create-sdd-ai-stack 0.1.17

package/template/next/src/proxy.ts

@@ -0,0 +1,23 @@
+import { type NextRequest, NextResponse } from "next/server";
+
+/**
+ * Network boundary. NÃO é fronteira de segurança (ver SDD/NEXT.md §7).
+ * Autorização real vive na camada de dado (actions/queries).
+ */
+export function proxy(request: NextRequest) {
+  const headers = new Headers(request.headers);
+
+  // defense-in-depth: remove o header interno que o CVE-2025-29927 explorava
+  headers.delete("x-middleware-subrequest");
+  headers.set("x-request-id", crypto.randomUUID());
+
+  const response = NextResponse.next({ request: { headers } });
+  response.headers.set("X-Content-Type-Options", "nosniff");
+  response.headers.set("Referrer-Policy", "strict-origin-when-cross-origin");
+  response.headers.set("X-Frame-Options", "DENY");
+  return response;
+}
+
+export const config = {
+  matcher: ["/((?!_next|api|favicon.ico|.*\\..*).*)"],
+};

package/template/next/src/shared/lib/cn.ts

@@ -0,0 +1,6 @@
+import { type ClassValue, clsx } from "clsx";
+import { twMerge } from "tailwind-merge";
+
+export function cn(...inputs: ClassValue[]) {
+  return twMerge(clsx(inputs));
+}

package/template/next/src/shared/server/auth.ts

@@ -0,0 +1,32 @@
+import "server-only";
+import { cache } from "react";
+
+export interface AuthUser {
+  id: string;
+  email: string;
+  role: "admin" | "member" | "banned";
+}
+
+/**
+ * Substitua pela sessão real (Auth.js, Clerk, etc).
+ * Autorização NUNCA sai daqui — ver SDD/NEXT.md §7.
+ */
+export const getSession = cache(async (): Promise<AuthUser | null> => {
+  return null;
+});
+
+export async function requireUser(): Promise<AuthUser> {
+  const user = await getSession();
+  if (!user) {
+    throw new Error("UNAUTHORIZED");
+  }
+  return user;
+}
+
+export async function requireRole(...roles: AuthUser["role"][]) {
+  const user = await requireUser();
+  if (!roles.includes(user.role)) {
+    throw new Error("FORBIDDEN");
+  }
+  return user;
+}

package/template/next/src/shared/server/env.ts

@@ -0,0 +1,14 @@
+import "server-only";
+import { z } from "zod";
+
+const EnvSchema = z.object({
+  NODE_ENV: z.enum(["development", "test", "production"]).default("development"),
+  DATABASE_URL: z.url().optional(),
+  AUTH_SECRET: z.string().min(16).optional(),
+});
+
+export const env = EnvSchema.parse({
+  NODE_ENV: process.env.NODE_ENV,
+  DATABASE_URL: process.env.DATABASE_URL,
+  AUTH_SECRET: process.env.AUTH_SECRET,
+});

package/template/next/src/shared/ui/index.ts

@@ -0,0 +1,3 @@
+import { cn } from "@/shared/lib/cn";
+
+export { cn };

package/template/next/tests/e2e/routes.spec.ts

@@ -0,0 +1,34 @@
+import { expect, test } from "@playwright/test";
+
+test.describe("Landing pública", () => {
+  test("renderiza hero, KPIs e chips de stack", async ({ page }) => {
+    await page.goto("/");
+
+    await expect(page.getByRole("heading", { level: 1 })).toBeVisible();
+    await expect(page.getByText("R$ 24M")).toBeVisible();
+    await expect(page.getByText("Next.js 16")).toBeVisible();
+    await expect(page.getByText("Tecnologia em produção")).toBeVisible();
+  });
+
+  test("responde 200 na raiz", async ({ page }) => {
+    const response = await page.goto("/");
+    expect(response?.status()).toBe(200);
+  });
+});
+
+test.describe("Área logada", () => {
+  test("renderiza o shell da aplicação", async ({ page }) => {
+    await page.goto("/app");
+
+    await expect(page.getByRole("heading", { name: "Área logada" })).toBeVisible();
+    await expect(page.getByRole("link", { name: "App" })).toBeVisible();
+  });
+});
+
+test.describe("Erros", () => {
+  test("404 devolve a página not-found", async ({ page }) => {
+    const response = await page.goto("/rota-que-nao-existe");
+    expect(response?.status()).toBe(404);
+    await expect(page.getByText("Recurso não encontrado")).toBeVisible();
+  });
+});

package/template/next/tests/unit/create-example.test.ts

@@ -0,0 +1,55 @@
+import { beforeEach, describe, expect, it } from "vitest";
+import {
+  AppError,
+  CreateExampleUseCase,
+} from "@/features/example/application/create-example.usecase";
+import type { IExampleRepository } from "@/features/example/domain/IExampleRepository";
+
+function makeRepo() {
+  const created: { title: string; body: string }[] = [];
+  const repo: IExampleRepository = {
+    create: async (input) => {
+      created.push(input);
+      return { id: "id-1", createdAt: new Date(), ...input };
+    },
+    findById: async () => null,
+  };
+  return { repo, created };
+}
+
+describe("CreateExampleUseCase", () => {
+  let repo: IExampleRepository;
+  let created: { title: string; body: string }[];
+
+  beforeEach(() => {
+    const made = makeRepo();
+    repo = made.repo;
+    created = made.created;
+  });
+
+  it("deve_criar_quando_input_valido", async () => {
+    const useCase = new CreateExampleUseCase(repo);
+
+    const result = await useCase.execute({ title: "Ledger", body: "conteúdo ok" });
+
+    expect(result.title).toBe("Ledger");
+    expect(created).toHaveLength(1);
+  });
+
+  it("deve_remover_espacos_dos_lados", async () => {
+    const useCase = new CreateExampleUseCase(repo);
+
+    await useCase.execute({ title: "  Ledger  ", body: "  corpo  " });
+
+    expect(created[0]).toEqual({ title: "Ledger", body: "corpo" });
+  });
+
+  it("deve_lancar_erro_quando_titulo_curto_apos_trim", async () => {
+    const useCase = new CreateExampleUseCase(repo);
+
+    await expect(useCase.execute({ title: "  ab  ", body: "corpo" })).rejects.toThrow(
+      AppError,
+    );
+    expect(created).toHaveLength(0);
+  });
+});

package/template/next/tsconfig.json

@@ -0,0 +1,37 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "lib": ["dom", "dom.iterable", "esnext"],
+    "allowJs": true,
+    "skipLibCheck": true,
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "noImplicitOverride": true,
+    "noFallthroughCasesInSwitch": true,
+    "noEmit": true,
+    "esModuleInterop": true,
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "verbatimModuleSyntax": true,
+    "jsx": "react-jsx",
+    "incremental": true,
+    "plugins": [
+      {
+        "name": "next"
+      }
+    ],
+    "paths": {
+      "@/*": ["./src/*"]
+    }
+  },
+  "include": [
+    "next-env.d.ts",
+    "**/*.ts",
+    "**/*.tsx",
+    ".next/types/**/*.ts",
+    ".next/dev/types/**/*.ts"
+  ],
+  "exclude": ["node_modules", "SDD"]
+}

package/template/next/vitest.config.ts

@@ -0,0 +1,19 @@
+import { fileURLToPath } from "node:url";
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    environment: "node",
+    include: ["tests/unit/**/*.test.ts", "tests/integration/**/*.test.ts"],
+    coverage: {
+      provider: "v8",
+      reporter: ["text", "html"],
+      include: ["src/features/**/application/**", "src/features/**/domain/**"],
+    },
+  },
+  resolve: {
+    alias: {
+      "@": fileURLToPath(new URL("./src", import.meta.url)),
+    },
+  },
+});