@digilogiclabs/create-saas-app 1.0.1

package/src/templates/web/ui-auth-payments/template/src/lib/actions/index.ts

@@ -0,0 +1,340 @@
+'use server'
+
+import { after } from 'next/server'
+import { revalidateTag, revalidatePath } from 'next/cache'
+import { getCurrentUser } from '@/lib/auth-server'
+import { z } from 'zod'
+
+// Common response type
+export type ActionResponse<T = any> = {
+  success: boolean
+  data?: T
+  error?: string
+  fieldErrors?: Record<string, string[]>
+}
+
+/**
+ * Example server action for contact form
+ */
+export async function submitContactForm(prevState: any, formData: FormData): Promise<ActionResponse> {
+  try {
+    const contactSchema = z.object({
+      name: z.string().min(2, 'Name must be at least 2 characters'),
+      email: z.string().email('Invalid email address'),
+      subject: z.string().min(5, 'Subject must be at least 5 characters'),
+      message: z.string().min(10, 'Message must be at least 10 characters'),
+    })
+
+    const rawData = {
+      name: formData.get('name') as string,
+      email: formData.get('email') as string,
+      subject: formData.get('subject') as string,
+      message: formData.get('message') as string,
+    }
+
+    const validationResult = contactSchema.safeParse(rawData)
+    
+    if (!validationResult.success) {
+      return {
+        success: false,
+        error: 'Please check your input',
+        fieldErrors: validationResult.error.formErrors.fieldErrors,
+      }
+    }
+
+    const { name, email, subject, message } = validationResult.data
+
+    // Process contact form submission
+    // This could involve:
+    // - Sending email to admin
+    // - Saving to database
+    // - Sending auto-reply to user
+
+    // Use after() for non-blocking operations (Next.js 15.3 feature)
+    after(async () => {
+      // Send notification email to admin (non-blocking)
+      console.log('Sending notification email for contact form submission')
+      
+      // Log analytics event (non-blocking)
+      console.log('Logging contact form submission analytics')
+      
+      // Update dashboard statistics (non-blocking)
+      console.log('Updating contact form statistics')
+    })
+
+    return {
+      success: true,
+      data: { message: 'Thank you for your message. We\'ll get back to you soon!' }
+    }
+  } catch (error) {
+    console.error('Contact form error:', error)
+    return {
+      success: false,
+      error: 'An unexpected error occurred. Please try again.',
+    }
+  }
+}
+
+/**
+ * Example server action for newsletter signup
+ */
+export async function subscribeToNewsletter(prevState: any, formData: FormData): Promise<ActionResponse> {
+  try {
+    const email = formData.get('email') as string
+
+    const emailSchema = z.string().email('Invalid email address')
+    const validationResult = emailSchema.safeParse(email)
+    
+    if (!validationResult.success) {
+      return {
+        success: false,
+        error: 'Please enter a valid email address',
+      }
+    }
+
+    // Add to newsletter list
+    // This could involve:
+    // - Adding to email service provider (Mailchimp, ConvertKit, etc.)
+    // - Saving to database
+    // - Sending welcome email
+
+    after(async () => {
+      // Send welcome email (non-blocking)
+      console.log(`Sending welcome email to ${email}`)
+      
+      // Add to email marketing platform (non-blocking)
+      console.log(`Adding ${email} to newsletter list`)
+      
+      // Track conversion (non-blocking)
+      console.log('Tracking newsletter signup conversion')
+    })
+
+    return {
+      success: true,
+      data: { message: 'Successfully subscribed to newsletter!' }
+    }
+  } catch (error) {
+    console.error('Newsletter subscription error:', error)
+    return {
+      success: false,
+      error: 'An unexpected error occurred. Please try again.',
+    }
+  }
+}
+
+/**
+ * Example authenticated server action
+ */
+export async function createPost(prevState: any, formData: FormData): Promise<ActionResponse> {
+  try {
+    // Require authentication
+    const user = await getCurrentUser()
+    if (!user) {
+      return {
+        success: false,
+        error: 'Authentication required',
+      }
+    }
+
+    const postSchema = z.object({
+      title: z.string().min(3, 'Title must be at least 3 characters'),
+      content: z.string().min(10, 'Content must be at least 10 characters'),
+      published: z.boolean().default(false),
+    })
+
+    const rawData = {
+      title: formData.get('title') as string,
+      content: formData.get('content') as string,
+      published: formData.get('published') === 'true',
+    }
+
+    const validationResult = postSchema.safeParse(rawData)
+    
+    if (!validationResult.success) {
+      return {
+        success: false,
+        error: 'Please check your input',
+        fieldErrors: validationResult.error.formErrors.fieldErrors,
+      }
+    }
+
+    const { title, content, published } = validationResult.data
+
+    // Create post in database
+    const post = {
+      id: Math.random().toString(36).substr(2, 9),
+      title,
+      content,
+      published,
+      authorId: user.id,
+      createdAt: new Date().toISOString(),
+    }
+
+    // Revalidate relevant paths and tags
+    revalidateTag('posts')
+    revalidatePath('/posts')
+    if (published) {
+      revalidatePath('/')
+    }
+
+    // Non-blocking operations
+    after(async () => {
+      // Send notifications to subscribers (non-blocking)
+      if (published) {
+        console.log('Notifying subscribers of new post')
+      }
+      
+      // Update search index (non-blocking)
+      console.log('Updating search index')
+      
+      // Track content creation analytics (non-blocking)
+      console.log('Tracking post creation analytics')
+    })
+
+    return {
+      success: true,
+      data: { post, message: published ? 'Post published successfully!' : 'Post saved as draft!' }
+    }
+  } catch (error) {
+    console.error('Create post error:', error)
+    return {
+      success: false,
+      error: 'An unexpected error occurred. Please try again.',
+    }
+  }
+}
+
+/**
+ * Example action for updating user preferences
+ */
+export async function updatePreferences(prevState: any, formData: FormData): Promise<ActionResponse> {
+  try {
+    const user = await getCurrentUser()
+    if (!user) {
+      return {
+        success: false,
+        error: 'Authentication required',
+      }
+    }
+
+    const preferencesSchema = z.object({
+      emailNotifications: z.boolean().default(true),
+      pushNotifications: z.boolean().default(false),
+      marketingEmails: z.boolean().default(false),
+      theme: z.enum(['light', 'dark', 'system']).default('system'),
+    })
+
+    const rawData = {
+      emailNotifications: formData.get('emailNotifications') === 'true',
+      pushNotifications: formData.get('pushNotifications') === 'true',
+      marketingEmails: formData.get('marketingEmails') === 'true',
+      theme: formData.get('theme') as 'light' | 'dark' | 'system' | null || 'system',
+    }
+
+    const validationResult = preferencesSchema.safeParse(rawData)
+    
+    if (!validationResult.success) {
+      return {
+        success: false,
+        error: 'Please check your input',
+        fieldErrors: validationResult.error.formErrors.fieldErrors,
+      }
+    }
+
+    const preferences = validationResult.data
+
+    // Update user preferences in database
+    // This would typically involve a database update
+
+    after(async () => {
+      // Update notification service settings (non-blocking)
+      console.log('Updating notification service settings')
+      
+      // Log preference changes for analytics (non-blocking)
+      console.log('Logging preference changes')
+    })
+
+    return {
+      success: true,
+      data: { preferences, message: 'Preferences updated successfully!' }
+    }
+  } catch (error) {
+    console.error('Update preferences error:', error)
+    return {
+      success: false,
+      error: 'An unexpected error occurred. Please try again.',
+    }
+  }
+}
+
+/**
+ * Example action with file upload
+ */
+export async function uploadAvatar(prevState: any, formData: FormData): Promise<ActionResponse> {
+  try {
+    const user = await getCurrentUser()
+    if (!user) {
+      return {
+        success: false,
+        error: 'Authentication required',
+      }
+    }
+
+    const file = formData.get('avatar') as File
+    
+    if (!file || file.size === 0) {
+      return {
+        success: false,
+        error: 'Please select a file to upload',
+      }
+    }
+
+    // Validate file type and size
+    const allowedTypes = ['image/jpeg', 'image/png', 'image/gif', 'image/webp']
+    const maxSize = 5 * 1024 * 1024 // 5MB
+
+    if (!allowedTypes.includes(file.type)) {
+      return {
+        success: false,
+        error: 'Please upload a valid image file (JPEG, PNG, GIF, or WebP)',
+      }
+    }
+
+    if (file.size > maxSize) {
+      return {
+        success: false,
+        error: 'File size must be less than 5MB',
+      }
+    }
+
+    // Process file upload
+    // This would typically involve:
+    // - Uploading to cloud storage (AWS S3, Cloudinary, etc.)
+    // - Resizing/optimizing the image
+    // - Updating user record in database
+
+    const avatarUrl = `https://example.com/avatars/${user.id}-${Date.now()}.${file.type.split('/')[1]}`
+
+    after(async () => {
+      // Generate different image sizes (non-blocking)
+      console.log('Generating avatar thumbnails')
+      
+      // Update CDN cache (non-blocking)
+      console.log('Updating CDN cache')
+      
+      // Log upload event (non-blocking)
+      console.log('Logging avatar upload event')
+    })
+
+    return {
+      success: true,
+      data: { avatarUrl, message: 'Avatar uploaded successfully!' }
+    }
+  } catch (error) {
+    console.error('Upload avatar error:', error)
+    return {
+      success: false,
+      error: 'An unexpected error occurred. Please try again.',
+    }
+  }
+}

package/src/templates/web/ui-auth-payments/template/src/lib/auth-server.ts

@@ -0,0 +1,177 @@
+import { cookies } from 'next/headers'
+import { redirect } from 'next/navigation'
+
+// Server-side auth utilities that work with @digilogiclabs/saas-factory-auth
+// These functions provide server-side access to auth state
+
+export type User = {
+  id: string
+  email: string
+  name?: string
+  avatar?: string
+  [key: string]: any
+}
+
+/**
+ * Get the current user from server-side cookies
+ * This function should be called in Server Components, Server Actions, or Route Handlers
+ */
+export async function getCurrentUser(): Promise<User | null> {
+  try {
+    const cookieStore = await cookies()
+    
+    // Check for auth token in cookies set by @digilogiclabs/saas-factory-auth
+    const authToken = cookieStore.get('saas-factory-auth-token')?.value
+    const userCookie = cookieStore.get('saas-factory-auth-user')?.value
+    
+    if (!authToken || !userCookie) {
+      return null
+    }
+    
+    // Parse user data from cookie
+    try {
+      const userData = JSON.parse(userCookie)
+      return userData
+    } catch {
+      return null
+    }
+  } catch (error) {
+    console.error('Error getting current user:', error)
+    return null
+  }
+}
+
+/**
+ * Require authentication - redirects to login if not authenticated
+ * Use this in Server Components that require authentication
+ */
+export async function requireAuth(): Promise<User> {
+  const user = await getCurrentUser()
+  
+  if (!user) {
+    redirect('/login')
+  }
+  
+  return user
+}
+
+/**
+ * Check if user is authenticated (without redirecting)
+ * Returns boolean for conditional rendering
+ */
+export async function isAuthenticated(): Promise<boolean> {
+  const user = await getCurrentUser()
+  return !!user
+}
+
+/**
+ * Redirect if already authenticated
+ * Use this on login/signup pages
+ */
+export async function redirectIfAuthenticated(redirectTo: string = '/') {
+  const user = await getCurrentUser()
+  
+  if (user) {
+    redirect(redirectTo)
+  }
+}
+
+/**
+ * Get user session data for server components
+ * Returns both user and loading state info
+ */
+export async function getServerSession() {
+  const user = await getCurrentUser()
+  
+  return {
+    user,
+    isAuthenticated: !!user,
+    isLoading: false, // Server-side is never loading
+  }
+}
+
+/**
+ * Server-side auth check for API routes
+ */
+export async function getAuthFromRequest(request?: Request): Promise<User | null> {
+  try {
+    // If request is provided, extract cookies from it
+    if (request) {
+      const cookie = request.headers.get('cookie')
+      if (!cookie) return null
+      
+      // Parse cookies manually from request
+      const cookies = cookie.split(';').reduce((acc, cookie) => {
+        const [key, value] = cookie.trim().split('=')
+        acc[key] = value
+        return acc
+      }, {} as Record<string, string>)
+      
+      const authToken = cookies['saas-factory-auth-token']
+      const userCookie = cookies['saas-factory-auth-user']
+      
+      if (!authToken || !userCookie) {
+        return null
+      }
+      
+      try {
+        const userData = JSON.parse(decodeURIComponent(userCookie))
+        return userData
+      } catch {
+        return null
+      }
+    }
+    
+    // Fallback to cookies() API
+    return await getCurrentUser()
+  } catch (error) {
+    console.error('Error getting auth from request:', error)
+    return null
+  }
+}
+
+/**
+ * Create server action wrapper that requires authentication
+ */
+export function withAuth<T extends any[], R>(
+  action: (user: User, ...args: T) => Promise<R>
+) {
+  return async (...args: T): Promise<R> => {
+    const user = await requireAuth()
+    return action(user, ...args)
+  }
+}
+
+/**
+ * Server-side utility to check specific roles/permissions
+ * Extend this based on your user data structure
+ */
+export async function hasRole(role: string): Promise<boolean> {
+  const user = await getCurrentUser()
+  
+  if (!user) return false
+  
+  // Assuming role is stored in user.role or user.roles
+  if (Array.isArray(user.roles)) {
+    return user.roles.includes(role)
+  }
+  
+  return user.role === role
+}
+
+/**
+ * Server-side utility to require specific roles
+ */
+export async function requireRole(role: string): Promise<User> {
+  const user = await requireAuth()
+  
+  const hasRequiredRole = Array.isArray(user.roles) 
+    ? user.roles.includes(role)
+    : user.role === role
+  
+  if (!hasRequiredRole) {
+    redirect('/unauthorized')
+  }
+  
+  return user
+}

package/src/templates/web/ui-auth-payments/template/src/lib/env.ts

@@ -0,0 +1,49 @@
+/**
+ * Optional Environment Configuration with Zod validation
+ * 
+ * This provides type-safe environment variable validation.
+ * Usage is optional - existing templates will continue to work without this.
+ * 
+ * To use: import { env } from '@/lib/env' instead of process.env
+ */
+
+import { z } from 'zod'
+
+const envSchema = z.object({
+  // Next.js built-in
+  NODE_ENV: z.enum(['development', 'production', 'test']).default('development'),
+  
+  // App configuration
+  NEXT_PUBLIC_APP_URL: z.string().url().optional(),
+  NEXT_PUBLIC_APP_NAME: z.string().default('{{titleCaseName}}'),
+  
+  // Auth configuration (if using server-side auth)
+  SUPABASE_URL: z.string().url().optional(),
+  SUPABASE_ANON_KEY: z.string().optional(),
+  SUPABASE_SERVICE_ROLE_KEY: z.string().optional(),
+  
+  // Payment configuration
+  STRIPE_SECRET_KEY: z.string().optional(),
+  STRIPE_WEBHOOK_SECRET: z.string().optional(),
+  
+  // Optional analytics
+  ANALYTICS_ID: z.string().optional(),
+})
+
+// Parse with fallback to process.env for backward compatibility
+function parseEnv() {
+  try {
+    return envSchema.parse(process.env)
+  } catch (error) {
+    if (process.env.NODE_ENV === 'development') {
+      console.warn('Environment validation failed. Using process.env fallback:', error)
+    }
+    // Fallback to process.env for backward compatibility
+    return process.env as any
+  }
+}
+
+export const env = parseEnv()
+
+// Type helper for environment variables
+export type Env = z.infer<typeof envSchema>

package/src/templates/web/ui-auth-payments/template/src/lib/platform.ts

@@ -0,0 +1,146 @@
+/**
+ * Platform Core Integration
+ *
+ * This file sets up the @digilogiclabs/platform-core integration for
+ * unified infrastructure services across your application.
+ *
+ * Platform-core provides:
+ * - Database abstraction (Supabase, PostgreSQL)
+ * - Cache abstraction (Redis, Upstash, Memory)
+ * - Storage abstraction (S3, MinIO, R2)
+ * - Email abstraction (Resend, SMTP)
+ * - Queue abstraction (BullMQ)
+ * - Logging and Metrics
+ * - Resilience patterns (retry, circuit breaker, timeout)
+ */
+
+import { createPlatform, createPlatformAsync, type IPlatform } from '@digilogiclabs/platform-core';
+import { setPlatform as setAuthPlatform } from '@digilogiclabs/saas-factory-auth';
+import { setPlatform as setPaymentsPlatform } from '@digilogiclabs/saas-factory-payments';
+
+// Singleton platform instance
+let platformInstance: IPlatform | null = null;
+
+/**
+ * Get the platform instance (creates a new one if needed)
+ *
+ * For testing or development without external services,
+ * this uses in-memory adapters.
+ *
+ * @example
+ * ```ts
+ * const platform = getPlatform();
+ * await platform.cache.set('key', 'value', 3600);
+ * ```
+ */
+export function getPlatform(): IPlatform {
+  if (!platformInstance) {
+    platformInstance = createPlatform();
+    initializePackageIntegrations(platformInstance);
+  }
+  return platformInstance;
+}
+
+/**
+ * Initialize platform with production adapters (async)
+ *
+ * Call this once at application startup to configure
+ * production services based on environment variables.
+ *
+ * @example
+ * ```ts
+ * // In app/layout.tsx or a server initialization file
+ * await initializePlatform();
+ * ```
+ */
+export async function initializePlatform(): Promise<IPlatform> {
+  if (platformInstance) {
+    return platformInstance;
+  }
+
+  // Use createPlatformAsync for production adapters
+  // Falls back to memory adapters if env vars are not set
+  platformInstance = await createPlatformAsync();
+  initializePackageIntegrations(platformInstance);
+
+  return platformInstance;
+}
+
+/**
+ * Initialize package integrations with platform services
+ */
+function initializePackageIntegrations(platform: IPlatform): void {
+  // Connect saas-factory-auth to platform-core
+  // Enables: logging, metrics, and email for auth events
+  setAuthPlatform({
+    email: platform.email,
+    logger: platform.logger,
+    metrics: platform.metrics,
+  });
+
+  // Connect saas-factory-payments to platform-core
+  // Enables: logging, metrics, and caching for payment events
+  setPaymentsPlatform({
+    logger: platform.logger,
+    metrics: platform.metrics,
+    cache: platform.cache,
+  });
+}
+
+/**
+ * Reset platform instance (useful for testing)
+ */
+export function resetPlatform(): void {
+  platformInstance = null;
+}
+
+/**
+ * Example: Using platform services
+ *
+ * Database:
+ * ```ts
+ * const users = await platform.db
+ *   .from('users')
+ *   .where('active', '=', true)
+ *   .execute();
+ * ```
+ *
+ * Cache:
+ * ```ts
+ * await platform.cache.set('user:123', userData, 3600);
+ * const cached = await platform.cache.get<User>('user:123');
+ * ```
+ *
+ * Storage:
+ * ```ts
+ * await platform.storage.upload('avatars/user-123.png', buffer, {
+ *   contentType: 'image/png',
+ *   public: true,
+ * });
+ * ```
+ *
+ * Email:
+ * ```ts
+ * await platform.email.send({
+ *   to: { email: 'user@example.com', name: 'John' },
+ *   subject: 'Welcome!',
+ *   html: '<h1>Welcome to {{titleCaseName}}</h1>',
+ * });
+ * ```
+ *
+ * Queue:
+ * ```ts
+ * await platform.queue.add('sendWelcomeEmail', { userId: '123' });
+ * ```
+ *
+ * Logging:
+ * ```ts
+ * platform.logger.info('User signed up', { userId: '123' });
+ * ```
+ *
+ * Metrics:
+ * ```ts
+ * platform.metrics.increment('user.signup');
+ * platform.metrics.timing('api.response_time', 150);
+ * ```
+ */