bbs.profullstack/logicsrc
1
0
Fork 0
mirror of https://github.com/profullstack/logicsrc.git synced 2026-10-01 20:33:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

feat(pwa): move app.logicsrc.com from Turso/libSQL to Postgres via @profullstack/libsql-pg (#218)

Browse source 
Production reads DATABASE_URL (postgres://) through @profullstack/libsql-pg,
which keeps the @libsql/client surface; no query changed. A missing,
non-Postgres or leftover libsql:// URL fails at boot in production. Dev and
tests keep libSQL (file:/:memory:) as a devDependency. Postgres migrations in
src/migrations-pg/ (converted with libsql-pg convert-schema, same file names
so the copied _migrations ledger matches); migrate.mjs picks the dialect.
Tests run against Postgres with PWA_TEST_DATABASE_URL.

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
Anthony Ettinger 2026-09-25 09:28:40 -07:00 • committed by GitHub
parent c535aaa32c
commit 4ac750e65b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
12 changed files with 507 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

28
apps/pwa/README.md
View file

@ -1,16 +1,40 @@
# @logicsrc/pwa — LogicSRC credentials
Express + libSQL/Turso app for **team credential sharing**: auth (email/password,
Express app on Postgres for **team credential sharing**: auth (email/password,
passkeys, CoinPay OAuth, sessions, `lsk_` CLI API keys) + end-to-end-encrypted
team vaults. Zero-knowledge — the server only stores ciphertext, per-member
sealed vault keys, and identity public keys. Decryption happens in the
`logicsrc` CLI.
```bash
cp .env.example .env # set SESSION_SECRET; TURSO_* for prod (else local file db)
cp .env.example .env # set SESSION_SECRET; DATABASE_URL=postgres://… for prod (else a local libSQL file db)
npm install
npm start # migrates on boot, serves on :8080
```
## Database
Production runs on Postgres: `DATABASE_URL` must be a `postgres://` URL and the
app refuses to start on anything else there (a leftover `libsql://` value is
called out by name). The client is
[`@profullstack/libsql-pg`](https://github.com/profullstack/libsql-pg), which
keeps the `@libsql/client` surface the code was written against and rewrites
the remaining SQLite idioms per statement. Development and the tests use libSQL
itself (`file:./data/local.db` by default, `:memory:` in tests).
Migrations run at boot and live in two dialect copies with the same file names:
`src/migrations/` (SQLite) and `src/migrations-pg/` (Postgres, generated with
`npx libsql-pg convert-schema` and reviewed). `npm run migrate` applies the copy
matching `DATABASE_URL`. To move an existing Turso database:
```bash
DATABASE_URL=postgres://… npm run migrate # schema
npx libsql-pg copy --from "$TURSO_DATABASE_URL" --token "$TURSO_AUTH_TOKEN" \
--to "$DATABASE_URL" --verify # rows
```
Set `PWA_TEST_DATABASE_URL=postgres://…` to run the test suite against a real
Postgres (it drops and recreates the `public` schema of that database).
The CLI connects with `LOGICSRC_API=<origin> logicsrc login` (browser OAuth-PKCE
loopback → an `lsk_` key). See `docs/credential-sharing.md` in the repo root.