schematic-pg 0.1.14 → 0.1.16

package/dist/cli/generate.js

@@ -1,4 +1,4 @@
-import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { mkdir, readdir, readFile, unlink, writeFile } from 'node:fs/promises';
 import path from 'node:path';
 import { parse } from '../schema-dsl/index.js';
 import { generateApiFiles } from '../api-generator/index.js';
@@ -38,10 +38,17 @@ export async function generateApi(schemaPath) {
     await writeFile(path.join(schemasDir, 'validation.ts'), files.validation, 'utf8');
     await writeFile(path.join(outputDir, 'openapi.ts'), files.openapiTs, 'utf8');
     await writeFile(path.join(outputDir, 'openapi.json'), files.openapiJson, 'utf8');
-    for (const [fileName, content] of files.routes) {
+    await syncGeneratedRouteFiles(routesDir, files.routes);
+    console.log(`Generated API files in ${outputDir}`);
+}
+export async function syncGeneratedRouteFiles(routesDir, routes) {
+    for (const [fileName, content] of routes) {
         await writeFile(path.join(routesDir, fileName), content, 'utf8');
     }
-    console.log(`Generated API files in ${outputDir}`);
+    const existing = await readdir(routesDir);
+    await Promise.all(existing
+        .filter((fileName) => fileName.endsWith('.ts') && !routes.has(fileName))
+        .map((fileName) => unlink(path.join(routesDir, fileName))));
 }
 export async function generateAll(schemaPath) {
     const resolvedSchemaPath = resolveSchemaPath(schemaPath);

package/dist/cli/templates/agents.md

@@ -77,7 +77,8 @@ models {
 
     orders: Order[]
 
-    @policy(role: USER, allow: [select, update], where: "id = {{auth.user.id}}")
+    @rest(except: [create, update, delete])
+    @policy(role: USER, allow: [select], where: "id = {{auth.user.id}}")
     @policy(role: ADMIN, allow: all)
 
     @@index(fields: [role])
@@ -93,6 +94,7 @@ models {
 **Key concepts:**
 
 - **Relations:** Put `@relation(fields: [...], references: [...])` on the FK-owning side. The inverse side is inferred.
+- **REST surface:** `@rest(only: [...])`, `@rest(except: [...])`, or `@rest(false)` controls which CRUD handlers are generated (`list`/`get`/`create`/`update`/`delete`).
 - **Policies:** `@policy(role: ..., allow: [select|insert|update|delete|all], where: "...")` — `where` supports `{{auth.user.id}}`.
 - **Validation:** `@regex(...)`, `@range(min: ..., max: ...)` flow into generated Zod schemas.
 - **Indexes / triggers:** `@@index(...)`, `@@trigger { timing, event, level, execute: """...""" }`.
@@ -225,8 +227,9 @@ Also available: `ForeignKeyConstraintError`, `DatabaseError`.
 | Location | `src/routes/**/*.ts` |
 | Export | `export default router` (`Hono<AppEnv>`) |
 | Mount path | File path relative to `src/routes/` |
+| Same-path overlay | `src/routes/users.ts` merges into `generated/routes/users.ts` |
 
-`src/routes/health.ts` → `GET /health`. Regenerate after adding files.
+`src/routes/health.ts` → `GET /health` (standalone). When the file name matches a model route (`users.ts`), it is imported into the generated model router after remaining `@rest` handlers. Regenerate after adding files.
 
 ```typescript
 import { Hono } from 'hono';
@@ -276,6 +279,7 @@ schematic-pg hooks:add [--model X]   # scaffold src/hooks/{Model}.ts
 - Unauthenticated requests default to `{ role: 'PUBLIC' }`.
 - `@policy` `allow` maps to HTTP: GET→select, POST→insert, PUT→update, DELETE→delete.
 - Row-level `where` is injected on read/update/delete; POST checks permission only.
+- `@rest` controls which handlers exist; disabled methods return `404` and are omitted from OpenAPI.
 
 ## Generated Outputs (Read-Only)
 

package/dist/cli/templates.d.ts

@@ -1,5 +1,5 @@
 export declare const AGENTS_TEMPLATE: string;
-export declare const APP_SCHEMA_TEMPLATE = "extensions {\n\n}\n\nenums {\n  UserRole { ADMIN, USER }\n}\n\nmodels {\n  model User {\n    id:           UUID         @id @default(gen_random_uuid())\n    email:        VARCHAR(255) @unique @regex(pattern: \"^[\\w.-]+@[\\w.-]+\\.\\w+$\", message: \"Invalid email address\")\n    name:         VARCHAR(150)?\n    role:         UserRole     @default(USER)\n    passwordHash: VARCHAR(255)? @omit @unfilterable\n    createdAt:    TIMESTAMP    @default(now())\n\n    @policy(role: USER, allow: [select, update], where: \"id = {{auth.user.id}}\")\n    @policy(role: ADMIN, allow: all)\n  }\n}\n";
+export declare const APP_SCHEMA_TEMPLATE = "extensions {\n\n}\n\nenums {\n  UserRole { ADMIN, USER }\n}\n\nmodels {\n  model User {\n    id:           UUID         @id @default(gen_random_uuid())\n    email:        VARCHAR(255) @unique @regex(pattern: \"^[\\w.-]+@[\\w.-]+\\.\\w+$\", message: \"Invalid email address\")\n    name:         VARCHAR(150)?\n    role:         UserRole     @default(USER)\n    passwordHash: VARCHAR(255)? @omit @unfilterable\n    createdAt:    TIMESTAMP    @default(now())\n\n    @rest(except: [create, update, delete])\n    @policy(role: USER, allow: [select], where: \"id = {{auth.user.id}}\")\n    @policy(role: ADMIN, allow: all)\n  }\n}\n";
 export declare const ENV_TEMPLATE = "DATABASE_URL=postgresql://postgrest:postgrest@localhost:5432/postgrest\nJWT_SECRET=\nAUTH_PEPPER=\nAUTH_ACCESS_TOKEN_TTL=1h\nJWT_ROLE_CLAIM=role\nJWT_USER_ID_CLAIM=sub\n";
 export declare const GITIGNORE_TEMPLATE = "node_modules/\ndist/\n.env\ndocker_data/\n.DS_Store\n*.log\nnpm-debug.log*\n";
 export declare const DOCKER_COMPOSE_TEMPLATE = "services:\n  postgres:\n    image: postgres:18.4-bookworm\n    container_name: schematic-pg\n    restart: unless-stopped\n    ports:\n      - \"5432:5432\"\n    environment:\n      POSTGRES_USER: postgrest\n      POSTGRES_PASSWORD: postgrest\n      POSTGRES_DB: postgrest\n    volumes:\n      - ./docker_data/postgres:/var/lib/postgresql\n    healthcheck:\n      test: [\"CMD-SHELL\", \"pg_isready -U postgrest -d postgrest\"]\n      interval: 5s\n      timeout: 5s\n      retries: 5\n";

package/dist/cli/templates.js

@@ -21,7 +21,8 @@ models {
     passwordHash: VARCHAR(255)? @omit @unfilterable
     createdAt:    TIMESTAMP    @default(now())
 
-    @policy(role: USER, allow: [select, update], where: "id = {{auth.user.id}}")
+    @rest(except: [create, update, delete])
+    @policy(role: USER, allow: [select], where: "id = {{auth.user.id}}")
     @policy(role: ADMIN, allow: all)
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "schematic-pg",
-  "version": "0.1.14",
+  "version": "0.1.16",
   "description": "Single-file backend framework for PostgreSQL and Node.js",
   "type": "module",
   "license": "MIT",