@appweaver/cli 1.0.24 → 1.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@appweaver/cli",
-  "version": "1.0.24",
+  "version": "1.1.0",
   "description": "Appweaver - the backend framework for AI-first development (@cli)",
   "author": "Luka Matosevic",
   "license": "MIT",

package/skill/GUIDELINES.md

@@ -141,6 +141,10 @@ Use `createAuthModel` and `createAuthService` for authenticatable users. They mu
 `createAuthModel` adds: `email`, `passwordHash`, `verifiedEmail`, `twoFactorAuth`, `enabled`, `logoutAt` scalars; a
 virtual `password` field; a `roles` relation; and optional `apiKeys` relation.
 
+`createAuthService` supports an optional `registrationData` callback to customize the registration payload and an
+optional `checkOAuth2User` callback to allow or reject OAuth2 registrations/logins (return nothing to proceed, or a
+string/`Error` to abort).
+
 ```ts
 // src/resources/user/model.ts
 import { createAuthModel } from '@appweaver/core';
@@ -241,7 +245,7 @@ export async function createAdminUser(): Promise<void> {
     data: {
       firstName: 'Admin',
       lastName: 'Admin',
-      email: 'admin@appweaver.com',
+      email: 'admin@appweaver.co',
       roles: {
         connectOrCreate: [
           {

package/skill/SKILL.md

@@ -78,7 +78,7 @@ create-weaver-app MyBlogAPI "My own CMS for blogging" --database postgresql --no
 ```
 
 This creates a `./my-blog-api` directory, installs all dependencies, and runs the initial schema and type generation.
-Default test runner is `jest` with `swc` transpiler.
+The default test runner is `jest` with `swc` transpiler.
 
 **Example — Bun project with Sqlite:**
 
@@ -86,8 +86,8 @@ Default test runner is `jest` with `swc` transpiler.
 create-weaver-app BunApp "Bun application with simple API" --bun --database sqlite
 ```
 
-This creates a `./bun-app` directory, installs all dependencies using bun package manager, and runs the initial
-schema and type generation. Default test runner is `bun`.
+This creates a `./bun-app` directory, installs all dependencies using bun package manager, and runs the initial schema
+and type generation. The default test runner is `bun`.
 
 After the application is scaffolded, the following commands need to be run to finish the application setup:
 
@@ -314,11 +314,14 @@ Use `createAuthModel` and `createAuthService` instead of `createModel`/`createSe
 authenticatable user. They cannot be used independently! If an auth model is created, then also auth service must exist.
 
 `createAuthModel` extends the config with: `email`, `passwordHash`, `verifiedEmail`, `twoFactorAuth`, `enabled`,
-`logoutAt` scalars; a virtual `password` field (write-only); a `roles` relation; and an optional `apiKeys` relation (
-when `SECURITY_API_KEY_ENABLED` is set).
+`logoutAt` scalars; a virtual `password` field (write-only); a `roles` relation; and an optional `apiKeys` relation
+(when `SECURITY_API_KEY_ENABLED` is set).
 
-`createAuthService` extends the config with automatic password hashing on create/update and an optional
-`registrationData` callback to customize registration payload.
+`createAuthService` extends the config with automatic password hashing on create/update, an optional
+`registrationData` callback to customize registration payload (for OAuth2 logins its `additionalData` argument includes
+`firstName`, `lastName`, `avatarUrl`, and — when `SECURITY_OAUTH2_FETCH_AVATAR_ENABLED` is set — a downloaded
+`avatarFile`), and an optional `checkOAuth2User` callback invoked before a user is registered or authenticated via
+OAuth2 (return nothing to proceed, or a string/`Error`/`HttpError` to abort the login with an error).
 
 ```ts
 // src/resources/user/model.ts
@@ -356,7 +359,9 @@ export default createAuthService({
 
 Use `registerRoute` to register a custom [Fastify route](https://fastify.dev/docs/latest/Reference/Routes/) handler. The
 handler is a Fastify plugin function that defines one or more routes. An optional config object controls authentication,
-caching, and reCAPTCHA behavior.
+caching, and reCAPTCHA behavior. When a custom route's 2xx response schema references resource output models (`<Name>`,
+`<Name>Single` or `<Name>Multiple` — directly or nested inside custom schemas), virtual field values (e.g. `File.url`)
+are projected onto the response payload automatically before serialization.
 
 ```ts
 // src/plugins/custom-route.ts
@@ -422,8 +427,8 @@ registerPlugin('audit-log', async (server) => {
 
 ### Dependency injection
 
-Use `define` to register a value or class in the app context, and `inject` to retrieve it. Class constructors are
-lazily instantiated as singletons on the first injection.
+Use `define` to register a value or class in the app context, and `inject` to retrieve it. Class constructors are lazily
+instantiated as singletons on the first injection.
 
 ```ts
 import { Cache } from '@appweaver/common';
@@ -472,7 +477,7 @@ export async function createAdminUser(): Promise<void> {
     data: {
       firstName: 'Admin',
       lastName: 'Admin',
-      email: 'admin@appweaver.com',
+      email: 'admin@appweaver.co',
       phone: '01234435',
       roles: {
         connectOrCreate: [
@@ -554,7 +559,6 @@ weaver update                                 # update all @appweaver/* packages
 weaver update @appweaver/core @appweaver/cli  # update specific packages
 weaver update --targetVersion 1.2.3           # update to a specific version
 weaver update --noSkill                       # skip updating AI agent skill files (.claude, .agents, …)
-weaver update --noGuidelines                  # skip updating AI agent guideline files (AGENTS.md, CLAUDE.md)
 weaver update --force                         # force update despite peerDependency mismatches
 ```
 

package/skill/references/cli.md

@@ -205,10 +205,9 @@ Update the Appweaver packages.
 
 **Options:**
 
-| Option                            | Description                                                              | Default    |
-|-----------------------------------|-------------------------------------------------------------------------|------------|
-| `--targetVersion [targetVersion]` | The version to update the packages to                                   | `"latest"` |
+| Option                            | Description                                                                 | Default    |
+|-----------------------------------|-----------------------------------------------------------------------------|------------|
+| `--targetVersion [targetVersion]` | The version to update the packages to                                       | `"latest"` |
 | `--noSkill`                       | Skip updating AI agents skill files in agent dirs (`.claude`, `.agents`, …) | `false`    |
-| `--noGuidelines`                  | Skip updating AI agents guideline files (`AGENTS.md`, `CLAUDE.md`)       | `false`    |
-| `-f, --force`                     | Force update despite peerDependency version mismatches                  | `false`    |
-| `--verbose`                       | Print verbose output                                                    | `false`    |
+| `-f, --force`                     | Force update despite peerDependency version mismatches                      | `false`    |
+| `--verbose`                       | Print verbose output                                                        | `false`    |

package/skill/references/configuration.md

@@ -256,9 +256,11 @@ The config object is frozen with `Object.freeze()` after loading to prevent runt
 
 #### OAuth2 general
 
-| Property                    | Type    | Default  | Description                                                  |
-|-----------------------------|---------|----------|--------------------------------------------------------------|
-| `SECURITY_OAUTH2_STATE_TTL` | integer | `600000` | OAuth2 state parameter TTL in milliseconds (default 10 min). |
+| Property                               | Type    | Default  | Description                                                                                                                       |
+|----------------------------------------|---------|----------|-----------------------------------------------------------------------------------------------------------------------------------|
+| `SECURITY_OAUTH2_STATE_TTL`            | integer | `600000` | OAuth2 state parameter TTL in milliseconds (default 10 min).                                                                      |
+| `SECURITY_OAUTH2_REGISTRATION_ENABLED` | boolean | `true`   | Allow registering new users via OAuth2 login. When `false`, only already existing users (matched by email) can log in via OAuth2. |
+| `SECURITY_OAUTH2_FETCH_AVATAR_ENABLED` | boolean | `false`  | Download the user's avatar from the OAuth2 provider during registration and pass it as `avatarFile` to `registrationData`.        |
 
 #### OAuth2 Google
 

package/skill/references/resources.md

@@ -1,9 +1,9 @@
 # Resources
 
-Resources are the core building blocks of an Appweaver application. There are four resource types that form a
-dependency chain: **model** → **service** → **routes** → **policy**. Each resource type is created using a
-corresponding factory function and autoloaded from `src/resources/*/` on application start. Source directory and
-resources pattern could be changed with `APP_SOURCE_PATH` and `RESOURCE_{MODEL,SERVICE,...}_PATTERN` config variables.
+Resources are the core building blocks of an Appweaver application. There are four resource types that form a dependency
+chain: **model** → **service** → **routes** → **policy**. Each resource type is created using a corresponding factory
+function and autoloaded from `src/resources/*/` on application start. Source directory and resources pattern could be
+changed with `APP_SOURCE_PATH` and `RESOURCE_{MODEL,SERVICE,...}_PATTERN` config variables.
 
 - A **model** is always required.
 - A **service** requires a model.
@@ -14,9 +14,9 @@ resources pattern could be changed with `APP_SOURCE_PATH` and `RESOURCE_{MODEL,S
 
 ## createModel
 
-Creates a resource model definition. The model defines database fields, relations, files, virtual fields, DTOs for
-CRUD operations, and index configuration. It is used to generate Prisma schema, TypeScript types, and route
-request/response schemas.
+Creates a resource model definition. The model defines database fields, relations, files, virtual fields, DTOs for CRUD
+operations, and index configuration. It is used to generate Prisma schema, TypeScript types, and route request/response
+schemas.
 
 ```ts
 import { createModel } from '@appweaver/core';
@@ -505,8 +505,8 @@ are passed through unchanged.
 | `maxHeight` | number   | Maximum height. Only downscales if the image exceeds this dimension.                                           |
 | `fit`       | ImageFit | How the image fits the target dimensions: `'inside'` (default), `'contain'`, `'cover'`, `'fill'`, `'outside'`. |
 
-`width`/`height` take precedence over `maxWidth`/`maxHeight`. When using `maxWidth`/`maxHeight`, images smaller than
-the specified dimensions are not enlarged.
+`width`/`height` take precedence over `maxWidth`/`maxHeight`. When using `maxWidth`/`maxHeight`, images smaller than the
+specified dimensions are not enlarged.
 
 ```ts
 // Compress and limit dimensions
@@ -566,6 +566,17 @@ const config = {
 | `output.type`    | `'always'` \| `'single'` \| `'multiple'` \| `'none'` | When the virtual field appears in output.                  |
 | `output.value`   | primitive \| function                                | Computed value or transformer for output.                  |
 
+Virtual output values are applied automatically to responses of resource CRUD routes (including nested relation and file
+objects) and to responses of custom `registerRoute` routes whose 2xx response schemas reference resource output models.
+To apply them manually on a raw resource object (e.g. one fetched directly through a Prisma client), use the
+`projectVirtualFields` helper:
+
+```ts
+import { projectVirtualFields } from '@appweaver/core';
+
+const projected = projectVirtualFields(post, 'Post'); // sets virtual values, recursing into relations and files
+```
+
 ### Operation config (read, create, update)
 
 Control which fields appear in each DTO. Use `pick` for an allowlist or `omit` for a deny-list.
@@ -988,8 +999,8 @@ registerModel(
 
 ## registerPlugin
 
-Registers a custom Fastify plugin. Plugins are wrapped with `fastify-plugin` so their decorators and hooks are scoped
-to the entire server instance.
+Registers a custom Fastify plugin. Plugins are wrapped with `fastify-plugin` so their decorators and hooks are scoped to
+the entire server instance.
 
 ```ts
 import { registerPlugin } from '@appweaver/core';

package/skill/references/security.md

@@ -212,7 +212,9 @@ follow the same flow pattern.
 6. Server verifies the state token (one-time use)
 7. Server exchanges the code for an access token with the provider
 8. Server fetches user info from the provider
-9. Server creates or finds the user by email
+9. Server finds the user by email and invokes the optional checkOAuth2User callback
+   (aborts with an error when the callback returns a string or an Error).
+   New users are registered unless SECURITY_OAUTH2_REGISTRATION_ENABLED=false
 10. Server generates an authentication OTT
 11. Server redirects to the original URL with the token:
     -> https://myapp.com/dashboard?token={ott}
@@ -259,7 +261,7 @@ SECURITY_OAUTH2_GOOGLE_CLIENT_SECRET=your-google-client-secret
 
 **Scopes**: `profile`, `email`
 
-**User info extracted**: `email`, `given_name` (firstName), `family_name` (lastName)
+**User info extracted**: `email`, `given_name` (firstName), `family_name` (lastName), `picture` (avatarUrl)
 
 **Google Cloud Console setup:**
 
@@ -304,7 +306,7 @@ SECURITY_OAUTH2_FACEBOOK_CLIENT_SECRET=your-facebook-app-secret
 
 **Scopes**: `public_profile`, `email`
 
-**User info extracted**: `email`, `name` (split into firstName/lastName)
+**User info extracted**: `email`, `name` (split into firstName/lastName), `picture` (avatarUrl)
 
 **Facebook Developer Console setup:**
 
@@ -346,7 +348,48 @@ For any OpenID Connect-compatible provider (Keycloak, Auth0, etc.).
 
 **User info endpoint**: `{issuer}/protocol/openid-connect/userinfo`
 
-**Standard claims expected**: `sub`, `email`, `given_name`, `family_name`
+**Standard claims expected**: `sub`, `email`, `given_name`, `family_name`, `picture` (optional, avatarUrl)
+
+### OAuth2 registration control and hooks
+
+**Disable OAuth2 registration** — set `SECURITY_OAUTH2_REGISTRATION_ENABLED=false` (JSON:
+`security.oauth2.registrationEnabled`) to prevent new users from being created during OAuth2 login. Only users that
+already exist in the database (matched by email) can then log in via OAuth2; unknown emails receive a 403 error.
+
+**`checkOAuth2User` callback** — an optional callback on `createAuthService` invoked on every OAuth2 login, before a
+user is registered or authenticated. It receives the auth source, the user info extracted from the provider, and the
+existing auth user (or `null` when the user would be newly registered). Return nothing to proceed, or return a string,
+`Error`, or `HttpError` to abort the flow (a 403 error is thrown, or the `HttpError` as-is):
+
+```ts
+// src/resources/user/service.ts
+import { AuthSource } from '@appweaver/common';
+import { createAuthService, HttpError } from '@appweaver/core';
+
+export default createAuthService({
+  modelName: 'User',
+  checkOAuth2User: (source, userInfo, authUser) => {
+    if (!userInfo.email.endsWith('@mycompany.com')) {
+      return new HttpError('Only company accounts are allowed', 403);
+    }
+    if (!authUser && source === AuthSource.OAuth2Facebook) {
+      return 'New accounts cannot be created via Facebook';
+    }
+    // Return nothing to proceed with registration/login
+  },
+  registrationData: (source, email, password, additionalData) => ({
+    email,
+    password,
+    name: `${additionalData?.firstName} ${additionalData?.lastName}`
+  })
+});
+```
+
+**User avatar** — the provider's avatar/picture URL is passed to `registrationData` as `additionalData.avatarUrl`.
+When `SECURITY_OAUTH2_FETCH_AVATAR_ENABLED=true` (JSON: `security.oauth2.fetchAvatarEnabled`), the avatar image is
+also downloaded during registration and passed as `additionalData.avatarFile`
+(`{ name, mimeType, size, data: Buffer }`), so it can be mapped to a model field or stored via the file service. The
+download is best-effort: failures are logged and registration proceeds without the file.
 
 ### Client-side OAuth2 integration example
 

package/skill/references/storage.md

@@ -1,8 +1,8 @@
 # Storage
 
-The storage module handles file persistence: storing, streaming, and deleting binary content. The default
-implementation (`FilesystemStorage`) writes files to a local directory using a configurable name pattern. The module
-supports range-based streaming for efficient large-file delivery (e.g., video, audio).
+The storage module handles file persistence: storing, streaming, and deleting binary content. The default implementation
+(`FilesystemStorage`) writes files to a local directory using a configurable name pattern. The module supports
+range-based streaming for efficient large-file delivery (e.g., video, audio).
 
 ## Injecting Storage
 
@@ -221,6 +221,35 @@ export class PostService {
 }
 ```
 
+### File integrity (checksum)
+
+When a file is uploaded through `FileService.saveFile()` (or the resource file upload routes), a **SHA-256 checksum**
+(hex-encoded) of the stored content is calculated during the upload and persisted on the `File` record in the
+`checksum` field. The checksum is calculated over the exact bytes written to storage (i.e., after any configured image
+processing), so it can be used at any later point to verify that the file on disk has not been modified or corrupted.
+
+The checksum is included in file API responses, so clients can verify downloaded content against it.
+
+To verify a file's integrity, recalculate the checksum with the `makeHash` utility from `@appweaver/common` and
+compare it with the stored value:
+
+```ts
+import { createReadStream } from 'node:fs';
+import { makeHash } from '@appweaver/common';
+
+// From a readable stream (no memory buffering, works for large files) — returns a promise
+const checksum = await makeHash(createReadStream('/path/to/stored/file'));
+
+// Or from a Buffer / string — returns the hash synchronously
+// const checksum = makeHash(downloadedBuffer);
+
+if (checksum !== file.checksum) {
+  throw new Error(`File ${file.name} has been modified or corrupted`);
+}
+```
+
+Stored file checksums always use the defaults: **`sha256` + `hex`**.
+
 ### Streaming a file
 
 `FileService.stream()` handles authorization checks (public, private, or protected) and range-based requests

package/update/update-command.js

@@ -14,14 +14,12 @@ function updateCommand(program) {
         'Defaults to all currently installed @appweaver/* packages.')
         .option('--targetVersion [targetVersion]', 'The version to update the packages.', 'latest')
         .option('--noSkill', 'Skip updating AI agents skill files in the agent directories (e.g. .claude, .agents) of the current project.')
-        .option('--noGuidelines', 'Skip updating AI agents guideline files (e.g. AGENTS.md, CLAUDE.md) in the current project.')
         .option('-f, --force', 'Force update despite peerDependency version mismatches.')
         .option('--verbose', 'Print verbose output.')
         .action(async (packages, _, command) => {
         const quiet = !command.getOptionValue('verbose');
         const force = command.getOptionValue('force');
         const updateSkill = !command.getOptionValue('noSkill');
-        const updateGuidelines = !command.getOptionValue('noGuidelines');
         const targetVersion = command.getOptionValue('targetVersion');
         // Load all currently installed packages
         const installedPackages = {};
@@ -73,8 +71,8 @@ function updateCommand(program) {
         }
         const status = await (0, update_packages_1.updatePackages)(appweaverPackages, targetVersion, force, quiet);
         if (status === 0) {
-            if (updateSkill || updateGuidelines) {
-                await (0, update_skill_1.updateSkillFiles)(quiet, updateSkill, updateGuidelines);
+            if (updateSkill) {
+                await (0, update_skill_1.updateSkillFiles)(quiet);
             }
             console.log(`Successfully updated packages to ${targetVersion} version.`);
         }

package/update/update-skill.d.ts

@@ -1,10 +1,13 @@
 /**
- * Updates skill files and AI guidelines in the project by copying the skill directory
- * to specified agent directories and updating references in guideline files.
+ * Updates the Appweaver skill files in the project by copying the skill
+ * directory (including the framework GUIDELINES.md) into every discovered agent
+ * directory (e.g. `.claude`, `.agents`).
  *
- * @param {boolean} quiet - If true, suppresses logging output; otherwise, logs actions performed.
- * @param {boolean} updateSkill - If true, copies skill files into agent directories (e.g. .claude, .agents).
- * @param {boolean} updateGuidelines - If true, updates AI guideline files (e.g. AGENTS.md, CLAUDE.md).
+ * The project's own root guidelines file (`AGENTS.md` / `CLAUDE.md`) is never
+ * touched here — it only references the framework guidelines from the skills
+ * directory, so it can be freely extended in the project.
+ *
+ * @param {boolean} quiet - If true, suppresses logging output; otherwise, logs actions are performed.
  * @return {Promise<void>} A promise that resolves when the update process is complete.
  */
-export declare function updateSkillFiles(quiet: boolean, updateSkill?: boolean, updateGuidelines?: boolean): Promise<void>;
+export declare function updateSkillFiles(quiet: boolean): Promise<void>;

package/update/update-skill.js

@@ -8,18 +8,18 @@ const node_fs_1 = __importDefault(require("node:fs"));
 const promises_1 = __importDefault(require("node:fs/promises"));
 const node_path_1 = __importDefault(require("node:path"));
 /**
- * Updates skill files and AI guidelines in the project by copying the skill directory
- * to specified agent directories and updating references in guideline files.
+ * Updates the Appweaver skill files in the project by copying the skill
+ * directory (including the framework GUIDELINES.md) into every discovered agent
+ * directory (e.g. `.claude`, `.agents`).
  *
- * @param {boolean} quiet - If true, suppresses logging output; otherwise, logs actions performed.
- * @param {boolean} updateSkill - If true, copies skill files into agent directories (e.g. .claude, .agents).
- * @param {boolean} updateGuidelines - If true, updates AI guideline files (e.g. AGENTS.md, CLAUDE.md).
+ * The project's own root guidelines file (`AGENTS.md` / `CLAUDE.md`) is never
+ * touched here — it only references the framework guidelines from the skills
+ * directory, so it can be freely extended in the project.
+ *
+ * @param {boolean} quiet - If true, suppresses logging output; otherwise, logs actions are performed.
  * @return {Promise<void>} A promise that resolves when the update process is complete.
  */
-async function updateSkillFiles(quiet, updateSkill = true, updateGuidelines = true) {
-    if (!updateSkill && !updateGuidelines) {
-        return;
-    }
+async function updateSkillFiles(quiet) {
     const projectDir = process.cwd();
     const skillDir = node_path_1.default.join(__dirname, '..', 'skill');
     if (!(await exists(skillDir))) {
@@ -28,9 +28,6 @@ async function updateSkillFiles(quiet, updateSkill = true, updateGuidelines = tr
         }
         return;
     }
-    const guidelinesFilePath = node_path_1.default.join(skillDir, 'GUIDELINES.md');
-    const guidelinesContents = await promises_1.default.readFile(guidelinesFilePath, 'utf8');
-    const foundAgentDirs = [];
     for (const agentDir of [
         '.claude',
         '.junie',
@@ -44,60 +41,13 @@ async function updateSkillFiles(quiet, updateSkill = true, updateGuidelines = tr
         if (!(await exists(agentDirPath))) {
             continue;
         }
-        foundAgentDirs.push(agentDir);
-        // Skip copying skill files when disabled, but keep the discovered agent
-        // dir so guideline references can still point to it.
-        if (!updateSkill) {
-            continue;
-        }
         // Copy skill directory to {agentDir}/skills/appweaver/
         const skillDestPath = node_path_1.default.join(agentDirPath, 'skills', 'appweaver');
-        await promises_1.default.cp(skillDir, skillDestPath, {
-            recursive: true,
-            filter: (src) => !src.endsWith('GUIDELINES.md')
-        });
+        await promises_1.default.cp(skillDir, skillDestPath, { recursive: true });
         if (!quiet) {
             console.log(`Updated skill files in ${node_path_1.default.join(agentDir, 'skills', 'appweaver')}\n`);
         }
     }
-    // Nothing more to do when guideline files should not be updated
-    if (!updateGuidelines) {
-        return;
-    }
-    let firstAgentDir = foundAgentDirs[0];
-    for (const guidelinesFile of ['AGENTS.md', 'CLAUDE.md']) {
-        const guidelinesFilePath = node_path_1.default.join(projectDir, guidelinesFile);
-        // Update only agent guidelines files that already exist
-        if (!(await exists(guidelinesFilePath))) {
-            continue;
-        }
-        // If no agent-specific dir was discovered, fall back to a generic .agents
-        // dir and, unless skill updates are disabled, populate it with skill files.
-        if (!firstAgentDir) {
-            firstAgentDir = '.agents';
-            if (updateSkill) {
-                const skillDestPath = node_path_1.default.join(node_path_1.default.join(projectDir, firstAgentDir), 'skills', 'appweaver');
-                await promises_1.default.cp(skillDir, skillDestPath, {
-                    recursive: true,
-                    filter: (src) => !src.endsWith('GUIDELINES.md')
-                });
-            }
-        }
-        // Replace guideline file path references with path references in first
-        // discovered agents dir
-        const referencesPath = node_path_1.default
-            .join(firstAgentDir, 'skills', 'appweaver', 'references')
-            .replace(/\\/g, '/');
-        const guidelinesContent = guidelinesContents.replace(/(\[.+]\()references\/(.+\))/g, `$1${referencesPath}/$2`);
-        await promises_1.default.writeFile(guidelinesFilePath, guidelinesContent, {
-            encoding: 'utf8'
-        });
-        if (!quiet) {
-            console.log(`Updated AI guidelines file ${guidelinesFile}\n`);
-        }
-        // Update only the first found guidelines file
-        break;
-    }
 }
 async function exists(filePath) {
     try {