@tulipes/cli 0.2.0 → 0.3.0-rc.2

package/templates/overlays/no-queues/modules/users/controllers/bo.users.controllers.ts

@@ -0,0 +1,57 @@
+import { forgetUser } from "@app/auth";
+import type { Request, RequestHandler, Response } from "express";
+import type { Ctx } from "@tulipes/core/boot";
+import { HttpError } from "@tulipes/core/http";
+
+/**
+ * The users back office — the users:bo:* endpoints, granted to admin
+ * through its users:* grant. Same shape as the web controller beside it:
+ * one class holding the context, one handler per method, failures thrown
+ * as i18n keys.
+ */
+export class BoUsersController {
+  readonly #ctx: Ctx;
+
+  constructor(ctx: Ctx) {
+    this.#ctx = ctx;
+  }
+
+  /** Soft delete: the row stays in mongo but leaves every ordinary query. */
+  softDelete(): RequestHandler {
+    return async (req: Request, res: Response) => {
+      const user = await this.#ctx.models!.get("User").findOne({ email: req.params.email });
+      if (!user) throw new HttpError(404, "notFound");
+
+      // The account leaves every query, so its sessions resolve to nobody on
+      // the cold path; the cached identities would not know, so they go too.
+      await forgetUser(this.#ctx, String(user._id));
+      await (user as unknown as { softDelete(): Promise<unknown> }).softDelete();
+      res.respond({ data: { email: req.params.email, soft_deleted: true } });
+    };
+  }
+
+  listDeleted(): RequestHandler {
+    return async (_req: Request, res: Response) => {
+      const deleted = await this.#ctx.models!
+        .get("User")
+        .find({ is_deleted: true })
+        .setOptions({ withDeleted: true } as Record<string, unknown>)
+        .select("email role -_id")
+        .lean();
+
+      res.respond({ data: deleted });
+    };
+  }
+
+  create(): RequestHandler {
+    return async (req: Request, res: Response) => {
+      const { email } = (req.body ?? {}) as { email?: string };
+      // `field` is what puts this against the input in the envelope.
+      if (!email) throw new HttpError(422, "emailRequired", { field: "email" });
+
+      await this.#ctx.models!.get("User").create({ email });
+
+      res.respond({ status: 201, data: { email } });
+    };
+  }
+}

package/templates/versions.json

@@ -1,11 +1,11 @@
 {
   "pnpm": "10.28.0",
-  "@tulipes/core": "0.11.0",
-  "@tulipes/cli": "0.2.0",
-  "@tulipes/spec": "0.3.2",
-  "@tulipes/mongoose": "0.2.0",
-  "@tulipes/bullmq": "0.2.0",
-  "@tulipes/socket.io": "0.1.2",
-  "@tulipes/testing": "0.1.0",
-  "@tulipes/mcp": "0.1.0"
+  "@tulipes/core": "0.12.0-rc.2",
+  "@tulipes/cli": "0.3.0-rc.2",
+  "@tulipes/spec": "0.4.0-rc.2",
+  "@tulipes/mongoose": "0.2.1-rc.2",
+  "@tulipes/bullmq": "0.2.1-rc.2",
+  "@tulipes/socket.io": "0.1.3-rc.2",
+  "@tulipes/testing": "0.1.1-rc.2",
+  "@tulipes/mcp": "0.1.1-rc.2"
 }

package/templates/app/modules/users/routes/users.routes.ts

@@ -1,60 +0,0 @@
-import { Router } from "express";
-import type { BackendCtx } from "@tulipes/core/boot";
-import { z } from "zod/v4";
-
-import { UsersController } from "../controllers/users.controllers.ts";
-import { createBody, emailParam, listQuery, userShape } from "../schemas/users.schemas.ts";
-
-export default function usersRoutes(ctx: BackendCtx): void {
-  const { rai, routes } = ctx;
-  const router = Router();
-  const users = new UsersController(ctx);
-
-  router.get("/", rai({
-      id: "users:read",
-      name: "List users",
-      description: "Page through accounts, clamped by the shared bounds",
-      // Validated on the way in, and described on the way out: one
-      // declaration, so the spec cannot drift from what is enforced.
-      query: listQuery,
-      returns: z.array(userShape),
-    }), users.list());
-
-  router.delete("/:email", rai({
-      id: "users:delete",
-      name: "Soft-delete a user",
-      description: "Flags the account; ordinary queries stop returning it",
-      params: emailParam,
-    }), users.softDelete());
-
-  router.get("/deleted", rai({
-      id: "users:read-deleted",
-      name: "List soft-deleted users",
-    }), users.listDeleted());
-
-  router.post("/", rai({
-      id: "users:create",
-      status: 201,
-      name: "Create a user",
-      description: "Adds the account and queues its welcome email",
-      body: createBody,
-    }), users.create());
-
-  router.get("/ping", rai({
-      id: "users:ping",
-      name: "Users module status",
-    }), users.ping());
-
-  router.get("/missing", rai({
-      id: "users:demo-missing",
-      name: "HttpError demo",
-    }), users.demoMissing());
-
-  router.get("/boom", rai({
-      id: "users:demo-boom",
-      name: "Unhandled error demo",
-    }), users.demoBoom());
-
-  // Deliberately outside the API prefix, to show a mount of its own.
-  routes.mount(router, "/users");
-}