create-skit 0.1.0

package/templates/base-web/src/lib/billing/types.ts

@@ -0,0 +1,25 @@
+export type BillingProviderName = "stripe" | "polar";
+
+export type CheckoutSessionInput = {
+  customerEmail: string;
+  successUrl: string;
+  cancelUrl: string;
+  userId: string;
+};
+
+export type PortalSessionInput = {
+  customerEmail: string;
+  returnUrl: string;
+  userId: string;
+};
+
+export type WebhookInput = {
+  headers: Headers;
+  rawBody: string;
+};
+
+export interface BillingProvider {
+  createCheckoutSession(input: CheckoutSessionInput): Promise<{ url: string }>;
+  createCustomerPortalSession(input: PortalSessionInput): Promise<{ url: string }>;
+  handleWebhook(input: WebhookInput): Promise<void>;
+}

package/templates/base-web/src/lib/email/index.ts

@@ -0,0 +1,19 @@
+import "server-only";
+
+__EMAIL_PROVIDER_IMPORTS__
+
+__EMAIL_ENV_IMPORT__
+
+import type { EmailTemplateResult } from "./templates";
+
+__EMAIL_PROVIDER_SETUP__
+
+__EMAIL_FROM_ADDRESS_HELPER__
+
+export async function sendEmail(__EMAIL_SEND_SIGNATURE__: {
+  to: string | string[];
+  template: EmailTemplateResult;
+}) {
+  void __EMAIL_SEND_SIGNATURE__;
+__EMAIL_SEND_IMPLEMENTATION__
+}

package/templates/base-web/src/lib/email/templates.test.ts

@@ -0,0 +1,12 @@
+import { describe, expect, it } from "vitest";
+
+import { __EMAIL_TEMPLATE_TEST_IMPORT__ } from "@/lib/email/templates";
+
+describe("__EMAIL_TEMPLATE_TEST_SUITE__", () => {
+  it("__EMAIL_TEMPLATE_TEST_CASE__", () => {
+    const template = __EMAIL_TEMPLATE_TEST_FACTORY__;
+
+    expect(template.subject).toContain("__EMAIL_TEMPLATE_EXPECT_SUBJECT__");
+    expect(template.text).toContain("__EMAIL_TEMPLATE_EXPECT_TEXT__");
+  });
+});

package/templates/base-web/src/lib/email/templates.ts

@@ -0,0 +1,40 @@
+export type EmailTemplateResult = {
+  subject: string;
+  text: string;
+  html: string;
+};
+
+export function createWelcomeEmailTemplate(input: {
+  appName: string;
+  recipientName?: string | null;
+}): EmailTemplateResult {
+  const greeting = input.recipientName ? `Hi ${input.recipientName},` : "Hi there,";
+
+  return {
+    subject: `Welcome to ${input.appName}`,
+    text: `${greeting}\n\nYour starter app is ready. Auth, billing, and the core project structure are already in place.\n\nNext step: sign in and continue building.\n`,
+    html: `<p>${greeting}</p><p>Your starter app is ready. Auth, billing, and the core project structure are already in place.</p><p>Next step: sign in and continue building.</p>`
+  };
+}
+
+export function createPasswordResetPlaceholderTemplate(input: {
+  appName: string;
+  resetUrl: string;
+}): EmailTemplateResult {
+  return {
+    subject: `Reset your ${input.appName} password`,
+    text: `Use this link to reset your password: ${input.resetUrl}`,
+    html: `<p>Use this link to reset your password:</p><p><a href="${input.resetUrl}">${input.resetUrl}</a></p>`
+  };
+}
+
+export function createBillingUpdatePlaceholderTemplate(input: {
+  appName: string;
+  provider: string;
+}): EmailTemplateResult {
+  return {
+    subject: `${input.appName} billing update`,
+    text: `A billing event was received from ${input.provider}. Replace this placeholder with your real billing notification workflow.`,
+    html: `<p>A billing event was received from <strong>${input.provider}</strong>.</p><p>Replace this placeholder with your real billing notification workflow.</p>`
+  };
+}

package/templates/base-web/src/lib/env.ts

@@ -0,0 +1,83 @@
+import "server-only";
+
+import { z } from "zod";
+
+const envSchema = z.object({
+  NODE_ENV: z.enum(["development", "test", "production"]).default("development"),
+  NEXT_PUBLIC_APP_URL: z.string().url(),
+  BETTER_AUTH_URL: z.string().url(),
+  DATABASE_URL: z.string().min(1),
+  BETTER_AUTH_SECRET: z.string().min(1),
+__AUTH_PROVIDER_ENV_SCHEMA__
+  BILLING_PROVIDER: z.enum(["stripe", "polar", "both", "none"]).default("stripe"),
+  EMAIL_PROVIDER: z.enum(["resend", "none"]).default("resend"),
+  RESEND_API_KEY: z.string().min(1).optional(),
+  EMAIL_FROM: z.string().min(1).optional(),
+  STRIPE_PRICE_ID: z.string().min(1).optional(),
+  STRIPE_SECRET_KEY: z.string().min(1).optional(),
+  STRIPE_WEBHOOK_SECRET: z.string().min(1).optional(),
+  POLAR_ACCESS_TOKEN: z.string().min(1).optional(),
+  POLAR_ORGANIZATION_ID: z.string().min(1).optional(),
+  POLAR_PRODUCT_ID: z.string().min(1).optional(),
+  POLAR_SERVER: z.enum(["production", "sandbox"]).default("sandbox"),
+  POLAR_WEBHOOK_SECRET: z.string().min(1).optional()
+});
+
+type Env = z.infer<typeof envSchema>;
+
+let cachedEnv: Env | null = null;
+const isBuildRuntime =
+  process.env.npm_lifecycle_event === "build" ||
+  process.env.NEXT_PHASE === "phase-production-build";
+const isProductionRuntime = process.env.NODE_ENV === "production" && !isBuildRuntime;
+
+function readRequiredValue(name: string, fallback: string) {
+  const value = process.env[name];
+
+  if (value) {
+    return value;
+  }
+
+  if (!isProductionRuntime) {
+    return fallback;
+  }
+
+  return value;
+}
+
+function parseEnv(): Env {
+  return envSchema.parse({
+    NODE_ENV: process.env.NODE_ENV,
+    NEXT_PUBLIC_APP_URL: readRequiredValue("NEXT_PUBLIC_APP_URL", "http://localhost:3000"),
+    BETTER_AUTH_URL: readRequiredValue("BETTER_AUTH_URL", "http://localhost:3000"),
+    DATABASE_URL: readRequiredValue(
+      "DATABASE_URL",
+      "postgresql://postgres:postgres@localhost:5432/skit"
+    ),
+    BETTER_AUTH_SECRET: readRequiredValue("BETTER_AUTH_SECRET", "build-placeholder-secret"),
+__AUTH_PROVIDER_ENV_VALUES__
+    BILLING_PROVIDER: process.env.BILLING_PROVIDER,
+    EMAIL_PROVIDER: process.env.EMAIL_PROVIDER,
+    RESEND_API_KEY: process.env.RESEND_API_KEY,
+    EMAIL_FROM: process.env.EMAIL_FROM,
+    STRIPE_PRICE_ID: process.env.STRIPE_PRICE_ID,
+    STRIPE_SECRET_KEY: process.env.STRIPE_SECRET_KEY,
+    STRIPE_WEBHOOK_SECRET: process.env.STRIPE_WEBHOOK_SECRET,
+    POLAR_ACCESS_TOKEN: process.env.POLAR_ACCESS_TOKEN,
+    POLAR_ORGANIZATION_ID: process.env.POLAR_ORGANIZATION_ID,
+    POLAR_PRODUCT_ID: process.env.POLAR_PRODUCT_ID,
+    POLAR_SERVER: process.env.POLAR_SERVER,
+    POLAR_WEBHOOK_SECRET: process.env.POLAR_WEBHOOK_SECRET
+  });
+}
+
+export function getEnv(): Env {
+  cachedEnv ??= parseEnv();
+  return cachedEnv;
+}
+
+export const env = new Proxy({} as Env, {
+  get(_target, property) {
+    return getEnv()[property as keyof Env];
+  }
+});

package/templates/base-web/tests/e2e/home.spec.ts

@@ -0,0 +1,8 @@
+import { expect, test } from "@playwright/test";
+
+test("__HOME_E2E_TEST_NAME__", async ({ page }) => {
+  await page.goto("/");
+
+  await expect(page.getByRole("heading", { name: /__HOME_E2E_HEADING__/i })).toBeVisible();
+  await expect(page.getByRole("link", { name: /__HOME_E2E_LINK__/i })).toBeVisible();
+});

package/templates/base-web/tsconfig.json

@@ -0,0 +1,34 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "lib": ["dom", "dom.iterable", "es2022"],
+    "allowJs": false,
+    "skipLibCheck": true,
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "exactOptionalPropertyTypes": true,
+    "noEmit": true,
+    "esModuleInterop": true,
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "baseUrl": ".",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "jsx": "react-jsx",
+    "incremental": true,
+    "verbatimModuleSyntax": true,
+    "moduleDetection": "force",
+    "plugins": [{ "name": "next" }],
+    "paths": {
+      "@/*": ["./src/*"]
+    }
+  },
+  "include": [
+    "next-env.d.ts",
+    "**/*.ts",
+    "**/*.tsx",
+    ".next/types/**/*.ts",
+    ".next/dev/types/**/*.ts"
+  ],
+  "exclude": ["node_modules"]
+}

package/templates/base-web/vitest.config.ts

@@ -0,0 +1,19 @@
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+import { defineConfig } from "vitest/config";
+
+const dirname = path.dirname(fileURLToPath(import.meta.url));
+
+export default defineConfig({
+  resolve: {
+    alias: {
+      "@": path.resolve(dirname, "./src")
+    }
+  },
+  test: {
+    environment: "jsdom",
+    globals: true,
+    include: ["src/**/*.test.{ts,tsx}"]
+  }
+});

package/templates/blank/.env.example

@@ -0,0 +1,16 @@
+NEXT_PUBLIC_APP_URL=http://localhost:3000
+BETTER_AUTH_URL=http://localhost:3000
+DATABASE_URL=postgresql://postgres:postgres@localhost:5432/__PROJECT_NAME__
+BETTER_AUTH_SECRET=replace-me
+RESEND_API_KEY=re_xxx
+EMAIL_FROM=Panda Starter <onboarding@example.com>
+STRIPE_SECRET_KEY=sk_test_xxx
+STRIPE_PRICE_ID=price_xxx
+STRIPE_WEBHOOK_SECRET=whsec_xxx
+POLAR_ACCESS_TOKEN=polar_pat_xxx
+POLAR_ORGANIZATION_ID=org_xxx
+POLAR_PRODUCT_ID=prod_xxx
+POLAR_SERVER=sandbox
+POLAR_WEBHOOK_SECRET=polar_whsec_xxx
+BILLING_PROVIDER=__BILLING_PROVIDER__
+EMAIL_PROVIDER=__EMAIL_PROVIDER__

package/templates/blank/.github/workflows/ci.yml

@@ -0,0 +1,34 @@
+name: CI
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+
+jobs:
+  quality:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: __CI_CACHE__
+
+      - name: Install
+        run: __CI_INSTALL_COMMAND__
+
+      - name: Lint
+        run: __CI_RUN_LINT__
+
+      - name: Typecheck
+        run: __CI_RUN_TYPECHECK__
+
+      - name: Unit tests
+        run: __CI_RUN_TEST__
+
+      - name: Build
+        run: __CI_RUN_BUILD__

package/templates/blank/.husky/pre-commit

@@ -0,0 +1,3 @@
+#!/usr/bin/env sh
+
+npm run lint-staged && npm run typecheck

package/templates/blank/.husky/pre-push

@@ -0,0 +1,3 @@
+#!/usr/bin/env sh
+
+npm run test

package/templates/blank/.prettierignore

@@ -0,0 +1,3 @@
+.next
+coverage
+node_modules

package/templates/blank/drizzle.config.ts

@@ -0,0 +1,16 @@
+import { defineConfig } from "drizzle-kit";
+
+if (!process.env.DATABASE_URL) {
+  throw new Error("DATABASE_URL is required to use Drizzle.");
+}
+
+export default defineConfig({
+  schema: "./src/db/schema/index.ts",
+  out: "./src/db/migrations",
+  dialect: "postgresql",
+  dbCredentials: {
+    url: process.env.DATABASE_URL
+  },
+  verbose: true,
+  strict: true
+});

package/templates/blank/eslint.config.mjs

@@ -0,0 +1,127 @@
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+import { defineConfig, globalIgnores } from "eslint/config";
+import prettier from "eslint-config-prettier/flat";
+import nextTs from "eslint-config-next/typescript";
+import nextVitals from "eslint-config-next/core-web-vitals";
+import importPlugin from "eslint-plugin-import";
+import unusedImports from "eslint-plugin-unused-imports";
+import globals from "globals";
+
+const SOURCE_FILES = ["**/*.{js,mjs,cjs,ts,mts,cts,jsx,tsx}"];
+const dirname = path.dirname(fileURLToPath(import.meta.url));
+
+export default defineConfig([
+  ...nextVitals,
+  ...nextTs,
+  {
+    files: SOURCE_FILES,
+    languageOptions: {
+      parserOptions: {
+        projectService: true,
+        tsconfigRootDir: dirname
+      },
+      globals: {
+        ...globals.browser,
+        ...globals.nodeBuiltin
+      }
+    },
+    plugins: {
+      import: importPlugin,
+      "unused-imports": unusedImports
+    },
+    settings: {
+      "import/resolver": {
+        typescript: true
+      }
+    },
+    rules: {
+      "@typescript-eslint/consistent-type-imports": [
+        "error",
+        {
+          prefer: "type-imports",
+          fixStyle: "inline-type-imports"
+        }
+      ],
+      "@typescript-eslint/no-floating-promises": "error",
+      "@typescript-eslint/no-misused-promises": [
+        "error",
+        {
+          checksVoidReturn: {
+            attributes: false
+          }
+        }
+      ],
+      "@typescript-eslint/no-unused-vars": "off",
+      "import/first": "error",
+      "import/newline-after-import": "error",
+      "import/no-duplicates": "error",
+      "import/order": [
+        "error",
+        {
+          groups: [
+            "builtin",
+            "external",
+            "internal",
+            ["parent", "sibling", "index"],
+            "object",
+            "type"
+          ],
+          alphabetize: {
+            order: "asc",
+            caseInsensitive: true
+          },
+          "newlines-between": "always",
+          pathGroups: [
+            {
+              pattern: "@/**",
+              group: "internal",
+              position: "before"
+            }
+          ],
+          pathGroupsExcludedImportTypes: ["builtin"]
+        }
+      ],
+      "unused-imports/no-unused-imports": "error",
+      "unused-imports/no-unused-vars": [
+        "warn",
+        {
+          vars: "all",
+          varsIgnorePattern: "^_",
+          args: "after-used",
+          argsIgnorePattern: "^_"
+        }
+      ]
+    }
+  },
+  {
+    files: SOURCE_FILES,
+    ignores: ["drizzle.config.ts", "src/lib/env.ts"],
+    rules: {
+      "no-restricted-properties": [
+        "error",
+        {
+          object: "process",
+          property: "env",
+          message: "Use the validated env object from src/lib/env.ts."
+        }
+      ]
+    }
+  },
+  prettier,
+  globalIgnores([
+    ".next/**",
+    "out/**",
+    "build/**",
+    "coverage/**",
+    "drizzle.config.ts",
+    "eslint.config.mjs",
+    "next.config.ts",
+    "playwright.config.ts",
+    "prettier.config.mjs",
+    "proxy.ts",
+    "next-env.d.ts",
+    "vitest.config.ts"
+  ])
+]);

package/templates/blank/next-env.d.ts

@@ -0,0 +1,4 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
+
+// This file is managed by Next.js.

package/templates/blank/next.config.ts

@@ -0,0 +1,5 @@
+import type { NextConfig } from "next";
+
+const nextConfig: NextConfig = {};
+
+export default nextConfig;

package/templates/blank/package.json

@@ -0,0 +1,75 @@
+{
+  "name": "__PROJECT_NAME__",
+  "version": "0.1.0",
+  "private": true,
+  "packageManager": "__PACKAGE_MANAGER__",
+  "type": "module",
+  "scripts": {
+    "dev": "next dev",
+    "build": "next build",
+    "start": "next start",
+    "lint": "eslint . --max-warnings=0",
+    "lint:fix": "eslint . --fix",
+    "typecheck": "tsc --noEmit",
+    "format": "prettier . --write",
+    "format:check": "prettier . --check",
+    "check": "__CHECK_COMMAND__",
+    "prepare": "husky",
+    "lint-staged": "lint-staged",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:e2e": "playwright test",
+    "test:e2e:headed": "playwright test --headed",
+    "db:generate": "drizzle-kit generate",
+    "db:migrate": "drizzle-kit migrate",
+    "db:push": "drizzle-kit push",
+    "db:studio": "drizzle-kit studio",
+    "db:seed": "tsx src/db/seeds/index.ts",
+    "auth:generate": "npx @better-auth/cli@latest generate --config src/lib/auth.ts --output src/db/schema/auth.ts",
+    "auth:secret": "npx @better-auth/cli@latest secret"
+  },
+  "dependencies": {
+    "better-auth": "1.3.8",
+    "drizzle-orm": "0.44.x",
+    "next": "16.2.x",
+__DATABASE_DEPENDENCIES__
+    "react": "19.2.x",
+    "react-dom": "19.2.x",
+__PROVIDER_PACKAGE_DEPENDENCIES__
+    "server-only": "^0.0.1",
+    "zod": "4.1.5"
+  },
+  "devDependencies": {
+    "@better-auth/cli": "1.3.8",
+    "@playwright/test": "1.55.0",
+    "@testing-library/react": "16.3.0",
+    "@types/node": "^24.0.0",
+__DATABASE_DEV_DEPENDENCIES__
+    "@types/react": "^19.0.0",
+    "@types/react-dom": "^19.0.0",
+    "drizzle-kit": "0.31.x",
+    "eslint": "9.35.0",
+    "eslint-config-next": "16.2.x",
+    "eslint-config-prettier": "10.1.8",
+    "eslint-import-resolver-typescript": "^3.10.1",
+    "eslint-plugin-import": "2.32.0",
+    "eslint-plugin-unused-imports": "4.2.0",
+    "globals": "16.3.0",
+    "husky": "^9.1.7",
+    "jsdom": "26.1.0",
+    "lint-staged": "^16.1.6",
+    "playwright": "1.55.0",
+    "prettier": "3.6.2",
+    "tsx": "4.20.x",
+    "typescript": "5.9.x",
+    "vitest": "3.2.4"
+  },
+  "lint-staged": {
+    "*.{js,jsx,ts,tsx,mjs,cjs}": [
+      "eslint --fix"
+    ],
+    "*.{json,md,css,yml,yaml,html}": [
+      "prettier --write"
+    ]
+  }
+}

package/templates/blank/playwright.config.ts

@@ -0,0 +1,21 @@
+import { defineConfig, devices } from "@playwright/test";
+
+export default defineConfig({
+  testDir: "./tests/e2e",
+  fullyParallel: true,
+  use: {
+    baseURL: "http://127.0.0.1:3000",
+    trace: "on-first-retry"
+  },
+  webServer: {
+    command: "npm run dev",
+    url: "http://127.0.0.1:3000",
+    reuseExistingServer: !process.env.CI
+  },
+  projects: [
+    {
+      name: "chromium",
+      use: { ...devices["Desktop Chrome"] }
+    }
+  ]
+});

package/templates/blank/prettier.config.mjs

@@ -0,0 +1,9 @@
+/** @type {import("prettier").Config} */
+const config = {
+  semi: true,
+  singleQuote: false,
+  trailingComma: "none",
+  printWidth: 88
+};
+
+export default config;

package/templates/blank/proxy.ts

@@ -0,0 +1,28 @@
+import { NextResponse } from "next/server";
+import type { NextRequest } from "next/server";
+
+import { getSessionCookie } from "better-auth/cookies";
+
+export function proxy(request: NextRequest) {
+  const sessionCookie = getSessionCookie(request);
+  const { pathname } = request.nextUrl;
+
+  if (
+    !sessionCookie &&
+    (pathname.startsWith("/dashboard") ||
+      pathname.startsWith("/billing") ||
+      pathname.startsWith("/email"))
+  ) {
+    return NextResponse.redirect(new URL("/sign-in", request.url));
+  }
+
+  if (sessionCookie && (pathname === "/sign-in" || pathname === "/sign-up")) {
+    return NextResponse.redirect(new URL("/dashboard", request.url));
+  }
+
+  return NextResponse.next();
+}
+
+export const config = {
+  matcher: ["/dashboard/:path*", "/billing/:path*", "/email/:path*", "/sign-in", "/sign-up"]
+};

package/templates/blank/src/app/api/auth/[...all]/route.ts

@@ -0,0 +1,5 @@
+import { toNextJsHandler } from "better-auth/next-js";
+
+import { auth } from "@/lib/auth";
+
+export const { GET, POST } = toNextJsHandler(auth);

package/templates/blank/src/app/api/billing/checkout/route.ts

@@ -0,0 +1,26 @@
+import { redirect } from "next/navigation";
+
+import { getSession } from "@/lib/auth-session";
+import { getBillingProvider, getBillingProviderName } from "@/lib/billing";
+import { env } from "@/lib/env";
+
+export async function POST(request: Request) {
+  const session = await getSession();
+
+  if (!session) {
+    redirect("/sign-in");
+  }
+
+  const formData = await request.formData();
+  const selected = String(formData.get("provider") ?? "");
+  const providerName = getBillingProviderName(selected);
+  const provider = getBillingProvider(providerName);
+  const checkout = await provider.createCheckoutSession({
+    userId: session.user.id,
+    customerEmail: session.user.email,
+    successUrl: `${env.NEXT_PUBLIC_APP_URL}/billing?success=1&provider=${providerName}`,
+    cancelUrl: `${env.NEXT_PUBLIC_APP_URL}/billing?canceled=1&provider=${providerName}`
+  });
+
+  redirect(checkout.url);
+}

package/templates/blank/src/app/api/billing/portal/route.ts

@@ -0,0 +1,25 @@
+import { redirect } from "next/navigation";
+
+import { getSession } from "@/lib/auth-session";
+import { getBillingProvider, getBillingProviderName } from "@/lib/billing";
+import { env } from "@/lib/env";
+
+export async function POST(request: Request) {
+  const session = await getSession();
+
+  if (!session) {
+    redirect("/sign-in");
+  }
+
+  const formData = await request.formData();
+  const selected = String(formData.get("provider") ?? "");
+  const providerName = getBillingProviderName(selected);
+  const provider = getBillingProvider(providerName);
+  const portal = await provider.createCustomerPortalSession({
+    userId: session.user.id,
+    customerEmail: session.user.email,
+    returnUrl: `${env.NEXT_PUBLIC_APP_URL}/billing?provider=${providerName}`
+  });
+
+  redirect(portal.url);
+}