@clubedge/create-clubedge-app 0.3.0 → 0.4.0

package/template/apps/start/src/env/server.test.ts

@@ -0,0 +1,48 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+async function loadFreshModule() {
+  vi.resetModules();
+  return import("./server");
+}
+
+describe("server env", () => {
+  afterEach(() => {
+    vi.unstubAllEnvs();
+  });
+
+  it("does not validate at import time", async () => {
+    vi.stubEnv("DATABASE_URL", "");
+    await expect(loadFreshModule()).resolves.toBeDefined();
+  });
+
+  it("throws on first use when required variables are missing", async () => {
+    vi.stubEnv("DATABASE_URL", "");
+    const { getServerEnv } = await loadFreshModule();
+    vi.spyOn(console, "error").mockImplementation(() => {});
+    expect(() => getServerEnv()).toThrow("Server environment validation failed");
+  });
+
+  it("reports Supabase Auth only when both values are present", async () => {
+    const { getSupabaseAuthEnv } = await loadFreshModule();
+    vi.stubEnv("SUPABASE_URL", "https://project.supabase.co");
+    vi.stubEnv("SUPABASE_PUBLISHABLE_KEY", "");
+    expect(getSupabaseAuthEnv()).toBeNull();
+
+    vi.stubEnv("SUPABASE_PUBLISHABLE_KEY", "sb_publishable_123");
+    expect(getSupabaseAuthEnv()).toEqual({
+      url: "https://project.supabase.co",
+      publishableKey: "sb_publishable_123",
+    });
+
+    vi.stubEnv("SUPABASE_URL", "not a url");
+    expect(() => getSupabaseAuthEnv()).toThrow("SUPABASE_URL must be an absolute URL.");
+  });
+
+  it("defaults APP_URL for local development", async () => {
+    const { getAppUrl } = await loadFreshModule();
+    vi.stubEnv("APP_URL", "");
+    expect(getAppUrl()).toBe("http://localhost:3000");
+    vi.stubEnv("APP_URL", "https://app.example");
+    expect(getAppUrl()).toBe("https://app.example");
+  });
+});

package/template/apps/start/src/env/server.ts

@@ -0,0 +1,67 @@
+import { z } from "zod";
+
+const optional = <T extends z.ZodType>(schema: T) => schema.optional().or(z.literal(""));
+
+const serverSchema = z.object({
+  NODE_ENV: z.enum(["development", "test", "production"]).default("development"),
+  APP_URL: z.url().default("http://localhost:3000"),
+  DATABASE_URL: z.string().min(1, "DATABASE_URL is required"),
+  SUPABASE_URL: optional(z.url()),
+  SUPABASE_PUBLISHABLE_KEY: optional(z.string()),
+  REDIS_URL: optional(z.url({ protocol: /^rediss?$/ })),
+  STORAGE_PROVIDER: z.enum(["s3", "supabase"]).default("s3"),
+  STORAGE_BUCKET: optional(z.string()),
+  STORAGE_REGION: z.string().default("auto"),
+  STORAGE_ENDPOINT: optional(z.url()),
+  STORAGE_ACCESS_KEY_ID: optional(z.string()),
+  STORAGE_SECRET_ACCESS_KEY: optional(z.string()),
+  STORAGE_PUBLIC_URL: optional(z.url()),
+  SUPABASE_STORAGE_BUCKET: optional(z.string()),
+});
+
+export type ServerEnv = z.infer<typeof serverSchema>;
+
+let cached: ServerEnv | undefined;
+
+/**
+ * Validates server variables on first use rather than at import, so pages that never touch
+ * the database or providers can build and render without them.
+ */
+export function getServerEnv(): ServerEnv {
+  if (cached) return cached;
+
+  const parsed = serverSchema.safeParse(process.env);
+  if (!parsed.success) {
+    console.error("Invalid server environment:", z.treeifyError(parsed.error));
+    throw new Error("Server environment validation failed. Check your .env.local file.");
+  }
+  cached = parsed.data;
+  return cached;
+}
+
+/** The public origin used in emailed links. Validates only APP_URL. */
+export function getAppUrl(): string {
+  const parsed = serverSchema.shape.APP_URL.safeParse(process.env.APP_URL || undefined);
+  if (!parsed.success) throw new Error("APP_URL must be an absolute URL.");
+  return parsed.data;
+}
+
+export interface SupabaseAuthEnv {
+  url: string;
+  publishableKey: string;
+}
+
+/** Supabase Auth settings, or null while they are not configured. Validates only those keys. */
+export function getSupabaseAuthEnv(): SupabaseAuthEnv | null {
+  const url = serverSchema.shape.SUPABASE_URL.safeParse(process.env.SUPABASE_URL);
+  if (!url.success) throw new Error("SUPABASE_URL must be an absolute URL.");
+  const publishableKey = process.env.SUPABASE_PUBLISHABLE_KEY;
+  return url.data && publishableKey ? { url: url.data, publishableKey } : null;
+}
+
+/** Validates only REDIS_URL, so cache and rate limiting work without the rest of the env. */
+export function getRedisUrl(): string | undefined {
+  const parsed = serverSchema.shape.REDIS_URL.safeParse(process.env.REDIS_URL);
+  if (!parsed.success) throw new Error("REDIS_URL must be a redis:// or rediss:// URL.");
+  return parsed.data || undefined;
+}

package/template/apps/start/src/lib/login-url.test.ts

@@ -0,0 +1,16 @@
+import { describe, expect, it } from "vitest";
+import { loginUrl } from "./login-url";
+
+describe("loginUrl", () => {
+  it("builds the plain login path", () => {
+    expect(loginUrl()).toBe("/login");
+  });
+
+  it("omits the default destination and encodes everything else", () => {
+    expect(loginUrl({ next: "/dashboard" })).toBe("/login");
+    expect(loginUrl({ mode: "signup", error: "invalid-input", next: "/a?b=c" })).toBe(
+      "/login?mode=signup&error=invalid-input&next=%2Fa%3Fb%3Dc",
+    );
+    expect(loginUrl({ mode: "signup", checkEmail: true })).toBe("/login?mode=signup&check-email=1");
+  });
+});

package/template/apps/start/src/lib/login-url.ts

@@ -0,0 +1,16 @@
+type LoginUrlOptions = {
+  mode?: "signin" | "signup";
+  error?: string;
+  next?: string;
+  checkEmail?: boolean;
+};
+
+export function loginUrl({ mode = "signin", error, next, checkEmail }: LoginUrlOptions = {}) {
+  const params = new URLSearchParams();
+  if (mode === "signup") params.set("mode", "signup");
+  if (error) params.set("error", error);
+  if (checkEmail) params.set("check-email", "1");
+  if (next && next !== "/dashboard") params.set("next", next);
+  const query = params.toString();
+  return query ? `/login?${query}` : "/login";
+}

package/template/apps/start/src/routeTree.gen.ts

@@ -0,0 +1,220 @@
+/* eslint-disable */
+
+// @ts-nocheck
+
+// noinspection JSUnusedGlobalSymbols
+
+// This file was automatically generated by TanStack Router.
+// You should NOT make any changes in this file as it will be overwritten.
+// Additionally, you should also exclude this file from your linter and/or formatter to prevent it from being checked or modified.
+
+import { Route as rootRouteImport } from './routes/__root'
+import { Route as IndexRouteImport } from './routes/index'
+import { Route as DashboardRouteImport } from './routes/dashboard'
+import { Route as LoginRouteImport } from './routes/login'
+import { Route as ApiHealthRouteImport } from './routes/api/health'
+import { Route as AuthCallbackRouteImport } from './routes/auth/callback'
+import { Route as AuthSignInRouteImport } from './routes/auth/sign-in'
+import { Route as AuthSignOutRouteImport } from './routes/auth/sign-out'
+import { Route as AuthSignUpRouteImport } from './routes/auth/sign-up'
+
+const IndexRoute = IndexRouteImport.update({
+  id: '/',
+  path: '/',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const DashboardRoute = DashboardRouteImport.update({
+  id: '/dashboard',
+  path: '/dashboard',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const LoginRoute = LoginRouteImport.update({
+  id: '/login',
+  path: '/login',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const ApiHealthRoute = ApiHealthRouteImport.update({
+  id: '/api/health',
+  path: '/api/health',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const AuthCallbackRoute = AuthCallbackRouteImport.update({
+  id: '/auth/callback',
+  path: '/auth/callback',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const AuthSignInRoute = AuthSignInRouteImport.update({
+  id: '/auth/sign-in',
+  path: '/auth/sign-in',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const AuthSignOutRoute = AuthSignOutRouteImport.update({
+  id: '/auth/sign-out',
+  path: '/auth/sign-out',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const AuthSignUpRoute = AuthSignUpRouteImport.update({
+  id: '/auth/sign-up',
+  path: '/auth/sign-up',
+  getParentRoute: () => rootRouteImport,
+} as any)
+
+export interface FileRoutesByFullPath {
+  '/': typeof IndexRoute
+  '/dashboard': typeof DashboardRoute
+  '/login': typeof LoginRoute
+  '/api/health': typeof ApiHealthRoute
+  '/auth/callback': typeof AuthCallbackRoute
+  '/auth/sign-in': typeof AuthSignInRoute
+  '/auth/sign-out': typeof AuthSignOutRoute
+  '/auth/sign-up': typeof AuthSignUpRoute
+}
+export interface FileRoutesByTo {
+  '/': typeof IndexRoute
+  '/dashboard': typeof DashboardRoute
+  '/login': typeof LoginRoute
+  '/api/health': typeof ApiHealthRoute
+  '/auth/callback': typeof AuthCallbackRoute
+  '/auth/sign-in': typeof AuthSignInRoute
+  '/auth/sign-out': typeof AuthSignOutRoute
+  '/auth/sign-up': typeof AuthSignUpRoute
+}
+export interface FileRoutesById {
+  __root__: typeof rootRouteImport
+  '/': typeof IndexRoute
+  '/dashboard': typeof DashboardRoute
+  '/login': typeof LoginRoute
+  '/api/health': typeof ApiHealthRoute
+  '/auth/callback': typeof AuthCallbackRoute
+  '/auth/sign-in': typeof AuthSignInRoute
+  '/auth/sign-out': typeof AuthSignOutRoute
+  '/auth/sign-up': typeof AuthSignUpRoute
+}
+export interface FileRouteTypes {
+  fileRoutesByFullPath: FileRoutesByFullPath
+  fullPaths:
+    | '/'
+    | '/dashboard'
+    | '/login'
+    | '/api/health'
+    | '/auth/callback'
+    | '/auth/sign-in'
+    | '/auth/sign-out'
+    | '/auth/sign-up'
+  fileRoutesByTo: FileRoutesByTo
+  to:
+    | '/'
+    | '/dashboard'
+    | '/login'
+    | '/api/health'
+    | '/auth/callback'
+    | '/auth/sign-in'
+    | '/auth/sign-out'
+    | '/auth/sign-up'
+  id:
+    | '__root__'
+    | '/'
+    | '/dashboard'
+    | '/login'
+    | '/api/health'
+    | '/auth/callback'
+    | '/auth/sign-in'
+    | '/auth/sign-out'
+    | '/auth/sign-up'
+  fileRoutesById: FileRoutesById
+}
+export interface RootRouteChildren {
+  IndexRoute: typeof IndexRoute
+  DashboardRoute: typeof DashboardRoute
+  LoginRoute: typeof LoginRoute
+  ApiHealthRoute: typeof ApiHealthRoute
+  AuthCallbackRoute: typeof AuthCallbackRoute
+  AuthSignInRoute: typeof AuthSignInRoute
+  AuthSignOutRoute: typeof AuthSignOutRoute
+  AuthSignUpRoute: typeof AuthSignUpRoute
+}
+
+declare module '@tanstack/react-router' {
+  interface FileRoutesByPath {
+    '/': {
+      id: '/'
+      path: '/'
+      fullPath: '/'
+      preLoaderRoute: typeof IndexRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/dashboard': {
+      id: '/dashboard'
+      path: '/dashboard'
+      fullPath: '/dashboard'
+      preLoaderRoute: typeof DashboardRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/login': {
+      id: '/login'
+      path: '/login'
+      fullPath: '/login'
+      preLoaderRoute: typeof LoginRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/health': {
+      id: '/api/health'
+      path: '/api/health'
+      fullPath: '/api/health'
+      preLoaderRoute: typeof ApiHealthRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/auth/callback': {
+      id: '/auth/callback'
+      path: '/auth/callback'
+      fullPath: '/auth/callback'
+      preLoaderRoute: typeof AuthCallbackRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/auth/sign-in': {
+      id: '/auth/sign-in'
+      path: '/auth/sign-in'
+      fullPath: '/auth/sign-in'
+      preLoaderRoute: typeof AuthSignInRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/auth/sign-out': {
+      id: '/auth/sign-out'
+      path: '/auth/sign-out'
+      fullPath: '/auth/sign-out'
+      preLoaderRoute: typeof AuthSignOutRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/auth/sign-up': {
+      id: '/auth/sign-up'
+      path: '/auth/sign-up'
+      fullPath: '/auth/sign-up'
+      preLoaderRoute: typeof AuthSignUpRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+  }
+}
+
+const rootRouteChildren: RootRouteChildren = {
+  IndexRoute: IndexRoute,
+  DashboardRoute: DashboardRoute,
+  LoginRoute: LoginRoute,
+  ApiHealthRoute: ApiHealthRoute,
+  AuthCallbackRoute: AuthCallbackRoute,
+  AuthSignInRoute: AuthSignInRoute,
+  AuthSignOutRoute: AuthSignOutRoute,
+  AuthSignUpRoute: AuthSignUpRoute,
+}
+export const routeTree = rootRouteImport
+  ._addFileChildren(rootRouteChildren)
+  ._addFileTypes<FileRouteTypes>()
+
+import type { getRouter } from './router.tsx'
+import type { startInstance } from './start.ts'
+declare module '@tanstack/react-start' {
+  interface Register {
+    ssr: true
+    router: Awaited<ReturnType<typeof getRouter>>
+    config: Awaited<ReturnType<typeof startInstance.getOptions>>
+  }
+}

package/template/apps/start/src/router.tsx

@@ -0,0 +1,27 @@
+import { createRouter } from "@tanstack/react-router";
+import { routeTree } from "./routeTree.gen";
+
+// Plain ?key=value search params, as in the Next.js app and the URLs built by loginUrl().
+// The router's default JSON encoding would rewrite ?check-email=1 to ?check-email=%221%22.
+function parseSearch(search: string): Record<string, string> {
+  return Object.fromEntries(new URLSearchParams(search));
+}
+
+function stringifySearch(search: Record<string, unknown>): string {
+  const params = new URLSearchParams();
+  for (const [key, value] of Object.entries(search)) {
+    if (value !== undefined && value !== null) params.set(key, String(value));
+  }
+  const query = params.toString();
+  return query ? `?${query}` : "";
+}
+
+export function getRouter() {
+  return createRouter({
+    routeTree,
+    parseSearch,
+    stringifySearch,
+    scrollRestoration: true,
+    defaultPreload: "intent",
+  });
+}

package/template/apps/start/src/routes/__root.tsx

@@ -0,0 +1,59 @@
+import type { ReactNode } from "react";
+import { HeadContent, Outlet, Scripts, createRootRoute } from "@tanstack/react-router";
+import { TooltipProvider } from "@clubedge/ui/components/tooltip";
+import { ThemeProvider } from "@/components/theme/theme-provider";
+import { siteConfig } from "@/config/site";
+import appCss from "../styles.css?url";
+
+// Applies the saved or preferred theme before first paint to avoid a flash.
+const themeBootstrap = `try {
+  const saved = localStorage.getItem("clubedge-theme");
+  const theme = saved === "light" || saved === "dark"
+    ? saved
+    : window.matchMedia("(prefers-color-scheme: dark)").matches ? "dark" : "light";
+  document.documentElement.classList.toggle("dark", theme === "dark");
+  document.documentElement.style.colorScheme = theme;
+} catch {}
+`;
+
+export const Route = createRootRoute({
+  head: () => ({
+    meta: [
+      { charSet: "utf-8" },
+      { name: "viewport", content: "width=device-width, initial-scale=1" },
+      { title: siteConfig.name },
+      { name: "description", content: siteConfig.description },
+    ],
+    links: [
+      { rel: "stylesheet", href: appCss },
+      { rel: "icon", href: "/favicon.ico" },
+    ],
+    scripts: [{ children: themeBootstrap }],
+  }),
+  shellComponent: RootDocument,
+  component: RootComponent,
+});
+
+function RootComponent() {
+  return (
+    <ThemeProvider>
+      <TooltipProvider>
+        <Outlet />
+      </TooltipProvider>
+    </ThemeProvider>
+  );
+}
+
+function RootDocument({ children }: Readonly<{ children: ReactNode }>) {
+  return (
+    <html lang="en" suppressHydrationWarning>
+      <head>
+        <HeadContent />
+      </head>
+      <body>
+        {children}
+        <Scripts />
+      </body>
+    </html>
+  );
+}

package/template/apps/start/src/routes/api/health.ts

@@ -0,0 +1,15 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { siteConfig } from "@/config/site";
+
+export const Route = createFileRoute("/api/health")({
+  server: {
+    handlers: {
+      GET: () =>
+        Response.json({
+          status: "ok",
+          service: siteConfig.serviceId,
+          timestamp: new Date().toISOString(),
+        }),
+    },
+  },
+});

package/template/apps/start/src/routes/auth/callback.ts

@@ -0,0 +1,10 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { handleAuthCallback } from "@/server/auth-forms";
+
+export const Route = createFileRoute("/auth/callback")({
+  server: {
+    handlers: {
+      GET: ({ request }) => handleAuthCallback(request),
+    },
+  },
+});

package/template/apps/start/src/routes/auth/sign-in.ts

@@ -0,0 +1,11 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { handleFormEndpointVisit, handleSignIn } from "@/server/auth-forms";
+
+export const Route = createFileRoute("/auth/sign-in")({
+  server: {
+    handlers: {
+      GET: () => handleFormEndpointVisit(),
+      POST: ({ request }) => handleSignIn(request),
+    },
+  },
+});

package/template/apps/start/src/routes/auth/sign-out.ts

@@ -0,0 +1,11 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { handleFormEndpointVisit, handleSignOut } from "@/server/auth-forms";
+
+export const Route = createFileRoute("/auth/sign-out")({
+  server: {
+    handlers: {
+      GET: () => handleFormEndpointVisit(),
+      POST: () => handleSignOut(),
+    },
+  },
+});

package/template/apps/start/src/routes/auth/sign-up.ts

@@ -0,0 +1,11 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { handleFormEndpointVisit, handleSignUp } from "@/server/auth-forms";
+
+export const Route = createFileRoute("/auth/sign-up")({
+  server: {
+    handlers: {
+      GET: () => handleFormEndpointVisit(),
+      POST: ({ request }) => handleSignUp(request),
+    },
+  },
+});