create-nexwire 4.2.5 → 4.4.0

package/express/src/resources/src/plugins/pulse.ts

@@ -1,147 +1,157 @@
-import { io, type Socket } from "socket.io-client";
-import type { App } from "vue";
-
-declare const __SOCKET_ENABLED__: boolean;
-
-type EventCallback<T = unknown> = (payload: T) => void;
-
-type ChannelBinding = {
-  event: string;
-  callback: EventCallback;
-  wrapped: EventCallback;
-};
-
-type PulseChannel = {
-  listen: <T = unknown>(event: string, callback: EventCallback<T>) => PulseChannel;
-  stopListening: (event: string, callback?: EventCallback) => PulseChannel;
-};
-
-export type PulseClient = {
-  connect: () => PulseClient;
-  disconnect: () => PulseClient;
-  channel: (name: string) => PulseChannel;
-  private: (room: string) => PulseChannel;
-  leave: (room: string) => PulseClient;
-};
-
-function createPulse(): PulseClient {
-  if (!__SOCKET_ENABLED__) {
-    const n = (): PulseChannel => ({ listen: () => n(), stopListening: () => n() });
-    const c: PulseClient = {
-      connect: () => c,
-      disconnect: () => c,
-      channel: n,
-      private: n,
-      leave: () => c
-    };
-    return c;
-  }
-  let socket: Socket | null = null;
-  const channels = new Map<string, ChannelBinding[]>();
-  const joinedRooms = new Set<string>();
-
-  const socketUrl = () => {
-    const explicit = import.meta.env.VITE_SOCKET_URL || import.meta.env.VITE_API_URL;
-    if (explicit) return explicit;
-    return window.location.origin;
-  };
-
-  const ensureConnected = () => {
-    if (socket) return socket;
-
-    socket = io(socketUrl(), {
-      withCredentials: true,
-      transports: ["websocket", "polling"]
-    });
-
-    socket.on("connect", () => {
-      for (const room of joinedRooms) {
-        socket?.emit("join", room);
-      }
-    });
-
-    return socket;
-  };
-
-  const channel = (name: string): PulseChannel => {
-    const room = String(name).trim();
-    if (!room) throw new Error("Channel name is required");
-
-    const currentSocket = ensureConnected();
-    joinedRooms.add(room);
-    currentSocket.emit("join", room);
-
-    const api: PulseChannel = {
-      listen: <T = unknown>(event: string, callback: EventCallback<T>) => {
-        const wrapped = (payload: unknown) => callback(payload as T);
-        const bindings = channels.get(room) || [];
-        bindings.push({ event, callback: callback as EventCallback, wrapped });
-        channels.set(room, bindings);
-        currentSocket.on(event, wrapped);
-        return api;
-      },
-      stopListening: (event: string, callback?: EventCallback) => {
-        const bindings = channels.get(room) || [];
-        const kept: ChannelBinding[] = [];
-
-        for (const binding of bindings) {
-          const matchesEvent = binding.event === event;
-          const matchesCallback = !callback || binding.callback === callback;
-          if (matchesEvent && matchesCallback) {
-            currentSocket.off(binding.event, binding.wrapped);
-          } else {
-            kept.push(binding);
-          }
-        }
-
-        if (kept.length > 0) channels.set(room, kept);
-        else channels.delete(room);
-        return api;
-      }
-    };
-
-    return api;
-  };
-
-  const pulse: PulseClient = {
-    connect: () => {
-      ensureConnected();
-      return pulse;
-    },
-    disconnect: () => {
-      socket?.disconnect();
-      socket = null;
-      return pulse;
-    },
-    channel,
-    private: (room: string) => channel(`private:${room}`),
-    leave: (room: string) => {
-      if (!socket) return pulse;
-
-      const bindings = channels.get(room) || [];
-      for (const binding of bindings) {
-        socket.off(binding.event, binding.wrapped);
-      }
-
-      channels.delete(room);
-      joinedRooms.delete(room);
-      return pulse;
-    }
-  };
-
-  return pulse;
-}
-
-export const pulse = createPulse();
-
-export const PulsePlugin = {
-  install(app: App) {
-    app.config.globalProperties.$pulse = pulse;
-  }
-};
-
-declare module "vue" {
-  interface ComponentCustomProperties {
-    $pulse: PulseClient;
-  }
-}
+import { io, type Socket } from "socket.io-client";
+import type { App } from "vue";
+
+// 1. Read the value Vite inlines into this module. Do not use a bare `define`
+//    global here: in dev it is a window global and can survive a server
+//    restart or browser cache, leaving Pulse enabled after SOCKET=false.
+const isSocketEnabled = import.meta.env.VITE_SOCKET_ENABLED === true;
+
+type EventCallback<T = unknown> = (payload: T) => void;
+
+type ChannelBinding = {
+  event: string;
+  callback: EventCallback;
+  wrapped: EventCallback;
+};
+
+type PulseChannel = {
+  listen: <T = unknown>(event: string, callback: EventCallback<T>) => PulseChannel;
+  stopListening: (event: string, callback?: EventCallback) => PulseChannel;
+};
+
+export type PulseClient = {
+  connect: () => PulseClient;
+  disconnect: () => PulseClient;
+  channel: (name: string) => PulseChannel;
+  private: (room: string) => PulseChannel;
+  leave: (room: string) => PulseClient;
+};
+
+function createPulse(): PulseClient {
+  // 2. If disabled, return the no-op dummy client immediately
+  if (!isSocketEnabled) {
+    const dummyChannel = (): PulseChannel => ({
+      listen: () => dummyChannel(),
+      stopListening: () => dummyChannel()
+    });
+
+    const dummyClient: PulseClient = {
+      connect: () => dummyClient,
+      disconnect: () => dummyClient,
+      channel: dummyChannel,
+      private: dummyChannel,
+      leave: () => dummyClient
+    };
+
+    return dummyClient;
+  }
+
+  let socket: Socket | null = null;
+  const channels = new Map<string, ChannelBinding[]>();
+  const joinedRooms = new Set<string>();
+
+  const socketUrl = () => {
+    const explicit = import.meta.env.VITE_SOCKET_URL || import.meta.env.VITE_API_URL;
+    if (explicit) return explicit;
+    return window.location.origin;
+  };
+
+  const ensureConnected = () => {
+    if (socket) return socket;
+
+    socket = io(socketUrl(), {
+      withCredentials: true,
+      transports: ["websocket", "polling"]
+    });
+
+    socket.on("connect", () => {
+      for (const room of joinedRooms) {
+        socket?.emit("join", room);
+      }
+    });
+
+    return socket;
+  };
+
+  const channel = (name: string): PulseChannel => {
+    const room = String(name).trim();
+    if (!room) throw new Error("Channel name is required");
+
+    const currentSocket = ensureConnected();
+    joinedRooms.add(room);
+    currentSocket.emit("join", room);
+
+    const api: PulseChannel = {
+      listen: <T = unknown>(event: string, callback: EventCallback<T>) => {
+        const wrapped = (payload: unknown) => callback(payload as T);
+        const bindings = channels.get(room) || [];
+        bindings.push({ event, callback: callback as EventCallback, wrapped });
+        channels.set(room, bindings);
+        currentSocket.on(event, wrapped);
+        return api;
+      },
+      stopListening: (event: string, callback?: EventCallback) => {
+        const bindings = channels.get(room) || [];
+        const kept: ChannelBinding[] = [];
+
+        for (const binding of bindings) {
+          const matchesEvent = binding.event === event;
+          const matchesCallback = !callback || binding.callback === callback;
+          if (matchesEvent && matchesCallback) {
+            currentSocket.off(binding.event, binding.wrapped);
+          } else {
+            kept.push(binding);
+          }
+        }
+
+        if (kept.length > 0) channels.set(room, kept);
+        else channels.delete(room);
+        return api;
+      }
+    };
+
+    return api;
+  };
+
+  const pulse: PulseClient = {
+    connect: () => {
+      ensureConnected();
+      return pulse;
+    },
+    disconnect: () => {
+      socket?.disconnect();
+      socket = null;
+      return pulse;
+    },
+    channel,
+    private: (room: string) => channel(`private:${room}`),
+    leave: (room: string) => {
+      if (!socket) return pulse;
+
+      const bindings = channels.get(room) || [];
+      for (const binding of bindings) {
+        socket.off(binding.event, binding.wrapped);
+      }
+
+      channels.delete(room);
+      joinedRooms.delete(room);
+      return pulse;
+    }
+  };
+
+  return pulse;
+}
+
+export const pulse = createPulse();
+
+export const PulsePlugin = {
+  install(app: App) {
+    app.config.globalProperties.$pulse = pulse;
+  }
+};
+
+declare module "vue" {
+  interface ComponentCustomProperties {
+    $pulse: PulseClient;
+  }
+}

package/express/src/resources/src/stores/auth.ts

@@ -3,11 +3,11 @@ import { defineStore } from "pinia";
 import { ref } from "vue";
 import { type AuthUser, clearUser, setUser } from "@/composables/useAuth";
 
-type LoginPayload = { email?: string; phone?: string; password: string; remember?: boolean };
-type VerifyEmailPayload = { email: string; token: string };
-type ForgotPayload = { email: string };
+export type LoginPayload = { email?: string; phone?: string; password: string; remember?: boolean };
+export type VerifyEmailPayload = { email: string; token: string };
+export type ForgotPayload = { email: string };
 
-type RegisterPayload = {
+export type RegisterPayload = {
   name: string;
   email?: string;
   phone?: string;
@@ -15,7 +15,7 @@ type RegisterPayload = {
   password_confirmation: string;
 };
 
-type ResetPayload = {
+export type ResetPayload = {
   email: string;
   token: string;
   password: string;
@@ -36,7 +36,10 @@ async function request<T>(method: "GET" | "POST", path: string, payload?: unknow
     return response.data;
   } catch (error: unknown) {
     if (axios.isAxiosError(error)) {
-      throw new Error(String(error.response?.data?.message || error.message || "Request failed"));
+      // Keep the AxiosError so Gum can read `response.data` and populate
+      // form.errors, but show the API's message instead of axios's generic one.
+      error.message = String(error.response?.data?.message || error.message || "Request failed");
+      throw error;
     }
     throw new Error("Request failed");
   }

package/express/src/resources/vite.config.ts

@@ -1,53 +1,64 @@
 import path from "node:path";
 import { fileURLToPath, URL } from "node:url";
 import vue from "@vitejs/plugin-vue";
-import { defineConfig } from "vite";
+import { defineConfig, loadEnv } from "vite";
 
-const cacheBase = process.env.LOCALAPPDATA || process.env.TEMP || ".";
-const apiUrl = process.env.APP_URL || "http://localhost:3000";
-const socketEnabled = process.env.SOCKET !== "false";
+const configDir = path.dirname(fileURLToPath(import.meta.url));
+const projectRoot = path.resolve(configDir, "../..");
 
-const proxy: Record<string, any> = {
-  "/api": { target: apiUrl, changeOrigin: true },
-  "/health": { target: apiUrl, changeOrigin: true },
-  "/storage": { target: apiUrl, changeOrigin: true }
-};
+export default defineConfig(({ mode }) => {
+  // 1. Load the .env file just like the backend does. Resolve it from the
+  // config file so a different process cwd cannot point Vite at the wrong .env.
+  const env = loadEnv(mode, projectRoot, "");
 
-proxy["/socket.io"] = { target: apiUrl, changeOrigin: true, ws: true };
+  const cacheBase = process.env.LOCALAPPDATA || process.env.TEMP || ".";
+  const apiUrl = env.APP_URL || "http://localhost:3000";
 
-export default defineConfig({
-  define: {
-    __SOCKET_ENABLED__: socketEnabled,
-    __API_URL__: JSON.stringify(apiUrl)
-  },
-  root: fileURLToPath(new URL(".", import.meta.url)),
-  cacheDir: path.join(cacheBase, "nexwire", "vite-cache", "resources"),
-  plugins: [vue()],
-  css: {
-    preprocessorOptions: {
-      scss: {
-        quietDeps: true,
-        silenceDeprecations: [
-          "import",
-          "if-function",
-          "global-builtin",
-          "color-functions",
-          "slash-div",
-        ],
+  // Match the backend default: Socket.IO is off unless SOCKET=true
+  const socketEnabled = env.SOCKET === "true";
+
+  const proxy: Record<string, any> = {
+    "/api": { target: apiUrl, changeOrigin: true },
+    "/health": { target: apiUrl, changeOrigin: true },
+    "/storage": { target: apiUrl, changeOrigin: true }
+  };
+
+  if (socketEnabled) {
+    proxy["/socket.io"] = { target: apiUrl, changeOrigin: true, ws: true, timeout: 10000 };
+  }
+
+  return {
+    define: {
+      // 3. ALWAYS stringify the value when using Vite define
+      // `import.meta.env.*` is inlined into every module in dev as well as in
+      // the production bundle, so the UI never depends on a stale global.
+      "import.meta.env.VITE_SOCKET_ENABLED": JSON.stringify(socketEnabled),
+      __SOCKET_ENABLED__: JSON.stringify(socketEnabled),
+      __API_URL__: JSON.stringify(apiUrl)
+    },
+    root: fileURLToPath(new URL(".", import.meta.url)),
+    cacheDir: path.join(cacheBase, "nexwire", "vite-cache", "resources"),
+    plugins: [vue()],
+    css: {
+      preprocessorOptions: {
+        scss: {
+          quietDeps: true,
+          silenceDeprecations: ["import", "if-function", "global-builtin", "color-functions", "slash-div"]
+        }
       }
+    },
+    resolve: {
+      alias: {
+        "@": fileURLToPath(new URL("./src", import.meta.url))
+      }
+    },
+    build: {
+      outDir: "../../public",
+      emptyOutDir: true
+    },
+    server: {
+      port: 5173,
+      proxy // /socket.io is only proxied when SOCKET=true
     }
-  },
-  resolve: {
-    alias: {
-      "@": fileURLToPath(new URL("./src", import.meta.url))
-    }
-  },
-  build: {
-    outDir: "../../public",
-    emptyOutDir: true
-  },
-  server: {
-    port: 5173,
-    proxy
-  }
+  };
 });

package/express/src/types/global.d.ts

@@ -1,26 +1,32 @@
-declare module "*.vue" {
-  import type { DefineComponent } from "vue";
-
-  const component: DefineComponent<Record<string, unknown>, Record<string, unknown>, unknown>;
-  export default component;
-}
-
-declare module "bootstrap/js/dist/modal.js" {
-  export default class Modal {
-    constructor(element: Element, options?: { backdrop?: boolean | "static"; keyboard?: boolean });
-    show(): void;
-    hide(): void;
-    dispose(): void;
-  }
-}
-
-declare module "bootstrap/js/dist/toast.js" {
-  export default class Toast {
-    static getOrCreateInstance(element: Element): Toast;
-    show(): void;
-  }
-}
-
-declare module "luxon";
-declare module "nodemailer";
-declare module "vue-select";
+declare module "*.vue" {
+  import type { DefineComponent } from "vue";
+
+  const component: DefineComponent<Record<string, unknown>, Record<string, unknown>, unknown>;
+  export default component;
+}
+
+declare module "bootstrap/js/dist/modal.js" {
+  export default class Modal {
+    constructor(element: Element, options?: { backdrop?: boolean | "static"; keyboard?: boolean });
+    show(): void;
+    hide(): void;
+    dispose(): void;
+  }
+}
+
+declare module "bootstrap/js/dist/toast.js" {
+  export default class Toast {
+    static getOrCreateInstance(element: Element): Toast;
+    show(): void;
+  }
+}
+
+declare module "luxon";
+declare module "nodemailer";
+declare module "vue-select";
+
+interface ImportMetaEnv {
+  readonly VITE_API_URL?: string;
+  readonly VITE_SOCKET_URL?: string;
+  readonly VITE_SOCKET_ENABLED?: boolean;
+}

package/fastify/.dockerignore

@@ -0,0 +1,14 @@
+node_modules
+dist
+.git
+.gitignore
+
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+
+coverage
+*.log
+tmp
+temp

package/fastify/.env

@@ -0,0 +1,44 @@
+# ── App ────────────────────────────────────────────
+APP_NAME=nexwire
+APP_ENV=development
+APP_PORT=3000
+APP_URL=http://localhost:3000
+
+# Frontend origin when UI is on a different domain than the API.
+# Leave empty if UI is served from the same APP_URL.
+FRONTEND_URL=
+
+# ── Database ───────────────────────────────────────
+# Supported: sqlite:, mysql://, postgres://
+# Default is SQLite so a fresh clone runs with zero setup (no server to install).
+# The dev stack migrates + seeds automatically on first run.
+# Switch later, e.g. mysql://root:@localhost:3306/nexwire
+DATABASE_URL=sqlite:./src/storage/database/nexwire.sqlite
+
+# ── Secrets ────────────────────────────────────────
+JWT_ACCESS_SECRET=change-me-access
+JWT_REFRESH_SECRET=change-me-refresh
+COOKIE_SECRET=change-me-cookie
+STORAGE_ACCESS_KEY_ID=
+STORAGE_SECRET_ACCESS_KEY=
+MAIL_USERNAME=
+MAIL_PASSWORD=
+
+# ── Redis ──────────────────────────────────────────
+# Set true to enable cache, session, queue, events, and Queue Dashboard
+REDIS=false
+# Shared key prefix for cache, session, queue, events, and dashboards
+REDIS_URL=redis://127.0.0.1:6379
+REDIS_PREFIX=nexwire
+
+# ── Feature Toggle ─────────────────────────────────
+# Set false for API-only mode (no UI build/serve)
+UI=true
+# Set true to enable OpenAPI / Scalar docs at /api-docs
+OPEN_API=true
+# Set false to disable Socket.IO realtime server
+SOCKET=false
+# Set false to disable browser security headers (CSP, HSTS, X-Frame)
+SECURITY_HEADERS=true
+
+

package/fastify/.env.example

@@ -0,0 +1,42 @@
+# ── App ────────────────────────────────────────────
+APP_ENV=development
+APP_NAME=nexwire
+APP_PORT=3000
+APP_URL=http://localhost:3000
+
+# Frontend origin when UI is on a different domain than the API.
+# Leave empty if UI is served from the same APP_URL.
+FRONTEND_URL=
+
+# ── Database ───────────────────────────────────────
+# Supported: sqlite:, mysql://, postgres://
+# Default is SQLite so a fresh clone runs with zero setup (no server to install).
+# The dev stack migrates + seeds automatically on first run.
+# Switch later, e.g. mysql://root:@localhost:3306/nexwire
+DATABASE_URL=sqlite:./src/storage/database/nexwire.sqlite
+
+# ── Secrets ────────────────────────────────────────
+JWT_ACCESS_SECRET=change-me-access
+JWT_REFRESH_SECRET=change-me-refresh
+COOKIE_SECRET=change-me-cookie
+STORAGE_ACCESS_KEY_ID=
+STORAGE_SECRET_ACCESS_KEY=
+MAIL_USERNAME=
+MAIL_PASSWORD=
+
+# ── Redis ──────────────────────────────────────────
+# Set true to enable cache, session, queue, events, and Queue Dashboard
+REDIS=false
+# Shared key prefix for cache, session, queue, events, and dashboards
+REDIS_URL=redis://127.0.0.1:6379
+REDIS_PREFIX=nexwire
+
+# ── Feature Toggle ─────────────────────────────────
+# Set false for API-only mode (no UI build/serve)
+UI=true
+# Set true to enable OpenAPI / Scalar docs at /api-docs
+OPEN_API=true
+# Set false to disable Socket.IO realtime server
+SOCKET=false
+# Set false to disable browser security headers (CSP, HSTS, X-Frame)
+SECURITY_HEADERS=true

package/fastify/.vscode/extensions.json

@@ -0,0 +1,6 @@
+{
+  "recommendations": [
+    "biomejs.biome",
+    "editorconfig.editorconfig"
+  ]
+}