@neohm/nh-cli 1.1.4 → 1.1.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neohm/nh-cli",
-  "version": "1.1.4",
+  "version": "1.1.5",
   "description": "nh — Command Line Interface for neohm. NestJS projects",
   "main": "src/index.js",
   "bin": {

package/src/lib/templates.js

@@ -85,17 +85,31 @@ export class ${n.controllerClass} {
   }
   return `import { Body, Controller, Post } from '@nestjs/common';
 import { ApiTags } from '@nestjs/swagger';
-import { CommonListFilterDto, SqlService } from '@neohm/nestend';
+import {
+  AuthService,
+  CommonListFilterDto,
+  ListFilterService,
+} from '@neohm/nestend';
 import { ${n.listProcessorClass} } from '../libraries/${n.dot}.list.processor';
 
 @ApiTags('${n.kebab}')
 @Controller('api/v1/${n.kebab}')
 export class ${n.controllerClass} {
-  constructor(private readonly sqlService: SqlService) {}
+  constructor(
+    private readonly listFilterService: ListFilterService,
+    private readonly authService: AuthService,
+  ) {}
 
   @Post('list')
   async list(@Body() body: CommonListFilterDto) {
-    return new ${n.listProcessorClass}(this.sqlService).process(body);
+    // Open by default: authenticate explicitly. validateAccess() gates the
+    // feature on the caller's organization, and guarantees the
+    // organization_id the processor scopes on — a tenantless user is
+    // refused here rather than reaching the query with a null scope.
+    // TODO: replace with the sys_scopes identifier this endpoint sits behind.
+    const { user } = await this.authService.validateAccess('add-scope', 'add-role');
+
+    return new ${n.listProcessorClass}(this.listFilterService, user).process(body);
   }
 }
 `;
@@ -145,27 +159,56 @@ function listProcessor(base, tableName) {
   CommonListFilterConfig,
   CommonListFilterDto,
   CommonListProcessor,
+  FilterValueTypeEnum,
+  ListFilterService,
   SortDirection,
-  SqlService,
+  UserEntity,
 } from '@neohm/nestend';
 
 /**
- * Lists / filters ${n.pascal}. The \`columns\` config below is the allowlist:
- * an identifier must appear here before a caller can filter or sort on it.
- * Mark a column \`searchable: true\` to include it in the free-text \`str\` sweep.
+ * Lists / filters ${n.pascal}.
+ *
+ * Two separate surfaces, and it matters which one a rule belongs to:
+ *
+ *  - \`columns\` is the caller's allowlist. An identifier must appear here
+ *    before a request can filter or sort on it, and \`searchable: true\` adds
+ *    it to the free-text \`str\` sweep. Everything here is public. Declare a
+ *    \`type\`: it decides how a caller's value is cast and which operators the
+ *    column accepts — add \`operators\` to narrow that further.
+ *
+ *  - \`predicates\` and \`applyCustomPredicates()\` are yours. Both compile
+ *    inside the relation — before any join aggregate or LATERAL runs — and
+ *    carry no public identifier, so a payload cannot name, weaken or compete
+ *    with them. Lifecycle and tenant scoping belong here, never in
+ *    \`columns\`. Standing literal clauses go in \`predicates\`; anything
+ *    carrying a value goes in the method, where add() binds it.
  */
 export class ${n.listProcessorClass} extends CommonListProcessor {
   protected config: CommonListFilterConfig = {
     query: '${tableName} a',
     columns: [
-      { key: 'a.id', identifier: 'id' },
-      { key: 'a.attributes', identifier: 'attributes' },
-      { key: 'a.created_at', identifier: 'created_at' },
+      { key: 'a.id', identifier: 'id', type: FilterValueTypeEnum.UUID },
+      {
+        key: 'a.attributes',
+        identifier: 'attributes',
+        type: FilterValueTypeEnum.JSON,
+      },
+      {
+        key: 'a.created_at',
+        identifier: 'created_at',
+        type: FilterValueTypeEnum.DATETIME,
+      },
     ],
-    defaultSort: { field: 'id', direction: SortDirection.DESC },
+    // Soft-deleted rows are never listed. \`deleted_at\` is deliberately not a
+    // declared column: there is nothing a caller should be doing with it.
+    predicates: ['a.deleted_at is null'],
+    defaultSort: { field: 'created_at', direction: SortDirection.DESC },
   };
 
-  constructor(protected readonly sqlService: SqlService) {
+  constructor(
+    protected readonly listFilterService: ListFilterService,
+    private readonly user: UserEntity,
+  ) {
     super();
   }
 
@@ -174,6 +217,14 @@ export class ${n.listProcessorClass} extends CommonListProcessor {
 
     return this.handle();
   }
+
+  protected applyCustomPredicates() {
+  // Filter for specific user's tenant/organization
+    this.predicates.add(
+      'a.organization_id = :organization_id',
+      this.user.organization_id,
+    );
+  }
 }
 `;
 }