create-nexwire 4.2.5 → 4.4.0

package/fastify/.vscode/settings.json

@@ -0,0 +1,37 @@
+{
+  "editor.defaultFormatter": "biomejs.biome",
+  "[typescript]": {
+    "editor.defaultFormatter": "biomejs.biome"
+  },
+  "[typescriptreact]": {
+    "editor.defaultFormatter": "biomejs.biome"
+  },
+  "[javascript]": {
+    "editor.defaultFormatter": "biomejs.biome"
+  },
+  "[javascriptreact]": {
+    "editor.defaultFormatter": "biomejs.biome"
+  },
+  "[json]": {
+    "editor.defaultFormatter": "biomejs.biome"
+  },
+  "[jsonc]": {
+    "editor.defaultFormatter": "biomejs.biome"
+  },
+  "[vue]": {
+    "editor.defaultFormatter": "biomejs.biome"
+  },
+  "[css]": {
+    "editor.defaultFormatter": "biomejs.biome"
+  },
+  "[scss]": {
+    "editor.defaultFormatter": "biomejs.biome"
+  },
+  "editor.codeActionsOnSave": {
+    "source.organizeImports.biome": "explicit",
+    "source.fixAll.biome": "explicit"
+  },
+  "files.eol": "\n",
+  "files.trimTrailingWhitespace": true,
+  "files.insertFinalNewline": true
+}

package/fastify/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 - present, niYam
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/fastify/README.md

@@ -0,0 +1,232 @@
+<p align="center">
+  <a href="https://github.com/niyamulahsan/nexwire">
+    <img alt="nexwire" src="https://raw.githubusercontent.com/niyamulahsan/nexwire/main/logo-favicon/nexwire.png" width="300">
+  </a>
+</p>
+
+<h3 align="center">Full-stack TypeScript framework for modern web applications</h3>
+
+<p align="center">
+  <a href="https://niyamulahsan.github.io/nexwire"><img src="https://img.shields.io/badge/docs%20%7C%20nexwire-3b8eed" alt="Documentation"></a>
+  <a href="https://www.npmjs.com/package/create-nexwire"><img src="https://img.shields.io/npm/v/create-nexwire" alt="npm version"></a>
+  <a href="https://www.npmjs.com/package/create-nexwire"><img src="https://img.shields.io/npm/dt/create-nexwire" alt="npm downloads"></a>
+  <a href="https://github.com/niyamulahsan/nexwire/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-MIT-green" alt="MIT License"></a>
+  <a href="https://github.com/niyamulahsan/nexwire"><img src="https://img.shields.io/github/stars/niyamulahsan/nexwire?style=social" alt="GitHub Stars"></a>
+</p>
+
+---
+
+nexwire is a batteries-included TypeScript framework that combines modular backends (Hono, Express, Fastify) with Drizzle ORM, BullMQ, Socket.IO, Redis, and a Vue 3 SPA frontend — all scaffolded with a single command and deployed with Docker Compose.
+
+## Quick Start
+
+### Hono (default)
+
+```bash
+npm create nexwire@latest my-app
+cd my-app
+npm install
+npm run maker db:migrate --seed
+npm run maker dev
+```
+
+### Express
+
+```bash
+npm create nexwire@latest my-app -- --engine=express
+cd my-app
+npm install
+npm run maker db:migrate --seed
+npm run maker dev
+```
+
+### Fastify
+
+```bash
+npm create nexwire@latest my-app -- --engine=fastify
+cd my-app
+npm install
+npm run maker db:migrate --seed
+npm run maker dev
+```
+
+Your API is live at `http://localhost:3000`, Scalar docs at `/api-docs`, and the Vue frontend at `http://localhost:5173`.
+
+Requires **Node.js >= 22.12**. Hono and Express also support **Bun >= 1.3**; Fastify is Node-only.
+
+### Current directory
+
+Scaffold directly into the current directory:
+
+```bash
+npm create nexwire@latest .
+npm create nexwire@latest . -- --engine=express
+npm create nexwire@latest . -- --engine=fastify
+```
+
+Works with any package manager: `pnpm`, `yarn`, or `bun`.
+
+### Package Manager
+
+All examples use `npm` as the default. nexwire works with any major package manager:
+
+| Manager  | Create project                      | Run commands          |
+| -------- | ----------------------------------- | --------------------- |
+| **npm**  | `npm create nexwire@latest my-app`  | `npm run maker <cmd>` |
+| **pnpm** | `pnpm create nexwire@latest my-app` | `pnpm maker <cmd>`    |
+| **yarn** | `yarn create nexwire@latest my-app` | `yarn maker <cmd>`    |
+| **bun**  | `bun create nexwire@latest my-app`  | `bun maker <cmd>`     |
+| **all**  | `npm create nexwire@latest .`       | current directory     |
+
+### Runtime
+
+nexwire runs on **Node.js** or **Bun** — pick whichever fits your deployment:
+
+| Runtime     | Minimum version | Notes                                                                 |
+| ----------- | --------------- | --------------------------------------------------------------------- |
+| **Node.js** | `>= 22.12`      | Default. Uses `node` in Dockerfile. Required by Fastify.              |
+| **Bun**     | `>= 1.3`        | Hono and Express only. Pass `--runtime=bun` to deploy:init.           |
+
+::: tip
+The Fastify template is **Node-only** and does not include Bun support.
+:::
+
+## Features
+
+| Category            | What you get                                                                           |
+| ------------------- | -------------------------------------------------------------------------------------- |
+| **API**             | Hono/Express/Fastify HTTP server with Zod validation, OpenAPI/Scalar docs, CORS, rate limiting |
+| **Database**        | Drizzle ORM — SQLite, MySQL, or PostgreSQL. Auto-detected from `DATABASE_URL`.         |
+| **Auth**            | JWT access + refresh token rotation, signed httpOnly cookies, role middleware          |
+| **Queue**           | BullMQ background jobs with `shouldQueue` decorator and Bull Board dashboard           |
+| **Realtime**        | Socket.IO with auto room joining (user, role, auth) and broadcast events               |
+| **Cache & Session** | Redis-backed with graceful fallback when Redis is disabled                             |
+| **Scheduler**       | Cron-based task scheduling with distributed Redis lock                                 |
+| **Storage**         | Local disk or S3-compatible (AWS S3, R2, MinIO, DigitalOcean Spaces)                   |
+| **Notifications**   | Database-persisted notifications with broadcast + mail delivery                        |
+| **Frontend**        | Vue 3 SPA — Vite, Pinia, Vue Router, Bootstrap 5, real-time Pulse plugin               |
+| **Security**        | CSP, HSTS, X-Frame headers — configured in one place, toggled per environment          |
+| **Reliability**     | Circuit breakers for Redis, mail, and S3 with auto-fallback; startup config validation |
+| **CLI**             | `maker` command for code generation, migrations, runtime, and deploy                   |
+| **Deploy**          | Two-layer Docker Compose — nginx-proxy, auto SSL, supervisor                           |
+
+## Architecture
+
+```
+src/
+├── env.ts              # Zod-validated environment config
+├── database/           # Drizzle schema, migrations, seeders
+├── framework/          # Reusable engine (HTTP, auth, queue, cache, etc.)
+├── modules/            # Application modules (auto-discovered)
+├── middlewares/        # Auth & role guards
+├── resources/          # Vue 3 SPA frontend
+└── storage/            # Uploaded files & logs
+```
+
+### Modules
+
+Every feature is a self-contained module under `src/modules/<name>/`:
+
+```
+src/modules/posts/
+├── __tests__/         # Unit tests
+├── console/           # CLI commands & scheduled tasks
+├── controllers/       # Request handlers
+├── database/
+│   ├── models/        # Drizzle table definitions
+│   └── seeders/       # Test data
+├── helpers/           # Pure functions — no I/O
+├── jobs/              # BullMQ queue handlers
+├── middlewares/       # Module-local middleware
+├── routes/            # HTTP route definitions (auto-discovered)
+├── schemas/           # Zod validation schemas
+├── services/          # Business logic — DB, files, network
+├── types/             # Shared TypeScript types
+└── facade.ts          # Public API for other modules
+```
+
+Modules are **auto-discovered** — no manual registration. Create one with:
+
+```bash
+npm run maker module:make blog
+npm run maker module:make-controller blog post
+npm run maker module:make-route blog post
+npm run maker module:make-model blog post
+```
+
+### Framework Facade
+
+Access all subsystems through a single import:
+
+```ts
+import {
+  db,
+  cache,
+  session,
+  queue,
+  dispatchEvent,
+  notify,
+  storage,
+  jwt,
+  mail,
+  password,
+  urls,
+  logger,
+} from "@/framework/facade.js";
+```
+
+## CLI Reference
+
+| Command                        | Description                                    |
+| ------------------------------ | ---------------------------------------------- |
+| `maker dev`                    | Start API server + frontend HMR + queue worker |
+| `maker serve [--prod]`         | API server (dev or production)                 |
+| `maker queue:work`             | BullMQ worker process                          |
+| `maker schedule:work`          | Cron scheduler                                 |
+| `maker db:migrate --seed`      | Run migrations + seeders                       |
+| `maker db:fresh`               | Drop all tables, re-migrate, re-seed           |
+| `maker module:make <name>`     | Scaffold a new module                          |
+| `maker deploy:init`            | Generate Docker deploy scaffolding             |
+| `maker deploy:workflow`        | Local deploy (Docker Desktop)                  |
+| `maker deploy:workflow:remote` | Remote deploy via SSH + rsync                  |
+
+## Deployment
+
+nexwire includes a complete Docker deployment system out of the box.
+
+### Local (Docker Desktop)
+
+```bash
+npm run maker deploy:init        # Generate deploy files (one-time)
+npm run maker deploy:workflow    # Build and start everything
+```
+
+### Remote (VPS / Cloud)
+
+```bash
+npm run maker deploy:init                      # Generate files
+# Edit deploy/workflow.remote.json with your SSH details
+npm run maker deploy:workflow:remote           # Deploy to server
+```
+
+The deploy system provisions:
+
+- **Multi-stage Dockerfile** — builder (install + build) → runner (minimal production image)
+- **Shared infrastructure** — nginx-proxy, MySQL/PostgreSQL, Redis, phpMyAdmin, pgAdmin
+- **Auto SSL** — Let's Encrypt via nginx-proxy companion
+- **Process supervisor** — API server, queue worker, cron scheduler, auto-migration
+- **Two-layer architecture** — server infra runs once per host, app stack rebuilds per deploy
+
+See the [deploy documentation](https://niyamulahsan.github.io/nexwire/deploy/overview) for full details.
+
+## Documentation
+
+Complete documentation is available at **[Documentation](https://niyamulahsan.github.io/nexwire)**
+
+## Contributing
+
+Contributions are welcome. Open an issue or pull request on [GitHub](https://github.com/niyamulahsan/nexwire).
+
+## License
+
+nexwire is open-sourced software licensed under the [MIT license](LICENSE).

package/fastify/biome.json

@@ -0,0 +1,99 @@
+{
+  "$schema": "./node_modules/@biomejs/biome/configuration_schema.json",
+  "vcs": {
+    "enabled": true,
+    "clientKind": "git",
+    "useIgnoreFile": true
+  },
+  "html": {
+    "experimentalFullSupportEnabled": true,
+    "formatter": {
+      "enabled": true
+    }
+  },
+  "formatter": {
+    "indentStyle": "space",
+    "indentWidth": 2,
+    "lineWidth": 140,
+    "bracketSameLine": false
+  },
+  "files": {
+    "includes": [
+      "**",
+      "!**/node_modules"
+    ]
+  },
+  "linter": {
+    "rules": {
+      "preset": "recommended",
+      "a11y": {
+        "noLabelWithoutControl": "off",
+        "useButtonType": "off",
+        "useSemanticElements": "off",
+        "noStaticElementInteractions": "off",
+        "useKeyWithClickEvents": "off",
+        "useValidAnchor": "off",
+        "useAnchorContent": "off",
+        "noDistractingElements": "off"
+      },
+      "correctness": {
+        "noUnusedVariables": "off",
+        "useVueValidTemplateRoot": "off",
+        "noUnusedImports": "off"
+      },
+      "complexity": {
+        "noUselessEscapeInRegex": "off",
+        "noImportantStyles": "off"
+      },
+      "style": {
+        "noNonNullAssertion": "off",
+        "useVueMultiWordComponentNames": "off",
+        "useImportType": "off"
+      },
+      "suspicious": {
+        "noEmptyBlockStatements": "off",
+        "noExplicitAny": "off",
+        "noRedeclare": "off",
+        "noAssignInExpressions": "off",
+        "useIterableCallbackReturn": "off"
+      }
+    }
+  },
+  "javascript": {
+    "formatter": {
+      "quoteStyle": "double",
+      "semicolons": "always",
+      "trailingCommas": "none"
+    }
+  },
+  "overrides": [
+    {
+      "includes": [
+        "**/*.{js,mjs,cjs,ts,tsx,vue}"
+      ],
+      "javascript": {
+        "globals": [
+          "exports",
+          "location"
+        ]
+      }
+    }
+  ],
+  "assist": {
+    "actions": {
+      "source": {
+        "organizeImports": {
+          "level": "on",
+          "options": {
+            "groups": [
+              ":NODE:",
+              ":PACKAGE:",
+              ":ALIAS:",
+              ":PATH:"
+            ]
+          }
+        }
+      }
+    }
+  }
+}

package/fastify/drizzle.config.ts

@@ -0,0 +1,25 @@
+import { config } from "dotenv";
+import { defineConfig } from "drizzle-kit";
+
+config({ path: ".env" });
+
+function sqlitePathFromUrl(url: string) {
+  if (url.startsWith("sqlite:///")) return url.replace("sqlite:///", "");
+  if (url.startsWith("sqlite://")) return url.replace("sqlite://", "");
+  if (url.startsWith("sqlite:")) return url.replace("sqlite:", "");
+  return url;
+}
+
+const databaseUrl = process.env.DATABASE_URL || "sqlite:./src/storage/database/nexwire.sqlite";
+const dialect = databaseUrl.startsWith("mysql") ? "mysql" : databaseUrl.startsWith("postgres") ? "postgresql" : "sqlite";
+
+export default defineConfig({
+  schema: process.env.DRIZZLE_SCHEMA || "./src/database/schema.ts",
+  out: `./src/database/migrations/${dialect}`,
+  dialect,
+  dbCredentials: databaseUrl.startsWith("mysql")
+    ? { url: databaseUrl }
+    : databaseUrl.startsWith("postgres")
+      ? { url: databaseUrl }
+      : { url: `file:${sqlitePathFromUrl(databaseUrl)}` }
+});

package/fastify/gitignore-stub

@@ -0,0 +1,31 @@
+.env
+node_modules/
+dist/
+
+# Coverage reports - regenerated by `npm run test:coverage`, ~130 HTML files
+coverage/
+
+public/*
+!public/.gitkeep
+
+deploy/.env
+deploy/server/.env
+
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+
+.DS_Store
+Thumbs.db
+
+# Lock files — regenerated per developer's package manager
+# bun.lockb is the binary format used by bun before 1.2; bun.lock is the
+# current text format. Both are ignored, so upgrading bun cannot turn a
+# developer's local install into an untracked file.
+bun.lock
+bun.lockb
+package-lock.json
+pnpm-lock.yaml
+yarn.lock

package/fastify/package.json

@@ -0,0 +1,130 @@
+{
+  "name": "nexwire-fastify",
+  "version": "1.0.0",
+  "private": true,
+  "bin": {
+    "maker": "./src/framework/maker-cli/index.mjs"
+  },
+  "type": "module",
+  "scripts": {
+    "build": "npm run build:all",
+    "build:all": "npm run build:backend && npm run build:ui",
+    "build:backend": "tsc -p tsconfig.json && tsc-alias -p tsconfig.json",
+    "build:ui": "npm run typecheck:ui && node src/framework/maker-cli/runtime/build-ui.mjs",
+    "typecheck:ui": "vue-tsc --noEmit -p src/resources/tsconfig.json",
+    "dev": "node src/framework/maker-cli/index.mjs dev",
+    "backend": "node src/framework/maker-cli/index.mjs serve --src",
+    "ui": "node src/framework/maker-cli/index.mjs ui:dev",
+    "maildev:view": "node src/framework/maker-cli/index.mjs maildev:view",
+    "redis:view": "node src/framework/maker-cli/index.mjs redis:view",
+    "db:studio": "node src/framework/maker-cli/index.mjs db:studio",
+    "maker": "node src/framework/maker-cli/index.mjs",
+    "lint": "biome check .",
+    "lint:fix": "biome check --write .",
+    "format": "biome format --write .",
+    "format:check": "biome format .",
+    "test": "vitest",
+    "test:run": "vitest run",
+    "test:ui": "vitest --ui",
+    "test:coverage": "vitest run --coverage"
+  },
+  "dependencies": {
+    "@aws-sdk/client-s3": "^3.1111.0",
+    "@aws-sdk/s3-request-presigner": "^3.1111.0",
+    "@bull-board/api": "^9.10.5",
+    "@bull-board/fastify": "^9.11.0",
+    "@fastify/cookie": "^11.1.5",
+    "@fastify/cors": "^11.4.1",
+    "@fastify/multipart": "^10.1.8",
+    "@fastify/rate-limit": "^11.2.2",
+    "@fastify/static": "^10.1.10",
+    "@fastify/swagger": "^9.9.3",
+    "@libsql/client": "^0.17.4",
+    "@scalar/fastify-api-reference": "^1.77.0",
+    "@socket.io/admin-ui": "^0.5.1",
+    "@socket.io/redis-adapter": "^8.3.0",
+    "@unhead/vue": "^3.4.3",
+    "@vitejs/plugin-vue": "^6.0.10",
+    "@vuepic/vue-datepicker": "^14.0.0",
+    "@vueuse/core": "^14.4.0",
+    "axios": "^1.19.0",
+    "bcryptjs": "^3.0.3",
+    "bootstrap": "^5.3.8",
+    "bootstrap-icons": "^1.13.1",
+    "bullmq": "^5.81.3",
+    "bullmq-durable": "^0.2.0",
+    "chalk": "^5.6.2",
+    "commander": "^15.0.0",
+    "croner": "^10.0.1",
+    "dotenv": "^17.4.2",
+    "dotenv-expand": "^13.0.0",
+    "drizzle-orm": "^0.45.4",
+    "fastify": "^5.12.8",
+    "fastify-plugin": "^6.0.1",
+    "fastify-type-provider-zod": "^7.0.0",
+    "glob": "^13.0.6",
+    "ioredis": "^5.11.1",
+    "jsonwebtoken": "^9.0.2",
+    "lodash-es": "^4.18.1",
+    "luxon": "^3.7.2",
+    "maildev": "^2.2.1",
+    "mysql2": "^3.23.3",
+    "nodemailer": "^10.2.1",
+    "pinia": "^3.0.4",
+    "pino": "^10.3.1",
+    "postgres": "^3.4.9",
+    "redis-commander": "^0.9.0",
+    "sass": "^1.100.0",
+    "socket.io": "^4.8.4",
+    "socket.io-client": "^4.8.4",
+    "vite": "^8.3.5",
+    "vue": "^3.5.41",
+    "vue-router": "^5.2.0",
+    "vue-select": "^4.0.0-beta.6",
+    "zod": "^4.6.7"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.5.7",
+    "@types/bootstrap": "^5.2.11",
+    "@types/jsonwebtoken": "^9.0.7",
+    "@types/lodash-es": "^4.17.12",
+    "@types/node": "^25.9.9",
+    "@vitest/coverage-v8": "^5.0.5",
+    "drizzle-kit": "^0.31.11",
+    "tsc-alias": "^1.9.9",
+    "tsx": "^4.23.15",
+    "typescript": "^6.0.3",
+    "vitest": "^5.0.5",
+    "vue-tsc": "^3.3.13"
+  },
+  "overrides": {
+    "@esbuild-kit/core-utils": {
+      "esbuild": "^0.25.12"
+    },
+    "@maildev/mcp": {
+      "zod": "^4.6.7"
+    },
+    "@maildev/smtp": {
+      "jsdom": "^27.4.0",
+      "nodemailer": "^10.2.1"
+    },
+    "redis-commander": {
+      "express": "^4.22.3",
+      "body-parser": "^1.20.9",
+      "bcrypt": "npm:bcryptjs@^3.0.3",
+      "bcryptjs": "^3.0.3"
+    }
+  },
+  "engines": {
+    "node": ">=22.12.0",
+    "pnpm": ">=11",
+    "yarn": ">=4"
+  },
+  "allowScripts": {
+    "@parcel/watcher": true,
+    "esbuild": true,
+    "msgpackr-extract": true,
+    "redis-commander": true,
+    "vue-demi": true
+  }
+}

package/fastify/src/config/app.ts

@@ -0,0 +1,41 @@
+import { env } from "@/env.js";
+
+/**
+ * Why: Central, code-visible application identity and runtime settings.
+ * When: Server boot, route metadata, OpenAPI titles, and URL resolution.
+ * Where: src/config/app.ts.
+ * How: App-related values intentionally stay in .env so each deployment can
+ *      set them without touching code. Feature toggles (openApi, ui)
+ *      are plain literals you can flip here.
+ */
+export const appConfig = {
+  name: env.APP_NAME,
+  environment: env.APP_ENV,
+  port: env.APP_PORT,
+  url: env.APP_URL,
+  /**
+   * frontendUrl
+   * Why: Tells the API where the SPA/UI lives when it is NOT served from
+   *      the API's own origin.
+   * When: Only set this when the UI runs on a different domain or port
+   *      than the API. Leave empty when the API serves the built SPA itself.
+   * How: Socket.IO adds it to the allowed CORS origins, and auth/session
+   *      cookies switch to SameSite=None + Secure when this origin differs
+   *      from appConfig.url (cross-site cookie handling).
+   */
+  frontendUrl: env.FRONTEND_URL,
+  openApiEnabled: env.OPEN_API,
+  /**
+   * uiEnabled
+   * Why: API-only switch. When false the API never serves the UI build:
+   *      the public dir is not prepared and the `/*` static + SPA-index
+   *      middlewares are not mounted — use this for pure API deployments.
+   * When: Set UI=false in .env for API-only mode; keep true when the API
+   *      should serve the built SPA.
+   * How: kernel.ts gates ensurePublicDir() and the static/SPA middlewares;
+   *      server.ts logs the enabled/disabled status.
+   */
+  uiEnabled: env.UI
+};
+
+export type AppConfig = typeof appConfig;

package/fastify/src/config/auth.ts

@@ -0,0 +1,12 @@
+/**
+ * Why: Account/authentication policy settings.
+ * When: Register, login, and email verification flows.
+ * Where: src/config/auth.ts.
+ * How: Plain literals. `requireEmailVerification` adds a verify-email step
+ *      before a new account can log in.
+ */
+export const authConfig = {
+  requireEmailVerification: false
+};
+
+export type AuthConfig = typeof authConfig;

package/fastify/src/config/cache.ts

@@ -0,0 +1,16 @@
+import { redisConfig } from "./redis.js";
+
+/**
+ * Why: Redis cache TTL defaults and key namespace.
+ * When: Cache helpers store values with an implicit expiry.
+ * Where: src/config/cache.ts.
+ * How: `ttlSeconds` is a plain literal; `keyPrefix` is derived from the
+ *      shared `REDIS_PREFIX` so cache keys stay in one namespace
+ *      (`nexwire:cache:*` by default).
+ */
+export const cacheConfig = {
+  ttlSeconds: 3600,
+  keyPrefix: `${redisConfig.prefix}:cache`
+};
+
+export type CacheConfig = typeof cacheConfig;

package/fastify/src/config/cookie.ts

@@ -0,0 +1,15 @@
+import { env } from "@/env.js";
+
+/**
+ * Why: Auth/session cookie naming and signing.
+ * When: Setting, reading, and clearing signed auth cookies.
+ * Where: src/config/cookie.ts.
+ * How: `name` is a plain literal you can change here. `secret` is
+ *      confidential and stays in .env (`COOKIE_SECRET`).
+ */
+export const cookieConfig = {
+  name: "nexwire",
+  secret: env.COOKIE_SECRET
+};
+
+export type CookieConfig = typeof cookieConfig;

package/fastify/src/config/cors.ts

@@ -0,0 +1,12 @@
+/**
+ * Why: CORS policy for the HTTP server.
+ * When: Global CORS middleware processes cross-origin requests.
+ * Where: src/config/cors.ts.
+ * How: `origin` accepts `"*"` for any origin or a comma-separated allow-list.
+ *      `"*"` reflects the request origin (required for credentialed requests).
+ */
+export const corsConfig = {
+  origin: "*"
+};
+
+export type CorsConfig = typeof corsConfig;