create-fullstack-scaffold 0.4.9 → 0.4.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-fullstack-scaffold",
-  "version": "0.4.9",
+  "version": "0.4.10",
   "type": "module",
   "bin": {
     "create-fullstack-scaffold": "dist/cli/index.js"
@@ -86,7 +86,7 @@
     "validate:modules": "npx tsx src/server/core/module-loader.ts",
     "check:refs": "node --import tsx/esm lint-scripts/check-refs.ts",
     "create:module": "node --import tsx/esm scripts/create-template.ts",
-    "postinstall": "patch-package",
+    "postinstall": "node -e \"try{require.resolve('patch-package')&&require('child_process').execSync('npx patch-package',{stdio:'pipe'})}catch(e){}\"",
     "prepare": "husky",
     "db:generate": "drizzle-kit generate",
     "db:migrate": "drizzle-kit migrate",

package/template/CLAUDE.md

@@ -33,6 +33,17 @@ src/
 │   ├── hooks/       # Custom hooks
 │   ├── pages/      # Page components
 │   └── App.tsx
+├── merchant/        # Merchant dashboard (Ant Design)
+│   ├── components/  # Merchant components
+│   ├── stores/      # Merchant state (merchantStore)
+│   ├── pages/       # Merchant pages
+│   ├── layouts/     # Merchant layouts
+│   └── App.tsx
+├── admin/           # Admin dashboard (Ant Design)
+│   ├── components/  # Admin components
+│   ├── stores/      # Admin state
+│   ├── pages/       # Admin pages
+│   └── App.tsx
 ├── server/          # Hono backend
 │   ├── module-todos/     # Todo module
 │   ├── module-chat/      # WebSocket chat module
@@ -173,12 +184,12 @@ Each module under `src/server/module-*/` has a `module.ts` manifest declaring:
 
 #### Module Categories
 
-| Category      | Modules                          |
-| ------------- | -------------------------------- |
-| core          | todos                            |
-| communication | chat, notifications              |
-| business      | order, ticket, dispute, content  |
-| system        | permission, admin, captcha, file |
+| Category      | Modules                                   |
+| ------------- | ----------------------------------------- |
+| core          | todos                                     |
+| communication | chat, notifications                       |
+| business      | order, ticket, dispute, content, merchant |
+| system        | permission, admin, captcha, file          |
 
 #### Dependency Graph
 
@@ -194,6 +205,7 @@ order ──→ permission
 ticket ──→ permission
 dispute ──→ permission
 content ──→ permission
+merchant ──→ auth + permission
 ```
 
 #### Validation

package/template/drizzle/0004_add_merchants_products.sql

@@ -0,0 +1,30 @@
+-- Create merchants table
+CREATE TABLE `merchants` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`user_id` text NOT NULL,
+	`tenant_id` integer NOT NULL,
+	`business_name` text NOT NULL,
+	`business_type` text NOT NULL,
+	`status` text NOT NULL DEFAULT 'active',
+	`description` text,
+	`phone` text,
+	`email` text,
+	`address` text,
+	`password` text NOT NULL,
+	`created_at` text NOT NULL,
+	`updated_at` text NOT NULL
+);
+
+-- Create products table
+CREATE TABLE `products` (
+	`id` text PRIMARY KEY NOT NULL,
+	`merchant_id` integer NOT NULL,
+	`name` text NOT NULL,
+	`description` text,
+	`price` real NOT NULL,
+	`status` text NOT NULL DEFAULT 'active',
+	`stock` integer NOT NULL DEFAULT 0,
+	`image_url` text,
+	`created_at` integer NOT NULL,
+	`updated_at` integer NOT NULL
+);

package/template/drizzle/meta/_journal.json

@@ -29,6 +29,13 @@
       "when": 1778923351174,
       "tag": "0003_ambiguous_magdalene",
       "breakpoints": true
+    },
+    {
+      "idx": 4,
+      "version": "6",
+      "when": 1779000000000,
+      "tag": "0004_add_merchants_products",
+      "breakpoints": true
     }
   ]
 }

package/template/eslint-rules/module-boundary.js

@@ -6,7 +6,7 @@
  * ESLint 规则：模块边界约束
  *
  * 规则：
- * 1. client、cli、admin 三个模块之间不能存在直接引用关系
+ * 1. client、cli、admin、merchant、tenant 模块之间不能存在直接引用关系
  * 2. 模块间共享代码必须通过 shared 目录
  * 3. 违规引用将报错并提示使用 shared 中转
  */
@@ -15,7 +15,7 @@ export const moduleBoundary = {
   meta: {
     type: 'problem',
     docs: {
-      description: 'Enforce boundary between client, cli and admin modules',
+      description: 'Enforce boundary between client, cli, admin, merchant and tenant modules',
       recommended: true,
     },
     messages: {
@@ -35,12 +35,16 @@ export const moduleBoundary = {
       client: '/client/',
       cli: '/cli/',
       admin: '/admin/',
+      merchant: '/merchant/',
+      tenant: '/tenant/',
     }
 
     const moduleNames = {
       client: 'client',
       cli: 'cli',
       admin: 'admin',
+      merchant: 'merchant',
+      tenant: 'tenant',
     }
 
     function getCurrentModule(filePath) {

package/template/eslint-rules/no-cross-module-service-import.js

@@ -0,0 +1,105 @@
+/**
+ * @fileoverview Prevent cross-module service internal imports
+ * @author create-biomimic-app
+ */
+
+'use strict'
+
+const FORBIDDEN_INTERNAL_PATHS = ['services', 'routes', 'middleware']
+
+export const noCrossModuleServiceImport = {
+  meta: {
+    type: 'problem',
+    docs: {
+      description: 'Prevent modules from importing service internals from other modules',
+      recommended: true,
+    },
+    messages: {
+      crossModuleServiceImport:
+        "Cross-module service import detected: '{{importPath}}'. " +
+        "Import from '{{otherModule}}' should use its public API ('@server/module-{{otherModule}}') instead of internal paths.",
+    },
+    schema: [],
+  },
+  create(context) {
+    const filename = context.filename || context.getFilename()
+
+    const currentModuleMatch = filename.match(/\/(module-[^/]+)\//)
+    if (!currentModuleMatch) return {}
+
+    const currentModule = currentModuleMatch[1]
+
+    function checkImport(importPath, node) {
+      let normalizedPath = importPath
+
+      if (importPath.startsWith('.')) {
+        const baseParts = filename.split('/')
+        baseParts.pop()
+        const parts = [...baseParts]
+
+        for (const segment of importPath.split('/')) {
+          if (segment === '..') {
+            parts.pop()
+          } else if (segment !== '.') {
+            parts.push(segment)
+          }
+        }
+
+        normalizedPath = parts.join('/')
+      }
+
+      const aliasMatch = normalizedPath.match(/@server\/(module-([^/]+))(?:\/(.+))?$/)
+      const relativeMatch = normalizedPath.match(/(module-([^/]+))\/(.+)$/)
+
+      const match = aliasMatch || relativeMatch
+      if (!match) return
+
+      const otherModuleName = aliasMatch ? aliasMatch[2] : relativeMatch[2]
+      const subPath = aliasMatch ? aliasMatch[3] : relativeMatch[3]
+
+      if (otherModuleName === currentModule.replace('module-', '')) return
+      if (!subPath) return
+
+      if (subPath === 'module.ts' || subPath === 'index.ts' || subPath === 'index') return
+
+      const firstSegment = subPath.split('/')[0]
+      if (FORBIDDEN_INTERNAL_PATHS.includes(firstSegment)) {
+        context.report({
+          node,
+          messageId: 'crossModuleServiceImport',
+          data: {
+            importPath,
+            otherModule: otherModuleName,
+          },
+        })
+      }
+    }
+
+    return {
+      ImportDeclaration(node) {
+        const source = node.source
+        if (!source || source.type !== 'Literal') return
+        if (typeof source.value !== 'string') return
+        checkImport(source.value, node)
+      },
+      ImportExpression(node) {
+        if (node.source.type !== 'Literal') return
+        if (typeof node.source.value !== 'string') return
+        checkImport(node.source.value, node)
+      },
+      CallExpression(node) {
+        if (
+          node.callee.type === 'Identifier' &&
+          node.callee.name === 'require' &&
+          node.arguments.length > 0 &&
+          node.arguments[0].type === 'Literal' &&
+          typeof node.arguments[0].value === 'string'
+        ) {
+          checkImport(node.arguments[0].value, node)
+        }
+      },
+    }
+  },
+}
+
+export default noCrossModuleServiceImport

package/template/eslint-rules/no-disable-type-safe-client.js

@@ -26,8 +26,13 @@ export const noDisableTypeSafeClient = {
     const isMiddlewareTest =
       filename.includes('/middleware/__tests__') || filename.includes('/middleware/')
 
+    const isFileUploadTest =
+      filename.includes('file-upload') ||
+      filename.includes('file-routes.test')
+
     const isRouteTestFile =
       !isMiddlewareTest &&
+      !isFileUploadTest &&
       (filename.includes('-rpc.test.') ||
         filename.includes('-route.test.') ||
         (filename.includes('__tests__') && filename.includes('.test.')))

package/template/eslint.config.js

@@ -36,6 +36,9 @@ import { moduleBoundary } from './eslint-rules/module-boundary.js'
 import { limitTypeComplexity } from './eslint-rules/limit-type-complexity.js'
 import { requireAntdGenericTypes } from './eslint-rules/require-antd-generic-types.js'
 import { noDeepRelativeImports } from './eslint-rules/no-deep-relative-imports.js'
+import { noCrossModuleServiceImport } from './eslint-rules/no-cross-module-service-import.js'
+import { noDisableTypeSafeClient } from './eslint-rules/no-disable-type-safe-client.js'
+import { routeLocation } from './eslint-rules/route-location.js'
 
 const localRules = {
   rules: {
@@ -71,6 +74,9 @@ const localRules = {
     'limit-type-complexity': limitTypeComplexity,
     'require-antd-generic-types': requireAntdGenericTypes,
     'no-deep-relative-imports': noDeepRelativeImports,
+    'no-cross-module-service-import': noCrossModuleServiceImport,
+    'no-disable-type-safe-client': noDisableTypeSafeClient,
+    'route-location': routeLocation,
   },
 }
 
@@ -118,6 +124,8 @@ export default tseslint.config(
       'local-rules/flat-routes-services': 'error',
       'local-rules/no-middleware-in-routes': 'error',
       'local-rules/no-new-old-service-naming': 'error',
+      'local-rules/no-cross-module-service-import': 'error',
+      'local-rules/route-location': 'error',
       'local-rules/limit-type-complexity': ['warn', { maxRouteChainLength: 15 }],
     },
   },
@@ -153,6 +161,7 @@ export default tseslint.config(
     rules: {
       'no-console': 'off',
       'local-rules/require-type-safe-test-client': 'error',
+      'local-rules/no-disable-type-safe-client': 'error',
       'local-rules/require-hono-chain-syntax': 'off',
     },
   },

package/template/lint-scripts/config/project.config.ts

@@ -16,6 +16,8 @@ import type {
   TestQualityConfig,
   ClientTestsConfig,
   MdRefsConfig,
+  SchemaUniquenessConfig,
+  ModulePublicApiConfig,
 } from '../validators/index.js'
 
 // ============================================
@@ -338,6 +340,23 @@ export const consoleLogConfig: ConsoleLogConfig = {
   checkDirs: ['src/server'],
 }
 
+// ============================================
+// Schema 命名唯一性验证配置
+// ============================================
+export const schemaUniquenessConfig: SchemaUniquenessConfig = {
+  modulesDir: 'src/shared/modules',
+  checkDirs: ['src/shared/modules'],
+  ignoreDirs: ['node_modules', 'dist'],
+}
+
+// ============================================
+// 模块公共 API 验证配置
+// ============================================
+export const modulePublicApiConfig: ModulePublicApiConfig = {
+  serverDir: 'src/server',
+  checkDirs: ['src/server'],
+}
+
 // ============================================
 // 统一导出
 // ============================================
@@ -353,6 +372,8 @@ export const projectConfig = {
   clientTests: clientTestsConfig,
   mdRefs: mdRefsConfig,
   consoleLog: consoleLogConfig,
+  schemaUniqueness: schemaUniquenessConfig,
+  modulePublicApi: modulePublicApiConfig,
 } as const
 
 export default projectConfig

package/template/lint-scripts/validate-all.ts

@@ -28,6 +28,14 @@ import {
   formatAPICoverageErrors,
 } from './validators/api-coverage.validator.js'
 import { validateConsoleLog, formatConsoleLogErrors } from './validators/console-log.validator.js'
+import {
+  validateSchemaUniqueness,
+  formatSchemaUniquenessErrors,
+} from './validators/schema-uniqueness.validator.js'
+import {
+  validateModulePublicApi,
+  formatModulePublicApiErrors,
+} from './validators/module-public-api.validator.js'
 import projectConfig from './config/project.config.js'
 
 interface ValidatorResult {
@@ -41,7 +49,7 @@ async function runAllValidators(): Promise<ValidatorResult[]> {
   const results: ValidatorResult[] = []
 
   // 1. TODO 验证
-  console.log('🔍 [1/12] Checking TODO/FIXME comments...')
+  console.log('🔍 [1/14] Checking TODO/FIXME comments...')
   const todoErrors = validateTodos(projectConfig.todos, rootPath)
   results.push({
     name: 'TODO/FIXME',
@@ -55,7 +63,7 @@ async function runAllValidators(): Promise<ValidatorResult[]> {
   }
 
   // 2. 敏感信息验证
-  console.log('🔍 [2/12] Checking for sensitive data...')
+  console.log('🔍 [2/14] Checking for sensitive data...')
   const sensitiveErrors = await validateSensitive(projectConfig.sensitive, rootPath)
   results.push({
     name: 'Sensitive Data',
@@ -69,7 +77,7 @@ async function runAllValidators(): Promise<ValidatorResult[]> {
   }
 
   // 3. 导入路径验证
-  console.log('🔍 [3/12] Checking import paths...')
+  console.log('🔍 [3/14] Checking import paths...')
   const importErrors = validateImports(projectConfig.imports, rootPath)
   results.push({
     name: 'Import Paths',
@@ -83,7 +91,7 @@ async function runAllValidators(): Promise<ValidatorResult[]> {
   }
 
   // 4. 服务端 RPC 验证
-  console.log('🔍 [4/12] Checking server RPC patterns...')
+  console.log('🔍 [4/14] Checking server RPC patterns...')
   const serverRPCErrors = validateServerRPC(projectConfig.serverRPC, rootPath)
   results.push({
     name: 'Server RPC',
@@ -97,7 +105,7 @@ async function runAllValidators(): Promise<ValidatorResult[]> {
   }
 
   // 5. 客户端 RPC 验证
-  console.log('🔍 [5/12] Checking client RPC usage...')
+  console.log('🔍 [5/14] Checking client RPC usage...')
   const clientRPCErrors = validateClientRPC(projectConfig.clientRPC, rootPath)
   results.push({
     name: 'Client RPC',
@@ -111,7 +119,7 @@ async function runAllValidators(): Promise<ValidatorResult[]> {
   }
 
   // 6. 目录结构验证
-  console.log('🔍 [6/12] Checking directory structure...')
+  console.log('🔍 [6/14] Checking directory structure...')
   const { directoryErrors, forbiddenErrors } = validateDirectoryStructure(
     projectConfig.directory,
     rootPath
@@ -129,7 +137,7 @@ async function runAllValidators(): Promise<ValidatorResult[]> {
   }
 
   // 7. 模块测试文件验证
-  console.log('🔍 [7/12] Checking module test files...')
+  console.log('🔍 [7/14] Checking module test files...')
   const moduleTestErrors = validateModuleTests(projectConfig.moduleTests, rootPath)
   results.push({
     name: 'Module Tests',
@@ -143,7 +151,7 @@ async function runAllValidators(): Promise<ValidatorResult[]> {
   }
 
   // 8. 测试质量验证
-  console.log('🔍 [8/12] Checking test quality...')
+  console.log('🔍 [8/14] Checking test quality...')
   const { errors: testQualityErrors, warnings: testQualityWarnings } = validateTestQuality(
     projectConfig.testQuality,
     rootPath
@@ -161,7 +169,7 @@ async function runAllValidators(): Promise<ValidatorResult[]> {
   }
 
   // 9. Client 测试覆盖验证
-  console.log('🔍 [9/12] Checking client test coverage...')
+  console.log('🔍 [9/14] Checking client test coverage...')
   const clientTestErrors = validateClientTests(projectConfig.clientTests, rootPath)
   results.push({
     name: 'Client Tests',
@@ -175,7 +183,7 @@ async function runAllValidators(): Promise<ValidatorResult[]> {
   }
 
   // 10. API 覆盖率验证
-  console.log('🔍 [10/12] Checking API coverage...')
+  console.log('🔍 [10/14] Checking API coverage...')
   const apiCoverageErrors = validateAPICoverage(projectConfig.moduleTests, rootPath)
   results.push({
     name: 'API Coverage',
@@ -189,7 +197,7 @@ async function runAllValidators(): Promise<ValidatorResult[]> {
   }
 
   // 11. Markdown 引用路径验证
-  console.log('🔍 [11/12] Checking markdown references...')
+  console.log('🔍 [11/14] Checking markdown references...')
   const mdRefErrors = validateMdRefs(projectConfig.mdRefs, rootPath)
   results.push({
     name: 'Markdown References',
@@ -203,7 +211,7 @@ async function runAllValidators(): Promise<ValidatorResult[]> {
   }
 
   // 12. Console.log 验证
-  console.log('🔍 [12/12] Checking for console.log statements...')
+  console.log('🔍 [12/14] Checking for console.log statements...')
   const consoleLogErrors = validateConsoleLog(projectConfig.consoleLog, rootPath)
   results.push({
     name: 'Console.log',
@@ -216,6 +224,34 @@ async function runAllValidators(): Promise<ValidatorResult[]> {
     console.log('  ✅ No console.log statements found\n')
   }
 
+  // 13. Schema 命名唯一性验证
+  console.log('🔍 [13/14] Checking schema name uniqueness across modules...')
+  const schemaUniquenessErrors = validateSchemaUniqueness(projectConfig.schemaUniqueness, rootPath)
+  results.push({
+    name: 'Schema Uniqueness',
+    passed: schemaUniquenessErrors.length === 0,
+    errors: schemaUniquenessErrors.length,
+  })
+  if (schemaUniquenessErrors.length > 0) {
+    console.error(formatSchemaUniquenessErrors(schemaUniquenessErrors))
+  } else {
+    console.log('  ✅ No cross-module schema name collisions\n')
+  }
+
+  // 14. 模块公共 API 验证
+  console.log('🔍 [14/14] Checking module public API barrels...')
+  const modulePublicApiErrors = validateModulePublicApi(projectConfig.modulePublicApi, rootPath)
+  results.push({
+    name: 'Module Public API',
+    passed: modulePublicApiErrors.length === 0,
+    errors: modulePublicApiErrors.length,
+  })
+  if (modulePublicApiErrors.length > 0) {
+    console.error(formatModulePublicApiErrors(modulePublicApiErrors))
+  } else {
+    console.log('  ✅ All depended-upon modules have index.ts barrels\n')
+  }
+
   return results
 }
 

package/template/lint-scripts/validators/index.ts

@@ -269,3 +269,32 @@ export interface ConsoleLogError {
   message: string
   content: string
 }
+
+// ============================================
+// Schema 命名唯一性验证配置
+// ============================================
+export interface SchemaUniquenessConfig {
+  modulesDir: string
+  checkDirs: string[]
+  ignoreDirs: string[]
+}
+
+export interface SchemaUniquenessError {
+  exportName: string
+  modules: string[]
+  suggestion: string
+}
+
+// ============================================
+// 模块公共 API 验证配置
+// ============================================
+export interface ModulePublicApiConfig {
+  serverDir: string
+  checkDirs: string[]
+}
+
+export interface ModulePublicApiError {
+  module: string
+  dependedBy: string[]
+  suggestion: string
+}

package/template/lint-scripts/validators/module-public-api.validator.ts

@@ -0,0 +1,103 @@
+/**
+ * Module Public API 验证器
+ *
+ * 确保被其他模块依赖（dependsOn）的服务端模块都有 index.ts 公共 API barrel 文件。
+ * 模块应通过干净的公共接口被消费，而非深层内部导入。
+ */
+
+import { readFileSync, readdirSync, existsSync } from 'node:fs'
+import { join } from 'node:path'
+
+export interface ModulePublicApiConfig {
+  serverDir: string
+  checkDirs: string[]
+}
+
+export interface ModulePublicApiError {
+  module: string
+  dependedBy: string[]
+  suggestion: string
+}
+
+interface ParsedManifest {
+  name: string
+  dependsOn: string[]
+}
+
+function parseManifest(filePath: string): ParsedManifest | null {
+  const content = readFileSync(filePath, 'utf-8')
+
+  const nameMatch = content.match(/name:\s*['"`]([^'"`]+)['"`]/)
+  if (!nameMatch) return null
+
+  const dependsOnMatch = content.match(/dependsOn:\s*\[([^\]]*)\]/)
+  const dependsOn = dependsOnMatch
+    ? [...dependsOnMatch[1].matchAll(/['"`]([^'"`]+)['"`]/g)].map(m => m[1])
+    : []
+
+  return { name: nameMatch[1], dependsOn }
+}
+
+export function validateModulePublicApi(
+  config: ModulePublicApiConfig,
+  rootPath: string
+): ModulePublicApiError[] {
+  const serverPath = join(rootPath, config.serverDir)
+  if (!existsSync(serverPath)) return []
+
+  const entries = readdirSync(serverPath, { withFileTypes: true })
+  const moduleDirs = entries
+    .filter(e => e.isDirectory() && e.name.startsWith('module-'))
+    .map(e => e.name)
+
+  const manifests = new Map<string, ParsedManifest>()
+  for (const dir of moduleDirs) {
+    const manifestPath = join(serverPath, dir, 'module.ts')
+    if (!existsSync(manifestPath)) continue
+    const parsed = parseManifest(manifestPath)
+    if (parsed) manifests.set(parsed.name, parsed)
+  }
+
+  const dependedUpon = new Map<string, string[]>()
+  for (const [moduleName, manifest] of manifests) {
+    for (const dep of manifest.dependsOn) {
+      const consumers = dependedUpon.get(dep) ?? []
+      consumers.push(moduleName)
+      dependedUpon.set(dep, consumers)
+    }
+  }
+
+  const errors: ModulePublicApiError[] = []
+  for (const [depName, consumers] of dependedUpon) {
+    const barrelPath = join(serverPath, `module-${depName}`, 'index.ts')
+    if (!existsSync(barrelPath)) {
+      errors.push({
+        module: depName,
+        dependedBy: consumers,
+        suggestion: `Create template/src/server/module-${depName}/index.ts to expose a clean public API for consumers: ${consumers.join(
+          ', '
+        )}`,
+      })
+    }
+  }
+
+  return errors
+}
+
+export function formatModulePublicApiErrors(errors: ModulePublicApiError[]): string {
+  if (errors.length === 0) return ''
+
+  let output = `❌ Found ${errors.length} module(s) missing public API barrel (index.ts):\n\n`
+
+  for (const err of errors) {
+    output += `  module-${err.module}\n`
+    output += `    → Depended by: ${err.dependedBy.join(', ')}\n`
+    output += `    → Fix: ${err.suggestion}\n\n`
+  }
+
+  output += '📋 Guidelines:\n'
+  output += '  Every module listed in dependsOn should have an index.ts barrel file\n'
+  output += '  that re-exports its public API (routes, services, types).\n'
+
+  return output
+}