@shaferllc/keel 0.82.0 → 0.83.1

package/templates/saas/tests/auth.test.ts

@@ -0,0 +1,47 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+
+import { HttpKernel, testClient } from "@shaferllc/keel/core";
+
+import { createApplication } from "../bootstrap/app.js";
+
+/**
+ * These hit the real routes through the real kernel. A starter that ships no tests
+ * teaches that tests are optional — and auth is the last place you want that.
+ */
+test("a visitor can register and land in their personal team", async () => {
+  const app = await createApplication();
+  const client = testClient(app.make(HttpKernel));
+
+  (await client.get("/login")).assertOk();
+
+  const registered = await client.form("/register", {
+    name: "Ada",
+    email: `ada+${crypto.randomUUID()}@example.com`,
+    password: "correct horse battery",
+  });
+
+  // A redirect means the session was set and the personal team exists.
+  assert.equal(registered.status, 302);
+});
+
+test("the dashboard turns guests away", async () => {
+  const app = await createApplication();
+  const client = testClient(app.make(HttpKernel));
+
+  const response = await client.get("/dashboard");
+
+  assert.equal(response.status, 302, "a guest is redirected, not shown the page");
+});
+
+test("a wrong password says nothing about whether the account exists", async () => {
+  const app = await createApplication();
+  const client = testClient(app.make(HttpKernel));
+
+  const response = await client.form("/login", {
+    email: "nobody@example.com",
+    password: "wrong",
+  });
+
+  assert.equal(response.status, 401);
+});

package/templates/saas/tests/teams.test.ts

@@ -0,0 +1,27 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+
+import { HttpKernel, testClient } from "@shaferllc/keel/core";
+
+import { createApplication } from "../bootstrap/app.js";
+
+test("registering creates a personal team and lands on it", async () => {
+  const app = await createApplication();
+  const client = testClient(app.make(HttpKernel));
+
+  const registered = await client.form("/register", {
+    name: "Ada",
+    email: `ada+${crypto.randomUUID()}@example.com`,
+    password: "correct horse battery",
+  });
+
+  // Redirected to /teams — the personal team exists, so tenant queries can run.
+  assert.equal(registered.status, 302);
+});
+
+test("teams turn guests away", async () => {
+  const app = await createApplication();
+  const client = testClient(app.make(HttpKernel));
+
+  assert.equal((await client.get("/teams")).status, 302);
+});

package/templates/saas/tsconfig.json

@@ -0,0 +1,31 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "lib": [
+      "ES2022"
+    ],
+    "types": [
+      "node"
+    ],
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "resolveJsonModule": true,
+    "noEmit": true,
+    "jsx": "react-jsx",
+    "jsxImportSource": "hono/jsx"
+  },
+  "include": [
+    "app",
+    "bootstrap",
+    "config",
+    "routes",
+    "database",
+    "resources",
+    "bin",
+    "tests"
+  ]
+}

package/templates/saas/worker.ts

@@ -0,0 +1,33 @@
+/**
+ * The Cloudflare Workers entry. `wrangler dev` / `wrangler deploy` use this.
+ *
+ * D1's binding only exists inside a request, so the connection is wired here, before
+ * the app boots — and the app is built once, then reused.
+ *
+ * Note the provider list: `edgeProviders`, not the Node one. See providers.edge.ts.
+ */
+
+import { setConnection, HttpKernel } from "@shaferllc/keel/core";
+import { d1Connection, type D1Like } from "@shaferllc/keel/db/d1";
+
+import { createApplication } from "./bootstrap/app.js";
+import { edgeProviders } from "./bootstrap/providers.edge.js";
+
+interface Env {
+  DB: D1Like;
+}
+
+let handler: { fetch: (request: Request, env: unknown) => Response | Promise<Response> } | undefined;
+
+export default {
+  async fetch(request: Request, env: Env): Promise<Response> {
+    if (!handler) {
+      setConnection(d1Connection(env.DB), "sqlite");
+
+      const app = await createApplication(edgeProviders);
+      handler = app.make(HttpKernel).build();
+    }
+
+    return handler.fetch(request, env);
+  },
+};

package/templates/saas/wrangler.jsonc

@@ -0,0 +1,25 @@
+{
+  "$schema": "node_modules/wrangler/config-schema.json",
+  "name": "__APP_NAME__",
+  "main": "worker.ts",
+  "compatibility_date": "2025-01-01",
+  // AsyncLocalStorage — Keel carries the request, the open transaction, and the
+  // current team in it. Without this flag they have nowhere to live.
+  "compatibility_flags": ["nodejs_compat"],
+
+  // The compiled stylesheet. Cloudflare serves these; the Worker never sees them.
+  "assets": { "directory": "./public" },
+
+  "d1_databases": [
+    {
+      "binding": "DB",
+      "database_name": "__APP_NAME__",
+      // Create one: wrangler d1 create __APP_NAME__ — then paste the id here.
+      "database_id": ""
+    }
+  ],
+
+  "vars": {
+    "DB_CONNECTION": "d1"
+  }
+}