create-qs 0.0.0 → 0.8.23

package/template/default/modules/{{MODULE_DIRECTORY}}/api/src/test/kotlin/{{API_PACKAGE}}/SmokeTests.kt

@@ -0,0 +1,61 @@
+package {{API_PACKAGE}}
+
+import com.qsrun.quicksilver.core.application.data.Databases
+import com.qsrun.quicksilver.core.application.data.UnitInfoRepo
+import com.qsrun.quicksilver.core.data.constant.DataSourceCodes
+import com.qsrun.quicksilver.core.test.base.QsBaseTests
+import org.junit.jupiter.api.Assertions.assertTrue
+import org.junit.jupiter.api.Test
+import org.springframework.beans.factory.annotation.Autowired
+
+/**
+ * Environment smoke test: the Spring context starts, and provisioning has actually loaded the metadata.
+ *
+ * It also covers loading the data files into their tables, so units need no tests of their own for that. The
+ * test context runs every init data file on startup. When any command fails, the context cannot start, and this
+ * class fails together with every other test.
+ *
+ * It also guards `run/api/config/logback-test.xml`. Without a single `@Test` in the test tree, Spring never
+ * starts, and a broken logging configuration (for example one that references a converter Spring Boot has
+ * removed) goes unnoticed. Such an error makes **every** test throw `DynamicClassLoadingException` from
+ * `LogbackLoggingSystem` while the context initializes, with a message unrelated to the code under test, which
+ * is hard to trace back.
+ *
+ * The assertion uses plain JDBC instead of `DatabaseInspectors` on purpose. It depends only on the `Databases`
+ * of core, and does not rely on lib-database being on the test classpath of downstream projects.
+ */
+class SmokeTests: QsBaseTests() {
+    @Autowired
+    private lateinit var unitInfoRepo: UnitInfoRepo
+
+    @Test
+    fun `spring context starts and metadata is provisioned`() {
+        val unitCount = Databases.getConnection(DataSourceCodes.METADATA).use { cn ->
+            cn.createStatement().use { st ->
+                st.executeQuery("select count(*) from ac_unit").use { rs ->
+                    assertTrue(rs.next(), "select count(*) from ac_unit returned no row")
+                    rs.getInt(1)
+                }
+            }
+        }
+        assertTrue(unitCount > 0, "ac_unit is empty: provisioning did not run")
+    }
+
+    /**
+     * Every unit, platform units included, passes the metadata self-check.
+     *
+     * When the self-check finds a problem on startup, it only logs an error and the service starts as usual. This
+     * test turns that into a test failure. A unit created with `$add: 'ac.unit'` that fails the self-check already
+     * stops provisioning, so what this test adds is catching a unit broken afterwards by other writes, for example
+     * data files that rewrite `ac_unit_field` directly. The self-check covers the metadata only (table name,
+     * fields, ID fields, the semantic columns of tree units), and does not compare it with the physical table.
+     */
+    @Test
+    fun `every unit passes the metadata self-check`() {
+        val problems = unitInfoRepo.all().flatMap { unit ->
+            unit.diagnostics.map { "  [${it.kind}] ${unit.code}: ${it.message}" }
+        }
+        assertTrue(problems.isEmpty(),
+            "Unit metadata diagnostics found ${problems.size} problem(s):\n" + problems.joinToString("\n"))
+    }
+}

package/template/default/modules/{{MODULE_DIRECTORY}}/api/src/test/kotlin/{{API_PACKAGE}}/TestConfiguration.kt

@@ -0,0 +1,6 @@
+package {{API_PACKAGE}}
+
+import org.springframework.boot.SpringBootConfiguration
+
+@SpringBootConfiguration
+class TestConfiguration

package/template/default/modules/{{MODULE_DIRECTORY}}/module.yaml

@@ -0,0 +1,8 @@
+id: {{MODULE_ID}}
+code: {{MODULE_CODE}}
+namespaces: ['{{MODULE_NAMESPACE}}']
+description: Description of module {{MODULE_CODE}}
+dependencies:
+  - {{PLATFORM_MODULE_DEPENDENCIES}}
+web:
+  package-name: '{{WEB_PACKAGE_NAME}}'

package/template/default/modules/{{MODULE_DIRECTORY}}/web/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "{{WEB_PACKAGE_NAME}}",
+  "private": false,
+  "version": "0.0.0",
+  "type": "module",
+  "exports": {
+    "./module": "./src/module.ts"
+  },
+  "scripts": {
+    "build": "tsc -b && vite build",
+    "clean": "shx rm -rf dist",
+    "lint": "eslint .",
+    "lint:fix": "eslint . --fix"
+  },
+  "dependencies": {
+    "@qs-charts/adapter-preact": "catalog:client",
+    "@qs-charts/core": "catalog:client",
+    "@qs-elements/web": "catalog:client",
+    "@qs-elements/web-preact": "catalog:client",
+    {{PLATFORM_WEB_DEPENDENCIES}}
+  },
+  "devDependencies": {
+    "@qs-platform/preset-vite-web": "catalog:quicksilver"
+  }
+}

package/template/default/modules/{{MODULE_DIRECTORY}}/web/src/module.ts

@@ -0,0 +1,16 @@
+import { Module } from '@qs-platform/web-module-core';
+
+const pages = {};
+
+const plugins = {};
+
+const components = {};
+
+export const module: Module = {
+    pages,
+    plugins,
+    components,
+    styles: [],
+    icons: [],
+    routes: {},
+};

package/template/default/modules/{{MODULE_DIRECTORY}}/web/src/vite-env.d.ts

@@ -0,0 +1,10 @@
+/// <reference types="vite/client" />
+
+import { QeIntrinsicElements } from '@qs-elements/web-preact';
+import { QChartsIntrinsicElements } from '@qs-charts/adapter-preact';
+
+declare module 'preact' {
+    namespace JSX {
+        interface IntrinsicElements extends QeIntrinsicElements, QChartsIntrinsicElements {}
+    }
+}

package/template/default/modules/{{MODULE_DIRECTORY}}/web/tsconfig.app.json

@@ -0,0 +1,7 @@
+{
+    "extends": "@qs-platform/preset-vite-web/tsconfig.quicksilver.json",
+    "compilerOptions": {
+        "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.app.tsbuildinfo"
+    },
+    "include": ["src"]
+}

package/template/default/modules/{{MODULE_DIRECTORY}}/web/tsconfig.json

@@ -0,0 +1,7 @@
+{
+    "files": [],
+    "references": [
+        { "path": "./tsconfig.app.json" },
+        { "path": "./tsconfig.node.json" }
+    ]
+}

package/template/default/modules/{{MODULE_DIRECTORY}}/web/tsconfig.node.json

@@ -0,0 +1,7 @@
+{
+    "extends": "@qs-platform/preset-vite-web/tsconfig.node.json",
+    "compilerOptions": {
+        "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.node.tsbuildinfo"
+    },
+    "include": ["vite.config.ts"]
+}

package/template/default/modules/{{MODULE_DIRECTORY}}/web/vite.config.ts

@@ -0,0 +1,11 @@
+import { defineConfig } from 'vite';
+import { quicksilverBuildPlugins } from '@qs-platform/preset-vite-web';
+
+export default defineConfig({
+    plugins: [...quicksilverBuildPlugins()],
+    resolve: {
+        alias: [
+            { find: /^~(.*)$/, replacement: '$1' },
+        ],
+    },
+});

package/template/default/package.json

@@ -0,0 +1,76 @@
+{
+  "name": "{{PROJECT_CODE}}",
+  "private": true,
+  "version": "0.0.1",
+  "type": "module",
+  "engines": {
+    "node": ">=22.13.0",
+    "pnpm": ">=11"
+  },
+  "scripts": {
+    "// --- start dev servers -------------------------------------------": "",
+    "dev": "quicksilver dev",
+    "dev:h2": "PORT=6210 API_PORT=6211 SPRING_PROFILES_ACTIVE=dev,h2 quicksilver dev",
+    "dev:postgresql": "PORT=6220 API_PORT=6221 SPRING_PROFILES_ACTIVE=dev,postgresql quicksilver dev",
+    "dev:mariadb": "PORT=6230 API_PORT=6231 SPRING_PROFILES_ACTIVE=dev,mariadb quicksilver dev",
+    "dev:mssql": "PORT=6240 API_PORT=6241 SPRING_PROFILES_ACTIVE=dev,mssql quicksilver dev",
+    "dev:oracle": "PORT=6250 API_PORT=6251 SPRING_PROFILES_ACTIVE=dev,oracle quicksilver dev",
+    "dev:debug": "quicksilver dev --debug",
+    "dev:api": "quicksilver gradle :run:bootRun",
+    "dev:web": "pnpm -C run/web dev",
+    "// --- build subprojects -------------------------------------------": "",
+    "build": "pnpm build:api && pnpm build:web",
+    "build:api": "quicksilver gradle build",
+    "build:web": "pnpm -r --fail-if-no-match --filter './modules/*/web' build",
+    "build:release": "pnpm build:web",
+    "// --- utils -------------------------------------------------------": "",
+    "i18n:extract": "quicksilver i18n extract",
+    "sources": "quicksilver sources",
+    "// --- lint --------------------------------------------------------": "",
+    "lint": "eslint .",
+    "lint:fix": "eslint . --fix",
+    "// --- test --------------------------------------------------------": "",
+    "test:api": "quicksilver gradle test",
+    "test:install:e2e": "quicksilver test run self-install-e2e",
+    "test:install-upgrade:e2e": "quicksilver test run self-install-upgrade-e2e",
+    "test:install:keepalive": "quicksilver test run self-install-keepalive",
+    "test:verify:dev": "quicksilver test verify --dev",
+    "test:list": "quicksilver test list",
+    "// --- packaging (output to build/release) -------------------------": "",
+    "package:full": "quicksilver gradle :package-current",
+    "package:full:exploded": "quicksilver gradle :package-current-exploded",
+    "package:full:all": "quicksilver gradle :package-all",
+    "package:full:darwin-x64": "quicksilver gradle :package-darwin-x64",
+    "package:full:darwin-arm64": "quicksilver gradle :package-darwin-arm64",
+    "package:full:linux-x64": "quicksilver gradle :package-linux-x64",
+    "package:full:linux-arm64": "quicksilver gradle :package-linux-arm64",
+    "package:full:windows-x64": "quicksilver gradle :package-windows-x64",
+    "package:full:windows-arm64": "quicksilver gradle :package-windows-arm64",
+    "package:module": "quicksilver gradle :package-module",
+    "package:module:exploded": "quicksilver gradle :package-module-exploded",
+    "// --- release (build is automatically included) -------------------": "",
+    "release": "qs release --target=internal",
+    "// --- clean -------------------------------------------------------": "",
+    "clean:all": "pnpm clean:api && pnpm -r run clean && pnpm clean:root",
+    "clean:api": "quicksilver gradle clean",
+    "clean:root": "shx rm -rf build/release build/test",
+    "clean:web": "pnpm -r --filter './modules/*/web' --filter './run/web' run clean",
+    "// --- lifecycle hooks (run automatically on install) --------------": "",
+    "postinstall": "quicksilver docs && playwright install chromium"
+  },
+  "devDependencies": {
+    "@qs-platform/cli": "catalog:quicksilver",
+    "@eslint/js": "^10.0.1",
+    "@playwright/test": "^1.62.1",
+    "@stylistic/eslint-plugin": "^5.10.0",
+    "@types/node": "catalog:tooling",
+    "@typescript-eslint/eslint-plugin": "^8.69.0",
+    "@typescript-eslint/parser": "^8.69.0",
+    "eslint": "^10.9.1",
+    "globals": "^17.11.0",
+    "sass": "catalog:tooling",
+    "shx": "catalog:tooling",
+    "typescript": "catalog:tooling",
+    "vite": "catalog:tooling"
+  }
+}

package/template/default/pnpm-workspace.yaml

@@ -0,0 +1,40 @@
+# Quicksilver's own packages are not on the public registry. Point the @qs-platform, @qs-elements
+# and @qs-charts scopes at your Nexus in ~/.npmrc, once per machine. To pin them to this project
+# instead, add a `registries` section here. Either way, see .quicksilver/manual/en-US/00-setup.md.
+packages:
+  - modules/{{MODULE_DIRECTORY}}/web
+  - run/web
+
+allowBuilds:
+  '@parcel/watcher': true
+  esbuild: true
+
+engineStrict: true
+
+# The scripts in package.json use POSIX sh syntax (single-quoted arguments, `VAR=value command`).
+# On Windows, pnpm runs scripts with cmd.exe by default, which supports neither. The shell emulator
+# runs them the same way on every platform.
+shellEmulator: true
+
+minimumReleaseAgeExclude:
+  - '@qs-elements/*'
+  - '@qs-charts/*'
+  - '@qs-platform/*'
+
+catalogs:
+  client:
+    "@qs-charts/adapter-preact": "0.2.11"
+    "@qs-charts/core": "0.2.11"
+    "@qs-elements/web": "1.0.158"
+    "@qs-elements/web-preact": "1.0.158"
+  quicksilver:
+    "@qs-platform/cli": "0.8.23"
+    "@qs-platform/preset-vite-web": "0.8.23"
+    "@qs-platform/web-module-core": "0.8.23"
+    "@qs-platform/web-module-org": "0.8.23"
+  tooling:
+    "@types/node": "^26.4.0"
+    "sass": "^1.103.1"
+    "shx": "^0.4.0"
+    "typescript": "^6.0.3"
+    "vite": "^7.3.6"

package/template/default/publishing.yaml

@@ -0,0 +1,52 @@
+# Publishing targets: where artifacts go, and which packages get published.
+#
+# Read by `pnpm qs release --target=<name>`, which covers both halves — Maven artifacts and npm
+# packages — and drives Gradle with the arguments it needs. **Do not run `./gradlew publish`
+# directly**: the Maven URL and credentials prefix are resolved from this file and passed in by
+# `pnpm qs release`. Use `pnpm qs release --only=maven` when you want the Maven half alone.
+#
+# The lookup starts at the **project root** (the directory holding pnpm-workspace.yaml) and walks
+# up, stopping at the .git directory — or at the project root itself before the project is a git
+# repository. The Gradle side uses the same rule; both must find the same file.
+#
+# At every level, local/publishing.yaml is checked first. local/ is not under version control, so a
+# copy of this file placed there is a machine-local override: copy it as-is and edit the URLs, the
+# `packages` paths stay valid (their base is still the parent of local/). When that copy is in
+# effect, both the release summary and the Gradle log name the file being used.
+#
+# Credentials do NOT go here. Put the npm token in ~/.npmrc as `//<host>/:_authToken=<token>`,
+# and the Maven account in ~/.gradle/gradle.properties as
+# `<maven-credentials-prefix>.user` / `.password`.
+#
+# An empty URL means the target is not configured yet: publishing fails with an error rather
+# than falling back to a default registry.
+#
+# Maven artifacts never carry a draft with changes (data/upgrade/draft.jsons): the release refuses
+# them on every target. Run `pnpm qs data freeze` on the main branch and commit before releasing.
+#
+# Paths under `packages` are relative to this file — or, for the local/ copy, to the parent of
+# local/ — and may contain globs.
+
+default-target: internal
+
+targets:
+  internal:
+    label: Internal repository
+    # Fill both in before the first release. Add more targets (staging, public, per-customer)
+    # by copying this block — the names are yours, the CLI does not know any of them.
+    npm-registry:
+    # Publishing Maven artifacts additionally requires enabling it in build.gradle.kts:
+    #     quicksilverRoot { publishing { enabled = true } }
+    # Until then, leave this blank and pnpm release publishes npm packages only.
+    maven-url:
+    # quicksilver.repo is the default login for pulling the platform (quicksilver.repo.user /
+    # .password), so one account covers both. When gradle.properties names another prefix in
+    # quicksilver.repo.credentials, or publishing needs a different account, change this to match.
+    maven-credentials-prefix: quicksilver.repo
+    # Publishing straight from a dirty working tree is fine for an internal repository.
+    # Drop this line on a target that ships releases.
+    git-checks: false
+    allow-prerelease: true
+
+packages:
+  - modules/*/web

package/template/default/quicksilver.yaml

@@ -0,0 +1,13 @@
+display:
+  title: {{PROJECT_CODE}}
+  description: Description for your product here
+
+names:
+  kotlin-package: {{API_PACKAGE}}
+  maven-group: {{API_PACKAGE}}
+  maven-prefix: {{PROJECT_CODE}}
+
+packaging:
+  archive-name: {{PROJECT_CODE}}
+  fixed-modules: [{{PLATFORM_MODULE_CODES_QUOTED}}, '{{MODULE_CODE}}']
+  visible-modules:

package/template/default/run/api/build.gradle.kts

@@ -0,0 +1,8 @@
+plugins {
+    id("com.qsrun.quicksilver.gradle.run")
+}
+
+dependencies {
+    implementation(project(":modules:{{MODULE_DIRECTORY}}"))
+    // implementation("com.qsrun:quicksilver-module-sample")
+}

package/template/default/run/api/config/README.md

@@ -0,0 +1,76 @@
+# `run/api/config`
+
+Configuration for the API server in development. Everything here is read by Spring Boot at
+startup; nothing in this directory ships to your users.
+
+## Files
+
+| File | What it is |
+|---|---|
+| `application.yaml` | Base configuration: ports, CORS, cache, upload, Atomikos. **Declares no datasources** — those live in the profile files below |
+| `application-dev.yaml` | The `dev` profile, active by default. Datasources for local development, plus `auto-init` (with `draft-sync` on) and `fail-on-unregistered-data-source` |
+| `application-<dialect>.yaml` | One overlay per database dialect (`h2`, `postgresql`, `mariadb`, `mssql`, `oracle`). Each carries its own datasources, log directory and Atomikos log directory, so several can run side by side |
+| `application-test.yaml` | Used by `modules/*/api` tests. In-memory H2, wiped on every run |
+| `logback.xml` / `logback-test.xml` | Logging |
+
+## Choosing a database
+
+`pnpm dev` runs on a file-based H2 database with no setup. To use another dialect, run its script
+— `pnpm dev:postgresql`, `pnpm dev:mariadb`, and so on — which sets
+`SPRING_PROFILES_ACTIVE=dev,<dialect>` and its own ports.
+
+The H2 profiles ship with working credentials (`sa` / `sa`) — H2 creates the database on first
+connect, so there is nothing to change. In every other dialect file the user and `PASSWORD` are
+placeholders you must replace.
+
+**Do not drop the `dev,` prefix.** Without it `application-dev.yaml` is not loaded, and since
+`application.yaml` declares no datasources, startup fails with `Missing required datasource code`.
+That is deliberate: a missing datasource list must fail loudly rather than fall back to some
+default database.
+
+Create the databases before use — the server-based dialects only. Each of those files names its
+database after this project — a project called `power-crm` gets `power_crm_dev` — so several
+Quicksilver products can share one database server without colliding. Two files sit outside that
+rule: Oracle, whose "database" is a PDB with a name fixed by the container image (`FREEPDB1`), and
+the H2 profiles, whose databases are plain files under this project's own `local/data/h2/`
+(`database1` for `dev`, `database2` for `dev:h2`) and so have nothing to collide with. The
+datasource list is replaced as a whole, so when you change one entry, keep the other one listed
+as well.
+
+## H2 URLs
+
+The two H2 parameters below are not optional. Both failures are quiet and show up far from the
+configuration, so keep them when you edit an H2 URL:
+
+- File database — `DB_CLOSE_ON_EXIT=FALSE`. Without it H2 registers a JVM shutdown hook that races
+  Spring's own. On Ctrl+C H2 often closes the database first, and Atomikos' XA recovery scan then
+  hits "Database is already closed" and prints a screenful of stack traces.
+- In-memory database — `DB_CLOSE_DELAY=-1`. The connection pool's `minSize` is 0, so when the last
+  idle connection is reclaimed H2 destroys the whole in-memory database with it, and the next
+  connection hands you an empty one.
+
+## MySQL
+
+MySQL works, but **you have to supply the driver**: Connector/J is GPLv2, so it is not bundled.
+Add `runtimeOnly("com.mysql:mysql-connector-j")` to `run/api/build.gradle.kts`, then add a
+`application-mysql.yaml` overlay and a `dev:mysql` script of your own, modelled on the other
+dialects. Every other dialect listed above ships with its driver.
+
+## The dev database
+
+The `dev` profile turns on `draft-sync` and turns off `drop-first`. Every start runs the upgrade
+drafts that changed since the last start, and keeps the data already in the dev database. To
+rebuild the database from init and demo data, set `drop-first: true` for one start and then set it
+back. Switching `draft-sync` on or off also needs one such rebuild: the two modes record drafts
+differently, and startup refuses a database built in the other mode.
+
+## Local edits
+
+`application-dev.yaml` is committed, but **by convention your local edits to it are not** — a
+different database host, `drop-first` turned on for a rebuild, a different
+`fail-on-unregistered-data-source`. Commit it only when you are deliberately changing the team
+default, and say so in the commit message.
+
+For an override that never enters version control, point `QUICKSILVER_CONFIG_LOCATION` at a config
+directory of your own: it is appended to the tail of `spring.config.location`, so it wins over
+every profile file.

package/template/default/run/api/config/application-dev.yaml

@@ -0,0 +1,45 @@
+#
+# Overlay for the `dev` profile. Activated by default via `spring.profiles.active` in
+# application.yaml, and by every `pnpm dev:*` script.
+#
+spring:
+  application.name: DEV
+
+quicksilver:
+  datasource:
+    # Keep the quotes around passwords: special characters (# : @ ...) then paste in as is.
+    items:
+      - code: metadata
+        url: "jdbc:h2:./local/data/h2/database1;DB_CLOSE_ON_EXIT=FALSE;DATABASE_TO_UPPER=false;MODE=MySQL"
+        user: sa
+        password: "sa"
+      - code: business
+        url: "jdbc:h2:./local/data/h2/database1;DB_CLOSE_ON_EXIT=FALSE;DATABASE_TO_UPPER=false;MODE=MySQL"
+        user: sa
+        password: "sa"
+    # Each ac_table row records the datasource its table lives in. When a row names a code that is
+    # not listed under items, true stops startup with an error and false only logs a warning. Unset,
+    # it is false. Keep it true in development so that a datasource removed from this file is
+    # noticed at the next start.
+    fail-on-unregistered-data-source: true
+    auto-init:
+      # Install and upgrade the modules at every start by running their data files. Takes effect
+      # only when quicksilver.application.mode is development. In production the installer does it.
+      enabled: true
+      # Drop the tables and views that Quicksilver manages before provisioning, so the database is
+      # rebuilt from init and demo data. Set drop-first: true for one start, then set it back to false.
+      drop-first: false
+      # Draft sync. Every start runs the upgrade drafts that changed since the last start. Data in
+      # the dev database is kept, including rows entered through the UI. Switching draft-sync on or
+      # off needs one rebuild with drop-first.
+      draft-sync: true
+      # Demo data: on a fresh install of a module, the .jsons files in its data/demo/ run after its
+      # init. A database that already exists does not pick up demo files added later, rebuild it with
+      # drop-first as described above.
+      demo-data: true
+  webhook:
+    # Webhook targets that resolve to a private or loopback address (10.0.0.0/8, 127.0.0.0/8, ...)
+    # are refused unless the address falls in one of these CIDR ranges. The dev profile allows
+    # 127.0.0.1 so that a receiver running on this machine can be tested. Link-local addresses,
+    # which include the cloud metadata endpoint, are always refused whatever is listed here.
+    restricted-exceptions: ["127.0.0.1/32"]

package/template/default/run/api/config/application-h2.yaml

@@ -0,0 +1,22 @@
+#
+# Overlay for the `h2` profile: only the keys that differ from application-dev.yaml,
+# everything else is inherited key by key. Activate with SPRING_PROFILES_ACTIVE=dev,h2
+# (or run `pnpm dev:h2`).
+#
+logging:
+  file.path: local/log/application/h2
+
+quicksilver:
+  datasource:
+    # Keep the quotes around passwords: special characters (# : @ ...) then paste in as is.
+    items:
+      - code: metadata
+        url: "jdbc:h2:./local/data/h2/database2;DB_CLOSE_ON_EXIT=FALSE;DATABASE_TO_UPPER=false;MODE=MySQL"
+        user: sa
+        password: "sa"
+      - code: business
+        url: "jdbc:h2:./local/data/h2/database2;DB_CLOSE_ON_EXIT=FALSE;DATABASE_TO_UPPER=false;MODE=MySQL"
+        user: sa
+        password: "sa"
+    atomikos:
+      log_base_dir: local/log/atomikos/h2

package/template/default/run/api/config/application-mariadb.yaml

@@ -0,0 +1,22 @@
+#
+# Overlay for the `mariadb` profile: only the keys that differ from application-dev.yaml,
+# everything else is inherited key by key. Activate with SPRING_PROFILES_ACTIVE=dev,mariadb
+# (or run `pnpm dev:mariadb`).
+#
+logging:
+  file.path: local/log/application/mariadb
+
+quicksilver:
+  datasource:
+    # Keep the quotes around passwords: special characters (# : @ ...) then paste in as is.
+    items:
+      - code: metadata
+        url: "jdbc:mariadb://localhost:3308/{{DB_PREFIX}}_dev?characterEncoding=utf8mb4"
+        user: root
+        password: "PASSWORD"
+      - code: business
+        url: "jdbc:mariadb://localhost:3308/{{DB_PREFIX}}_dev?characterEncoding=utf8mb4"
+        user: root
+        password: "PASSWORD"
+    atomikos:
+      log_base_dir: local/log/atomikos/mariadb

package/template/default/run/api/config/application-mssql.yaml

@@ -0,0 +1,22 @@
+#
+# Overlay for the `mssql` profile: only the keys that differ from application-dev.yaml,
+# everything else is inherited key by key. Activate with SPRING_PROFILES_ACTIVE=dev,mssql
+# (or run `pnpm dev:mssql`).
+#
+logging:
+  file.path: local/log/application/mssql
+
+quicksilver:
+  datasource:
+    # Keep the quotes around passwords: special characters (# : @ ...) then paste in as is.
+    items:
+      - code: metadata
+        url: "jdbc:sqlserver://localhost:1433;DatabaseName={{DB_PREFIX}}_dev;trustServerCertificate=true"
+        user: sa
+        password: "PASSWORD"
+      - code: business
+        url: "jdbc:sqlserver://localhost:1433;DatabaseName={{DB_PREFIX}}_dev;trustServerCertificate=true"
+        user: sa
+        password: "PASSWORD"
+    atomikos:
+      log_base_dir: local/log/atomikos/mssql

package/template/default/run/api/config/application-oracle.yaml

@@ -0,0 +1,22 @@
+#
+# Overlay for the `oracle` profile: only the keys that differ from application-dev.yaml,
+# everything else is inherited key by key. Activate with SPRING_PROFILES_ACTIVE=dev,oracle
+# (or run `pnpm dev:oracle`).
+#
+logging:
+  file.path: local/log/application/oracle
+
+quicksilver:
+  datasource:
+    # Keep the quotes around passwords: special characters (# : @ ...) then paste in as is.
+    items:
+      - code: metadata
+        url: "jdbc:oracle:thin:@//localhost:1521/FREEPDB1"
+        user: system
+        password: "PASSWORD"
+      - code: business
+        url: "jdbc:oracle:thin:@//localhost:1521/FREEPDB1"
+        user: system
+        password: "PASSWORD"
+    atomikos:
+      log_base_dir: local/log/atomikos/oracle

package/template/default/run/api/config/application-postgresql.yaml

@@ -0,0 +1,22 @@
+#
+# Overlay for the `postgresql` profile: only the keys that differ from application-dev.yaml,
+# everything else is inherited key by key. Activate with SPRING_PROFILES_ACTIVE=dev,postgresql
+# (or run `pnpm dev:postgresql`).
+#
+logging:
+  file.path: local/log/application/postgresql
+
+quicksilver:
+  datasource:
+    # Keep the quotes around passwords: special characters (# : @ ...) then paste in as is.
+    items:
+      - code: metadata
+        url: "jdbc:postgresql://127.0.0.1/{{DB_PREFIX}}_dev?stringtype=unspecified"
+        user: postgres
+        password: "PASSWORD"
+      - code: business
+        url: "jdbc:postgresql://127.0.0.1/{{DB_PREFIX}}_dev?stringtype=unspecified"
+        user: postgres
+        password: "PASSWORD"
+    atomikos:
+      log_base_dir: local/log/atomikos/postgresql

package/template/default/run/api/config/application-test.yaml

@@ -0,0 +1,28 @@
+#
+# This file is for testing of modules/xxx/api. Paths use ${quicksilver.config.dir},
+# which ModulePlugin sets to the absolute path of this config directory.
+#
+spring.application.name: QsTest
+logging.config: ${quicksilver.config.dir}/logback-test.xml
+quicksilver:
+  # Tests run with the module's api directory as the working directory, and a missing key file is
+  # auto-generated outside production mode. Without this line the key would land in the module's
+  # own config/ (the relative path inherited from application.yaml) instead of under build/.
+  security.cipher.key-file: build/test/cipher.key
+  datasource:
+    # Keep the quotes around passwords: special characters (# : @ ...) then paste in as is.
+    items:
+      - code: metadata
+        url: "jdbc:h2:mem:metadata;DB_CLOSE_DELAY=-1;DATABASE_TO_UPPER=false;MODE=MySQL"
+        user: sa
+        password: "sa"
+      - code: business
+        url: "jdbc:h2:mem:business;DB_CLOSE_DELAY=-1;DATABASE_TO_UPPER=false;MODE=MySQL"
+        user: sa
+        password: "sa"
+    atomikos:
+      log_base_dir: build/test/log/atomikos
+    upload.directory: build/test/upload
+    # Tests run under the test profile, which does not inherit auto-init from
+    # application-dev.yaml, so it must be declared here.
+    auto-init.enabled: true