@donotdev/cli 0.0.19 → 0.0.20

package/dependencies-matrix.json

@@ -2,7 +2,7 @@
   "$schema": "./dependencies-matrix.schema.json",
   "version": "0.0.6",
   "description": "Centralized dependency versions for DoNotDev framework. Single source of truth for all external dependencies. ⚠️ SYNC REQUIRED: When adding/removing @donotdev/* feature packages (auth, billing, crud, oauth), also update packages/core/config/constants.js BUNDLING.optionalFeatures array.",
-  "lastUpdated": "2026-02-24",
+  "lastUpdated": "2026-02-26",
   "migrationGuides": {
     "0.0→0.1": {
       "path": "docs/migration/v0.0-to-v0.1.md",
@@ -17,73 +17,73 @@
     "@donotdev/auth": {
       "description": "Authentication package",
       "packages": {
-        "@donotdev/auth": "^0.0.11"
+        "@donotdev/auth": "^0.0.13"
       }
     },
     "@donotdev/billing": {
       "description": "Billing package",
       "packages": {
-        "@donotdev/billing": "^0.0.10"
+        "@donotdev/billing": "^0.0.12"
       }
     },
     "@donotdev/components": {
       "description": "UI components package",
       "packages": {
-        "@donotdev/components": "^0.0.21"
+        "@donotdev/components": "^0.0.23"
       }
     },
     "@donotdev/core": {
       "description": "Core framework package",
       "packages": {
-        "@donotdev/core": "^0.0.27"
+        "@donotdev/core": "^0.0.29"
       }
     },
     "@donotdev/crud": {
       "description": "CRUD operations package",
       "packages": {
-        "@donotdev/crud": "^0.0.18"
+        "@donotdev/crud": "^0.0.20"
       }
     },
     "@donotdev/firebase": {
       "description": "Firebase provider package",
       "packages": {
-        "@donotdev/firebase": "^0.0.14"
+        "@donotdev/firebase": "^0.0.15"
       }
     },
     "@donotdev/functions": {
       "description": "Firebase Functions package",
       "packages": {
-        "@donotdev/functions": "^0.0.14"
+        "@donotdev/functions": "^0.0.16"
       }
     },
     "@donotdev/oauth": {
       "description": "OAuth package",
       "packages": {
-        "@donotdev/oauth": "^0.0.10"
+        "@donotdev/oauth": "^0.0.12"
       }
     },
     "@donotdev/templates": {
       "description": "Page templates package",
       "packages": {
-        "@donotdev/templates": "^0.0.13"
+        "@donotdev/templates": "^0.0.15"
       }
     },
     "@donotdev/ui": {
       "description": "UI and routing package",
       "packages": {
-        "@donotdev/ui": "^0.0.17"
+        "@donotdev/ui": "^0.0.19"
       }
     },
     "@donotdev/expo": {
       "description": "Expo/React Native components package",
       "packages": {
-        "@donotdev/expo": "^0.0.4"
+        "@donotdev/expo": "^0.0.6"
       }
     },
     "@donotdev/supabase": {
       "description": "Supabase provider package",
       "packages": {
-        "@donotdev/supabase": "^0.0.4"
+        "@donotdev/supabase": "^0.0.5"
       }
     },
     "supabase-js": {
@@ -433,13 +433,13 @@
     "@donotdev/cli": {
       "description": "Cli package",
       "packages": {
-        "@donotdev/cli": "^0.0.18"
+        "@donotdev/cli": "^0.0.20"
       }
     },
     "@donotdev/mcp-server": {
       "description": "MCP server for component type lookups",
       "packages": {
-        "@donotdev/mcp-server": "^0.0.8"
+        "@donotdev/mcp-server": "^0.0.10"
       }
     },
     "mcp-sdk": {
@@ -465,7 +465,7 @@
     "@donotdev/security": {
       "description": "Security package",
       "packages": {
-        "@donotdev/security": "^0.0.4"
+        "@donotdev/security": "^0.0.6"
       }
     }
   },
@@ -490,11 +490,23 @@
         "core-vite-config",
         "postcss"
       ],
-      "devDependencies": ["vite", "next", "typescript"]
+      "devDependencies": [
+        "vite",
+        "next",
+        "typescript"
+      ]
     },
     "@donotdev/components": {
-      "dependencies": ["radix", "styling", "react-day-picker"],
-      "peerDependencies": ["react", "shiki", "lucide-react"],
+      "dependencies": [
+        "radix",
+        "styling",
+        "react-day-picker"
+      ],
+      "peerDependencies": [
+        "react",
+        "shiki",
+        "lucide-react"
+      ],
       "peerDependenciesMeta": {
         "shiki": {
           "optional": true
@@ -510,7 +522,11 @@
         "routing",
         "validation"
       ],
-      "dependencies": ["fontsource-themes", "forms", "seo"],
+      "dependencies": [
+        "fontsource-themes",
+        "forms",
+        "seo"
+      ],
       "peerDependenciesMeta": {
         "@donotdev/crud": {
           "optional": true
@@ -518,10 +534,17 @@
       }
     },
     "@donotdev/auth": {
-      "peerDependencies": ["react", "firebase"]
+      "peerDependencies": [
+        "react",
+        "firebase"
+      ]
     },
     "@donotdev/billing": {
-      "peerDependencies": ["react", "lucide-react", "stripe"]
+      "peerDependencies": [
+        "react",
+        "lucide-react",
+        "stripe"
+      ]
     },
     "@donotdev/crud": {
       "dependencies": [
@@ -531,7 +554,9 @@
         "@dnd-kit",
         "forms-resolvers"
       ],
-      "devDependencies": ["tiptap"],
+      "devDependencies": [
+        "tiptap"
+      ],
       "peerDependencies": [
         "@donotdev/firebase",
         "react",
@@ -554,22 +579,38 @@
       }
     },
     "@donotdev/firebase": {
-      "dependencies": ["browser-image-compression"],
-      "peerDependencies": ["firebase"]
+      "dependencies": [
+        "browser-image-compression"
+      ],
+      "peerDependencies": [
+        "firebase"
+      ]
     },
     "@donotdev/supabase": {
-      "dependencies": ["validation"],
-      "peerDependencies": ["supabase-js"]
+      "dependencies": [
+        "validation"
+      ],
+      "peerDependencies": [
+        "supabase-js"
+      ]
     },
     "@donotdev/i18n": {
-      "dependencies": ["i18n"],
-      "peerDependencies": ["lucide-react"]
+      "dependencies": [
+        "i18n"
+      ],
+      "peerDependencies": [
+        "lucide-react"
+      ]
     },
     "@donotdev/stores": {
-      "dependencies": ["zustand"]
+      "dependencies": [
+        "zustand"
+      ]
     },
     "@donotdev/schemas": {
-      "dependencies": ["validation"]
+      "dependencies": [
+        "validation"
+      ]
     },
     "@donotdev/types": {
       "devDependencies": [
@@ -581,18 +622,34 @@
       ]
     },
     "@donotdev/utils": {
-      "dependencies": ["zustand"],
-      "peerDependencies": ["monitoring"],
-      "devDependencies": ["validation", "firebase", "i18n"]
+      "dependencies": [
+        "zustand"
+      ],
+      "peerDependencies": [
+        "monitoring"
+      ],
+      "devDependencies": [
+        "validation",
+        "firebase",
+        "i18n"
+      ]
     },
     "@donotdev/hooks": {
-      "dependencies": ["react-query"]
+      "dependencies": [
+        "react-query"
+      ]
     },
     "@donotdev/cli": {
-      "dependencies": ["cli-prompts", "cli-commander", "fast-glob"]
+      "dependencies": [
+        "cli-prompts",
+        "cli-commander",
+        "fast-glob"
+      ]
     },
     "@donotdev/mcp-server": {
-      "dependencies": ["mcp-sdk"]
+      "dependencies": [
+        "mcp-sdk"
+      ]
     },
     "@donotdev/tooling": {
       "dependencies": [
@@ -604,13 +661,19 @@
         "supabase-cli",
         "supabase-js"
       ],
-      "devDependencies": ["yaml"]
+      "devDependencies": [
+        "yaml"
+      ]
     },
     "@donotdev/oauth": {
-      "peerDependencies": ["react"]
+      "peerDependencies": [
+        "react"
+      ]
     },
     "@donotdev/functions": {
-      "dependencies": ["@donotdev/core"],
+      "dependencies": [
+        "@donotdev/core"
+      ],
       "peerDependencies": [
         "firebase-functions",
         "firebase-admin",
@@ -778,7 +841,10 @@
         "validation",
         "lucide-react"
       ],
-      "devDependencies": ["root-consumer-tooling", "supabase-cli"],
+      "devDependencies": [
+        "root-consumer-tooling",
+        "supabase-cli"
+      ],
       "conditional": {
         "provider-firebase": "platform===firebase",
         "provider-supabase": "platform===supabase",
@@ -834,7 +900,12 @@
         "i18n",
         "react-query"
       ],
-      "devDependencies": ["next", "typescript", "types", "postcss"],
+      "devDependencies": [
+        "next",
+        "typescript",
+        "types",
+        "postcss"
+      ],
       "conditional": {
         "provider-firebase": "platform===firebase",
         "provider-supabase": "platform===supabase"
@@ -854,7 +925,12 @@
         "validation",
         "react-query"
       ],
-      "devDependencies": ["expo", "typescript", "types-expo", "react-native"],
+      "devDependencies": [
+        "expo",
+        "typescript",
+        "types-expo",
+        "react-native"
+      ],
       "conditional": {
         "provider-firebase": "platform===firebase",
         "provider-supabase": "platform===supabase"
@@ -874,7 +950,12 @@
         "validation",
         "react-query"
       ],
-      "devDependencies": ["expo", "typescript", "types-expo", "react-native"],
+      "devDependencies": [
+        "expo",
+        "typescript",
+        "types-expo",
+        "react-native"
+      ],
       "conditional": {
         "provider-firebase": "platform===firebase",
         "provider-supabase": "platform===supabase"
@@ -901,12 +982,19 @@
         "monitoring-node",
         "stripe"
       ],
-      "devDependencies": ["vercel"]
+      "devDependencies": [
+        "vercel"
+      ]
     },
     "entities": {
       "description": "Entities workspace package",
-      "dependencies": ["validation"],
-      "devDependencies": ["eslint", "typescript"]
+      "dependencies": [
+        "validation"
+      ],
+      "devDependencies": [
+        "eslint",
+        "typescript"
+      ]
     },
     "demo": {
       "description": "Demo app template (SaaS reference app)",

package/dist/bin/commands/bump.js

@@ -8166,7 +8166,7 @@ function getSourceTemplatesPath() {
   return null;
 }
 async function syncFile(sourcePath, destPath, preserveIfExists, appRoot) {
-  const destPathWithoutExample = destPath.endsWith(".example") ? destPath.slice(0, -8) : destPath;
+  const destPathWithoutExample = destPath.endsWith(".example") && destPath.length > 8 ? destPath.slice(0, -8) : destPath;
   if (preserveIfExists && pathExists(destPathWithoutExample)) {
     const relativePath = getRelativePathBetween(
       appRoot,
@@ -8559,7 +8559,10 @@ ${majorUpdates.length} major update(s) available (manual review required):`
         }
         for (const [file, packageKeys] of updatedFiles) {
           const pkg = parsePackageJson(file);
-          if (!pkg) continue;
+          if (!pkg) {
+            log.warn(`Could not parse ${file} \u2014 skipping updates for this file`);
+            continue;
+          }
           let changed = false;
           for (const packageKey of packageKeys) {
             const [pkgName, field] = packageKey.split(":");

package/dist/bin/commands/create-app.js

@@ -9103,7 +9103,7 @@ async function createApp(appName, appConfig, workspaceRoot, templatesRoot) {
         const firebaseJson = readSync(firebaseJsonDest, {
           format: "json"
         });
-        if (firebaseJson.hosting?.rewrites) {
+        if (firebaseJson.hosting?.rewrites && Array.isArray(firebaseJson.hosting.rewrites)) {
           firebaseJson.hosting.rewrites = firebaseJson.hosting.rewrites.filter(
             (r2) => r2.destination !== "/index.html"
           );

package/dist/bin/commands/create-project.js

@@ -9423,7 +9423,7 @@ async function createApp(appName, appConfig, workspaceRoot, templatesRoot) {
         const firebaseJson = readSync(firebaseJsonDest, {
           format: "json"
         });
-        if (firebaseJson.hosting?.rewrites) {
+        if (firebaseJson.hosting?.rewrites && Array.isArray(firebaseJson.hosting.rewrites)) {
           firebaseJson.hosting.rewrites = firebaseJson.hosting.rewrites.filter(
             (r2) => r2.destination !== "/index.html"
           );
@@ -9670,6 +9670,14 @@ async function main(options) {
         process.exit(0);
       }
       if (action === "replace") {
+        const confirmDelete = await askForConfirmation(
+          `This will permanently delete "${projectDirNormalized}". Are you sure?`,
+          false
+        );
+        if (!confirmDelete) {
+          Se("Project creation cancelled.");
+          process.exit(0);
+        }
         const s2 = Y2();
         s2.start("Removing existing project...");
         await remove(projectDirNormalized);
@@ -10028,7 +10036,10 @@ async function main(options) {
       await createApp(appName, appConfig, projectDirNormalized, templatesRoot);
     }
     s.start("Updating root package.json with scripts...");
-    await updateRootPackageJson(projectDirNormalized, appNames);
+    await updateRootPackageJson(
+      projectDirNormalized,
+      isMergeMode ? allAppNames : appNames
+    );
     s.stop("Root package.json updated");
     Se("\u{1F389} Project created successfully!");
     const cdCommand = executionMode === "development" ? `cd ../${projectName}` : `cd ${projectName}`;

package/dist/bin/commands/deploy.js

@@ -16701,6 +16701,14 @@ function generateCleanPackageJson(functionsDir) {
   }
   const cleanPackageJson = { ...packageJson };
   if (cleanPackageJson.dependencies) {
+    const removedDeps = Object.entries(cleanPackageJson.dependencies).filter(
+      ([, version]) => String(version).startsWith("file:") || String(version).startsWith("workspace:")
+    );
+    if (removedDeps.length > 0) {
+      log.warn(
+        `Filtering out ${removedDeps.length} workspace/file dep(s) from dependencies: ${removedDeps.map(([name]) => name).join(", ")}`
+      );
+    }
     cleanPackageJson.dependencies = Object.fromEntries(
       Object.entries(cleanPackageJson.dependencies).filter(
         ([, version]) => !String(version).startsWith("file:") && !String(version).startsWith("workspace:")
@@ -16708,6 +16716,16 @@ function generateCleanPackageJson(functionsDir) {
     );
   }
   if (cleanPackageJson.devDependencies) {
+    const removedDevDeps = Object.entries(
+      cleanPackageJson.devDependencies
+    ).filter(
+      ([, version]) => String(version).startsWith("file:") || String(version).startsWith("workspace:")
+    );
+    if (removedDevDeps.length > 0) {
+      log.warn(
+        `Filtering out ${removedDevDeps.length} workspace/file dep(s) from devDependencies: ${removedDevDeps.map(([name]) => name).join(", ")}`
+      );
+    }
     cleanPackageJson.devDependencies = Object.fromEntries(
       Object.entries(cleanPackageJson.devDependencies).filter(
         ([, version]) => !String(version).startsWith("file:") && !String(version).startsWith("workspace:")

package/dist/bin/commands/setup.js

@@ -9660,6 +9660,9 @@ function roleToSqlCondition(role) {
     case "super":
       return "(auth.jwt()->'app_metadata'->>'role') = 'super'";
     default:
+      log.warn(
+        `Unknown access role "${role}" \u2014 defaulting to deny (false). Use guest|user|admin|super.`
+      );
       return "false";
   }
 }

package/dist/bin/commands/staging.js

@@ -16701,6 +16701,14 @@ function generateCleanPackageJson(functionsDir) {
   }
   const cleanPackageJson = { ...packageJson };
   if (cleanPackageJson.dependencies) {
+    const removedDeps = Object.entries(cleanPackageJson.dependencies).filter(
+      ([, version]) => String(version).startsWith("file:") || String(version).startsWith("workspace:")
+    );
+    if (removedDeps.length > 0) {
+      log.warn(
+        `Filtering out ${removedDeps.length} workspace/file dep(s) from dependencies: ${removedDeps.map(([name]) => name).join(", ")}`
+      );
+    }
     cleanPackageJson.dependencies = Object.fromEntries(
       Object.entries(cleanPackageJson.dependencies).filter(
         ([, version]) => !String(version).startsWith("file:") && !String(version).startsWith("workspace:")
@@ -16708,6 +16716,16 @@ function generateCleanPackageJson(functionsDir) {
     );
   }
   if (cleanPackageJson.devDependencies) {
+    const removedDevDeps = Object.entries(
+      cleanPackageJson.devDependencies
+    ).filter(
+      ([, version]) => String(version).startsWith("file:") || String(version).startsWith("workspace:")
+    );
+    if (removedDevDeps.length > 0) {
+      log.warn(
+        `Filtering out ${removedDevDeps.length} workspace/file dep(s) from devDependencies: ${removedDevDeps.map(([name]) => name).join(", ")}`
+      );
+    }
     cleanPackageJson.devDependencies = Object.fromEntries(
       Object.entries(cleanPackageJson.devDependencies).filter(
         ([, version]) => !String(version).startsWith("file:") && !String(version).startsWith("workspace:")

package/dist/bin/commands/type-check.js

@@ -7510,7 +7510,7 @@ function globSync(pattern, options = {}) {
   });
   return results.map((p) => pathResolverInstance.normalizePath(p));
 }
-var pathResolverInstance, getRepoRoot, normalizePath, pathExists, readSync, writeSync, removeSync, getDirname;
+var pathResolverInstance, getRepoRoot, normalizePath, pathExists, readSync, writeSync, removeSync, getDirname, joinPath;
 var init_pathResolver = __esm({
   "packages/tooling/src/utils/pathResolver.ts"() {
     "use strict";
@@ -7528,6 +7528,9 @@ var init_pathResolver = __esm({
     getDirname = (filePath) => {
       return normalizePath(dirname2(filePath));
     };
+    joinPath = (...pathSegments) => {
+      return normalizePath(...pathSegments);
+    };
   }
 });
 
@@ -7959,7 +7962,7 @@ ${output}
         }
       }
       const logName2 = options.package ? `type-check-${options.package}.log` : `type-check-all.log`;
-      const logFilePath2 = normalizePath(repoRoot, logName2);
+      const logFilePath2 = joinPath(repoRoot, logName2);
       const logContent = [
         `DoNotDev Type Check - Errors`,
         `Generated: ${(/* @__PURE__ */ new Date()).toISOString()}`,
@@ -7983,7 +7986,7 @@ ${output}
       return 1;
     }
     const logName = options.package ? `type-check-${options.package}.log` : `type-check-all.log`;
-    const logFilePath = normalizePath(repoRoot, logName);
+    const logFilePath = joinPath(repoRoot, logName);
     if (pathExists(logFilePath, true)) {
       removeSync(logFilePath);
     }
@@ -8000,8 +8003,11 @@ ${output}
     displayDoNotDevError(doNotDevError);
     if (options.verbose && logEntries.length > 0) {
       const repoRoot = getRepoRoot();
+      if (!repoRoot) {
+        throw doNotDevError;
+      }
       const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-      const logFilePath = normalizePath(
+      const logFilePath = joinPath(
         repoRoot,
         `type-check-error-${timestamp}.log`
       );