create-nexwire 4.3.0 → 4.4.0

package/README.md

@@ -39,9 +39,10 @@ npm create nexwire@latest my-app
 Choose a backend:
 ❯ Hono      Hono-based HTTP layer and OpenAPI
   Express   Express-based HTTP layer and OpenAPI
+  Fastify   Fastify-based HTTP layer and OpenAPI
 ```
 
-Arrow keys to move, `1`/`2` to jump, Enter to confirm. Press Enter to accept the default (**Hono**). Point at a specific one and the prompt is skipped:
+Arrow keys to move, `1`/`2`/`3` to jump, Enter to confirm. Press Enter to accept the default (**Hono**). Point at a specific one and the prompt is skipped:
 
 ```bash
 # Hono (default)
@@ -49,6 +50,9 @@ npm create nexwire@latest my-app
 
 # Express
 npm create nexwire@latest my-app -- --engine=express
+
+# Fastify
+npm create nexwire@latest my-app -- --engine=fastify
 ```
 
 For CI or scripts, `-y` / `--yes` skips every prompt and accepts the defaults (a project name is still required):
@@ -61,7 +65,7 @@ Your API is live at `http://localhost:3000`, Scalar docs at `/api-docs`, and the
 
 The scaffold already ships a pre-migrated, pre-seeded SQLite database, so there is no migration step before `maker dev`. If you point `DATABASE_URL` at MySQL or PostgreSQL, run `npm run maker db:migrate -- --seed` once to build and populate that database instead.
 
-Requires **Node.js >= 22** or **Bun >= 1.3**.
+Requires **Node.js >= 22**. Hono and Express also support **Bun >= 1.3**; Fastify is Node-only.
 
 ### Current directory
 
@@ -70,6 +74,7 @@ Scaffold directly into the current directory:
 ```bash
 npm create nexwire@latest .
 npm create nexwire@latest . -- --engine=express
+npm create nexwire@latest . -- --engine=fastify
 ```
 
 Works with any package manager: `pnpm`, `yarn`, or `bun`.
@@ -92,8 +97,8 @@ nexwire runs on **Node.js** or **Bun** — pick whichever fits your deployment:
 
 | Runtime     | Minimum version | Notes                                                                 |
 | ----------- | --------------- | --------------------------------------------------------------------- |
-| **Node.js** | `>= 22`         | Default. Uses `node` in Dockerfile.                                   |
-| **Bun**     | `>= 1.3`        | Pass `--runtime=bun` to `deploy:init`. Uses `oven/bun` in Dockerfile. |
+| **Node.js** | `>= 22`         | Default. Uses `node` in Dockerfile. Required by Fastify.              |
+| **Bun**     | `>= 1.3`        | Hono and Express only. Pass `--runtime=bun` to deploy:init.           |
 
 ## Demo
 
@@ -115,7 +120,7 @@ Real recordings from a freshly scaffolded project — no mockups, no staging dat
 
 | Category            | What you get                                                                                                                                  |
 | ------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
-| **API**             | Hono/Express HTTP server with Zod validation, OpenAPI/Scalar docs, CORS, rate limiting                                                        |
+| **API**             | Hono/Express/Fastify HTTP server with Zod validation, OpenAPI/Scalar docs, CORS, rate limiting                                                |
 | **Database**        | Drizzle ORM — SQLite by default, shipped pre-migrated and seeded; MySQL/PostgreSQL also supported, dialect auto-detected from `DATABASE_URL`. |
 | **Auth**            | JWT access + refresh token rotation, signed httpOnly cookies, role middleware                                                                 |
 | **Queue**           | BullMQ background jobs with `shouldQueue` decorator and Bull Board dashboard                                                                  |

package/express/src/framework/facade.ts

@@ -28,6 +28,7 @@ export type { RouteConfig } from "@/framework/http/router.js";
 // ==========================================
 // 3. HTTP & Routing
 // ==========================================
+export { loginLimiter } from "@/framework/http/ratelimiter.js";
 export { createRoute, createRouter, group, jsonContent } from "@/framework/http/router.js";
 export { validate } from "@/framework/http/validation.js";
 export { broadcastChannel } from "@/framework/notification/channels/broadcast.js";

package/express/src/framework/http/logger.ts

@@ -1,17 +1,26 @@
 import type { ErrorRequestHandler, RequestHandler } from "express";
 import createError from "http-errors";
-import { logger } from "@/framework/support/logger.js";
 import { openApiConfig } from "@/config/index.js";
+import { logger } from "@/framework/support/logger.js";
 
 function requestIp(req: Parameters<RequestHandler>[0]) {
   const forwarded = req.headers["x-forwarded-for"];
   return String(req.headers["cf-connecting-ip"] || forwarded || req.headers["x-real-ip"] || req.socket.remoteAddress || "");
 }
 
-// এই ফাংশনটি Express-এর জন্য তৈরি করা হয়েছে, তাই এটি কিছু অতিরিক্ত পাথও বাদ দেয় যা Hono-তে প্রযোজ্য নয়।
+// Express has no "route registered before the logger" behaviour to lean on, so
+// the skips are explicit: probes, the queue dashboard, favicon and OpenAPI
+// assets.
+const PROBE_PATHS = new Set(["/health", "/ready", "/live"]);
+
 function shouldSkipHttpLog(pathname: string) {
-  // /queues, /queues/..., /favicon.ico বাদ দিন
-  return pathname.startsWith("/queues") || pathname === "/favicon.ico" || pathname === openApiConfig.scalar.specUrl || pathname === openApiConfig.scalar.docsPath;
+  return (
+    PROBE_PATHS.has(pathname) ||
+    pathname.startsWith("/queues") ||
+    pathname === "/favicon.ico" ||
+    pathname === openApiConfig.scalar.specUrl ||
+    pathname === openApiConfig.scalar.docsPath
+  );
 }
 
 export const loggerMiddleware: RequestHandler = (req, res, next) => {

package/express/src/framework/maker-cli/runtime/core.mjs

@@ -120,7 +120,7 @@ function serveRedisUnavailablePage(port, endpoint) {
 </html>
 `;
 
-  return new Promise((resolve, reject) => {
+  return new Promise((_resolve, reject) => {
     const server = http.createServer((_req, res) => {
       res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
       res.end(body);
@@ -558,4 +558,3 @@ export async function clearViteCache() {
 
   console.log("Vite cache cleared.");
 }
-

package/express/src/framework/notification/channels/mail.ts

@@ -1,8 +1,8 @@
-import { mail } from "@/framework/support/mail.js";
-import { resolveAuthProvider } from "@/framework/providers/adapter.js";
-import { redisClientIfReady } from "@/framework/redis/client.js";
 import { dispatchEvent } from "@/framework/events/dispatcher.js";
 import type { NotificationChannel } from "@/framework/notification/contracts.js";
+import { resolveAuthProvider } from "@/framework/providers/adapter.js";
+import { redisClientIfReady } from "@/framework/redis/client.js";
+import { mail } from "@/framework/support/mail.js";
 
 function escapeHtml(str: string) {
   return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
@@ -21,13 +21,15 @@ export const mailChannel: NotificationChannel = {
           const contact = await provider.getUserContact(target.id);
           if (contact?.email) to = contact.email as string;
         }
-      } catch { }
+      } catch {}
     }
 
     if (!to) return false;
 
     const subject = options.mail.subject || notification.title;
-    const html = options.mail.html || `<h2>${escapeHtml(notification.title)}</h2>${notification.body ? `<p>${escapeHtml(notification.body)}</p>` : ""}`;
+    const html =
+      options.mail.html ||
+      `<h2>${escapeHtml(notification.title)}</h2>${notification.body ? `<p>${escapeHtml(notification.body)}</p>` : ""}`;
 
     if (redisClientIfReady()) {
       await dispatchEvent("notification:mail", { to, subject, html }, { queue: "mail" });
@@ -37,4 +39,4 @@ export const mailChannel: NotificationChannel = {
 
     return true;
   }
-};
+};

package/express/src/middlewares/auth-middleware.ts

@@ -1,6 +1,5 @@
 import { type NextFunction, type Request, type Response } from "express";
-import { cookie, HttpStatusCodes, jwt } from "@/framework/facade.js";
-import { resolveAuthProvider } from "@/framework/providers/adapter.js";
+import { cookie, HttpStatusCodes, jwt, resolveAuthProvider } from "@/framework/facade.js";
 
 export async function authMiddleware(req: Request, res: Response, next: NextFunction) {
   const provider = await resolveAuthProvider();

package/express/src/middlewares/role-middleware.ts

@@ -1,22 +1,12 @@
 import type { NextFunction, Request, Response } from "express";
 import { HttpStatusCodes } from "@/framework/facade.js";
 
-type AuthPayload = {
-  role?: string | null;
-};
-
 export function requireRole(...allowedRoles: string[]) {
-  const roles = allowedRoles.map((role) => role.toLowerCase());
-
   return async (_req: Request, res: Response, next: NextFunction) => {
-    const auth = res.locals.auth as AuthPayload | undefined;
-
-    if (!auth) {
-      return res.status(HttpStatusCodes.UNAUTHORIZED).json({ message: "Unauthorized" });
-    }
+    const auth = res.locals.auth;
+    if (!auth) return res.status(HttpStatusCodes.UNAUTHORIZED).json({ message: "Unauthorized" });
 
-    const userRole = String(auth.role ?? "").toLowerCase();
-    if (!roles.includes(userRole)) {
+    if (!allowedRoles.includes(auth.role?.name)) {
       return res.status(HttpStatusCodes.FORBIDDEN).json({ message: "Forbidden: Insufficient permissions" });
     }
 

package/express/src/modules/auth/routes/index.ts

@@ -1,5 +1,4 @@
-import { createRoute, createRouter, HttpStatusCodes, jsonContent, z } from "@/framework/facade.js";
-import { loginLimiter } from "@/framework/http/ratelimiter.js";
+import { createRoute, createRouter, HttpStatusCodes, jsonContent, loginLimiter, z } from "@/framework/facade.js";
 import { authMiddleware } from "@/middlewares/auth-middleware.js";
 import {
   forgotPassword,

package/express/src/providers/notification.ts

@@ -1,4 +1,4 @@
-import { registerChannel, mailChannel, broadcastChannel } from "@/framework/facade.js";
+import { broadcastChannel, mailChannel, registerChannel } from "@/framework/facade.js";
 
 registerChannel(mailChannel);
-registerChannel(broadcastChannel);
+registerChannel(broadcastChannel);

package/express/src/resources/src/components/Switch.vue

@@ -1,65 +1,60 @@
-<template>
-  <div :class="wrapperClass">
-    <label :class="props.vertical ? 'form-check-label d-block' : 'd-none'">
-      <span v-html="statusHtml"></span>
-    </label>
-    <div class="form-check form-switch d-inline-block">
-      <input
-        class="form-check-input shadow-none border-primary"
-        type="checkbox"
-        role="switch"
-        :checked="isChecked"
-        v-bind="$attrs" />
-      <label :class="props.vertical ? 'd-none' : 'form-check-label'">
-        <span v-html="statusHtml"></span>
-      </label>
-    </div>
-  </div>
-</template>
-
-<script setup lang="ts">
-import { computed, useAttrs } from "vue";
-
-defineOptions({ name: "Switch", inheritAttrs: false });
-
-interface SwitchProps {
-  modelValue?: string | number | boolean;
-  value?: unknown[] | Record<string, unknown> | string | number | boolean;
-  vertical?: boolean;
-  checked?: boolean | number;
-}
-
-const $attrs = useAttrs();
-const props = defineProps<SwitchProps>();
-
-const textLabel = computed(() => ($attrs.text as string | undefined) || "");
-const blankLabel = computed(() => ($attrs.blank as string | undefined) || "");
-const topclass = computed(() => ($attrs.topclass as string | undefined) || "");
-
-const isChecked = computed(() => Boolean(props.checked));
-
-const wrapperClass = computed(() => (props.vertical ? `text-center ${topclass.value}`.trim() : ""));
-
-const statusHtml = computed(() => {
-  if (isChecked.value) {
-    return `<div class='d-flex justify-content-center'><span>${textLabel.value}</span><div class='rounded-circle bg-success indicator'></div></div>`;
-  }
-
-  return `<div class='d-flex justify-content-center'><span>${blankLabel.value}</span><div class='rounded-circle bg-danger indicator'></div></div>`;
-});
-</script>
-
-<style lang="scss">
-.indicator {
-  width: 4px;
-  height: 4px;
-  margin-left: 2px;
-  margin-top: 5px;
-}
-</style>
-<style lang="scss" scoped>
-label,
-input {
-  cursor: pointer;
-}
-</style>
+<template>
+  <div :class="wrapperClass">
+    <label :class="props.vertical ? 'form-check-label d-block' : 'd-none'">
+      <span v-html="statusHtml"></span>
+    </label>
+    <div class="form-check form-switch d-inline-block">
+      <input class="form-check-input shadow-none border-primary" type="checkbox" :checked="isChecked" v-bind="$attrs">
+      <label :class="props.vertical ? 'd-none' : 'form-check-label'">
+        <span v-html="statusHtml"></span>
+      </label>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { computed, useAttrs } from "vue";
+
+defineOptions({ name: "Switch", inheritAttrs: false });
+
+interface SwitchProps {
+  modelValue?: string | number | boolean;
+  value?: unknown[] | Record<string, unknown> | string | number | boolean;
+  vertical?: boolean;
+  checked?: boolean | number;
+}
+
+const $attrs = useAttrs();
+const props = defineProps<SwitchProps>();
+
+const textLabel = computed(() => ($attrs.text as string | undefined) || "");
+const blankLabel = computed(() => ($attrs.blank as string | undefined) || "");
+const topclass = computed(() => ($attrs.topclass as string | undefined) || "");
+
+const isChecked = computed(() => Boolean(props.checked));
+
+const wrapperClass = computed(() => (props.vertical ? `text-center ${topclass.value}`.trim() : ""));
+
+const statusHtml = computed(() => {
+  if (isChecked.value) {
+    return `<div class='d-flex justify-content-center'><span>${textLabel.value}</span><div class='rounded-circle bg-success indicator'></div></div>`;
+  }
+
+  return `<div class='d-flex justify-content-center'><span>${blankLabel.value}</span><div class='rounded-circle bg-danger indicator'></div></div>`;
+});
+</script>
+
+<style lang="scss" scoped>
+.indicator {
+  width: 4px;
+  height: 4px;
+  margin-left: 2px;
+  margin-top: 5px;
+}
+</style>
+<style lang="scss" scoped>
+label,
+input {
+  cursor: pointer;
+}
+</style>

package/express/src/resources/src/pages/auth/forgetPassword.vue

@@ -3,13 +3,10 @@
     <div class="auth col-12 col-sm-9 col-md-7 col-lg-5 col-xl-4 mx-auto py-5">
       <div class="card card-body border-0">
         <div class="d-block mb-2 text-center">
-          <img src="@/assets/images/logo.png" alt="nexwire" style="max-height: 60px;" />
+          <img src="@/assets/images/logo.png" alt="nexwire" style="max-height: 60px;">
         </div>
         <h4 class="text-center">Forget Password</h4>
-        <p
-          v-if="message"
-          class="text-center alert py-1 mt-2"
-          :class="isError ? 'alert-danger text-danger' : 'alert-success text-success'">
+        <p v-if="message" class="text-center alert py-1 mt-2" :class="isError ? 'alert-danger text-danger' : 'alert-success text-success'">
           {{ message }}
         </p>
         <form id="formAuthentication" @submit.prevent="onSubmit">
@@ -22,14 +19,10 @@
               placeholder="Enter your email..."
               :err="form.errors.email"
               focus
-              must />
+              must
+            />
           </div>
-          <Button
-            type="submit"
-            label="Send Reset Link"
-            class="btn btn-primary w-100"
-            icon="bi bi-send ms-2"
-            :disabled="processing" />
+          <Button type="submit" label="Send Reset Link" class="btn btn-primary w-100" icon="bi bi-send ms-2" :disabled="processing" />
         </form>
         <div class="text-center mt-2">
           <router-link to="/login">
@@ -47,11 +40,14 @@ import { useHead } from "@unhead/vue";
 import { ref } from "vue";
 import Button from "@/components/Button.vue";
 import Input from "@/components/Input.vue";
-import { useGumForm } from "@/plugins/gum";
+import { useGum } from "@/plugins/gum";
+import { type ForgotPayload, useAuthStore } from "@/stores/auth";
 
 useHead({ title: "Forget Password" });
 
-const form = useGumForm({ email: "" });
+const auth = useAuthStore();
+const gum = useGum({ email: "" });
+const form = gum.form;
 const processing = form.processing;
 const message = ref("");
 const isError = ref(false);
@@ -59,24 +55,21 @@ const isError = ref(false);
 const onSubmit = async () => {
   message.value = "";
   isError.value = false;
-  await form.post(
-    "/api/auth/forgot-password",
-    {
-      email: String(form.data.email || "").trim()
+  await form.postWith({
+    fetcher: (body) => auth.forgotPassword(body as ForgotPayload),
+    transform: (data) => ({
+      email: String(data.email || "").trim()
+    }),
+    onSuccess: (res) => {
+      isError.value = false;
+      message.value = String(res.data || "If this email exists, a reset link has been sent");
+      form.reset();
     },
-    {
-      onSuccess: (res) => {
-        console.log(res);
-        isError.value = false;
-        message.value = res.data.message;
-        form.reset();
-      },
-      onError: (_errors, error) => {
-        isError.value = true;
-        message.value = error instanceof Error ? error.message : "Failed to process request";
-      }
+    onError: (_errors, error) => {
+      isError.value = true;
+      message.value = error instanceof Error ? error.message : "Failed to process request";
     }
-  );
+  });
 };
 </script>
 

package/express/src/resources/src/pages/auth/login.vue

@@ -3,7 +3,7 @@
     <div class="auth col-12 col-sm-9 col-md-7 col-lg-5 col-xl-4 mx-auto py-5">
       <div class="card card-body border-0">
         <div class="d-block mb-2 text-center">
-          <img src="@/assets/images/logo.png" alt="nexwire" style="max-height: 60px;" />
+          <img src="@/assets/images/logo.png" alt="nexwire" style="max-height: 60px;">
         </div>
         <p v-if="errorMessage" class="text-center alert alert-danger text-danger py-1 mt-2">
           {{ errorMessage }}
@@ -18,7 +18,8 @@
               placeholder="Enter your email..."
               :err="form.errors.email"
               focus
-              must />
+              must
+            />
           </div>
           <div class="mb-4">
             <input-password-toggle
@@ -27,15 +28,14 @@
               label="password"
               placeholder="Enter your password..."
               :err="form.errors.password"
-              must />
+              must
+            />
           </div>
           <div class="mb-4 d-flex align-items-center justify-content-between">
             <Checkbox id="remember-me" v-model="form.data.remember" label="Remember me" />
-            <router-link to="/forget-password" class="text-decoration-none mb-1">Forget
-              Password?</router-link>
+            <router-link to="/forget-password" class="text-decoration-none mb-1">Forget Password?</router-link>
           </div>
-          <Button type="submit" class="btn btn-primary w-100" label="Login"
-            icon="bi bi-box-arrow-in-right" :disabled="processing" />
+          <Button type="submit" class="btn btn-primary w-100" label="Login" icon="bi bi-box-arrow-in-right" :disabled="processing" />
           <div class="text-center mt-3">
             <span class="text-muted">Don't have an account?</span>
             <router-link to="/register" class="ms-1 text-decoration-none">Register</router-link>
@@ -54,8 +54,8 @@ import Button from "@/components/Button.vue";
 import Checkbox from "@/components/Checkbox.vue";
 import Input from "@/components/Input.vue";
 import InputPasswordToggle from "@/components/InputPasswordToggle.vue";
-import { useGumForm } from "@/plugins/gum";
-import { useAuthStore } from "@/stores/auth";
+import { useGum } from "@/plugins/gum";
+import { type LoginPayload, useAuthStore } from "@/stores/auth";
 
 useHead({ title: "Login" });
 
@@ -63,36 +63,33 @@ const router = useRouter();
 const auth = useAuthStore();
 const errorMessage = ref("");
 
-const form = useGumForm({
+const gum = useGum({
   email: "",
   password: "",
   remember: false
 });
 
+const form = gum.form;
 const processing = form.processing;
 
 const onSubmit = async () => {
   errorMessage.value = "";
-  await form.post(
-    "/api/auth/login",
-    {
-      email: String(form.data.email || "").trim(),
-      password: form.data.password,
-      remember: !!form.data.remember
+  await form.postWith({
+    fetcher: (body) => auth.login(body as LoginPayload),
+    transform: (data) => ({
+      email: String(data.email || "").trim(),
+      password: data.password,
+      remember: !!data.remember
+    }),
+    onSuccess: async () => {
+      form.reset("password");
+      await router.push("/");
     },
-    {
-      onSuccess: async () => {
-        auth.initialized = false;
-        await auth.bootstrap();
-        form.reset("password");
-        await router.push("/");
-      },
-      onError: (_errors, error) => {
-        errorMessage.value = error instanceof Error ? error.message : "Unable to login right now";
-        form.reset("password");
-      }
+    onError: (_errors, error) => {
+      errorMessage.value = error instanceof Error ? error.message : "Unable to login right now";
+      form.reset("password");
     }
-  );
+  });
 };
 </script>