create-newt-app 0.35.0 → 0.35.2

package/dist/index.js

@@ -11,7 +11,7 @@ import { existsSync, promises } from "fs";
 import path from "path";
 import https from "node:https";
 //#region package.json
-var version = "0.35.0";
+var version = "0.35.2";
 var engines = { "node": ">=24.0.0" };
 //#endregion
 //#region src/templates/root/index.ts
@@ -177,6 +177,21 @@ pnpm dev
 \`\`\`
 
 Open [http://localhost:3000](http://localhost:3000).
+<% if (deployment === 'spa') { -%>
+
+## Production build
+
+NestJS serves the static export and the API from one origin, so point \`BETTER_AUTH_URL\` at it:
+
+\`\`\`sh
+pnpm db:migrate
+pnpm build
+cd apps/api
+BETTER_AUTH_URL=http://localhost:3001 pnpm start:prod
+\`\`\`
+
+Open [http://localhost:3001](http://localhost:3001). In a real deployment, set \`BETTER_AUTH_URL\` to the public URL.
+<% } -%>
 
 ## Apps
 
@@ -224,7 +239,18 @@ BETTER_AUTH_SECRET=generate-with-openssl-rand-base64-32
 # This is NOT the Next.js you know
 
 This version has breaking changes — APIs, conventions, and file structure may all differ from your training data. Read the relevant guide in \`node_modules/next/dist/docs/\` before writing any code. Heed deprecation notices.
-<!-- END:nextjs-agent-rules --><% if (shadcn) { %>
+<!-- END:nextjs-agent-rules -->
+
+<!-- BEGIN:turborepo-agent-rules -->
+
+# This is NOT the Turborepo you know
+
+Turborepo configuration, task behavior, and CLI commands can vary between installed versions and may differ from your training data. Resolve the \`turbo\` package from this file's directory or relevant workspace; in monorepos, it may not be visible from the repository root. For example, run \`node -p "require.resolve('turbo/package.json')"\` from a workspace that depends on \`turbo\`.
+
+Read \`docs/README.md\` inside that installed package first, then read the relevant pages from its \`docs/\` directory before changing Turborepo configuration or commands. Heed deprecation notices. These bundled docs match the installed package version and are available without network access.
+
+This block is written and re-added by \`turbo\` before repository-scoped commands when an AI agent is detected. In the Turborepo source repository, its template is defined in \`crates/turborepo-cli/src/cli/agent_guidance.rs\`. Removing the managed block while updates are enabled means a later qualifying invocation will add it again. Set \`"agentGuidance": false\` in the root \`turbo.json\` or \`turbo.jsonc\` to opt out; this does not remove an existing block. Keep the block committed with your work to avoid an uncommitted change on the next agent invocation.
+<!-- END:turborepo-agent-rules --><% if (shadcn) { %>
 
 After making changes, run \`pnpm lint:check\` and fix all errors.<% } %>`
 	},
@@ -910,6 +936,7 @@ const auth = { templates: [
   "name": "@<%= projectName %>/auth",
   "version": "0.0.0",
   "private": true,
+  "type": "module",
   "exports": {
     ".": "./src/index.ts"
   },
@@ -1011,7 +1038,6 @@ export interface SessionTable {
 
 export interface AccountTable {
   id: string;
-  issuer: string;
   accountId: string;
   providerId: string;
   userId: string;
@@ -1228,7 +1254,9 @@ export const db = new Kysely<DB>({
   dialect: new SqliteDialect({ database: driver }),
 });
 
-export type Database = Kysely<DB>;`
+export type Database = Kysely<DB>;
+
+export type * from "./schema.js";`
 };
 //#endregion
 //#region src/templates/db/templates/src-index-postgres.ts
@@ -1244,7 +1272,9 @@ export const db = new Kysely<DB>({
   dialect: new PostgresDialect({ pool: driver }),
 });
 
-export type Database = Kysely<DB>;`
+export type Database = Kysely<DB>;
+
+export type * from "./schema.js";`
 };
 //#endregion
 //#region src/templates/db/index.ts
@@ -1569,7 +1599,8 @@ const versions = {
 	typescript: "6.0.2",
 	"typescript-eslint": "^8.50.0",
 	"unplugin-swc": "^1.5.9",
-	vitest: "^4.1.10"
+	vitest: "^4.1.10",
+	zod: "^4.6.5"
 };
 //#endregion
 //#region src/templates/shadcn-ui/index.ts
@@ -12273,12 +12304,14 @@ import { resolve } from 'path';
 dotenv.config({ path: resolve(process.cwd(), '../../.env') });
 dotenv.config({ path: resolve(process.cwd(), '.env') });
 
+import { StandardSchemaValidationPipe } from '@nestjs/common';
 import { NestFactory } from '@nestjs/core';
 import { AppModule } from './app.module';
 
 async function bootstrap() {
   const app = await NestFactory.create(AppModule, { bodyParser: false });
   app.setGlobalPrefix('api');
+  app.useGlobalPipes(new StandardSchemaValidationPipe());
   app.enableCors({
     origin: process.env.CORS_ORIGIN ?? 'http://localhost:3000',
     credentials: true,
@@ -12308,14 +12341,7 @@ var todos_service_default = {
 	filename: "apps/api/src/todos/todos.service.ts",
 	template: `import { Injectable, NotFoundException } from '@nestjs/common';
 import { randomUUID } from 'node:crypto';
-import { db } from '@<%= projectName %>/db';
-
-export interface Todo {
-  id: string;
-  title: string;
-  done: boolean;
-  createdAt: string;
-}
+import { db, type Todo } from '@<%= projectName %>/db';
 
 const columns = ['id', 'title', 'done', 'createdAt'] as const;
 
@@ -12414,6 +12440,15 @@ export interface TodoTable {
   createdAt: Generated<string>;
 }
 
+// Wire shape of a todo: what the api serves and the web app consumes.
+// The service converts table rows (raw sqlite values) into this.
+export interface Todo {
+  id: string;
+  title: string;
+  done: boolean;
+  createdAt: string;
+}
+
 export interface UserTable {
   id: string;
   name: string;
@@ -12437,7 +12472,6 @@ export interface SessionTable {
 
 export interface AccountTable {
   id: string;
-  issuer: string;
   accountId: string;
   providerId: string;
   userId: string;
@@ -12507,6 +12541,7 @@ var todos_controller_default = {
 } from '@nestjs/common';
 import { Session } from '@thallesp/nestjs-better-auth';
 import type { UserSession } from '@thallesp/nestjs-better-auth';
+import { z } from 'zod';
 import { TodosService } from './todos.service';
 
 @Controller('todos')
@@ -12519,7 +12554,10 @@ export class TodosController {
   }
 
   @Post()
-  create(@Session() session: UserSession, @Body('title') title: string) {
+  create(
+    @Session() session: UserSession,
+    @Body('title', { schema: z.string().trim().min(1) }) title: string,
+  ) {
     return this.todosService.create(session.user.id, title);
   }
 
@@ -12601,7 +12639,7 @@ var api_index_default = {
 	template: `export { AppModule } from './app.module';
 export { AppService } from './app.service';
 export { TodosService } from './todos/todos.service';
-export type { Todo } from './todos/todos.service';`
+export type { Todo } from '@<%= projectName %>/db';`
 };
 //#endregion
 //#region src/templates/todo-example/templates/web-todos-route.ts
@@ -12635,6 +12673,7 @@ export async function POST(req: Request) {
 var web_todos_id_route_default = {
 	filename: "apps/web/app/api/todos/[id]/route.ts",
 	template: `import { NextResponse } from 'next/server';
+import { HttpException } from '@nestjs/common';
 import { headers } from 'next/headers';
 import { inject } from '@/lib/nest';
 import { auth } from '@<%= projectName %>/auth';
@@ -12645,8 +12684,15 @@ export async function DELETE(_req: Request, { params }: { params: Promise<{ id:
   if (!session) return new NextResponse('Unauthorized', { status: 401 });
   const { id } = await params;
   const todos = await inject(TodosService);
-  await todos.remove(session.user.id, id);
-  return new NextResponse(null, { status: 204 });
+  try {
+    await todos.remove(session.user.id, id);
+    return new NextResponse(null, { status: 204 });
+  } catch (err) {
+    if (err instanceof HttpException) {
+      return NextResponse.json(err.getResponse(), { status: err.getStatus() });
+    }
+    throw err;
+  }
 }`
 };
 //#endregion
@@ -12654,6 +12700,7 @@ export async function DELETE(_req: Request, { params }: { params: Promise<{ id:
 var web_todos_toggle_route_default = {
 	filename: "apps/web/app/api/todos/[id]/toggle/route.ts",
 	template: `import { NextResponse } from 'next/server';
+import { HttpException } from '@nestjs/common';
 import { headers } from 'next/headers';
 import { inject } from '@/lib/nest';
 import { auth } from '@<%= projectName %>/auth';
@@ -12664,7 +12711,14 @@ export async function PATCH(_req: Request, { params }: { params: Promise<{ id: s
   if (!session) return new NextResponse('Unauthorized', { status: 401 });
   const { id } = await params;
   const todos = await inject(TodosService);
-  return NextResponse.json(await todos.toggle(session.user.id, id));
+  try {
+    return NextResponse.json(await todos.toggle(session.user.id, id));
+  } catch (err) {
+    if (err instanceof HttpException) {
+      return NextResponse.json(err.getResponse(), { status: err.getStatus() });
+    }
+    throw err;
+  }
 }`
 };
 //#endregion
@@ -12677,25 +12731,28 @@ import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
 import { useForm } from '@tanstack/react-form';
 import { authClient } from '@/lib/auth-client';
 import { Button } from '@<%= projectName %>/ui/button';
+import type { Todo } from '@<%= projectName %>/db';
 
-interface Todo {
-  id: string;
-  title: string;
-  done: boolean;
+async function request<T>(url: string, init?: RequestInit): Promise<T> {
+  const res = await fetch(url, init);
+  if (!res.ok) throw new Error('Request failed with status ' + res.status);
+  const text = await res.text();
+  // SAFETY: T is the response shape the api wrapper promises for each
+  // endpoint, and every success path returns a JSON body.
+  return (text ? JSON.parse(text) : undefined) as T;
 }
 
 const api = {
-  getTodos: (): Promise<Todo[]> => fetch('/api/todos').then((r) => r.json()),
-  createTodo: (title: string): Promise<Todo> =>
-    fetch('/api/todos', {
+  getTodos: () => request<Todo[]>('/api/todos'),
+  createTodo: (title: string) =>
+    request<Todo>('/api/todos', {
       method: 'POST',
       headers: { 'Content-Type': 'application/json' },
       body: JSON.stringify({ title }),
-    }).then((r) => r.json()),
-  toggleTodo: (id: string): Promise<Todo> =>
-    fetch(\`/api/todos/\${id}/toggle\`, { method: 'PATCH' }).then((r) => r.json()),
-  deleteTodo: (id: string): Promise<void> =>
-    fetch(\`/api/todos/\${id}\`, { method: 'DELETE' }).then(() => undefined),
+    }),
+  toggleTodo: (id: string) =>
+    request<Todo>(\`/api/todos/\${id}/toggle\`, { method: 'PATCH' }),
+  deleteTodo: (id: string) => request<void>(\`/api/todos/\${id}\`, { method: 'DELETE' }),
 };
 
 export function TodoList({
@@ -12705,7 +12762,7 @@ export function TodoList({
 }) {
   const queryClient = useQueryClient();
 
-  const { data: todos = [], isPending } = useQuery({
+  const { data: todos = [], isPending, isError } = useQuery({
     queryKey: ['todos'],
     queryFn: api.getTodos,
   });
@@ -12776,8 +12833,14 @@ export function TodoList({
         </form.Subscribe>
       </form>
 
+      {(createMutation.isError || toggleMutation.isError || deleteMutation.isError) && (
+        <p className="text-sm text-red-400 mb-4">Something went wrong. Try again.</p>
+      )}
+
       {isPending ? (
         <p className="text-sm text-muted-foreground">Loading…</p>
+      ) : isError ? (
+        <p className="text-sm text-red-400">Couldn&apos;t load todos.</p>
       ) : (
         <ul className="divide-y divide-neutral-700">
           {todos.map((todo) => (
@@ -12907,25 +12970,29 @@ import { authClient } from '@/lib/auth-client';
 import { Button } from '@<%= projectName %>/ui/button';
 import { Input } from '@<%= projectName %>/ui/input';
 import { Checkbox } from '@<%= projectName %>/ui/checkbox';
+import { toast } from 'sonner';
+import type { Todo } from '@<%= projectName %>/db';
 
-interface Todo {
-  id: string;
-  title: string;
-  done: boolean;
+async function request<T>(url: string, init?: RequestInit): Promise<T> {
+  const res = await fetch(url, init);
+  if (!res.ok) throw new Error('Request failed with status ' + res.status);
+  const text = await res.text();
+  // SAFETY: T is the response shape the api wrapper promises for each
+  // endpoint, and every success path returns a JSON body.
+  return (text ? JSON.parse(text) : undefined) as T;
 }
 
 const api = {
-  getTodos: (): Promise<Todo[]> => fetch('/api/todos').then((r) => r.json()),
-  createTodo: (title: string): Promise<Todo> =>
-    fetch('/api/todos', {
+  getTodos: () => request<Todo[]>('/api/todos'),
+  createTodo: (title: string) =>
+    request<Todo>('/api/todos', {
       method: 'POST',
       headers: { 'Content-Type': 'application/json' },
       body: JSON.stringify({ title }),
-    }).then((r) => r.json()),
-  toggleTodo: (id: string): Promise<Todo> =>
-    fetch(\`/api/todos/\${id}/toggle\`, { method: 'PATCH' }).then((r) => r.json()),
-  deleteTodo: (id: string): Promise<void> =>
-    fetch(\`/api/todos/\${id}\`, { method: 'DELETE' }).then(() => undefined),
+    }),
+  toggleTodo: (id: string) =>
+    request<Todo>(\`/api/todos/\${id}/toggle\`, { method: 'PATCH' }),
+  deleteTodo: (id: string) => request<void>(\`/api/todos/\${id}\`, { method: 'DELETE' }),
 };
 
 export function TodoList({
@@ -12935,7 +13002,7 @@ export function TodoList({
 }) {
   const queryClient = useQueryClient();
 
-  const { data: todos = [], isPending } = useQuery({
+  const { data: todos = [], isPending, isError } = useQuery({
     queryKey: ['todos'],
     queryFn: api.getTodos,
   });
@@ -12943,16 +13010,19 @@ export function TodoList({
   const createMutation = useMutation({
     mutationFn: api.createTodo,
     onSuccess: () => queryClient.invalidateQueries({ queryKey: ['todos'] }),
+    onError: () => toast.error("Couldn't add todo"),
   });
 
   const toggleMutation = useMutation({
     mutationFn: api.toggleTodo,
     onSuccess: () => queryClient.invalidateQueries({ queryKey: ['todos'] }),
+    onError: () => toast.error("Couldn't update todo"),
   });
 
   const deleteMutation = useMutation({
     mutationFn: api.deleteTodo,
     onSuccess: () => queryClient.invalidateQueries({ queryKey: ['todos'] }),
+    onError: () => toast.error("Couldn't delete todo"),
   });
 
   const form = useForm({
@@ -13009,6 +13079,8 @@ export function TodoList({
 
       {isPending ? (
         <p className="text-sm text-muted-foreground">Loading…</p>
+      ) : isError ? (
+        <p className="text-sm text-destructive">Couldn&apos;t load todos.</p>
       ) : (
         <ul className="divide-y divide-border">
           {todos.map((todo) => (
@@ -13161,25 +13233,28 @@ import * as stylex from '@stylexjs/stylex';
 import { authClient } from '@/lib/auth-client';
 import { Button } from '@<%= projectName %>/ui/button';
 import { colors, radii } from '@<%= projectName %>/ui/tokens.stylex';
+import type { Todo } from '@<%= projectName %>/db';
 
-interface Todo {
-  id: string;
-  title: string;
-  done: boolean;
+async function request<T>(url: string, init?: RequestInit): Promise<T> {
+  const res = await fetch(url, init);
+  if (!res.ok) throw new Error('Request failed with status ' + res.status);
+  const text = await res.text();
+  // SAFETY: T is the response shape the api wrapper promises for each
+  // endpoint, and every success path returns a JSON body.
+  return (text ? JSON.parse(text) : undefined) as T;
 }
 
 const api = {
-  getTodos: (): Promise<Todo[]> => fetch('/api/todos').then((r) => r.json()),
-  createTodo: (title: string): Promise<Todo> =>
-    fetch('/api/todos', {
+  getTodos: () => request<Todo[]>('/api/todos'),
+  createTodo: (title: string) =>
+    request<Todo>('/api/todos', {
       method: 'POST',
       headers: { 'Content-Type': 'application/json' },
       body: JSON.stringify({ title }),
-    }).then((r) => r.json()),
-  toggleTodo: (id: string): Promise<Todo> =>
-    fetch(\`/api/todos/\${id}/toggle\`, { method: 'PATCH' }).then((r) => r.json()),
-  deleteTodo: (id: string): Promise<void> =>
-    fetch(\`/api/todos/\${id}\`, { method: 'DELETE' }).then(() => undefined),
+    }),
+  toggleTodo: (id: string) =>
+    request<Todo>(\`/api/todos/\${id}/toggle\`, { method: 'PATCH' }),
+  deleteTodo: (id: string) => request<void>(\`/api/todos/\${id}\`, { method: 'DELETE' }),
 };
 
 export function TodoList({
@@ -13189,7 +13264,7 @@ export function TodoList({
 }) {
   const queryClient = useQueryClient();
 
-  const { data: todos = [], isPending } = useQuery({
+  const { data: todos = [], isPending, isError } = useQuery({
     queryKey: ['todos'],
     queryFn: api.getTodos,
   });
@@ -13260,8 +13335,14 @@ export function TodoList({
         </form.Subscribe>
       </form>
 
+      {(createMutation.isError || toggleMutation.isError || deleteMutation.isError) && (
+        <p {...stylex.props(styles.error)}>Something went wrong. Try again.</p>
+      )}
+
       {isPending ? (
         <p {...stylex.props(styles.muted)}>Loading…</p>
+      ) : isError ? (
+        <p {...stylex.props(styles.error)}>Couldn&apos;t load todos.</p>
       ) : (
         <ul {...stylex.props(styles.list)}>
           {todos.map((todo) => (
@@ -13386,6 +13467,11 @@ const styles = stylex.create({
     fontSize: '0.875rem',
     color: colors.mutedForeground,
   },
+  error: {
+    fontSize: '0.875rem',
+    color: colors.danger,
+    marginBottom: '1rem',
+  },
 });
 `
 };
@@ -13576,11 +13662,18 @@ const todoExampleApi = { templates: [
 	db_schema_default,
 	db_migration_todos_default
 ] };
-const todoExampleControllers = { templates: [
-	todos_controller_default,
-	todos_module_controllers_default,
-	app_module_controllers_default
-] };
+const todoExampleControllers = {
+	templates: [
+		todos_controller_default,
+		todos_module_controllers_default,
+		app_module_controllers_default
+	],
+	packages: [{
+		package: "zod",
+		module: "apps/api",
+		version: versions.zod
+	}]
+};
 const todoExampleDi = { templates: [
 	web_todos_route_default,
 	web_todos_id_route_default,
@@ -13588,9 +13681,23 @@ const todoExampleDi = { templates: [
 	app_module_di_default,
 	api_index_default
 ] };
-const todoExampleWeb = { templates: [web_todo_list_default, web_page_default] };
-const todoExampleShadcn = { templates: [shadcn_todo_list_default, shadcn_page_default] };
-const todoExampleStylex = { templates: [stylex_todo_list_default, stylex_page_default] };
+const webDbPackage = {
+	package: "@<%= projectName %>/db",
+	module: "apps/web",
+	version: "workspace:*"
+};
+const todoExampleWeb = {
+	templates: [web_todo_list_default, web_page_default],
+	packages: [webDbPackage]
+};
+const todoExampleShadcn = {
+	templates: [shadcn_todo_list_default, shadcn_page_default],
+	packages: [webDbPackage]
+};
+const todoExampleStylex = {
+	templates: [stylex_todo_list_default, stylex_page_default],
+	packages: [webDbPackage]
+};
 //#endregion
 //#region src/templates/index.ts
 const staticDir = new URL("./static/", import.meta.url);
@@ -13790,7 +13897,7 @@ function validateNodeVersion(current, requirement) {
 	};
 }
 function normalizeProjectName(projectName) {
-	return projectName.trim().toLowerCase().replace(/\s+/g, "-").replace(/[^a-z0-9\-._~]/g, "-").replace(/-+/g, "-").replace(/^[-._]+/, "").replace(/-+$/, "").slice(0, 214);
+	return projectName.trim().normalize("NFKD").replace(/[\u0300-\u036f]/g, "").toLowerCase().replace(/\s+/g, "-").replace(/[^a-z0-9\-._~]/g, "-").replace(/-+/g, "-").replace(/^[-._]+/, "").replace(/-+$/, "").slice(0, 214);
 }
 function validateProjectName(projectName) {
 	if (!projectName) return {
@@ -14165,12 +14272,16 @@ async function doInit(options) {
 		});
 		await p.tasks(taskBuilder.tasks);
 		p.outro(`Done!`);
+		if (name !== rawName) {
+			console.log(`Note: the project directory is "${name}", not "${rawName}".`);
+			console.log();
+		}
 		console.log("Next steps:");
 		console.log();
 		console.log(chalk.blue(`  cd ${name}`));
 		if (!options.install) {
 			console.log(chalk.blue(`  pnpm install`));
-			console.log(chalk.blue(`  pnpm format`));
+			console.log(chalk.blue(`  pnpm format:fix`));
 		}
 		if (!committed) console.log(chalk.blue(`  git commit -m "Initial commit"`));
 		console.log(chalk.blue(`  pnpm dev`));