create-nexwire 4.2.3 → 4.2.4

package/express/src/framework/providers/contracts.ts

@@ -1,6 +1,6 @@
 /**
  * Why: Defines the shapes a pluggable provider has to satisfy.
- * When: A developer replaces a framework default (auth today, payments later).
+ * When: A developer replaces a framework default (auth, notifications, payments later).
  * Where: Imported through the framework facade, never from framework internals.
  * How: Interfaces stay deliberately loose so custom user shapes pass through.
  */
@@ -8,6 +8,9 @@
 /** Registry key of the built-in auth provider contract. */
 export const AUTH_PROVIDER_KEY = "auth";
 
+/** Registry key of the built-in notification storage provider. */
+export const NOTIFICATION_PROVIDER_KEY = "notification";
+
 /**
  * Registry key for any provider implementation.
  *
@@ -15,25 +18,25 @@ export const AUTH_PROVIDER_KEY = "auth";
  * still accepting any custom key, so a project can register its own contracts
  * (payments, otp, storage, ...) without the framework having to know them.
  */
-export type ProviderKey = typeof AUTH_PROVIDER_KEY | (string & {});
+export type ProviderKey = typeof AUTH_PROVIDER_KEY | typeof NOTIFICATION_PROVIDER_KEY | (string & {});
 
 export interface AuthProviderUser {
-  id: number;
+  id: number | string;
   email?: string | null;
   [key: string]: any;
 }
 
 export interface AuthProviderRefreshToken {
-  id: number;
+  id: number | string;
   jti: string;
   revoked?: boolean | null;
   expiresAt?: Date | string | null;
-  userId?: number | null;
+  userId?: number | string | null;
   [key: string]: any;
 }
 
 export interface AuthUserContext {
-  id: number;
+  id: number | string;
   email?: string | null;
   roleId?: number | null;
   role?: string | null;
@@ -47,10 +50,77 @@ export interface AuthUserContact {
 }
 
 export interface AuthProvider {
-  getUserById(id: number): Promise<AuthProviderUser | null>;
+  getUserById(id: number | string): Promise<AuthProviderUser | null>;
   findRefreshToken(jti: string): Promise<AuthProviderRefreshToken | null>;
-  revokeRefreshToken?(tokenId: number): Promise<void>;
-  deleteRefreshToken?(tokenId: number): Promise<void>;
+  revokeRefreshToken?(tokenId: number | string): Promise<void>;
+  deleteRefreshToken?(tokenId: number | string): Promise<void>;
   getAuthContext?(user: AuthProviderUser, payload?: any): Promise<AuthUserContext | any>;
-  getUserContact?(userId: number): Promise<AuthUserContact | null>;
+  getUserContact?(userId: number | string): Promise<AuthUserContact | null>;
+}
+
+/**
+ * Who a notification belongs to. `id` accepts a numeric auth id and a string
+ * id (UUID, ULID, ...) so replacing auth does not force a notification change.
+ * The provider always stores the id as text.
+ */
+export interface NotifiableTarget {
+  /** Notifiable class. Defaults to "user". */
+  type?: string;
+  id: number | string;
+}
+
+/** Payload accepted by `NotificationProvider.create()`. */
+export interface NotificationCreateInput {
+  type?: string;
+  title: string;
+  body?: string | null;
+  link?: string | null;
+  data?: Record<string, unknown> | null;
+}
+
+/** Normalized notification returned by every provider operation. */
+export interface NotificationRecord {
+  id: string;
+  notifiableType: string;
+  notifiableId: string;
+  type: string;
+  title: string;
+  body: string | null;
+  data: Record<string, unknown> | null;
+  link: string | null;
+  readAt: string | null;
+  createdAt: string;
+}
+
+export interface NotificationListOptions {
+  page?: number;
+  perPage?: number;
+}
+
+export interface NotificationPage {
+  data: NotificationRecord[];
+  total: number;
+  unread: number;
+  page: number;
+  perPage: number;
+}
+
+/**
+ * Why: Keeps notification storage replaceable without touching `notify()` or
+ *      the generated HTTP routes.
+ * When: The default `src/modules/notification` store is replaced by a custom
+ *       implementation (a different table, another service, ...).
+ * Where: Registered through `registerNotificationProvider()`.
+ * How: The framework only reads through this contract; mail and realtime
+ *      delivery stay in the runtime so a storage swap cannot disable them.
+ */
+export interface NotificationProvider {
+  create(target: NotifiableTarget, input: NotificationCreateInput): Promise<NotificationRecord>;
+  list(target: NotifiableTarget, options?: NotificationListOptions): Promise<NotificationPage>;
+  unreadCount(target: NotifiableTarget): Promise<number>;
+  markRead(target: NotifiableTarget, id: number | string): Promise<boolean>;
+  markAllRead(target: NotifiableTarget): Promise<number>;
+  remove(target: NotifiableTarget, id: number | string): Promise<boolean>;
+  /** Optional bulk cleanup when a notifiable target is deleted. */
+  deleteForTarget?(target: NotifiableTarget): Promise<number>;
 }

package/express/src/framework/providers/registry.ts

@@ -1,4 +1,10 @@
-import { AUTH_PROVIDER_KEY, type AuthProvider, type ProviderKey } from "./contracts.js";
+import {
+  AUTH_PROVIDER_KEY,
+  type AuthProvider,
+  NOTIFICATION_PROVIDER_KEY,
+  type NotificationProvider,
+  type ProviderKey
+} from "./contracts.js";
 
 /**
  * Why: Holds the app-wide provider implementations in one place.
@@ -60,3 +66,23 @@ export function hasAuthProvider(): boolean {
 export function clearAuthProvider(): void {
   clearProvider(AUTH_PROVIDER_KEY);
 }
+
+/** Registers the storage provider `notify()` and `/api/notification/*` use. */
+export function registerNotificationProvider(provider: NotificationProvider): NotificationProvider {
+  return registerProvider(NOTIFICATION_PROVIDER_KEY, provider);
+}
+
+/** Returns the registered notification provider, or null when none was registered. */
+export function getNotificationProvider(): NotificationProvider | null {
+  return getProvider<NotificationProvider>(NOTIFICATION_PROVIDER_KEY);
+}
+
+/** Reports whether a notification provider is registered. */
+export function hasNotificationProvider(): boolean {
+  return hasProvider(NOTIFICATION_PROVIDER_KEY);
+}
+
+/** Removes the registered notification provider. Mainly useful in tests. */
+export function clearNotificationProvider(): void {
+  clearProvider(NOTIFICATION_PROVIDER_KEY);
+}

package/express/src/resources/src/main.ts

@@ -1,5 +1,5 @@
 import "@/plugins/axios";
-import { createHead } from "@vueuse/head";
+import { createHead } from "@unhead/vue/client";
 import { createPinia } from "pinia";
 import { createApp } from "vue";
 import { DialogPlugin } from "@/plugins/dialog";

package/express/src/resources/src/pages/auth/forgetPassword.vue

@@ -43,7 +43,7 @@
 </template>
 
 <script setup lang="ts">
-import { useHead } from "@vueuse/head";
+import { useHead } from "@unhead/vue";
 import { ref } from "vue";
 import Button from "@/components/Button.vue";
 import Input from "@/components/Input.vue";

package/express/src/resources/src/pages/auth/login.vue

@@ -47,7 +47,7 @@
 </template>
 
 <script setup lang="ts">
-import { useHead } from "@vueuse/head";
+import { useHead } from "@unhead/vue";
 import { ref } from "vue";
 import { useRouter } from "vue-router";
 import Button from "@/components/Button.vue";

package/express/src/resources/src/pages/auth/register.vue

@@ -65,7 +65,7 @@
 </template>
 
 <script setup lang="ts">
-import { useHead } from "@vueuse/head";
+import { useHead } from "@unhead/vue";
 import { ref } from "vue";
 import { useRouter } from "vue-router";
 import Button from "@/components/Button.vue";

package/express/src/resources/src/pages/auth/resetPassword.vue

@@ -53,7 +53,7 @@
 </template>
 
 <script setup lang="ts">
-import { useHead } from "@vueuse/head";
+import { useHead } from "@unhead/vue";
 import { ref } from "vue";
 import { useRoute, useRouter } from "vue-router";
 import Button from "@/components/Button.vue";

package/express/src/resources/src/pages/auth/verifyEmail.vue

@@ -23,7 +23,7 @@
 </template>
 
 <script setup lang="ts">
-import { useHead } from "@vueuse/head";
+import { useHead } from "@unhead/vue";
 import { ref } from "vue";
 import { useRoute } from "vue-router";
 import { useGum } from "@/plugins/gum";

package/express/src/resources/src/pages/dashboard/index.vue

@@ -1,66 +1,66 @@
-<template>
-  <Pagebar title="Dashboard" />
-
-  <div class="dashboard-placeholder">
-    <div class="row g-2 mb-2">
-      <div class="col-12 col-md-4">
-        <div class="placeholder-card"></div>
-      </div>
-      <div class="col-12 col-md-4">
-        <div class="placeholder-card"></div>
-      </div>
-      <div class="col-12 col-md-4">
-        <div class="placeholder-card"></div>
-      </div>
-    </div>
-
-    <div class="placeholder-panel"></div>
-  </div>
-</template>
-
-<script setup lang="ts">
-import { useHead } from "@vueuse/head";
-import { onMounted, onUnmounted } from "vue";
-import Pagebar from "@/components/Pagebar.vue";
-import { useAuth } from "@/composables/useAuth";
-import { pulse } from "@/plugins/pulse";
-
-useHead({ title: "Dashboard" });
-
-const { user } = useAuth();
-
-onMounted(() => {
-  const ch = pulse.channel("user");
-  ch.listen("user.changed", () => alert("me"));
-  onUnmounted(() => ch.stopListening("user.changed"));
-});
-
-// const hardRefresh = () => window.location.reload();
-</script>
-
-<style scoped>
-.placeholder-card,
-.placeholder-panel {
-  border: 1px solid var(--app-border);
-  border-radius: 0.3rem;
-  background: var(--app-surface);
-}
-
-.placeholder-card {
-  min-height: 220px;
-}
-
-.placeholder-panel {
-  min-height: 520px;
-}
-
-@media (max-width: 768px) {
-  .placeholder-card {
-    min-height: 160px;
-  }
-
-  .placeholder-panel {
-    min-height: 360px;
-  }
-}
-</style>
+<template>
+  <Pagebar title="Dashboard" />
+
+  <div class="dashboard-placeholder">
+    <div class="row g-2 mb-2">
+      <div class="col-12 col-md-4">
+        <div class="placeholder-card"></div>
+      </div>
+      <div class="col-12 col-md-4">
+        <div class="placeholder-card"></div>
+      </div>
+      <div class="col-12 col-md-4">
+        <div class="placeholder-card"></div>
+      </div>
+    </div>
+
+    <div class="placeholder-panel"></div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { useHead } from "@unhead/vue";
+import { onMounted, onUnmounted } from "vue";
+import Pagebar from "@/components/Pagebar.vue";
+import { useAuth } from "@/composables/useAuth";
+import { pulse } from "@/plugins/pulse";
+
+useHead({ title: "Dashboard" });
+
+const { user } = useAuth();
+
+onMounted(() => {
+  const ch = pulse.channel("user");
+  ch.listen("user.changed", () => alert("me"));
+  onUnmounted(() => ch.stopListening("user.changed"));
+});
+
+// const hardRefresh = () => window.location.reload();
+</script>
+
+<style scoped>
+.placeholder-card,
+.placeholder-panel {
+  border: 1px solid var(--app-border);
+  border-radius: 0.3rem;
+  background: var(--app-surface);
+}
+
+.placeholder-card {
+  min-height: 220px;
+}
+
+.placeholder-panel {
+  min-height: 520px;
+}
+
+@media (max-width: 768px) {
+  .placeholder-card {
+    min-height: 160px;
+  }
+
+  .placeholder-panel {
+    min-height: 360px;
+  }
+}
+</style>

package/hono/package.json

@@ -32,17 +32,17 @@
     "@aws-sdk/s3-request-presigner": "^3.1111.0",
     "@bull-board/api": "^8.6.1",
     "@bull-board/hono": "^8.6.1",
-    "@hono/node-server": "^2.1.0",
+    "@hono/node-server": "^2.1.5",
     "@hono/zod-openapi": "~1.5.3",
     "@libsql/client": "^0.17.4",
     "@scalar/hono-api-reference": "^0.10.20",
     "@socket.io/admin-ui": "^0.5.1",
     "@socket.io/bun-engine": "^0.1.1",
     "@socket.io/redis-adapter": "^8.3.0",
-    "@vitejs/plugin-vue": "^6.0.8",
+    "@unhead/vue": "^3.4.3",
+    "@vitejs/plugin-vue": "^6.0.10",
     "@vuepic/vue-datepicker": "^14.0.0",
     "@vueuse/core": "^14.4.0",
-    "@vueuse/head": "^2.0.0",
     "axios": "^1.19.0",
     "bcryptjs": "^3.0.3",
     "bootstrap": "^5.3.8",
@@ -50,48 +50,73 @@
     "bullmq": "^5.81.3",
     "bullmq-durable": "^0.2.0",
     "chalk": "^5.6.2",
-    "commander": "^14.0.3",
+    "commander": "^15.0.0",
     "croner": "^10.0.1",
     "dotenv": "^17.4.2",
     "dotenv-expand": "^13.0.0",
-    "drizzle-orm": "^0.45.2",
+    "drizzle-orm": "^0.45.4",
     "glob": "^13.0.6",
-    "hono": "^4.13.1",
+    "hono": "^4.13.14",
     "hono-rate-limiter": "^0.5.3",
     "ioredis": "^5.11.1",
     "lodash-es": "^4.18.1",
     "luxon": "^3.7.2",
-    "maildev": "^2.2.1",
+    "maildev": "^3.0.0",
     "mysql2": "^3.23.3",
-    "nodemailer": "^9.0.5",
+    "nodemailer": "^10.2.1",
     "pinia": "^3.0.4",
     "pino": "^10.3.1",
     "postgres": "^3.4.9",
     "redis-commander": "^0.9.0",
     "sass": "^1.100.0",
-    "socket.io": "^4.8.3",
-    "socket.io-client": "^4.8.3",
+    "socket.io": "^4.8.4",
+    "socket.io-client": "^4.8.4",
     "stoker": "^2.0.1",
-    "vite": "^8.2.1",
+    "vite": "^8.3.5",
     "vue": "^3.5.41",
     "vue-router": "^5.2.0",
     "vue-select": "^4.0.0-beta.6",
-    "zod": "^4.4.3"
+    "zod": "^4.6.7"
+  },
+  "overrides": {
+    "@esbuild-kit/core-utils": {
+      "esbuild": "^0.25.12"
+    },
+    "@maildev/mcp": {
+      "zod": "^4.6.7"
+    },
+    "@maildev/smtp": {
+      "jsdom": "^27.4.0",
+      "nodemailer": "^10.2.1"
+    },
+    "redis-commander": {
+      "express": "^4.22.3",
+      "body-parser": "^1.20.9",
+      "bcrypt": "npm:bcryptjs@^3.0.3",
+      "bcryptjs": "^3.0.3"
+    }
+  },
+  "allowScripts": {
+    "@parcel/watcher": true,
+    "esbuild": true,
+    "msgpackr-extract": true,
+    "redis-commander": true,
+    "vue-demi": true
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.7",
     "@types/bootstrap": "^5.2.11",
     "@types/lodash-es": "^4.17.12",
-    "@types/node": "^25.9.5",
-    "@vitest/coverage-v8": "^4.1.10",
-    "drizzle-kit": "^0.31.10",
-    "tsc-alias": "^1.9.2",
-    "tsx": "^4.23.12",
+    "@types/node": "^25.9.9",
+    "@vitest/coverage-v8": "^5.0.5",
+    "drizzle-kit": "^0.31.11",
+    "tsc-alias": "^1.9.9",
+    "tsx": "^4.23.15",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.10"
+    "vitest": "^5.0.5"
   },
   "engines": {
-    "node": ">=22",
+    "node": ">=22.12.0",
     "bun": ">=1.3",
     "pnpm": ">=11",
     "yarn": ">=4"

package/hono/src/database/migrations/sqlite/0000_init.sql

@@ -1,61 +1,48 @@
-CREATE TABLE `notifications` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`user_id` integer NOT NULL,
-	`type` text NOT NULL,
-	`title` text NOT NULL,
-	`body` text,
-	`data` text,
-	`link` text,
-	`read_at` integer,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
-	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE cascade ON DELETE cascade
-);
---> statement-breakpoint
-CREATE TABLE `roles` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`name` text NOT NULL,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
-	`updated_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
-);
---> statement-breakpoint
-CREATE UNIQUE INDEX `roles_name_unique` ON `roles` (`name`);--> statement-breakpoint
-CREATE TABLE `email_verification_tokens` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`email` text NOT NULL,
-	`token` text NOT NULL,
-	`expires_at` integer NOT NULL,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE `password_reset_tokens` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`email` text NOT NULL,
-	`token` text NOT NULL,
-	`expires_at` integer NOT NULL,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE `refresh_tokens` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`user_id` integer,
-	`jti` text NOT NULL,
-	`revoked` integer DEFAULT false,
-	`expires_at` integer NOT NULL,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
-	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE cascade ON DELETE set null
-);
---> statement-breakpoint
-CREATE UNIQUE INDEX `refresh_tokens_jti_unique` ON `refresh_tokens` (`jti`);--> statement-breakpoint
-CREATE TABLE `users` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`name` text NOT NULL,
-	`email` text NOT NULL,
-	`password` text NOT NULL,
-	`role_id` integer,
-	`email_verified_at` integer,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
-	`updated_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
-	FOREIGN KEY (`role_id`) REFERENCES `roles`(`id`) ON UPDATE cascade ON DELETE set null
-);
---> statement-breakpoint
+CREATE TABLE `roles` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`name` text NOT NULL,
+	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
+	`updated_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `roles_name_unique` ON `roles` (`name`);--> statement-breakpoint
+CREATE TABLE `email_verification_tokens` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`email` text NOT NULL,
+	`token` text NOT NULL,
+	`expires_at` integer NOT NULL,
+	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `password_reset_tokens` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`email` text NOT NULL,
+	`token` text NOT NULL,
+	`expires_at` integer NOT NULL,
+	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `refresh_tokens` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`user_id` integer,
+	`jti` text NOT NULL,
+	`revoked` integer DEFAULT false,
+	`expires_at` integer NOT NULL,
+	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
+	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE cascade ON DELETE set null
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `refresh_tokens_jti_unique` ON `refresh_tokens` (`jti`);--> statement-breakpoint
+CREATE TABLE `users` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`name` text NOT NULL,
+	`email` text NOT NULL,
+	`password` text NOT NULL,
+	`role_id` integer,
+	`email_verified_at` integer,
+	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
+	`updated_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
+	FOREIGN KEY (`role_id`) REFERENCES `roles`(`id`) ON UPDATE cascade ON DELETE set null
+);
+--> statement-breakpoint
 CREATE UNIQUE INDEX `users_email_unique` ON `users` (`email`);