create-velox-app 0.4.3 → 0.4.4

package/dist/templates/source/api/index.auth.js

@@ -0,0 +1,59 @@
+/**
+ * Application Entry Point
+ */
+import 'dotenv/config';
+import { veloxApp, VELOX_VERSION, databasePlugin, authPlugin, rest, getRouteSummary, } from '@veloxts/velox';
+import { authConfig, config } from './config/index.js';
+import { prisma } from './database/index.js';
+import { authProcedures } from './procedures/auth.js';
+import { healthProcedures } from './procedures/health.js';
+import { userProcedures } from './procedures/users.js';
+// ============================================================================
+// Application Bootstrap
+// ============================================================================
+async function createApp() {
+    const app = await veloxApp({
+        port: config.port,
+        host: config.host,
+        logger: config.logger,
+    });
+    // Register database plugin
+    await app.register(databasePlugin({ client: prisma }));
+    // Register auth plugin
+    await app.register(authPlugin(authConfig));
+    console.log('[Auth] JWT authentication enabled');
+    // Register all procedures
+    const collections = [healthProcedures, authProcedures, userProcedures];
+    app.routes(rest(collections, { prefix: config.apiPrefix }));
+    return { app, collections };
+}
+function printBanner(collections) {
+    const divider = '═'.repeat(50);
+    console.log(`\n${divider}`);
+    console.log(`  VeloxTS API v${VELOX_VERSION}`);
+    console.log(`  Environment: ${config.env}`);
+    console.log(divider);
+    const routes = getRouteSummary(collections);
+    console.log('\n📍 Registered Routes:\n');
+    for (const route of routes) {
+        const method = route.method.padEnd(6);
+        const path = route.path.padEnd(25);
+        console.log(`   ${method} ${path} → ${route.namespace}.${route.procedure}`);
+    }
+    console.log(`\n${divider}`);
+    console.log(`  API: http://localhost:${config.port}${config.apiPrefix}`);
+    console.log(`${divider}\n`);
+}
+async function main() {
+    try {
+        const { app, collections } = await createApp();
+        await app.start();
+        printBanner(collections);
+    }
+    catch (error) {
+        console.error('Failed to start application:', error);
+        process.exit(1);
+    }
+}
+main();
+//# sourceMappingURL=index.auth.js.map

package/dist/templates/source/api/index.auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.auth.js","sourceRoot":"","sources":["../../../../src/templates/source/api/index.auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,eAAe,CAAC;AAEvB,OAAO,EACL,QAAQ,EACR,aAAa,EACb,cAAc,EACd,UAAU,EACV,IAAI,EACJ,eAAe,GAChB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,KAAK,UAAU,SAAS;IACtB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IAEH,2BAA2B;IAC3B,MAAM,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAEvD,uBAAuB;IACvB,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAEjD,0BAA0B;IAC1B,MAAM,WAAW,GAAG,CAAC,gBAAgB,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IACvE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAE5D,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,WAAkD;IACrE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAE/B,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,kBAAkB,aAAa,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAErB,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAEzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;QAC/C,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,WAAW,CAAC,WAAW,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/templates/source/api/index.default.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Application Entry Point
+ */
+import 'dotenv/config';
+//# sourceMappingURL=index.default.d.ts.map

package/dist/templates/source/api/index.default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.default.d.ts","sourceRoot":"","sources":["../../../../src/templates/source/api/index.default.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,eAAe,CAAC"}

package/dist/templates/source/api/index.default.js

@@ -0,0 +1,56 @@
+/**
+ * Application Entry Point
+ */
+import 'dotenv/config';
+import { veloxApp, VELOX_VERSION, databasePlugin, rest, getRouteSummary, } from '@veloxts/velox';
+import { config } from './config/index.js';
+import { prisma } from './database/index.js';
+import { healthProcedures } from './procedures/health.js';
+import { userProcedures } from './procedures/users.js';
+// ============================================================================
+// Application Bootstrap
+// ============================================================================
+async function createApp() {
+    const app = await veloxApp({
+        port: config.port,
+        host: config.host,
+        logger: config.logger,
+    });
+    // Register database plugin
+    await app.register(databasePlugin({ client: prisma }));
+    // Register all procedures
+    const collections = [healthProcedures, userProcedures];
+    app.routes(rest(collections, { prefix: config.apiPrefix }));
+    return { app, collections };
+}
+function printBanner(collections) {
+    const divider = '═'.repeat(50);
+    console.log(`\n${divider}`);
+    console.log(`  VeloxTS API v${VELOX_VERSION}`);
+    console.log(`  Environment: ${config.env}`);
+    console.log(divider);
+    // Print registered routes
+    const routes = getRouteSummary(collections);
+    console.log('\n📍 Registered Routes:\n');
+    for (const route of routes) {
+        const method = route.method.padEnd(6);
+        const path = route.path.padEnd(25);
+        console.log(`   ${method} ${path} → ${route.namespace}.${route.procedure}`);
+    }
+    console.log(`\n${divider}`);
+    console.log(`  API: http://localhost:${config.port}${config.apiPrefix}`);
+    console.log(`${divider}\n`);
+}
+async function main() {
+    try {
+        const { app, collections } = await createApp();
+        await app.start();
+        printBanner(collections);
+    }
+    catch (error) {
+        console.error('Failed to start application:', error);
+        process.exit(1);
+    }
+}
+main();
+//# sourceMappingURL=index.default.js.map

package/dist/templates/source/api/index.default.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.default.js","sourceRoot":"","sources":["../../../../src/templates/source/api/index.default.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,eAAe,CAAC;AAEvB,OAAO,EACL,QAAQ,EACR,aAAa,EACb,cAAc,EACd,IAAI,EACJ,eAAe,GAChB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,KAAK,UAAU,SAAS;IACtB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IAEH,2BAA2B;IAC3B,MAAM,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAEvD,0BAA0B;IAC1B,MAAM,WAAW,GAAG,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IACvD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAE5D,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,WAAkD;IACrE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAE/B,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,kBAAkB,aAAa,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAErB,0BAA0B;IAC1B,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAEzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;QAC/C,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,WAAW,CAAC,WAAW,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/templates/source/api/prisma.config.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Prisma Configuration (Prisma 7.x)
+ *
+ * Database URL is configured here instead of schema.prisma.
+ */
+import 'dotenv/config';
+declare const _default: any;
+export default _default;
+//# sourceMappingURL=prisma.config.d.ts.map

package/dist/templates/source/api/prisma.config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma.config.d.ts","sourceRoot":"","sources":["../../../../src/templates/source/api/prisma.config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,eAAe,CAAC;;AAGvB,wBAMG"}

package/dist/templates/source/api/prisma.config.js

@@ -0,0 +1,15 @@
+/**
+ * Prisma Configuration (Prisma 7.x)
+ *
+ * Database URL is configured here instead of schema.prisma.
+ */
+import 'dotenv/config';
+import { defineConfig } from 'prisma/config';
+export default defineConfig({
+    earlyAccess: true,
+    schema: './prisma/schema.prisma',
+    datasource: {
+        url: process.env.DATABASE_URL,
+    },
+});
+//# sourceMappingURL=prisma.config.js.map

package/dist/templates/source/api/prisma.config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma.config.js","sourceRoot":"","sources":["../../../../src/templates/source/api/prisma.config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,IAAI;IACjB,MAAM,EAAE,wBAAwB;IAChC,UAAU,EAAE;QACV,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,YAAa;KAC/B;CACF,CAAC,CAAC"}

package/dist/templates/source/api/procedures/auth.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Auth Procedures
+ *
+ * Authentication procedures for user registration, login, and token management.
+ *
+ * REST Endpoints:
+ * - POST /auth/register - Create new account
+ * - POST /auth/login    - Authenticate and get tokens
+ * - POST /auth/refresh  - Refresh access token
+ * - POST /auth/logout   - Revoke current token
+ * - GET  /auth/me       - Get current user (protected)
+ */
+export declare const authProcedures: any;
+//# sourceMappingURL=auth.d.ts.map

package/dist/templates/source/api/procedures/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../../src/templates/source/api/procedures/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAqHH,eAAO,MAAM,cAAc,KA4JzB,CAAC"}

package/dist/templates/source/api/procedures/auth.js

@@ -0,0 +1,221 @@
+/**
+ * Auth Procedures
+ *
+ * Authentication procedures for user registration, login, and token management.
+ *
+ * REST Endpoints:
+ * - POST /auth/register - Create new account
+ * - POST /auth/login    - Authenticate and get tokens
+ * - POST /auth/refresh  - Refresh access token
+ * - POST /auth/logout   - Revoke current token
+ * - GET  /auth/me       - Get current user (protected)
+ */
+import { AuthError, authenticated, createAuthRateLimiter, hashPassword, jwtManager, verifyPassword, defineProcedures, procedure, z, } from '@veloxts/velox';
+import { authConfig, parseUserRoles, tokenStore } from '../config/index.js';
+import { prisma } from '../database/index.js';
+// ============================================================================
+// Rate Limiter
+// ============================================================================
+const rateLimiter = createAuthRateLimiter({
+    login: {
+        maxAttempts: 5,
+        windowMs: 15 * 60 * 1000,
+        lockoutDurationMs: 15 * 60 * 1000,
+        progressiveBackoff: true,
+    },
+    register: {
+        maxAttempts: 3,
+        windowMs: 60 * 60 * 1000,
+        lockoutDurationMs: 60 * 60 * 1000,
+    },
+    refresh: {
+        maxAttempts: 10,
+        windowMs: 60 * 1000,
+        lockoutDurationMs: 60 * 1000,
+    },
+});
+// ============================================================================
+// Password Blacklist
+// ============================================================================
+const COMMON_PASSWORDS = new Set([
+    'password', 'password123', '12345678', '123456789',
+    'qwerty123', 'letmein', 'welcome', 'admin123',
+]);
+// ============================================================================
+// Schemas
+// ============================================================================
+const PasswordSchema = z
+    .string()
+    .min(12, 'Password must be at least 12 characters')
+    .max(128, 'Password must not exceed 128 characters')
+    .refine((pwd) => /[a-z]/.test(pwd), 'Password must contain at least one lowercase letter')
+    .refine((pwd) => /[A-Z]/.test(pwd), 'Password must contain at least one uppercase letter')
+    .refine((pwd) => /[0-9]/.test(pwd), 'Password must contain at least one number')
+    .refine((pwd) => !COMMON_PASSWORDS.has(pwd.toLowerCase()), 'Password is too common. Please choose a stronger password.');
+const EmailSchema = z
+    .string()
+    .email('Invalid email address')
+    .transform((email) => email.toLowerCase().trim());
+const RegisterInput = z.object({
+    name: z.string().min(2).max(100).trim(),
+    email: EmailSchema,
+    password: PasswordSchema,
+});
+const LoginInput = z.object({
+    email: EmailSchema,
+    password: z.string().min(1),
+});
+const RefreshInput = z.object({
+    refreshToken: z.string(),
+});
+const TokenResponse = z.object({
+    accessToken: z.string(),
+    refreshToken: z.string(),
+    expiresIn: z.number(),
+    tokenType: z.literal('Bearer'),
+});
+const UserResponse = z.object({
+    id: z.string(),
+    name: z.string(),
+    email: z.string(),
+    roles: z.array(z.string()),
+});
+const LogoutResponse = z.object({
+    success: z.boolean(),
+    message: z.string(),
+});
+// ============================================================================
+// JWT Manager
+// ============================================================================
+const jwt = jwtManager(authConfig.jwt);
+// Dummy hash for timing attack prevention
+const DUMMY_HASH = '$2b$12$LQv3c1yqBWVHxkd0LHAkCOYz6TtxMQJqhN8/X4.uy7dPSSXB5G6Uy';
+// ============================================================================
+// Auth Procedures
+// ============================================================================
+export const authProcedures = defineProcedures('auth', {
+    register: procedure()
+        .rest({ method: 'POST', path: '/auth/register' })
+        .use(rateLimiter.register())
+        .input(RegisterInput)
+        .output(TokenResponse)
+        .mutation(async ({ input }) => {
+        const normalizedEmail = input.email.toLowerCase().trim();
+        const existing = await prisma.user.findUnique({
+            where: { email: normalizedEmail },
+        });
+        if (existing) {
+            throw new AuthError('Registration failed. If this email is not already registered, please try again.', 400, 'REGISTRATION_FAILED');
+        }
+        const hashedPassword = await hashPassword(input.password);
+        const user = await prisma.user.create({
+            data: {
+                name: input.name.trim(),
+                email: normalizedEmail,
+                password: hashedPassword,
+                roles: JSON.stringify(['user']),
+            },
+        });
+        return jwt.createTokenPair({
+            id: user.id,
+            email: user.email,
+            roles: ['user'],
+        });
+    }),
+    login: procedure()
+        .rest({ method: 'POST', path: '/auth/login' })
+        .use(rateLimiter.login((ctx) => {
+        const input = ctx.input;
+        return input?.email?.toLowerCase() ?? '';
+    }))
+        .input(LoginInput)
+        .output(TokenResponse)
+        .mutation(async ({ input }) => {
+        const normalizedEmail = input.email.toLowerCase().trim();
+        const user = await prisma.user.findUnique({
+            where: { email: normalizedEmail },
+        });
+        const hashToVerify = user?.password || DUMMY_HASH;
+        const isValid = await verifyPassword(input.password, hashToVerify);
+        if (!user || !user.password || !isValid) {
+            throw new AuthError('Invalid email or password', 401, 'INVALID_CREDENTIALS');
+        }
+        const roles = parseUserRoles(user.roles);
+        return jwt.createTokenPair({
+            id: user.id,
+            email: user.email,
+            roles,
+        });
+    }),
+    refresh: procedure()
+        .rest({ method: 'POST', path: '/auth/refresh' })
+        .use(rateLimiter.refresh())
+        .input(RefreshInput)
+        .output(TokenResponse)
+        .mutation(async ({ input }) => {
+        try {
+            const payload = jwt.verifyToken(input.refreshToken);
+            if (payload.type !== 'refresh') {
+                throw new AuthError('Invalid token type', 401, 'INVALID_TOKEN_TYPE');
+            }
+            if (payload.jti && tokenStore.isRevoked(payload.jti)) {
+                throw new AuthError('Token has been revoked', 401, 'TOKEN_REVOKED');
+            }
+            if (payload.jti) {
+                const previousUserId = tokenStore.isRefreshTokenUsed(payload.jti);
+                if (previousUserId) {
+                    tokenStore.revokeAllUserTokens(previousUserId);
+                    throw new AuthError('Security alert: Refresh token reuse detected.', 401, 'TOKEN_REUSE_DETECTED');
+                }
+                tokenStore.markRefreshTokenUsed(payload.jti, payload.sub);
+            }
+            const user = await prisma.user.findUnique({
+                where: { id: payload.sub },
+            });
+            if (!user) {
+                throw new AuthError('User not found', 401, 'USER_NOT_FOUND');
+            }
+            return jwt.createTokenPair({
+                id: user.id,
+                email: user.email,
+                roles: parseUserRoles(user.roles),
+            });
+        }
+        catch (error) {
+            if (error instanceof AuthError)
+                throw error;
+            throw new AuthError('Invalid refresh token', 401, 'INVALID_REFRESH_TOKEN');
+        }
+    }),
+    logout: procedure()
+        .rest({ method: 'POST', path: '/auth/logout' })
+        .guard(authenticated)
+        .output(LogoutResponse)
+        .mutation(async ({ ctx }) => {
+        const tokenId = ctx.auth?.token?.jti;
+        if (tokenId) {
+            tokenStore.revoke(tokenId, 15 * 60 * 1000);
+        }
+        return {
+            success: true,
+            message: 'Successfully logged out',
+        };
+    }),
+    getMe: procedure()
+        .rest({ method: 'GET', path: '/auth/me' })
+        .guard(authenticated)
+        .output(UserResponse)
+        .query(async ({ ctx }) => {
+        const user = ctx.user;
+        if (!user) {
+            throw new AuthError('Not authenticated', 401, 'NOT_AUTHENTICATED');
+        }
+        return {
+            id: user.id,
+            name: user.name || '',
+            email: user.email,
+            roles: Array.isArray(user.roles) ? user.roles : ['user'],
+        };
+    }),
+});
+//# sourceMappingURL=auth.js.map

package/dist/templates/source/api/procedures/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../../../src/templates/source/api/procedures/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,SAAS,EACT,aAAa,EACb,qBAAqB,EACrB,YAAY,EACZ,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,SAAS,EACT,CAAC,GACF,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,MAAM,WAAW,GAAG,qBAAqB,CAAC;IACxC,KAAK,EAAE;QACL,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;QACxB,iBAAiB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;QACjC,kBAAkB,EAAE,IAAI;KACzB;IACD,QAAQ,EAAE;QACR,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;QACxB,iBAAiB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;KAClC;IACD,OAAO,EAAE;QACP,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,EAAE,GAAG,IAAI;QACnB,iBAAiB,EAAE,EAAE,GAAG,IAAI;KAC7B;CACF,CAAC,CAAC;AAEH,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW;IAClD,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU;CAC9C,CAAC,CAAC;AAEH,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,EAAE;KACR,GAAG,CAAC,EAAE,EAAE,yCAAyC,CAAC;KAClD,GAAG,CAAC,GAAG,EAAE,yCAAyC,CAAC;KACnD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,qDAAqD,CAAC;KACzF,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,qDAAqD,CAAC;KACzF,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,2CAA2C,CAAC;KAC/E,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EACjD,4DAA4D,CAC7D,CAAC;AAEJ,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,EAAE;KACR,KAAK,CAAC,uBAAuB,CAAC;KAC9B,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AAEpD,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;IACvC,KAAK,EAAE,WAAW;IAClB,QAAQ,EAAE,cAAc;CACzB,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,KAAK,EAAE,WAAW;IAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;CACzB,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAEvC,0CAA0C;AAC1C,MAAM,UAAU,GAAG,8DAA8D,CAAC;AAElF,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,EAAE;IACrD,QAAQ,EAAE,SAAS,EAAE;SAClB,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;SAChD,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;SAC3B,KAAK,CAAC,aAAa,CAAC;SACpB,MAAM,CAAC,aAAa,CAAC;SACrB,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC5B,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAEzD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YAC5C,KAAK,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;SAClC,CAAC,CAAC;QAEH,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CACjB,iFAAiF,EACjF,GAAG,EACH,qBAAqB,CACtB,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE1D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YACpC,IAAI,EAAE;gBACJ,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;gBACvB,KAAK,EAAE,eAAe;gBACtB,QAAQ,EAAE,cAAc;gBACxB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;aAChC;SACF,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC,eAAe,CAAC;YACzB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,CAAC,MAAM,CAAC;SAChB,CAAC,CAAC;IACL,CAAC,CAAC;IAEJ,KAAK,EAAE,SAAS,EAAE;SACf,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;SAC7C,GAAG,CACF,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACxB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAuC,CAAC;QAC1D,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC,CAAC,CACH;SACA,KAAK,CAAC,UAAU,CAAC;SACjB,MAAM,CAAC,aAAa,CAAC;SACrB,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC5B,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAEzD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YACxC,KAAK,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;SAClC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,IAAI,EAAE,QAAQ,IAAI,UAAU,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAEnE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,IAAI,SAAS,CAAC,2BAA2B,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEzC,OAAO,GAAG,CAAC,eAAe,CAAC;YACzB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK;SACN,CAAC,CAAC;IACL,CAAC,CAAC;IAEJ,OAAO,EAAE,SAAS,EAAE;SACjB,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;SAC/C,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;SAC1B,KAAK,CAAC,YAAY,CAAC;SACnB,MAAM,CAAC,aAAa,CAAC;SACrB,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAEpD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,SAAS,CAAC,oBAAoB,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;YACvE,CAAC;YAED,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,SAAS,CAAC,wBAAwB,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;YACtE,CAAC;YAED,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,MAAM,cAAc,GAAG,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAClE,IAAI,cAAc,EAAE,CAAC;oBACnB,UAAU,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;oBAC/C,MAAM,IAAI,SAAS,CACjB,+CAA+C,EAC/C,GAAG,EACH,sBAAsB,CACvB,CAAC;gBACJ,CAAC;gBACD,UAAU,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5D,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;gBACxC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE;aAC3B,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAC/D,CAAC;YAED,OAAO,GAAG,CAAC,eAAe,CAAC;gBACzB,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;aAClC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,SAAS;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,IAAI,SAAS,CAAC,uBAAuB,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC;IAEJ,MAAM,EAAE,SAAS,EAAE;SAChB,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;SAC9C,KAAK,CAAC,aAAa,CAAC;SACpB,MAAM,CAAC,cAAc,CAAC;SACtB,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;QAErC,IAAI,OAAO,EAAE,CAAC;YACZ,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,yBAAyB;SACnC,CAAC;IACJ,CAAC,CAAC;IAEJ,KAAK,EAAE,SAAS,EAAE;SACf,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;SACzC,KAAK,CAAC,aAAa,CAAC;SACpB,MAAM,CAAC,YAAY,CAAC;SACpB,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QAEtB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACrE,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAG,IAAI,CAAC,IAAe,IAAI,EAAE;YACjC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;SACzD,CAAC;IACJ,CAAC,CAAC;CACL,CAAC,CAAC"}

package/dist/templates/source/api/procedures/health.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Health Check Procedures
+ */
+export declare const healthProcedures: any;
+//# sourceMappingURL=health.d.ts.map

package/dist/templates/source/api/procedures/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../../../src/templates/source/api/procedures/health.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,eAAO,MAAM,gBAAgB,KAiB3B,CAAC"}

package/dist/templates/source/api/procedures/health.js

@@ -0,0 +1,21 @@
+/**
+ * Health Check Procedures
+ */
+import { VELOX_VERSION, defineProcedures, procedure, z } from '@veloxts/velox';
+export const healthProcedures = defineProcedures('health', {
+    getHealth: procedure()
+        .rest({ method: 'GET', path: '/health' })
+        .output(z.object({
+        status: z.literal('ok'),
+        version: z.string(),
+        timestamp: z.string().datetime(),
+        uptime: z.number(),
+    }))
+        .query(async () => ({
+        status: 'ok',
+        version: VELOX_VERSION,
+        timestamp: new Date().toISOString(),
+        uptime: process.uptime(),
+    })),
+});
+//# sourceMappingURL=health.js.map

package/dist/templates/source/api/procedures/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../../../src/templates/source/api/procedures/health.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,gBAAgB,CAAC;AAE/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,QAAQ,EAAE;IACzD,SAAS,EAAE,SAAS,EAAE;SACnB,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SACxC,MAAM,CACL,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC,CACH;SACA,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAClB,MAAM,EAAE,IAAa;QACrB,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;KACzB,CAAC,CAAC;CACN,CAAC,CAAC"}

package/dist/templates/source/api/procedures/index.auth.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Procedure Exports
+ */
+export * from './auth.js';
+export * from './health.js';
+export * from './users.js';
+//# sourceMappingURL=index.auth.d.ts.map

package/dist/templates/source/api/procedures/index.auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.auth.d.ts","sourceRoot":"","sources":["../../../../../src/templates/source/api/procedures/index.auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/templates/source/api/procedures/index.auth.js

@@ -0,0 +1,7 @@
+/**
+ * Procedure Exports
+ */
+export * from './auth.js';
+export * from './health.js';
+export * from './users.js';
+//# sourceMappingURL=index.auth.js.map

package/dist/templates/source/api/procedures/index.auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.auth.js","sourceRoot":"","sources":["../../../../../src/templates/source/api/procedures/index.auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/templates/source/api/procedures/index.default.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Procedure Exports
+ */
+export * from './health.js';
+export * from './users.js';
+//# sourceMappingURL=index.default.d.ts.map

package/dist/templates/source/api/procedures/index.default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.default.d.ts","sourceRoot":"","sources":["../../../../../src/templates/source/api/procedures/index.default.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/templates/source/api/procedures/index.default.js

@@ -0,0 +1,6 @@
+/**
+ * Procedure Exports
+ */
+export * from './health.js';
+export * from './users.js';
+//# sourceMappingURL=index.default.js.map

package/dist/templates/source/api/procedures/index.default.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.default.js","sourceRoot":"","sources":["../../../../../src/templates/source/api/procedures/index.default.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/templates/source/api/procedures/users.auth.d.ts

@@ -0,0 +1,7 @@
+/**
+ * User Procedures
+ *
+ * CRUD procedures for user management with authentication guards.
+ */
+export declare const userProcedures: any;
+//# sourceMappingURL=users.auth.d.ts.map

package/dist/templates/source/api/procedures/users.auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.auth.d.ts","sourceRoot":"","sources":["../../../../../src/templates/source/api/procedures/users.auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA6DH,eAAO,MAAM,cAAc,KAwGzB,CAAC"}

package/dist/templates/source/api/procedures/users.auth.js

@@ -0,0 +1,111 @@
+/**
+ * User Procedures
+ *
+ * CRUD procedures for user management with authentication guards.
+ */
+import { AuthError, authenticated, hasRole, defineProcedures, GuardError, procedure, paginationInputSchema, z, } from '@veloxts/velox';
+import { CreateUserInput, UpdateUserInput, UserSchema, } from '../schemas/user.js';
+function getDb(ctx) {
+    return ctx.db;
+}
+function toUserResponse(dbUser) {
+    return {
+        id: dbUser.id,
+        name: dbUser.name,
+        email: dbUser.email,
+        createdAt: dbUser.createdAt instanceof Date ? dbUser.createdAt.toISOString() : dbUser.createdAt,
+        updatedAt: dbUser.updatedAt instanceof Date ? dbUser.updatedAt.toISOString() : dbUser.updatedAt,
+    };
+}
+// ============================================================================
+// User Procedures
+// ============================================================================
+export const userProcedures = defineProcedures('users', {
+    getUser: procedure()
+        .input(z.object({ id: z.string().uuid() }))
+        .output(UserSchema.nullable())
+        .query(async ({ input, ctx }) => {
+        const db = getDb(ctx);
+        const user = await db.user.findUnique({ where: { id: input.id } });
+        return user ? toUserResponse(user) : null;
+    }),
+    listUsers: procedure()
+        .input(paginationInputSchema.optional())
+        .output(z.object({
+        data: z.array(UserSchema),
+        meta: z.object({
+            page: z.number(),
+            limit: z.number(),
+            total: z.number(),
+        }),
+    }))
+        .query(async ({ input, ctx }) => {
+        const db = getDb(ctx);
+        const page = input?.page ?? 1;
+        const limit = input?.limit ?? 10;
+        const skip = (page - 1) * limit;
+        const [dbUsers, total] = await Promise.all([
+            db.user.findMany({ skip, take: limit }),
+            db.user.count(),
+        ]);
+        return {
+            data: dbUsers.map(toUserResponse),
+            meta: { page, limit, total },
+        };
+    }),
+    createUser: procedure()
+        .guard(authenticated)
+        .input(CreateUserInput)
+        .output(UserSchema)
+        .mutation(async ({ input, ctx }) => {
+        const db = getDb(ctx);
+        const user = await db.user.create({ data: input });
+        return toUserResponse(user);
+    }),
+    updateUser: procedure()
+        .guard(authenticated)
+        .input(z.object({ id: z.string().uuid() }).merge(UpdateUserInput))
+        .output(UserSchema)
+        .mutation(async ({ input, ctx }) => {
+        const db = getDb(ctx);
+        const { id, ...data } = input;
+        if (!ctx.user) {
+            throw new AuthError('Authentication required', 401, 'NOT_AUTHENTICATED');
+        }
+        const isOwner = ctx.user.id === id;
+        const isAdmin = Array.isArray(ctx.user.roles) && ctx.user.roles.includes('admin');
+        if (!isOwner && !isAdmin) {
+            throw new GuardError('ownership', 'You can only update your own profile', 403);
+        }
+        const updated = await db.user.update({ where: { id }, data });
+        return toUserResponse(updated);
+    }),
+    patchUser: procedure()
+        .guard(authenticated)
+        .input(z.object({ id: z.string().uuid() }).merge(UpdateUserInput))
+        .output(UserSchema)
+        .mutation(async ({ input, ctx }) => {
+        const db = getDb(ctx);
+        const { id, ...data } = input;
+        if (!ctx.user) {
+            throw new AuthError('Authentication required', 401, 'NOT_AUTHENTICATED');
+        }
+        const isOwner = ctx.user.id === id;
+        const isAdmin = Array.isArray(ctx.user.roles) && ctx.user.roles.includes('admin');
+        if (!isOwner && !isAdmin) {
+            throw new GuardError('ownership', 'You can only update your own profile', 403);
+        }
+        const updated = await db.user.update({ where: { id }, data });
+        return toUserResponse(updated);
+    }),
+    deleteUser: procedure()
+        .guard(hasRole('admin'))
+        .input(z.object({ id: z.string().uuid() }))
+        .output(z.object({ success: z.boolean() }))
+        .mutation(async ({ input, ctx }) => {
+        const db = getDb(ctx);
+        await db.user.delete({ where: { id: input.id } });
+        return { success: true };
+    }),
+});
+//# sourceMappingURL=users.auth.js.map