create-warlock 5.37.1 → 5.38.0

package/templates/warlock/src/config/database.postgres.ts

@@ -1,10 +1,18 @@
 import type { ConnectionOptions, PostgresPoolConfig } from "@warlock.js/cascade";
 import { env } from "@warlock.js/core";
 
+// Each Vitest worker keeps its own database and truncates it between test files
+// (src/config/tests.ts), so tests run against "<DB_NAME>_test_<worker id>". Create one
+// database per worker first (for example <DB_NAME>_test_1 to _4, one per `maxWorkers`) and
+// run the migrations on each.
+const databaseName = process.env.VITEST
+  ? `${env("DB_NAME", "app")}_test_${process.env.VITEST_POOL_ID ?? 1}`
+  : env("DB_NAME");
+
 const databaseConfigurations: ConnectionOptions<never, PostgresPoolConfig> = {
   driver: env("DB_DRIVER", "postgres"),
   name: "default",
-  database: env("DB_NAME"),
+  database: databaseName,
   host: env("DB_HOST", "localhost"),
   port: env("DB_PORT", 5432),
   username: env("DB_USERNAME"),
@@ -16,7 +24,7 @@ const databaseConfigurations: ConnectionOptions<never, PostgresPoolConfig> = {
   clientOptions: {
     // `PostgresPoolConfig` extends the connection config, so `database` is
     // required here too even though it duplicates the top-level value above.
-    database: env("DB_NAME"),
+    database: databaseName,
 
     // Native `pg` pool options — tune these for your workload.
     // max: 10,

package/templates/warlock/src/config/database.ts

@@ -5,10 +5,16 @@ import type {
 } from "@warlock.js/cascade";
 import { env } from "@warlock.js/core";
 
+// Each Vitest worker keeps its own database and truncates it between test files
+// (src/config/tests.ts), so tests run against "<DB_NAME>_test_<worker id>".
+const databaseName = process.env.VITEST
+  ? `${env("DB_NAME", "app")}_test_${process.env.VITEST_POOL_ID ?? 1}`
+  : env("DB_NAME");
+
 const databaseConfigurations: ConnectionOptions<MongoDriverOptions, MongoClientOptions> = {
   driver: env("DB_DRIVER", "mongodb"),
   name: "default",
-  database: env("DB_NAME"),
+  database: databaseName,
   host: env("DB_HOST", "localhost"),
   port: env("DB_PORT", 27017),
   username: env("DB_USERNAME"),

package/templates/warlock/src/config/tests.ts

@@ -1,4 +1,18 @@
+// The framework boots once per Vitest worker and every test file starts from a reset state
+// (the default since 5.38): the database is truncated, the fakes, the request context and the
+// route table are restored. Each worker uses its own database, see src/config/database.ts.
+//
+// WARLOCK_TEST_LIFETIME=file boots the framework once per test file instead (slower, with
+// isolated module state). A spec that changes global configuration the reset does not undo
+// opts out for its file with `setupTest({ importModule, lifetime: "file" })`.
+const workerLifetime = process.env.WARLOCK_TEST_LIFETIME !== "file";
+
 const testsConfigurations = {
+  lifetime: workerLifetime ? "worker" : "file",
+  resetDatabase: workerLifetime,
+  // WARLOCK_TEST_PROFILE=1 prints the boot phases and the slowest files of a run.
+  profileSetup: process.env.WARLOCK_TEST_PROFILE === "1",
+
   // In tests, mail, queue, cache, storage, clock and ids are faked by default:
   // nothing is delivered, pushed to Redis or uploaded, and assertions such as
   // mailFake.assertSent(...) work (see @warlock.js/core/tests).

package/templates/warlock/src/config/web.ts

@@ -0,0 +1,8 @@
+import type { WebConfigurations } from "@warlock.js/web";
+
+const webConfigurations: WebConfigurations = {
+  // Browser code may import only browser-safe module files; anything else fails the client build.
+  moduleBoundary: "error",
+};
+
+export default webConfigurations;

package/templates/warlock/src/web/app.css

@@ -1,5 +1,6 @@
 @import "tailwindcss";
 @import "./home/styles/home.css";
 @import "./404.css";
+@import "./forbidden.css";
 
 /* Page-level styles live with their pages; this root owns only Tailwind's base layer. */

package/templates/warlock/src/web/forbidden.css

@@ -0,0 +1,109 @@
+.forbidden,
+.forbidden *,
+.forbidden *::before,
+.forbidden *::after {
+  box-sizing: border-box;
+}
+
+.forbidden {
+  display: grid;
+  min-block-size: 100vh;
+  min-block-size: 100dvb;
+  align-items: center;
+  padding-block: clamp(2rem, 8vh, 6rem);
+  padding-inline: clamp(1.5rem, 7vw, 8rem);
+  background: #fafafa;
+  color: #18181b;
+  /* prettier-ignore */
+  font-family: system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+}
+
+.forbidden__content {
+  inline-size: min(100%, 62rem);
+  margin-inline-start: clamp(0rem, 7vw, 8rem);
+}
+
+.forbidden__title,
+.forbidden__description {
+  margin: 0;
+}
+
+.forbidden h1 {
+  margin: 0;
+  color: #facc15;
+  font-size: clamp(8rem, 25vw, 22rem);
+  font-weight: 800;
+  letter-spacing: -0.09em;
+  line-height: 0.72;
+}
+
+.forbidden__title {
+  margin-block-start: clamp(2rem, 6vw, 5rem);
+  font-size: clamp(1.5rem, 3vw, 2.5rem);
+  font-weight: 680;
+  letter-spacing: -0.035em;
+  line-height: 1.1;
+}
+
+.forbidden__description {
+  max-inline-size: 30rem;
+  margin-block-start: 0.75rem;
+  color: #52525b;
+  font-size: clamp(1rem, 1.4vw, 1.125rem);
+  line-height: 1.55;
+}
+
+.forbidden__action {
+  display: inline-block;
+  margin-block-start: clamp(1.5rem, 3vw, 2.5rem);
+  padding-block: 0.65rem;
+  padding-inline: 1rem;
+  background: #facc15;
+  color: #18181b;
+  font-weight: 700;
+  text-decoration: none;
+}
+
+.forbidden__action:hover {
+  text-decoration: underline;
+  text-underline-offset: 0.18em;
+}
+
+.forbidden__action:focus-visible {
+  outline: 3px solid #18181b;
+  outline-offset: 4px;
+}
+
+:dir(rtl) .forbidden__content {
+  margin-inline-start: 0;
+  margin-inline-end: clamp(0rem, 7vw, 8rem);
+}
+
+@media (max-width: 40rem) {
+  .forbidden__content {
+    margin-inline-start: 0;
+  }
+
+  :dir(rtl) .forbidden__content {
+    margin-inline-end: 0;
+  }
+}
+
+@media (prefers-color-scheme: dark) {
+  .forbidden {
+    background: #18181b;
+    color: #fafafa;
+  }
+
+  .forbidden__description {
+    color: #d4d4d8;
+  }
+
+  .forbidden__action {
+    color: #18181b;
+  }
+
+  .forbidden__action:focus-visible {
+    outline-color: #fafafa;
+  }
+}

package/templates/warlock/src/web/forbidden.page.tsx

@@ -0,0 +1,18 @@
+import type { ErrorPageProps } from "@warlock.js/web";
+
+export default function ForbiddenPage({ status }: ErrorPageProps) {
+  return (
+    <main className="forbidden">
+      <div className="forbidden__content">
+        <h1>{status}</h1>
+        <p className="forbidden__title">You do not have access to this page.</p>
+        <p className="forbidden__description">
+          Sign in with an account that has access, or head back to the home page.
+        </p>
+        <a className="forbidden__action" href="/">
+          Return home
+        </a>
+      </div>
+    </main>
+  );
+}

package/templates/warlock/src/web/forbidden.setup.ts

@@ -0,0 +1,8 @@
+import type { PageConfig } from "@warlock.js/web";
+
+export const config: PageConfig = {
+  metadata: {
+    title: "Access denied",
+    robots: "noindex",
+  },
+};

package/templates/warlock/src/app/auth/utils/locales.ts

@@ -1,89 +0,0 @@
-import { groupedTranslations } from "@warlock.js/core";
-
-groupedTranslations("auth", {
-  // App-level translations
-  invalidCredentials: {
-    en: "Invalid email or password",
-    ar: "البريد الالكتروني أو كلمة المرور غير صحيحة",
-  },
-  loggedOut: {
-    en: "Logged out successfully",
-    ar: "تم تسجيل الخروج بنجاح",
-  },
-  loggedOutAll: {
-    en: "Logged out from all devices",
-    ar: "تم تسجيل الخروج من جميع الأجهزة",
-  },
-  refreshTokenRequired: {
-    en: "Refresh token is required",
-    ar: "رمز التحديث مطلوب",
-  },
-  invalidRefreshToken: {
-    en: "Invalid or expired refresh token",
-    ar: "رمز التحديث غير صالح أو منتهي الصلاحية",
-  },
-
-  userNotFound: {
-    en: "User not found",
-    ar: "المستخدم غير موجود",
-  },
-
-  // OTP translations
-  otpSent: {
-    en: "Verification code sent",
-    ar: "تم إرسال رمز التحقق",
-  },
-  missingOtp: {
-    en: "Verification code not found",
-    ar: "رمز التحقق غير موجود",
-  },
-  otpInvalid: {
-    en: "Invalid verification code",
-    ar: "رمز التحقق غير صالح",
-  },
-  otpExpired: {
-    en: "Verification code has expired",
-    ar: "رمز التحقق منتهي الصلاحية",
-  },
-  otpMaxAttempts: {
-    en: "Too many failed attempts",
-    ar: "عدد المحاولات تجاوز الحد المسموح",
-  },
-  passwordResetSuccess: {
-    en: "Password reset successfully",
-    ar: "تم إعادة تعيين كلمة المرور بنجاح",
-  },
-
-  /**
-   * ============================================
-   * @warlock.js/auth package translations
-   * ============================================
-   * The following translations are used by the @warlock.js/auth package
-   * in the auth middleware. They must be defined here so they can be
-   * translated in your application.
-   */
-  errors: {
-    /**
-     * Called when the access token is missing from Authorization header
-     */
-    missingAccessToken: {
-      en: "Access token is required",
-      ar: "رمز الوصول مطلوب",
-    },
-    /**
-     * Called when an access token is invalid or expired
-     */
-    invalidAccessToken: {
-      en: "Invalid or expired access token",
-      ar: "رمز الوصول غير صالح أو منتهي الصلاحية",
-    },
-    /**
-     * Called when the current user type is not authorized to
-     * access a protected resource for certain user types
-     */
-    unauthorized: {
-      en: "You are not authorized to access this resource",
-      ar: "غير مصرح لك بالوصول إلى هذا المورد",
-    },
-  },
-});