[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_319":320,"_321":322},"routes/_app.x.$handle.$name",{"_110":109,"_37":50,"_119":96,"_32":120,"_13":14,"_121":-5,"_11":122,"_123":124,"_125":126,"_127":128,"_129":130,"_26":-5,"_131":132,"_133":134,"_135":30,"_136":137,"_138":65,"_139":-5,"_140":-5,"_141":142},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_48":49,"_37":50,"_43":51,"_52":-5,"_53":30,"_54":55,"_56":55,"_57":58,"_59":60,"_19":61,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":69,"_70":71,"_72":73,"_74":75,"_76":77,"_78":-5,"_79":80,"_81":80,"_82":83,"_84":83,"_85":83,"_86":80,"_87":80,"_88":89,"_90":91,"_92":93,"_94":30},"version",9,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","3b387053-7db4-4526-af2a-a2056cc9061c","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":-7,"_29":30,"_31":30,"_32":33,"_34":33},"file",{"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":14,"_46":47,"_29":30},"previous","deleted",false,"deletedHere","path","frontend/components/Login.tsx","latestPath","fileId","37a3b45c-7fbf-11f1-ac4e-1607ee4eb77e","name","Login.tsx","fileType","script","content","/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState } from \"https://esm.sh/react@18.2.0\";\nimport { auth, setToken, setStoredUser } from \"./api.ts\";\nimport { Button, Input } from \"./ui.tsx\";\n\nexport function Login({ onLogin }: { onLogin: () => void }) {\n const [email, setEmail] = useState(\"\");\n const [password, setPassword] = useState(\"\");\n const [error, setError] = useState(\"\");\n const [loading, setLoading] = useState(false);\n const [showPwd, setShowPwd] = useState(false);\n\n const handleSubmit = async (e: any) => {\n e.preventDefault();\n setError(\"\");\n setLoading(true);\n try {\n const result = await auth.login(email, password);\n setToken(result.token);\n setStoredUser(result.user);\n onLogin();\n } catch (err: any) {\n setError(err.message || \"Login failed\");\n } finally {\n setLoading(false);\n }\n };\n\n return (\n

\n\n

\n {/* Header with BEML branding */}\n

\n BEML\n

BEML LIMITED

KMRCL - Kolkata Metro Rail Corporation

DLP Store Inventory

Management System

\n\n {/* Login Form */}\n

\n Email Address *\n setEmail(e.target.value)} required\n placeholder=\"Enter your email\" autofocus\n class=\"w-full px-4 py-3 border border-slate-300 rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-blue-500 focus:border-transparent\" />\n

\n\n

\n Password *\n

\n setPassword(e.target.value)} required\n placeholder=\"Enter your password\"\n class=\"w-full px-4 py-3 pr-10 border border-slate-300 rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-blue-500 focus:border-transparent\" />\n \n

\n\n {error && (\n

\n {error}\n

\n )}\n\n \n\n {/* Demo credentials */}\n

Demo Login Credentials:

👤 Admin: admin@beml.in / admin123

🏪 Store: store@beml.in / store123

🔧 Officer: officer@beml.in / officer123

\n\n

\n );\n}\n","createdAt",["D",1784059467360],"branchVersion","branchId","272a5b82-1b5b-4853-a3a6-3a9359b31dfc","id","3d5154e2-abac-46bc-bee6-64dae600ecdd","beml-dlp-inventory",["D",1784059096199],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","BEML-KMRCL DLP Store Inventory Management System","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/64dc00cc-94d9-47dd-81b1-dde02610d900/square512?exp=1789527599&sig=0d894086c0af42ecb01197039479c0fffb55aba894accf0a0e78adbfe9ad755c","9389fc11-86d0-4a1d-bd0f-c108eb484437","pinnedFileId","019f6235-6cdf-725a-9a82-cc8601ead39d","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f622f-bbd4-74ad-8747-2b6ee05ac5d7","tursoName","3d5154e2abac46bcbee664dae600ecdd","tursoHostname","3d5154e2abac46bcbee664dae600ecdd-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789473046147],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_110":109,"_118":114},"org",{"_110":109,"_111":112,"_113":114,"_19":61,"_115":116,"_117":30},"branch",{"_13":95,"_37":96,"_48":47,"_97":49,"_98":99,"_100":101,"_102":55,"_103":104,"_105":106,"_107":50,"_108":109},"isOwned",22,"main","projectId","forkedBranchId","961078ea-f528-11ef-aa68-569c3dd06744","forkedBranchVersion",89,"forkedProjectPrivacy","forkedProjectId","96102714-f528-11ef-aa68-569c3dd06744","forkedProjectOrgId","019aa807-52c2-709c-928b-2029bae9a558","projectName","userHandle","shashimishra","handle","displayName","SHASHI MISHRA","avatar","https://lh3.googleusercontent.com/a/ACg8ocLoyyRBXF-PzdHTewnCBqsGYAt3dDTkLD7g3IX_I9bIsoyDAg=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_48":49,"_37":50,"_43":314,"_52":-5,"_53":30,"_54":55,"_56":55,"_57":58,"_59":60,"_19":61,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":69,"_70":71,"_72":73,"_74":75,"_76":315,"_78":-5,"_79":80,"_81":80,"_82":83,"_84":83,"_85":83,"_86":80,"_87":80,"_88":316,"_90":317,"_92":318,"_94":30},"tree",[200,210,214,215],"files",[200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215],"counts",{"_190":69,"_191":167,"_192":167,"_193":194,"_195":196},"contents",[157,158,159,160],"upstreamProject",{"_48":104,"_37":153,"_57":154,"_59":60,"_54":55,"_88":155},"upstreamBranch",{"_48":99,"_43":146,"_147":148,"_37":96,"_97":104,"_13":149,"_98":-5,"_100":-5,"_150":151,"_52":-5,"_94":30,"_54":55,"_108":152,"_70":106,"_107":153},"emptyEnvVars","flags",[143],"hasHttpFiles","grants","orgs","customDomains",{},{"_48":144,"_145":-5},"d965155e-f88d-404a-a27d-06b3f16bfd94","reporterId",["D",1740674013689],"updatedAt",["D",1785420707976],91,"lockfileKey","1785420708123-esm.town_v_templates_react-hono-starter@91-main","templates","react-hono-starter","Starter template with client-side React & Hono server",{"_110":152,"_118":156},"https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/129cab32-3bd7-4c3e-f39b-f12900c76100/square512?exp=1789527599&sig=c0420a404df732002c03eca9bce405b755065f984097bbe146cb490e828e28ea",{"_48":185,"_37":186,"_35":187,"_163":-5,"_46":47,"_45":167,"_165":65,"_43":188,"_13":69,"_39":183,"_41":-5,"_29":30,"_170":-5,"_32":189},{"_48":178,"_37":179,"_35":180,"_163":-5,"_46":47,"_45":181,"_165":65,"_43":182,"_13":69,"_39":183,"_41":-5,"_29":30,"_170":-5,"_32":184},{"_48":172,"_37":173,"_35":174,"_163":-5,"_46":47,"_45":167,"_165":30,"_43":175,"_13":69,"_39":26,"_41":176,"_29":30,"_170":-5,"_32":177},{"_48":161,"_37":162,"_35":63,"_163":-5,"_46":47,"_45":164,"_165":65,"_43":166,"_13":167,"_39":168,"_41":169,"_29":30,"_170":-5,"_32":171},"de85c552-ed1b-4eda-be97-03a0287565c7","index.ts","parentId",5,"latest",["D",1784059345491],1,"http","import { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { Hono } from \"npm:hono\";\nimport * as db from \"./lib/db.ts\";\nimport * as sheets from \"./lib/sheets.ts\";\nimport * as docs from \"./lib/documents.ts\";\n\nconst app = new Hono();\nlet dbInitialized = false;\n\nasync function ensureDB() {\n if (!dbInitialized) {\n await db.initDB();\n dbInitialized = true;\n }\n}\n\n// Auth middleware - extracts user from Authorization header\nasync function getUser(c: any) {\n const auth = c.req.header(\"Authorization\");\n if (!auth?.startsWith(\"Bearer \")) return null;\n const token = auth.slice(7);\n return await db.validateToken(token);\n}\n\nfunction requireAuth(c: any) {\n // Will be checked in route handlers\n}\n\nfunction requireRole(user: any, roles: string[]) {\n return user && roles.includes(user.role);\n}\n\n// ─── Serve Frontend ───\napp.get(\"/\", async () => {\n await ensureDB();\n return serveFile(\"/frontend/index.html\");\n});\napp.get(\"/frontend/**/*\", (c) => serveFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// ─── Auth Routes ───\napp.post(\"/api/auth/login\", async (c) => {\n await ensureDB();\n const body = await c.req.json();\n const result = await db.login(body.email, body.password);\n if (!result) return c.json({ error: \"Invalid email or password\" }, 401);\n await db.logAudit(result.user.name, \"LOGIN\", \"auth\", \"\", \"\", c.req.header(\"x-forwarded-for\") || \"\");\n return c.json(result);\n});\n\napp.post(\"/api/auth/logout\", async (c) => {\n await ensureDB();\n const auth = c.req.header(\"Authorization\");\n if (auth?.startsWith(\"Bearer \")) {\n await db.logout(auth.slice(7));\n }\n return c.json({ success: true });\n});\n\napp.get(\"/api/auth/me\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Not authenticated\" }, 401);\n return c.json({ user });\n});\n\n// ─── Dashboard Stats ───\napp.get(\"/api/dashboard\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const stats = await db.getDashboardStats();\n const settings = await db.getAllSettings();\n return c.json({ stats, settings, user });\n});\n\n// ─── Inventory Routes ───\napp.get(\"/api/inventory\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const filters: Record = {};\n const q = c.req.query();\n for (const key of [\"search\", \"oem\", \"system\", \"status\", \"trainset\", \"limit\"]) {\n if (q[key]) filters[key] = q[key];\n }\n const items = await db.getInventory(filters);\n return c.json({ items });\n});\n\napp.get(\"/api/inventory/stats\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const stats = await db.getInventoryStats();\n return c.json({ stats });\n});\n\napp.get(\"/api/inventory/export\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const items = await db.getInventory({});\n const csv = docs.exportInventoryCSV(items);\n return new Response(csv, { headers: { \"Content-Type\": \"text/csv\", \"Content-Disposition\": \"attachment; filename=inventory_export.csv\" } });\n});\n\napp.post(\"/api/inventory/sync\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n if (!requireRole(user, [\"admin\", \"store\"])) return c.json({ error: \"Only admin/store can sync\" }, 403);\n const result = await sheets.syncInventory();\n await db.logAudit(user.name, \"SYNC_INVENTORY\", \"inventory\", \"\", result.message, c.req.header(\"x-forwarded-for\") || \"\");\n return c.json(result);\n});\n\napp.get(\"/api/inventory/sheets/tabs\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const result = await sheets.testConnection();\n return c.json(result);\n});\n\n// ─── Material Request Routes ───\napp.get(\"/api/requests\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const filters: Record = {};\n const q = c.req.query();\n for (const key of [\"status\", \"officer\", \"trainset\", \"search\", \"dateFrom\", \"dateTo\"]) {\n if (q[key]) filters[key] = q[key];\n }\n const items = await db.getRequests(filters);\n return c.json({ items });\n});\n\napp.post(\"/api/requests\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const body = await c.req.json();\n body.officer_name = body.officer_name || user.name;\n body.officer_id = user.id;\n const req = await db.createRequest(body);\n await db.logAudit(user.name, \"CREATE_REQUEST\", \"requests\", \"\", req.request_no, c.req.header(\"x-forwarded-for\") || \"\");\n return c.json({ request: req });\n});\n\napp.patch(\"/api/requests/:id\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const id = parseInt(c.req.param(\"id\"));\n const body = await c.req.json();\n if (body.status === \"approved\" || body.status === \"rejected\") {\n if (!requireRole(user, [\"admin\", \"store\"])) return c.json({ error: \"Only admin/store can approve/reject\" }, 403);\n await db.updateRequestStatus(id, body.status, user.name, body.rejected_reason);\n await db.logAudit(user.name, body.status === \"approved\" ? \"APPROVE_REQUEST\" : \"REJECT_REQUEST\", \"requests\", String(id), body.status, c.req.header(\"x-forwarded-for\") || \"\");\n }\n return c.json({ success: true });\n});\n\napp.get(\"/api/requests/export\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const items = await db.getRequests({});\n const csv = docs.exportRequestsCSV(items);\n return new Response(csv, { headers: { \"Content-Type\": \"text/csv\", \"Content-Disposition\": \"attachment; filename=requests_export.csv\" } });\n});\n\n// ─── Material Issue Routes ───\napp.get(\"/api/issues\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const filters: Record = {};\n const q = c.req.query();\n for (const key of [\"status\", \"trainset\", \"search\", \"dateFrom\", \"dateTo\"]) {\n if (q[key]) filters[key] = q[key];\n }\n const items = await db.getIssues(filters);\n return c.json({ items });\n});\n\napp.post(\"/api/issues\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n if (!requireRole(user, [\"admin\", \"store\"])) return c.json({ error: \"Only admin/store can issue materials\" }, 403);\n const body = await c.req.json();\n body.issued_by = user.name;\n const issue = await db.createIssue(body);\n await db.logAudit(user.name, \"ISSUE_MATERIAL\", \"issues\", \"\", issue.issue_no, c.req.header(\"x-forwarded-for\") || \"\");\n return c.json({ issue });\n});\n\napp.get(\"/api/issues/export\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const items = await db.getIssues({});\n const csv = docs.exportIssuesCSV(items);\n return new Response(csv, { headers: { \"Content-Type\": \"text/csv\", \"Content-Disposition\": \"attachment; filename=issues_export.csv\" } });\n});\n\napp.get(\"/api/issues/:id/print\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const id = parseInt(c.req.param(\"id\"));\n const issues = await db.getIssues({});\n const issue = issues.find((i: any) => i.id === id);\n if (!issue) return c.json({ error: \"Not found\" }, 404);\n const settings = await db.getAllSettings();\n const html = await docs.generateIssueSlipHTML(issue as any, settings);\n return c.html(html);\n});\n\n// ─── Gate Pass Routes ───\napp.get(\"/api/gatepass\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const filters: Record = {};\n const q = c.req.query();\n for (const key of [\"status\", \"search\", \"dateFrom\", \"dateTo\"]) {\n if (q[key]) filters[key] = q[key];\n }\n const items = await db.getGatePasses(filters);\n return c.json({ items });\n});\n\napp.post(\"/api/gatepass\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n if (!requireRole(user, [\"admin\", \"store\"])) return c.json({ error: \"Only store person can generate gate pass\" }, 403);\n const body = await c.req.json();\n body.generated_by = user.name;\n const gp = await db.createGatePass(body);\n await db.logAudit(user.name, \"GENERATE_GATEPASS\", \"gatepass\", \"\", gp.gatepass_no, c.req.header(\"x-forwarded-for\") || \"\");\n return c.json({ gatepass: gp });\n});\n\napp.get(\"/api/gatepass/export\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const items = await db.getGatePasses({});\n const csv = docs.exportGatePassesCSV(items);\n return new Response(csv, { headers: { \"Content-Type\": \"text/csv\", \"Content-Disposition\": \"attachment; filename=gatepass_export.csv\" } });\n});\n\napp.get(\"/api/gatepass/:id/print\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const id = parseInt(c.req.param(\"id\"));\n const passes = await db.getGatePasses({});\n const gp = passes.find((g: any) => g.id === id);\n if (!gp) return c.json({ error: \"Not found\" }, 404);\n const settings = await db.getAllSettings();\n const html = await docs.generateGatePassHTML(gp as any, settings);\n return c.html(html);\n});\n\n// ─── Repair Routes ───\napp.get(\"/api/repairs\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const filters: Record = {};\n const q = c.req.query();\n for (const key of [\"status\", \"search\"]) {\n if (q[key]) filters[key] = q[key];\n }\n const items = await db.getRepairs(filters);\n return c.json({ items });\n});\n\napp.post(\"/api/repairs\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n if (!requireRole(user, [\"admin\", \"store\"])) return c.json({ error: \"Only admin/store can create repair records\" }, 403);\n const body = await c.req.json();\n const repair = await db.createRepair(body);\n await db.logAudit(user.name, \"CREATE_REPAIR\", \"repairs\", \"\", String(repair.id), c.req.header(\"x-forwarded-for\") || \"\");\n return c.json({ repair });\n});\n\napp.patch(\"/api/repairs/:id\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n if (!requireRole(user, [\"admin\", \"store\"])) return c.json({ error: \"Only admin/store can update repairs\" }, 403);\n const id = parseInt(c.req.param(\"id\"));\n const body = await c.req.json();\n await db.updateRepair(id, body);\n await db.logAudit(user.name, \"UPDATE_REPAIR\", \"repairs\", String(id), JSON.stringify(body), c.req.header(\"x-forwarded-for\") || \"\");\n return c.json({ success: true });\n});\n\n// ─── Settings Routes (Admin only) ───\napp.get(\"/api/settings\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const settings = await db.getAllSettings();\n return c.json({ settings });\n});\n\napp.post(\"/api/settings\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n if (!requireRole(user, [\"admin\"])) return c.json({ error: \"Only admin can update settings\" }, 403);\n const body = await c.req.json();\n for (const [key, value] of Object.entries(body)) {\n await db.setSetting(key, value as string);\n }\n await db.logAudit(user.name, \"UPDATE_SETTINGS\", \"settings\", \"\", JSON.stringify(Object.keys(body)), c.req.header(\"x-forwarded-for\") || \"\");\n return c.json({ success: true });\n});\n\napp.post(\"/api/settings/test-connection\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n if (!requireRole(user, [\"admin\"])) return c.json({ error: \"Only admin can test connection\" }, 403);\n const result = await sheets.testConnection();\n return c.json(result);\n});\n\n// ─── User Management Routes (Admin only) ───\napp.get(\"/api/users\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n if (!requireRole(user, [\"admin\"])) return c.json({ error: \"Only admin can manage users\" }, 403);\n const users = await db.getUsers();\n return c.json({ users });\n});\n\napp.post(\"/api/users\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n if (!requireRole(user, [\"admin\"])) return c.json({ error: \"Only admin can create users\" }, 403);\n const body = await c.req.json();\n try {\n await db.createUser(body.name, body.email, body.password, body.role, body.department, body.mobile);\n await db.logAudit(user.name, \"CREATE_USER\", \"users\", \"\", body.email, c.req.header(\"x-forwarded-for\") || \"\");\n return c.json({ success: true });\n } catch (e) {\n return c.json({ error: e.message }, 400);\n }\n});\n\napp.patch(\"/api/users/:id\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n if (!requireRole(user, [\"admin\"])) return c.json({ error: \"Only admin can update users\" }, 403);\n const id = parseInt(c.req.param(\"id\"));\n const body = await c.req.json();\n await db.updateUser(id, body);\n await db.logAudit(user.name, \"UPDATE_USER\", \"users\", String(id), JSON.stringify(Object.keys(body)), c.req.header(\"x-forwarded-for\") || \"\");\n return c.json({ success: true });\n});\n\napp.delete(\"/api/users/:id\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n if (!requireRole(user, [\"admin\"])) return c.json({ error: \"Only admin can delete users\" }, 403);\n const id = parseInt(c.req.param(\"id\"));\n if (id === user.id) return c.json({ error: \"Cannot delete yourself\" }, 400);\n await db.deleteUser(id);\n await db.logAudit(user.name, \"DELETE_USER\", \"users\", String(id), \"\", c.req.header(\"x-forwarded-for\") || \"\");\n return c.json({ success: true });\n});\n\n// ─── Audit Log Routes ───\napp.get(\"/api/audit\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n if (!requireRole(user, [\"admin\"])) return c.json({ error: \"Only admin can view audit logs\" }, 403);\n const filters: Record = {};\n const q = c.req.query();\n for (const key of [\"user\", \"module\", \"dateFrom\", \"dateTo\"]) {\n if (q[key]) filters[key] = q[key];\n }\n const logs = await db.getAuditLogs(filters);\n return c.json({ logs });\n});\n\n// ─── Sheet Info (for admin settings) ───\napp.get(\"/api/sheets/info\", async (c) => {\n await ensureDB();\n const user = await getUser(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n return c.json({\n sheetNames: sheets.SHEET_NAMES,\n inventoryColumns: sheets.INVENTORY_COLUMNS,\n vendorColumns: sheets.VENDOR_COLUMNS,\n trainsetColumns: sheets.TRAINSET_COLUMNS,\n });\n});\n\napp.onError((err) => Promise.reject(err));\nexport default app.fetch;\n","label",[162],"24902398-f04e-4f48-a63a-bca4b70e10e3","README.md","019f6235-6cdf-725a-9a82-c885f648d26a",["D",1784059096199],"# React + Hono Starter\n\nA minimal starter template for building client-side React apps with a Hono\nbackend on Val Town. Click **Remix** to get your own copy.\n\n## Picking a starter\n\n| Starter | When to pick it |\n| --- | --- |\n| [`basic-html-starter`](https://www.val.town/x/templates/basic-html-starter) | Static HTML pages. Sprinkle of vanilla JS. No server-side rendering. |\n| [`hono-jsx-starter`](https://www.val.town/x/templates/hono-jsx-starter) | Dynamic server-rendered HTML with JSX. API routes. No React, no SPA. |\n| **[`react-hono-starter`](https://www.val.town/x/templates/react-hono-starter)** *(you're here)* | Client-side React SPA with a Hono API backend. |\n\n**Want to build UI?** Start writing React components in\n[`frontend/components/`](/frontend/components/). Import them into `App.tsx` and\nyou're good to go. Styling is [Twind](https://twind.style/) — just use Tailwind\nutility classes, zero config.\n\n**Want to add an API?** Add routes in [`index.ts`](/index.ts) (there's a\ncommented-out example). Fetch them from your React components.\n\n## Architecture\n\n```mermaid\ngraph LR\n Browser -->|\"GET /\"| Hono[\"index.ts
(Hono server)\"]\n Hono -->|serves| HTML[\"index.html\"]\n HTML -->|loads| Entry[\"index.tsx\"]\n Entry -->|renders| App[\"App.tsx\"]\n App -->|renders| Counter[\"Counter.tsx\"]\n```\n\n## File structure\n\n```\nindex.ts ← Hono backend (serves frontend + API routes)\nfrontend/\n index.html ← HTML shell (loads Twind + React)\n index.tsx ← React entrypoint (mounts )\n favicon.svg ← App icon\n components/\n App.tsx ← Root component (layout + view source link)\n Counter.tsx ← Example component with state\n```\n\n## How it works\n\n1. **`index.ts`** is the HTTP entrypoint — a Hono server that serves the\n frontend and any API routes you add.\n2. **`frontend/index.html`** loads Twind and the React entrypoint.\n3. **`frontend/index.tsx`** mounts the React app.\n4. **`frontend/components/App.tsx`** is the root layout — add new components\n alongside it.\n5. **`frontend/components/Counter.tsx`** is an example stateful component —\n replace it with your own!\n\n## Next steps\n\n- Add API routes in `index.ts`\n- Add new components in `frontend/components/`\n- Add a SQLite database — see the\n [React Hono Example](https://www.val.town/x/stevekrouse/reactHonoExample) for\n a full-stack example with database, queries, and shared types\n",[173],"d5d9867d-0e44-4d97-8426-56d8cf1b356a","lib","89143b16-fdce-4e19-8f45-7943320f1a05",2,["D",1784059246410],"directory",[179],"d899d053-fc25-4016-bca9-8d914ba817a6","frontend","019f6235-6cdf-725a-9a82-c5896c5baaf4",["D",1784059096199],[186],"pulls","branches","forks","envVars",{"_197":69,"_199":69},"connections",{"_197":167,"_198":69},"count","unfilledCount","emptyCount",{"_48":185,"_37":186,"_35":187,"_163":-5,"_46":47,"_45":167,"_165":65,"_43":311,"_13":69,"_39":183,"_41":-5,"_29":30,"_170":-5,"_217":312,"_32":313},{"_48":307,"_37":280,"_35":274,"_163":187,"_46":47,"_45":167,"_165":65,"_43":308,"_13":69,"_39":183,"_41":-5,"_29":30,"_170":-5,"_217":309,"_32":310},{"_48":300,"_37":301,"_35":302,"_163":274,"_46":47,"_45":167,"_165":30,"_43":303,"_13":69,"_39":40,"_41":304,"_29":30,"_170":-5,"_217":305,"_32":306},{"_48":293,"_37":294,"_35":295,"_163":274,"_46":47,"_45":167,"_165":30,"_43":296,"_13":69,"_39":40,"_41":297,"_29":30,"_170":-5,"_217":298,"_32":299},{"_48":289,"_37":38,"_35":36,"_163":274,"_46":47,"_45":14,"_165":65,"_43":290,"_13":69,"_39":40,"_41":42,"_29":30,"_170":-5,"_217":291,"_32":292},{"_48":281,"_37":282,"_35":283,"_163":274,"_46":47,"_45":284,"_165":65,"_43":285,"_13":69,"_39":40,"_41":286,"_29":30,"_170":-5,"_217":287,"_32":288},{"_48":271,"_37":272,"_35":273,"_163":274,"_46":47,"_45":275,"_165":65,"_43":276,"_13":69,"_39":40,"_41":277,"_29":30,"_170":-5,"_217":278,"_32":279},{"_48":264,"_37":265,"_35":266,"_163":187,"_46":47,"_45":167,"_165":65,"_43":267,"_13":69,"_39":26,"_41":268,"_29":30,"_170":-5,"_217":269,"_32":270},{"_48":256,"_37":257,"_35":258,"_163":187,"_46":47,"_45":259,"_165":65,"_43":260,"_13":167,"_39":26,"_41":261,"_29":30,"_170":-5,"_217":262,"_32":263},{"_48":249,"_37":250,"_35":251,"_163":187,"_46":47,"_45":167,"_165":65,"_43":252,"_13":69,"_39":40,"_41":253,"_29":30,"_170":-5,"_217":254,"_32":255},{"_48":178,"_37":179,"_35":180,"_163":-5,"_46":47,"_45":181,"_165":65,"_43":246,"_13":69,"_39":183,"_41":-5,"_29":30,"_170":-5,"_217":247,"_32":248},{"_48":239,"_37":240,"_35":241,"_163":180,"_46":47,"_45":181,"_165":65,"_43":242,"_13":69,"_39":40,"_41":243,"_29":30,"_170":-5,"_217":244,"_32":245},{"_48":231,"_37":232,"_35":233,"_163":180,"_46":47,"_45":234,"_165":30,"_43":235,"_13":69,"_39":40,"_41":236,"_29":30,"_170":-5,"_217":237,"_32":238},{"_48":223,"_37":224,"_35":225,"_163":180,"_46":47,"_45":226,"_165":65,"_43":227,"_13":69,"_39":40,"_41":228,"_29":30,"_170":-5,"_217":229,"_32":230},{"_48":172,"_37":173,"_35":174,"_163":-5,"_46":47,"_45":167,"_165":30,"_43":220,"_13":69,"_39":26,"_41":176,"_29":30,"_170":-5,"_217":221,"_32":222},{"_48":161,"_37":162,"_35":63,"_163":-5,"_46":47,"_45":164,"_165":65,"_43":216,"_13":167,"_39":168,"_41":169,"_29":30,"_170":-5,"_217":218,"_32":219},["D",1784059345491],"children",[],[162],["D",1784059096199],[],[173],"71dd32fe-571d-4e6e-bdeb-6ca776065deb","sheets.ts","de2e4f86-7fbe-11f1-98ab-1607ee4eb77e",3,["D",1784059317316],"// Google Sheets Integration using gsheet_call wrapper\n// Requires env var: google_service_account (JSON key from Google Cloud Service Account)\nimport { gsheet_call } from \"https://esm.town/v/mattx/gsheet_call\";\nimport { getSetting, setSetting, syncInventoryFromSheet } from \"./db.ts\";\n\n// Expected sheet names in the Google Spreadsheet\nexport const SHEET_NAMES = {\n INVENTORY: \"Inventory\",\n VENDORS: \"Vendors\",\n TRAINSETS: \"Trainsets\",\n REQUESTS: \"Requests\",\n ISSUES: \"Issues\",\n GATEPASSES: \"GatePasses\",\n REPAIRS: \"Repairs\",\n};\n\n// Expected column headers for Inventory sheet (row 1)\nexport const INVENTORY_COLUMNS = [\n \"Item ID\", \"OEM\", \"System\", \"Subsystem\", \"Material Name\", \"Part Number\",\n \"Description\", \"Qty\", \"Available Qty\", \"Repair Qty\", \"Issued Qty\", \"Returned Qty\",\n \"Location\", \"Rack\", \"Shelf\", \"Vendor\", \"Warranty\", \"DLP Expiry\", \"Status\",\n \"Updated Date\", \"Updated By\",\n];\n\nexport const VENDOR_COLUMNS = [\"Vendor Name\", \"Address\", \"Contact Person\", \"Phone\", \"Email\", \"GST\", \"Remarks\"];\nexport const TRAINSET_COLUMNS = [\"Trainset Number\", \"Car Number\", \"System\", \"OEM\", \"Commissioning Date\", \"Status\"];\n\nasync function getSheetCreds() {\n const sa = Deno.env.get(\"google_service_account\");\n if (!sa) throw new Error(\"Google service account not configured. Set 'google_service_account' env var.\");\n const sheetId = await getSetting(\"google_sheet_id\");\n if (!sheetId) throw new Error(\"Google Sheet ID not configured. Admin must set it in Settings.\");\n return { sa, sheetId };\n}\n\n// Read a sheet's values (all rows including header)\nexport async function readSheet(sheetName: string): Promise {\n const { sa, sheetId } = await getSheetCreds();\n const range = `${sheetName}!A:Z`;\n const data = await gsheet_call(sa, sheetId, \"GET\", `values/${encodeURIComponent(range)}?majorDimension=ROWS`, {});\n return data.values || [];\n}\n\n// Convert raw sheet rows (header + data) to array of objects\nexport function parseSheetRows(rows: any[][]): Record[] {\n if (rows.length < 2) return [];\n const headers = rows[0].map((h: string) => h?.toString().trim() || \"\");\n const items: Record[] = [];\n for (let i = 1; i < rows.length; i++) {\n if (!rows[i] || rows[i].every((c: any) => !c)) continue;\n const obj: Record = { sheet_row_num: i + 1 };\n for (let j = 0; j < headers.length; j++) {\n const key = headers[j].toLowerCase().replace(/\\s+/g, \"_\").replace(/[^a-z0-9_]/g, \"\");\n obj[key] = rows[i][j] || \"\";\n }\n items.push(obj);\n }\n return items;\n}\n\n// Sync inventory from Google Sheets\nexport async function syncInventory(): Promise<{ success: boolean; count: number; message: string }> {\n try {\n const rows = await readSheet(SHEET_NAMES.INVENTORY);\n const items = parseSheetRows(rows).map((item, idx) => ({\n item_id: item.item_id || `INV-${idx + 1}`,\n oem: item.oem || \"\",\n system: item.system || \"\",\n subsystem: item.subsystem || \"\",\n material_name: item.material_name || item.materialname || \"\",\n part_number: item.part_number || item.partnumber || \"\",\n description: item.description || \"\",\n qty: parseInt(item.qty) || 0,\n available_qty: parseInt(item.available_qty || item.availableqty) || parseInt(item.qty) || 0,\n repair_qty: parseInt(item.repair_qty || item.repairqty) || 0,\n issued_qty: parseInt(item.issued_qty || item.issuedqty) || 0,\n returned_qty: parseInt(item.returned_qty || item.returnedqty) || 0,\n location: item.location || \"\",\n rack: item.rack || \"\",\n shelf: item.shelf || \"\",\n vendor: item.vendor || \"\",\n warranty: item.warranty || \"\",\n dlp_expiry: item.dlp_expiry || item.dlpexpiry || \"\",\n status: item.status || \"available\",\n sheet_row_num: item.sheet_row_num,\n }));\n await syncInventoryFromSheet(items);\n await setSetting(\"last_sync\", new Date().toISOString());\n return { success: true, count: items.length, message: `Synced ${items.length} items from Google Sheets` };\n } catch (e) {\n return { success: false, count: 0, message: e.message };\n }\n}\n\n// Write data to a sheet (append)\nexport async function appendToSheet(sheetName: string, values: any[][]): Promise {\n const { sa, sheetId } = await getSheetCreds();\n const range = `${sheetName}!A1:Z1`;\n await gsheet_call(sa, sheetId, \"POST\", `values/${encodeURIComponent(range)}:append?valueInputOption=RAW`, { values });\n}\n\n// Update a specific row in a sheet\nexport async function updateSheetRow(sheetName: string, rowNum: number, values: any[]): Promise {\n const { sa, sheetId } = await getSheetCreds();\n const range = `${sheetName}!A${rowNum}:Z${rowNum}`;\n await gsheet_call(sa, sheetId, \"PUT\", `values/${encodeURIComponent(range)}?valueInputOption=RAW`, { values });\n}\n\n// Get list of sheet tabs in the spreadsheet\nexport async function getSheetTabs(): Promise {\n const { sa, sheetId } = await getSheetCreds();\n const data = await gsheet_call(sa, sheetId, \"GET\", \"?fields=sheets(properties.title)\", {});\n return data.sheets?.map((s: any) => s.properties?.title).filter(Boolean) || [];\n}\n\n// Test connection to Google Sheets\nexport async function testConnection(): Promise<{ success: boolean; tabs: string[]; message: string }> {\n try {\n const tabs = await getSheetTabs();\n return { success: true, tabs, message: `Connected. Found ${tabs.length} sheets: ${tabs.join(\", \")}` };\n } catch (e) {\n return { success: false, tabs: [], message: e.message };\n }\n}\n\n// Fetch vendor data from sheet\nexport async function fetchVendors(): Promise[]> {\n try {\n const rows = await readSheet(SHEET_NAMES.VENDORS);\n return parseSheetRows(rows);\n } catch {\n return [];\n }\n}\n\n// Fetch trainset data from sheet\nexport async function fetchTrainsets(): Promise[]> {\n try {\n const rows = await readSheet(SHEET_NAMES.TRAINSETS);\n return parseSheetRows(rows);\n } catch {\n return [];\n }\n}\n",[],[179,224],"ae1ee05a-aab9-42ec-b897-d998cc035e9e","documents.ts","de3b7800-7fbe-11f1-a8cc-1607ee4eb77e",4,["D",1784059317318],"// Document Generation: Gate Pass, Reports, Excel/CSV Export with BEML Letterhead\nimport { getAllSettings } from \"./db.ts\";\n\n// Generate CSV from data\nexport function generateCSV(headers: string[], rows: any[][]): string {\n const escape = (val: any) => {\n const s = String(val ?? \"\");\n if (s.includes(\",\") || s.includes('\"') || s.includes(\"\\n\")) {\n return `\"${s.replace(/\"/g, '\"\"')}\"`;\n }\n return s;\n };\n const lines = [headers.map(escape).join(\",\")];\n for (const row of rows) {\n lines.push(row.map(escape).join(\",\"));\n }\n return lines.join(\"\\n\");\n}\n\n// Generate HTML page for printing (Gate Pass with BEML Letterhead)\nexport async function generateGatePassHTML(gp: Record, settings: Record): string {\n const companyName = settings.company_name || \"BEML LIMITED\";\n const division = settings.company_division || \"KMRCL\";\n const address = settings.company_address || \"Bengaluru, Karnataka, India\";\n let materials: any[] = [];\n try { materials = JSON.parse(gp.material_details || \"[]\"); } catch { /* empty */ }\n\n return `\n\n\n\n\nGate Pass - ${gp.gatepass_no}\n\n\n\n

BEML

${companyName}

${division}

${address}

MATERIAL GATE PASS

Gate Pass No: ${gp.gatepass_no}

\n \n \n \n \n \n \n

Date of Issue	${new Date(gp.issue_date).toLocaleDateString(\"en-IN\")}	Status	${gp.status?.toUpperCase()}
Vendor Name	${gp.vendor_name}	Vehicle No	${gp.vehicle_no}
Vendor Address	${gp.vendor_address}
Driver Name	${gp.driver_name}	Generated By	${gp.generated_by}
Expected Return	${gp.expected_return_date ? new Date(gp.expected_return_date).toLocaleDateString(\"en-IN\") : \"N/A\"}	Actual Return	${gp.actual_return_date ? new Date(gp.actual_return_date).toLocaleDateString(\"en-IN\") : \"Pending\"}

\n \n \n \n ${materials.length > 0 ? materials.map((m: any, i: number) => \n ``\n ).join(\"\") : ''}\n \n

Sl	Material Name	Part Number	Qty	Condition
${i + 1}	${m.material_name \|\| \"\"}	${m.part_number \|\| \"\"}	${m.qty \|\| \"\"}	${m.condition \|\| \"Faulty\"}
No materials listed

Prepared By

Store In-Charge

Security Officer

\n \n

\n\n`;\n}\n\n// Generate Material Issue Slip HTML\nexport async function generateIssueSlipHTML(issue: Record, settings: Record): string> {\n const companyName = settings.company_name || \"BEML LIMITED\";\n const division = settings.company_division || \"KMRCL\";\n const address = settings.company_address || \"Bengaluru, Karnataka, India\";\n\n return `\n\n\n\nMaterial Issue Slip - ${issue.issue_no}\n\n\n\n

BEML

${companyName}

${division}

${address}

MATERIAL ISSUE SLIP

Issue No: ${issue.issue_no}

\n \n \n \n \n \n \n \n \n \n

Date	${new Date(issue.issue_date).toLocaleDateString(\"en-IN\")}	Status	${issue.status?.toUpperCase()}
Officer	${issue.officer_name}	Issued By	${issue.issued_by}
Material	${issue.material_name}	Part Number	${issue.part_number}
Healthy Part	${issue.healthy_part \|\| \"N/A\"}	Faulty Part	${issue.faulty_part \|\| \"N/A\"}
Quantity	${issue.qty}	Trainset	${issue.trainset \|\| \"N/A\"}
Car Number	${issue.car \|\| \"N/A\"}	NCR No	${issue.ncr \|\| \"N/A\"}
Job Card	${issue.jobcard \|\| \"N/A\"}	Issued To	${issue.issued_to \|\| \"N/A\"}
Reason	${issue.reason \|\| \"N/A\"}

Issued By (Store)

Received By (Officer)

Authorized By

\n \n

\n\n`;\n}\n\n// Inventory CSV export\nexport function exportInventoryCSV(items: any[]): string {\n const headers = [\"Item ID\", \"OEM\", \"System\", \"Subsystem\", \"Material Name\", \"Part Number\", \"Description\", \"Qty\", \"Available\", \"Repair\", \"Issued\", \"Returned\", \"Location\", \"Rack\", \"Shelf\", \"Vendor\", \"Warranty\", \"DLP Expiry\", \"Status\", \"Updated Date\"];\n const rows = items.map((i: any) => [i.item_id, i.oem, i.system, i.subsystem, i.material_name, i.part_number, i.description, i.qty, i.available_qty, i.repair_qty, i.issued_qty, i.returned_qty, i.location, i.rack, i.shelf, i.vendor, i.warranty, i.dlp_expiry, i.status, i.updated_date]);\n return generateCSV(headers, rows);\n}\n\n// Requests CSV export\nexport function exportRequestsCSV(items: any[]): string {\n const headers = [\"Request No\", \"Officer\", \"Material\", \"Part Number\", \"Qty\", \"Trainset\", \"Car\", \"NCR\", \"Job Card\", \"Reason\", \"Priority\", \"Status\", \"Created At\", \"Approved By\"];\n const rows = items.map((i: any) => [i.request_no, i.officer_name, i.material_name, i.part_number, i.qty, i.trainset, i.car, i.ncr, i.jobcard, i.reason, i.priority, i.status, i.created_at, i.approved_by]);\n return generateCSV(headers, rows);\n}\n\n// Issues CSV export\nexport function exportIssuesCSV(items: any[]): string {\n const headers = [\"Issue No\", \"Officer\", \"Material\", \"Part Number\", \"Healthy Part\", \"Faulty Part\", \"Qty\", \"Trainset\", \"Car\", \"NCR\", \"Job Card\", \"Issued By\", \"Issue Date\", \"Status\"];\n const rows = items.map((i: any) => [i.issue_no, i.officer_name, i.material_name, i.part_number, i.healthy_part, i.faulty_part, i.qty, i.trainset, i.car, i.ncr, i.jobcard, i.issued_by, i.issue_date, i.status]);\n return generateCSV(headers, rows);\n}\n\n// Gate Passes CSV export\nexport function exportGatePassesCSV(items: any[]): string {\n const headers = [\"Gate Pass No\", \"Vendor\", \"Vehicle No\", \"Driver\", \"Issue Date\", \"Expected Return\", \"Actual Return\", \"Status\", \"Generated By\"];\n const rows = items.map((i: any) => [i.gatepass_no, i.vendor_name, i.vehicle_no, i.driver_name, i.issue_date, i.expected_return_date, i.actual_return_date, i.status, i.generated_by]);\n return generateCSV(headers, rows);\n}\n",[],[179,232],"e948fff5-0e3e-4b82-9f33-6143be697c86","db.ts","b3eb2ae6-7fbe-11f1-8121-1607ee4eb77e",["D",1784059246410],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { createHash, randomBytes } from \"node:crypto\";\n\n// ─── Password Hashing ───\nconst SALT = \"beml_kmrcl_2024_salt\";\nexport function hashPassword(password: string): string {\n return createHash(\"sha256\").update(password + SALT).digest(\"hex\");\n}\nexport function generateToken(): string {\n return randomBytes(32).toString(\"hex\");\n}\n\n// ─── Schema Initialization ───\nexport async function initDB() {\n await sqlite.batch([\n { sql: `CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n email TEXT UNIQUE NOT NULL,\n password_hash TEXT NOT NULL,\n role TEXT NOT NULL DEFAULT 'officer',\n department TEXT DEFAULT '',\n mobile TEXT DEFAULT '',\n status TEXT DEFAULT 'active',\n created_at TEXT DEFAULT (datetime('now'))\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n expires_at TEXT NOT NULL,\n created_at TEXT DEFAULT (datetime('now')),\n FOREIGN KEY (user_id) REFERENCES users(id)\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS inventory (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n item_id TEXT,\n oem TEXT DEFAULT '',\n system TEXT DEFAULT '',\n subsystem TEXT DEFAULT '',\n material_name TEXT NOT NULL,\n part_number TEXT DEFAULT '',\n description TEXT DEFAULT '',\n qty INTEGER DEFAULT 0,\n available_qty INTEGER DEFAULT 0,\n repair_qty INTEGER DEFAULT 0,\n issued_qty INTEGER DEFAULT 0,\n returned_qty INTEGER DEFAULT 0,\n location TEXT DEFAULT '',\n rack TEXT DEFAULT '',\n shelf TEXT DEFAULT '',\n vendor TEXT DEFAULT '',\n warranty TEXT DEFAULT '',\n dlp_expiry TEXT DEFAULT '',\n status TEXT DEFAULT 'available',\n updated_date TEXT DEFAULT (datetime('now')),\n updated_by TEXT DEFAULT 'system',\n sheet_row_num INTEGER\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS material_requests (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n request_no TEXT UNIQUE NOT NULL,\n officer_id INTEGER,\n officer_name TEXT NOT NULL,\n material_name TEXT NOT NULL,\n part_number TEXT DEFAULT '',\n qty INTEGER DEFAULT 1,\n trainset TEXT DEFAULT '',\n car TEXT DEFAULT '',\n ncr TEXT DEFAULT '',\n jobcard TEXT DEFAULT '',\n reason TEXT DEFAULT '',\n priority TEXT DEFAULT 'normal',\n maintenance_type TEXT DEFAULT '',\n location TEXT DEFAULT '',\n engineer_name TEXT DEFAULT '',\n status TEXT DEFAULT 'pending',\n approved_by TEXT DEFAULT '',\n approved_at TEXT,\n rejected_reason TEXT DEFAULT '',\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS material_issues (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n issue_no TEXT UNIQUE NOT NULL,\n request_id INTEGER,\n officer_name TEXT NOT NULL,\n material_name TEXT NOT NULL,\n part_number TEXT DEFAULT '',\n healthy_part TEXT DEFAULT '',\n faulty_part TEXT DEFAULT '',\n qty INTEGER DEFAULT 1,\n trainset TEXT DEFAULT '',\n car TEXT DEFAULT '',\n ncr TEXT DEFAULT '',\n jobcard TEXT DEFAULT '',\n reason TEXT DEFAULT '',\n issued_by TEXT NOT NULL,\n issued_to TEXT DEFAULT '',\n issue_date TEXT DEFAULT (datetime('now')),\n status TEXT DEFAULT 'issued',\n inventory_item_id INTEGER\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS gate_passes (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n gatepass_no TEXT UNIQUE NOT NULL,\n issue_id INTEGER,\n vendor_name TEXT DEFAULT '',\n vendor_address TEXT DEFAULT '',\n vehicle_no TEXT DEFAULT '',\n driver_name TEXT DEFAULT '',\n material_details TEXT DEFAULT '',\n issue_date TEXT DEFAULT (datetime('now')),\n expected_return_date TEXT,\n actual_return_date TEXT,\n status TEXT DEFAULT 'open',\n generated_by TEXT NOT NULL,\n created_at TEXT DEFAULT (datetime('now'))\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS repairs (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n gatepass_id INTEGER,\n issue_id INTEGER,\n part_number TEXT DEFAULT '',\n material_name TEXT DEFAULT '',\n vendor TEXT DEFAULT '',\n repair_status TEXT DEFAULT 'sent',\n expected_date TEXT,\n received_date TEXT,\n inspection_result TEXT DEFAULT '',\n remarks TEXT DEFAULT '',\n created_at TEXT DEFAULT (datetime('now')),\n updated_at TEXT DEFAULT (datetime('now'))\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS settings (\n key TEXT PRIMARY KEY,\n value TEXT\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS audit_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_name TEXT,\n action TEXT,\n module TEXT,\n old_value TEXT DEFAULT '',\n new_value TEXT DEFAULT '',\n date TEXT DEFAULT (datetime('now')),\n ip TEXT DEFAULT '',\n device TEXT DEFAULT ''\n )` },\n ]);\n\n // Seed default users if none exist\n const userCount = await sqlite.execute(\"SELECT COUNT(*) as cnt FROM users\");\n if (userCount.rows[0].cnt === 0) {\n await sqlite.batch([\n { sql: `INSERT INTO users (name, email, password_hash, role, department, mobile) VALUES (?, ?, ?, 'admin', 'IT', '9999999999')`,\n args: [\"System Admin\", \"admin@beml.in\", hashPassword(\"admin123\")] },\n { sql: `INSERT INTO users (name, email, password_hash, role, department, mobile) VALUES (?, ?, ?, 'store', 'Stores', '8888888888')`,\n args: [\"Store Manager\", \"store@beml.in\", hashPassword(\"store123\")] },\n { sql: `INSERT INTO users (name, email, password_hash, role, department, mobile) VALUES (?, ?, ?, 'officer', 'Maintenance', '7777777777')`,\n args: [\"Maintenance Officer\", \"officer@beml.in\", hashPassword(\"officer123\")] },\n ]);\n }\n\n // Seed default settings\n const settingsCount = await sqlite.execute(\"SELECT COUNT(*) as cnt FROM settings\");\n if (settingsCount.rows[0].cnt === 0) {\n await sqlite.batch([\n { sql: `INSERT INTO settings (key, value) VALUES ('company_name', 'BEML LIMITED')` },\n { sql: `INSERT INTO settings (key, value) VALUES ('company_division', 'KMRCL - Kolkata Metro Rail Corporation Limited')` },\n { sql: `INSERT INTO settings (key, value) VALUES ('company_address', 'BEML Limited, Bengaluru - 560013, Karnataka, India')` },\n { sql: `INSERT INTO settings (key, value) VALUES ('google_sheet_id', '')` },\n { sql: `INSERT INTO settings (key, value) VALUES ('google_drive_folder', '')` },\n { sql: `INSERT INTO settings (key, value) VALUES ('sync_interval', '5')` },\n { sql: `INSERT INTO settings (key, value) VALUES ('last_sync', '')` },\n ]);\n }\n}\n\n// ─── Auth Functions ───\nexport async function login(email: string, password: string): Promise<{ token: string; user: any } | null> {\n const hash = hashPassword(password);\n const result = await sqlite.execute({\n sql: \"SELECT * FROM users WHERE email = ? AND password_hash = ? AND status = 'active'\",\n args: [email, hash],\n });\n if (result.rows.length === 0) return null;\n const user = result.rows[0];\n const token = generateToken();\n const expires = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000).toISOString();\n await sqlite.execute({\n sql: \"INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)\",\n args: [token, user.id, expires],\n });\n return { token, user: { id: user.id, name: user.name, email: user.email, role: user.role, department: user.department, mobile: user.mobile } };\n}\n\nexport async function validateToken(token: string): Promise {\n if (!token) return null;\n const result = await sqlite.execute({\n sql: `SELECT u.* FROM sessions s JOIN users u ON s.user_id = u.id \n WHERE s.token = ? AND s.expires_at > datetime('now') AND u.status = 'active'`,\n args: [token],\n });\n if (result.rows.length === 0) return null;\n const u = result.rows[0];\n return { id: u.id, name: u.name, email: u.email, role: u.role, department: u.department, mobile: u.mobile };\n}\n\nexport async function logout(token: string): Promise {\n await sqlite.execute({ sql: \"DELETE FROM sessions WHERE token = ?\", args: [token] });\n}\n\n// ─── User CRUD ───\nexport async function getUsers() {\n const r = await sqlite.execute(\"SELECT id, name, email, role, department, mobile, status, created_at FROM users ORDER BY id\");\n return r.rows;\n}\n\nexport async function createUser(name: string, email: string, password: string, role: string, department: string, mobile: string) {\n await sqlite.execute({\n sql: \"INSERT INTO users (name, email, password_hash, role, department, mobile) VALUES (?, ?, ?, ?, ?, ?)\",\n args: [name, email, hashPassword(password), role, department, mobile],\n });\n}\n\nexport async function updateUser(id: number, data: Record) {\n const fields: string[] = [];\n const values: any[] = [];\n for (const [k, v] of Object.entries(data)) {\n if (k === \"password\") {\n fields.push(\"password_hash = ?\");\n values.push(hashPassword(v));\n } else if ([\"name\", \"email\", \"role\", \"department\", \"mobile\", \"status\"].includes(k)) {\n fields.push(`${k} = ?`);\n values.push(v);\n }\n }\n if (fields.length === 0) return;\n values.push(id);\n await sqlite.execute({ sql: `UPDATE users SET ${fields.join(\", \")} WHERE id = ?`, args: values });\n}\n\nexport async function deleteUser(id: number) {\n await sqlite.execute({ sql: \"DELETE FROM users WHERE id = ?\", args: [id] });\n}\n\n// ─── Inventory CRUD ───\nexport async function getInventory(filters?: Record) {\n let sql = \"SELECT * FROM inventory WHERE 1=1\";\n const args: any[] = [];\n if (filters?.search) {\n sql += ` AND (material_name LIKE ? OR part_number LIKE ? OR oem LIKE ? OR system LIKE ? OR vendor LIKE ?)`;\n const s = `%${filters.search}%`;\n args.push(s, s, s, s, s);\n }\n if (filters?.oem) { sql += ` AND oem = ?`; args.push(filters.oem); }\n if (filters?.system) { sql += ` AND system = ?`; args.push(filters.system); }\n if (filters?.status) { sql += ` AND status = ?`; args.push(filters.status); }\n if (filters?.trainset) { sql += ` AND id IN (SELECT inventory_item_id FROM material_issues WHERE trainset = ?)`; args.push(filters.trainset); }\n sql += \" ORDER BY id DESC\";\n if (filters?.limit) { sql += ` LIMIT ${parseInt(filters.limit)}`; }\n const r = await sqlite.execute({ sql, args });\n return r.rows;\n}\n\nexport async function getInventoryItem(id: number) {\n const r = await sqlite.execute({ sql: \"SELECT * FROM inventory WHERE id = ?\", args: [id] });\n return r.rows[0] || null;\n}\n\nexport async function getInventoryStats() {\n const r = await sqlite.execute(`\n SELECT \n COUNT(*) as total,\n SUM(CASE WHEN status = 'available' THEN 1 ELSE 0 END) as available,\n SUM(CASE WHEN status = 'issued' THEN 1 ELSE 0 END) as issued,\n SUM(CASE WHEN status = 'repair' THEN 1 ELSE 0 END) as repair,\n SUM(CASE WHEN status = 'replacement' THEN 1 ELSE 0 END) as replacement,\n SUM(available_qty) as total_available_qty,\n SUM(repair_qty) as total_repair_qty,\n SUM(issued_qty) as total_issued_qty\n FROM inventory\n `);\n return r.rows[0];\n}\n\nexport async function syncInventoryFromSheet(items: Record[]) {\n await sqlite.execute(\"DELETE FROM inventory\");\n for (const item of items) {\n await sqlite.execute({\n sql: `INSERT INTO inventory (item_id, oem, system, subsystem, material_name, part_number, description, qty, available_qty, repair_qty, issued_qty, returned_qty, location, rack, shelf, vendor, warranty, dlp_expiry, status, updated_date, updated_by, sheet_row_num)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n item.item_id || \"\", item.oem || \"\", item.system || \"\", item.subsystem || \"\",\n item.material_name || \"\", item.part_number || \"\", item.description || \"\",\n item.qty || 0, item.available_qty || 0, item.repair_qty || 0,\n item.issued_qty || 0, item.returned_qty || 0,\n item.location || \"\", item.rack || \"\", item.shelf || \"\",\n item.vendor || \"\", item.warranty || \"\", item.dlp_expiry || \"\",\n item.status || \"available\", new Date().toISOString(), \"system\", item.sheet_row_num || null,\n ],\n });\n }\n}\n\n// ─── Material Request CRUD ───\nfunction genRequestNo() {\n return `MR-${new Date().getFullYear()}-${String(Date.now()).slice(-6)}`;\n}\n\nexport async function getRequests(filters?: Record) {\n let sql = \"SELECT * FROM material_requests WHERE 1=1\";\n const args: any[] = [];\n if (filters?.status) { sql += ` AND status = ?`; args.push(filters.status); }\n if (filters?.officer) { sql += ` AND officer_name LIKE ?`; args.push(`%${filters.officer}%`); }\n if (filters?.trainset) { sql += ` AND trainset = ?`; args.push(filters.trainset); }\n if (filters?.search) {\n sql += ` AND (material_name LIKE ? OR part_number LIKE ? OR request_no LIKE ? OR ncr LIKE ? OR jobcard LIKE ?)`;\n const s = `%${filters.search}%`;\n args.push(s, s, s, s, s);\n }\n if (filters?.dateFrom) { sql += ` AND created_at >= ?`; args.push(filters.dateFrom); }\n if (filters?.dateTo) { sql += ` AND created_at <= ?`; args.push(filters.dateTo); }\n sql += \" ORDER BY id DESC\";\n const r = await sqlite.execute({ sql, args });\n return r.rows;\n}\n\nexport async function createRequest(data: Record) {\n const requestNo = genRequestNo();\n await sqlite.execute({\n sql: `INSERT INTO material_requests (request_no, officer_id, officer_name, material_name, part_number, qty, trainset, car, ncr, jobcard, reason, priority, maintenance_type, location, engineer_name, status)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'pending')`,\n args: [requestNo, data.officer_id || null, data.officer_name, data.material_name,\n data.part_number || \"\", data.qty || 1, data.trainset || \"\", data.car || \"\",\n data.ncr || \"\", data.jobcard || \"\", data.reason || \"\", data.priority || \"normal\",\n data.maintenance_type || \"\", data.location || \"\", data.engineer_name || \"\"],\n });\n const r = await sqlite.execute({ sql: \"SELECT * FROM material_requests WHERE request_no = ?\", args: [requestNo] });\n return r.rows[0];\n}\n\nexport async function updateRequestStatus(id: number, status: string, approvedBy: string, reason?: string) {\n if (status === \"approved\") {\n await sqlite.execute({\n sql: `UPDATE material_requests SET status = 'approved', approved_by = ?, approved_at = datetime('now'), updated_at = datetime('now') WHERE id = ?`,\n args: [approvedBy, id],\n });\n } else if (status === \"rejected\") {\n await sqlite.execute({\n sql: `UPDATE material_requests SET status = 'rejected', rejected_reason = ?, updated_at = datetime('now') WHERE id = ?`,\n args: [reason || \"\", id],\n });\n } else {\n await sqlite.execute({\n sql: `UPDATE material_requests SET status = ?, updated_at = datetime('now') WHERE id = ?`,\n args: [status, id],\n });\n }\n}\n\n// ─── Material Issue CRUD ───\nfunction genIssueNo() {\n return `ISS-${new Date().getFullYear()}-${String(Date.now()).slice(-6)}`;\n}\n\nexport async function getIssues(filters?: Record) {\n let sql = \"SELECT * FROM material_issues WHERE 1=1\";\n const args: any[] = [];\n if (filters?.status) { sql += ` AND status = ?`; args.push(filters.status); }\n if (filters?.trainset) { sql += ` AND trainset = ?`; args.push(filters.trainset); }\n if (filters?.search) {\n sql += ` AND (material_name LIKE ? OR part_number LIKE ? OR issue_no LIKE ? OR ncr LIKE ? OR jobcard LIKE ?)`;\n const s = `%${filters.search}%`;\n args.push(s, s, s, s, s);\n }\n if (filters?.dateFrom) { sql += ` AND issue_date >= ?`; args.push(filters.dateFrom); }\n if (filters?.dateTo) { sql += ` AND issue_date <= ?`; args.push(filters.dateTo); }\n sql += \" ORDER BY id DESC\";\n const r = await sqlite.execute({ sql, args });\n return r.rows;\n}\n\nexport async function createIssue(data: Record) {\n const issueNo = genIssueNo();\n await sqlite.execute({\n sql: `INSERT INTO material_issues (issue_no, request_id, officer_name, material_name, part_number, healthy_part, faulty_part, qty, trainset, car, ncr, jobcard, reason, issued_by, issued_to, status, inventory_item_id)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'issued', ?)`,\n args: [issueNo, data.request_id || null, data.officer_name, data.material_name,\n data.part_number || \"\", data.healthy_part || \"\", data.faulty_part || \"\",\n data.qty || 1, data.trainset || \"\", data.car || \"\", data.ncr || \"\",\n data.jobcard || \"\", data.reason || \"\", data.issued_by, data.issued_to || \"\",\n data.inventory_item_id || null],\n });\n // Reduce inventory available_qty\n if (data.inventory_item_id) {\n await sqlite.execute({\n sql: `UPDATE inventory SET available_qty = available_qty - ?, issued_qty = issued_qty + ?, status = CASE WHEN available_qty - ? <= 0 THEN 'issued' ELSE status END, updated_date = datetime('now') WHERE id = ?`,\n args: [data.qty || 1, data.qty || 1, data.qty || 1, data.inventory_item_id],\n });\n }\n // Update request status\n if (data.request_id) {\n await updateRequestStatus(data.request_id, \"issued\", data.issued_by);\n }\n const r = await sqlite.execute({ sql: \"SELECT * FROM material_issues WHERE issue_no = ?\", args: [issueNo] });\n return r.rows[0];\n}\n\n// ─── Gate Pass CRUD ───\nfunction genGatePassNo() {\n return `GP-${new Date().getFullYear()}-${String(Date.now()).slice(-6)}`;\n}\n\nexport async function getGatePasses(filters?: Record) {\n let sql = \"SELECT * FROM gate_passes WHERE 1=1\";\n const args: any[] = [];\n if (filters?.status) { sql += ` AND status = ?`; args.push(filters.status); }\n if (filters?.search) {\n sql += ` AND (gatepass_no LIKE ? OR vendor_name LIKE ? OR vehicle_no LIKE ?)`;\n const s = `%${filters.search}%`;\n args.push(s, s, s);\n }\n if (filters?.dateFrom) { sql += ` AND issue_date >= ?`; args.push(filters.dateFrom); }\n if (filters?.dateTo) { sql += ` AND issue_date <= ?`; args.push(filters.dateTo); }\n sql += \" ORDER BY id DESC\";\n const r = await sqlite.execute({ sql, args });\n return r.rows;\n}\n\nexport async function createGatePass(data: Record) {\n const gatepassNo = genGatePassNo();\n await sqlite.execute({\n sql: `INSERT INTO gate_passes (gatepass_no, issue_id, vendor_name, vendor_address, vehicle_no, driver_name, material_details, issue_date, expected_return_date, status, generated_by)\n VALUES (?, ?, ?, ?, ?, ?, ?, datetime('now'), ?, 'open', ?)`,\n args: [gatepassNo, data.issue_id || null, data.vendor_name || \"\", data.vendor_address || \"\",\n data.vehicle_no || \"\", data.driver_name || \"\", data.material_details || \"\",\n data.expected_return_date || \"\", data.generated_by],\n });\n const r = await sqlite.execute({ sql: \"SELECT * FROM gate_passes WHERE gatepass_no = ?\", args: [gatepassNo] });\n return r.rows[0];\n}\n\nexport async function updateGatePassStatus(id: number, status: string, returnDate?: string) {\n if (status === \"closed\" && returnDate) {\n await sqlite.execute({ sql: `UPDATE gate_passes SET status = 'closed', actual_return_date = ? WHERE id = ?`, args: [returnDate, id] });\n } else {\n await sqlite.execute({ sql: `UPDATE gate_passes SET status = ? WHERE id = ?`, args: [status, id] });\n }\n}\n\n// ─── Repair CRUD ───\nexport async function getRepairs(filters?: Record) {\n let sql = \"SELECT * FROM repairs WHERE 1=1\";\n const args: any[] = [];\n if (filters?.status) { sql += ` AND repair_status = ?`; args.push(filters.status); }\n if (filters?.search) {\n sql += ` AND (part_number LIKE ? OR material_name LIKE ? OR vendor LIKE ?)`;\n const s = `%${filters.search}%`;\n args.push(s, s, s);\n }\n sql += \" ORDER BY id DESC\";\n const r = await sqlite.execute({ sql, args });\n return r.rows;\n}\n\nexport async function createRepair(data: Record) {\n await sqlite.execute({\n sql: `INSERT INTO repairs (gatepass_id, issue_id, part_number, material_name, vendor, repair_status, expected_date, remarks)\n VALUES (?, ?, ?, ?, ?, 'sent', ?, ?)`,\n args: [data.gatepass_id || null, data.issue_id || null, data.part_number || \"\",\n data.material_name || \"\", data.vendor || \"\", data.expected_date || \"\", data.remarks || \"\"],\n });\n const r = await sqlite.execute(\"SELECT * FROM repairs ORDER BY id DESC LIMIT 1\");\n return r.rows[0];\n}\n\nexport async function updateRepair(id: number, data: Record) {\n const fields: string[] = [];\n const values: any[] = [];\n for (const [k, v] of Object.entries(data)) {\n if ([\"repair_status\", \"expected_date\", \"received_date\", \"inspection_result\", \"remarks\", \"vendor\"].includes(k)) {\n fields.push(`${k} = ?`);\n values.push(v);\n }\n }\n fields.push(\"updated_at = datetime('now')\");\n if (fields.length === 0) return;\n values.push(id);\n await sqlite.execute({ sql: `UPDATE repairs SET ${fields.join(\", \")} WHERE id = ?`, args: values });\n\n // If repair complete and received, update inventory\n if (data.repair_status === \"received\" && data.inspection_result === \"accepted\") {\n const repair = await sqlite.execute({ sql: \"SELECT * FROM repairs WHERE id = ?\", args: [id] });\n if (repair.rows[0]) {\n const r = repair.rows[0] as any;\n if (r.issue_id) {\n const issue = await sqlite.execute({ sql: \"SELECT * FROM material_issues WHERE id = ?\", args: [r.issue_id] });\n if (issue.rows[0]) {\n const iss = issue.rows[0] as any;\n if (iss.inventory_item_id) {\n await sqlite.execute({\n sql: `UPDATE inventory SET available_qty = available_qty + ?, repair_qty = repair_qty - ?, status = 'available', updated_date = datetime('now') WHERE id = ?`,\n args: [iss.qty || 1, iss.qty || 1, iss.inventory_item_id],\n });\n }\n }\n }\n }\n }\n}\n\n// ─── Settings ───\nexport async function getSetting(key: string): Promise {\n const r = await sqlite.execute({ sql: \"SELECT value FROM settings WHERE key = ?\", args: [key] });\n return r.rows[0]?.value as string || \"\";\n}\n\nexport async function setSetting(key: string, value: string) {\n await sqlite.execute({ sql: `INSERT INTO settings (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = ?`, args: [key, value, value] });\n}\n\nexport async function getAllSettings() {\n const r = await sqlite.execute(\"SELECT key, value FROM settings\");\n const settings: Record = {};\n for (const row of r.rows) {\n settings[row.key as string] = row.value as string;\n }\n return settings;\n}\n\n// ─── Audit Log ───\nexport async function logAudit(userName: string, action: string, module: string, oldValue: string, newValue: string, ip: string) {\n await sqlite.execute({\n sql: \"INSERT INTO audit_log (user_name, action, module, old_value, new_value, ip) VALUES (?, ?, ?, ?, ?, ?)\",\n args: [userName, action, module, oldValue, newValue, ip],\n });\n}\n\nexport async function getAuditLogs(filters?: Record) {\n let sql = \"SELECT * FROM audit_log WHERE 1=1\";\n const args: any[] = [];\n if (filters?.user) { sql += ` AND user_name LIKE ?`; args.push(`%${filters.user}%`); }\n if (filters?.module) { sql += ` AND module = ?`; args.push(filters.module); }\n if (filters?.dateFrom) { sql += ` AND date >= ?`; args.push(filters.dateFrom); }\n if (filters?.dateTo) { sql += ` AND date <= ?`; args.push(filters.dateTo); }\n sql += \" ORDER BY id DESC LIMIT 200\";\n const r = await sqlite.execute({ sql, args });\n return r.rows;\n}\n\n// ─── Dashboard Stats ───\nexport async function getDashboardStats() {\n const invStats = await getInventoryStats();\n const reqStats = await sqlite.execute(`\n SELECT \n SUM(CASE WHEN status = 'pending' THEN 1 ELSE 0 END) as open_requests,\n SUM(CASE WHEN status = 'approved' THEN 1 ELSE 0 END) as approved_requests,\n SUM(CASE WHEN status = 'rejected' THEN 1 ELSE 0 END) as rejected_requests,\n SUM(CASE WHEN status = 'issued' THEN 1 ELSE 0 END) as issued_requests,\n COUNT(*) as total_requests\n FROM material_requests\n `);\n const issueStats = await sqlite.execute(`\n SELECT \n COUNT(*) as total_issues,\n SUM(CASE WHEN date(issue_date) = date('now') THEN 1 ELSE 0 END) as today_issues\n FROM material_issues\n `);\n const gpStats = await sqlite.execute(`\n SELECT \n SUM(CASE WHEN status = 'open' THEN 1 ELSE 0 END) as open_gatepass,\n SUM(CASE WHEN status = 'closed' THEN 1 ELSE 0 END) as closed_gatepass\n FROM gate_passes\n `);\n const repairStats = await sqlite.execute(`\n SELECT \n SUM(CASE WHEN repair_status = 'sent' THEN 1 ELSE 0 END) as pending_repair,\n SUM(CASE WHEN repair_status = 'received' THEN 1 ELSE 0 END) as received_repair\n FROM repairs\n `);\n return {\n ...invStats,\n ...reqStats.rows[0],\n ...issueStats.rows[0],\n ...gpStats.rows[0],\n ...repairStats.rows[0],\n };\n}\n",[],[179,240],["D",1784059246410],[211,212,213],[179],"f3a773ec-9565-432d-b22a-96e5632a6027","index.tsx","019f6235-6cdf-725a-9a82-c3958d50db54",["D",1784059096199],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { createRoot } from \"https://esm.sh/react-dom@18.2.0/client\";\nimport { App } from \"./components/App.tsx\";\n\nconst root = document.getElementById(\"root\");\nif (!root) {\n throw new Error(\"No root element found\");\n}\n\ncreateRoot(root).render();",[],[186,250],"3f234ccd-c6c2-41e7-a72e-286ae3d793cf","index.html","019f6235-6cdf-725a-9a82-bf50b8f9f1b4",6,["D",1784059391295],"\n\n \n \n \n \n BEML DLP Inventory Management System\n \n \n \n \n

\n \n \n \n",[],[186,257],"1ec485d4-1cb5-4bc2-ad98-551609edcc2e","favicon.svg","019f6235-6cdf-725a-9a82-b8e09d7be142",["D",1784059096199],"\n",[],[186,265],"4d4aa538-f56f-42f0-bc87-73a6f01693bc","ui.tsx","379c546e-7fbf-11f1-b784-1607ee4eb77e","019f6235-6cdf-725a-9a82-b440f0c6c31e",8,["D",1784059467354],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { ReactNode, useState, useEffect } from \"https://esm.sh/react@18.2.0\";\n\n// ─── Status Badge ───\nconst statusColors: Record = {\n available: \"bg-green-100 text-green-700 border-green-300\",\n issued: \"bg-red-100 text-red-700 border-red-300\",\n repair: \"bg-blue-100 text-blue-700 border-blue-300\",\n replacement: \"bg-purple-100 text-purple-700 border-purple-300\",\n pending: \"bg-yellow-100 text-yellow-700 border-yellow-300\",\n approved: \"bg-green-100 text-green-700 border-green-300\",\n rejected: \"bg-red-100 text-red-700 border-red-300\",\n open: \"bg-orange-100 text-orange-700 border-orange-300\",\n closed: \"bg-gray-100 text-gray-700 border-gray-300\",\n sent: \"bg-blue-100 text-blue-700 border-blue-300\",\n received: \"bg-green-100 text-green-700 border-green-300\",\n active: \"bg-green-100 text-green-700 border-green-300\",\n inactive: \"bg-red-100 text-red-700 border-red-300\",\n};\n\nexport function Badge({ status }: { status: string }) {\n const cls = statusColors[status?.toLowerCase()] || \"bg-gray-100 text-gray-700 border-gray-300\";\n return {status};\n}\n\n// ─── Card ───\nexport function Card({ children, className = \"\" }: { children: ReactNode; className?: string }) {\n return

{children}

;\n}\n\nexport function StatCard({ title, value, icon, color = \"blue\" }: { title: string; value: any; icon: string; color?: string }) {\n const colorMap: Record = {\n blue: \"bg-blue-50 text-blue-600\",\n green: \"bg-green-50 text-green-600\",\n red: \"bg-red-50 text-red-600\",\n yellow: \"bg-yellow-50 text-yellow-600\",\n purple: \"bg-purple-50 text-purple-600\",\n orange: \"bg-orange-50 text-orange-600\",\n gray: \"bg-gray-50 text-gray-600\",\n };\n return (\n \n

{title}

{value ?? 0}

{icon}

\n \n );\n}\n\n// ─── Button ───\nexport function Button({ children, onClick, variant = \"primary\", size = \"md\", disabled, type = \"button\", className = \"\" }: any) {\n const variants: Record = {\n primary: \"bg-blue-600 hover:bg-blue-700 text-white\",\n secondary: \"bg-slate-200 hover:bg-slate-300 text-slate-700\",\n danger: \"bg-red-600 hover:bg-red-700 text-white\",\n success: \"bg-green-600 hover:bg-green-700 text-white\",\n outline: \"border border-slate-300 hover:bg-slate-50 text-slate-700\",\n ghost: \"hover:bg-slate-100 text-slate-600\",\n };\n const sizes: Record = {\n sm: \"px-3 py-1.5 text-xs\",\n md: \"px-4 py-2 text-sm\",\n lg: \"px-6 py-3 text-base\",\n };\n return (\n \n );\n}\n\n// ─── Input ───\nexport function Input({ label, type = \"text\", value, onChange, placeholder, required, className = \"\" }: any) {\n return (\n

\n {label && {label}{required && *}}\n \n

\n );\n}\n\nexport function Select({ label, value, onChange, options, required, className = \"\" }: any) {\n return (\n

\n {label && {label}{required && *}}\n \n

\n );\n}\n\nexport function Textarea({ label, value, onChange, placeholder, required, rows = 3, className = \"\" }: any) {\n return (\n

\n {label && {label}{required && *}}\n

\n    </div>\n  );\n}\n\n// ─── Modal ───\nexport function Modal({ open, onClose, title, children, size = \"md\" }: any) {\n  if (!open) return null;\n  const sizes: Record<string, string> = { sm: \"max-w-md\", md: \"max-w-lg\", lg: \"max-w-2xl\", xl: \"max-w-4xl\" };\n  return (\n    <div class=\"fixed inset-0 z-50 flex items-center justify-center p-4 bg-black/50\" onClick={onClose}>\n      <div class={`bg-white rounded-xl shadow-xl w-full ${sizes[size]} max-h-[90vh] overflow-y-auto`} onClick={e => e.stopPropagation()}>\n        <div class=\"flex items-center justify-between p-4 border-b border-slate-200 sticky top-0 bg-white z-10\">\n          <h3 class=\"text-lg font-semibold text-slate-800\">{title}</h3>\n          <button onClick={onClose} class=\"text-slate-400 hover:text-slate-600 text-2xl leading-none\">×</button>\n        </div>\n        <div class=\"p-4\">{children}</div>\n      </div>\n    </div>\n  );\n}\n\n// ─── Table ───\nexport function Table({ headers, children }: { headers: string[]; children: ReactNode }) {\n  return (\n    <div class=\"overflow-x-auto\">\n      <table class=\"w-full text-sm\">\n        <thead>\n          <tr class=\"border-b-2 border-slate-200\">\n            {headers.map(h => <th class=\"text-left py-2 px-3 font-semibold text-slate-600 whitespace-nowrap\">{h}</th>)}\n          </tr>\n        </thead>\n        <tbody>{children}</tbody>\n      </table>\n    </div>\n  );\n}\n\nexport function Tr({ children, onClick }: any) {\n  return <tr class=\"border-b border-slate-100 hover:bg-slate-50 cursor-default\" onClick={onClick}>{children}</tr>;\n}\n\nexport function Td({ children, className = \"\" }: any) {\n  return <td class={`py-2 px-3 text-slate-700 ${className}`}>{children}</td>;\n}\n\n// ─── Loading ───\nexport function Loading() {\n  return (\n    <div class=\"flex items-center justify-center py-12\">\n      <div class=\"w-8 h-8 border-3 border-blue-200 border-t-blue-600 rounded-full animate-spin\"></div>\n    </div>\n  );\n}\n\n// ─── Empty State ───\nexport function EmptyState({ message, icon = \"📋\" }: { message: string; icon?: string }) {\n  return (\n    <div class=\"text-center py-12 text-slate-400\">\n      <div class=\"text-4xl mb-3\">{icon}</div>\n      <p class=\"text-sm\">{message}</p>\n    </div>\n  );\n}\n\n// ─── Search Bar ───\nexport function SearchBar({ value, onChange, placeholder = \"Search...\" }: any) {\n  return (\n    <div class=\"relative\">\n      <input type=\"text\" value={value} onChange={onChange} placeholder={placeholder}\n        class=\"w-full pl-9 pr-3 py-2 border border-slate-300 rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-blue-500\" />\n      <svg class=\"absolute left-3 top-2.5 w-4 h-4 text-slate-400\" fill=\"none\" stroke=\"currentColor\" viewBox=\"0 0 24 24\">\n        <path stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M21 21l-4.35-4.35M17 11a6 6 0 11-12 0 6 6 0 0112 0z\" />\n      </svg>\n    </div>\n  );\n}\n\n// ─── Toast ───\nexport function useToast() {\n  const [toast, setToast] = useState<{ msg: string; type: string } | null>(null);\n  const showToast = (msg: string, type: string = \"info\") => {\n    setToast({ msg, type });\n    setTimeout(() => setToast(null), 3000);\n  };\n  const toastEl = toast && (\n    <div class=\"fixed bottom-4 right-4 z-50 px-4 py-3 rounded-lg shadow-lg text-sm font-medium text-white\"\n      style={{ background: toast.type === \"error\" ? \"#dc2626\" : toast.type === \"success\" ? \"#16a34a\" : \"#2563eb\" }}>\n      {toast.msg}\n    </div>\n  );\n  return { showToast, toastEl };\n}\n\n// ─── Date Input ───\nexport function DateInput({ label, value, onChange, className = \"\" }: any) {\n  return (\n    <div class={className}>\n      {label && <label class=\"block text-sm font-medium text-slate-600 mb-1\">{label}</label>}\n      <input type=\"date\" value={value} onChange={onChange}\n        class=\"w-full px-3 py-2 border border-slate-300 rounded-lg text-sm focus:outline-none focus:ring-2 focus:ring-blue-500\" />\n    </div>\n  );\n}\n",[],[186,280,272],"components","d4b8b2f9-0599-424f-acf3-71e5a28ff13b","api.ts","0a6ea438-7fbf-11f1-994b-1607ee4eb77e",7,["D",1784059391558],"// API Client - handles all HTTP requests with auth\nconst BASE = \"\";\n\nfunction getToken(): string | null {\n  return localStorage.getItem(\"beml_token\");\n}\n\nexport function setToken(token: string) {\n  localStorage.setItem(\"beml_token\", token);\n}\n\nexport function clearToken() {\n  localStorage.removeItem(\"beml_token\");\n}\n\nexport function getStoredUser(): any | null {\n  const u = localStorage.getItem(\"beml_user\");\n  return u ? JSON.parse(u) : null;\n}\n\nexport function setStoredUser(user: any) {\n  localStorage.setItem(\"beml_user\", JSON.stringify(user));\n}\n\nexport function clearStoredUser() {\n  localStorage.removeItem(\"beml_user\");\n}\n\nasync function apiFetch(path: string, options: RequestInit = {}): Promise<any> {\n  const token = getToken();\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n    ...(options.headers as Record<string, string> || {}),\n  };\n  if (token) headers[\"Authorization\"] = `Bearer ${token}`;\n  const res = await fetch(path, { ...options, headers });\n  if (res.status === 401) {\n    clearToken();\n    clearStoredUser();\n    window.location.hash = \"#/login\";\n    throw new Error(\"Session expired\");\n  }\n  const data = await res.json();\n  if (!res.ok) throw new Error(data.error || \"Request failed\");\n  return data;\n}\n\n// Auth API\nexport const auth = {\n  login: (email: string, password: string) =>\n    apiFetch(\"/api/auth/login\", { method: \"POST\", body: JSON.stringify({ email, password }) }),\n  logout: () => apiFetch(\"/api/auth/logout\", { method: \"POST\" }),\n  me: () => apiFetch(\"/api/auth/me\"),\n};\n\n// Dashboard API\nexport const dashboard = {\n  get: () => apiFetch(\"/api/dashboard\"),\n};\n\n// Inventory API\nexport const inventory = {\n  list: (filters: Record<string, string> = {}) => {\n    const q = new URLSearchParams(filters).toString();\n    return apiFetch(`/api/inventory?${q}`);\n  },\n  stats: () => apiFetch(\"/api/inventory/stats\"),\n  sync: () => apiFetch(\"/api/inventory/sync\", { method: \"POST\" }),\n  export: () => `${BASE}/api/inventory/export?token=${getToken()}`,\n  sheetTabs: () => apiFetch(\"/api/inventory/sheets/tabs\"),\n};\n\n// Requests API\nexport const requests = {\n  list: (filters: Record<string, string> = {}) => {\n    const q = new URLSearchParams(filters).toString();\n    return apiFetch(`/api/requests?${q}`);\n  },\n  create: (data: any) => apiFetch(\"/api/requests\", { method: \"POST\", body: JSON.stringify(data) }),\n  update: (id: number, data: any) => apiFetch(`/api/requests/${id}`, { method: \"PATCH\", body: JSON.stringify(data) }),\n  export: () => `/api/requests/export`,\n};\n\n// Issues API\nexport const issues = {\n  list: (filters: Record<string, string> = {}) => {\n    const q = new URLSearchParams(filters).toString();\n    return apiFetch(`/api/issues?${q}`);\n  },\n  create: (data: any) => apiFetch(\"/api/issues\", { method: \"POST\", body: JSON.stringify(data) }),\n  export: () => `/api/issues/export`,\n  print: (id: number) => `/api/issues/${id}/print`,\n};\n\n// Gate Pass API\nexport const gatepass = {\n  list: (filters: Record<string, string> = {}) => {\n    const q = new URLSearchParams(filters).toString();\n    return apiFetch(`/api/gatepass?${q}`);\n  },\n  create: (data: any) => apiFetch(\"/api/gatepass\", { method: \"POST\", body: JSON.stringify(data) }),\n  export: () => `/api/gatepass/export`,\n  print: (id: number) => `/api/gatepass/${id}/print`,\n};\n\n// Repairs API\nexport const repairs = {\n  list: (filters: Record<string, string> = {}) => {\n    const q = new URLSearchParams(filters).toString();\n    return apiFetch(`/api/repairs?${q}`);\n  },\n  create: (data: any) => apiFetch(\"/api/repairs\", { method: \"POST\", body: JSON.stringify(data) }),\n  update: (id: number, data: any) => apiFetch(`/api/repairs/${id}`, { method: \"PATCH\", body: JSON.stringify(data) }),\n};\n\n// Settings API\nexport const settings = {\n  get: () => apiFetch(\"/api/settings\"),\n  update: (data: any) => apiFetch(\"/api/settings\", { method: \"POST\", body: JSON.stringify(data) }),\n  testConnection: () => apiFetch(\"/api/settings/test-connection\", { method: \"POST\" }),\n};\n\n// Users API\nexport const users = {\n  list: () => apiFetch(\"/api/users\"),\n  create: (data: any) => apiFetch(\"/api/users\", { method: \"POST\", body: JSON.stringify(data) }),\n  update: (id: number, data: any) => apiFetch(`/api/users/${id}`, { method: \"PATCH\", body: JSON.stringify(data) }),\n  delete: (id: number) => apiFetch(`/api/users/${id}`, { method: \"DELETE\" }),\n};\n\n// Audit API\nexport const audit = {\n  list: (filters: Record<string, string> = {}) => {\n    const q = new URLSearchParams(filters).toString();\n    return apiFetch(`/api/audit?${q}`);\n  },\n};\n\n// Sheets Info API\nexport const sheetsInfo = {\n  get: () => apiFetch(\"/api/sheets/info\"),\n};\n\n// Download CSV export helper\nexport function downloadCSV(url: string, filename: string) {\n  const token = getToken();\n  fetch(url, { headers: { Authorization: `Bearer ${token}` } })\n    .then(r => r.text())\n    .then(text => {\n      const blob = new Blob([text], { type: \"text/csv\" });\n      const a = document.createElement(\"a\");\n      a.href = URL.createObjectURL(blob);\n      a.download = filename;\n      a.click();\n      URL.revokeObjectURL(a.href);\n    });\n}\n\n// Open print page helper\nexport function openPrintPage(url: string) {\n  const token = getToken();\n  fetch(url, { headers: { Authorization: `Bearer ${token}` } })\n    .then(r => r.text())\n    .then(html => {\n      const w = window.open(\"\", \"_blank\");\n      if (w) {\n        w.document.write(html);\n        w.document.close();\n      }\n    });\n}\n",[],[186,280,282],"6e9d73a1-f0a9-417f-80f9-b219dd362568",["D",1784059467360],[],[186,280,38],"c6acb62c-7d1a-4370-a65b-2b713289499b","Counter.tsx","019f6235-6cdf-725a-9a82-b3972630642e",["D",1784059096199],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState } from \"https://esm.sh/react@18.2.0\";\n\nexport function Counter() {\n  const [count, setCount] = useState(0);\n  return (\n    <div class=\"flex items-center gap-3\">\n      <span class=\"text-lg\">Clicked</span>\n      <button\n        onClick={() => setCount((c) => c + 1)}\n        class=\"bg-blue-500 hover:bg-blue-600 text-white font-medium px-4 py-2 rounded-lg transition-colors cursor-pointer\"\n      >\n        {count}\n      </button>\n      <span class=\"text-lg\">times</span>\n    </div>\n  );\n}\n",[],[186,280,294],"89ba30a3-962a-480e-92da-30468b16ff99","App.tsx","019f6235-6cdf-725a-9a82-af93153037dc",["D",1784059096199],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { Counter } from \"./Counter.tsx\";\n\nexport function App() {\n  return (\n    <div class=\"max-w-md mx-auto mt-12\">\n      <h1 class=\"text-3xl font-bold mb-6\">React + Hono Starter</h1>\n      <Counter />\n      <p class=\"mt-8 text-sm text-gray-500\">\n        <a href=\"/source\" class=\"underline hover:text-gray-700\">View source</a>\n      </p>\n    </div>\n  );\n}\n",[],[186,280,301],"8135285e-43d7-4bbd-9015-c66d21dbb4cd",["D",1784059096199],[202,203,204,205,206],[186,280],["D",1784059096199],[201,207,208,209],[186],["D",1784059096199],["D",1789473046147],{"_110":109,"_118":114},{"_110":109,"_111":112,"_113":114,"_19":61,"_115":116,"_117":30},{"_13":95,"_37":96,"_48":47,"_97":49,"_98":99,"_100":101,"_102":55,"_103":104,"_105":106,"_107":50,"_108":109},"ctx",{"_88":-5,"_140":352,"_353":354,"_355":356,"_357":30,"_358":30,"_359":30,"_360":65,"_361":-5,"_362":-7,"_363":-7,"_364":69,"_365":30,"_366":30,"_367":-5,"_368":30,"_369":30,"_370":30,"_371":-5},"ENV",{"_323":324,"_325":326,"_327":96,"_328":329,"_330":331,"_332":333,"_334":335,"_336":337,"_338":339,"_340":341,"_342":343,"_344":345,"_346":347,"_348":349,"_350":351},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]
</article></body></html>

Diff · v9