Full-Stack Architecture

Request path

route → handler → service → repository → db

Type safety chain

1. Drizzle schema defines the users table
2. drizzle-zod generates insertUserSchema / selectUserSchema
3. Hono routes use @hono/zod-validator on auth endpoints
4. Frontend uses hc<AppType>() — TypeScript errors on mismatched bodies

RBAC

Role	Dashboard	Uploads	Stats API
ADMIN	yes	yes	yes
MANAGER	yes	yes	yes
USER	no	no	no

Protected routes redirect unauthenticated users to /login before rendering.