@podosoft/podokit 0.2.0 → 0.4.0

package/dist/templates/modules/audit-log/files/apps/api/src/migrations/1720300000000-InitAuditLogs.ts

@@ -0,0 +1,31 @@
+import type { MigrationInterface, QueryRunner } from "typeorm";
+
+export class InitAuditLogs1720300000000 implements MigrationInterface {
+  name = "InitAuditLogs1720300000000";
+
+  async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(`CREATE EXTENSION IF NOT EXISTS "pgcrypto"`);
+    await queryRunner.query(`
+      CREATE TABLE "audit_logs" (
+        "id" uuid NOT NULL DEFAULT gen_random_uuid(),
+        "action" character varying(128) NOT NULL,
+        "actorId" character varying,
+        "actorName" character varying,
+        "actorEmail" character varying,
+        "targetType" character varying,
+        "targetId" character varying,
+        "targetLabel" character varying,
+        "ip" character varying,
+        "metadata" jsonb,
+        "createdAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(),
+        CONSTRAINT "PK_audit_logs_id" PRIMARY KEY ("id")
+      )
+    `);
+    await queryRunner.query(`CREATE INDEX "IDX_audit_logs_action" ON "audit_logs" ("action")`);
+    await queryRunner.query(`CREATE INDEX "IDX_audit_logs_createdAt" ON "audit_logs" ("createdAt")`);
+  }
+
+  async down(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(`DROP TABLE "audit_logs"`);
+  }
+}

package/dist/templates/modules/audit-log/module.manifest.json

@@ -0,0 +1,39 @@
+{
+  "name": "audit-log",
+  "description": "Audit logging: records who did each mutating request (who/method/path/status) to an audit_logs table — a NestJS interceptor for your own API routes plus a better-auth hook for auth/admin actions (login, ban, role changes, ...). Requires auth.",
+  "requires": [
+    "auth"
+  ],
+  "targetApp": "api",
+  "env": [
+    "# audit-log: surfaces the admin Audit log page in the dashboard",
+    "AUDIT_LOG_ENABLED=true"
+  ],
+  "inject": [
+    {
+      "file": "apps/api/src/app.module.ts",
+      "marker": "// podokit:imports",
+      "text": "import { AuditModule } from \"./audit/audit.module\";"
+    },
+    {
+      "file": "apps/api/src/app.module.ts",
+      "marker": "// podokit:module-imports",
+      "text": "AuditModule,"
+    },
+    {
+      "file": "apps/api/src/auth/auth.ts",
+      "marker": "// podokit:auth-imports",
+      "text": "import { auditAfterHook } from \"../audit/audit-hook\";"
+    },
+    {
+      "file": "apps/api/src/auth/auth.ts",
+      "marker": "// podokit:auth-options",
+      "text": "hooks: { after: auditAfterHook },"
+    }
+  ],
+  "instructions": [
+    "Run migrations to create the audit_logs table:  npm run migration:run -w <app>-api",
+    "Auth/admin actions (login, ban, role changes, session revocation, user CRUD) are recorded via a better-auth hook; your own mutating NestJS routes are recorded by the interceptor.",
+    "List recent entries (admin session required):  curl -b cookies.txt localhost:3000/audit-logs"
+  ]
+}

package/dist/templates/modules/auth/files/apps/api/src/account/account.controller.ts

@@ -0,0 +1,30 @@
+import { Controller, Get } from "@nestjs/common";
+import { Session, type UserSession } from "@thallesp/nestjs-better-auth";
+import { ApiTags } from "@nestjs/swagger";
+
+type Capabilities = { twoFactor: boolean; providers: string[]; deleteAccount: boolean; auditLog: boolean };
+
+// Protected by the global AuthGuard. Use @Session() to read the current user.
+@ApiTags("account")
+@Controller("account")
+export class AccountController {
+  @Get("me")
+  me(@Session() session: UserSession) {
+    return session.user;
+  }
+
+  // Which optional auth features are enabled, so the UI can show/hide sections.
+  @Get("capabilities")
+  capabilities(): Capabilities {
+    const providers = [
+      process.env.GOOGLE_CLIENT_ID && process.env.GOOGLE_CLIENT_SECRET ? "google" : null,
+      process.env.GITHUB_CLIENT_ID && process.env.GITHUB_CLIENT_SECRET ? "github" : null,
+    ].filter((p): p is string => p !== null);
+    return {
+      twoFactor: process.env.AUTH_TWO_FACTOR === "true",
+      providers,
+      deleteAccount: process.env.AUTH_ALLOW_DELETE === "true",
+      auditLog: process.env.AUDIT_LOG_ENABLED === "true",
+    };
+  }
+}

package/dist/templates/modules/auth/files/apps/api/src/account/account.module.ts

@@ -0,0 +1,5 @@
+import { Module } from "@nestjs/common";
+import { AccountController } from "./account.controller";
+
+@Module({ controllers: [AccountController] })
+export class AccountModule {}

package/dist/templates/modules/auth/files/apps/api/src/auth/auth.ts

@@ -0,0 +1,59 @@
+import { betterAuth, type BetterAuthOptions, type BetterAuthPlugin } from "better-auth";
+import { twoFactor } from "better-auth/plugins";
+import { Pool } from "pg";
+// podokit:auth-imports
+
+// OAuth providers are enabled only when their credentials are present.
+function socialProviders(): NonNullable<BetterAuthOptions["socialProviders"]> {
+  const providers: NonNullable<BetterAuthOptions["socialProviders"]> = {};
+  if (process.env.GOOGLE_CLIENT_ID && process.env.GOOGLE_CLIENT_SECRET) {
+    providers.google = {
+      clientId: process.env.GOOGLE_CLIENT_ID,
+      clientSecret: process.env.GOOGLE_CLIENT_SECRET,
+    };
+  }
+  if (process.env.GITHUB_CLIENT_ID && process.env.GITHUB_CLIENT_SECRET) {
+    providers.github = {
+      clientId: process.env.GITHUB_CLIENT_ID,
+      clientSecret: process.env.GITHUB_CLIENT_SECRET,
+    };
+  }
+  return providers;
+}
+
+// Plugins are collected here so other PodoKit modules can add their own.
+const plugins: BetterAuthPlugin[] = [];
+if (process.env.AUTH_TWO_FACTOR === "true") {
+  plugins.push(twoFactor());
+}
+// podokit:auth-plugins
+
+export const auth = betterAuth({
+  database: new Pool({
+    host: process.env.POSTGRES_HOST ?? "localhost",
+    port: Number(process.env.POSTGRES_PORT ?? 5432),
+    user: process.env.POSTGRES_USER ?? "podokit",
+    password: process.env.POSTGRES_PASSWORD ?? "podokit",
+    database: process.env.POSTGRES_DB ?? "podokit",
+  }),
+  emailAndPassword: {
+    enabled: true,
+    // podokit:auth-email-password
+  },
+  socialProviders: socialProviders(),
+  plugins,
+  secret: process.env.BETTER_AUTH_SECRET ?? "change-me-in-production-min-32-characters",
+  baseURL: process.env.BETTER_AUTH_URL ?? "http://localhost:3000",
+  advanced: {
+    ipAddress: {
+      // The API sits behind the SvelteKit server proxy, which forwards the
+      // resolved client IP as x-forwarded-for; trust it so sessions record an IP.
+      ipAddressHeaders: ["x-forwarded-for"],
+    },
+  },
+  user: {
+    // Self-service account deletion — opt in with AUTH_ALLOW_DELETE=true.
+    deleteUser: { enabled: process.env.AUTH_ALLOW_DELETE === "true" },
+  },
+  // podokit:auth-options
+});

package/dist/templates/modules/auth/files/apps/api/src/health/health.controller.ts

@@ -0,0 +1,26 @@
+import { Controller, Get } from "@nestjs/common";
+import { InjectDataSource } from "@nestjs/typeorm";
+import { DataSource } from "typeorm";
+import { Public } from "@thallesp/nestjs-better-auth";
+
+// Health checks stay public under the global auth guard.
+@Public()
+@Controller("health")
+export class HealthController {
+  constructor(@InjectDataSource() private readonly dataSource: DataSource) {}
+
+  @Get()
+  liveness(): { status: string; uptime: number; timestamp: string } {
+    return { status: "ok", uptime: process.uptime(), timestamp: new Date().toISOString() };
+  }
+
+  @Get("ready")
+  async readiness(): Promise<{ status: string; db: string }> {
+    try {
+      await this.dataSource.query("SELECT 1");
+      return { status: "ready", db: "up" };
+    } catch {
+      return { status: "degraded", db: "down" };
+    }
+  }
+}

package/dist/templates/modules/auth/module.manifest.json

@@ -0,0 +1,70 @@
+{
+  "name": "auth",
+  "description": "Full authentication (better-auth): email/password, sessions, and \u2014 via config \u2014 OAuth and 2FA. Installs a global guard so the API is secure by default; health and /api/auth stay public.",
+  "requires": [],
+  "targetApp": "api",
+  "dependencies": {
+    "better-auth": "^1.6.23",
+    "@thallesp/nestjs-better-auth": "^2.7.0",
+    "pg": "^8.12.0"
+  },
+  "devDependencies": {
+    "@types/pg": "^8.11.10"
+  },
+  "env": [
+    "# auth (better-auth) \u2014 set a strong secret (>= 32 chars) in production",
+    "BETTER_AUTH_SECRET=change-me-in-production-min-32-characters",
+    "BETTER_AUTH_URL=http://localhost:3000",
+    "# 2FA (TOTP): set true to enable the plugin",
+    "AUTH_TWO_FACTOR=false",
+    "# OAuth (optional) \u2014 set a provider's id+secret to enable it",
+    "# GOOGLE_CLIENT_ID=",
+    "# GOOGLE_CLIENT_SECRET=",
+    "# GITHUB_CLIENT_ID=",
+    "# GITHUB_CLIENT_SECRET="
+  ],
+  "inject": [
+    {
+      "file": "apps/api/src/app.module.ts",
+      "marker": "// podokit:imports",
+      "text": "import { APP_GUARD } from \"@nestjs/core\";"
+    },
+    {
+      "file": "apps/api/src/app.module.ts",
+      "marker": "// podokit:imports",
+      "text": "import { AuthModule, AuthGuard } from \"@thallesp/nestjs-better-auth\";"
+    },
+    {
+      "file": "apps/api/src/app.module.ts",
+      "marker": "// podokit:imports",
+      "text": "import { auth } from \"./auth/auth\";"
+    },
+    {
+      "file": "apps/api/src/app.module.ts",
+      "marker": "// podokit:imports",
+      "text": "import { AccountModule } from \"./account/account.module\";"
+    },
+    {
+      "file": "apps/api/src/app.module.ts",
+      "marker": "// podokit:module-imports",
+      "text": "AuthModule.forRoot(auth),"
+    },
+    {
+      "file": "apps/api/src/app.module.ts",
+      "marker": "// podokit:module-imports",
+      "text": "AccountModule,"
+    },
+    {
+      "file": "apps/api/src/app.module.ts",
+      "marker": "// podokit:providers",
+      "text": "{ provide: APP_GUARD, useClass: AuthGuard },"
+    }
+  ],
+  "instructions": [
+    "Set BETTER_AUTH_SECRET in .env (>= 32 chars).",
+    "Create the auth tables:  npx @better-auth/cli migrate -y --config apps/api/src/auth/auth.ts",
+    "Sign up:  curl -c cookies.txt -XPOST localhost:3000/api/auth/sign-up/email -H 'content-type: application/json' -d '{\"email\":\"a@example.com\",\"password\":\"password123\",\"name\":\"A\"}'",
+    "Call a protected route with the session:  curl -b cookies.txt localhost:3000/account/me",
+    "Everything is now protected by default; mark public routes with @Public(). Enable OAuth by setting a provider's env vars; enable 2FA with AUTH_TWO_FACTOR=true."
+  ]
+}

package/dist/templates/modules/bullmq/module.manifest.json

@@ -4,7 +4,7 @@
   "requires": [],
   "targetApp": "api",
   "dependencies": {
-    "@nestjs/bullmq": "^10.2.0",
+    "@nestjs/bullmq": "^11.0.4",
     "bullmq": "^5.34.0"
   },
   "scripts": {
@@ -15,8 +15,16 @@
     "# bullmq uses REDIS_HOST / REDIS_PORT (already defined above)"
   ],
   "inject": [
-    { "file": "apps/api/src/app.module.ts", "marker": "// podokit:imports", "text": "import { JobsModule } from \"./jobs/jobs.module\";" },
-    { "file": "apps/api/src/app.module.ts", "marker": "// podokit:module-imports", "text": "JobsModule," }
+    {
+      "file": "apps/api/src/app.module.ts",
+      "marker": "// podokit:imports",
+      "text": "import { JobsModule } from \"./jobs/jobs.module\";"
+    },
+    {
+      "file": "apps/api/src/app.module.ts",
+      "marker": "// podokit:module-imports",
+      "text": "JobsModule,"
+    }
   ],
   "instructions": [
     "Ensure Redis is running:  docker compose -f infra/docker/docker-compose.yml up -d",

package/dist/templates/modules/logging/files/apps/api/src/logging/logging.module.ts

@@ -0,0 +1,29 @@
+import { Module } from "@nestjs/common";
+import { randomUUID } from "node:crypto";
+import type { IncomingMessage, ServerResponse } from "node:http";
+import { LoggerModule } from "nestjs-pino";
+
+const isProduction = process.env.NODE_ENV === "production";
+
+// Structured request logging with a correlation id. Importing this module
+// installs the pino-http middleware for all routes.
+@Module({
+  imports: [
+    LoggerModule.forRoot({
+      pinoHttp: {
+        level: process.env.LOG_LEVEL ?? "info",
+        // Pretty, single-line logs in dev; JSON in production.
+        transport: isProduction ? undefined : { target: "pino-pretty", options: { singleLine: true } },
+        autoLogging: true,
+        // One id per request; honor an inbound x-request-id and echo it back.
+        genReqId: (req: IncomingMessage, res: ServerResponse): string => {
+          const header = req.headers["x-request-id"];
+          const id = (Array.isArray(header) ? header[0] : header) ?? randomUUID();
+          res.setHeader("x-request-id", id);
+          return id;
+        },
+      },
+    }),
+  ],
+})
+export class LoggingModule {}

package/dist/templates/modules/logging/module.manifest.json

@@ -0,0 +1,27 @@
+{
+  "name": "logging",
+  "description": "Structured request logging (nestjs-pino) with a per-request correlation id (x-request-id). Pretty in dev, JSON in production.",
+  "requires": [],
+  "targetApp": "api",
+  "dependencies": {
+    "nestjs-pino": "^4.3.0",
+    "pino-http": "^10.3.0"
+  },
+  "devDependencies": {
+    "pino-pretty": "^13.0.0"
+  },
+  "env": [
+    "# logging",
+    "LOG_LEVEL=info"
+  ],
+  "inject": [
+    { "file": "apps/api/src/app.module.ts", "marker": "// podokit:imports", "text": "import { LoggingModule } from \"./logging/logging.module\";" },
+    { "file": "apps/api/src/app.module.ts", "marker": "// podokit:module-imports", "text": "LoggingModule," }
+  ],
+  "instructions": [
+    "Every HTTP request is now logged as structured JSON with a correlation id.",
+    "Make a request and watch the API logs:  curl localhost:3000/health",
+    "Set LOG_LEVEL (debug|info|warn|error) in .env. Logs are pretty in dev and JSON when NODE_ENV=production.",
+    "To route Nest's own logs through pino too, add to main.ts: NestFactory.create(AppModule, { bufferLogs: true }) then app.useLogger(app.get(Logger))."
+  ]
+}

package/dist/templates/modules/rate-limit/files/apps/api/src/rate-limit/rate-limit.module.ts

@@ -0,0 +1,26 @@
+import { Module } from "@nestjs/common";
+import { APP_GUARD } from "@nestjs/core";
+import { ThrottlerGuard, ThrottlerModule } from "@nestjs/throttler";
+import { ThrottlerStorageRedisService } from "@nest-lab/throttler-storage-redis";
+import Redis from "ioredis";
+
+const ttlSeconds = Number(process.env.RATE_LIMIT_TTL ?? 60);
+const limit = Number(process.env.RATE_LIMIT_MAX ?? 100);
+
+// Distributed rate limiting: the counter lives in Redis, so the limit holds
+// across API replicas. Registers a global guard (429 when exceeded).
+@Module({
+  imports: [
+    ThrottlerModule.forRoot({
+      throttlers: [{ ttl: ttlSeconds * 1000, limit }],
+      storage: new ThrottlerStorageRedisService(
+        new Redis({
+          host: process.env.REDIS_HOST ?? "localhost",
+          port: Number(process.env.REDIS_PORT ?? 6379),
+        }),
+      ),
+    }),
+  ],
+  providers: [{ provide: APP_GUARD, useClass: ThrottlerGuard }],
+})
+export class RateLimitModule {}

package/dist/templates/modules/rate-limit/module.manifest.json

@@ -0,0 +1,25 @@
+{
+  "name": "rate-limit",
+  "description": "Rate limiting with @nestjs/throttler backed by Redis (correct across API replicas). Installs a global throttler guard; configurable via env.",
+  "requires": ["redis"],
+  "targetApp": "api",
+  "dependencies": {
+    "@nestjs/throttler": "^6.5.0",
+    "@nest-lab/throttler-storage-redis": "^1.2.0"
+  },
+  "env": [
+    "# rate limit (window in seconds, max requests per window per client)",
+    "RATE_LIMIT_TTL=60",
+    "RATE_LIMIT_MAX=100"
+  ],
+  "inject": [
+    { "file": "apps/api/src/app.module.ts", "marker": "// podokit:imports", "text": "import { RateLimitModule } from \"./rate-limit/rate-limit.module\";" },
+    { "file": "apps/api/src/app.module.ts", "marker": "// podokit:module-imports", "text": "RateLimitModule," }
+  ],
+  "instructions": [
+    "Ensure Redis is running:  docker compose -f infra/docker/docker-compose.yml up -d",
+    "Tune RATE_LIMIT_TTL / RATE_LIMIT_MAX in .env.",
+    "Exceeding the limit returns HTTP 429. Skip a route with @SkipThrottle() or tune it with @Throttle().",
+    "The limit is shared across API replicas because it is stored in Redis."
+  ]
+}

package/dist/templates/todo/apps/api/package.json

@@ -7,19 +7,19 @@
     "build": "nest build",
     "start": "node dist/main",
     "lint": "tsc -p tsconfig.json --noEmit",
-    "test": "jest",
+    "test": "jest --passWithNoTests",
     "typeorm": "typeorm-ts-node-commonjs -d src/database/data-source.ts",
     "migration:run": "npm run typeorm -- migration:run",
     "migration:revert": "npm run typeorm -- migration:revert",
     "migration:generate": "npm run typeorm -- migration:generate"
   },
   "dependencies": {
-    "@nestjs/common": "^10.4.0",
-    "@nestjs/config": "^3.2.3",
-    "@nestjs/core": "^10.4.0",
-    "@nestjs/platform-express": "^10.4.0",
-    "@nestjs/swagger": "^7.4.0",
-    "@nestjs/typeorm": "^10.0.2",
+    "@nestjs/common": "^11.1.27",
+    "@nestjs/config": "^4.0.4",
+    "@nestjs/core": "^11.1.27",
+    "@nestjs/platform-express": "^11.1.27",
+    "@nestjs/swagger": "^11.4.5",
+    "@nestjs/typeorm": "^11.0.3",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.1",
     "dotenv": "^16.4.5",
@@ -30,15 +30,33 @@
     "zod": "^3.23.8"
   },
   "devDependencies": {
-    "@nestjs/cli": "^10.4.0",
-    "@nestjs/testing": "^10.4.0",
-    "@types/express": "^4.17.21",
+    "@nestjs/cli": "^11.0.23",
+    "@nestjs/testing": "^11.1.27",
+    "@types/express": "^5.0.1",
     "@types/node": "^20.17.0",
     "@types/supertest": "^6.0.2",
     "jest": "^29.7.0",
     "supertest": "^7.0.0",
     "ts-jest": "^29.2.5",
     "ts-node": "^10.9.2",
-    "typescript": "^5.6.3"
+    "typescript": "^6.0.3"
+  },
+  "jest": {
+    "moduleFileExtensions": [
+      "js",
+      "json",
+      "ts"
+    ],
+    "rootDir": "src",
+    "testRegex": ".*\\.spec\\.ts$",
+    "transform": {
+      "^.+\\.ts$": [
+        "ts-jest",
+        {
+          "tsconfig": "tsconfig.json"
+        }
+      ]
+    },
+    "testEnvironment": "node"
   }
 }

package/dist/templates/todo/apps/api/src/app.module.ts

@@ -15,5 +15,8 @@ import { TodosModule } from "./todos/todos.module";
     TodosModule,
     // podokit:module-imports
   ],
+  providers: [
+    // podokit:providers
+  ],
 })
 export class AppModule {}

package/dist/templates/todo/apps/api/tsconfig.json

@@ -1,8 +1,8 @@
 {
   "compilerOptions": {
-    "module": "CommonJS",
+    "module": "nodenext",
     "target": "ES2022",
-    "moduleResolution": "Node",
+    "moduleResolution": "nodenext",
     "outDir": "dist",
     "rootDir": "src",
     "declaration": false,
@@ -14,8 +14,17 @@
     "noImplicitReturns": true,
     "esModuleInterop": true,
     "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true
+    "forceConsistentCasingInFileNames": true,
+    "types": [
+      "node"
+    ]
   },
-  "include": ["src/**/*.ts"],
-  "exclude": ["node_modules", "dist", "test"]
+  "include": [
+    "src/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules",
+    "dist",
+    "test"
+  ]
 }

package/dist/templates/todo/apps/web/package.json

@@ -8,16 +8,18 @@
     "build": "vite build",
     "preview": "vite preview",
     "lint": "svelte-check --tsconfig ./tsconfig.json",
-    "test": "echo \"add Playwright tests here\" && exit 0"
+    "test": "echo \"unit: add vitest; e2e: npm run test:e2e (see tests/)\" && exit 0"
   },
   "dependencies": {
-    "mode-watcher": "^0.5.0",
+    "@internationalized/date": "^3.12.2",
+    "@lucide/svelte": "^1.23.0",
+    "@podosoft/podokit-api-client": "^0.4.0",
     "bits-ui": "^2.18.1",
     "clsx": "^2.1.1",
+    "mode-watcher": "^1.1.0",
+    "svelte-sonner": "^1.1.1",
     "tailwind-merge": "^3.6.0",
-    "tailwind-variants": "^3.2.2",
-    "@lucide/svelte": "^1.23.0",
-    "@internationalized/date": "^3.12.2"
+    "tailwind-variants": "^3.2.2"
   },
   "devDependencies": {
     "@sveltejs/adapter-node": "^5.2.0",
@@ -28,7 +30,7 @@
     "svelte-check": "^4.0.0",
     "tailwindcss": "^4.0.0",
     "typesafe-i18n": "^5.26.2",
-    "typescript": "^5.6.3",
+    "typescript": "^6.0.3",
     "vite": "^5.4.0",
     "tw-animate-css": "^1.4.0"
   }

package/dist/templates/todo/apps/web/src/lib/api.ts

@@ -0,0 +1,5 @@
+import { createApiClient } from "@podosoft/podokit-api-client";
+
+// Browser client: same-origin. REST calls go to /api/* and auth to /api/auth/*,
+// both proxied to the backend by the SvelteKit server (see routes/api/**).
+export const api = createApiClient();

package/dist/templates/todo/apps/web/src/lib/components/ui/alert/alert-action.svelte

@@ -0,0 +1,20 @@
+<script lang="ts">
+	import type { HTMLAttributes } from "svelte/elements";
+	import { cn, type WithElementRef } from "$lib/utils.js";
+
+	let {
+		ref = $bindable(null),
+		class: className,
+		children,
+		...restProps
+	}: WithElementRef<HTMLAttributes<HTMLDivElement>> = $props();
+</script>
+
+<div
+	bind:this={ref}
+	data-slot="alert-action"
+	class={cn("absolute top-2 right-2", className)}
+	{...restProps}
+>
+	{@render children?.()}
+</div>

package/dist/templates/todo/apps/web/src/lib/components/ui/alert/alert-description.svelte

@@ -0,0 +1,23 @@
+<script lang="ts">
+	import type { HTMLAttributes } from "svelte/elements";
+	import { cn, type WithElementRef } from "$lib/utils.js";
+
+	let {
+		ref = $bindable(null),
+		class: className,
+		children,
+		...restProps
+	}: WithElementRef<HTMLAttributes<HTMLDivElement>> = $props();
+</script>
+
+<div
+	bind:this={ref}
+	data-slot="alert-description"
+	class={cn(
+		"text-muted-foreground text-sm text-balance md:text-pretty [&_p:not(:last-child)]:mb-4 [&_a]:hover:text-foreground [&_a]:underline [&_a]:underline-offset-3",
+		className
+	)}
+	{...restProps}
+>
+	{@render children?.()}
+</div>

package/dist/templates/todo/apps/web/src/lib/components/ui/alert/alert-title.svelte

@@ -0,0 +1,23 @@
+<script lang="ts">
+	import type { HTMLAttributes } from "svelte/elements";
+	import { cn, type WithElementRef } from "$lib/utils.js";
+
+	let {
+		ref = $bindable(null),
+		class: className,
+		children,
+		...restProps
+	}: WithElementRef<HTMLAttributes<HTMLDivElement>> = $props();
+</script>
+
+<div
+	bind:this={ref}
+	data-slot="alert-title"
+	class={cn(
+		"font-medium group-has-[>svg]/alert:col-start-2 [&_a]:hover:text-foreground [&_a]:underline [&_a]:underline-offset-3",
+		className
+	)}
+	{...restProps}
+>
+	{@render children?.()}
+</div>