@next-friday/create-app 0.0.0-stage → 1.0.0

package/templates/nextjs/next.config.ts

@@ -0,0 +1,35 @@
+import type {NextConfig} from "next";
+
+const nextConfig: NextConfig = {
+  output: "standalone",
+  poweredByHeader: false,
+  cacheComponents: true,
+  partialPrefetching: true,
+  async headers() {
+    return [
+      {
+        source: "/:path*",
+        headers: [
+          {
+            key: "Strict-Transport-Security",
+            value: "max-age=63072000; includeSubDomains",
+          },
+          {
+            key: "X-Content-Type-Options",
+            value: "nosniff",
+          },
+          {
+            key: "X-Frame-Options",
+            value: "SAMEORIGIN",
+          },
+          {
+            key: "Referrer-Policy",
+            value: "strict-origin-when-cross-origin",
+          },
+        ],
+      },
+    ];
+  },
+};
+
+export default nextConfig;

package/templates/nextjs/package.json

@@ -0,0 +1,78 @@
+{
+  "name": "next-friday-template-nextjs",
+  "version": "0.1.0",
+  "private": true,
+  "description": "Next Friday Next.js template.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/next-friday/next-friday-template-nextjs.git"
+  },
+  "license": "UNLICENSED",
+  "author": "Next Friday",
+  "type": "module",
+  "scripts": {
+    "build": "next build",
+    "check": "pnpm verify:static && pnpm test:changed",
+    "clean": "rm -rf .next coverage *.tsbuildinfo .eslintcache node_modules/.cache",
+    "depcruise": "depcruise --config .dependency-cruiser.json app test eslint.config.ts next.config.ts playwright.config.ts postcss.config.mjs vitest.config.ts",
+    "dev": "next dev",
+    "format": "prettier --write --cache .",
+    "format:check": "prettier --check --cache . && editorconfig-checker",
+    "gates:check": "node scripts/check-agent-gates.ts",
+    "knip": "knip",
+    "lint": "eslint . --fix --cache --max-warnings=0 --no-inline-config",
+    "lint:check": "eslint . --cache --max-warnings=0 --no-inline-config",
+    "peers:check": "pnpm peers check",
+    "prepare": "husky && next typegen",
+    "rules:check": "node scripts/sync-agent-rules.ts --check",
+    "rules:sync": "node scripts/sync-agent-rules.ts",
+    "sort-package-json": "sort-package-json package.json",
+    "sort-package-json:check": "sort-package-json --check package.json",
+    "start": "cp -R .next/static .next/standalone/.next/ && (test ! -d public || cp -R public .next/standalone/) && node .next/standalone/server.js",
+    "suppressions:check": "bash .agents/hooks/agent-suppression-gate.sh --repo",
+    "test": "vitest run --passWithNoTests",
+    "test:changed": "if git rev-parse --quiet --verify origin/main > /dev/null && git diff --quiet \"$(git merge-base origin/main HEAD)\" -- pnpm-lock.yaml pnpm-workspace.yaml \"*package.json\" \"*tsconfig.json\" .husky; then vitest run --changed origin/main --passWithNoTests; else vitest run --passWithNoTests; fi",
+    "test:coverage": "vitest run --coverage --passWithNoTests",
+    "test:e2e": "playwright test",
+    "test:watch": "vitest",
+    "typecheck": "next typegen && tsc --noEmit -p tsconfig.json",
+    "verify": "pnpm verify:static && pnpm test:coverage",
+    "verify:static": "pnpm suppressions:check && pnpm rules:check && pnpm gates:check && pnpm lint:check && pnpm format:check && pnpm sort-package-json:check && pnpm peers:check && pnpm typecheck && pnpm knip && pnpm depcruise"
+  },
+  "dependencies": {
+    "next": "16.4.3",
+    "react": "19.3.1",
+    "react-dom": "19.3.1"
+  },
+  "devDependencies": {
+    "@commitlint/cli": "21.2.4",
+    "@next-friday/commitlint-config-friday": "4.0.0",
+    "@next-friday/eslint-config-friday": "5.1.0",
+    "@next-friday/prettier-config-friday": "4.0.0",
+    "@next/eslint-plugin-next": "16.4.3",
+    "@playwright/test": "1.64.1",
+    "@tailwindcss/postcss": "4.3.3",
+    "@types/node": "26.6.5",
+    "@types/react": "19.3.0",
+    "@types/react-dom": "19.3.0",
+    "@vitest/coverage-v8": "5.0.5",
+    "dependency-cruiser": "18.7.0",
+    "editorconfig-checker": "7.0.0",
+    "eslint": "10.13.0",
+    "fast-check": "4.10.2",
+    "husky": "9.1.7",
+    "jiti": "2.7.0",
+    "knip": "6.43.0",
+    "lint-staged": "17.6.0",
+    "prettier": "3.9.10",
+    "prettier-plugin-tailwindcss": "0.8.1",
+    "sort-package-json": "4.1.0",
+    "tailwindcss": "4.3.3",
+    "typescript": "7.0.2",
+    "vitest": "5.0.5"
+  },
+  "packageManager": "pnpm@12.6.0+sha512.3ef68f951cb111ac204b4a5a16f0b2ddf0da56a96e0413e81d855d9f0b55ef926714709028e1cd00c405c2c5fb7b9e8ec4dc46777c805d0373c2f2ff00fd20ec",
+  "engines": {
+    "node": ">=24.15.0 <25"
+  }
+}

package/templates/nextjs/playwright.config.ts

@@ -0,0 +1,27 @@
+import {defineConfig, devices} from "@playwright/test";
+
+const isCi = Boolean(process.env.CI);
+
+export default defineConfig({
+  forbidOnly: isCi,
+  testDir: "test",
+  projects: [
+    {
+      name: "chromium",
+      use: devices["Desktop Chrome"],
+    },
+  ],
+  use: {
+    baseURL: "http://localhost:3000",
+    trace: "on-first-retry",
+  },
+  webServer: {
+    url: "http://localhost:3000",
+    command: isCi
+      ? "cp -R .next/static .next/standalone/.next/ && (test ! -d public || cp -R public .next/standalone/) && node .next/standalone/server.js"
+      : "next dev",
+    reuseExistingServer: !isCi,
+  },
+  reporter: isCi ? "github" : "list",
+  retries: isCi ? 2 : 0,
+});

package/templates/nextjs/postcss.config.mjs

@@ -0,0 +1,7 @@
+const postcssConfig = {
+  plugins: {
+    "@tailwindcss/postcss": {},
+  },
+};
+
+export default postcssConfig;

package/templates/nextjs/prettier.config.ts

@@ -0,0 +1,11 @@
+import friday from "@next-friday/prettier-config-friday";
+import type {Config} from "prettier";
+import type {PluginOptions} from "prettier-plugin-tailwindcss";
+
+const prettierConfig: Config & PluginOptions = {
+  ...friday,
+  tailwindStylesheet: "./app/globals.css",
+  plugins: [...(friday.plugins ?? []), "prettier-plugin-tailwindcss"],
+};
+
+export default prettierConfig;

package/templates/nextjs/test/home.e2e.test.ts

@@ -0,0 +1,11 @@
+import {expect, test} from "@playwright/test";
+
+test("home page shows the template heading", async ({page}) => {
+  await page.goto("/");
+
+  await expect(
+    page.getByRole("heading", {
+      level: 1,
+    }),
+  ).toHaveText("Next Friday Next.js template");
+});

package/templates/nextjs/tsconfig.json

@@ -0,0 +1,33 @@
+{
+  "compilerOptions": {
+    "target": "ES2023",
+    "lib": ["dom", "dom.iterable", "esnext"],
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "jsx": "react-jsx",
+    "esModuleInterop": true,
+    "incremental": true,
+    "isolatedModules": true,
+    "noEmit": true,
+    "resolveJsonModule": true,
+    "skipLibCheck": true,
+    "strict": true,
+    "plugins": [
+      {
+        "name": "next"
+      }
+    ],
+    "paths": {
+      "@/*": ["./*"]
+    },
+    "allowJs": true
+  },
+  "include": [
+    "next-env.d.ts",
+    "**/*.ts",
+    "**/*.tsx",
+    ".next/types/**/*.ts",
+    ".next/dev/types/**/*.ts"
+  ],
+  "exclude": ["node_modules", ".next"]
+}

package/templates/nextjs/vitest.config.ts

@@ -0,0 +1,12 @@
+import {defineConfig} from "vitest/config";
+
+export default defineConfig({
+  test: {
+    coverage: {
+      reporter: ["text", "html", "cobertura"],
+      include: ["app/**/*.{ts,tsx}"],
+      exclude: ["app/**/*.test.{ts,tsx}", "app/**/layout.tsx"],
+    },
+    include: ["app/**/*.test.{ts,tsx}"],
+  },
+});

package/templates/nodejs/.agents/rules/typescript-first.md

@@ -0,0 +1,7 @@
+# TypeScript-First
+
+In a TypeScript-capable app or package, write source, tests, and scripts as `.ts`. Use that extension for new work and for any JavaScript file whose implementation this change already touches, then update its imports, scripts, tests, and configuration in the same change.
+
+Keep other languages in separately maintained components. Use a non-TypeScript extension when the runtime, tool, or public contract requires it.
+
+_Completion criterion_: Every file this change created or materially rewrote in a TypeScript-capable project uses the TypeScript extension the runtime accepts, and its imports and scripts resolve.

package/templates/nodejs/.agents/rules.json

@@ -0,0 +1,41 @@
+{
+  "automation-owned-checks": {
+    "description": "Owned checks: hooks and CI define what must pass; run checks by hand to verify"
+  },
+  "code-comments": {
+    "description": "Required comments: comment only where a tool or rule needs it, or for a reason the code cannot show"
+  },
+  "current-state-authority": {
+    "description": "Current state: implement from user requirements and the working tree"
+  },
+  "demand-driven-configuration": {
+    "description": "Demand-driven configuration: add a setting only for an active requirement"
+  },
+  "dependency-security": {
+    "description": "Dependencies: add a package only when code or a contract uses it",
+    "globs": ["package.json", "pnpm-lock.yaml", "pnpm-workspace.yaml"]
+  },
+  "deterministic-testing": {
+    "description": "Test admission: add a case only when it catches a defect current tests miss",
+    "globs": ["**/*.test.ts"]
+  },
+  "diagnostics-and-error-handling": {
+    "description": "Diagnostics: fix runtime failures at the source and keep the root cause"
+  },
+  "git-workflow": {
+    "description": "Git workflow: trunk-based branches, commits, and pull requests"
+  },
+  "no-suppression": {
+    "description": "Findings: fix scanner and linter reports without inline suppressions"
+  },
+  "script-driven-changes": {
+    "description": "Scripts: apply a repeated edit across many files with a script"
+  },
+  "single-author-style": {
+    "description": "Sibling style: match layout, naming, and composition in the same project"
+  },
+  "typescript-first": {
+    "description": "TypeScript-first: write source, tests, and scripts as .ts",
+    "globs": ["**/*.ts", "**/*.js"]
+  }
+}

package/templates/nodejs/.claude/rules/deterministic-testing.md

@@ -0,0 +1,20 @@
+---
+paths:
+  - "**/*.test.ts"
+---
+
+# Test Admission
+
+Keep tests as small, deterministic protections for observable contracts.
+
+Name the contract and the distinct defect a proposed test can detect before writing it. Admit a test for externally observable behavior, a public contract, a demonstrated regression, a non-trivial invariant, a meaningful failure mode, or an explicit repository verification requirement.
+
+Choose the narrowest existing layer that owns that contract. Give each test one defect to detect. Add a case only when it catches a defect remaining cases miss. Treat coverage percentage as a measurement.
+
+Search existing coverage first. Extend the file that already owns the contract. Create a file only when the contract has no owner or needs a different harness. Follow the nearest directory and naming pattern. Keep setup local until multiple tests share live runtime logic, then extract one helper.
+
+Use the framework's standard assertions. Use an inline snippet unless filesystem paths, module resolution, or compiler services are the contract. Keep fixtures declarative and read-only.
+
+When the user asks to run tests, run the narrowest owning file or filter.
+
+_Completion criterion_: Every added or modified case maps to an admitted contract and a defect current cases would miss. Tests stay unchanged when no proposed case survives admission.

package/templates/nodejs/.claude/rules/typescript-first.md

@@ -0,0 +1,13 @@
+---
+paths:
+  - "**/*.ts"
+  - "**/*.js"
+---
+
+# TypeScript-First
+
+In a TypeScript-capable app or package, write source, tests, and scripts as `.ts`. Use that extension for new work and for any JavaScript file whose implementation this change already touches, then update its imports, scripts, tests, and configuration in the same change.
+
+Keep other languages in separately maintained components. Use a non-TypeScript extension when the runtime, tool, or public contract requires it.
+
+_Completion criterion_: Every file this change created or materially rewrote in a TypeScript-capable project uses the TypeScript extension the runtime accepts, and its imports and scripts resolve.

package/templates/nodejs/.cursor/rules/deterministic-testing.mdc

@@ -0,0 +1,21 @@
+---
+description: "Test admission: add a case only when it catches a defect current tests miss"
+globs: "**/*.test.ts"
+alwaysApply: false
+---
+
+# Test Admission
+
+Keep tests as small, deterministic protections for observable contracts.
+
+Name the contract and the distinct defect a proposed test can detect before writing it. Admit a test for externally observable behavior, a public contract, a demonstrated regression, a non-trivial invariant, a meaningful failure mode, or an explicit repository verification requirement.
+
+Choose the narrowest existing layer that owns that contract. Give each test one defect to detect. Add a case only when it catches a defect remaining cases miss. Treat coverage percentage as a measurement.
+
+Search existing coverage first. Extend the file that already owns the contract. Create a file only when the contract has no owner or needs a different harness. Follow the nearest directory and naming pattern. Keep setup local until multiple tests share live runtime logic, then extract one helper.
+
+Use the framework's standard assertions. Use an inline snippet unless filesystem paths, module resolution, or compiler services are the contract. Keep fixtures declarative and read-only.
+
+When the user asks to run tests, run the narrowest owning file or filter.
+
+_Completion criterion_: Every added or modified case maps to an admitted contract and a defect current cases would miss. Tests stay unchanged when no proposed case survives admission.

package/templates/nodejs/.cursor/rules/typescript-first.mdc

@@ -0,0 +1,13 @@
+---
+description: "TypeScript-first: write source, tests, and scripts as .ts"
+globs: "**/*.ts,**/*.js"
+alwaysApply: false
+---
+
+# TypeScript-First
+
+In a TypeScript-capable app or package, write source, tests, and scripts as `.ts`. Use that extension for new work and for any JavaScript file whose implementation this change already touches, then update its imports, scripts, tests, and configuration in the same change.
+
+Keep other languages in separately maintained components. Use a non-TypeScript extension when the runtime, tool, or public contract requires it.
+
+_Completion criterion_: Every file this change created or materially rewrote in a TypeScript-capable project uses the TypeScript extension the runtime accepts, and its imports and scripts resolve.

package/templates/nodejs/.dependency-cruiser.json

@@ -0,0 +1,28 @@
+{
+  "extends": "dependency-cruiser/configs/recommended-strict",
+  "forbidden": [
+    {
+      "name": "no-orphans",
+      "to": {},
+      "from": {
+        "orphan": true,
+        "pathNot": [
+          "(^|/)tsconfig\\.json$",
+          "(^|/)eslint\\.config\\.ts$",
+          "(^|/)vitest[.]config[.]ts$",
+          "[.]test[.]ts$",
+          "^src/main[.]ts$"
+        ]
+      }
+    }
+  ],
+  "options": {
+    "skipAnalysisNotInRules": true,
+    "tsPreCompilationDeps": true,
+    "enhancedResolveOptions": {
+      "conditionNames": ["import", "require", "node", "default", "types"],
+      "exportsFields": ["exports"]
+    },
+    "exclude": "(^|/)(?:dist|coverage|node_modules)/"
+  }
+}

package/templates/nodejs/.dockerignore

@@ -0,0 +1,8 @@
+*
+!package.json
+!pnpm-lock.yaml
+!pnpm-workspace.yaml
+!tsconfig.json
+!tsconfig.build.json
+!src/
+src/**/*.test.ts

package/templates/nodejs/.env.example

@@ -0,0 +1 @@
+PORT=3000

package/templates/nodejs/.github/ISSUE_TEMPLATE/bug.yml

@@ -0,0 +1,66 @@
+name: Bug report
+description: Report crashes, incorrect behavior, or setup problems.
+labels: ["bug", "needs triage"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Reproduce the issue with the supported Node.js version.
+        Remove credentials, secrets, personal or customer data, and proprietary source code before submitting.
+  - type: checkboxes
+    id: preflight
+    attributes:
+      label: Before you submit
+      description: Confirm these items before submitting the report.
+      options:
+        - label: I searched existing issues and didn't find a matching report.
+          required: true
+        - label: I can reproduce this issue on the latest commit of the default branch.
+          required: true
+  - type: input
+    id: version
+    attributes:
+      label: Commit
+      placeholder: 769e0ef
+    validations:
+      required: true
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment
+      description: List Node.js, operating system, package manager, and the request that triggers the issue.
+      placeholder: |
+        Node.js: 24.22.1
+        OS: Ubuntu 24.04 / macOS
+        Package manager: pnpm 12.6.0
+        Request: curl -i http://localhost:3000/
+    validations:
+      required: true
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Minimal reproduction
+      description: Link to a minimal public reproduction or provide sanitized code and configuration that reproduce the issue.
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+      description: Describe the behavior you expected.
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual behavior
+      description: Describe what happened, including the response status, response body, errors, and server logs.
+    validations:
+      required: true
+  - type: checkboxes
+    id: safety
+    attributes:
+      label: Sensitive information
+      options:
+        - label: I removed credentials, secrets, personal or customer data, and proprietary code from this report.
+          required: true

package/templates/nodejs/.github/ISSUE_TEMPLATE/feature.yml

@@ -0,0 +1,50 @@
+name: Feature request
+description: Suggest a specific change to next-friday-template-nodejs.
+labels: ["enhancement", "needs triage"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Use this form for changes that are ready to evaluate.
+  - type: dropdown
+    id: scope
+    attributes:
+      label: Affected area
+      description: Select the area this request affects.
+      options:
+        - Endpoints
+        - Configuration and environment
+        - Testing
+        - Tooling / CI
+        - Documentation
+        - Repository governance
+    validations:
+      required: true
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: Describe the problem or use case.
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed change
+      description: Describe the smallest change that solves the problem.
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: List existing options you considered.
+    validations:
+      required: false
+  - type: checkboxes
+    id: breaking
+    attributes:
+      label: Breaking change
+      description: Indicate whether this request changes behavior for existing users.
+      options:
+        - label: This request changes an existing endpoint or public contract.

package/templates/nodejs/.github/pull_request_template.md

@@ -0,0 +1,25 @@
+<!-- Title: `<type>(<scope>): <subject>` with a lowercase scope and a subject of 50 characters or fewer. Repository workflows validate it. The squash merge puts the title on `main`. Delete a section that has nothing to say, except Scope. -->
+
+## Why
+
+<!-- The problem and the approach in 1-3 short sentences. No SHAs or rebase history. Link a related issue with `Closes #123`. -->
+
+## What changed
+
+<!-- 1-3 short bullets. Name a symbol or path only when it carries the change, and both sides of a rename. Name every added, changed, or removed endpoint, request or response field, and environment variable. Document new variables in `.env.example`. -->
+
+## Scope
+
+<!-- 1-3 short items: what this covers and what it deliberately leaves out. -->
+
+## Tradeoffs
+
+<!-- Only rejected alternatives a reviewer would ask about. -->
+
+## Blast Radius
+
+<!-- 1-2 sentences on who or what this touches and why that is safe or risky. If main is red, state the cost of leaving it red. -->
+
+## Verification
+
+<!-- 1-3 bullets, each a check you ran and its outcome. For a perf change, one number as before -> after. After this section, attach videos or screenshots that prove a claim. -->