ddd-ts-kit 0.14.0 → 0.15.0

package/templates/presets/identity/context/infrastructure/persistence/organisation.mapper.knex.ts.tpl

@@ -0,0 +1,26 @@
+import { Organisation } from '{{alias.context}}/domain/aggregates/organisation.aggregate{{alias.ext}}';
+import { OrganisationName } from '{{alias.context}}/domain/value-objects/organisation-name.vo{{alias.ext}}';
+import type {
+  OrganisationColumns,
+  OrganisationRow,
+} from '{{alias.context}}/infrastructure/persistence/organisation-row.schema{{alias.ext}}';
+
+export const OrganisationMapper = {
+  toDomain(row: OrganisationRow): Organisation {
+    const loaded = Organisation.rehydrate(row.id, {
+      name: OrganisationName.create(row.name),
+      openedBy: row.opened_by,
+      openedAt: row.opened_at,
+    });
+
+    loaded.version = row.version;
+
+    return loaded;
+  },
+
+  toRow(saved: Organisation): OrganisationColumns {
+    const state = saved.toState();
+
+    return { id: saved.id, name: state.name.value, opened_by: state.openedBy, opened_at: state.openedAt };
+  },
+};

package/templates/presets/identity/context/presentation/http/accounts/deactivate-account/deactivate-account.accepted.class-validator.per-route.ts.tpl

@@ -0,0 +1,6 @@
+import { IsString } from 'class-validator';
+
+export class DeactivateAccountAccepted {
+  @IsString()
+  id = '';
+}

package/templates/presets/identity/context/presentation/http/accounts/deactivate-account/deactivate-account.controller.ts.tpl

@@ -0,0 +1,71 @@
+{{#if validation.classValidator}}
+{{#if schemas.shared}}
+import { acceptedSchema, Controller, type Accepted, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+{{#if schemas.perRoute}}
+import { Controller, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+import type { CommandBus } from '@ddd-ts-kit/kernel';
+{{#if schemas.perRoute}}
+import { classSchema } from '@ddd-ts-kit/validation/class-validator';
+{{/if}}
+import { DeactivateAccountCommand } from '{{alias.context}}/application/commands/deactivate-account/deactivate-account.command{{alias.ext}}';
+{{#if schemas.perRoute}}
+import { DeactivateAccountAccepted } from '{{alias.context}}/presentation/http/accounts/deactivate-account/deactivate-account.accepted{{alias.ext}}';
+{{/if}}
+import { AccountsRoutes } from '{{alias.context}}/presentation/http/accounts.routes{{alias.ext}}';
+{{/if}}
+{{#if validation.zod}}
+{{#if schemas.perRoute}}
+import { z } from 'zod';
+{{/if}}
+{{#if schemas.shared}}
+import { acceptedSchema, Controller, type Accepted, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+{{#if schemas.perRoute}}
+import { Controller, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+import type { CommandBus } from '@ddd-ts-kit/kernel';
+{{#if schemas.perRoute}}
+import type { Infer } from '@ddd-ts-kit/validation';
+{{/if}}
+{{#if schemas.perRoute}}
+import { zodSchema } from '@ddd-ts-kit/validation/zod';
+{{/if}}
+import { DeactivateAccountCommand } from '{{alias.context}}/application/commands/deactivate-account/deactivate-account.command{{alias.ext}}';
+import { AccountsRoutes } from '{{alias.context}}/presentation/http/accounts.routes{{alias.ext}}';
+{{/if}}
+
+{{#if validation.classValidator}}
+{{#if schemas.perRoute}}
+const accepted = classSchema(DeactivateAccountAccepted);
+{{/if}}
+{{/if}}
+{{#if validation.zod}}
+{{#if schemas.perRoute}}
+const accepted = zodSchema(z.object({ id: z.string() }), { io: 'output' });
+{{/if}}
+{{/if}}
+
+@Controller({
+  group: AccountsRoutes,
+  method: 'POST',
+  path: '/me/deactivation',
+  summary: 'Deactivate my account',
+  response: { status: 200, description: 'The account is deactivated; the body carries its identifier.', body: {{#if schemas.shared}}acceptedSchema{{/if}}{{#if schemas.perRoute}}accepted{{/if}} },
+  errors: ['ACCOUNT_NOT_FOUND', 'ACCOUNT_ALREADY_DEACTIVATED', 'ORGANISATION_NOT_FOUND', 'LAST_OWNER'],
+})
+export class DeactivateAccountController {
+  constructor(private readonly commands: CommandBus) {}
+
+{{#if validation.classValidator}}
+  async handle(request: HttpRequest<object>): Promise<{{#if schemas.shared}}Accepted{{/if}}{{#if schemas.perRoute}}DeactivateAccountAccepted{{/if}}> {
+{{/if}}
+{{#if validation.zod}}
+  async handle(request: HttpRequest<object>): Promise<{{#if schemas.shared}}Accepted{{/if}}{{#if schemas.perRoute}}Infer<typeof accepted>{{/if}}> {
+{{/if}}
+    const id = await this.commands.execute(new DeactivateAccountCommand(request.actor));
+
+    return { id };
+  }
+}

package/templates/presets/identity/context/presentation/http/accounts/provision-account/provision-account.accepted.class-validator.per-route.ts.tpl

@@ -0,0 +1,6 @@
+import { IsString } from 'class-validator';
+
+export class ProvisionAccountAccepted {
+  @IsString()
+  id = '';
+}

package/templates/presets/identity/context/presentation/http/accounts/provision-account/provision-account.body.class-validator.ts.tpl

@@ -0,0 +1,9 @@
+import { IsNotEmpty, IsOptional, IsString } from 'class-validator';
+
+export class ProvisionAccountBody {
+  /** Left out, the name the token gives; the email address is always the one of the token. */
+  @IsOptional()
+  @IsString()
+  @IsNotEmpty()
+  displayName?: string;
+}

package/templates/presets/identity/context/presentation/http/accounts/provision-account/provision-account.controller.ts.tpl

@@ -0,0 +1,85 @@
+{{#if validation.classValidator}}
+{{#if schemas.shared}}
+import { acceptedSchema, Controller, type Accepted, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+{{#if schemas.perRoute}}
+import { Controller, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+import type { Actor, CommandBus } from '@ddd-ts-kit/kernel';
+import { classSchema } from '@ddd-ts-kit/validation/class-validator';
+import { ProvisionAccountCommand } from '{{alias.context}}/application/commands/provision-account/provision-account.command{{alias.ext}}';
+import { ProvisionAccountBody } from '{{alias.context}}/presentation/http/accounts/provision-account/provision-account.body{{alias.ext}}';
+{{#if schemas.perRoute}}
+import { ProvisionAccountAccepted } from '{{alias.context}}/presentation/http/accounts/provision-account/provision-account.accepted{{alias.ext}}';
+{{/if}}
+import { AccountsRoutes } from '{{alias.context}}/presentation/http/accounts.routes{{alias.ext}}';
+{{/if}}
+{{#if validation.zod}}
+import { z } from 'zod';
+{{#if schemas.shared}}
+import { acceptedSchema, Controller, type Accepted, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+{{#if schemas.perRoute}}
+import { Controller, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+import type { Actor, CommandBus } from '@ddd-ts-kit/kernel';
+import type { Infer } from '@ddd-ts-kit/validation';
+import { zodSchema } from '@ddd-ts-kit/validation/zod';
+import { ProvisionAccountCommand } from '{{alias.context}}/application/commands/provision-account/provision-account.command{{alias.ext}}';
+import { AccountsRoutes } from '{{alias.context}}/presentation/http/accounts.routes{{alias.ext}}';
+{{/if}}
+
+{{#if validation.classValidator}}
+const body = classSchema(ProvisionAccountBody);
+{{#if schemas.perRoute}}
+const accepted = classSchema(ProvisionAccountAccepted);
+{{/if}}
+{{/if}}
+{{#if validation.zod}}
+const body = zodSchema(
+  z.object({
+    displayName: z.string().min(1).optional(),
+  }),
+);
+
+{{#if schemas.perRoute}}
+const accepted = zodSchema(z.object({ id: z.string() }), { io: 'output' });
+{{/if}}
+{{/if}}
+
+@Controller({
+  group: AccountsRoutes,
+  method: 'PUT',
+  path: '/me',
+  summary: 'Provision my account',
+  body,
+  response: { status: 200, description: 'The account, provisioned or refreshed; the body carries its identifier.', body: {{#if schemas.shared}}acceptedSchema{{/if}}{{#if schemas.perRoute}}accepted{{/if}} },
+  errors: ['EMAIL_NOT_VERIFIED', 'INVALID_EMAIL_ADDRESS', 'INVALID_DISPLAY_NAME', 'ACCOUNT_DEACTIVATED'],
+})
+export class ProvisionAccountController {
+  constructor(private readonly commands: CommandBus) {}
+
+{{#if validation.classValidator}}
+  async handle(request: HttpRequest<{ body: ProvisionAccountBody }>): Promise<{{#if schemas.shared}}Accepted{{/if}}{{#if schemas.perRoute}}ProvisionAccountAccepted{{/if}}> {
+{{/if}}
+{{#if validation.zod}}
+  async handle(request: HttpRequest<{ body: Infer<typeof body> }>): Promise<{{#if schemas.shared}}Accepted{{/if}}{{#if schemas.perRoute}}Infer<typeof accepted>{{/if}}> {
+{{/if}}
+    const id = await this.commands.execute(new ProvisionAccountCommand(request.actor, profileOf(request.actor, request.body.displayName)));
+
+    return { id };
+  }
+}
+
+/**
+ * The token is the authority on who the person is: their address comes from it, never from the
+ * body, and with whether the provider verified it (`email_verified`), so that nobody accepts an
+ * invitation sent to someone else by registering their address unverified.
+ */
+function profileOf(actor: Actor, displayName: string | undefined): ProvisionAccountCommand['profile'] {
+  const { email, emailVerified, username } = actor.attributes;
+  const address = typeof email === 'string' ? email : '';
+  const named = displayName ?? (typeof username === 'string' ? username : address);
+
+  return { email: address, emailVerified: emailVerified === true, displayName: named };
+}

package/templates/presets/identity/context/presentation/http/accounts.routes.ts.tpl

@@ -0,0 +1,5 @@
+import { Authenticated, RouteGroup } from '@ddd-ts-kit/http';
+
+/** The account of the person who calls: every route is about the caller, named by their token. */
+@RouteGroup({ prefix: '/accounts', tags: ['{{context.kebab}}'], guards: [Authenticated], errors: ['FORBIDDEN'] })
+export class AccountsRoutes {}

package/templates/presets/identity/context/presentation/http/invitations/accept-invitation/accept-invitation.accepted.class-validator.per-route.ts.tpl

@@ -0,0 +1,6 @@
+import { IsString } from 'class-validator';
+
+export class AcceptInvitationAccepted {
+  @IsString()
+  id = '';
+}

package/templates/presets/identity/context/presentation/http/invitations/accept-invitation/accept-invitation.body.class-validator.per-route.ts.tpl

@@ -0,0 +1,8 @@
+import { IsNotEmpty, IsString } from 'class-validator';
+
+export class AcceptInvitationBody {
+  /** The token the invitation was sent with. */
+  @IsString()
+  @IsNotEmpty()
+  token = '';
+}

package/templates/presets/identity/context/presentation/http/invitations/accept-invitation/accept-invitation.controller.ts.tpl

@@ -0,0 +1,100 @@
+{{#if validation.classValidator}}
+{{#if schemas.shared}}
+import { acceptedSchema, Controller, type Accepted, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+{{#if schemas.perRoute}}
+import { Controller, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+import type { CommandBus } from '@ddd-ts-kit/kernel';
+import { classSchema } from '@ddd-ts-kit/validation/class-validator';
+import { AcceptInvitationCommand } from '{{alias.context}}/application/commands/accept-invitation/accept-invitation.command{{alias.ext}}';
+{{#if schemas.shared}}
+import { InvitationToken } from '{{alias.context}}/presentation/http/shared/invitation-token.schema{{alias.ext}}';
+{{/if}}
+{{#if schemas.perRoute}}
+import { AcceptInvitationBody } from '{{alias.context}}/presentation/http/invitations/accept-invitation/accept-invitation.body{{alias.ext}}';
+{{/if}}
+{{#if schemas.perRoute}}
+import { AcceptInvitationAccepted } from '{{alias.context}}/presentation/http/invitations/accept-invitation/accept-invitation.accepted{{alias.ext}}';
+{{/if}}
+import { InvitationsRoutes } from '{{alias.context}}/presentation/http/invitations.routes{{alias.ext}}';
+{{/if}}
+{{#if validation.zod}}
+{{#if schemas.perRoute}}
+import { z } from 'zod';
+{{/if}}
+{{#if schemas.shared}}
+import { acceptedSchema, Controller, type Accepted, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+{{#if schemas.perRoute}}
+import { Controller, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+import type { CommandBus } from '@ddd-ts-kit/kernel';
+import type { Infer } from '@ddd-ts-kit/validation';
+import { zodSchema } from '@ddd-ts-kit/validation/zod';
+import { AcceptInvitationCommand } from '{{alias.context}}/application/commands/accept-invitation/accept-invitation.command{{alias.ext}}';
+{{#if schemas.shared}}
+import { invitationTokenSchema } from '{{alias.context}}/presentation/http/shared/invitation-token.schema{{alias.ext}}';
+{{/if}}
+import { InvitationsRoutes } from '{{alias.context}}/presentation/http/invitations.routes{{alias.ext}}';
+{{/if}}
+
+{{#if validation.classValidator}}
+{{#if schemas.shared}}
+const body = classSchema(InvitationToken, { shared: true });
+{{/if}}
+{{#if schemas.perRoute}}
+const body = classSchema(AcceptInvitationBody);
+{{/if}}
+{{#if schemas.perRoute}}
+const accepted = classSchema(AcceptInvitationAccepted);
+{{/if}}
+{{/if}}
+{{#if validation.zod}}
+{{#if schemas.shared}}
+const body = zodSchema(invitationTokenSchema);
+{{/if}}
+{{#if schemas.perRoute}}
+const body = zodSchema(
+  z.object({
+    token: z.string().min(1),
+  }),
+);
+{{/if}}
+
+{{#if schemas.perRoute}}
+const accepted = zodSchema(z.object({ id: z.string() }), { io: 'output' });
+{{/if}}
+{{/if}}
+
+@Controller({
+  group: InvitationsRoutes,
+  method: 'POST',
+  path: '/acceptance',
+  summary: 'Accept an invitation',
+  body,
+  response: { status: 200, description: 'Accepted; the caller is a member, the body carries the identifier of the invitation.', body: {{#if schemas.shared}}acceptedSchema{{/if}}{{#if schemas.perRoute}}accepted{{/if}} },
+  errors: [
+    'INVITATION_NOT_FOUND',
+    'ACCOUNT_NOT_FOUND',
+    'ACCOUNT_DEACTIVATED',
+    'INVITATION_NOT_PENDING',
+    'INVITATION_EXPIRED',
+    'INVITATION_ADDRESSED_TO_ANOTHER',
+    'ALREADY_MEMBER',
+  ],
+})
+export class AcceptInvitationController {
+  constructor(private readonly commands: CommandBus) {}
+
+{{#if validation.classValidator}}
+  async handle(request: HttpRequest<{ body: {{#if schemas.shared}}InvitationToken{{/if}}{{#if schemas.perRoute}}AcceptInvitationBody{{/if}} }>): Promise<{{#if schemas.shared}}Accepted{{/if}}{{#if schemas.perRoute}}AcceptInvitationAccepted{{/if}}> {
+{{/if}}
+{{#if validation.zod}}
+  async handle(request: HttpRequest<{ body: Infer<typeof body> }>): Promise<{{#if schemas.shared}}Accepted{{/if}}{{#if schemas.perRoute}}Infer<typeof accepted>{{/if}}> {
+{{/if}}
+    const id = await this.commands.execute(new AcceptInvitationCommand(request.actor, request.body.token));
+
+    return { id };
+  }
+}

package/templates/presets/identity/context/presentation/http/invitations/decline-invitation/decline-invitation.accepted.class-validator.per-route.ts.tpl

@@ -0,0 +1,6 @@
+import { IsString } from 'class-validator';
+
+export class DeclineInvitationAccepted {
+  @IsString()
+  id = '';
+}

package/templates/presets/identity/context/presentation/http/invitations/decline-invitation/decline-invitation.body.class-validator.per-route.ts.tpl

@@ -0,0 +1,8 @@
+import { IsNotEmpty, IsString } from 'class-validator';
+
+export class DeclineInvitationBody {
+  /** The token the invitation was sent with. */
+  @IsString()
+  @IsNotEmpty()
+  token = '';
+}

package/templates/presets/identity/context/presentation/http/invitations/decline-invitation/decline-invitation.controller.ts.tpl

@@ -0,0 +1,98 @@
+{{#if validation.classValidator}}
+{{#if schemas.shared}}
+import { acceptedSchema, Controller, type Accepted, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+{{#if schemas.perRoute}}
+import { Controller, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+import type { CommandBus } from '@ddd-ts-kit/kernel';
+import { classSchema } from '@ddd-ts-kit/validation/class-validator';
+import { DeclineInvitationCommand } from '{{alias.context}}/application/commands/decline-invitation/decline-invitation.command{{alias.ext}}';
+{{#if schemas.shared}}
+import { InvitationToken } from '{{alias.context}}/presentation/http/shared/invitation-token.schema{{alias.ext}}';
+{{/if}}
+{{#if schemas.perRoute}}
+import { DeclineInvitationBody } from '{{alias.context}}/presentation/http/invitations/decline-invitation/decline-invitation.body{{alias.ext}}';
+{{/if}}
+{{#if schemas.perRoute}}
+import { DeclineInvitationAccepted } from '{{alias.context}}/presentation/http/invitations/decline-invitation/decline-invitation.accepted{{alias.ext}}';
+{{/if}}
+import { InvitationsRoutes } from '{{alias.context}}/presentation/http/invitations.routes{{alias.ext}}';
+{{/if}}
+{{#if validation.zod}}
+{{#if schemas.perRoute}}
+import { z } from 'zod';
+{{/if}}
+{{#if schemas.shared}}
+import { acceptedSchema, Controller, type Accepted, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+{{#if schemas.perRoute}}
+import { Controller, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+import type { CommandBus } from '@ddd-ts-kit/kernel';
+import type { Infer } from '@ddd-ts-kit/validation';
+import { zodSchema } from '@ddd-ts-kit/validation/zod';
+import { DeclineInvitationCommand } from '{{alias.context}}/application/commands/decline-invitation/decline-invitation.command{{alias.ext}}';
+{{#if schemas.shared}}
+import { invitationTokenSchema } from '{{alias.context}}/presentation/http/shared/invitation-token.schema{{alias.ext}}';
+{{/if}}
+import { InvitationsRoutes } from '{{alias.context}}/presentation/http/invitations.routes{{alias.ext}}';
+{{/if}}
+
+{{#if validation.classValidator}}
+{{#if schemas.shared}}
+const body = classSchema(InvitationToken, { shared: true });
+{{/if}}
+{{#if schemas.perRoute}}
+const body = classSchema(DeclineInvitationBody);
+{{/if}}
+{{#if schemas.perRoute}}
+const accepted = classSchema(DeclineInvitationAccepted);
+{{/if}}
+{{/if}}
+{{#if validation.zod}}
+{{#if schemas.shared}}
+const body = zodSchema(invitationTokenSchema);
+{{/if}}
+{{#if schemas.perRoute}}
+const body = zodSchema(
+  z.object({
+    token: z.string().min(1),
+  }),
+);
+{{/if}}
+
+{{#if schemas.perRoute}}
+const accepted = zodSchema(z.object({ id: z.string() }), { io: 'output' });
+{{/if}}
+{{/if}}
+
+@Controller({
+  group: InvitationsRoutes,
+  method: 'POST',
+  path: '/declination',
+  summary: 'Decline an invitation',
+  body,
+  response: { status: 200, description: 'Declined; the body carries the identifier of the invitation.', body: {{#if schemas.shared}}acceptedSchema{{/if}}{{#if schemas.perRoute}}accepted{{/if}} },
+  errors: [
+    'INVITATION_NOT_FOUND',
+    'ACCOUNT_NOT_FOUND',
+    'INVITATION_NOT_PENDING',
+    'INVITATION_EXPIRED',
+    'INVITATION_ADDRESSED_TO_ANOTHER',
+  ],
+})
+export class DeclineInvitationController {
+  constructor(private readonly commands: CommandBus) {}
+
+{{#if validation.classValidator}}
+  async handle(request: HttpRequest<{ body: {{#if schemas.shared}}InvitationToken{{/if}}{{#if schemas.perRoute}}DeclineInvitationBody{{/if}} }>): Promise<{{#if schemas.shared}}Accepted{{/if}}{{#if schemas.perRoute}}DeclineInvitationAccepted{{/if}}> {
+{{/if}}
+{{#if validation.zod}}
+  async handle(request: HttpRequest<{ body: Infer<typeof body> }>): Promise<{{#if schemas.shared}}Accepted{{/if}}{{#if schemas.perRoute}}Infer<typeof accepted>{{/if}}> {
+{{/if}}
+    const id = await this.commands.execute(new DeclineInvitationCommand(request.actor, request.body.token));
+
+    return { id };
+  }
+}

package/templates/presets/identity/context/presentation/http/invitations.routes.ts.tpl

@@ -0,0 +1,5 @@
+import { Authenticated, RouteGroup } from '@ddd-ts-kit/http';
+
+/** The answers of a person to an invitation sent to them, by its token. */
+@RouteGroup({ prefix: '/invitations', tags: ['{{context.kebab}}'], guards: [Authenticated], errors: ['FORBIDDEN'] })
+export class InvitationsRoutes {}

package/templates/presets/identity/context/presentation/http/organisations/change-member-role/change-member-role.accepted.class-validator.per-route.ts.tpl

@@ -0,0 +1,6 @@
+import { IsString } from 'class-validator';
+
+export class ChangeMemberRoleAccepted {
+  @IsString()
+  id = '';
+}

package/templates/presets/identity/context/presentation/http/organisations/change-member-role/change-member-role.body.class-validator.ts.tpl

@@ -0,0 +1,7 @@
+import { IsIn } from 'class-validator';
+import { MemberRole } from '{{alias.context}}/domain/vocabularies/member-role.vocabulary{{alias.ext}}';
+
+export class ChangeMemberRoleBody {
+  @IsIn(Object.values(MemberRole))
+  role: MemberRole = MemberRole.Member;
+}

package/templates/presets/identity/context/presentation/http/organisations/change-member-role/change-member-role.controller.ts.tpl

@@ -0,0 +1,83 @@
+{{#if validation.classValidator}}
+{{#if schemas.shared}}
+import { acceptedSchema, Controller, type Accepted, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+{{#if schemas.perRoute}}
+import { Controller, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+import type { CommandBus } from '@ddd-ts-kit/kernel';
+import { classSchema } from '@ddd-ts-kit/validation/class-validator';
+import { ChangeMemberRoleCommand } from '{{alias.context}}/application/commands/change-member-role/change-member-role.command{{alias.ext}}';
+import { ChangeMemberRoleParams } from '{{alias.context}}/presentation/http/organisations/change-member-role/change-member-role.params{{alias.ext}}';
+import { ChangeMemberRoleBody } from '{{alias.context}}/presentation/http/organisations/change-member-role/change-member-role.body{{alias.ext}}';
+{{#if schemas.perRoute}}
+import { ChangeMemberRoleAccepted } from '{{alias.context}}/presentation/http/organisations/change-member-role/change-member-role.accepted{{alias.ext}}';
+{{/if}}
+import { OrganisationsRoutes } from '{{alias.context}}/presentation/http/organisations.routes{{alias.ext}}';
+{{/if}}
+{{#if validation.zod}}
+import { z } from 'zod';
+{{#if schemas.shared}}
+import { acceptedSchema, Controller, type Accepted, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+{{#if schemas.perRoute}}
+import { Controller, type HttpRequest } from '@ddd-ts-kit/http';
+{{/if}}
+import type { CommandBus } from '@ddd-ts-kit/kernel';
+import type { Infer } from '@ddd-ts-kit/validation';
+import { zodSchema } from '@ddd-ts-kit/validation/zod';
+import { ChangeMemberRoleCommand } from '{{alias.context}}/application/commands/change-member-role/change-member-role.command{{alias.ext}}';
+import { MemberRole } from '{{alias.context}}/domain/vocabularies/member-role.vocabulary{{alias.ext}}';
+import { OrganisationsRoutes } from '{{alias.context}}/presentation/http/organisations.routes{{alias.ext}}';
+{{/if}}
+
+{{#if validation.classValidator}}
+const params = classSchema(ChangeMemberRoleParams);
+const body = classSchema(ChangeMemberRoleBody);
+{{#if schemas.perRoute}}
+const accepted = classSchema(ChangeMemberRoleAccepted);
+{{/if}}
+{{/if}}
+{{#if validation.zod}}
+const params = zodSchema(
+  z.object({
+    organisationId: z.string().min(1),
+    accountId: z.string().min(1),
+  }),
+);
+
+const body = zodSchema(
+  z.object({
+    role: z.enum(MemberRole),
+  }),
+);
+
+{{#if schemas.perRoute}}
+const accepted = zodSchema(z.object({ id: z.string() }), { io: 'output' });
+{{/if}}
+{{/if}}
+
+@Controller({
+  group: OrganisationsRoutes,
+  method: 'PUT',
+  path: '/:organisationId/members/:accountId/role',
+  summary: 'Change the role of a member',
+  params,
+  body,
+  response: { status: 200, description: 'Changed; the body carries the identifier of the membership.', body: {{#if schemas.shared}}acceptedSchema{{/if}}{{#if schemas.perRoute}}accepted{{/if}} },
+  errors: ['ORGANISATION_NOT_FOUND', 'MEMBER_NOT_FOUND', 'OWN_ROLE', 'ABOVE_OWN_ROLE', 'OWNERS_ONLY', 'LAST_OWNER'],
+})
+export class ChangeMemberRoleController {
+  constructor(private readonly commands: CommandBus) {}
+
+{{#if validation.classValidator}}
+  async handle(request: HttpRequest<{ params: ChangeMemberRoleParams; body: ChangeMemberRoleBody }>): Promise<{{#if schemas.shared}}Accepted{{/if}}{{#if schemas.perRoute}}ChangeMemberRoleAccepted{{/if}}> {
+{{/if}}
+{{#if validation.zod}}
+  async handle(request: HttpRequest<{ params: Infer<typeof params>; body: Infer<typeof body> }>): Promise<{{#if schemas.shared}}Accepted{{/if}}{{#if schemas.perRoute}}Infer<typeof accepted>{{/if}}> {
+{{/if}}
+    const id = await this.commands.execute(new ChangeMemberRoleCommand(request.actor, request.params.organisationId, request.params.accountId, request.body.role));
+
+    return { id };
+  }
+}

package/templates/presets/identity/context/presentation/http/organisations/change-member-role/change-member-role.params.class-validator.ts.tpl

@@ -0,0 +1,11 @@
+import { IsNotEmpty, IsString } from 'class-validator';
+
+export class ChangeMemberRoleParams {
+  @IsString()
+  @IsNotEmpty()
+  organisationId = '';
+
+  @IsString()
+  @IsNotEmpty()
+  accountId = '';
+}

package/templates/presets/identity/context/presentation/http/organisations/grant-delegation/grant-delegation.accepted.class-validator.per-route.ts.tpl

@@ -0,0 +1,6 @@
+import { IsString } from 'class-validator';
+
+export class GrantDelegationAccepted {
+  @IsString()
+  id = '';
+}

package/templates/presets/identity/context/presentation/http/organisations/grant-delegation/grant-delegation.body.class-validator.ts.tpl

@@ -0,0 +1,18 @@
+import { IsArray, IsISO8601, IsIn, IsNotEmpty, IsString } from 'class-validator';
+import { MemberRight } from '{{alias.context}}/domain/vocabularies/member-right.vocabulary{{alias.ext}}';
+
+export class GrantDelegationBody {
+  @IsString()
+  @IsNotEmpty()
+  delegateId = '';
+
+  @IsArray()
+  @IsIn(Object.values(MemberRight), { each: true })
+  rights: MemberRight[] = [];
+
+  @IsISO8601()
+  startsAt = '';
+
+  @IsISO8601()
+  endsAt = '';
+}