create-nextdevtpl 2.6.0

package/template/src/lib/rate-limit/index.ts

@@ -0,0 +1,111 @@
+import type { NextRequest } from "next/server";
+
+import type { RateLimitDecision } from "@/core/services";
+import { rateLimitService } from "@/services/rate-limit";
+
+export const RateLimitConfig = {
+  global: { requests: 100, window: "1m" as const },
+  auth: { requests: 5, window: "1m" as const },
+  ai: { requests: 20, window: "1m" as const },
+  payment: { requests: 10, window: "1m" as const },
+  upload: { requests: 30, window: "1m" as const },
+  strict: { requests: 3, window: "1m" as const },
+} as const;
+
+export type RateLimitType = keyof typeof RateLimitConfig;
+export type RateLimitResult = RateLimitDecision;
+
+export function isRateLimitEnabled(): boolean {
+  return rateLimitService.provider !== "noop";
+}
+
+export async function checkRateLimit(
+  identifier: string,
+  type: RateLimitType = "global"
+): Promise<RateLimitResult> {
+  const config = RateLimitConfig[type];
+  return rateLimitService.limit({
+    identifier,
+    namespace: type,
+    limit: config.requests,
+    window: config.window,
+  });
+}
+
+export function getClientIp(request: NextRequest): string {
+  const forwardedFor = request.headers.get("x-forwarded-for");
+  if (forwardedFor) {
+    return forwardedFor.split(",")[0]?.trim() ?? "unknown";
+  }
+  return (
+    request.headers.get("x-real-ip") ??
+    request.headers.get("cf-connecting-ip") ??
+    "unknown"
+  );
+}
+
+export function getRateLimitHeaders(result: RateLimitResult): HeadersInit {
+  if (result.skipped) {
+    return {};
+  }
+
+  return {
+    ...(result.limit === null
+      ? {}
+      : { "X-RateLimit-Limit": String(result.limit) }),
+    ...(result.remaining === null
+      ? {}
+      : { "X-RateLimit-Remaining": String(result.remaining) }),
+    ...(result.reset === null
+      ? {}
+      : { "X-RateLimit-Reset": String(result.reset) }),
+  };
+}
+
+export function createRateLimitResponse(result: RateLimitResult): Response {
+  const retryAfter =
+    result.reset === null
+      ? 60
+      : Math.max(1, Math.ceil((result.reset - Date.now()) / 1000));
+
+  return new Response(
+    JSON.stringify({
+      error: "Too Many Requests",
+      message: "请求过于频繁，请稍后再试",
+      retryAfter,
+    }),
+    {
+      status: 429,
+      headers: {
+        "Content-Type": "application/json",
+        "Retry-After": String(retryAfter),
+        ...getRateLimitHeaders(result),
+      },
+    }
+  );
+}
+
+export interface WithRateLimitOptions {
+  type?: RateLimitType;
+  getIdentifier?: (request: NextRequest) => string | Promise<string>;
+}
+
+export async function withRateLimit<T extends Response>(
+  request: NextRequest,
+  options: WithRateLimitOptions,
+  handler: () => Promise<T>
+): Promise<T | Response> {
+  const { type = "global", getIdentifier = getClientIp } = options;
+  const result = await checkRateLimit(await getIdentifier(request), type);
+
+  if (!result.success) {
+    return createRateLimitResponse(result);
+  }
+
+  const response = await handler();
+  const headers = getRateLimitHeaders(result);
+  for (const [key, value] of Object.entries(headers)) {
+    response.headers.set(key, value);
+  }
+  return response;
+}

package/template/src/lib/safe-action.ts

@@ -0,0 +1,127 @@
+import { headers } from "next/headers";
+import { redirect } from "next/navigation";
+import { createSafeActionClient } from "next-safe-action";
+import { z } from "zod";
+
+import { auth } from "@/lib/auth/index";
+import { logError, logger } from "@/lib/logger";
+import { captureError } from "@/lib/monitoring";
+
+const actionMetadataSchema = z
+  .object({
+    action: z.string().min(1),
+  })
+  .optional();
+
+/**
+ * 基础 Action 客户端
+ *
+ * 用于创建不需要认证的 Server Actions
+ * 自动集成日志和错误监控（开箱即用）
+ */
+const baseActionClient = createSafeActionClient({
+  defineMetadataSchema: () => actionMetadataSchema,
+  /**
+   * 处理服务器错误
+   * - 自动记录结构化日志
+   * - 自动上报 Sentry（如已配置）
+   * - 生产环境下隐藏具体错误信息
+   */
+  handleServerError(error) {
+    // 结构化日志记录
+    logError(error, { source: "server-action" });
+
+    // Sentry 上报（未配置时自动跳过）
+    captureError(error, { source: "server-action" });
+
+    // 生产环境返回通用错误信息
+    if (process.env.NODE_ENV === "production") {
+      return "服务器错误，请稍后重试";
+    }
+
+    return error.message;
+  },
+});
+
+export const actionClient = baseActionClient.use(
+  async ({ metadata, ctx, next }) => {
+    const startTime = Date.now();
+    const result = await next();
+    const duration = Date.now() - startTime;
+    const userId = (ctx as { userId?: string }).userId;
+    const error =
+      !result.success && "serverError" in result
+        ? (result as { serverError?: unknown }).serverError
+        : undefined;
+
+    logger.info(
+      {
+        action: metadata?.action ?? "server-action",
+        success: result.success,
+        duration,
+        ...(userId ? { userId } : {}),
+        ...(error ? { error } : {}),
+      },
+      "Server action"
+    );
+
+    return result;
+  }
+);
+
+/**
+ * 受保护的 Action 客户端
+ *
+ * 用于创建需要用户认证的 Server Actions
+ * 通过中间件验证用户会话，并将用户信息传递给 action
+ */
+export const protectedAction = actionClient.use(async ({ next }) => {
+  /**
+   * 获取当前用户会话
+   * 使用 Better Auth 的 getSession 方法
+   */
+  const session = await auth.api.getSession({
+    headers: await headers(),
+  });
+
+  // 如果没有会话或用户信息，重定向到登录页
+  if (!session || !session.user) {
+    redirect("/sign-in");
+  }
+
+  // 设置用户上下文到日志
+  logger.debug({ userId: session.user.id }, "Authenticated action executed");
+
+  /**
+   * 将用户信息传递给下游 action
+   * ctx 对象可以在 action 中通过 ctx 参数访问
+   */
+  return next({
+    ctx: {
+      userId: session.user.id,
+      user: session.user,
+    },
+  });
+});
+
+/**
+ * 管理员 Action 客户端
+ *
+ * 用于创建需要管理员权限的 Server Actions
+ * 在 protectedAction 基础上增加角色验证
+ */
+export const adminAction = protectedAction.use(async ({ next, ctx }) => {
+  // 检查用户是否为管理员
+  // 类型断言: role 字段在 Better Auth additionalFields 中定义
+  const userWithRole = ctx.user as { role?: string };
+  if (userWithRole.role !== "admin") {
+    throw new Error("此操作需要管理员权限");
+  }
+
+  return next({
+    ctx: {
+      ...ctx,
+      isAdmin: true,
+    },
+  });
+});

package/template/src/lib/seo/json-ld.ts

@@ -0,0 +1,188 @@
+import { siteConfig } from "@/config";
+
+type LocaleType = "en" | "zh";
+
+// Base URL helper
+const getBaseUrl = () => siteConfig.url;
+
+/**
+ * WebSite Schema - for site-wide search/branding
+ */
+export function generateWebSiteSchema(locale: LocaleType) {
+  return {
+    "@context": "https://schema.org",
+    "@type": "WebSite",
+    name: siteConfig.name,
+    url: getBaseUrl(),
+    description:
+      locale === "en"
+        ? "Production-ready Next.js SaaS template with authentication, payments, credits, and i18n"
+        : "生产就绪的 Next.js SaaS 模板，内置认证、支付、积分与国际化",
+    inLanguage: locale === "en" ? "en-US" : "zh-CN",
+    potentialAction: {
+      "@type": "SearchAction",
+      target: {
+        "@type": "EntryPoint",
+        urlTemplate: `${getBaseUrl()}/{locale}/blog?q={search_term_string}`,
+      },
+      "query-input": "required name=search_term_string",
+    },
+  };
+}
+
+/**
+ * Organization Schema - for brand identity
+ */
+export function generateOrganizationSchema() {
+  return {
+    "@context": "https://schema.org",
+    "@type": "Organization",
+    name: siteConfig.name,
+    url: getBaseUrl(),
+    logo: `${getBaseUrl()}/logo.png`,
+    sameAs: [siteConfig.links.twitter, siteConfig.links.github].filter(Boolean),
+    contactPoint: {
+      "@type": "ContactPoint",
+      contactType: "customer support",
+      email: siteConfig.author.email,
+    },
+  };
+}
+
+/**
+ * Article Schema Input
+ */
+export interface ArticleSchemaInput {
+  title: string;
+  description: string;
+  slug: string;
+  locale: LocaleType;
+  publishedAt: string;
+  updatedAt?: string;
+  author?: string;
+  image?: string;
+  tags?: string[];
+}
+
+/**
+ * Article Schema - for blog posts
+ */
+export function generateArticleSchema(input: ArticleSchemaInput) {
+  const {
+    title,
+    description,
+    slug,
+    locale,
+    publishedAt,
+    updatedAt,
+    author,
+    image,
+    tags,
+  } = input;
+
+  return {
+    "@context": "https://schema.org",
+    "@type": "Article",
+    headline: title,
+    description,
+    url: `${getBaseUrl()}/${locale}/blog/${slug}`,
+    inLanguage: locale === "en" ? "en-US" : "zh-CN",
+    datePublished: publishedAt,
+    dateModified: updatedAt || publishedAt,
+    author: {
+      "@type": "Person",
+      name: author || siteConfig.author.name,
+    },
+    publisher: {
+      "@type": "Organization",
+      name: siteConfig.name,
+      logo: {
+        "@type": "ImageObject",
+        url: `${getBaseUrl()}/logo.png`,
+      },
+    },
+    ...(image && {
+      image: {
+        "@type": "ImageObject",
+        url: image.startsWith("http") ? image : `${getBaseUrl()}${image}`,
+      },
+    }),
+    ...(tags && tags.length > 0 && { keywords: tags.join(", ") }),
+  };
+}
+
+/**
+ * FAQ Item type
+ */
+export interface FAQItem {
+  question: string;
+  answer: string;
+}
+
+/**
+ * FAQ Schema - for FAQ sections
+ */
+export function generateFAQSchema(faqs: FAQItem[]) {
+  return {
+    "@context": "https://schema.org",
+    "@type": "FAQPage",
+    mainEntity: faqs.map((faq) => ({
+      "@type": "Question",
+      name: faq.question,
+      acceptedAnswer: {
+        "@type": "Answer",
+        text: faq.answer,
+      },
+    })),
+  };
+}
+
+/**
+ * Breadcrumb Item type
+ */
+export interface BreadcrumbItem {
+  name: string;
+  url: string;
+}
+
+/**
+ * Breadcrumb Schema - for navigation
+ */
+export function generateBreadcrumbSchema(items: BreadcrumbItem[]) {
+  return {
+    "@context": "https://schema.org",
+    "@type": "BreadcrumbList",
+    itemListElement: items.map((item, index) => ({
+      "@type": "ListItem",
+      position: index + 1,
+      name: item.name,
+      item: item.url.startsWith("http")
+        ? item.url
+        : `${getBaseUrl()}${item.url}`,
+    })),
+  };
+}
+
+/**
+ * SoftwareApplication Schema - for the product itself
+ */
+export function generateSoftwareApplicationSchema(locale: LocaleType) {
+  return {
+    "@context": "https://schema.org",
+    "@type": "SoftwareApplication",
+    name: siteConfig.name,
+    applicationCategory: "DeveloperApplication",
+    operatingSystem: "Web",
+    url: getBaseUrl(),
+    description:
+      locale === "en"
+        ? "Production-ready Next.js SaaS template with authentication, payments, credits, and i18n"
+        : "生产就绪的 Next.js SaaS 模板，内置认证、支付、积分与国际化",
+    offers: {
+      "@type": "Offer",
+      price: "0",
+      priceCurrency: "USD",
+      description: locale === "en" ? "Free tier available" : "提供免费版本",
+    },
+  };
+}

package/template/src/lib/source.ts

@@ -0,0 +1,122 @@
+import { defineI18n } from "fumadocs-core/i18n";
+import { loader } from "fumadocs-core/source";
+
+import { blog, docs, legal } from "../../.source/server";
+
+export const docsI18n = defineI18n({
+  languages: ["en", "zh"],
+  defaultLanguage: "en",
+  parser: "dir",
+  hideLocale: "never",
+});
+
+/**
+ * 文档数据源
+ *
+ * 用于在页面中获取文档数据
+ * 注意：i18n 由 Next.js 的 [locale] 路由处理，这里不需要配置
+ */
+export const docsSource = loader({
+  baseUrl: "/docs",
+  source: docs.toFumadocsSource(),
+  i18n: docsI18n,
+  url: (slugs, locale) => {
+    const language = locale ?? docsI18n.defaultLanguage;
+    const path = slugs.length > 0 ? `/${slugs.join("/")}` : "";
+    return `/${language}/docs${path}`;
+  },
+});
+
+/**
+ * 博客文章集合
+ *
+ * 直接导出博客集合数据数组
+ */
+export const blogPosts = blog;
+
+/**
+ * 法律文档集合
+ *
+ * 直接导出法律文档集合数据数组
+ */
+export const legalDocs = legal;
+
+/**
+ * 获取指定语言的博客文章列表
+ */
+export function getBlogPosts(locale: string) {
+  return blog.filter((post) => {
+    // 从文件路径中提取语言 (格式: en/hello-world.mdx)
+    const pathLocale = post.info.path.split("/")[0];
+    return pathLocale === locale;
+  });
+}
+
+/**
+ * 获取指定 slug 的博客文章
+ */
+export function getBlogPost(slug: string, locale: string) {
+  const posts = getBlogPosts(locale);
+  return posts.find((post) => {
+    // 从文件路径中提取 slug (去掉语言前缀和 .mdx 后缀)
+    const pathParts = post.info.path.split("/");
+    const fileName = pathParts[pathParts.length - 1] ?? "";
+    const postSlug = fileName.replace(/\.mdx$/, "");
+    return postSlug === slug;
+  });
+}
+
+/**
+ * 获取所有博客文章的 slug 列表（用于 generateStaticParams）
+ */
+export function getAllBlogSlugs() {
+  return blog.map((post) => {
+    const pathParts = post.info.path.split("/");
+    const locale = pathParts[0] ?? "en";
+    const fileName = pathParts[pathParts.length - 1] ?? "";
+    const slug = fileName.replace(/\.mdx$/, "");
+    return { locale, slug };
+  });
+}
+
+// ============================================
+// 法律文档辅助函数
+// ============================================
+
+/**
+ * 获取指定语言的法律文档列表
+ */
+export function getLegalDocs(locale: string) {
+  return legal.filter((doc) => {
+    // 从文件路径中提取语言 (格式: en/terms.mdx)
+    const pathLocale = doc.info.path.split("/")[0];
+    return pathLocale === locale;
+  });
+}
+
+/**
+ * 获取指定 slug 的法律文档
+ */
+export function getLegalDoc(slug: string, locale: string) {
+  const docs = getLegalDocs(locale);
+  return docs.find((doc) => {
+    // 从文件路径中提取 slug (去掉语言前缀和 .mdx 后缀)
+    const pathParts = doc.info.path.split("/");
+    const fileName = pathParts[pathParts.length - 1] ?? "";
+    const docSlug = fileName.replace(/\.mdx$/, "");
+    return docSlug === slug;
+  });
+}
+
+/**
+ * 获取所有法律文档的 slug 列表（用于 generateStaticParams）
+ */
+export function getAllLegalSlugs() {
+  return legal.map((doc) => {
+    const pathParts = doc.info.path.split("/");
+    const locale = pathParts[0] ?? "en";
+    const fileName = pathParts[pathParts.length - 1] ?? "";
+    const slug = fileName.replace(/\.mdx$/, "");
+    return { locale, slug };
+  });
+}

package/template/src/lib/utils.ts

@@ -0,0 +1,6 @@
+import { type ClassValue, clsx } from "clsx";
+import { twMerge } from "tailwind-merge";
+
+export function cn(...inputs: ClassValue[]) {
+  return twMerge(clsx(inputs));
+}