create-ailk 0.1.0

package/templates/database/schema.prisma

@@ -0,0 +1,487 @@
+// Customer Template Database Schema
+//
+// MINIMAL BUT EXTENSIBLE - Only stores auth and customer extensions
+// All business data (leads, orders, analytics) lives on the Platform
+//
+// Tables (14 total — 11 auth/config + 3 inbox added in B1):
+//   - Better Auth (4): User, Session, Account, Verification    (post-#587)
+//   - API Auth (2): ApiToken, RefreshToken
+//   - OAuth (2): OAuthClient, OAuthAuthorization
+//   - Push (1): PushToken
+//   - Extensions (2): UserData, SiteSetting
+//   - Inbox (3): Lead, Subscriber, Callback  [namespace: database/inbox/]
+//
+// Aggregation strategy: Namespace-local schema files (e.g. database/inbox/schema.prisma)
+// define models canonically for lint and documentation. Those same models are
+// registered here so Prisma can generate from the single root schema.prisma.
+// Phase 2 (ADR 0009 D4) will migrate to prismaSchemaFolder once multi-file
+// generation is adopted repo-wide.
+
+generator client {
+  provider            = "prisma-client"
+  output              = "./generated/client"
+  importFileExtension = "js"
+}
+
+datasource db {
+  provider = "postgresql"
+}
+
+// ============================================================================
+// Better Auth Models (Web Dashboard Authentication — #587)
+// ============================================================================
+
+/// User - Dashboard users (site owners, admins, end-users)
+///
+/// emailVerified is a Boolean per Better Auth's contract (NextAuth previously
+/// stored the verification timestamp as DateTime?). The five custom relations
+/// — ApiToken, RefreshToken, OAuthAuthorization, PushToken, UserData — keep
+/// their onDelete: Cascade semantics so user removal cleanly tears down all
+/// dependent rows.
+model User {
+  id            String    @id @default(cuid())
+  email         String    @unique
+  name          String?
+  image         String?
+  emailVerified Boolean   @default(false) @map("email_verified")
+
+  // Profile extensions
+  role          String    @default("user") // "user", "admin", "owner"
+
+  // Billing identity — provider-agnostic so Stripe is v1 value, not baked-in name.
+  // Webhook is the only writer (see apps/api/src/routes/webhooks/stripe.ts).
+  // #771 self-serve dashboard reads billingCustomerId for Stripe customer-portal URL.
+  billingProvider   String?  @map("billing_provider")    // "stripe"; future: "lemonsqueezy", "paddle"
+  billingCustomerId String?  @map("billing_customer_id") // cus_xxx (Stripe) or equivalent
+
+  // Subscription tier projection — derived from the Stripe webhook's product-aware
+  // routing (#898). Defaults to "free" until a customer.subscription.created event
+  // fires; flips to "pro" / "pro_plus" / etc. based on the line item's product.
+  // hasCarePlan is true only for pro_plus today; seatCount mirrors the line item
+  // quantity from Stripe's adjustable-quantity widget (1–50).
+  tier         String   @default("free")                  // "free" | "pro" | "pro_plus" | "enterprise" (retired "agency"/"commercial" rows migrated to "enterprise" — #3516)
+  hasCarePlan  Boolean  @default(false) @map("has_care_plan")
+  seatCount    Int      @default(1) @map("seat_count")
+
+  createdAt     DateTime  @default(now()) @map("created_at")
+  updatedAt     DateTime  @updatedAt @map("updated_at")
+
+  // Better Auth relations
+  sessions      Session[]
+  accounts      Account[]
+
+  // API & OAuth
+  apiTokens           ApiToken[]
+  refreshTokens       RefreshToken[]
+  oauthAuthorizations OAuthAuthorization[]
+  pushTokens          PushToken[]
+
+  // Extensions
+  userData      UserData[]
+
+  // Theme Wiring (TWP3-MAT #1359)
+  tenantTheme        TenantTheme?
+  tenantSiteIdentity TenantSiteIdentity?
+  tenantSeo          TenantSEO?
+
+  @@unique([billingProvider, billingCustomerId])
+  @@map("users")
+}
+
+/// Session - Active user sessions (Better Auth schema)
+///
+/// Session.token is the opaque cookie value the dual-mode preHandler reads.
+/// Deleting a row revokes the session; deleting the parent User cascades.
+model Session {
+  id        String   @id
+  expiresAt DateTime @map("expires_at")
+  token     String   @unique
+  createdAt DateTime @default(now()) @map("created_at")
+  updatedAt DateTime @updatedAt @map("updated_at")
+  ipAddress String?  @map("ip_address")
+  userAgent String?  @map("user_agent")
+  userId    String   @map("user_id")
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+  @@index([token])
+  @@map("sessions")
+}
+
+/// Account - OAuth provider connections (Google, GitHub, etc.)
+///
+/// Better Auth's account shape: one row per (providerId, accountId) pair.
+/// Cascade on User removal keeps OAuth links from orphaning.
+model Account {
+  id                    String    @id
+  accountId             String    @map("account_id")
+  providerId            String    @map("provider_id")
+  userId                String    @map("user_id")
+  accessToken           String?   @map("access_token") @db.Text
+  refreshToken          String?   @map("refresh_token") @db.Text
+  idToken               String?   @map("id_token") @db.Text
+  accessTokenExpiresAt  DateTime? @map("access_token_expires_at")
+  refreshTokenExpiresAt DateTime? @map("refresh_token_expires_at")
+  scope                 String?
+  password              String?
+  createdAt             DateTime  @default(now()) @map("created_at")
+  updatedAt             DateTime  @updatedAt @map("updated_at")
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@unique([providerId, accountId])
+  @@index([userId])
+  @@map("accounts")
+}
+
+/// Verification - Email / magic-link verification tokens (Better Auth schema)
+model Verification {
+  id         String   @id
+  identifier String
+  value      String
+  expiresAt  DateTime @map("expires_at")
+  createdAt  DateTime @default(now()) @map("created_at")
+  updatedAt  DateTime @updatedAt @map("updated_at")
+
+  @@index([identifier])
+  @@map("verifications")
+}
+
+// ============================================================================
+// API Token Authentication (Mobile Apps, CLI, External Clients)
+// ============================================================================
+
+/// ApiToken - Bearer tokens for non-web clients (mobile apps, API integrations)
+model ApiToken {
+  id          String    @id @default(cuid())
+  userId      String    @map("user_id")
+  
+  // Token identification
+  name        String    // "iPhone", "Android App", "API Integration"
+  token       String    @unique // Hashed token
+  tokenPrefix String    @map("token_prefix") // First 8 chars for identification
+  
+  // Client info
+  clientType  String    @default("api") @map("client_type") // "mobile", "api", "cli"
+  deviceInfo  String?   @map("device_info") // "iPhone 15 Pro", "Android 14"
+  
+  // Permissions
+  scopes      String[]  @default([]) // ["read:profile", "write:data"]
+  
+  // Lifecycle
+  expiresAt   DateTime? @map("expires_at")
+  lastUsedAt  DateTime? @map("last_used_at")
+  lastUsedIp  String?   @map("last_used_ip")
+  revokedAt   DateTime? @map("revoked_at")
+  
+  createdAt   DateTime  @default(now()) @map("created_at")
+
+  user          User           @relation(fields: [userId], references: [id], onDelete: Cascade)
+  refreshTokens RefreshToken[]
+
+  @@index([userId])
+  @@index([token])
+  @@index([tokenPrefix])
+  @@map("api_tokens")
+}
+
+/// RefreshToken - Long-lived tokens for mobile session refresh
+model RefreshToken {
+  id          String    @id @default(cuid())
+  userId      String    @map("user_id")
+  apiTokenId  String    @map("api_token_id")
+  
+  token       String    @unique // Hashed
+  
+  // Lifecycle
+  expiresAt   DateTime  @map("expires_at")
+  usedAt      DateTime? @map("used_at")      // Last time used to get new access token
+  revokedAt   DateTime? @map("revoked_at")
+  
+  createdAt   DateTime  @default(now()) @map("created_at")
+
+  user     User     @relation(fields: [userId], references: [id], onDelete: Cascade)
+  apiToken ApiToken @relation(fields: [apiTokenId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+  @@index([apiTokenId])
+  @@index([token])
+  @@map("refresh_tokens")
+}
+
+// ============================================================================
+// OAuth 2.0 (ChatGPT Plugin, Slack Bot, External Integrations)
+// ============================================================================
+
+/// OAuthClient - Registered OAuth applications (ChatGPT, Slack, etc.)
+model OAuthClient {
+  id           String   @id @default(cuid())
+  
+  // Client identification
+  name         String   // "ChatGPT Plugin", "Slack Bot"
+  description  String?
+  logoUrl      String?  @map("logo_url")
+  
+  // OAuth credentials
+  clientId     String   @unique @map("client_id")   // Public identifier
+  clientSecret String   @map("client_secret")       // Hashed secret
+  
+  // OAuth config
+  redirectUris String[] @map("redirect_uris")       // Allowed callback URLs
+  scopes       String[] @default([])                // Allowed scopes
+  
+  // Settings
+  enabled      Boolean  @default(true)
+  trusted      Boolean  @default(false)             // Skip consent screen
+  
+  createdAt    DateTime @default(now()) @map("created_at")
+  updatedAt    DateTime @updatedAt @map("updated_at")
+
+  authorizations OAuthAuthorization[]
+
+  @@map("oauth_clients")
+}
+
+/// OAuthAuthorization - User grants to OAuth clients
+model OAuthAuthorization {
+  id            String   @id @default(cuid())
+  userId        String   @map("user_id")
+  clientId      String   @map("client_id")
+  
+  // Granted scopes (may be subset of client's allowed scopes)
+  scopes        String[]
+  
+  // Tokens
+  accessToken   String   @unique @map("access_token")   // Hashed
+  refreshToken  String?  @unique @map("refresh_token")  // Hashed
+  
+  // Lifecycle
+  expiresAt     DateTime @map("expires_at")
+  revokedAt     DateTime? @map("revoked_at")
+  
+  createdAt     DateTime @default(now()) @map("created_at")
+  updatedAt     DateTime @updatedAt @map("updated_at")
+
+  user   User        @relation(fields: [userId], references: [id], onDelete: Cascade)
+  client OAuthClient @relation(fields: [clientId], references: [id], onDelete: Cascade)
+
+  @@unique([userId, clientId])
+  @@index([userId])
+  @@index([clientId])
+  @@index([accessToken])
+  @@map("oauth_authorizations")
+}
+
+// ============================================================================
+// Push Notifications (Mobile Apps, Web Push)
+// ============================================================================
+
+/// PushToken - Device tokens for push notifications
+model PushToken {
+  id          String   @id @default(cuid())
+  userId      String   @map("user_id")
+  
+  // Token details
+  token       String   @unique              // FCM or APNs token
+  platform    String                        // "ios", "android", "web"
+  
+  // Device info
+  deviceId    String?  @map("device_id")    // Unique device identifier
+  deviceName  String?  @map("device_name")  // "iPhone 15 Pro"
+  appVersion  String?  @map("app_version")  // "1.2.3"
+  
+  // Status
+  enabled     Boolean  @default(true)
+  failedAt    DateTime? @map("failed_at")   // Last delivery failure
+  failCount   Int      @default(0) @map("fail_count")
+  
+  createdAt   DateTime @default(now()) @map("created_at")
+  updatedAt   DateTime @updatedAt @map("updated_at")
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+  @@index([platform])
+  @@map("push_tokens")
+}
+
+// ============================================================================
+// User Data Extensions (Customer Customizations)
+// ============================================================================
+
+/// UserData - Flexible key-value storage for customer extensions
+/// Use this for: preferences, saved items, custom fields, feature flags
+model UserData {
+  id        String   @id @default(cuid())
+  userId    String   @map("user_id")
+  
+  // Key-value storage
+  key       String   // "preferences", "saved_products", "notification_settings"
+  value     Json     // Flexible JSON storage
+  
+  createdAt DateTime @default(now()) @map("created_at")
+  updatedAt DateTime @updatedAt @map("updated_at")
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@unique([userId, key])
+  @@index([userId])
+  @@index([key])
+  @@map("user_data")
+}
+
+// ============================================================================
+// Site Settings (Site-wide Configuration)
+// ============================================================================
+
+/// SiteSetting - Key-value settings for the customer site
+/// Use for: feature flags, custom config, cached Platform data
+model SiteSetting {
+  id        String   @id @default(cuid())
+  key       String   @unique // "feature_flags", "cached_config", "custom_theme"
+  value     Json
+
+  createdAt DateTime @default(now()) @map("created_at")
+  updatedAt DateTime @updatedAt @map("updated_at")
+
+  @@map("site_settings")
+}
+
+// ============================================================================
+// Inbox Namespace (database/inbox/schema.prisma — B1)
+//
+// Anonymous lead/subscriber/callback data. siteId is a plain String — no FK
+// to auth-namespace models per ADR 0009 D2. Cross-namespace assembly routes
+// through apps/api/src/services/ (D3).
+// ============================================================================
+
+/// Lead - anonymous lead submission (Phase B submit_lead tool / B6 route)
+model Lead {
+  id        String   @id @default(cuid())
+  siteId    String   @map("site_id")
+  source    String
+  email     String
+  payload   Json
+  createdAt DateTime @default(now()) @map("created_at")
+
+  @@index([siteId])
+  @@index([createdAt])
+  @@map("leads")
+}
+
+/// Subscriber - newsletter subscription (Phase B subscribe_newsletter tool / B6 route)
+model Subscriber {
+  id        String   @id @default(cuid())
+  siteId    String   @map("site_id")
+  email     String
+  source    String
+  createdAt DateTime @default(now()) @map("created_at")
+
+  @@unique([siteId, email])
+  @@index([siteId])
+  @@map("subscribers")
+}
+
+/// Callback - callback request (Phase B request_callback tool / B6 route)
+model Callback {
+  id            String   @id @default(cuid())
+  siteId        String   @map("site_id")
+  name          String
+  phone         String
+  preferredTime String?  @map("preferred_time")
+  payload       Json
+  createdAt     DateTime @default(now()) @map("created_at")
+
+  @@index([siteId])
+  @@index([createdAt])
+  @@map("callbacks")
+}
+
+// ============================================================================
+// License Telemetry (apps-paid/license-issuer — S2 #1031)
+//
+// Time-series records of opt-in seat-usage telemetry from customer deployments.
+// Written by POST /telemetry on the license-issuer when AILK_TELEMETRY=1.
+// Enables queries computing the distribution of active_user_count / seat_count
+// across the customer base over a time window (S2 trigger condition monitoring).
+//
+// No PII beyond customer_id (Stripe customer ID — pseudo-anonymous).
+// ============================================================================
+
+/// TelemetryRecord - opt-in seat-usage telemetry from customer deployments.
+///
+/// timestamp is the client-side observation time (from the telemetry payload).
+/// recordedAt is the server-side receipt time (default now()).
+/// The (customerId, recordedAt DESC) index supports "latest record per customer"
+/// queries; the recordedAt DESC index supports time-window aggregate queries.
+model TelemetryRecord {
+  id              String   @id @default(cuid())
+  customerId      String   @map("customer_id")
+  activeUserCount Int      @map("active_user_count")
+  seatCount       Int      @map("seat_count")
+  timestamp       DateTime
+  recordedAt      DateTime @default(now()) @map("recorded_at")
+
+  @@index([customerId, recordedAt(sort: Desc)])
+  @@index([recordedAt(sort: Desc)])
+  @@map("telemetry_records")
+}
+
+// ============================================================================
+// Theme Wiring — Per-tenant design system persistence (TWP3-MAT #1359)
+//
+// Three tables, one per @working-theory/site-config schema. Each row stores the
+// Zod-validated JSON blob for a single tenant (identified by userId from the
+// Better Auth session). Validation is enforced at the API layer; the DB stores
+// the already-validated blob in a Json column.
+//
+// Design decisions (spec §3):
+//   - One table per schema (not a polymorphic config table) — different update
+//     cadences + consumer access patterns.
+//   - Json column for the blob — schema evolves without DB migration on change;
+//     Zod validates at API boundary.
+//   - userId is the Better Auth User id — plain String FK; onDelete Cascade
+//     ensures rows are removed when the user account is deleted.
+//   - @@unique([userId]) enforces one active record per tenant per config type
+//     (upsert semantics at the API layer).
+// ============================================================================
+
+/// TenantTheme — per-tenant ThemeSchema blob (TWP3-MAT #1359)
+model TenantTheme {
+  id        String   @id @default(cuid())
+  userId    String   @unique @map("user_id")
+  data      Json
+  createdAt DateTime @default(now()) @map("created_at")
+  updatedAt DateTime @updatedAt @map("updated_at")
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@map("tenant_themes")
+}
+
+/// TenantSiteIdentity — per-tenant SiteIdentitySchema blob (TWP3-MAT #1359)
+model TenantSiteIdentity {
+  id        String   @id @default(cuid())
+  userId    String   @unique @map("user_id")
+  data      Json
+  createdAt DateTime @default(now()) @map("created_at")
+  updatedAt DateTime @updatedAt @map("updated_at")
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@map("tenant_site_identities")
+}
+
+/// TenantSEO — per-tenant SEOSchema blob (TWP3-MAT #1359)
+model TenantSEO {
+  id        String   @id @default(cuid())
+  userId    String   @unique @map("user_id")
+  data      Json
+  createdAt DateTime @default(now()) @map("created_at")
+  updatedAt DateTime @updatedAt @map("updated_at")
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@map("tenant_seos")
+}

package/templates/database/scripts/db-generate-locked.sh

@@ -0,0 +1,80 @@
+#!/usr/bin/env bash
+# db-generate-locked.sh — serialise concurrent `pnpm --filter @working-theory/database db:generate`
+# calls so parallel prebuild scripts don't race on database/generated/client/.
+#
+# Background: four apps-paid/* packages each declare a `prebuild` that calls
+# db:generate. When `pnpm -r build` triggers them in parallel the concurrent
+# Prisma invocations race on the shared database/generated/client/ output dir,
+# producing either "directory not empty" rmdir errors or "doesn't look like a
+# generated Prisma Client" sanity-check failures. See issue #1690.
+#
+# Lock mechanism: mkdir(1) is atomic on POSIX filesystems (including macOS APFS).
+# The first caller wins the lock dir and runs the generate; concurrent callers
+# spin-wait. If the winner finishes before they time out, they see the output
+# dir already present and skip. Stale locks are detected via a PID file stored
+# inside the lock dir; if the owning PID is no longer alive the lock is removed
+# and the next caller re-runs the generate.
+
+set -euo pipefail
+
+# Workspace root: two levels up from database/scripts/
+WORKSPACE_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+DATABASE_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+
+LOCK_DIR="$WORKSPACE_ROOT/.claude/.db-generate.lock"
+TIMEOUT_SECONDS=120
+POLL_INTERVAL=1
+
+# --- Acquire lock via atomic mkdir ---
+acquire_lock() {
+  if mkdir "$LOCK_DIR" 2>/dev/null; then
+    echo "$$" > "$LOCK_DIR/pid"
+    return 0  # acquired
+  fi
+  return 1  # not acquired
+}
+
+# --- Check if a stale lock can be cleared ---
+maybe_clear_stale_lock() {
+  local pid_file="$LOCK_DIR/pid"
+  if [ -f "$pid_file" ]; then
+    local owner_pid
+    owner_pid="$(cat "$pid_file" 2>/dev/null || echo "")"
+    if [ -n "$owner_pid" ] && ! kill -0 "$owner_pid" 2>/dev/null; then
+      # Owner process is gone — lock is stale; remove it
+      rm -rf "$LOCK_DIR"
+    fi
+  fi
+}
+
+# --- Release lock on exit ---
+release_lock() {
+  rm -rf "$LOCK_DIR" 2>/dev/null || true
+}
+
+# --- Main ---
+elapsed=0
+
+while true; do
+  maybe_clear_stale_lock
+  if acquire_lock; then
+    trap release_lock EXIT
+    break
+  fi
+
+  # Another process holds the lock — if it already wrote the output, skip
+  if [ -d "$DATABASE_DIR/generated/client" ]; then
+    echo "db-generate-locked: client already present (written by concurrent process), skipping."
+    exit 0
+  fi
+
+  elapsed=$((elapsed + POLL_INTERVAL))
+  if [ "$elapsed" -ge "$TIMEOUT_SECONDS" ]; then
+    echo "db-generate-locked: timed out waiting for lock after ${TIMEOUT_SECONDS}s; running generate anyway." >&2
+    break
+  fi
+  sleep "$POLL_INTERVAL"
+done
+
+echo "db-generate-locked: running db:generate for @working-theory/database"
+pnpm --filter @working-theory/database db:generate

package/templates/database/seed-test.ts

@@ -0,0 +1,85 @@
+/**
+ * Test-user seed for the pre-OSS e2e seam (#517 — §5.1).
+ *
+ * Seeds three Better Auth User rows distinguished by the `role` field
+ * (`user`, `admin`, `owner` — matching the inline comment in schema.prisma).
+ * Pair with the triple-gated /api/test/auth/session route to mint sessions
+ * for these users from a CI e2e harness without going through OAuth.
+ *
+ * GUARD — this script REFUSES to run unless AILK_TEST_AUTH_ENABLED === 'true'.
+ * A production deployment with this script accidentally invoked but the gate
+ * unset will exit non-zero with a loud error rather than silently seeding
+ * test-user rows into a real customer DB.
+ *
+ * Re-run safe — uses `upsert` keyed by email so re-running the seed is
+ * idempotent. Will NOT overwrite name or role on subsequent runs (the
+ * `update: {}` clause leaves existing rows untouched).
+ *
+ * Run via:
+ *   pnpm --filter @working-theory/database db:seed:test
+ *
+ * Environment variables read:
+ *   AILK_TEST_AUTH_ENABLED   — must be the literal string "true" or this
+ *                              script exits 1 without writing anything.
+ *   DATABASE_URL             — required (the Prisma adapter uses it).
+ */
+import "dotenv/config";
+
+import { PrismaClient } from "./generated/client/client.js";
+
+const TEST_USERS = [
+  {
+    id: "test-e2e-user",
+    email: "test:e2e-user@ailaunchkit.test",
+    name: "E2E Test User",
+    role: "user",
+  },
+  {
+    id: "test-e2e-admin",
+    email: "test:e2e-admin@ailaunchkit.test",
+    name: "E2E Test Admin",
+    role: "admin",
+  },
+  {
+    id: "test-e2e-owner",
+    email: "test:e2e-owner@ailaunchkit.test",
+    name: "E2E Test Owner",
+    role: "owner",
+  },
+] as const;
+
+async function main(): Promise<void> {
+  if (process.env.AILK_TEST_AUTH_ENABLED !== "true") {
+    console.error(
+      "[seed-test] REFUSING to run: AILK_TEST_AUTH_ENABLED must be exactly 'true'. " +
+        "This guard prevents accidental seeding of test users into a production DB.",
+    );
+    process.exit(1);
+  }
+
+  const prisma = new PrismaClient();
+  try {
+    for (const user of TEST_USERS) {
+      await prisma.user.upsert({
+        where: { email: user.email },
+        create: {
+          id: user.id,
+          email: user.email,
+          name: user.name,
+          emailVerified: true,
+          role: user.role,
+        },
+        update: {},
+      });
+
+      console.log(`[seed-test] upserted ${user.email} (role=${user.role})`);
+    }
+  } finally {
+    await prisma.$disconnect();
+  }
+}
+
+main().catch((err) => {
+  console.error("[seed-test] failed:", err);
+  process.exit(1);
+});

package/templates/database/tsconfig.build.json

@@ -0,0 +1,16 @@
+{
+  "extends": "../tsconfig.base.json",
+  "compilerOptions": {
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "outDir": "./dist",
+    "rootDir": "./generated",
+    "declaration": true,
+    "composite": true,
+    "noEmit": false,
+    "skipLibCheck": true,
+    "types": ["node"]
+  },
+  "include": ["generated/**/*.ts"],
+  "exclude": ["node_modules", "dist", "__tests__"]
+}

package/templates/database/tsconfig.json

@@ -0,0 +1,9 @@
+{
+  "extends": "../tsconfig.base.json",
+  "compilerOptions": {
+    "noEmit": true,
+    "rootDir": ".",
+    "types": ["node"]
+  },
+  "include": ["prisma.config.ts", "seed-test.ts"]
+}