Documentation

This tutorial builds a small HTTP API with one validated POST route and a node:test test using the HTTP kernel’s Fetch API. It uses only packages and value exports present in this repository. playground/ is a scratch …

This tutorial takes a new employee from an empty folder to a running container. It takes about 30 minutes. You build a small notes API with a database table, a validated route, a test, and a Docker image. Each code bl…

The token guard of @samveys/auth gives each machine client its own token with a list of abilities.

SQLite is the default (ADR 0011). It needs no server and works in tests out of the box. Use MySQL (also for MariaDB servers, ADR 0012) or PostgreSQL when you deploy to a shared server.

svs build writes a production build without any config baked in. The same image then runs in every environment, configured only through env vars.

The oidc guard of @samveys/auth signs users in with the Organization's identity provider, using the authorization code flow with PKCE. Which provider is used is still open. The guard works with any OpenID Connect …

Releases use Changesets with one fixed group, so every @samveys/* package always has the same version.

A browser app needs sessions, CSRF protection, and per-client rate limits. Session cookies are Secure, HttpOnly and SameSite=Lax by default.