nestforge-generator 0.3.0 → 0.4.0

package/templates/drizzle/src/auth/auth.service.ts

@@ -60,7 +60,7 @@ export class AuthService {
 
     if (existing) {
       throw new ConflictException(
-        'E-mail já cadastrado',
+        'Email already registered',
       );
     }
 
@@ -103,7 +103,7 @@ export class AuthService {
 
     if (!user || !user.passwordHash) {
       throw new UnauthorizedException(
-        'Credenciais inválidas',
+        'Invalid credentials',
       );
     }
 
@@ -114,7 +114,7 @@ export class AuthService {
 
     if (!passwordMatches) {
       throw new UnauthorizedException(
-        'Credenciais inválidas',
+        'Invalid credentials',
       );
     }
 
@@ -206,7 +206,7 @@ export class AuthService {
 
     const genericResponse = {
       message:
-        'Se o e-mail existir, enviaremos instruções de redefinição de senha',
+        'If the email exists, password reset instructions will be sent',
     };
 
     if (!user) {
@@ -264,7 +264,7 @@ export class AuthService {
       stored.expiresAt < new Date()
     ) {
       throw new UnauthorizedException(
-        'Token de redefinição inválido ou expirado',
+        'Invalid or expired password reset token',
       );
     }
 
@@ -433,7 +433,7 @@ export class AuthService {
     // nestforge:feature:database:sqlite:end
 
     return {
-      message: 'Senha redefinida com sucesso',
+      message: 'Password reset successfully',
     };
   }
 
@@ -457,7 +457,7 @@ export class AuthService {
       stored.expiresAt < new Date()
     ) {
       throw new UnauthorizedException(
-        'Token de verificação inválido ou expirado',
+        'Invalid or expired verification token',
       );
     }
 
@@ -563,7 +563,7 @@ export class AuthService {
     // nestforge:feature:database:sqlite:end
 
     return {
-      message: 'E-mail verificado com sucesso',
+      message: 'Email verified successfully',
     };
   }
 
@@ -628,4 +628,4 @@ export class AuthService {
       .update(token)
       .digest('hex');
   }
-}
+}

package/templates/drizzle/src/auth/dto/forgot-password.dto.ts

@@ -3,7 +3,7 @@ import { z } from 'zod';
 import { createZodDto } from 'nestjs-zod';
 
 export const forgotPasswordSchema = z.object({
-    email: z.string().email().describe('E-mail da conta a ser recuperada'),
+    email: z.string().email().describe('Email of the account to recover'),
 });
 
-export class ForgotPasswordDto extends createZodDto(forgotPasswordSchema) { }
+export class ForgotPasswordDto extends createZodDto(forgotPasswordSchema) { }

package/templates/drizzle/src/auth/dto/login.dto.ts

@@ -3,8 +3,8 @@ import { z } from 'zod';
 import { createZodDto } from 'nestjs-zod';
 
 export const loginSchema = z.object({
-  email: z.string().email().describe('E-mail do usuário'),
-  password: z.string().min(8).describe('Senha'),
+  email: z.string().email().describe('User email'),
+  password: z.string().min(8).describe('Password'),
 });
 
-export class LoginDto extends createZodDto(loginSchema) { }
+export class LoginDto extends createZodDto(loginSchema) { }

package/templates/drizzle/src/auth/dto/register.dto.ts

@@ -3,9 +3,9 @@ import { z } from 'zod';
 import { createZodDto } from 'nestjs-zod';
 
 export const registerSchema = z.object({
-  name: z.string().min(2).describe('Nome completo do usuário'),
-  email: z.string().email().describe('E-mail do usuário'),
-  password: z.string().min(8).describe('Senha (mínimo 8 caracteres)'),
+  name: z.string().min(2).describe('User full name'),
+  email: z.string().email().describe('User email'),
+  password: z.string().min(8).describe('Password (minimum 8 characters)'),
 });
 
-export class RegisterDto extends createZodDto(registerSchema) { }
+export class RegisterDto extends createZodDto(registerSchema) { }

package/templates/drizzle/src/auth/dto/reset-password.dto.ts

@@ -3,8 +3,8 @@ import { z } from 'zod';
 import { createZodDto } from 'nestjs-zod';
 
 export const resetPasswordSchema = z.object({
-    token: z.string().describe('Token recebido por e-mail'),
-    password: z.string().min(8).describe('Nova senha (mínimo 8 caracteres)'),
+    token: z.string().describe('Token received by email'),
+    password: z.string().min(8).describe('New password (minimum 8 characters)'),
 });
 
-export class ResetPasswordDto extends createZodDto(resetPasswordSchema) { }
+export class ResetPasswordDto extends createZodDto(resetPasswordSchema) { }

package/templates/drizzle/src/auth/guards/github-auth.guard.ts

@@ -4,7 +4,7 @@ import { AuthGuard } from '@nestjs/passport';
 @Injectable()
 export class GithubAuthGuard extends AuthGuard('github') {
     constructor() {
-        // API stateless (Bearer token) — não usamos sessão do Passport/Express
+        // Stateless API (Bearer token) — Passport/Express sessions are not used.
         super({ session: false });
     }
-}
+}

package/templates/drizzle/src/auth/guards/google-auth.guard.ts

@@ -4,7 +4,7 @@ import { AuthGuard } from '@nestjs/passport';
 @Injectable()
 export class GoogleAuthGuard extends AuthGuard('google') {
     constructor() {
-        // API stateless (Bearer token) — não usamos sessão do Passport/Express
+        // Stateless API (Bearer token) — Passport/Express sessions are not used.
         super({ session: false });
     }
-}
+}

package/templates/drizzle/src/auth/guards/session-auth.guard.spec.ts

@@ -44,14 +44,14 @@ describe('SessionAuthGuard', () => {
         return { context, request };
     }
 
-    it('permite acesso a rotas públicas sem sessão', () => {
+    it('allows access to public routes without a session', () => {
         reflector.getAllAndOverride.mockReturnValue(true);
         const { context } = createContext();
 
         expect(guard.canActivate(context)).toBe(true);
     });
 
-    it('rejeita acesso quando não existe usuário na sessão', () => {
+    it('rejects access when the session has no user', () => {
         reflector.getAllAndOverride.mockReturnValue(false);
         const { context } = createContext();
 
@@ -60,7 +60,7 @@ describe('SessionAuthGuard', () => {
         );
     });
 
-    it('permite acesso e disponibiliza o usuário autenticado', () => {
+    it('allows access and exposes the authenticated user', () => {
         reflector.getAllAndOverride.mockReturnValue(false);
 
         const user = {
@@ -74,4 +74,4 @@ describe('SessionAuthGuard', () => {
         expect(guard.canActivate(context)).toBe(true);
         expect(request.user).toEqual(user);
     });
-});
+});

package/templates/drizzle/src/auth/guards/session-auth.guard.ts

@@ -27,11 +27,11 @@ export class SessionAuthGuard implements CanActivate {
         const user = request.session?.user;
 
         if (!user) {
-            throw new UnauthorizedException('Sessão inválida ou expirada');
+            throw new UnauthorizedException('Invalid or expired session');
         }
 
         request.user = user;
 
         return true;
     }
-}
+}

package/templates/drizzle/src/auth/session.service.spec.ts

@@ -31,7 +31,7 @@ describe('SessionService', () => {
         };
     }
 
-    it('regenera, preenche e salva a sessão', async () => {
+    it('regenerates, populates, and saves the session', async () => {
         const { request, session } = createRequest();
         const user: SessionUser = {
             id: 'user-1',
@@ -51,7 +51,7 @@ describe('SessionService', () => {
         });
     });
 
-    it('emite e salva um novo token CSRF', async () => {
+    it('issues and saves a new CSRF token', async () => {
         const { request, session } = createRequest();
 
         const result = await sessionService.issueCsrfToken(request);
@@ -61,14 +61,14 @@ describe('SessionService', () => {
         expect(session.save).toHaveBeenCalledOnce();
     });
 
-    it('destrói a sessão atual', async () => {
+    it('destroys the current session', async () => {
         const { request, session } = createRequest();
 
         const result = await sessionService.destroy(request);
 
         expect(session.destroy).toHaveBeenCalledOnce();
         expect(result).toEqual({
-            message: 'Logout realizado com sucesso',
+            message: 'Logout completed successfully',
         });
     });
-});
+});

package/templates/drizzle/src/auth/session.service.ts

@@ -47,7 +47,7 @@ export class SessionService {
                 if (error) {
                     reject(
                         new InternalServerErrorException(
-                            'Não foi possível encerrar a sessão',
+                            'Unable to end the session',
                         ),
                     );
                     return;
@@ -57,7 +57,7 @@ export class SessionService {
             });
         });
 
-        return { message: 'Logout realizado com sucesso' };
+        return { message: 'Logout completed successfully' };
     }
 
     private async regenerate(request: Request): Promise<void> {
@@ -66,7 +66,7 @@ export class SessionService {
                 if (error) {
                     reject(
                         new InternalServerErrorException(
-                            'Não foi possível iniciar a sessão',
+                            'Unable to start the session',
                         ),
                     );
                     return;
@@ -83,7 +83,7 @@ export class SessionService {
                 if (error) {
                     reject(
                         new InternalServerErrorException(
-                            'Não foi possível salvar a sessão',
+                            'Unable to save the session',
                         ),
                     );
                     return;
@@ -93,4 +93,4 @@ export class SessionService {
             });
         });
     }
-}
+}

package/templates/drizzle/src/auth/strategies/github.strategy.ts

@@ -25,7 +25,7 @@ export class GithubStrategy extends PassportStrategy(Strategy, 'github') {
         profile: Profile,
         done: (error: unknown, user?: OAuthProfile) => void,
     ) {
-        // o e-mail pode vir vazio se o usuário deixou o e-mail privado no GitHub
+        // The email may be missing when the user keeps it private on GitHub.
         const email =
             profile.emails?.[0]?.value ?? `${profile.username}@users.noreply.github.com`;
 
@@ -33,9 +33,9 @@ export class GithubStrategy extends PassportStrategy(Strategy, 'github') {
             provider: 'github',
             providerUserId: profile.id,
             email,
-            name: profile.displayName || profile.username || 'Usuário GitHub',
+            name: profile.displayName || profile.username || 'GitHub User',
         };
 
         done(null, oauthProfile);
     }
-}
+}

package/templates/drizzle/src/auth/token.service.ts

@@ -120,7 +120,7 @@ export class TokenService {
             stored.expiresAt < new Date()
         ) {
             throw new UnauthorizedException(
-                'Refresh token inválido ou expirado',
+                'Invalid or expired refresh token',
             );
         }
 
@@ -163,7 +163,7 @@ export class TokenService {
             );
 
         return {
-            message: 'Logout realizado com sucesso',
+            message: 'Logout completed successfully',
         };
     }
 
@@ -172,4 +172,4 @@ export class TokenService {
             .update(token)
             .digest('hex');
     }
-}
+}

package/templates/drizzle/src/common/filters/http-exception.filter.ts

@@ -22,7 +22,7 @@ export class HttpExceptionFilter implements ExceptionFilter {
     const message =
       exception instanceof HttpException
         ? exception.getResponse()
-        : 'Erro interno do servidor';
+        : 'Internal server error';
 
     response.status(status).json({
       statusCode: status,

package/templates/drizzle/src/common/guards/permissions.guard.spec.ts

@@ -15,14 +15,14 @@ function createContext(user?: { role: Role }): ExecutionContext {
 }
 
 describe('PermissionsGuard', () => {
-    it('libera acesso quando a rota não exige nenhuma permissão', () => {
+    it('allows access when the route requires no permission', () => {
         const reflector = { getAllAndOverride: vi.fn().mockReturnValue(undefined) } as unknown as Reflector;
         const guard = new PermissionsGuard(reflector);
 
         expect(guard.canActivate(createContext({ role: Role.USER }))).toBe(true);
     });
 
-    it('libera acesso quando a role do usuário tem a permissão exigida', () => {
+    it('allows access when the user role has the required permission', () => {
         const reflector = {
             getAllAndOverride: vi.fn().mockReturnValue([Permission.UserRead]),
         } as unknown as Reflector;
@@ -31,7 +31,7 @@ describe('PermissionsGuard', () => {
         expect(guard.canActivate(createContext({ role: Role.USER }))).toBe(true);
     });
 
-    it('bloqueia acesso quando a role do usuário não tem a permissão exigida', () => {
+    it('blocks access when the user role lacks the required permission', () => {
         const reflector = {
             getAllAndOverride: vi.fn().mockReturnValue([Permission.UserDelete]),
         } as unknown as Reflector;
@@ -40,15 +40,15 @@ describe('PermissionsGuard', () => {
         expect(guard.canActivate(createContext({ role: Role.USER }))).toBe(false);
     });
 
-    it('exige todas as permissões quando mais de uma é requisitada', () => {
+    it('requires all permissions when more than one is requested', () => {
         const reflector = {
             getAllAndOverride: vi.fn().mockReturnValue([Permission.UserRead, Permission.UserUpdate]),
         } as unknown as Reflector;
         const guard = new PermissionsGuard(reflector);
 
-        // MANAGER tem user:read e user:update
+        // MANAGER has user:read and user:update
         expect(guard.canActivate(createContext({ role: Role.MANAGER }))).toBe(true);
-        // USER só tem user:read
+        // USER only has user:read
         expect(guard.canActivate(createContext({ role: Role.USER }))).toBe(false);
     });
-});
+});

package/templates/drizzle/src/common/guards/roles.guard.spec.ts

@@ -14,24 +14,24 @@ function createContext(user?: { role: Role }): ExecutionContext {
 }
 
 describe('RolesGuard', () => {
-    it('libera acesso quando a rota não exige nenhuma role', () => {
+    it('allows access when the route requires no role', () => {
         const reflector = { getAllAndOverride: vi.fn().mockReturnValue(undefined) } as unknown as Reflector;
         const guard = new RolesGuard(reflector);
 
         expect(guard.canActivate(createContext({ role: Role.USER }))).toBe(true);
     });
 
-    it('libera acesso quando o usuário tem a role exigida', () => {
+    it('allows access when the user has the required role', () => {
         const reflector = { getAllAndOverride: vi.fn().mockReturnValue([Role.ADMIN]) } as unknown as Reflector;
         const guard = new RolesGuard(reflector);
 
         expect(guard.canActivate(createContext({ role: Role.ADMIN }))).toBe(true);
     });
 
-    it('bloqueia acesso quando o usuário não tem a role exigida', () => {
+    it('blocks access when the user does not have the required role', () => {
         const reflector = { getAllAndOverride: vi.fn().mockReturnValue([Role.ADMIN]) } as unknown as Reflector;
         const guard = new RolesGuard(reflector);
 
         expect(guard.canActivate(createContext({ role: Role.USER }))).toBe(false);
     });
-});
+});

package/templates/drizzle/src/common/middleware/csrf.middleware.spec.ts

@@ -36,7 +36,7 @@ describe('CsrfMiddleware', () => {
     }
 
     it.each(['GET', 'HEAD', 'OPTIONS'])(
-        'permite o método seguro %s sem token',
+        'allows the safe %s method without a token',
         (method) => {
             const request = createRequest(method);
 
@@ -50,7 +50,7 @@ describe('CsrfMiddleware', () => {
         },
     );
 
-    it('rejeita uma requisição sem token CSRF', () => {
+    it('rejects a request without a CSRF token', () => {
         const request = createRequest('POST');
 
         expect(() =>
@@ -64,7 +64,7 @@ describe('CsrfMiddleware', () => {
         expect(next).not.toHaveBeenCalled();
     });
 
-    it('rejeita quando o token do header é diferente da sessão', () => {
+    it('rejects when the header token differs from the session token', () => {
         const request = createRequest(
             'PATCH',
             'session-token',
@@ -82,7 +82,7 @@ describe('CsrfMiddleware', () => {
         expect(next).not.toHaveBeenCalled();
     });
 
-    it('permite quando o token corresponde ao valor da sessão', () => {
+    it('allows the request when the token matches the session value', () => {
         const token = 'a'.repeat(64);
         const request = createRequest('DELETE', token, token);
 
@@ -94,4 +94,4 @@ describe('CsrfMiddleware', () => {
 
         expect(next).toHaveBeenCalledOnce();
     });
-});
+});

package/templates/drizzle/src/common/middleware/csrf.middleware.ts

@@ -27,7 +27,7 @@ export class CsrfMiddleware implements NestMiddleware {
             !this.tokensMatch(sessionToken, headerToken)
         ) {
             throw new ForbiddenException(
-                'Token CSRF inválido ou ausente',
+                'Invalid or missing CSRF token',
             );
         }
 
@@ -43,4 +43,4 @@ export class CsrfMiddleware implements NestMiddleware {
             timingSafeEqual(expectedBuffer, receivedBuffer)
         );
     }
-}
+}

package/templates/drizzle/src/common/utils/avatar-storage.util.ts

@@ -20,7 +20,7 @@ export function avatarFileFilter(
 ) {
     if (!ALLOWED_MIME_TYPES.includes(file.mimetype)) {
         callback(
-            new BadRequestException('Formato de imagem não suportado (use PNG, JPEG ou WEBP)'),
+            new BadRequestException('Unsupported image format (use PNG, JPEG, or WEBP)'),
             false,
         );
         return;
@@ -29,4 +29,4 @@ export function avatarFileFilter(
     callback(null, true);
 }
 
-export const AVATAR_MAX_SIZE_BYTES = 2 * 1024 * 1024; // 2MB
+export const AVATAR_MAX_SIZE_BYTES = 2 * 1024 * 1024; // 2MB

package/templates/drizzle/src/config/env.validation.ts

@@ -43,7 +43,7 @@ export function validateEnv(config: Record<string, unknown>): EnvConfig {
     const issues = parsed.error.issues
       .map((issue) => `${issue.path.join('.')}: ${issue.message}`)
       .join('\n');
-    throw new Error(`Variáveis de ambiente inválidas:\n${issues}`);
+    throw new Error(`Invalid environment variables:\n${issues}`);
   }
 
   return parsed.data;

package/templates/drizzle/src/database/seed.ts

@@ -46,7 +46,7 @@ const SEED_USERS: SeedUser[] = [
         role: Role.MANAGER,
     },
     {
-        name: 'Usuário',
+        name: 'User',
         email: 'user@nestforge.dev',
         password: 'user1234',
         role: Role.USER,
@@ -57,7 +57,7 @@ const databaseUrl = process.env.DATABASE_URL;
 
 if (!databaseUrl) {
     throw new Error(
-        'DATABASE_URL não foi definida',
+        'DATABASE_URL is not defined',
     );
 }
 
@@ -144,9 +144,9 @@ async function seed(): Promise<void> {
 
 seed().catch((error: unknown) => {
     console.error(
-        'Erro ao executar o seed:',
+        'Error while running the seed:',
         error,
     );
 
     process.exitCode = 1;
-});
+});

package/templates/drizzle/src/health/health.controller.ts

@@ -33,7 +33,7 @@ export class HealthController {
     @Get()
     @HealthCheck()
     // nestforge:feature:swagger
-    @ApiOperation({ summary: 'Verifica a saúde da API (banco, memória, disco e demais dependências configuradas)' })
+    @ApiOperation({ summary: 'Checks API health (database, memory, disk, and other configured dependencies)' })
     // nestforge:feature:swagger:end
     check() {
         return this.health.check([
@@ -46,4 +46,4 @@ export class HealthController {
             () => this.disk.checkStorage('disk', { path: '/', thresholdPercent: 0.9 }),
         ]);
     }
-}
+}

package/templates/drizzle/src/health/indicators/drizzle-health.indicator.spec.ts

@@ -9,7 +9,7 @@ import type { DatabaseClient } from '../../database/database.types';
 import { DrizzleHealthIndicator } from './drizzle-health.indicator';
 
 describe('DrizzleHealthIndicator', () => {
-    it('retorna status up quando a consulta executa com sucesso', async () => {
+    it('returns an up status when the database query succeeds', async () => {
         const get = vi.fn().mockReturnValue({
             result: 1,
         });
@@ -41,16 +41,16 @@ describe('DrizzleHealthIndicator', () => {
         });
     });
 
-    it('lança HealthCheckError quando a consulta falha', async () => {
+    it('throws HealthCheckError when the database query fails', async () => {
         const get = vi.fn(() => {
-            throw new Error('conexão recusada');
+            throw new Error('connection refused');
         });
 
         const databaseClient = {
             query: vi
                 .fn()
                 .mockRejectedValue(
-                    new Error('conexão recusada'),
+                    new Error('connection refused'),
                 ),
             prepare: vi.fn(() => ({
                 get,
@@ -68,4 +68,4 @@ describe('DrizzleHealthIndicator', () => {
             HealthCheckError,
         );
     });
-});
+});

package/templates/drizzle/src/health/indicators/drizzle-health.indicator.ts

@@ -39,7 +39,7 @@ export class DrizzleHealthIndicator {
             };
         } catch (error) {
             throw new HealthCheckError(
-                'Banco de dados indisponível',
+                'Database unavailable',
                 {
                     [key]: {
                         status: 'down',
@@ -49,4 +49,4 @@ export class DrizzleHealthIndicator {
             );
         }
     }
-}
+}

package/templates/drizzle/src/health/indicators/redis-health.indicator.spec.ts

@@ -14,7 +14,7 @@ vi.mock('ioredis', () => ({
     })),
 }));
 
-// precisa ser importado depois do vi.mock, senão pega o ioredis real
+// Must be imported after vi.mock; otherwise it loads the real ioredis package.
 const { RedisHealthIndicator } = await import('./redis-health.indicator');
 
 describe('RedisHealthIndicator', () => {
@@ -24,7 +24,7 @@ describe('RedisHealthIndicator', () => {
         disconnectMock.mockReset();
     });
 
-    it('retorna status up quando o PING responde PONG', async () => {
+    it('returns an up status when PING returns PONG', async () => {
         connectMock.mockResolvedValue(undefined);
         pingMock.mockResolvedValue('PONG');
 
@@ -35,7 +35,7 @@ describe('RedisHealthIndicator', () => {
         expect(disconnectMock).toHaveBeenCalled();
     });
 
-    it('lança HealthCheckError quando o PING não responde PONG', async () => {
+    it('throws HealthCheckError when PING does not return PONG', async () => {
         connectMock.mockResolvedValue(undefined);
         pingMock.mockResolvedValue('ALGO_INESPERADO');
 
@@ -44,11 +44,11 @@ describe('RedisHealthIndicator', () => {
         await expect(indicator.isHealthy('redis')).rejects.toBeInstanceOf(HealthCheckError);
     });
 
-    it('lança HealthCheckError quando a conexão falha', async () => {
+    it('throws HealthCheckError when the connection fails', async () => {
         connectMock.mockRejectedValue(new Error('ECONNREFUSED'));
 
         const indicator = new RedisHealthIndicator();
 
         await expect(indicator.isHealthy('redis')).rejects.toBeInstanceOf(HealthCheckError);
     });
-});
+});

package/templates/drizzle/src/health/indicators/redis-health.indicator.ts

@@ -18,16 +18,16 @@ export class RedisHealthIndicator {
             const response = await client.ping();
 
             if (response !== 'PONG') {
-                throw new Error('Resposta inesperada do Redis');
+                throw new Error('Unexpected Redis response');
             }
 
             return { [key]: { status: 'up' } };
         } catch (error) {
-            throw new HealthCheckError('Redis indisponível', {
+            throw new HealthCheckError('Redis unavailable', {
                 [key]: { status: 'down', message: (error as Error).message },
             });
         } finally {
             client.disconnect();
         }
     }
-}
+}