@simple-auth-kit/cli 1.0.0

package/registry/combos/nestjs-prisma/tsconfig.json

@@ -0,0 +1,21 @@
+{
+  "extends": "../../../tsconfig.base.json",
+  "compilerOptions": {
+    "paths": {
+      "@/lib/auth/core/*": [
+        "../../core/*"
+      ]
+    }
+  },
+  "include": [
+    "shared/src",
+    "variants/*/src",
+    "test",
+    "shared/prisma.config.ts"
+  ],
+  "exclude": [
+    "node_modules",
+    "**/generated",
+    ".variant"
+  ]
+}

package/registry/combos/nestjs-prisma/variants/base/.env.example

@@ -0,0 +1,31 @@
+DATABASE_URL="postgresql://postgres:postgres@localhost:5432/auth_reference?schema=public"
+
+# OAuth (optional — only needed if you pass oauthProviders into AuthModule.forRoot())
+GOOGLE_CLIENT_ID=
+GOOGLE_CLIENT_SECRET=
+APPLE_CLIENT_ID=
+APPLE_TEAM_ID=
+APPLE_KEY_ID=
+APPLE_PRIVATE_KEY=
+
+# Docs Basic Auth (src/docs.ts). Only enforced when NODE_ENV=production — /docs and /reference
+# are open in development. With NODE_ENV=production and either value missing, the docs routes
+# answer 503 rather than serving unprotected.
+DOCS_USERNAME=
+DOCS_PASSWORD=
+
+# Seeder (`npm run seed`, src/seed.ts). The permission catalog and the default roles are always
+# seeded; the initial admin user is created only when BOTH of these are set. There is no default
+# password — with either one missing the seeder says so and skips the admin rather than putting a
+# known credential on the deployment. Setting them again later is a no-op for an admin that
+# already exists: their current password is left alone.
+SEED_ADMIN_EMAIL=
+SEED_ADMIN_PASSWORD=
+
+# Optional second seeded account, held by the "superadmin" role (same full-catalog permissions
+# as "admin", distinct account). Same no-default-password rule as SEED_ADMIN_* above; leaving
+# any of these unset skips it. SEED_SUPERADMIN_USERNAME is optional — without it the account has
+# no username and only its email logs in.
+SEED_SUPERADMIN_EMAIL=
+SEED_SUPERADMIN_USERNAME=
+SEED_SUPERADMIN_PASSWORD=

package/registry/combos/nestjs-prisma/variants/base/prisma/migrations/20260810084937_init/migration.sql

@@ -0,0 +1,269 @@
+-- CreateTable
+CREATE TABLE "users" (
+    "id" TEXT NOT NULL,
+    "email" TEXT NOT NULL,
+    "password_hash" TEXT,
+    "blocked" BOOLEAN NOT NULL DEFAULT false,
+    "two_factor_enabled" BOOLEAN NOT NULL DEFAULT false,
+    "two_factor_secret" TEXT,
+    "created_at" TIMESTAMPTZ(6) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "users_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "roles" (
+    "id" TEXT NOT NULL,
+    "slug" VARCHAR(255) NOT NULL,
+    "display_name" VARCHAR(255) NOT NULL,
+    "description" TEXT,
+    "is_default" BOOLEAN NOT NULL DEFAULT false,
+    "order" INTEGER NOT NULL DEFAULT 0,
+    "is_active" BOOLEAN NOT NULL DEFAULT true,
+    "created_at" TIMESTAMPTZ(6) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ(6) NOT NULL,
+
+    CONSTRAINT "roles_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "permissions" (
+    "id" TEXT NOT NULL,
+    "slug" VARCHAR(255) NOT NULL,
+    "display_name" VARCHAR(255) NOT NULL,
+    "description" TEXT,
+    "group" VARCHAR(255) NOT NULL DEFAULT 'General',
+    "group_order" INTEGER NOT NULL DEFAULT 0,
+    "order" INTEGER NOT NULL DEFAULT 0,
+    "is_active" BOOLEAN NOT NULL DEFAULT true,
+    "created_at" TIMESTAMPTZ(6) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ(6) NOT NULL,
+
+    CONSTRAINT "permissions_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "role_user" (
+    "user_id" TEXT NOT NULL,
+    "role_id" TEXT NOT NULL,
+    "created_at" TIMESTAMPTZ(6) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "role_user_pkey" PRIMARY KEY ("user_id","role_id")
+);
+
+-- CreateTable
+CREATE TABLE "permission_role" (
+    "permission_id" TEXT NOT NULL,
+    "role_id" TEXT NOT NULL,
+    "created_at" TIMESTAMPTZ(6) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "permission_role_pkey" PRIMARY KEY ("permission_id","role_id")
+);
+
+-- CreateTable
+CREATE TABLE "permission_user" (
+    "user_id" TEXT NOT NULL,
+    "permission_id" TEXT NOT NULL,
+    "created_at" TIMESTAMPTZ(6) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "permission_user_pkey" PRIMARY KEY ("user_id","permission_id")
+);
+
+-- CreateTable
+CREATE TABLE "oauth_accounts" (
+    "id" TEXT NOT NULL,
+    "user_id" TEXT NOT NULL,
+    "provider" VARCHAR(100) NOT NULL,
+    "provider_account_id" TEXT NOT NULL,
+    "email" TEXT,
+    "created_at" TIMESTAMPTZ(6) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "oauth_accounts_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "password_reset_tokens" (
+    "id" TEXT NOT NULL,
+    "user_id" TEXT NOT NULL,
+    "token_hash" TEXT NOT NULL,
+    "expires_at" TIMESTAMPTZ(6) NOT NULL,
+    "consumed_at" TIMESTAMPTZ(6),
+    "created_at" TIMESTAMPTZ(6) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "password_reset_tokens_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "two_factor_backup_codes" (
+    "id" TEXT NOT NULL,
+    "user_id" TEXT NOT NULL,
+    "code_hash" TEXT NOT NULL,
+    "used_at" TIMESTAMPTZ(6),
+
+    CONSTRAINT "two_factor_backup_codes_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "audit_logs" (
+    "id" TEXT NOT NULL,
+    "user_id" TEXT,
+    "name" TEXT NOT NULL,
+    "action" TEXT NOT NULL,
+    "info" JSONB NOT NULL,
+    "remarks" TEXT,
+    "created_at" TIMESTAMPTZ(6) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ(6) NOT NULL,
+
+    CONSTRAINT "audit_logs_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "sessions" (
+    "id" TEXT NOT NULL,
+    "user_id" TEXT NOT NULL,
+    "session_version" INTEGER NOT NULL DEFAULT 0,
+    "current_refresh_jti" TEXT NOT NULL,
+    "provider" VARCHAR(100),
+    "user_agent" TEXT,
+    "ip" VARCHAR(100),
+    "expires_at" TIMESTAMPTZ(6) NOT NULL,
+    "is_revoked" BOOLEAN NOT NULL DEFAULT false,
+    "revoked_at" TIMESTAMPTZ(6),
+    "revoked_by" TEXT,
+    "revoked_ip" VARCHAR(100),
+    "is_active" BOOLEAN NOT NULL DEFAULT true,
+    "created_by" TEXT,
+    "updated_by" TEXT,
+    "is_deleted" BOOLEAN NOT NULL DEFAULT false,
+    "deleted_at" TIMESTAMPTZ(6),
+    "deleted_by" TEXT,
+    "deleted_reason" VARCHAR(255),
+    "created_at" TIMESTAMPTZ(6) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ(6) NOT NULL,
+
+    CONSTRAINT "sessions_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "signing_keys" (
+    "kid" TEXT NOT NULL,
+    "public_key_pem" TEXT NOT NULL,
+    "private_key_pem" TEXT NOT NULL,
+    "created_at" TIMESTAMPTZ(6) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "retired_at" TIMESTAMPTZ(6),
+
+    CONSTRAINT "signing_keys_pkey" PRIMARY KEY ("kid")
+);
+
+-- CreateTable
+CREATE TABLE "denylisted_access_tokens" (
+    "jti" TEXT NOT NULL,
+    "expires_at" TIMESTAMPTZ(6) NOT NULL,
+
+    CONSTRAINT "denylisted_access_tokens_pkey" PRIMARY KEY ("jti")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "users_email_key" ON "users"("email");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "roles_slug_key" ON "roles"("slug");
+
+-- CreateIndex
+CREATE INDEX "roles_is_default_idx" ON "roles"("is_default");
+
+-- CreateIndex
+CREATE INDEX "roles_active_order_idx" ON "roles"("is_active", "order");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "permissions_slug_key" ON "permissions"("slug");
+
+-- CreateIndex
+CREATE INDEX "permissions_is_active_idx" ON "permissions"("is_active");
+
+-- CreateIndex
+CREATE INDEX "permissions_group_order_idx" ON "permissions"("group", "group_order", "order");
+
+-- CreateIndex
+CREATE INDEX "role_user_role_id_idx" ON "role_user"("role_id");
+
+-- CreateIndex
+CREATE INDEX "permission_role_role_id_idx" ON "permission_role"("role_id");
+
+-- CreateIndex
+CREATE INDEX "permission_user_permission_id_idx" ON "permission_user"("permission_id");
+
+-- CreateIndex
+CREATE INDEX "oauth_accounts_user_id_idx" ON "oauth_accounts"("user_id");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "oauth_accounts_provider_provider_account_id_key" ON "oauth_accounts"("provider", "provider_account_id");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "password_reset_tokens_token_hash_key" ON "password_reset_tokens"("token_hash");
+
+-- CreateIndex
+CREATE INDEX "two_factor_backup_codes_user_id_idx" ON "two_factor_backup_codes"("user_id");
+
+-- CreateIndex
+CREATE INDEX "audit_logs_user_created_idx" ON "audit_logs"("user_id", "created_at");
+
+-- CreateIndex
+CREATE INDEX "audit_logs_created_idx" ON "audit_logs"("created_at");
+
+-- CreateIndex
+CREATE INDEX "sessions_user_id_idx" ON "sessions"("user_id");
+
+-- CreateIndex
+CREATE INDEX "sessions_is_revoked_idx" ON "sessions"("is_revoked");
+
+-- CreateIndex
+CREATE INDEX "sessions_expires_at_idx" ON "sessions"("expires_at");
+
+-- CreateIndex
+CREATE INDEX "sessions_user_active_idx" ON "sessions"("user_id", "is_revoked", "expires_at");
+
+-- CreateIndex
+CREATE INDEX "sessions_revoked_by_idx" ON "sessions"("revoked_by");
+
+-- AddForeignKey
+ALTER TABLE "role_user" ADD CONSTRAINT "role_user_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "role_user" ADD CONSTRAINT "role_user_role_id_fkey" FOREIGN KEY ("role_id") REFERENCES "roles"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "permission_role" ADD CONSTRAINT "permission_role_permission_id_fkey" FOREIGN KEY ("permission_id") REFERENCES "permissions"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "permission_role" ADD CONSTRAINT "permission_role_role_id_fkey" FOREIGN KEY ("role_id") REFERENCES "roles"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "permission_user" ADD CONSTRAINT "permission_user_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "permission_user" ADD CONSTRAINT "permission_user_permission_id_fkey" FOREIGN KEY ("permission_id") REFERENCES "permissions"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "oauth_accounts" ADD CONSTRAINT "oauth_accounts_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "password_reset_tokens" ADD CONSTRAINT "password_reset_tokens_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "two_factor_backup_codes" ADD CONSTRAINT "two_factor_backup_codes_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_revoked_by_fkey" FOREIGN KEY ("revoked_by") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_created_by_fkey" FOREIGN KEY ("created_by") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_updated_by_fkey" FOREIGN KEY ("updated_by") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_deleted_by_fkey" FOREIGN KEY ("deleted_by") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;

package/registry/combos/nestjs-prisma/variants/base/prisma/migrations/20260810122546_add_profile_audit_soft_delete/migration.sql

@@ -0,0 +1,96 @@
+-- AlterTable
+ALTER TABLE "permission_role" ADD COLUMN     "updated_at" TIMESTAMPTZ(6) NOT NULL;
+
+-- AlterTable
+ALTER TABLE "permission_user" ADD COLUMN     "updated_at" TIMESTAMPTZ(6) NOT NULL;
+
+-- AlterTable
+ALTER TABLE "permissions" ADD COLUMN     "created_by" TEXT,
+ADD COLUMN     "deleted_at" TIMESTAMPTZ(6),
+ADD COLUMN     "deleted_by" TEXT,
+ADD COLUMN     "deleted_reason" VARCHAR(255),
+ADD COLUMN     "is_deleted" BOOLEAN NOT NULL DEFAULT false,
+ADD COLUMN     "name" VARCHAR(255) NOT NULL,
+ADD COLUMN     "updated_by" TEXT;
+
+-- AlterTable
+ALTER TABLE "role_user" ADD COLUMN     "updated_at" TIMESTAMPTZ(6) NOT NULL;
+
+-- AlterTable
+ALTER TABLE "roles" ADD COLUMN     "created_by" TEXT,
+ADD COLUMN     "deleted_at" TIMESTAMPTZ(6),
+ADD COLUMN     "deleted_by" TEXT,
+ADD COLUMN     "deleted_reason" VARCHAR(255),
+ADD COLUMN     "is_deleted" BOOLEAN NOT NULL DEFAULT false,
+ADD COLUMN     "name" VARCHAR(255) NOT NULL,
+ADD COLUMN     "updated_by" TEXT;
+
+-- AlterTable
+ALTER TABLE "users" ADD COLUMN     "created_by" TEXT,
+ADD COLUMN     "deleted_at" TIMESTAMPTZ(6),
+ADD COLUMN     "deleted_by" TEXT,
+ADD COLUMN     "deleted_reason" VARCHAR(255),
+ADD COLUMN     "first_name" TEXT,
+ADD COLUMN     "is_deleted" BOOLEAN NOT NULL DEFAULT false,
+ADD COLUMN     "last_login" TIMESTAMPTZ(6),
+ADD COLUMN     "last_name" TEXT,
+ADD COLUMN     "phone" TEXT,
+ADD COLUMN     "photo" TEXT,
+ADD COLUMN     "updated_at" TIMESTAMPTZ(6) NOT NULL,
+ADD COLUMN     "updated_by" TEXT,
+ADD COLUMN     "username" TEXT;
+
+-- CreateIndex
+CREATE UNIQUE INDEX "permissions_name_key" ON "permissions"("name");
+
+-- CreateIndex
+CREATE INDEX "permissions_is_deleted_idx" ON "permissions"("is_deleted");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "roles_name_key" ON "roles"("name");
+
+-- CreateIndex
+CREATE INDEX "roles_is_deleted_idx" ON "roles"("is_deleted");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "users_first_name_key" ON "users"("first_name");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "users_last_name_key" ON "users"("last_name");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "users_phone_key" ON "users"("phone");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "users_username_key" ON "users"("username");
+
+-- CreateIndex
+CREATE INDEX "users_is_deleted_idx" ON "users"("is_deleted");
+
+-- AddForeignKey
+ALTER TABLE "users" ADD CONSTRAINT "users_created_by_fkey" FOREIGN KEY ("created_by") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "users" ADD CONSTRAINT "users_updated_by_fkey" FOREIGN KEY ("updated_by") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "users" ADD CONSTRAINT "users_deleted_by_fkey" FOREIGN KEY ("deleted_by") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "roles" ADD CONSTRAINT "roles_created_by_fkey" FOREIGN KEY ("created_by") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "roles" ADD CONSTRAINT "roles_updated_by_fkey" FOREIGN KEY ("updated_by") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "roles" ADD CONSTRAINT "roles_deleted_by_fkey" FOREIGN KEY ("deleted_by") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "permissions" ADD CONSTRAINT "permissions_created_by_fkey" FOREIGN KEY ("created_by") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "permissions" ADD CONSTRAINT "permissions_updated_by_fkey" FOREIGN KEY ("updated_by") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "permissions" ADD CONSTRAINT "permissions_deleted_by_fkey" FOREIGN KEY ("deleted_by") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+

package/registry/combos/nestjs-prisma/variants/base/prisma/migrations/20260810123620_add_display_name/migration.sql

@@ -0,0 +1,3 @@
+-- AlterTable
+ALTER TABLE "users" ADD COLUMN     "display_name" TEXT;
+

package/registry/combos/nestjs-prisma/variants/base/prisma/migrations/20260810131421_drop_signing_keys/migration.sql

@@ -0,0 +1,3 @@
+-- DropTable
+DROP TABLE "signing_keys";
+