dk-harness 0.1.0

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "dk-harness",
+  "version": "0.1.0",
+  "description": "Scaffold Next.js, FastAPI, and Axum projects from the dk-harness template catalog.",
+  "keywords": [
+    "scaffold",
+    "template",
+    "cli",
+    "nextjs",
+    "fastapi",
+    "axum"
+  ],
+  "homepage": "https://github.com/DongkuKim/dk-harness#readme",
+  "bugs": {
+    "url": "https://github.com/DongkuKim/dk-harness/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/DongkuKim/dk-harness.git"
+  },
+  "bin": {
+    "dk-harness": "./bin/dk-harness"
+  },
+  "scripts": {
+    "release:check": "node ./scripts/release-pack-check.mjs"
+  },
+  "files": [
+    "bin/dk-harness",
+    "templates",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "license": "Apache-2.0"
+}

package/templates/next-axum-monorepo/.eslintrc.js

@@ -0,0 +1,13 @@
+// Root-level ESLint config for a Turborepo workspace.
+// App/package lint rules live in each workspace's eslint.config.js.
+/** @type {import("eslint").Linter.Config} */
+module.exports = {
+  root: true,
+  ignorePatterns: [
+    "**/node_modules/**",
+    "**/.next/**",
+    "**/dist/**",
+    "**/.turbo/**",
+    "**/coverage/**",
+  ],
+}

package/templates/next-axum-monorepo/.github/workflows/ci.yml

@@ -0,0 +1,92 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+jobs:
+  fast:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - uses: dtolnay/rust-toolchain@nightly
+        with:
+          components: rustfmt,clippy,rust-src
+      - uses: extractions/setup-just@v2
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 9.15.9
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: cargo-nextest,cargo-udeps,cargo-deny,cargo-audit
+      - run: pnpm install --frozen-lockfile
+      - run: just lint
+      - run: just typecheck
+
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: extractions/setup-just@v2
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 9.15.9
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: cargo-nextest
+      - run: pnpm install --frozen-lockfile
+      - run: just test
+
+  ux:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - uses: extractions/setup-just@v2
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 9.15.9
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm exec playwright install --with-deps chromium
+      - run: just ux
+
+  supply-chain:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - uses: actions/setup-go@v5
+        with:
+          go-version: "1.24"
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 9.15.9
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: cargo-deny,cargo-audit
+      - run: pnpm install --frozen-lockfile
+      - run: go install github.com/google/osv-scanner/v2/cmd/osv-scanner@v2.3.5
+      - uses: gitleaks/gitleaks-action@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITLEAKS_CONFIG: .gitleaks.toml
+      - run: $(go env GOPATH)/bin/osv-scanner scan source -r .
+      - run: pnpm audit --audit-level=high
+      - run: (cd apps/axum && cargo deny check)
+      - run: (cd apps/axum && cargo audit)

package/templates/next-axum-monorepo/.gitleaks.toml

@@ -0,0 +1,5 @@
+title = "next-axum-monorepo gitleaks config"
+
+[extend]
+useDefault = true
+

package/templates/next-axum-monorepo/.prettierignore

@@ -0,0 +1,7 @@
+dist/
+node_modules/
+.next/
+.turbo/
+coverage/
+pnpm-lock.yaml
+.pnpm-store/

package/templates/next-axum-monorepo/.prettierrc

@@ -0,0 +1,11 @@
+{
+  "endOfLine": "lf",
+  "semi": false,
+  "singleQuote": false,
+  "tabWidth": 2,
+  "trailingComma": "es5",
+  "printWidth": 80,
+  "plugins": ["prettier-plugin-tailwindcss"],
+  "tailwindStylesheet": "packages/ui/src/styles/globals.css",
+  "tailwindFunctions": ["cn", "cva"]
+}

package/templates/next-axum-monorepo/AGENTS.md

@@ -0,0 +1,35 @@
+# Project Context
+
+This file is a short table of contents for the template knowledge base.
+
+## Architecture
+
+System structure and enforced dependency layers: [ARCHITECTURE.md](ARCHITECTURE.md)
+
+## Design
+
+Design notes and core beliefs: [docs/DESIGN.md](docs/DESIGN.md), [docs/design-docs/index.md](docs/design-docs/index.md)
+
+## Frontend
+
+Frontend conventions, UI package structure, and shared component rules: [docs/FRONTEND.md](docs/FRONTEND.md)
+
+## Product
+
+Starter goals and onboarding expectations: [docs/PRODUCT_SENSE.md](docs/PRODUCT_SENSE.md), [docs/product-specs/index.md](docs/product-specs/index.md)
+
+## Plans
+
+Execution plans and tech debt tracking: [docs/PLANS.md](docs/PLANS.md), [docs/exec-plans/tech-debt-tracker.md](docs/exec-plans/tech-debt-tracker.md)
+
+## Reliability
+
+Build, test, CI, and operational expectations: [docs/RELIABILITY.md](docs/RELIABILITY.md)
+
+## Quality And Security
+
+Quality rubric and security posture: [docs/QUALITY_SCORE.md](docs/QUALITY_SCORE.md), [docs/SECURITY.md](docs/SECURITY.md)
+
+## References And Generated Artifacts
+
+Reference material and generated snapshots: [docs/references/design-system-reference-llms.txt](docs/references/design-system-reference-llms.txt), [docs/generated/db-schema.md](docs/generated/db-schema.md)

package/templates/next-axum-monorepo/ARCHITECTURE.md

@@ -0,0 +1,58 @@
+# Architecture
+
+## Repository Shape
+
+- `apps/web`: the main Next.js application
+- `apps/axum`: the Rust backend service
+- `packages/ui`: the shared UI package used by the app
+- `packages/eslint-config`: shared lint config
+- `packages/typescript-config`: shared TypeScript config
+
+## Web App Layers
+
+`apps/web` uses `dependency-cruiser` to enforce:
+
+- `app`
+- `components`
+- `hooks`
+- `lib`
+
+The important constraints are:
+
+- `components` must not import `app`
+- `hooks` may only import `lib`
+- `lib` stays leaf-like
+
+## Shared UI Domain Stack
+
+`packages/ui` follows the business-domain stack:
+
+- `Types`
+- `Config`
+- `Repo`
+- `Service`
+- `Runtime`
+- `UI`
+
+Cross-cutting concerns must enter through:
+
+- `src/providers`
+
+Provider-only support code lives in:
+
+- `src/utils`
+
+The stack is mechanically enforced by `packages/ui/dependency-cruiser.cjs`.
+
+## Rust Service Layers
+
+The Rust service uses a directional backend split:
+
+- `api`
+- `core`
+- `domain`
+
+Lower layers must not import higher ones.
+`src/main.rs` stays focused on startup and bootstrapping.
+
+The Rust layer check lives in `scripts/check-rust-layers.mjs`.

package/templates/next-axum-monorepo/README.md

@@ -0,0 +1,45 @@
+# Next.js + Axum Monorepo Template
+
+This template ships a README-aligned harness for `apps/web` and `apps/axum`.
+
+## Harness Commands
+
+Run all top-level checks from the template root:
+
+```bash
+just install
+just lint
+just typecheck
+just test
+just ux
+just supply-chain
+just ci
+```
+
+`packages/ui` is still generated and updated through `shadcn` commands, but its internal layer boundaries are checked as part of the harness.
+
+## What Each Lane Covers
+
+- `just lint`: Biome, dependency-cruiser, and knip for `apps/web`; dependency-cruiser layer checks for `packages/ui`; a custom Rust layer boundary check plus rustfmt, clippy, and cargo-udeps for `apps/axum`
+- `just typecheck`: `tsc --noEmit` for `apps/web` and `cargo check` for `apps/axum`
+- `just test`: Vitest smoke coverage for `apps/web` and cargo-nextest coverage for `apps/axum`
+- `just ux`: Playwright, axe, and Lighthouse against the running Next.js app
+- `just supply-chain`: gitleaks, osv-scanner, `pnpm audit`, `cargo deny`, and `cargo audit`
+
+## Adding Components
+
+To add components to your app, run the following command at the root of your `web` app:
+
+```bash
+pnpm dlx shadcn@latest add button -c apps/web
+```
+
+This places generated UI components in `packages/ui/src/ui`.
+
+## Using Components
+
+Import shared components from the `ui` package.
+
+```tsx
+import { Button } from "@workspace/ui/ui/button"
+```