better-ts-stack 1.1.4 → 2.0.1

package/templates/modules/auth/nestjs/src/auth/users.service.ts.hbs

@@ -0,0 +1,144 @@
+{{#if (eq database 'drizzle')}}
+import { Inject, Injectable } from "@nestjs/common";
+import { eq } from "drizzle-orm";
+
+import { type Database, DRIZZLE } from "../database/database.module.js";
+import { users } from "../database/schema.js";
+{{/if}}
+{{#if (eq database 'prisma')}}
+import { Injectable } from "@nestjs/common";
+
+import { PrismaService } from "../prisma/prisma.service.js";
+{{/if}}
+{{#if (eq database 'mongoose')}}
+import { Injectable } from "@nestjs/common";
+import { InjectModel } from "@nestjs/mongoose";
+import type { Model } from "mongoose";
+
+import { User } from "../users/user.schema.js";
+{{/if}}
+{{#if (eq database 'none')}}
+import { Injectable } from "@nestjs/common";
+import { randomUUID } from "node:crypto";
+{{/if}}
+
+export interface AuthUser {
+  id: string;
+  email: string;
+  name?: string | null;
+  password: string;
+}
+
+export interface CreateUserInput {
+  email: string;
+  name?: string | null;
+  password: string;
+}
+
+@Injectable()
+export class UsersService {
+  {{#if (eq database 'drizzle')}}
+  constructor(@Inject(DRIZZLE) private readonly db: Database) {}
+
+  async findByEmail(email: string): Promise<AuthUser | null> {
+    const [user] = await this.db
+      .select()
+      .from(users)
+      .where(eq(users.email, email))
+      .limit(1);
+    return user ?? null;
+  }
+
+  async create(data: CreateUserInput): Promise<AuthUser> {
+    const [user] = await this.db.insert(users).values(data).returning();
+    return user;
+  }
+  {{/if}}
+  {{#if (eq database 'prisma')}}
+  constructor(private readonly prisma: PrismaService) {}
+
+  findByEmail(email: string): Promise<AuthUser | null> {
+    return this.prisma.user.findUnique({ where: { email } });
+  }
+
+  create(data: CreateUserInput): Promise<AuthUser> {
+    return this.prisma.user.create({ data });
+  }
+  {{/if}}
+  {{#if (eq database 'mongoose')}}
+  constructor(
+    @InjectModel(User.name) private readonly userModel: Model<User>
+  ) {}
+
+  async findByEmail(email: string): Promise<AuthUser | null> {
+    const user = await this.userModel.findOne({ email }).exec();
+    if (!user) return null;
+    return {
+      id: user._id.toString(),
+      email: user.email,
+      name: user.name,
+      password: user.password,
+    };
+  }
+
+  async create(data: CreateUserInput): Promise<AuthUser> {
+    const user = await this.userModel.create(data);
+    return {
+      id: user._id.toString(),
+      email: user.email,
+      name: user.name,
+      password: user.password,
+    };
+  }
+  {{/if}}
+  {{#if (eq database 'none')}}
+  // In-memory store for trying the API out: users are lost on restart, so add
+  // a database before going to production
+  private readonly users: AuthUser[] = [];
+
+  findByEmail(email: string): Promise<AuthUser | null> {
+    const user = this.users.find((candidate) => candidate.email === email);
+    return Promise.resolve(user ?? null);
+  }
+
+  create(data: CreateUserInput): Promise<AuthUser> {
+    // Enforce unique emails like a database constraint would, so a sign-up that
+    // raced past the findByEmail check is rejected instead of duplicated
+    if (this.users.some((candidate) => candidate.email === data.email)) {
+      return Promise.reject(
+        Object.assign(new Error("User already exists"), {
+          code: "DUPLICATE_EMAIL",
+        })
+      );
+    }
+
+    const user: AuthUser = { id: randomUUID(), ...data };
+    this.users.push(user);
+    return Promise.resolve(user);
+  }
+  {{/if}}
+}
+
+// Unique-constraint error codes: Prisma, PostgreSQL (Drizzle wraps it in `cause`),
+// MongoDB, and the in-memory store
+const DUPLICATE_KEY_CODES = new Set<unknown>([
+  "P2002",
+  "23505",
+  11000,
+  "DUPLICATE_EMAIL",
+]);
+
+// True when an insert failed because the email is already taken (e.g. concurrent sign-ups)
+export function isDuplicateEmailError(error: unknown): boolean {
+  let current = error;
+  for (
+    let depth = 0;
+    depth < 5 && current && typeof current === "object";
+    depth++
+  ) {
+    if (DUPLICATE_KEY_CODES.has((current as { code?: unknown }).code))
+      return true;
+    current = (current as { cause?: unknown }).cause;
+  }
+  return false;
+}

package/templates/modules/auth/nestjs/src/auth/zod-validation.pipe.ts

@@ -0,0 +1,16 @@
+import { BadRequestException, type PipeTransform } from "@nestjs/common";
+import type { ZodType } from "zod";
+
+// Validates a request body against a Zod schema and returns the parsed value
+export class ZodValidationPipe<T> implements PipeTransform<unknown, T> {
+  constructor(private readonly schema: ZodType<T>) {}
+
+  transform(value: unknown): T {
+    // The body is undefined when the request has none
+    const result = this.schema.safeParse(value ?? {});
+    if (!result.success) {
+      throw new BadRequestException(result.error.issues[0].message);
+    }
+    return result.data;
+  }
+}

package/templates/modules/auth/nextjs/config.json

@@ -1,31 +1,18 @@
-{
-  "id": "auth",
-  "name": "Better Auth",
-  "description": "Better Auth for Next.js with optional Prisma or Drizzle adapter",
-  "type": "feature",
-  "dependencies": {
-    "@hookform/resolvers": "^5.9.1",
-    "better-auth": "^1.7.3",
-    "mongodb": "^7.6.0",
-    "react-hook-form": "^7.87.0",
-    "zod": "^4.5.4"
-  },
-  "devDependencies": {},
-  "scripts": {},
-  "envVars": {
-    "BETTER_AUTH_SECRET": "please-change-me-to-a-random-string",
-    "BETTER_AUTH_URL": "http://localhost:3000"
-  },
-  "templateFiles": [
-    "lib/auth.ts.hbs",
-    "lib/auth-client.ts",
-    "app/api/auth/[...all]/route.ts",
-    "app/dashboard/page.tsx",
-    "app/sign-in/page.tsx",
-    "app/sign-up/page.tsx",
-    "components/auth/sign-in-form.tsx",
-    "components/auth/sign-up-form.tsx",
-    "components/auth/sign-out-button.tsx",
-    "lib/auth-schema.ts"
-  ]
-}
+{
+  "id": "auth",
+  "name": "Better Auth",
+  "description": "Better Auth for Next.js with optional Prisma or Drizzle adapter",
+  "type": "feature",
+  "dependencies": {
+    "@hookform/resolvers": "^5.9.1",
+    "better-auth": "^1.7.3",
+    "react-hook-form": "^7.87.0",
+    "zod": "^4.6.5"
+  },
+  "devDependencies": {},
+  "scripts": {},
+  "envVars": {
+    "BETTER_AUTH_SECRET": "please-change-me-to-a-random-string",
+    "BETTER_AUTH_URL": "http://localhost:3000"
+  }
+}

package/templates/modules/auth/tanstack/config.json

@@ -7,27 +7,13 @@
     "@hookform/resolvers": "^5.9.1",
     "better-auth": "^1.7.3",
     "dotenv": "^17.4.2",
-    "mongodb": "^7.6.0",
     "react-hook-form": "^7.87.0",
-    "zod": "^4.5.4"
+    "zod": "^4.6.5"
   },
   "devDependencies": {},
   "scripts": {},
   "envVars": {
     "BETTER_AUTH_SECRET": "please-change-me-to-a-random-string",
     "BETTER_AUTH_URL": "http://localhost:3000"
-  },
-  "templateFiles": [
-    "src/lib/auth.ts.hbs",
-    "src/lib/auth-client.ts",
-    "src/lib/auth-functions.ts",
-    "src/routes/api/auth/$.ts",
-    "src/routes/dashboard.tsx",
-    "src/routes/sign-in.tsx",
-    "src/routes/sign-up.tsx",
-    "src/components/auth/sign-in-form.tsx",
-    "src/components/auth/sign-up-form.tsx",
-    "src/components/auth/sign-out-button.tsx",
-    "src/lib/auth-schema.ts"
-  ]
+  }
 }

package/templates/modules/docker/Dockerfile.hbs

@@ -1,134 +1,136 @@
-{{#if (eq framework 'nextjs')}}
-# Base stage
-FROM node:24-alpine AS base
-WORKDIR /app
-RUN apk add --no-cache libc6-compat
-
-# Dependencies stage
-FROM base AS deps
-COPY package*.json ./
-RUN if [ -f package-lock.json ]; then npm ci; else npm install; fi
-
-# Build stage
-FROM base AS builder
-COPY --from=deps /app/node_modules ./node_modules
-COPY . .
-{{#if useAuth}}
-# next build loads the auth route, which initializes Better Auth. The build gets
-# a placeholder secret for this command only; the real one is supplied at runtime.
-{{/if}}
-{{#if (eq database 'prisma')}}
-RUN {{#if useAuth}}BETTER_AUTH_SECRET="build-only-placeholder-secret-not-used-at-runtime" {{/if}}DATABASE_URL="postgresql://postgres:postgres@localhost:5432/postgres" npm run build
-{{else if (eq database 'mongoose')}}
-RUN {{#if useAuth}}BETTER_AUTH_SECRET="build-only-placeholder-secret-not-used-at-runtime" {{/if}}MONGODB_URI="mongodb://localhost:27017/build" npm run build
-{{else}}
-RUN {{#if useAuth}}BETTER_AUTH_SECRET="build-only-placeholder-secret-not-used-at-runtime" {{/if}}npm run build
-{{/if}}
-
-# Production stage
-FROM node:24-alpine AS runner
-WORKDIR /app
-ENV NODE_ENV=production
-
-RUN addgroup --system --gid 1001 nodejs && \
-    adduser --system --uid 1001 nextjs
-
-COPY --from=builder /app/public ./public
-COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
-COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
-
-USER nextjs
-EXPOSE {{port}}
-ENV PORT={{port}} HOSTNAME=0.0.0.0
-
-CMD ["node", "server.js"]
-
-{{else if (eq framework 'tanstack')}}
-# Build stage
-FROM node:24-alpine AS builder
-WORKDIR /app
-
-COPY package*.json ./
-RUN if [ -f package-lock.json ]; then npm ci; else npm install; fi
-
-COPY . .
-
-# Only build if package.json has a build script
-{{#if (eq database 'prisma')}}
-RUN DATABASE_URL="postgresql://postgres:postgres@localhost:5432/postgres" npm run build
-{{else if (eq database 'mongoose')}}
-RUN MONGODB_URI="mongodb://localhost:27017/build" npm run build
-{{else}}
-RUN npm run build
-{{/if}}
-
-# Production stage
-FROM node:24-alpine
-WORKDIR /app
-ENV NODE_ENV=production
-
-# Create non-root user for security
-RUN addgroup --system --gid 1001 nodejs && \
-    adduser --system --uid 1001 tanstackuser
-
-COPY package*.json ./
-# Clear the npm cache in the same layer so it does not ship in the image
-RUN if [ -f package-lock.json ]; then npm ci --omit=dev; else npm install --omit=dev; fi \
-    && npm cache clean --force
-
-# Copy built output (dist/server/server.js + dist/client)
-COPY --from=builder --chown=tanstackuser:nodejs /app/dist ./dist
-
-# Include the Prisma client generated during the build stage
-{{#if (eq database 'prisma')}}
-COPY --from=builder --chown=tanstackuser:nodejs /app/generated ./generated
-{{/if}}
-
-USER tanstackuser
-EXPOSE {{port}}
-ENV PORT={{port}}
-
-CMD ["node_modules/.bin/srvx", "--prod", "-s", "../client", "dist/server/server.js"]
-
-{{else}}
-# Build stage
-FROM node:24-alpine AS builder
-WORKDIR /app
-
-COPY package*.json ./
-RUN if [ -f package-lock.json ]; then npm ci; else npm install; fi
-
-COPY . .
-
-# Only build if package.json has a build script
-{{#if (eq database 'prisma')}}
-RUN DATABASE_URL="postgresql://postgres:postgres@localhost:5432/postgres" npm run build
-{{else if (eq database 'mongoose')}}
-RUN MONGODB_URI="mongodb://localhost:27017/build" npm run build
-{{else}}
-RUN npm run build
-{{/if}}
-
-# Production stage
-FROM node:24-alpine
-WORKDIR /app
-ENV NODE_ENV=production
-
-# Create non-root user for security
-RUN addgroup --system --gid 1001 nodejs && \
-    adduser --system --uid 1001 expressuser
-
-COPY package*.json ./
-# Clear the npm cache in the same layer so it does not ship in the image
-RUN if [ -f package-lock.json ]; then npm ci --omit=dev; else npm install --omit=dev; fi \
-    && npm cache clean --force
-
-# Copy built files (if TypeScript) or source files (if JavaScript)
-COPY --from=builder --chown=expressuser:nodejs /app/dist ./dist
-
-USER expressuser
-EXPOSE {{port}}
-ENV PORT={{port}}
-
-CMD ["node", "dist/index.js"]
+{{#if (eq framework 'nextjs')}}
+# Base stage
+FROM node:24-alpine AS base
+WORKDIR /app
+RUN apk add --no-cache libc6-compat
+
+# Dependencies stage
+FROM base AS deps
+COPY package*.json ./
+RUN if [ -f package-lock.json ]; then npm ci; else npm install; fi
+
+# Build stage
+FROM base AS builder
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+{{#if useAuth}}
+# next build loads the auth route, which initializes Better Auth. The build gets
+# a placeholder secret for this command only; the real one is supplied at runtime.
+{{/if}}
+{{#if (eq database 'prisma')}}
+RUN {{#if useAuth}}BETTER_AUTH_SECRET="build-only-placeholder-secret-not-used-at-runtime" {{/if}}DATABASE_URL="postgresql://postgres:postgres@localhost:5432/postgres" npm run build
+{{else if (eq database 'mongoose')}}
+RUN {{#if useAuth}}BETTER_AUTH_SECRET="build-only-placeholder-secret-not-used-at-runtime" {{/if}}MONGODB_URI="mongodb://localhost:27017/build" npm run build
+{{else}}
+RUN {{#if useAuth}}BETTER_AUTH_SECRET="build-only-placeholder-secret-not-used-at-runtime" {{/if}}npm run build
+{{/if}}
+
+# Production stage
+FROM node:24-alpine AS runner
+WORKDIR /app
+ENV NODE_ENV=production
+
+RUN addgroup --system --gid 1001 nodejs && \
+    adduser --system --uid 1001 nextjs
+
+COPY --from=builder /app/public ./public
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+
+USER nextjs
+EXPOSE {{port}}
+ENV PORT={{port}} HOSTNAME=0.0.0.0
+
+CMD ["node", "server.js"]
+
+{{else if (eq framework 'tanstack')}}
+# Build stage
+FROM node:24-alpine AS builder
+WORKDIR /app
+
+COPY package*.json ./
+RUN if [ -f package-lock.json ]; then npm ci; else npm install; fi
+
+COPY . .
+
+{{#if (eq database 'prisma')}}
+RUN DATABASE_URL="postgresql://postgres:postgres@localhost:5432/postgres" npm run build
+{{else if (eq database 'mongoose')}}
+RUN MONGODB_URI="mongodb://localhost:27017/build" npm run build
+{{else}}
+RUN npm run build
+{{/if}}
+
+# Production stage
+FROM node:24-alpine
+WORKDIR /app
+ENV NODE_ENV=production
+
+# Create non-root user for security
+RUN addgroup --system --gid 1001 nodejs && \
+    adduser --system --uid 1001 tanstackuser
+
+COPY package*.json ./
+# Clear the npm cache in the same layer so it does not ship in the image
+RUN if [ -f package-lock.json ]; then npm ci --omit=dev; else npm install --omit=dev; fi \
+    && npm cache clean --force
+
+# Copy built output (dist/server/server.js + dist/client)
+COPY --from=builder --chown=tanstackuser:nodejs /app/dist ./dist
+
+# Include the Prisma client generated during the build stage
+{{#if (eq database 'prisma')}}
+COPY --from=builder --chown=tanstackuser:nodejs /app/generated ./generated
+{{/if}}
+
+USER tanstackuser
+EXPOSE {{port}}
+ENV PORT={{port}}
+
+CMD ["node_modules/.bin/srvx", "--prod", "-s", "../client", "dist/server/server.js"]
+
+{{else}}
+# Build stage
+FROM node:24-alpine AS builder
+WORKDIR /app
+
+COPY package*.json ./
+RUN if [ -f package-lock.json ]; then npm ci; else npm install; fi
+
+COPY . .
+
+{{#if (eq database 'prisma')}}
+RUN DATABASE_URL="postgresql://postgres:postgres@localhost:5432/postgres" npm run build
+{{else if (eq database 'mongoose')}}
+RUN MONGODB_URI="mongodb://localhost:27017/build" npm run build
+{{else}}
+RUN npm run build
+{{/if}}
+
+# Production stage
+FROM node:24-alpine
+WORKDIR /app
+ENV NODE_ENV=production
+
+# Create non-root user for security
+RUN addgroup --system --gid 1001 nodejs && \
+    adduser --system --uid 1001 appuser
+
+COPY package*.json ./
+# Clear the npm cache in the same layer so it does not ship in the image
+RUN if [ -f package-lock.json ]; then npm ci --omit=dev; else npm install --omit=dev; fi \
+    && npm cache clean --force
+
+# Copy the compiled output
+COPY --from=builder --chown=appuser:nodejs /app/dist ./dist
+
+USER appuser
+EXPOSE {{port}}
+ENV PORT={{port}}
+
+{{#if (eq framework 'nestjs')}}
+CMD ["node", "dist/main.js"]
+{{else}}
+CMD ["node", "dist/index.js"]
+{{/if}}
 {{/if}}

package/templates/modules/docker/config.json

@@ -1,19 +1,15 @@
-{
-  "id": "docker",
-  "name": "Docker",
-  "description": "Docker containerization with multi-stage build and docker-compose",
-  "type": "feature",
-  "dependencies": {},
-  "devDependencies": {},
-  "scripts": {
-    "docker:build": "docker build -t {{projectName}} .",
-    "docker:up": "docker compose up -d --build",
-    "docker:down": "docker compose down",
-    "docker:logs": "docker compose logs -f"
-  },
-  "envVars": {},
-  "templateFiles": [
-    "docker-compose.yml.hbs",
-    "Dockerfile.hbs"
-  ]
-}
+{
+  "id": "docker",
+  "name": "Docker",
+  "description": "Docker containerization with multi-stage build and docker-compose",
+  "type": "feature",
+  "dependencies": {},
+  "devDependencies": {},
+  "scripts": {
+    "docker:build": "docker build -t {{projectName}} .",
+    "docker:up": "docker compose up -d --build",
+    "docker:down": "docker compose down",
+    "docker:logs": "docker compose logs -f"
+  },
+  "envVars": {}
+}

package/templates/modules/drizzle/express/config.json

@@ -1,27 +1,26 @@
-{
-  "id": "drizzle",
-  "name": "Drizzle ORM",
-  "description": "Drizzle ORM for Express with PostgreSQL",
-  "type": "database",
-  "dependencies": {
-    "drizzle-orm": "^0.45.2",
-    "pg": "^8.23.0",
-    "dotenv": "^17.4.2"
-  },
-  "devDependencies": {
-    "drizzle-kit": "^0.31.10",
-    "@types/pg": "^8.23.1"
-  },
-  "scripts": {
-    "db:generate": "drizzle-kit generate",
-    "db:migrate": "drizzle-kit migrate",
-    "db:studio": "drizzle-kit studio"
-  },
-  "envVars": {
-    "DATABASE_URL": "postgresql://user:password@localhost:5432/mydb?schema=public"
-  },
-  "templateFiles": [],
-  "overrides": {
-    "esbuild": "^0.28.2"
-  }
-}
+{
+  "id": "drizzle",
+  "name": "Drizzle ORM",
+  "description": "Drizzle ORM for Express with PostgreSQL",
+  "type": "database",
+  "dependencies": {
+    "drizzle-orm": "^0.45.2",
+    "pg": "^8.23.0",
+    "dotenv": "^17.4.2"
+  },
+  "devDependencies": {
+    "drizzle-kit": "^0.31.10",
+    "@types/pg": "^8.23.1"
+  },
+  "scripts": {
+    "db:generate": "drizzle-kit generate",
+    "db:migrate": "drizzle-kit migrate",
+    "db:studio": "drizzle-kit studio"
+  },
+  "envVars": {
+    "DATABASE_URL": "postgresql://postgres:postgres@localhost:5432/postgres"
+  },
+  "overrides": {
+    "esbuild": "^0.28.2"
+  }
+}

package/templates/modules/drizzle/nestjs/config.json

@@ -0,0 +1,26 @@
+{
+  "id": "drizzle",
+  "name": "Drizzle ORM",
+  "description": "Drizzle ORM for NestJS with PostgreSQL",
+  "type": "database",
+  "dependencies": {
+    "drizzle-orm": "^0.45.2",
+    "pg": "^8.23.0",
+    "dotenv": "^17.4.2"
+  },
+  "devDependencies": {
+    "drizzle-kit": "^0.31.10",
+    "@types/pg": "^8.23.1"
+  },
+  "scripts": {
+    "db:generate": "drizzle-kit generate",
+    "db:migrate": "drizzle-kit migrate",
+    "db:studio": "drizzle-kit studio"
+  },
+  "envVars": {
+    "DATABASE_URL": "postgresql://postgres:postgres@localhost:5432/postgres"
+  },
+  "overrides": {
+    "esbuild": "^0.28.2"
+  }
+}

package/templates/modules/drizzle/nestjs/drizzle.config.ts

@@ -0,0 +1,13 @@
+import { config } from "dotenv";
+import { defineConfig } from "drizzle-kit";
+
+config({ path: ".env" });
+
+export default defineConfig({
+  schema: "./src/database/schema.ts",
+  out: "./migrations",
+  dialect: "postgresql",
+  dbCredentials: {
+    url: process.env.DATABASE_URL!,
+  },
+});