@/components/ui/Button";
+import { EmptyState } from "@/components/ui/EmptyState";
+import { useItems } from "@/hooks/useItems";
+
+export default function PagePage() {
+  const { data, loading, error, refetch } = useItems();
+  const [open, setOpen] = useState(false);
+
+  return (
+    <div className="space-y-4">
+      <div className="flex items-center justify-between">
+        <div>
+          <h1 className="text-xl font-bold text-gray-800">仓库管理</h1>
+          <p className="text-sm text-gray-500 mt-1">仓库管理</p>
+        </div>
+        <Button onClick={() => setOpen(true)} variant="primary" size="sm">新增</Button>
+      </div>
+
+      {loading ? (
+        <div className="flex justify-center py-12">
+          <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-blue-500" />
+        </div>
+      ) : error ? (
+        <Card className="text-center py-8">
+          <p className="text-red-500 text-sm">{error}</p>
+          <Button onClick={refetch} variant="secondary" size="sm" className="mt-2">重试</Button>
+        </Card>
+      ) : data.length === 0 ? (
+        <EmptyState
+          icon="📭"
+          title="暂无数据"
+          description="还没有任何记录，点击上方按钮开始"
+          action={<Button onClick={() => setOpen(true)} variant="primary" size="sm">创建第一条</Button>}
+        />
+      ) : (
+        <div className="space-y-3">
+          {data.map((item: any) => (
+            <Card key={item.id}>
+              <h3 className="font-medium text-gray-800">{item.title || item.name || `Item ${item.id.slice(0, 8)}`}</h3>
+              <p className="text-xs text-gray-400 mt-1">{item.createdAt || ""}</p>
+            </Card>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}

output/warehouse-mgmt/apps/web/app/layout.tsx

@@ -0,0 +1,30 @@
+import type { Metadata } from "next";
+import "./globals.css";
+import { Sidebar } from "@/components/layout/Sidebar";
+import { BottomNav } from "@/components/layout/BottomNav";
+
+export const metadata: Metadata = {
+  title: "NoteApp",
+  description: "一款支持多端同步、Markdown 编辑和标签管理的笔记应用。",
+};
+
+export default function RootLayout({ children }: { children: React.ReactNode }) {
+  return (
+    <html lang="zh-CN">
+      <body className="bg-gray-50 min-h-screen">
+        <div className="flex">
+          {/* Desktop Sidebar */}
+          <Sidebar items={[{"name":"首页","href":"/home","icon":"🏠"},{"name":"仓库管理","href":"/items","icon":"📋"},{"name":"物料入库","href":"/stock_in","icon":"📅"},{"name":"物料出库","href":"/stock_out","icon":"✏️"},{"name":"库存盘点","href":"/stocktaking","icon":"📸"}] } projectName="NoteApp" />
+          {/* Main Content */}
+          <main className="flex-1 lg:pl-64 pb-20 lg:pb-0">
+            <div className="max-w-2xl mx-auto px-4 py-6">
+              {children}
+            </div>
+          </main>
+        </div>
+        {/* Mobile Bottom Nav */}
+        <BottomNav items={[{"name":"首页","href":"/home","icon":"🏠"},{"name":"仓库管理","href":"/items","icon":"📋"},{"name":"物料入库","href":"/stock_in","icon":"📅"},{"name":"物料出库","href":"/stock_out","icon":"✏️"}] } />
+      </body>
+    </html>
+  );
+}

output/warehouse-mgmt/apps/web/app/page.tsx

@@ -0,0 +1,50 @@
+import Link from "next/link";
+
+export default function HomePage() {
+  return (
+    <div className="space-y-6">
+      {/* Hero Section */}
+      <section className="bg-gradient-to-br from-blue-500 to-blue-700 rounded-2xl p-6 text-white">
+        <h1 className="text-2xl font-bold">NoteApp</h1>
+        <p className="mt-2 text-blue-100 text-sm">应用首页</p>
+      </section>
+
+      {/* Quick Actions */}
+      <section>
+        <h2 className="text-lg font-semibold text-gray-800 mb-3">快捷入口</h2>
+        <div className="grid grid-cols-2 gap-3">
+          <Link key="0" href="/home" className="bg-white rounded-xl border border-gray-100 p-4 text-center hover:shadow-md transition-shadow">
+            <span className="text-2xl block mb-1">📋</span>
+            <span className="text-sm text-gray-600">仓库管理</span>
+          </Link>
+          <Link key="1" href="/home" className="bg-white rounded-xl border border-gray-100 p-4 text-center hover:shadow-md transition-shadow">
+            <span className="text-2xl block mb-1">📅</span>
+            <span className="text-sm text-gray-600">物料入库</span>
+          </Link>
+          <Link key="2" href="/home" className="bg-white rounded-xl border border-gray-100 p-4 text-center hover:shadow-md transition-shadow">
+            <span className="text-2xl block mb-1">📝</span>
+            <span className="text-sm text-gray-600">物料出库</span>
+          </Link>
+          <Link key="3" href="/home" className="bg-white rounded-xl border border-gray-100 p-4 text-center hover:shadow-md transition-shadow">
+            <span className="text-2xl block mb-1">📸</span>
+            <span className="text-sm text-gray-600">库存盘点</span>
+          </Link>
+        </div>
+      </section>
+
+      {/* Recent Activity / Stats */}
+      <section>
+        <h2 className="text-lg font-semibold text-gray-800 mb-3">今日概览</h2>
+        <div className="bg-white rounded-xl border border-gray-100 p-4">
+          <div className="flex items-center justify-between">
+            <div>
+              <p className="text-sm text-gray-500">欢迎使用 NoteApp</p>
+              <p className="text-xs text-gray-400 mt-1">开始探索功能吧</p>
+            </div>
+            <span className="text-3xl">👋</span>
+          </div>
+        </div>
+      </section>
+    </div>
+  );
+}

output/warehouse-mgmt/apps/web/app/stock_alerts/page.tsx

@@ -0,0 +1,29 @@
+"use client";
+
+import { useState } from "react";
+import { Card } from "@/components/ui/Card";
+import { Button } from "@/components/ui/Button";
+import { EmptyState } from "@/components/ui/EmptyState";
+
+
+export default function PagePage() {
+  
+  const [open, setOpen] = useState(false);
+
+  return (
+    <div className="space-y-4">
+      <div className="flex items-center justify-between">
+        <div>
+          <h1 className="text-xl font-bold text-gray-800">库存预警</h1>
+          <p className="text-sm text-gray-500 mt-1">库存预警</p>
+        </div>
+        <Button onClick={() => setOpen(true)} variant="primary" size="sm">新增</Button>
+      </div>
+
+      {<Card>
+          <p className="text-gray-500 text-sm">库存预警 页面内容</p>
+          <p className="text-xs text-gray-400 mt-1">路由: /stock_alerts</p>
+        </Card>}
+    </div>
+  );
+}

output/warehouse-mgmt/apps/web/app/stock_in/page.tsx

@@ -0,0 +1,51 @@
+"use client";
+
+import { useState } from "react";
+import { Card } from "@/components/ui/Card";
+import { Button } from "@/components/ui/Button";
+import { EmptyState } from "@/components/ui/EmptyState";
+import { useStock_in } from "@/hooks/useStock_in";
+
+export default function PagePage() {
+  const { data, loading, error, refetch } = useStock_in();
+  const [open, setOpen] = useState(false);
+
+  return (
+    <div className="space-y-4">
+      <div className="flex items-center justify-between">
+        <div>
+          <h1 className="text-xl font-bold text-gray-800">物料入库</h1>
+          <p className="text-sm text-gray-500 mt-1">物料入库</p>
+        </div>
+        <Button onClick={() => setOpen(true)} variant="primary" size="sm">新增</Button>
+      </div>
+
+      {loading ? (
+        <div className="flex justify-center py-12">
+          <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-blue-500" />
+        </div>
+      ) : error ? (
+        <Card className="text-center py-8">
+          <p className="text-red-500 text-sm">{error}</p>
+          <Button onClick={refetch} variant="secondary" size="sm" className="mt-2">重试</Button>
+        </Card>
+      ) : data.length === 0 ? (
+        <EmptyState
+          icon="📭"
+          title="暂无数据"
+          description="还没有任何记录，点击上方按钮开始"
+          action={<Button onClick={() => setOpen(true)} variant="primary" size="sm">创建第一条</Button>}
+        />
+      ) : (
+        <div className="space-y-3">
+          {data.map((item: any) => (
+            <Card key={item.id}>
+              <h3 className="font-medium text-gray-800">{item.title || item.name || `Item ${item.id.slice(0, 8)}`}</h3>
+              <p className="text-xs text-gray-400 mt-1">{item.createdAt || ""}</p>
+            </Card>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}

output/warehouse-mgmt/apps/web/app/stock_out/page.tsx

@@ -0,0 +1,51 @@
+"use client";
+
+import { useState } from "react";
+import { Card } from "@/components/ui/Card";
+import { Button } from "@/components/ui/Button";
+import { EmptyState } from "@/components/ui/EmptyState";
+import { useStock_out } from "@/hooks/useStock_out";
+
+export default function PagePage() {
+  const { data, loading, error, refetch } = useStock_out();
+  const [open, setOpen] = useState(false);
+
+  return (
+    <div className="space-y-4">
+      <div className="flex items-center justify-between">
+        <div>
+          <h1 className="text-xl font-bold text-gray-800">物料出库</h1>
+          <p className="text-sm text-gray-500 mt-1">物料出库</p>
+        </div>
+        <Button onClick={() => setOpen(true)} variant="primary" size="sm">新增</Button>
+      </div>
+
+      {loading ? (
+        <div className="flex justify-center py-12">
+          <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-blue-500" />
+        </div>
+      ) : error ? (
+        <Card className="text-center py-8">
+          <p className="text-red-500 text-sm">{error}</p>
+          <Button onClick={refetch} variant="secondary" size="sm" className="mt-2">重试</Button>
+        </Card>
+      ) : data.length === 0 ? (
+        <EmptyState
+          icon="📭"
+          title="暂无数据"
+          description="还没有任何记录，点击上方按钮开始"
+          action={<Button onClick={() => setOpen(true)} variant="primary" size="sm">创建第一条</Button>}
+        />
+      ) : (
+        <div className="space-y-3">
+          {data.map((item: any) => (
+            <Card key={item.id}>
+              <h3 className="font-medium text-gray-800">{item.title || item.name || `Item ${item.id.slice(0, 8)}`}</h3>
+              <p className="text-xs text-gray-400 mt-1">{item.createdAt || ""}</p>
+            </Card>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}

output/warehouse-mgmt/apps/web/app/stocktaking/page.tsx

@@ -0,0 +1,51 @@
+"use client";
+
+import { useState } from "react";
+import { Card } from "@/components/ui/Card";
+import { Button } from "@/components/ui/Button";
+import { EmptyState } from "@/components/ui/EmptyState";
+import { useStocktaking } from "@/hooks/useStocktaking";
+
+export default function PagePage() {
+  const { data, loading, error, refetch } = useStocktaking();
+  const [open, setOpen] = useState(false);
+
+  return (
+    <div className="space-y-4">
+      <div className="flex items-center justify-between">
+        <div>
+          <h1 className="text-xl font-bold text-gray-800">库存盘点</h1>
+          <p className="text-sm text-gray-500 mt-1">库存盘点</p>
+        </div>
+        <Button onClick={() => setOpen(true)} variant="primary" size="sm">新增</Button>
+      </div>
+
+      {loading ? (
+        <div className="flex justify-center py-12">
+          <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-blue-500" />
+        </div>
+      ) : error ? (
+        <Card className="text-center py-8">
+          <p className="text-red-500 text-sm">{error}</p>
+          <Button onClick={refetch} variant="secondary" size="sm" className="mt-2">重试</Button>
+        </Card>
+      ) : data.length === 0 ? (
+        <EmptyState
+          icon="📭"
+          title="暂无数据"
+          description="还没有任何记录，点击上方按钮开始"
+          action={<Button onClick={() => setOpen(true)} variant="primary" size="sm">创建第一条</Button>}
+        />
+      ) : (
+        <div className="space-y-3">
+          {data.map((item: any) => (
+            <Card key={item.id}>
+              <h3 className="font-medium text-gray-800">{item.title || item.name || `Item ${item.id.slice(0, 8)}`}</h3>
+              <p className="text-xs text-gray-400 mt-1">{item.createdAt || ""}</p>
+            </Card>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}

output/warehouse-mgmt/apps/web/app/warehouse/page.tsx

@@ -0,0 +1,29 @@
+"use client";
+
+import { useState } from "react";
+import { Card } from "@/components/ui/Card";
+import { Button } from "@/components/ui/Button";
+import { EmptyState } from "@/components/ui/EmptyState";
+
+
+export default function PagePage() {
+  
+  const [open, setOpen] = useState(false);
+
+  return (
+    <div className="space-y-4">
+      <div className="flex items-center justify-between">
+        <div>
+          <h1 className="text-xl font-bold text-gray-800">出入库记录查询</h1>
+          <p className="text-sm text-gray-500 mt-1">出入库记录查询</p>
+        </div>
+        <Button onClick={() => setOpen(true)} variant="primary" size="sm">新增</Button>
+      </div>
+
+      {<Card>
+          <p className="text-gray-500 text-sm">出入库记录查询 页面内容</p>
+          <p className="text-xs text-gray-400 mt-1">路由: /warehouse</p>
+        </Card>}
+    </div>
+  );
+}

output/warehouse-mgmt/apps/web/components/layout/BottomNav.tsx

@@ -0,0 +1,38 @@
+"use client";
+
+import Link from "next/link";
+import { usePathname } from "next/navigation";
+
+interface NavItem {
+  name: string;
+  href: string;
+  icon: string;
+}
+
+export function BottomNav({ items }: { items: NavItem[] }) {
+  const pathname = usePathname();
+
+  if (!items.length) return null;
+
+  return (
+    <nav className="lg:hidden fixed bottom-0 inset-x-0 bg-white border-t border-gray-100 z-40">
+      <div className="flex items-center justify-around h-16">
+        {items.map((item) => {
+          const active = pathname === item.href;
+          return (
+            <Link
+              key={item.href}
+              href={item.href}
+              className={`flex flex-col items-center gap-0.5 px-3 py-1 ${
+                active ? "text-blue-600" : "text-gray-400"
+              }`}
+            >
+              <span className="text-xl">{item.icon}</span>
+              <span className="text-[10px]">{item.name}</span>
+            </Link>
+          );
+        })}
+      </div>
+    </nav>
+  );
+}

output/warehouse-mgmt/apps/web/components/layout/Sidebar.tsx

@@ -0,0 +1,44 @@
+"use client";
+
+import Link from "next/link";
+import { usePathname } from "next/navigation";
+
+interface NavItem {
+  name: string;
+  href: string;
+  icon: string;
+}
+
+interface SidebarProps {
+  items: NavItem[];
+  projectName: string;
+}
+
+export function Sidebar({ items, projectName }: SidebarProps) {
+  const pathname = usePathname();
+
+  return (
+    <aside className="hidden lg:flex lg:flex-col lg:w-64 lg:fixed lg:inset-y-0 bg-white border-r border-gray-100">
+      <div className="px-6 py-5 border-b border-gray-50">
+        <h1 className="text-lg font-bold text-gray-800">{projectName}</h1>
+      </div>
+      <nav className="flex-1 px-3 py-4 space-y-1 overflow-y-auto">
+        {items.map((item) => {
+          const active = pathname === item.href;
+          return (
+            <Link
+              key={item.href}
+              href={item.href}
+              className={`flex items-center gap-3 px-3 py-2.5 rounded-lg text-sm transition-colors ${
+                active ? "bg-blue-50 text-blue-700 font-medium" : "text-gray-600 hover:bg-gray-50"
+              }`}
+            >
+              <span className="text-lg">{item.icon}</span>
+              <span>{item.name}</span>
+            </Link>
+          );
+        })}
+      </nav>
+    </aside>
+  );
+}

output/warehouse-mgmt/apps/web/components/note/NoteCard.tsx

@@ -0,0 +1,19 @@
+import { Card } from "@/components/ui/Card";
+
+interface ItemCardProps {
+  item: { id: string; title: string; description?: string; status?: string; updatedAt?: string };
+  onClick?: () => void;
+}
+
+export function ItemCard({ item, onClick }: ItemCardProps) {
+  return (
+    <Card onClick={onClick}>
+      <h3 className="font-medium text-gray-800 truncate">{item.title || "无标题"}</h3>
+      <p className="text-sm text-gray-500 mt-1 line-clamp-2">{item.description?.slice(0, 120) || "无描述"}</p>
+      <div className="flex items-center gap-2 mt-2">
+        {item.status && <span className="text-xs px-1.5 py-0.5 bg-blue-100 text-blue-600 rounded">{item.status}</span>}
+        {item.updatedAt && <span className="text-xs text-gray-400">{new Date(item.updatedAt).toLocaleDateString("zh-CN")}</span>}
+      </div>
+    </Card>
+  );
+}

output/warehouse-mgmt/apps/web/components/ui/Button.tsx

@@ -0,0 +1,31 @@
+"use client";
+
+import { type ButtonHTMLAttributes } from "react";
+
+interface ButtonProps extends ButtonHTMLAttributes<HTMLButtonElement> {
+  variant?: "primary" | "secondary" | "danger" | "ghost";
+  size?: "sm" | "md" | "lg";
+  loading?: boolean;
+}
+
+export function Button({ variant = "primary", size = "md", loading, children, className = "", disabled, ...props }: ButtonProps) {
+  const base = "inline-flex items-center justify-center font-medium rounded-lg transition-colors focus:outline-none focus:ring-2 focus:ring-offset-2 disabled:opacity-50 disabled:cursor-not-allowed";
+  const variants = {
+    primary: "bg-blue-600 text-white hover:bg-blue-700 focus:ring-blue-500",
+    secondary: "bg-gray-100 text-gray-700 hover:bg-gray-200 focus:ring-gray-400",
+    danger: "bg-red-600 text-white hover:bg-red-700 focus:ring-red-500",
+    ghost: "text-gray-600 hover:bg-gray-100 focus:ring-gray-400",
+  };
+  const sizes = {
+    sm: "px-3 py-1.5 text-sm",
+    md: "px-4 py-2 text-sm",
+    lg: "px-6 py-3 text-base",
+  };
+
+  return (
+    <button className={`${base} ${variants[variant]} ${sizes[size]} ${className}`} disabled={disabled || loading} {...props}>
+      {loading && <svg className="animate-spin -ml-1 mr-2 h-4 w-4" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24"><circle className="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" strokeWidth="4" /><path className="opacity-75" fill="currentColor" d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z" /></svg>}
+      {children}
+    </button>
+  );
+}

output/warehouse-mgmt/apps/web/components/ui/Card.tsx

@@ -0,0 +1,18 @@
+import type { ReactNode } from "react";
+
+interface CardProps {
+  children: ReactNode;
+  className?: string;
+  onClick?: () => void;
+}
+
+export function Card({ children, className = "", onClick }: CardProps) {
+  return (
+    <div
+      className={`bg-white rounded-xl shadow-sm border border-gray-100 p-4 ${onClick ? "cursor-pointer hover:shadow-md transition-shadow" : ""} ${className}`}
+      onClick={onClick}
+    >
+      {children}
+    </div>
+  );
+}

output/warehouse-mgmt/apps/web/components/ui/EmptyState.tsx

@@ -0,0 +1,19 @@
+import type { ReactNode } from "react";
+
+interface EmptyStateProps {
+  icon?: string;
+  title: string;
+  description?: string;
+  action?: ReactNode;
+}
+
+export function EmptyState({ icon = "📭", title, description, action }: EmptyStateProps) {
+  return (
+    <div className="flex flex-col items-center justify-center py-16 text-center">
+      <span className="text-5xl mb-4">{icon}</span>
+      <h3 className="text-lg font-medium text-gray-700 mb-1">{title}</h3>
+      {description && <p className="text-sm text-gray-500 mb-4">{description}</p>}
+      {action}
+    </div>
+  );
+}

output/warehouse-mgmt/apps/web/components/ui/Input.tsx

@@ -0,0 +1,22 @@
+"use client";
+
+import { type InputHTMLAttributes } from "react";
+
+interface InputProps extends InputHTMLAttributes<HTMLInputElement> {
+  label?: string;
+  error?: string;
+}
+
+export function Input({ label, error, className = "", id, ...props }: InputProps) {
+  return (
+    <div className="w-full">
+      {label && <label htmlFor={id} className="block text-sm font-medium text-gray-700 mb-1">{label}</label>}
+      <input
+        id={id}
+        className={`w-full px-3 py-2 border rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-blue-500 focus:border-transparent ${error ? "border-red-300" : "border-gray-300"} ${className}`}
+        {...props}
+      />
+      {error && <p className="mt-1 text-xs text-red-500">{error}</p>}
+    </div>
+  );
+}

output/warehouse-mgmt/apps/web/components/ui/Modal.tsx

@@ -0,0 +1,33 @@
+"use client";
+
+import { useEffect, type ReactNode } from "react";
+
+interface ModalProps {
+  open: boolean;
+  onClose: () => void;
+  title: string;
+  children: ReactNode;
+}
+
+export function Modal({ open, onClose, title, children }: ModalProps) {
+  useEffect(() => {
+    if (open) document.body.style.overflow = "hidden";
+    else document.body.style.overflow = "";
+    return () => { document.body.style.overflow = ""; };
+  }, [open]);
+
+  if (!open) return null;
+
+  return (
+    <div className="fixed inset-0 z-50 flex items-center justify-center">
+      <div className="absolute inset-0 bg-black/40" onClick={onClose} />
+      <div className="relative bg-white rounded-2xl shadow-xl max-w-lg w-full mx-4 p-6">
+        <div className="flex items-center justify-between mb-4">
+          <h2 className="text-lg font-semibold">{title}</h2>
+          <button onClick={onClose} className="text-gray-400 hover:text-gray-600 text-xl leading-none">&times;</button>
+        </div>
+        {children}
+      </div>
+    </div>
+  );
+}

output/warehouse-mgmt/apps/web/hooks/useAuth.ts

@@ -0,0 +1,35 @@
+"use client";
+
+import { useState, useEffect, useCallback } from "react";
+
+// Generic data type for auth
+type Auth = Record<string, unknown>;
+
+/**
+ * Fetch and manage auth data.
+ */
+export function useAuth() {
+  const [data, setData] = useState<Auth[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+
+  const fetchData = useCallback(async () => {
+    try {
+      setLoading(true);
+      setError(null);
+      const res = await fetch(`/api/auth`);
+      const json = await res.json();
+      setData(Array.isArray(json) ? json : json?.data || []);
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Failed to load data");
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+
+  useEffect(() => {
+    fetchData();
+  }, [fetchData]);
+
+  return { data, loading, error, refetch: fetchData };
+}

output/warehouse-mgmt/apps/web/hooks/useDebounce.ts

@@ -0,0 +1,14 @@
+"use client";
+
+import { useState, useEffect } from "react";
+
+export function useDebounce<T>(value: T, delay: number = 300): T {
+  const [debounced, setDebounced] = useState(value);
+
+  useEffect(() => {
+    const timer = setTimeout(() => setDebounced(value), delay);
+    return () => clearTimeout(timer);
+  }, [value, delay]);
+
+  return debounced;
+}

output/warehouse-mgmt/apps/web/hooks/useForm.ts

@@ -0,0 +1,33 @@
+"use client";
+
+import { useState, useCallback } from "react";
+
+interface UseFormOptions<T> {
+  initialValues: T;
+  onSubmit: (values: T) => Promise<void>;
+}
+
+export function useForm<T extends Record<string, unknown>>({ initialValues, onSubmit }: UseFormOptions<T>) {
+  const [values, setValues] = useState<T>(initialValues);
+  const [submitting, setSubmitting] = useState(false);
+  const [error, setError] = useState<string | null>(null);
+
+  const setField = useCallback(<K extends keyof T>(field: K, value: T[K]) => {
+    setValues(prev => ({ ...prev, [field]: value }));
+  }, []);
+
+  const handleSubmit = useCallback(async (e: React.FormEvent) => {
+    e.preventDefault();
+    try {
+      setSubmitting(true);
+      setError(null);
+      await onSubmit(values);
+    } catch (err) {
+      setError(err instanceof Error ? err.message : "Submit failed");
+    } finally {
+      setSubmitting(false);
+    }
+  }, [values, onSubmit]);
+
+  return { values, setField, submitting, error, handleSubmit };
+}

output/warehouse-mgmt/apps/web/hooks/useItems.ts

@@ -0,0 +1,35 @@
+"use client";
+
+import { useState, useEffect, useCallback } from "react";
+
+// Generic data type for items
+type Item = Record<string, unknown>;
+
+/**
+ * Fetch and manage items data.
+ */
+export function useItems() {
+  const [data, setData] = useState<Item[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+
+  const fetchData = useCallback(async () => {
+    try {
+      setLoading(true);
+      setError(null);
+      const res = await fetch(`/api/items`);
+      const json = await res.json();
+      setData(Array.isArray(json) ? json : json?.data || []);
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Failed to load data");
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+
+  useEffect(() => {
+    fetchData();
+  }, [fetchData]);
+
+  return { data, loading, error, refetch: fetchData };
+}

output/warehouse-mgmt/apps/web/hooks/useStock_in.ts

@@ -0,0 +1,35 @@
+"use client";
+
+import { useState, useEffect, useCallback } from "react";
+
+// Generic data type for stock_in
+type Stock_in = Record<string, unknown>;
+
+/**
+ * Fetch and manage stock_in data.
+ */
+export function useStock_in() {
+  const [data, setData] = useState<Stock_in[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+
+  const fetchData = useCallback(async () => {
+    try {
+      setLoading(true);
+      setError(null);
+      const res = await fetch(`/api/stock_in`);
+      const json = await res.json();
+      setData(Array.isArray(json) ? json : json?.data || []);
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Failed to load data");
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+
+  useEffect(() => {
+    fetchData();
+  }, [fetchData]);
+
+  return { data, loading, error, refetch: fetchData };
+}

output/warehouse-mgmt/apps/web/hooks/useStock_out.ts

@@ -0,0 +1,35 @@
+"use client";
+
+import { useState, useEffect, useCallback } from "react";
+
+// Generic data type for stock_out
+type Stock_out = Record<string, unknown>;
+
+/**
+ * Fetch and manage stock_out data.
+ */
+export function useStock_out() {
+  const [data, setData] = useState<Stock_out[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+
+  const fetchData = useCallback(async () => {
+    try {
+      setLoading(true);
+      setError(null);
+      const res = await fetch(`/api/stock_out`);
+      const json = await res.json();
+      setData(Array.isArray(json) ? json : json?.data || []);
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Failed to load data");
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+
+  useEffect(() => {
+    fetchData();
+  }, [fetchData]);
+
+  return { data, loading, error, refetch: fetchData };
+}

output/warehouse-mgmt/apps/web/hooks/useStocktaking.ts

@@ -0,0 +1,35 @@
+"use client";
+
+import { useState, useEffect, useCallback } from "react";
+
+// Generic data type for stocktaking
+type Stocktaking = Record<string, unknown>;
+
+/**
+ * Fetch and manage stocktaking data.
+ */
+export function useStocktaking() {
+  const [data, setData] = useState<Stocktaking[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+
+  const fetchData = useCallback(async () => {
+    try {
+      setLoading(true);
+      setError(null);
+      const res = await fetch(`/api/stocktaking`);
+      const json = await res.json();
+      setData(Array.isArray(json) ? json : json?.data || []);
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Failed to load data");
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+
+  useEffect(() => {
+    fetchData();
+  }, [fetchData]);
+
+  return { data, loading, error, refetch: fetchData };
+}

output/warehouse-mgmt/apps/web/next-env.d.ts

@@ -0,0 +1,6 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
+/// <reference path="./.next/types/routes.d.ts" />
+
+// NOTE: This file should not be edited
+// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.

output/warehouse-mgmt/apps/web/next.config.ts

@@ -0,0 +1,7 @@
+import type { NextConfig } from "next";
+
+const nextConfig: NextConfig = {
+  /* config options here */
+};
+
+export default nextConfig;

output/warehouse-mgmt/apps/web/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "noteapp-web",
+  "version": "0.1.0",
+  "private": true,
+  "scripts": {
+    "dev": "next dev",
+    "build": "next build",
+    "start": "next start",
+    "lint": "next lint",
+    "type-check": "tsc --noEmit"
+  },
+  "dependencies": {
+    "next": "^15.0.0",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0",
+    "@shared/types": "*",
+    "@shared/config": "*"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@types/react": "^19.0.0",
+    "typescript": "^5.6.0",
+    "tailwindcss": "^3.4.0",
+    "postcss": "^8.4.0",
+    "autoprefixer": "^10.4.0"
+  }
+}

output/warehouse-mgmt/apps/web/postcss.config.js

@@ -0,0 +1,6 @@
+module.exports = {
+  plugins: {
+    tailwindcss: {},
+    autoprefixer: {},
+  },
+};

output/warehouse-mgmt/apps/web/services/api.ts

@@ -0,0 +1,49 @@
+// Auto-generated API client for NoteApp
+
+import { API_BASE_URL, API_PREFIX } from "@shared/config";
+
+const API_BASE = `${API_BASE_URL}${API_PREFIX}`;
+
+interface RequestOptions extends RequestInit {
+  params?: Record<string, string | number>;
+}
+
+async function request<T>(endpoint: string, options: RequestOptions = {}): Promise<T> {
+  const { params, ...init } = options;
+  let url = `${API_BASE}${endpoint}`;
+
+  if (params) {
+    const searchParams = new URLSearchParams();
+    Object.entries(params).forEach(([k, v]) => searchParams.set(k, String(v)));
+    url += `?${searchParams.toString()}`;
+  }
+
+  const res = await fetch(url, {
+    ...init,
+    headers: {
+      "Content-Type": "application/json",
+      ...init.headers,
+    },
+  });
+
+  if (!res.ok) {
+    const err = await res.json().catch(() => ({ message: res.statusText }));
+    throw new Error(err.message || `API Error: ${res.status}`);
+  }
+
+  return res.json();
+}
+
+export const api = {
+  get: <T>(url: string, params?: Record<string, string | number>) =>
+    request<T>(url, { method: "GET", params }),
+
+  post: <T>(url: string, data?: unknown) =>
+    request<T>(url, { method: "POST", body: JSON.stringify(data) }),
+
+  put: <T>(url: string, data?: unknown) =>
+    request<T>(url, { method: "PUT", body: JSON.stringify(data) }),
+
+  delete: <T>(url: string) =>
+    request<T>(url, { method: "DELETE" }),
+};

output/warehouse-mgmt/apps/web/services/auth.ts

@@ -0,0 +1,10 @@
+// Auto-generated auth service
+import { api } from "./api";
+
+export function postlogin(data: Record<string, unknown>) {
+  return api.post("/api/auth", data);
+}
+
+export function getme() {
+  return api.get("/api/auth");
+}

output/warehouse-mgmt/apps/web/services/items.ts

@@ -0,0 +1,10 @@
+// Auto-generated items service
+import { api } from "./api";
+
+export function get() {
+  return api.get("/api/items");
+}
+
+export function post(data: Record<string, unknown>) {
+  return api.post("/api/items", data);
+}

output/warehouse-mgmt/apps/web/services/stock_in.ts

@@ -0,0 +1,10 @@
+// Auto-generated stock_in service
+import { api } from "./api";
+
+export function get() {
+  return api.get("/api/stock_in");
+}
+
+export function post(data: Record<string, unknown>) {
+  return api.post("/api/stock_in", data);
+}

output/warehouse-mgmt/apps/web/services/stock_out.ts

@@ -0,0 +1,10 @@
+// Auto-generated stock_out service
+import { api } from "./api";
+
+export function get() {
+  return api.get("/api/stock_out");
+}
+
+export function post(data: Record<string, unknown>) {
+  return api.post("/api/stock_out", data);
+}

output/warehouse-mgmt/apps/web/services/stocktaking.ts

@@ -0,0 +1,10 @@
+// Auto-generated stocktaking service
+import { api } from "./api";
+
+export function get() {
+  return api.get("/api/stocktaking");
+}
+
+export function post(data: Record<string, unknown>) {
+  return api.post("/api/stocktaking", data);
+}

output/warehouse-mgmt/apps/web/tailwind.config.ts

@@ -0,0 +1,10 @@
+import type { Config } from "tailwindcss";
+
+const config: Config = {
+  content: ["./app/**/*.{js,ts,jsx,tsx,mdx}", "./components/**/*.{js,ts,jsx,tsx,mdx}", "./hooks/**/*.{js,ts,jsx,tsx,mdx}", "./services/**/*.{js,ts,jsx,tsx,mdx}"],
+  theme: {
+    extend: {},
+  },
+  plugins: [],
+};
+export default config;

output/warehouse-mgmt/apps/web/tsconfig.json

@@ -0,0 +1,40 @@
+{
+  "compilerOptions": {
+    "target": "ES2017",
+    "lib": [
+      "dom",
+      "dom.iterable",
+      "esnext"
+    ],
+    "allowJs": true,
+    "skipLibCheck": true,
+    "strict": true,
+    "noEmit": true,
+    "esModuleInterop": true,
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "jsx": "preserve",
+    "incremental": true,
+    "plugins": [
+      {
+        "name": "next"
+      }
+    ],
+    "paths": {
+      "@/*": [
+        "./*"
+      ]
+    }
+  },
+  "include": [
+    "next-env.d.ts",
+    "**/*.ts",
+    "**/*.tsx",
+    ".next/types/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules"
+  ]
+}

output/warehouse-mgmt/apps/web/types/index.ts

@@ -0,0 +1,103 @@
+// Auto-generated types for warehouse-mgmt
+
+// ─── Base ───────────────────────────────────────────
+export interface User {
+  id: string;
+  phone: string;
+  nickname: string;
+  avatarUrl: string;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface Items {
+  id: string;
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: Record<string, unknown>;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface StockIn {
+  id: string;
+  userId?: string;
+  productName: string;
+  quantity: number;
+  supplier?: string;
+  receivedBy?: string;
+  receivedAt?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface StockOut {
+  id: string;
+  userId?: string;
+  productName: string;
+  quantity: number;
+  recipient?: string;
+  approvedBy?: string;
+  shippedAt?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface Stocktaking {
+  id: string;
+  userId?: string;
+  warehouse?: string;
+  productName?: string;
+  expectedQty?: number;
+  actualQty?: number;
+  diff?: number;
+  stocktakenAt?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface StockAlerts {
+  id: string;
+  userId?: string;
+  productName: string;
+  currentQty?: number;
+  threshold?: number;
+  alertedAt?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface Warehouse {
+  id: string;
+  userId?: string;
+  productName: string;
+  quantity: number;
+  supplier?: string;
+  receivedBy?: string;
+  receivedAt?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+// Alias for NoteCard compatibility
+export type Note = Items;
+
+// ─── API Responses ──────────────────────────────────
+export interface ApiResponse<T> {
+  data: T;
+  message: string;
+}
+
+export interface PaginatedResponse<T> extends ApiResponse<T[]> {
+  total: number;
+  page: number;
+  pageSize: number;
+}
+
+export interface ApiError {
+  code: string;
+  message: string;
+  details?: Record<string, string[]>;
+}

output/warehouse-mgmt/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "noteapp",
+  "version": "0.1.0",
+  "private": true,
+  "workspaces": [
+    "apps/*",
+    "packages/*"
+  ],
+  "scripts": {
+    "dev": "node scripts/dev.mjs",
+    "build": "node scripts/build.mjs",
+    "dev:web": "npm run dev -w apps/web",
+    "dev:api": "npm run dev -w apps/api",
+    "build:web": "npm run build -w apps/web",
+    "build:api": "npm run build -w apps/api",
+    "test": "npm run test -w apps/api",
+    "lint": "npm run lint -w apps/web"
+  }
+}

output/warehouse-mgmt/packages/shared-config/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "@shared/config",
+  "version": "0.1.0",
+  "private": true,
+  "main": "./src/index.ts",
+  "types": "./src/index.ts"
+}

output/warehouse-mgmt/packages/shared-config/src/index.ts

@@ -0,0 +1,16 @@
+// Shared configuration for fullstack project
+
+/** API base URL — reads from env or defaults */
+export const API_BASE_URL = process.env.NEXT_PUBLIC_API_URL || "http://localhost:3001";
+
+/** API prefix for all endpoints */
+export const API_PREFIX = "/api";
+
+/** Full API URL */
+export const API_URL = `${API_BASE_URL}${API_PREFIX}`;
+
+/** Auth token storage key */
+export const AUTH_TOKEN_KEY = "auth_token";
+
+/** Default page size for paginated endpoints */
+export const DEFAULT_PAGE_SIZE = 20;

output/warehouse-mgmt/packages/shared-config/tsconfig.json

@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "declaration": true,
+    "outDir": "./dist"
+  },
+  "include": [
+    "src"
+  ]
+}

output/warehouse-mgmt/packages/shared-types/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "@shared/types",
+  "version": "0.1.0",
+  "private": true,
+  "main": "./src/index.ts",
+  "types": "./src/index.ts"
+}

output/warehouse-mgmt/packages/shared-types/src/index.ts

@@ -0,0 +1,105 @@
+// Shared types for fullstack project
+// Auto-generated — used by both apps/web and apps/api
+
+// ─── Entities ────────────────────────────────────────
+export interface User {
+  id?: string;
+  username: string;
+  passwordHash: string;
+  nickname?: string;
+  role?: string;
+  phone?: string;
+  avatarUrl?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface Items {
+  id: string;
+  userId?: string;
+  title: string;
+  description?: string;
+  status?: string;
+  data?: Record<string, unknown>;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface StockIn {
+  id: string;
+  userId?: string;
+  productName: string;
+  quantity: number;
+  supplier?: string;
+  receivedBy?: string;
+  receivedAt?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface StockOut {
+  id: string;
+  userId?: string;
+  productName: string;
+  quantity: number;
+  recipient?: string;
+  approvedBy?: string;
+  shippedAt?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface Stocktaking {
+  id: string;
+  userId?: string;
+  warehouse?: string;
+  productName?: string;
+  expectedQty?: number;
+  actualQty?: number;
+  diff?: number;
+  stocktakenAt?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface StockAlerts {
+  id: string;
+  userId?: string;
+  productName: string;
+  currentQty?: number;
+  threshold?: number;
+  alertedAt?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface Warehouse {
+  id: string;
+  userId?: string;
+  productName: string;
+  quantity: number;
+  supplier?: string;
+  receivedBy?: string;
+  receivedAt?: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+// ─── API Response Wrappers ───────────────────────────
+export interface ApiResponse<T> {
+  data: T;
+  message?: string;
+}
+
+export interface PaginatedResponse<T> {
+  data: T[];
+  total: number;
+  page: number;
+  pageSize: number;
+}
+
+export interface ErrorResponse {
+  error: string;
+  message: string;
+  statusCode: number;
+}

output/warehouse-mgmt/packages/shared-types/tsconfig.json

@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "declaration": true,
+    "outDir": "./dist"
+  },
+  "include": [
+    "src"
+  ]
+}

output/warehouse-mgmt/scripts/build.mjs

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+
+/**
+ * Build script — builds both web and api.
+ * Usage: node scripts/build.mjs
+ */
+
+import { execSync } from "node:child_process";
+
+const ROOT = new URL("..", import.meta.url).pathname;
+
+function run(cmd, cwd) {
+  console.log(`\n🔨 ${cmd} (in ${cwd})`);
+  execSync(cmd, { cwd, stdio: "inherit" });
+}
+
+console.log("🏗️  Building fullstack project...\n");
+
+try {
+  run("npm run build", `${ROOT}/apps/api`);
+  run("npm run build", `${ROOT}/apps/web`);
+  console.log("\n✅ Build complete!");
+} catch (e) {
+  console.error("\n❌ Build failed:", e.message);
+  process.exit(1);
+}

output/warehouse-mgmt/scripts/dev.mjs

@@ -0,0 +1,32 @@
+#!/usr/bin/env node
+
+/**
+ * Dev script — starts both web and api in parallel.
+ * Usage: node scripts/dev.mjs
+ */
+
+import { spawn } from "node:child_process";
+
+function start(name, command, args, cwd) {
+  const child = spawn(command, args, {
+    cwd,
+    stdio: "inherit",
+    shell: true,
+    env: { ...process.env, FORCE_COLOR: "1" },
+  });
+  child.on("error", (err) => console.error(`[${name}] Failed: ${err.message}`));
+  child.on("exit", (code) => {
+    if (code !== 0 && code !== null) console.error(`[${name}] Exited with code ${code}`);
+  });
+  return child;
+}
+
+const ROOT = new URL("..", import.meta.url).pathname;
+
+console.log("🚀 Starting fullstack dev servers...\n");
+
+const api = start("api", "npm", ["run", "dev"], `${ROOT}/apps/api`);
+const web = start("web", "npm", ["run", "dev"], `${ROOT}/apps/web`);
+
+process.on("SIGINT", () => { api.kill(); web.kill(); process.exit(0); });
+process.on("SIGTERM", () => { api.kill(); web.kill(); process.exit(0); });