leedstack 3.1.0

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "leedstack",
+  "version": "3.1.0",
+  "description": "One-command scaffolder for full-stack web applications with 60+ stack combinations (React/Vue/Next.js/Svelte/Angular + Python/Node/Java/Go + Postgres/MySQL/MongoDB)",
+  "type": "module",
+  "bin": {
+    "leedstack": "./bin/create-stack.js"
+  },
+  "files": [
+    "bin",
+    "tools"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "keywords": [
+    "scaffolder",
+    "scaffold",
+    "generator",
+    "full-stack",
+    "cli",
+    "template",
+    "boilerplate",
+    "react",
+    "vue",
+    "vuejs",
+    "nextjs",
+    "next.js",
+    "svelte",
+    "angular",
+    "python",
+    "fastapi",
+    "spring-boot",
+    "express",
+    "nodejs",
+    "go",
+    "postgres",
+    "postgresql",
+    "mysql",
+    "mongodb",
+    "auth0",
+    "stripe",
+    "typescript"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/CTLeed/leedstack.git"
+  },
+  "bugs": {
+    "url": "https://github.com/CTLeed/leedstack/issues"
+  },
+  "homepage": "https://github.com/CTLeed/leedstack#readme",
+  "author": "Colby Leed",
+  "license": "MIT",
+  "dependencies": {
+    "commander": "^12.0.0",
+    "fs-extra": "^11.2.0",
+    "ejs": "^3.1.9"
+  }
+}

package/tools/templates/backend/go-echo/backend/.env.example

@@ -0,0 +1,10 @@
+APP_PORT=8080
+FRONTEND_URL=http://localhost:<%= frontendPort %>
+<% if (modules.auth) { -%>
+AUTH0_DOMAIN=your-tenant.us.auth0.com
+AUTH0_AUDIENCE=https://api.<%= appSlug %>
+<% } -%>
+<% if (modules.payments) { -%>
+STRIPE_SECRET_KEY=sk_test_xxx
+STRIPE_WEBHOOK_SECRET=whsec_xxx
+<% } -%>

package/tools/templates/backend/go-echo/backend/cmd/server/main.go.ejs

@@ -0,0 +1,57 @@
+package main
+
+import (
+	"<%= appSlug %>-backend/internal/handlers"
+	"os"
+
+	"github.com/joho/godotenv"
+	"github.com/labstack/echo/v4"
+	"github.com/labstack/echo/v4/middleware"
+)
+
+func main() {
+	godotenv.Load()
+
+	e := echo.New()
+
+	// Middleware
+	e.Use(middleware.Logger())
+	e.Use(middleware.Recover())
+	// CORS configuration - allow only the configured frontend URL
+	allowedOrigins := []string{}
+	if frontendURL := os.Getenv("FRONTEND_URL"); frontendURL != "" {
+		allowedOrigins = append(allowedOrigins, frontendURL)
+	}
+
+	e.Use(middleware.CORSWithConfig(middleware.CORSConfig{
+		AllowOrigins:     allowedOrigins,
+		AllowMethods:     []string{"GET", "POST", "PUT", "DELETE", "OPTIONS"},
+		AllowHeaders:     []string{"*"},
+		AllowCredentials: true,
+	}))
+
+	// Health endpoint
+	e.GET("/health", handlers.Health)
+	e.GET("/actuator/health", handlers.Health)
+
+	// Example API route
+	e.GET("/api/example", handlers.Example)
+
+	// Protected API routes
+<% if (modules.auth) { -%>
+	// TODO: Add auth middleware
+<% } -%>
+	api := e.Group("/api")
+	_ = api // Will be used for API routes
+
+	port := os.Getenv("APP_PORT")
+	if port == "" {
+		port = "8080"
+	}
+
+	e.Logger.Printf("✅ Server running on http://localhost:%s", port)
+	e.Logger.Printf("📍 API available at http://localhost:%s/api", port)
+	e.Logger.Printf("🏥 Health check at http://localhost:%s/health", port)
+
+	e.Logger.Fatal(e.Start(":" + port))
+}

package/tools/templates/backend/go-echo/backend/go.mod.ejs

@@ -0,0 +1,10 @@
+module <%= appSlug %>-backend
+
+go 1.22
+
+require (
+	github.com/labstack/echo/v4 v4.12.0
+	github.com/joho/godotenv v1.5.1<% if (modules.auth) { %>
+	github.com/lestrrat-go/jwx/v2 v2.1.3<% } %><% if (modules.payments) { %>
+	github.com/stripe/stripe-go/v76 v76.25.0<% } %>
+)

package/tools/templates/backend/go-echo/backend/internal/handlers/example.go

@@ -0,0 +1,15 @@
+package handlers
+
+import (
+	"net/http"
+	"time"
+
+	"github.com/labstack/echo/v4"
+)
+
+func Example(c echo.Context) error {
+	return c.JSON(http.StatusOK, map[string]interface{}{
+		"message":   "Hello from go-echo backend!",
+		"timestamp": time.Now().Format(time.RFC3339),
+	})
+}

package/tools/templates/backend/go-echo/backend/internal/handlers/health.go

@@ -0,0 +1,13 @@
+package handlers
+
+import (
+	"net/http"
+
+	"github.com/labstack/echo/v4"
+)
+
+func Health(c echo.Context) error {
+	return c.JSON(http.StatusOK, map[string]string{
+		"status": "UP",
+	})
+}

package/tools/templates/backend/java-spring/backend/.env.example

@@ -0,0 +1,10 @@
+APP_PORT=8080
+FRONTEND_URL=http://localhost:<%= frontendPort %>
+<% if (modules.auth) { -%>
+AUTH0_DOMAIN=your-tenant.us.auth0.com
+AUTH0_AUDIENCE=https://api.<%= appSlug %>
+<% } -%>
+<% if (modules.payments) { -%>
+STRIPE_SECRET_KEY=sk_test_xxx
+STRIPE_WEBHOOK_SECRET=whsec_xxx
+<% } -%>

package/tools/templates/backend/java-spring/backend/pom.xml.ejs

@@ -0,0 +1,64 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+
+    <parent>
+        <groupId>org.springframework.boot</groupId>
+        <artifactId>spring-boot-starter-parent</artifactId>
+        <version>3.3.4</version>
+        <relativePath/>
+    </parent>
+
+    <groupId>com.app</groupId>
+    <artifactId><%= appSlug %>-backend</artifactId>
+    <version>0.0.1-SNAPSHOT</version>
+    <name><%= appName %> Backend</name>
+
+    <properties>
+        <java.version>21</java.version>
+    </properties>
+
+    <dependencies>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-web</artifactId>
+        </dependency>
+<% if (modules.auth) { -%>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-oauth2-resource-server</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-security</artifactId>
+        </dependency>
+<% } -%>
+<% if (modules.payments) { -%>
+        <dependency>
+            <groupId>com.stripe</groupId>
+            <artifactId>stripe-java</artifactId>
+            <version>26.0.0</version>
+        </dependency>
+<% } -%>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-actuator</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-test</artifactId>
+            <scope>test</scope>
+        </dependency>
+    </dependencies>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>org.springframework.boot</groupId>
+                <artifactId>spring-boot-maven-plugin</artifactId>
+            </plugin>
+        </plugins>
+    </build>
+</project>

package/tools/templates/backend/java-spring/backend/src/main/java/com/app/Application.java.ejs

@@ -0,0 +1,11 @@
+package com.app;
+
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+
+@SpringBootApplication
+public class Application {
+    public static void main(String[] args) {
+        SpringApplication.run(Application.class, args);
+    }
+}

package/tools/templates/backend/java-spring/backend/src/main/java/com/app/config/SecurityConfig.java.ejs

@@ -0,0 +1,64 @@
+package com.app.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+<% if (modules.auth) { -%>
+import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity;
+<% } -%>
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.web.cors.*;
+
+import java.util.List;
+
+@Configuration
+<% if (modules.auth && modules.admin) { -%>
+@EnableMethodSecurity
+<% } -%>
+public class SecurityConfig {
+
+    @Bean
+    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
+        http.csrf(csrf -> csrf.disable());
+        http.cors(cors -> cors.configurationSource(corsConfigurationSource()));
+
+        http.authorizeHttpRequests(auth -> auth
+            .requestMatchers("/actuator/health"<% if (modules.payments) { %>, "/stripe/webhook"<% } %>).permitAll()
+<% if (modules.admin) { -%>
+            .requestMatchers("/api/admin/**").hasAuthority("SCOPE_admin")
+<% } -%>
+<% if (modules.auth) { -%>
+            .anyRequest().authenticated()
+<% } else { -%>
+            .anyRequest().permitAll()
+<% } -%>
+        );
+
+<% if (modules.auth) { -%>
+        http.oauth2ResourceServer(oauth2 -> oauth2.jwt(jwt -> {}));
+<% } -%>
+
+        return http.build();
+    }
+
+    @Bean
+    public CorsConfigurationSource corsConfigurationSource() {
+        CorsConfiguration configuration = new CorsConfiguration();
+
+        // Allow only the configured frontend URL
+        String frontendUrl = System.getenv("FRONTEND_URL");
+        if (frontendUrl != null && !frontendUrl.isEmpty()) {
+            configuration.setAllowedOrigins(List.of(frontendUrl));
+        } else {
+            configuration.setAllowedOrigins(List.of());
+        }
+
+        configuration.setAllowedMethods(Arrays.asList("GET", "POST", "PUT", "DELETE", "OPTIONS"));
+        configuration.setAllowedHeaders(Arrays.asList("*"));
+        configuration.setAllowCredentials(true);
+
+        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
+        source.registerCorsConfiguration("/**", configuration);
+        return source;
+    }
+}

package/tools/templates/backend/java-spring/backend/src/main/java/com/app/controller/ExampleController.java

@@ -0,0 +1,19 @@
+package com.app.controller;
+
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.time.Instant;
+import java.util.Map;
+
+@RestController
+public class ExampleController {
+
+    @GetMapping("/api/example")
+    public Map<String, Object> example() {
+        return Map.of(
+            "message", "Hello from java-spring backend!",
+            "timestamp", Instant.now().toString()
+        );
+    }
+}

package/tools/templates/backend/java-spring/backend/src/main/java/com/app/controller/HealthController.java

@@ -0,0 +1,15 @@
+package com.app.controller;
+
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.Map;
+
+@RestController
+public class HealthController {
+
+    @GetMapping("/health")
+    public Map<String, String> health() {
+        return Map.of("status", "UP");
+    }
+}

package/tools/templates/backend/java-spring/backend/src/main/resources/application.yml.ejs

@@ -0,0 +1,20 @@
+server:
+  port: ${APP_PORT:8080}
+
+spring:
+  application:
+    name: <%= appSlug %>-backend
+<% if (modules.auth) { -%>
+  security:
+    oauth2:
+      resourceserver:
+        jwt:
+          issuer-uri: https://${AUTH0_DOMAIN}/
+          audiences: ${AUTH0_AUDIENCE}
+<% } -%>
+
+management:
+  endpoints:
+    web:
+      exposure:
+        include: health

package/tools/templates/backend/node-express/backend/.env.example

@@ -0,0 +1,10 @@
+APP_PORT=8080
+FRONTEND_URL=http://localhost:<%= frontendPort %>
+<% if (modules.auth) { -%>
+AUTH0_DOMAIN=your-tenant.us.auth0.com
+AUTH0_AUDIENCE=https://api.<%= appSlug %>
+<% } -%>
+<% if (modules.payments) { -%>
+STRIPE_SECRET_KEY=sk_test_xxx
+STRIPE_WEBHOOK_SECRET=whsec_xxx
+<% } -%>

package/tools/templates/backend/node-express/backend/.eslintrc.json

@@ -0,0 +1,21 @@
+{
+  "parser": "@typescript-eslint/parser",
+  "extends": [
+    "eslint:recommended",
+    "plugin:@typescript-eslint/recommended"
+  ],
+  "parserOptions": {
+    "ecmaVersion": "latest",
+    "sourceType": "module"
+  },
+  "rules": {
+    "@typescript-eslint/no-unused-vars": ["warn", { "argsIgnorePattern": "^_" }],
+    "@typescript-eslint/no-explicit-any": "warn",
+    "no-console": "off",
+    "@typescript-eslint/explicit-module-boundary-types": "off"
+  },
+  "env": {
+    "node": true,
+    "es2021": true
+  }
+}

package/tools/templates/backend/node-express/backend/.prettierrc

@@ -0,0 +1,10 @@
+{
+  "semi": true,
+  "trailingComma": "es5",
+  "singleQuote": true,
+  "printWidth": 100,
+  "tabWidth": 2,
+  "useTabs": false,
+  "arrowParens": "avoid",
+  "endOfLine": "lf"
+}

package/tools/templates/backend/node-express/backend/Dockerfile

@@ -0,0 +1,52 @@
+# Multi-stage build for production
+
+# Stage 1: Build
+FROM node:20-alpine AS builder
+
+WORKDIR /app
+
+# Copy package files
+COPY package*.json ./
+
+# Install dependencies
+RUN npm ci
+
+# Copy source code
+COPY . .
+
+# Build TypeScript
+RUN npm run build
+
+# Stage 2: Production
+FROM node:20-alpine
+
+WORKDIR /app
+
+# Copy package files
+COPY package*.json ./
+
+# Install production dependencies only
+RUN npm ci --only=production
+
+# Copy built application from builder
+COPY --from=builder /app/dist ./dist
+
+# Create non-root user
+RUN addgroup -g 1001 -S nodejs && \
+    adduser -S nodejs -u 1001
+
+# Change ownership
+RUN chown -R nodejs:nodejs /app
+
+# Switch to non-root user
+USER nodejs
+
+# Expose port
+EXPOSE 8080
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
+  CMD node -e "require('http').get('http://localhost:8080/health', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})"
+
+# Start application
+CMD ["node", "dist/index.js"]

package/tools/templates/backend/node-express/backend/README.md

@@ -0,0 +1,68 @@
+# <%= AppName %> - Backend
+
+Node.js + Express + TypeScript backend.
+
+## Quick Start
+
+```bash
+# Install dependencies
+npm install
+
+# Set up environment
+cp .env.example .env
+
+# Start development server
+npm run dev
+```
+
+Server runs on http://localhost:8080
+
+## Available Scripts
+
+- `npm run dev` - Start development server with hot reload
+- `npm run build` - Compile TypeScript to JavaScript
+- `npm start` - Run production build
+
+## Environment Variables
+
+See `.env.example` for required variables:
+
+- `APP_PORT` - Server port (default: 8080)
+<% if (db === 'postgres' || db === 'mysql') { -%>
+- `DATABASE_URL` - Database connection string
+<% } else if (db === 'mongodb') { -%>
+- `DATABASE_URL` - MongoDB connection string
+<% } -%>
+<% if (modules.auth) { -%>
+- `AUTH0_DOMAIN` - Auth0 domain
+- `AUTH0_AUDIENCE` - Auth0 API audience
+<% } -%>
+
+## API Routes
+
+- `GET /health` - Health check endpoint
+- `GET /api/example` - Example API route
+<% if (modules.contact) { -%>
+- `POST /api/contact` - Submit contact form
+<% } -%>
+<% if (modules.admin) { -%>
+- `GET /api/admin/stats` - Admin statistics (requires auth)
+<% } -%>
+<% if (modules.payments) { -%>
+- `POST /api/payments/create-checkout-session` - Create Stripe checkout
+- `POST /stripe/webhook` - Stripe webhook handler
+<% } -%>
+
+## Tech Stack
+
+- **Node.js ≥20** - Runtime
+- **Express 5** - Web framework
+- **TypeScript** - Type safety
+<% if (db === 'postgres' || db === 'mysql') { -%>
+- **Prisma** - Database ORM
+<% } else if (db === 'mongodb') { -%>
+- **Mongoose** - MongoDB ODM
+<% } -%>
+<% if (modules.auth) { -%>
+- **jose** - JWT validation
+<% } -%>

package/tools/templates/backend/node-express/backend/package.json.ejs

@@ -0,0 +1,37 @@
+{
+  "name": "<%= appSlug %>-backend",
+  "version": "0.0.1",
+  "private": true,
+  "type": "module",
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "lint": "eslint . --ext .ts --report-unused-disable-directives --max-warnings 0",
+    "lint:fix": "eslint . --ext .ts --fix",
+    "format": "prettier --write \"src/**/*.{ts,json}\"",
+    "format:check": "prettier --check \"src/**/*.{ts,json}\"",
+    "type-check": "tsc --noEmit"
+  },
+  "dependencies": {
+    "express": "^5.0.0",
+    "cors": "^2.8.5",
+    "dotenv": "^16.4.5"<% if (modules.auth) { %>,
+    "jose": "^5.9.6"<% } %><% if (modules.payments) { %>,
+    "stripe": "^16.0.0"<% } %>
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.0",
+    "@types/cors": "^2.8.17",
+    "@types/node": "^22.0.0",
+    "tsx": "^4.19.2",
+    "typescript": "^5.6.3",
+    "@typescript-eslint/parser": "^6.19.0",
+    "@typescript-eslint/eslint-plugin": "^6.19.0",
+    "eslint": "^8.57.0",
+    "prettier": "^3.2.4"
+  }
+}

package/tools/templates/backend/node-express/backend/src/index.ts.ejs

@@ -0,0 +1,75 @@
+import express from 'express';
+import cors from 'cors';
+import dotenv from 'dotenv';
+<% if (modules.auth) { -%>
+import { authMiddleware } from './middleware/auth.js';
+<% } -%>
+
+dotenv.config();
+
+const app = express();
+const PORT = process.env.APP_PORT || 8080;
+
+// CORS configuration - allow only the configured frontend URL
+const allowedOrigins = [
+  process.env.FRONTEND_URL
+].filter(Boolean);
+
+app.use(cors({
+  origin: (origin, callback) => {
+    // Allow requests with no origin (like mobile apps or curl)
+    if (!origin) return callback(null, true);
+    if (allowedOrigins.indexOf(origin) !== -1) {
+      callback(null, true);
+    } else {
+      callback(new Error('Not allowed by CORS'));
+    }
+  },
+  credentials: true
+}));
+
+app.use(express.json());
+
+// Health endpoint
+app.get('/health', (req, res) => {
+  res.json({ status: 'UP' });
+});
+
+app.get('/actuator/health', (req, res) => {
+  res.json({ status: 'UP' });
+});
+
+// Example API route
+app.get('/api/example', (req, res) => {
+  res.json({
+    message: 'Hello from <%= backend %> backend!',
+    timestamp: new Date().toISOString()
+  });
+});
+
+// Apply auth middleware to protected routes
+<% if (modules.auth) { -%>
+app.use('/api', authMiddleware);
+<% } -%>
+
+const server = app.listen(PORT, () => {
+  console.log(`✅ Server running on http://localhost:${PORT}`);
+  console.log(`📍 API available at http://localhost:${PORT}/api`);
+  console.log(`🏥 Health check at http://localhost:${PORT}/health`);
+});
+
+// Graceful shutdown
+process.on('SIGTERM', () => {
+  console.log('SIGTERM signal received: closing HTTP server');
+  server.close(() => {
+    console.log('HTTP server closed');
+  });
+});
+
+process.on('SIGINT', () => {
+  console.log('SIGINT signal received: closing HTTP server');
+  server.close(() => {
+    console.log('HTTP server closed');
+    process.exit(0);
+  });
+});