npm - create-win-project - Versions diffs - 1.3.0 → 2.0.0 - Mend

create-win-project 1.3.0 → 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (289) hide show

package/src/stacks/frontends/react-native/docker.js ADDED Viewed

@@ -0,0 +1,5 @@
+// Expo runs on the host with a simulator or physical device. The mobile
+// frontend intentionally contributes no container image.
+export function dockerContributions() {
+  return []
+}

package/src/stacks/frontends/react-native/environment.js ADDED Viewed

@@ -0,0 +1,7 @@
+import { partitionEnvironment, renderEnvironment } from '../../shared/environment.js'
+export function buildEnvironmentFiles(answers, stack) {
+  const { publicNames, serverNames } = partitionEnvironment(stack)
+  const names = ['springboot', 'fastapi'].includes(stack.backendKey) ? [...publicNames, ...serverNames] : publicNames
+  return { '.env.example': renderEnvironment(names, answers) }
+}

package/src/stacks/frontends/react-native/index.js ADDED Viewed

@@ -0,0 +1,30 @@
+import { defineStackAdapter } from '../../rules.js'
+import { ciContributions } from './ci.js'
+import { dockerContributions } from './docker.js'
+import { buildReactNativeFiles } from './create-files.js'
+export const reactNativeAdapter = defineStackAdapter({
+  id: 'react-native',
+  kind: 'frontend',
+  label: 'React Native (Expo)',
+  compatibleWith: { backend: ['none', 'supabase', 'springboot', 'laravel', 'fastapi'] },
+  capabilities: {
+    applicationShapes: ['mobile'],
+    architectureProfiles: ['small', 'medium', 'large'],
+    authenticationModels: ['public', 'undecided', 'supabase', 'oidc', 'laravel-oidc'],
+    runtime: 'node',
+  },
+  contributes: {
+    files: ({ answers, stack, shared }) => Object.entries(buildReactNativeFiles(answers, stack, shared)),
+    environment: ({ backend }) => backend.id === 'none' ? [] : ['API_URL'],
+    install: () => [{ cwd: '.', command: 'npm', args: ['install'] }],
+    docker: dockerContributions,
+    ci: ciContributions,
+    verification: () => [
+      { backend: 'none', architecture: 'small', authentication: 'public' },
+      { backend: 'supabase', architecture: 'medium', authentication: 'supabase' },
+      { backend: 'springboot', architecture: 'large', authentication: 'oidc' },
+      { backend: 'laravel', architecture: 'medium', authentication: 'laravel-oidc' },
+    ],
+  },
+})

package/src/stacks/frontends/react-vite/ci.js ADDED Viewed

@@ -0,0 +1,3 @@
+export function ciContributions() {
+  return [{ template: 'vite', path: '.github/workflows/ci-frontend.yml' }]
+}

package/src/stacks/frontends/react-vite/create-files.js ADDED Viewed

@@ -0,0 +1,27 @@
+import { html, json } from '../../shared/javascript-package.js'
+import { addTestingFiles } from '../../shared/testing-files.js'
+import { packageFile } from './dependencies.js'
+export function buildReactViteFiles(answers, stack, shared) {
+  const root = 'frontend'
+  const files = {}
+  files[`${root}/package.json`] = packageFile(answers, stack)
+  files[`${root}/.node-version`] = `${stack.profile.runtimes.node}\n`
+  files[`${root}/.npmrc`] = 'engine-strict=true\n'
+  files[`${root}/tsconfig.json`] = json({ compilerOptions: { target: 'ES2022', useDefineForClassFields: true, lib: ['ES2022', 'DOM', 'DOM.Iterable'], allowJs: false, skipLibCheck: true, esModuleInterop: true, allowSyntheticDefaultImports: true, strict: true, forceConsistentCasingInFileNames: true, module: 'ESNext', moduleResolution: 'Bundler', resolveJsonModule: true, isolatedModules: true, noEmit: true, jsx: 'react-jsx', paths: { '@/*': ['./src/*'] } }, include: ['src', 'vite.config.ts', 'vitest.config.ts'] })
+  files[`${root}/index.html`] = `<!doctype html>\n<html lang="en"><head><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="description" content="${html(answers.projectDescription)}" /><title>${html(answers.projectName)}</title></head><body><div id="root"></div><script type="module" src="/src/main.tsx"></script></body></html>\n`
+  files[`${root}/vite.config.ts`] = `import { fileURLToPath, URL } from 'node:url'\nimport { defineConfig } from 'vite'\nimport react from '@vitejs/plugin-react'\n${stack.styleId === 'tailwind' ? "import tailwindcss from '@tailwindcss/vite'\n" : ''}\nexport default defineConfig({\n  plugins: [react()${stack.styleId === 'tailwind' ? ', tailwindcss()' : ''}],\n  resolve: { alias: { '@': fileURLToPath(new URL('./src', import.meta.url)) } },\n})\n`
+  files[`${root}/eslint.config.js`] = `import js from '@eslint/js'\nimport tseslint from 'typescript-eslint'\n\nexport default tseslint.config(\n  { ignores: ['dist', 'coverage', 'playwright-report'] },\n  js.configs.recommended,\n  ...tseslint.configs.recommended,\n  { files: ['**/*.{ts,tsx}'], languageOptions: { parserOptions: { ecmaFeatures: { jsx: true } } } },\n)\n`
+  files[`${root}/src/vite-env.d.ts`] = "/// <reference types=\"vite/client\" />\n"
+  files[`${root}/src/main.tsx`] = `import { StrictMode } from 'react'\nimport { createRoot } from 'react-dom/client'\nimport { App } from './App'\nimport './styles.css'\n\ncreateRoot(document.getElementById('root')!).render(<StrictMode><App /></StrictMode>)\n`
+  files[`${root}/src/App.tsx`] = stack.architecture === 'small'
+    ? `export function App() {\n  return <main><p>create-win-project</p><h1>Your starter is running</h1><p>{${JSON.stringify(answers.projectDescription)}}</p><p>Read <code>AGENTS.md</code> before your first agent-assisted change.</p></main>\n}\n`
+    : `${stack.architecture === 'large'
+      ? "import { getStarterStatus, StarterStatus } from '@/features/status'"
+      : "import { StarterStatus } from '@/features/status/components/StarterStatus'\nimport { getStarterStatus } from '@/features/status/services/getStarterStatus'"}\n\nexport function App() {\n  const status = getStarterStatus()\n  return <main><p>create-win-project</p><StarterStatus status={status} /><p>{${JSON.stringify(answers.projectDescription)}}</p><p>Read <code>AGENTS.md</code> before your first agent-assisted change.</p></main>\n}\n`
+  files[`${root}/src/styles.css`] = `${stack.styleId === 'tailwind' ? '@import "tailwindcss";\n' : ''}:root { color-scheme: light dark; font-family: system-ui, sans-serif; }\n* { box-sizing: border-box; }\nbody { margin: 0; }\nmain { max-width: 48rem; margin: 0 auto; padding: 4rem 1.5rem; }\n`
+  if ((answers.testing || 'basic') !== 'none') files[`${root}/src/App.test.tsx`] = `import { expect, test } from 'vitest'\nimport { render, screen } from '@testing-library/react'\nimport { App } from './App'\n\ntest('renders the starter heading', () => {\n  render(<App />)\n  expect(screen.getByRole('heading', { name: 'Your starter is running' })).toBeInTheDocument()\n})\n`
+  addTestingFiles(files, root, stack, answers.testing || 'basic')
+  Object.assign(files, shared.statusFeatureFiles(root, stack))
+  return files
+}

package/src/stacks/frontends/react-vite/dependencies.js ADDED Viewed

@@ -0,0 +1,5 @@
+import { buildJavaScriptPackage } from '../../shared/javascript-package.js'
+export function packageFile(answers, stack) {
+  return buildJavaScriptPackage(answers, stack, 'react')
+}

package/src/stacks/frontends/react-vite/docker.js ADDED Viewed

@@ -0,0 +1,3 @@
+export function dockerContributions() {
+  return [{ template: 'vite', root: 'frontend', developmentPath: 'Dockerfile.dev', productionPath: 'Dockerfile' }]
+}

package/src/stacks/frontends/react-vite/environment.js ADDED Viewed

@@ -0,0 +1,8 @@
+import { partitionEnvironment, renderEnvironment } from '../../shared/environment.js'
+export function buildEnvironmentFiles(answers, stack) {
+  const { publicNames, serverNames } = partitionEnvironment(stack)
+  const files = { 'frontend/.env.example': renderEnvironment(publicNames, answers) }
+  if (['springboot', 'fastapi'].includes(stack.backendKey)) files['.env.example'] = renderEnvironment(serverNames, answers)
+  return files
+}

package/src/stacks/frontends/react-vite/index.js ADDED Viewed

@@ -0,0 +1,32 @@
+import { defineStackAdapter } from '../../rules.js'
+import { ciContributions } from './ci.js'
+import { dockerContributions } from './docker.js'
+import { buildReactViteFiles } from './create-files.js'
+const verificationCases = Object.freeze([
+  Object.freeze({ backend: 'none', styling: 'css-modules', architecture: 'small', authentication: 'public' }),
+  Object.freeze({ backend: 'supabase', styling: 'tailwind', architecture: 'medium', authentication: 'supabase' }),
+  Object.freeze({ backend: 'springboot', styling: 'css-modules', architecture: 'large', authentication: 'session' }),
+  Object.freeze({ backend: 'laravel', styling: 'tailwind', architecture: 'medium', authentication: 'sanctum-spa' }),
+])
+export const reactViteAdapter = defineStackAdapter({
+  id: 'react',
+  kind: 'frontend',
+  label: 'React + Vite',
+  compatibleWith: { backend: ['none', 'supabase', 'springboot', 'laravel', 'fastapi'] },
+  capabilities: {
+    applicationShapes: ['separate', 'frontend'],
+    architectureProfiles: ['small', 'medium', 'large'],
+    authenticationModels: ['public', 'undecided', 'supabase', 'session', 'oidc', 'sanctum-spa', 'laravel-oidc'],
+    runtime: 'node',
+  },
+  contributes: {
+    files: ({ answers, stack, shared }) => Object.entries(buildReactViteFiles(answers, stack, shared)),
+    environment: ({ backend }) => backend.id === 'none' ? [] : ['API_URL'],
+    install: () => [{ cwd: 'frontend', command: 'npm', args: ['install'] }],
+    docker: dockerContributions,
+    ci: ciContributions,
+    verification: () => verificationCases,
+  },
+})

package/src/stacks/shared/capability-packs.js ADDED Viewed

@@ -0,0 +1,31 @@
+const json = (value) => `${JSON.stringify(value, null, 2)}\n`
+export function capabilityPackFiles(answers, stack) {
+  const files = {}
+  if (answers.uploads === 'object-storage') {
+    files['config/capabilities/uploads.json'] = json({
+      visibility: 'private', authorizeEveryOperation: true, maximumBytes: 10_485_760,
+      acceptedTypes: [], generatedObjectNames: true, verifySignature: true,
+      quarantineBeforeUse: true, malwareScanRequired: true, abandonedUploadCleanupHours: 24,
+    })
+    files['docs/capabilities/uploads.md'] = '# Private uploads\n\nAuthorize initiation, completion, download, and deletion. Validate declared type and file signature, generate object names, enforce size limits, quarantine until scanning succeeds, and remove abandoned or rejected objects. Tests must cover unauthorized access, oversize and signature rejection, quarantine, scan failure, and cleanup.\n'
+  }
+  if (answers.backgroundJobs === 'queue') {
+    files['config/capabilities/queue.json'] = json({
+      adapter: stack.backendKey === 'laravel' ? 'laravel-queue' : 'spring-task',
+      attempts: 5, timeoutSeconds: 30, exponentialBackoff: true,
+      idempotencyRequired: true, failedJobStore: true, correlationIds: true,
+    })
+    files['docs/capabilities/queue.md'] = '# Durable background jobs\n\nJobs require stable idempotency keys, bounded exponential retry with jitter, explicit timeouts, a failed-job store, correlation IDs, metrics, and an operator replay procedure. Tests cover duplicate delivery, timeout, retry exhaustion, and safe replay.\n'
+  }
+  if (answers.offline && answers.offline !== 'none') {
+    files['config/capabilities/offline.json'] = json({
+      mode: answers.offline, owner: 'mobile-client', containsSensitiveData: false,
+      keyNamespace: `${answers.projectName}:v1`, ttlSeconds: 3600,
+      invalidation: answers.offline === 'sync' ? 'server-version-and-user-signout' : 'ttl-and-user-signout',
+      conflictPolicy: answers.offline === 'sync' ? 'server-authoritative-with-explicit-user-resolution' : 'not-applicable',
+    })
+    files['docs/capabilities/offline.md'] = `# Offline ${answers.offline}\n\nThe mobile client owns this store. Namespace keys by user and schema version, purge on sign-out, exclude secrets, enforce TTL, expose offline/stale/synchronizing/error states, and test reconnect behavior. ${answers.offline === 'sync' ? 'Synchronize through idempotent server operations and surface conflicts; never silently overwrite divergent user data.' : 'This is a measured read cache, not a source of truth.'}\n`
+  }
+  return files
+}

package/{lib → src}/stacks/shared/contributions.js RENAMED Viewed

@@ -1,4 +1,4 @@
-import { CONTRIBUTION_HOOKS, PROMPT_SLOTS } from '../contract.js'
+import { CONTRIBUTION_HOOKS, PROMPT_SLOTS } from '../rules.js'
 export function collectContributions(adapters, hook, context) {
   if (!CONTRIBUTION_HOOKS.includes(hook)) throw new Error(`Unknown contribution hook: ${hook}`)

package/src/stacks/shared/environment.js ADDED Viewed

@@ -0,0 +1,38 @@
+export const environmentHeader = '# Copy to .env or .env.local. Never commit real credentials.\n\n'
+export function environmentLine(name, answers) {
+  const isFastApi = answers.backend === 'fastapi'
+  const apiPort = isFastApi ? '8000' : '8080'
+  const defaults = {
+    NEXT_PUBLIC_API_URL: `http://localhost:${apiPort}`,
+    VITE_API_URL: `http://localhost:${apiPort}`,
+    EXPO_PUBLIC_API_URL: `http://localhost:${apiPort}`,
+    DATABASE_URL: isFastApi
+      ? `postgresql+asyncpg://localhost:5432/${answers.projectName.replaceAll('-', '_')}`
+      : `jdbc:postgresql://localhost:5432/${answers.projectName.replaceAll('-', '_')}`,
+    POSTGRES_USER: 'postgres',
+    POSTGRES_PASSWORD: 'change-me',
+    POSTGRES_DB: answers.projectName.replaceAll('-', '_'),
+    SPRING_PROFILES_ACTIVE: 'dev',
+    SPRING_SECURITY_USER_NAME: 'developer',
+    SPRING_SECURITY_USER_PASSWORD: 'change-me-before-production',
+    OIDC_ISSUER_URI: 'http://localhost:9090/realms/app',
+    OIDC_ISSUER: '',
+    OIDC_AUDIENCE: 'api',
+    OIDC_ALGORITHMS: 'RS256',
+    OIDC_JWKS_URL: '',
+    CORS_ALLOWED_ORIGINS: 'http://localhost:3000',
+  }
+  return `${name}=${defaults[name] || ''}`
+}
+export function renderEnvironment(names, answers) {
+  return `${environmentHeader}${names.map((name) => environmentLine(name, answers)).join('\n')}\n`
+}
+export function partitionEnvironment(stack) {
+  return {
+    publicNames: stack.env.filter((name) => name.startsWith(stack.envPrefix)),
+    serverNames: stack.env.filter((name) => !name.startsWith(stack.envPrefix)),
+  }
+}

package/src/stacks/shared/javascript-package.js ADDED Viewed

@@ -0,0 +1,117 @@
+export function packageVersion(profile, name, capability) {
+  const configured = profile.packages[name]
+  const resolved = typeof configured === 'string'
+    ? configured
+    : configured?.overrides?.[capability] || configured?.default
+  if (!resolved) throw new Error(`${capability} requires ${name} in compatibility profile ${profile.id}`)
+  return resolved
+}
+export function composerPackageVersion(profile, name, owner = name) {
+  const resolved = profile.composerPackages?.[name]
+  if (!resolved) throw new Error(`${owner} requires ${name} in compatibility profile ${profile.id}`)
+  return resolved
+}
+export function pythonPackageVersion(profile, name, owner = name) {
+  const resolved = profile.pythonPackages?.[name]
+  if (!resolved) throw new Error(`${owner} requires ${name} in compatibility profile ${profile.id}`)
+  return resolved
+}
+export function json(value) {
+  return `${JSON.stringify(value, null, 2)}\n`
+}
+export function html(value) {
+  return String(value).replaceAll('&', '&amp;').replaceAll('"', '&quot;').replaceAll('<', '&lt;').replaceAll('>', '&gt;')
+}
+export function buildJavaScriptPackage(answers, stack, owner) {
+  const level = answers.testing || 'basic'
+  const scripts = { ...stack.scripts, start: owner === 'nextjs' ? 'next start' : undefined }
+  const devDependencies = { ...stack.devDeps }
+  if (level === 'none') delete scripts.test
+  if (level !== 'none') {
+    if (owner === 'react-native') {
+      Object.assign(devDependencies, {
+        jest: packageVersion(stack.profile, 'jest', owner),
+        '@types/jest': packageVersion(stack.profile, '@types/jest', owner),
+        'jest-expo': packageVersion(stack.profile, 'jest-expo', owner),
+        '@testing-library/react-native': packageVersion(stack.profile, '@testing-library/react-native', owner),
+      })
+    } else {
+      Object.assign(devDependencies, {
+        vitest: packageVersion(stack.profile, 'vitest', owner),
+        jsdom: packageVersion(stack.profile, 'jsdom', owner),
+        '@testing-library/react': packageVersion(stack.profile, '@testing-library/react', owner),
+        '@testing-library/jest-dom': packageVersion(stack.profile, '@testing-library/jest-dom', owner),
+      })
+    }
+  }
+  if (level === 'full' && owner !== 'react-native') {
+    scripts['test:e2e'] = 'playwright test'
+    devDependencies['@playwright/test'] = packageVersion(stack.profile, '@playwright/test', owner)
+  }
+  scripts.typecheck = 'tsc --noEmit'
+  scripts.format = 'prettier --write .'
+  scripts['format:check'] = 'prettier --check .'
+  if (owner !== 'react-native') scripts.lint = 'eslint .'
+  if (stack.architecture === 'large') scripts['check:boundaries'] = 'node scripts/check-boundaries.mjs'
+  if (stack.backendKey === 'supabase') {
+    const workdir = owner === 'react' ? ' --workdir ..' : ''
+    scripts['supabase:start'] = `supabase${workdir} start`
+    scripts['supabase:stop'] = `supabase${workdir} stop`
+    scripts['supabase:status'] = `supabase${workdir} status`
+    scripts['supabase:reset'] = `supabase${workdir} db reset`
+    scripts['supabase:test'] = `supabase${workdir} test db`
+    const typePath = owner === 'react-native' ? 'types/database.types.ts' : 'src/types/database.types.ts'
+    scripts['supabase:types'] = `supabase${workdir} gen types typescript --local > ${typePath}`
+  }
+  if (stack.backendKey === 'postgres') {
+    scripts['prisma:generate'] = 'prisma generate'
+    scripts['db:migrate'] = 'prisma migrate dev'
+    scripts['db:deploy'] = 'prisma migrate deploy'
+    scripts['db:reset'] = 'prisma migrate reset --force'
+    scripts['db:studio'] = 'prisma studio'
+    scripts.dev = 'prisma generate && next dev'
+    scripts.build = 'prisma generate && next build'
+    scripts.typecheck = 'prisma generate && tsc --noEmit'
+  }
+  const boundary = stack.architecture === 'large' ? ' && npm run check:boundaries' : ''
+  scripts.check = owner === 'react-native'
+    ? `npm run format:check && npm run typecheck${level === 'none' ? '' : ' && npm test -- --runInBand'}${boundary}`
+    : `npm run format:check && npm run lint && npm run typecheck${level === 'none' ? '' : ' && npm test'}${boundary}`
+  Object.keys(scripts).forEach((key) => scripts[key] === undefined && delete scripts[key])
+  if (stack.styleId === 'tailwind') {
+    devDependencies.tailwindcss = packageVersion(stack.profile, 'tailwindcss', owner)
+    if (owner === 'nextjs') devDependencies['@tailwindcss/postcss'] = packageVersion(stack.profile, '@tailwindcss/postcss', owner)
+    if (owner === 'react') devDependencies['@tailwindcss/vite'] = packageVersion(stack.profile, '@tailwindcss/vite', owner)
+  }
+  const dependencies = { ...stack.deps }
+  if (owner !== 'nextjs') delete dependencies['@supabase/ssr']
+  if (owner === 'react-native' && stack.authentication === 'supabase') {
+    dependencies['expo-secure-store'] = packageVersion(stack.profile, 'expo-secure-store', owner)
+  }
+  const packageJson = {
+    name: answers.projectName,
+    version: '0.1.0',
+    private: true,
+    type: 'module',
+    packageManager: `npm@${stack.profile.runtimes.npmMinimum}`,
+    engines: {
+      node: `>=${stack.profile.runtimes.nodeMinimum}`,
+      npm: `>=${stack.profile.runtimes.npmMinimum}`,
+    },
+    main: owner === 'react-native' ? 'expo-router/entry' : undefined,
+    scripts,
+    dependencies,
+    devDependencies,
+  }
+  if (!packageJson.main) delete packageJson.main
+  return json(packageJson)
+}

package/src/stacks/shared/testing-files.js ADDED Viewed

@@ -0,0 +1,16 @@
+import path from 'node:path'
+export function addTestingFiles(files, root, stack, level) {
+  if (level === 'none') return
+  if (stack.isMobile) {
+    files[path.join(root, 'jest.config.js')] = "export default { preset: 'jest-expo' }\n"
+    files[path.join(root, 'app/index.test.tsx')] = `import { render } from '@testing-library/react-native'\nimport HomeScreen from './index'\n\ntest('renders the starter heading', async () => {\n  const view = await render(<HomeScreen />)\n  expect(view.getByText('Your starter is running')).toBeTruthy()\n})\n`
+    return
+  }
+  files[path.join(root, 'vitest.config.ts')] = `import { fileURLToPath, URL } from 'node:url'\nimport { defineConfig } from 'vitest/config'\n\nexport default defineConfig({\n  resolve: { alias: { '@': fileURLToPath(new URL('./src', import.meta.url)) } },\n  test: { environment: 'jsdom', setupFiles: './src/test/setup.ts', exclude: ['e2e/**', 'node_modules/**'] },\n})\n`
+  files[path.join(root, 'src/test/setup.ts')] = "import '@testing-library/jest-dom/vitest'\n"
+  if (level === 'full') {
+    files[path.join(root, 'playwright.config.ts')] = `import { defineConfig, devices } from '@playwright/test'\n\nexport default defineConfig({\n  testDir: './e2e',\n  use: { baseURL: 'http://127.0.0.1:${stack.frontendPort}' },\n  webServer: { command: 'npm run dev -- ${stack.frontendKey === 'nextjs' ? '--hostname' : '--host'} 127.0.0.1 --port ${stack.frontendPort}', url: 'http://127.0.0.1:${stack.frontendPort}', reuseExistingServer: true, timeout: 120_000 },\n  projects: [{ name: 'chromium', use: { ...devices['Desktop Chrome'] } }],\n})\n`
+    files[path.join(root, 'e2e/home.spec.ts')] = `import { expect, test } from '@playwright/test'\n\ntest('loads the starter', async ({ page }) => {\n  await page.goto('/')\n  await expect(page.getByRole('heading', { name: 'Your starter is running' })).toBeVisible()\n})\n`
+  }
+}

package/templates/ci/fastapi.yml ADDED Viewed

@@ -0,0 +1,62 @@
+name: CI — Backend
+on:
+  push:
+    branches: [dev, main]
+    paths:
+      - backend/**
+  pull_request:
+    branches: [dev, main]
+    paths:
+      - backend/**
+permissions:
+  contents: read
+jobs:
+  ci-backend:
+    name: Test, Build
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: backend
+    services:
+      postgres:
+        image: {{POSTGRES_IMAGE}}
+        env:
+          POSTGRES_DB: app_test
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: postgres
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U postgres -d app_test"
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 10
+    env:
+      DATABASE_URL: postgresql+asyncpg://postgres:postgres@127.0.0.1:5432/app_test
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: "{{PYTHON_VERSION}}"
+      - uses: astral-sh/setup-uv@38f3f104447c67c051c4a08e39b64a148898af3a # v6
+        with:
+          version: "{{UV_VERSION}}"
+      - name: Install dependencies
+        run: uv sync --frozen
+      - name: Apply migrations
+        run: uv run alembic upgrade head
+      - name: Check migrations are current
+        run: uv run alembic check
+      - name: Run Ruff
+        run: uv run ruff check .
+      - name: Check formatting
+        run: uv run ruff format --check .
+      - name: Run mypy
+        run: uv run mypy .
+      - name: Run tests
+        run: uv run pytest
+      - name: Build image
+        run: docker build -f Dockerfile .

package/templates/docker/compose/postgres.yml CHANGED Viewed

@@ -5,7 +5,7 @@ services:
     container_name: {{PROJECT_NAME}}-db
     image: {{POSTGRES_IMAGE}}
     ports:
-      - "5432:5432"
+      - "${POSTGRES_HOST_PORT:-5432}:5432"
     environment:
       - POSTGRES_USER=${POSTGRES_USER}
       - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}

package/templates/docker/compose/springboot.yml CHANGED Viewed

@@ -7,7 +7,7 @@ services:
       context: {{FRONTEND_DIR}}
       dockerfile: {{FRONTEND_DOCKERFILE}}
     ports:
-      - "{{FRONTEND_PORT}}:{{FRONTEND_PORT}}"
+      - "${FRONTEND_HOST_PORT:-{{FRONTEND_PORT}}}:{{FRONTEND_PORT}}"
     volumes:
       - ./{{FRONTEND_DIR}}:/app
       - /app/node_modules
@@ -24,7 +24,7 @@ services:
       context: ./backend
       dockerfile: Dockerfile.dev
     ports:
-      - "8080:8080"
+      - "${BACKEND_HOST_PORT:-8080}:8080"
     volumes:
       - ./backend:/app
       - maven-cache:/root/.m2
@@ -43,7 +43,7 @@ services:
     container_name: {{PROJECT_NAME}}-db
     image: {{POSTGRES_IMAGE}}
     ports:
-      - "5432:5432"
+      - "${POSTGRES_HOST_PORT:-5432}:5432"
     environment:
       - POSTGRES_USER=${POSTGRES_USER}
       - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}

package/templates/docker/compose/supabase.yml CHANGED Viewed

@@ -6,7 +6,7 @@ services:
       context: {{FRONTEND_DIR}}
       dockerfile: {{FRONTEND_DOCKERFILE}}
     ports:
-      - "{{FRONTEND_PORT}}:{{FRONTEND_PORT}}"
+      - "${FRONTEND_HOST_PORT:-{{FRONTEND_PORT}}}:{{FRONTEND_PORT}}"
     volumes:
       - ./{{FRONTEND_DIR}}:/app
       - /app/node_modules

package/templates/docker/compose-prod/fastapi.yml ADDED Viewed

@@ -0,0 +1,52 @@
+# docker-compose.prod.yml — {{PROJECT_NAME}} ({{STACK}}) — Prod
+services:
+  backend:
+    container_name: {{PROJECT_NAME}}-backend
+    build:
+      context: ./backend
+      dockerfile: Dockerfile
+    ports:
+      - "${BACKEND_HOST_PORT:-8000}:8000"
+    environment:
+      - DATABASE_URL=${DATABASE_URL}
+      - OIDC_ISSUER=${OIDC_ISSUER}
+      - OIDC_AUDIENCE=${OIDC_AUDIENCE}
+      - OIDC_ALGORITHMS=${OIDC_ALGORITHMS}
+      - OIDC_JWKS_URL=${OIDC_JWKS_URL}
+      - CORS_ALLOWED_ORIGINS=${CORS_ALLOWED_ORIGINS}
+    depends_on:
+      db:
+        condition: service_healthy
+    networks:
+      - app-network
+    healthcheck:
+      test: ["CMD-SHELL", "python -c \"import urllib.request; urllib.request.urlopen('http://localhost:8000/health')\""]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+  db:
+    container_name: {{PROJECT_NAME}}-db
+    image: {{POSTGRES_IMAGE}}
+    environment:
+      - POSTGRES_USER=${POSTGRES_USER}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+      - POSTGRES_DB=${POSTGRES_DB}
+    volumes:
+      - postgres-data:/var/lib/postgresql/data
+    networks:
+      - app-network
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+volumes:
+  postgres-data:
+    name: {{PROJECT_NAME}}-postgres-data
+networks:
+  app-network:
+    name: {{PROJECT_NAME}}-network

package/templates/docker/compose-prod/springboot.yml CHANGED Viewed

@@ -16,6 +16,11 @@ services:
     networks:
       - app-network
     restart: always
+    read_only: true
+    tmpfs: [/tmp]
+    deploy:
+      resources:
+        limits: { cpus: "1.0", memory: 512M }
   backend:
     container_name: {{PROJECT_NAME}}-backend-prod
@@ -24,7 +29,7 @@ services:
       dockerfile: Dockerfile
       target: production
     ports:
-      - "8080:8080"
+      - "${BACKEND_HOST_PORT:-8080}:8080"
     environment:
       - SPRING_PROFILES_ACTIVE=prod
       - DATABASE_URL=jdbc:postgresql://db:5432/${POSTGRES_DB}
@@ -35,7 +40,17 @@ services:
         condition: service_healthy
     networks:
       - app-network
+      - data-network
     restart: always
+    stop_grace_period: 30s
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost:8080/api/health"]
+      interval: 10s
+      timeout: 3s
+      retries: 5
+    deploy:
+      resources:
+        limits: { cpus: "1.0", memory: 768M }
   db:
     container_name: {{PROJECT_NAME}}-db-prod
@@ -47,7 +62,7 @@ services:
     volumes:
       - postgres-data-prod:/var/lib/postgresql/data
     networks:
-      - app-network
+      - data-network
     restart: always
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
@@ -62,3 +77,6 @@ volumes:
 networks:
   app-network:
     name: {{PROJECT_NAME}}-network-prod
+  data-network:
+    name: {{PROJECT_NAME}}-data-network-prod
+    internal: true

package/templates/docker/dockerfile/fastapi.dev.dockerfile ADDED Viewed

@@ -0,0 +1,9 @@
+FROM {{PYTHON_IMAGE}}
+WORKDIR /app
+COPY --from=ghcr.io/astral-sh/uv:{{UV_VERSION}} /uv /usr/local/bin/uv
+COPY pyproject.toml uv.lock .python-version README.md ./
+RUN uv sync --frozen --no-install-project
+COPY . .
+RUN uv sync --frozen
+EXPOSE 8000
+CMD ["uv", "run", "uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000", "--reload"]

package/templates/docker/dockerfile/fastapi.prod.dockerfile ADDED Viewed

@@ -0,0 +1,11 @@
+FROM {{PYTHON_IMAGE}}
+WORKDIR /app
+COPY --from=ghcr.io/astral-sh/uv:{{UV_VERSION}} /uv /usr/local/bin/uv
+COPY pyproject.toml uv.lock .python-version README.md ./
+RUN uv sync --frozen --no-install-project
+COPY . .
+RUN uv sync --frozen
+RUN useradd --create-home --no-log-init appuser && chown -R appuser:appuser /app
+EXPOSE 8000
+USER appuser
+CMD ["/app/.venv/bin/uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]

package/templates/docker/dockerfile/nextjs.prod.dockerfile CHANGED Viewed

@@ -11,6 +11,7 @@ RUN npm run build
 FROM {{NODE_IMAGE}} AS production
 WORKDIR /app
 ENV NODE_ENV=production
+USER node
 COPY --from=builder /app/.next/standalone ./
 COPY --from=builder /app/.next/static ./.next/static
 COPY --from=builder /app/public ./public

package/templates/docker/dockerfile/springboot.prod.dockerfile CHANGED Viewed

@@ -5,6 +5,9 @@ RUN mvn --batch-mode package -DskipTests
 FROM {{JAVA_IMAGE}} AS production
 WORKDIR /app
+RUN addgroup -S app && adduser -S -G app app
 COPY --from=builder /app/target/*.jar app.jar
+RUN chown app:app app.jar
+USER app
 EXPOSE 8080
-CMD ["java", "-jar", "app.jar"]
+CMD ["java", "-XX:MaxRAMPercentage=75", "-jar", "app.jar"]

package/templates/docker/dockerfile/vite.prod.dockerfile CHANGED Viewed

@@ -8,5 +8,6 @@ RUN npm run build
 FROM {{NGINX_IMAGE}} AS production
 COPY --from=builder /app/dist /usr/share/nginx/html
 COPY nginx.conf /etc/nginx/conf.d/default.conf
-EXPOSE 80
+USER nginx
+EXPOSE 8080
 CMD ["nginx", "-g", "daemon off;"]