stackkit 0.2.3 → 0.2.7

package/modules/auth/better-auth/files/{lib → shared/lib}/auth.ts

@@ -1,35 +1,54 @@
 import { betterAuth } from "better-auth";
-import { sendEmail } from "./email/email-service";
-import { getVerificationEmailTemplate, getPasswordResetEmailTemplate } from "./email/email-templates";
-{{#switch database}}
-{{#case prisma}}
-import { prisma } from "./prisma";
+{{#if combo == "prisma:express"}}
+import { sendEmail } from "../../shared/email/email-service";
+import {
+  getPasswordResetEmailTemplate,
+  getVerificationEmailTemplate,
+} from "../../shared/email/email-templates";
+import { prisma } from "../../database/prisma";
 import { prismaAdapter } from "better-auth/adapters/prisma";
-{{/case}}
-{{#case mongoose}}
-import { mongoose } from "./mongoose";
+{{/if}}
+
+{{#if combo == "prisma:nextjs"}}
+import { getPasswordResetEmailTemplate, getVerificationEmailTemplate } from "../service/email/email-templates";
+import { sendEmail } from "../service/email/email-service";
+import { prisma } from "../database/prisma";
+import { prismaAdapter } from "better-auth/adapters/prisma";
+{{/if}}
+
+{{#if combo == "mongoose:express"}}
+import { sendEmail } from "../../shared/email/email-service";
+import {
+  getPasswordResetEmailTemplate,
+  getVerificationEmailTemplate,
+} from "../../shared/email/email-templates";
+import { mongoose } from "../../database/mongoose";
+import { mongodbAdapter } from "better-auth/adapters/mongodb";
+{{/if}}
+
+{{#if combo == "mongoose:nextjs"}}
+import { getPasswordResetEmailTemplate, getVerificationEmailTemplate } from "../service/email/email-templates";
+import { sendEmail } from "../service/email/email-service";
+import { mongoose } from "../database/mongoose";
 import { mongodbAdapter } from "better-auth/adapters/mongodb";
-{{/case}}
-{{/switch}}
+{{/if}}
 
 export async function initAuth() {
-{{#if database == 'mongoose'}}
+{{#if database == "mongoose"}}
 const mongooseInstance = await mongoose();
 const client = mongooseInstance.connection.getClient();
 const db = client.db();
 {{/if}}
 
 return betterAuth({
-{{#switch database}}
-{{#case prisma}}
+{{#if database == "prisma"}}
   database: prismaAdapter(prisma, {
     provider: "{{prismaProvider}}",
   }),
-{{/case}}
-{{#case mongoose}}
+{{/if}}
+{{#if database == "mongoose"}}
   database: mongodbAdapter(db, { client }),
-{{/case}}
-{{/switch}}
+{{/if}}
   baseURL: process.env.BETTER_AUTH_URL,
   secret: process.env.BETTER_AUTH_SECRET,
   trustedOrigins: [process.env.APP_URL!],
@@ -57,8 +76,10 @@ return betterAuth({
   },
   socialProviders: {
     google: {
-      clientId: process.env.GOOGLE_CLIENT_ID!,
-      clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
+      accessType: "offline", 
+      prompt: "select_account consent",
+      clientId: process.env.GOOGLE_CLIENT_ID as string,
+      clientSecret: process.env.GOOGLE_CLIENT_SECRET as string,
     },
   },
   emailVerification: {
@@ -95,4 +116,9 @@ return betterAuth({
  })
 };
 
-export const auth = await initAuth();
+export let auth: any = undefined;
+
+export async function setupAuth() {
+  auth = await initAuth();
+  return auth;
+}

package/modules/auth/better-auth/files/{prisma → shared/prisma}/schema.prisma

@@ -1,4 +1,8 @@
-{{#var defaultId = {{#if prismaProvider == "mongodb"}}@default(auto()) @map("_id") @db.ObjectId{{else}}@default(cuid()){{/if}}}}
+{{#if prismaProvider == "mongodb"}}
+{{#var defaultId = @default(auto()) @map("_id") @db.ObjectId}}
+{{else}}
+{{#var defaultId = @default(cuid())}}
+{{/if}}
 model User {
     id            String    @id {{defaultId}}
     name          String
@@ -9,7 +13,7 @@ model User {
     updatedAt     DateTime  @updatedAt
     sessions      Session[]
     accounts      Account[]
-    role          String    @default("USER")
+    role          Role    @default(USER)
 
     @@unique([email])
     @@map("user")
@@ -61,3 +65,8 @@ model Verification {
     @@index([identifier])
     @@map("verification")
 }
+
+enum Role {
+    USER
+    ADMIN
+}

package/modules/auth/better-auth/generator.json

@@ -5,33 +5,81 @@
   "operations": [
     {
       "type": "create-file",
-      "source": "lib/auth.ts",
-      "destination": "lib/auth.ts",
-      "condition": { "framework": ["nextjs", "express"] }
+      "source": "shared/lib/auth.ts",
+      "destination": "server/auth/auth.ts",
+      "condition": { "framework": ["nextjs"] }
     },
     {
       "type": "create-file",
-      "source": "lib/email-service.ts",
-      "destination": "lib/email/email-service.ts",
-      "condition": { "framework": ["nextjs", "express"] }
+      "source": "shared/lib/auth.ts",
+      "destination": "src/modules/auth/auth.ts",
+      "condition": { "framework": ["express"] }
     },
     {
       "type": "create-file",
-      "source": "lib/email-templates.ts",
-      "destination": "lib/email/email-templates.ts",
-      "condition": { "framework": ["nextjs", "express"] }
+      "source": "shared/lib/email/email-service.ts",
+      "destination": "server/service/email/email-service.ts",
+      "condition": { "framework": ["nextjs"] }
     },
     {
       "type": "create-file",
-      "source": "api/auth/[...all]/route.ts",
+      "source": "shared/lib/email/email-service.ts",
+      "destination": "src/shared/email/email-service.ts",
+      "condition": { "framework": ["express"] }
+    },
+    {
+      "type": "create-file",
+      "source": "shared/lib/email/email-templates.ts",
+      "destination": "server/service/email/email-templates.ts",
+      "condition": { "framework": ["nextjs"] }
+    },
+    {
+      "type": "create-file",
+      "source": "shared/lib/email/email-templates.ts",
+      "destination": "src/shared/email/email-templates.ts",
+      "condition": { "framework": ["express"] }
+    },
+    {
+      "type": "create-file",
+      "source": "nextjs/api/auth/[...all]/route.ts",
       "destination": "app/api/auth/[...all]/route.ts",
       "condition": { "framework": "nextjs" }
     },
     {
       "type": "create-file",
-      "source": "lib/auth-client.ts",
-      "destination": "lib/auth-client.ts",
-      "condition": { "framework": ["nextjs", "react"] }
+      "source": "nextjs/proxy.ts",
+      "destination": "proxy.ts",
+      "condition": { "framework": "nextjs" }
+    },
+    {
+      "type": "create-file",
+      "source": "nextjs/lib/auth/auth-guards.ts",
+      "destination": "server/auth/guards.ts",
+      "condition": { "framework": "nextjs" }
+    },
+    {
+      "type": "create-file",
+      "source": "express/middlewares/authorize.ts",
+      "destination": "src/shared/middlewares/authorize.middleware.ts",
+      "condition": { "framework": "express" }
+    },
+    {
+      "type": "create-file",
+      "source": "express/types/express.d.ts",
+      "destination": "src/types/express.d.ts",
+      "condition": { "framework": "express" }
+    },
+    {
+      "type": "create-file",
+      "source": "shared/lib/auth-client.ts",
+      "destination": "lib/auth/auth-client.ts",
+      "condition": { "framework": ["nextjs"] }
+    },
+    {
+      "type": "create-file",
+      "source": "shared/lib/auth-client.ts",
+      "destination": "src/shared/lib/auth-client.ts",
+      "condition": { "framework": ["react"] }
     },
     {
       "type": "patch-file",
@@ -40,7 +88,7 @@
       "operations": [
         {
           "type": "add-to-bottom",
-          "source": "prisma/schema.prisma"
+          "source": "shared/prisma/schema.prisma"
         }
       ]
     },
@@ -51,12 +99,12 @@
       "operations": [
         {
           "type": "add-import",
-          "imports": ["import { initAuth } from \"../lib/auth\";"]
+          "imports": ["import { setupAuth } from \"./modules/auth/auth\";"]
         },
         {
           "type": "add-code",
           "before": "const port = env.port;",
-          "code": "await initAuth();"
+          "code": "await setupAuth();"
         }
       ]
     },
@@ -67,13 +115,20 @@
       "operations": [
         {
           "type": "add-import",
-          "imports": ["import { auth } from \"../lib/auth\";",
+          "imports": ["import { auth } from \"./modules/auth/auth\";",
           "import { toNodeHandler } from \"better-auth/node\";"]
         },
         {
           "type": "add-code",
-          "after": "// routes",
-          "code": "app.all(\"/api/auth/*splat\", toNodeHandler(auth));"
+          "after": "// API routes",
+          "code": [
+            "app.all(\"/api/auth/*splat\", (req: Request, res: Response) => {",
+            "  if (!auth) {",
+            "    return res.status(503).json({ success: false, message: \"Auth not ready\" });",
+            "  }",
+            "  return toNodeHandler(auth)(req, res);",
+            "});"
+          ]
         }
       ]
     },

package/modules/database/mongoose/generator.json

@@ -6,12 +6,26 @@
     {
       "type": "create-file",
       "source": "lib/mongoose.ts",
-      "destination": "lib/mongoose.ts"
+      "destination": "server/database/mongoose.ts",
+      "condition": { "framework": ["nextjs"] }
+    },
+    {
+      "type": "create-file",
+      "source": "lib/mongoose.ts",
+      "destination": "src/database/mongoose.ts",
+      "condition": { "framework": ["express"] }
+    },
+    {
+      "type": "create-file",
+      "source": "models/health.ts",
+      "destination": "src/modules/health/health.model.ts",
+      "condition": { "framework": ["express"] }
     },
     {
       "type": "create-file",
       "source": "models/health.ts",
-      "destination": "models/health.ts"
+      "destination": "server/database/models/health.model.ts",
+      "condition": { "framework": ["nextjs"] }
     },
     {
       "type": "patch-file",

package/modules/database/prisma/files/lib/prisma.ts

@@ -1,5 +1,5 @@
+import { PrismaClient } from "@prisma/client";
 import 'dotenv/config';
-import { PrismaClient } from './generated/prisma/client'
 
 const globalForPrisma = globalThis as unknown as {
   prisma: PrismaClient | undefined

package/modules/database/prisma/files/prisma/schema.prisma

@@ -1,6 +1,5 @@
 generator client {
-    provider = "prisma-client"
-    output   = "../lib/generated/prisma"
+    provider = "prisma-client-js"
 }
 
 datasource db {

package/modules/database/prisma/generator.json

@@ -16,7 +16,14 @@
     {
       "type": "create-file",
       "source": "lib/prisma.ts",
-      "destination": "lib/prisma.ts"
+      "destination": "server/database/prisma.ts",
+      "condition": { "framework": ["nextjs"] }
+    },
+    {
+      "type": "create-file",
+      "source": "lib/prisma.ts",
+      "destination": "src/database/prisma.ts",
+      "condition": { "framework": ["express"] }
     },
     {
       "type": "add-dependency",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stackkit",
-  "version": "0.2.3",
+  "version": "0.2.7",
   "description": "Production-ready CLI to create and extend JavaScript or TypeScript apps with modular stacks.",
   "main": "dist/index.js",
   "bin": {
@@ -67,17 +67,17 @@
     "@babel/core": "^7.28.5",
     "@babel/preset-env": "^7.28.5",
     "@babel/preset-typescript": "^7.28.5",
-    "@babel/preset-react": "^7.28.5"
+    "@babel/preset-react": "^7.28.5",
+    "recast": "^0.20.5",
+    "@babel/parser": "^7.28.5",
+    "@babel/plugin-transform-typescript": "^7.28.5",
+    "@babel/plugin-transform-react-jsx": "^7.27.1"
   },
   "devDependencies": {
     "@types/fs-extra": "^11.0.4",
     "@types/inquirer": "^9.0.7",
     "@types/node": "^25.0.8",
     "@types/validate-npm-package-name": "^4.0.2",
-    "typescript": "^5.3.3",
-    "recast": "^0.20.5",
-    "@babel/plugin-transform-typescript": "^7.28.5",
-    "@babel/parser": "^7.28.5",
-    "@babel/plugin-transform-react-jsx": "^7.27.1"
+    "typescript": "^5.3.3"
   }
 }

package/templates/express/env.example

@@ -1,2 +1,3 @@
 PORT=3000
-NODE_ENV=development
+NODE_ENV=development
+CORS_ORIGIN="http://localhost:3000"

package/templates/express/package.json

@@ -8,15 +8,15 @@
     "build": "tsc",
     "lint": "eslint src --ext .ts",
     "lint:fix": "eslint src --ext .ts --fix",
-    "start": "node dist/server.js",
-    "start:prod": "cross-env NODE_ENV=production node dist/server.js"
+    "start": "node dist/server.js"
   },
   "dependencies": {
     "cors": "^2.8.5",
     "dotenv": "^17.2.3",
     "express": "^5.2.1",
     "helmet": "^8.1.0",
-    "morgan": "^1.10.1"
+    "morgan": "^1.10.1",
+    "express-rate-limit": "^6.10.0"
   },
   "devDependencies": {
     "@types/cors": "^2.8.19",
@@ -25,7 +25,6 @@
     "@types/node": "^25.0.8",
     "@typescript-eslint/eslint-plugin": "^8.53.0",
     "@typescript-eslint/parser": "^8.53.0",
-    "cross-env": "^10.1.0",
     "eslint": "^9.39.2",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3"

package/templates/express/src/app.ts

@@ -1,28 +1,26 @@
-import cors from "cors";
-import express, { Application, NextFunction, Request, Response } from "express";
-import helmet from "helmet";
-import morgan from "morgan";
-import { env } from "./config/env";
-import { authRoutes } from "./features/health/health.route";
-import { errorHandler } from "./middlewares/error.middleware";
+import express, { Application, Request, Response } from "express";
+import { cors } from "./config/cors";
+import { helmet } from "./config/helmet";
+import { logger } from "./config/logger";
+import { limiter } from "./config/rate-limit";
+import { apiRoutes } from "./routes";
+import { errorHandler } from "./shared/middlewares/error.middleware";
+import { notFound } from "./shared/middlewares/not-found.middleware";
 
 // app initialization
 const app: Application = express();
 app.use(express.json());
 
-// security headers
-app.use(helmet());
+app.use(helmet);
+app.use(logger);
+app.use(cors);
+app.use(limiter);
 
-// logging
-if (env.isProduction) {
-  app.use(morgan("combined"));
-} else {
-  app.use(morgan("dev"));
+// trust proxy when behind proxies (load balancers)
+if (process.env.NODE_ENV === "production") {
+  app.set("trust proxy", 1);
 }
 
-// cors configuration
-app.use(cors());
-
 // Home page route
 app.get("/", (_req: Request, res: Response) => {
   res.status(200).json({
@@ -34,16 +32,11 @@ app.get("/", (_req: Request, res: Response) => {
   });
 });
 
-// routes
-app.use("/api/health", authRoutes);
+// API routes
+app.use("/api", apiRoutes);
 
 // unhandled routes
-app.use((req: Request, _res: Response, next: NextFunction) => {
-  const error: any = new Error(`Can't find ${req.originalUrl} on this server!`);
-  error.status = 404;
-
-  next(error);
-});
+app.use(notFound);
 
 // Global error handler
 app.use(errorHandler);

package/templates/express/src/config/cors.ts

@@ -0,0 +1,12 @@
+import createCors from "cors";
+import { env } from "./env";
+
+const origin = env.isProduction
+  ? process.env.CORS_ORIGIN
+    ? process.env.CORS_ORIGIN.split(",").map((s) => s.trim())
+    : false
+  : true;
+
+const cors = createCors({ origin });
+
+export { cors };

package/templates/express/src/config/helmet.ts

@@ -0,0 +1,5 @@
+import createHelmet from "helmet";
+
+const helmet = createHelmet();
+
+export { helmet };

package/templates/express/src/config/logger.ts

@@ -0,0 +1,6 @@
+import morgan from "morgan";
+import { env } from "./env";
+
+const logger = env.isProduction ? morgan("combined") : morgan("dev");
+
+export { logger };

package/templates/express/src/config/rate-limit.ts

@@ -0,0 +1,11 @@
+import rateLimit from "express-rate-limit";
+import { env } from "./env";
+
+const limiter = rateLimit({
+  windowMs: 15 * 60 * 1000, // 15 minutes
+  max: env.isProduction ? 100 : 1000, // limit each IP
+  standardHeaders: true,
+  legacyHeaders: false,
+});
+
+export { limiter };

package/templates/express/src/{features → modules}/health/health.route.ts

@@ -6,4 +6,4 @@ const router = Router();
 // demo route
 router.get("/", healthController.health);
 
-export const authRoutes = router;
+export const healthRoutes = router;

package/templates/express/src/routes/index.ts

@@ -0,0 +1,12 @@
+import { Router } from "express";
+import { healthRoutes } from "../modules/health/health.route";
+const router = Router();
+
+// versioned API
+const v1 = Router();
+
+v1.use("/health", healthRoutes);
+
+router.use("/v1", v1);
+
+export const apiRoutes = router;

package/templates/express/src/shared/errors/api-error.ts

@@ -0,0 +1,14 @@
+export default class ApiError extends Error {
+  statusCode: number;
+  isOperational: boolean;
+
+  constructor(statusCode: number, message: string, isOperational = true) {
+    super(message);
+    this.statusCode = statusCode;
+    this.isOperational = isOperational;
+    Object.setPrototypeOf(this, ApiError.prototype);
+    if (Error.captureStackTrace) {
+      Error.captureStackTrace(this, this.constructor);
+    }
+  }
+}

package/templates/express/src/shared/errors/error-codes.ts

@@ -0,0 +1,9 @@
+const ERROR_CODES = {
+  VALIDATION: "VALIDATION_ERROR",
+  NOT_FOUND: "NOT_FOUND",
+  UNAUTHORIZED: "UNAUTHORIZED",
+  FORBIDDEN: "FORBIDDEN",
+  INTERNAL: "INTERNAL_ERROR",
+} as const;
+
+export default ERROR_CODES;

package/templates/express/src/shared/logger/logger.ts

@@ -0,0 +1,20 @@
+function ts() {
+  return new Date().toISOString();
+}
+
+export const info = (msg: string, meta?: any) => {
+  console.log(`${ts()} INFO: ${msg}` + (meta ? ` ${JSON.stringify(meta)}` : ""));
+};
+export const warn = (msg: string, meta?: any) => {
+  console.warn(`${ts()} WARN: ${msg}` + (meta ? ` ${JSON.stringify(meta)}` : ""));
+};
+export const error = (msg: string, meta?: any) => {
+  console.error(`${ts()} ERROR: ${msg}` + (meta ? ` ${JSON.stringify(meta)}` : ""));
+};
+export const debug = (msg: string, meta?: any) => {
+  if (process.env.NODE_ENV !== "production") {
+    console.debug(`${ts()} DEBUG: ${msg}` + (meta ? ` ${JSON.stringify(meta)}` : ""));
+  }
+};
+
+export default { info, warn, error, debug };

package/templates/express/src/{middlewares → shared/middlewares}/error.middleware.ts

@@ -1,5 +1,5 @@
 import { NextFunction, Request, Response } from "express";
-import { env } from "../config/env";
+import { env } from "../../config/env";
 
 export const errorHandler = (err: any, _req: Request, res: Response, _: NextFunction) => {
   const statusCode = err.status || 500;

package/templates/express/src/shared/middlewares/not-found.middleware.ts

@@ -0,0 +1,9 @@
+import { Request, Response } from "express";
+
+export function notFound(req: Request, res: Response) {
+  res.status(404).json({
+    message: `Can't find ${req.originalUrl} on this server!`,
+    path: req.originalUrl,
+    date: Date(),
+  });
+}

package/templates/express/src/shared/utils/async-handler.ts

@@ -0,0 +1,9 @@
+import { NextFunction, Request, Response } from "express";
+
+export default function asyncHandler(
+  fn: (req: Request, res: Response, next: NextFunction) => Promise<any>,
+) {
+  return (req: Request, res: Response, next: NextFunction) => {
+    fn(req, res, next).catch(next);
+  };
+}

package/templates/express/src/shared/utils/pagination.ts

@@ -0,0 +1,6 @@
+export function getPagination(query: any) {
+  const page = Math.max(1, parseInt(String(query.page || "1"), 10) || 1);
+  const limit = Math.min(100, parseInt(String(query.limit || "10"), 10) || 10);
+  const skip = (page - 1) * limit;
+  return { page, limit, skip, take: limit };
+}

package/templates/express/src/shared/utils/response.ts

@@ -0,0 +1,9 @@
+import { Response } from "express";
+
+export function success(res: Response, data: any, message = "Success", meta?: any) {
+  return res.json({ success: true, message, data, meta });
+}
+
+export function fail(res: Response, status = 500, message = "Error", details?: any) {
+  return res.status(status).json({ success: false, message, details });
+}

package/templates/express/tsconfig.json

@@ -1,9 +1,15 @@
 {
   "compilerOptions": {
+    "sourceMap": true,
+    "outDir": "dist",
+    "strict": true,
+    "target": "ES2020",
+    "lib": ["ES2020", "DOM"],
+    "skipLibCheck": true,
+    "types": ["node"],
+    "esModuleInterop": true,
     "module": "ESNext",
     "moduleResolution": "node",
-    "target": "ES2023",
-    "strict": true,
-    "esModuleInterop": true
+    "resolveJsonModule": true
   }
 }

package/templates/nextjs/next-env.d.ts

@@ -0,0 +1,6 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
+import "./.next/types/routes.d.ts";
+
+// NOTE: This file should not be edited
+// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.