create-tigra 2.0.1 → 2.0.3

package/bin/create-tigra.js

@@ -124,11 +124,11 @@ async function main() {
   program
     .name('create-tigra')
     .description('Create a production-ready full-stack app with Next.js + Fastify + Prisma + Redis')
-    .version('2.0.1')
+    .version('2.0.2')
     .argument('[project-name]', 'Name for your new project')
     .action(async (projectNameArg) => {
       console.log();
-      console.log(chalk.bold('  Create Tigra') + chalk.dim(' v2.0.1'));
+      console.log(chalk.bold('  Create Tigra') + chalk.dim(' v2.0.2'));
       console.log();
 
       let projectName = projectNameArg;
@@ -171,6 +171,9 @@ async function main() {
         }
       }
 
+      // Generate random port offset (1-200) so multiple projects don't conflict
+      const portOffset = crypto.randomInt(1, 201);
+
       // Derive all variables
       const variables = {
         PROJECT_NAME: projectName,
@@ -178,6 +181,10 @@ async function main() {
         PROJECT_DISPLAY_NAME: toTitleCase(projectName),
         DATABASE_NAME: `${toSnakeCase(projectName)}_db`,
         JWT_SECRET: crypto.randomBytes(48).toString('hex'),
+        MYSQL_PORT: String(3306 + portOffset),
+        PHPMYADMIN_PORT: String(8080 + portOffset),
+        REDIS_PORT: String(6379 + portOffset),
+        REDIS_COMMANDER_PORT: String(8081 + portOffset),
       };
 
       // Copy template
@@ -197,6 +204,15 @@ async function main() {
           }
         }
 
+        // Generate .env from .env.example (so users don't have to copy manually)
+        for (const envExample of ['server/.env.example', 'client/.env.example']) {
+          const examplePath = path.join(targetDir, envExample);
+          const envPath = path.join(targetDir, envExample.replace('.env.example', '.env'));
+          if (await fs.pathExists(examplePath)) {
+            await fs.copy(examplePath, envPath);
+          }
+        }
+
         spinner.succeed('Project scaffolded successfully!');
       } catch (error) {
         spinner.fail('Failed to scaffold project');
@@ -222,7 +238,6 @@ async function main() {
       console.log();
       console.log(cyan('    1 ') + 'Install & start infrastructure');
       console.log(dim('      npm install'));
-      console.log(dim('      cp .env.example .env'));
       console.log(dim('      npm run docker:up'));
       console.log();
       console.log(cyan('    2 ') + 'Set up database');
@@ -236,15 +251,14 @@ async function main() {
       console.log();
       console.log(cyan('    4 ') + 'Start the client');
       console.log(dim('      npm install'));
-      console.log(dim('      cp .env.example .env'));
       console.log(dim('      npm run dev'));
       console.log();
       console.log(line);
       console.log();
       console.log(dim('  App           ') + cyan('http://localhost:3000'));
       console.log(dim('  API           ') + cyan('http://localhost:8000'));
-      console.log(dim('  phpMyAdmin    ') + cyan('http://localhost:8080'));
-      console.log(dim('  Redis CMD     ') + cyan('http://localhost:8081'));
+      console.log(dim('  phpMyAdmin    ') + cyan(`http://localhost:${variables.PHPMYADMIN_PORT}`));
+      console.log(dim('  Redis CMD     ') + cyan(`http://localhost:${variables.REDIS_COMMANDER_PORT}`));
       console.log();
       console.log(line);
       console.log();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-tigra",
-  "version": "2.0.1",
+  "version": "2.0.3",
   "type": "module",
   "description": "Create a production-ready full-stack app with Next.js 16 + Fastify 5 + Prisma + Redis",
   "bin": {

package/template/client/package.json

@@ -28,6 +28,9 @@
     "tailwindcss-animate": "^1.0.7",
     "zod": "^4.3.6"
   },
+  "overrides": {
+    "minimatch": ">=10.2.1"
+  },
   "devDependencies": {
     "@tailwindcss/postcss": "^4",
     "@tanstack/react-query-devtools": "^5.91.3",

package/template/server/.env.example

@@ -17,7 +17,7 @@ HOST=0.0.0.0
 
 # Database connection string
 # Format: mysql://username:password@host:port/database
-DATABASE_URL="mysql://root:rootpassword@localhost:3306/{{DATABASE_NAME}}"
+DATABASE_URL="mysql://root:rootpassword@localhost:{{MYSQL_PORT}}/{{DATABASE_NAME}}"
 
 # Connection pool settings (for high-traffic production)
 # Min connections: 2-5 for low traffic, 5-10 for medium, 10-20 for high
@@ -31,7 +31,7 @@ DATABASE_POOL_MAX=10
 
 # Redis connection URL
 # Format: redis://[:password@]host:port[/database]
-REDIS_URL="redis://localhost:6379"
+REDIS_URL="redis://localhost:{{REDIS_PORT}}"
 
 # Max retry attempts for failed Redis operations
 REDIS_MAX_RETRIES=3
@@ -39,6 +39,16 @@ REDIS_MAX_RETRIES=3
 # Connection timeout in milliseconds
 REDIS_CONNECT_TIMEOUT=10000
 
+# ===================================================================
+# DOCKER PORTS (auto-generated, unique per project)
+# ===================================================================
+
+# Change these if they conflict with other services on your machine
+MYSQL_PORT={{MYSQL_PORT}}
+PHPMYADMIN_PORT={{PHPMYADMIN_PORT}}
+REDIS_PORT={{REDIS_PORT}}
+REDIS_COMMANDER_PORT={{REDIS_COMMANDER_PORT}}
+
 # ===================================================================
 # JWT AUTHENTICATION
 # ===================================================================

package/template/server/docker-compose.yml

@@ -9,7 +9,7 @@ services:
     container_name: {{PROJECT_NAME}}-mysql
     restart: unless-stopped
     ports:
-      - '3306:3306'
+      - '${MYSQL_PORT:-{{MYSQL_PORT}}}:3306'
     environment:
       MYSQL_ROOT_PASSWORD: rootpassword
       MYSQL_DATABASE: {{DATABASE_NAME}}
@@ -28,7 +28,7 @@ services:
     container_name: {{PROJECT_NAME}}-phpmyadmin
     restart: unless-stopped
     ports:
-      - '8080:80'
+      - '${PHPMYADMIN_PORT:-{{PHPMYADMIN_PORT}}}:80'
     environment:
       PMA_HOST: mysql
       PMA_PORT: 3306
@@ -48,7 +48,7 @@ services:
     container_name: {{PROJECT_NAME}}-redis
     restart: unless-stopped
     ports:
-      - '6379:6379'
+      - '${REDIS_PORT:-{{REDIS_PORT}}}:6379'
     volumes:
       - redis_data:/data
     networks:
@@ -64,7 +64,7 @@ services:
     container_name: {{PROJECT_NAME}}-redis-commander
     restart: unless-stopped
     ports:
-      - '8081:8081'
+      - '${REDIS_COMMANDER_PORT:-{{REDIS_COMMANDER_PORT}}}:8081'
     environment:
       REDIS_HOSTS: local:redis:6379
     depends_on:

package/template/server/package.json

@@ -35,10 +35,9 @@
     "@fastify/jwt": "^10.0.0",
     "@fastify/multipart": "^9.0.2",
     "@fastify/rate-limit": "^10.3.0",
-    "@fastify/static": "^8.0.4",
+    "@fastify/static": "^9.0.0",
     "@prisma/client": "^6.19.2",
     "argon2": "^0.44.0",
-    "bcryptjs": "^2.4.3",
     "dotenv": "^16.4.7",
     "fastify": "^5.7.4",
     "fastify-type-provider-zod": "^6.1.0",
@@ -49,15 +48,19 @@
     "uuid": "^10.0.0",
     "zod": "^4.3.6"
   },
+  "overrides": {
+    "bn.js": ">=5.2.3",
+    "@typescript-eslint/typescript-estree": {
+      "minimatch": ">=10.2.1"
+    }
+  },
   "devDependencies": {
-    "@eslint/js": "^9.39.2",
-    "@types/bcryptjs": "^2.4.6",
+    "@eslint/js": "^10.0.1",
     "@types/node": "^20.17.10",
-    "@types/sharp": "^0.32.0",
     "@types/uuid": "^10.0.0",
     "@vitest/coverage-v8": "^4.0.18",
     "@vitest/ui": "^4.0.18",
-    "eslint": "^9.39.2",
+    "eslint": "^10.0.1",
     "prisma": "^6.19.2",
     "tsc-alias": "^1.8.16",
     "tsx": "^4.21.0",

package/template/server/src/libs/password.ts

@@ -16,23 +16,8 @@ export async function hashPassword(password: string): Promise<string> {
 }
 
 /**
- * Verify a password against a hash.
- * Supports both argon2 and legacy bcrypt hashes.
- * Returns { valid, needsRehash } so the caller can transparently upgrade bcrypt hashes.
+ * Verify a password against an argon2 hash
  */
-export async function verifyPassword(
-  password: string,
-  hash: string,
-): Promise<{ valid: boolean; needsRehash: boolean }> {
-  const isBcryptHash = hash.startsWith('$2a$') || hash.startsWith('$2b$') || hash.startsWith('$2y$');
-
-  if (isBcryptHash) {
-    // Lazy-import bcryptjs only for legacy hash verification
-    const bcrypt = await import('bcryptjs');
-    const valid = await bcrypt.default.compare(password, hash);
-    return { valid, needsRehash: valid }; // rehash only if password is correct
-  }
-
-  const valid = await argon2.verify(hash, password);
-  return { valid, needsRehash: false };
+export async function verifyPassword(password: string, hash: string): Promise<boolean> {
+  return argon2.verify(hash, password);
 }

package/template/server/src/modules/auth/__tests__/auth.service.test.ts

@@ -108,7 +108,7 @@ describe('Auth Service', () => {
       const expiresAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000);
 
       vi.mocked(authRepo.findUserByEmail).mockResolvedValue(testUsers.validUser);
-      vi.mocked(verifyPassword).mockResolvedValue({ valid: true, needsRehash: false });
+      vi.mocked(verifyPassword).mockResolvedValue(true);
       vi.mocked(authLib.signAccessToken).mockReturnValue(accessToken);
       vi.mocked(authLib.generateRefreshToken).mockReturnValue(refreshToken);
       vi.mocked(authLib.getRefreshTokenExpiresAt).mockReturnValue(expiresAt);
@@ -154,7 +154,7 @@ describe('Auth Service', () => {
     it('should throw UnauthorizedError if password is invalid', async () => {
       // Arrange
       vi.mocked(authRepo.findUserByEmail).mockResolvedValue(testUsers.validUser);
-      vi.mocked(verifyPassword).mockResolvedValue({ valid: false, needsRehash: false });
+      vi.mocked(verifyPassword).mockResolvedValue(false);
 
       // Act & Assert
       await expect(authService.login(validLoginInput)).rejects.toThrow(UnauthorizedError);

package/template/server/src/modules/auth/auth.service.ts

@@ -132,7 +132,7 @@ export async function login(
     throw new UnauthorizedError('Invalid email or password', 'INVALID_CREDENTIALS');
   }
 
-  const { valid, needsRehash } = await verifyPassword(input.password, user.password);
+  const valid = await verifyPassword(input.password, user.password);
 
   if (!valid) {
     // Increment failed attempts
@@ -153,12 +153,6 @@ export async function login(
     await authRepo.resetFailedAttempts(user.id);
   }
 
-  // Transparent rehash: upgrade bcrypt → argon2id
-  if (needsRehash) {
-    const newHash = await hashPassword(input.password);
-    await authRepo.updateUserPassword(user.id, newHash);
-  }
-
   const accessToken = signAccessToken({
     userId: user.id,
     role: user.role,