@mars-stack/cli 6.0.2 → 6.0.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mars-stack/cli",
-  "version": "6.0.2",
+  "version": "6.0.4",
   "description": "MARS CLI: scaffold, configure, and maintain SaaS apps",
   "license": "MIT",
   "repository": {
@@ -48,10 +48,10 @@
   "devDependencies": {
     "@types/fs-extra": "^11.0.0",
     "@types/js-yaml": "^4.0.9",
-    "@types/node": "^25.4.0",
+    "@types/node": "^25.5.0",
     "@types/prompts": "^2.4.0",
     "tsup": "^8.0.0",
     "typescript": "^5.7.0",
-    "vitest": "^4.1.0"
+    "vitest": "^4.1.1"
   }
 }

package/template/.cursor/rules/mars-testing.mdc

@@ -22,3 +22,9 @@ alwaysApply: false
 - Assert both the response body and status code.
 - Test error paths: invalid input (Zod), unauthorized, not found, database errors.
 - Unit tests MUST NOT depend on external services (database, Redis, email). Mock everything.
+
+## E2E (Playwright) — extending features
+
+End-to-end specs live in **`e2e/`** (`yarn test:e2e`). When you add or materially change **user-facing** behaviour (pages, flows, CLI-generated features), extend **`e2e/*.spec.ts`** so at least one **stable happy path** is covered. Prefer role/label selectors; avoid sleep-only assertions.
+
+**Mars monorepo:** The template’s catalog and CLI-wide CI expectations are defined in **`docs/design-docs/scaffold-testing-strategy.md`** (Decision 7) and ticket **MARS-041**; update **`template/e2e/`** and its README when you change generators or template routes.

package/template/.cursor/skills/mars-configure-payments/SKILL.md

@@ -184,7 +184,9 @@ switch (event.type) {
       data: {
         status: sub.status,
         stripePriceId: sub.items.data[0]?.price.id,
-        currentPeriodEnd: new Date(sub.current_period_end * 1000),
+        currentPeriodEnd: new Date(
+          (sub.items.data[0]?.current_period_end ?? sub.billing_cycle_anchor) * 1000,
+        ),
         cancelAtPeriodEnd: sub.cancel_at_period_end,
       },
     });

package/template/.mars/sync-manifest.yaml

@@ -295,6 +295,9 @@
 - path: e2e/public.spec.ts
   category: plumbing
 
+- path: e2e/README.md
+  category: plumbing
+
 - path: src/__tests__/architecture.test.ts
   category: plumbing
 

package/template/e2e/README.md

@@ -0,0 +1,41 @@
+# Playwright E2E — feature coverage map
+
+Browser-level tests for user-visible behaviour. Run: `yarn test:e2e` from the project root (`playwright.config.ts`).
+
+## When to update
+
+Whenever you add or change a feature that ships **UI or routes** (including features originally added via the Mars CLI’s `generate` commands), add or extend a spec here and update the tables below.
+
+**Mars monorepo contributors:** Follow **Decision 7** in `docs/design-docs/scaffold-testing-strategy.md` and ticket **MARS-041** (CLI-wide E2E coverage + CI). Keep this inventory in sync with `packages/cli/src/index.ts` `generate` subcommands.
+
+Use **local / console / `none`** providers so tests do not require paid third-party accounts.
+
+## `mars generate` subcommands (catalog)
+
+| CLI command | Spec file(s) | Status |
+|-------------|--------------|--------|
+| _(baseline)_ | `auth.spec.ts`, `public.spec.ts`, `api.spec.ts` | Partial (auth, public, API smoke) |
+| `blog` | — | Missing |
+| `dark-mode` | — | Missing |
+| `notifications` | — | Missing |
+| `analytics` | — | Missing |
+| `command-palette` | — | Missing |
+| `onboarding` | — | Missing |
+| `search` | — | Missing |
+| `realtime` | — | Missing |
+| `ai` | — | Missing |
+| `cookie-consent` | — | Missing |
+| `coming-soon` | — | Missing |
+| `sentry` | — | Missing |
+| `feature-flags` | — | Missing |
+
+## Scaffold-time features (`mars create`, user-visible)
+
+| Area | Spec file(s) | Status |
+|------|--------------|--------|
+| Billing | — | Missing |
+| File upload | — | Missing |
+
+## Waivers
+
+Document here if a feature intentionally has **no** E2E (e.g. server-only with no stable UI) and why.

package/template/package.json

@@ -32,22 +32,22 @@
     "@mars-stack/ui": "*",
     "@prisma/adapter-pg": "^7.5.0",
     "@prisma/client": "^7.5.0",
-    "dotenv": "^16.4.0",
-    "@react-email/components": "^1.0.8",
+    "dotenv": "^17.3.1",
+    "@react-email/components": "^1.0.10",
     "@sendgrid/mail": "^8.1.0",
     "@upstash/ratelimit": "^2.0.0",
-    "@upstash/redis": "^1.36.4",
+    "@upstash/redis": "^1.37.0",
     "bcryptjs": "^3.0.3",
     "clsx": "^2.1.1",
-    "jose": "^6.2.1",
-    "next": "^16.1.6",
+    "jose": "^6.2.2",
+    "next": "^16.2.1",
     "pino": "^9.6.0",
     "pino-pretty": "^13.0.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
-    "react-email": "^5.2.9",
+    "react-email": "^5.2.10",
     "server-only": "^0.0.1",
-    "stripe": "^17.0.0",
+    "stripe": "^20.4.1",
     "zod": "^4.3.6"
   },
   "prisma": {
@@ -57,17 +57,17 @@
   "devDependencies": {
     "@eslint/eslintrc": "^3.3.5",
     "@playwright/test": "^1.50.0",
-    "@tailwindcss/postcss": "^4.0.0",
+    "@tailwindcss/postcss": "^4.2.2",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.0.0",
     "@types/bcryptjs": "^3.0.0",
-    "@types/node": "^25.4.0",
+    "@types/node": "^25.5.0",
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
     "@vitejs/plugin-react": "^5.1.4",
     "eslint": "^9.0.0",
-    "eslint-config-next": "^16.0.0",
-    "jsdom": "^28.1.0",
+    "eslint-config-next": "^16.2.1",
+    "jsdom": "^29.0.1",
     "postcss": "^8.5.0",
     "prettier": "^3.5.0",
     "prettier-plugin-tailwindcss": "^0.7.2",
@@ -75,6 +75,6 @@
     "tailwindcss": "^4.0.0",
     "tsx": "^4.0.0",
     "typescript": "^5.7.0",
-    "vitest": "^4.1.0"
+    "vitest": "^4.1.1"
   }
 }

package/template/src/app/api/webhooks/stripe/route.ts

@@ -2,6 +2,7 @@ import { createPaymentService } from '@mars-stack/core/payments';
 import { appConfig } from '@/config/app.config';
 import { prisma } from '@/lib/prisma';
 import { NextResponse } from 'next/server';
+import type Stripe from 'stripe';
 import type {
   UpsertSubscriptionData,
   UpdateSubscriptionStatusData,
@@ -33,6 +34,21 @@ interface StripeEvent {
   };
 }
 
+/** Stripe's TS types model period bounds on subscription items; API responses may still include a root `current_period_end`. */
+function unixSecondsForSubscriptionPeriodEnd(subscription: Stripe.Subscription): number {
+  const withLegacyRoot = subscription as Stripe.Subscription & {
+    current_period_end?: number;
+  };
+  if (typeof withLegacyRoot.current_period_end === 'number') {
+    return withLegacyRoot.current_period_end;
+  }
+  const fromFirstItem = subscription.items.data[0]?.current_period_end;
+  if (typeof fromFirstItem === 'number') {
+    return fromFirstItem;
+  }
+  return subscription.billing_cycle_anchor;
+}
+
 async function handleCheckoutCompleted(session: StripeCheckoutSession): Promise<void> {
   const userId = session.metadata?.userId;
   if (!userId) {
@@ -47,13 +63,15 @@ async function handleCheckoutCompleted(session: StripeCheckoutSession): Promise<
   const stripe = new Stripe(secretKey);
   const subscription = await stripe.subscriptions.retrieve(session.subscription);
 
+  const periodEndSeconds = unixSecondsForSubscriptionPeriodEnd(subscription);
+
   const data: UpsertSubscriptionData = {
     userId,
     stripeCustomerId: session.customer,
     stripeSubscriptionId: subscription.id,
     stripePriceId: subscription.items.data[0]?.price.id,
     status: subscription.status,
-    currentPeriodEnd: new Date(subscription.current_period_end * 1000),
+    currentPeriodEnd: new Date(periodEndSeconds * 1000),
     cancelAtPeriodEnd: subscription.cancel_at_period_end,
   };
 
@@ -158,9 +176,6 @@ export async function POST(request: Request): Promise<NextResponse> {
     return NextResponse.json({ received: true });
   } catch (error) {
     console.error('[Stripe Webhook] Error processing event:', error);
-    return NextResponse.json(
-      { error: 'Webhook processing failed' },
-      { status: 400 },
-    );
+    return NextResponse.json({ error: 'Webhook processing failed' }, { status: 400 });
   }
 }