@aurostack/stacks 0.1.0

package/templates/nest-api/files/.forgejo/workflows/test.yml

@@ -0,0 +1,53 @@
+name: Unit Tests
+
+on:
+  push:
+    branches:
+      - "**"
+      - "!main"
+      - "!development"
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  test-and-build:
+    name: Test and Build
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+
+      - name: Use Node.js 24
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          cache: 'yarn'
+
+      - name: Enable Corepack
+        run: corepack enable
+
+      - name: Install dependencies
+        run: yarn install --immutable
+
+      - name: Install Infisical CLI
+        run: npm install -g @infisical/cli
+
+      - name: Fetch secrets
+        env:
+          INFISICAL_TOKEN: ${{ secrets.INFISICAL_TOKEN }}
+          INFISICAL_API_URL: https://inf.aurostack.co
+        run: yarn secrets -e test
+
+      - name: Generate Prisma client
+        run: yarn test:db:generate
+
+      - name: Run unit tests
+        run: yarn test
+
+      - name: Build
+        run: yarn build

package/templates/nest-api/files/.npmrc.example

@@ -0,0 +1 @@
+//registry.npmjs.org/:_authToken=${NPM_TOKEN}

package/templates/nest-api/files/.nvmrc

@@ -0,0 +1 @@
+24.16

package/templates/nest-api/files/.prettierrc

@@ -0,0 +1,8 @@
+{
+  "semi": true,
+  "trailingComma": "none",
+  "singleQuote": true,
+  "useTabs": true,
+  "tabWidth": 2,
+  "endOfLine": "auto"
+}

package/templates/nest-api/files/.swcrc

@@ -0,0 +1,15 @@
+{
+  "jsc": {
+    "parser": {
+      "syntax": "typescript",
+      "decorators": true
+    },
+    "transform": {
+      "legacyDecorator": true,
+      "decoratorMetadata": true
+    }
+  },
+  "module": {
+    "type": "es6"
+  }
+}

package/templates/nest-api/files/.watchmanconfig

@@ -0,0 +1,3 @@
+{
+  "ignore_dirs": ["node_modules", "dist", "prisma/generated", ".git"]
+}

package/templates/nest-api/files/.yarnrc.yml

@@ -0,0 +1 @@
+nodeLinker: node-modules

package/templates/nest-api/files/Dockerfile

@@ -0,0 +1,40 @@
+# Stage 1: Build
+FROM aurostack.dev/wesnetech/nodejs:24 AS build
+WORKDIR /app
+
+# The image bundles Yarn 1.x; corepack switches to the Yarn 4 release pinned by
+# package.json's `packageManager`, which is what can read yarn.lock.
+RUN corepack enable
+
+# yarn.lock and .yarnrc.yml must both land here: --immutable requires a lockfile,
+# and without .yarnrc.yml Yarn uses PnP instead of the node-modules linker.
+COPY package.json yarn.lock .yarnrc.yml ./
+RUN yarn install --immutable
+
+COPY tsconfig*.json nest-cli.json prisma.config.ts ./
+COPY .bin ./.bin
+COPY prisma ./prisma
+RUN yarn db:generate
+
+COPY src ./src
+COPY public ./public
+COPY emails ./emails
+RUN yarn build
+
+# Remove dev dependencies after build is done. Yarn 4 has no
+# `install --production`; focusing the root workspace is its equivalent.
+RUN yarn workspaces focus --all --production
+
+# Stage 2: Production
+FROM aurostack.dev/wesnetech/nodejs:24
+WORKDIR /app
+
+COPY package.json ./
+COPY --from=build /app/node_modules ./node_modules
+COPY --from=build /app/dist ./dist
+COPY --from=build /app/public ./public
+COPY --from=build /app/prisma ./prisma
+
+EXPOSE 5000
+
+CMD ["node", "dist/src/main"]

package/templates/nest-api/files/__mocks__/activation-twofa.js

@@ -0,0 +1,7 @@
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const React = require('react');
+
+const ActivationTwofaComponentMock = () =>
+	React.createElement('div', null, 'Mocked ActivationTwofaComponent');
+
+module.exports = ActivationTwofaComponentMock;

package/templates/nest-api/files/__mocks__/activation.js

@@ -0,0 +1,7 @@
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const React = require('react');
+
+const ActivationComponentMock = () =>
+	React.createElement('div', null, 'Mocked ActivationComponent');
+
+module.exports = ActivationComponentMock;

package/templates/nest-api/files/__mocks__/forgot-password.js

@@ -0,0 +1,7 @@
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const React = require('react');
+
+const ForgotPasswordComponentMock = () =>
+	React.createElement('div', null, 'Mocked ForgotPasswordComponent');
+
+module.exports = ForgotPasswordComponentMock;

package/templates/nest-api/files/__mocks__/main-layout.js

@@ -0,0 +1,7 @@
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const React = require('react');
+
+const MainLayoutComponentMock = () =>
+	React.createElement('div', null, 'Mocked MainLayoutComponent');
+
+module.exports = MainLayoutComponentMock;

package/templates/nest-api/files/__mocks__/password-changed.js

@@ -0,0 +1,7 @@
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const React = require('react');
+
+const PasswordChangedComponentMock = () =>
+	React.createElement('div', null, 'Mocked PasswordChangedComponent');
+
+module.exports = PasswordChangedComponentMock;

package/templates/nest-api/files/__mocks__/reset-password.js

@@ -0,0 +1,7 @@
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const React = require('react');
+
+const ResetPasswordComponentMock = () =>
+	React.createElement('div', null, 'Mocked ResetPasswordComponent');
+
+module.exports = ResetPasswordComponentMock;

package/templates/nest-api/files/__mocks__/set-password.js

@@ -0,0 +1,7 @@
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const React = require('react');
+
+const SetPasswordComponentMock = () =>
+	React.createElement('div', null, 'Mocked SetPasswordComponent');
+
+module.exports = SetPasswordComponentMock;

package/templates/nest-api/files/__mocks__/welcome.js

@@ -0,0 +1,7 @@
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const React = require('react');
+
+const WelcomeComponentMock = () =>
+	React.createElement('div', null, 'Mocked WelcomeComponent');
+
+module.exports = WelcomeComponentMock;

package/templates/nest-api/files/_gitignore

@@ -0,0 +1,62 @@
+# compiled output
+/dist
+/node_modules
+
+# Logs
+logs
+*.log
+npm-debug.log*
+pnpm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+
+# yarn (berry, node-modules linker)
+.yarn/*
+!.yarn/patches
+!.yarn/plugins
+!.yarn/releases
+!.yarn/sdks
+!.yarn/versions
+.pnp.*
+yarn-error.log
+
+# OS
+.DS_Store
+
+# Tests
+/coverage
+/.nyc_output
+
+# IDEs and editors
+/.idea
+.project
+.classpath
+.c9/
+*.launch
+.settings/
+*.sublime-workspace
+
+# IDE - VSCode
+.vscode/*
+!.vscode/settings.json
+!.vscode/tasks.json
+!.vscode/launch.json
+!.vscode/extensions.json
+
+.env
+.env.test
+.env.production
+.npmrc
+docker-compose.dev.yaml
+
+package-lock.json
+
+# Local scratch under docs/ stays ignored; the canonical specs do not.
+docs/*
+!docs/*.md
+prisma/schema.dbml
+
+.react-email/
+
+graphify-out/

package/templates/nest-api/files/compose.test.yml

@@ -0,0 +1,33 @@
+# Test stack. Separate containers and host ports from compose.yml, so running
+# the suite never touches the database you are developing against.
+name: acme-test
+services:
+  wait:
+    container_name: acme-test-wait
+    image: ufoscout/docker-compose-wait:latest
+    command: sh -c '/wait && exit'
+    environment:
+      # List form, not a mapping: two `WAIT_HOSTS` mapping keys would be a
+      # duplicate-key error, whereas list entries are just strings and Compose
+      # takes the last one. The cache variant is therefore listed second.
+      - WAIT_HOSTS=database:5432 # @feature !cache
+      - WAIT_HOSTS=database:5432,redis:6379 # @feature cache
+      - WAIT_TIMEOUT=300
+  database:
+    container_name: acme-test-database
+    image: postgres:15.3
+    restart: always
+    ports:
+      - 5499:5432
+    environment:
+      POSTGRES_USER: root
+      POSTGRES_PASSWORD: postgres
+      POSTGRES_DB: main
+  # @feature:start cache
+  redis:
+    container_name: acme-test-redis
+    image: redis:7.4.1
+    restart: always
+    ports:
+      - 6399:6379
+  # @feature:end

package/templates/nest-api/files/compose.yml

@@ -0,0 +1,39 @@
+name: acme
+services:
+  # Blocks until Postgres and Redis actually accept connections — `docker
+  # compose up -d` returns long before that, and every "connection refused" on
+  # a fresh machine traces back to skipping this. Driven by `yarn dc:wait`.
+  wait:
+    container_name: acme-wait
+    image: ufoscout/docker-compose-wait:latest
+    command: sh -c '/wait && exit'
+    environment:
+      # List form, not a mapping: two `WAIT_HOSTS` mapping keys would be a
+      # duplicate-key error, whereas list entries are just strings and Compose
+      # takes the last one. The cache variant is therefore listed second.
+      - WAIT_HOSTS=database:5432 # @feature !cache
+      - WAIT_HOSTS=database:5432,redis:6379 # @feature cache
+      - WAIT_TIMEOUT=300
+  database:
+    container_name: acme-database
+    image: postgres:15.3
+    restart: always
+    ports:
+      - 5432:5432
+    environment:
+      POSTGRES_USER: root
+      POSTGRES_PASSWORD: postgres
+      POSTGRES_DB: main
+    volumes:
+      - database:/var/lib/postgresql/data
+  # @feature:start cache
+  redis:
+    container_name: acme-redis
+    image: redis:7.4.1
+    restart: always
+    ports:
+      - 6379:6379
+  # @feature:end
+
+volumes:
+  database:

package/templates/nest-api/files/emails/activation-twofa.tsx

@@ -0,0 +1,58 @@
+import * as React from 'react';
+import { Text, Img, Link } from '@react-email/components';
+import { EmailProps, ActivationTwoFaData } from 'common/types';
+import MainLayout, { Salutation, CN } from './main-layout';
+
+interface AProps {
+	href: string;
+	text: string;
+}
+
+const A = ({ href, text }: AProps) => (
+	<Link className={CN.anchor} href={href} target="_blank" rel="noreferrer">
+		{text}
+	</Link>
+);
+
+const ActivationTwofa = ({
+	firstName,
+	...props
+}: EmailProps<Omit<ActivationTwoFaData, 'qrcode'>>) => {
+	return (
+		<MainLayout {...props}>
+			<Salutation name={firstName} />
+			<Text className={CN.text}>
+				{
+					'You requested to enable two factor authentication. To configure authentication via TOTP on multiple devices, during setup, scan the QR code using each device at the same time.'
+				}
+			</Text>
+			<Img
+				src="cid:qrcode"
+				alt="Twofa QR Code"
+				title="QR Code"
+				width="200px"
+				height="200px"
+			/>
+			<Text className={CN.text}>
+				A time-based one-time password (TOTP) application automatically
+				generates an authentication code that changes after a certain period of
+				time. We recommend using cloud-based TOTP apps such as:{' '}
+				<A
+					href="https://support.1password.com/one-time-passwords"
+					text="1Password"
+				/>
+				, <A href="https://authy.com/guides/github" text="Authy" />,{' '}
+				<A href="https://lastpass.com/auth" text="LastPass Authenticator" />,{' '}
+				<A href="https://googleauthenticator.net" text="Google Authenticator" />
+				,{' '}
+				<A
+					href="https://www.microsoft.com/en-us/security/mobile-authenticator-app"
+					text="Microsoft Authenticator"
+				/>{' '}
+				and more.
+			</Text>
+		</MainLayout>
+	);
+};
+
+export default ActivationTwofa;

package/templates/nest-api/files/emails/activation.tsx

@@ -0,0 +1,36 @@
+import * as React from 'react';
+import { Text } from '@react-email/components';
+import { EmailProps, ActivationData } from 'common/types';
+import MainLayout, { Salutation, CN, CTAButton } from './main-layout';
+
+const Activation = ({
+	firstName,
+	url,
+	...props
+}: EmailProps<ActivationData>) => {
+	return (
+		<MainLayout {...props}>
+			<Salutation name={firstName} />
+			<Text className={CN.text}>
+				{
+					'You are nearly there! To complete your account setup, please confirm your email address by clicking the button below.'
+				}
+			</Text>
+			<CTAButton text="Activate your account" url={url} />
+			<Text className={CN.text}>
+				If the button above doesn't work, copy and paste the link below into
+				your browser:
+			</Text>
+			<Text
+				className={`text-xs underline underline-offset-2 text-[#525f7f] select-all break-all`}
+			>
+				{url}
+			</Text>
+			<Text className={CN.text}>
+				For security reasons, this activation link will expire in one hour.
+			</Text>
+		</MainLayout>
+	);
+};
+
+export default Activation;

package/templates/nest-api/files/emails/forgot-password.tsx

@@ -0,0 +1,29 @@
+import * as React from 'react';
+import { Text } from '@react-email/components';
+import { EmailProps, ForgotPasswordData } from 'common/types';
+import MainLayout, {
+	Salutation,
+	CTAButton,
+	CN,
+	CTAFallback
+} from './main-layout';
+
+const ForgotPassword = ({ url, ...props }: EmailProps<ForgotPasswordData>) => {
+	return (
+		<MainLayout {...props}>
+			<Salutation />
+			<Text className={CN.text}>
+				{
+					'It looks like you requested a password reset. No worries — you can securely set a new password by clicking the button below.'
+				}
+			</Text>
+			<CTAButton text="Reset your password" url={url} />
+			<CTAFallback url={url} />
+			<Text className={CN.text}>
+				For security reasons, this activation link will expire in one hour.
+			</Text>
+		</MainLayout>
+	);
+};
+
+export default ForgotPassword;

package/templates/nest-api/files/emails/main-layout.tsx

@@ -0,0 +1,134 @@
+import React from 'react';
+import {
+	Html,
+	Head,
+	Container,
+	Preview,
+	Tailwind,
+	Font,
+	Body,
+	Section,
+	Text,
+	Hr,
+	Button
+} from '@react-email/components';
+import { EmailBaseProps } from 'common/types';
+
+interface Props extends EmailBaseProps {
+	children: React.ReactNode;
+}
+
+interface SalutationProps {
+	name?: string;
+}
+
+interface OTPProps {
+	code: string;
+}
+
+interface CTAButtonProps {
+	text: string;
+	url: string;
+}
+
+export const CN = {
+	text: 'text-[#525f7f] text-base text-left',
+	anchor: 'text-primary underline underline-offset-2',
+	button:
+		'bg-[#000] rounded-md text-primary text-base font-semibold font-poppins decoration-0 text-center block w-full py-2',
+	hr: 'my-5 mx-0 border border-[#e6ebf1]'
+};
+
+const MainLayout = ({
+	children,
+	subject = 'Email Title',
+	preview,
+	appName = 'API Starter',
+	footerText = 'API Starter, 354 Oyster Point Blvd, South San Francisco, CA 94080'
+}: Props) => {
+	return (
+		<Html lang="en">
+			<Head>
+				<title>{subject}</title>
+				<link rel="preconnect" href="http://fonts.googleapis.com" />
+				<link rel="preconnect" href="http://fonts.gstatic.com" crossOrigin="" />
+				<Font
+					fontFamily="Poppins"
+					fallbackFontFamily="Verdana"
+					webFont={{
+						url: 'https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Raleway:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap',
+						format: 'opentype'
+					}}
+				/>
+			</Head>
+			{preview && <Preview>{preview}</Preview>}
+			<Tailwind
+				config={{
+					theme: {
+						extend: {
+							colors: {
+								primary: '#ffd54a'
+							},
+							fontFamily: {
+								poppins: ['Poppins', 'Verdana', 'sans-serif']
+							}
+						}
+					}
+				}}
+			>
+				<Body className="bg-[#f6f9fc] font-poppins py-10">
+					<Container className="px-0 pt-5 pb-12 mx-auto my-0 bg-white border border-gray-100 border-solid rounded-md shadow-md">
+						<Section className="px-12 py-0">
+							{/* Text wordmark: swap in an <Img> once the project has a hosted logo. */}
+							<Text className="text-xl font-semibold text-[#333]">
+								{appName}
+							</Text>
+							<Hr className={CN.hr} />
+							{children}
+							<Text className={CN.text}>— {appName} Team</Text>
+							<Hr className={CN.hr} />
+							<Text className="text-[#8898aa] text-xs">{footerText}</Text>
+						</Section>
+					</Container>
+				</Body>
+			</Tailwind>
+		</Html>
+	);
+};
+
+export const Salutation = ({ name }: SalutationProps) =>
+	name ? (
+		<Text className={CN.text}>
+			Hi <strong className="font-semibold">{name}</strong>,
+		</Text>
+	) : (
+		<Text className={CN.text}>Hi,</Text>
+	);
+
+export const OTP = ({ code }: OTPProps) => (
+	<Text className={CN.text}>
+		One Time Code: <strong className="font-semibold">{code}</strong>
+	</Text>
+);
+
+export const CTAButton = ({ text, url }: CTAButtonProps) => (
+	<Button href={url} className={CN.button} target="_blank" rel="noreferrer">
+		{text}
+	</Button>
+);
+
+export const CTAFallback = ({ url }: { url: string }) => (
+	<>
+		<Text className={CN.text}>
+			If the button above doesn't work, copy and paste the link below into your
+			browser:
+		</Text>
+		<Text
+			className={`text-xs underline underline-offset-2 text-[#8898aa] select-all break-all`}
+		>
+			{url}
+		</Text>
+	</>
+);
+
+export default MainLayout;

package/templates/nest-api/files/emails/password-changed.tsx

@@ -0,0 +1,24 @@
+import * as React from 'react';
+import { Text } from '@react-email/components';
+import { EmailBaseProps } from 'common/types';
+import MainLayout, { Salutation, CN } from './main-layout';
+
+const PasswordChanged = ({ ...props }: EmailBaseProps) => {
+	return (
+		<MainLayout {...props}>
+			<Salutation />
+			<Text className={CN.text}>
+				{
+					'Your password was successfully changed. You can now sign in using your new credentials.'
+				}
+			</Text>
+			<Text className={CN.text}>
+				{
+					"If you didn't make this change or notice anything unusual, please reach out to our support team right away so we can help secure your account."
+				}
+			</Text>
+		</MainLayout>
+	);
+};
+
+export default PasswordChanged;

package/templates/nest-api/files/emails/reset-password.tsx

@@ -0,0 +1,24 @@
+import * as React from 'react';
+import { Text } from '@react-email/components';
+import { EmailBaseProps } from 'common/types';
+import MainLayout, { Salutation, CN } from './main-layout';
+
+const ResetPassword = ({ ...props }: EmailBaseProps) => {
+	return (
+		<MainLayout {...props}>
+			<Salutation />
+			<Text className={CN.text}>
+				{
+					'You have successfully reset your password. You can now sign in using your new credentials.'
+				}
+			</Text>
+			<Text className={CN.text}>
+				{
+					"If you didn't make this change or notice anything unusual, please reach out to our support team right away so we can help secure your account."
+				}
+			</Text>
+		</MainLayout>
+	);
+};
+
+export default ResetPassword;

package/templates/nest-api/files/emails/set-password.tsx

@@ -0,0 +1,25 @@
+import * as React from 'react';
+import { Text } from '@react-email/components';
+import { EmailProps, SetPasswordData } from 'common/types';
+import MainLayout, { Salutation, OTP, CN } from './main-layout';
+
+const SetPassword = ({
+	firstName,
+	token,
+	...props
+}: EmailProps<SetPasswordData>) => {
+	return (
+		<MainLayout {...props}>
+			<Salutation name={firstName} />
+			<Text className={CN.text}>
+				{
+					'A new account has been created for you using your email. Please use the one-time password below to set your account password.'
+				}
+			</Text>
+			<OTP code={token} />
+			<Text className={CN.text}>This code will expire in an hour.</Text>
+		</MainLayout>
+	);
+};
+
+export default SetPassword;