@m5kdev/backend 0.1.0 → 0.1.1

package/.cursor/rules/backend.mdc

@@ -0,0 +1,70 @@
+---
+alwaysApply: true
+---
+
+# Backend Stack Rules (`#modules`)
+
+## Intent
+
+`#modules` is a composable backend stack, not a closed framework.
+
+- Prefer extensible classes and factories.
+- Keep module contracts open for app-level composition.
+- Do not hide wiring behind global initialization.
+
+## Module Shape
+
+For backend modules in `src/modules/<name>/`, prefer:
+
+- `<name>.db.ts` for tables/schema
+- `<name>.dto.ts` for IO contracts/select helpers
+- `<name>.repository.ts` for persistence
+- `<name>.service.ts` for orchestration/business rules
+- `<name>.trpc.ts` and optional `<name>.router.ts` for transport adapters
+- optional `<name>.types.ts`, `<name>.utils.ts`, `<name>.constants.ts`
+
+## Layer Boundaries
+
+- Repository layer is data access only.
+- Service layer orchestrates repositories and other services.
+- Transport layer (`.trpc.ts`, `.router.ts`) validates/authenticates and delegates to services.
+- Worker/job glue should invoke services; business rules stay in services.
+
+Do not import services into repositories.
+
+## Dependency Injection and Composition
+
+- Services should declare explicit dependency maps:
+  - `BaseService<{ ...repositories }, { ...services }>`
+  - `BasePermissionService<{ ...repositories }, { ...services }>`
+- Instantiate repositories/services in app composition roots:
+  - `apps/*/server/src/repository.ts`
+  - `apps/*/server/src/service.ts`
+- Routers should receive service instances via function params; do not instantiate repositories/services inside router files.
+
+## Result and Error Discipline
+
+- Use `ServerResult`/`ServerResultAsync` and `throwable`/`throwableAsync` from base classes.
+- Prefer `this.error(...)`/`ServerError` instead of raw exceptions for expected failures.
+- In tRPC handlers, unwrap results with `handleTRPCResult`.
+
+## Transactions
+
+- Repository methods may accept optional `tx`.
+- Inside transaction blocks, use the transaction handle (`tx`) consistently; avoid mixing `this.orm` calls in the same transactional flow.
+
+## Grants and Permission Services
+
+- Keep grants declarations separate from service logic.
+- If a service extends `BasePermissionService`, action names passed to `accessGuard`/`accessGuardAsync` must match declared grant actions exactly.
+- Prefer canonical actions (`read`, `write`, `delete`, `publish`) unless the module exports a typed action union.
+
+## Jobs and Queue Payloads
+
+- Queue payloads should use stable primitives (e.g., `userId`, entity IDs, typed input), not full HTTP context/session objects.
+- Job modules should avoid importing global service singletons directly when a composed registry can be injected.
+
+## Configuration and Side Effects
+
+- Keep env access and SDK client initialization isolated to infra/lib files.
+- Avoid import-time side effects that crash optional modules for unrelated consumers.

package/.turbo/turbo-build.log

@@ -0,0 +1,5 @@
+
+
+> @m5kdev/backend@0.1.0 build /Users/michalkow/Projects/m5kdev/packages/backend
+> tsc --build
+

package/.turbo/turbo-check-types.log

@@ -0,0 +1,5 @@
+
+
+> #modules@0.1.0 check-types /Users/michalkow/Projects/m5-new/packages/backend
+> tsc --noEmit
+

package/.turbo/turbo-lint$colon$fix.log

@@ -0,0 +1,255 @@
+
+
+> @repo/backend@1.0.0 lint:fix /Users/michalkow/Projects/m5/packages/backend
+> biome check . --write
+
+src/lib/posthog.ts:3:42 ]8;;https://biomejs.dev/linter/rules/no-non-null-assertion\lint/style/noNonNullAssertion]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Forbidden non-null assertion.
+  
+    1 │ import { PostHog } from "posthog-node";
+    2 │ 
+  > 3 │ export const posthogClient = new PostHog(process.env.VITE_PUBLIC_POSTHOG_KEY!, {
+      │                                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+    4 │   host: process.env.VITE_PUBLIC_POSTHOG_HOST!,
+    5 │ });
+  
+
+src/lib/posthog.ts:4:9 ]8;;https://biomejs.dev/linter/rules/no-non-null-assertion\lint/style/noNonNullAssertion]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Forbidden non-null assertion.
+  
+    3 │ export const posthogClient = new PostHog(process.env.VITE_PUBLIC_POSTHOG_KEY!, {
+  > 4 │   host: process.env.VITE_PUBLIC_POSTHOG_HOST!,
+      │         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+    5 │ });
+    6 │ 
+  
+
+src/modules/auth/auth.lib.ts:28:14 ]8;;https://biomejs.dev/linter/rules/no-non-null-assertion\lint/style/noNonNullAssertion]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Forbidden non-null assertion.
+  
+    26 │ ): BetterAuth {
+    27 │   return betterAuth({
+  > 28 │     baseURL: process.env.VITE_SERVER_URL!,
+       │              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+    29 │     session: {
+    30 │       expiresIn: 60 * 60 * 24 * 7, // 7 days
+  
+
+src/modules/auth/auth.lib.ts:93:22 ]8;;https://biomejs.dev/linter/rules/no-non-null-assertion\lint/style/noNonNullAssertion]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Forbidden non-null assertion.
+  
+    91 │     },
+    92 │     plugins: [admin(), organization(), apiKey()],
+  > 93 │     trustedOrigins: [process.env.VITE_APP_URL!, process.env.VITE_SERVER_URL!],
+       │                      ^^^^^^^^^^^^^^^^^^^^^^^^^
+    94 │   });
+    95 │ }
+  
+
+src/modules/auth/auth.lib.ts:93:49 ]8;;https://biomejs.dev/linter/rules/no-non-null-assertion\lint/style/noNonNullAssertion]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Forbidden non-null assertion.
+  
+    91 │     },
+    92 │     plugins: [admin(), organization(), apiKey()],
+  > 93 │     trustedOrigins: [process.env.VITE_APP_URL!, process.env.VITE_SERVER_URL!],
+       │                                                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+    94 │   });
+    95 │ }
+  
+
+src/modules/base/base.dto.ts:78:18 ]8;;https://biomejs.dev/linter/rules/no-explicit-any\lint/suspicious/noExplicitAny]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Unexpected any. Specify a different type.
+  
+    76 │   for (const key of schemaKeys) {
+    77 │     if (key in allColumns) {
+  > 78 │       (result as any)[key] = allColumns[key as keyof typeof allColumns];
+       │                  ^^^
+    79 │     }
+    80 │   }
+  
+  ℹ any disables many type checking rules. Its use should be avoided.
+  
+
+src/modules/base/base.repository.ts:27:54 ]8;;https://biomejs.dev/linter/rules/no-explicit-any\lint/suspicious/noExplicitAny]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Unexpected any. Specify a different type.
+  
+    25 │ };
+    26 │ 
+  > 27 │ export class BaseRepository<O extends LibSQLDatabase<any>, S> {
+       │                                                      ^^^
+    28 │   protected orm: O;
+    29 │   protected schema: S;
+  
+  ℹ any disables many type checking rules. Its use should be avoided.
+  
+
+src/modules/base/base.service.ts:4:54 ]8;;https://biomejs.dev/linter/rules/no-explicit-any\lint/suspicious/noExplicitAny]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Unexpected any. Specify a different type.
+  
+    3 │ export class BaseService<
+  > 4 │   Repositories extends Record<string, BaseRepository<any, any> | BaseExternaRepository>,
+      │                                                      ^^^
+    5 │   Services extends Record<string, BaseService<any, any>>,
+    6 │ > {
+  
+  ℹ any disables many type checking rules. Its use should be avoided.
+  
+
+src/modules/base/base.service.ts:4:59 ]8;;https://biomejs.dev/linter/rules/no-explicit-any\lint/suspicious/noExplicitAny]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Unexpected any. Specify a different type.
+  
+    3 │ export class BaseService<
+  > 4 │   Repositories extends Record<string, BaseRepository<any, any> | BaseExternaRepository>,
+      │                                                           ^^^
+    5 │   Services extends Record<string, BaseService<any, any>>,
+    6 │ > {
+  
+  ℹ any disables many type checking rules. Its use should be avoided.
+  
+
+src/modules/base/base.service.ts:5:47 ]8;;https://biomejs.dev/linter/rules/no-explicit-any\lint/suspicious/noExplicitAny]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Unexpected any. Specify a different type.
+  
+    3 │ export class BaseService<
+    4 │   Repositories extends Record<string, BaseRepository<any, any> | BaseExternaRepository>,
+  > 5 │   Services extends Record<string, BaseService<any, any>>,
+      │                                               ^^^
+    6 │ > {
+    7 │   constructor(
+  
+  ℹ any disables many type checking rules. Its use should be avoided.
+  
+
+src/modules/base/base.service.ts:5:52 ]8;;https://biomejs.dev/linter/rules/no-explicit-any\lint/suspicious/noExplicitAny]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Unexpected any. Specify a different type.
+  
+    3 │ export class BaseService<
+    4 │   Repositories extends Record<string, BaseRepository<any, any> | BaseExternaRepository>,
+  > 5 │   Services extends Record<string, BaseService<any, any>>,
+      │                                                    ^^^
+    6 │ > {
+    7 │   constructor(
+  
+  ℹ any disables many type checking rules. Its use should be avoided.
+  
+
+src/modules/billing/billing.router.ts:32:18 ]8;;https://biomejs.dev/linter/rules/no-non-null-assertion\lint/style/noNonNullAssertion]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Forbidden non-null assertion.
+  
+    31 │   billingRouter.get("/checkout/:priceId", authMiddleware, async (req: AuthRequest, res) => {
+  > 32 │     const user = req.user!;
+       │                  ^^^^^^^^^
+    33 │     const { priceId } = req.params;
+    34 │     let stripeCustomerId = user.paymentCustomerId;
+  
+
+src/modules/billing/billing.router.ts:81:18 ]8;;https://biomejs.dev/linter/rules/no-non-null-assertion\lint/style/noNonNullAssertion]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Forbidden non-null assertion.
+  
+    80 │   billingRouter.get("/success", authMiddleware, async (req: AuthRequest, res) => {
+  > 81 │     const user = req.user!;
+       │                  ^^^^^^^^^
+    82 │     const stripeCustomerId = user.paymentCustomerId;
+    83 │     if (!stripeCustomerId) {
+  
+
+src/modules/billing/billing.router.ts:120:7 ]8;;https://biomejs.dev/linter/rules/no-non-null-assertion\lint/style/noNonNullAssertion]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Forbidden non-null assertion.
+  
+    118 │       body,
+    119 │       signature,
+  > 120 │       process.env.STRIPE_WEBHOOK_SECRET!
+        │       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+    121 │     );
+    122 │ 
+  
+
+src/utils/mail.ts:3:20 ]8;;https://biomejs.dev/linter/rules/no-non-null-assertion\lint/style/noNonNullAssertion]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Forbidden non-null assertion.
+  
+    1 │ import sendgrid from "@sendgrid/mail";
+    2 │ 
+  > 3 │ sendgrid.setApiKey(process.env.SENDGRID_API_KEY!);
+      │                    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+    4 │ 
+    5 │ const authFrom = {
+  
+
+src/utils/mail.ts:6:9 ]8;;https://biomejs.dev/linter/rules/no-non-null-assertion\lint/style/noNonNullAssertion]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Forbidden non-null assertion.
+  
+    5 │ const authFrom = {
+  > 6 │   name: process.env.SENDGRID_AUTH_FROM_NAME!,
+      │         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+    7 │   email: process.env.SENDGRID_AUTH_FROM_EMAIL!,
+    8 │ };
+  
+
+src/utils/mail.ts:7:10 ]8;;https://biomejs.dev/linter/rules/no-non-null-assertion\lint/style/noNonNullAssertion]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Forbidden non-null assertion.
+  
+    5 │ const authFrom = {
+    6 │   name: process.env.SENDGRID_AUTH_FROM_NAME!,
+  > 7 │   email: process.env.SENDGRID_AUTH_FROM_EMAIL!,
+      │          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+    8 │ };
+    9 │ 
+  
+
+src/utils/mail.ts:31:17 ]8;;https://biomejs.dev/linter/rules/no-non-null-assertion\lint/style/noNonNullAssertion]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Forbidden non-null assertion.
+  
+    29 │     ],
+    30 │     from: authFrom,
+  > 31 │     templateId: process.env.SENDGRID_AUTH_VERIFY_TEMPLATE_ID!,
+       │                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+    32 │     trackingSettings: {
+    33 │       clickTracking: {
+  
+
+src/utils/mail.ts:59:17 ]8;;https://biomejs.dev/linter/rules/no-non-null-assertion\lint/style/noNonNullAssertion]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Forbidden non-null assertion.
+  
+    57 │     ],
+    58 │     from: authFrom,
+  > 59 │     templateId: process.env.SENDGRID_AUTH_RESET_TEMPLATE_ID!,
+       │                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+    60 │     trackingSettings: {
+    61 │       clickTracking: {
+  
+
+src/utils/mail.ts:87:17 ]8;;https://biomejs.dev/linter/rules/no-non-null-assertion\lint/style/noNonNullAssertion]8;;\ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+  ⚠ Forbidden non-null assertion.
+  
+    85 │     ],
+    86 │     from: authFrom,
+  > 87 │     templateId: process.env.SENDGRID_AUTH_DELETE_TEMPLATE_ID!,
+       │                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+    88 │     trackingSettings: {
+    89 │       clickTracking: {
+  
+
+The number of diagnostics exceeds the limit allowed. Use --max-diagnostics to increase it.
+Diagnostics not shown: 2.
+Checked 41 files in 56ms. No fixes applied.
+Found 22 warnings.

package/CHANGELOG.md

@@ -0,0 +1,10 @@
+# @m5kdev/backend
+
+## 0.1.1
+
+### Patch Changes
+
+- exports
+- Updated dependencies
+  - @m5kdev/commons@0.1.1
+  - @m5kdev/config@0.1.1

package/dist/src/lib/posthog.d.ts

@@ -0,0 +1,3 @@
+import { PostHog } from "posthog-node";
+export declare const posthogClient: PostHog;
+//# sourceMappingURL=posthog.d.ts.map

package/dist/src/lib/posthog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"posthog.d.ts","sourceRoot":"","sources":["../../../src/lib/posthog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,eAAO,MAAM,aAAa,SAExB,CAAC"}

package/dist/src/lib/sentry.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sentry.d.ts.map

package/dist/src/lib/sentry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry.d.ts","sourceRoot":"","sources":["../../../src/lib/sentry.ts"],"names":[],"mappings":""}