seams 0.1.0

data/lib/generators/seams/admin/templates/app/controllers/admin/notifications_controller.rb.tt

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# Administrate controller for the Notifications::Notification
+# dashboard. Note: Notification is an STI base — the table contains
+# rows for InApp / Email / Sms subclasses. The admin index lists
+# every subclass; the form lets admins set `type` to any of the
+# permitted STI subclasses.
+module Admin
+  class NotificationsController < ::Seams::Admin::ApplicationController
+    def resource_class
+      ::Notifications::Notification
+    end
+
+    def dashboard
+      @dashboard ||= NotificationDashboard.new
+    end
+  end
+end

data/lib/generators/seams/admin/templates/app/controllers/admin/plans_controller.rb.tt

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# Administrate controller for the Billing::Plan dashboard.
+module Admin
+  class PlansController < ::Seams::Admin::ApplicationController
+    def resource_class
+      ::Billing::Plan
+    end
+
+    def dashboard
+      @dashboard ||= PlanDashboard.new
+    end
+  end
+end

data/lib/generators/seams/admin/templates/app/controllers/admin/subscriptions_controller.rb.tt

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# Administrate controller for the Billing::Subscription dashboard.
+module Admin
+  class SubscriptionsController < ::Seams::Admin::ApplicationController
+    def resource_class
+      ::Billing::Subscription
+    end
+
+    def dashboard
+      @dashboard ||= SubscriptionDashboard.new
+    end
+  end
+end

data/lib/generators/seams/admin/templates/app/controllers/admin/teams_controller.rb.tt

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# Administrate controller for the Teams::Team dashboard.
+module Admin
+  class TeamsController < ::Seams::Admin::ApplicationController
+    def resource_class
+      ::Teams::Team
+    end
+
+    def dashboard
+      @dashboard ||= TeamDashboard.new
+    end
+  end
+end

data/lib/generators/seams/admin/templates/app/controllers/admin/teams_memberships_controller.rb.tt

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+# Administrate controller for the Teams::Membership dashboard.
+# Routed under `teams_memberships` (engine-prefixed) to disambiguate
+# from `accounts_memberships`.
+module Admin
+  class TeamsMembershipsController < ::Seams::Admin::ApplicationController
+    def resource_class
+      ::Teams::Membership
+    end
+
+    def dashboard
+      @dashboard ||= TeamsMembershipDashboard.new
+    end
+  end
+end

data/lib/generators/seams/admin/templates/app/dashboards/admin/account_dashboard.rb.tt

@@ -0,0 +1,50 @@
+# frozen_string_literal: true
+
+require "administrate/base_dashboard"
+
+# Administrate dashboard for Accounts::Account — the tenant boundary.
+#
+# Account uses a UUID primary key (so account ids can appear in
+# shareable URLs without leaking row counts). Administrate's default
+# Field::Number doesn't render UUIDs cleanly, so `id` is rendered as
+# Field::String. The bigint `external_account_id` is a slug-friendly
+# secondary identifier and renders fine as Field::Number.
+module Admin
+  class AccountDashboard < Administrate::BaseDashboard
+    ATTRIBUTE_TYPES = {
+      # UUID PK — Field::String, not Field::Number.
+      id:                  Field::String,
+      name:                Field::String,
+      external_account_id: Field::Number,
+      cancelled_at:        Field::DateTime,
+      incinerated_at:      Field::DateTime,
+      memberships:         Field::HasMany,
+      created_at:          Field::DateTime,
+      updated_at:          Field::DateTime
+    }.freeze
+
+    COLLECTION_ATTRIBUTES = %i[id name external_account_id cancelled_at created_at].freeze
+
+    SHOW_PAGE_ATTRIBUTES = %i[
+      id
+      name
+      external_account_id
+      cancelled_at
+      incinerated_at
+      memberships
+      created_at
+      updated_at
+    ].freeze
+
+    FORM_ATTRIBUTES = %i[name].freeze
+
+    COLLECTION_FILTERS = {
+      active:    ->(resources) { resources.where(cancelled_at: nil) },
+      cancelled: ->(resources) { resources.where.not(cancelled_at: nil) }
+    }.freeze
+
+    def display_resource(account)
+      account.name.presence || "Account ##{account.id}"
+    end
+  end
+end

data/lib/generators/seams/admin/templates/app/dashboards/admin/accounts_membership_dashboard.rb.tt

@@ -0,0 +1,58 @@
+# frozen_string_literal: true
+
+require "administrate/base_dashboard"
+
+# Administrate dashboard for Accounts::Membership — joins an
+# Auth::Identity to an Accounts::Account with a role.
+#
+# Class name is `Admin::AccountsMembershipDashboard` (with the engine
+# prefix) to disambiguate from `Admin::TeamsMembershipDashboard` —
+# both engines ship a Membership model and Administrate resolves
+# dashboards by class name, so the prefixed form is necessary to keep
+# them distinct in the same admin namespace.
+#
+# UUID primary key (matches Accounts::Account). identity_id is a bare
+# bigint FK with no DB-level FK because cross-engine model access is
+# forbidden by the seams architecture (NoCrossEngineModelAccess cop) —
+# the admin surface treats identity_id as a typed integer reference.
+module Admin
+  class AccountsMembershipDashboard < Administrate::BaseDashboard
+    ATTRIBUTE_TYPES = {
+      # UUID PK — Field::String, not Field::Number.
+      id:          Field::String,
+      account:     Field::BelongsTo.with_options(class_name: "Accounts::Account"),
+      identity_id: Field::Number,
+      name:        Field::String,
+      role:        Field::Select.with_options(collection: %w[owner admin member system]),
+      active:      Field::Boolean,
+      verified_at: Field::DateTime,
+      created_at:  Field::DateTime,
+      updated_at:  Field::DateTime
+    }.freeze
+
+    COLLECTION_ATTRIBUTES = %i[id account name role active created_at].freeze
+
+    SHOW_PAGE_ATTRIBUTES = %i[
+      id
+      account
+      identity_id
+      name
+      role
+      active
+      verified_at
+      created_at
+      updated_at
+    ].freeze
+
+    FORM_ATTRIBUTES = %i[account identity_id name role active].freeze
+
+    COLLECTION_FILTERS = {
+      active: ->(resources) { resources.where(active: true).where.not(role: "system") },
+      system: ->(resources) { resources.where(role: "system") }
+    }.freeze
+
+    def display_resource(membership)
+      "#{membership.role}: #{membership.name}"
+    end
+  end
+end

data/lib/generators/seams/admin/templates/app/dashboards/admin/identity_dashboard.rb.tt

@@ -0,0 +1,48 @@
+# frozen_string_literal: true
+
+require "administrate/base_dashboard"
+
+# Administrate dashboard for Auth::Identity. Identity is the canonical
+# "who is logging in" record — credentials only, no customer-facing
+# concerns. The encrypted email column is rendered with truncation and
+# an "(encrypted at rest)" annotation so admins know they are looking
+# at a column ActiveRecord::Encryption decrypts on read.
+#
+# Form fields deliberately exclude `password_digest` — admin should
+# never see or set the bcrypt hash. Password resets go through the
+# auth engine's reset flow, not through the admin surface.
+module Admin
+  class IdentityDashboard < Administrate::BaseDashboard
+    # ATTRIBUTE_TYPES describes how Administrate renders each column.
+    # Administrate auto-discovers attributes from the model; declaring
+    # them explicitly here makes the rendering deterministic and lets
+    # us mark encrypted columns specially.
+    ATTRIBUTE_TYPES = {
+      id:         Field::Number,
+      # email is encrypted at rest via ActiveRecord::Encryption (see
+      # Auth::Identity#encrypts). Truncated to 32 chars so a long
+      # ciphertext-padded email doesn't blow up the index column.
+      email:      Field::String.with_options(searchable: true, truncate: 32), # (encrypted at rest)
+      staff:      Field::Boolean,
+      created_at: Field::DateTime,
+      updated_at: Field::DateTime
+    }.freeze
+
+    COLLECTION_ATTRIBUTES = %i[id email staff created_at].freeze
+
+    SHOW_PAGE_ATTRIBUTES = %i[id email staff created_at updated_at].freeze
+
+    # password is intentionally absent — admin must not set the password
+    # directly. Hosts that need a "force-reset" admin action ship it as
+    # a custom action, not as a form field.
+    FORM_ATTRIBUTES = %i[email staff].freeze
+
+    COLLECTION_FILTERS = {
+      staff: ->(resources) { resources.where(staff: true) }
+    }.freeze
+
+    def display_resource(identity)
+      "Identity ##{identity.id}"
+    end
+  end
+end

data/lib/generators/seams/admin/templates/app/dashboards/admin/invitation_dashboard.rb.tt

@@ -0,0 +1,51 @@
+# frozen_string_literal: true
+
+require "administrate/base_dashboard"
+
+# Administrate dashboard for Teams::Invitation — the lifecycle record
+# for a pending team invite. Token is rendered with truncation since
+# it's a 32-byte URL-safe base64 secret; admins should not need to
+# read the full token (they re-issue if lost).
+module Admin
+  class InvitationDashboard < Administrate::BaseDashboard
+    ATTRIBUTE_TYPES = {
+      id:          Field::Number,
+      team:        Field::BelongsTo.with_options(class_name: "Teams::Team"),
+      email:       Field::String.with_options(searchable: true),
+      # Truncated to 16 chars so the table view doesn't get blown up
+      # by the 43-char base64 token. Full value still available on the
+      # show page (truncate doesn't apply there).
+      token:       Field::String.with_options(truncate: 16),
+      role:        Field::Select.with_options(collection: %w[owner admin member]),
+      expires_at:  Field::DateTime,
+      accepted_at: Field::DateTime,
+      created_at:  Field::DateTime,
+      updated_at:  Field::DateTime
+    }.freeze
+
+    COLLECTION_ATTRIBUTES = %i[id team email role expires_at accepted_at].freeze
+
+    SHOW_PAGE_ATTRIBUTES = %i[
+      id
+      team
+      email
+      token
+      role
+      expires_at
+      accepted_at
+      created_at
+      updated_at
+    ].freeze
+
+    FORM_ATTRIBUTES = %i[team email role expires_at].freeze
+
+    COLLECTION_FILTERS = {
+      pending:  ->(resources) { resources.where(accepted_at: nil).where("expires_at > ?", Time.current) },
+      accepted: ->(resources) { resources.where.not(accepted_at: nil) }
+    }.freeze
+
+    def display_resource(invitation)
+      "Invitation to #{invitation.email}"
+    end
+  end
+end

data/lib/generators/seams/admin/templates/app/dashboards/admin/invoice_dashboard.rb.tt

@@ -0,0 +1,67 @@
+# frozen_string_literal: true
+
+require "administrate/base_dashboard"
+
+# Administrate dashboard for Billing::Invoice — local mirror of a
+# gateway invoice. account_id is a UUID; rendered as Field::String.
+#
+# `amount_cents` is rendered as Field::Number for now; a custom
+# Money field that formats "$12.34" with currency awareness is
+# deferred to Wave 12 polish.
+# TODO: Wave 12 — Field::Money custom field reading the `currency`
+# column on the same row.
+module Admin
+  class InvoiceDashboard < Administrate::BaseDashboard
+    ATTRIBUTE_TYPES = {
+      id:               Field::Number,
+      # UUID — Field::String, not Field::Number.
+      account_id:       Field::String,
+      gateway_ref:      Field::String,
+      customer_ref:     Field::String,
+      subscription_ref: Field::String,
+      # TODO: format as currency (Wave 12 — custom Money field)
+      amount_cents:     Field::Number,
+      currency:         Field::String,
+      status:           Field::Select.with_options(collection: %w[draft open paid void uncollectible]),
+      paid_at:          Field::DateTime,
+      created_at:       Field::DateTime,
+      updated_at:       Field::DateTime
+    }.freeze
+
+    COLLECTION_ATTRIBUTES = %i[id account_id gateway_ref status amount_cents paid_at].freeze
+
+    SHOW_PAGE_ATTRIBUTES = %i[
+      id
+      account_id
+      gateway_ref
+      customer_ref
+      subscription_ref
+      amount_cents
+      currency
+      status
+      paid_at
+      created_at
+      updated_at
+    ].freeze
+
+    FORM_ATTRIBUTES = %i[
+      account_id
+      gateway_ref
+      customer_ref
+      subscription_ref
+      amount_cents
+      currency
+      status
+      paid_at
+    ].freeze
+
+    COLLECTION_FILTERS = {
+      paid:   ->(resources) { resources.where(status: "paid") },
+      open:   ->(resources) { resources.where(status: "open") }
+    }.freeze
+
+    def display_resource(invoice)
+      "Invoice #{invoice.gateway_ref} (#{invoice.status})"
+    end
+  end
+end

data/lib/generators/seams/admin/templates/app/dashboards/admin/lifetime_pass_dashboard.rb.tt

@@ -0,0 +1,65 @@
+# frozen_string_literal: true
+
+require "administrate/base_dashboard"
+
+# Administrate dashboard for Billing::LifetimePass — one-time-paid OR
+# privately-granted permanent access record. account_id is a UUID
+# (Field::String). granted_by_identity_id / revoked_by_identity_id
+# track the human (Auth::Identity bigint) who pressed the button.
+module Admin
+  class LifetimePassDashboard < Administrate::BaseDashboard
+    ATTRIBUTE_TYPES = {
+      id:                       Field::Number,
+      # UUID — Field::String, not Field::Number.
+      account_id:               Field::String,
+      customer_ref:             Field::String,
+      plan_ref:                 Field::String,
+      gateway_ref:              Field::String,
+      granted_by_identity_id:   Field::Number,
+      granted_at:               Field::DateTime,
+      revoked_at:               Field::DateTime,
+      revoked_by_identity_id:   Field::Number,
+      notes:                    Field::Text,
+      created_at:               Field::DateTime,
+      updated_at:               Field::DateTime
+    }.freeze
+
+    COLLECTION_ATTRIBUTES = %i[id account_id plan_ref granted_at revoked_at].freeze
+
+    SHOW_PAGE_ATTRIBUTES = %i[
+      id
+      account_id
+      customer_ref
+      plan_ref
+      gateway_ref
+      granted_by_identity_id
+      granted_at
+      revoked_at
+      revoked_by_identity_id
+      notes
+      created_at
+      updated_at
+    ].freeze
+
+    FORM_ATTRIBUTES = %i[
+      account_id
+      customer_ref
+      plan_ref
+      gateway_ref
+      granted_by_identity_id
+      granted_at
+      revoked_at
+      revoked_by_identity_id
+      notes
+    ].freeze
+
+    COLLECTION_FILTERS = {
+      active:  ->(resources) { resources.where(revoked_at: nil) },
+      revoked: ->(resources) { resources.where.not(revoked_at: nil) }
+    }.freeze
+
+    def display_resource(pass)
+      "LifetimePass ##{pass.id} (#{pass.plan_ref})"
+    end
+  end
+end

data/lib/generators/seams/admin/templates/app/dashboards/admin/notification_dashboard.rb.tt

@@ -0,0 +1,58 @@
+# frozen_string_literal: true
+
+require "administrate/base_dashboard"
+
+# Administrate dashboard for Notifications::Notification — the STI
+# base. The `owner` association is polymorphic (Auth::Identity bigint
+# OR Accounts::Account UUID OR a host model) and rendered via
+# Field::Polymorphic so Administrate can handle both PK shapes.
+#
+# `schedule_data` is a jsonb cache of the IceCube::Schedule hash; it's
+# verbose and rarely actionable in admin, so it's hidden from the
+# collection view and only shown on the show page.
+module Admin
+  class NotificationDashboard < Administrate::BaseDashboard
+    ATTRIBUTE_TYPES = {
+      id:               Field::Number,
+      type:             Field::String,
+      # Polymorphic owner — Field::Polymorphic resolves owner_type +
+      # owner_id, regardless of whether the owning row has a bigint or
+      # UUID PK (notification.owner_id is a string column).
+      owner:            Field::Polymorphic,
+      recipient:        Field::String,
+      template:         Field::String,
+      next_delivery_at: Field::DateTime,
+      read_at:          Field::DateTime,
+      schedule_data:    Field::String.with_options(searchable: false),
+      created_at:       Field::DateTime,
+      updated_at:       Field::DateTime
+    }.freeze
+
+    COLLECTION_ATTRIBUTES = %i[id type owner template next_delivery_at read_at].freeze
+
+    SHOW_PAGE_ATTRIBUTES = %i[
+      id
+      type
+      owner
+      recipient
+      template
+      schedule_data
+      next_delivery_at
+      read_at
+      created_at
+      updated_at
+    ].freeze
+
+    FORM_ATTRIBUTES = %i[type owner recipient template].freeze
+
+    COLLECTION_FILTERS = {
+      due:       ->(resources) { resources.where(next_delivery_at: ..Time.current) },
+      unread:    ->(resources) { resources.where(read_at: nil) },
+      completed: ->(resources) { resources.where(next_delivery_at: nil) }
+    }.freeze
+
+    def display_resource(notification)
+      "#{notification.type&.demodulize}: #{notification.template}"
+    end
+  end
+end

data/lib/generators/seams/admin/templates/app/dashboards/admin/notification_preference_dashboard.rb.tt

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+require "administrate/base_dashboard"
+
+# Administrate dashboard for Notifications::NotificationPreference —
+# per-Identity channel + notification-type toggle. Absence of a row
+# means "use defaults" (everything enabled); a row with `enabled:
+# false` is an explicit opt-out.
+module Admin
+  class NotificationPreferenceDashboard < Administrate::BaseDashboard
+    ATTRIBUTE_TYPES = {
+      id:                Field::Number,
+      identity_id:       Field::Number,
+      channel:           Field::Select.with_options(collection: %w[in_app email sms]),
+      notification_type: Field::String,
+      enabled:           Field::Boolean,
+      created_at:        Field::DateTime,
+      updated_at:        Field::DateTime
+    }.freeze
+
+    COLLECTION_ATTRIBUTES = %i[id identity_id channel notification_type enabled].freeze
+
+    SHOW_PAGE_ATTRIBUTES = %i[
+      id
+      identity_id
+      channel
+      notification_type
+      enabled
+      created_at
+      updated_at
+    ].freeze
+
+    FORM_ATTRIBUTES = %i[identity_id channel notification_type enabled].freeze
+
+    COLLECTION_FILTERS = {
+      disabled: ->(resources) { resources.where(enabled: false) }
+    }.freeze
+
+    def display_resource(preference)
+      "Identity #{preference.identity_id} / #{preference.channel}"
+    end
+  end
+end

data/lib/generators/seams/admin/templates/app/dashboards/admin/plan_dashboard.rb.tt

@@ -0,0 +1,72 @@
+# frozen_string_literal: true
+
+require "administrate/base_dashboard"
+
+# Administrate dashboard for Billing::Plan — local mirror of a Stripe
+# Price (or other gateway's recurring billable thing).
+#
+# `amount_cents` is rendered as Field::Number for now; a custom
+# Money field that formats "$12.34" with currency awareness is
+# deferred to Wave 12 polish.
+# TODO: Wave 12 — ship a Field::Money custom field that reads
+# `currency` from the same row and formats accordingly.
+module Admin
+  class PlanDashboard < Administrate::BaseDashboard
+    ATTRIBUTE_TYPES = {
+      id:                  Field::Number,
+      gateway_ref:         Field::String,
+      name:                Field::String,
+      description:         Field::Text,
+      # TODO: format as currency (Wave 12 — custom Money field)
+      amount_cents:        Field::Number,
+      currency:            Field::String,
+      interval:            Field::Select.with_options(collection: %w[day week month year lifetime]),
+      trial_period_days:   Field::Number,
+      max_lifetime_units:  Field::Number,
+      active:              Field::Boolean,
+      features:            Field::String.with_options(searchable: false),
+      created_at:          Field::DateTime,
+      updated_at:          Field::DateTime
+    }.freeze
+
+    COLLECTION_ATTRIBUTES = %i[id name gateway_ref interval amount_cents active].freeze
+
+    SHOW_PAGE_ATTRIBUTES = %i[
+      id
+      gateway_ref
+      name
+      description
+      amount_cents
+      currency
+      interval
+      trial_period_days
+      max_lifetime_units
+      active
+      features
+      created_at
+      updated_at
+    ].freeze
+
+    FORM_ATTRIBUTES = %i[
+      gateway_ref
+      name
+      description
+      amount_cents
+      currency
+      interval
+      trial_period_days
+      max_lifetime_units
+      active
+    ].freeze
+
+    COLLECTION_FILTERS = {
+      active:    ->(resources) { resources.where(active: true) },
+      lifetime:  ->(resources) { resources.where(interval: "lifetime") },
+      recurring: ->(resources) { resources.where.not(interval: "lifetime") }
+    }.freeze
+
+    def display_resource(plan)
+      plan.name.presence || plan.gateway_ref
+    end
+  end
+end

data/lib/generators/seams/admin/templates/app/dashboards/admin/subscription_dashboard.rb.tt

@@ -0,0 +1,59 @@
+# frozen_string_literal: true
+
+require "administrate/base_dashboard"
+
+# Administrate dashboard for Billing::Subscription — local mirror of a
+# gateway subscription. account_id is a UUID (Accounts::Account#id) —
+# rendered as Field::String since Field::Number truncates UUID strings.
+# No belongs_to declaration on the model: cross-engine model access is
+# forbidden by NoCrossEngineModelAccess, so the admin surface treats
+# account_id as an opaque tenant reference rather than a belongs_to.
+module Admin
+  class SubscriptionDashboard < Administrate::BaseDashboard
+    ATTRIBUTE_TYPES = {
+      id:                 Field::Number,
+      # UUID — Field::String, not Field::Number.
+      account_id:         Field::String,
+      customer_ref:       Field::String,
+      plan_ref:           Field::String,
+      gateway_ref:        Field::String,
+      status:             Field::Select.with_options(
+        collection: %w[trialing active past_due canceled unpaid incomplete incomplete_expired paused]
+      ),
+      current_period_end: Field::DateTime,
+      created_at:         Field::DateTime,
+      updated_at:         Field::DateTime
+    }.freeze
+
+    COLLECTION_ATTRIBUTES = %i[id account_id status plan_ref current_period_end].freeze
+
+    SHOW_PAGE_ATTRIBUTES = %i[
+      id
+      account_id
+      customer_ref
+      plan_ref
+      gateway_ref
+      status
+      current_period_end
+      created_at
+      updated_at
+    ].freeze
+
+    FORM_ATTRIBUTES = %i[
+      account_id
+      customer_ref
+      plan_ref
+      gateway_ref
+      status
+      current_period_end
+    ].freeze
+
+    COLLECTION_FILTERS = {
+      active_or_trialing: ->(resources) { resources.where(status: %w[active trialing]) }
+    }.freeze
+
+    def display_resource(subscription)
+      "Subscription #{subscription.gateway_ref} (#{subscription.status})"
+    end
+  end
+end