@podosoft/podokit 0.3.0 → 0.4.0

package/dist/templates/modules/audit-log/files/apps/api/src/migrations/1720300000000-InitAuditLogs.ts

@@ -8,15 +8,21 @@ export class InitAuditLogs1720300000000 implements MigrationInterface {
     await queryRunner.query(`
       CREATE TABLE "audit_logs" (
         "id" uuid NOT NULL DEFAULT gen_random_uuid(),
-        "userId" character varying,
-        "method" character varying(10) NOT NULL,
-        "path" character varying(2048) NOT NULL,
-        "statusCode" integer NOT NULL,
+        "action" character varying(128) NOT NULL,
+        "actorId" character varying,
+        "actorName" character varying,
+        "actorEmail" character varying,
+        "targetType" character varying,
+        "targetId" character varying,
+        "targetLabel" character varying,
         "ip" character varying,
+        "metadata" jsonb,
         "createdAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(),
         CONSTRAINT "PK_audit_logs_id" PRIMARY KEY ("id")
       )
     `);
+    await queryRunner.query(`CREATE INDEX "IDX_audit_logs_action" ON "audit_logs" ("action")`);
+    await queryRunner.query(`CREATE INDEX "IDX_audit_logs_createdAt" ON "audit_logs" ("createdAt")`);
   }
 
   async down(queryRunner: QueryRunner): Promise<void> {

package/dist/templates/modules/audit-log/module.manifest.json

@@ -1,16 +1,39 @@
 {
   "name": "audit-log",
-  "description": "Audit logging: a global interceptor records who did each mutating request (who/method/path/status) to an audit_logs table. Requires auth.",
-  "requires": ["auth"],
+  "description": "Audit logging: records who did each mutating request (who/method/path/status) to an audit_logs table — a NestJS interceptor for your own API routes plus a better-auth hook for auth/admin actions (login, ban, role changes, ...). Requires auth.",
+  "requires": [
+    "auth"
+  ],
   "targetApp": "api",
-  "env": [],
+  "env": [
+    "# audit-log: surfaces the admin Audit log page in the dashboard",
+    "AUDIT_LOG_ENABLED=true"
+  ],
   "inject": [
-    { "file": "apps/api/src/app.module.ts", "marker": "// podokit:imports", "text": "import { AuditModule } from \"./audit/audit.module\";" },
-    { "file": "apps/api/src/app.module.ts", "marker": "// podokit:module-imports", "text": "AuditModule," }
+    {
+      "file": "apps/api/src/app.module.ts",
+      "marker": "// podokit:imports",
+      "text": "import { AuditModule } from \"./audit/audit.module\";"
+    },
+    {
+      "file": "apps/api/src/app.module.ts",
+      "marker": "// podokit:module-imports",
+      "text": "AuditModule,"
+    },
+    {
+      "file": "apps/api/src/auth/auth.ts",
+      "marker": "// podokit:auth-imports",
+      "text": "import { auditAfterHook } from \"../audit/audit-hook\";"
+    },
+    {
+      "file": "apps/api/src/auth/auth.ts",
+      "marker": "// podokit:auth-options",
+      "text": "hooks: { after: auditAfterHook },"
+    }
   ],
   "instructions": [
     "Run migrations to create the audit_logs table:  npm run migration:run -w <app>-api",
-    "Mutating requests (POST/PUT/PATCH/DELETE) are recorded with the acting user.",
-    "List recent entries (requires a session):  curl -b cookies.txt localhost:3000/audit-logs"
+    "Auth/admin actions (login, ban, role changes, session revocation, user CRUD) are recorded via a better-auth hook; your own mutating NestJS routes are recorded by the interceptor.",
+    "List recent entries (admin session required):  curl -b cookies.txt localhost:3000/audit-logs"
   ]
 }

package/dist/templates/modules/auth/files/apps/api/src/account/account.controller.ts

@@ -2,6 +2,8 @@ import { Controller, Get } from "@nestjs/common";
 import { Session, type UserSession } from "@thallesp/nestjs-better-auth";
 import { ApiTags } from "@nestjs/swagger";
 
+type Capabilities = { twoFactor: boolean; providers: string[]; deleteAccount: boolean; auditLog: boolean };
+
 // Protected by the global AuthGuard. Use @Session() to read the current user.
 @ApiTags("account")
 @Controller("account")
@@ -10,4 +12,19 @@ export class AccountController {
   me(@Session() session: UserSession) {
     return session.user;
   }
+
+  // Which optional auth features are enabled, so the UI can show/hide sections.
+  @Get("capabilities")
+  capabilities(): Capabilities {
+    const providers = [
+      process.env.GOOGLE_CLIENT_ID && process.env.GOOGLE_CLIENT_SECRET ? "google" : null,
+      process.env.GITHUB_CLIENT_ID && process.env.GITHUB_CLIENT_SECRET ? "github" : null,
+    ].filter((p): p is string => p !== null);
+    return {
+      twoFactor: process.env.AUTH_TWO_FACTOR === "true",
+      providers,
+      deleteAccount: process.env.AUTH_ALLOW_DELETE === "true",
+      auditLog: process.env.AUDIT_LOG_ENABLED === "true",
+    };
+  }
 }

package/dist/templates/modules/auth/files/apps/api/src/auth/auth.ts

@@ -1,6 +1,7 @@
-import { betterAuth, type BetterAuthOptions } from "better-auth";
+import { betterAuth, type BetterAuthOptions, type BetterAuthPlugin } from "better-auth";
 import { twoFactor } from "better-auth/plugins";
 import { Pool } from "pg";
+// podokit:auth-imports
 
 // OAuth providers are enabled only when their credentials are present.
 function socialProviders(): NonNullable<BetterAuthOptions["socialProviders"]> {
@@ -20,6 +21,13 @@ function socialProviders(): NonNullable<BetterAuthOptions["socialProviders"]> {
   return providers;
 }
 
+// Plugins are collected here so other PodoKit modules can add their own.
+const plugins: BetterAuthPlugin[] = [];
+if (process.env.AUTH_TWO_FACTOR === "true") {
+  plugins.push(twoFactor());
+}
+// podokit:auth-plugins
+
 export const auth = betterAuth({
   database: new Pool({
     host: process.env.POSTGRES_HOST ?? "localhost",
@@ -28,9 +36,24 @@ export const auth = betterAuth({
     password: process.env.POSTGRES_PASSWORD ?? "podokit",
     database: process.env.POSTGRES_DB ?? "podokit",
   }),
-  emailAndPassword: { enabled: true },
+  emailAndPassword: {
+    enabled: true,
+    // podokit:auth-email-password
+  },
   socialProviders: socialProviders(),
-  plugins: process.env.AUTH_TWO_FACTOR === "true" ? [twoFactor()] : [],
+  plugins,
   secret: process.env.BETTER_AUTH_SECRET ?? "change-me-in-production-min-32-characters",
   baseURL: process.env.BETTER_AUTH_URL ?? "http://localhost:3000",
+  advanced: {
+    ipAddress: {
+      // The API sits behind the SvelteKit server proxy, which forwards the
+      // resolved client IP as x-forwarded-for; trust it so sessions record an IP.
+      ipAddressHeaders: ["x-forwarded-for"],
+    },
+  },
+  user: {
+    // Self-service account deletion — opt in with AUTH_ALLOW_DELETE=true.
+    deleteUser: { enabled: process.env.AUTH_ALLOW_DELETE === "true" },
+  },
+  // podokit:auth-options
 });

package/dist/templates/todo/apps/api/package.json

@@ -7,7 +7,7 @@
     "build": "nest build",
     "start": "node dist/main",
     "lint": "tsc -p tsconfig.json --noEmit",
-    "test": "jest",
+    "test": "jest --passWithNoTests",
     "typeorm": "typeorm-ts-node-commonjs -d src/database/data-source.ts",
     "migration:run": "npm run typeorm -- migration:run",
     "migration:revert": "npm run typeorm -- migration:revert",
@@ -39,6 +39,24 @@
     "supertest": "^7.0.0",
     "ts-jest": "^29.2.5",
     "ts-node": "^10.9.2",
-    "typescript": "^5.6.3"
+    "typescript": "^6.0.3"
+  },
+  "jest": {
+    "moduleFileExtensions": [
+      "js",
+      "json",
+      "ts"
+    ],
+    "rootDir": "src",
+    "testRegex": ".*\\.spec\\.ts$",
+    "transform": {
+      "^.+\\.ts$": [
+        "ts-jest",
+        {
+          "tsconfig": "tsconfig.json"
+        }
+      ]
+    },
+    "testEnvironment": "node"
   }
 }

package/dist/templates/todo/apps/api/tsconfig.json

@@ -1,8 +1,8 @@
 {
   "compilerOptions": {
-    "module": "CommonJS",
+    "module": "nodenext",
     "target": "ES2022",
-    "moduleResolution": "Node",
+    "moduleResolution": "nodenext",
     "outDir": "dist",
     "rootDir": "src",
     "declaration": false,
@@ -14,8 +14,17 @@
     "noImplicitReturns": true,
     "esModuleInterop": true,
     "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true
+    "forceConsistentCasingInFileNames": true,
+    "types": [
+      "node"
+    ]
   },
-  "include": ["src/**/*.ts"],
-  "exclude": ["node_modules", "dist", "test"]
+  "include": [
+    "src/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules",
+    "dist",
+    "test"
+  ]
 }

package/dist/templates/todo/apps/web/package.json

@@ -8,11 +8,12 @@
     "build": "vite build",
     "preview": "vite preview",
     "lint": "svelte-check --tsconfig ./tsconfig.json",
-    "test": "echo \"add Playwright tests here\" && exit 0"
+    "test": "echo \"unit: add vitest; e2e: npm run test:e2e (see tests/)\" && exit 0"
   },
   "dependencies": {
     "@internationalized/date": "^3.12.2",
     "@lucide/svelte": "^1.23.0",
+    "@podosoft/podokit-api-client": "^0.4.0",
     "bits-ui": "^2.18.1",
     "clsx": "^2.1.1",
     "mode-watcher": "^1.1.0",
@@ -29,7 +30,7 @@
     "svelte-check": "^4.0.0",
     "tailwindcss": "^4.0.0",
     "typesafe-i18n": "^5.26.2",
-    "typescript": "^5.6.3",
+    "typescript": "^6.0.3",
     "vite": "^5.4.0",
     "tw-animate-css": "^1.4.0"
   }

package/dist/templates/todo/apps/web/src/lib/api.ts

@@ -0,0 +1,5 @@
+import { createApiClient } from "@podosoft/podokit-api-client";
+
+// Browser client: same-origin. REST calls go to /api/* and auth to /api/auth/*,
+// both proxied to the backend by the SvelteKit server (see routes/api/**).
+export const api = createApiClient();

package/dist/templates/todo/apps/web/src/lib/server/api.ts

@@ -0,0 +1,19 @@
+import type { RequestEvent } from "@sveltejs/kit";
+import { createApiClient, type ApiClient } from "@podosoft/podokit-api-client";
+import { backendBaseUrl } from "./backend-proxy";
+
+// Server-side client for load functions and hooks: points at the internal
+// backend URL and forwards the incoming request's cookies.
+export function serverApiClient(event: RequestEvent): ApiClient {
+  const cookie = event.request.headers.get("cookie") ?? "";
+  const fetchWithCookies: typeof fetch = (input, init) => {
+    const headers = new Headers(init?.headers);
+    if (cookie) headers.set("cookie", cookie);
+    return event.fetch(input, { ...init, headers });
+  };
+  return createApiClient({
+    baseUrl: backendBaseUrl(),
+    apiBasePath: "",
+    fetch: fetchWithCookies,
+  });
+}

package/dist/templates/todo/apps/web/src/lib/server/backend-proxy.ts

@@ -1,16 +1,55 @@
 // Server-side proxy boundary. The browser never talks to the API directly:
-// only these allowlisted headers are forwarded to BACKEND_INTERNAL_URL.
-const FORWARDED_HEADERS = ["authorization", "cookie", "content-type"];
+// requests go through SvelteKit server routes, which forward an allowlist of
+// headers to BACKEND_INTERNAL_URL and relay the response (including Set-Cookie).
+const FORWARDED_HEADERS = ["authorization", "cookie", "content-type", "accept", "origin", "referer"];
+const RELAYED_RESPONSE_HEADERS = ["content-type", "location", "cache-control"];
 
 export function backendBaseUrl(): string {
   return process.env.BACKEND_INTERNAL_URL ?? "http://localhost:3000";
 }
 
-export function backendProxyHeaders(request: Request): Headers {
+// Normalize the resolved client IP for the forwarded header. better-auth stores
+// IPv4 as-is but anonymizes IPv6 (masks the host bits), so an IPv6 loopback would
+// be recorded as "::" — map loopback to 127.0.0.1 for a clean local value, and
+// unwrap IPv4-mapped addresses.
+function normalizeClientIp(address: string | undefined): string | undefined {
+  if (!address) return undefined;
+  if (address === "::1" || address === "::") return "127.0.0.1";
+  if (address.startsWith("::ffff:")) return address.slice("::ffff:".length);
+  return address;
+}
+
+export async function proxyRequest(
+  request: Request,
+  targetUrl: string,
+  clientAddress?: string,
+): Promise<Response> {
   const headers = new Headers();
   for (const name of FORWARDED_HEADERS) {
     const value = request.headers.get(name);
     if (value) headers.set(name, value);
   }
-  return headers;
+  // Forward the resolved client IP so the API (better-auth) can record it.
+  const forwardedIp = normalizeClientIp(clientAddress);
+  if (forwardedIp) headers.set("x-forwarded-for", forwardedIp);
+
+  const hasBody = request.method !== "GET" && request.method !== "HEAD";
+  const upstream = await fetch(targetUrl, {
+    method: request.method,
+    headers,
+    body: hasBody ? await request.text() : undefined,
+    redirect: "manual",
+  });
+
+  const responseHeaders = new Headers();
+  for (const name of RELAYED_RESPONSE_HEADERS) {
+    const value = upstream.headers.get(name);
+    if (value) responseHeaders.set(name, value);
+  }
+  // Relay Set-Cookie so auth session cookies reach the browser.
+  for (const cookie of upstream.headers.getSetCookie()) {
+    responseHeaders.append("set-cookie", cookie);
+  }
+
+  return new Response(upstream.body, { status: upstream.status, headers: responseHeaders });
 }

package/dist/templates/todo/apps/web/src/routes/+page.svelte

@@ -3,6 +3,8 @@
   import { Input } from "$lib/components/ui/input";
   import { Checkbox } from "$lib/components/ui/checkbox";
   import * as Card from "$lib/components/ui/card";
+  import { api } from "$lib/api";
+  import { ApiError } from "@podosoft/podokit-api-client";
 
   type Todo = { id: string; title: string; completed: boolean };
 
@@ -10,40 +12,39 @@
   let title = $state("");
   let error = $state<string | null>(null);
 
+  function fail(err: unknown, action: string): void {
+    error = err instanceof ApiError ? `${action}: ${err.message}` : `${action} failed`;
+  }
+
   async function load(): Promise<void> {
-    const res = await fetch("/api/todos");
-    if (res.ok) todos = await res.json();
-    else error = `Failed to load (HTTP ${res.status})`;
+    try {
+      todos = await api.get<Todo[]>("/todos");
+      error = null;
+    } catch (err) {
+      fail(err, "Load");
+    }
   }
 
   async function add(event: SubmitEvent): Promise<void> {
     event.preventDefault();
     const value = title.trim();
     if (!value) return;
-    const res = await fetch("/api/todos", {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ title: value }),
-    });
-    if (res.ok) {
+    try {
+      await api.post("/todos", { title: value });
       title = "";
       await load();
-    } else {
-      error = `Failed to add (HTTP ${res.status})`;
+    } catch (err) {
+      fail(err, "Add");
     }
   }
 
   async function toggle(todo: Todo): Promise<void> {
-    await fetch(`/api/todos/${todo.id}`, {
-      method: "PATCH",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ completed: !todo.completed }),
-    });
+    await api.patch(`/todos/${todo.id}`, { completed: !todo.completed });
     await load();
   }
 
   async function remove(todo: Todo): Promise<void> {
-    await fetch(`/api/todos/${todo.id}`, { method: "DELETE" });
+    await api.del(`/todos/${todo.id}`);
     await load();
   }
 
@@ -61,7 +62,7 @@
   <Card.Root>
     <Card.Header>
       <Card.Title>Todos</Card.Title>
-      <Card.Description>A NestJS + SvelteKit CRUD example.</Card.Description>
+      <Card.Description>A NestJS + SvelteKit CRUD example via the typed ApiClient.</Card.Description>
     </Card.Header>
     <Card.Content class="flex flex-col gap-4">
       <form class="flex gap-2" onsubmit={add}>

package/dist/templates/todo/apps/web/src/routes/api/[...path]/+server.ts

@@ -0,0 +1,12 @@
+import type { RequestHandler } from "@sveltejs/kit";
+import { backendBaseUrl, proxyRequest } from "$lib/server/backend-proxy";
+
+// Proxy the app's REST API, stripping the /api prefix (backend routes are at root).
+const handler: RequestHandler = ({ request, params, url, getClientAddress }) =>
+  proxyRequest(request, `${backendBaseUrl()}/${params.path}${url.search}`, getClientAddress());
+
+export const GET = handler;
+export const POST = handler;
+export const PUT = handler;
+export const PATCH = handler;
+export const DELETE = handler;

package/dist/templates/todo/apps/web/src/routes/api/auth/[...all]/+server.ts

@@ -0,0 +1,12 @@
+import type { RequestHandler } from "@sveltejs/kit";
+import { backendBaseUrl, proxyRequest } from "$lib/server/backend-proxy";
+
+// Proxy the better-auth handler, keeping the /api/auth prefix.
+const handler: RequestHandler = ({ request, params, url, getClientAddress }) =>
+  proxyRequest(request, `${backendBaseUrl()}/api/auth/${params.all}${url.search}`, getClientAddress());
+
+export const GET = handler;
+export const POST = handler;
+export const PUT = handler;
+export const PATCH = handler;
+export const DELETE = handler;

package/dist/templates/todo/dot-gitignore

@@ -7,3 +7,8 @@ build/
 !.env.example
 .DS_Store
 *.log
+
+# e2e test artifacts
+tests/playwright/
+tests/playwright-report/
+tests/test-results/

package/dist/templates/todo/package.json

@@ -2,12 +2,20 @@
   "name": "{{projectName}}",
   "version": "0.0.0",
   "private": true,
-  "engines": { "node": ">=20" },
-  "workspaces": ["apps/*"],
+  "engines": {
+    "node": ">=20"
+  },
+  "workspaces": [
+    "apps/*",
+    "tests"
+  ],
   "scripts": {
     "dev": "npm run dev --workspaces --if-present",
     "build": "npm run build --workspaces --if-present",
     "lint": "npm run lint --workspaces --if-present",
-    "test": "npm run test --workspaces --if-present"
+    "test": "npm run test --workspaces --if-present",
+    "test:e2e": "npm run test:e2e -w tests",
+    "test:e2e:ui": "npm run test:e2e:ui -w tests",
+    "test:e2e:api": "npm run test:e2e:api -w tests"
   }
 }

package/dist/templates/todo/tests/README.md

@@ -0,0 +1,15 @@
+# tests
+
+End-to-end tests for this app, run with [`@playwright/test`](https://playwright.dev):
+
+```bash
+npm run test:e2e         # all specs (api + ui)
+npm run test:e2e:api     # backend endpoints (request-only)
+npm run test:e2e:ui      # pages (chromium)
+npm run test:e2e:report  # open the HTML report
+```
+
+The suite runs against a live stack (web on `E2E_BASE_URL`, default
+`http://localhost:5173`, proxying `/api/*` to the API). Start PostgreSQL, run the
+auth migration, and start the API + web first. Files ending in `*.api.spec.ts` run
+in the request-only `api` project; `*.ui.spec.ts` run in the chromium `ui` project.

package/dist/templates/todo/tests/api/health.api.spec.ts

@@ -0,0 +1,14 @@
+import { expect, test } from "@playwright/test";
+
+// Health endpoints are public and present in every generated app.
+test("GET /health is public and ok @smoke", async ({ request }) => {
+  const res = await request.get("/api/health");
+  expect(res.ok()).toBeTruthy();
+  expect((await res.json()).status).toBe("ok");
+});
+
+test("GET /health/ready reports the database", async ({ request }) => {
+  const res = await request.get("/api/health/ready");
+  expect(res.status()).toBe(200);
+  expect((await res.json()).status).toBe("ready");
+});

package/dist/templates/todo/tests/package.json

@@ -0,0 +1,14 @@
+{
+  "name": "{{projectName}}-tests",
+  "version": "0.0.0",
+  "private": true,
+  "scripts": {
+    "test:e2e": "playwright test",
+    "test:e2e:ui": "playwright test --project=ui",
+    "test:e2e:api": "playwright test --project=api",
+    "test:e2e:report": "playwright show-report"
+  },
+  "devDependencies": {
+    "@playwright/test": "^1.61.1"
+  }
+}

package/dist/templates/todo/tests/playwright.config.ts

@@ -0,0 +1,25 @@
+import { defineConfig, devices } from "@playwright/test";
+
+// The suite runs against a live stack: web on E2E_BASE_URL (proxying /api/* to
+// the API). Start it first (see docs/testing.md) — locally via the dev harness,
+// in CI via scripts/e2e-ci.mjs. Two projects: `api` (request-only, backend e2e)
+// and `ui` (chromium, pages). Files are routed by suffix (*.api/*.ui.spec.ts).
+const baseURL = process.env.E2E_BASE_URL ?? "http://localhost:5173";
+
+export default defineConfig({
+  testDir: ".",
+  fullyParallel: true,
+  forbidOnly: !!process.env.CI,
+  retries: process.env.CI ? 2 : 0,
+  workers: process.env.CI ? 1 : undefined,
+  reporter: [["list"], ["html", { open: "never" }]],
+  use: {
+    baseURL,
+    trace: "on-first-retry",
+    screenshot: "only-on-failure",
+  },
+  projects: [
+    { name: "api", testMatch: /.*\.api\.spec\.ts/ },
+    { name: "ui", testMatch: /.*\.ui\.spec\.ts/, use: { ...devices["Desktop Chrome"] } },
+  ],
+});

package/dist/templates/todo/tests/ui/smoke.ui.spec.ts

@@ -0,0 +1,8 @@
+import { expect, test } from "@playwright/test";
+
+// Module-agnostic: the app responds at "/" (a page or a redirect to it).
+test("app is reachable @smoke", async ({ page }) => {
+  const res = await page.goto("/");
+  expect(res?.status()).toBeLessThan(400);
+  await expect(page.locator("body")).toBeVisible();
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@podosoft/podokit",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "An opinionated but extensible starter toolkit and CLI for full-stack TypeScript apps with NestJS, SvelteKit, TailwindCSS, shadcn-svelte, Docker, and k3s.",
   "license": "Apache-2.0",
   "repository": {

package/dist/templates/fullstack-nest-svelte/apps/api/test/health.e2e-spec.ts

@@ -1,23 +0,0 @@
-import { Test } from "@nestjs/testing";
-import type { INestApplication } from "@nestjs/common";
-import request from "supertest";
-import { HealthModule } from "../src/health/health.module";
-
-describe("Health (e2e)", () => {
-  let app: INestApplication;
-
-  beforeAll(async () => {
-    const moduleRef = await Test.createTestingModule({ imports: [HealthModule] }).compile();
-    app = moduleRef.createNestApplication();
-    await app.init();
-  });
-
-  afterAll(async () => {
-    await app.close();
-  });
-
-  it("GET /health returns ok", async () => {
-    const res = await request(app.getHttpServer()).get("/health").expect(200);
-    expect(res.body.status).toBe("ok");
-  });
-});

package/dist/templates/fullstack-nest-svelte/apps/web/src/routes/api/health/+server.ts

@@ -1,12 +0,0 @@
-import type { RequestHandler } from "@sveltejs/kit";
-import { backendBaseUrl, backendProxyHeaders } from "$lib/server/backend-proxy";
-
-export const GET: RequestHandler = async ({ request }) => {
-  const upstream = await fetch(`${backendBaseUrl()}/health`, {
-    headers: backendProxyHeaders(request),
-  });
-  return new Response(await upstream.text(), {
-    status: upstream.status,
-    headers: { "content-type": "application/json" },
-  });
-};

package/dist/templates/todo/apps/api/test/health.e2e-spec.ts

@@ -1,23 +0,0 @@
-import { Test } from "@nestjs/testing";
-import type { INestApplication } from "@nestjs/common";
-import request from "supertest";
-import { HealthModule } from "../src/health/health.module";
-
-describe("Health (e2e)", () => {
-  let app: INestApplication;
-
-  beforeAll(async () => {
-    const moduleRef = await Test.createTestingModule({ imports: [HealthModule] }).compile();
-    app = moduleRef.createNestApplication();
-    await app.init();
-  });
-
-  afterAll(async () => {
-    await app.close();
-  });
-
-  it("GET /health returns ok", async () => {
-    const res = await request(app.getHttpServer()).get("/health").expect(200);
-    expect(res.body.status).toBe("ok");
-  });
-});

package/dist/templates/todo/apps/web/src/routes/api/health/+server.ts

@@ -1,12 +0,0 @@
-import type { RequestHandler } from "@sveltejs/kit";
-import { backendBaseUrl, backendProxyHeaders } from "$lib/server/backend-proxy";
-
-export const GET: RequestHandler = async ({ request }) => {
-  const upstream = await fetch(`${backendBaseUrl()}/health`, {
-    headers: backendProxyHeaders(request),
-  });
-  return new Response(await upstream.text(), {
-    status: upstream.status,
-    headers: { "content-type": "application/json" },
-  });
-};