codeninja 3.2.0 → 4.0.1

package/tasks/generate-model.task.md

@@ -19,6 +19,50 @@ name, primary table, and available columns.
 
 ---
 
+## ORM Branch
+
+Read `context.db.orm` before generating the model file.
+
+### If `orm == "prisma"` — generate Prisma-based model
+
+Import from the `config/prisma` singleton. Use Prisma Client API. Never use raw SQL.
+
+Example model function (JavaScript):
+```javascript
+const prisma = require('../../config/prisma');
+const { hashPassword, verifyPassword } = require('../../utilities/hashing');
+
+/**
+ * Registers a new user with hashed password.
+ *
+ * @param {Object} request - Decrypted request body.
+ * @param {number} user_id - Authenticated user ID (0 for public endpoint).
+ * @param {string} user_type - Authenticated user type.
+ * @returns {Promise<Object>} Standard response: { responsecode, responsemsg, responsedata }
+ */
+async function registerUser(request, user_id, user_type) {
+    const hashedPassword = await hashPassword(request.password);
+    const user = await prisma.users.create({
+        data: { email: request.email, password: hashedPassword, status: 1 },
+        select: { id: true, email: true }
+    });
+    return { responsecode: 1, responsemsg: 'register_success', responsedata: user };
+}
+
+module.exports = { registerUser };
+```
+
+Prisma model naming rules:
+- `tbl_users` → `prisma.users` (strip `tbl_` prefix, keep lowercase in queries)
+- Always use `select` to specify returned columns — never return all columns
+- Passwords: always call `hashPassword()` / `verifyPassword()` from utilities/hashing
+
+### If `orm == "none"` — generate raw SQL model (existing behavior)
+
+Continue with parameterized SQL queries as per the rest of this task file.
+
+---
+
 ## Dependencies to Import
 
 - `../../../config/database` — imported as `con`. Used for all DB
@@ -129,12 +173,36 @@ Every function generated by `@create-api` follows this pattern:
    error level with function name and error, then return the failure
    shape with keyword `rest_keywords_something_went_wrong`.
 
-### Password handling
-When the function receives or stores passwords:
-- For storing: call `encrypt(password)` from utilities/encryption.js.
-  Never store plaintext passwords.
-- For comparing: encrypt the incoming password and compare against the
-  stored encrypted value. Never decrypt stored passwords for comparison.
+## Password Handling in Model Files
+
+When a query involves a password column (login, register, change-password):
+
+**On registration / password save (JavaScript):**
+```javascript
+const { hashPassword } = require('../../utilities/hashing');
+// ...
+const hashedPassword = await hashPassword(request.password);
+// Store hashedPassword in DB — NEVER store request.password directly
+```
+
+**On login / password verify (JavaScript):**
+```javascript
+const { verifyPassword } = require('../../utilities/hashing');
+// ...
+const isMatch = await verifyPassword(request.password, dbRow.password);
+if (!isMatch) {
+    return { responsecode: 0, responsemsg: 'invalid_credentials', responsedata: [] };
+}
+```
+
+**TypeScript imports:**
+```typescript
+import { hashPassword, verifyPassword } from '../../utilities/hashing';
+```
+
+NEVER call `encrypt()` or `decrypt()` from `encryption.js` for password fields.
+NEVER store the raw plaintext password.
+NEVER store an AES-encrypted password — AES is reversible and not safe for password storage.
 
 ### Session generation (login/signup)
 When a function completes a successful login or signup:

package/tasks/generate-notification.task.md

@@ -15,6 +15,18 @@ instance is exported.
 
 ---
 
+## Language Branch
+
+Read `context.current_init.language` (or `context.services[name].language`).
+
+**TypeScript — generate `utilities/notification.ts`:**
+Same email/FCM notification utilities as JS variant with typed function signatures.
+All function parameters and returns explicitly typed.
+
+**JavaScript — generate `utilities/notification.js` (existing behavior — see below)**
+
+---
+
 ## Dependencies to Import
 
 - `firebase-admin` — imported as `admin`. Used for FCM push

package/tasks/generate-package-json.task.md

@@ -81,6 +81,75 @@ Include based on context values:
 
 ---
 
+## Hashing Library Dependencies
+
+Read `context.current_init.hashing_library` (or `context.services[name].hashing_library`).
+
+If `hashing_library == "bcryptjs"`:
+Add to `dependencies`:
+```json
+"bcryptjs": "^2.4.3"
+```
+If TypeScript (`language == "typescript"`), also add to `devDependencies`:
+```json
+"@types/bcryptjs": "^2.4.4"
+```
+
+If `hashing_library == "argon2"`:
+Add to `dependencies`:
+```json
+"argon2": "^0.31.0"
+```
+(argon2 ships its own TypeScript types — no @types package needed)
+
+---
+
+## ORM Dependencies
+
+Read `context.db.orm`.
+
+If `orm == "prisma"`:
+Add to `dependencies`:
+```json
+"@prisma/client": "^5.0.0"
+```
+Add to `devDependencies`:
+```json
+"prisma": "^5.0.0"
+```
+Add to `scripts`:
+```json
+"postinstall": "prisma generate"
+```
+
+---
+
+## TypeScript Package.json Additions
+
+When `context.current_init.language == "typescript"`:
+
+Replace the default `"start": "node app.js"` with these scripts:
+```json
+"dev": "nodemon --exec ts-node app.ts",
+"build": "tsc",
+"start": "node dist/app.js",
+"start:dev": "ts-node app.ts"
+```
+
+Add to `devDependencies`:
+```json
+"typescript": "^5.4.0",
+"ts-node": "^10.9.2",
+"nodemon": "^3.1.0",
+"@types/node": "^20.14.0",
+"@types/express": "^4.17.21",
+"@types/cors": "^2.8.17"
+```
+
+Note: If `hashing_library == "bcryptjs"`, also add `"@types/bcryptjs": "^2.4.4"` to devDependencies (already covered in Hashing Library Dependencies section — do not duplicate).
+
+---
+
 ## Dev Dependencies (always included)
 ```json
 "devDependencies": {

package/tasks/generate-prisma-client.task.md

@@ -0,0 +1,56 @@
+---
+type: task
+name: generate-prisma-client
+---
+
+# Task: generate-prisma-client
+
+Condition: only run if `context.db.orm == "prisma"`. Otherwise skip entirely.
+
+Read: `context.current_init.language`
+
+Generate: `<service_name>/config/prisma.js` OR `<service_name>/config/prisma.ts`
+
+This file is the shared PrismaClient singleton. Model files import from here — never
+instantiate PrismaClient directly in model files (creates multiple connection pools).
+
+---
+
+## JavaScript variant
+
+```javascript
+const { PrismaClient } = require('@prisma/client');
+
+const prisma = new PrismaClient({
+    log: process.env.NODE_ENV === 'development' ? ['query', 'error', 'warn'] : ['error'],
+});
+
+module.exports = prisma;
+```
+
+---
+
+## TypeScript variant
+
+```typescript
+import { PrismaClient } from '@prisma/client';
+
+const prisma = new PrismaClient({
+    log: process.env.NODE_ENV === 'development' ? ['query', 'error', 'warn'] : ['error'],
+});
+
+export default prisma;
+```
+
+---
+
+## Import rule (enforce in all model files)
+
+```javascript
+// CORRECT — import the singleton
+const prisma = require('../../config/prisma');
+
+// WRONG — never instantiate directly in model files
+const { PrismaClient } = require('@prisma/client');
+const prisma = new PrismaClient(); // creates a new connection pool per instantiation
+```

package/tasks/generate-prisma-schema.task.md

@@ -0,0 +1,71 @@
+---
+type: task
+name: generate-prisma-schema
+---
+
+# Task: generate-prisma-schema
+
+Condition: only run if `context.db.orm == "prisma"`. Otherwise skip entirely.
+
+Read: `context.db.type`, `context.db.name`
+
+Generate: `<service_name>/prisma/schema.prisma`
+
+---
+
+## PostgreSQL
+
+```prisma
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "postgresql"
+  url      = env("DATABASE_URL")
+}
+
+// Models are added by the @db:create-table command.
+// Each tbl_* table maps to a PascalCase Prisma model.
+// Example: tbl_users → model Users { ... } with @@map("tbl_users")
+```
+
+---
+
+## MySQL
+
+```prisma
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "mysql"
+  url      = env("DATABASE_URL")
+}
+
+// Models are added by the @db:create-table command.
+```
+
+---
+
+## MongoDB
+
+```prisma
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "mongodb"
+  url      = env("DATABASE_URL")
+}
+
+// Models are added by the @db:create-table command.
+// Note: MongoDB requires a replica set URL for Prisma.
+```
+
+---
+
+After generating, inform the user:
+"Run `npx prisma generate` after adding models to regenerate the Prisma client."

package/tasks/generate-rateLimiter.task.md

@@ -16,6 +16,26 @@ as all other responses in the service.
 
 ---
 
+## Language Branch
+
+Read `context.current_init.language` (or `context.services[name].language`).
+
+**TypeScript — generate `middleware/rateLimiter.ts`:**
+```typescript
+import rateLimit from 'express-rate-limit';
+
+export const rateLimiter = rateLimit({
+    windowMs: parseInt(process.env.RATE_LIMIT_WINDOW_MS || '900000', 10),
+    max: parseInt(process.env.RATE_LIMIT_MAX || '100', 10),
+    standardHeaders: true,
+    legacyHeaders: false,
+});
+```
+
+**JavaScript — generate `middleware/rateLimiter.js` (existing behavior — see below)**
+
+---
+
 ## Dependencies to Import
 
 - `express-rate-limit` — the rate limiting library. Imported as

package/tasks/generate-readme.task.md

@@ -14,6 +14,30 @@ from context to produce a readme specific to this service.
 
 ---
 
+## TypeScript README additions
+
+When `language == "typescript"`, add these commands to the generated README under a `## Development` heading:
+
+```markdown
+## Development
+
+```bash
+npm run dev       # Start with ts-node (hot reload, no build)
+npm run build     # Compile TypeScript to dist/
+npm start         # Run compiled output (production)
+npm test          # Run Jest tests
+```
+
+**First-time TypeScript setup:**
+```bash
+npm install
+npm run build
+npm start
+```
+```
+
+---
+
 ## Sections to Include
 
 ---

package/tasks/generate-response.task.md

@@ -15,6 +15,33 @@ response shape in one place.
 
 ---
 
+## Language Branch
+
+Read `context.current_init.language` (or `context.services[name].language`).
+
+**TypeScript — generate `response.ts`:**
+```typescript
+import { Request, Response } from 'express';
+
+/**
+ * Sends a standardized API response, encrypting if transport is encrypted.
+ *
+ * @param {Request} req - Express request object.
+ * @param {Response} res - Express response object.
+ * @param {number} code - Response code: 1 = success, 0 = error, -1 = session expired.
+ * @param {string} messageKey - Localization key for the message.
+ * @param {unknown[]} data - Response data array.
+ * @returns {Response} The Express response.
+ */
+export function sendResponse(req: Request, res: Response, code: number, messageKey: string, data: unknown[]): Response {
+    // implementation same as JS variant
+}
+```
+
+**JavaScript — generate `response.js` (existing behavior — see below)**
+
+---
+
 ## Dependencies to Import
 
 - `../utilities/encryption` — imports `encrypt` only

package/tasks/generate-route-manager.task.md

@@ -15,6 +15,38 @@ new module means adding exactly one line to this file.
 
 ---
 
+## Language Branch
+
+Read `context.current_init.language` (or `context.services[name].language`).
+
+**TypeScript — generate `route_manager.ts`:**
+```typescript
+import { Router } from 'express';
+import { rateLimiter } from '../../middleware/rateLimiter';
+import {
+    extractLanguage,
+    validateApiKey,
+    validateAuthToken,
+    decryptRequest
+} from '../../middleware/headerValidator';
+import <ModuleName>Router from './<ModuleName>/route';
+
+const router = Router();
+
+router.use(rateLimiter);
+router.use(extractLanguage);
+router.use(validateApiKey);
+// router.use(validateAuthToken); // uncomment for protected routes
+router.use(decryptRequest);
+router.use('/<path>', <ModuleName>Router);
+
+export { router };
+```
+
+**JavaScript — generate `route_manager.js` (existing behavior — see below)**
+
+---
+
 ## Dependencies to Import
 
 - `express` — for `express.Router()`.

package/tasks/generate-route.task.md

@@ -19,6 +19,43 @@ primary table, and auth requirements for the new route being added.
 
 ---
 
+## Language Branch
+
+Read `context.current_init.language` (or `context.services[name].language`).
+
+**TypeScript — generate `route.ts`:**
+```typescript
+import { Router, Request, Response } from 'express';
+import Validator from 'validatorjs';
+import { sendResponse } from '../../utilities/response';
+import * as Model from './<module>_model';
+
+const router = Router();
+
+// POST /<path> — <endpoint description>
+router.post('/<path>', async (req: Request, res: Response) => {
+    const rules: Record<string, string> = {
+        field: 'required|string'
+    };
+    const validation = new Validator(req.body, rules);
+    if (validation.fails()) {
+        return sendResponse(req, res, 0, 'validation_error', validation.errors.all());
+    }
+    try {
+        const result = await Model.functionName(req.body, 0, '');
+        return sendResponse(req, res, result.responsecode, result.responsemsg, result.responsedata);
+    } catch (err) {
+        return sendResponse(req, res, 0, 'server_error', []);
+    }
+});
+
+export default router;
+```
+
+**JavaScript — generate `route.js` (existing behavior — see below)**
+
+---
+
 ## Dependencies to Import
 
 - `express` — for `express.Router()`

package/tasks/generate-swagger.task.md

@@ -17,6 +17,14 @@ returns.
 
 ---
 
+## Language Branch
+
+TypeScript services generate the same `swagger_doc.json` file as JavaScript services.
+The swagger document is always JSON — no TypeScript syntax is involved.
+No branching needed for this task — generate identically for both languages.
+
+---
+
 ## Generation Modes
 
 This task is called in two different situations. The agent reads the

package/tasks/generate-template.task.md

@@ -16,6 +16,18 @@ fully responsive, and styled for modern email clients.
 
 ---
 
+## Language Branch
+
+Read `context.current_init.language` (or `context.services[name].language`).
+
+**TypeScript — generate `config/template.ts`:**
+Same email/notification template content as JS variant.
+Use `export const` and add string type annotations where applicable.
+
+**JavaScript — generate `config/template.js` (existing behavior — see below)**
+
+---
+
 ## Dependencies to Import
 
 - `./constants` — imported as `GLOBALS`. Used for APP_NAME, LOGO,

package/tasks/generate-tsconfig.task.md

@@ -0,0 +1,38 @@
+---
+type: task
+name: generate-tsconfig
+---
+
+# Task: generate-tsconfig
+
+Condition: only run if `context.current_init.language == "typescript"`. Otherwise skip entirely.
+
+Generate: `<service_name>/tsconfig.json`
+
+```json
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "commonjs",
+    "lib": ["ES2020"],
+    "outDir": "./dist",
+    "rootDir": "./",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true
+  },
+  "include": [
+    "./**/*.ts"
+  ],
+  "exclude": [
+    "node_modules",
+    "dist",
+    "**/*.test.ts"
+  ]
+}
+```

package/tasks/generate-validator.task.md

@@ -15,6 +15,37 @@ invalid input without throwing.
 
 ---
 
+## Language Branch
+
+Read `context.current_init.language` (or `context.services[name].language`).
+
+**TypeScript — generate `utilities/validator.ts`:**
+```typescript
+import Validator from 'validatorjs';
+import { Request, Response, NextFunction } from 'express';
+
+/**
+ * Validates request body against validatorjs rules; calls next() if valid, sends 400 if not.
+ *
+ * @param {Record<string, string>} rules - Validatorjs rule object.
+ * @returns Express middleware function.
+ */
+export function checkValidationRules(rules: Record<string, string>) {
+    return (req: Request, res: Response, next: NextFunction): void => {
+        const validation = new Validator(req.body, rules);
+        if (validation.fails()) {
+            res.status(400).json({ status: 0, message: 'Validation failed', data: validation.errors.all() });
+            return;
+        }
+        next();
+    };
+}
+```
+
+**JavaScript — generate `utilities/validator.js` (existing behavior — see below)**
+
+---
+
 ## Dependencies to Import
 
 - `validatorjs` — imported as `Validator` (capital V). This is the