@aurostack/stacks 0.1.0

package/templates/nest-api/files/emails/welcome.tsx

@@ -0,0 +1,39 @@
+import * as React from 'react';
+import { Text } from '@react-email/components';
+import { EmailProps, WelcomeData } from 'common/types';
+import MainLayout, { Salutation, CN, CTAButton } from './main-layout';
+
+const Welcome = ({
+	firstName,
+	clientLoginPage,
+	...props
+}: EmailProps<WelcomeData>) => {
+	return (
+		<MainLayout {...props}>
+			<Salutation name={firstName} />
+			<Text className={CN.text}>
+				{
+					"Welcome! Your account is all set, and we're excited to have you here. You can now start using the application by clicking the button below."
+				}
+			</Text>
+
+			<CTAButton text="Go to your dashboard" url={clientLoginPage} />
+			<Text className={CN.text}>
+				If the button above doesn't work, copy and paste the link below into
+				your browser:
+			</Text>
+			<Text
+				className={`text-xs underline underline-offset-2 text-[#525f7f] select-all break-all`}
+			>
+				{clientLoginPage}
+			</Text>
+			<Text className={CN.text}>
+				{
+					'If you ever need help or have questions, our support team is always happy to assist you.'
+				}
+			</Text>
+		</MainLayout>
+	);
+};
+
+export default Welcome;

package/templates/nest-api/files/eslint.config.mjs

@@ -0,0 +1,28 @@
+import js from '@eslint/js';
+import tseslint from 'typescript-eslint';
+import prettierRecommended from 'eslint-plugin-prettier/recommended';
+import globals from 'globals';
+
+export default tseslint.config(
+	{
+		ignores: ['node_modules/', 'dist/', 'coverage/', 'prisma/generated/**']
+	},
+	js.configs.recommended,
+	...tseslint.configs.recommended,
+	{
+		files: ['**/*.ts', '**/*.tsx'],
+		languageOptions: {
+			globals: { ...globals.node, ...globals.vitest }
+		},
+		rules: {
+			'@typescript-eslint/explicit-function-return-type': 'off',
+			'@typescript-eslint/explicit-module-boundary-types': 'off',
+			'@typescript-eslint/no-explicit-any': 'off',
+			'@typescript-eslint/no-namespace': 'off',
+			'@typescript-eslint/no-non-null-assertion': 'off',
+			'@typescript-eslint/no-empty-function': 'off'
+		}
+	},
+	// Last, so Prettier owns formatting and turns off rules that fight it.
+	prettierRecommended
+);

package/templates/nest-api/files/global.d.ts

@@ -0,0 +1,5 @@
+// @feature:start testing
+/// <reference types='vitest/globals' />
+/// <reference types='@suites/doubles.vitest/unit' />
+/// <reference types='@suites/di.nestjs/types' />
+// @feature:end

package/templates/nest-api/files/nest-cli.json

@@ -0,0 +1,8 @@
+{
+	"$schema": "https://json.schemastore.org/nest-cli",
+	"collection": "@nestjs/schematics",
+	"sourceRoot": "src",
+	"compilerOptions": {
+		"deleteOutDir": true
+	}
+}

package/templates/nest-api/files/package.json

@@ -0,0 +1,150 @@
+{
+	"name": "@starter/backend",
+	"version": "0.0.1",
+	"description": "API service",
+	"private": true,
+	"license": "UNLICENSED",
+	"packageManager": "yarn@4.14.1",
+	"scripts": {
+		"start": "ts-node .bin/start.ts",
+		"start:prod": "node dist/src/main",
+		"build": "nest build",
+		"gen": "nest generate",
+		"lint": "eslint \"{src,apps,libs,test}/**/*.ts\" --fix",
+		"format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\"",
+		"email:dev": "email dev -p 5003",
+		"secrets": "ts-node .bin/secrets",
+		"db:generate": "ts-node ./.bin/db.ts",
+		"db:push": "ts-node ./.bin/db.ts -c push",
+		"db:migrate:create": "prisma migrate dev --create-only",
+		"db:migrate": "prisma migrate dev",
+		"db:migrate:prod": "prisma migrate deploy",
+		"db:seed": "ts-node ./.bin/db.ts -c seed",
+		"db:reset": "ts-node ./.bin/db.ts -c reset",
+		"db:studio": "ts-node ./.bin/db.ts -c studio",
+		"test:db:generate": "ts-node ./.bin/db.ts -e test",
+		"test:db:push": "ts-node ./.bin/db.ts -c push -e test",
+		"test:db:seed": "ts-node ./.bin/db.ts -c seed -e test",
+		"test": "dotenv -e .env.test -- vitest run --project unit",
+		"test:watch": "dotenv -e .env.test -- vitest --project unit",
+		"test:ui": "dotenv -e .env.test -- vitest --ui --project unit",
+		"test:e2e": "dotenv -e .env.test -- vitest run --project e2e",
+		"test:e2e:watch": "dotenv -e .env.test -- vitest --project e2e",
+		"test:e2e:ui": "dotenv -e .env.test -- vitest --ui --project e2e",
+		"test:cov": "dotenv -e .env.test -- vitest --coverage",
+		"test:all": "dotenv -e .env.test -- vitest run",
+		"test:all:ui": "dotenv -e .env.test -- vitest --ui",
+		"dc:up": "ts-node ./.bin/dc.ts -c up",
+		"dc:down": "ts-node ./.bin/dc.ts -c down",
+		"dc:wait": "ts-node ./.bin/dc.ts -c wait",
+		"dc:recreate": "ts-node ./.bin/dc.ts -c recreate",
+		"dc:reinstall": "yarn dc:recreate && yarn db:generate && yarn db:migrate && yarn db:seed",
+		"test:dc:up": "ts-node ./.bin/dc.ts -c up -e test",
+		"test:dc:wait": "ts-node ./.bin/dc.ts -c wait -e test",
+		"test:dc:down": "ts-node ./.bin/dc.ts -c down -e test",
+		"test:dc:recreate": "ts-node ./.bin/dc.ts -c recreate -e test",
+		"test:dc:reinstall": "yarn test:dc:recreate && yarn test:db:generate && yarn test:db:push && yarn test:db:seed",
+		"down": "yarn dc:down && yarn test:dc:down",
+		"reinstall": "yarn dc:reinstall && yarn test:dc:reinstall"
+	},
+	"dependencies": {
+		"@apollo/server": "^5.5.1",
+		"@as-integrations/express5": "^1.1.2",
+		"@aws-sdk/client-s3": "^3.1013.0",
+		"@bull-board/api": "^9.10.1",
+		"@bull-board/express": "^9.10.1",
+		"@bull-board/nestjs": "^9.10.1",
+		"@faker-js/faker": "^8.0.2",
+		"@growthbook/growthbook": "^1.6.5",
+		"@nestjs-modules/mailer": "^2.3.7",
+		"@nestjs/apollo": "^14.0.2",
+		"@nestjs/axios": "^12.0.1",
+		"@nestjs/bullmq": "^12.0.0",
+		"@nestjs/common": "^12.1.0",
+		"@nestjs/config": "^12.0.1",
+		"@nestjs/core": "^12.1.0",
+		"@nestjs/graphql": "^14.0.2",
+		"@nestjs/platform-express": "^12.1.0",
+		"@nestjs/platform-socket.io": "^12.1.0",
+		"@nestjs/schedule": "^12.0.2",
+		"@nestjs/swagger": "^12.0.2",
+		"@nestjs/terminus": "^12.1.0",
+		"@nestjs/throttler": "^6.7.1",
+		"@nestjs/websockets": "^12.1.0",
+		"@paralleldrive/cuid2": "^3.3.0",
+		"@prisma/adapter-pg": "^7.4.2",
+		"@prisma/client": "^7.4.2",
+		"@react-email/components": "^0.0.7",
+		"@react-email/render": "^0.0.7",
+		"@scalar/nestjs-api-reference": "^1.2.22",
+		"@socket.io/redis-adapter": "^8",
+		"@thallesp/nestjs-better-auth": "^2.8.0",
+		"@willsoto/nestjs-prometheus": "^6.1.1",
+		"axios": "^1.4.0",
+		"better-auth": "^1.7.6",
+		"bullmq": "^5.79.2",
+		"express": "^5.2.1",
+		"express-basic-auth": "^1.2.1",
+		"graphql": "^16.12.0",
+		"helmet": "^7.0.0",
+		"ioredis": "^5.4.1",
+		"moment": "^2.29.4",
+		"nestjs-pino": "^5.2.0",
+		"nodemailer": "^8.0.11",
+		"pino": "^10.3.1",
+		"pino-http": "^11.0.0",
+		"prom-client": "^15.1.3",
+		"randomstring": "^1.3.0",
+		"react": "^18.2.0",
+		"react-email": "^1.9.4",
+		"reflect-metadata": "^0.1.13",
+		"rxjs": "^7.8.1",
+		"shelljs": "^0.10.0",
+		"socket.io": "4.8.3",
+		"uuid": "^13.0.0",
+		"yargs": "^18.0.0",
+		"zod": "^4.6.5"
+	},
+	"devDependencies": {
+		"@eslint/js": "^10.0.1",
+		"@golevelup/ts-vitest": "^2.2.0",
+		"@nestjs/cli": "^12.0.6",
+		"@nestjs/schematics": "^12.0.5",
+		"@nestjs/testing": "^12.1.0",
+		"@suites/di.nestjs": "^3.0.1",
+		"@suites/doubles.vitest": "^3.0.1",
+		"@suites/unit": "^3.0.1",
+		"@swc/core": "^1.15.18",
+		"@types/express": "^5.0.6",
+		"@types/multer": "^1.4.7",
+		"@types/node": "^25.0.9",
+		"@types/nodemailer": "^8.0.2",
+		"@types/randomstring": "^1.1.8",
+		"@types/react": "^18.2.14",
+		"@types/shelljs": "^0.10.0",
+		"@types/supertest": "^2.0.12",
+		"@types/yargs": "^17.0.35",
+		"@vitest/coverage-v8": "^4.1.11",
+		"@vitest/ui": "^4.1.11",
+		"cross-env": "^7.0.3",
+		"dotenv-cli": "^7.2.1",
+		"eslint": "^10.11.0",
+		"eslint-config-prettier": "^10.1.8",
+		"eslint-plugin-prettier": "^5.5.6",
+		"fishery": "^2.2.2",
+		"globals": "^17.12.0",
+		"pino-pretty": "^13.1.3",
+		"prettier": "^3.9.9",
+		"prisma": "^7.4.2",
+		"prisma-dbml-generator": "^0.12.0",
+		"source-map-support": "^0.5.21",
+		"supertest": "^6.3.3",
+		"ts-loader": "^9.4.3",
+		"ts-node": "^10.9.2",
+		"tsconfig-paths": "^4.2.0",
+		"typescript": "~6.0.3",
+		"typescript-eslint": "^8.70.1",
+		"unplugin-swc": "^1.5.9",
+		"vitest": "^4.1.11"
+	}
+}

package/templates/nest-api/files/prisma/schema/auth.prisma

@@ -0,0 +1,75 @@
+model User {
+  id                    String    @id(map: "user_pk")
+  name                  String
+  email                 String
+  emailVerified         Boolean   @default(false) @map("email_verified")
+  image                 String?
+  createdAt             DateTime  @default(now()) @map("created_at")
+  updatedAt             DateTime  @updatedAt @map("updated_at")
+  role                  String?
+  banned                Boolean?  @default(false)
+  banReason             String?   @map("ban_reason")
+  banExpires            DateTime? @map("ban_expires")
+  /// Set once the user finishes onboarding. Declared as a better-auth
+  /// additionalField with `input: false`, so it rides on the session but a
+  /// client cannot set it for itself.
+  onboardingCompletedAt DateTime? @map("onboarding_completed_at")
+
+  sessions      Session[]
+  accounts      Account[]
+  notifications Notification[] // @feature notifications
+
+  @@unique([email], map: "user_email_idx")
+  @@map("user")
+}
+
+model Session {
+  id             String   @id(map: "session_pk")
+  expiresAt      DateTime @map("expires_at")
+  token          String
+  createdAt      DateTime @default(now()) @map("created_at")
+  updatedAt      DateTime @updatedAt @map("updated_at")
+  ipAddress      String?  @map("ip_address")
+  userAgent      String?  @map("user_agent")
+  userId         String   @map("user_id")
+  user           User     @relation(fields: [userId], references: [id], onDelete: Cascade, map: "session_user_fk")
+  impersonatedBy String?  @map("impersonated_by")
+
+  @@unique([token], map: "session_token_idx")
+  @@index([userId], map: "session_user_id_idx")
+  @@map("session")
+}
+
+model Account {
+  id                    String    @id(map: "account_pk")
+  accountId             String    @map("account_id")
+  providerId            String    @map("provider_id")
+  userId                String    @map("user_id")
+  accessToken           String?   @map("access_token")
+  refreshToken          String?   @map("refresh_token")
+  idToken               String?   @map("id_token")
+  accessTokenExpiresAt  DateTime? @map("access_token_expires_at")
+  refreshTokenExpiresAt DateTime? @map("refresh_token_expires_at")
+  scope                 String?
+  password              String?
+  createdAt             DateTime  @default(now()) @map("created_at")
+  updatedAt             DateTime  @updatedAt @map("updated_at")
+  user                  User      @relation(fields: [userId], references: [id], onDelete: Cascade, map: "account_user_fk")
+
+  @@index([userId], map: "account_user_idx")
+  @@index(providerId, map: "account_provider_idx")
+  @@index([accountId], map: "account_account_idx")
+  @@map("account")
+}
+
+model Verification {
+  id         String   @id(map: "verification_pk")
+  identifier String
+  value      String
+  expiresAt  DateTime @map("expires_at")
+  createdAt  DateTime @default(now()) @map("created_at")
+  updatedAt  DateTime @updatedAt @map("updated_at")
+
+  @@index([identifier], map: "verification_identifier_idx")
+  @@map("verification")
+}

package/templates/nest-api/files/prisma/schema/base.prisma

@@ -0,0 +1,17 @@
+datasource db {
+  provider = "postgresql"
+}
+
+generator client {
+  provider        = "prisma-client"
+  output          = "../generated"
+  moduleFormat    = "cjs"
+  previewFeatures = ["views", "fullTextSearchPostgres"]
+}
+
+generator dbml {
+  provider            = "prisma-dbml-generator"
+  output              = "../"
+  projectName         = "AcmeCorp"
+  projectDatabaseType = "PostgreSQL"
+}

package/templates/nest-api/files/prisma/schema/enum.prisma

@@ -0,0 +1,17 @@
+enum Gender {
+  male
+  female
+}
+
+// @feature:start notifications
+/// Every kind of notification the app can raise. Extend this enum and the
+/// producer's `NotificationsService.dispatch` call together — a value here with
+/// no producer is dead, and a producer with no value will not compile.
+enum NotificationType {
+  system
+  mention
+  comment
+  reply
+}
+
+// @feature:end

package/templates/nest-api/files/prisma/schema/notification.prisma

@@ -0,0 +1,14 @@
+model Notification {
+  id        String           @id(map: "notifications_pk") @default(cuid())
+  userId    String           @map("user_id")
+  type      NotificationType
+  data      Json
+  readAt    DateTime?        @map("read_at")
+  createdAt DateTime         @default(now()) @map("created_at")
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade, onUpdate: Cascade, map: "notifications_user_fk")
+
+  @@index([userId, readAt], map: "notifications_user_read_idx")
+  @@index([userId, createdAt], map: "notifications_user_created_idx")
+  @@map("notifications")
+}

package/templates/nest-api/files/prisma.config.ts

@@ -0,0 +1,13 @@
+import 'dotenv/config';
+import { defineConfig } from 'prisma/config';
+
+export default defineConfig({
+	schema: 'prisma/schema',
+	migrations: {
+		path: 'prisma/migrations',
+		seed: 'ts-node seeders'
+	},
+	datasource: {
+		url: process.env['DATABASE_URL']
+	}
+});

package/templates/nest-api/files/seeders/index.ts

@@ -0,0 +1,27 @@
+import 'dotenv/config';
+import { PrismaPg } from '@prisma/adapter-pg';
+import { PrismaClient } from '../prisma/generated/client';
+import Seeder from './util';
+
+const prisma = new PrismaClient({
+	adapter: new PrismaPg({
+		connectionString: process.env.DATABASE_URL
+	})
+});
+
+(async () => {
+	const env = process.env.APP_ENV;
+	const email = process.env.SUPERUSER_EMAIL;
+	const password = process.env.SUPERUSER_PASSWORD;
+	if (!email || !password) {
+		throw Error('Missing admin credentials');
+	}
+	await Seeder.setup(prisma).seed({ email, password }, env === 'test');
+})()
+	.catch((e) => {
+		console.error(e);
+		process.exit(1);
+	})
+	.finally(async () => {
+		await prisma.$disconnect();
+	});

package/templates/nest-api/files/seeders/util.ts

@@ -0,0 +1,88 @@
+import 'dotenv/config';
+import { auth } from '../src/lib/auth';
+import { PrismaClient } from '../prisma/generated/client';
+
+interface Admin {
+	email: string;
+	password: string;
+}
+
+/**
+ * Database seeder.
+ *
+ * Users are created through better-auth's own API rather than by inserting rows
+ * directly — password hashing, account linking and role assignment all live
+ * there, and a hand-written `user` row cannot sign in.
+ *
+ * Add reference-data seeds as private methods and call them from `seed()`.
+ * Anything only tests need goes behind the `isTest` flag.
+ */
+class Seeder {
+	private constructor(private readonly db: PrismaClient) {}
+
+	get instance() {
+		return this.db;
+	}
+
+	static setup(db: PrismaClient) {
+		return new Seeder(db);
+	}
+
+	async seed(admin: Admin, isTest = false) {
+		await this.seedSuperuser(admin);
+
+		if (isTest) {
+			await this.seedTestUsers();
+		}
+	}
+
+	private async seedSuperuser(admin: Admin) {
+		await auth.api.createUser({
+			body: {
+				name: 'Super User',
+				email: admin.email,
+				password: admin.password,
+				role: 'superuser'
+			}
+		});
+		await this.db.user.update({
+			where: { email: admin.email },
+			data: { emailVerified: true }
+		});
+	}
+
+	private async seedTestUsers() {
+		const users = [
+			{
+				name: 'Test Admin',
+				email: 'test.admin@example.com',
+				password: 'secret',
+				role: 'admin' as const
+			},
+			{
+				name: 'Test User',
+				email: 'test.user@example.com',
+				password: 'secret',
+				role: 'user' as const
+			}
+		];
+
+		for (const user of users) {
+			await auth.api.createUser({
+				body: {
+					name: user.name,
+					email: user.email,
+					password: user.password,
+					role: user.role
+				}
+			});
+		}
+
+		await this.db.user.updateMany({
+			where: { email: { in: users.map((u) => u.email) } },
+			data: { emailVerified: true }
+		});
+	}
+}
+
+export default Seeder;

package/templates/nest-api/files/src/__tests__/app.controller.spec.ts

@@ -0,0 +1,29 @@
+import { TestBed } from '@suites/unit';
+import { SWAGGER_OPTIONS } from 'common/constants';
+import { AppController } from 'app.controller';
+
+describe('AppController', () => {
+	let controller: AppController;
+
+	beforeAll(async () => {
+		const { unit } = await TestBed.solitary(AppController).compile();
+		controller = unit;
+	});
+
+	it('should be defined', () => {
+		expect(controller).toBeDefined();
+	});
+
+	it('should return an object with title and description properties', () => {
+		const result = controller.index();
+		expect(result).toHaveProperty('title');
+		expect(result).toHaveProperty('description');
+	});
+
+	it('should use the SWAGGER_OPTIONS constant to retrieve the title and description', () => {
+		const result = controller.index();
+		const { info } = SWAGGER_OPTIONS;
+		expect(result.title).toBe(info.title);
+		expect(result.description).toBe(info.description);
+	});
+});

package/templates/nest-api/files/src/app.controller.ts

@@ -0,0 +1,40 @@
+import { Controller, Get, Version, VERSION_NEUTRAL } from '@nestjs/common';
+import { Throttle } from '@nestjs/throttler'; // @feature rate-limit
+import { ApiExcludeEndpoint, ApiTags } from '@nestjs/swagger';
+import { AllowAnonymous } from '@thallesp/nestjs-better-auth';
+import { SWAGGER_OPTIONS } from 'common/constants';
+import { Op } from 'common/decorators';
+
+@ApiTags('App')
+@Controller()
+export class AppController {
+	@Get()
+	@ApiExcludeEndpoint()
+	@Op('index', '/', 'Get basic information about the API')
+	@Version(VERSION_NEUTRAL)
+	@AllowAnonymous()
+	index() {
+		const { info } = SWAGGER_OPTIONS;
+		return {
+			title: info.title,
+			description: info.description
+		};
+	}
+
+	// @feature:start rate-limit
+	/**
+	 * Demonstrates a per-route limit tighter than the global default. Tighten a
+	 * route with `@Throttle({ default: { limit, ttl } })`; exempt one with
+	 * `@SkipThrottle()`. Note the TTL is in **milliseconds**.
+	 */
+	@Get('ping')
+	@ApiExcludeEndpoint()
+	@Op('ping', '/ping', 'Liveness probe with a per-route rate limit')
+	@Version(VERSION_NEUTRAL)
+	@AllowAnonymous()
+	@Throttle({ default: { limit: 30, ttl: 60_000 } })
+	ping() {
+		return { ok: true };
+	}
+	// @feature:end
+}