@cherishxn/agent-scaffold 0.0.0-stage → 1.1.0

package/templates/next-fullstack-antd/web/Dockerfile

@@ -0,0 +1,12 @@
+FROM node:24-alpine
+RUN corepack enable && corepack prepare pnpm@10.28.2 --activate
+WORKDIR /app
+COPY web/package.json web/pnpm-lock.yaml web/pnpm-workspace.yaml ./web/
+COPY web/prisma ./web/prisma
+RUN cd web && pnpm install --frozen-lockfile && pnpm exec prisma generate
+COPY project.json ./
+COPY web ./web
+RUN cd web && pnpm run build
+WORKDIR /app/web
+EXPOSE 3000
+CMD ["pnpm", "exec", "next", "start", "--hostname", "0.0.0.0"]

package/templates/next-fullstack-antd/web/app/api/auth/login/route.ts

@@ -0,0 +1 @@
+export {login as POST} from '../../../../lib/api';

package/templates/next-fullstack-antd/web/app/api/auth/logout/route.ts

@@ -0,0 +1 @@
+export {logout as POST} from '../../../../lib/api';

package/templates/next-fullstack-antd/web/app/api/auth/me/route.ts

@@ -0,0 +1 @@
+export {me as GET} from '../../../../lib/api';

package/templates/next-fullstack-antd/web/app/api/health/route.ts

@@ -0,0 +1 @@
+export async function GET(){return Response.json({status:'ok'});}

package/templates/next-fullstack-antd/web/app/api/records/[id]/route.ts

@@ -0,0 +1,5 @@
+import {records} from '../../../../lib/api';
+type Context={params:Promise<{id:string}>};
+export async function GET(request:Request,{params}:Context){return records(request,(await params).id);}
+export async function PUT(request:Request,{params}:Context){return records(request,(await params).id);}
+export async function DELETE(request:Request,{params}:Context){return records(request,(await params).id);}

package/templates/next-fullstack-antd/web/app/api/records/route.ts

@@ -0,0 +1,3 @@
+import {records} from '../../../lib/api';
+export async function GET(request:Request){return records(request);}
+export async function POST(request:Request){return records(request);}

package/templates/next-fullstack-antd/web/app/layout.tsx

@@ -0,0 +1,5 @@
+import {AntdRegistry} from '@ant-design/nextjs-registry';
+import type {Metadata} from 'next';
+import project from '../../project.json';
+export const metadata:Metadata={title:project.nameZh,description:project.description};
+export default function Layout({children}:{children:React.ReactNode}){return <html lang="zh-CN"><body><AntdRegistry>{children}</AntdRegistry></body></html>;}

package/templates/next-fullstack-antd/web/app/page.tsx

@@ -0,0 +1,2 @@
+import App from '../src/App';
+export default function Page(){return <App/>;}

package/templates/next-fullstack-antd/web/eslint.config.mjs

@@ -0,0 +1,3 @@
+import js from '@eslint/js';
+import ts from 'typescript-eslint';
+export default ts.config(js.configs.recommended,...ts.configs.recommended,{languageOptions:{parserOptions:{tsconfigRootDir:import.meta.dirname}},ignores:['.next/**','node_modules/**','dist/**','next-env.d.ts']});

package/templates/next-fullstack-antd/web/lib/api.ts

@@ -0,0 +1,35 @@
+import {getAuth} from './auth';
+import {database} from './db';
+import {idInput,loginInput,pagination,recordInput} from './validation';
+import type {PersonalRecord} from '@prisma/client';
+export function failure(status:number){const messages:Record<number,string>={401:'请重新登录。',403:'请求来源不合法。',404:'记录不存在。',422:'输入不合法，请检查字段和长度。'};return Response.json({error:{code:String(status),message:messages[status]??'请求失败。'}},{status});}
+function sameOrigin(request:Request){return request.headers.get('origin')===process.env.APP_ORIGIN;}
+function serialize(row:PersonalRecord){return {id:row.id,title:row.title,content:row.content,created_at:row.createdAt.toISOString(),updated_at:row.updatedAt.toISOString()};}
+export async function login(request:Request){
+ if(!sameOrigin(request))return failure(403);
+ let body;try{body=loginInput.parse(await request.json());}catch{return failure(422);}
+ try{
+  const response=await getAuth().api.signInEmail({body:{...body,email:body.email.trim().toLowerCase()},headers:request.headers,asResponse:true});
+  if(!response.ok)return failure(response.status===401?401:422);
+  const result=await response.json();const headers=new Headers();for(const cookie of response.headers.getSetCookie())headers.append('set-cookie',cookie);
+  return Response.json({user:{id:result.user.id,email:result.user.email},mode:'session'},{headers});
+ }catch{return failure(401);}
+}
+export async function me(request:Request){const session=await getAuth().api.getSession({headers:request.headers});if(!session)return failure(401);return Response.json({user:{id:session.user.id,email:session.user.email}});}
+export async function logout(request:Request){if(!sameOrigin(request))return failure(403);const session=await getAuth().api.getSession({headers:request.headers});if(!session)return failure(401);const response=await getAuth().api.signOut({headers:request.headers,asResponse:true});if(!response.ok)return failure(500);const headers=new Headers();for(const cookie of response.headers.getSetCookie())headers.append('set-cookie',cookie);return new Response(null,{status:204,headers});}
+export async function records(request:Request,id?:string){
+ try{
+  const session=await getAuth().api.getSession({headers:request.headers});if(!session)return failure(401);
+  if(request.method!=='GET'&&!sameOrigin(request))return failure(403);
+  if(id&&!idInput.safeParse(id).success)return failure(422);
+  const db=database(),ownerId=session.user.id;
+  if(request.method==='GET'&&!id){let page,pageSize;try{const params=new URL(request.url).searchParams;page=pagination(params.get('page'),1,1000000);pageSize=pagination(params.get('pageSize'),10,100);}catch{return failure(422);}const where={ownerId};const [total,items]=await db.$transaction([db.personalRecord.count({where}),db.personalRecord.findMany({where,orderBy:[{createdAt:'desc'},{id:'desc'}],skip:(page-1)*pageSize,take:pageSize})]);return Response.json({items:items.map(serialize),total,page,pageSize});}
+  if(request.method==='POST'&&!id){let data;try{data=recordInput.parse(await request.json());}catch{return failure(422);}return Response.json(serialize(await db.personalRecord.create({data:{...data,ownerId}})),{status:201});}
+  if(!id)return failure(404);
+  const row=await db.personalRecord.findFirst({where:{id,ownerId}});if(!row)return failure(404);
+  if(request.method==='GET')return Response.json(serialize(row));
+  if(request.method==='PUT'){let data;try{data=recordInput.parse(await request.json());}catch{return failure(422);}const result=await db.personalRecord.updateMany({where:{id,ownerId},data});if(!result.count)return failure(404);const updated=await db.personalRecord.findFirst({where:{id,ownerId}});return updated?Response.json(serialize(updated)):failure(404);}
+  if(request.method==='DELETE'){const result=await db.personalRecord.deleteMany({where:{id,ownerId}});return result.count?new Response(null,{status:204}):failure(404);}
+  return failure(404);
+ }catch{return failure(500);}
+}

package/templates/next-fullstack-antd/web/lib/auth.ts

@@ -0,0 +1,10 @@
+import {betterAuth} from 'better-auth';
+import {prismaAdapter} from 'better-auth/adapters/prisma';
+import {database} from './db';
+function createAuth(){
+ const secret=process.env.AUTH_SECRET,baseURL=process.env.APP_ORIGIN;
+ if(!secret||secret.length<32||!baseURL)throw new Error('Provide AUTH_SECRET (32+ chars) and APP_ORIGIN');
+ return betterAuth({secret,baseURL,database:prismaAdapter(database(),{provider:'postgresql'}),trustedOrigins:[baseURL],emailAndPassword:{enabled:true,disableSignUp:process.env.SCAFFOLD_SEED!=='1',minPasswordLength:12},session:{expiresIn:900,updateAge:0,cookieCache:{enabled:false}},advanced:{useSecureCookies:baseURL.startsWith('https://')},logger:{disabled:true}});
+}
+let auth:ReturnType<typeof createAuth>|undefined;
+export function getAuth(){return auth??=createAuth();}

package/templates/next-fullstack-antd/web/lib/db.ts

@@ -0,0 +1,3 @@
+import {PrismaClient} from '@prisma/client';
+let db:PrismaClient|undefined;
+export function database(){return db??=new PrismaClient();}

package/templates/next-fullstack-antd/web/lib/session.test.ts

@@ -0,0 +1,15 @@
+import {afterAll,it,expect} from 'vitest';
+import {login,me,records} from './api';
+import {database} from './db';
+afterAll(async()=>{await database().$disconnect();});
+it('stored session expiration rejects protected reads and writes',async()=>{
+ const origin=process.env.APP_ORIGIN!;
+ const signed=await login(new Request(origin+'/api/auth/login',{method:'POST',headers:{Origin:origin,'Content-Type':'application/json'},body:JSON.stringify({email:process.env.SEED_A_EMAIL,password:process.env.SEED_PASSWORD})}));
+ expect(signed.status).toBe(200);
+ const cookie=signed.headers.getSetCookie().map(value=>value.split(';')[0]).join('; ');
+ const user=(await signed.json()).user;
+ expect((await me(new Request(origin+'/api/auth/me',{headers:{Cookie:cookie}}))).status).toBe(200);
+ await database().session.updateMany({where:{userId:user.id},data:{expiresAt:new Date(Date.now()-1000)}});
+ expect((await me(new Request(origin+'/api/auth/me',{headers:{Cookie:cookie}}))).status).toBe(401);
+ expect((await records(new Request(origin+'/api/records',{method:'POST',headers:{Cookie:cookie,Origin:origin,'Content-Type':'application/json'},body:JSON.stringify({title:'expired',content:''})}))).status).toBe(401);
+});

package/templates/next-fullstack-antd/web/lib/validation.test.ts

@@ -0,0 +1,3 @@
+import {describe,it,expect} from 'vitest';
+import {recordInput,pagination} from './validation';
+describe('record input contract',()=>{it('trims titles and counts Unicode code points',()=>{expect(recordInput.parse({title:'  😀  ',content:''}).title).toBe('😀');expect(recordInput.safeParse({title:'😀'.repeat(120),content:''}).success).toBe(true);expect(recordInput.safeParse({title:'😀'.repeat(121),content:''}).success).toBe(false);});it('rejects owner injection, blanks and oversized content',()=>{for(const input of [{title:'',content:''},{title:'x',content:'',owner_id:'another-user'},{title:'x',content:'a'.repeat(10001)}])expect(recordInput.safeParse(input).success).toBe(false);});it('bounds pagination',()=>{expect(pagination(null,10,100)).toBe(10);expect(()=>pagination('0',10,100)).toThrow();expect(()=>pagination('101',10,100)).toThrow();});});

package/templates/next-fullstack-antd/web/lib/validation.ts

@@ -0,0 +1,5 @@
+import {z} from 'zod';
+export const recordInput=z.object({title:z.string().transform(s=>s.trim()).refine(s=>Array.from(s).length>=1&&Array.from(s).length<=120),content:z.string().refine(s=>Array.from(s).length<=10000)}).strict();
+export const loginInput=z.object({email:z.string().email(),password:z.string().min(1)}).strict();
+export const idInput=z.uuid();
+export function pagination(value:string|null,fallback:number,max:number){if(value===null)return fallback;if(!/^\d+$/.test(value))throw new Error('Invalid pagination');const n=Number(value);if(!Number.isSafeInteger(n)||n<1||n>max)throw new Error('Invalid pagination');return n;}

package/templates/next-fullstack-antd/web/next-env.d.ts

@@ -0,0 +1,7 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
+import "./.next/types/routes.d.ts";
+import "./.next/types/root-params.d.ts";
+
+// NOTE: This file should not be edited
+// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.

package/templates/next-fullstack-antd/web/next.config.ts

@@ -0,0 +1,3 @@
+import type {NextConfig} from 'next';
+const config:NextConfig={...(process.env.SCAFFOLD_DESIGN_DIST_DIR?{distDir:process.env.SCAFFOLD_DESIGN_DIST_DIR}:{})};
+export default config;

package/templates/next-fullstack-antd/web/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "__NAME_EN__-web",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "build": "next build --webpack",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint src app lib scripts",
+    "preview": "vite preview",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "react": "19.3.1",
+    "react-dom": "19.3.1",
+    "antd": "6.6.6",
+    "next": "16.4.2",
+    "better-auth": "1.7.11",
+    "@prisma/client": "6.19.3",
+    "zod": "4.6.7",
+    "@ant-design/nextjs-registry": "1.3.0"
+  },
+  "devDependencies": {
+    "typescript": "5.9.3",
+    "@types/node": "24.19.2",
+    "@types/react": "19.3.0",
+    "@types/react-dom": "19.3.0",
+    "eslint": "10.13.0",
+    "@eslint/js": "10.0.1",
+    "typescript-eslint": "8.71.2",
+    "prisma": "6.19.3",
+    "tsx": "4.23.15",
+    "vitest": "5.0.5"
+  }
+}