create-m5kdev 0.40.2 → 0.41.0

package/templates/minimal-app/.cursor/rules/module-trpc-guide.mdc

@@ -1,71 +1,71 @@
----
-globs: apps/**/server/src/modules/**/*.trpc.ts
-alwaysApply: false
----
-
-# Module tRPC File Style Guide
-
-Conventions for tRPC router files in app modules. Routers are thin wiring:
-they attach the module DTO schemas and delegate to the service. The router is
-also the type source for the client — the webapp infers all row/list types
-from `AppRouter`, so accurate `.input()`/`.output()` here is what makes
-end-to-end types work.
-
-## File Location
-
-```
-apps/<app>/server/src/modules/<module>/<module>.trpc.ts
-```
-
-## Conventions
-
-- Export a factory function named `create<Module>TRPC`.
-- Import the module DTO object (`postSchemas`) from `./<module>.dto` — not
-  shared schemas, not hand-written types.
-- Use `handleTRPCResult` from `@m5kdev/backend/utils/trpc` to unwrap `Result`s.
-- Keep resolvers one-liners that delegate to the service; no business logic or
-  DB access here.
-- Always pass `ctx` to service methods as the second argument. The first
-  argument (`input`) can be `undefined` for optional-input queries.
-
-## Factory Pattern
-
-```typescript
-import { handleTRPCResult, type TRPCMethods } from "@m5kdev/backend/utils/trpc";
-import { postSchemas } from "./posts.dto";
-import type { PostsService } from "./posts.service";
-
-export function createPostsTRPC(
-  { router, privateProcedure: procedure }: TRPCMethods,
-  postsService: PostsService
-) {
-  return router({
-    list: procedure
-      .input(postSchemas.input.list)
-      .output(postSchemas.output.list)
-      .query(async ({ ctx, input }) => handleTRPCResult(await postsService.list(input ?? {}, ctx))),
-
-    create: procedure
-      .input(postSchemas.input.create)
-      .output(postSchemas.output.single)
-      .mutation(async ({ ctx, input }) => handleTRPCResult(await postsService.create(input, ctx))),
-
-    softDelete: procedure
-      .input(postSchemas.input.delete)
-      .output(postSchemas.output.uuid)
-      .mutation(async ({ ctx, input }) =>
-        handleTRPCResult(await postsService.softDelete(input, ctx))
-      ),
-  });
-}
-```
-
-## Procedure Selection
-
-- `privateProcedure` — authenticated user (most module routes).
-- `organizationProcedure` — requires an active organization.
-- `adminProcedure` — admin role.
-- `publicProcedure` — unauthenticated; use sparingly.
-
-The service's own `.requireAuth()`/`.access()` still run — the tRPC procedure
-choice is transport-level gating, not a replacement for service checks.
+---
+globs: apps/**/server/src/modules/**/*.trpc.ts
+alwaysApply: false
+---
+
+# Module tRPC File Style Guide
+
+Conventions for tRPC router files in app modules. Routers are thin wiring:
+they attach the module DTO schemas and delegate to the service. The router is
+also the type source for the client — the webapp infers all row/list types
+from `AppRouter`, so accurate `.input()`/`.output()` here is what makes
+end-to-end types work.
+
+## File Location
+
+```
+apps/<app>/server/src/modules/<module>/<module>.trpc.ts
+```
+
+## Conventions
+
+- Export a factory function named `create<Module>TRPC`.
+- Import the module DTO object (`postSchemas`) from `./<module>.dto` — not
+  shared schemas, not hand-written types.
+- Use `handleTRPCResult` from `@m5kdev/backend/utils/trpc` to unwrap `Result`s.
+- Keep resolvers one-liners that delegate to the service; no business logic or
+  DB access here.
+- Always pass `ctx` to service methods as the second argument. The first
+  argument (`input`) can be `undefined` for optional-input queries.
+
+## Factory Pattern
+
+```typescript
+import { handleTRPCResult, type TRPCMethods } from "@m5kdev/backend/utils/trpc";
+import { postSchemas } from "./posts.dto";
+import type { PostsService } from "./posts.service";
+
+export function createPostsTRPC(
+  { router, privateProcedure: procedure }: TRPCMethods,
+  postsService: PostsService
+) {
+  return router({
+    list: procedure
+      .input(postSchemas.input.list)
+      .output(postSchemas.output.list)
+      .query(async ({ ctx, input }) => handleTRPCResult(await postsService.list(input ?? {}, ctx))),
+
+    create: procedure
+      .input(postSchemas.input.create)
+      .output(postSchemas.output.single)
+      .mutation(async ({ ctx, input }) => handleTRPCResult(await postsService.create(input, ctx))),
+
+    softDelete: procedure
+      .input(postSchemas.input.delete)
+      .output(postSchemas.output.uuid)
+      .mutation(async ({ ctx, input }) =>
+        handleTRPCResult(await postsService.softDelete(input, ctx))
+      ),
+  });
+}
+```
+
+## Procedure Selection
+
+- `privateProcedure` — authenticated user (most module routes).
+- `organizationProcedure` — requires an active organization.
+- `adminProcedure` — admin role.
+- `publicProcedure` — unauthenticated; use sparingly.
+
+The service's own `.requireAuth()`/`.access()` still run — the tRPC procedure
+choice is transport-level gating, not a replacement for service checks.

package/templates/minimal-app/apps/.gitignore.tpl

@@ -1,13 +1,13 @@
-# runtime artifacts
-server/local.db*
-server/.e2e/
-server/.emails/
-server/uploads/
-
-# e2e output
-e2e/test-results/
-e2e/playwright-report/
-
-# expo
-expo/.expo/
-expo/dist/
+# runtime artifacts
+server/local.db*
+server/.e2e/
+server/.emails/
+server/uploads/
+
+# e2e output
+e2e/test-results/
+e2e/playwright-report/
+
+# expo
+expo/.expo/
+expo/dist/

package/templates/minimal-app/apps/e2e/package.json.tpl

@@ -1,23 +1,23 @@
-{
-  "name": "{{PACKAGE_SCOPE}}/e2e",
-  "version": "0.0.0",
-  "private": true,
-  "scripts": {
-    "build": "tsc --noEmit",
-    "lint": "biome check .",
-    "lint:fix": "biome check . --write",
-    "check-types": "tsc --noEmit",
-    "test:e2e": "playwright test",
-    "test:e2e:expo": "playwright test --config playwright.expo.config.ts --headed"
-  },
-  "devDependencies": {
-    "@m5kdev/backend": "catalog:m5kdev",
-    "@m5kdev/commons": "catalog:m5kdev",
-    "@m5kdev/config": "catalog:m5kdev",
-    "@playwright/test": "catalog:m5kdev",
-    "{{PACKAGE_SCOPE}}/shared": "workspace:*",
-    "@trpc/client": "catalog:m5kdev",
-    "@types/node": "catalog:m5kdev",
-    "typescript": "catalog:m5kdev"
-  }
-}
+{
+  "name": "{{PACKAGE_SCOPE}}/e2e",
+  "version": "0.0.0",
+  "private": true,
+  "scripts": {
+    "build": "tsc --noEmit",
+    "lint": "biome check .",
+    "lint:fix": "biome check . --write",
+    "check-types": "tsc --noEmit",
+    "test:e2e": "playwright test",
+    "test:e2e:expo": "playwright test --config playwright.expo.config.ts --headed"
+  },
+  "devDependencies": {
+    "@m5kdev/backend": "catalog:m5kdev",
+    "@m5kdev/commons": "catalog:m5kdev",
+    "@m5kdev/config": "catalog:m5kdev",
+    "@playwright/test": "catalog:m5kdev",
+    "{{PACKAGE_SCOPE}}/shared": "workspace:*",
+    "@trpc/client": "catalog:m5kdev",
+    "@types/node": "catalog:m5kdev",
+    "typescript": "catalog:m5kdev"
+  }
+}

package/templates/minimal-app/apps/e2e/tests/standard.spec.ts.tpl

@@ -58,7 +58,7 @@ async function saveMemberEdit(page: Page, row: Locator, changes: { name?: string
     await dialog.getByLabel(/^name$/i).fill(changes.name);
   }
   if (changes.role !== undefined) {
-    await dialog.getByRole("button", { name: /^role$/i }).click();
+    await dialog.getByRole("button", { name: /role/i }).click();
     await page.getByRole("option", { name: new RegExp(`^${changes.role}$`) }).click();
   }
 
@@ -211,7 +211,10 @@ test("duplicate signup with an existing email is rejected", async ({ page, reque
   expect(
     response.ok(),
     `${response.status()} ${response.statusText()}: ${await response.text()}`
-  ).toBe(false);
+  ).toBe(true);
+  expect(await response.json()).toMatchObject({ token: null });
+  const state = await getUserState(request, profile, email);
+  expect(state.user.emailVerified).toBe(true);
 });
 
 test("organization invite email lets a new user join without creating a separate org", async ({
@@ -357,7 +360,7 @@ test("organization members page lets an admin edit a member name", async ({ page
   expect(afterName?.id).toBe(invitedMemberId);
   expect(afterName?.name).toBe("Kitchen lead");
   expect(afterName?.userId).toBeNull();
-  await expect(invitedRow.getByRole("cell").first()).toHaveText("Kitchen lead");
+  await expect(page.getByRole("row").filter({ hasText: "Kitchen lead" })).toBeVisible();
 });
 
 test("organization members page resends, updates, cancels, and revives an invited seat", async ({
@@ -491,9 +494,11 @@ test("admin creates, bans, unbans, and authenticates a user", async ({ page, req
   await dialog.getByPlaceholder(/enter user's email/i).fill(email);
   await dialog.getByPlaceholder(/enter password/i).fill(password);
   await dialog.getByRole("button", { name: /^create user$/i }).click();
+  await expect(dialog).toBeHidden();
 
+  await page.locator('input[name="search"]').fill(email);
   const createdRow = page.getByRole("row").filter({ hasText: email });
-  await expect(createdRow).toBeVisible();
+  await expect(createdRow).toBeVisible({ timeout: 10_000 });
   await expect(createdRow.getByText(/^verified$/i)).toBeVisible();
   await createdRow.getByLabel("User actions").click();
   await page.getByRole("menuitem", { name: /^ban$/i }).click();
@@ -529,21 +534,6 @@ test("admin creates, bans, unbans, and authenticates a user", async ({ page, req
     .toBe("admin");
 
   await logout(page);
-  const verificationResponse = await request.post(
-    `${profiles.standard.serverUrl}/api/auth/send-verification-email`,
-    {
-      data: {
-        email,
-        callbackURL: `${profiles.standard.webUrl}/login`,
-      },
-    }
-  );
-  expect(verificationResponse.ok()).toBe(true);
-  const verification = await latestEmail(request, profile, {
-    to: email,
-    templateId: "verification",
-  });
-  await request.get(emailUrl(verification));
   await login(page, email, password);
   const adminListResponse = await authFetch(page, profile, "/api/auth/admin/list-users");
   expect(
@@ -561,6 +551,7 @@ test("admin verifies email, changes user role, and sets password from users list
   const newPassword = "password5678";
 
   await signUp(page, email, password);
+  await expect(page.getByText(/verification email sent/i)).toBeVisible();
   const before = await getUserState(request, profile, email);
   expect(before.user.emailVerified).toBe(false);
   expect(before.user.role).toBe("user");
@@ -603,9 +594,7 @@ test("admin verifies email, changes user role, and sets password from users list
   await page.locator('input[name="search"]').fill(profiles.standard.adminEmail);
   const adminRow = page.getByRole("row").filter({ hasText: profiles.standard.adminEmail });
   await expect(adminRow).toBeVisible();
-  await expect(
-    adminRow.getByRole("button", { name: `Role for ${profiles.standard.adminEmail}` })
-  ).toBeDisabled();
+  await expect(adminRow.locator('[data-slot="select-trigger"]')).toBeDisabled();
 
   await logout(page);
   await login(page, email, newPassword);

package/templates/minimal-app/apps/email/package.json.tpl

@@ -1,34 +1,34 @@
-{
-  "name": "{{PACKAGE_SCOPE}}/email",
-  "version": "0.0.0",
-  "private": true,
-  "scripts": {
-    "build": "tsc --noEmit",
-    "lint": "biome check .",
-    "lint:fix": "biome check . --write",
-    "check-types": "tsc --noEmit",
-    "email:dev": "react-email dev --dir src/emails"
-  },
-  "dependencies": {
-    "@m5kdev/commons": "catalog:m5kdev",
-    "@m5kdev/email": "catalog:m5kdev",
-    "@react-email/components": "catalog:m5kdev",
-    "react": "catalog:m5kdev",
-    "react-dom": "catalog:m5kdev"
-  },
-  "devDependencies": {
-    "@m5kdev/backend": "catalog:m5kdev",
-    "@m5kdev/config": "catalog:m5kdev",
-    "@types/node": "catalog:m5kdev",
-    "@types/react": "catalog:m5kdev",
-    "@types/react-dom": "catalog:m5kdev",
-    "react-email": "catalog:m5kdev",
-    "tslib": "catalog:m5kdev",
-    "typescript": "catalog:m5kdev"
-  },
-  "main": "./src/index.ts",
-  "exports": {
-    ".": "./src/index.ts",
-    "./resources": "./src/resources.ts"
-  }
-}
+{
+  "name": "{{PACKAGE_SCOPE}}/email",
+  "version": "0.0.0",
+  "private": true,
+  "scripts": {
+    "build": "tsc --noEmit",
+    "lint": "biome check .",
+    "lint:fix": "biome check . --write",
+    "check-types": "tsc --noEmit",
+    "email:dev": "react-email dev --dir src/emails"
+  },
+  "dependencies": {
+    "@m5kdev/commons": "catalog:m5kdev",
+    "@m5kdev/email": "catalog:m5kdev",
+    "@react-email/components": "catalog:m5kdev",
+    "react": "catalog:m5kdev",
+    "react-dom": "catalog:m5kdev"
+  },
+  "devDependencies": {
+    "@m5kdev/backend": "catalog:m5kdev",
+    "@m5kdev/config": "catalog:m5kdev",
+    "@types/node": "catalog:m5kdev",
+    "@types/react": "catalog:m5kdev",
+    "@types/react-dom": "catalog:m5kdev",
+    "react-email": "catalog:m5kdev",
+    "tslib": "catalog:m5kdev",
+    "typescript": "catalog:m5kdev"
+  },
+  "main": "./src/index.ts",
+  "exports": {
+    ".": "./src/index.ts",
+    "./resources": "./src/resources.ts"
+  }
+}

package/templates/minimal-app/apps/expo/.gitignore.tpl

@@ -1,44 +1,44 @@
-# Learn more https://docs.github.com/en/get-started/getting-started-with-git/ignoring-files
-
-# Dependencies
-node_modules/
-
-# Expo
-.expo/
-dist/
-web-build/
-expo-env.d.ts
-
-# Uniwind (generated on first `expo start`)
-uniwind-types.d.ts
-
-# Native
-.kotlin/
-*.orig.*
-*.jks
-*.p8
-*.p12
-*.key
-*.mobileprovision
-
-# Metro
-.metro-health-check*
-
-# Debug
-npm-debug.*
-yarn-debug.*
-yarn-error.*
-
-# macOS
-.DS_Store
-*.pem
-
-# Local env files
-.env*.local
-
-# TypeScript
-*.tsbuildinfo
-
-# Generated native folders
-/ios
-/android
+# Learn more https://docs.github.com/en/get-started/getting-started-with-git/ignoring-files
+
+# Dependencies
+node_modules/
+
+# Expo
+.expo/
+dist/
+web-build/
+expo-env.d.ts
+
+# Uniwind (generated on first `expo start`)
+uniwind-types.d.ts
+
+# Native
+.kotlin/
+*.orig.*
+*.jks
+*.p8
+*.p12
+*.key
+*.mobileprovision
+
+# Metro
+.metro-health-check*
+
+# Debug
+npm-debug.*
+yarn-debug.*
+yarn-error.*
+
+# macOS
+.DS_Store
+*.pem
+
+# Local env files
+.env*.local
+
+# TypeScript
+*.tsbuildinfo
+
+# Generated native folders
+/ios
+/android

package/templates/minimal-app/apps/expo/.prettierignore

@@ -1,13 +1,13 @@
-node_modules
-.expo
-dist
-ios
-android
-*.lock
-pnpm-lock.yaml
-yarn.lock
-package-lock.json
-bun.lockb
-expo-env.d.ts
-uniwind-types.d.ts
-.DS_Store
+node_modules
+.expo
+dist
+ios
+android
+*.lock
+pnpm-lock.yaml
+yarn.lock
+package-lock.json
+bun.lockb
+expo-env.d.ts
+uniwind-types.d.ts
+.DS_Store

package/templates/minimal-app/apps/expo/.prettierrc.json.tpl

@@ -1,9 +1,9 @@
-{
-  "semi": true,
-  "singleQuote": false,
-  "trailingComma": "es5",
-  "printWidth": 100,
-  "tabWidth": 2,
-  "arrowParens": "always",
-  "endOfLine": "lf"
-}
+{
+  "semi": true,
+  "singleQuote": false,
+  "trailingComma": "es5",
+  "printWidth": 100,
+  "tabWidth": 2,
+  "arrowParens": "always",
+  "endOfLine": "lf"
+}