@sidebase/base-config 0.1.0

package/presets/nuxt-app/github/workflows/pr-preview-cleanup.yml

@@ -0,0 +1,41 @@
+name: Cleanup PR Preview
+
+on:
+  pull_request:
+    types:
+      - unlabeled
+
+# Default-deny at workflow level so any future job starts read-only; the
+# cleanup job below grants itself the exact write scopes it needs.
+permissions:
+  contents: read
+
+jobs:
+  cleanup:
+    # only run if the 'preview' label was the one removed
+    if: github.event.label.name == 'preview'
+    name: Remove 'preview-deployed' label
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+      issues: write
+
+    steps:
+      - name: Remove 'preview-deployed' label
+        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
+        with:
+          script: |
+            const { owner, repo } = context.repo;
+            const issue_number = context.issue.number;
+
+              // check first if the label exists on the PR
+              const { data: labels } = await github.rest.issues.listLabelsOnIssue({
+                owner,
+                repo,
+                issue_number
+              });
+
+              const hasPreviewDeployedLabel = labels.some(label => label.name === 'preview-deployed');
+              if (hasPreviewDeployedLabel) {
+                await github.rest.issues.removeLabel({ owner, repo, issue_number, name: 'preview-deployed'});
+              }

package/presets/nuxt-app/preset.json

@@ -0,0 +1,67 @@
+{
+  "name": "nuxt-app",
+  "extends": ["base"],
+  "files": [
+    { "path": "tsconfig.json", "strategy": "full", "source": "nuxt-app/tsconfig.json", "adoption": "expected" },
+    { "path": "eslint.config.ts", "strategy": "scaffold", "source": "nuxt-app/eslint.config.ts", "shadowedBy": ["eslint.config.mjs", "eslint.config.js", "eslint.config.cjs"] },
+    { "path": "prisma.config.ts", "strategy": "scaffold", "source": "nuxt-app/prisma.config.ts" },
+    { "path": "Dockerfile", "strategy": "full", "source": "nuxt-app/Dockerfile", "render": "dockerfile", "adoption": "expected" },
+    { "path": ".github/workflows/pr-preview-cleanup.yml", "strategy": "full", "source": "nuxt-app/github/workflows/pr-preview-cleanup.yml", "adoption": "expected" },
+    { "path": ".github/workflows/ci.yml", "strategy": "full", "source": "nuxt-app/github/workflows/ci.yml", "render": "ci" }
+  ],
+  "renders": {
+    "ci": {
+      "placeholders": {
+        "NODE_VERSION": { "configPath": "versions.node", "default": "24.13.0", "pattern": "^[\\w.+-]+$" }
+      },
+      "fragments": [
+        { "toggle": "ci.unitTests", "source": "nuxt-app/templates/ci/test-job.yml" },
+        { "toggle": "ci.e2e", "source": "nuxt-app/templates/ci/e2e-job.yml" }
+      ]
+    },
+    "dockerfile": {
+      "placeholders": {
+        "APT_PACKAGES": { "configPath": "docker.aptPackages", "default": "", "pattern": "^$|^[a-z0-9][a-z0-9 +.-]*$", "join": "space" },
+        "NODE_VERSION": { "configPath": "versions.node", "default": "24.13.0", "pattern": "^[\\w.+-]+$" },
+        "PNPM_VERSION": { "configPath": "versions.pnpm", "default": "10.28.1", "pattern": "^[\\w.+-]+$" },
+        "DOCKER_PRE_INSTALL": { "configPath": "docker.preInstall", "default": "" },
+        "DOCKER_BUILD_ARGS": { "configPath": "docker.buildArgs", "default": "" },
+        "DOCKER_BUILD_STEPS": { "configPath": "docker.buildSteps", "default": "RUN pnpm nuxi prepare\nRUN pnpm prisma generate\nRUN pnpm run build" },
+        "DOCKER_FINAL_STAGE": { "configPath": "docker.finalStage", "default": "" },
+        "DOCKER_PRISMA_RUNTIME": { "configPath": "docker.prismaRuntime", "default": "COPY --chown=node:node --from=production-base /app/prisma /app/prisma\n\n# Prisma CLI version for `migrate deploy`. Defaults to the baseline; override with --build-arg.\nARG PRISMA_VERSION=6.19.1\n\n# install prisma to run the `migrate deploy`. Runs as root because /app is\n# root-owned from WORKDIR; hand the install output to the runtime user in the\n# same layer so no later chown duplicates node_modules.\nRUN npm i -D prisma@${PRISMA_VERSION} && chown -R node:node /app/node_modules" },
+        "DOCKER_START_COMMAND": { "configPath": "docker.startCommand", "default": "npm exec prisma migrate deploy && node --max-old-space-size-percentage=75 .output/server/index.mjs" }
+      },
+      "passthrough": ["PRISMA_VERSION"]
+    }
+  },
+  "configKeys": {
+    "ci.unitTests": "boolean",
+    "ci.e2e": "boolean",
+    "docker.aptPackages": "string[]",
+    "docker.preInstall": "string",
+    "docker.buildArgs": "string",
+    "docker.buildSteps": "string",
+    "docker.finalStage": "string",
+    "docker.prismaRuntime": "string",
+    "docker.startCommand": "string",
+    "eslint": "object"
+  },
+  "versionProfiles": {
+    "nuxt-4": {
+      "engines.node": ">=24.13.0",
+      "engines.pnpm": ">=10.28.1",
+      "packageManager": "pnpm@10.28.1",
+      "devDependencies.nuxt": "^4.3.0",
+      "devDependencies.typescript": "^6.0.2",
+      "devDependencies.eslint": "^10.5.0",
+      "devDependencies.oxlint": "^1.43.0",
+      "devDependencies.prisma": "^6.19.1",
+      "devDependencies.@prisma/client": "^6.19.1",
+      "devDependencies.jiti": "^2.2.0",
+      "devDependencies.json-sort-cli": "^4.1.3",
+      "devDependencies.vitest": "^3.0.0",
+      "scripts.postinstall": "nuxt prepare",
+      "scripts.lint": "oxlint -c .oxlintrc.json --deny-warnings && eslint --max-warnings 0 ."
+    }
+  }
+}

package/presets/nuxt-app/prisma.config.ts

@@ -0,0 +1,6 @@
+import { buildPrismaConfig } from '@sidebase/base-config/prisma'
+import { defineConfig } from 'prisma/config'
+
+// Project-owned wrapper: pass repo flags (views/typedSql) to buildPrismaConfig.
+// Shared logic updates via the @sidebase/base-config version bump.
+export default defineConfig(buildPrismaConfig())

package/presets/nuxt-app/templates/ci/e2e-job.yml

@@ -0,0 +1,39 @@
+  e2e:
+    runs-on: ubuntu-latest
+    # DATABASE_URL matches the postgres service credentials declared below. The
+    # service sets user/password/db explicitly rather than relying on the implicit
+    # postgres/postgres defaults, so the connection string is unambiguous.
+    env:
+      DATABASE_URL: postgres://postgres:postgres@localhost:5432/postgres
+    services:
+      postgres:
+        image: postgres:16
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: postgres
+          POSTGRES_DB: postgres
+        ports:
+          - 5432:5432
+        # Gate the steps on the database accepting connections; without a health
+        # check the job can start before postgres is ready and fail to connect.
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      # tests may import the generated Prisma client
+      - run: pnpm prisma generate
+      # Schema setup (db push / migrate) and seeding are left to the consumer's
+      # test:e2e script on purpose: they are coupled to fixture seeding, which only
+      # the app's own harness owns, and CI cannot guess the reset/migrate/seed
+      # strategy. This job provides a healthy, reachable DB (DATABASE_URL above) and
+      # the generated client; test:e2e must create and seed its own schema.
+      - run: pnpm test:e2e

package/presets/nuxt-app/templates/ci/test-job.yml

@@ -0,0 +1,13 @@
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      # tests may import the generated Prisma client
+      - run: pnpm prisma generate
+      - run: pnpm test

package/presets/nuxt-app/tsconfig.json

@@ -0,0 +1,6 @@
+{
+  "extends": [
+    "@sidebase/base-config/tsconfig.base",
+    "./.nuxt/tsconfig.json"
+  ]
+}

package/tsconfig.base.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "display": "@sidebase/base-config strict base",
+  "_comment": "Shared strict baseline consumed via `extends: \"@sidebase/base-config/tsconfig.base\"`. Sets only strictness + universal-safe options (no `paths`/`types`/`include`) so it layers cleanly under Nuxt's generated `./.nuxt/tsconfig.json` (last in the extends array wins) without fighting its module resolution.",
+  "compilerOptions": {
+    "target": "ESNext",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "esModuleInterop": true,
+    "isolatedModules": true,
+    "resolveJsonModule": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "noImplicitOverride": true,
+    "noFallthroughCasesInSwitch": true
+  }
+}