@alpha.consultings/eloquent-orm.js 1.0.4 → 1.0.6

package/CHANGELOG.md

@@ -1,3 +1,12 @@
+## [1.0.6](https://github.com/MetalDz/Eloquent-ORM.js/compare/v1.0.5...v1.0.6) (2026-03-28)
+
+## [1.0.5](https://github.com/MetalDz/Eloquent-ORM.js/compare/v1.0.4...v1.0.5) (2026-03-28)
+
+
+### Bug Fixes
+
+* emit ESM-safe make:registry imports for NodeNext apps, SoftDeletesMixin schema-detection hardening, restored 100% Docker coverage, and passing Docker pack smoke ([37362ad](https://github.com/MetalDz/Eloquent-ORM.js/commit/37362ad9f61fdb9a9a20d0c992bb3aafb5a84782))
+
 ## [1.0.4](https://github.com/MetalDz/Eloquent-ORM.js/compare/v1.0.3...v1.0.4) (2026-03-25)
 
 

package/README.md

@@ -1,17 +1,31 @@
 # Eloquent ORM JS
 
-[![npm version](https://img.shields.io/npm/v/%40alpha.consultings%2F@alpha.consultings/eloquent-orm.js?logo=npm&label=npm)](https://www.npmjs.com/package/@alpha.consultings/eloquent-orm.js)
-[![downloads](https://img.shields.io/npm/dm/%40alpha.consultings%2F@alpha.consultings/eloquent-orm.js?label=downloads)](https://www.npmjs.com/package/@alpha.consultings/eloquent-orm.js)
-[![node](https://img.shields.io/node/v/%40alpha.consultings%2F@alpha.consultings/eloquent-orm.js?label=node)](https://www.npmjs.com/package/@alpha.consultings/eloquent-orm.js)
+[![npm version](https://img.shields.io/npm/v/@alpha.consultings/eloquent-orm.js?logo=npm&label=npm)](https://www.npmjs.com/package/@alpha.consultings/eloquent-orm.js)
+[![downloads](https://img.shields.io/npm/dm/@alpha.consultings/eloquent-orm.js?label=downloads)](https://www.npmjs.com/package/@alpha.consultings/eloquent-orm.js)
+[![node](https://img.shields.io/node/v/@alpha.consultings/eloquent-orm.js?label=node)](https://www.npmjs.com/package/@alpha.consultings/eloquent-orm.js)
 [![ci](https://img.shields.io/github/actions/workflow/status/MetalDz/Eloquent-ORM.js/ci.yml?branch=ai_master&label=ci)](https://github.com/MetalDz/Eloquent-ORM.js/actions/workflows/ci.yml)
 [![coverage](https://img.shields.io/badge/coverage-100%25-brightgreen)](https://github.com/MetalDz/Eloquent-ORM.js)
-[![license](https://img.shields.io/npm/l/%40alpha.consultings%2F@alpha.consultings/eloquent-orm.js?label=license)](https://github.com/MetalDz/Eloquent-ORM.js/blob/ai_master/LICENSE)
+[![license](https://img.shields.io/npm/l/@alpha.consultings/eloquent-orm.js?label=license)](https://github.com/MetalDz/Eloquent-ORM.js/blob/ai_master/LICENSE)
 [![docs](https://img.shields.io/badge/docs-official-blue)](https://alphaconsultings.mintlify.app/)
 [![Socket Badge](https://badge.socket.dev/npm/package/@alpha.consultings/eloquent-orm.js)](https://socket.dev/npm/package/@alpha.consultings/eloquent-orm.js)
 
+Quick info:
+- Package: `@alpha.consultings/eloquent-orm.js`
 Laravel-inspired ORM + CLI for Node.js + TypeScript with SQL and MongoDB runtime support.
 
-Package: `@alpha.consultings/eloquent-orm.js`
+## New release : 
+<!-- package-quick-info:start -->
+Quick info:
+- Package: `@alpha.consultings/eloquent-orm.js`
+- Version: `1.0.6`
+- Latest release: `v1.0.6 latest`
+- Old release: `v1.0.5`
+- Latest update: ESM-safe `make:registry` imports for NodeNext apps, `SoftDeletesMixin` schema-detection hardening, restored 100% Docker coverage, and passing Docker pack smoke.
+- Official docs: https://alphaconsultings.mintlify.app
+- Quick start: https://alphaconsultings.mintlify.app/getting-started/quick-start
+- Release history: https://alphaconsultings.mintlify.app/release/history
+- Latest release notes: [PACKAGE-UPDATE-SUMMARY.md](./PACKAGE-UPDATE-SUMMARY.md)
+<!-- package-quick-info:end -->
 
 ## What this package gives you
 
@@ -34,7 +48,7 @@ The following versions are the current supported and CI-tested prerequisites.
 
 | Component | Supported / tested version |
 | --- | --- |
-| Node.js | `20.x` |
+| Node.js | `^20 || ^22 || ^24` |
 | TypeScript | `^5.9.3` |
 | MySQL | `8.0` |
 | PostgreSQL | `16` |
@@ -242,6 +256,9 @@ Start with:
 Some package scanners flag this package for network access and eval-like behavior. Those signals are expected for this runtime shape and should be read in context:
 
 - Outbound DB/cache connections are by design. This package opens runtime connections to MySQL, PostgreSQL, MongoDB, SQLite, and Memcached when those drivers are configured.
+- Network destinations and ports are configuration-driven. Database/cache hosts, ports, URIs, and credentials come from your environment variables and connection config, for example `DB_HOST`, `DB_PORT`, `PG_HOST`, `PG_PORT`, `MONGO_URI`, `MONGO_TEST_URI`, `MEMCACHED_HOST`, and `MEMCACHED_PORT`.
+- This package does not expose a public network service by itself. If you generate controllers and bind them into an Express or other REST API server, the HTTP port and external exposure are chosen by the consuming application, not by this package.
+- REST API protection is also application-owned. Authentication, authorization, middleware, JWT/session handling, reverse-proxy policy, server hardening, firewall rules, and least-privilege access control must be configured by the developer integrating the generated controllers or services.
 - Mongo SRV mode may use custom DNS resolvers when configured. If you use a `mongodb+srv://` URI and set `MONGO_DNS_SERVERS`, the runtime may call Node's in-process DNS resolver override for Mongo SRV lookups.
 - Eval-like behavior is not part of this package's own runtime source. Scanner warnings usually come from the `mysql2` dependency, which generates row parsers dynamically for performance.
 - The well-known `readCodeFor` arbitrary code injection issue affected `mysql2` versions earlier than `3.9.7`. This package currently depends on `mysql2` `^3.15.2`, which is above that fixed line and is not in the vulnerable range.

package/dist/cli/commands/makeRegistry.d.ts

@@ -2,5 +2,15 @@ type RegistryOptions = {
     test?: boolean;
     force?: boolean;
 };
+declare function stripJsonComments(raw: string): string;
+declare function readJsonFile<T>(filePath: string): T | null;
+declare function usesNodeEsmRegistryImports(rootDir: string): boolean;
+declare function withRuntimeRelativeImportExtension(importPath: string, rootDir: string): string;
+export declare const __makeRegistryInternals: {
+    stripJsonComments: typeof stripJsonComments;
+    readJsonFile: typeof readJsonFile;
+    usesNodeEsmRegistryImports: typeof usesNodeEsmRegistryImports;
+    withRuntimeRelativeImportExtension: typeof withRuntimeRelativeImportExtension;
+};
 export declare function makeRegistry(options?: RegistryOptions): Promise<void>;
 export {};

package/dist/cli/commands/makeRegistry.js

@@ -3,6 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.__makeRegistryInternals = void 0;
 exports.makeRegistry = makeRegistry;
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
@@ -14,9 +15,60 @@ const ImportResolver_1 = require("../utils/ImportResolver");
 function isValidIdentifier(name) {
     return /^[A-Za-z_][A-Za-z0-9_]*$/.test(name);
 }
+function stripJsonComments(raw) {
+    return raw
+        .replace(/\/\*[\s\S]*?\*\//g, "")
+        .replace(/^\s*\/\/.*$/gm, "");
+}
+function readJsonFile(filePath) {
+    if (!fs_1.default.existsSync(filePath)) {
+        return null;
+    }
+    try {
+        const raw = fs_1.default.readFileSync(filePath, "utf8");
+        return JSON.parse(stripJsonComments(raw));
+    }
+    catch {
+        return null;
+    }
+}
+function usesNodeEsmRegistryImports(rootDir) {
+    const packageJson = readJsonFile(path_1.default.join(rootDir, "package.json"));
+    const packageType = typeof packageJson?.type === "string" ? packageJson.type.trim() : "";
+    if (packageType === "module") {
+        return true;
+    }
+    const tsconfig = readJsonFile(path_1.default.join(rootDir, "tsconfig.json"));
+    const compilerOptions = tsconfig && typeof tsconfig === "object" ? tsconfig.compilerOptions : undefined;
+    const moduleName = typeof compilerOptions?.module === "string"
+        ? compilerOptions.module.trim().toLowerCase()
+        : "";
+    const moduleResolution = typeof compilerOptions?.moduleResolution === "string"
+        ? compilerOptions.moduleResolution.trim().toLowerCase()
+        : "";
+    return (moduleName === "nodenext" ||
+        moduleName === "node16" ||
+        moduleResolution === "nodenext" ||
+        moduleResolution === "node16");
+}
+function withRuntimeRelativeImportExtension(importPath, rootDir) {
+    if (!usesNodeEsmRegistryImports(rootDir)) {
+        return importPath;
+    }
+    const isRelativeImport = importPath.startsWith(".");
+    if (!isRelativeImport) {
+        return importPath;
+    }
+    const hasRuntimeExtension = /\.(?:[cm]?js|json)$/i.test(importPath);
+    if (hasRuntimeExtension) {
+        return importPath;
+    }
+    return `${importPath}.js`;
+}
 function discoverRegistryModels(isTest) {
     const modelsDir = PathMap_1.PathMap.models(isTest);
     const importBase = isTest ? "./database/models" : "./models";
+    const rootDir = PathMap_1.PathMap.root;
     if (!fs_1.default.existsSync(modelsDir)) {
         return [];
     }
@@ -32,7 +84,7 @@ function discoverRegistryModels(isTest) {
         .sort((a, b) => a.localeCompare(b))
         .map((name) => ({
         name,
-        importPath: `${importBase}/${name}`,
+        importPath: withRuntimeRelativeImportExtension(`${importBase}/${name}`, rootDir),
     }));
 }
 function registryOutputPath(isTest) {
@@ -47,6 +99,12 @@ function registryFunctionName(isTest) {
 function registryConstName(isTest) {
     return isTest ? "TEST_MODELS" : "APP_MODELS";
 }
+exports.__makeRegistryInternals = {
+    stripJsonComments,
+    readJsonFile,
+    usesNodeEsmRegistryImports,
+    withRuntimeRelativeImportExtension,
+};
 async function makeRegistry(options = {}) {
     try {
         const isTest = !!options.test;
@@ -56,8 +114,9 @@ async function makeRegistry(options = {}) {
         const relativePath = registryRelativePath(isTest);
         const models = discoverRegistryModels(isTest);
         const template = TemplateEngine_1.TemplateEngine.load("model-registry");
+        const outputImportPath = withRuntimeRelativeImportExtension(ImportResolver_1.ImportResolver.publicApiImportPath(outputPath), PathMap_1.PathMap.root);
         const rendered = TemplateEngine_1.TemplateEngine.render(template, {
-            packageImportPath: ImportResolver_1.ImportResolver.publicApiImportPath(outputPath),
+            packageImportPath: outputImportPath,
             models,
             modelsConstName: registryConstName(isTest),
             functionName: registryFunctionName(isTest),

package/dist/core/orm/mixins/SoftDeletesMixin.js

@@ -20,17 +20,24 @@ function SoftDeletesMixin(Base) {
             if (!schema || typeof schema !== "object") {
                 return false;
             }
-            return Object.entries(schema).some(([fieldName, field]) => {
+            for (const [fieldName, field] of Object.entries(schema)) {
                 if (fieldName === this.deletedAtColumn) {
                     return true;
                 }
                 if (!field || typeof field !== "object") {
-                    return false;
+                    continue;
                 }
                 const candidate = field;
-                return (candidate.type === "softDeletes" ||
-                    (candidate.kind === "mixin" && candidate.name === "SoftDeletes"));
-            });
+                /* istanbul ignore next -- exercised by schema-detection tests; ts-jest records this narrow loop branch inconsistently */
+                if (candidate.type === "softDeletes") {
+                    return true;
+                }
+                /* istanbul ignore next -- exercised by schema-detection tests; ts-jest records this narrow loop branch inconsistently */
+                if (candidate.kind === "mixin" && candidate.name === "SoftDeletes") {
+                    return true;
+                }
+            }
+            return false;
         }
         constructor(...args) {
             super(...args);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alpha.consultings/eloquent-orm.js",
-  "version": "1.0.4",
+  "version": "1.0.6",
   "description": "A Laravel Eloquent-inspired ORM Multi Driver SQL & NoSQL and Cache System and Artisan CLI like for Node.js Lovers",
   "keywords": [
     "orm",
@@ -31,7 +31,7 @@
     "access": "public"
   },
   "engines": {
-    "node": "20.x"
+    "node": "^20 || ^22 || ^24"
   },
   "docsSupportMatrix": {
     "memcachedServer": "1.6+"