belt 0.1.10 → 0.1.12

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c48b3087bb87bb86b2111cc243cf57d889e8f3d94fb25f1b023e5ba3dabf4973
-  data.tar.gz: 53b43e092412aaab0a0fae0e531d7d7ffb07c7a69e19c3e7e7480cf19753184f
+  metadata.gz: 892f04b0175a10793ba63f3cf65182b3d3e380ab75446984004283b8b8cf7377
+  data.tar.gz: 701534fd954f5d444783d3adb085d0582c4f9d1b92bf4518249e677add64c1b7
 SHA512:
-  metadata.gz: 2443a472879d551084bd9f6a72b468e6dab20105ae84b3d906cbc33d42c8af6cc32229468300b00f9788a19c324b747f6cd0872d7d652c8d17e96a20cd2c95a6
-  data.tar.gz: a6dd1cc9483792736335058a41b983df0380d8d48ee180b47e3a619a92d7d0a47fcd33af811cff20d7c451d1a783a8ccc49c3934dae60155c7aa6d039b8b7f27
+  metadata.gz: '0682c1d964357b0109baca143e7c43fb8688a375aa84af0ba3ba2c46fbf0d56932a011b8eef6a0027dcf6b289f3eb6bc4617bcecd8717812246133b107563233'
+  data.tar.gz: 68d1e8b3a4311ca6bd3be6dbfeb48594efeb4afaf42500d27b7076e0068a8b21c8cd73a1e41a70c4ee6338e910dab96aaa8fdba09683c922027574141049a899

data/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 ## Unreleased
 
+## 0.1.11
+
+### Route DSL
+
+- `resources` / `resource` honor `scope path:` (and nested path scopes).  
+  Example: `scope path: "admin", auth: :cognito { resources :users }` → `/admin/users…` with Cognito auth.
+- Nested `scope path:` segments stack (`a` then `b` → `a/b`) instead of replacing.
+- `scope controller:` is applied to `resources` / `resource` the same way as verb routes.
+- Controller inference for multi-segment resource paths joins segments (`/admin/users` → `admin/users`), matching nested-resource convention.
+
 ## 0.1.10
 
 ### Frontend env map

data/lib/belt/action_router.rb

@@ -157,10 +157,7 @@ module Belt
 
       # Final fallback: gem-embedded controllers under Belt:: namespace
       class_name = "#{controller_name.split(%r{[_/]}).map(&:capitalize).join}Controller"
-      belt_class_name = "Belt::#{class_name}"
-      if Belt.const_defined?(class_name, false)
-        return Belt.const_get(class_name, false)
-      end
+      return Belt.const_get(class_name, false) if Belt.const_defined?(class_name, false)
 
       raise Belt::ActionNotFound, "Controller not found: #{controller_name}"
     end

data/lib/belt/cli/deploy_command.rb

@@ -121,7 +121,8 @@ module Belt
         Dir.chdir(env_dir) do
           run_init
           run_plan
-          return unless confirm_apply
+          return unless confirm_apply?
+
           run_apply
         end
 
@@ -157,6 +158,7 @@ module Belt
         dir = @infra_dir ? File.dirname(@infra_dir) : Dir.pwd
         while dir != '/'
           return dir if File.exist?(File.join(dir, 'Gemfile'))
+
           dir = File.dirname(dir)
         end
         Dir.pwd
@@ -188,9 +190,13 @@ module Belt
         stdout, status = Open3.capture2('aws', 'sts', 'get-caller-identity', '--output', 'json')
         unless status.success?
           abort "Error: AWS credentials not available.\n" \
-                "Run `aws sso login` or configure AWS_PROFILE."
+                'Run `aws sso login` or configure AWS_PROFILE.'
+        end
+        @aws_account = begin
+          JSON.parse(stdout)['Account']
+        rescue StandardError
+          nil
         end
-        @aws_account = JSON.parse(stdout)['Account'] rescue nil
       end
 
       # Ensure Gemfile.lock doesn't have stale PATH references that will break
@@ -208,7 +214,8 @@ module Belt
         stale_path_gems = detect_stale_path_gems(gemfile_content, lockfile_content)
         return if stale_path_gems.empty?
 
-        puts "  🔧 Fixing stale Gemfile.lock (#{stale_path_gems.join(', ')} referenced as PATH but Gemfile uses RubyGems)"
+        puts '  🔧 Fixing stale Gemfile.lock ' \
+             "(#{stale_path_gems.join(', ')} referenced as PATH but Gemfile uses RubyGems)"
         Dir.chdir(@project_root) do
           success = system('bundle', 'lock', '--update', *stale_path_gems)
           unless success
@@ -250,7 +257,11 @@ module Belt
           output, status = Open3.capture2('terraform', 'output', '-json')
           return nil unless status.success?
 
-          data = JSON.parse(output) rescue {}
+          data = begin
+            JSON.parse(output)
+          rescue StandardError
+            {}
+          end
 
           # Try lambda_functions output first
           if data['lambda_functions']
@@ -372,9 +383,10 @@ module Belt
         end
 
         # Remove non-essential files
-        exts = %w[*.md *.rdoc *.txt *.c *.h *.o Makefile *.log CHANGELOG* HISTORY* LICENSE* README* .gitignore .travis.yml .rubocop.yml Rakefile]
+        exts = %w[*.md *.rdoc *.txt *.c *.h *.o Makefile *.log CHANGELOG* HISTORY* LICENSE* README* .gitignore
+                  .travis.yml .rubocop.yml Rakefile]
         exts.each do |pattern|
-          Dir.glob(File.join(vendor_dir, "**", pattern)).each do |f|
+          Dir.glob(File.join(vendor_dir, '**', pattern)).each do |f|
             File.delete(f) if File.file?(f)
           end
         end
@@ -409,12 +421,12 @@ module Belt
           '--output', 'json'
         )
 
-        File.delete(zip_file) if File.exist?(zip_file)
+        FileUtils.rm_f(zip_file)
 
         unless status.success?
-          abort "\n✗ Failed to update Lambda function code.\n" \
-                "  Function: #{function_name}\n" \
-                "  Check that the function exists and you have permissions."
+          abort "\n✗ Failed to update Lambda function code.\n  " \
+                "Function: #{function_name}\n  " \
+                'Check that the function exists and you have permissions.'
         end
 
         # Wait for update to complete
@@ -454,7 +466,7 @@ module Belt
         puts ''
       end
 
-      def confirm_apply
+      def confirm_apply?
         return true if @auto_approve
 
         if @env == 'prod' || @env == 'production'
@@ -479,7 +491,7 @@ module Belt
       end
 
       def cleanup_plan
-        File.delete('tfplan') if File.exist?('tfplan')
+        FileUtils.rm_f('tfplan')
       end
 
       def deploy_frontend_if_exists

data/lib/belt/cli/destroy_command.rb

@@ -237,11 +237,11 @@ module Belt
         # Clean up trailing commas and empty arrays
         content.gsub!(/,(\s*\n\s*\]\.freeze)/, '\1')
 
-        if content != original
-          File.write(manifest_file, content)
-          @updated << manifest_file
-          puts "  update  #{manifest_file}"
-        end
+        return unless content != original
+
+        File.write(manifest_file, content)
+        @updated << manifest_file
+        puts "  update  #{manifest_file}"
       end
 
       def remove_schema
@@ -257,11 +257,11 @@ module Belt
         # Clean up excessive blank lines
         content.gsub!(/\n{3,}/, "\n\n")
 
-        if content != original
-          File.write(schema_file, content)
-          @updated << schema_file
-          puts "  update  #{schema_file}"
-        end
+        return unless content != original
+
+        File.write(schema_file, content)
+        @updated << schema_file
+        puts "  update  #{schema_file}"
       end
 
       def sync_tables
@@ -276,16 +276,16 @@ module Belt
         original = content.dup
 
         # Remove import lines for this resource's pages
-        content.gsub!(/^import #{@class_name}\w* from '.\/pages\/#{@resource_name}\/.*'\n/, '')
+        content.gsub!(%r{^import #{@class_name}\w* from './pages/#{@resource_name}/.*'\n}, '')
 
         # Remove Route elements for this resource
-        content.gsub!(/^\s*<Route path="\/#{@resource_name}.*?\/>\n/, '')
+        content.gsub!(%r{^\s*<Route path="/#{@resource_name}.*?/>\n}, '')
 
-        if content != original
-          File.write(app_jsx, content)
-          @updated << app_jsx
-          puts "  update  #{app_jsx}"
-        end
+        return unless content != original
+
+        File.write(app_jsx, content)
+        @updated << app_jsx
+        puts "  update  #{app_jsx}"
       end
 
       def print_summary

data/lib/belt/cli/environment_command.rb

@@ -52,15 +52,15 @@ module Belt
 
         puts "\n✓ Environment '#{@env_name}' created!"
 
-        unless @quiet
-          puts "\nNext steps:"
-          puts "  cd #{dest_dir}"
-          puts '  terraform init'
-          puts '  terraform plan'
-          puts '  terraform apply'
-          puts "\nTo configure a custom domain, set `domain` in #{dest_dir}/terraform.tfvars:"
-          puts "  domain = \"myapp.com\""
-        end
+        return if @quiet
+
+        puts "\nNext steps:"
+        puts "  cd #{dest_dir}"
+        puts '  terraform init'
+        puts '  terraform plan'
+        puts '  terraform apply'
+        puts "\nTo configure a custom domain, set `domain` in #{dest_dir}/terraform.tfvars:"
+        puts '  domain = "myapp.com"'
       end
 
       private

data/lib/belt/cli/frontend_command.rb

@@ -68,7 +68,7 @@ module Belt
         puts "\n  Installing npm dependencies..."
         success = system('npm', 'install', '--prefix', dest_dir, '--loglevel', 'error')
         if success
-          puts "  ✓ Dependencies installed"
+          puts '  ✓ Dependencies installed'
         else
           puts "  ⚠ npm install failed — run `cd #{dest_dir} && npm install` manually"
         end

data/lib/belt/cli/frontend_deploy_command.rb

@@ -62,9 +62,7 @@ module Belt
 
         puts '🏗️  Building frontend...'
         env = frontend_build_env
-        if env.any?
-          puts "   Injecting env: #{env.keys.sort.join(', ')}"
-        end
+        puts "   Injecting env: #{env.keys.sort.join(', ')}" if env.any?
         run!(env, 'npm', 'run', 'build', chdir: 'frontend')
       end
 

data/lib/belt/cli/frontend_env_map.rb

@@ -112,7 +112,7 @@ module Belt
       def load_map
         return DEFAULT_MAP.dup if @map_path.nil?
 
-        raw = YAML.safe_load(File.read(@map_path), aliases: false)
+        raw = YAML.safe_load_file(@map_path, aliases: false)
         unless raw.is_a?(Hash) && raw.any?
           abort "Error: frontend env map #{@map_path} must be a non-empty YAML mapping " \
                 '(e.g. VITE_API_URL: api_url).'
@@ -124,7 +124,7 @@ module Belt
           next if k.empty? || v.empty?
 
           hash[k] = v
-        end.tap do |parsed|
+        end.tap do |parsed| # rubocop:disable Style/MultilineBlockChain
           abort "Error: frontend env map #{@map_path} has no valid entries." if parsed.empty?
         end
       rescue Psych::SyntaxError => e

data/lib/belt/cli/frontend_setup_command.rb

@@ -20,7 +20,7 @@ module Belt
         new.run
       end
 
-      def initialize(env = nil, quiet: false)
+      def initialize(_env = nil, quiet: false)
         @app_name = detect_app_name
         @quiet = quiet
       end
@@ -32,7 +32,7 @@ module Belt
 
         puts "\n✓ Frontend infrastructure generated in #{MODULE_DIR}!"
         puts "\nRun `belt deploy` to create the S3 bucket and CloudFront distribution."
-        puts "Then `belt deploy frontend` to build and deploy."
+        puts 'Then `belt deploy frontend` to build and deploy.'
       end
 
       private
@@ -41,7 +41,7 @@ module Belt
         return if Dir.exist?(MODULE_DIR)
 
         abort "Error: Module directory not found at #{MODULE_DIR}/.\n" \
-              "Run `belt new` to create a project with the correct structure."
+              'Run `belt new` to create a project with the correct structure.'
       end
 
       def generate_frontend_tf

data/lib/belt/cli/generate_command.rb

@@ -139,14 +139,15 @@ module Belt
         errors << 'must only contain letters, numbers, and underscores' unless name.match?(/\A[a-zA-Z][a-zA-Z0-9_]*\z/)
         errors << 'must not start or end with an underscore' if name.match?(/\A_|_\z/)
         errors << 'must not contain consecutive underscores' if name.include?('__')
-        errors << "is a reserved name" if RESERVED_NAMES.include?(Belt::Inflector.singularize(name.downcase))
-        errors << "is a reserved name" if RESERVED_NAMES.include?(name.downcase)
+        errors << 'is a reserved name' if RESERVED_NAMES.include?(Belt::Inflector.singularize(name.downcase))
+        errors << 'is a reserved name' if RESERVED_NAMES.include?(name.downcase)
 
         return if errors.empty?
 
         puts "\n✗ Invalid #{generator} name '#{name}':"
         errors.uniq.each { |e| puts "  - #{e}" }
-        puts "\nName must start with a letter, be at least 2 characters, and contain only letters, numbers, and single underscores."
+        puts "\nName must start with a letter, be at least 2 characters, " \
+             'and contain only letters, numbers, and single underscores.'
         exit 1
       end
 
@@ -199,13 +200,13 @@ module Belt
         if info[:options].any?
           puts "\nOptions:"
           info[:options].each do |flag, desc|
-            puts "  %-20s %s" % [flag, desc]
+            puts format('  %<flag>-20s %<desc>s', flag: flag, desc: desc)
           end
         end
 
         puts "\nField Types:"
         puts "  #{FIELD_TYPES.join(', ')}"
-        puts "  (defaults to string if omitted)"
+        puts '  (defaults to string if omitted)'
 
         puts "\nExamples:"
         info[:examples].each do |cmd, desc|
@@ -249,7 +250,9 @@ module Belt
       def check_resource_collision!
         conflicts = []
         conflicts << "lambda/models/#{@singular_name}.rb" if File.exist?("lambda/models/#{@singular_name}.rb")
-        conflicts << "lambda/controllers/#{@app_name}/#{@resource_name}_controller.rb" if File.exist?("lambda/controllers/#{@app_name}/#{@resource_name}_controller.rb")
+        if File.exist?("lambda/controllers/#{@app_name}/#{@resource_name}_controller.rb")
+          conflicts << "lambda/controllers/#{@app_name}/#{@resource_name}_controller.rb"
+        end
 
         schema_file = 'infrastructure/schema.tf.rb'
         if File.exist?(schema_file) && File.read(schema_file).match?(/^\s*model :#{Regexp.escape(@singular_name)}\b/)
@@ -348,7 +351,7 @@ module Belt
 
           if content.match?(namespace_pattern)
             content.sub!(namespace_pattern) do |match|
-              indent = $1
+              indent = ::Regexp.last_match(1)
               # Insert the resource line before the namespace's closing `end`
               match.sub(/^(#{indent})end\z/m, "#{indent}  #{resource_line}\n#{indent}end")
             end
@@ -357,7 +360,7 @@ module Belt
             single_ns_pattern = /^(\s*)namespace :\w+\b[^\n]*do\s*\n(.*?)^\1end/m
             if content.match?(single_ns_pattern)
               content.sub!(single_ns_pattern) do |match|
-                indent = $1
+                indent = ::Regexp.last_match(1)
                 match.sub(/^(#{indent})end\z/m, "#{indent}  #{resource_line}\n#{indent}end")
               end
             else

data/lib/belt/cli/new_command.rb

@@ -185,7 +185,7 @@ module Belt
           if aws_configured?
             puts "\n  Setting up Terraform state bucket..."
             begin
-              Belt::CLI::SetupCommand.new(["--bucket", @resolved_bucket]).run_state_setup
+              Belt::CLI::SetupCommand.new(['--bucket', @resolved_bucket]).run_state_setup
               @state_setup_succeeded = true
             rescue SystemExit
               puts '  ⚠ State bucket setup encountered an issue — run `belt setup state` to retry.'
@@ -195,7 +195,7 @@ module Belt
             puts "\n  State bucket: #{@resolved_bucket}"
             puts "  State keys:   #{s3_safe_name(@app_name)}/<env>/terraform.tfstate"
             if @aws_error&.include?('ForbiddenException') || @aws_error&.include?('AccessDenied')
-              puts "  ⚠ AWS credentials found but access denied — check your profile/role configuration."
+              puts '  ⚠ AWS credentials found but access denied — check your profile/role configuration.'
               puts "    #{@aws_error}" if @aws_error
             else
               puts '  ⚠ AWS credentials not detected — skipping state bucket creation.'
@@ -209,7 +209,11 @@ module Belt
       def aws_configured?
         output, status = Open3.capture2e('aws', 'sts', 'get-caller-identity')
         if status.success?
-          data = JSON.parse(output) rescue {}
+          data = begin
+            JSON.parse(output)
+          rescue StandardError
+            {}
+          end
           @aws_account_id = data['Account']
           true
         else
@@ -284,7 +288,7 @@ module Belt
           puts '       → Edit → paste the 4 values from step 1.'
           puts ''
           puts '  3. Wait for propagation (usually 5–30 min, can take up to 48h).'
-          puts '     Verify: dig +short NS #{@domain}'
+          puts "     Verify: dig +short NS #{@domain}"
           puts '  ─────────────────────────────────────────────────────────────────'
         else
           puts "\n  To add a custom domain later, set `domain` in infrastructure/<env>/terraform.tfvars:"

data/lib/belt/cli/routes_command/route_inference.rb

@@ -14,7 +14,9 @@ module Belt
           non_param = segments.reject { |s| s.start_with?(':', '{') }
           return gateway.name if non_param.empty?
 
-          return non_param.map { |s| s.gsub('-', '_') }.join('/') if route.resource? && nested_resource?(segments)
+          # Nested resources (/posts/{id}/comments) and scoped resources (/admin/users):
+          # join non-param segments → posts/comments, admin/users
+          return non_param.map { |s| s.gsub('-', '_') }.join('/') if route.resource? && non_param.length > 1
 
           # For non-resource routes with a single segment (e.g., post '/signup' in :onboarding),
           # the segment is the action name, not the controller. Use the gateway name as controller.

data/lib/belt/cli/server_command.rb

@@ -94,9 +94,7 @@ module Belt
         else
           puts '   Backend is serverless — deploy with `belt deploy` to set up AWS resources.'
         end
-        if build_env.any?
-          puts "   Env: #{build_env.keys.sort.join(', ')}"
-        end
+        puts "   Env: #{build_env.keys.sort.join(', ')}" if build_env.any?
         puts ''
 
         open_browser_later if @open_browser
@@ -121,24 +119,20 @@ module Belt
       end
 
       def run_welcome_server
+        puts "🚀 Serving Belt welcome page on http://localhost:#{@port}"
         if @api_url
-          puts "🚀 Serving Belt welcome page on http://localhost:#{@port}"
           puts "   Backend API: #{@api_url}"
-          puts ''
-          puts '   Tip: Run `belt generate frontend react` to scaffold a frontend app.'
-          puts ''
         else
-          puts "🚀 Serving Belt welcome page on http://localhost:#{@port}"
           puts '   No deployment detected — showing pre-deploy welcome page.'
           puts '   Backend is serverless — deploy with `belt deploy` to set up AWS resources.'
-          puts ''
-          puts '   Tip: Run `belt generate frontend react` to scaffold a frontend app.'
-          puts ''
         end
+        puts ''
+        puts '   Tip: Run `belt generate frontend react` to scaffold a frontend app.'
+        puts ''
 
         require 'webrick'
 
-        server = WEBrick::HTTPServer.new(Port: @port, Logger: WEBrick::Log.new('/dev/null'), AccessLog: [])
+        server = WEBrick::HTTPServer.new(Port: @port, Logger: WEBrick::Log.new(File::NULL), AccessLog: [])
 
         server.mount_proc '/' do |_req, res|
           res['Content-Type'] = 'text/html; charset=utf-8'

data/lib/belt/cli/setup_command.rb

@@ -53,7 +53,7 @@ module Belt
       def run_state_setup
         unless aws_configured?
           if @aws_error&.include?('ForbiddenException') || @aws_error&.include?('AccessDenied')
-            puts "✗ AWS credentials found but access denied — check your profile/role configuration."
+            puts '✗ AWS credentials found but access denied — check your profile/role configuration.'
             puts "  #{@aws_error}"
           else
             puts '✗ AWS credentials not configured. Set AWS_PROFILE or configure aws sso login.'
@@ -139,11 +139,7 @@ module Belt
       end
 
       def resolve_bucket_name
-        if @custom_bucket
-          @custom_bucket
-        else
-          'belt-terraform-state'
-        end
+        @custom_bucket || 'belt-terraform-state'
       end
 
       # --- Interactive selection ---
@@ -192,7 +188,11 @@ module Belt
       def aws_configured?
         output, status = Open3.capture2e('aws', 'sts', 'get-caller-identity')
         if status.success?
-          data = JSON.parse(output) rescue {}
+          data = begin
+            JSON.parse(output)
+          rescue StandardError
+            {}
+          end
           @aws_account_id = data['Account']
           true
         else
@@ -201,9 +201,7 @@ module Belt
         end
       end
 
-      def aws_account_id
-        @aws_account_id
-      end
+      attr_reader :aws_account_id
 
       def bucket_exists?(bucket)
         output, status = Open3.capture2e('aws', 's3api', 'head-bucket', '--bucket', bucket)

data/lib/belt/cli/tables_command.rb

@@ -65,10 +65,10 @@ module Belt
         end
         return if Dir.exist?(MODULE_DIR)
 
-        unless @quiet
-          abort "Error: Module directory not found at #{MODULE_DIR}/.\n" \
-                "Run `belt new` to create a project with the correct structure."
-        end
+        return if @quiet
+
+        abort "Error: Module directory not found at #{MODULE_DIR}/.\n" \
+              'Run `belt new` to create a project with the correct structure.'
       end
 
       def parse_schema

data/lib/belt/cli.rb

@@ -35,7 +35,6 @@ module Belt
       %w[version --version -v] => ->(_args) { puts "Belt #{Belt::VERSION}" }
     }.freeze
 
-
     COMMANDS = COMMANDS_DEFINITION.each_with_object({}) do |(keys, handler), hash|
       Array(keys).each { |key| hash[key] = handler }
     end.freeze
@@ -56,9 +55,7 @@ module Belt
         if args.empty? || args.first =~ /\A-/
           # belt destroy --help → DestroyCommand help
           # belt destroy (no args) → terraform destroy (needs env)
-          if args.include?('--help') || args.include?('-h')
-            return DestroyCommand.run(args)
-          end
+          return DestroyCommand.run(args) if args.include?('--help') || args.include?('-h')
         elsif DestroyCommand::GENERATORS.include?(args.first)
           return DestroyCommand.run(args)
         end

data/lib/belt/controllers/welcome_controller.rb

@@ -34,11 +34,11 @@ module Belt
     end
 
     def welcome_css
-      @welcome_css_content ||= File.read(File.join(ASSETS_DIR, 'welcome.css'))
+      @welcome_css ||= File.read(File.join(ASSETS_DIR, 'welcome.css'))
     end
 
     def background_image_base64
-      @background_image_content ||= Base64.strict_encode64(
+      @background_image_base64 ||= Base64.strict_encode64(
         File.binread(File.join(ASSETS_DIR, 'belt-default.jpg'))
       )
     end

data/lib/belt/lambda_handler.rb

@@ -44,14 +44,14 @@ module Belt
 
       # Auto-load all models (application_record first, then the rest)
       models_dir = File.join(File.dirname(caller_file), 'models')
-      if File.directory?(models_dir)
-        all_models = Dir[File.join(models_dir, '**', '*.rb')].sort
-        app_record = all_models.find { |f| File.basename(f) == 'application_record.rb' }
-        rest = all_models - [app_record].compact
+      return unless File.directory?(models_dir)
 
-        require app_record if app_record
-        rest.each { |f| require f }
-      end
+      all_models = Dir[File.join(models_dir, '**', '*.rb')]
+      app_record = all_models.find { |f| File.basename(f) == 'application_record.rb' }
+      rest = all_models - [app_record].compact
+
+      require app_record if app_record
+      rest.each { |f| require f }
     end
 
     # API Gateway Lambda handler.

data/lib/belt/route_dsl.rb

@@ -51,12 +51,14 @@ module Belt
   end
 
   class NestedResourceBuilder
-    def initialize(gateway, prefix, collection_prefix, inherited_tables: [], inherited_auth: nil)
+    def initialize(gateway, prefix, collection_prefix, inherited_tables: [], inherited_auth: nil, # rubocop:disable Metrics/ParameterLists
+                   inherited_controller: nil)
       @gateway = gateway
       @prefix = prefix
       @collection_prefix = collection_prefix
       @inherited_tables = inherited_tables
       @inherited_auth = inherited_auth
+      @inherited_controller = inherited_controller
     end
 
     def resources(name, options = {})
@@ -85,12 +87,13 @@ module Belt
     end
 
     def member(&)
-      MemberCollectionBuilder.new(@gateway, @prefix, @inherited_tables, @inherited_auth).instance_eval(&)
+      MemberCollectionBuilder.new(@gateway, @prefix, @inherited_tables, @inherited_auth,
+                                  @inherited_controller).instance_eval(&)
     end
 
     def collection(&)
       MemberCollectionBuilder.new(@gateway, @collection_prefix, @inherited_tables,
-                                  @inherited_auth).instance_eval(&)
+                                  @inherited_auth, @inherited_controller).instance_eval(&)
     end
 
     %i[get post put delete patch].each do |method|
@@ -111,16 +114,18 @@ module Belt
         result[:tables] = (@inherited_tables + explicit_tables).uniq
       end
       result[:auth] ||= @inherited_auth if @inherited_auth
+      result[:controller] ||= @inherited_controller if @inherited_controller
       result
     end
   end
 
   class MemberCollectionBuilder
-    def initialize(gateway, prefix, inherited_tables, inherited_auth)
+    def initialize(gateway, prefix, inherited_tables, inherited_auth, inherited_controller = nil)
       @gateway = gateway
       @prefix = prefix
       @inherited_tables = inherited_tables
       @inherited_auth = inherited_auth
+      @inherited_controller = inherited_controller
     end
 
     %i[get post put delete patch].each do |method|
@@ -140,6 +145,7 @@ module Belt
         result[:tables] = (@inherited_tables + explicit_tables).uniq
       end
       result[:auth] ||= @inherited_auth if @inherited_auth
+      result[:controller] ||= @inherited_controller if @inherited_controller
       result
     end
   end
@@ -308,7 +314,11 @@ module Belt
         previous_tables = @scope_tables
         previous_controller = @scope_controller
 
-        @scope_prefix = options[:path] || @scope_prefix
+        # Nest path segments (Rails-style): scope path: "a" { scope path: "b" } → "a/b"
+        if options.key?(:path)
+          segment = options[:path].to_s.gsub(%r{^/|/$}, '')
+          @scope_prefix = @scope_prefix.to_s.empty? ? segment : "#{@scope_prefix}/#{segment}"
+        end
         @scope_module = options[:module] || @scope_module
         @scope_auth = options[:auth] || @scope_auth
         @scope_tables = (@scope_tables + Array(options[:tables] || [])).uniq
@@ -338,14 +348,64 @@ module Belt
         end
       end
 
-      def resources(name, options = {}, &)
+      def resources(name, options = {}, &block)
         options = apply_scope_options(options)
-        @gateway.resources(name, options, &)
+
+        if @scope_prefix.empty?
+          @gateway.resources(name, options, &block)
+        else
+          # When inside a scope, generate routes with the prefix applied.
+          # Also set the controller explicitly so inference resolves correctly
+          # (e.g., scope "admin" + resources :users → controller "admin/users").
+          resource_name = name.to_s
+          singular = Belt::Inflector.singularize(resource_name)
+          param_name = options[:param] || "#{singular}_id"
+          controller = "#{@scope_prefix}/#{resource_name}"
+          resource_options = options.merge(route_type: :resources, controller: controller)
+          actions = determine_scoped_actions(options)
+
+          add_scoped_resource_routes(resource_name, param_name, resource_options, actions)
+
+          if block
+            collection_prefix = build_path("/#{resource_name}")
+            member_prefix = build_path("/#{resource_name}/{#{param_name}}")
+            resource_tables = Array(options[:tables] || [])
+            inherited_tables = (@gateway.default_tables + resource_tables).uniq
+            inherited_auth = options[:auth] || @gateway.default_auth
+            nested_builder = NestedResourceBuilder.new(@gateway, member_prefix, collection_prefix,
+                                                       inherited_tables: inherited_tables,
+                                                       inherited_auth: inherited_auth,
+                                                       inherited_controller: controller)
+            nested_builder.instance_eval(&block)
+          end
+        end
       end
 
       def resource(name, options = {})
         options = apply_scope_options(options)
-        @gateway.resource(name, options)
+
+        if @scope_prefix.empty?
+          @gateway.resource(name, options)
+        else
+          resource_name = name.to_s
+          controller = "#{@scope_prefix}/#{resource_name}"
+          resource_options = options.merge(route_type: :resource, controller: controller)
+          actions = determine_scoped_actions(options, default: %i[show update destroy create])
+
+          @gateway.send(:add_route, :get, build_path("/#{resource_name}"), resource_options) if actions.include?(:show)
+          if actions.include?(:update)
+            @gateway.send(:add_route, :put, build_path("/#{resource_name}"),
+                          resource_options)
+          end
+          if actions.include?(:destroy)
+            @gateway.send(:add_route, :delete, build_path("/#{resource_name}"),
+                          resource_options)
+          end
+          if actions.include?(:create)
+            @gateway.send(:add_route, :post, build_path("/#{resource_name}"),
+                          resource_options)
+          end
+        end
       end
 
       def lambda(name, &)
@@ -396,10 +456,35 @@ module Belt
         @scope_prefix.empty? ? path : "/#{@scope_prefix}#{path}"
       end
 
+      def determine_scoped_actions(options, default: %i[index create show update destroy])
+        if options[:only]
+          Array(options[:only])
+        elsif options[:except]
+          default - Array(options[:except])
+        else
+          default
+        end
+      end
+
+      def add_scoped_resource_routes(resource_name, param_name, resource_options, actions)
+        @gateway.send(:add_route, :get, build_path("/#{resource_name}"), resource_options) if actions.include?(:index)
+        @gateway.send(:add_route, :post, build_path("/#{resource_name}"), resource_options) if actions.include?(:create)
+        if actions.include?(:show)
+          @gateway.send(:add_route, :get, build_path("/#{resource_name}/{#{param_name}}"), resource_options)
+        end
+        if actions.include?(:update)
+          @gateway.send(:add_route, :put, build_path("/#{resource_name}/{#{param_name}}"), resource_options)
+        end
+        return unless actions.include?(:destroy)
+
+        @gateway.send(:add_route, :delete, build_path("/#{resource_name}/{#{param_name}}"), resource_options)
+      end
+
       def apply_scope_options(options)
         result = options.dup
         result[:auth] ||= @scope_auth if @scope_auth
         result[:lambda] ||= @scope_module if @scope_module
+        result[:controller] ||= @scope_controller if @scope_controller
         result[:tables] = (@scope_tables + Array(result[:tables] || [])).uniq if @scope_tables.any? || result[:tables]
         result
       end

data/lib/belt/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Belt
-  VERSION = '0.1.10'
+  VERSION = '0.1.12'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: belt
 version: !ruby/object:Gem::Version
-  version: 0.1.10
+  version: 0.1.12
 platform: ruby
 authors:
 - Stowzilla
@@ -161,7 +161,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '3.0'
+      version: '3.3'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="