@usequark/quark-create-app 1.25.15 → 1.26.0

package/templates/base-project/packages/db/src/schemas.js

@@ -6,14 +6,24 @@ export const userCreateSchema = z.object({
 	image: z.string().url().optional(),
 });
 
+/**
+ * Password rules, shared by every route that sets one.
+ *
+ * Registration and password reset must not drift: a reset that accepts a weaker
+ * password than signup would let a user downgrade their own credential, and the
+ * reverse would lock a legitimate password out of recovery. Composed into
+ * `userRegisterSchema` rather than duplicated, so there is one definition.
+ */
+export const passwordSchema = z
+	.string()
+	.min(8, "Password must be at least 8 characters")
+	.regex(/[A-Z]/, "Password must contain at least one uppercase letter")
+	.regex(/[a-z]/, "Password must contain at least one lowercase letter")
+	.regex(/[0-9]/, "Password must contain at least one number");
+
 export const userRegisterSchema = z.object({
 	email: z.string().email("Invalid email address"),
-	password: z
-		.string()
-		.min(8, "Password must be at least 8 characters")
-		.regex(/[A-Z]/, "Password must contain at least one uppercase letter")
-		.regex(/[a-z]/, "Password must contain at least one lowercase letter")
-		.regex(/[0-9]/, "Password must contain at least one number"),
+	password: passwordSchema,
 	name: z.string().min(2, "Name must be at least 2 characters").optional(),
 });
 

package/templates/jobs/src/definitions.js

@@ -6,6 +6,7 @@ export const JOB_QUEUES = {
 
 export const JOB_NAMES = {
 	SEND_WELCOME_EMAIL: "send-welcome-email",
+	SEND_VERIFY_EMAIL: "send-verify-email",
 	SEND_RESET_PASSWORD_EMAIL: "send-reset-password-email",
 	CLEANUP_ORPHANED_FILES: "cleanup-orphaned-files",
 };

package/templates/worker/src/handlers/email-job-validation.js

@@ -23,6 +23,19 @@ export function requireResetPasswordEmailData(data) {
 	return { userId, resetUrl };
 }
 
+export function requireVerifyEmailData(data) {
+	const userId = data?.userId;
+	const verifyUrl = data?.verifyUrl;
+
+	if (!userId || !verifyUrl) {
+		throw new ValidationError(
+			"userId and verifyUrl are required for SEND_VERIFY_EMAIL job",
+		);
+	}
+
+	return { userId, verifyUrl };
+}
+
 export function requireUserEmailRecord(userId, userRecord) {
 	if (!userRecord?.email) {
 		throw new AppError(

package/templates/worker/src/handlers/email.js

@@ -5,6 +5,7 @@
 
 import { createEmailService } from "@usequark/quark-core/email";
 import {
+	emailVerificationEmail,
 	passwordResetEmail,
 	welcomeEmail,
 } from "@usequark/quark-core/email-templates";
@@ -13,6 +14,7 @@ import { JOB_NAMES } from "@usequark/quark-jobs";
 import {
 	requireResetPasswordEmailData,
 	requireUserEmailRecord,
+	requireVerifyEmailData,
 	requireWelcomeEmailUserId,
 } from "./email-job-validation.js";
 
@@ -94,5 +96,42 @@ export async function handleSendResetPasswordEmail(bullJob, logger) {
 	return { success: true, userId, email: userRecord.email };
 }
 
+/**
+ * Job handler for SEND_VERIFY_EMAIL
+ * @param {import("bullmq").Job} bullJob
+ * @param {import("@usequark/quark-core").Logger} logger
+ */
+export async function handleSendVerificationEmail(bullJob, logger) {
+	const { userId, verifyUrl } = requireVerifyEmailData(bullJob.data);
+
+	logger.info(`Sending email verification for user ${userId}`, {
+		job: JOB_NAMES.SEND_VERIFY_EMAIL,
+		userId,
+	});
+
+	const userRecord = requireUserEmailRecord(
+		userId,
+		await prisma.user.findUnique({
+			where: { id: userId },
+			select: { email: true, name: true },
+		}),
+	);
+
+	const template = emailVerificationEmail({
+		name: userRecord.name,
+		appName: process.env.APP_NAME,
+		verifyUrl,
+	});
+
+	await emailService.sendEmail(
+		userRecord.email,
+		template.subject,
+		template.html,
+		template.text,
+	);
+
+	return { success: true, userId, email: userRecord.email };
+}
+
 // Governance alerts are sent inline by the governance-check handler.
 // No standalone handler needed in Quark.

package/templates/worker/src/handlers/index.js

@@ -7,12 +7,14 @@
 import { JOB_NAMES } from "@usequark/quark-jobs";
 import {
 	handleSendResetPasswordEmail,
+	handleSendVerificationEmail,
 	handleSendWelcomeEmail,
 } from "./email.js";
 import { handleCleanupOrphanedFiles } from "./files.js";
 
 export const jobHandlers = {
 	[JOB_NAMES.SEND_WELCOME_EMAIL]: handleSendWelcomeEmail,
+	[JOB_NAMES.SEND_VERIFY_EMAIL]: handleSendVerificationEmail,
 	[JOB_NAMES.SEND_RESET_PASSWORD_EMAIL]: handleSendResetPasswordEmail,
 	[JOB_NAMES.CLEANUP_ORPHANED_FILES]: handleCleanupOrphanedFiles,
 };