create-nexwire 4.0.0 → 4.1.1

package/express/src/framework/realtime/broadcast.ts

@@ -1,46 +1,46 @@
-import { env } from "@/env.js";
-import { socketServer } from "@/framework/realtime/index.js";
-import { redisClientIfReady } from "@/framework/redis/client.js";
-
-export type BroadcastOptions = {
-  users?: Array<string | number>;
-  roles?: string[];
-  rooms?: string[];
-  auth?: boolean;
-  all?: boolean;
-};
-
-/**
- * Why: Emits realtime events to targeted audiences.
- * When: Domain events need websocket fan-out.
- * Where: Event dispatcher and module jobs.
- * How: Emits via Socket.IO if available; otherwise relays through Redis pub/sub
- *      so the main process (which has Socket.IO) can broadcast it.
- */
-function emitViaIo(event: string, payload: any, options: BroadcastOptions) {
-  const io = socketServer();
-  if (!io) return;
-
-  if (options.all) io.emit(event, payload);
-  if (options.auth) io.to("auth").emit(event, payload);
-
-  for (const user of options.users || []) io.to(`user:${user}`).emit(event, payload);
-  for (const role of options.roles || []) io.to(`role:${role}`).emit(event, payload);
-  for (const room of options.rooms || []) io.to(room).emit(event, payload);
-}
-
-export function broadcast(event: string, payload: any, options: BroadcastOptions = {}) {
-  const io = socketServer();
-
-  if (io) {
-    emitViaIo(event, payload, options);
-    return;
-  }
-
-  // No Socket.IO in this process — relay through Redis so the main process can broadcast
-  const redis = redisClientIfReady();
-  if (!redis) return;
-
-  const channel = `${env.REDIS_PREFIX}:broadcast`;
-  redis.publish(channel, JSON.stringify({ event, payload, options }));
-}
+import { env } from "@/env.js";
+import { socketServer } from "@/framework/realtime/socket.js";
+import { redisClientIfReady } from "@/framework/redis/client.js";
+
+export type BroadcastOptions = {
+  users?: Array<string | number>;
+  roles?: string[];
+  rooms?: string[];
+  auth?: boolean;
+  all?: boolean;
+};
+
+/**
+ * Why: Emits realtime events to targeted audiences.
+ * When: Domain events need websocket fan-out.
+ * Where: Event dispatcher and module jobs.
+ * How: Emits via Socket.IO if available; otherwise relays through Redis pub/sub
+ *      so the main process (which has Socket.IO) can broadcast it.
+ */
+function emitViaIo(event: string, payload: any, options: BroadcastOptions) {
+  const io = socketServer();
+  if (!io) return;
+
+  if (options.all) io.emit(event, payload);
+  if (options.auth) io.to("auth").emit(event, payload);
+
+  for (const user of options.users || []) io.to(`user:${user}`).emit(event, payload);
+  for (const role of options.roles || []) io.to(`role:${role}`).emit(event, payload);
+  for (const room of options.rooms || []) io.to(room).emit(event, payload);
+}
+
+export function broadcast(event: string, payload: any, options: BroadcastOptions = {}) {
+  const io = socketServer();
+
+  if (io) {
+    emitViaIo(event, payload, options);
+    return;
+  }
+
+  // No Socket.IO in this process — relay through Redis so the main process can broadcast
+  const redis = redisClientIfReady();
+  if (!redis) return;
+
+  const channel = `${env.REDIS_PREFIX}:broadcast`;
+  redis.publish(channel, JSON.stringify({ event, payload, options }));
+}

package/express/src/framework/server.ts

@@ -139,10 +139,11 @@ export async function startServer(): Promise<ServerHandle> {
     console.log("Drizzle Studio requested: https://local.drizzle.studio (see dev process status)");
   }
 
+  const wsUrl = serverUrl(server, WS_PATH).replace(/^http/, "ws");
   const socketLine = !realtimeConfig.enabled
     ? "Realtime (Socket.IO) disabled"
     : realtime
-      ? `Realtime (Socket.IO) enabled: ${socketAdmin.enabled ? "Admin UI: https://admin.socket.io" : ""} ${" | " + serverUrl(server, WS_PATH).replace(/^http/, "ws")}`
+      ? `Realtime (Socket.IO) enabled: ${socketAdmin.enabled ? `Admin UI: https://admin.socket.io | ${wsUrl}` : `| ${wsUrl}`}`
       : "Realtime (Socket.IO) unavailable";
   console.log(!realtimeConfig.enabled ? chalk.gray(socketLine) : realtime ? chalk.green(socketLine) : chalk.yellow(socketLine));
 

package/express/src/framework/session/session.ts

@@ -1,98 +1,102 @@
-import { randomUUID } from "node:crypto";
-import type { NextFunction, Request, Response } from "express";
-import { appConfig, redisConfig, sessionConfig } from "@/config/index.js";
-import { redisClientIfReady } from "@/framework/redis/client.js";
-
-function originOf(url?: string) {
-  if (!url) return "";
-  try {
-    return new URL(url).origin;
-  } catch {
-    return "";
-  }
-}
-
-function needsCrossSiteCookie() {
-  const appOrigin = originOf(appConfig.url);
-  const frontendOrigin = originOf(appConfig.frontendUrl);
-  return Boolean(appOrigin && frontendOrigin && appOrigin !== frontendOrigin);
-}
-
-function sessionKey(id: string) {
-  return `${sessionConfig.keyPrefix}:${id}`;
-}
-
-export async function sessionMiddleware(req: Request, res: Response, next: NextFunction) {
-  let sessionId = req.signedCookies?.[sessionConfig.cookieName];
-
-  if (!sessionId) {
-    sessionId = randomUUID();
-    const crossSiteCookie = needsCrossSiteCookie();
-    res.cookie(sessionConfig.cookieName, sessionId, {
-      httpOnly: true,
-      sameSite: crossSiteCookie ? "none" : "lax",
-      secure: crossSiteCookie,
-      path: "/",
-      maxAge: sessionConfig.ttlSeconds * 1000,
-      signed: true
-    });
-  }
-
-  res.locals.sessionId = sessionId;
-  await session.refresh(sessionId);
-  return next();
-}
-
-export const session = {
-  async start(data: Record<string, unknown> = {}) {
-    const client = redisClientIfReady();
-    if (!client) return "";
-
-    const id = randomUUID();
-    await client.set(sessionKey(id), JSON.stringify(data), "EX", sessionConfig.ttlSeconds);
-    return id;
-  },
-
-  async all<T = Record<string, unknown>>(id: string): Promise<T | null> {
-    const client = redisClientIfReady();
-    if (!client) return null;
-
-    const data = await client.get(sessionKey(id));
-    return data ? JSON.parse(data) : null;
-  },
-
-  async get<T>(id: string, key: string): Promise<T | null> {
-    const data = await session.all<Record<string, T>>(id);
-    return data?.[key] ?? null;
-  },
-
-  async put(id: string, key: string, value: unknown) {
-    const client = redisClientIfReady();
-    if (!client) return false;
-
-    const data = (await session.all<Record<string, unknown>>(id)) || {};
-    data[key] = value;
-    await client.set(sessionKey(id), JSON.stringify(data), "EX", sessionConfig.ttlSeconds);
-    return true;
-  },
-
-  async refresh(id: string) {
-    const client = redisClientIfReady();
-    if (!client) return false;
-
-    await client.expire(sessionKey(id), sessionConfig.ttlSeconds);
-    return true;
-  },
-
-  async destroy(id: string) {
-    const client = redisClientIfReady();
-    if (!client) return false;
-
-    await client.del(sessionKey(id));
-    return true;
-  },
-
-  isAvailable() {
-    return redisConfig.enabled && redisClientIfReady() !== null;
-  }
-};
+import { randomUUID } from "node:crypto";
+import type { NextFunction, Request, Response } from "express";
+import { appConfig, redisConfig, sessionConfig } from "@/config/index.js";
+import { redisClientIfReady } from "@/framework/redis/client.js";
+
+function originOf(url?: string) {
+  if (!url) return "";
+  try {
+    return new URL(url).origin;
+  } catch {
+    return "";
+  }
+}
+
+function needsCrossSiteCookie() {
+  const appOrigin = originOf(appConfig.url);
+  const frontendOrigin = originOf(appConfig.frontendUrl);
+  return Boolean(appOrigin && frontendOrigin && appOrigin !== frontendOrigin);
+}
+
+function sessionKey(id: string) {
+  return `${sessionConfig.keyPrefix}:${id}`;
+}
+
+export async function sessionMiddleware(req: Request, res: Response, next: NextFunction) {
+  let sessionId = req.cookies?.[sessionConfig.cookieName];
+
+  if (!sessionId) {
+    sessionId = randomUUID();
+    const crossSiteCookie = needsCrossSiteCookie();
+    res.cookie(sessionConfig.cookieName, sessionId, {
+      httpOnly: true,
+      sameSite: crossSiteCookie ? "none" : "lax",
+      secure: crossSiteCookie,
+      path: "/",
+      maxAge: sessionConfig.ttlSeconds * 1000
+    });
+  }
+
+  res.locals.sessionId = sessionId;
+  await session.refresh(sessionId);
+  next();
+}
+
+export const session = {
+  async start(data: Record<string, unknown> = {}) {
+    const client = redisClientIfReady();
+    if (!client) return "";
+
+    const id = randomUUID();
+    await client.set(sessionKey(id), JSON.stringify(data), "EX", sessionConfig.ttlSeconds);
+    return id;
+  },
+
+  async all<T = Record<string, unknown>>(id: string): Promise<T | null> {
+    const client = redisClientIfReady();
+    if (!client) return null;
+
+    const data = await client.get(sessionKey(id));
+    return data ? JSON.parse(data) : null;
+  },
+
+  async get<T>(id: string, key: string): Promise<T | null> {
+    const data = await session.all<Record<string, T>>(id);
+    return data?.[key] ?? null;
+  },
+
+  async set(id: string, key: string, value: unknown) {
+    const client = redisClientIfReady();
+    if (!client) return false;
+
+    const data = (await session.all<Record<string, unknown>>(id)) || {};
+    data[key] = value;
+    await client.set(sessionKey(id), JSON.stringify(data), "EX", sessionConfig.ttlSeconds);
+    return true;
+  },
+
+  /** @deprecated Use set() instead. */
+  async put(id: string, key: string, value: unknown) {
+    return this.set(id, key, value);
+  },
+
+  async refresh(id: string) {
+    const client = redisClientIfReady();
+    if (!client) return false;
+
+    await client.expire(sessionKey(id), sessionConfig.ttlSeconds);
+    return true;
+  },
+
+  async destroy(id: string) {
+    const client = redisClientIfReady();
+    if (!client) return false;
+
+    await client.del(sessionKey(id));
+    return true;
+  },
+
+  isAvailable() {
+    return redisConfig.enabled && redisClientIfReady() !== null;
+  }
+};

package/express/src/framework/support/mail.ts

@@ -1,48 +1,48 @@
-import nodemailer from "nodemailer";
-import { mailConfig } from "@/config/index.js";
-import { logger } from "@/framework/support/logger.js";
-import { CircuitBreaker } from "@/framework/circuit-breaker/cb.js";
-
-type MailPayload = {
-  to: string;
-  subject: string;
-  html?: string;
-  text?: string;
-};
-
-const transport = nodemailer.createTransport({
-  host: mailConfig.host,
-  port: mailConfig.port,
-  secure: mailConfig.encryption === "ssl",
-  auth: mailConfig.username ? { user: mailConfig.username, pass: mailConfig.password } : undefined
-});
-
-const mailBreaker = new CircuitBreaker();
-
-export const mail = {
-  /**
-   * Why: Sends transactional email through configured SMTP transport.
-   * When: Features need notifications/password reset/signup email.
-   * Where: Jobs and event handlers.
-   * How: Uses nodemailer transport and respects the fail-silent setting.
-   */
-  async sendMail(payload: MailPayload) {
-    try {
-      return await mailBreaker.exec(() =>
-        transport.sendMail({
-          from: mailConfig.fromAddress,
-          ...payload
-        })
-      );
-    } catch (error) {
-      logger.error("Mail send failed", {
-        to: payload.to,
-        subject: payload.subject,
-        error: error instanceof Error ? error.message : error
-      });
-
-      if (!mailConfig.failSilent) throw error;
-      return null;
-    }
-  }
-};
+import nodemailer from "nodemailer";
+import { mailConfig } from "@/config/index.js";
+import { CircuitBreaker } from "@/framework/circuit-breaker/cb.js";
+import { logger } from "@/framework/support/logger.js";
+
+type MailPayload = {
+  to: string;
+  subject: string;
+  html?: string;
+  text?: string;
+};
+
+const transport = nodemailer.createTransport({
+  host: mailConfig.host,
+  port: mailConfig.port,
+  secure: mailConfig.encryption === "ssl",
+  auth: mailConfig.username ? { user: mailConfig.username, pass: mailConfig.password } : undefined
+});
+
+const mailBreaker = new CircuitBreaker();
+
+export const mail = {
+  /**
+   * Why: Sends transactional email through configured SMTP transport.
+   * When: Features need notifications/password reset/signup email.
+   * Where: Jobs and event handlers.
+   * How: Uses nodemailer transport and respects the fail-silent setting.
+   */
+  async sendMail(payload: MailPayload) {
+    try {
+      return await mailBreaker.exec(() =>
+        transport.sendMail({
+          from: mailConfig.fromAddress,
+          ...payload
+        })
+      );
+    } catch (error) {
+      logger.error("Mail send failed", {
+        to: payload.to,
+        subject: payload.subject,
+        error: error instanceof Error ? error.message : error
+      });
+
+      if (!mailConfig.failSilent) throw error;
+      return null;
+    }
+  }
+};

package/express/src/framework/support/status-codes.ts

@@ -0,0 +1,75 @@
+// 1xx Informational
+export const CONTINUE = 100;
+export const SWITCHING_PROTOCOLS = 101;
+export const PROCESSING = 102;
+export const EARLY_HINTS = 103;
+
+// 2xx Success
+export const OK = 200;
+export const CREATED = 201;
+export const ACCEPTED = 202;
+export const NON_AUTHORITATIVE_INFORMATION = 203;
+export const NO_CONTENT = 204;
+export const RESET_CONTENT = 205;
+export const PARTIAL_CONTENT = 206;
+export const MULTI_STATUS = 207;
+export const ALREADY_REPORTED = 208;
+export const IM_USED = 226;
+
+// 3xx Redirection
+export const MULTIPLE_CHOICES = 300;
+export const MOVED_PERMANENTLY = 301;
+export const FOUND = 302;
+export const MOVED_TEMPORARILY = 302;
+export const SEE_OTHER = 303;
+export const NOT_MODIFIED = 304;
+export const USE_PROXY = 305;
+export const TEMPORARY_REDIRECT = 307;
+export const PERMANENT_REDIRECT = 308;
+
+// 4xx Client Error
+export const BAD_REQUEST = 400;
+export const UNAUTHORIZED = 401;
+export const PAYMENT_REQUIRED = 402;
+export const FORBIDDEN = 403;
+export const NOT_FOUND = 404;
+export const METHOD_NOT_ALLOWED = 405;
+export const NOT_ACCEPTABLE = 406;
+export const PROXY_AUTHENTICATION_REQUIRED = 407;
+export const REQUEST_TIMEOUT = 408;
+export const CONFLICT = 409;
+export const GONE = 410;
+export const LENGTH_REQUIRED = 411;
+export const PRECONDITION_FAILED = 412;
+export const PAYLOAD_TOO_LARGE = 413;
+export const REQUEST_TOO_LONG = 413;
+export const URI_TOO_LONG = 414;
+export const REQUEST_URI_TOO_LONG = 414;
+export const UNSUPPORTED_MEDIA_TYPE = 415;
+export const RANGE_NOT_SATISFIABLE = 416;
+export const REQUESTED_RANGE_NOT_SATISFIABLE = 416;
+export const EXPECTATION_FAILED = 417;
+export const IM_A_TEAPOT = 418;
+export const MISDIRECTED_REQUEST = 421;
+export const UNPROCESSABLE_ENTITY = 422;
+export const LOCKED = 423;
+export const FAILED_DEPENDENCY = 424;
+export const TOO_EARLY = 425;
+export const UPGRADE_REQUIRED = 426;
+export const PRECONDITION_REQUIRED = 428;
+export const TOO_MANY_REQUESTS = 429;
+export const REQUEST_HEADER_FIELDS_TOO_LARGE = 431;
+export const UNAVAILABLE_FOR_LEGAL_REASONS = 451;
+
+// 5xx Server Error
+export const INTERNAL_SERVER_ERROR = 500;
+export const NOT_IMPLEMENTED = 501;
+export const BAD_GATEWAY = 502;
+export const SERVICE_UNAVAILABLE = 503;
+export const GATEWAY_TIMEOUT = 504;
+export const HTTP_VERSION_NOT_SUPPORTED = 505;
+export const VARIANT_ALSO_NEGOTIATES = 506;
+export const INSUFFICIENT_STORAGE = 507;
+export const LOOP_DETECTED = 508;
+export const NOT_EXTENDED = 510;
+export const NETWORK_AUTHENTICATION_REQUIRED = 511;

package/express/src/middlewares/auth-middleware.ts

@@ -1,6 +1,6 @@
 import { eq } from "drizzle-orm";
 import { type NextFunction, type Request, type Response } from "express";
-import { cookie, db, jwt, HttpStatusCodes } from "@/framework/facade.js";
+import { cookie, db, HttpStatusCodes, jwt } from "@/framework/facade.js";
 import { refreshTokens, users } from "@/modules/auth/database/models/user.js";
 
 export async function authMiddleware(req: Request, res: Response, next: NextFunction) {