@starci/hfs 4.0.10 → 4.2.0

package/templates/app/ci-workflows-lite/github/workflows/ci.yml

@@ -20,12 +20,12 @@ jobs:
     env:
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: {{nodeMajor}}
           cache: npm
-      - run: npm ci
+      - run: npm ci --ignore-scripts
       - name: lint
         if: env.SONAR_TOKEN == ''
         run: npm run lint
@@ -47,12 +47,12 @@ jobs:
   db-types:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: {{nodeMajor}}
           cache: npm
-      - run: npm ci
+      - run: npm ci --ignore-scripts
       - name: start Supabase
         run: npm run db:start
       - name: apply migrations

package/templates/app/ci-workflows-lite/github/workflows/db-deploy.yml

@@ -21,11 +21,11 @@ jobs:
       SUPABASE_DB_PASSWORD: ${{ secrets.SUPABASE_DB_PASSWORD }}
       SUPABASE_PROJECT_ID: ${{ secrets.SUPABASE_PROJECT_ID }}
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: {{nodeMajor}}
           cache: npm
-      - run: npm ci
+      - run: npm ci --ignore-scripts
       - name: push migrations
         run: npm run db:push

package/templates/app/ci-workflows-lite/github/workflows/images.yml

@@ -25,9 +25,9 @@ jobs:
         include:
 {{imageMatrix}}
     steps:
-      - uses: actions/checkout@v4
-      - uses: docker/setup-buildx-action@v3
-      - uses: docker/build-push-action@v6
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+      - uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
         with:
           context: .
           file: ${{ matrix.file }}

package/templates/app/starciwork.gitignore

@@ -1,4 +1,4 @@
-# StarCi .starciwork: product content only (ARCHITECTURE-DB §5.1, work-layout.yaml shape.productPaths).
+# StarCi .starciwork: product content only (work-layout.yaml shape.productPaths).
 # Agent output (reports, checks, captures, draw rounds, UAT runs, logs, ledgers, worktrees) lives in
 # runtime.sqlite rows and blobs outside the repository.
 /*

package/templates/be/image/api/Dockerfile

@@ -19,7 +19,7 @@ RUN npm ci --ignore-scripts
 
 COPY be/tsconfig.json be/tsconfig.build.json be/
 COPY be/src be/src
-COPY be/apps/{{app}} be/apps/{{app}}
+{{copyBeInputs}}COPY be/apps/{{app}} be/apps/{{app}}
 RUN npm run build:be
 
 FROM {{nodeImage}} AS runtime

package/templates/be/image/cli/Dockerfile

@@ -20,7 +20,7 @@ RUN npm ci --ignore-scripts
 
 COPY be/tsconfig.json be/tsconfig.build.json be/
 COPY be/src be/src
-COPY be/apps/{{app}} be/apps/{{app}}
+{{copyBeInputs}}COPY be/apps/{{app}} be/apps/{{app}}
 RUN npm run build:be
 
 FROM {{nodeImage}} AS runtime

package/templates/be/image/worker/Dockerfile

@@ -19,7 +19,7 @@ RUN npm ci --ignore-scripts
 
 COPY be/tsconfig.json be/tsconfig.build.json be/
 COPY be/src be/src
-COPY be/apps/{{app}} be/apps/{{app}}
+{{copyBeInputs}}COPY be/apps/{{app}} be/apps/{{app}}
 RUN npm run build:be
 
 FROM {{nodeImage}} AS runtime

package/templates/be/patterns/cli/group.cli.spec.ts.tpl

@@ -8,7 +8,7 @@ describe("@@Group@@Cli", () => {
         const help = jest.fn()
         Object.defineProperty(group, "command", { value: { help } })
 
-        await expect(group.run()).resolves.toBeUndefined()
+        await expect(Promise.resolve(group.run())).resolves.toBeUndefined()
 
         expect(help).toHaveBeenCalledTimes(1)
     })

package/templates/be/patterns/cli/group.cli.ts.tpl

@@ -5,7 +5,7 @@ import { RunCli } from "./subs/run.cli"
 /** `cli @@group@@`: the @@group@@ group; its commands are the sub-commands (`cli @@group@@ run`). */
 export class @@Group@@Cli extends CommandRunner {
     /** Without a sub-command the group shows its help. */
-    async run(): Promise<void> {
-        this.command.help()
+    run(): Promise<void> {
+        return this.command.help()
     }
 }

package/templates/be/patterns/event-bus/platform/event-runner.service.spec.ts.tpl

@@ -197,6 +197,19 @@ describe("EventRunnerService", () => {
             ])
         })
 
+        it("buries once and runs no later consumer of the event when an envelope cannot be read", async () => {
+            const { runner, handle, transport } = await build()
+            const later = jest.fn<Promise<void>, Array<never>>()
+            runner.add({ event: PingEvent, handle: later })
+            const value = JSON.stringify({ eventId: "o-2", eventName: "probe.ping", payload: {} })
+
+            await runner.receive(message({ key: "o-2", value }))
+
+            expect(handle).not.toHaveBeenCalled()
+            expect(later).not.toHaveBeenCalled()
+            expect(transport.send).toHaveBeenCalledTimes(1)
+        })
+
         it("puts a failed delivery on the retry topic with the next attempt and a doubled backoff", async () => {
             const { runner, handle, transport, logger } = await build()
             const failure = new Error("the database is down")

package/templates/be/patterns/event-bus/platform/event-runner.service.ts.tpl

@@ -4,6 +4,7 @@ import { InjectClock } from "@modules/platform/clock"
 import type { Clock } from "@modules/platform/clock"
 import { InjectLogger } from "@modules/platform/logging"
 import type { Logger } from "@modules/platform/logging"
+import { eachInOrder } from "@modules/platform/primitives"
 import type { BaseEvent } from "./event-bus.contracts"
 import { InjectEventBusOptions, InjectEventTransport } from "./event-bus.decorators"
 import { EventBusLogEvent } from "./event-bus.log-events"
@@ -74,9 +75,12 @@ export class EventRunnerService implements EventConsumerRegistry, OnApplicationB
         const pause = notBefore - this.clock.now().getTime()
         if (pause > 0) await this.transport.wait(pause)
         const failures: Array<unknown> = []
-        for (const consumer of consumers) {
+        let buried = false
+        await eachInOrder(consumers, async (consumer) => {
+            if (buried) return
             const event = consumer.event.parse(envelope)
             if (event === null) {
+                buried = true
                 await this.bury(message, eventName, attempt, "the envelope does not have the shape of the event")
                 return
             }
@@ -86,7 +90,8 @@ export class EventRunnerService implements EventConsumerRegistry, OnApplicationB
                 this.logger.error(EventBusLogEvent.DeliveryFailed, cause, { event: eventName, attempt })
                 failures.push(cause)
             }
-        }
+        })
+        if (buried) return
         const [first] = failures
         if (failures.length > 0) {
             await this.failed(message, eventName, attempt, first instanceof Error ? first.message : String(first))

package/templates/be/patterns/event-bus/platform/event.policy.ts.tpl

@@ -23,7 +23,10 @@ export const REQUEUED_HEADER = "requeued"
 export const DEAD_LETTER_ID_SEPARATOR = "|"
 
 /** The service an event belongs to: the part of its name before the first dot. */
-export const serviceOf = (eventName: string): string => eventName.replace(/\..*$/s, "")
+export const serviceOf = (eventName: string): string => {
+    const dot = eventName.indexOf(".")
+    return dot === -1 ? eventName : eventName.slice(0, dot)
+}
 
 /** The topic the events of a service travel on. */
 export const topicOf = (prefix: string, eventName: string): string => `${prefix}events.${serviceOf(eventName)}`

package/templates/be/patterns/event-bus/platform/kafka-event-transport.client.ts.tpl

@@ -2,6 +2,7 @@ import { Injectable } from "@nestjs/common"
 import type { OnApplicationShutdown } from "@nestjs/common"
 import { InjectIds } from "@modules/platform/ids"
 import type { Ids } from "@modules/platform/ids"
+import { eachInOrder } from "@modules/platform/primitives"
 import type { Probe } from "@modules/platform/probes"
 import { EventBusError, EventBusErrorCode } from "./errors/event-bus.error"
 import { InjectEventBusOptions, InjectKafkaFactory } from "./event-bus.decorators"
@@ -181,7 +182,7 @@ export class KafkaEventTransportClient implements EventTransport, Probe, OnAppli
 
     /** Disconnects the producer, the consumer and the admin client. */
     async onApplicationShutdown(): Promise<void> {
-        for (const client of [this.producer, this.consumer, this.admin]) await this.close(client)
+        await eachInOrder([this.producer, this.consumer, this.admin], (client) => this.close(client))
     }
 
     /** The end offsets of the topic; a topic that does not exist yet answers no partitions and the cause. */

package/templates/be/patterns/outbox/platform/outbox-relay.policy.ts.tpl

@@ -1,6 +1,7 @@
 import type { OnApplicationBootstrap, OnApplicationShutdown } from "@nestjs/common"
 import type { EntityManager } from "typeorm"
 import type { Logger } from "@modules/platform/logging"
+import { eachInOrder } from "@modules/platform/primitives"
 import { OutboxLogEvent } from "./outbox.log-events"
 
 /**
@@ -28,7 +29,9 @@ export abstract class OutboxRelayPolicy<Row extends { readonly id: string }>
     /** One pass over every connection: relays the oldest waiting rows of each and answers how many it relayed. */
     async relay(): Promise<number> {
         let relayed = 0
-        for (const manager of this.managers) relayed += await this.relayOf(manager)
+        await eachInOrder(this.managers, async (manager) => {
+            relayed += await this.relayOf(manager)
+        })
         return relayed
     }
 
@@ -66,13 +69,25 @@ export abstract class OutboxRelayPolicy<Row extends { readonly id: string }>
         })
     }
 
-    private async run(): Promise<void> {
-        while (this.running) {
-            const relayed = await this.relay().catch((cause: unknown) => {
-                this.logger.error(OutboxLogEvent.RelayFailed, cause, { outbox: this.outbox })
-                return 0
-            })
-            if (relayed === 0 && this.running) await this.idle()
-        }
+    /** One pass, then the next, until the app stops: each pass starts from the settled promise of the last, so the loop holds no growing chain. */
+    private run(): Promise<void> {
+        return new Promise<void>((resolve, reject) => {
+            const next = (): void => {
+                if (!this.running) {
+                    resolve()
+                    return
+                }
+                void this.pass().then(next, reject)
+            }
+            next()
+        })
+    }
+
+    private async pass(): Promise<void> {
+        const relayed = await this.relay().catch((cause: unknown) => {
+            this.logger.error(OutboxLogEvent.RelayFailed, cause, { outbox: this.outbox })
+            return 0
+        })
+        if (relayed === 0 && this.running) await this.idle()
     }
 }

package/templates/be/patterns/queues/platform/queue-relay.service.ts.tpl

@@ -4,6 +4,7 @@ import { InjectClock } from "@modules/platform/clock"
 import type { Clock } from "@modules/platform/clock"
 import { InjectLogger } from "@modules/platform/logging"
 import type { Logger } from "@modules/platform/logging"
+import { eachInOrder } from "@modules/platform/primitives"
 import { OutboxRelayPolicy } from "@modules/platform/outbox"
 import { InjectQueueOptions, InjectQueueRelayManagers, InjectQueueTransport } from "./queue.decorators"
 import type { QueueOptions } from "./queue.options"
@@ -34,8 +35,8 @@ export class QueueRelayService extends OutboxRelayPolicy<QueueRow> {
         return tx.query(SELECT_WAITING_ROWS, [this.options.relayBatch])
     }
 
-    protected async deliver(rows: ReadonlyArray<QueueRow>): Promise<void> {
-        for (const row of rows) await this.transport.add(row.queue, row.id, row.payload)
+    protected deliver(rows: ReadonlyArray<QueueRow>): Promise<void> {
+        return eachInOrder(rows, (row) => this.transport.add(row.queue, row.id, row.payload))
     }
 
     protected async mark(tx: EntityManager, rows: ReadonlyArray<QueueRow>): Promise<void> {

package/templates/be/patterns/queues/platform/queue-worker.service.ts.tpl

@@ -2,6 +2,7 @@ import { Injectable } from "@nestjs/common"
 import type { OnApplicationBootstrap, OnApplicationShutdown } from "@nestjs/common"
 import { InjectLogger } from "@modules/platform/logging"
 import type { Logger } from "@modules/platform/logging"
+import { eachInOrder } from "@modules/platform/primitives"
 import type { QueueHandler } from "./queue.contracts"
 import { InjectQueueOptions, InjectQueueTransport } from "./queue.decorators"
 import { QueueLogEvent } from "./queue.log-events"
@@ -30,12 +31,14 @@ export class QueueWorkerService implements QueueWorkerRegistry, OnApplicationBoo
 
     /** Starts one worker per registered queue, then registers the schedulers of the options. */
     async onApplicationBootstrap(): Promise<void> {
-        for (const handler of this.handlers.values()) await this.transport.work(handler, this.options.concurrency)
-        for (const scheduler of this.options.schedulers) {
-            await this.transport.upsertScheduler(scheduler).catch((cause: unknown) => {
+        await eachInOrder([...this.handlers.values()], (handler) =>
+            this.transport.work(handler, this.options.concurrency),
+        )
+        await eachInOrder(this.options.schedulers, (scheduler) =>
+            this.transport.upsertScheduler(scheduler).catch((cause: unknown) => {
                 this.logger.error(QueueLogEvent.SchedulerFailed, cause, { scheduler: scheduler.id })
-            })
-        }
+            }),
+        )
     }
 
     /** Closes the workers and the queues. */

package/templates/be/skeleton/src/features/cli/migrate/migrate.cli.spec.ts

@@ -10,7 +10,7 @@ describe("MigrateCli", () => {
         const help = jest.fn()
         Object.defineProperty(group, "command", { value: { help } })
 
-        await expect(group.run()).resolves.toBeUndefined()
+        await expect(Promise.resolve(group.run())).resolves.toBeUndefined()
 
         expect(help).toHaveBeenCalledTimes(1)
     })

package/templates/be/skeleton/src/features/cli/migrate/migrate.cli.ts

@@ -9,7 +9,7 @@ import { RunCli } from "./subs/run.cli"
 /** `cli migrate`: the migration group; its commands are the sub-commands (`cli migrate run`). */
 export class MigrateCli extends CommandRunner {
     /** Without a sub-command the group shows its help. */
-    async run(): Promise<void> {
-        this.command.help()
+    run(): Promise<void> {
+        return this.command.help()
     }
 }

package/templates/be/skeleton/src/features/cli/seed/seed.cli.spec.ts

@@ -10,7 +10,7 @@ describe("SeedCli", () => {
         const help = jest.fn()
         Object.defineProperty(group, "command", { value: { help } })
 
-        await expect(group.run()).resolves.toBeUndefined()
+        await expect(Promise.resolve(group.run())).resolves.toBeUndefined()
 
         expect(help).toHaveBeenCalledTimes(1)
     })

package/templates/be/skeleton/src/features/cli/seed/seed.cli.ts

@@ -9,7 +9,7 @@ import { RunSeedsCli } from "./subs/run.cli"
 /** `cli seed`: the seed group; its commands are the sub-commands (`cli seed run`). */
 export class SeedCli extends CommandRunner {
     /** Without a sub-command the group shows its help. */
-    async run(): Promise<void> {
-        this.command.help()
+    run(): Promise<void> {
+        return this.command.help()
     }
 }

package/templates/be/skeleton/src/modules/platform/database/migrate-connections.client.ts

@@ -1,3 +1,4 @@
+import { eachInOrder } from "@modules/platform/primitives"
 import type { DatabaseConnectionOptions } from "./database.options"
 import type { ConnectionOpener } from "./database.port"
 
@@ -16,7 +17,7 @@ export async function migrateConnections(
     opener: ConnectionOpener,
 ): Promise<AppliedMigrations> {
     const applied: Record<string, ReadonlyArray<string>> = {}
-    for (const connection of connections) {
+    await eachInOrder(connections, async (connection) => {
         const source = opener.open(connection)
         await source.initialize()
         try {
@@ -25,6 +26,6 @@ export async function migrateConnections(
         } finally {
             await source.destroy()
         }
-    }
+    })
     return applied
 }

package/templates/be/skeleton/src/modules/platform/database/seed-connections.client.ts

@@ -1,5 +1,6 @@
 import { readFile, readdir } from "node:fs/promises"
 import { join } from "node:path"
+import { eachInOrder } from "@modules/platform/primitives"
 import { seedText } from "./database.sql"
 import type { SqlText } from "./database.sql"
 import type { DatabaseConnectionOptions } from "./database.options"
@@ -56,18 +57,18 @@ export async function seedConnections(
     opener: ConnectionOpener,
 ): Promise<SeedReport> {
     const applied: Record<string, ReadonlyArray<string>> = {}
-    for (const connection of connections) {
+    await eachInOrder(connections, async (connection) => {
         const own = files.filter((file) => seeds(file, connection))
-        if (own.length === 0) continue
+        if (own.length === 0) return
         const source = opener.open(connection)
         await source.initialize()
         try {
-            for (const file of own) await source.query(file.text)
+            await eachInOrder(own, (file) => source.query(file.text))
         } finally {
             await source.destroy()
         }
         applied[connection.name] = own.map((file) => file.name)
-    }
+    })
     const unmatched = files
         .filter((file) => !connections.some((connection) => seeds(file, connection)))
         .map((file) => file.name)

package/templates/be/skeleton/src/modules/platform/primitives/index.ts

@@ -1,2 +1,3 @@
 export type { Outcome } from "./outcome.contracts"
 export { ok, refused, unwrapOutcome } from "./outcome.mapper"
+export { eachInOrder } from "./sequence.policy"

package/templates/be/skeleton/src/modules/platform/primitives/sequence.policy.spec.ts

@@ -0,0 +1,47 @@
+import { DomainError } from "@modules/platform/errors"
+import { eachInOrder } from "./sequence.policy"
+
+type SequenceErrorCode = "STEP_FAILED"
+
+class SequenceError extends DomainError<SequenceErrorCode> {}
+
+const pause = (): Promise<void> => new Promise((resolve) => setImmediate(resolve))
+
+describe("eachInOrder", () => {
+    it("starts an item only after the one before it settled, in item order", async () => {
+        const events: Array<string> = []
+
+        await eachInOrder(new Set(["a", "b", "c"]), async (item, index) => {
+            events.push(`start ${item} ${index}`)
+            await pause()
+            events.push(`end ${item}`)
+        })
+
+        expect(events).toEqual(["start a 0", "end a", "start b 1", "end b", "start c 2", "end c"])
+    })
+
+    it("answers nothing for an empty list", async () => {
+        await expect(eachInOrder([], () => Promise.resolve())).resolves.toBeUndefined()
+    })
+
+    it("rejects with the first failure and never starts the items after it", async () => {
+        const started: Array<number> = []
+
+        const run = eachInOrder([1, 2, 3], async (item) => {
+            started.push(item)
+            await pause()
+            if (item === 2) throw new SequenceError({ code: "STEP_FAILED" })
+        })
+
+        await expect(run).rejects.toThrow(expect.objectContaining({ code: "STEP_FAILED" }))
+        expect(started).toEqual([1, 2])
+    })
+
+    it("rejects when a step throws before it returns a promise", async () => {
+        const run = eachInOrder([1], (): Promise<void> => {
+            throw new SequenceError({ code: "STEP_FAILED" })
+        })
+
+        await expect(run).rejects.toThrow(expect.objectContaining({ code: "STEP_FAILED" }))
+    })
+})

package/templates/be/skeleton/src/modules/platform/primitives/sequence.policy.ts

@@ -0,0 +1,16 @@
+/** One step of a sequence: it receives the item and its index and answers a promise that settles when the step is done. */
+type SequenceStep<Item> = (item: Item, index: number) => Promise<unknown>
+
+/**
+ * Runs `step` over `items` one at a time: a step starts only after the one before it settled, so the order the caller relies on
+ * (ordered writes, one connection at a time, stop at the first failure) is the order in the code. The first rejection (or throw)
+ * rejects the answer and the items after it never start.
+ */
+export const eachInOrder = <Item>(items: Iterable<Item>, step: SequenceStep<Item>): Promise<void> =>
+    [...items].reduce<Promise<void>>(
+        (done, item, index) =>
+            done.then(async () => {
+                await step(item, index)
+            }),
+        Promise.resolve(),
+    )

package/templates/be/skeleton-lite/apps/api/Dockerfile

@@ -18,6 +18,7 @@ RUN npm ci --ignore-scripts
 
 COPY be/tsconfig.json be/tsconfig.build.json be/
 COPY be/src be/src
+COPY supabase/types supabase/types
 COPY be/apps/api be/apps/api
 RUN npm run build:be
 

package/templates/be/skeleton-lite/src/modules/platform/primitives/index.ts

@@ -0,0 +1,2 @@
+export type { Outcome } from "./outcome.contracts"
+export { ok, refused, unwrapOutcome } from "./outcome.mapper"

package/templates/fe/image/next/Dockerfile

@@ -23,8 +23,9 @@ COPY turbo.json ./
 COPY scripts scripts
 COPY fe/tsconfig.json fe/tsconfig.json
 {{copyInputs}}COPY fe/apps/{{app}} fe/apps/{{app}}
+RUN mkdir -p fe/apps/{{app}}/public
 RUN npm run codegen --silent
-RUN npx turbo run build --filter=@{{project}}/{{app}}
+RUN node_modules/.bin/turbo run build --filter=@{{project}}/{{app}}
 
 FROM {{nodeImage}} AS runtime
 WORKDIR /app

package/templates/fe/skeleton/apps/app/src/app/[locale]/page.tsx

@@ -1,7 +1,7 @@
-import { AppHomePage, appHomeMetadata } from "@/features/pages/AppHomePage"
+import { AppHomePage } from "@/features/pages/AppHomePage"
 
 /** The document title of this page, from the catalog of the requested locale. */
-export const generateMetadata = appHomeMetadata
+export { appHomeMetadata as generateMetadata } from "@/features/pages/AppHomePage"
 
 /** The locale root's page slot: it mounts the product app's home page and nothing else. */
 const Page = () => <AppHomePage />

package/templates/fe/skeleton/apps/landing/src/app/[locale]/page.tsx

@@ -1,7 +1,7 @@
-import { LandingPage, landingMetadata } from "@/features/pages/LandingPage"
+import { LandingPage } from "@/features/pages/LandingPage"
 
 /** The document title of this page, from the catalog of the requested locale. */
-export const generateMetadata = landingMetadata
+export { landingMetadata as generateMetadata } from "@/features/pages/LandingPage"
 
 /** The locale root's page slot: it mounts the landing page and nothing else. */
 const Page = () => <LandingPage />

package/templates/fe/skeleton/packages/__project__-i18n/src/index.ts

@@ -1,7 +1,7 @@
 import "server-only"
 import { hasLocale } from "next-intl"
 import { createNavigation } from "next-intl/navigation"
-import { getMessages, getRequestConfig, setRequestLocale } from "next-intl/server"
+import { getMessages, getRequestConfig } from "next-intl/server"
 import { notFound } from "next/navigation"
 import { locale as routeLocale } from "next/root-params"
 import { PRODUCT_TIME_ZONE, routing } from "./routing"
@@ -43,7 +43,6 @@ export const createAppI18n = (app: string, loadMessages: LoadMessages) => ({
     readLocaleSegment: async (params: Promise<{ readonly locale: string }>) => {
         const { locale } = await params
         if (!hasLocale(routing.locales, locale)) notFound()
-        setRequestLocale(locale)
         return { locale, messages: await getMessages(), timeZone: PRODUCT_TIME_ZONE }
     },
 })

package/templates/fe/skeleton-lite/apps/web/src/app/[locale]/layout.tsx

@@ -1,5 +1,5 @@
 import { hasLocale } from "next-intl"
-import { getMessages, setRequestLocale } from "next-intl/server"
+import { getMessages } from "next-intl/server"
 import { notFound } from "next/navigation"
 import type { ReactNode } from "react"
 import { AppLayout, appLayoutMetadata } from "@/features/layouts/AppLayout"
@@ -20,7 +20,6 @@ export const generateMetadata = async (props: LayoutProps) => appLayoutMetadata(
 const Layout = async (props: LayoutProps) => {
     const { locale } = await props.params
     if (!hasLocale(routing.locales, locale)) notFound()
-    setRequestLocale(locale)
     const messages = await getMessages()
     return (
         <AppLayout

package/templates/fe/skeleton-lite/apps/web/src/app/[locale]/page.tsx

@@ -1,7 +1,7 @@
-import { AppHomePage, appHomeMetadata } from "@/features/pages/AppHomePage"
+import { AppHomePage } from "@/features/pages/AppHomePage"
 
 /** The document title of this page. */
-export const generateMetadata = appHomeMetadata
+export { appHomeMetadata as generateMetadata } from "@/features/pages/AppHomePage"
 
 /** The locale root's page slot. */
 const Page = () => <AppHomePage />

package/templates/fe/skeleton-lite/apps/web/src/components/blocks/SignInForm/index.tsx

@@ -8,6 +8,12 @@ import { SignInFormBase } from "./component"
 
 type SignInFailure = "refused" | "not-found" | "invalid" | "unavailable"
 
+/** The state the form shows: working while a request runs, failed after a refusal, else ready. */
+const stateOf = (pending: boolean, failure: SignInFailure | undefined): "working" | "ready" | "failed" => {
+    if (pending) return "working"
+    return failure === undefined ? "ready" : "failed"
+}
+
 /** The interactive sign-in form wired to the schema-checked Server Action. */
 export const SignInForm = () => {
     const router = navigation.useRouter()
@@ -27,7 +33,7 @@ export const SignInForm = () => {
     }
     return (
         <SignInFormBase
-            state={pending ? "working" : failure === undefined ? "ready" : "failed"}
+            state={stateOf(pending, failure)}
             props={{
                 title: t("title"),
                 emailLabel: t("email"),

package/templates/fe/skeleton-lite/apps/web/src/modules/db/auth/write-sign-out.ts

@@ -9,9 +9,9 @@ import type { DbOutcome } from "../outcome"
 /** Ends the cookie-backed Supabase session, including an already-anonymous one. */
 export const writeSignOut = async (): Promise<DbOutcome<true>> => {
     const principal = await getPrincipal()
-    void principal
     const client = await createServerDbClient()
     const result = await client.auth.signOut()
     if (result.error === null) return dbOk(true)
+    if (principal.kind !== "ok" && result.error.status === 401) return dbOk(true)
     return dbFailure(result.error.status === 401 ? "refused" : "unavailable", result.error.code ?? "sign-out")
 }

package/templates/fe/skeleton-lite/apps/web/src/modules/db/validation/validation.mapper.ts

@@ -12,7 +12,15 @@ interface SignInInput {
 type SignInParse = { readonly success: true; readonly data: SignInInput } | { readonly success: false }
 
 const UUID = /^[0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{12}$/u
-const EMAIL = /^[^\s@]+@[^\s@]+\.[^\s@]+$/u
+const ADDRESS = /^[^\s@]+@([^\s@]+)$/u
+
+/** Whether the text is one local part, one `@` and a domain with a dot that has a character on each side; linear in the length. */
+const isEmail = (value: string): boolean => {
+    const domain = ADDRESS.exec(value)?.[1]
+    if (domain === undefined) return false
+    const dot = domain.indexOf(".", 1)
+    return dot !== -1 && dot < domain.length - 1
+}
 
 /** The bounded UUID schema shared by generated table Server Actions. */
 export const rowSchema = {
@@ -38,7 +46,7 @@ export const signInInputSchema = {
         if (
             typeof email !== "string" ||
             email.length > 254 ||
-            !EMAIL.test(email) ||
+            !isEmail(email) ||
             typeof password !== "string" ||
             password.length < 8 ||
             password.length > 256