@mars-stack/cli 8.0.0 → 8.0.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mars-stack/cli",
-  "version": "8.0.0",
+  "version": "8.0.1",
   "description": "MARS CLI: scaffold, configure, and maintain SaaS apps",
   "license": "MIT",
   "repository": {

package/template/e2e/README.md

@@ -1,6 +1,6 @@
 # Playwright E2E — feature coverage map
 
-Browser-level tests for user-visible behaviour. Run: `yarn test:e2e` from the project root (`playwright.config.ts`).
+Browser-level tests for user-visible behaviour. Run: `yarn test:e2e` from the project root (`playwright.config.ts`). **First run:** install browsers with `npx playwright install` (or `npx playwright install --with-deps chromium` in CI — see the smoke recipe below).
 
 ## Smoke (MARS-044)
 

package/template/e2e/api.spec.ts

@@ -5,7 +5,8 @@ test.describe('API endpoints', () => {
     const response = await request.get('/api/csrf');
     expect(response.ok()).toBeTruthy();
     const body = await response.json();
-    expect(body.csrfToken).toBeDefined();
+    expect(body.token).toBeDefined();
+    expect(body.csrfToken).toBe(body.token);
   });
 
   test('readiness endpoint returns ok', async ({ request }) => {

package/template/e2e/auth.spec.ts

@@ -3,7 +3,7 @@ import { test, expect } from '@playwright/test';
 test.describe('Authentication flow', () => {
   test('signup page loads', async ({ page }) => {
     await page.goto('/register');
-    await expect(page).toHaveTitle(/register|sign up/i);
+    await expect(page.getByRole('heading', { name: /create your account/i })).toBeVisible();
     await expect(page.locator('form')).toBeVisible();
   });
 

package/template/scripts/seed.contract.test.ts

@@ -0,0 +1,15 @@
+// @vitest-environment node
+import { readFileSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { describe, it, expect } from 'vitest';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+
+describe('scripts/seed.ts', () => {
+  it('imports hashing from password-hash so prisma db seed works under tsx (no server-only)', () => {
+    const src = readFileSync(resolve(__dirname, 'seed.ts'), 'utf8');
+    expect(src).toContain("@mars-stack/core/auth/password-hash");
+    expect(src).not.toMatch(/from ['"]@mars-stack\/core\/auth\/password['"]/);
+  });
+});

package/template/scripts/seed.ts

@@ -1,6 +1,6 @@
 import { PrismaClient } from '../prisma/generated/prisma/client.js';
 import { PrismaPg } from '@prisma/adapter-pg';
-import { hashPassword } from '@mars-stack/core/auth/password';
+import { hashPassword } from '@mars-stack/core/auth/password-hash';
 
 const adapter = new PrismaPg({
   connectionString: process.env.DATABASE_URL!,

package/template/src/app/api/csrf/route.test.ts

@@ -0,0 +1,27 @@
+// @vitest-environment node
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+
+const { mockRequireCSRFToken } = vi.hoisted(() => ({
+  mockRequireCSRFToken: vi.fn(),
+}));
+
+vi.mock('@/lib/mars', () => ({
+  requireCSRFToken: mockRequireCSRFToken,
+}));
+
+import { GET } from './route';
+
+describe('GET /api/csrf', () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  it('returns token and csrfToken with the same value', async () => {
+    mockRequireCSRFToken.mockResolvedValueOnce('test-csrf-value');
+    const response = await GET();
+    expect(response.status).toBe(200);
+    const body = (await response.json()) as { token: string; csrfToken: string };
+    expect(body.token).toBe('test-csrf-value');
+    expect(body.csrfToken).toBe('test-csrf-value');
+  });
+});

package/template/src/app/api/csrf/route.ts

@@ -4,7 +4,7 @@ import { NextResponse } from 'next/server';
 export async function GET() {
   try {
     const token = await requireCSRFToken();
-    return NextResponse.json({ token }, { status: 200 });
+    return NextResponse.json({ token, csrfToken: token }, { status: 200 });
   } catch (error) {
     console.error('CSRF token generation error:', error);
     return NextResponse.json({ error: 'Failed to generate CSRF token' }, { status: 500 });

package/template/src/features/auth/index.ts

@@ -1,3 +1,4 @@
 export type { AuthError, AuthUser, AuthErrorCode } from '@mars-stack/core/auth/types';
 export { validateEmail, validatePassword, validateRequired } from '@mars-stack/core/auth/validators';
-export { passwordSchema, hashPassword, verifyPassword } from '@mars-stack/core/auth/password';
+export { passwordSchema } from '@mars-stack/core/auth/password-schema';
+export { hashPassword, verifyPassword } from '@mars-stack/core/auth/password-hash';

package/template/src/features/auth/validators.ts

@@ -1,4 +1,4 @@
-import { passwordSchema } from '@mars-stack/core/auth/password';
+import { passwordSchema } from '@mars-stack/core/auth/password-schema';
 
 export function validateEmail(value: string): string | undefined {
   if (!value) return 'Email is required';