speedrun-cli 2.6.1

package/templates/base-crud/CRUD_README.md

@@ -0,0 +1,385 @@
+# 🏗️ Base CRUD Architecture — Complete Guide
+
+> **Generated by `create-nestjs-auth`** — Production-ready NestJS scaffolding CLI
+>
+> This file was added because you chose **"Enable Base CRUD Architecture"** during setup.
+
+---
+
+## 📋 Table of Contents
+
+1. [Architecture Overview](#architecture-overview)
+2. [File Structure](#file-structure)
+3. [Quick Start — Create a New CRUD Module](#quick-start)
+4. [Step-by-Step Checklist](#checklist)
+5. [DTO Snippets (Copy-Paste Ready)](#dto-snippets)
+6. [Service Snippet](#service-snippet)
+7. [Controller Snippet](#controller-snippet)
+8. [Module Snippet](#module-snippet)
+9. [Swagger UI Guide](#swagger-ui-guide)
+10. [Security Checklist](#security-checklist)
+11. [FAQ & Troubleshooting](#faq)
+
+---
+
+## Architecture Overview
+
+```
+AbstractLayer (base/)           ← You never touch this
+       │
+       ▼
+ConcreteModule (modules/xyz/)   ← You extend this
+       │
+       ▼
+ORM / Database (Prisma / TypeORM / Drizzle / Mongoose)
+```
+
+| File | Role |
+|------|------|
+| `base.service.ts` | Abstract CRUD logic — `create`, `findAll`, `findOne`, `update`, `remove` |
+| `base.controller.ts` | Abstract HTTP routes — full Swagger + security decorators |
+| `swagger/api-response.dto.ts` | Generic `ApiResponseDto<T>` wrapper for Swagger schema rendering |
+| `swagger/paginated.dto.ts` | Generic `PaginatedResponseDto<T>` + `PaginationQueryDto` |
+
+### Why this pattern?
+
+✅ **DRY** — Write CRUD once, reuse across all modules  
+✅ **Type-safe** — Full TypeScript generics, no `any`  
+✅ **Secure by default** — `ParseUUIDPipe`, `ValidationPipe(whitelist: true)`  
+✅ **Swagger-ready** — All endpoints documented automatically  
+✅ **Testable** — Repository pattern allows easy mock injection  
+
+---
+
+## File Structure
+
+```
+src/
+├── common/
+│   └── base/                          ← Abstract layer (don't modify)
+│       ├── index.ts                   ← Barrel export
+│       ├── base.service.ts            ← Abstract CRUD service
+│       ├── base.controller.ts         ← Abstract CRUD controller
+│       └── swagger/
+│           ├── api-response.dto.ts    ← ApiResponseDto<T> wrapper
+│           └── paginated.dto.ts       ← PaginatedResponseDto<T> + PaginationQueryDto
+│
+└── modules/
+    └── products/                      ← Concrete example (copy this!)
+        ├── dto/
+        │   ├── create-product.dto.ts  ← POST body validation
+        │   ├── update-product.dto.ts  ← PUT body (PartialType of create)
+        │   └── product.dto.ts         ← Response shape for Swagger
+        ├── products.service.ts        ← Extends BaseService
+        ├── products.controller.ts     ← Extends BaseController
+        └── products.module.ts         ← NestJS module wiring
+```
+
+---
+
+## Quick Start
+
+To create a new `Orders` CRUD module in **4 steps**:
+
+```bash
+# 1. Create the directory structure
+mkdir -p src/modules/orders/dto
+```
+
+Then follow the checklist below. ⬇️
+
+---
+
+## Checklist
+
+### ✅ Step 1 — Create DTOs
+
+**`src/modules/orders/dto/create-order.dto.ts`**
+```typescript
+import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
+import { IsString, IsNotEmpty, IsNumber, IsPositive, IsOptional, IsUUID } from 'class-validator';
+import { Type } from 'class-transformer';
+
+export class CreateOrderDto {
+  @ApiProperty({ description: 'Customer UUID', example: '123e4567-e89b-12d3-a456-426614174000' })
+  @IsUUID('4', { message: 'customerId must be a valid UUID v4' })
+  @IsNotEmpty()
+  customerId: string;
+
+  @ApiProperty({ description: 'Total order amount in cents', example: 29999 })
+  @Type(() => Number)
+  @IsNumber()
+  @IsPositive()
+  total: number;
+
+  @ApiPropertyOptional({ description: 'Order notes', example: 'Leave at door' })
+  @IsOptional()
+  @IsString()
+  notes?: string;
+}
+```
+
+**`src/modules/orders/dto/update-order.dto.ts`**
+```typescript
+// IMPORTANT: Use PartialType from @nestjs/swagger (NOT @nestjs/mapped-types!)
+// @nestjs/swagger's PartialType preserves @ApiProperty decorators for Swagger
+import { PartialType } from '@nestjs/swagger';
+import { CreateOrderDto } from './create-order.dto';
+
+export class UpdateOrderDto extends PartialType(CreateOrderDto) {}
+```
+
+**`src/modules/orders/dto/order.dto.ts`** — Response shape
+```typescript
+import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
+
+export class OrderDto {
+  @ApiProperty({ example: '123e4567-...', format: 'uuid' })
+  id: string;
+
+  @ApiProperty({ example: '123e4567-...' })
+  customerId: string;
+
+  @ApiProperty({ example: 29999 })
+  total: number;
+
+  @ApiPropertyOptional({ example: 'Leave at door' })
+  notes?: string;
+
+  @ApiProperty({ example: '2025-01-01T00:00:00.000Z' })
+  createdAt: Date;
+
+  @ApiProperty({ example: '2025-01-01T00:00:00.000Z' })
+  updatedAt: Date;
+
+  @ApiPropertyOptional({ nullable: true, example: null })
+  deletedAt?: Date | null;
+}
+```
+
+---
+
+### ✅ Step 2 — Create Service
+
+**`src/modules/orders/orders.service.ts`**
+```typescript
+import { Injectable } from '@nestjs/common';
+import { PrismaService } from '../../prisma/prisma.service';
+import { BaseService, IBaseRepository, PaginationQueryDto } from '../../common/base';
+import { CreateOrderDto } from './dto/create-order.dto';
+import { UpdateOrderDto } from './dto/update-order.dto';
+import { Order } from '@prisma/client';
+
+// ── Repository ────────────────────────────────────────────────
+class PrismaOrderRepository
+  implements IBaseRepository<Order, CreateOrderDto, UpdateOrderDto>
+{
+  constructor(private readonly prisma: PrismaService) {}
+
+  async create(dto: CreateOrderDto): Promise<Order> {
+    return this.prisma.order.create({ data: dto });
+  }
+
+  async findAll(pagination: PaginationQueryDto): Promise<{ data: Order[]; total: number }> {
+    const { page = 1, limit = 10 } = pagination;
+    const skip = (page - 1) * limit;
+    const [data, total] = await this.prisma.$transaction([
+      this.prisma.order.findMany({ where: { deletedAt: null }, skip, take: limit, orderBy: { createdAt: 'desc' } }),
+      this.prisma.order.count({ where: { deletedAt: null } }),
+    ]);
+    return { data, total };
+  }
+
+  async findOne(id: string): Promise<Order | null> {
+    return this.prisma.order.findFirst({ where: { id, deletedAt: null } });
+  }
+
+  async update(id: string, dto: UpdateOrderDto): Promise<Order> {
+    return this.prisma.order.update({ where: { id }, data: dto });
+  }
+
+  async remove(id: string): Promise<Order> {
+    return this.prisma.order.update({ where: { id }, data: { deletedAt: new Date() } });
+  }
+}
+
+// ── Service ───────────────────────────────────────────────────
+@Injectable()
+export class OrdersService extends BaseService<Order, CreateOrderDto, UpdateOrderDto> {
+  private readonly repository: PrismaOrderRepository;
+
+  constructor(private readonly prisma: PrismaService) {
+    super();
+    this.repository = new PrismaOrderRepository(this.prisma);
+  }
+
+  protected getRepository(): IBaseRepository<Order, CreateOrderDto, UpdateOrderDto> {
+    return this.repository;
+  }
+
+  // Add domain methods here ↓
+  // async findByCustomer(customerId: string): Promise<Order[]> { ... }
+}
+```
+
+---
+
+### ✅ Step 3 — Create Controller
+
+**`src/modules/orders/orders.controller.ts`**
+```typescript
+import { Controller, Query, Param, Get, ParseUUIDPipe, HttpStatus, Type } from '@nestjs/common';
+import { ApiTags, ApiBearerAuth, ApiExtraModels, ApiOperation, ApiResponse, ApiParam } from '@nestjs/swagger';
+import { BaseController } from '../../common/base/base.controller';
+import {
+  ApiResponseDto, ApiResponseSchema,
+  PaginatedResponseDto, PaginatedResponseSchema,
+  PaginationQueryDto,
+} from '../../common/base';
+import { OrdersService } from './orders.service';
+import { CreateOrderDto } from './dto/create-order.dto';
+import { UpdateOrderDto } from './dto/update-order.dto';
+import { OrderDto } from './dto/order.dto';
+import { Order } from '@prisma/client';
+
+@ApiTags('Orders')
+@ApiBearerAuth('bearer')
+@ApiExtraModels(ApiResponseDto, PaginatedResponseDto, OrderDto)  // ← REQUIRED for generic Swagger schemas
+@Controller('orders')
+export class OrdersController extends BaseController<Order, CreateOrderDto, UpdateOrderDto> {
+  constructor(private readonly ordersService: OrdersService) {
+    super(ordersService);
+  }
+
+  protected getDtoClass(): Type<Order> {
+    return OrderDto as unknown as Type<Order>;
+  }
+
+  // Override to attach proper response schemas for Swagger
+  @Get()
+  @ApiOperation({ summary: 'Get all orders (paginated)' })
+  @ApiResponse({ status: 200, description: 'Paginated orders', schema: PaginatedResponseSchema(OrderDto) })
+  override async findAll(@Query() pagination: PaginationQueryDto): Promise<PaginatedResponseDto<Order>> {
+    return super.findAll(pagination);
+  }
+
+  @Get(':id')
+  @ApiOperation({ summary: 'Get order by ID' })
+  @ApiParam({ name: 'id', format: 'uuid' })
+  @ApiResponse({ status: 200, description: 'Order found', schema: ApiResponseSchema(OrderDto) })
+  @ApiResponse({ status: 404, description: 'Order not found' })
+  override async findOne(
+    @Param('id', new ParseUUIDPipe({ version: '4', errorHttpStatusCode: HttpStatus.BAD_REQUEST })) id: string,
+  ): Promise<ApiResponseDto<Order>> {
+    return super.findOne(id);
+  }
+}
+```
+
+---
+
+### ✅ Step 4 — Create Module & Register
+
+**`src/modules/orders/orders.module.ts`**
+```typescript
+import { Module } from '@nestjs/common';
+import { OrdersController } from './orders.controller';
+import { OrdersService } from './orders.service';
+import { PrismaModule } from '../../prisma/prisma.module';
+
+@Module({
+  imports: [PrismaModule],
+  controllers: [OrdersController],
+  providers: [OrdersService],
+  exports: [OrdersService],
+})
+export class OrdersModule {}
+```
+
+**Register in `src/app.module.ts`:**
+```typescript
+import { OrdersModule } from './modules/orders/orders.module';
+
+@Module({
+  imports: [
+    // ... existing modules
+    OrdersModule,  // ← Add this
+  ],
+})
+export class AppModule {}
+```
+
+---
+
+## Swagger UI Guide
+
+After running your NestJS app, open: **`http://localhost:8080/api/docs`**
+
+### Authenticate in Swagger:
+1. Click the **🔒 Authorize** button (top right)
+2. Enter your JWT: `Bearer <your-access-token>`
+3. Click **Authorize** → **Close**
+
+### Test an endpoint:
+1. Find the endpoint (e.g., `GET /products`)
+2. Click **Try it out**
+3. Fill in parameters
+4. Click **Execute**
+5. Inspect **Response body** and **Curl** command
+
+### View response schemas:
+- Click **Schema** tab on any response to see the full `ApiResponseDto<T>` structure
+- Generic schemas (e.g., `PaginatedResponseDto<ProductDto>`) require `@ApiExtraModels` in the controller
+
+> **Tip**: The `@ApiExtraModels(ApiResponseDto, PaginatedResponseDto, YourDto)` decorator on the controller is **mandatory** for generic schemas to appear in Swagger UI.
+
+---
+
+## Security Checklist
+
+| Security Control | How It's Implemented |
+|---|---|
+| **Mass Assignment Protection** | `ValidationPipe({ whitelist: true, forbidNonWhitelisted: true })` in `main.ts` |
+| **URL Injection Prevention** | `@ParseUUIDPipe({ version: '4' })` on all `:id` params |
+| **SQL/NoSQL Injection Prevention** | Parameterized queries via Prisma/TypeORM/Mongoose (no raw SQL) |
+| **Type Coercion Attacks** | `@IsString()`, `@IsNumber()`, `@IsInt()` on all DTO fields |
+| **Overflow/DoS Prevention** | `@MaxLength()`, `@Max(100)` on limit param |
+| **Enum Injection** | `@IsEnum()` enforces strict set of allowed values |
+| **Auth Protection** | `@ApiBearerAuth()` + `@UseGuards(JwtAuthGuard)` on all routes |
+| **Structured Logging** | `Logger` in `BaseService` traces all CRUD operations by entity |
+| **Soft Delete** | Records marked `deletedAt`, never physically removed |
+
+---
+
+## FAQ
+
+**Q: Can I use TypeORM/Drizzle/Mongoose instead of Prisma?**  
+A: Yes! Implement `IBaseRepository<T, CreateDto, UpdateDto>` in your concrete class. The base layer is fully ORM-agnostic.
+
+**Q: Why `PartialType` from `@nestjs/swagger` instead of `@nestjs/mapped-types`?**  
+A: `@nestjs/swagger`'s `PartialType` preserves `@ApiProperty` decorators, ensuring UpdateDto appears correctly in Swagger UI. `@nestjs/mapped-types` strips them.
+
+**Q: How do I add authentication to individual routes?**  
+A: Override the method in your concrete controller and add `@UseGuards(JwtAuthGuard)`:
+```typescript
+@UseGuards(JwtAuthGuard)
+@Roles(Role.ADMIN)
+override async create(@Body() dto: CreateOrderDto) {
+  return super.create(dto);
+}
+```
+
+**Q: How do I add filtering/search to `findAll`?**  
+A: Override `findAll()` in your concrete service and extend `PaginationQueryDto`:
+```typescript
+export class OrderQueryDto extends PaginationQueryDto {
+  @ApiPropertyOptional() @IsOptional() @IsString() status?: string;
+}
+```
+
+**Q: Where is the example `ProductModule`?**  
+A: See `src/modules/products/` — it's a fully working concrete implementation of this pattern.
+
+---
+
+*Generated by [`create-nestjs-auth`](https://github.com/masabinhok/create-nestjs-auth) — Production-ready NestJS authentication & architecture scaffolding.*

package/templates/base-crud/src/common/base/base.controller.ts

@@ -0,0 +1,321 @@
+import {
+  Get,
+  Post,
+  Put,
+  Delete,
+  Body,
+  Param,
+  Query,
+  HttpCode,
+  HttpStatus,
+  ParseUUIDPipe,
+  UseGuards,
+  Type,
+} from '@nestjs/common';
+import {
+  ApiOperation,
+  ApiResponse,
+  ApiBearerAuth,
+  ApiParam,
+  ApiQuery,
+  ApiExtraModels,
+} from '@nestjs/swagger';
+import { BaseService } from './base.service';
+import {
+  ApiResponseDto,
+  ApiResponseSchema,
+  ApiResponseArraySchema,
+} from './swagger/api-response.dto';
+import {
+  PaginationQueryDto,
+  PaginatedResponseDto,
+  PaginatedResponseSchema,
+} from './swagger/paginated.dto';
+
+// ─────────────────────────────────────────────────────────────
+// Abstract Base Controller
+//
+// Generic parameters:
+//   T         — Entity / Document type (e.g. Product)
+//   CreateDto — DTO for POST /  (e.g. CreateProductDto)
+//   UpdateDto — DTO for PUT /:id  (e.g. UpdateProductDto)
+//
+// How to extend:
+//
+// @ApiTags('products')
+// @ApiBearerAuth('bearer')
+// @ApiExtraModels(ApiResponseDto, PaginatedResponseDto, ProductDto)
+// @Controller('products')
+// export class ProductsController extends BaseController<Product, CreateProductDto, UpdateProductDto> {
+//   constructor(private readonly productsService: ProductsService) {
+//     super(productsService);
+//   }
+//   protected getDtoClass() { return ProductDto; }
+//   protected getCreateDtoClass() { return CreateProductDto; }
+// }
+// ─────────────────────────────────────────────────────────────
+export abstract class BaseController<T, CreateDto, UpdateDto> {
+  constructor(protected readonly service: BaseService<T, CreateDto, UpdateDto>) {}
+
+  /**
+   * Returns the DTO class used as the Swagger response model.
+   * Must be implemented by each concrete controller.
+   */
+  protected abstract getDtoClass(): Type<T>;
+
+  // ─────────────────────────────────────────────────────────
+  // POST / — Create Resource
+  // ─────────────────────────────────────────────────────────
+  @Post()
+  @HttpCode(HttpStatus.CREATED)
+  @ApiBearerAuth('bearer')
+  @ApiOperation({
+    summary: 'Create a new resource',
+    description:
+      'Creates a new resource entry. The request body is strictly validated via `class-validator`. ' +
+      'Extra or unknown properties are rejected (whitelist enforcement).',
+  })
+  @ApiResponse({
+    status: HttpStatus.CREATED,
+    description: 'Resource created successfully',
+  })
+  @ApiResponse({
+    status: HttpStatus.BAD_REQUEST,
+    description: 'Validation error — invalid or missing fields in request body',
+    schema: {
+      example: {
+        success: false,
+        message: 'Validation failed (name should not be empty)',
+        meta: { timestamp: '2025-01-01T00:00:00.000Z' },
+      },
+    },
+  })
+  @ApiResponse({
+    status: HttpStatus.UNAUTHORIZED,
+    description: 'Unauthorized — valid Bearer JWT required',
+  })
+  @ApiResponse({
+    status: HttpStatus.CONFLICT,
+    description: 'Conflict — resource with given unique field already exists',
+  })
+  async create(@Body() createDto: CreateDto): Promise<ApiResponseDto<T>> {
+    const data = await this.service.create(createDto);
+    return {
+      success: true,
+      data,
+      meta: {
+        correlationId: '',
+        timestamp: new Date().toISOString(),
+        message: 'Resource created successfully',
+      },
+    };
+  }
+
+  // ─────────────────────────────────────────────────────────
+  // GET / — Find All (Paginated)
+  // ─────────────────────────────────────────────────────────
+  @Get()
+  @ApiBearerAuth('bearer')
+  @ApiOperation({
+    summary: 'Retrieve all resources (paginated)',
+    description:
+      'Returns a paginated list of resources. ' +
+      'Use `page` and `limit` query parameters for pagination control. ' +
+      'Max `limit` is capped at 100 per page.',
+  })
+  @ApiQuery({ name: 'page', required: false, type: Number, example: 1, description: 'Page number (default: 1)' })
+  @ApiQuery({ name: 'limit', required: false, type: Number, example: 10, description: 'Items per page (default: 10, max: 100)' })
+  @ApiResponse({
+    status: HttpStatus.OK,
+    description: 'Paginated list of resources',
+  })
+  @ApiResponse({
+    status: HttpStatus.BAD_REQUEST,
+    description: 'Invalid pagination parameters',
+  })
+  @ApiResponse({
+    status: HttpStatus.UNAUTHORIZED,
+    description: 'Unauthorized — valid Bearer JWT required',
+  })
+  async findAll(@Query() pagination: PaginationQueryDto): Promise<PaginatedResponseDto<T>> {
+    return this.service.findAll(pagination);
+  }
+
+  // ─────────────────────────────────────────────────────────
+  // GET /:id — Find One
+  // ─────────────────────────────────────────────────────────
+  @Get(':id')
+  @ApiBearerAuth('bearer')
+  @ApiOperation({
+    summary: 'Retrieve a single resource by ID',
+    description:
+      'Fetches a single resource by its UUID. ' +
+      'Returns 404 if the resource does not exist.',
+  })
+  @ApiParam({
+    name: 'id',
+    description: 'Resource UUID (v4)',
+    example: '123e4567-e89b-12d3-a456-426614174000',
+    format: 'uuid',
+  })
+  @ApiResponse({
+    status: HttpStatus.OK,
+    description: 'Resource found and returned',
+  })
+  @ApiResponse({
+    status: HttpStatus.NOT_FOUND,
+    description: 'Resource not found — no record with the given ID exists',
+    schema: {
+      example: {
+        success: false,
+        message: 'Resource with id "123e4567-..." was not found',
+        meta: { timestamp: '2025-01-01T00:00:00.000Z' },
+      },
+    },
+  })
+  @ApiResponse({
+    status: HttpStatus.BAD_REQUEST,
+    description: 'Bad Request — the provided ID is not a valid UUID v4',
+    schema: {
+      example: {
+        success: false,
+        message: 'Validation failed (uuid is expected)',
+        meta: { timestamp: '2025-01-01T00:00:00.000Z' },
+      },
+    },
+  })
+  @ApiResponse({
+    status: HttpStatus.UNAUTHORIZED,
+    description: 'Unauthorized — valid Bearer JWT required',
+  })
+  async findOne(
+    @Param('id', new ParseUUIDPipe({ version: '4', errorHttpStatusCode: HttpStatus.BAD_REQUEST }))
+    id: string,
+  ): Promise<ApiResponseDto<T>> {
+    const data = await this.service.findOne(id);
+    return {
+      success: true,
+      data,
+      meta: {
+        correlationId: '',
+        timestamp: new Date().toISOString(),
+      },
+    };
+  }
+
+  // ─────────────────────────────────────────────────────────
+  // PUT /:id — Full Update
+  // ─────────────────────────────────────────────────────────
+  @Put(':id')
+  @ApiBearerAuth('bearer')
+  @ApiOperation({
+    summary: 'Update a resource (full or partial)',
+    description:
+      'Updates an existing resource by its UUID. ' +
+      'All provided fields are validated. Unknown fields are rejected. ' +
+      'Returns 404 if the resource does not exist.',
+  })
+  @ApiParam({
+    name: 'id',
+    description: 'Resource UUID (v4)',
+    example: '123e4567-e89b-12d3-a456-426614174000',
+    format: 'uuid',
+  })
+  @ApiResponse({
+    status: HttpStatus.OK,
+    description: 'Resource updated successfully',
+  })
+  @ApiResponse({
+    status: HttpStatus.NOT_FOUND,
+    description: 'Resource not found',
+    schema: {
+      example: {
+        success: false,
+        message: 'Resource with id "..." was not found',
+        meta: { timestamp: '2025-01-01T00:00:00.000Z' },
+      },
+    },
+  })
+  @ApiResponse({
+    status: HttpStatus.BAD_REQUEST,
+    description: 'Bad Request — invalid UUID or validation error in request body',
+  })
+  @ApiResponse({
+    status: HttpStatus.UNAUTHORIZED,
+    description: 'Unauthorized — valid Bearer JWT required',
+  })
+  async update(
+    @Param('id', new ParseUUIDPipe({ version: '4', errorHttpStatusCode: HttpStatus.BAD_REQUEST }))
+    id: string,
+    @Body() updateDto: UpdateDto,
+  ): Promise<ApiResponseDto<T>> {
+    const data = await this.service.update(id, updateDto);
+    return {
+      success: true,
+      data,
+      meta: {
+        correlationId: '',
+        timestamp: new Date().toISOString(),
+        message: 'Resource updated successfully',
+      },
+    };
+  }
+
+  // ─────────────────────────────────────────────────────────
+  // DELETE /:id — Soft Delete
+  // ─────────────────────────────────────────────────────────
+  @Delete(':id')
+  @HttpCode(HttpStatus.OK)
+  @ApiBearerAuth('bearer')
+  @ApiOperation({
+    summary: 'Soft-delete a resource',
+    description:
+      'Marks a resource as deleted by setting its `deletedAt` timestamp. ' +
+      'The record is NOT permanently removed from the database. ' +
+      'Returns 404 if the resource does not exist.',
+  })
+  @ApiParam({
+    name: 'id',
+    description: 'Resource UUID (v4)',
+    example: '123e4567-e89b-12d3-a456-426614174000',
+    format: 'uuid',
+  })
+  @ApiResponse({
+    status: HttpStatus.OK,
+    description: 'Resource soft-deleted successfully',
+    schema: {
+      example: {
+        success: true,
+        data: { id: '123e4567-...', deletedAt: '2025-01-01T00:00:00.000Z' },
+        meta: { timestamp: '2025-01-01T00:00:00.000Z', message: 'Resource deleted successfully' },
+      },
+    },
+  })
+  @ApiResponse({
+    status: HttpStatus.NOT_FOUND,
+    description: 'Resource not found',
+  })
+  @ApiResponse({
+    status: HttpStatus.BAD_REQUEST,
+    description: 'Bad Request — invalid UUID format',
+  })
+  @ApiResponse({
+    status: HttpStatus.UNAUTHORIZED,
+    description: 'Unauthorized — valid Bearer JWT required',
+  })
+  async remove(
+    @Param('id', new ParseUUIDPipe({ version: '4', errorHttpStatusCode: HttpStatus.BAD_REQUEST }))
+    id: string,
+  ): Promise<ApiResponseDto<T>> {
+    const data = await this.service.remove(id);
+    return {
+      success: true,
+      data,
+      meta: {
+        correlationId: '',
+        timestamp: new Date().toISOString(),
+        message: 'Resource deleted successfully',
+      },
+    };
+  }
+}