create-m5kdev 0.11.0 → 0.13.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-m5kdev",
-  "version": "0.11.0",
+  "version": "0.13.0",
   "license": "GPL-3.0-only",
   "repository": {
     "type": "git",

package/templates/minimal-app/apps/server/AGENTS.md.tpl

@@ -28,3 +28,11 @@ apps/server/src/modules/<module>/
 - Services own business rules, orchestration, and context-aware defaults.
 - tRPC files own transport only and must delegate to services.
 - Keep composition explicit in `db.ts`, `repository.ts`, `service.ts`, and `trpc.ts`.
+
+## Workflow, Redis, and push notifications
+
+- `workflow.ts` wires BullMQ via **Redis** (`REDIS_URL`). Start Redis locally before `pnpm dev` on the server, or jobs will not run.
+- `index.ts` calls `workflowRegistry.registerService(notificationService)` and `await workflowRegistry.start()` before listening.
+- After changing Drizzle tables (including `notification_*` tables merged in `db.ts`), run your project’s **Drizzle generate / migrate** command — do not hand-edit SQL migrations in this repo.
+
+Push-related server env vars are documented in `apps/shared/.env.example`.

package/templates/minimal-app/apps/server/package.json.tpl

@@ -25,6 +25,7 @@
     "dotenv": "catalog:",
     "drizzle-orm": "catalog:",
     "express": "catalog:",
+    "ioredis": "catalog:",
     "neverthrow": "catalog:",
     "react": "catalog:",
     "react-dom": "catalog:",

package/templates/minimal-app/apps/server/src/db.ts.tpl

@@ -1,9 +1,13 @@
 import * as auth from "@m5kdev/backend/modules/auth/auth.db";
+import * as notification from "@m5kdev/backend/modules/notification/notification.db";
+import * as workflow from "@m5kdev/backend/modules/workflow/workflow.db";
 import { drizzle } from "drizzle-orm/libsql";
 import * as posts from "./modules/posts/posts.db";
 
 export const schema = {
   ...auth,
+  ...workflow,
+  ...notification,
   ...posts,
 };
 

package/templates/minimal-app/apps/server/src/index.ts.tpl

@@ -3,12 +3,19 @@ import * as trpcExpress from "@trpc/server/adapters/express";
 import { toNodeHandler } from "better-auth/node";
 import cors from "cors";
 import express from "express";
+import type { Server } from "node:http";
 import { auth } from "./lib/auth";
+import { notificationService } from "./service";
 import { appRouter } from "./trpc";
+import { workflowRegistry, workflowService } from "./workflow";
+
+workflowRegistry.registerService(notificationService);
 
 const app = express();
 const port = process.env.PORT ? Number.parseInt(process.env.PORT, 10) : 8080;
 
+let httpServer: Server | undefined;
+
 app.use(express.json());
 app.use(
   cors({
@@ -16,7 +23,7 @@ app.use(
     credentials: true,
     methods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
     allowedHeaders: ["Content-Type", "Authorization"],
-  })
+  }),
 );
 
 app.use(
@@ -24,11 +31,62 @@ app.use(
   trpcExpress.createExpressMiddleware({
     router: appRouter,
     createContext: createAuthContext(auth as never),
-  })
+  }),
 );
 
 app.all("/api/auth/*", toNodeHandler(auth));
 
-app.listen(port, () => {
-  console.info(`Server running at ${process.env.VITE_SERVER_URL ?? `http://localhost:${port}`}`);
+function logError(context: string, error: unknown): void {
+  console.error(`[server] ${context}`, error);
+}
+
+async function shutdown(): Promise<void> {
+  try {
+    await workflowRegistry.stop();
+  } catch (e) {
+    logError("workflowRegistry.stop() failed", e);
+  }
+  try {
+    await workflowService.close();
+  } catch (e) {
+    logError("workflowService.close() failed", e);
+  }
+  if (httpServer) {
+    await new Promise<void>((resolve) => {
+      httpServer?.close((err) => {
+        if (err) {
+          logError("HTTP server close failed", err);
+        }
+        resolve();
+      });
+    });
+  }
+  process.exit(0);
+}
+
+process.once("SIGINT", () => {
+  void shutdown();
 });
+process.once("SIGTERM", () => {
+  void shutdown();
+});
+
+async function start(): Promise<void> {
+  await workflowRegistry.start();
+  await new Promise<void>((resolve, reject) => {
+    httpServer = app.listen(port, () => {
+      console.info(`Server running at ${process.env.VITE_SERVER_URL ?? `http://localhost:${port}`}`);
+      resolve();
+    });
+    httpServer.on("error", reject);
+  });
+}
+
+void (async () => {
+  try {
+    await start();
+  } catch (e) {
+    logError("Fatal: workflowRegistry.start() or HTTP listen failed", e);
+    process.exit(1);
+  }
+})();

package/templates/minimal-app/apps/server/src/repository.ts.tpl

@@ -1,6 +1,10 @@
 import { AuthRepository } from "@m5kdev/backend/modules/auth/auth.repository";
+import { NotificationRepository } from "@m5kdev/backend/modules/notification/notification.repository";
+import { WorkflowRepository } from "@m5kdev/backend/modules/workflow/workflow.repository";
 import { orm, schema } from "./db";
 import { PostsRepository } from "./modules/posts/posts.repository";
 
 export const authRepository = new AuthRepository({ orm, schema });
+export const workflowRepository = new WorkflowRepository({ orm, schema });
+export const notificationRepository = new NotificationRepository({ orm, schema });
 export const postsRepository = new PostsRepository({ orm, schema, table: schema.posts });

package/templates/minimal-app/apps/server/src/service.ts.tpl

@@ -1,13 +1,19 @@
-import { AuthService } from "@m5kdev/backend/modules/auth/auth.service";
-import { LocalEmailService } from "./lib/localEmailService";
-import { postsGrants } from "./modules/posts/posts.grants";
-import { PostsService } from "./modules/posts/posts.service";
-import { authRepository, postsRepository } from "./repository";
+import { AuthService } from "@m5kdev/backend/modules/auth/auth.service";
+import { NotificationService } from "@m5kdev/backend/modules/notification/notification.service";
+import { LocalEmailService } from "./lib/localEmailService";
+import { postsGrants } from "./modules/posts/posts.grants";
+import { PostsService } from "./modules/posts/posts.service";
+import { authRepository, notificationRepository, postsRepository } from "./repository";
+import { workflowService } from "./workflow";
 
 export const emailService = new LocalEmailService({
   appName: "{{APP_NAME}}",
   appUrl: process.env.VITE_APP_URL ?? "http://localhost:5173",
 });
-
-export const authService = new AuthService({ auth: authRepository }, { email: emailService });
-export const postsService = new PostsService({ posts: postsRepository }, {}, postsGrants);
+
+export const authService = new AuthService({ auth: authRepository }, { email: emailService });
+export const postsService = new PostsService({ posts: postsRepository }, {}, postsGrants);
+export const notificationService = new NotificationService(
+  { notification: notificationRepository },
+  { workflow: workflowService },
+);

package/templates/minimal-app/apps/server/src/trpc.ts.tpl

@@ -1,9 +1,14 @@
+import { createNotificationTRPC } from "@m5kdev/backend/modules/notification/notification.trpc";
 import type { inferRouterInputs, inferRouterOutputs } from "@trpc/server";
+import { notificationService } from "./service";
 import { postsRouter as posts } from "./modules/posts/posts.trpc";
-import { router } from "./utils/trpc";
+import { router, trpcObject } from "./utils/trpc";
+
+const notification = createNotificationTRPC(trpcObject, notificationService);
 
 export const appRouter = router({
   posts,
+  notification,
 });
 
 export type AppRouter = typeof appRouter;

package/templates/minimal-app/apps/server/src/workflow.ts.tpl

@@ -0,0 +1,21 @@
+import { WorkflowRegistry } from "@m5kdev/backend/modules/workflow/workflow.registry";
+import { WorkflowService } from "@m5kdev/backend/modules/workflow/workflow.service";
+import IORedis from "ioredis";
+import { workflowRepository } from "./repository";
+
+const redisUrl = process.env.REDIS_URL ?? "redis://127.0.0.1:6379";
+const connection = new IORedis(redisUrl, { maxRetriesPerRequest: null });
+
+export const workflowService = new WorkflowService(workflowRepository, {
+  connection,
+  queues: {
+    fast: { concurrency: 5 },
+  },
+  defaultQueue: "fast",
+  defaults: {
+    timeout: 60_000,
+    jobOptions: { removeOnComplete: { age: 3600 } },
+  },
+});
+
+export const workflowRegistry = new WorkflowRegistry(workflowService);

package/templates/minimal-app/apps/shared/.env.example.tpl

@@ -11,6 +11,24 @@ DATABASE_URL=file:./local.db
 TURSO_DATABASE_URL=
 TURSO_AUTH_TOKEN=
 
+# Redis (BullMQ / workflow workers)
+REDIS_URL=redis://127.0.0.1:6379
+
+# Web Push (VAPID) — generate with: npx web-push generate-vapid-keys
+VAPID_PUBLIC_KEY=
+VAPID_PRIVATE_KEY=
+VAPID_SUBJECT=mailto:you@example.com
+
+# Optional: APNs (iOS) — path to AuthKey .p8
+# APNS_KEY_PATH=
+# APNS_KEY_ID=
+# APNS_TEAM_ID=
+# APNS_BUNDLE_ID=
+# APNS_PRODUCTION=false
+
+# Optional: FCM (Android) — service account JSON path
+# FIREBASE_SERVICE_ACCOUNT_PATH=
+
 # Optional email and analytics providers
 RESEND_API_KEY=
 VITE_PUBLIC_POSTHOG_KEY=demo

package/templates/minimal-app/apps/shared/src/modules/notification/notification.schema.ts.tpl

@@ -0,0 +1,3 @@
+/** Re-export shared push-notification contracts from commons. */
+export * from "@m5kdev/commons/modules/notification/notification.constants";
+export * from "@m5kdev/commons/modules/notification/notification.schema";

package/templates/minimal-app/apps/webapp/public/push-sw.js

@@ -0,0 +1,34 @@
+/* global self */
+self.addEventListener("push", (event) => {
+  let payload = { title: "Notification", body: "" };
+  try {
+    if (event.data) {
+      payload = { ...payload, ...event.data.json() };
+    }
+  } catch {
+    const text = event.data?.text();
+    if (text) payload = { title: "Notification", body: text };
+  }
+  event.waitUntil(
+    self.registration.showNotification(payload.title, {
+      body: payload.body,
+      data: payload.data ?? {},
+    }),
+  );
+});
+
+self.addEventListener("notificationclick", (event) => {
+  event.notification.close();
+  event.waitUntil(
+    self.clients.matchAll({ type: "window", includeUncontrolled: true }).then((clientList) => {
+      if (clientList.length > 0) {
+        const client = clientList[0];
+        if ("focus" in client) return client.focus();
+      }
+      if (self.clients.openWindow) {
+        return self.clients.openWindow("/");
+      }
+      return undefined;
+    }),
+  );
+});

package/templates/minimal-app/apps/webapp/src/Layout.tsx.tpl

@@ -12,6 +12,7 @@ import {
 } from "lucide-react";
 import { useTranslation } from "react-i18next";
 import { NavLink, Outlet } from "react-router";
+import { PushNotificationsPanel } from "./modules/notification/PushNotificationsPanel";
 
 export function Layout() {
   const { data: session } = useSession();
@@ -58,6 +59,8 @@ export function Layout() {
             </div>
           </div>
 
+          <PushNotificationsPanel />
+
           <nav className="mt-8 grid gap-2">
             <NavLink
               to="/posts"

package/templates/minimal-app/apps/webapp/src/modules/notification/PushNotificationsPanel.tsx.tpl

@@ -0,0 +1,93 @@
+import { Button, Chip } from "@heroui/react";
+import { useSession } from "@m5kdev/frontend/modules/auth/hooks/useSession";
+import { useWebPush } from "@m5kdev/web-ui/hooks/useWebPush";
+import { BellIcon } from "lucide-react";
+import { useMemo } from "react";
+import { useTranslation } from "react-i18next";
+import { useTRPC } from "../../utils/trpc";
+
+export function PushNotificationsPanel() {
+  const { data: session } = useSession();
+  const trpc = useTRPC();
+  const { t } = useTranslation("blog-app");
+
+  const messages = useMemo(
+    () => ({
+      unsupported: t("layout.push.unsupported"),
+      denied: t("layout.push.denied"),
+      noVapid: t("layout.push.noVapid"),
+      badSubscription: t("layout.push.badSubscription"),
+      failed: t("layout.push.failed"),
+      enabled: t("layout.push.enabled"),
+    }),
+    [t],
+  );
+
+  const {
+    permission,
+    isSupported,
+    subscribe,
+    flowStatus,
+    feedback,
+    isWorking,
+    canSubscribe,
+    vapidError,
+    isVapidLoading,
+  } = useWebPush({
+    enabled: Boolean(session),
+    messages,
+    vapidPublicKeyQuery: trpc.notification.vapidPublicKey.queryOptions(),
+    registerDeviceMutation: trpc.notification.registerDevice.mutationOptions(),
+  });
+
+  if (!session) {
+    return null;
+  }
+
+  const disabled = isVapidLoading || vapidError || isWorking || !canSubscribe;
+  const blocked = permission === "denied";
+
+  return (
+    <div className="mt-6 rounded-[28px] border border-sky-200/80 bg-sky-50/90 p-4">
+      <div className="flex items-start gap-3">
+        <div className="rounded-2xl border border-sky-200 bg-white/90 p-2 text-sky-700">
+          <BellIcon className="h-5 w-5" />
+        </div>
+        <div className="min-w-0 flex-1">
+          <p className="text-[0.68rem] font-semibold uppercase tracking-[0.28em] text-sky-800/80">
+            {t("layout.push.eyebrow")}
+          </p>
+          <p className="mt-2 text-sm leading-6 text-ink/80">{t("layout.push.body")}</p>
+          {!isSupported ? (
+            <p className="mt-2 text-xs text-rose-700">{t("layout.push.unsupported")}</p>
+          ) : null}
+          {blocked ? (
+            <p className="mt-2 text-xs text-rose-700">{t("layout.push.blockedHint")}</p>
+          ) : null}
+          {vapidError ? (
+            <p className="mt-2 text-xs text-rose-700">{t("layout.push.vapidMissing")}</p>
+          ) : null}
+          {permission === "granted" && flowStatus === "idle" && !vapidError ? (
+            <p className="mt-2 text-xs text-emerald-800/90">{t("layout.push.permissionGranted")}</p>
+          ) : null}
+          {feedback ? (
+            <Chip className="mt-3" color={flowStatus === "error" ? "danger" : "success"} variant="flat">
+              {feedback}
+            </Chip>
+          ) : null}
+          <Button
+            className="mt-3"
+            color="primary"
+            isDisabled={disabled}
+            radius="full"
+            size="sm"
+            variant="flat"
+            onPress={() => void subscribe()}
+          >
+            {t("layout.push.cta")}
+          </Button>
+        </div>
+      </div>
+    </div>
+  );
+}

package/templates/minimal-app/apps/webapp/translations/en/blog-app.json.tpl

@@ -14,6 +14,20 @@
     "navigation": {
       "posts": "Posts"
     },
+    "push": {
+      "eyebrow": "Browser push",
+      "body": "Enable notifications for this browser profile. Requires HTTPS in production, VAPID keys on the server, Redis for the worker, and a running server process.",
+      "cta": "Enable push for this device",
+      "enabled": "This browser is registered for push.",
+      "denied": "Notification permission was denied.",
+      "unsupported": "Push messaging is not supported in this browser.",
+      "noVapid": "Server is missing VAPID public key configuration.",
+      "badSubscription": "Could not read push subscription from the browser.",
+      "failed": "Could not enable push. Check the console and server logs.",
+      "vapidMissing": "Server did not return a VAPID key — set VAPID_PUBLIC_KEY and VAPID_PRIVATE_KEY, then restart.",
+      "blockedHint": "Notifications are blocked for this site. Enable them in the browser address bar or site settings, then try again.",
+      "permissionGranted": "Permission granted — tap below to register this browser with the server."
+    },
     "account": {
       "eyebrow": "Signed In As",
       "light": "Light mode",