vasp-cli 0.1.2 → 0.1.4

package/templates/spa/ts/src/vasp/client/types.ts.hbs

@@ -0,0 +1,33 @@
+// Auto-generated by Vasp — entity types inferred from Drizzle schema
+import type {
+{{#each cruds}}
+  {{pascalCase entity}},
+  New{{pascalCase entity}},
+{{/each}}
+{{#if hasAuth}}
+  User,
+{{/if}}
+} from '../../../../../../drizzle/schema.js'
+
+{{#each queries}}
+// Arguments and return type for '{{name}}' — customize as needed
+export type {{pascalCase name}}Args = Record<string, unknown>
+export type {{pascalCase name}}Return = unknown
+
+{{/each}}
+{{#each actions}}
+// Arguments and return type for '{{name}}' — customize as needed
+export type {{pascalCase name}}Args = Record<string, unknown>
+export type {{pascalCase name}}Return = unknown
+
+{{/each}}
+// Re-export entity types for convenience
+export type {
+{{#each cruds}}
+  {{pascalCase entity}},
+  New{{pascalCase entity}},
+{{/each}}
+{{#if hasAuth}}
+  User,
+{{/if}}
+}

package/templates/spa/ts/src/vasp/plugin.ts.hbs

@@ -0,0 +1,12 @@
+import type { App } from 'vue'
+import { createVaspClient } from '@vasp-framework/runtime'
+
+export const vaspPlugin = {
+  install(app: App) {
+    const client = createVaspClient({
+      baseURL: import.meta.env.VITE_API_URL || '/api',
+    })
+    app.provide('$vasp', client)
+    app.config.globalProperties.$vasp = client
+  },
+}

package/templates/spa/ts/vite.config.ts.hbs

@@ -0,0 +1,26 @@
+import { defineConfig } from 'vite'
+import vue from '@vitejs/plugin-vue'
+import { fileURLToPath, URL } from 'node:url'
+
+export default defineConfig({
+  plugins: [vue()],
+  resolve: {
+    alias: {
+      '@src': fileURLToPath(new URL('./src', import.meta.url)),
+      '@vasp-framework/client': fileURLToPath(new URL('./src/vasp/client', import.meta.url)),
+    },
+  },
+  server: {
+    port: {{frontendPort}},
+    proxy: {
+      '/api': {
+        target: 'http://localhost:{{backendPort}}',
+        changeOrigin: true,
+      },
+      '/ws': {
+        target: 'ws://localhost:{{backendPort}}',
+        ws: true,
+      },
+    },
+  },
+})

package/templates/ssr/js/_page.vue.hbs

@@ -0,0 +1,10 @@
+<template>
+  <{{componentName}} />
+</template>
+
+<script setup>
+import {{componentName}} from '{{componentSource}}'
+{{#if hasAuth}}
+definePageMeta({ middleware: 'auth' })
+{{/if}}
+</script>

package/templates/ssr/js/app.vue.hbs

@@ -0,0 +1,3 @@
+<template>
+  <NuxtPage />
+</template>

package/templates/ssr/js/composables/useAuth.js.hbs

@@ -0,0 +1,52 @@
+// Auto-generated by Vasp — do not edit directly
+// SSR-aware auth composable — uses cookies (httpOnly) and Nuxt's useRequestHeaders for server-side access
+import { $fetch } from 'ofetch'
+
+const _user = ref(null)
+let _checked = false
+
+export function useAuth() {
+  const config = useRuntimeConfig()
+  const baseURL = config.public.apiBase
+
+  // On server, forward cookies from the incoming request
+  const headers = import.meta.server ? useRequestHeaders(['cookie']) : {}
+
+  async function checkAuth() {
+    if (_checked) return
+    _checked = true
+    try {
+      _user.value = await $fetch(`${baseURL}/auth/me`, { headers, credentials: 'include' })
+    } catch {
+      _user.value = null
+    }
+  }
+
+  async function login(username, password) {
+    _user.value = await $fetch(`${baseURL}/auth/login`, {
+      method: 'POST',
+      body: { username, password },
+      credentials: 'include',
+    })
+    _checked = true
+    return _user.value
+  }
+
+  async function register(username, password, email) {
+    _user.value = await $fetch(`${baseURL}/auth/register`, {
+      method: 'POST',
+      body: { username, password, email },
+      credentials: 'include',
+    })
+    _checked = true
+    return _user.value
+  }
+
+  async function logout() {
+    await $fetch(`${baseURL}/auth/logout`, { method: 'POST', credentials: 'include' })
+    _user.value = null
+    _checked = false
+  }
+
+  return { user: _user, checkAuth, login, register, logout }
+}

package/templates/ssr/js/composables/useVasp.js.hbs

@@ -0,0 +1,6 @@
+// Auto-generated by Vasp — do not edit directly
+// Thin wrapper — the actual $vasp client is provided by vasp.server.js or vasp.client.js plugin
+export const useVasp = () => {
+  const { $vasp } = useNuxtApp()
+  return { $vasp }
+}

package/templates/ssr/js/middleware/auth.js.hbs

@@ -0,0 +1,8 @@
+// Auto-generated by Vasp — do not edit directly
+export default defineNuxtRouteMiddleware((to) => {
+  const { user } = useAuth()
+  const publicPaths = ['/login', '/register']
+  if (!user.value && !publicPaths.includes(to.path)) {
+    return navigateTo('/login')
+  }
+})

package/templates/ssr/js/nuxt.config.js.hbs

@@ -0,0 +1,15 @@
+// Auto-generated by Vasp — do not edit directly
+// https://nuxt.com/docs/api/configuration/nuxt-config
+export default defineNuxtConfig({
+  compatibilityDate: '2024-11-01',
+  devtools: { enabled: true },
+  alias: {
+    '@src': '~/src',
+  },
+  runtimeConfig: {
+    backendUrl: process.env.BACKEND_URL || 'http://localhost:{{backendPort}}',
+    public: {
+      apiBase: process.env.API_BASE || 'http://localhost:{{backendPort}}/api',
+    },
+  },
+})

package/templates/ssr/js/plugins/vasp.client.js.hbs

@@ -0,0 +1,17 @@
+// Auto-generated by Vasp — do not edit directly
+// Runs only on the client after hydration — routes calls to the Elysia backend via ofetch
+import { $fetch } from 'ofetch'
+
+export default defineNuxtPlugin((nuxtApp) => {
+  const config = useRuntimeConfig()
+  const baseURL = config.public.apiBase
+
+  nuxtApp.provide('vasp', {
+    async query(name, args) {
+      return $fetch(`/queries/${name}`, { baseURL, method: 'GET', query: args })
+    },
+    async action(name, args) {
+      return $fetch(`/actions/${name}`, { baseURL, method: 'POST', body: args })
+    },
+  })
+})

package/templates/ssr/js/plugins/vasp.server.js.hbs

@@ -0,0 +1,33 @@
+// Auto-generated by Vasp — do not edit directly
+// Runs only on the server during SSR render — calls query/action functions directly (zero HTTP overhead)
+{{#each queries}}
+import { {{importName fn}} } from '{{fn.source}}'
+{{/each}}
+{{#each actions}}
+import { {{importName fn}} } from '{{fn.source}}'
+{{/each}}
+
+export default defineNuxtPlugin((nuxtApp) => {
+  const queryFns = {
+    {{#each queries}}
+    {{camelCase name}}: {{importName fn}},
+    {{/each}}
+  }
+
+  const actionFns = {
+    {{#each actions}}
+    {{camelCase name}}: {{importName fn}},
+    {{/each}}
+  }
+
+  nuxtApp.provide('vasp', {
+    async query(name, args) {
+      if (!queryFns[name]) throw new Error(`[Vasp] Unknown query: ${name}`)
+      return queryFns[name](args)
+    },
+    async action(name, args) {
+      if (!actionFns[name]) throw new Error(`[Vasp] Unknown action: ${name}`)
+      return actionFns[name](args)
+    },
+  })
+})

package/templates/ssr/ts/_page.vue.hbs

@@ -0,0 +1,10 @@
+<template>
+  <{{componentName}} />
+</template>
+
+<script setup lang="ts">
+import {{componentName}} from '{{componentSource}}'
+{{#if hasAuth}}
+definePageMeta({ middleware: 'auth' })
+{{/if}}
+</script>

package/templates/ssr/ts/app.vue.hbs

@@ -0,0 +1,3 @@
+<template>
+  <NuxtPage />
+</template>

package/templates/ssr/ts/composables/useAuth.ts.hbs

@@ -0,0 +1,56 @@
+// Auto-generated by Vasp — do not edit directly
+// SSR-aware auth composable — uses cookies (httpOnly) and Nuxt's useRequestHeaders for server-side access
+import { $fetch } from 'ofetch'
+
+interface AuthUser {
+  id: number
+  username: string
+  email?: string
+}
+
+const _user = ref<AuthUser | null>(null)
+let _checked = false
+
+export function useAuth() {
+  const config = useRuntimeConfig()
+  const baseURL = config.public.apiBase as string
+  const headers = import.meta.server ? useRequestHeaders(['cookie']) : {}
+
+  async function checkAuth(): Promise<void> {
+    if (_checked) return
+    _checked = true
+    try {
+      _user.value = await $fetch<AuthUser>(`${baseURL}/auth/me`, { headers, credentials: 'include' })
+    } catch {
+      _user.value = null
+    }
+  }
+
+  async function login(username: string, password: string): Promise<AuthUser> {
+    _user.value = await $fetch<AuthUser>(`${baseURL}/auth/login`, {
+      method: 'POST',
+      body: { username, password },
+      credentials: 'include',
+    })
+    _checked = true
+    return _user.value!
+  }
+
+  async function register(username: string, password: string, email?: string): Promise<AuthUser> {
+    _user.value = await $fetch<AuthUser>(`${baseURL}/auth/register`, {
+      method: 'POST',
+      body: { username, password, email },
+      credentials: 'include',
+    })
+    _checked = true
+    return _user.value!
+  }
+
+  async function logout(): Promise<void> {
+    await $fetch(`${baseURL}/auth/logout`, { method: 'POST', credentials: 'include' })
+    _user.value = null
+    _checked = false
+  }
+
+  return { user: _user, checkAuth, login, register, logout }
+}

package/templates/ssr/ts/composables/useVasp.ts.hbs

@@ -0,0 +1,10 @@
+// Auto-generated by Vasp — do not edit directly
+interface VaspClient {
+  query<T = unknown>(name: string, args?: unknown): Promise<T>
+  action<T = unknown>(name: string, args?: unknown): Promise<T>
+}
+
+export const useVasp = (): { $vasp: VaspClient } => {
+  const { $vasp } = useNuxtApp()
+  return { $vasp: $vasp as VaspClient }
+}

package/templates/ssr/ts/middleware/auth.ts.hbs

@@ -0,0 +1,8 @@
+// Auto-generated by Vasp — do not edit directly
+export default defineNuxtRouteMiddleware((to) => {
+  const { user } = useAuth()
+  const publicPaths = ['/login', '/register']
+  if (!user.value && !publicPaths.includes(to.path)) {
+    return navigateTo('/login')
+  }
+})

package/templates/ssr/ts/nuxt.config.ts.hbs

@@ -0,0 +1,19 @@
+// Auto-generated by Vasp — do not edit directly
+// https://nuxt.com/docs/api/configuration/nuxt-config
+export default defineNuxtConfig({
+  compatibilityDate: '2024-11-01',
+  devtools: { enabled: true },
+  typescript: {
+    strict: true,
+    typeCheck: true,
+  },
+  alias: {
+    '@src': '~/src',
+  },
+  runtimeConfig: {
+    backendUrl: process.env.BACKEND_URL || 'http://localhost:{{backendPort}}',
+    public: {
+      apiBase: process.env.API_BASE || 'http://localhost:{{backendPort}}/api',
+    },
+  },
+})

package/templates/ssr/ts/plugins/vasp.client.ts.hbs

@@ -0,0 +1,17 @@
+// Auto-generated by Vasp — do not edit directly
+// Runs only on the client after hydration — routes calls to the Elysia backend via ofetch
+import { $fetch } from 'ofetch'
+
+export default defineNuxtPlugin((nuxtApp) => {
+  const config = useRuntimeConfig()
+  const baseURL = config.public.apiBase as string
+
+  nuxtApp.provide('vasp', {
+    async query<T = unknown>(name: string, args?: unknown): Promise<T> {
+      return $fetch<T>(`/queries/${name}`, { baseURL, method: 'GET', query: args as Record<string, unknown> })
+    },
+    async action<T = unknown>(name: string, args?: unknown): Promise<T> {
+      return $fetch<T>(`/actions/${name}`, { baseURL, method: 'POST', body: args })
+    },
+  })
+})

package/templates/ssr/ts/plugins/vasp.server.ts.hbs

@@ -0,0 +1,33 @@
+// Auto-generated by Vasp — do not edit directly
+// Runs only on the server during SSR render — calls query/action functions directly (zero HTTP overhead)
+{{#each queries}}
+import { {{importName fn}} } from '{{fn.source}}'
+{{/each}}
+{{#each actions}}
+import { {{importName fn}} } from '{{fn.source}}'
+{{/each}}
+
+export default defineNuxtPlugin((nuxtApp) => {
+  const queryFns: Record<string, (args?: unknown) => Promise<unknown>> = {
+    {{#each queries}}
+    {{camelCase name}}: {{importName fn}} as (args?: unknown) => Promise<unknown>,
+    {{/each}}
+  }
+
+  const actionFns: Record<string, (args?: unknown) => Promise<unknown>> = {
+    {{#each actions}}
+    {{camelCase name}}: {{importName fn}} as (args?: unknown) => Promise<unknown>,
+    {{/each}}
+  }
+
+  nuxtApp.provide('vasp', {
+    async query<T = unknown>(name: string, args?: unknown): Promise<T> {
+      if (!queryFns[name]) throw new Error(`[Vasp] Unknown query: ${name}`)
+      return queryFns[name](args) as Promise<T>
+    },
+    async action<T = unknown>(name: string, args?: unknown): Promise<T> {
+      if (!actionFns[name]) throw new Error(`[Vasp] Unknown action: ${name}`)
+      return actionFns[name](args) as Promise<T>
+    },
+  })
+})

package/templates/templates/shared/.env.example.hbs

@@ -0,0 +1,14 @@
+DATABASE_URL=postgres://user:password@localhost:5432/{{kebabCase appName}}
+PORT={{backendPort}}
+VITE_API_URL=http://localhost:{{backendPort}}/api
+{{#if hasAuth}}
+JWT_SECRET=change-me-in-production
+{{#if (includes authMethods "google")}}
+GOOGLE_CLIENT_ID=
+GOOGLE_CLIENT_SECRET=
+{{/if}}
+{{#if (includes authMethods "github")}}
+GITHUB_CLIENT_ID=
+GITHUB_CLIENT_SECRET=
+{{/if}}
+{{/if}}

package/templates/templates/shared/.gitignore.hbs

@@ -0,0 +1,8 @@
+node_modules
+dist
+.output
+.nuxt
+.vasp-gen
+.env
+.env.local
+*.log

package/templates/templates/shared/auth/client/Login.vue.hbs

@@ -0,0 +1,46 @@
+<template>
+  <div class="auth-form">
+    <h2>Login</h2>
+    <form @submit.prevent="handleLogin">
+      <input v-model="username" type="text" placeholder="Username" required />
+      <input v-model="password" type="password" placeholder="Password" required />
+      <button type="submit" :disabled="loading">
+        \{{ loading ? 'Logging in...' : 'Login' }}
+      </button>
+      <p v-if="error" class="error">\{{ error }}</p>
+    </form>
+    <p>Don't have an account? <RouterLink to="/register">Register</RouterLink></p>
+{{#if (includes authMethods "google")}}
+    <a href="/auth/google" class="oauth-btn">Continue with Google</a>
+{{/if}}
+{{#if (includes authMethods "github")}}
+    <a href="/auth/github" class="oauth-btn">Continue with GitHub</a>
+{{/if}}
+  </div>
+</template>
+
+<script setup>
+import { ref } from 'vue'
+import { useRouter } from 'vue-router'
+import { useAuth } from '../vasp/auth.js'
+
+const router = useRouter()
+const { login } = useAuth()
+const username = ref('')
+const password = ref('')
+const loading = ref(false)
+const error = ref('')
+
+async function handleLogin() {
+  loading.value = true
+  error.value = ''
+  try {
+    await login(username.value, password.value)
+    router.push('/')
+  } catch (err) {
+    error.value = err?.data?.error || 'Login failed'
+  } finally {
+    loading.value = false
+  }
+}
+</script>

package/templates/templates/shared/auth/client/Register.vue.hbs

@@ -0,0 +1,42 @@
+<template>
+  <div class="auth-form">
+    <h2>Create Account</h2>
+    <form @submit.prevent="handleRegister">
+      <input v-model="username" type="text" placeholder="Username" required />
+      <input v-model="email" type="email" placeholder="Email (optional)" />
+      <input v-model="password" type="password" placeholder="Password (min 8 chars)" required />
+      <button type="submit" :disabled="loading">
+        \{{ loading ? 'Creating account...' : 'Register' }}
+      </button>
+      <p v-if="error" class="error">\{{ error }}</p>
+    </form>
+    <p>Already have an account? <RouterLink to="/login">Login</RouterLink></p>
+  </div>
+</template>
+
+<script setup>
+import { ref } from 'vue'
+import { useRouter } from 'vue-router'
+import { useAuth } from '../vasp/auth.js'
+
+const router = useRouter()
+const { register } = useAuth()
+const username = ref('')
+const email = ref('')
+const password = ref('')
+const loading = ref(false)
+const error = ref('')
+
+async function handleRegister() {
+  loading.value = true
+  error.value = ''
+  try {
+    await register(username.value, password.value, email.value || undefined)
+    router.push('/')
+  } catch (err) {
+    error.value = err?.data?.error || 'Registration failed'
+  } finally {
+    loading.value = false
+  }
+}
+</script>

package/templates/templates/shared/auth/server/index.hbs

@@ -0,0 +1,51 @@
+import { Elysia } from 'elysia'
+import { jwt } from '@elysiajs/jwt'
+import { cookie } from '@elysiajs/cookie'
+import { db } from '../db/client.{{ext}}'
+import { users } from '../../drizzle/schema.{{ext}}'
+import { eq } from 'drizzle-orm'
+{{#if (includes authMethods "usernameAndPassword")}}
+import { usernameAndPasswordRoutes } from './providers/usernameAndPassword.{{ext}}'
+{{/if}}
+{{#if (includes authMethods "google")}}
+import { googleRoutes } from './providers/google.{{ext}}'
+{{/if}}
+{{#if (includes authMethods "github")}}
+import { githubRoutes } from './providers/github.{{ext}}'
+{{/if}}
+
+const JWT_SECRET = process.env.JWT_SECRET || 'change-me-in-production'
+
+export const authPlugin = new Elysia({ name: 'auth-plugin' })
+  .use(jwt({ name: 'jwt', secret: JWT_SECRET }))
+  .use(cookie())
+
+export const authRoutes = new Elysia({ prefix: '/auth' })
+  .use(authPlugin)
+{{#if (includes authMethods "usernameAndPassword")}}
+  .use(usernameAndPasswordRoutes)
+{{/if}}
+{{#if (includes authMethods "google")}}
+  .use(googleRoutes)
+{{/if}}
+{{#if (includes authMethods "github")}}
+  .use(githubRoutes)
+{{/if}}
+  .get('/me', async ({ jwt, cookie: { token }, set }) => {
+    const payload = await jwt.verify(token?.value ?? '')
+    if (!payload || typeof payload.userId !== 'number') {
+      set.status = 401
+      return { error: 'Unauthorized' }
+    }
+    const [user] = await db.select().from(users).where(eq(users.id, payload.userId)).limit(1)
+    if (!user) {
+      set.status = 401
+      return { error: 'User not found' }
+    }
+    const { passwordHash: _ph, ...safeUser } = user
+    return safeUser
+  })
+  .post('/logout', ({ cookie: { token }, set }) => {
+    token?.remove()
+    return { ok: true }
+  })

package/templates/templates/shared/auth/server/middleware.hbs

@@ -0,0 +1,33 @@
+import { Elysia } from 'elysia'
+import { jwt } from '@elysiajs/jwt'
+import { cookie } from '@elysiajs/cookie'
+import { db } from '../db/client.{{ext}}'
+import { users } from '../../drizzle/schema.{{ext}}'
+import { eq } from 'drizzle-orm'
+
+const JWT_SECRET = process.env.JWT_SECRET || 'change-me-in-production'
+
+/**
+ * requireAuth — Elysia plugin that verifies the JWT cookie and injects `user` into the context.
+ * Use on any route that requires authentication.
+ *
+ * @example
+ * new Elysia().use(requireAuth).get('/protected', ({ user }) => user)
+ */
+export const requireAuth = new Elysia({ name: 'require-auth' })
+  .use(jwt({ name: 'jwt', secret: JWT_SECRET }))
+  .use(cookie())
+  .derive(async ({ jwt, cookie: { token }, set }) => {
+    const payload = await jwt.verify(token?.value ?? '')
+    if (!payload || typeof payload.userId !== 'number') {
+      set.status = 401
+      throw new Error('Unauthorized')
+    }
+    const [user] = await db.select().from(users).where(eq(users.id, payload.userId)).limit(1)
+    if (!user) {
+      set.status = 401
+      throw new Error('User not found')
+    }
+    const { passwordHash: _ph, ...safeUser } = user
+    return { user: safeUser }
+  })

package/templates/templates/shared/auth/server/providers/github.hbs

@@ -0,0 +1,48 @@
+import { Elysia } from 'elysia'
+import { db } from '../../db/client.{{ext}}'
+import { users } from '../../../drizzle/schema.{{ext}}'
+import { eq } from 'drizzle-orm'
+import { authPlugin } from '../index.{{ext}}'
+
+const GITHUB_CLIENT_ID = process.env.GITHUB_CLIENT_ID || ''
+const GITHUB_CLIENT_SECRET = process.env.GITHUB_CLIENT_SECRET || ''
+const REDIRECT_URI = process.env.GITHUB_REDIRECT_URI || 'http://localhost:{{backendPort}}/auth/github/callback'
+
+export const githubRoutes = new Elysia()
+  .use(authPlugin)
+  .get('/github', ({ set }) => {
+    const params = new URLSearchParams({
+      client_id: GITHUB_CLIENT_ID,
+      redirect_uri: REDIRECT_URI,
+      scope: 'read:user user:email',
+    })
+    set.redirect = `https://github.com/login/oauth/authorize?${params}`
+  })
+  .get('/github/callback', async ({ query, jwt, cookie: { token }, set }) => {
+    const { code } = query
+    if (!code) { set.status = 400; return { error: 'Missing code' } }
+
+    const tokenRes = await fetch('https://github.com/login/oauth/access_token', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
+      body: JSON.stringify({ client_id: GITHUB_CLIENT_ID, client_secret: GITHUB_CLIENT_SECRET, code }),
+    })
+    const { access_token } = await tokenRes.json()
+
+    const userRes = await fetch('https://api.github.com/user', {
+      headers: { Authorization: `Bearer ${access_token}`, Accept: 'application/json' },
+    })
+    const ghUser = await userRes.json()
+    const githubId = String(ghUser.id)
+    const email = ghUser.email || `${ghUser.login}@github.local`
+
+    let [user] = await db.select().from(users).where(eq(users.githubId, githubId)).limit(1)
+    if (!user) {
+      ;[user] = await db.insert(users).values({ username: ghUser.login, email, githubId }).returning()
+    }
+    if (!user) { set.status = 500; return { error: 'Failed to create user' } }
+
+    const tokenValue = await jwt.sign({ userId: user.id })
+    token.set({ value: tokenValue, httpOnly: true, sameSite: 'lax', path: '/' })
+    set.redirect = '/'
+  })