create-tigra 2.5.0 → 2.6.5

package/template/client/src/styles/themes/warm-orange.css

@@ -0,0 +1,90 @@
+/*
+ * Theme: Warm Orange
+ * Accent: Warm terracotta orange — inspired by Claude's palette
+ * Vibe: Earthy, warm, approachable
+ *
+ * To activate: in globals.css, set @import "../styles/themes/warm-orange.css";
+ */
+
+:root {
+  --radius: 0.625rem;
+  /* Warm cream background with terracotta orange accent */
+  --background: oklch(0.964 0.007 97.5);
+  --foreground: oklch(0.205 0.015 92);
+  --card: oklch(1 0 0);
+  --card-foreground: oklch(0.205 0.015 92);
+  --popover: oklch(1 0 0);
+  --popover-foreground: oklch(0.205 0.015 92);
+  --primary: oklch(0.597 0.135 39.9);
+  --primary-foreground: oklch(1 0 0);
+  --secondary: oklch(0.935 0.009 97.5);
+  --secondary-foreground: oklch(0.3 0.015 92);
+  --muted: oklch(0.935 0.009 97.5);
+  --muted-foreground: oklch(0.748 0.017 91.6);
+  --accent: oklch(0.935 0.009 97.5);
+  --accent-foreground: oklch(0.3 0.015 92);
+  --destructive: oklch(0.577 0.245 27.325);
+  --border: oklch(0.895 0.012 97.5);
+  --input: oklch(0.895 0.012 97.5);
+  --ring: oklch(0.597 0.135 39.9);
+  --success: oklch(0.52 0.17 155);
+  --success-foreground: oklch(1 0 0);
+  --warning: oklch(0.75 0.15 70);
+  --warning-foreground: oklch(0.25 0.015 92);
+  --info: oklch(0.55 0.15 240);
+  --info-foreground: oklch(1 0 0);
+  --chart-1: oklch(0.597 0.135 39.9);
+  --chart-2: oklch(0.6 0.118 184.704);
+  --chart-3: oklch(0.398 0.07 227.392);
+  --chart-4: oklch(0.828 0.12 84);
+  --chart-5: oklch(0.748 0.017 91.6);
+  --sidebar: oklch(0.95 0.007 97.5);
+  --sidebar-foreground: oklch(0.205 0.015 92);
+  --sidebar-primary: oklch(0.3 0.015 92);
+  --sidebar-primary-foreground: oklch(0.964 0.007 97.5);
+  --sidebar-accent: oklch(0.935 0.009 97.5);
+  --sidebar-accent-foreground: oklch(0.3 0.015 92);
+  --sidebar-border: oklch(0.895 0.012 97.5);
+  --sidebar-ring: oklch(0.597 0.135 39.9);
+}
+
+.dark {
+  /* Dark mode: inverted with same warm undertone */
+  --background: oklch(0.185 0.012 92);
+  --foreground: oklch(0.93 0.007 97.5);
+  --card: oklch(0.235 0.012 92);
+  --card-foreground: oklch(0.93 0.007 97.5);
+  --popover: oklch(0.235 0.012 92);
+  --popover-foreground: oklch(0.93 0.007 97.5);
+  --primary: oklch(0.66 0.135 39.9);
+  --primary-foreground: oklch(0.185 0.012 92);
+  --secondary: oklch(0.28 0.012 92);
+  --secondary-foreground: oklch(0.93 0.007 97.5);
+  --muted: oklch(0.28 0.012 92);
+  --muted-foreground: oklch(0.65 0.015 91.6);
+  --accent: oklch(0.28 0.012 92);
+  --accent-foreground: oklch(0.93 0.007 97.5);
+  --destructive: oklch(0.704 0.191 22.216);
+  --border: oklch(1 0.007 97.5 / 12%);
+  --input: oklch(1 0.007 97.5 / 15%);
+  --ring: oklch(0.66 0.135 39.9);
+  --success: oklch(0.6 0.17 155);
+  --success-foreground: oklch(1 0 0);
+  --warning: oklch(0.8 0.15 70);
+  --warning-foreground: oklch(0.25 0.015 92);
+  --info: oklch(0.65 0.15 240);
+  --info-foreground: oklch(1 0 0);
+  --chart-1: oklch(0.66 0.135 39.9);
+  --chart-2: oklch(0.696 0.17 162.48);
+  --chart-3: oklch(0.769 0.12 70);
+  --chart-4: oklch(0.627 0.18 303.9);
+  --chart-5: oklch(0.645 0.17 16.439);
+  --sidebar: oklch(0.235 0.012 92);
+  --sidebar-foreground: oklch(0.93 0.007 97.5);
+  --sidebar-primary: oklch(0.66 0.135 39.9);
+  --sidebar-primary-foreground: oklch(0.93 0.007 97.5);
+  --sidebar-accent: oklch(0.28 0.012 92);
+  --sidebar-accent-foreground: oklch(0.93 0.007 97.5);
+  --sidebar-border: oklch(1 0.007 97.5 / 12%);
+  --sidebar-ring: oklch(0.66 0.135 39.9);
+}

package/template/server/prisma/schema.prisma

@@ -88,6 +88,5 @@ model BlockedIp {
 
   user User @relation(fields: [blockedBy], references: [id])
 
-  @@index([ip])
   @@map("blocked_ips")
 }

package/template/server/src/modules/admin/admin.controller.ts

@@ -1,16 +1,10 @@
 import type { FastifyRequest, FastifyReply } from 'fastify';
-import { z } from 'zod';
 import { successResponse } from '@shared/responses/successResponse.js';
 import { ValidationError } from '@shared/errors/errors.js';
 import { blockIp, unblockIp, getBlockedIps } from '@libs/ip-block.js';
+import { blockIpSchema } from './admin.schemas.js';
 
-const blockIpSchema = z.object({
-  ip: z.union([z.ipv4(), z.ipv6()], { message: 'Invalid IP address' }),
-  reason: z.string().max(500).optional(),
-});
-
-type BlockIpBody = z.infer<typeof blockIpSchema>;
-type UnblockIpParams = { ip: string };
+import type { BlockIpInput, UnblockIpParams } from './admin.schemas.js';
 
 export async function listBlockedIps(
   _request: FastifyRequest,
@@ -21,7 +15,7 @@ export async function listBlockedIps(
 }
 
 export async function blockIpHandler(
-  request: FastifyRequest<{ Body: BlockIpBody }>,
+  request: FastifyRequest<{ Body: BlockIpInput }>,
   reply: FastifyReply,
 ): Promise<void> {
   const parsed = blockIpSchema.safeParse(request.body);

package/template/server/src/modules/admin/admin.routes.ts

@@ -2,6 +2,7 @@ import type { FastifyInstance } from 'fastify';
 import { authenticate, authorize } from '@libs/auth.js';
 import { RATE_LIMITS } from '@config/rate-limit.config.js';
 import * as adminController from './admin.controller.js';
+import { blockIpSchema, unblockIpParamsSchema } from './admin.schemas.js';
 
 export async function adminRoutes(fastify: FastifyInstance): Promise<void> {
   // All admin routes require authentication + ADMIN role
@@ -28,6 +29,9 @@ export async function adminRoutes(fastify: FastifyInstance): Promise<void> {
    * Body: { ip: string }
    */
   fastify.post('/admin/blocked-ips', {
+    schema: {
+      body: blockIpSchema,
+    },
     config: { rateLimit: RATE_LIMITS.ADMIN_DEFAULT },
     handler: adminController.blockIpHandler,
   });
@@ -39,6 +43,9 @@ export async function adminRoutes(fastify: FastifyInstance): Promise<void> {
    * Auth: Required (ADMIN)
    */
   fastify.delete('/admin/blocked-ips/:ip', {
+    schema: {
+      params: unblockIpParamsSchema,
+    },
     config: { rateLimit: RATE_LIMITS.ADMIN_DEFAULT },
     handler: adminController.unblockIpHandler,
   });

package/template/server/src/modules/admin/admin.schemas.ts

@@ -0,0 +1,13 @@
+import { z } from 'zod';
+
+export const blockIpSchema = z.object({
+  ip: z.union([z.ipv4(), z.ipv6()], { message: 'Invalid IP address' }),
+  reason: z.string().max(500).optional(),
+});
+
+export const unblockIpParamsSchema = z.object({
+  ip: z.string().min(1, 'IP address is required'),
+});
+
+export type BlockIpInput = z.infer<typeof blockIpSchema>;
+export type UnblockIpParams = z.infer<typeof unblockIpParamsSchema>;

package/template/server/src/modules/auth/auth.repo.ts

@@ -1,12 +1,13 @@
 import { prisma } from '@libs/prisma.js';
+import type { User, RefreshToken } from '@prisma/client';
 
-export async function findUserByEmail(email: string) {
+export async function findUserByEmail(email: string): Promise<User | null> {
   return prisma.user.findUnique({
     where: { email, deletedAt: null },
   });
 }
 
-export async function findDeletedUserByEmail(email: string) {
+export async function findDeletedUserByEmail(email: string): Promise<User | null> {
   return prisma.user.findFirst({
     where: { email, deletedAt: { not: null } },
   });
@@ -24,7 +25,7 @@ export async function restoreUser(userId: string): Promise<void> {
   });
 }
 
-export async function findUserById(id: string) {
+export async function findUserById(id: string): Promise<User | null> {
   return prisma.user.findUnique({
     where: { id, deletedAt: null },
   });
@@ -35,7 +36,7 @@ export async function createUser(data: {
   password: string;
   firstName: string;
   lastName: string;
-}) {
+}): Promise<User> {
   return prisma.user.create({
     data,
   });
@@ -45,13 +46,13 @@ export async function createRefreshToken(data: {
   token: string;
   userId: string;
   expiresAt: Date;
-}) {
+}): Promise<RefreshToken> {
   return prisma.refreshToken.create({
     data,
   });
 }
 
-export async function findRefreshToken(token: string) {
+export async function findRefreshToken(token: string): Promise<RefreshToken | null> {
   return prisma.refreshToken.findUnique({
     where: { token },
   });
@@ -98,8 +99,8 @@ export async function rotateRefreshToken(
   }
 }
 
-export async function deleteRefreshTokensByUserId(userId: string) {
-  return prisma.refreshToken.deleteMany({
+export async function deleteRefreshTokensByUserId(userId: string): Promise<void> {
+  await prisma.refreshToken.deleteMany({
     where: { userId },
   });
 }