LearnSpace: full-stack educational whiteboard platform

Node.js/Express backend + vanilla JS frontend.
Features: real-time collaborative whiteboard (SSE), multi-page support,
LaTeX formulas, shapes/connectors, coordinate systems, number lines,
compass, zoom/pan, Catmull-Rom pencil smoothing, ruler/protractor with
rotation & resize controls, minimap navigation overlay, auto-measurements,
multi-page thumbnails sidebar, PNG export, page templates.
Student/teacher workflows: classes, assignments, library, dashboard.
Mobile responsive. SQLite (better-sqlite3).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/tests/setup.js

@@ -0,0 +1,116 @@
+/**
+ * Test setup — creates a temp SQLite DB, runs migrations, boots Express app.
+ * Usage:  const { app, db, getToken } = require('./setup');
+ */
+const path = require('path');
+const os   = require('os');
+const fs   = require('fs');
+
+// Unique temp DB per test run
+const tmpDb = path.join(os.tmpdir(), `ls_test_${Date.now()}_${Math.random().toString(36).slice(2)}.db`);
+process.env.DB_PATH    = tmpDb;
+process.env.JWT_SECRET = 'test_secret_that_is_at_least_32_characters_long!!';
+process.env.JWT_EXPIRES_IN = '1h';
+process.env.NODE_ENV   = 'test';
+
+// Now require app modules (they will use the temp DB)
+const db = require('../src/db/db');
+require('../src/db/migrate');
+
+// Seed permissions
+const { seedDefaults } = require('../src/controllers/permissionsController');
+seedDefaults();
+
+// Seed achievements
+const { seedAchievements } = require('../src/controllers/gamificationController');
+seedAchievements();
+
+// Build Express app (without listen)
+const express = require('express');
+const cors    = require('cors');
+
+const app = express();
+app.use(cors());
+app.use(express.json({ limit: '1mb' }));
+
+app.use('/api/auth',          require('../src/routes/auth'));
+app.use('/api/sessions',      require('../src/routes/sessions'));
+app.use('/api/shop',          require('../src/routes/shop'));
+app.use('/api/classes',       require('../src/routes/classes'));
+app.use('/api/gamification',  require('../src/routes/gamification'));
+app.use('/api/admin',         require('../src/routes/admin'));
+app.use('/api/subjects',      require('../src/routes/subjects'));
+app.use('/api/questions',     require('../src/routes/questions'));
+
+// Error handler
+app.use((err, _req, res, _next) => {
+  res.status(err.status || 500).json({ error: err.message || 'Server error' });
+});
+
+/* ── Helper: register + get token ─────────────────────────────────────── */
+let _userCounter = 0;
+
+async function getToken(role = 'student', nameOverride) {
+  const n = ++_userCounter;
+  const email = `test${n}@example.com`;
+  const name  = nameOverride || `Test User ${n}`;
+  const password = 'password123';
+
+  // Register via API
+  const res = await inject('POST', '/api/auth/register', { email, password, name });
+  const token = res.body.token;
+  const userId = res.body.user.id;
+
+  // If role is not student, set it directly in DB
+  if (role !== 'student') {
+    db.prepare('UPDATE users SET role = ? WHERE id = ?').run(role, userId);
+  }
+
+  return { token, userId, email, name };
+}
+
+/* ── HTTP injection (no real TCP) ─────────────────────────────────────── */
+const http = require('http');
+
+let _server;
+function ensureServer() {
+  if (!_server) {
+    _server = http.createServer(app);
+    _server.listen(0); // random port
+  }
+  return _server;
+}
+
+async function inject(method, path, body, token) {
+  const server = ensureServer();
+  const port = server.address().port;
+
+  return new Promise((resolve, reject) => {
+    const data = body ? JSON.stringify(body) : null;
+    const headers = { 'Content-Type': 'application/json' };
+    if (token) headers['Authorization'] = `Bearer ${token}`;
+    if (data) headers['Content-Length'] = Buffer.byteLength(data);
+
+    const req = http.request({ hostname: '127.0.0.1', port, path, method, headers }, (res) => {
+      let chunks = [];
+      res.on('data', c => chunks.push(c));
+      res.on('end', () => {
+        const raw = Buffer.concat(chunks).toString();
+        let parsed;
+        try { parsed = JSON.parse(raw); } catch { parsed = raw; }
+        resolve({ status: res.statusCode, body: parsed, headers: res.headers });
+      });
+    });
+    req.on('error', reject);
+    if (data) req.write(data);
+    req.end();
+  });
+}
+
+/* ── Cleanup ──────────────────────────────────────────────────────────── */
+function cleanup() {
+  if (_server) _server.close();
+  try { fs.unlinkSync(tmpDb); } catch {}
+}
+
+module.exports = { app, db, getToken, inject, cleanup };