create-nexwire 4.2.5 → 4.4.0

package/README.md

@@ -27,29 +27,45 @@ nexwire ships that stack **already connected**. Auth reads the database. Enqueue
 
 ## Quick Start
 
-### Hono (default)
+### Choose a backend
+
+The CLI asks which backend to scaffold when you don't pass `--engine`:
 
 ```bash
 npm create nexwire@latest my-app
-cd my-app
-npm install
-npm run maker dev
 ```
 
-### Express
+```
+Choose a backend:
+❯ Hono      Hono-based HTTP layer and OpenAPI
+  Express   Express-based HTTP layer and OpenAPI
+  Fastify   Fastify-based HTTP layer and OpenAPI
+```
+
+Arrow keys to move, `1`/`2`/`3` to jump, Enter to confirm. Press Enter to accept the default (**Hono**). Point at a specific one and the prompt is skipped:
 
 ```bash
+# Hono (default)
+npm create nexwire@latest my-app
+
+# Express
 npm create nexwire@latest my-app -- --engine=express
-cd my-app
-npm install
-npm run maker dev
+
+# Fastify
+npm create nexwire@latest my-app -- --engine=fastify
+```
+
+For CI or scripts, `-y` / `--yes` skips every prompt and accepts the defaults (a project name is still required):
+
+```bash
+npm create nexwire@latest my-app -- --yes
 ```
 
 Your API is live at `http://localhost:3000`, Scalar docs at `/api-docs`, and the Vue frontend at `http://localhost:5173`.
 
 The scaffold already ships a pre-migrated, pre-seeded SQLite database, so there is no migration step before `maker dev`. If you point `DATABASE_URL` at MySQL or PostgreSQL, run `npm run maker db:migrate -- --seed` once to build and populate that database instead.
 
-Requires **Node.js >= 22** or **Bun >= 1.3**.
+Requires **Node.js >= 22**. Hono and Express also support **Bun >= 1.3**; Fastify is Node-only.
 
 ### Current directory
 
@@ -58,6 +74,7 @@ Scaffold directly into the current directory:
 ```bash
 npm create nexwire@latest .
 npm create nexwire@latest . -- --engine=express
+npm create nexwire@latest . -- --engine=fastify
 ```
 
 Works with any package manager: `pnpm`, `yarn`, or `bun`.
@@ -80,8 +97,8 @@ nexwire runs on **Node.js** or **Bun** — pick whichever fits your deployment:
 
 | Runtime     | Minimum version | Notes                                                                 |
 | ----------- | --------------- | --------------------------------------------------------------------- |
-| **Node.js** | `>= 22`         | Default. Uses `node` in Dockerfile.                                   |
-| **Bun**     | `>= 1.3`        | Pass `--runtime=bun` to `deploy:init`. Uses `oven/bun` in Dockerfile. |
+| **Node.js** | `>= 22`         | Default. Uses `node` in Dockerfile. Required by Fastify.              |
+| **Bun**     | `>= 1.3`        | Hono and Express only. Pass `--runtime=bun` to deploy:init.           |
 
 ## Demo
 
@@ -103,7 +120,7 @@ Real recordings from a freshly scaffolded project — no mockups, no staging dat
 
 | Category            | What you get                                                                                                                                  |
 | ------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
-| **API**             | Hono/Express HTTP server with Zod validation, OpenAPI/Scalar docs, CORS, rate limiting                                                        |
+| **API**             | Hono/Express/Fastify HTTP server with Zod validation, OpenAPI/Scalar docs, CORS, rate limiting                                                |
 | **Database**        | Drizzle ORM — SQLite by default, shipped pre-migrated and seeded; MySQL/PostgreSQL also supported, dialect auto-detected from `DATABASE_URL`. |
 | **Auth**            | JWT access + refresh token rotation, signed httpOnly cookies, role middleware                                                                 |
 | **Queue**           | BullMQ background jobs with `shouldQueue` decorator and Bull Board dashboard                                                                  |

package/express/.env

@@ -37,7 +37,7 @@ UI=true
 # Set true to enable OpenAPI / Scalar docs at /api-docs
 OPEN_API=true
 # Set false to disable Socket.IO realtime server
-SOCKET=true
+SOCKET=false
 # Set false to disable browser security headers (CSP, HSTS, X-Frame)
 SECURITY_HEADERS=true
 

package/express/package.json

@@ -65,7 +65,7 @@
     "jsonwebtoken": "^9.0.2",
     "lodash-es": "^4.18.1",
     "luxon": "^3.7.2",
-    "maildev": "^3.0.0",
+    "maildev": "^2.2.1",
     "morgan": "^1.10.0",
     "multer": "^2.5.0",
     "mysql2": "^3.23.3",

package/express/src/config/database.ts

@@ -1,29 +1,48 @@
-import { env } from "@/env.js";
-
-/**
- * Why: Database connection settings for Drizzle.
- * When: Database bootstrap and dialect detection.
- * Where: src/config/database.ts.
- * How: The connection URL contains credentials, so it stays in .env
- *      (`DATABASE_URL`). Dialect is derived from the URL prefix.
- */
-export const databaseConfig = {
-  url: env.DATABASE_URL
-};
-
-export type DatabaseConfig = typeof databaseConfig;
-
-/**
- * Why: Maps a connection URL to its Drizzle dialect.
- * When: Selecting the pool driver and dialect-specific branching.
- * Where: Framework database connection helpers.
- * How: Matches the URL prefix; anything that isn't mysql/postgres is sqlite.
- */
-export function detectDialectFrom(url: string): "sqlite" | "mysql" | "postgresql" {
-  const value = url.toLowerCase();
-  if (value.startsWith("mysql")) return "mysql";
-  if (value.startsWith("postgres")) return "postgresql";
-  return "sqlite";
-}
-
-export const databaseDialect = detectDialectFrom(databaseConfig.url);
+import { env } from "@/env.js";
+
+/**
+ * Why: Database connection settings.
+ * When: Database bootstrap and dialect detection.
+ * Where: src/config/database.ts.
+ * How: Only DATABASE_URL is required. Pool settings use generic,
+ *      provider-agnostic defaults.
+ */
+
+const rawUrl = env.DATABASE_URL;
+
+export const databaseConfig = {
+  // If it's sqlite, convert "sqlite:./db.sqlite" to "file:./db.sqlite"
+  url: rawUrl.startsWith("sqlite:") ? `file:${rawUrl.slice("sqlite:".length)}` : rawUrl,
+
+  /** Generic, sensible pool defaults for any provider */
+  pool: {
+    max: 10,
+    idleTimeout: 20000, // ms
+    connectTimeout: 10000, // ms
+    keepAlive: true
+  },
+
+  /**
+   * Default to true. If a provider (like a pooler) doesn't support it,
+   * they usually indicate this in the connection string or require the user
+   * to handle it at the driver level.
+   */
+  prepare: true,
+
+  /**
+   * Require TLS for MySQL and PostgreSQL connections. Set this to true, or
+   * append `?sslmode=require` to DATABASE_URL if your provider documents that.
+   */
+  ssl: false
+};
+
+export type DatabaseConfig = typeof databaseConfig;
+
+export function detectDialectFrom(url: string): "sqlite" | "mysql" | "postgresql" {
+  const value = url.toLowerCase();
+  if (value.startsWith("mysql")) return "mysql";
+  if (value.startsWith("postgres")) return "postgresql";
+  return "sqlite";
+}
+
+export const databaseDialect = detectDialectFrom(rawUrl);

package/express/src/config/index.ts

@@ -1,83 +1,83 @@
-import { type AppConfig, appConfig } from "./app.js";
-import { type AuthConfig, authConfig } from "./auth.js";
-import { type CacheConfig, cacheConfig } from "./cache.js";
-import { type CookieConfig, cookieConfig } from "./cookie.js";
-import { type CorsConfig, corsConfig } from "./cors.js";
-import { type DatabaseConfig, databaseConfig } from "./database.js";
-import { type JwtConfig, jwtConfig } from "./jwt.js";
-import { type LoggingConfig, loggingConfig } from "./logging.js";
-import { type MailConfig, mailConfig } from "./mail.js";
-import { type OpenApiConfig, openApiConfig } from "./openapi.js";
-import { type QueueConfig, queueConfig } from "./queue.js";
-import { type RateLimitConfig, rateLimitConfig } from "./rateLimit.js";
-import { type RealtimeConfig, realtimeConfig } from "./realtime.js";
-import { type RedisConfig, redisConfig } from "./redis.js";
-import { type SecurityConfig, securityConfig } from "./security.js";
-import { type SessionConfig, sessionConfig } from "./session.js";
-import { type StorageConfig, storageConfig } from "./storage.js";
-
-export { appConfig } from "./app.js";
-export { authConfig } from "./auth.js";
-export { cacheConfig } from "./cache.js";
-export { cookieConfig } from "./cookie.js";
-export { corsConfig } from "./cors.js";
-export { databaseConfig } from "./database.js";
-export { jwtConfig } from "./jwt.js";
-export { loggingConfig } from "./logging.js";
-export { mailConfig } from "./mail.js";
-export { openApiConfig } from "./openapi.js";
-export { queueConfig } from "./queue.js";
-export { rateLimitConfig } from "./rateLimit.js";
-export { realtimeConfig } from "./realtime.js";
-export { redisConfig } from "./redis.js";
-export { securityConfig } from "./security.js";
-export { sessionConfig } from "./session.js";
-export { storageConfig } from "./storage.js";
-
-/**
- * Why: Single import point for every config domain.
- * When: Application code needs configuration values.
- * Where: Imported as `import { config } from "@/config/index.js"`.
- * How: Aggregates per-domain config objects; individual files remain the
- *      place to edit each setting.
- */
-export const config = {
-  app: appConfig,
-  auth: authConfig,
-  cache: cacheConfig,
-  cookie: cookieConfig,
-  cors: corsConfig,
-  database: databaseConfig,
-  jwt: jwtConfig,
-  logging: loggingConfig,
-  mail: mailConfig,
-  openApi: openApiConfig,
-  queue: queueConfig,
-  rateLimit: rateLimitConfig,
-  realtime: realtimeConfig,
-  redis: redisConfig,
-  session: sessionConfig,
-  security: securityConfig,
-  storage: storageConfig
-} as const;
-
-export type Config = typeof config;
-export type {
-  AppConfig,
-  AuthConfig,
-  CacheConfig,
-  CookieConfig,
-  CorsConfig,
-  DatabaseConfig,
-  JwtConfig,
-  LoggingConfig,
-  MailConfig,
-  OpenApiConfig,
-  QueueConfig,
-  RateLimitConfig,
-  RealtimeConfig,
-  RedisConfig,
-  SecurityConfig,
-  SessionConfig,
-  StorageConfig
-};
+import { type AppConfig, appConfig } from "./app.js";
+import { type AuthConfig, authConfig } from "./auth.js";
+import { type CacheConfig, cacheConfig } from "./cache.js";
+import { type CookieConfig, cookieConfig } from "./cookie.js";
+import { type CorsConfig, corsConfig } from "./cors.js";
+import { type DatabaseConfig, databaseConfig } from "./database.js";
+import { type JwtConfig, jwtConfig } from "./jwt.js";
+import { type LoggingConfig, loggingConfig } from "./logging.js";
+import { type MailConfig, mailConfig } from "./mail.js";
+import { type OpenApiConfig, openApiConfig } from "./openapi.js";
+import { type QueueConfig, queueConfig } from "./queue.js";
+import { type RateLimitConfig, rateLimitConfig } from "./rateLimit.js";
+import { type RealtimeConfig, realtimeConfig } from "./realtime.js";
+import { type RedisConfig, redisConfig } from "./redis.js";
+import { type SecurityConfig, securityConfig } from "./security.js";
+import { type SessionConfig, sessionConfig } from "./session.js";
+import { type StorageConfig, storageConfig } from "./storage.js";
+
+export { appConfig } from "./app.js";
+export { authConfig } from "./auth.js";
+export { cacheConfig } from "./cache.js";
+export { cookieConfig } from "./cookie.js";
+export { corsConfig } from "./cors.js";
+export { databaseConfig, databaseDialect, detectDialectFrom } from "./database.js";
+export { jwtConfig } from "./jwt.js";
+export { loggingConfig } from "./logging.js";
+export { mailConfig } from "./mail.js";
+export { openApiConfig } from "./openapi.js";
+export { queueConfig } from "./queue.js";
+export { rateLimitConfig } from "./rateLimit.js";
+export { realtimeConfig } from "./realtime.js";
+export { redisConfig } from "./redis.js";
+export { securityConfig } from "./security.js";
+export { sessionConfig } from "./session.js";
+export { storageConfig } from "./storage.js";
+
+/**
+ * Why: Single import point for every config domain.
+ * When: Application code needs configuration values.
+ * Where: Imported as `import { config } from "@/config/index.js"`.
+ * How: Aggregates per-domain config objects; individual files remain the
+ *      place to edit each setting.
+ */
+export const config = {
+  app: appConfig,
+  auth: authConfig,
+  cache: cacheConfig,
+  cookie: cookieConfig,
+  cors: corsConfig,
+  database: databaseConfig,
+  jwt: jwtConfig,
+  logging: loggingConfig,
+  mail: mailConfig,
+  openApi: openApiConfig,
+  queue: queueConfig,
+  rateLimit: rateLimitConfig,
+  realtime: realtimeConfig,
+  redis: redisConfig,
+  session: sessionConfig,
+  security: securityConfig,
+  storage: storageConfig
+} as const;
+
+export type Config = typeof config;
+export type {
+  AppConfig,
+  AuthConfig,
+  CacheConfig,
+  CookieConfig,
+  CorsConfig,
+  DatabaseConfig,
+  JwtConfig,
+  LoggingConfig,
+  MailConfig,
+  OpenApiConfig,
+  QueueConfig,
+  RateLimitConfig,
+  RealtimeConfig,
+  RedisConfig,
+  SecurityConfig,
+  SessionConfig,
+  StorageConfig
+};

package/express/src/config/openapi.ts

@@ -8,46 +8,28 @@ import { appConfig } from "./app.js";
  *      and the Scalar docs UI appearance.
  */
 export const openApiConfig = {
-  /** OpenAPI spec version */
   version: "3.0.0",
-
-  /** API title shown in docs and the /doc spec */
   title: `${appConfig.name} API`,
-
-  /** API version shown in docs */
   apiVersion: "1.0.0",
-
-  /** Optional description shown in the /doc spec */
   description: "",
 
   /** Scalar docs UI settings */
   scalar: {
-    /** URL path to the OpenAPI JSON spec */
-    specUrl: "/doc",
-
-    /** URL path to the interactive docs UI */
-    docsPath: "/api-docs",
-
-    /** UI layout: "classic" or "modern" */
-    layout: "classic" as const,
-
+    specUrl: "/doc", // URL path to the OpenAPI JSON spec
+    docsPath: "/api-docs", // URL path to the interactive docs UI
+    layout: "classic" as const, // UI layout: "classic" or "modern"
     /** UI theme: "default", "moon", "purple", "solarized", "bluePlanet", "fastify", "kepler", "mars", "nebula", "none" */
     theme: "moon" as const,
-
-    /** HTML page title for the /api-docs page */
-    pageTitle: `${appConfig.name} API`,
-
+    pageTitle: `${appConfig.name} API`, // HTML page title for the /api-docs page
     /** Favicon file (project-relative) served at /favicon.ico for the /api-docs page */
     favicon: "src/resources/src/assets/images/favicon/favicon.ico",
-
     /** Default HTTP client shown in code examples */
     defaultHttpClient: {
       targetKey: "js" as const,
       clientKey: "fetch" as const
     },
-
-    /** Expand all tags on load */
-    defaultOpenAllTags: true
+    defaultOpenAllTags: true, // Expand all tags on load
+    showDeveloperTools: "never"
   }
 } as const;
 

package/express/src/config/queue.ts

@@ -1,30 +1,30 @@
-import { redisConfig } from "./redis.js";
-
-/**
- * Why: Queue workers, concurrency, and BullMQ key namespaces.
- * When: The queue facade bootstraps workers and the dashboard connects.
- * Where: src/config/queue.ts.
- * How: `queues` lists which queue names get a worker by default (default,
- *      mail, maintenance). `concurrency` caps parallel jobs per worker.
- *      Key prefixes derive from the shared `REDIS_PREFIX`.
- */
-export const queueConfig = {
-  queues: ["default", "mail", "maintenance"],
-  concurrency: 10,
-  /**
-   * autoPruneQueues
-   * Why: Automatically deletes phantom queues (Redis keys for queue names that
-   *      no longer exist in `queues`) when a queue worker boots. Safe because
-   *      only empty, unconfigured queues are removed, and BullMQ recreates a
-   *      queue's keys on demand if code still dispatches to it.
-   * When: Set false to disable automatic pruning and rely on manual
-   *      `queue:clear` instead.
-   */
-  autoPruneQueues: true,
-  prefix: `${redisConfig.prefix}:queue`,
-  durablePrefix: `${redisConfig.prefix}:durable`,
-  queueUi: "/queues",
-  allowedEmails: ""
-};
-
-export type QueueConfig = typeof queueConfig;
+import { redisConfig } from "./redis.js";
+
+/**
+ * Why: Queue workers, concurrency, and BullMQ key namespaces.
+ * When: The queue facade bootstraps workers and the dashboard connects.
+ * Where: src/config/queue.ts.
+ * How: `queues` lists which queue names get a worker by default (default,
+ *      mail, maintenance). `concurrency` caps parallel jobs per worker.
+ *      Key prefixes derive from the shared `REDIS_PREFIX`.
+ */
+export const queueConfig = {
+  queues: ["default", "mail", "maintenance"],
+  concurrency: 10,
+  /**
+   * autoPruneQueues
+   * Why: Automatically deletes phantom queues (Redis keys for queue names that
+   *      no longer exist in `queues`) when a queue worker boots. Safe because
+   *      only empty, unconfigured queues are removed, and BullMQ recreates a
+   *      queue's keys on demand if code still dispatches to it.
+   * When: Set false to disable automatic pruning and rely on manual
+   *      `queue:clear` instead.
+   */
+  autoPruneQueues: true,
+  prefix: `${redisConfig.prefix}:queue`,
+  durablePrefix: `${redisConfig.prefix}:durable`,
+  queueUi: "/queues",
+  allowedEmails: "" // Comma-separated list of email addresses allowed to access the queue UI. Empty means no restriction.
+};
+
+export type QueueConfig = typeof queueConfig;

package/express/src/config/validate.ts

@@ -1,40 +1,50 @@
-import { databaseConfig } from "./database.js";
-import { mailConfig } from "./mail.js";
-import { redisConfig } from "./redis.js";
-import { storageConfig } from "./storage.js";
-
-/**
- * Why: Validates that resolved configs are internally consistent at startup.
- * When: Called before any framework subsystem initializes.
- * Where: kernel.ts, before storage.init() and initRedis().
- * How: Checks cross-config dependencies and throws clear errors for inconsistencies.
- */
-export function validateConfig(): void {
-  if (!databaseConfig.url) {
-    throw new Error("DATABASE_URL is required but is empty");
-  }
-
-  if (storageConfig.driver === "s3") {
-    if (!storageConfig.bucket) {
-      throw new Error("STORAGE_BUCKET is required when storage driver is s3");
-    }
-    if (!storageConfig.accessKeyId || !storageConfig.secretAccessKey) {
-      throw new Error("STORAGE_ACCESS_KEY_ID and STORAGE_SECRET_ACCESS_KEY are required when storage driver is s3");
-    }
-  }
-
-  if (redisConfig.enabled) {
-    try {
-      const url = new URL(redisConfig.url);
-      if (!url.hostname || url.port === "") {
-        throw new Error(`REDIS_URL is invalid: "${redisConfig.url}" — must include host and port`);
-      }
-    } catch (error) {
-      throw new Error(`REDIS_URL is invalid: "${redisConfig.url}" — ${error instanceof Error ? error.message : error}`);
-    }
-  }
-
-  if (!mailConfig.failSilent && !mailConfig.username) {
-    throw new Error("MAIL_USERNAME is required when MAIL_FAIL_SILENT is false");
-  }
-}
+import { databaseConfig } from "./database.js";
+import { mailConfig } from "./mail.js";
+import { redisConfig } from "./redis.js";
+import { storageConfig } from "./storage.js";
+
+/**
+ * Why: Validates that resolved configs are internally consistent at startup.
+ * When: Called before any framework subsystem initializes.
+ * Where: kernel.ts, before storage.init() and initRedis().
+ * How: Checks cross-config dependencies and throws clear errors for inconsistencies.
+ */
+export function validateConfig(): void {
+  if (!databaseConfig.url) {
+    throw new Error("DATABASE_URL is required but is empty");
+  }
+
+  if (storageConfig.driver === "s3") {
+    if (!storageConfig.bucket) {
+      throw new Error("STORAGE_BUCKET is required when storage driver is s3");
+    }
+    if (!storageConfig.accessKeyId || !storageConfig.secretAccessKey) {
+      throw new Error("STORAGE_ACCESS_KEY_ID and STORAGE_SECRET_ACCESS_KEY are required when storage driver is s3");
+    }
+  }
+
+  if (redisConfig.enabled) {
+    try {
+      const url = new URL(redisConfig.url);
+
+      // Ensure it starts with redis:// or rediss://
+      if (url.protocol !== "redis:" && url.protocol !== "rediss:") {
+        throw new Error("URL must start with redis:// or rediss://");
+      }
+
+      // Hostname is mandatory (e.g., localhost, 127.0.0.1, redis-container)
+      if (!url.hostname) {
+        throw new Error("URL must include a valid hostname");
+      }
+
+      // Note: We do NOT check if the port is empty.
+      // ioredis automatically defaults to 6379 if no port is provided.
+    } catch (error) {
+      throw new Error(`REDIS_URL is invalid: "${redisConfig.url}" — ${error instanceof Error ? error.message : error}`);
+    }
+  }
+
+  if (!mailConfig.failSilent && !mailConfig.username) {
+    throw new Error("MAIL_USERNAME is required when MAIL_FAIL_SILENT is false");
+  }
+}

package/express/src/database/migrations/sqlite/0000_init.sql

@@ -1,48 +1,48 @@
-CREATE TABLE `roles` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`name` text NOT NULL,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
-	`updated_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
-);
---> statement-breakpoint
-CREATE UNIQUE INDEX `roles_name_unique` ON `roles` (`name`);--> statement-breakpoint
-CREATE TABLE `email_verification_tokens` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`email` text NOT NULL,
-	`token` text NOT NULL,
-	`expires_at` integer NOT NULL,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE `password_reset_tokens` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`email` text NOT NULL,
-	`token` text NOT NULL,
-	`expires_at` integer NOT NULL,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE `refresh_tokens` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`user_id` integer,
-	`jti` text NOT NULL,
-	`revoked` integer DEFAULT false,
-	`expires_at` integer NOT NULL,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
-	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE cascade ON DELETE set null
-);
---> statement-breakpoint
-CREATE UNIQUE INDEX `refresh_tokens_jti_unique` ON `refresh_tokens` (`jti`);--> statement-breakpoint
-CREATE TABLE `users` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`name` text NOT NULL,
-	`email` text NOT NULL,
-	`password` text NOT NULL,
-	`role_id` integer,
-	`email_verified_at` integer,
-	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
-	`updated_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
-	FOREIGN KEY (`role_id`) REFERENCES `roles`(`id`) ON UPDATE cascade ON DELETE set null
-);
---> statement-breakpoint
+CREATE TABLE `roles` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`name` text NOT NULL,
+	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
+	`updated_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `roles_name_unique` ON `roles` (`name`);--> statement-breakpoint
+CREATE TABLE `email_verification_tokens` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`email` text NOT NULL,
+	`token` text NOT NULL,
+	`expires_at` integer NOT NULL,
+	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `password_reset_tokens` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`email` text NOT NULL,
+	`token` text NOT NULL,
+	`expires_at` integer NOT NULL,
+	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `refresh_tokens` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`user_id` integer,
+	`jti` text NOT NULL,
+	`revoked` integer DEFAULT false,
+	`expires_at` integer NOT NULL,
+	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
+	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE cascade ON DELETE set null
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `refresh_tokens_jti_unique` ON `refresh_tokens` (`jti`);--> statement-breakpoint
+CREATE TABLE `users` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`name` text NOT NULL,
+	`email` text NOT NULL,
+	`password` text NOT NULL,
+	`role_id` integer,
+	`email_verified_at` integer,
+	`created_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
+	`updated_at` integer DEFAULT (cast((julianday('now') - 2440587.5)*86400000 as integer)) NOT NULL,
+	FOREIGN KEY (`role_id`) REFERENCES `roles`(`id`) ON UPDATE cascade ON DELETE set null
+);
+--> statement-breakpoint
 CREATE UNIQUE INDEX `users_email_unique` ON `users` (`email`);