fix: opt generated projects into @types globals per target (TS 6) (#120)

* fix: opt generated projects into @types globals per target (TS 6)

setup-project.sh copied a single shared tsconfig with no "types" field
into every generated project. TypeScript 6 removed the automatic
inclusion of node_modules/@types/*, so freshly generated projects
failed pnpm typecheck with TS2591/TS2584/TS2304 (process, console,
setTimeout) on all five targets.

- Split templates/shared/tsconfig.json into tsconfig.base.json plus
  per-target tsconfig.node.json (types: ["node"], also used by lambda,
  railway, and fly) and tsconfig.cloudflare.json (adds
  @cloudflare/workers-types). Generated projects get the per-target
  file as tsconfig.json plus the copied base. The snippet tsconfigs
  now extend the same per-target files, so the typecheck-templates CI
  job checks exactly the configuration generated projects receive.
- Install @cloudflare/workers-types for the cloudflare target; the
  "types" entry references it and pnpm does not expose transitive
  packages for type resolution.
- Pin typescript to its major (^6) in the generated dev dependencies
  so a future TS major cannot silently break generation again.
- Copy tsconfig.base.json in the Docker build stage (node-server and
  docker templates) so pnpm build keeps working in-image.
- Add a generated-projects CI matrix job that runs setup-project.sh
  for every target and type-checks the result against freshly
  resolved dependencies - the gap that let this regression ship.

Fixes #119

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix: make setup-project.sh executable

The script was committed mode 100644, so the documented
./scripts/setup-project.sh invocation (and the new generated-projects
CI job) fails with "Permission denied" on Linux and macOS. Never
noticed locally because Git Bash on Windows ignores the exec bit.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Author: PAMulligan

.github/workflows/ci.yml

@@ -230,6 +230,35 @@ jobs:
         run: pnpm exec tsc --noEmit -p tsconfig.lambda.json
         working-directory: templates/snippets
 
+  # Generates a real project per target with setup-project.sh and type-checks
+  # it. Unlike typecheck-templates this has no lockfile on purpose: it installs
+  # whatever `pnpm add` resolves today, so a dependency release that breaks
+  # freshly generated projects (e.g. the TypeScript 6 @types auto-include
+  # removal, #119) fails here instead of only on user machines.
+  generated-projects:
+    name: Generate & Type-check (${{ matrix.platform }})
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    strategy:
+      fail-fast: false
+      matrix:
+        platform: [cloudflare, node, lambda, railway, fly]
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 22
+
+      - run: corepack enable
+
+      - name: Generate project
+        run: ./scripts/setup-project.sh demo-${{ matrix.platform }} --${{ matrix.platform }}
+
+      - name: Type-check generated project
+        run: pnpm typecheck
+        working-directory: demo-${{ matrix.platform }}/api
+
   check-links:
     name: Check Markdown Links
     runs-on: ubuntu-latest

scripts/setup-project.sh

@@ -13,7 +13,7 @@ COPY package.json pnpm-lock.yaml ./
 RUN pnpm install --frozen-lockfile
 
 # Copy source code
-COPY tsconfig.json drizzle.config.ts ./
+COPY tsconfig.json tsconfig.base.json drizzle.config.ts ./
 COPY src/ ./src/
 
 # Build the application

templates/docker/Dockerfile

@@ -13,7 +13,7 @@ COPY package.json pnpm-lock.yaml ./
 RUN pnpm install --frozen-lockfile
 
 # Copy source code
-COPY tsconfig.json drizzle.config.ts ./
+COPY tsconfig.json tsconfig.base.json drizzle.config.ts ./
 COPY src/ ./src/
 
 # Build the application

templates/node-server/Dockerfile

@@ -0,0 +1,9 @@
+{
+  "extends": "./tsconfig.base.json",
+  "compilerOptions": {
+    "types": [
+      "@cloudflare/workers-types",
+      "node"
+    ]
+  }
+}

templates/shared/tsconfig.json templates/shared/tsconfig.base.jsontemplates/shared/tsconfig.json renamed to templates/shared/tsconfig.base.json

@@ -0,0 +1,8 @@
+{
+  "extends": "./tsconfig.base.json",
+  "compilerOptions": {
+    "types": [
+      "node"
+    ]
+  }
+}

templates/shared/tsconfig.cloudflare.json

@@ -1,9 +1,8 @@
 {
-  "extends": "../shared/tsconfig.json",
+  "extends": "../shared/tsconfig.cloudflare.json",
   "compilerOptions": {
     "noEmit": true,
     "moduleResolution": "bundler",
-    "types": ["@cloudflare/workers-types", "node"],
     "rootDir": ".",
     "rootDirs": ["shared/src", "cloudflare/src"],
     "paths": {}

templates/shared/tsconfig.node.json

@@ -1,9 +1,8 @@
 {
-  "extends": "../shared/tsconfig.json",
+  "extends": "../shared/tsconfig.node.json",
   "compilerOptions": {
     "noEmit": true,
     "moduleResolution": "bundler",
-    "types": ["node"],
     "rootDir": ".",
     "rootDirs": ["shared/src", "aws-lambda/src"],
     "paths": {}

templates/snippets/tsconfig.cloudflare.json

@@ -1,9 +1,8 @@
 {
-  "extends": "../shared/tsconfig.json",
+  "extends": "../shared/tsconfig.node.json",
   "compilerOptions": {
     "noEmit": true,
     "moduleResolution": "bundler",
-    "types": ["node"],
     "rootDir": ".",
     "rootDirs": ["shared/src", "node/src"],
     "paths": {}