create-nexwire 4.3.0 → 4.4.0

package/fastify/src/resources/vite.config.ts

@@ -0,0 +1,64 @@
+import path from "node:path";
+import { fileURLToPath, URL } from "node:url";
+import vue from "@vitejs/plugin-vue";
+import { defineConfig, loadEnv } from "vite";
+
+const configDir = path.dirname(fileURLToPath(import.meta.url));
+const projectRoot = path.resolve(configDir, "../..");
+
+export default defineConfig(({ mode }) => {
+  // 1. Load the .env file just like the backend does. Resolve it from the
+  // config file so a different process cwd cannot point Vite at the wrong .env.
+  const env = loadEnv(mode, projectRoot, "");
+
+  const cacheBase = process.env.LOCALAPPDATA || process.env.TEMP || ".";
+  const apiUrl = env.APP_URL || "http://localhost:3000";
+
+  // Match the backend default: Socket.IO is off unless SOCKET=true
+  const socketEnabled = env.SOCKET === "true";
+
+  const proxy: Record<string, any> = {
+    "/api": { target: apiUrl, changeOrigin: true },
+    "/health": { target: apiUrl, changeOrigin: true },
+    "/storage": { target: apiUrl, changeOrigin: true }
+  };
+
+  if (socketEnabled) {
+    proxy["/socket.io"] = { target: apiUrl, changeOrigin: true, ws: true, timeout: 10000 };
+  }
+
+  return {
+    define: {
+      // 3. ALWAYS stringify the value when using Vite define
+      // `import.meta.env.*` is inlined into every module in dev as well as in
+      // the production bundle, so the UI never depends on a stale global.
+      "import.meta.env.VITE_SOCKET_ENABLED": JSON.stringify(socketEnabled),
+      __SOCKET_ENABLED__: JSON.stringify(socketEnabled),
+      __API_URL__: JSON.stringify(apiUrl)
+    },
+    root: fileURLToPath(new URL(".", import.meta.url)),
+    cacheDir: path.join(cacheBase, "nexwire", "vite-cache", "resources"),
+    plugins: [vue()],
+    css: {
+      preprocessorOptions: {
+        scss: {
+          quietDeps: true,
+          silenceDeprecations: ["import", "if-function", "global-builtin", "color-functions", "slash-div"]
+        }
+      }
+    },
+    resolve: {
+      alias: {
+        "@": fileURLToPath(new URL("./src", import.meta.url))
+      }
+    },
+    build: {
+      outDir: "../../public",
+      emptyOutDir: true
+    },
+    server: {
+      port: 5173,
+      proxy // /socket.io is only proxied when SOCKET=true
+    }
+  };
+});

package/fastify/src/types/global.d.ts

@@ -0,0 +1,32 @@
+declare module "*.vue" {
+  import type { DefineComponent } from "vue";
+
+  const component: DefineComponent<Record<string, unknown>, Record<string, unknown>, unknown>;
+  export default component;
+}
+
+declare module "bootstrap/js/dist/modal.js" {
+  export default class Modal {
+    constructor(element: Element, options?: { backdrop?: boolean | "static"; keyboard?: boolean });
+    show(): void;
+    hide(): void;
+    dispose(): void;
+  }
+}
+
+declare module "bootstrap/js/dist/toast.js" {
+  export default class Toast {
+    static getOrCreateInstance(element: Element): Toast;
+    show(): void;
+  }
+}
+
+declare module "luxon";
+declare module "nodemailer";
+declare module "vue-select";
+
+interface ImportMetaEnv {
+  readonly VITE_API_URL?: string;
+  readonly VITE_SOCKET_URL?: string;
+  readonly VITE_SOCKET_ENABLED?: boolean;
+}

package/fastify/tsconfig.json

@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "target": "ESNext",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "jsx": "react-jsx",
+    "paths": {
+      "@/*": ["./src/*"]
+    },
+    "strict": false,
+    "esModuleInterop": true,
+    "allowSyntheticDefaultImports": true,
+    "outDir": "./dist",
+    "skipLibCheck": true,
+    "types": ["node"]
+  },
+  "include": ["src/**/*.ts", "src/**/*.d.ts", "src/framework/maker-cli/**/*.mjs", "drizzle.config.ts"],
+  "exclude": ["node_modules", "dist", "src/resources", "src/storage/trash"]
+}

package/fastify/vitest.config.ts

@@ -0,0 +1,38 @@
+import { fileURLToPath } from "node:url";
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  resolve: {
+    alias: {
+      "@": fileURLToPath(new URL("./src", import.meta.url))
+    }
+  },
+  test: {
+    globals: true,
+    include: ["src/**/*.test.ts", "src/**/*.spec.ts"],
+    exclude: ["src/resources/**", "src/storage/**", "node_modules/**", "dist/**"],
+    environment: "node",
+    coverage: {
+      provider: "v8",
+      reporter: ["text", "json", "html"],
+      include: ["src/**/*.ts"],
+      exclude: ["src/resources/**", "src/storage/**", "src/framework/maker-cli/**", "src/**/*.d.ts", "src/**/*.test.ts", "src/**/*.spec.ts"]
+      // No `thresholds` here on purpose.
+      //
+      // This file is published inside the package, so any floor written here also
+      // becomes every scaffolded project's floor - and it would fail them on the
+      // first run. A new project ships with only the auth module's tests: the
+      // framework's own tests under `src/framework/**/__tests__/` are not
+      // published, because they test the framework rather than the application.
+      // That measures 8.49% statements, so a floor calibrated for this repository
+      // reports a failure for a developer who has done nothing wrong and whose
+      // 56 tests all pass.
+      //
+      // The floor is a guard on this repository, not on yours, so it is passed on
+      // the command line when the framework's own suite is run - it is never read
+      // from this file. That keeps this file byte-identical across both engines,
+      // keeps it free of a number that would be meaningless in someone else's
+      // project, and still fails when untested code is added here.
+    }
+  }
+});

package/hono/src/framework/facade.ts

@@ -28,6 +28,7 @@ export { command, dispatchCommand, dispatchEvent } from "@/framework/events/disp
 // ==========================================
 // 3. HTTP & Routing
 // ==========================================
+export { loginLimiter } from "@/framework/http/ratelimiter.js";
 export { createRouter, group } from "@/framework/http/router.js";
 export { validate } from "@/framework/http/validation.js";
 export { broadcastChannel } from "@/framework/notification/channels/broadcast.js";

package/hono/src/framework/http/logger.ts

@@ -1,81 +1,86 @@
-import type { Context, Next } from "hono";
-import { loggingConfig } from "@/config/index.js";
-import { logger } from "@/framework/support/logger.js";
-
-function ip(c: Context) {
-  return c.req.header("cf-connecting-ip") || c.req.header("x-forwarded-for") || c.req.header("x-real-ip") || null;
-}
-
-function shouldSkipHttpLog(pathname: string) {
-  return pathname.startsWith("/queues");
-}
-
-/**
- * Why: Logs each HTTP request with latency and request metadata.
- * When: Applied globally to app routes.
- * Where: HTTP middleware stack.
- * How: Captures start time, assigns request id, logs after downstream response.
- */
-export async function loggerMiddleware(c: Context, next: Next) {
-  const start = Date.now();
-  const requestId = crypto.randomUUID();
-
-  c.set("requestId", requestId);
-  await next();
-
-  if (!loggingConfig.httpRequests || shouldSkipHttpLog(c.req.path)) {
-    return;
-  }
-
-  logger.info("HTTP Request", {
-    requestId,
-    method: c.req.method,
-    path: c.req.path,
-    url: c.req.url,
-    status: c.res.status,
-    duration_ms: Date.now() - start,
-    ip: ip(c),
-    userAgent: c.req.header("user-agent") || null
-  });
-}
-
-/**
- * Why: Standard 404 handler with structured log context.
- * When: No route matches request path.
- * Where: App notFound handler registration.
- * How: Emits warning log and returns JSON 404 payload.
- */
-export function notFound(c: Context) {
-  logger.warn("404 Not Found", {
-    requestId: c.get("requestId") || null,
-    method: c.req.method,
-    path: c.req.path,
-    url: c.req.url,
-    ip: ip(c),
-    userAgent: c.req.header("user-agent") || null
-  });
-
-  return c.json({ message: "Not Found" }, 404);
-}
-
-/**
- * Why: Centralized unhandled error responder and logger.
- * When: Route/middleware throws uncaught error.
- * Where: App onError handler registration.
- * How: Logs stack + request context and returns status/message JSON.
- */
-export function onError(error: any, c: Context) {
-  logger.error("Unhandled Application Error", {
-    requestId: c.get("requestId") || null,
-    name: error?.name || "Error",
-    message: error?.message,
-    stack: error?.stack,
-    method: c.req.method,
-    path: c.req.path,
-    url: c.req.url,
-    ip: ip(c),
-    userAgent: c.req.header("user-agent") || null
-  });
-
-  return c.json({ message: error?.message || "Internal Server Error" }, error?.status || 500);
-}
+import type { Context, Next } from "hono";
+import { loggingConfig } from "@/config/index.js";
+import { logger } from "@/framework/support/logger.js";
+
+function ip(c: Context) {
+  return c.req.header("cf-connecting-ip") || c.req.header("x-forwarded-for") || c.req.header("x-real-ip") || null;
+}
+
+// Probe endpoints and the queue dashboard are infrastructure traffic, not
+// application requests. Skip them on every engine so the access log stays
+// useful (the dev CLI polls /health while it boots).
+const PROBE_PATHS = new Set(["/health", "/ready", "/live"]);
+
+function shouldSkipHttpLog(pathname: string) {
+  return PROBE_PATHS.has(pathname) || pathname.startsWith("/queues");
+}
+
+/**
+ * Why: Logs each HTTP request with latency and request metadata.
+ * When: Applied globally to app routes.
+ * Where: HTTP middleware stack.
+ * How: Captures start time, assigns request id, logs after downstream response.
+ */
+export async function loggerMiddleware(c: Context, next: Next) {
+  const start = Date.now();
+  const requestId = crypto.randomUUID();
+
+  c.set("requestId", requestId);
+  await next();
+
+  if (!loggingConfig.httpRequests || shouldSkipHttpLog(c.req.path)) {
+    return;
+  }
+
+  logger.info("HTTP Request", {
+    requestId,
+    method: c.req.method,
+    path: c.req.path,
+    url: c.req.url,
+    status: c.res.status,
+    duration_ms: Date.now() - start,
+    ip: ip(c),
+    userAgent: c.req.header("user-agent") || null
+  });
+}
+
+/**
+ * Why: Standard 404 handler with structured log context.
+ * When: No route matches request path.
+ * Where: App notFound handler registration.
+ * How: Emits warning log and returns JSON 404 payload.
+ */
+export function notFound(c: Context) {
+  logger.warn("404 Not Found", {
+    requestId: c.get("requestId") || null,
+    method: c.req.method,
+    path: c.req.path,
+    url: c.req.url,
+    ip: ip(c),
+    userAgent: c.req.header("user-agent") || null
+  });
+
+  return c.json({ message: "Not Found" }, 404);
+}
+
+/**
+ * Why: Centralized unhandled error responder and logger.
+ * When: Route/middleware throws uncaught error.
+ * Where: App onError handler registration.
+ * How: Logs stack + request context and returns status/message JSON.
+ */
+export function onError(error: any, c: Context) {
+  logger.error("Unhandled Application Error", {
+    requestId: c.get("requestId") || null,
+    name: error?.name || "Error",
+    message: error?.message,
+    stack: error?.stack,
+    method: c.req.method,
+    path: c.req.path,
+    url: c.req.url,
+    ip: ip(c),
+    userAgent: c.req.header("user-agent") || null
+  });
+
+  return c.json({ message: error?.message || "Internal Server Error" }, error?.status || 500);
+}

package/hono/src/framework/maker-cli/runtime/core.mjs

@@ -120,7 +120,7 @@ function serveRedisUnavailablePage(port, endpoint) {
 </html>
 `;
 
-  return new Promise((resolve, reject) => {
+  return new Promise((_resolve, reject) => {
     const server = http.createServer((_req, res) => {
       res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
       res.end(body);
@@ -558,4 +558,3 @@ export async function clearViteCache() {
 
   console.log("Vite cache cleared.");
 }
-

package/hono/src/framework/notification/channels/mail.ts

@@ -1,8 +1,8 @@
-import { mail } from "@/framework/support/mail.js";
-import { resolveAuthProvider } from "@/framework/providers/adapter.js";
-import { redisClientIfReady } from "@/framework/redis/client.js";
 import { dispatchEvent } from "@/framework/events/dispatcher.js";
 import type { NotificationChannel } from "@/framework/notification/contracts.js";
+import { resolveAuthProvider } from "@/framework/providers/adapter.js";
+import { redisClientIfReady } from "@/framework/redis/client.js";
+import { mail } from "@/framework/support/mail.js";
 
 function escapeHtml(str: string) {
   return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
@@ -21,13 +21,15 @@ export const mailChannel: NotificationChannel = {
           const contact = await provider.getUserContact(target.id);
           if (contact?.email) to = contact.email as string;
         }
-      } catch { }
+      } catch {}
     }
 
     if (!to) return false;
 
     const subject = options.mail.subject || notification.title;
-    const html = options.mail.html || `<h2>${escapeHtml(notification.title)}</h2>${notification.body ? `<p>${escapeHtml(notification.body)}</p>` : ""}`;
+    const html =
+      options.mail.html ||
+      `<h2>${escapeHtml(notification.title)}</h2>${notification.body ? `<p>${escapeHtml(notification.body)}</p>` : ""}`;
 
     if (redisClientIfReady()) {
       await dispatchEvent("notification:mail", { to, subject, html }, { queue: "mail" });
@@ -37,4 +39,4 @@ export const mailChannel: NotificationChannel = {
 
     return true;
   }
-};
+};

package/hono/src/middlewares/auth-middleware.ts

@@ -1,6 +1,5 @@
 import type { Context, Next } from "hono";
-import { cookie, HttpStatusCodes, jwt } from "@/framework/facade.js";
-import { resolveAuthProvider } from "@/framework/providers/adapter.js";
+import { cookie, HttpStatusCodes, jwt, resolveAuthProvider } from "@/framework/facade.js";
 
 export async function authMiddleware(c: Context, next: Next) {
   const provider = await resolveAuthProvider();

package/hono/src/middlewares/role-middleware.ts

@@ -1,22 +1,12 @@
 import type { Context, Next } from "hono";
 import { HttpStatusCodes } from "@/framework/facade.js";
 
-type AuthPayload = {
-  role?: string | null;
-};
-
 export function requireRole(...allowedRoles: string[]) {
-  const roles = allowedRoles.map((role) => role.toLowerCase());
-
   return async (c: Context, next: Next) => {
-    const auth = c.get("auth") as AuthPayload | undefined;
-
-    if (!auth) {
-      return c.json({ message: "Unauthorized" }, HttpStatusCodes.UNAUTHORIZED);
-    }
+    const auth = c.get("auth");
+    if (!auth) return c.json({ message: "Unauthorized" }, HttpStatusCodes.UNAUTHORIZED);
 
-    const userRole = String(auth.role ?? "").toLowerCase();
-    if (!roles.includes(userRole)) {
+    if (!allowedRoles.includes(auth.role?.name)) {
       return c.json({ message: "Forbidden: Insufficient permissions" }, HttpStatusCodes.FORBIDDEN);
     }
 

package/hono/src/modules/auth/routes/index.ts

@@ -1,5 +1,4 @@
-import { createRoute, createRouter, HttpStatusCodes, jsonContent, z } from "@/framework/facade.js";
-import { loginLimiter } from "@/framework/http/ratelimiter.js";
+import { createRoute, createRouter, HttpStatusCodes, jsonContent, loginLimiter, z } from "@/framework/facade.js";
 import { authMiddleware } from "@/middlewares/auth-middleware.js";
 import {
   forgotPassword,

package/hono/src/providers/notification.ts

@@ -1,4 +1,4 @@
-import { registerChannel, mailChannel, broadcastChannel } from "@/framework/facade.js";
+import { broadcastChannel, mailChannel, registerChannel } from "@/framework/facade.js";
 
 registerChannel(mailChannel);
-registerChannel(broadcastChannel);
+registerChannel(broadcastChannel);

package/hono/src/resources/src/components/Switch.vue

@@ -1,65 +1,60 @@
-<template>
-  <div :class="wrapperClass">
-    <label :class="props.vertical ? 'form-check-label d-block' : 'd-none'">
-      <span v-html="statusHtml"></span>
-    </label>
-    <div class="form-check form-switch d-inline-block">
-      <input
-        class="form-check-input shadow-none border-primary"
-        type="checkbox"
-        role="switch"
-        :checked="isChecked"
-        v-bind="$attrs" />
-      <label :class="props.vertical ? 'd-none' : 'form-check-label'">
-        <span v-html="statusHtml"></span>
-      </label>
-    </div>
-  </div>
-</template>
-
-<script setup lang="ts">
-import { computed, useAttrs } from "vue";
-
-defineOptions({ name: "Switch", inheritAttrs: false });
-
-interface SwitchProps {
-  modelValue?: string | number | boolean;
-  value?: unknown[] | Record<string, unknown> | string | number | boolean;
-  vertical?: boolean;
-  checked?: boolean | number;
-}
-
-const $attrs = useAttrs();
-const props = defineProps<SwitchProps>();
-
-const textLabel = computed(() => ($attrs.text as string | undefined) || "");
-const blankLabel = computed(() => ($attrs.blank as string | undefined) || "");
-const topclass = computed(() => ($attrs.topclass as string | undefined) || "");
-
-const isChecked = computed(() => Boolean(props.checked));
-
-const wrapperClass = computed(() => props.vertical ? `text-center ${topclass.value}`.trim() : "");
-
-const statusHtml = computed(() => {
-  if (isChecked.value) {
-    return `<div class='d-flex justify-content-center'><span>${textLabel.value}</span><div class='rounded-circle bg-success indicator'></div></div>`;
-  }
-
-  return `<div class='d-flex justify-content-center'><span>${blankLabel.value}</span><div class='rounded-circle bg-danger indicator'></div></div>`;
-});
-</script>
-
-<style lang="scss">
-.indicator {
-  width: 4px;
-  height: 4px;
-  margin-left: 2px;
-  margin-top: 5px;
-}
-</style>
-<style lang="scss" scoped>
-label,
-input {
-  cursor: pointer;
-}
-</style>
+<template>
+  <div :class="wrapperClass">
+    <label :class="props.vertical ? 'form-check-label d-block' : 'd-none'">
+      <span v-html="statusHtml"></span>
+    </label>
+    <div class="form-check form-switch d-inline-block">
+      <input class="form-check-input shadow-none border-primary" type="checkbox" :checked="isChecked" v-bind="$attrs">
+      <label :class="props.vertical ? 'd-none' : 'form-check-label'">
+        <span v-html="statusHtml"></span>
+      </label>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { computed, useAttrs } from "vue";
+
+defineOptions({ name: "Switch", inheritAttrs: false });
+
+interface SwitchProps {
+  modelValue?: string | number | boolean;
+  value?: unknown[] | Record<string, unknown> | string | number | boolean;
+  vertical?: boolean;
+  checked?: boolean | number;
+}
+
+const $attrs = useAttrs();
+const props = defineProps<SwitchProps>();
+
+const textLabel = computed(() => ($attrs.text as string | undefined) || "");
+const blankLabel = computed(() => ($attrs.blank as string | undefined) || "");
+const topclass = computed(() => ($attrs.topclass as string | undefined) || "");
+
+const isChecked = computed(() => Boolean(props.checked));
+
+const wrapperClass = computed(() => (props.vertical ? `text-center ${topclass.value}`.trim() : ""));
+
+const statusHtml = computed(() => {
+  if (isChecked.value) {
+    return `<div class='d-flex justify-content-center'><span>${textLabel.value}</span><div class='rounded-circle bg-success indicator'></div></div>`;
+  }
+
+  return `<div class='d-flex justify-content-center'><span>${blankLabel.value}</span><div class='rounded-circle bg-danger indicator'></div></div>`;
+});
+</script>
+
+<style lang="scss" scoped>
+.indicator {
+  width: 4px;
+  height: 4px;
+  margin-left: 2px;
+  margin-top: 5px;
+}
+</style>
+<style lang="scss" scoped>
+label,
+input {
+  cursor: pointer;
+}
+</style>