@dewtech/dare-cli 3.0.0 → 3.2.0

package/templates/stacks/node-nestjs/src/auth/auth.controller.ts

@@ -0,0 +1,29 @@
+import { Body, Controller, Get, HttpCode, Post, Req, UseGuards } from '@nestjs/common';
+import { AuthGuard } from '@nestjs/passport';
+import { ApiBearerAuth, ApiOperation, ApiTags } from '@nestjs/swagger';
+import type { Request } from 'express';
+import { AuthService } from './auth.service.js';
+import { LoginDto } from './dto/login.dto.js';
+import { LoginResponseDto } from './dto/login-response.dto.js';
+import { UserDto } from '../users/dto/user.dto.js';
+
+@ApiTags('auth')
+@Controller('auth')
+export class AuthController {
+  constructor(private readonly auth: AuthService) {}
+
+  @Post('login')
+  @HttpCode(200)
+  @ApiOperation({ summary: 'Exchange email+password for a JWT' })
+  login(@Body() dto: LoginDto): Promise<LoginResponseDto> {
+    return this.auth.login(dto);
+  }
+
+  @Get('me')
+  @UseGuards(AuthGuard('jwt'))
+  @ApiBearerAuth()
+  @ApiOperation({ summary: 'Current authenticated user' })
+  me(@Req() req: Request): UserDto {
+    return req.user as UserDto;
+  }
+}

package/templates/stacks/node-nestjs/src/auth/auth.module.ts

@@ -0,0 +1,25 @@
+import { Module } from '@nestjs/common';
+import { JwtModule } from '@nestjs/jwt';
+import { PassportModule } from '@nestjs/passport';
+import { ConfigService } from '@nestjs/config';
+import { AuthController } from './auth.controller.js';
+import { AuthService } from './auth.service.js';
+import { JwtStrategy } from './jwt.strategy.js';
+import { UsersModule } from '../users/users.module.js';
+
+@Module({
+  imports: [
+    PassportModule,
+    JwtModule.registerAsync({
+      inject: [ConfigService],
+      useFactory: (config: ConfigService) => ({
+        secret: config.get<string>('JWT_SECRET'),
+        signOptions: { expiresIn: config.get<string>('JWT_EXPIRES_IN', '15m') },
+      }),
+    }),
+    UsersModule,
+  ],
+  controllers: [AuthController],
+  providers: [AuthService, JwtStrategy],
+})
+export class AuthModule {}

package/templates/stacks/node-nestjs/src/auth/auth.service.ts

@@ -0,0 +1,36 @@
+import { Injectable, UnauthorizedException } from '@nestjs/common';
+import { JwtService } from '@nestjs/jwt';
+import { ConfigService } from '@nestjs/config';
+import * as bcrypt from 'bcrypt';
+import { UsersRepository } from '../users/users.repository.js';
+import { LoginDto } from './dto/login.dto.js';
+import { LoginResponseDto } from './dto/login-response.dto.js';
+
+@Injectable()
+export class AuthService {
+  constructor(
+    private readonly users: UsersRepository,
+    private readonly jwt: JwtService,
+    private readonly config: ConfigService,
+  ) {}
+
+  async login(dto: LoginDto): Promise<LoginResponseDto> {
+    const user = await this.users.findByEmail(dto.email);
+    if (!user) throw new UnauthorizedException('Invalid credentials');
+    const ok = await bcrypt.compare(dto.password, user.password);
+    if (!ok) throw new UnauthorizedException('Invalid credentials');
+
+    const payload = { sub: user.id, email: user.email, role: user.role };
+    const accessToken = await this.jwt.signAsync(payload);
+    const expiresIn = parseExpires(this.config.get<string>('JWT_EXPIRES_IN', '15m'));
+    return { accessToken, expiresIn };
+  }
+}
+
+function parseExpires(expr: string): number {
+  const m = /^(\d+)([smhd])$/.exec(expr);
+  if (!m) return 900;
+  const n = Number(m[1]);
+  const mult = { s: 1, m: 60, h: 3600, d: 86400 }[m[2] as 's' | 'm' | 'h' | 'd'];
+  return n * mult;
+}

package/templates/stacks/node-nestjs/src/auth/dto/login-response.dto.ts

@@ -0,0 +1,9 @@
+import { ApiProperty } from '@nestjs/swagger';
+
+export class LoginResponseDto {
+  @ApiProperty()
+  accessToken!: string;
+
+  @ApiProperty({ description: 'Seconds until token expiry' })
+  expiresIn!: number;
+}

package/templates/stacks/node-nestjs/src/auth/dto/login.dto.ts

@@ -0,0 +1,17 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { IsEmail, IsString, Matches, MinLength } from 'class-validator';
+import { Transform } from 'class-transformer';
+
+export class LoginDto {
+  @ApiProperty({ example: 'user@example.com' })
+  @Transform(({ value }) => (typeof value === 'string' ? value.trim().toLowerCase() : value))
+  @IsEmail()
+  email!: string;
+
+  @ApiProperty({ example: 'Str0ngPass!' })
+  @IsString()
+  @MinLength(8)
+  @Matches(/[A-Z]/, { message: 'password must contain an uppercase letter' })
+  @Matches(/[0-9]/, { message: 'password must contain a digit' })
+  password!: string;
+}

package/templates/stacks/node-nestjs/src/auth/jwt.strategy.ts

@@ -0,0 +1,25 @@
+import { Injectable } from '@nestjs/common';
+import { PassportStrategy } from '@nestjs/passport';
+import { ConfigService } from '@nestjs/config';
+import { ExtractJwt, Strategy } from 'passport-jwt';
+
+interface JwtPayload {
+  sub: string;
+  email: string;
+  role: string;
+}
+
+@Injectable()
+export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
+  constructor(config: ConfigService) {
+    super({
+      jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
+      ignoreExpiration: false,
+      secretOrKey: config.get<string>('JWT_SECRET') ?? 'replace-me',
+    });
+  }
+
+  validate(payload: JwtPayload): { id: string; email: string; role: string } {
+    return { id: payload.sub, email: payload.email, role: payload.role };
+  }
+}

package/templates/stacks/node-nestjs/src/common/filters/problem-details.filter.ts

@@ -0,0 +1,38 @@
+import {
+  ArgumentsHost,
+  Catch,
+  ExceptionFilter,
+  HttpException,
+  HttpStatus,
+} from '@nestjs/common';
+import type { Request, Response } from 'express';
+
+/**
+ * RFC 7807 Problem Details — uniform error shape across the API.
+ */
+@Catch()
+export class ProblemDetailsFilter implements ExceptionFilter {
+  catch(exception: unknown, host: ArgumentsHost): void {
+    const ctx = host.switchToHttp();
+    const res = ctx.getResponse<Response>();
+    const req = ctx.getRequest<Request>();
+
+    const status =
+      exception instanceof HttpException
+        ? exception.getStatus()
+        : HttpStatus.INTERNAL_SERVER_ERROR;
+
+    const body =
+      exception instanceof HttpException
+        ? (exception.getResponse() as Record<string, unknown>)
+        : { message: 'Internal server error' };
+
+    res.status(status).json({
+      type: `urn:problem:${status}`,
+      title: typeof body.error === 'string' ? body.error : body.message,
+      status,
+      detail: Array.isArray(body.message) ? body.message.join('; ') : body.message,
+      instance: req.url,
+    });
+  }
+}

package/templates/stacks/node-nestjs/src/common/interceptors/json-response.interceptor.ts

@@ -0,0 +1,13 @@
+import { CallHandler, ExecutionContext, Injectable, NestInterceptor } from '@nestjs/common';
+import { Observable } from 'rxjs';
+
+/**
+ * No-op interceptor placeholder. Reserved for cross-cutting JSON envelope work
+ * (correlation ids, timing, etc.) — currently passthrough.
+ */
+@Injectable()
+export class JsonResponseInterceptor implements NestInterceptor {
+  intercept(_ctx: ExecutionContext, next: CallHandler): Observable<unknown> {
+    return next.handle();
+  }
+}

package/templates/stacks/node-nestjs/src/main.ts.hbs

@@ -0,0 +1,44 @@
+import { NestFactory } from '@nestjs/core';
+import { ValidationPipe } from '@nestjs/common';
+import { DocumentBuilder, SwaggerModule } from '@nestjs/swagger';
+import { Logger } from 'nestjs-pino';
+import { writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { AppModule } from './app.module.js';
+import { ProblemDetailsFilter } from './common/filters/problem-details.filter.js';
+
+async function bootstrap(): Promise<void> {
+  const app = await NestFactory.create(AppModule, { bufferLogs: true });
+  app.useLogger(app.get(Logger));
+
+  app.useGlobalPipes(
+    new ValidationPipe({
+      whitelist: true,
+      forbidNonWhitelisted: true,
+      transform: true,
+    }),
+  );
+  app.useGlobalFilters(new ProblemDetailsFilter());
+
+  const config = new DocumentBuilder()
+    .setTitle('{{projectName}}')
+    .setDescription('DARE-shaped NestJS API')
+    .setVersion('0.1.0')
+    .addBearerAuth()
+    .build();
+  const doc = SwaggerModule.createDocument(app, config);
+  SwaggerModule.setup('api', app, doc);
+
+  // Persist openapi.json so M-02 (machine-readable surface) is met without
+  // requiring the server to be running.
+  try {
+    writeFileSync(join(process.cwd(), 'openapi.json'), JSON.stringify(doc, null, 2));
+  } catch {
+    /* non-fatal */
+  }
+
+  const port = Number(process.env.PORT ?? 3000);
+  await app.listen(port);
+}
+
+void bootstrap();

package/templates/stacks/node-nestjs/src/prisma/prisma.module.ts

@@ -0,0 +1,9 @@
+import { Global, Module } from '@nestjs/common';
+import { PrismaService } from './prisma.service.js';
+
+@Global()
+@Module({
+  providers: [PrismaService],
+  exports: [PrismaService],
+})
+export class PrismaModule {}

package/templates/stacks/node-nestjs/src/prisma/prisma.service.ts

@@ -0,0 +1,9 @@
+import { Injectable, OnModuleInit } from '@nestjs/common';
+import { PrismaClient } from '@prisma/client';
+
+@Injectable()
+export class PrismaService extends PrismaClient implements OnModuleInit {
+  async onModuleInit(): Promise<void> {
+    await this.$connect();
+  }
+}

package/templates/stacks/node-nestjs/src/users/dto/create-user.dto.ts

@@ -0,0 +1,22 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { IsEmail, IsEnum, IsOptional, IsString, Matches, MinLength } from 'class-validator';
+import { Transform } from 'class-transformer';
+
+export class CreateUserDto {
+  @ApiProperty()
+  @Transform(({ value }) => (typeof value === 'string' ? value.trim().toLowerCase() : value))
+  @IsEmail()
+  email!: string;
+
+  @ApiProperty()
+  @IsString()
+  @MinLength(8)
+  @Matches(/[A-Z]/)
+  @Matches(/[0-9]/)
+  password!: string;
+
+  @ApiProperty({ enum: ['USER', 'ADMIN'], required: false, default: 'USER' })
+  @IsOptional()
+  @IsEnum(['USER', 'ADMIN'])
+  role?: 'USER' | 'ADMIN';
+}

package/templates/stacks/node-nestjs/src/users/dto/user.dto.ts

@@ -0,0 +1,15 @@
+import { ApiProperty } from '@nestjs/swagger';
+
+export class UserDto {
+  @ApiProperty()
+  id!: string;
+
+  @ApiProperty()
+  email!: string;
+
+  @ApiProperty({ enum: ['USER', 'ADMIN'] })
+  role!: string;
+
+  @ApiProperty({ description: 'ISO-8601 timestamp' })
+  createdAt!: string;
+}

package/templates/stacks/node-nestjs/src/users/users.controller.ts

@@ -0,0 +1,41 @@
+import {
+  Body,
+  Controller,
+  ForbiddenException,
+  Get,
+  Post,
+  Query,
+  Req,
+  UseGuards,
+} from '@nestjs/common';
+import { AuthGuard } from '@nestjs/passport';
+import { ApiBearerAuth, ApiTags } from '@nestjs/swagger';
+import type { Request } from 'express';
+import { UsersService } from './users.service.js';
+import { UserDto } from './dto/user.dto.js';
+import { CreateUserDto } from './dto/create-user.dto.js';
+
+@ApiTags('users')
+@ApiBearerAuth()
+@UseGuards(AuthGuard('jwt'))
+@Controller('users')
+export class UsersController {
+  constructor(private readonly users: UsersService) {}
+
+  @Get()
+  list(
+    @Query('page') page = '1',
+    @Query('limit') limit = '20',
+  ): Promise<{ items: UserDto[]; total: number; page: number }> {
+    return this.users.list(Number(page), Number(limit));
+  }
+
+  @Post()
+  create(@Req() req: Request, @Body() dto: CreateUserDto): Promise<UserDto> {
+    const caller = req.user as { role: string } | undefined;
+    if (!caller || caller.role !== 'ADMIN') {
+      throw new ForbiddenException('admin role required');
+    }
+    return this.users.create(dto);
+  }
+}

package/templates/stacks/node-nestjs/src/users/users.module.ts

@@ -0,0 +1,11 @@
+import { Module } from '@nestjs/common';
+import { UsersController } from './users.controller.js';
+import { UsersService } from './users.service.js';
+import { UsersRepository } from './users.repository.js';
+
+@Module({
+  controllers: [UsersController],
+  providers: [UsersService, UsersRepository],
+  exports: [UsersRepository, UsersService],
+})
+export class UsersModule {}

package/templates/stacks/node-nestjs/src/users/users.repository.ts

@@ -0,0 +1,38 @@
+import { Injectable } from '@nestjs/common';
+import { PrismaService } from '../prisma/prisma.service.js';
+
+interface UserRow {
+  id: string;
+  email: string;
+  password: string;
+  role: string;
+  createdAt: Date;
+  updatedAt: Date;
+}
+
+@Injectable()
+export class UsersRepository {
+  constructor(private readonly prisma: PrismaService) {}
+
+  findByEmail(email: string): Promise<UserRow | null> {
+    return this.prisma.user.findUnique({ where: { email } });
+  }
+
+  async findPage(page: number, limit: number): Promise<{ items: UserRow[]; total: number }> {
+    const [items, total] = await Promise.all([
+      this.prisma.user.findMany({
+        skip: (page - 1) * limit,
+        take: limit,
+        orderBy: { createdAt: 'desc' },
+      }),
+      this.prisma.user.count(),
+    ]);
+    return { items, total };
+  }
+
+  create(data: { email: string; password: string; role: 'USER' | 'ADMIN' }): Promise<UserRow> {
+    return this.prisma.user.create({
+      data: { email: data.email, password: data.password, role: data.role },
+    });
+  }
+}

package/templates/stacks/node-nestjs/src/users/users.service.ts

@@ -0,0 +1,38 @@
+import { ConflictException, Injectable } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import * as bcrypt from 'bcrypt';
+import { UsersRepository } from './users.repository.js';
+import { UserDto } from './dto/user.dto.js';
+import { CreateUserDto } from './dto/create-user.dto.js';
+
+@Injectable()
+export class UsersService {
+  constructor(
+    private readonly repo: UsersRepository,
+    private readonly config: ConfigService,
+  ) {}
+
+  async list(page = 1, limit = 20): Promise<{ items: UserDto[]; total: number; page: number }> {
+    const safePage = Math.max(1, page);
+    const safeLimit = Math.min(100, Math.max(1, limit));
+    const { items, total } = await this.repo.findPage(safePage, safeLimit);
+    return { items: items.map(toDto), total, page: safePage };
+  }
+
+  async create(input: CreateUserDto): Promise<UserDto> {
+    const existing = await this.repo.findByEmail(input.email);
+    if (existing) throw new ConflictException('email already in use');
+    const cost = Number(this.config.get<string>('BCRYPT_COST', '12'));
+    const hash = await bcrypt.hash(input.password, cost);
+    const created = await this.repo.create({
+      email: input.email,
+      password: hash,
+      role: input.role ?? 'USER',
+    });
+    return toDto(created);
+  }
+}
+
+function toDto(u: { id: string; email: string; role: string; createdAt: Date }): UserDto {
+  return { id: u.id, email: u.email, role: u.role, createdAt: u.createdAt.toISOString() };
+}

package/templates/stacks/node-nestjs/tsconfig.build.json

@@ -0,0 +1,4 @@
+{
+  "extends": "./tsconfig.json",
+  "exclude": ["node_modules", "test", "dist", "**/*.spec.ts"]
+}

package/templates/stacks/node-nestjs/tsconfig.json

@@ -0,0 +1,28 @@
+{
+  "compilerOptions": {
+    "module": "commonjs",
+    "declaration": true,
+    "removeComments": true,
+    "emitDecoratorMetadata": true,
+    "experimentalDecorators": true,
+    "allowSyntheticDefaultImports": true,
+    "target": "ES2022",
+    "sourceMap": true,
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "baseUrl": "./",
+    "incremental": true,
+    "skipLibCheck": true,
+    "strictNullChecks": true,
+    "noImplicitAny": true,
+    "strictBindCallApply": true,
+    "forceConsistentCasingInFileNames": true,
+    "noFallthroughCasesInSwitch": true,
+    "esModuleInterop": true,
+    "resolveJsonModule": true,
+    "paths": {
+      "@/*": ["src/*"]
+    }
+  },
+  "include": ["src/**/*"]
+}

package/templates/stacks/php-laravel/.dare/skills.yml

@@ -0,0 +1,11 @@
+version: 1
+skills:
+  - id: skill-laravel-api
+    source: skill-laravel-api
+    description: Laravel 11 + Sanctum + Reverb + Pail + Layered Design
+  - id: dare-ax
+    source: dare-ax
+    description: Agent eXperience invariants (llms.txt, OpenAPI, --json, rate limit)
+  - id: dare-layered-design
+    source: dare-layered-design
+    description: Controller → Service → Repository → Model 4-layer architecture

package/templates/stacks/php-laravel/.env.example

@@ -0,0 +1,41 @@
+APP_NAME=Laravel
+APP_ENV=local
+APP_KEY=
+APP_DEBUG=true
+APP_URL=http://localhost
+APP_PORT=8000
+
+LOG_CHANNEL=stack
+LOG_LEVEL=info
+
+DB_CONNECTION=pgsql
+DB_HOST=127.0.0.1
+DB_PORT=5432
+DB_DATABASE=myapi
+DB_USERNAME=user
+DB_PASSWORD=pass
+
+CACHE_STORE=database
+QUEUE_CONNECTION=database
+SESSION_DRIVER=database
+SESSION_LIFETIME=120
+
+SANCTUM_STATEFUL_DOMAINS=localhost:3000
+
+BCRYPT_ROUNDS=12
+
+# Reverb (WebSocket)
+BROADCAST_CONNECTION=reverb
+REVERB_APP_ID=myapp
+REVERB_APP_KEY=
+REVERB_APP_SECRET=
+REVERB_HOST=127.0.0.1
+REVERB_PORT=8080
+REVERB_SCHEME=http
+
+# Rate limit
+RATE_LIMIT_PER_MIN=60
+
+# LLM provider
+LLM_PROVIDER=dummy
+# OPENAI_API_KEY=

package/templates/stacks/php-laravel/.github/workflows/dare-ci.yml

@@ -0,0 +1,43 @@
+name: DARE CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  audit:
+    name: Audit dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: shivammathur/setup-php@v2
+        with:
+          php-version: "8.3"
+      - uses: ramsey/composer-install@v3
+      - run: composer audit --no-dev
+
+  lint:
+    name: PHPStan
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: shivammathur/setup-php@v2
+        with:
+          php-version: "8.3"
+      - uses: ramsey/composer-install@v3
+      - run: vendor/bin/phpstan analyse
+
+  test:
+    name: Pest
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: shivammathur/setup-php@v2
+        with:
+          php-version: "8.3"
+      - uses: ramsey/composer-install@v3
+      - run: cp .env.example .env
+      - run: php artisan key:generate
+      - run: vendor/bin/pest

package/templates/stacks/php-laravel/README.md.hbs

@@ -0,0 +1,36 @@
+# {{projectName}}
+
+DARE-shaped Laravel 11 API. Layered Design (Controller → Service → Repository → Model).
+
+## Setup
+
+```bash
+cp .env.example .env
+composer install
+php artisan key:generate
+docker compose up -d postgres
+php artisan migrate --seed
+php artisan l5-swagger:generate
+php artisan serve
+```
+
+## Endpoints
+
+- `POST /api/auth/login` — exchange email/password for Sanctum token
+- `GET /api/auth/me` — current user (Bearer)
+- `GET /api/users` — list users (paginated)
+- `POST /api/users` — create user (admin only)
+- `GET /openapi.json` — OpenAPI 3.x surface
+- `GET /api/documentation` — Swagger UI (l5-swagger)
+
+## Commands
+
+- `php artisan serve` — dev server (port 8000)
+- `php artisan pail` — tail logs
+- `pest` (or `php artisan test`) — run tests
+- `vendor/bin/phpstan analyse` — static analysis
+- `composer audit` — dependency audit
+
+## DARE Method
+
+See `.dare/skills.yml` for installed skills, `llms.txt` for agent context.

package/templates/stacks/php-laravel/app/Http/Controllers/Api/AuthController.php

@@ -0,0 +1,36 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Http\Requests\LoginRequest;
+use App\Services\AuthService;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Routing\Controller;
+
+class AuthController extends Controller
+{
+    public function __construct(private readonly AuthService $auth)
+    {
+    }
+
+    public function login(LoginRequest $request): JsonResponse
+    {
+        $payload = $this->auth->login($request->validated());
+        return response()->json($payload);
+    }
+
+    public function me(Request $request): JsonResponse
+    {
+        $user = $request->user();
+        if ($user === null) {
+            return response()->json(['error' => 'Unauthenticated'], 401);
+        }
+        return response()->json([
+            'id' => $user->id,
+            'email' => $user->email,
+            'role' => $user->role,
+            'createdAt' => $user->created_at?->toIso8601String(),
+        ]);
+    }
+}