@mars-stack/cli 2.0.0 → 2.0.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mars-stack/cli",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "MARS CLI: scaffold, configure, and maintain SaaS apps",
   "license": "MIT",
   "repository": {
@@ -40,7 +40,7 @@
     "@mars-stack/ui": "*",
     "commander": "^14.0.3",
     "fs-extra": "^11.0.0",
-    "ora": "^8.0.0",
+    "ora": "^9.3.0",
     "picocolors": "^1.0.0",
     "prompts": "^2.4.0"
   },
@@ -50,6 +50,6 @@
     "@types/prompts": "^2.4.0",
     "tsup": "^8.0.0",
     "typescript": "^5.7.0",
-    "vitest": "^4.0.18"
+    "vitest": "^4.1.0"
   }
 }

package/template/package.json

@@ -37,10 +37,10 @@
     "@sendgrid/mail": "^8.1.0",
     "@upstash/ratelimit": "^2.0.0",
     "@upstash/redis": "^1.36.4",
-    "bcryptjs": "^2.4.3",
+    "bcryptjs": "^3.0.3",
     "clsx": "^2.1.1",
     "jose": "^6.2.1",
-    "next": "^16.0.0",
+    "next": "^16.1.6",
     "pino": "^9.6.0",
     "pino-pretty": "^13.0.0",
     "react": "^19.0.0",
@@ -60,7 +60,7 @@
     "@tailwindcss/postcss": "^4.0.0",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.0.0",
-    "@types/bcryptjs": "^2.4.0",
+    "@types/bcryptjs": "^3.0.0",
     "@types/node": "^25.4.0",
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
@@ -75,6 +75,6 @@
     "tailwindcss": "^4.0.0",
     "tsx": "^4.0.0",
     "typescript": "^5.7.0",
-    "vitest": "^3.0.0"
+    "vitest": "^4.1.0"
   }
 }

package/template/src/app/(auth)/forgotten-password/page.tsx

@@ -12,6 +12,7 @@ export default function ForgottenPassword() {
   const { getCSRFHeaders } = useCSRF();
   const [serverError, setServerError] = useState('');
   const [success, setSuccess] = useState(false);
+  const [devLink, setDevLink] = useState<string | null>(null);
 
   const form = useZodForm({
     schema: formSchemas.forgotPassword,
@@ -34,6 +35,10 @@ export default function ForgottenPassword() {
         return;
       }
 
+      const data = await response.json();
+      if (data.devLink) {
+        setDevLink(data.devLink);
+      }
       setSuccess(true);
     } catch {
       setServerError('Network error. Please try again.');
@@ -47,6 +52,19 @@ export default function ForgottenPassword() {
         <Text.Paragraph>
           If an account exists for that email, we&apos;ve sent password reset instructions.
         </Text.Paragraph>
+        {devLink && (
+          <div className="mx-auto mt-4 max-w-sm rounded-md border border-border-warning bg-warning-muted p-3">
+            <Text.Paragraph className="text-sm font-medium text-text-warning">
+              Dev mode — console email provider
+            </Text.Paragraph>
+            <a
+              href={devLink}
+              className="mt-1 inline-block text-sm font-medium text-text-link hover:text-text-link-hover hover:underline"
+            >
+              Click here to reset your password →
+            </a>
+          </div>
+        )}
         <Link href={routes.signIn} className="mt-6 inline-block text-sm text-text-link hover:text-text-link-hover hover:underline">
           Back to sign in
         </Link>

package/template/src/app/(auth)/register/page.tsx

@@ -52,6 +52,9 @@ function SignUpForm() {
       }
 
       sessionStorage.setItem('verify-email', values.email);
+      if (data.devLink) {
+        sessionStorage.setItem('verify-dev-link', data.devLink);
+      }
       router.push('/verify');
     } catch {
       setServerError('Network error. Please try again.');

package/template/src/app/(auth)/verify/page.tsx

@@ -7,6 +7,7 @@ import { Suspense, useEffect, useState } from 'react';
 
 function VerifyContent() {
   const [email, setEmail] = useState<string | null>(null);
+  const [devLink, setDevLink] = useState<string | null>(null);
 
   useEffect(() => {
     const stored = sessionStorage.getItem('verify-email');
@@ -14,6 +15,11 @@ function VerifyContent() {
       setEmail(stored);
       sessionStorage.removeItem('verify-email');
     }
+    const storedDevLink = sessionStorage.getItem('verify-dev-link');
+    if (storedDevLink) {
+      setDevLink(storedDevLink);
+      sessionStorage.removeItem('verify-dev-link');
+    }
   }, []);
 
   return (
@@ -37,6 +43,19 @@ function VerifyContent() {
       <Text.Paragraph className="mt-1 text-sm text-text-muted">
         Didn&apos;t receive the email? Check your spam folder.
       </Text.Paragraph>
+      {devLink && (
+        <div className="mt-4 rounded-md border border-border-warning bg-warning-muted p-3">
+          <Text.Paragraph className="text-sm font-medium text-text-warning">
+            Dev mode — console email provider
+          </Text.Paragraph>
+          <a
+            href={devLink}
+            className="mt-1 inline-block text-sm font-medium text-text-link hover:text-text-link-hover hover:underline"
+          >
+            Click here to verify your email →
+          </a>
+        </div>
+      )}
       <Link
         href={routes.signIn}
         className="mt-8 inline-block text-sm text-text-link hover:text-text-link-hover hover:underline"

package/template/src/app/(protected)/layout.tsx

@@ -28,6 +28,13 @@ function NavLink({ href, label, active }: { href: string; label: string; active:
   );
 }
 
+function AdminLink({ pathname }: { pathname: string }) {
+  const { user } = useAuth();
+  if (!user || user.role !== 'admin') return null;
+
+  return <NavLink href={routes.admin} label="Admin" active={pathname === routes.admin} />;
+}
+
 function MobileNavLink({
   href,
   label,
@@ -54,6 +61,15 @@ function MobileNavLink({
   );
 }
 
+function MobileAdminLink({ pathname, onClick }: { pathname: string; onClick: () => void }) {
+  const { user } = useAuth();
+  if (!user || user.role !== 'admin') return null;
+
+  return (
+    <MobileNavLink href={routes.admin} label="Admin" active={pathname === routes.admin} onClick={onClick} />
+  );
+}
+
 function UserMenu() {
   const { user, logout } = useAuth();
   const router = useRouter();
@@ -212,6 +228,7 @@ export default function ProtectedLayout({ children }: Readonly<{ children: React
                 {NAV_ITEMS.map((item) => (
                   <NavLink key={item.href} href={item.href} label={item.label} active={pathname === item.href} />
                 ))}
+                <AdminLink pathname={pathname} />
               </div>
             </div>
 
@@ -248,6 +265,7 @@ export default function ProtectedLayout({ children }: Readonly<{ children: React
                   onClick={() => setMobileMenuOpen(false)}
                 />
               ))}
+              <MobileAdminLink pathname={pathname} onClick={() => setMobileMenuOpen(false)} />
             </div>
             <div className="border-t border-border-default px-4 py-3">
               <UserMenu />

package/template/src/app/api/auth/forgot/route.ts

@@ -1,3 +1,5 @@
+import 'server-only';
+
 import { prisma } from '@/lib/prisma';
 import { sendEmail, handleApiError, getBaseUrl } from '@/lib/mars';
 import { checkRateLimit, getClientIP, RATE_LIMITS, rateLimitResponse } from '@mars-stack/core/rate-limit';
@@ -53,8 +55,12 @@ export async function POST(request: Request) {
       text,
     });
 
+    const isConsoleEmail =
+      process.env.NODE_ENV !== 'production' &&
+      appConfig.services.email.provider === 'console';
+
     return NextResponse.json(
-      { message: 'If an account exists, a reset email will be sent' },
+      { message: 'If an account exists, a reset email will be sent', ...(isConsoleEmail && { devLink: resetUrl }) },
       { status: 200 },
     );
   } catch (error) {

package/template/src/app/api/auth/signup/route.ts

@@ -76,6 +76,15 @@ export async function POST(request: Request) {
         html,
         text,
       });
+
+      const isConsoleEmail =
+        process.env.NODE_ENV !== 'production' &&
+        appConfig.services.email.provider === 'console';
+
+      return NextResponse.json(
+        { message: 'User created successfully', ...(isConsoleEmail && { devLink: verifyUrl }) },
+        { status: 201 },
+      );
     }
 
     return NextResponse.json({ message: 'User created successfully' }, { status: 201 });

package/template/src/config/app.config.ts

@@ -17,15 +17,7 @@ export const appConfig = {
     address: '',
   },
   theme: {
-    primaryColor: 'blue-600' as string,
-    secondaryColor: 'amber-400' as string,
     font: 'Inter' as string,
-    designDirection: 'modern-saas' as
-      | 'modern-saas'
-      | 'minimal'
-      | 'enterprise'
-      | 'creative'
-      | 'dashboard',
   },
   features: {
     auth: true,

package/template/src/config/routes.ts

@@ -8,6 +8,8 @@ export const routes = {
   dashboard: '/dashboard',
   settings: '/settings',
   admin: '/admin',
+  onboarding: '/onboarding',
+  comingSoon: '/coming-soon',
   about: '/about',
   privacy: '/privacy',
   terms: '/terms',