gemstack-cli 0.2.5 → 0.3.0

data/templates/app/app/models/application_model.rb

@@ -1,19 +0,0 @@
-# frozen_string_literal: true
-
-# The base class for this app's models — add plugins, validations and helpers
-# every model should share here. `class Product < ApplicationModel` maps to the
-# products table (docs/models.md).
-#
-# Created with Class.new on purpose: `class ApplicationModel < GemStack::Model`
-# would make Sequel look for an "application_models" table.
-ApplicationModel = Class.new(GemStack::Model) # rubocop:disable Style/EmptyClassDefinition
-
-class ApplicationModel
-  # Sequel plugins for every model, e.g.:
-  # plugin :dirty                                    # previous values after an update (column_changes)
-
-  # Shared query helpers:
-  # dataset_module do
-  #   def recent = order(Sequel.desc(:created_at))
-  # end
-end

data/templates/app/app/serializers/application_serializer.rb

@@ -1,6 +0,0 @@
-# frozen_string_literal: true
-
-# The base class for this app's serializers (docs/serialization.md): attributes
-# and helpers defined here are shared by every serializer.
-class ApplicationSerializer < GemStack::Serializer
-end

data/templates/app/bin/gemstack

@@ -1,7 +0,0 @@
-#!/usr/bin/env ruby
-# frozen_string_literal: true
-
-# Runs the GemStack CLI from this application's bundle.
-ENV["BUNDLE_GEMFILE"] ||= File.expand_path("../Gemfile", __dir__)
-require "bundler/setup"
-load Gem.bin_path("gemstack-cli", "gemstack")

data/templates/app/config/app.rb.tt

@@ -1,54 +0,0 @@
-# frozen_string_literal: true
-
-require "bundler/setup"
-require "gemstack"
-
-# Sets the application root and loads .env files (development/test).
-GemStack.setup(root: File.expand_path("..", __dir__))
-
-# Require the gems listed in the Gemfile for the current environment.
-Bundler.require(:default, GemStack.env.to_sym)
-
-GemStack.configure do |config|
-  config.name = "<%= name %>"
-
-  # Settings for every environment. Everything below is optional: each line
-  # shows the default — uncomment one to change it. Per-environment settings go
-  # in config/environments/*.rb. All settings: docs/configuration.md.
-
-  # ── HTTP ────────────────────────────────────────────────────────────────
-  # config.http.api_path = "/api"                  # where the API lives (routes are relative to it)
-  # config.http.max_body_size = 10 * 1024 * 1024   # bytes; larger requests get 413
-  # config.http.json = :json                       # or :oj (add gem "oj"), or your own codec
-  # config.http.cors.origins = []                  # only for frontends on another domain
-  # config.http.middleware.use MyMiddleware        # add / insert_before / swap / delete
-
-  # ── Pagination: paginate(...) in controllers, ?page=2&per_page=50 (docs/pagination.md) ──
-  # config.http.pagination.per_page = 25           # records per page when the client doesn't say
-  # config.http.pagination.max_per_page = 100      # the most a client may ask for with ?per_page=
-
-  # ── Responses ───────────────────────────────────────────────────────────
-  # config.http.compression.enabled = true         # gzip/Brotli responses over 1 KB (add gem "brotli" for br)
-  # config.http.etags = true                       # ETag + 304 Not Modified for GET responses
-
-  # ── Logging ─────────────────────────────────────────────────────────────
-  # config.logger.level = :debug                   # :info in production (or GEMSTACK_LOG_LEVEL)
-  # config.filter_parameters += %w[iban]           # masked in logs, next to password, token, secret…
-<% if database? -%>
-
-  # ── Database — the connection is in config/database.yml (DATABASE_URL overrides it) ──
-  # config.db.pool_size = 5                        # default: GEMSTACK_MAX_THREADS (one per Puma thread)
-  # config.db.statement_timeout = 5_000            # ms
-<% end -%>
-
-  # ── Cache (GemStack.cache) ──────────────────────────────────────────────
-  # config.cache.store = :memory                   # :redis to share it between processes (gem "redis-client")
-  # config.cache.default_expires_in = nil          # seconds; nil = until evicted
-
-  # ── Background jobs ─────────────────────────────────────────────────────
-  # config.jobs.default_queue = "default"
-  # config.jobs.default_max_attempts = 10          # then the job is kept as failed
-
-  # ── Mail ────────────────────────────────────────────────────────────────
-  # config.mail.default_from = "<%= name %> <no-reply@localhost>"   # or MAIL_FROM
-end

data/templates/app/config/database.yml.tt

@@ -1,61 +0,0 @@
-# Database connection (docs/database.md) — the same format as Rails' database.yml.
-# DATABASE_URL (TEST_DATABASE_URL in tests) overrides this file when set, which
-# is what most hosting platforms provide. Adapters: sqlite3, postgresql, mysql2,
-# trilogy (add the matching gem: sqlite3, pg, mysql2, trilogy).
-default: &default
-<% if database_adapter == "sqlite3" -%>
-  adapter: sqlite3
-  pool: <%%= ENV.fetch("GEMSTACK_MAX_THREADS", 5) %>
-
-development:
-  <<: *default
-  database: db/development.sqlite3
-
-test:
-  <<: *default
-  database: db/test.sqlite3
-
-# Keep the file on persistent storage (a volume); or set DATABASE_URL=sqlite3:/data/app.sqlite3.
-production:
-  <<: *default
-  database: db/production.sqlite3
-<% elsif database_adapter == "postgresql" -%>
-  adapter: postgresql
-  pool: <%%= ENV.fetch("GEMSTACK_MAX_THREADS", 5) %>
-  # Without host/username, the local server is used as your OS user.
-  # host: localhost
-  # username: <%= database_name %>
-  # password: <%%= ENV["DATABASE_PASSWORD"] %>
-
-development:
-  <<: *default
-  database: <%= database_name %>_development
-
-test:
-  <<: *default
-  database: <%= database_name %>_test
-
-# In production, DATABASE_URL (postgres://user:password@host:5432/name) usually replaces this.
-production:
-  <<: *default
-  database: <%= database_name %>_production
-<% else -%>
-  adapter: <%= database_adapter %>
-  pool: <%%= ENV.fetch("GEMSTACK_MAX_THREADS", 5) %>
-  host: <%%= ENV.fetch("DATABASE_HOST", "127.0.0.1") %>
-  username: root
-  password: <%%= ENV["DATABASE_PASSWORD"] %>
-
-development:
-  <<: *default
-  database: <%= database_name %>_development
-
-test:
-  <<: *default
-  database: <%= database_name %>_test
-
-# In production, DATABASE_URL (<%= database_adapter %>://user:password@host:3306/name) usually replaces this.
-production:
-  <<: *default
-  database: <%= database_name %>_production
-<% end -%>

data/templates/app/config/environments/development.rb.tt

@@ -1,35 +0,0 @@
-# frozen_string_literal: true
-
-# Development settings: applied after config/app.rb when GEMSTACK_ENV=development
-# (the default). Each line shows the default value — uncomment one to change it.
-# All settings: docs/configuration.md.
-GemStack.configure do |config|
-  # ── Code ────────────────────────────────────────────────────────────────
-  # config.reload_code = true                  # reload app/ and config/routes.rb when they change
-  # config.eager_load = false                  # load app/ lazily, for a faster boot
-  # config.jit = nil                           # :yjit or :zjit to try Ruby's JIT locally
-
-  # ── Logging ─────────────────────────────────────────────────────────────
-  # config.logger.level = :debug               # :debug, :info, :warn, :error (or GEMSTACK_LOG_LEVEL)
-  # config.logger.format = :pretty             # readable lines; :json to see what production logs
-
-  # ── HTTP ────────────────────────────────────────────────────────────────
-  # config.http.show_exceptions = true         # 500s carry the exception; browsers get an error page
-  # config.contract.docs = true                # interactive API docs at /api/docs
-
-  # ── gemstack dev ────────────────────────────────────────────────────────
-  # config.dev.port = 3000                     # the one public port (or PORT)
-  # config.dev.jobs_command = %w[bundle exec gemstack jobs]   # nil: don't start a jobs worker
-<% if database? -%>
-
-  # ── Database (connection: config/database.yml) ──────────────────────────
-  # config.db.log_queries = true               # every SQL statement at DEBUG
-  # config.db.slow_query_ms = 500              # slower queries are logged at WARN
-<% end -%>
-
-  # ── Cache ───────────────────────────────────────────────────────────────
-  # config.cache.store = :memory               # :null to switch caching off, :redis to share it
-
-  # ── Mail ────────────────────────────────────────────────────────────────
-  # config.mail.delivery = :log                # saved to tmp/mail (.eml + .html); :smtp really sends
-end

data/templates/app/config/environments/production.rb.tt

@@ -1,40 +0,0 @@
-# frozen_string_literal: true
-
-# Production settings: applied after config/app.rb when GEMSTACK_ENV=production.
-# Each line shows the default value — uncomment one to change it.
-#
-# Secrets and connections come from environment variables, never from files:
-# SECRET_KEY_BASE, <% if database? %>DATABASE_URL, <% end %>SMTP_URL, MAIL_FROM, APP_URL, REDIS_URL…
-# `gemstack doctor --production` checks what's missing (docs/deployment.md).
-GemStack.configure do |config|
-  # ── Code ────────────────────────────────────────────────────────────────
-  # config.eager_load = true                   # load all code at boot (copy-on-write friendly with Puma workers)
-  # config.jit = :yjit                         # Ruby's JIT (or GEMSTACK_JIT=yjit|zjit|off)
-
-  # ── Logging ─────────────────────────────────────────────────────────────
-  # config.logger.level = :info
-  # config.logger.format = :json               # one JSON object per line, with the request id
-
-  # ── HTTP ────────────────────────────────────────────────────────────────
-  # config.http.show_exceptions = false        # never send exception details to clients
-  # config.http.hsts = "max-age=63072000; includeSubDomains"   # on HTTPS requests; nil if your proxy sets it
-  # config.http.cors.origins = ["https://app.example.com"]    # only if the frontend is on another domain
-  # config.http.max_body_size = 10 * 1024 * 1024               # larger requests get 413
-<% if database? -%>
-
-  # ── Database ────────────────────────────────────────────────────────────
-  # config.db.pool_size = 5                    # connections per process (GEMSTACK_MAX_THREADS)
-  # config.db.statement_timeout = 5_000        # ms; stop runaway queries (PostgreSQL, MySQL)
-  # config.db.slow_query_ms = 500              # slower queries are logged at WARN
-<% end -%>
-
-  # ── Cache: :memory is per process — use Redis with several processes or servers ──
-  # config.cache.store = :redis                # add gem "redis-client"; REDIS_URL
-
-  # ── Background jobs (`gemstack jobs`) ───────────────────────────────────
-  # config.jobs.concurrency = 5                # threads per worker (or GEMSTACK_JOB_CONCURRENCY)
-
-  # ── Mail ────────────────────────────────────────────────────────────────
-  # config.mail.delivery = :smtp               # SMTP_URL=smtp://user:password@smtp.example.com:587
-  # config.mail.default_from = "App <hello@example.com>"      # or MAIL_FROM
-end

data/templates/app/config/environments/test.rb.tt

@@ -1,21 +0,0 @@
-# frozen_string_literal: true
-
-# Test settings: applied after config/app.rb when tests run (`gemstack test`).
-# Each line shows the default value — uncomment one to change it.
-GemStack.configure do |config|
-  # ── Logging ─────────────────────────────────────────────────────────────
-  # config.logger.level = :debug               # logs are discarded in tests unless this (or GEMSTACK_LOG_LEVEL) is set
-
-  # ── HTTP ────────────────────────────────────────────────────────────────
-  # config.http.show_exceptions = true         # a failing request's JSON includes the exception
-<% if database? -%>
-
-  # ── Database (connection: the test section of config/database.yml, or TEST_DATABASE_URL) ──
-  # config.db.log_queries = false
-<% end -%>
-
-  # ── Background work is recorded, not performed ──────────────────────────
-  # config.jobs.adapter = :test                # assert_enqueued / perform_enqueued_jobs; :inline runs jobs at once
-  # config.mail.delivery = :test               # assert_emails / last_email
-  # config.cache.store = :null                 # no caching, so tests can't leak into each other; :memory to test it
-end

data/templates/app/config/puma.rb

@@ -1,21 +0,0 @@
-# frozen_string_literal: true
-
-# Puma configuration. Every value can be set through the environment.
-# `gemstack dev` sets GEMSTACK_API_HOST/PORT to a private loopback port
-# behind the development gateway.
-
-max_threads = Integer(ENV.fetch("GEMSTACK_MAX_THREADS", 5))
-min_threads = Integer(ENV.fetch("GEMSTACK_MIN_THREADS", max_threads))
-threads min_threads, max_threads
-
-bind "tcp://#{ENV.fetch("GEMSTACK_API_HOST", "0.0.0.0")}:#{ENV.fetch("GEMSTACK_API_PORT", 4000)}"
-environment ENV.fetch("GEMSTACK_ENV", "development")
-
-# Cluster mode for multi-core production servers: WEB_CONCURRENCY=4
-worker_count = Integer(ENV.fetch("WEB_CONCURRENCY", 0))
-if worker_count.positive?
-  workers worker_count
-  preload_app!
-  # Connections must not be shared across forked workers; each reconnects lazily.
-  before_fork { GemStack::DB.disconnect if defined?(GemStack::DB) }
-end

data/templates/app/config/routes.rb

@@ -1,10 +0,0 @@
-# frozen_string_literal: true
-
-# API routes, relative to config.http.api_path ("/api"):
-#
-#   get "/status", to: "status#show"   # GET /api/status → StatusController#show
-#   resources :products                # /api/products: index, create, show, update, destroy
-#
-# List them with `gemstack routes`. In development this file reloads on save.
-GemStack.routes do
-end

data/templates/app/config.ru

@@ -1,6 +0,0 @@
-# frozen_string_literal: true
-
-# Rack entry point. Works with Puma (config/puma.rb) or any Rack server.
-require_relative "config/app"
-
-run GemStack.boot!

data/templates/app/db/seeds.rb

@@ -1,5 +0,0 @@
-# frozen_string_literal: true
-
-# Development data, loaded by `gemstack db:seed` (and db:setup). Make it safe to run twice:
-#
-#   Product.find_by(name: "Desk lamp") || Product.create(name: "Desk lamp", price: "39.00")

data/templates/app/dot_env.example.tt

@@ -1,19 +0,0 @@
-# Copy to .env for local development overrides. Never commit real secrets.
-# Variables already set in your shell always take precedence.
-
-# PORT=3000                   # public development port (gemstack dev)
-# GEMSTACK_LOG_LEVEL=debug
-
-<% if database? -%>
-# Database: config/database.yml. A URL here overrides it (hosting platforms set DATABASE_URL).
-<% if database_adapter == "sqlite3" -%>
-# DATABASE_URL=sqlite3:db/development.sqlite3
-<% elsif database_adapter == "postgresql" -%>
-# DATABASE_URL=postgres://user:password@localhost:5432/<%= database_name %>_development
-# TEST_DATABASE_URL=postgres://user:password@localhost:5432/<%= database_name %>_test
-<% else -%>
-# DATABASE_PASSWORD=
-# DATABASE_URL=<%= database_adapter %>://root:password@127.0.0.1:3306/<%= database_name %>_development
-# TEST_DATABASE_URL=<%= database_adapter %>://root:password@127.0.0.1:3306/<%= database_name %>_test
-<% end -%>
-<% end -%>

data/templates/app/dot_gitignore

@@ -1,16 +0,0 @@
-/.bundle/
-/log/
-/tmp/
-/db/*.sqlite3
-/db/*.sqlite3-*
-.env
-.env.local
-.env.*.local
-
-node_modules/
-/frontend/.next/
-/frontend/out/
-/frontend/next-env.d.ts
-*.tsbuildinfo
-
-.DS_Store

data/templates/app/dot_node-version.tt

@@ -1 +0,0 @@
-<%= node_version %>

data/templates/app/dot_nvmrc.tt

@@ -1 +0,0 @@
-<%= node_version %>

data/templates/app/dot_ruby-version.tt

@@ -1 +0,0 @@
-<%= ruby_version %>

data/templates/app/dot_tool-versions.tt

@@ -1,4 +0,0 @@
-ruby <%= ruby_version %>
-<% if frontend? -%>
-nodejs <%= node_version %>
-<% end -%>

data/templates/app/test/health_test.rb

@@ -1,18 +0,0 @@
-# frozen_string_literal: true
-
-require_relative "test_helper"
-
-class HealthTest < GemStack::TestCase
-  def test_api_boots_and_answers_health_checks
-    get_json "/api/health"
-
-    assert_status 200
-    assert_equal({ "status" => "ok" }, json_body)
-  end
-
-  def test_unknown_routes_return_json_errors
-    get_json "/api/does-not-exist"
-
-    assert_error 404, "route_not_found"
-  end
-end

data/templates/app/test/test_helper.rb.tt

@@ -1,25 +0,0 @@
-# frozen_string_literal: true
-
-ENV["GEMSTACK_ENV"] = "test"
-
-require_relative "../config/app"
-require "gemstack/testing"
-require "gemstack/jobs/testing"
-<% if database? -%>
-require "gemstack/db/testing"
-<% end -%>
-require "minitest/autorun"
-
-<% if database? -%>
-# Creates the test database (TEST_DATABASE_URL) if needed and applies migrations.
-GemStack::DB::Testing.prepare!
-<% end -%>
-GemStack.boot!
-<% if database? -%>
-
-# Every test runs in a transaction that is rolled back afterwards.
-GemStack::TestCase.include GemStack::DB::Testing::Transactions
-<% end -%>
-
-# Jobs are recorded, not run: assert_enqueued / perform_enqueued_jobs.
-GemStack::TestCase.include GemStack::Jobs::Testing

data/templates/auth/app/controllers/api_tokens_controller.rb

@@ -1,35 +0,0 @@
-# frozen_string_literal: true
-
-# Personal API tokens: send `Authorization: Bearer <token>` instead of a cookie.
-#   GET /api/auth/tokens · POST /api/auth/tokens · DELETE /api/auth/tokens/:id
-class ApiTokensController < ApplicationController
-  before :require_login
-  before :require_session, only: %i[create destroy] # a leaked token can't mint or revoke tokens
-
-  accepts :create do
-    required :name, :string, max_length: 100
-  end
-  returns :index, [ApiTokenSerializer]
-  returns :create, NewApiTokenSerializer
-
-  def index = render(current_user.auth_tokens_dataset.api.order(Sequel.desc(:created_at)), serializer: ApiTokenSerializer)
-
-  def create
-    token, id = GemStack::Auth::Tokens.issue(current_user.id, purpose: "api", name: input[:name])
-    render NewApiTokenSerializer::Result.new(token: token, api_token: AuthToken[id]),
-           status: :created, serializer: NewApiTokenSerializer
-  end
-
-  def destroy
-    revoked = GemStack::Auth::Tokens.revoke(params[:id], user_id: current_user.id)
-    raise GemStack::NotFound, "API token not found" unless revoked
-  end
-
-  private
-
-  def require_session
-    return if authenticated_by == :session
-
-    raise GemStack::Forbidden.new("Manage API tokens from the app.", code: "session_required")
-  end
-end

data/templates/auth/app/controllers/email_verifications_controller.rb

@@ -1,31 +0,0 @@
-# frozen_string_literal: true
-
-# POST /api/auth/email/resend · POST /api/auth/email/verify
-class EmailVerificationsController < ApplicationController
-  before :require_login, only: :create
-  rate_limit to: 5, within: 3600, only: :create
-  rate_limit to: 20, within: 3600, only: :update
-
-  accepts :update do
-    required :token, :string, max_length: 200
-  end
-  returns :create, nil
-  returns :update, nil
-
-  def create
-    AuthMailer.email_verification(current_user.id).deliver_later unless current_user.email_verified?
-    head :accepted
-  end
-
-  # Works signed in or out: the link may be opened on another device.
-  def update
-    row = GemStack::Auth::Tokens.consume(input[:token], purpose: "email_verification")
-    user = row && User[row[:user_id]]
-    # Only valid for the address it was sent to.
-    unless user && user.email == row[:email]
-      raise GemStack::BadRequest.new("This verification link is invalid or has expired.", code: "invalid_token")
-    end
-
-    user.update(email_verified_at: Time.now) unless user.email_verified?
-  end
-end

data/templates/auth/app/controllers/password_resets_controller.rb

@@ -1,40 +0,0 @@
-# frozen_string_literal: true
-
-# POST /api/auth/password/forgot · POST /api/auth/password/reset
-class PasswordResetsController < ApplicationController
-  rate_limit to: 10, within: 3600, only: :create
-  rate_limit to: 3, within: 3600, only: :create, name: "reset-email", by: -> { params[:email].to_s.downcase }
-  rate_limit to: 10, within: 3600, only: :update
-
-  accepts :create do
-    required :email, :string, max_length: 254
-  end
-  accepts :update do
-    required :token, :string, max_length: 200
-    required :password, :string, max_length: 1024
-  end
-  returns :create, nil
-  returns :update, UserSerializer
-
-  # Always 202: whether an account exists is nobody else's business.
-  def create
-    user = User.first(email: User.normalize_email(input[:email]))
-    AuthMailer.password_reset(user.id).deliver_later if user
-    head :accepted
-  end
-
-  def update
-    errors = GemStack::Auth::Password.errors(input[:password])
-    raise GemStack::ValidationError.new(errors: { password: errors }) unless errors.empty?
-
-    row = GemStack::Auth::Tokens.consume(input[:token], purpose: "password_reset")
-    raise GemStack::BadRequest.new("This reset link is invalid or has expired.", code: "invalid_token") unless row
-
-    user = User[row[:user_id]]
-    user.update(password: input[:password])
-    # A reset usually means the old password leaked: end every session.
-    GemStack::Auth::Sessions.revoke_all(user.id)
-    sign_in(user)
-    render user
-  end
-end

data/templates/auth/app/controllers/registrations_controller.rb

@@ -1,19 +0,0 @@
-# frozen_string_literal: true
-
-# POST /api/auth/signup
-class RegistrationsController < ApplicationController
-  rate_limit to: 10, within: 3600, only: :create
-
-  accepts :create do
-    required :email, :string, max_length: 254
-    required :password, :string, max_length: 1024
-  end
-  returns :create, UserSerializer
-
-  def create
-    user = User.create(email: input[:email], password: input[:password]) # invalid: 422 with field errors
-    AuthMailer.email_verification(user.id).deliver_later
-    sign_in(user)
-    render user, status: :created
-  end
-end

data/templates/auth/app/controllers/sessions_controller.rb

@@ -1,29 +0,0 @@
-# frozen_string_literal: true
-
-# POST /api/auth/login · GET /api/auth/me · DELETE /api/auth/logout
-class SessionsController < ApplicationController
-  before :require_login, only: :show
-  # Per IP, and per account so one address can't be guessed at from many IPs.
-  rate_limit to: 20, within: 300, only: :create
-  rate_limit to: 10, within: 300, only: :create, name: "login-email", by: -> { params[:email].to_s.downcase }
-
-  accepts :create do
-    required :email, :string, max_length: 254
-    required :password, :string, max_length: 1024
-  end
-  returns :create, UserSerializer
-  returns :show, UserSerializer
-
-  def create
-    user = User.authenticate_by(email: input[:email], password: input[:password])
-    # The same answer for "no such account" and "wrong password".
-    raise GemStack::Unauthorized.new("Invalid email or password.", code: "invalid_credentials") unless user
-
-    sign_in(user)
-    render user
-  end
-
-  def show = render(current_user)
-
-  def destroy = sign_out
-end

data/templates/auth/app/mailers/auth_mailer.rb

@@ -1,20 +0,0 @@
-# frozen_string_literal: true
-
-# Account emails. Templates: app/mailers/templates/auth_mailer/*.erb.
-# Links point at the Next.js pages (config.auth.app_url, APP_URL in production).
-class AuthMailer < ApplicationMailer
-  def password_reset(user_id)
-    @user = User[user_id] or return
-    token, = GemStack::Auth::Tokens.issue(@user.id, purpose: "password_reset")
-    @url = GemStack::Auth.url("/reset-password", token: token)
-    @minutes = GemStack.config.auth.password_reset_ttl / 60
-    mail to: @user.email, subject: "Reset your password"
-  end
-
-  def email_verification(user_id)
-    @user = User[user_id] or return
-    token, = GemStack::Auth::Tokens.issue(@user.id, purpose: "email_verification", email: @user.email)
-    @url = GemStack::Auth.url("/verify-email", token: token)
-    mail to: @user.email, subject: "Confirm your email address"
-  end
-end

data/templates/auth/app/mailers/templates/auth_mailer/email_verification.html.erb

@@ -1,2 +0,0 @@
-<p>Welcome! Please confirm that <%= @user.email %> is your email address.</p>
-<p><a href="<%= @url %>">Confirm my email address</a></p>

data/templates/auth/app/mailers/templates/auth_mailer/email_verification.text.erb

@@ -1,2 +0,0 @@
-Welcome! Please confirm that <%= @user.email %> is your email address:
-<%= @url %>

data/templates/auth/app/mailers/templates/auth_mailer/password_reset.html.erb

@@ -1,3 +0,0 @@
-<p>Someone (hopefully you) asked to reset the password for <%= @user.email %>.</p>
-<p><a href="<%= @url %>">Choose a new password</a> — the link works once, for <%= @minutes %> minutes.</p>
-<p>If it wasn't you, ignore this email: your password stays the same.</p>

data/templates/auth/app/mailers/templates/auth_mailer/password_reset.text.erb

@@ -1,6 +0,0 @@
-Someone (hopefully you) asked to reset the password for <%= @user.email %>.
-
-Choose a new password here (the link works once, for <%= @minutes %> minutes):
-<%= @url %>
-
-If it wasn't you, ignore this email — your password stays the same.

data/templates/auth/app/models/auth_token.rb

@@ -1,15 +0,0 @@
-# frozen_string_literal: true
-
-# API tokens (and single-use reset/verification tokens) — see GemStack::Auth::Tokens.
-class AuthToken < ApplicationModel
-  field :purpose, :string, null: false
-  field :name, :string, size: 100
-  field :last_used_at, :datetime
-  field :expires_at, :datetime
-
-  belongs_to :user
-
-  dataset_module do
-    def api = where(purpose: "api")
-  end
-end

data/templates/auth/app/models/user.rb

@@ -1,12 +0,0 @@
-# frozen_string_literal: true
-
-# Accounts. GemStack::Auth::User adds password hashing (Argon2id), email
-# normalization, validations and User.authenticate_by(email:, password:).
-class User < ApplicationModel
-  include GemStack::Auth::User
-
-  field :email, :string, null: false, size: 254
-  field :email_verified_at, :datetime
-
-  has_many :auth_tokens
-end

data/templates/auth/app/policies/application_policy.rb

@@ -1,6 +0,0 @@
-# frozen_string_literal: true
-
-# Base class for policies (`gemstack generate policy Order`). Everything is
-# denied unless a policy allows it; see docs/authorization.md.
-class ApplicationPolicy < GemStack::Policy
-end