chore(deps): bump uuid and typeorm in /backend

.gitignore

@@ -0,0 +1,35 @@
+node_modules
+dist
+
+# Local dev database
+docker-compose.dev.yml
+
+# DB dumps 
+backups/
+*.dmp
+*.dump
+*.sql.gz
+
+# Env
+.env
+.env.*
+!.env.example
+!.env.test
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Editor/tool configs
+.vscode/
+.claude/
+CLAUDE.md
+.mcp.json
+
+# Dev-server stdout captures
+*-dev.log
+*.log
+
+# One-off / local scripts
+/scripts/
+backend/scripts/

README.md

@@ -0,0 +1,138 @@
+<div align="center">
+  <img src="https://assets.hackclub.com/flag-standalone.svg" width="100" alt="Hack Club flag" />
+  <h2><a href="https://github.com/hackclub/beest">Beest</a></h2>
+  <p>The NestJS + SvelteKit + PostgreSQL codebase powering Beest, a hackathon in the Netherlands</p>
+</div>
+
+---
+
+# Beest
+
+The Beest codebase is what runs on https://beest.hackclub.com. That website is the You Ship We Ship platform allowing participants to sign in, create and share projects, recieve feedback and earn prizes through the shop. 
+
+
+## Architecture
+
+This is a monorepo with two applications:
+
+| Layer | Stack | Role |
+|-------|-------|------|
+| **`backend/`** | NestJS 11, TypeORM, PostgreSQL | Single source of truth - all auth, business logic, and data access |
+| **`frontend/`** | SvelteKit 2, Svelte 5 | Thin proxy - renders UI, sets cookies, forwards requests to the backend |
+
+
+
+## Development Setup
+
+```bash
+git clone https://github.com/hackclub/beest
+cd beest
+
+# Start the database
+docker compose -f docker-compose.dev.yml up -d
+
+# Backend
+cd backend
+npm install
+cp .env.example .env   # fill in credentials
+npm run migration:run
+npm run start:dev       # runs on :3001
+
+# Frontend (in a second terminal)
+cd frontend
+npm install
+npm run dev             # runs on :5173
+```
+
+## Environment Variables
+
+### Backend (`backend/.env`)
+
+```bash
+# Airtable
+AIRTABLE_API_KEY=
+AIRTABLE_BASE_ID=
+AIRTABLE_TABLE_NAME=
+
+# Hack Club Auth OAuth
+CLIENT_ID=
+CLIENT_SECRET=
+REDIRECT_URI=http://localhost:5173/oauth/callback
+
+# JWT & encryption
+JWT_SECRET=
+DB_ENCRYPTION_KEY=       # 32-byte hex string for AES-256-GCM
+
+# Hackatime OAuth
+HACKATIME_CLIENT_ID=
+HACKATIME_CLIENT_SECRET=
+HACKATIME_REDIRECT_URI=http://localhost:5173/auth/hackatime/callback
+HACKATIME_BASE_URL=https://hackatime.hackclub.com
+
+# Database
+DATABASE_URL=postgresql://postgres:password@localhost:5432/postgres
+
+# Slack
+SLACK_BOT_TOKEN=
+```
+
+### Frontend (`frontend/.env`)
+
+```bash
+BACKEND_URL=http://localhost:3001
+```
+
+## Deployment
+
+### Docker Compose
+
+```bash
+docker compose up --build
+```
+
+### Dockerfile (standalone)
+
+Both `backend/` and `frontend/` have their own multi-stage Dockerfiles (Node 22 Alpine). Point `DATABASE_URL` at your PostgreSQL instance and set all backend env vars.
+
+| Service | Internal Port |
+|---------|---------------|
+| Frontend | 3000 |
+| Backend | 3001 |
+| PostgreSQL | 5432 |
+
+## API
+
+All endpoints live under the backend at `/api`. Auth-protected routes require a `Bearer` JWT in the `Authorization` header.
+
+| Endpoint | Method | Auth | Purpose |
+|----------|--------|------|---------|
+| `/api/health` | GET | — | Health check |
+| `/api/auth/start` | POST | — | Begin OAuth flow |
+| `/api/auth/handle-callback` | POST | — | Complete OAuth, issue tokens |
+| `/api/auth/refresh` | POST | — | Rotate refresh token |
+| `/api/auth/me` | GET | JWT | Current user claims |
+| `/api/auth/logout` | POST | — | Invalidate session |
+| `/api/auth/rsvp` | POST | JWT | RSVP using authenticated session |
+| `/api/auth/scope` | GET | JWT | Check user permissions |
+| `/api/rsvp` | POST | — | Submit an RSVP |
+| `/api/hackatime/start` | POST | JWT | Begin Hackatime OAuth |
+| `/api/hackatime/callback` | POST | JWT | Complete Hackatime OAuth |
+| `/api/hackatime/projects` | GET | JWT | User's Hackatime project names |
+| `/api/projects` | GET | JWT | List user's projects |
+| `/api/projects` | POST | JWT | Create a project |
+| `/api/projects/:id` | PATCH | JWT | Update a project |
+| `/api/projects/:id` | DELETE | JWT | Delete a project |
+| `/api/projects/hours` | GET | JWT | Hackatime hours breakdown |
+| `/api/leaderboard` | GET | JWT | Top 10 users by approved hours |
+| `/api/onboarding/status` | GET | JWT | Onboarding step completion |
+| `/api/onboarding/two-emails` | POST | JWT | Confirm different Slack email |
+| `/api/onboarding/sticker-link` | GET | JWT | User's unique sticker form link |
+| `/api/audit-log` | GET | JWT | User's audit log entries |
+| `/api/admin/users` | GET | Admin | List all users |
+| `/api/admin/users/:id` | GET | Admin | Get specific user |
+| `/api/admin/users/:id/ban` | POST | Admin | Ban a user |
+| `/api/admin/users/:id/perms` | PATCH | Admin | Update user permissions |
+
+---
+
+Made with &#60;3 by [euan](https://github.com/EDRipper) , give it a ⭐

backend/.env.example

@@ -0,0 +1,41 @@
+AIRTABLE_API_KEY=
+AIRTABLE_BASE_ID=
+AIRTABLE_TABLE_NAME=
+PORT=3001
+
+# Hack Club Auth
+CLIENT_ID=
+CLIENT_SECRET=
+JWT_SECRET=
+REDIRECT_URI=http://localhost:5173/oauth/callback
+
+# Hackatime OAuth
+HACKATIME_CLIENT_ID=
+HACKATIME_CLIENT_SECRET=
+HACKATIME_REDIRECT_URI=http://localhost:5173/auth/hackatime/callback
+HACKATIME_BASE_URL=https://hackatime.hackclub.com
+HACKATIME_ADMIN_API_KEY=
+
+# Database (use container name in prod, public hostname in staging)
+DATABASE_URL=postgresql://postgres:password@localhost:5432/postgres
+# 32-byte hex key for AES-256-GCM column encryption (generate: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))")
+DB_ENCRYPTION_KEY=
+
+# Lapse (https://github.com/hackclub/lapse) — program key for server-to-server
+# lookups so reviewers can watch a builder's timelapses inline. Leave blank to
+# disable; the feature degrades silently when unset.
+LAPSE_BASE_URL=https://lapse.hackclub.com
+LAPSE_PROGRAM_KEY=
+
+# HCB card grants (https://hcb.hackclub.com) — confidential OAuth app, scopes "read write".
+# I'm sorry you can't really recreate these unless you work at HQ. Self host hcb?
+HCB_BASE_URL=https://hcb.hackclub.com
+HCB_CLIENT_ID=
+HCB_CLIENT_SECRET=
+HCB_REDIRECT_URI=http://localhost:5173/oauth/hcb/callback
+# Public ID or slug of the single org that issues grants
+HCB_ORG_ID=
+# Suggested grant amount only (NOT a cap): the popup prefills amount as
+# pipes_spent * HCB_CENTS_PER_PIPE, but admins can override to any value.
+# Cents per pipe — 500 = $5 per pipe. Leave blank to prefill nothing.
+HCB_CENTS_PER_PIPE=

backend/.prettierrc

@@ -0,0 +1,4 @@
+{
+  "singleQuote": true,
+  "trailingComma": "all"
+}

backend/Dockerfile

@@ -0,0 +1,17 @@
+FROM node:22-alpine AS build
+WORKDIR /app
+COPY package*.json ./
+RUN npm ci
+COPY . .
+RUN npm run build
+
+FROM node:22-alpine
+RUN apk add --no-cache curl
+WORKDIR /app
+COPY --from=build /app/dist ./dist
+COPY --from=build /app/package*.json ./
+RUN npm ci --omit=dev
+EXPOSE 3001
+HEALTHCHECK --interval=10s --timeout=3s --start-period=30s --retries=3 \
+  CMD curl -f http://localhost:3001/api/health || exit 1
+CMD ["node", "dist/main"]

backend/README.md

@@ -0,0 +1,98 @@
+<p align="center">
+  <a href="http://nestjs.com/" target="blank"><img src="https://nestjs.com/img/logo-small.svg" width="120" alt="Nest Logo" /></a>
+</p>
+
+[circleci-image]: https://img.shields.io/circleci/build/github/nestjs/nest/master?token=abc123def456
+[circleci-url]: https://circleci.com/gh/nestjs/nest
+
+  <p align="center">A progressive <a href="http://nodejs.org" target="_blank">Node.js</a> framework for building efficient and scalable server-side applications.</p>
+    <p align="center">
+<a href="https://www.npmjs.com/~nestjscore" target="_blank"><img src="https://img.shields.io/npm/v/@nestjs/core.svg" alt="NPM Version" /></a>
+<a href="https://www.npmjs.com/~nestjscore" target="_blank"><img src="https://img.shields.io/npm/l/@nestjs/core.svg" alt="Package License" /></a>
+<a href="https://www.npmjs.com/~nestjscore" target="_blank"><img src="https://img.shields.io/npm/dm/@nestjs/common.svg" alt="NPM Downloads" /></a>
+<a href="https://circleci.com/gh/nestjs/nest" target="_blank"><img src="https://img.shields.io/circleci/build/github/nestjs/nest/master" alt="CircleCI" /></a>
+<a href="https://discord.gg/G7Qnnhy" target="_blank"><img src="https://img.shields.io/badge/discord-online-brightgreen.svg" alt="Discord"/></a>
+<a href="https://opencollective.com/nest#backer" target="_blank"><img src="https://opencollective.com/nest/backers/badge.svg" alt="Backers on Open Collective" /></a>
+<a href="https://opencollective.com/nest#sponsor" target="_blank"><img src="https://opencollective.com/nest/sponsors/badge.svg" alt="Sponsors on Open Collective" /></a>
+  <a href="https://paypal.me/kamilmysliwiec" target="_blank"><img src="https://img.shields.io/badge/Donate-PayPal-ff3f59.svg" alt="Donate us"/></a>
+    <a href="https://opencollective.com/nest#sponsor"  target="_blank"><img src="https://img.shields.io/badge/Support%20us-Open%20Collective-41B883.svg" alt="Support us"></a>
+  <a href="https://twitter.com/nestframework" target="_blank"><img src="https://img.shields.io/twitter/follow/nestframework.svg?style=social&label=Follow" alt="Follow us on Twitter"></a>
+</p>
+  <!--[![Backers on Open Collective](https://opencollective.com/nest/backers/badge.svg)](https://opencollective.com/nest#backer)
+  [![Sponsors on Open Collective](https://opencollective.com/nest/sponsors/badge.svg)](https://opencollective.com/nest#sponsor)-->
+
+## Description
+
+[Nest](https://github.com/nestjs/nest) framework TypeScript starter repository.
+
+## Project setup
+
+```bash
+$ npm install
+```
+
+## Compile and run the project
+
+```bash
+# development
+$ npm run start
+
+# watch mode
+$ npm run start:dev
+
+# production mode
+$ npm run start:prod
+```
+
+## Run tests
+
+```bash
+# unit tests
+$ npm run test
+
+# e2e tests
+$ npm run test:e2e
+
+# test coverage
+$ npm run test:cov
+```
+
+## Deployment
+
+When you're ready to deploy your NestJS application to production, there are some key steps you can take to ensure it runs as efficiently as possible. Check out the [deployment documentation](https://docs.nestjs.com/deployment) for more information.
+
+If you are looking for a cloud-based platform to deploy your NestJS application, check out [Mau](https://mau.nestjs.com), our official platform for deploying NestJS applications on AWS. Mau makes deployment straightforward and fast, requiring just a few simple steps:
+
+```bash
+$ npm install -g @nestjs/mau
+$ mau deploy
+```
+
+With Mau, you can deploy your application in just a few clicks, allowing you to focus on building features rather than managing infrastructure.
+
+## Resources
+
+Check out a few resources that may come in handy when working with NestJS:
+
+- Visit the [NestJS Documentation](https://docs.nestjs.com) to learn more about the framework.
+- For questions and support, please visit our [Discord channel](https://discord.gg/G7Qnnhy).
+- To dive deeper and get more hands-on experience, check out our official video [courses](https://courses.nestjs.com/).
+- Deploy your application to AWS with the help of [NestJS Mau](https://mau.nestjs.com) in just a few clicks.
+- Visualize your application graph and interact with the NestJS application in real-time using [NestJS Devtools](https://devtools.nestjs.com).
+- Need help with your project (part-time to full-time)? Check out our official [enterprise support](https://enterprise.nestjs.com).
+- To stay in the loop and get updates, follow us on [X](https://x.com/nestframework) and [LinkedIn](https://linkedin.com/company/nestjs).
+- Looking for a job, or have a job to offer? Check out our official [Jobs board](https://jobs.nestjs.com).
+
+## Support
+
+Nest is an MIT-licensed open source project. It can grow thanks to the sponsors and support by the amazing backers. If you'd like to join them, please [read more here](https://docs.nestjs.com/support).
+
+## Stay in touch
+
+- Author - [Kamil Myśliwiec](https://twitter.com/kammysliwiec)
+- Website - [https://nestjs.com](https://nestjs.com/)
+- Twitter - [@nestframework](https://twitter.com/nestframework)
+
+## License
+
+Nest is [MIT licensed](https://github.com/nestjs/nest/blob/master/LICENSE).

backend/eslint.config.mjs

@@ -0,0 +1,35 @@
+// @ts-check
+import eslint from '@eslint/js';
+import eslintPluginPrettierRecommended from 'eslint-plugin-prettier/recommended';
+import globals from 'globals';
+import tseslint from 'typescript-eslint';
+
+export default tseslint.config(
+  {
+    ignores: ['eslint.config.mjs'],
+  },
+  eslint.configs.recommended,
+  ...tseslint.configs.recommendedTypeChecked,
+  eslintPluginPrettierRecommended,
+  {
+    languageOptions: {
+      globals: {
+        ...globals.node,
+        ...globals.jest,
+      },
+      sourceType: 'commonjs',
+      parserOptions: {
+        projectService: true,
+        tsconfigRootDir: import.meta.dirname,
+      },
+    },
+  },
+  {
+    rules: {
+      '@typescript-eslint/no-explicit-any': 'off',
+      '@typescript-eslint/no-floating-promises': 'warn',
+      '@typescript-eslint/no-unsafe-argument': 'warn',
+      "prettier/prettier": ["error", { endOfLine: "auto" }],
+    },
+  },
+);

backend/nest-cli.json

@@ -0,0 +1,8 @@
+{
+  "$schema": "https://json.schemastore.org/nest-cli",
+  "collection": "@nestjs/schematics",
+  "sourceRoot": "src",
+  "compilerOptions": {
+    "deleteOutDir": true
+  }
+}