@nest-arch/tui 0.2.8 → 0.4.3

package/dist/templates/addons/husky/pre-commit.hbs

@@ -1,31 +1,16 @@
-{{#if isPnpm}}pnpm test{{else if isYarn}}yarn test{{else if isBun}}bun run test{{else}}npm test{{/if}}
-
-# ultracite
 #!/bin/sh
-# Exit on any error
 set -e
 
-# Check if there are any staged files
-STAGED_FILES=$(git diff --cached --name-only --diff-filter=ACMR)
-if [ -z "$STAGED_FILES" ]; then
-  echo "No staged files to format"
-  exit 0
-fi
-
-# Run formatter
-{{#if isPnpm}}pnpm dlx ultracite fix{{else if isYarn}}yarn dlx ultracite fix{{else if isBun}}bunx ultracite fix{{else}}npx --yes ultracite fix{{/if}}
-FORMAT_EXIT_CODE=$?
-
-# Re-stage files that were already staged
-echo "$STAGED_FILES" | while IFS= read -r file; do
-  if [ -f "$file" ]; then
-    git add -- "$file"
-  fi
-done
+{{#if isPnpm}}pnpm test{{else if isYarn}}yarn test{{else if isBun}}bun run test{{else}}npm test{{/if}}
 
-if [ $FORMAT_EXIT_CODE -ne 0 ]; then
-  echo "Ultracite found issues that could not be auto-fixed."
-  exit $FORMAT_EXIT_CODE
+{{#if hasFormatter}}
+STAGED_FILES=$(git diff --cached --name-only --diff-filter=ACMR)
+if [ -n "$STAGED_FILES" ]; then
+  {{#if isPnpm}}pnpm run fix{{else if isYarn}}yarn run fix{{else if isBun}}bun run fix{{else}}npm run fix{{/if}}
+  echo "$STAGED_FILES" | while IFS= read -r file; do
+    if [ -f "$file" ]; then
+      git add -- "$file"
+    fi
+  done
 fi
-
-echo "✨ Files formatted by Ultracite"
+{{/if}}

package/dist/templates/base/.env.example.hbs

@@ -2,6 +2,8 @@
 PORT=3000
 NODE_ENV=development
 CORS_ORIGIN=http://localhost:3001
+# Comma-separated trusted reverse proxy IP addresses or CIDRs
+TRUSTED_PROXY_IPS={{#each trustedProxyIps}}{{#unless @first}},{{/unless}}{{this}}{{/each}}
 
 {{#if hasDatabase}}
 # Database
@@ -13,7 +15,7 @@ POSTGRES_URL=postgresql://postgres:postgres@localhost:5432/{{projectNameKebab}}_
 MYSQL_URL=mysql://root:mysql@localhost:3306/{{projectNameKebab}}_db
 {{/if}}
 {{#if hasSqlite}}
-SQLITE_PATH=file:./src/database/dev.db
+SQLITE_PATH=./src/database/dev.db
 {{/if}}
 {{#if hasMongodb}}
 MONGODB_URL=mongodb://localhost:27017/{{projectNameKebab}}_db
@@ -24,13 +26,22 @@ MONGODB_URL=mongodb://localhost:27017/{{projectNameKebab}}_db
 GRAPHQL_PLAYGROUND=true
 
 {{/if}}
-{{#if (and (eq auth "passport") hasDatabase)}}
+{{#if (eq auth "passport")}}
 # JWT
 JWT_ACCESS_SECRET=change-me-to-a-random-secret-at-least-32-characters-long
+{{#if hasDatabase}}
 JWT_REFRESH_SECRET=change-me-to-a-different-random-secret-at-least-32-characters
 {{/if}}
+{{/if}}
 {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless"))}}
 # Better Auth
 BETTER_AUTH_SECRET=change-me-to-a-random-secret-at-least-32-characters-long
 BETTER_AUTH_URL=http://localhost:3000
+{{#if (eq auth "better-auth:stateless")}}
+# OIDC provider; register http://localhost:3000/api/auth/callback/$OIDC_PROVIDER_ID as its callback URL
+OIDC_PROVIDER_ID=company-oidc
+OIDC_CLIENT_ID=replace-with-provider-client-id
+OIDC_CLIENT_SECRET=replace-with-provider-client-secret
+OIDC_DISCOVERY_URL=https://identity.example.com/.well-known/openid-configuration
+{{/if}}
 {{/if}}

package/dist/templates/base/.env.hbs

@@ -1,5 +1,6 @@
 CORS_ORIGIN=http://localhost:3001
 PORT=3000
+TRUSTED_PROXY_IPS={{#each trustedProxyIps}}{{#unless @first}},{{/unless}}{{this}}{{/each}}
 {{#if hasGraphql}}
 GRAPHQL_PLAYGROUND=true
 {{/if}}
@@ -11,16 +12,24 @@ POSTGRES_URL=postgresql://postgres:postgres@localhost:5432/{{projectNameKebab}}_
 MYSQL_URL=mysql://root:mysql@localhost:3306/{{projectNameKebab}}_db
 {{/if}}
 {{#if hasSqlite}}
-SQLITE_PATH=file:./src/database/dev.db
+SQLITE_PATH=./src/database/dev.db
 {{/if}}
 {{#if hasMongodb}}
 MONGODB_URL=mongodb://localhost:27017/{{projectNameKebab}}_db
 {{/if}}
-{{#if (and (eq auth "passport") hasDatabase)}}
+{{#if (eq auth "passport")}}
 JWT_ACCESS_SECRET=change-me-to-a-random-secret-at-least-32-characters-long
+{{#if hasDatabase}}
 JWT_REFRESH_SECRET=change-me-to-a-different-random-secret-at-least-32-characters
 {{/if}}
+{{/if}}
 {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless"))}}
 BETTER_AUTH_SECRET=change-me-to-a-random-secret-at-least-32-characters-long
 BETTER_AUTH_URL=http://localhost:3000
+{{#if (eq auth "better-auth:stateless")}}
+OIDC_PROVIDER_ID=company-oidc
+OIDC_CLIENT_ID=replace-with-provider-client-id
+OIDC_CLIENT_SECRET=replace-with-provider-client-secret
+OIDC_DISCOVERY_URL=https://identity.example.com/.well-known/openid-configuration
+{{/if}}
 {{/if}}

package/dist/templates/base/.gitignore.hbs

@@ -43,6 +43,7 @@ lerna-debug.log*
 
 # dotenv environment variable files
 .env
+.env.test
 .env.development.local
 .env.test.local
 .env.production.local
@@ -59,4 +60,4 @@ pids
 *.pid.lock
 
 # Diagnostic reports (https://nodejs.org/api/report.html)
-report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json

package/dist/templates/base/.yarnrc.yml.hbs

@@ -1,6 +1 @@
 nodeLinker: node-modules
-catalog:
-  "@types/node": ^22.13.14
-  dotenv: ^17.2.2
-  typescript: ^6.0.2
-  zod: ^4.4.3

package/dist/templates/base/README.md.hbs

@@ -36,6 +36,12 @@ npm run start{{/if}}
 {{#if isPnpm}}pnpm test:cov{{else if isYarn}}yarn test:cov{{else if isBun}}bun run test:cov{{else}}npm run test:cov{{/if}}
 ```
 
+{{#if hasRateLimiting}}
+## Reverse Proxy
+
+Set `TRUSTED_PROXY_IPS` to the IP addresses or CIDRs of your trusted reverse proxies. Leave it empty when clients connect directly. The application uses this allowlist when reading forwarded client IP headers for rate limiting.
+{{/if}}
+
 {{#if usePrisma}}
 ## Database Setup
 
@@ -79,12 +85,24 @@ This project uses **TypeORM** as the ORM. Available commands:
 {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless"))}}
 ## Auth Setup
 
-This project uses **Better Auth**. Generate the database schema by running:
+{{#if (eq auth "better-auth:stateless")}}
+This project uses **Better Auth** with encrypted stateless cookie sessions and an external OpenID Connect provider. Set `BETTER_AUTH_SECRET`, `BETTER_AUTH_URL`, `OIDC_PROVIDER_ID`, `OIDC_CLIENT_ID`, `OIDC_CLIENT_SECRET`, and `OIDC_DISCOVERY_URL` in `.env`. Register `${BETTER_AUTH_URL}/api/auth/callback/${OIDC_PROVIDER_ID}` with the provider, then begin the authorization-code flow through Better Auth's social sign-in endpoint. The generated configuration uses discovery, PKCE, and issuer validation.
 
-```bash
-{{#if isPnpm}}pnpm dlx auth@latest generate --config src/auth/auth.ts --output src/database/orm/prisma/schema.prisma -y && pnpm run prisma:format{{else if isYarn}}yarn dlx auth@latest generate --config src/auth/auth.ts --output src/database/orm/prisma/schema.prisma -y && yarn run prisma:format{{else if isBun}}bun x auth@latest generate --config src/auth/auth.ts --output src/database/orm/prisma/schema.prisma -y && bun run prisma:format{{else}}npx auth@latest generate --config src/auth/auth.ts --output src/database/orm/prisma/schema.prisma -y && npm run prisma:format{{/if}}
-```
-See https://better-auth.com/docs/adapters/prisma for more details.
+No local registration, password login, database migration, or immediate server-side revocation is included in this profile.
+{{else}}
+This project uses **Better Auth** with database-backed sessions. Set `BETTER_AUTH_SECRET` and `BETTER_AUTH_URL` in `.env` before running the generated scripts.
+
+Run `auth:generate` with your package manager. The script uses the installed CLI version.
+{{#if usePrisma}}
+Then run `prisma:generate`, `prisma:migrate --name auth`, and `build`. For deployments, apply the committed migrations with `prisma:migrate:deploy`. Auth models live in `src/database/orm/prisma/auth.prisma`; keep application models in `schema.prisma` or other files in that directory. `auth:generate` replaces only the auth-owned file (using `auth-schema.prisma` as CLI output). Inspect that diff after changing plugins.
+{{else if useDrizzle}}
+Then run `db:generate`, `db:migrate`, and `build`. Auth owns `src/database/orm/drizzle/auth-schema.ts`; application tables remain in `schema.ts`. Commit generated migration files. SQLite requires no Docker service.
+{{else}}
+Then run `auth:migrate` and `build`.
+{{/if}}
+
+The runtime auth module receives the database client owned by Nest. CLI schema discovery uses separate configuration. `GET /api/auth-profile` is a protected example for the Prisma and Drizzle profiles.
+{{/if}}
 
 ### Usage
 
@@ -185,3 +203,29 @@ import { AppRouterClass as AppRouter } from "./app.router.js";
 export class AppModule {}
 ```
 {{/if}}
+
+{{#if isPassportAuth}}
+## Passport authentication
+
+{{#if hasDatabase}}
+Set a random `JWT_ACCESS_SECRET` of at least 32 characters. Configure `JWT_ISSUER`, `JWT_AUDIENCE`, and `JWT_KEY_ID` consistently across instances. Apply Prisma migrations before starting.
+
+Register with `POST /api/auth/register` and sign in with `POST /api/auth/login`, using `{ "email": "user@example.com", "password": "a-long-unique-password" }`. Send the returned access token in `Authorization: Bearer <token>` to `GET /api/auth/profile`. Access tokens expire after 15 minutes. Passwords are hashed with bcrypt; token payloads contain no password or role supplied by the client.
+
+Refresh with `POST /api/auth/refresh` and `{ "refreshToken": "..." }`. Refresh tokens rotate on every use and expire seven days after login. Reusing a consumed token revokes the entire login session, including access tokens. Concurrent refresh requests therefore require client-side serialization. `POST /api/auth/logout` takes the same body and revokes that login session. Tokens are returned in JSON; no cookie transport is generated.
+
+Only hashes of refresh tokens are stored. Schedule deletion of expired refresh-token families according to your retention policy. Secret replacement invalidates existing access tokens; overlapping signing keys are not implemented in this baseline.
+{{else}}
+Configure `OIDC_JWKS_URI`, `OIDC_ISSUER`, and `OIDC_AUDIENCE` for your trusted identity provider. Send its RS256 access token in `Authorization: Bearer <token>` to `GET /api/auth/profile`. The API verifies the signature using the provider's cached, rate-limited JWKS keys and checks the issuer, audience, and expiration. This API does not accept passwords or issue local tokens.
+{{/if}}
+{{/if}}
+{{#if hasGraphql}}
+## GraphQL
+
+Send queries to `POST /graphql`. `{ hello }` is always available. With the Todo example, `todos`, `createTodo`, `updateTodo`, and `deleteTodo` operate on PostgreSQL. The first profile is unauthenticated; it does not include subscriptions or federation.
+{{/if}}
+{{#if hasMongodb}}
+## MongoDB
+
+Set `MONGODB_URL` including the database name. The native client connects and pings MongoDB during startup and closes with the Nest application. No Prisma migration commands are required. Todo identifiers are serialized ObjectId strings; malformed IDs return 400 and missing mutation targets return 404. Listing returns at most 100 items in identifier order. This baseline performs single-document writes and does not promise multi-document transactions.
+{{/if}}

package/dist/templates/base/nest-cli.json.hbs

@@ -3,6 +3,7 @@
   "collection": "@nestjs/schematics",
   "sourceRoot": "src",
   "compilerOptions": {
-    "deleteOutDir": true
+    "deleteOutDir": true{{#if (includes microservices "grpc")}},
+    "assets": ["proto/**/*"]{{/if}}
   }
 }

package/dist/templates/base/pnpm-workspace.yaml.hbs

@@ -1,5 +1,12 @@
 allowBuilds:
+{{#if useDrizzle}}
+  esbuild: true
+{{/if}}
+  protobufjs: true
   "@nestjs/core": true
+{{#if useTypescript7}}
+  esbuild: true
+{{/if}}
 {{#if swagger}}
   "@scarf/scarf": true
 {{/if}}
@@ -9,6 +16,14 @@ allowBuilds:
 {{#if usePrisma}}
   prisma: true
   "@prisma/engines": true
+  {{#if isPrisma6}}
+  "@prisma/client": true
+  {{/if}}
+  {{#if isPrisma8}}
+  esbuild: true
+  msgpackr-extract: true
+  workerd: true
+  {{/if}}
 {{/if}}
 {{#if (and (eq auth "passport") hasDatabase)}}
   bcrypt: true

package/dist/templates/base/prisma.config.ts.hbs

@@ -1,11 +1,37 @@
-import "dotenv/config";
-import { defineConfig, env } from "prisma/config";
+{{#if isMonorepo}}
+import { env } from "@repo/env/api-gateway";
+{{else}}
+import { env } from "./src/config/env.js";
+{{/if}}
+{{#if isPrisma8}}
+import { definePrismaConfig } from "prisma/config";
+{{#if hasMongodb}}
+import { defineConfig as ormConfig } from "@prisma/orm-mongo/config";
+{{else}}
+import { defineConfig as ormConfig } from "@prisma/orm-postgres/config";
+{{/if}}
+
+export default definePrismaConfig({
+  skills: {
+    agents: ["claude", "cursor", "agents", "devin"],
+  },
+  orm: ormConfig({
+    contract: "./src/prisma/contract.prisma",
+    db: {
+      connection: {{#if hasMongodb}}env.MONGODB_URL{{else}}env.POSTGRES_URL{{/if}},
+    },
+  }),
+});
+{{else}}
+import { defineConfig } from "prisma/config";
 
 export default defineConfig({
-  schema: "src/database/orm/prisma/schema.prisma",
+  schema: "src/database/orm/prisma{{#unless isBetterAuth}}/schema.prisma{{/unless}}",
   datasource: {
-    {{#if hasPostgres}}url: env("POSTGRES_URL"),{{/if}}
-    {{#if hasMysql}}url: env("MYSQL_URL"),{{/if}}
-    {{#if hasSqlite}}url: env("SQLITE_PATH"),{{/if}}
+    {{#if hasPostgres}}url: env.POSTGRES_URL,{{/if}}
+    {{#if hasMysql}}url: env.MYSQL_URL,{{/if}}
+    {{#if hasSqlite}}url: env.SQLITE_PATH,{{/if}}
+    {{#if hasMongodb}}url: env.MONGODB_URL,{{/if}}
   },
 });
+{{/if}}

package/dist/templates/base/src/app.controller.spec.ts.hbs

@@ -1,22 +1,15 @@
 // oxlint-disable vitest/require-mock-type-parameters
 import type { TestingModule } from "@nestjs/testing";
 import { Test } from "@nestjs/testing";
-import { beforeEach, describe, expect, it, vi } from "vitest";
+import { beforeEach, describe, expect, it } from "vitest";
 
 import { AppController } from "./app.controller.js";
 import { AppService } from "./app.service.js";
 {{#if (or hasDatabase hasOrm)}}
-import type { ISqlAdapter } from "./database/adapters/interfaces/db-adapter.interface.js";
 import { DbService } from "./database/db.service.js";
 {{/if}}
 
-{{#if (or hasDatabase hasOrm)}}
-const mockSqlAdapter: ISqlAdapter = {
-  execute: vi.fn().mockResolvedValue(null),
-  getClient: vi.fn().mockReturnValue({}),
-  query: vi.fn().mockResolvedValue([]),
-};
-{{/if}}
+
 
 describe(AppController, () => {
   let appController: AppController;
@@ -27,8 +20,7 @@ describe(AppController, () => {
       providers: [
         AppService,
         {{#if (or hasDatabase hasOrm)}}
-        DbService,
-        { provide: "SQL_ADAPTER", useValue: mockSqlAdapter },
+        { provide: DbService, useValue: {} },
         {{/if}}
       ],
     }).compile();

package/dist/templates/base/src/app.controller.ts.hbs

@@ -19,10 +19,10 @@ export class AppController {
   {{/if}}
   {{#if swagger}}
   @ApiOperation({ summary: "/api" })
-  @ApiResponse({ status: 200, description: "Returns a hello world message" })
+  @ApiResponse({ description: "Returns a hello world message", status: 200 })
   {{/if}}
   @Get()
   getHello(): string {
     return this.appService.getHello();
   }
-}
+}

package/dist/templates/base/src/app.module.ts.hbs

@@ -1,5 +1,8 @@
-import { Module } from "@nestjs/common";
-{{#if (and hasAuth hasDatabase)}}
+import { Module{{#if (and hasGraphql hasRateLimiting)}}, Injectable, type ExecutionContext{{/if}} } from "@nestjs/common";
+{{#if (and hasGraphql hasRateLimiting)}}
+import { GqlExecutionContext } from "@nestjs/graphql";
+{{/if}}
+{{#if (and isPassportAuth hasDatabase)}}
 import { PassportModule } from "@nestjs/passport";
 {{/if}}
 {{#if (or hasDatabase hasOrm)}}
@@ -9,10 +12,14 @@ import { DbModule } from "./database/db.module.js";
 {{#if shouldImportAuthModule}}
 import { AuthModule } from "./auth/auth.module.js";
 {{/if}}
-{{#if (and hasAuth hasDatabase)}}
+{{#if (and isPassportAuth hasDatabase)}}
+{{#if hasGraphql}}
 import { GqlAuthGuard } from "./auth/guards/gql-auth.guard.js";
+{{/if}}
+{{#if hasRest}}
 import { RestAuthGuard } from "./auth/guards/rest-auth.guard.js";
 {{/if}}
+{{/if}}
 {{#if hasGraphql}}
 import { GraphqlAppModule } from "./graphql/graphql.module.js";
 {{/if}}
@@ -24,6 +31,9 @@ import { AppErrorHandler } from "./libs/trpc/error.handler.js";
 {{#if hasTrpcAndAuth}}
 import { AuthTRPCMiddleware } from "./libs/middlewares/auth.trpc.middleware.js";
 {{/if}}
+{{#if (and hasTrpc hasRateLimiting)}}
+import { RateLimitTRPCMiddleware } from "./libs/middlewares/rate-limit.trpc.middleware.js";
+{{/if}}
 {{/if}}
 
 {{#if hasRest}}
@@ -35,8 +45,35 @@ import { TodoModule } from "./api/todo/todo.module.js";
 {{#if (and hasTrpc hasTodoExample hasRest)}}
 import { TodoRouter } from "./api/todo/todo.router.js";
 {{/if}}
+{{#if hasHealthCheck}}
+import { HealthModule } from "./health/health.module.js";
+{{/if}}
+{{#if hasRateLimiting}}
+import { APP_GUARD } from "@nestjs/core";
+import { ThrottlerGuard, ThrottlerModule } from "@nestjs/throttler";
+{{/if}}
+{{#if (and isPassportAuth hasDatabase hasGraphql (not hasRateLimiting))}}
+import { APP_GUARD } from "@nestjs/core";
+{{/if}}
 import { AppService } from "./app.service.js";
 
+{{#if (and hasGraphql hasRateLimiting)}}
+@Injectable()
+class GraphqlThrottlerGuard extends ThrottlerGuard {
+  protected getRequestResponse(context: ExecutionContext) {
+    if (context.getType<string>() !== "graphql") return super.getRequestResponse(context);
+    const gqlContext = GqlExecutionContext.create(context).getContext();
+    return { req: gqlContext.req, res: { header: () => undefined } };
+  }
+
+  protected getTracker(request: Record<string, unknown>): Promise<string> {
+    const socket = request.socket as { remoteAddress?: string } | undefined;
+    const ip = request.ip;
+    return Promise.resolve(typeof ip === "string" ? ip : socket?.remoteAddress ?? "unknown");
+  }
+}
+{{/if}}
+
 @Module({
   {{#if hasRest}}
   controllers: [
@@ -55,7 +92,7 @@ import { AppService } from "./app.service.js";
     {{#if shouldImportAuthModule}}
     AuthModule,
     {{/if}}
-    {{#if (and hasAuth hasDatabase)}}
+    {{#if (and isPassportAuth hasDatabase)}}
     PassportModule.register({ defaultStrategy: "jwt" }),
     {{/if}}
     {{#if hasGraphql}}
@@ -65,22 +102,46 @@ import { AppService } from "./app.service.js";
     TRPCModule.forRoot({
       context: AppContext,
       onError: AppErrorHandler,
+      {{#if hasRateLimiting}}
+      globalMiddlewares: [RateLimitTRPCMiddleware],
+      {{/if}}
     }),
     {{/if}}
     {{#if (and hasTodoExample (or hasRest hasTrpc))}}
     TodoModule,
     {{/if}}
+    {{#if hasHealthCheck}}
+    HealthModule,
+    {{/if}}
+    {{#if hasRateLimiting}}
+    ThrottlerModule.forRoot([
+      {
+        ttl: 60_000,
+        limit: 60,
+        {{#if hasGraphql}}
+        setHeaders: false,
+        {{/if}}
+      },
+    ]),
+    {{/if}}
   ],
   providers: [
     AppService,
-    {{#if (and hasAuth hasDatabase)}}
+    {{#if (and isPassportAuth hasDatabase)}}
+    {{#if hasGraphql}}
     GqlAuthGuard,
+    {{/if}}
+    {{#if hasRest}}
     RestAuthGuard,
     {{/if}}
+    {{/if}}
     {{#if hasTrpc}}
     {{#if hasTrpcAndAuth}}
     AuthTRPCMiddleware,
     {{/if}}
+    {{#if hasRateLimiting}}
+    RateLimitTRPCMiddleware,
+    {{/if}}
     AppContext,
     AppErrorHandler,
     AppRouter,
@@ -88,6 +149,16 @@ import { AppService } from "./app.service.js";
     TodoRouter,
     {{/if}}
     {{/if}}
+    {{#if hasRateLimiting}}
+    {
+      provide: APP_GUARD,
+      {{#if hasGraphql}}
+      useClass: GraphqlThrottlerGuard,
+      {{else}}
+      useClass: ThrottlerGuard,
+      {{/if}}
+    },
+    {{/if}}
   ],
 })
 export class AppModule {}

package/dist/templates/base/src/app.router.ts.hbs

@@ -1,7 +1,6 @@
-import { Router, Query, UseMiddlewares, Ctx } from "nestjs-trpc";
-import z from "zod";
+import { Router, Query{{#if hasTrpcAndAuth}}, UseMiddlewares, Ctx{{/if}} } from "nestjs-trpc";
+import { z } from "zod";
 {{#if hasTrpcAndAuth}}
-import type { UserSession } from "./auth/auth.js";
 import { AuthTRPCMiddleware } from "./libs/middlewares/auth.trpc.middleware.js";
 import type { InnerContext } from "./libs/trpc/inner.context.js";
 {{/if}}
@@ -14,7 +13,7 @@ export class AppRouterClass {
 {{#if hasTrpcAndAuth}}
   @Query()
   @UseMiddlewares(AuthTRPCMiddleware)
-  testAuth(@Ctx() ctx: InnerContext): UserSession {
+  testAuth(@Ctx() ctx: InnerContext): NonNullable<InnerContext["session"]> {
     return ctx.session!;
   }
 

package/dist/templates/base/src/database/adapters/interfaces/db-adapter.interface.ts.hbs

@@ -7,8 +7,15 @@ export interface ISqlAdapter<TClient = unknown> {
 {{/if}}
 
 {{#if hasMongodb}}
+{{#if useRawSql}}
+import type { Collection, Document } from "mongodb";
+{{/if}}
 export interface IMongoAdapter<TClient = unknown> {
+{{#if useRawSql}}
+  collection<T extends Document = Document>(name: string): Collection<T>;
+{{else}}
   collection<T = unknown>(name: string): T;
+{{/if}}
   getClient(): TClient;
 }
 {{/if}}

package/dist/templates/base/src/database/adapters/mongo/prisma-mongo.adapter.ts.hbs

@@ -1,13 +1,44 @@
 import { Injectable, Inject } from '@nestjs/common';
 import { IMongoAdapter } from '../interfaces/db-adapter.interface.js';
+{{#if isPrisma8}}
 {{#if isMonorepo}}
-import type { PrismaClient } from '../../../database/orm/prisma/generated/client.js';
+import { db } from '../../../prisma/db.js';
 {{else}}
-import type { PrismaClient } from '../../orm/prisma/generated/client.js';
+import { db } from '../../prisma/db.js';
+{{/if}}
+{{else}}
+{{#if isMonorepo}}
+{{#if isPrisma6}}
+import type { Prisma, PrismaClient } from '@prisma/client';
+{{else}}
+import type { Prisma, PrismaClient } from '../../database/orm/prisma/generated/client.js';
+{{/if}}
+{{else}}
+{{#if isPrisma6}}
+import type { Prisma, PrismaClient } from '@prisma/client';
+{{else}}
+import type { Prisma, PrismaClient } from '../../orm/prisma/generated/client.js';
+{{/if}}
+{{/if}}
 {{/if}}
 
 @Injectable()
-export class PrismaMongoAdapter implements IMongoAdapter<PrismaClient> {
+export class PrismaMongoAdapter implements IMongoAdapter<any> {
+{{#if isPrisma8}}
+  readonly client = db;
+
+  collection<T = unknown>(name: string): T {
+    return ((this.client as any).orm as any)?.[name] as T;
+  }
+
+  async runCommand(command: unknown): Promise<unknown> {
+    return (this.client as any).query?.(command);
+  }
+
+  getClient() {
+    return this.client;
+  }
+{{else}}
   constructor(
     @Inject('PRISMA_MONGO_CLIENT') private readonly prisma: PrismaClient
   ) {}
@@ -15,11 +46,12 @@ export class PrismaMongoAdapter implements IMongoAdapter<PrismaClient> {
     return this.prisma[name as keyof PrismaClient] as T;
   }
 
-  async runCommand(command: unknown): Promise<unknown> {
+  async runCommand(command: Prisma.InputJsonObject): Promise<unknown> {
     return this.prisma.$runCommandRaw(command);
   }
 
   getClient(): PrismaClient {
     return this.prisma;
   }
+{{/if}}
 }

package/dist/templates/base/src/database/adapters/mongo/raw-mongo.adapter.ts.hbs

@@ -1,17 +1,22 @@
-import { Injectable, Inject } from '@nestjs/common';
-import { IMongoAdapter } from '../interfaces/db-adapter.interface.js';
+import { Injectable, Inject, type OnModuleInit, type OnModuleDestroy } from "@nestjs/common";
+import { MongoClient, type Collection, type Db, type Document } from "mongodb";
+import type { IMongoAdapter } from "../interfaces/db-adapter.interface.js";
 
 @Injectable()
-export class RawMongoAdapter implements IMongoAdapter {
-  constructor(
-    @Inject('MONGODB_CLIENT') private readonly db: any
-  ) {}
-
-  collection(name: string): any {
-    return this.db.collection(name);
+export class RawMongoAdapter implements IMongoAdapter<Db>, OnModuleInit, OnModuleDestroy {
+  constructor(@Inject("MONGODB_CLIENT") private readonly client: MongoClient) {}
+  collection<T extends Document = Document>(name: string): Collection<T> {
+    return this.client.db().collection<T>(name);
   }
-
-  getClient(): any {
-    return this.db;
+  getClient(): Db { return this.client.db(); }
+  async onModuleInit(): Promise<void> {
+    try {
+      await this.client.connect();
+      await this.client.db().command({ ping: 1 });
+    } catch (error) {
+      await this.client.close();
+      throw error;
+    }
   }
+  async onModuleDestroy(): Promise<void> { await this.client.close(); }
 }

package/dist/templates/base/src/database/adapters/sql/drizzle-sql.adapter.ts.hbs

@@ -21,4 +21,13 @@ export class DrizzleSqlAdapter<TClient = unknown> implements ISqlAdapter<TClient
   getClient(): TClient {
     return this.db;
   }
+
+  async onModuleDestroy(): Promise<void> {
+    const client = (this.db as any).$client;
+    if (typeof client?.end === 'function') {
+      await client.end();
+    } else if (typeof client?.close === 'function') {
+      await client.close();
+    }
+  }
 }