create-nexwire 4.2.2 → 4.2.4

package/express/src/providers/README.md

@@ -0,0 +1,107 @@
+# Providers
+
+Provider files in this folder are imported automatically when the application
+boots. Use them for anything the **whole app** needs — a replacement auth
+implementation, a payment gateway, an SMS driver, a storage backend.
+
+There is no wiring step: drop a file in here and it runs.
+
+## How it works
+
+1. Every `src/providers/**/*.{ts,js,mjs}` file is imported at boot.
+2. Every `src/modules/<module>/providers.ts` file is imported at boot too, so a
+   module can plug itself into the app without the app knowing about it.
+3. Every `src/modules/<module>/providers/*.ts` file is imported at boot as well,
+   for a module that offers more than one implementation.
+4. A provider file claims a contract by registering an implementation.
+
+```ts
+// src/providers/payment.ts
+import { registerProvider } from "@/framework/facade.js";
+
+registerProvider("payment", {
+  async charge(order) {
+    return { id: "ch_123", status: "paid" };
+  }
+});
+```
+
+Read it back the same way:
+
+```ts
+import { getProvider } from "@/framework/facade.js";
+
+const payment = getProvider<any>("payment");
+```
+
+## Generating one
+
+```bash
+npm run maker provider:make payment
+npm run maker module:make-provider billing stripe
+```
+
+`provider:make` writes `src/providers/<name>.ts` for the whole app.
+`module:make-provider` writes `src/modules/<module>/providers/<name>.ts` for a
+single module. Both files register themselves when they are imported.
+
+## Replacing the built-in auth
+
+The framework ships with an auth module under `src/modules/auth`. To replace
+it, delete that folder and register your own auth provider:
+
+```ts
+// src/providers/auth.ts
+import { registerAuthProvider } from "@/framework/facade.js";
+import type { AuthProvider } from "@/framework/facade.js";
+
+const authProvider: AuthProvider = {
+  async getUserById(id) {
+    // Return any user shape you like. Extra fields (tenantId, plan, status, ...)
+    // are passed straight through to `c.get("auth")` / `res.locals.auth`.
+    return { id, email: "user@example.com", tenantId: 42, plan: "pro" };
+  },
+  async findRefreshToken(jti) {
+    // Return the stored refresh token, or null when it is unknown.
+    return { id: 1, jti, revoked: false, expiresAt: new Date() };
+  },
+  async revokeRefreshToken(tokenId) {
+    // Optional. Called when a refresh token is expired or revoked.
+  },
+  async getAuthContext(user, payload) {
+    // Optional. Shapes what handlers receive as the auth context.
+    return { id: user.id, email: user.email, tenantId: user.tenantId };
+  },
+  async getUserContact(userId) {
+    // Optional. Used by `notify()` to find the email address of a user.
+    return { email: "user@example.com", name: "User" };
+  }
+};
+
+registerAuthProvider(authProvider);
+```
+
+Import `registerAuthProvider` and the `AuthProvider` type from
+`@/framework/facade.js` — never from `@/framework/...` internals. The facade is
+the public API of the framework.
+
+## Module-to-module
+
+Modules do not import each other. They talk through:
+
+- `src/modules/<module>/facade.ts` — the public API of a module.
+- `dispatchEvent` / `dispatchCommand` — for cross-module notifications.
+- `src/providers/` — for app-wide implementations.
+
+## Contract reference
+
+| Method                              | Required | Purpose                                                        |
+| ----------------------------------- | -------- | -------------------------------------------------------------- |
+| `getUserById(id)`                   | Yes      | Loads a user. Any extra fields are passed through to the auth context. |
+| `findRefreshToken(jti)`             | Yes      | Loads a stored refresh token by its JWT id.                    |
+| `revokeRefreshToken(id)`            | No       | Revokes a refresh token. `deleteRefreshToken(id)` also works.  |
+| `getAuthContext(user, payload)`     | No       | Shapes the object handlers receive as `auth`.                   |
+| `getUserContact(userId)`            | No       | Finds the email/name of a user, used by notifications.         |
+
+When no provider is registered and `src/modules/auth` was deleted, the auth
+middleware logs a warning and lets the request through instead of crashing.

package/express/src/resources/src/main.ts

@@ -1,5 +1,5 @@
 import "@/plugins/axios";
-import { createHead } from "@vueuse/head";
+import { createHead } from "@unhead/vue/client";
 import { createPinia } from "pinia";
 import { createApp } from "vue";
 import { DialogPlugin } from "@/plugins/dialog";

package/express/src/resources/src/pages/auth/forgetPassword.vue

@@ -43,7 +43,7 @@
 </template>
 
 <script setup lang="ts">
-import { useHead } from "@vueuse/head";
+import { useHead } from "@unhead/vue";
 import { ref } from "vue";
 import Button from "@/components/Button.vue";
 import Input from "@/components/Input.vue";

package/express/src/resources/src/pages/auth/login.vue

@@ -47,7 +47,7 @@
 </template>
 
 <script setup lang="ts">
-import { useHead } from "@vueuse/head";
+import { useHead } from "@unhead/vue";
 import { ref } from "vue";
 import { useRouter } from "vue-router";
 import Button from "@/components/Button.vue";

package/express/src/resources/src/pages/auth/register.vue

@@ -65,7 +65,7 @@
 </template>
 
 <script setup lang="ts">
-import { useHead } from "@vueuse/head";
+import { useHead } from "@unhead/vue";
 import { ref } from "vue";
 import { useRouter } from "vue-router";
 import Button from "@/components/Button.vue";

package/express/src/resources/src/pages/auth/resetPassword.vue

@@ -53,7 +53,7 @@
 </template>
 
 <script setup lang="ts">
-import { useHead } from "@vueuse/head";
+import { useHead } from "@unhead/vue";
 import { ref } from "vue";
 import { useRoute, useRouter } from "vue-router";
 import Button from "@/components/Button.vue";

package/express/src/resources/src/pages/auth/verifyEmail.vue

@@ -23,7 +23,7 @@
 </template>
 
 <script setup lang="ts">
-import { useHead } from "@vueuse/head";
+import { useHead } from "@unhead/vue";
 import { ref } from "vue";
 import { useRoute } from "vue-router";
 import { useGum } from "@/plugins/gum";

package/express/src/resources/src/pages/dashboard/index.vue

@@ -1,66 +1,66 @@
-<template>
-  <Pagebar title="Dashboard" />
-
-  <div class="dashboard-placeholder">
-    <div class="row g-2 mb-2">
-      <div class="col-12 col-md-4">
-        <div class="placeholder-card"></div>
-      </div>
-      <div class="col-12 col-md-4">
-        <div class="placeholder-card"></div>
-      </div>
-      <div class="col-12 col-md-4">
-        <div class="placeholder-card"></div>
-      </div>
-    </div>
-
-    <div class="placeholder-panel"></div>
-  </div>
-</template>
-
-<script setup lang="ts">
-import { useHead } from "@vueuse/head";
-import { onMounted, onUnmounted } from "vue";
-import Pagebar from "@/components/Pagebar.vue";
-import { useAuth } from "@/composables/useAuth";
-import { pulse } from "@/plugins/pulse";
-
-useHead({ title: "Dashboard" });
-
-const { user } = useAuth();
-
-onMounted(() => {
-  const ch = pulse.channel("user");
-  ch.listen("user.changed", () => alert("me"));
-  onUnmounted(() => ch.stopListening("user.changed"));
-});
-
-// const hardRefresh = () => window.location.reload();
-</script>
-
-<style scoped>
-.placeholder-card,
-.placeholder-panel {
-  border: 1px solid var(--app-border);
-  border-radius: 0.3rem;
-  background: var(--app-surface);
-}
-
-.placeholder-card {
-  min-height: 220px;
-}
-
-.placeholder-panel {
-  min-height: 520px;
-}
-
-@media (max-width: 768px) {
-  .placeholder-card {
-    min-height: 160px;
-  }
-
-  .placeholder-panel {
-    min-height: 360px;
-  }
-}
-</style>
+<template>
+  <Pagebar title="Dashboard" />
+
+  <div class="dashboard-placeholder">
+    <div class="row g-2 mb-2">
+      <div class="col-12 col-md-4">
+        <div class="placeholder-card"></div>
+      </div>
+      <div class="col-12 col-md-4">
+        <div class="placeholder-card"></div>
+      </div>
+      <div class="col-12 col-md-4">
+        <div class="placeholder-card"></div>
+      </div>
+    </div>
+
+    <div class="placeholder-panel"></div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { useHead } from "@unhead/vue";
+import { onMounted, onUnmounted } from "vue";
+import Pagebar from "@/components/Pagebar.vue";
+import { useAuth } from "@/composables/useAuth";
+import { pulse } from "@/plugins/pulse";
+
+useHead({ title: "Dashboard" });
+
+const { user } = useAuth();
+
+onMounted(() => {
+  const ch = pulse.channel("user");
+  ch.listen("user.changed", () => alert("me"));
+  onUnmounted(() => ch.stopListening("user.changed"));
+});
+
+// const hardRefresh = () => window.location.reload();
+</script>
+
+<style scoped>
+.placeholder-card,
+.placeholder-panel {
+  border: 1px solid var(--app-border);
+  border-radius: 0.3rem;
+  background: var(--app-surface);
+}
+
+.placeholder-card {
+  min-height: 220px;
+}
+
+.placeholder-panel {
+  min-height: 520px;
+}
+
+@media (max-width: 768px) {
+  .placeholder-card {
+    min-height: 160px;
+  }
+
+  .placeholder-panel {
+    min-height: 360px;
+  }
+}
+</style>

package/hono/package.json

@@ -32,17 +32,17 @@
     "@aws-sdk/s3-request-presigner": "^3.1111.0",
     "@bull-board/api": "^8.6.1",
     "@bull-board/hono": "^8.6.1",
-    "@hono/node-server": "^2.1.0",
+    "@hono/node-server": "^2.1.5",
     "@hono/zod-openapi": "~1.5.3",
     "@libsql/client": "^0.17.4",
     "@scalar/hono-api-reference": "^0.10.20",
     "@socket.io/admin-ui": "^0.5.1",
     "@socket.io/bun-engine": "^0.1.1",
     "@socket.io/redis-adapter": "^8.3.0",
-    "@vitejs/plugin-vue": "^6.0.8",
+    "@unhead/vue": "^3.4.3",
+    "@vitejs/plugin-vue": "^6.0.10",
     "@vuepic/vue-datepicker": "^14.0.0",
     "@vueuse/core": "^14.4.0",
-    "@vueuse/head": "^2.0.0",
     "axios": "^1.19.0",
     "bcryptjs": "^3.0.3",
     "bootstrap": "^5.3.8",
@@ -50,48 +50,73 @@
     "bullmq": "^5.81.3",
     "bullmq-durable": "^0.2.0",
     "chalk": "^5.6.2",
-    "commander": "^14.0.3",
+    "commander": "^15.0.0",
     "croner": "^10.0.1",
     "dotenv": "^17.4.2",
     "dotenv-expand": "^13.0.0",
-    "drizzle-orm": "^0.45.2",
+    "drizzle-orm": "^0.45.4",
     "glob": "^13.0.6",
-    "hono": "^4.13.1",
+    "hono": "^4.13.14",
     "hono-rate-limiter": "^0.5.3",
     "ioredis": "^5.11.1",
     "lodash-es": "^4.18.1",
     "luxon": "^3.7.2",
-    "maildev": "^2.2.1",
+    "maildev": "^3.0.0",
     "mysql2": "^3.23.3",
-    "nodemailer": "^9.0.5",
+    "nodemailer": "^10.2.1",
     "pinia": "^3.0.4",
     "pino": "^10.3.1",
     "postgres": "^3.4.9",
     "redis-commander": "^0.9.0",
     "sass": "^1.100.0",
-    "socket.io": "^4.8.3",
-    "socket.io-client": "^4.8.3",
+    "socket.io": "^4.8.4",
+    "socket.io-client": "^4.8.4",
     "stoker": "^2.0.1",
-    "vite": "^8.2.1",
+    "vite": "^8.3.5",
     "vue": "^3.5.41",
     "vue-router": "^5.2.0",
     "vue-select": "^4.0.0-beta.6",
-    "zod": "^4.4.3"
+    "zod": "^4.6.7"
+  },
+  "overrides": {
+    "@esbuild-kit/core-utils": {
+      "esbuild": "^0.25.12"
+    },
+    "@maildev/mcp": {
+      "zod": "^4.6.7"
+    },
+    "@maildev/smtp": {
+      "jsdom": "^27.4.0",
+      "nodemailer": "^10.2.1"
+    },
+    "redis-commander": {
+      "express": "^4.22.3",
+      "body-parser": "^1.20.9",
+      "bcrypt": "npm:bcryptjs@^3.0.3",
+      "bcryptjs": "^3.0.3"
+    }
+  },
+  "allowScripts": {
+    "@parcel/watcher": true,
+    "esbuild": true,
+    "msgpackr-extract": true,
+    "redis-commander": true,
+    "vue-demi": true
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.7",
     "@types/bootstrap": "^5.2.11",
     "@types/lodash-es": "^4.17.12",
-    "@types/node": "^25.9.5",
-    "@vitest/coverage-v8": "^4.1.10",
-    "drizzle-kit": "^0.31.10",
-    "tsc-alias": "^1.9.2",
-    "tsx": "^4.23.12",
+    "@types/node": "^25.9.9",
+    "@vitest/coverage-v8": "^5.0.5",
+    "drizzle-kit": "^0.31.11",
+    "tsc-alias": "^1.9.9",
+    "tsx": "^4.23.15",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.10"
+    "vitest": "^5.0.5"
   },
   "engines": {
-    "node": ">=22",
+    "node": ">=22.12.0",
     "bun": ">=1.3",
     "pnpm": ">=11",
     "yarn": ">=4"

package/hono/src/database/migrations/sqlite/0000_init.sql

@@ -1,61 +1,48 @@
-CREATE TABLE `notifications` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`user_id` integer NOT NULL,
-	`type` text NOT NULL,
-	`title` text NOT NULL,
-	`body` text,
-	`data` text,
-	`link` text,
-	`read_at` integer,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
-	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE cascade ON DELETE cascade
-);
---> statement-breakpoint
-CREATE TABLE `roles` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`name` text NOT NULL,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
-	`updated_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
-);
---> statement-breakpoint
-CREATE UNIQUE INDEX `roles_name_unique` ON `roles` (`name`);--> statement-breakpoint
-CREATE TABLE `email_verification_tokens` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`email` text NOT NULL,
-	`token` text NOT NULL,
-	`expires_at` integer NOT NULL,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE `password_reset_tokens` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`email` text NOT NULL,
-	`token` text NOT NULL,
-	`expires_at` integer NOT NULL,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE `refresh_tokens` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`user_id` integer,
-	`jti` text NOT NULL,
-	`revoked` integer DEFAULT false,
-	`expires_at` integer NOT NULL,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
-	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE cascade ON DELETE set null
-);
---> statement-breakpoint
-CREATE UNIQUE INDEX `refresh_tokens_jti_unique` ON `refresh_tokens` (`jti`);--> statement-breakpoint
-CREATE TABLE `users` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`name` text NOT NULL,
-	`email` text NOT NULL,
-	`password` text NOT NULL,
-	`role_id` integer,
-	`email_verified_at` integer,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
-	`updated_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
-	FOREIGN KEY (`role_id`) REFERENCES `roles`(`id`) ON UPDATE cascade ON DELETE set null
-);
---> statement-breakpoint
+CREATE TABLE `roles` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`name` text NOT NULL,
+	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
+	`updated_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `roles_name_unique` ON `roles` (`name`);--> statement-breakpoint
+CREATE TABLE `email_verification_tokens` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`email` text NOT NULL,
+	`token` text NOT NULL,
+	`expires_at` integer NOT NULL,
+	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `password_reset_tokens` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`email` text NOT NULL,
+	`token` text NOT NULL,
+	`expires_at` integer NOT NULL,
+	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `refresh_tokens` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`user_id` integer,
+	`jti` text NOT NULL,
+	`revoked` integer DEFAULT false,
+	`expires_at` integer NOT NULL,
+	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
+	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE cascade ON DELETE set null
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `refresh_tokens_jti_unique` ON `refresh_tokens` (`jti`);--> statement-breakpoint
+CREATE TABLE `users` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`name` text NOT NULL,
+	`email` text NOT NULL,
+	`password` text NOT NULL,
+	`role_id` integer,
+	`email_verified_at` integer,
+	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
+	`updated_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
+	FOREIGN KEY (`role_id`) REFERENCES `roles`(`id`) ON UPDATE cascade ON DELETE set null
+);
+--> statement-breakpoint
 CREATE UNIQUE INDEX `users_email_unique` ON `users` (`email`);

package/hono/src/database/migrations/sqlite/meta/0000_snapshot.json

@@ -1,97 +1,9 @@
 {
   "version": "6",
   "dialect": "sqlite",
-  "id": "e2276ee8-13c8-4baf-ab07-32e843a089ac",
+  "id": "f0fe475e-8a3e-4c5c-9b5e-9ec41ddfde71",
   "prevId": "00000000-0000-0000-0000-000000000000",
   "tables": {
-    "notifications": {
-      "name": "notifications",
-      "columns": {
-        "id": {
-          "name": "id",
-          "type": "integer",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": true
-        },
-        "user_id": {
-          "name": "user_id",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "type": {
-          "name": "type",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "title": {
-          "name": "title",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "body": {
-          "name": "body",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "data": {
-          "name": "data",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "link": {
-          "name": "link",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "read_at": {
-          "name": "read_at",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "created_at": {
-          "name": "created_at",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "(cast((julianday('now') - 2440587.5)*86400000 as integer))"
-        }
-      },
-      "indexes": {},
-      "foreignKeys": {
-        "notifications_user_id_users_id_fk": {
-          "name": "notifications_user_id_users_id_fk",
-          "tableFrom": "notifications",
-          "tableTo": "users",
-          "columnsFrom": [
-            "user_id"
-          ],
-          "columnsTo": [
-            "id"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "cascade"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
     "roles": {
       "name": "roles",
       "columns": {

package/hono/src/database/migrations/sqlite/meta/_journal.json

@@ -5,7 +5,7 @@
     {
       "idx": 0,
       "version": "6",
-      "when": 1791141088797,
+      "when": 1792936160057,
       "tag": "0000_init",
       "breakpoints": true
     }

package/hono/src/database/schema.ts

@@ -1,3 +1,2 @@
-export * from "../modules/auth/database/models/notification.js";
-export * from "../modules/auth/database/models/role.js";
-export * from "../modules/auth/database/models/user.js";
+export * from "../modules/auth/database/models/role.js";
+export * from "../modules/auth/database/models/user.js";