Introduction

// backend/server.js
import master from 'mastercontroller';
import AppContext from './app/models/AppContext.js';

master.root = import.meta.dirname;
master.environmentType = process.env.NODE_ENV || 'development';

const server = master.setupServer('http');   // wire the pipeline + build configuration
master.cors.init({ origin: ['http://localhost:3000'] });

master.addScoped('db', AppContext);          // one MasterRecord context per request → this.db
master.auth.addJwtBearer('bearer', { secret: process.env.JWT_SECRET, issuer: 'my-api' });
master.useResponseCompression();
master.useHealthChecks({ checks: { db: { check: () => true, tags: ['ready'] } } });
master.useOpenApi({ title: 'My API', version: '1.0.0', ui: '/docs' });

await master.startMVC('app');   // load routes.js + discover controllers
await master.start(server);     // validate options, start hosted services, register terminal routing

server.listen(3001, () => console.log('⚡ API on :3001'));

// app/controllers/postsController.js
export default class PostsController {
  static authorize = { '*': true, index: false, show: false };          // [Authorize] per action
  static schemas = { create: { body: { title: 'string!', body: 'string' } } };   // bind + validate → this.model

  // GET /posts
  async index() {
    const posts = await this.db.Post.toList();   // this.db: request-scoped context
    this.ok({ posts });
  }

  // GET /posts/:id(int)
  async show(obj) {
    const post = await this.db.Post.find(obj.params.id);
    if (!post) return this.notFound('No such post');
    this.ok(post);
  }

  // POST /posts — invalid input already answered 400 ValidationProblemDetails
  async create() {
    const post = await this.db.Post.add({ ...this.model, authorId: this.user.id });
    await this.db.saveChanges();
    this.logger.info('post {id} created', { id: post.id });
    this.created(`/posts/${post.id}`, post);
  }
}