create-velox-app 0.6.96 → 0.6.98

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # create-velox-app
 
+## 0.6.98
+
+### Patch Changes
+
+- feat(router): nested resource schema relations with .hasOne() / .hasMany()
+
+## 0.6.97
+
+### Patch Changes
+
+- sync zod dependency version
+
 ## 0.6.96
 
 ### Patch Changes

package/dist/templates/auth.js

@@ -56,6 +56,9 @@ function generateRoutesTs() {
 function generateConfigDatabase(config) {
     return compileTemplate('api/config/database.ts', config);
 }
+function generateProfileProcedures() {
+    return compileTemplate('api/procedures/profiles.auth.ts', AUTH_CONFIG);
+}
 function generateHealthProcedures() {
     return compileTemplate('api/procedures/health.ts', AUTH_CONFIG);
 }
@@ -101,6 +104,7 @@ export function generateAuthTemplate(config) {
         { path: 'apps/api/src/procedures/health.ts', content: generateHealthProcedures() },
         { path: 'apps/api/src/procedures/auth.ts', content: generateAuthProcedures() },
         { path: 'apps/api/src/procedures/users.ts', content: generateUserProceduresWithAuth() },
+        { path: 'apps/api/src/procedures/profiles.ts', content: generateProfileProcedures() },
         { path: 'apps/api/src/schemas/user.ts', content: generateUserSchema() },
         { path: 'apps/api/src/schemas/auth.ts', content: generateAuthSchema() },
         { path: 'apps/api/src/schemas/health.ts', content: generateHealthSchema() },

package/dist/templates/rsc-auth.js

@@ -125,6 +125,9 @@ function generateUserProcedures() {
 function generateAuthProcedures() {
     return compileTemplate('rsc-auth/src/api/procedures/auth.ts', RSC_CONFIG);
 }
+function generateProfileProcedures() {
+    return compileTemplate('rsc-auth/src/api/procedures/profiles.ts', RSC_CONFIG);
+}
 // Schemas
 function generateUserSchemas() {
     return compileTemplate('rsc-auth/src/api/schemas/user.ts', RSC_CONFIG);
@@ -186,6 +189,7 @@ export function generateRscAuthTemplate(config) {
         { path: 'src/api/procedures/health.ts', content: generateHealthProcedures() },
         { path: 'src/api/procedures/users.ts', content: generateUserProcedures() },
         { path: 'src/api/procedures/auth.ts', content: generateAuthProcedures() },
+        { path: 'src/api/procedures/profiles.ts', content: generateProfileProcedures() },
         { path: 'src/api/schemas/user.ts', content: generateUserSchemas() },
         { path: 'src/api/schemas/auth.ts', content: generateAuthSchemas() },
         { path: 'src/api/utils/auth.ts', content: generateAuthUtils() },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-velox-app",
-  "version": "0.6.96",
+  "version": "0.6.98",
   "description": "Project scaffolder for VeloxTS framework",
   "type": "module",
   "main": "dist/index.js",

package/src/templates/source/api/procedures/profiles.auth.ts

@@ -0,0 +1,59 @@
+/**
+ * Profile Procedures (Resource API Example)
+ *
+ * Demonstrates field-level visibility using tagged resource schemas:
+ * - Public: GET /api/profiles/:id → { id, name }
+ *     Uses handler-level projection: resource(data, Schema.public)
+ * - Authenticated: GET /api/profiles/:id/full → { id, name, email }
+ *     Uses procedure-level auto-projection: .resource(Schema.authenticated)
+ */
+
+import {
+  authenticatedNarrow,
+  NotFoundError,
+  procedure,
+  procedures,
+  resource,
+  resourceSchema,
+  z,
+} from '@veloxts/velox';
+
+// ============================================================================
+// Resource Schema (field-level visibility)
+// ============================================================================
+
+const UserProfileSchema = resourceSchema()
+  .public('id', z.string().uuid())
+  .public('name', z.string())
+  .authenticated('email', z.string().email())
+  .build();
+
+// ============================================================================
+// Profile Procedures
+// ============================================================================
+
+export const profileProcedures = procedures('profiles', {
+  // Public: GET /api/profiles/:id → { id, name }
+  // Handler-level projection: resource(data, Schema.public) returns projected data directly
+  getProfile: procedure()
+    .input(z.object({ id: z.string().uuid() }))
+    .resource(UserProfileSchema.public)
+    .query(async ({ input, ctx }) => {
+      const user = await ctx.db.user.findUnique({ where: { id: input.id } });
+      if (!user) throw new NotFoundError(`User '${input.id}' not found`);
+      return resource(user, UserProfileSchema.public);
+    }),
+
+  // Authenticated: GET /api/profiles/:id/full → { id, name, email }
+  // Procedure-level auto-projection: .resource(Schema.authenticated) auto-projects the return value
+  getFullProfile: procedure()
+    .rest({ method: 'GET', path: '/profiles/:id/full' })
+    .guardNarrow(authenticatedNarrow)
+    .input(z.object({ id: z.string().uuid() }))
+    .resource(UserProfileSchema.authenticated)
+    .query(async ({ input, ctx }) => {
+      const user = await ctx.db.user.findUnique({ where: { id: input.id } });
+      if (!user) throw new NotFoundError(`User '${input.id}' not found`);
+      return user;
+    }),
+});

package/src/templates/source/api/router.auth.ts

@@ -18,13 +18,15 @@ import { createRouter, extractRoutes } from '@veloxts/velox';
 
 import { authProcedures } from './procedures/auth.js';
 import { healthProcedures } from './procedures/health.js';
+import { profileProcedures } from './procedures/profiles.js';
 import { userProcedures } from './procedures/users.js';
 
 // Create router and collections from procedure definitions
 export const { collections, router } = createRouter(
   healthProcedures,
   authProcedures,
-  userProcedures
+  userProcedures,
+  profileProcedures
 );
 
 export type AppRouter = typeof router;

package/src/templates/source/api/routes.auth.ts

@@ -34,4 +34,8 @@ export const routes: RouteMap = {
     patchUser: { method: 'PATCH', path: '/users/:id', kind: 'mutation' },
     deleteUser: { method: 'DELETE', path: '/users/:id', kind: 'mutation' },
   },
+  profiles: {
+    getProfile: { method: 'GET', path: '/profiles/:id', kind: 'query' },
+    getFullProfile: { method: 'GET', path: '/profiles/:id/full', kind: 'query' },
+  },
 };

package/src/templates/source/rsc-auth/src/api/handler.ts

@@ -15,11 +15,17 @@ import { createH3ApiHandler } from '@veloxts/web/adapters';
 import { db } from './database.js';
 import { authProcedures } from './procedures/auth.js';
 import { healthProcedures } from './procedures/health.js';
+import { profileProcedures } from './procedures/profiles.js';
 import { userProcedures } from './procedures/users.js';
 import { getJwtSecrets, parseUserRoles, tokenStore } from './utils/auth.js';
 
 // Export router type for frontend type safety
-const router = { health: healthProcedures, users: userProcedures, auth: authProcedures };
+const router = {
+  health: healthProcedures,
+  users: userProcedures,
+  auth: authProcedures,
+  profiles: profileProcedures,
+};
 export type AppRouter = typeof router;
 
 /**
@@ -74,7 +80,7 @@ export default createH3ApiHandler({
 
     // Register REST routes from procedures
     app.routes(
-      rest([healthProcedures, userProcedures, authProcedures], {
+      rest([healthProcedures, userProcedures, authProcedures, profileProcedures], {
         prefix: '', // No prefix - Vinxi handles /api/*
       })
     );

package/src/templates/source/rsc-auth/src/api/procedures/profiles.ts

@@ -0,0 +1,59 @@
+/**
+ * Profile Procedures (Resource API Example)
+ *
+ * Demonstrates field-level visibility using tagged resource schemas:
+ * - Public: GET /api/profiles/:id → { id, name }
+ *     Uses handler-level projection: resource(data, Schema.public)
+ * - Authenticated: GET /api/profiles/:id/full → { id, name, email }
+ *     Uses procedure-level auto-projection: .resource(Schema.authenticated)
+ */
+
+import { authenticatedNarrow } from '@veloxts/auth';
+import { procedure, procedures, resource, resourceSchema } from '@veloxts/router';
+import { z } from 'zod';
+
+import { db } from '../database.js';
+
+// ============================================================================
+// Resource Schema (field-level visibility)
+// ============================================================================
+
+const UserProfileSchema = resourceSchema()
+  .public('id', z.string().uuid())
+  .public('name', z.string())
+  .authenticated('email', z.string().email())
+  .build();
+
+// ============================================================================
+// Profile Procedures
+// ============================================================================
+
+export const profileProcedures = procedures('profiles', {
+  // Public: GET /api/profiles/:id → { id, name }
+  // Handler-level projection: resource(data, Schema.public) returns projected data directly
+  getProfile: procedure()
+    .input(z.object({ id: z.string().uuid() }))
+    .resource(UserProfileSchema.public)
+    .query(async ({ input }) => {
+      const user = await db.user.findUnique({ where: { id: input.id } });
+      if (!user) {
+        throw Object.assign(new Error('User not found'), { statusCode: 404 });
+      }
+      return resource(user, UserProfileSchema.public);
+    }),
+
+  // Authenticated: GET /api/profiles/:id/full → { id, name, email }
+  // Procedure-level auto-projection: .resource(Schema.authenticated) auto-projects the return value
+  getFullProfile: procedure()
+    .rest({ method: 'GET', path: '/profiles/:id/full' })
+    .guardNarrow(authenticatedNarrow)
+    .input(z.object({ id: z.string().uuid() }))
+    .resource(UserProfileSchema.authenticated)
+    .query(async ({ input }) => {
+      const user = await db.user.findUnique({ where: { id: input.id } });
+      if (!user) {
+        throw Object.assign(new Error('User not found'), { statusCode: 404 });
+      }
+      return user;
+    }),
+});