create-tigra 1.1.0 → 2.0.1

package/template/CLAUDE.md

@@ -1,207 +0,0 @@
-# Project Rules for Claude
-
-> This file is automatically loaded by Claude Code at the start of each conversation.
-> For detailed rules, see `.claude/rules/` directory.
-
-## Safe Editing Rules (CRITICAL)
-
-- Assume this is a **production project**. No destructive or experimental changes.
-- Keep changes **small and focused**.
-- Do NOT change existing function signatures, exports, or imports unless explicitly asked.
-- Preserve existing behavior for: Auth, Core business flows, Payment flows.
-- If introducing a breaking change, **call it out clearly**.
-- Add `// TODO:` comments for ambiguous or incomplete sections.
-- Do NOT add noisy debug logs.
-
----
-
-## Stack Overview
-
-### Server (`server/`)
-- **Runtime**: Node.js 20+ LTS
-- **Framework**: Fastify
-- **Language**: TypeScript (strict mode)
-- **Database**: MySQL + Prisma ORM
-- **Cache/Queue**: Redis + BullMQ
-- **Validation**: Zod
-- **Testing**: Vitest
-
-### Client (`client/`)
-- **Framework**: React 18+ with Vite
-- **UI Library**: Ant Design
-- **State**: Redux Toolkit + React Query
-- **Language**: TypeScript (strict mode)
-- **Styling**: CSS Modules / Tailwind
-
----
-
-## Server Architecture
-
-### File Structure
-```
-server/src/
-├── app.ts              # Fastify instance & plugin registration
-├── server.ts           # Server bootstrap (listen call only)
-├── config/             # env, constants
-├── libs/               # Shared: db, redis, logger, auth
-├── plugins/            # Fastify plugins
-├── hooks/              # Fastify hooks
-├── routes/             # Standalone routes (health, etc.)
-└── modules/<domain>/   # Domain modules
-    ├── <domain>.routes.ts
-    ├── <domain>.controller.ts
-    ├── <domain>.service.ts
-    ├── <domain>.repo.ts
-    ├── <domain>.schemas.ts
-    └── <domain>.types.ts
-```
-
-### Layered Architecture
-```
-Routes → Controllers → Services → Repositories → DB
-```
-
-- **Controllers**: HTTP handlers only, no business logic
-- **Services**: Business logic, throw typed `AppError` instances
-- **Repositories**: Database queries only
-
-### Response Contract (MANDATORY)
-
-**Success Response:**
-```json
-{
-  "success": true,
-  "message": "Human readable message",
-  "data": {}
-}
-```
-
-**Error Response:**
-```json
-{
-  "success": false,
-  "error": {
-    "code": "ERROR_CODE",
-    "message": "Human readable message"
-  }
-}
-```
-
-- Use `successResponse()` helper in controllers
-- Throw typed errors (`BadRequestError`, `NotFoundError`, etc.)
-- NEVER expose stack traces or internal errors to clients
-
-### Error Types
-- `BadRequestError`, `ValidationError`, `UnauthorizedError`
-- `ForbiddenError`, `NotFoundError`, `ConflictError`, `InternalError`
-
----
-
-## Client Architecture
-
-### File Structure
-```
-client/src/
-├── app/                # App config (App.tsx, router, providers)
-├── components/
-│   ├── layout/         # Header, Footer, Sidebar, MainLayout
-│   └── common/         # Shared components
-├── features/<domain>/  # Feature modules
-│   ├── components/
-│   ├── hooks/
-│   ├── pages/
-│   ├── services/
-│   ├── store/
-│   ├── types/
-│   └── utils/
-├── hooks/              # Global hooks
-├── lib/
-│   ├── api/            # Axios config, API types
-│   ├── constants/      # routes, api-endpoints, app.constants
-│   └── utils/
-├── store/              # Redux store
-├── types/              # Global types
-└── styles/
-```
-
-### Naming Conventions
-- **Components**: `PascalCase.tsx` (e.g., `ResourceCard.tsx`)
-- **Pages**: `PascalCase + Page.tsx` (e.g., `ResourcesPage.tsx`)
-- **Hooks**: `use<Name>.ts` (e.g., `useAuth.ts`)
-- **Services**: `<domain>.service.ts`
-- **Types**: `<domain>.types.ts`
-
-### TypeScript Rules
-- **NO `any` type** - use `unknown` if needed
-- Explicit return types for all functions
-- Use `interface` for props/objects, `type` for unions/intersections
-
-### API Response Types (must match backend)
-```tsx
-interface ApiResponse<T> {
-  success: boolean;
-  message: string;
-  data: T;
-}
-
-interface PaginatedApiResponse<T> {
-  success: boolean;
-  message: string;
-  data: {
-    items: T[];
-    pagination: {
-      page: number;
-      limit: number;
-      totalItems: number;
-      totalPages: number;
-      hasNextPage: boolean;
-      hasPreviousPage: boolean;
-    };
-  };
-}
-```
-
----
-
-## Coding Style (Both)
-
-- Prefer `async/await` over `.then()`
-- Prefer named exports (except `app.ts` and React pages)
-- Use path aliases: `@/`, `@/libs/`, `@/modules/`, etc.
-- Never `console.log` in production code - use the shared `logger`
-
----
-
-## Package Manager Detection
-
-- `pnpm-lock.yaml` exists → use `pnpm`
-- `yarn.lock` exists → use `yarn`
-- Otherwise → use `npm`
-
----
-
-## When Implementing Features
-
-1. Summarize what needs to be done
-2. List files to be created/modified
-3. Provide code for each file
-4. Mention any migrations or env variables needed
-5. If unsure, state assumptions clearly
-
----
-
-## Detailed Rules
-
-For comprehensive rules, read the appropriate files in `.claude/rules/`:
-
-**Server:**
-- `server-02-general-rules.md` - Architecture & code style
-- `server-05-project-conventions.md` - File structure & conventions
-- `server-06-response-handling.md` - Error & success responses
-
-**Client:**
-- `client-01-project-structure.md` - File structure & naming
-- `client-03-typescript-rules.md` - TypeScript conventions
-
-**Global:**
-- `global-ai-edit-safety.md` - Safe editing practices

package/template/server/.tsc-aliasrc.json

@@ -1,13 +0,0 @@
-{
-  "verbose": true,
-  "resolveFullPaths": true,
-  "resolveFullExtension": ".js",
-  "replacers": {
-    "before": [],
-    "after": []
-  },
-  "fileExtensions": {
-    "inputGlob": "**/*.js",
-    "outputCheck": ["js"]
-  }
-}

package/template/server/IMPORT_FIX_CHECKLIST.md

@@ -1,98 +0,0 @@
-# Remaining Import Fixes
-
-This document lists all remaining files that need @/ imports converted to relative .js imports.
-
-## Files Fixed So Far (8/20)
-1. ✅ server.ts
-2. ✅ app.ts
-3. ✅ libs/db.ts
-4. ✅ libs/redis.ts
-5. ✅ libs/queue.ts
-6. ✅ libs/error-handler.ts
-7. ✅ libs/auth/authenticate.middleware.ts
-
-## Remaining Files (12)
-
-### libs/auth/rbac.middleware.ts
-- `from '@/utils/errors'` → `from '../../utils/errors.js'`
-
-### hooks/request-timing.hook.ts
-- `from '@/config/env'` → `from '../config/env.js'`
-
-### plugins/security.plugin.ts
-- `from '@/config/env'` → `from '../config/env.js'`
-
-### plugins/rate-limit.plugin.ts
-- `from '@/libs/redis'` → `from '../libs/redis.js'`
-- `from '@/config/env'` → `from '../config/env.js'`
-
-### routes/health.routes.ts
-- `from '@/libs/db'` → `from '../libs/db.js'`
-- `from '@/libs/redis'` → `from '../libs/redis.js'`
-
-### workers/file.worker.ts
-- `from '@/libs/redis'` → `from '../libs/redis.js'`
-- `from '@/libs/logger'` → `from '../libs/logger.js'`
-
-### types/fastify.d.ts
-- `from '@/modules/auth/auth.types'` → `from '../modules/auth/auth.types.js'`
-- `from '@/libs/auth/rbac.middleware'` → `from '../libs/auth/rbac.middleware.js'`
-
-### modules/auth/auth.controller.ts
-- `from '@/utils/response'` → `from '../../utils/response.js'`
-- `from '@/utils/errors'` → `from '../../utils/errors.js'`
-- `from './auth.service'` → `from './auth.service.js'`
-- `from './auth.repo'` → `from './auth.repo.js'`
-- `from './auth.schemas'` → `from './auth.schemas.js'` (appears twice)
-
-### modules/auth/auth.service.ts
-- `from '@/config/env'` → `from '../../config/env.js'`
-- `from '@/libs/logger'` → `from '../../libs/logger.js'`
-- `from '@/utils/errors'` → `from '../../utils/errors.js'`
-- `from './auth.repo'` → `from './auth.repo.js'`
-- `from './auth.types'` → `from './auth.types.js'`
-- `from './auth.schemas'` → `from './auth.schemas.js'`
-
-### modules/auth/auth.repo.ts
-- `from '@/libs/db'` → `from '../../libs/db.js'`
-- `from './auth.types'` → `from './auth.types.js'`
-
-### modules/auth/auth.service.test.ts
-- `from '@/config/env'` → `from '../../config/env.js'`
-- `from '@/utils/errors'` → `from '../../utils/errors.js'`
-
-### modules/admin/admin.controller.ts
-- `from '@/utils/response'` → `from '../../utils/response.js'`
-- `from '@/utils/errors'` → `from '../../utils/errors.js'`
-- `from './admin.service'` → `from './admin.service.js'`
-- `from './admin.schemas'` → `from './admin.schemas.js'`
-
-### modules/admin/admin.service.ts
-- `from '@/libs/db'` → `from '../../libs/db.js'`
-- `from '@/utils/errors'` → `from '../../utils/errors.js'`
-- `from '@/libs/logger'` → `from '../../libs/logger.js'`
-
-### modules/resources/resources.controller.ts
-- `from '@/utils/response'` → `from '../../utils/response.js'`
-- `from '@/utils/pagination'` → `from '../../utils/pagination.js'`
-- `from './resources.service'` → `from './resources.service.js'`
-- `from './resources.schemas'` → `from './resources.schemas.js'` (appears twice)
-
-### modules/resources/resources.service.ts
-- `from '@/libs/logger'` → `from '../../libs/logger.js'`
-- `from '@/utils/errors'` → `from '../../utils/errors.js'`
-- `from './resources.repo'` → `from './resources.repo.js'`
-- `from './resources.types'` → `from './resources.types.js'`
-- `from './resources.schemas'` → `from './resources.schemas.js'`
-
-### modules/resources/resources.repo.ts
-- `from '@/libs/db'` → `from '../../libs/db.js'`
-- `from './resources.types'` → `from './resources.types.js'`
-- `from './resources.schemas'` → `from './resources.schemas.js'`
-
-## After Fixing All Imports
-
-1. Delete `.tsc-aliasrc.json` (no longer needed)
-2. Remove `tsc-alias` from devDependencies in package.json
-3. Test build: `npm run build`
-4. Test run: `npm start`

package/template/server/IMPORT_FIX_COMPLETE.md

@@ -1,89 +0,0 @@
-# ✅ Import Fix Complete!
-
-## Summary
-
-Successfully converted **ALL 20 FILES** from `@/` path aliases to relative imports with `.js` extensions for ES module compatibility.
-
-## Files Fixed (20/20) ✅
-
-### Core Files (2)
-1. ✅ src/server.ts
-2. ✅ src/app.ts
-
-### Libs (5)
-3. ✅ src/libs/db.ts
-4. ✅ src/libs/redis.ts
-5. ✅ src/libs/queue.ts
-6. ✅ src/libs/error-handler.ts
-7. ✅ src/libs/auth/authenticate.middleware.ts
-8. ✅ src/libs/auth/rbac.middleware.ts
-
-### Hooks, Plugins, Routes, Workers, Types (6)
-9. ✅ src/hooks/request-timing.hook.ts
-10. ✅ src/plugins/security.plugin.ts
-11. ✅ src/plugins/rate-limit.plugin.ts
-12. ✅ src/routes/health.routes.ts
-13. ✅ src/workers/file.worker.ts
-14. ✅ src/types/fastify.d.ts
-
-### Auth Module (3)
-15. ✅ src/modules/auth/auth.repo.ts
-16. ✅ src/modules/auth/auth.service.ts
-17. ✅ src/modules/auth/auth.controller.ts
-
-### Admin Module (2)
-18. ✅ src/modules/admin/admin.service.ts
-19. ✅ src/modules/admin/admin.controller.ts
-
-### Resources Module (3)
-20. ✅ src/modules/resources/resources.service.ts
-21. ✅ src/modules/resources/resources.repo.ts
-22. ✅ src/modules/resources/resources.controller.ts
-
-## Next Steps
-
-### 1. Clean Up (Optional)
-```powershell
-# Delete temporary files
-rm .tsc-aliasrc.json
-rm scripts/fix-imports.mjs
-rm scripts/fix-all-imports.ps1
-rm IMPORT_FIX_CHECKLIST.md
-rm REMAINING_IMPORT_FIXES.md
-```
-
-### 2. Test Build
-```powershell
-npm run build
-```
-
-### 3. Test Run
-```powershell
-npm start
-```
-
-## What Was Changed
-
-Every import statement was updated:
-- **Before**: `import { something } from '@/path/to/module'`
-- **After**: `import { something } from '../../path/to/module.js'`
-
-All relative imports now include the `.js` extension as required by ES modules in Node.js.
-
-## Pattern Used
-
-- Files in `src/` → `./file.js`
-- Files in `src/folder/` → `../file.js`
-- Files in `src/folder/subfolder/` → `../../file.js`
-- Always add `.js` extension to relative imports
-
-## Configuration Changes
-
-- ✅ Removed `tsc-alias` from build script in `package.json`
-- ✅ Removed path aliases from `tsconfig.build.json`
-
-## Status
-
-🎉 **All imports successfully converted!**
-
-The project is now ready to build and run with ES modules.

package/template/server/README.md

@@ -1,183 +0,0 @@
-# {{PROJECT_DISPLAY_NAME}}
-
-{{PROJECT_DESCRIPTION}}
-
-## Features
-- JWT Authentication (access + refresh tokens)
-- User management with role-based access
-- Complete CRUD for resources
-- Pagination with filters
-- Rate limiting with Redis
-- Background job processing (BullMQ)
-- Comprehensive error handling
-- Request logging and monitoring
-- Health checks
-
-## Tech Stack
-- **Runtime**: Node.js 20+
-- **Framework**: Fastify 4
-- **Database**: MySQL 8.0 with Prisma ORM
-- **Cache/Queue**: Redis + BullMQ
-- **Validation**: Zod
-- **Authentication**: JWT (jsonwebtoken)
-- **Testing**: Vitest + Supertest
-
-## Prerequisites
-- Node.js 20 or higher
-- Docker and Docker Compose
-- npm or pnpm
-
-## Quick Start
-
-```bash
-# 1. Install dependencies
-npm install
-
-# 2. Start Docker services (MySQL + Redis)
-docker-compose up -d
-
-# 3. Initialize database (creates .env, waits for DB, runs migrations)
-npm run db:init
-
-# 4. Seed the database
-npm run prisma:seed
-
-# 5. Start development server
-npm run dev
-```
-
-Server will start at http://localhost:3000
-
-### Production Installation
-
-For production deployments, install only production dependencies:
-
-```bash
-# Install production dependencies only (faster, smaller)
-npm install --omit=dev
-
-# Generate Prisma Client
-npx prisma generate
-
-# Run migrations
-npx prisma migrate deploy
-```
-
-## API Endpoints
-
-Once running, you can access:
-- Health Check: http://localhost:3000/health
-- Auth endpoints: http://localhost:3000/api/v1/auth/*
-- Resources endpoints: http://localhost:3000/api/v1/resources/*
-- Admin endpoints: http://localhost:3000/api/v1/admin/*
-
-## Available Scripts
-
-```bash
-npm run dev              # Start dev server with hot reload
-npm run build            # Build for production
-npm run start            # Start production server
-npm test                 # Run tests
-npm run test:watch       # Run tests in watch mode
-npm run test:coverage    # Generate coverage report
-npm run prisma:generate  # Generate Prisma Client
-npm run prisma:migrate   # Run migrations (dev)
-npm run prisma:seed      # Seed database
-npm run prisma:studio    # Open Prisma Studio
-```
-
-## Project Structure
-
-```
-src/
-├── app.ts              # Fastify app with plugins
-├── server.ts           # Server startup
-├── config/
-│   └── env.ts         # Environment validation
-├── libs/
-│   ├── db.ts          # Prisma client
-│   ├── redis.ts       # Redis connection
-│   ├── logger.ts      # Pino logger
-│   └── queue.ts       # BullMQ queues
-├── modules/
-│   ├── auth/          # Authentication module
-│   │   ├── auth.routes.ts
-│   │   ├── auth.controller.ts
-│   │   ├── auth.service.ts
-│   │   ├── auth.repo.ts
-│   │   ├── auth.schemas.ts
-│   │   └── auth.types.ts
-│   └── resources/     # Resources module
-├── utils/
-│   ├── errors.ts      # Custom error classes
-│   ├── response.ts    # Response helpers
-│   └── pagination.ts  # Pagination helper
-└── workers/
-    └── email.worker.ts # Background email worker
-```
-
-## Environment Variables
-
-Required:
-- `DATABASE_URL` - MySQL connection string
-- `JWT_SECRET` - JWT signing secret (min 32 chars)
-- `REDIS_HOST` - Redis host
-- `REDIS_PORT` - Redis port
-
-See `.env.example` for all available variables.
-
-## Testing
-
-```bash
-npm test                 # Run all tests
-npm run test:coverage    # Generate coverage report
-```
-
-Coverage targets: 70%+ overall
-
-## Management Tools
-
-The project includes built-in web interfaces for managing your data:
-
-### Database (phpMyAdmin)
-- **URL:** [http://localhost:8080](http://localhost:8080)
-- **User:** `{{DATABASE_USER}}` or `root`
-- **Password:** `{{DATABASE_PASSWORD}}` or `password` (check `docker-compose.yml`)
-
-### Redis (Redis Commander)
-- **URL:** [http://localhost:8081](http://localhost:8081)
-- **Host:** `local:redis:6379` (default)
-
-## Production Deployment
-
-### Production Checklist
-
-- [ ] Set `NODE_ENV=production`
-- [ ] Build application: `npm run build`
-- [ ] Configure environment variables
-- [ ] Configure Nginx reverse proxy
-- [ ] Set up SSL certificates (Let's Encrypt)
-- [ ] Configure firewall (UFW/iptables)
-- [ ] Set up monitoring (Sentry, logging)
-- [ ] Configure log rotation
-- [ ] Set up automated backups (database + uploads)
-- [ ] Configure rate limiting for production
-- [ ] Enable CORS for production domains only
-
-## Security
-
-This project follows security best practices and undergoes regular security audits.
-
-**Security Status**: Production dependencies 100% secure
-
-For detailed information about:
-- Known security considerations
-- Security best practices
-- Vulnerability reporting
-- Audit history
-
-See **[SECURITY.md](./SECURITY.md)**
-
-## License
-
-MIT