workspai 0.43.0

package/templates/kits/nestjs-standard/README.md.j2

@@ -0,0 +1,134 @@
+# {{ project_name | replace('-', ' ') | title }}
+
+A production-ready NestJS 11 application generated with Workspai's **NestJS Standard Kit**.
+
+## Getting Started
+> Recommended Node version: `{{ node_version }}` (`.nvmrc` and `.node-version` are included for your toolchain)
+
+```bash
+# Bootstrap dependencies using the local CLI
+npx workspai init  # use make init if you prefer a Make target
+
+# Copy env templates + install hooks/tooling
+./bootstrap.sh
+
+# Run the dev server with hot reload
+make dev
+
+# Or rely on the project-local RapidKit Core helpers:
+npx workspai dev
+
+# Run linting, type-checking, tests, and supply-chain audits
+make lint
+make typecheck
+make test
+make audit
+npx workspai lint
+npx workspai test
+```
+
+> Use `npx workspai init` (or `make init`) whenever dependencies change. Pass `SKIP_INIT=1` (for example `SKIP_INIT=1 make install`) if you only need to refresh tooling/hooks.
+
+> Lockfiles are generated automatically during scaffolding. Set `RAPIDKIT_SKIP_LOCKS=1` (or `RAPIDKIT_GENERATE_LOCKS=0`) before running `workspai create` if you need to skip this step.
+
+> Need the project-local RapidKit Core command list? Run `rapidkit --help` when RapidKit Core is installed, or use `npx workspai --help` for workspace-level commands.
+
+---
+
+## Quick start (developer)
+
+1. `npx workspai init` bootstraps dependencies through the project-aware launcher and enforces lockfile flags for your chosen package manager.
+2. `make init` remains available as an alias to `npx workspai init` when you prefer Make targets.
+3. `./bootstrap.sh` copies `.env.example` to `.env` (when missing) and runs `SKIP_INIT=1 make install` so git hooks and tooling stay current without reinstalling packages.
+4. `make dev` wraps `{{ package_manager if package_manager != 'pnpm' else 'pnpm' }} run start:dev` and centralizes env loading; use it for day-to-day development.
+5. `make lint`, `make typecheck`, and `make test` proxy to the underlying package scripts or `tsc` so local changes match CI expectations.
+6. `make audit` executes `{{ package_manager }}`'s security audit (falling back to dev dependencies if needed) to surface vulnerable packages early.
+
+`make install` is still available; it re-runs `npx workspai init` unless you set `SKIP_INIT=1`, so prefer `SKIP_INIT=1 make install` when you only need to refresh tooling.
+
+Prefer `npx workspai dev`, `npx workspai test`, or `npx workspai lint` when you want the project-aware launcher to auto-detect the right runtime; they call into the same project scripts wrapped by the Make targets.
+
+Prefer the Make targets for consistency, but you can always fall back to native commands if needed:
+
+```bash
+{{ package_manager if package_manager != 'pnpm' else 'pnpm' }} install
+{{ package_manager if package_manager != 'pnpm' else 'pnpm' }} run start:dev
+{{ package_manager if package_manager != 'pnpm' else 'pnpm' }} test
+{{ package_manager if package_manager != 'pnpm' else 'pnpm' }} run lint
+```
+
+If you see engine compatibility errors during `{{ package_manager }} install`, update your Node runtime (nvm/asdf) or use the provided Dockerfile which targets `NODE_VERSION={{ node_version }}`.
+
+## Features
+
+- Modular architecture with configuration hooks
+- {{ 'JWT/OAuth2 authentication scaffolding' if auth_type != 'none' else 'Authentication ready' }}
+- Optional integrations:
+  - Database: {{ database_type | default('postgresql') | upper }}
+  - Redis caching
+  - Structured logging and telemetry
+  - Monitoring endpoints
+
+## Project Structure
+
+- `src/main.ts` – Bootstraps the NestJS application
+- `src/app.module.ts` – Core application module with injection anchors
+- `src/modules/` – Container for RapidKit Core modules (`// <<<inject:module-init>>>`)
+- `src/config/` – Centralized configuration module and validation
+- `test/` – Unit and e2e testing with Jest
+
+## RapidKit Core Modules
+
+Install additional modules as needed:
+
+```bash
+rapidkit add module settings
+rapidkit add module logging
+rapidkit add module auth
+```
+
+<!-- <<<inject:module-snippet>>> -->
+
+## Example feature
+
+The scaffold ships with an `ExamplesModule` exposing a tiny in-memory notes API under `/examples/notes`. Use it to validate request/response flows or to demo module structure before wiring real adapters:
+
+```bash
+# Create a note
+curl -s -X POST http://localhost:3000/examples/notes \
+  -H "Content-Type: application/json" \
+  -d '{"title":"hello","body":"documented via Workspai"}'
+
+# List all notes
+curl -s http://localhost:3000/examples/notes | jq
+```
+
+Replace the in-memory service with a proper repository once you add RapidKit Core database modules.
+
+## Docker
+
+```bash
+docker-compose up -d
+docker-compose down
+```
+
+## Scripts
+
+| Command | Description |
+| --- | --- |
+| `{{ package_manager if package_manager != 'pnpm' else 'pnpm' }} start:dev` | Start development server |
+| `{{ package_manager if package_manager != 'pnpm' else 'pnpm' }} build` | Build production artifacts |
+| `{{ package_manager if package_manager != 'pnpm' else 'pnpm' }} test` | Run tests |
+
+---
+Generated by Workspai.
+
+## 📄 License
+
+This project is licensed under the **{{ license }}** License - see the `LICENSE` file included at the project root for details.
+
+## 🔒 Security & secrets
+
+- Copy `.env.example` to `.env` and populate secrets (`SECRET_KEY`, DB credentials, etc.) before deploying.
+- **Do not** commit real secrets or `.env` to git; `.gitignore` already contains `.env` to protect accidental commits.
+- For production, tighten CORS and allowed hosts rather than using wildcard settings provided for convenience in dev.

package/templates/kits/nestjs-standard/docker-compose.yml.j2

@@ -0,0 +1,94 @@
+version: '3.8'
+services:
+  app:
+    build: .
+    container_name: {{ project_name | replace('_', '-') }}
+    ports:
+      - "8000:8000"
+    env_file:
+      - .env
+    environment:
+      NODE_ENV: development
+    command: {{ ('pnpm' if package_manager == 'pnpm' else (package_manager if package_manager in ['npm', 'yarn'] else 'npm')) }} run start:dev
+    volumes:
+      - .:/usr/src/app
+      - /usr/src/app/node_modules
+    {% if database_type in ['postgresql', 'mysql', 'mongodb'] or include_caching %}
+    depends_on:
+      {% if database_type == 'postgresql' %}
+      postgres:
+        condition: service_healthy
+      {% elif database_type == 'mysql' %}
+      mysql:
+        condition: service_healthy
+      {% elif database_type == 'mongodb' %}
+      mongodb:
+        condition: service_started
+      {% endif %}
+      {% if include_caching %}
+      redis:
+        condition: service_started
+      {% endif %}
+    {% endif %}
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
+      interval: 10s
+      timeout: 3s
+      retries: 5
+
+{% if database_type == 'postgresql' %}
+  postgres:
+    image: postgres:15-alpine
+    environment:
+      POSTGRES_USER: user
+      POSTGRES_PASSWORD: password
+      POSTGRES_DB: {{ project_name | replace('-', '_') }}
+    ports:
+      - "5432:5432"
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U user"]
+      interval: 10s
+      timeout: 3s
+      retries: 5
+
+{% elif database_type == 'mysql' %}
+  mysql:
+    image: mysql:8.1
+    environment:
+      MYSQL_ROOT_PASSWORD: password
+      MYSQL_DATABASE: {{ project_name | replace('-', '_') }}
+      MYSQL_USER: user
+      MYSQL_PASSWORD: password
+    ports:
+      - "3306:3306"
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+{% elif database_type == 'mongodb' %}
+  mongodb:
+    image: mongo:7
+    ports:
+      - "27017:27017"
+    volumes:
+      - mongodb_data:/data/db
+
+{% endif %}
+{% if include_caching %}
+  redis:
+    image: redis:7-alpine
+    ports:
+      - "6379:6379"
+    command: ["redis-server", "--appendonly", "yes"]
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 5
+{% endif %}
+
+volumes:
+  mongodb_data:
+    driver: local

package/templates/kits/nestjs-standard/docs/README.md.j2

@@ -0,0 +1,15 @@
+# Documentation
+
+Welcome to the documentation portal for **{{ project_name | replace('-', ' ') | title }}**.
+
+## Contents
+
+- `architecture/` – System design documents and decisions
+- `operations/` – Runbooks and operational procedures
+- `modules/` – Documentation for installed RapidKit Core modules
+
+## Getting Started
+
+1. Update this documentation with project-specific details.
+2. Document any architectural decisions in `architecture/adr-000-template.md`.
+3. Keep module docs in sync with installed RapidKit Core modules.

package/templates/kits/nestjs-standard/env.example.j2

@@ -0,0 +1,18 @@
+# Application
+APP_NAME={{ project_name | upper }}
+PORT=8000
+HOST=0.0.0.0
+NODE_ENV=development
+
+# Security
+JWT_SECRET="{{ '' | generate_secret(48) }}"
+JWT_EXPIRATION=1h
+
+# Database
+DATABASE_URL=postgresql://user:password@localhost:5432/{{ project_name | replace('-', '_') }}
+
+# Redis
+REDIS_HOST=localhost
+REDIS_PORT=6379
+
+# <<<inject:module-env>>>

package/templates/kits/nestjs-standard/eslint.config.cjs.j2

@@ -0,0 +1,9 @@
+const { FlatCompat } = require('@eslint/eslintrc');
+
+const compat = new FlatCompat({
+  baseDirectory: __dirname,
+});
+
+const legacyConfig = require('./.eslintrc.js');
+
+module.exports = compat.config(legacyConfig);

package/templates/kits/nestjs-standard/jest.config.ts.j2

@@ -0,0 +1,28 @@
+import type { Config } from 'jest';
+
+const config: Config = {
+  moduleFileExtensions: ['js', 'json', 'ts'],
+  rootDir: '.',
+  testEnvironment: 'node',
+  testRegex: '.*\\.spec.ts$',
+  testPathIgnorePatterns: [
+    '/node_modules/',
+    '/.workspai/vendor/',
+    '/.workspai/snapshots/',
+    '/.rapidkit/vendor/',
+    '/.rapidkit/snapshots/',
+  ],
+  transform: {
+    '^.+\\.ts$': 'ts-jest',
+  },
+  collectCoverageFrom: ['src/**/*.{ts,tsx}', '!src/**/*.module.ts'],
+  coverageDirectory: './coverage',
+  moduleNameMapper: {
+    '^@config/(.*)$': '<rootDir>/src/config/$1',
+    '^@modules/(.*)$': '<rootDir>/src/modules/$1',
+    '^@shared/(.*)$': '<rootDir>/src/shared/$1',
+  },
+  setupFiles: ['dotenv/config'],
+};
+
+export default config;

package/templates/kits/nestjs-standard/nest-cli.json.j2

@@ -0,0 +1,10 @@
+{
+  "collection": "@nestjs/schematics",
+  "sourceRoot": "src",
+  "entryFile": "main",
+  "compilerOptions": {
+    "deleteOutDir": true,
+    "webpack": false,
+    "tsConfigPath": "tsconfig.build.json"
+  }
+}

package/templates/kits/nestjs-standard/package.json.j2

@@ -0,0 +1,101 @@
+{
+  "name": "{{ project_name | replace('_', '-') | lower }}",
+  "version": "{{ app_version | default('1.0.0') }}",
+  "description": "{{ description | default('NestJS application generated with Workspai') }}",
+  "license": "{{ license | default('Apache-2.0') }}",
+  "author": "{{ author }}",
+  "engines": {
+    "node": ">={{ node_version }}"
+  },
+  "private": true,
+  "scripts": {
+    "start": "node dist/main",
+    "dev": "nest start --watch",
+    "start:dev": "nest start --watch",
+    "start:debug": "nest start --debug --watch",
+    "start:prod": "node dist/main",
+    "build": "nest build",
+    "lint": "eslint \"{src,test}/**/*.ts\" --fix",
+    "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\"",
+    "test": "jest",
+    "test:watch": "jest --watch",
+    "test:cov": "jest --coverage",
+    "test:e2e": "jest --config ./test/jest-e2e.json"
+  },
+  "dependencies": {
+    "@nestjs/common": "^11.1.10",
+    "@nestjs/config": "^4.0.2",
+    "@nestjs/core": "^11.1.10",
+    "@nestjs/platform-express": "^11.1.10",
+    "@nestjs/swagger": "^11.2.3",
+    "class-transformer": "^0.5.1",
+    "class-validator": "^0.14.3",
+    "reflect-metadata": "^0.2.2",
+    "rxjs": "^7.8.2",
+    "helmet": "^8.1.0",
+    "compression": "^1.8.1",
+    "winston": "^3.19.0",
+    "zod": "^4.2.1",
+    "joi": "^18.0.2",
+    "@nestjs/terminus": "^11.0.0",
+    {% if database_type in ['postgresql', 'mysql'] %}
+    "@nestjs/typeorm": "^11.0.0",
+    "typeorm": "^0.3.28",
+    {% if database_type == 'postgresql' %}
+    "pg": "^8.16.3",
+    {% elif database_type == 'mysql' %}
+    "mysql2": "^3.15.3",
+    {% endif %}
+    {% elif database_type == 'mongodb' %}
+    "@nestjs/mongoose": "^11.0.3",
+    "mongoose": "^9.0.1",
+    {% endif %}
+    {% if include_caching %}
+    "@nestjs/cache-manager": "^3.0.1",
+    "cache-manager": "^7.2.6",
+    "cache-manager-redis-store": "^3.0.1",
+    "ioredis": "^5.8.2",
+    {% endif %}
+    {% if include_monitoring %}
+    "prom-client": "^15.1.3",
+    {% endif %}
+    {% if auth_type in ['jwt', 'oauth2'] %}
+    "@nestjs/jwt": "^11.0.2",
+    "@nestjs/passport": "^11.0.5",
+    "bcrypt": "^6.0.0",
+    "passport": "^0.7.0",
+    "passport-jwt": "^4.0.1",
+    {% endif %}
+    "dotenv": "^17.2.3"
+  },
+  "devDependencies": {
+    "@eslint/eslintrc": "^3.3.3",
+    "@nestjs/cli": "^11.0.14",
+    "@nestjs/schematics": "^11.0.9",
+    "@nestjs/testing": "^11.1.10",
+    "@types/compression": "^1.8.1",
+    "@types/express": "^5.0.6",
+    "@types/jest": "^30.0.0",
+    "@types/node": "^18.19.130",
+    "@types/supertest": "^6.0.3",
+    "@typescript-eslint/eslint-plugin": "^8.50.1",
+    "@typescript-eslint/parser": "^8.50.1",
+    "eslint": "^9.39.2",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-import": "^2.32.0",
+    "eslint-plugin-prettier": "^5.5.4",
+    "jest": "^30.2.0",
+    "prettier": "^3.7.4",
+    "source-map-support": "^0.5.21",
+    "supertest": "^7.1.4",
+    "ts-jest": "^29.4.6",
+    "ts-loader": "^9.5.4",
+    "ts-node": "^10.9.2",
+    "tsconfig-paths": "^4.2.0",
+    "typescript": "^5.9.3"
+  },
+  "overrides": {
+    "cross-spawn": "7.0.5",
+    "glob": "10.5.0"
+  }
+}

package/templates/kits/nestjs-standard/src/app.controller.ts.j2

@@ -0,0 +1,14 @@
+import { Controller, Get } from '@nestjs/common';
+import { AppService } from './app.service';
+
+@Controller()
+export class AppController {
+  constructor(private readonly appService: AppService) {}
+
+  @Get('health')
+  getHealth() {
+    return this.appService.getHealth();
+  }
+
+  // <<<inject:controller-routes>>>
+}

package/templates/kits/nestjs-standard/src/app.module.ts.j2

@@ -0,0 +1,26 @@
+import { Module } from '@nestjs/common';
+import { ConfigModule } from '@nestjs/config';
+
+import { settingsConfiguration } from './config/configuration';
+import { validationSchema } from './config/validation';
+import { AppController } from './app.controller';
+import { AppService } from './app.service';
+import { rapidkitModules } from './modules';
+import { ExamplesModule } from './examples/examples.module';
+// <<<inject:module-imports>>>
+
+@Module({
+  imports: [
+    ConfigModule.forRoot({
+      isGlobal: true,
+      load: [settingsConfiguration],
+      validationSchema,
+      expandVariables: true,
+    }),
+    ExamplesModule,
+    ...rapidkitModules,
+  ],
+  controllers: [AppController],
+  providers: [AppService],
+})
+export class AppModule {}

package/templates/kits/nestjs-standard/src/app.service.ts.j2

@@ -0,0 +1,16 @@
+import { Injectable } from '@nestjs/common';
+
+@Injectable()
+export class AppService {
+  getHealth() {
+    return {
+      status: 'ok',
+      timestamp: new Date().toISOString(),
+      version: process.env.APP_VERSION ?? process.env.npm_package_version ?? '0.0.1',
+      uptime: process.uptime(),
+      module: process.env.APP_MODULE ?? process.env.APP_NAME ?? process.env.npm_package_name ?? 'app',
+    };
+  }
+
+  // <<<inject:service-methods>>>
+}

package/templates/kits/nestjs-standard/src/auth/auth.controller.ts.j2

@@ -0,0 +1,20 @@
+import { Controller } from '@nestjs/common';
+
+@Controller('auth')
+export class AuthController {
+  // <<<inject:auth-login>>>
+  // <<<inject:auth-signup>>>
+  // <<<inject:auth-refresh>>>
+  // <<<inject:auth-logout>>>
+  // <<<inject:auth-logout-all>>>
+  // <<<inject:auth-me>>>
+  // <<<inject:auth-protected>>>
+  // <<<inject:auth-oauth-google>>>
+  // <<<inject:auth-mfa-totp>>>
+  // <<<inject:auth-email-verification>>>
+  // <<<inject:auth-captcha>>>
+  // <<<inject:auth-biometric>>>
+  // <<<inject:auth-passwordless>>>
+  // <<<inject:auth-federated>>>
+  // <<<inject:auth-zero-trust>>>
+}

package/templates/kits/nestjs-standard/src/auth/auth.module.ts.j2

@@ -0,0 +1,13 @@
+import { Module } from '@nestjs/common';
+
+// <<<inject:auth-imports>>>
+
+@Module({
+  imports: [
+    // <<<inject:auth-module>>>
+  ],
+  controllers: [],
+  providers: [],
+  exports: [],
+})
+export class AuthModule {}

package/templates/kits/nestjs-standard/src/auth/auth.service.ts.j2

@@ -0,0 +1,6 @@
+import { Injectable } from '@nestjs/common';
+
+@Injectable()
+export class AuthService {
+  // <<<inject:auth-service>>>
+}

package/templates/kits/nestjs-standard/src/auth/entities/token.entity.ts.j2

@@ -0,0 +1,3 @@
+export class TokenEntity {
+  // <<<inject:auth-token-entity>>>
+}

package/templates/kits/nestjs-standard/src/auth/entities/user.entity.ts.j2

@@ -0,0 +1,3 @@
+export class UserEntity {
+  // <<<inject:auth-user-entity>>>
+}

package/templates/kits/nestjs-standard/src/auth/entities/webauthn.entity.ts.j2

@@ -0,0 +1,3 @@
+export class WebAuthnEntity {
+  // <<<inject:auth-webauthn-entity>>>
+}

package/templates/kits/nestjs-standard/src/config/configuration.ts.j2

@@ -0,0 +1,85 @@
+import path from 'node:path';
+import { registerAs } from '@nestjs/config';
+
+/* eslint-disable @typescript-eslint/no-require-imports */
+
+// Dynamic vendor loader - resolves .workspai/vendor in project root or uses
+// RAPIDKIT_VENDOR_ROOT if set. This avoids hard-coded relative imports into
+// src/.workspai and makes generated projects robust and portable.
+const VENDOR_ROOT_ENV = 'RAPIDKIT_VENDOR_ROOT';
+const VENDOR_MODULE = '{{ rapidkit_vendor_module }}';
+const VENDOR_VERSION = '{{ rapidkit_vendor_version }}';
+const VENDOR_CONFIGURATION_RELATIVE = 'src/config/configuration';
+
+function resolveVendorRoot(): string {
+  const override = process.env[VENDOR_ROOT_ENV];
+  if (override && override.trim().length > 0) {
+    return path.resolve(override);
+  }
+  return path.resolve(process.cwd(), '.workspai', 'vendor');
+}
+
+function resolveVendorModule() {
+  const vendorPath = path.join(
+    resolveVendorRoot(),
+    VENDOR_MODULE,
+    VENDOR_VERSION,
+    VENDOR_CONFIGURATION_RELATIVE,
+  );
+  // Attempt to dynamically load a vendor-provided configuration. If the
+  // vendor snapshot is not present in .workspai/vendor (common when the
+  // 'settings' module wasn't installed), fail gracefully instead of
+  // allowing require() to throw and crash the application.
+  try {
+    // eslint-disable-next-line @typescript-eslint/no-var-requires, global-require
+    return require(vendorPath);
+  } catch (err: unknown) {
+    const e = err as { code?: string } | undefined;
+    // Only suppress MODULE_NOT_FOUND / ENOENT for the vendor path so other
+    // unexpected errors still surface to the user.
+    if (e && (e.code === 'MODULE_NOT_FOUND' || e.code === 'ENOENT')) {
+      // eslint-disable-next-line no-console
+      console.warn(`WARN: vendor settings not found at ${vendorPath} - continuing without vendor settings`);
+      return null;
+    }
+    throw err;
+  }
+}
+
+const _vendor = resolveVendorModule();
+
+export default registerAs('app', () => ({
+  name: process.env.APP_NAME ?? "{{ project_name | replace('-', ' ') | title }}",
+  env: process.env.NODE_ENV ?? 'development',
+  host: process.env.HOST ?? '0.0.0.0',
+  port: parseInt(process.env.PORT ?? '8000', 10),
+  logLevel: (() => {
+    const raw = (process.env.LOG_LEVEL ?? 'log').toLowerCase();
+    if (raw === 'info') return 'log';
+    if (raw === 'warning') return 'warn';
+    return raw;
+  })(),
+  // <<<inject:configuration>>>
+}));
+
+// Provide a safe default settingsConfiguration if no vendor snapshot is present
+// so generated projects still boot even when the optional settings module
+// hasn't been installed.
+const defaultSettings = () => ({
+  ENV: process.env.NODE_ENV ?? 'development',
+  DEBUG: process.env.DEBUG === '1' || process.env.DEBUG?.toLowerCase() === 'true',
+  PROJECT_NAME: process.env.APP_NAME ?? '{{ project_name | replace('-', ' ') | title }}',
+  SECRET_KEY: process.env.SECRET_KEY ?? '{{ '' | generate_secret(48) }}',
+  VERSION: process.env.APP_VERSION ?? '0.0.1',
+  ALLOWED_HOSTS: (process.env.ALLOWED_HOSTS ?? '*').split(',').map((s) => s.trim()).filter(Boolean),
+  CONFIG_FILES: [],
+  CONFIG_REFRESH_INTERVAL: Number.parseInt(process.env.CONFIG_REFRESH_INTERVAL ?? '60', 10),
+  VAULT_URL: null,
+  AWS_REGION: null,
+  HOT_RELOAD_ENABLED:
+    process.env.HOT_RELOAD_ENABLED === '1' || process.env.HOT_RELOAD_ENABLED?.toLowerCase() === 'true',
+  HOT_RELOAD_ENV_ALLOWLIST: (process.env.HOT_RELOAD_ENV_ALLOWLIST ?? '').split(',').map((s) => s.trim()).filter(Boolean),
+});
+
+export const settingsConfiguration =
+  _vendor?.settingsConfiguration ?? _vendor?.default?.settingsConfiguration ?? (() => defaultSettings());

package/templates/kits/nestjs-standard/src/config/index.ts.j2

@@ -0,0 +1,2 @@
+export * from './configuration';
+export * from './validation';

package/templates/kits/nestjs-standard/src/config/validation.ts.j2

@@ -0,0 +1,21 @@
+import * as Joi from 'joi';
+
+export const validationSchema = Joi.object({
+  APP_NAME: Joi.string().default("{{ project_name | replace('-', ' ') | title }}"),
+  NODE_ENV: Joi.string().valid('development', 'production', 'test').default('development'),
+  HOST: Joi.string().hostname().default('0.0.0.0'),
+  PORT: Joi.number().port().default(8000),
+  LOG_LEVEL: Joi.string()
+    .lowercase()
+    .valid('error', 'warn', 'log', 'debug', 'verbose', 'info', 'warning')
+    .default('log'),
+});
+
+export const loggingValidationSchema = Joi.object({
+  LOG_LEVEL: Joi.string().valid('debug', 'info', 'warning', 'error').default('info'),
+  LOG_FORMAT: Joi.string().valid('json', 'text', 'colored').default('json'),
+  LOG_SINKS: Joi.string().default('stderr'),
+  LOG_ASYNC_QUEUE: Joi.boolean().truthy('true').falsy('false').default(true),
+  LOG_FILE_PATH: Joi.string().default('logs/app.log'),
+  LOG_SAMPLING_RATE: Joi.number().min(0).max(1).default(1),
+});

package/templates/kits/nestjs-standard/src/examples/dto/create-note.dto.ts.j2

@@ -0,0 +1,11 @@
+import { IsString, MaxLength } from 'class-validator';
+
+export class CreateNoteDto {
+  @IsString()
+  @MaxLength(80)
+  title!: string;
+
+  @IsString()
+  @MaxLength(500)
+  body!: string;
+}