RubyGems - gemstack-cli - Versions diffs - 0.1.0 - Mend

gemstack-cli 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (110) hide show

checksums.yaml +7 -0
data/CHANGELOG.md +5 -0
data/LICENSE.txt +21 -0
data/README.md +24 -0
data/exe/gemstack +6 -0
data/lib/gemstack/cli/add_generator.rb +237 -0
data/lib/gemstack/cli/app_generator.rb +110 -0
data/lib/gemstack/cli/commands/db.rb +134 -0
data/lib/gemstack/cli/commands/jobs.rb +96 -0
data/lib/gemstack/cli/controller_generator.rb +73 -0
data/lib/gemstack/cli/deploy_generator.rb +64 -0
data/lib/gemstack/cli/doctor.rb +277 -0
data/lib/gemstack/cli/generator.rb +122 -0
data/lib/gemstack/cli/job_generator.rb +47 -0
data/lib/gemstack/cli/migration_generator.rb +52 -0
data/lib/gemstack/cli/policy_generator.rb +35 -0
data/lib/gemstack/cli/project.rb +53 -0
data/lib/gemstack/cli/resource_generator.rb +169 -0
data/lib/gemstack/cli/resource_spec.rb +95 -0
data/lib/gemstack/cli.rb +299 -0
data/templates/app/Gemfile.tt +39 -0
data/templates/app/README.md.tt +29 -0
data/templates/app/app/controllers/application_controller.rb +6 -0
data/templates/app/bin/gemstack +7 -0
data/templates/app/config/app.rb.tt +30 -0
data/templates/app/config/environments/development.rb +6 -0
data/templates/app/config/environments/production.rb +8 -0
data/templates/app/config/environments/test.rb +7 -0
data/templates/app/config/puma.rb +21 -0
data/templates/app/config/routes.rb +10 -0
data/templates/app/config.ru +6 -0
data/templates/app/db/migrations/dot_keep +0 -0
data/templates/app/db/seeds.rb +5 -0
data/templates/app/dot_env.example +9 -0
data/templates/app/dot_gitignore +14 -0
data/templates/app/dot_ruby-version.tt +1 -0
data/templates/app/dot_tool-versions.tt +1 -0
data/templates/app/test/health_test.rb +18 -0
data/templates/app/test/test_helper.rb.tt +25 -0
data/templates/auth/app/controllers/api_tokens_controller.rb +35 -0
data/templates/auth/app/controllers/email_verifications_controller.rb +31 -0
data/templates/auth/app/controllers/password_resets_controller.rb +40 -0
data/templates/auth/app/controllers/registrations_controller.rb +19 -0
data/templates/auth/app/controllers/sessions_controller.rb +29 -0
data/templates/auth/app/mailers/auth_mailer.rb +20 -0
data/templates/auth/app/mailers/templates/auth_mailer/email_verification.html.erb +2 -0
data/templates/auth/app/mailers/templates/auth_mailer/email_verification.text.erb +2 -0
data/templates/auth/app/mailers/templates/auth_mailer/password_reset.html.erb +3 -0
data/templates/auth/app/mailers/templates/auth_mailer/password_reset.text.erb +6 -0
data/templates/auth/app/models/auth_token.rb +15 -0
data/templates/auth/app/models/user.rb +12 -0
data/templates/auth/app/policies/application_policy.rb +6 -0
data/templates/auth/app/serializers/api_token_serializer.rb +6 -0
data/templates/auth/app/serializers/new_api_token_serializer.rb +9 -0
data/templates/auth/app/serializers/user_serializer.rb +6 -0
data/templates/auth/db/migrations/%timestamp%_create_auth_tables.rb +41 -0
data/templates/auth/frontend/app/account/page.tsx +116 -0
data/templates/auth/frontend/app/forgot-password/page.tsx +48 -0
data/templates/auth/frontend/app/login/page.tsx +26 -0
data/templates/auth/frontend/app/reset-password/page.tsx +11 -0
data/templates/auth/frontend/app/signup/page.tsx +27 -0
data/templates/auth/frontend/app/verify-email/page.tsx +11 -0
data/templates/auth/frontend/components/auth/CredentialsForm.tsx +58 -0
data/templates/auth/frontend/components/auth/ResetPasswordForm.tsx +43 -0
data/templates/auth/frontend/components/auth/VerifyEmail.tsx +28 -0
data/templates/auth/frontend/lib/auth.ts +113 -0
data/templates/auth/test/controllers/auth_test.rb +108 -0
data/templates/controller/app/controllers/%file_name%_controller.rb.tt +10 -0
data/templates/controller/test/controllers/%file_name%_controller_test.rb.tt +14 -0
data/templates/deploy/Caddyfile.tt +19 -0
data/templates/deploy/Dockerfile.tt +62 -0
data/templates/deploy/Procfile.tt +6 -0
data/templates/deploy/compose.yaml.tt +80 -0
data/templates/deploy/dot_dockerignore +14 -0
data/templates/frontend/app/globals.css +171 -0
data/templates/frontend/app/layout.tsx.tt +19 -0
data/templates/frontend/app/page.tsx.tt +45 -0
data/templates/frontend/app/providers.tsx +24 -0
data/templates/frontend/lib/gemstack/client.ts +125 -0
data/templates/frontend/next-env.d.ts +5 -0
data/templates/frontend/next.config.ts +17 -0
data/templates/frontend/package.json.tt +23 -0
data/templates/frontend/tsconfig.json +21 -0
data/templates/job/app/jobs/%file_name%.rb.tt +15 -0
data/templates/job/test/jobs/%file_name%_test.rb.tt +15 -0
data/templates/migration/db/migrations/%timestamp%_%file_name%.rb.tt +17 -0
data/templates/policy/app/policies/%file_name%_policy.rb.tt +21 -0
data/templates/policy/test/policies/%file_name%_policy_test.rb.tt +9 -0
data/templates/realtime/config/channels.rb +14 -0
data/templates/realtime/frontend/lib/gemstack/realtime.ts +120 -0
data/templates/resource/controller/app/controllers/%plural%_controller.rb.tt +51 -0
data/templates/resource/controller/test/controllers/%plural%_controller_test.rb.tt +74 -0
data/templates/resource/frontend/frontend/app/%url_segment%/[id]/edit/page.tsx.tt +45 -0
data/templates/resource/frontend/frontend/app/%url_segment%/[id]/page.tsx.tt +49 -0
data/templates/resource/frontend/frontend/app/%url_segment%/new/page.tsx.tt +27 -0
data/templates/resource/frontend/frontend/app/%url_segment%/page.tsx.tt +51 -0
data/templates/resource/frontend/frontend/components/%url_segment%/%class_name%Card.tsx.tt +15 -0
data/templates/resource/frontend/frontend/components/%url_segment%/%class_name%Form.tsx.tt +98 -0
data/templates/resource/frontend/frontend/components/%url_segment%/%class_name%Table.tsx.tt +36 -0
data/templates/resource/frontend/frontend/lib/format.ts +12 -0
data/templates/resource/frontend/frontend/lib/queries/%url_segment%.ts.tt +63 -0
data/templates/resource/migration/db/migrations/%timestamp%_create_%table%.rb.tt +18 -0
data/templates/resource/model/app/models/%file_name%.rb.tt +15 -0
data/templates/resource/model/test/models/%file_name%_test.rb.tt +29 -0
data/templates/resource/serializer/app/serializers/%file_name%_serializer.rb.tt +7 -0
data/templates/storage/app/controllers/uploads_controller.rb.tt +33 -0
data/templates/storage/app/serializers/upload_serializer.rb +11 -0
data/templates/storage/frontend/lib/upload.ts +52 -0
data/templates/storage/test/controllers/uploads_test.rb.tt +30 -0
metadata +195 -0

data/templates/deploy/dot_dockerignore ADDED Viewed

@@ -0,0 +1,14 @@
+# Kept out of the build context (and so out of images).
+.git
+.env
+.env.*
+!.env.example
+tmp/
+log/
+storage/
+coverage/
+node_modules/
+frontend/node_modules/
+frontend/.next/
+**/*.pem
+**/*.key

data/templates/frontend/app/globals.css ADDED Viewed

@@ -0,0 +1,171 @@
+:root {
+  --bg: #ffffff;
+  --fg: #16181d;
+  --muted: #5b6170;
+  --code-bg: #f1f2f5;
+  --ok: #1f9d55;
+  --error: #d64545;
+  --pending: #d99a1e;
+}
+@media (prefers-color-scheme: dark) {
+  :root {
+    --bg: #0f1115;
+    --fg: #e6e8ee;
+    --muted: #9aa0ad;
+    --code-bg: #1c2030;
+  }
+}
+* {
+  box-sizing: border-box;
+}
+body {
+  margin: 0;
+  background: var(--bg);
+  color: var(--fg);
+  font: 16px/1.6 system-ui, -apple-system, "Segoe UI", sans-serif;
+}
+code {
+  background: var(--code-bg);
+  padding: 0.1rem 0.35rem;
+  border-radius: 4px;
+  font-size: 0.9em;
+}
+.page {
+  max-width: 40rem;
+  margin: 0 auto;
+  padding: 4rem 1rem;
+}
+.muted {
+  color: var(--muted);
+}
+.status {
+  display: flex;
+  align-items: center;
+  gap: 0.6rem;
+  padding: 0.75rem 1rem;
+  border-radius: 8px;
+  background: var(--code-bg);
+}
+.dot {
+  width: 0.6rem;
+  height: 0.6rem;
+  border-radius: 50%;
+  flex: none;
+}
+.status-ok .dot {
+  background: var(--ok);
+}
+.status-error .dot {
+  background: var(--error);
+}
+.status-pending .dot {
+  background: var(--pending);
+}
+a {
+  color: inherit;
+}
+h1 {
+  margin-top: 0;
+}
+.page-header,
+.actions {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 1rem;
+}
+.actions {
+  justify-content: flex-start;
+  margin-top: 1.5rem;
+}
+.button {
+  display: inline-block;
+  padding: 0.45rem 0.9rem;
+  border: 1px solid var(--fg);
+  border-radius: 6px;
+  background: var(--fg);
+  color: var(--bg);
+  font: inherit;
+  text-decoration: none;
+  cursor: pointer;
+}
+.button:disabled {
+  opacity: 0.6;
+  cursor: default;
+}
+.button-danger {
+  background: var(--error);
+  border-color: var(--error);
+  color: #fff;
+}
+.table {
+  width: 100%;
+  border-collapse: collapse;
+}
+.table th,
+.table td {
+  padding: 0.5rem;
+  border-bottom: 1px solid var(--code-bg);
+  text-align: left;
+}
+.form {
+  display: grid;
+  gap: 1rem;
+  max-width: 32rem;
+}
+.field {
+  display: grid;
+  gap: 0.3rem;
+}
+.field input:not([type="checkbox"]),
+.field textarea {
+  padding: 0.45rem;
+  border: 1px solid var(--muted);
+  border-radius: 6px;
+  background: var(--bg);
+  color: var(--fg);
+  font: inherit;
+}
+.field-error,
+.form-error {
+  margin: 0;
+  color: var(--error);
+}
+.card {
+  display: grid;
+  grid-template-columns: max-content 1fr;
+  gap: 0.4rem 1.5rem;
+}
+.card dt {
+  color: var(--muted);
+}
+.card dd {
+  margin: 0;
+}

data/templates/frontend/app/layout.tsx.tt ADDED Viewed

@@ -0,0 +1,19 @@
+import type { Metadata } from "next";
+import type { ReactNode } from "react";
+import { Providers } from "./providers";
+import "./globals.css";
+export const metadata: Metadata = {
+  title: "<%= module_name %>",
+  description: "A GemStack application",
+};
+export default function RootLayout({ children }: { children: ReactNode }) {
+  return (
+    <html lang="en">
+      <body>
+        <Providers>{children}</Providers>
+      </body>
+    </html>
+  );
+}

data/templates/frontend/app/page.tsx.tt ADDED Viewed

@@ -0,0 +1,45 @@
+"use client";
+import { useQuery } from "@tanstack/react-query";
+import { api, API_PATH } from "@/lib/gemstack/client";
+// Starter page: confirms the browser reaches the Ruby API through the same origin.
+// Replace it with your application.
+export default function Home() {
+  const health = useQuery({
+    queryKey: ["health"],
+    queryFn: () => api.get<{ status: string }>("/health"),
+  });
+  const state = health.isPending ? "pending" : health.isError ? "error" : "ok";
+  const label = {
+    pending: "Connecting to the Ruby API…",
+    error: `Ruby API unreachable: ${health.error?.message}`,
+    ok: `Ruby API connected — GET ${API_PATH}/health → ${health.data?.status}`,
+  }[state];
+  return (
+    <main className="page">
+      <h1><%= module_name %></h1>
+      <p className="muted">Next.js + TypeScript frontend, GemStack Ruby API, one origin.</p>
+      <p className={`status status-${state}`} role="status">
+        <span className="dot" aria-hidden="true" />
+        {label}
+      </p>
+      <h2>Next steps</h2>
+      <ul>
+        <li>
+          Add an endpoint: <code>gemstack generate controller Status show</code>
+        </li>
+        <li>
+          Call it from here: <code>api.get(&quot;/status/1&quot;)</code> (see <code>lib/gemstack/client.ts</code>)
+        </li>
+        <li>
+          Edit this page: <code>frontend/app/page.tsx</code>
+        </li>
+      </ul>
+    </main>
+  );
+}

data/templates/frontend/app/providers.tsx ADDED Viewed

@@ -0,0 +1,24 @@
+"use client";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { useState, type ReactNode } from "react";
+import { ApiError } from "@/lib/gemstack/client";
+// Server state lives in TanStack Query; local UI state is plain React state;
+// URL state uses Next.js search params. No global store is needed by default.
+export function Providers({ children }: { children: ReactNode }) {
+  const [queryClient] = useState(
+    () =>
+      new QueryClient({
+        defaultOptions: {
+          queries: {
+            staleTime: 30_000,
+            // Don't retry requests the API rejected (4xx); retry transient failures twice.
+            retry: (failureCount, error) => !(error instanceof ApiError && error.isClientError) && failureCount < 2,
+          },
+        },
+      }),
+  );
+  return <QueryClientProvider client={queryClient}>{children}</QueryClientProvider>;
+}

data/templates/frontend/lib/gemstack/client.ts ADDED Viewed

@@ -0,0 +1,125 @@
+/**
+ * GemStack API client runtime.
+ *
+ * This file belongs to your application (it is not a hidden dependency):
+ * add auth headers, interceptors or logging here as needed.
+ *
+ * Where requests go:
+ * - Browser: relative URLs ("/api/..."), i.e. the same origin — no CORS, no config.
+ * - Server Components / Route Handlers: GEMSTACK_API_URL (injected by `gemstack dev`,
+ *   set by you in production) so the Next.js server calls Ruby directly.
+ * - API on another domain: set NEXT_PUBLIC_GEMSTACK_API_URL.
+ */
+export const API_PATH = process.env.NEXT_PUBLIC_GEMSTACK_API_PATH ?? "/api";
+/** The JSON error envelope every GemStack API error uses. */
+export interface ApiErrorBody {
+  error: { code: string; message: string; request_id?: string };
+  /** Field-level validation messages, e.g. { name: ["is required"] }. */
+  errors?: Record<string, string[]>;
+  /** Development only (config.http.show_exceptions): the server-side exception. */
+  exception?: { class: string; message: string; backtrace: string[] };
+}
+export class ApiError extends Error {
+  readonly status: number;
+  readonly code: string;
+  readonly requestId?: string;
+  readonly errors: Record<string, string[]>;
+  constructor(status: number, body: ApiErrorBody | null, fallbackMessage: string) {
+    super(body?.error?.message ?? fallbackMessage);
+    this.name = "ApiError";
+    this.status = status;
+    this.code = body?.error?.code ?? "http_error";
+    this.requestId = body?.error?.request_id;
+    this.errors = body?.errors ?? {};
+  }
+  /** True for 4xx responses: retrying the same request won't help. */
+  get isClientError(): boolean {
+    return this.status >= 400 && this.status < 500;
+  }
+}
+type QueryValue = string | number | boolean | null | undefined;
+export type Query = Record<string, QueryValue | QueryValue[]>;
+export interface RequestOptions extends Omit<RequestInit, "body" | "method"> {
+  query?: Query;
+  body?: unknown;
+}
+function baseUrl(): string {
+  const publicUrl = process.env.NEXT_PUBLIC_GEMSTACK_API_URL;
+  if (publicUrl) return publicUrl.replace(/\/$/, "");
+  if (typeof window === "undefined") {
+    return (process.env.GEMSTACK_API_URL ?? "http://127.0.0.1:4000").replace(/\/$/, "");
+  }
+  return "";
+}
+/** Builds a URL for an API path: apiUrl("/products", { page: 2 }) → "/api/products?page=2". */
+export function apiUrl(path: string, query?: Query): string {
+  const normalized = path.startsWith("/") ? path : `/${path}`;
+  let url = `${baseUrl()}${API_PATH}${normalized}`;
+  if (query) {
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(query)) {
+      const values = Array.isArray(value) ? value : [value];
+      for (const item of values) {
+        if (item !== undefined && item !== null) params.append(Array.isArray(value) ? `${key}[]` : key, String(item));
+      }
+    }
+    const qs = params.toString();
+    if (qs) url += `?${qs}`;
+  }
+  return url;
+}
+function parse(text: string): unknown {
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+export async function request<T>(method: string, path: string, options: RequestOptions = {}): Promise<T> {
+  const { query, body, headers, ...init } = options;
+  const requestHeaders = new Headers(headers);
+  requestHeaders.set("accept", "application/json");
+  let payload: BodyInit | undefined;
+  if (body !== undefined) {
+    if (body instanceof FormData || body instanceof Blob || body instanceof URLSearchParams) {
+      payload = body;
+    } else {
+      payload = JSON.stringify(body);
+      requestHeaders.set("content-type", "application/json");
+    }
+  }
+  const response = await fetch(apiUrl(path, query), { ...init, method, headers: requestHeaders, body: payload });
+  const text = response.status === 204 ? "" : await response.text();
+  const data = text ? parse(text) : null;
+  if (!response.ok) {
+    const exception = (data as ApiErrorBody | null)?.exception;
+    if (exception && process.env.NODE_ENV !== "production") {
+      // The Ruby exception behind a 500, so it shows up next to the failing request.
+      console.error(`[GemStack API] ${method} ${path} → ${exception.class}: ${exception.message}\n  ${exception.backtrace.slice(0, 8).join("\n  ")}`);
+    }
+    throw new ApiError(response.status, data as ApiErrorBody | null, response.statusText || `HTTP ${response.status}`);
+  }
+  return data as T;
+}
+export const api = {
+  get: <T>(path: string, options?: RequestOptions) => request<T>("GET", path, options),
+  post: <T>(path: string, body?: unknown, options?: RequestOptions) => request<T>("POST", path, { ...options, body }),
+  put: <T>(path: string, body?: unknown, options?: RequestOptions) => request<T>("PUT", path, { ...options, body }),
+  patch: <T>(path: string, body?: unknown, options?: RequestOptions) => request<T>("PATCH", path, { ...options, body }),
+  delete: <T = void>(path: string, options?: RequestOptions) => request<T>("DELETE", path, options),
+};

data/templates/frontend/next-env.d.ts ADDED Viewed

@@ -0,0 +1,5 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
+// NOTE: This file should not be edited
+// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.

data/templates/frontend/next.config.ts ADDED Viewed

@@ -0,0 +1,17 @@
+import type { NextConfig } from "next";
+// One public origin, in every environment:
+// - `gemstack dev`: the GemStack gateway routes /api/* to Ruby before requests reach Next.js.
+// - Production: set GEMSTACK_API_URL (e.g. http://api.internal:4000) and Next.js proxies
+//   /api/* to the Ruby API. Leave it unset if a reverse proxy already routes /api/*.
+const apiUrl = process.env.GEMSTACK_API_URL?.replace(/\/$/, "");
+const apiPath = process.env.NEXT_PUBLIC_GEMSTACK_API_PATH ?? "/api";
+const nextConfig: NextConfig = {
+  async rewrites() {
+    if (!apiUrl) return [];
+    return [{ source: `${apiPath}/:path*`, destination: `${apiUrl}${apiPath}/:path*` }];
+  },
+};
+export default nextConfig;

data/templates/frontend/package.json.tt ADDED Viewed

@@ -0,0 +1,23 @@
+{
+  "name": "<%= name %>-frontend",
+  "version": "0.1.0",
+  "private": true,
+  "scripts": {
+    "dev": "next dev",
+    "build": "next build",
+    "start": "next start",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@tanstack/react-query": "^5.104.0",
+    "next": "^16.3.6",
+    "react": "^19.3.0",
+    "react-dom": "^19.3.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
+    "typescript": "~5.9.3"
+  }
+}

data/templates/frontend/tsconfig.json ADDED Viewed

@@ -0,0 +1,21 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "lib": ["dom", "dom.iterable", "esnext"],
+    "allowJs": false,
+    "skipLibCheck": true,
+    "strict": true,
+    "noEmit": true,
+    "esModuleInterop": true,
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "jsx": "react-jsx",
+    "incremental": true,
+    "plugins": [{ "name": "next" }],
+    "paths": { "@/*": ["./*"] }
+  },
+  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts", ".next/dev/types/**/*.ts"],
+  "exclude": ["node_modules"]
+}

data/templates/job/app/jobs/%file_name%.rb.tt ADDED Viewed

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+# Enqueue with <%= class_name %>.perform_later(...) — arguments must be JSON values (pass ids, not records).
+# Runs in `gemstack jobs` (and in `gemstack dev`). Delivery is at-least-once: keep perform idempotent.
+class <%= class_name %> < GemStack::Job
+<% if queue_name -%>
+  queue :<%= queue_name %>
+<% end -%>
+  # retry_on SomeTimeoutError, attempts: 5    # default: any StandardError, 10 attempts, exponential backoff
+  # discard_on GemStack::NotFound             # drop instead of retrying
+  def perform(*args)
+    GemStack.logger.info("<%= class_name %> ran", args: args)
+  end
+end

data/templates/job/test/jobs/%file_name%_test.rb.tt ADDED Viewed

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+require_relative "../test_helper"
+class <%= class_name %>Test < GemStack::TestCase
+  def test_enqueue
+    <%= class_name %>.perform_later(1)
+    assert_enqueued <%= class_name %>, args: [1]
+  end
+  def test_perform
+    perform_enqueued_jobs { <%= class_name %>.perform_later(1) }
+  end
+end

data/templates/migration/db/migrations/%timestamp%_%file_name%.rb.tt ADDED Viewed

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+# Sequel migration — see https://sequel.jeremyevans.net/rdoc/files/doc/schema_modification_rdoc.html
+Sequel.migration do
+  change do
+<% if table && !columns.empty? -%>
+    alter_table(:<%= table %>) do
+<% columns.each do |column| -%>
+      <%= column %>
+<% end -%>
+    end
+<% else -%>
+    # create_table(:things) { primary_key :id, type: :Bignum }
+    # alter_table(:things) { add_column :name, String }
+<% end -%>
+  end
+end

data/templates/policy/app/policies/%file_name%_policy.rb.tt ADDED Viewed

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+# Who may do what with <%= model_name %> records (docs/authorization.md).
+# `user` is the signed-in user (nil when anonymous); `record` the <%= model_name %>.
+# In controllers: authorize!(record) checks "<action>?", policy_scope(<%= model_name %>) filters lists.
+class <%= class_name %> < <%= parent_class %>
+  def index? = !user.nil?
+  def show? = owner?
+  def create? = !user.nil?
+  def update? = owner?
+  def destroy? = owner?
+  class Scope < Scope
+    # The <%= model_name %> records the user may list. Adjust to your data model.
+    def resolve = user ? scope.where(user_id: user.id) : scope.where(false)
+  end
+  private
+  def owner? = !user.nil? && record.respond_to?(:user_id) && record.user_id == user.id
+end

data/templates/policy/test/policies/%file_name%_policy_test.rb.tt ADDED Viewed

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+require_relative "../test_helper"
+class <%= class_name %>Test < GemStack::TestCase
+  def test_anonymous_users_are_denied
+    refute <%= class_name %>.new(nil, Struct.new(:user_id).new(1)).update?
+  end
+end

data/templates/realtime/config/channels.rb ADDED Viewed

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+# Realtime channels browsers may subscribe to (docs/realtime.md). Anything not
+# listed here is refused. `*` matches one segment and is passed to the block,
+# together with the request (cookies, headers) for authorization.
+#
+#   GemStack.broadcast("orders:#{order.id}", "order.updated", order)
+#
+GemStack.channels do
+  # channel "announcements"                        # public
+  # channel "orders:*" do |order_id, request|      # private
+  #   Order.find_by(id: order_id)&.user_id == current_user_id(request)
+  # end
+end