create-nexwire 4.0.0 → 4.1.0

package/hono/src/modules/auth/database/models/role.ts

@@ -11,4 +11,4 @@ export const roles = sqliteTable("roles", {
 
 export const rolesRelations = relations(roles, ({ many }) => ({
   users: many(users)
-}));
+}));

package/hono/src/modules/auth/database/models/user.ts

@@ -43,4 +43,4 @@ export const usersRelations = relations(users, ({ one }) => ({
     fields: [users.roleId],
     references: [roles.id]
   })
-}));
+}));

package/hono/src/modules/auth/facade.ts

@@ -0,0 +1,12 @@
+/**
+ * Public API for the auth module.
+ *
+ * Other modules import from this file, never from controllers/ or services/ directly.
+ * Re-export the pieces they are allowed to depend on:
+ *
+ * export { list, findOne } from "./services/auth.js";
+ *
+ * Rule: a facade must never import another module's facade.
+ */
+
+export { getCurrentUser, hasRole } from "@/modules/auth/helpers/auth.js";

package/hono/src/modules/auth/{controllers/auth.helpers.ts → helpers/auth.ts}

@@ -2,8 +2,7 @@ import { createHash, randomBytes } from "node:crypto";
 import { eq } from "drizzle-orm";
 import { jwtConfig } from "@/config/index.js";
 import { cookie, db, jwt } from "@/framework/facade.js";
-import { refreshTokens } from "@/modules/auth/database/models/user.js";
-import { users } from "@/modules/auth/database/models/user.js";
+import { refreshTokens, users } from "@/modules/auth/database/models/user.js";
 
 export function hasRole(auth: any, rolesToMatch: string[]) {
   const role = String(auth?.role || "").toLowerCase();
@@ -17,7 +16,7 @@ export async function getCurrentUser(auth: any) {
     with: { role: true },
     columns: {
       password: false,
-      rememberToken: false,
+      rememberToken: false
     }
   });
 }
@@ -25,7 +24,7 @@ export async function getCurrentUser(auth: any) {
 /**
  * Why: Removes sensitive/internal fields before returning user payload.
  * When: Used in auth responses like register/login/me.
- * Where: Called by auth.controller handlers.
+ * Where: Called by auth controllers.
  */
 export function sanitizeUser(user: any) {
   return {
@@ -84,9 +83,9 @@ export async function revokeCurrentRefreshToken(c: any) {
 /**
  * Why: Issues access+refresh tokens, persists refresh token, sets cookies.
  * When: Used after successful auth actions (register/login/refresh patterns).
- * Where: Called by auth.controller handlers.
+ * Where: Called by auth controllers.
  */
-export async function issueTokens(c: any, user: any, options?: { remember?: boolean; }) {
+export async function issueTokens(c: any, user: any, options?: { remember?: boolean }) {
   const remember = !!options?.remember;
   const refreshExpiry = remember ? jwtConfig.refreshRememberExpirySeconds : jwtConfig.refreshExpirySeconds;
   const role = user.role || null;

package/hono/src/modules/auth/jobs/registeruser.ts

@@ -1,23 +1,23 @@
-import { DateTime as Datetime } from "luxon";
-import { dispatchEvent, mail, shouldQueue } from "@/framework/facade.js";
-
-shouldQueue("user:signup", "mail", async (job) => {
-  const { email, name, password, userId } = job.data;
-
-  await mail.sendMail({
-    to: email,
-    subject: "Account Creation",
-    html: `
-      <p>Hello ${name},</p>
-      <p>Your account was created successfully.</p>
-      <p>Email: ${email}</p>
-      <p>Password: ${password}</p>
-    `
-  });
-
-  await dispatchEvent("admin.user.registered", { userId, name, email, createdAt: Datetime.now() }, { broadcast: { roles: ["admin"] } });
-
-  await dispatchEvent("user.registered", { message: "Welcome! Your account has been created." }, { broadcast: { users: [userId] } });
-
-  return { ok: true, userId };
-});
+import { DateTime as Datetime } from "luxon";
+import { dispatchEvent, mail, shouldQueue } from "@/framework/facade.js";
+
+shouldQueue("user:signup", "mail", async (job) => {
+  const { email, name, userId } = job.data;
+
+  await mail.sendMail({
+    to: email,
+    subject: "Welcome to <AppName>",
+    html: `
+      <p>Hello ${name},</p>
+      <p>Your account was created successfully.</p>
+      <p>You can log in any time with the email address and password you chose during signup.</p>
+      <p><a href="https://app.example.com/login">Log in to your account</a></p>
+    `
+  });
+
+  await dispatchEvent("admin.user.registered", { userId, name, email, createdAt: Datetime.now() }, { broadcast: { roles: ["admin"] } });
+
+  await dispatchEvent("user.registered", { message: "Welcome! Your account has been created." }, { broadcast: { users: [userId] } });
+
+  return { ok: true, userId };
+});

package/hono/src/modules/auth/routes/{api.ts → index.ts}

@@ -1,150 +1,150 @@
-import { createRoute, createRouter, HttpStatusCodes, jsonContent, z } from "@/framework/facade.js";
-import { loginLimiter } from "@/framework/http/ratelimiter.js";
-import { authMiddleware } from "@/middlewares/auth-middleware.js";
-import {
-  forgotPassword,
-  login,
-  logout,
-  logoutAllDevices,
-  me,
-  refreshToken,
-  register,
-  resetPassword,
-  verifyEmail
-} from "@/modules/auth/controllers/auth.controller.js";
-import {
-  AuthResponseSchema,
-  ForgotPasswordSchema,
-  LoginSchema,
-  MessageSchema,
-  RefreshTokenSchema,
-  RegisterSchema,
-  ResetPasswordSchema,
-  UserSchema,
-  VerifyEmailSchema
-} from "@/modules/auth/controllers/auth.schema.js";
-
-const registerRoute = createRoute({
-  path: "/register",
-  method: "post",
-  tags: ["Auth"],
-  description: "Register a new user",
-  request: {
-    body: jsonContent(RegisterSchema, "Register payload")
-  },
-  responses: {
-    [HttpStatusCodes.CREATED]: jsonContent(AuthResponseSchema, "Registered")
-  }
-});
-
-const loginRoute = createRoute({
-  path: "/login",
-  method: "post",
-  tags: ["Auth"],
-  description: "Login user",
-  request: {
-    body: jsonContent(LoginSchema, "Login payload")
-  },
-  responses: {
-    [HttpStatusCodes.OK]: jsonContent(AuthResponseSchema, "Logged in")
-  }
-});
-
-const meRoute = createRoute({
-  path: "/me",
-  method: "get",
-  tags: ["Auth"],
-  description: "Get authenticated user",
-  responses: {
-    [HttpStatusCodes.OK]: jsonContent(z.object({ message: z.string(), data: UserSchema }), "Authenticated user")
-  }
-});
-
-const logoutRoute = createRoute({
-  path: "/logout",
-  method: "post",
-  tags: ["Auth"],
-  description: "Logout user from current device",
-  responses: {
-    [HttpStatusCodes.OK]: jsonContent(MessageSchema, "Logged out")
-  }
-});
-
-const logoutAllDevicesRoute = createRoute({
-  path: "/logout-all",
-  method: "post",
-  tags: ["Auth"],
-  description: "Logout user from all devices",
-  responses: {
-    [HttpStatusCodes.OK]: jsonContent(MessageSchema, "Logged out from all devices")
-  }
-});
-
-const forgotPasswordRoute = createRoute({
-  path: "/forgot-password",
-  method: "post",
-  tags: ["Auth"],
-  description: "Send reset password email",
-  request: {
-    body: jsonContent(ForgotPasswordSchema, "Forgot password payload")
-  },
-  responses: {
-    [HttpStatusCodes.OK]: jsonContent(MessageSchema, "Reset email sent")
-  }
-});
-
-const resetPasswordRoute = createRoute({
-  path: "/reset-password",
-  method: "post",
-  tags: ["Auth"],
-  description: "Reset password using token",
-  request: {
-    body: jsonContent(ResetPasswordSchema, "Reset password payload")
-  },
-  responses: {
-    [HttpStatusCodes.OK]: jsonContent(MessageSchema, "Password reset")
-  }
-});
-
-const refreshTokenRoute = createRoute({
-  path: "/refresh-token",
-  method: "post",
-  tags: ["Auth"],
-  description: "Refresh access token",
-  request: {
-    body: jsonContent(RefreshTokenSchema, "Refresh token payload")
-  },
-  responses: {
-    [HttpStatusCodes.OK]: jsonContent(AuthResponseSchema, "Token refreshed")
-  }
-});
-
-const verifyEmailRoute = createRoute({
-  path: "/verify-email",
-  method: "post",
-  tags: ["Auth"],
-  description: "Verify user email using token",
-  request: {
-    body: jsonContent(VerifyEmailSchema, "Verify email payload")
-  },
-  responses: {
-    [HttpStatusCodes.OK]: jsonContent(MessageSchema, "Email verified")
-  }
-});
-
-const publicRoute = createRouter()
-  .group(loginLimiter)
-  .api(registerRoute, register)
-  .api(loginRoute, login)
-  .api(forgotPasswordRoute, forgotPassword)
-  .api(resetPasswordRoute, resetPassword)
-  .api(verifyEmailRoute, verifyEmail)
-  .api(refreshTokenRoute, refreshToken);
-
-const protectedRoute = createRouter()
-  .group(authMiddleware)
-  .api(meRoute, me)
-  .api(logoutRoute, logout)
-  .api(logoutAllDevicesRoute, logoutAllDevices);
-
-export default createRouter().route("/", publicRoute).route("/", protectedRoute);
+import { createRoute, createRouter, HttpStatusCodes, jsonContent, z } from "@/framework/facade.js";
+import { loginLimiter } from "@/framework/http/ratelimiter.js";
+import { authMiddleware } from "@/middlewares/auth-middleware.js";
+import {
+  forgotPassword,
+  login,
+  logout,
+  logoutAllDevices,
+  me,
+  refreshToken,
+  register,
+  resetPassword,
+  verifyEmail
+} from "@/modules/auth/controllers/auth.js";
+import {
+  AuthResponseSchema,
+  ForgotPasswordSchema,
+  LoginSchema,
+  MessageSchema,
+  RefreshTokenSchema,
+  RegisterSchema,
+  ResetPasswordSchema,
+  UserSchema,
+  VerifyEmailSchema
+} from "@/modules/auth/schemas/auth.js";
+
+const registerRoute = createRoute({
+  path: "/register",
+  method: "post",
+  tags: ["Auth"],
+  description: "Register a new user",
+  request: {
+    body: jsonContent(RegisterSchema, "Register payload")
+  },
+  responses: {
+    [HttpStatusCodes.CREATED]: jsonContent(AuthResponseSchema, "Registered")
+  }
+});
+
+const loginRoute = createRoute({
+  path: "/login",
+  method: "post",
+  tags: ["Auth"],
+  description: "Login user",
+  request: {
+    body: jsonContent(LoginSchema, "Login payload")
+  },
+  responses: {
+    [HttpStatusCodes.OK]: jsonContent(AuthResponseSchema, "Logged in")
+  }
+});
+
+const meRoute = createRoute({
+  path: "/me",
+  method: "get",
+  tags: ["Auth"],
+  description: "Get authenticated user",
+  responses: {
+    [HttpStatusCodes.OK]: jsonContent(z.object({ message: z.string(), data: UserSchema }), "Authenticated user")
+  }
+});
+
+const logoutRoute = createRoute({
+  path: "/logout",
+  method: "post",
+  tags: ["Auth"],
+  description: "Logout user from current device",
+  responses: {
+    [HttpStatusCodes.OK]: jsonContent(MessageSchema, "Logged out")
+  }
+});
+
+const logoutAllDevicesRoute = createRoute({
+  path: "/logout-all",
+  method: "post",
+  tags: ["Auth"],
+  description: "Logout user from all devices",
+  responses: {
+    [HttpStatusCodes.OK]: jsonContent(MessageSchema, "Logged out from all devices")
+  }
+});
+
+const forgotPasswordRoute = createRoute({
+  path: "/forgot-password",
+  method: "post",
+  tags: ["Auth"],
+  description: "Send reset password email",
+  request: {
+    body: jsonContent(ForgotPasswordSchema, "Forgot password payload")
+  },
+  responses: {
+    [HttpStatusCodes.OK]: jsonContent(MessageSchema, "Reset email sent")
+  }
+});
+
+const resetPasswordRoute = createRoute({
+  path: "/reset-password",
+  method: "post",
+  tags: ["Auth"],
+  description: "Reset password using token",
+  request: {
+    body: jsonContent(ResetPasswordSchema, "Reset password payload")
+  },
+  responses: {
+    [HttpStatusCodes.OK]: jsonContent(MessageSchema, "Password reset")
+  }
+});
+
+const refreshTokenRoute = createRoute({
+  path: "/refresh-token",
+  method: "post",
+  tags: ["Auth"],
+  description: "Refresh access token",
+  request: {
+    body: jsonContent(RefreshTokenSchema, "Refresh token payload")
+  },
+  responses: {
+    [HttpStatusCodes.OK]: jsonContent(AuthResponseSchema, "Token refreshed")
+  }
+});
+
+const verifyEmailRoute = createRoute({
+  path: "/verify-email",
+  method: "post",
+  tags: ["Auth"],
+  description: "Verify user email using token",
+  request: {
+    body: jsonContent(VerifyEmailSchema, "Verify email payload")
+  },
+  responses: {
+    [HttpStatusCodes.OK]: jsonContent(MessageSchema, "Email verified")
+  }
+});
+
+const publicRoute = createRouter()
+  .group(loginLimiter)
+  .api(registerRoute, register)
+  .api(loginRoute, login)
+  .api(forgotPasswordRoute, forgotPassword)
+  .api(resetPasswordRoute, resetPassword)
+  .api(verifyEmailRoute, verifyEmail)
+  .api(refreshTokenRoute, refreshToken);
+
+const protectedRoute = createRouter()
+  .group(authMiddleware)
+  .api(meRoute, me)
+  .api(logoutRoute, logout)
+  .api(logoutAllDevicesRoute, logoutAllDevices);
+
+export default createRouter().route("/", publicRoute).route("/", protectedRoute);

package/hono/src/modules/auth/routes/role.ts

@@ -1,33 +1,33 @@
-import { createRoute, createRouter, HttpStatusCodes, jsonContent, z } from "@/framework/facade.js";
-import { authMiddleware } from "@/middlewares/auth-middleware.js";
-import { requireRole } from "@/middlewares/role-middleware.js";
-import { IdParamsSchema, RoleSchema } from "@/modules/auth/controllers/auth.schema.js";
-import { index, show } from "@/modules/auth/controllers/role.controller.js";
-
-const indexRoute = createRoute({
-  path: "/role",
-  method: "get",
-  tags: ["Role"],
-  description: "List all roles",
-  responses: {
-    [HttpStatusCodes.OK]: jsonContent(z.object({ message: z.string(), data: z.array(RoleSchema) }), "Role list")
-  }
-});
-
-const showRoute = createRoute({
-  path: "/role/{id}",
-  method: "get",
-  tags: ["Role"],
-  description: "Show one role",
-  request: {
-    params: IdParamsSchema
-  },
-  responses: {
-    [HttpStatusCodes.OK]: jsonContent(z.object({ message: z.string(), data: RoleSchema.nullable() }), "Role item")
-  }
-});
-
-export default createRouter()
-  .group(authMiddleware)
-  .api(indexRoute, [requireRole("admin")], index)
-  .api(showRoute, [requireRole("admin")], show);
+import { createRoute, createRouter, HttpStatusCodes, jsonContent, z } from "@/framework/facade.js";
+import { authMiddleware } from "@/middlewares/auth-middleware.js";
+import { requireRole } from "@/middlewares/role-middleware.js";
+import { index, show } from "@/modules/auth/controllers/role.js";
+import { IdParamsSchema, RoleSchema } from "@/modules/auth/schemas/auth.js";
+
+const indexRoute = createRoute({
+  path: "/role",
+  method: "get",
+  tags: ["Role"],
+  description: "List all roles",
+  responses: {
+    [HttpStatusCodes.OK]: jsonContent(z.object({ message: z.string(), data: z.array(RoleSchema) }), "Role list")
+  }
+});
+
+const showRoute = createRoute({
+  path: "/role/{id}",
+  method: "get",
+  tags: ["Role"],
+  description: "Show one role",
+  request: {
+    params: IdParamsSchema
+  },
+  responses: {
+    [HttpStatusCodes.OK]: jsonContent(z.object({ message: z.string(), data: RoleSchema.nullable() }), "Role item")
+  }
+});
+
+export default createRouter()
+  .group(authMiddleware)
+  .api(indexRoute, [requireRole("admin")], index)
+  .api(showRoute, [requireRole("admin")], show);