@digilogiclabs/create-saas-app 2.0.0 → 2.2.0

package/src/templates/shared/legal/web/app/(legal)/privacy/page.tsx

@@ -0,0 +1,205 @@
+import { Metadata } from 'next';
+import { LEGAL_CONFIG } from '@/lib/legal-config';
+
+export const metadata: Metadata = {
+  title: `Privacy Policy | ${LEGAL_CONFIG.appName}`,
+  description: `Privacy Policy for ${LEGAL_CONFIG.appName}. Learn how we collect, use, and protect your data.`,
+  alternates: {
+    canonical: `${LEGAL_CONFIG.appUrl}/privacy`,
+  },
+};
+
+export default function PrivacyPage() {
+  const {
+    appName,
+    companyName,
+    appUrl,
+    supportEmail,
+    privacyEmail,
+    effectiveDate,
+    thirdPartyServices,
+    usesAnalyticsCookies,
+    dataRetentionPeriod,
+  } = LEGAL_CONFIG;
+
+  return (
+    <main className="min-h-screen bg-white dark:bg-gray-950">
+      <div className="mx-auto max-w-3xl px-4 py-16 sm:px-6 lg:px-8">
+        <h1 className="mb-2 text-3xl font-bold tracking-tight text-gray-900 dark:text-white">
+          Privacy Policy
+        </h1>
+        <p className="mb-8 text-sm text-gray-500 dark:text-gray-400">
+          Effective: {effectiveDate}
+        </p>
+
+        <div className="prose prose-gray dark:prose-invert max-w-none">
+          <section>
+            <h2>1. Information We Collect</h2>
+            <p>We collect information you provide directly:</p>
+            <ul>
+              <li>
+                <strong>Account data:</strong> name, email, profile information
+              </li>
+              <li>
+                <strong>Usage data:</strong> pages visited, features used,
+                interactions
+              </li>
+              <li>
+                <strong>Device data:</strong> browser type, IP address, operating
+                system
+              </li>
+            </ul>
+          </section>
+
+          <section>
+            <h2>2. How We Use Your Information</h2>
+            <ul>
+              <li>Provide and improve the service</li>
+              <li>Send transactional emails (account, security, updates)</li>
+              <li>Analyze usage patterns to improve user experience</li>
+              <li>Prevent fraud and enforce our terms</li>
+              <li>Comply with legal obligations</li>
+            </ul>
+          </section>
+
+          <section>
+            <h2>3. Information Sharing</h2>
+            <p>
+              We do not sell your personal data. We may share information with:
+            </p>
+            <ul>
+              <li>
+                <strong>Service providers:</strong> who help us operate{' '}
+                {appName}
+              </li>
+              <li>
+                <strong>Legal authorities:</strong> when required by law or to
+                protect rights
+              </li>
+            </ul>
+            {thirdPartyServices.length > 0 && (
+              <>
+                <p>Third-party services we use:</p>
+                <ul>
+                  {thirdPartyServices.map((service) => (
+                    <li key={service}>{service}</li>
+                  ))}
+                </ul>
+              </>
+            )}
+          </section>
+
+          <section>
+            <h2>4. Cookies</h2>
+            <p>We use cookies for:</p>
+            <ul>
+              <li>
+                <strong>Essential cookies:</strong> authentication, security,
+                preferences
+              </li>
+              {usesAnalyticsCookies && (
+                <li>
+                  <strong>Analytics cookies:</strong> understanding how users
+                  interact with {appName}
+                </li>
+              )}
+            </ul>
+            <p>
+              You can control cookies through your browser settings. Disabling
+              essential cookies may limit functionality.
+            </p>
+          </section>
+
+          <section>
+            <h2>5. Your Rights</h2>
+            <p>You have the right to:</p>
+            <ul>
+              <li>
+                <strong>Access:</strong> request a copy of your personal data
+              </li>
+              <li>
+                <strong>Rectification:</strong> correct inaccurate data
+              </li>
+              <li>
+                <strong>Erasure:</strong> request deletion of your data
+              </li>
+              <li>
+                <strong>Portability:</strong> receive your data in a portable
+                format
+              </li>
+              <li>
+                <strong>Objection:</strong> object to certain processing of your
+                data
+              </li>
+            </ul>
+            <p>
+              To exercise these rights, contact{' '}
+              <a href={`mailto:${privacyEmail}`}>{privacyEmail}</a>.
+            </p>
+          </section>
+
+          <section>
+            <h2>6. Data Security</h2>
+            <p>
+              We implement industry-standard security measures including
+              encryption in transit (TLS), encrypted storage, and access
+              controls. No method of transmission is 100% secure, but we strive
+              to protect your data.
+            </p>
+          </section>
+
+          <section>
+            <h2>7. Data Retention</h2>
+            <p>
+              We retain your data for as long as your account is active. After
+              deletion, data is retained for {dataRetentionPeriod} for legal and
+              operational purposes, then permanently deleted.
+            </p>
+          </section>
+
+          <section>
+            <h2>8. Children&apos;s Privacy</h2>
+            <p>
+              {appName} is not directed at children under 13. We do not
+              knowingly collect data from children. If you believe a child has
+              provided us data, contact us for removal.
+            </p>
+          </section>
+
+          <section>
+            <h2>9. International Transfers</h2>
+            <p>
+              Your data may be processed in countries outside your own. We
+              ensure appropriate safeguards are in place for such transfers in
+              compliance with applicable data protection laws.
+            </p>
+          </section>
+
+          <section>
+            <h2>10. Changes to This Policy</h2>
+            <p>
+              We may update this policy periodically. We will notify you of
+              material changes via email or prominent notice on {appName}.
+              Continued use after changes constitutes acceptance.
+            </p>
+          </section>
+
+          <section>
+            <h2>11. Contact</h2>
+            <p>
+              For privacy questions or data requests, contact us at{' '}
+              <a href={`mailto:${privacyEmail}`}>{privacyEmail}</a>.
+            </p>
+            <p>
+              {companyName}
+              <br />
+              {appUrl}
+              <br />
+              {supportEmail}
+            </p>
+          </section>
+        </div>
+      </div>
+    </main>
+  );
+}

package/src/templates/shared/legal/web/app/(legal)/terms/page.tsx

@@ -0,0 +1,154 @@
+import { Metadata } from 'next';
+import { LEGAL_CONFIG } from '@/lib/legal-config';
+
+export const metadata: Metadata = {
+  title: `Terms of Service | ${LEGAL_CONFIG.appName}`,
+  description: `Terms of Service for ${LEGAL_CONFIG.appName}. Read our terms and conditions.`,
+  alternates: {
+    canonical: `${LEGAL_CONFIG.appUrl}/terms`,
+  },
+};
+
+export default function TermsPage() {
+  const {
+    appName,
+    companyName,
+    appUrl,
+    supportEmail,
+    effectiveDate,
+    minimumAge,
+    jurisdiction,
+    hasPayments,
+    platformFeePercent,
+  } = LEGAL_CONFIG;
+
+  return (
+    <main className="min-h-screen bg-white dark:bg-gray-950">
+      <div className="mx-auto max-w-3xl px-4 py-16 sm:px-6 lg:px-8">
+        <h1 className="mb-2 text-3xl font-bold tracking-tight text-gray-900 dark:text-white">
+          Terms of Service
+        </h1>
+        <p className="mb-8 text-sm text-gray-500 dark:text-gray-400">
+          Effective: {effectiveDate}
+        </p>
+
+        <div className="prose prose-gray dark:prose-invert max-w-none">
+          <section>
+            <h2>1. Acceptance of Terms</h2>
+            <p>
+              By accessing or using {appName} ({appUrl}), you agree to be bound
+              by these Terms of Service. If you do not agree, do not use the
+              service.
+            </p>
+          </section>
+
+          {minimumAge > 0 && (
+            <section>
+              <h2>2. Age Requirement</h2>
+              <p>
+                You must be at least {minimumAge} years old to use {appName}. By
+                using this service, you represent that you meet this age
+                requirement.
+              </p>
+            </section>
+          )}
+
+          <section>
+            <h2>{minimumAge > 0 ? '3' : '2'}. User Accounts</h2>
+            <p>
+              You are responsible for maintaining the confidentiality of your
+              account credentials and for all activities under your account.
+              Notify us immediately of any unauthorized use.
+            </p>
+          </section>
+
+          <section>
+            <h2>{minimumAge > 0 ? '4' : '3'}. Acceptable Use</h2>
+            <p>You agree not to:</p>
+            <ul>
+              <li>Violate any applicable laws or regulations</li>
+              <li>
+                Upload harmful, offensive, or infringing content
+              </li>
+              <li>Attempt to access other users&apos; accounts</li>
+              <li>
+                Use automated tools to scrape or interfere with the service
+              </li>
+              <li>Impersonate any person or entity</li>
+            </ul>
+          </section>
+
+          {hasPayments && (
+            <section>
+              <h2>{minimumAge > 0 ? '5' : '4'}. Payments &amp; Fees</h2>
+              <p>
+                Payments are processed securely through Stripe. All fees are
+                listed at the time of purchase.
+                {Number(platformFeePercent) > 0 &&
+                  ` ${appName} charges a ${platformFeePercent}% platform fee on applicable transactions.`}
+              </p>
+              <p>
+                Refund policies are described at the point of sale. You are
+                responsible for any applicable taxes on your purchases.
+              </p>
+            </section>
+          )}
+
+          <section>
+            <h2>Intellectual Property</h2>
+            <p>
+              {appName} and its original content, features, and functionality
+              are owned by {companyName}. You retain ownership of content you
+              submit but grant us a license to display it as part of the
+              service.
+            </p>
+          </section>
+
+          <section>
+            <h2>Termination</h2>
+            <p>
+              We may suspend or terminate your account for violations of these
+              terms. You may delete your account at any time. Upon termination,
+              your right to use the service ceases immediately.
+            </p>
+          </section>
+
+          <section>
+            <h2>Limitation of Liability</h2>
+            <p>
+              {appName} is provided &quot;as is&quot; without warranties of any
+              kind. {companyName} shall not be liable for any indirect,
+              incidental, or consequential damages arising from your use of the
+              service.
+            </p>
+          </section>
+
+          <section>
+            <h2>Governing Law</h2>
+            <p>
+              These terms are governed by the laws of {jurisdiction}. Any
+              disputes shall be resolved in the courts of {jurisdiction}.
+            </p>
+          </section>
+
+          <section>
+            <h2>Changes to Terms</h2>
+            <p>
+              We may update these terms at any time. Continued use after changes
+              constitutes acceptance. We will notify registered users of
+              material changes via email.
+            </p>
+          </section>
+
+          <section>
+            <h2>Contact</h2>
+            <p>
+              Questions about these terms? Contact us at{' '}
+              <a href={`mailto:${supportEmail}`}>{supportEmail}</a>.
+            </p>
+          </section>
+        </div>
+      </div>
+    </main>
+  );
+}

package/src/templates/shared/legal/web/lib/legal-config.ts

@@ -0,0 +1,50 @@
+/**
+ * Legal page configuration.
+ *
+ * Update these values to match your app's legal details.
+ * Used by the Terms of Service and Privacy Policy pages.
+ */
+export const LEGAL_CONFIG = {
+  /** App display name */
+  appName: 'My App',
+
+  /** Company or entity name */
+  companyName: 'My Company',
+
+  /** Production URL (no trailing slash) */
+  appUrl: process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000',
+
+  /** Support email address */
+  supportEmail: 'support@example.com',
+
+  /** Privacy-specific contact email */
+  privacyEmail: 'privacy@example.com',
+
+  /** Date the terms/privacy were last updated */
+  effectiveDate: 'January 1, 2026',
+
+  /** Minimum age requirement (0 to disable) */
+  minimumAge: 18,
+
+  /** Jurisdiction / governing law */
+  jurisdiction: 'the United States',
+
+  /** Whether the app processes payments */
+  hasPayments: true,
+
+  /** Platform fee percentage (if applicable) */
+  platformFeePercent: '0',
+
+  /** Whether the app uses cookies beyond essentials */
+  usesAnalyticsCookies: true,
+
+  /** Third-party services used (listed in privacy policy) */
+  thirdPartyServices: [
+    'Stripe (payment processing)',
+    'Cloudflare (CDN and security)',
+    'Resend (transactional email)',
+  ],
+
+  /** Data retention period */
+  dataRetentionPeriod: '3 years after account deletion',
+} as const;

package/src/templates/shared/loading/web/app/loading.tsx

@@ -0,0 +1,5 @@
+import { LoadingSpinner } from '@/components/skeleton';
+
+export default function Loading() {
+  return <LoadingSpinner />;
+}

package/src/templates/shared/loading/web/components/skeleton.tsx

@@ -0,0 +1,95 @@
+/**
+ * Reusable skeleton loading components.
+ *
+ * Use these in loading.tsx files for consistent loading states.
+ * All components use Tailwind's animate-pulse for the shimmer effect.
+ */
+
+/** Base skeleton block with customizable dimensions */
+export function Skeleton({
+  className = '',
+}: {
+  className?: string;
+}) {
+  return (
+    <div
+      className={`animate-pulse rounded bg-gray-200 dark:bg-gray-800 ${className}`}
+    />
+  );
+}
+
+/** Skeleton for a card with title, description, and action area */
+export function CardSkeleton() {
+  return (
+    <div className="rounded-lg border border-gray-200 p-6 dark:border-gray-800">
+      <Skeleton className="mb-4 h-4 w-3/4" />
+      <Skeleton className="mb-2 h-3 w-full" />
+      <Skeleton className="mb-4 h-3 w-5/6" />
+      <Skeleton className="h-8 w-24" />
+    </div>
+  );
+}
+
+/** Skeleton for a grid of cards */
+export function CardGridSkeleton({ count = 6 }: { count?: number }) {
+  return (
+    <div className="grid gap-6 sm:grid-cols-2 lg:grid-cols-3">
+      {Array.from({ length: count }, (_, i) => (
+        <CardSkeleton key={i} />
+      ))}
+    </div>
+  );
+}
+
+/** Skeleton for a table with rows */
+export function TableSkeleton({ rows = 5 }: { rows?: number }) {
+  return (
+    <div className="space-y-3">
+      {/* Header */}
+      <div className="flex gap-4 border-b border-gray-200 pb-3 dark:border-gray-800">
+        <Skeleton className="h-4 w-1/4" />
+        <Skeleton className="h-4 w-1/3" />
+        <Skeleton className="h-4 w-1/4" />
+        <Skeleton className="h-4 w-1/6" />
+      </div>
+      {/* Rows */}
+      {Array.from({ length: rows }, (_, i) => (
+        <div key={i} className="flex gap-4 py-2">
+          <Skeleton className="h-4 w-1/4" />
+          <Skeleton className="h-4 w-1/3" />
+          <Skeleton className="h-4 w-1/4" />
+          <Skeleton className="h-4 w-1/6" />
+        </div>
+      ))}
+    </div>
+  );
+}
+
+/** Skeleton for a full page with hero and content */
+export function PageSkeleton() {
+  return (
+    <div className="mx-auto max-w-4xl px-4 py-8">
+      {/* Hero */}
+      <Skeleton className="mb-4 h-8 w-2/3" />
+      <Skeleton className="mb-8 h-4 w-1/2" />
+      {/* Content blocks */}
+      <div className="space-y-4">
+        <Skeleton className="h-4 w-full" />
+        <Skeleton className="h-4 w-5/6" />
+        <Skeleton className="h-4 w-4/5" />
+        <Skeleton className="h-32 w-full" />
+        <Skeleton className="h-4 w-full" />
+        <Skeleton className="h-4 w-3/4" />
+      </div>
+    </div>
+  );
+}
+
+/** Default loading spinner for loading.tsx files */
+export function LoadingSpinner() {
+  return (
+    <div className="flex min-h-[50vh] items-center justify-center">
+      <div className="h-8 w-8 animate-spin rounded-full border-4 border-gray-200 border-t-blue-600 dark:border-gray-700 dark:border-t-blue-400" />
+    </div>
+  );
+}

package/src/templates/shared/middleware/web/middleware.ts

@@ -0,0 +1,68 @@
+/**
+ * Next.js Middleware (Edge Runtime)
+ *
+ * IMPORTANT: This file runs in the Edge runtime. Do NOT import:
+ * - Server-only modules (ioredis, pg, nodemailer)
+ * - The main platform-core barrel (pulls in node:stream)
+ * - auth.ts (server-only) — use auth.config.ts instead
+ *
+ * Use @digilogiclabs/platform-core/auth subpath for Edge-safe imports.
+ */
+import NextAuth from 'next-auth';
+import { authConfig } from './auth.config';
+
+const { auth } = NextAuth(authConfig);
+
+// ---------------------------------------------------------------------------
+// Route definitions
+// ---------------------------------------------------------------------------
+
+/** Routes that require authentication */
+const protectedRoutes = ['/dashboard', '/settings', '/account'];
+
+/** Routes that are always public */
+const publicRoutes = ['/', '/auth/signin', '/auth/signup', '/api/health', '/api/auth'];
+
+/** Admin-only routes */
+const adminRoutes = ['/admin'];
+
+// ---------------------------------------------------------------------------
+// Middleware handler
+// ---------------------------------------------------------------------------
+
+export default auth((req) => {
+  const { pathname } = req.nextUrl;
+  const session = req.auth;
+
+  // Allow public routes and API routes
+  if (publicRoutes.some((r) => pathname.startsWith(r))) {
+    return;
+  }
+
+  // Allow static files and Next.js internals
+  if (pathname.startsWith('/_next') || pathname.startsWith('/favicon') || pathname.includes('.')) {
+    return;
+  }
+
+  // Check authentication for protected routes
+  const isProtected = protectedRoutes.some((r) => pathname.startsWith(r));
+  const isAdmin = adminRoutes.some((r) => pathname.startsWith(r));
+
+  if ((isProtected || isAdmin) && !session) {
+    const signInUrl = new URL('/auth/signin', req.url);
+    signInUrl.searchParams.set('callbackUrl', pathname);
+    return Response.redirect(signInUrl);
+  }
+
+  // Check admin role
+  if (isAdmin && session) {
+    const roles = (session.user as { roles?: string[] })?.roles || [];
+    if (!roles.includes('admin')) {
+      return Response.redirect(new URL('/dashboard', req.url));
+    }
+  }
+});
+
+export const config = {
+  matcher: ['/((?!_next/static|_next/image|favicon.ico|.*\\..*).*)'],
+};