@helyx/cli 0.4.35 → 0.4.37

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 0.4.37
+
+### Patch Changes
+
+- Harden dashboard authentication, privacy execution, control routing, database transactions, and self-host configuration.
+
+  Add bounded multi-value record reads and use them to batch Polls and Reaction Roles dashboard queries. Improve dashboard presentation, Forms workflows, release safety, and operational tooling across hosted and self-hosted deployments.
+
+- Updated dependencies
+  - @helyx/database@0.8.0
+
+## 0.4.36
+
+### Patch Changes
+
+- Refresh the embedded self-host catalogue for the Forms and server-access core release.
+
 ## 0.4.35
 
 ### Patch Changes

package/dist/self-host/project-generator.d.ts

@@ -1,13 +1,14 @@
 import type { BotEnvironmentInput } from "@helyx/config";
 import type { SelfHostCatalogue } from "./catalogue.js";
 import { type SelfHostBuildManifest } from "./manifest.js";
-export type SelfHostCommandRunner = (arguments_: readonly string[], workingDirectory: string) => Promise<void>;
+export type SelfHostCommandRunner = (arguments_: readonly string[], workingDirectory: string, signal: AbortSignal) => Promise<void>;
 export interface GenerateSelfHostProjectOptions {
     catalogue: SelfHostCatalogue;
     manifest: unknown;
     targetDirectory: string;
     install?: boolean;
     commandRunner?: SelfHostCommandRunner;
+    signal?: AbortSignal;
 }
 export interface GeneratedSelfHostProject {
     directory: string;

package/dist/self-host/project-generator.js

@@ -14,6 +14,8 @@ const generatedFileNames = [
 export async function generateSelfHostProject(options) {
     const manifest = parseSelfHostBuildManifest(options.manifest, options.catalogue);
     const targetDirectory = resolve(options.targetDirectory);
+    const signal = options.signal ?? AbortSignal.timeout(120_000);
+    signal.throwIfAborted();
     assertSafeTargetDirectory(targetDirectory);
     await mkdir(dirname(targetDirectory), { recursive: true });
     let created = false;
@@ -21,6 +23,7 @@ export async function generateSelfHostProject(options) {
         await mkdir(targetDirectory);
         created = true;
         await writeGeneratedFiles(targetDirectory, manifest, options.catalogue);
+        signal.throwIfAborted();
         const runner = options.commandRunner ?? runNpmCommand;
         await runner([
             "install",
@@ -28,10 +31,12 @@ export async function generateSelfHostProject(options) {
             "--ignore-scripts",
             "--no-audit",
             "--no-fund",
-        ], targetDirectory);
+        ], targetDirectory, signal);
+        signal.throwIfAborted();
         await validateGeneratedLockfile(targetDirectory, manifest);
+        signal.throwIfAborted();
         if (options.install) {
-            await runner(["ci", "--no-audit", "--no-fund"], targetDirectory);
+            await runner(["ci", "--no-audit", "--no-fund"], targetDirectory, signal);
         }
         await writeChecksums(targetDirectory);
         const files = (await readdir(targetDirectory)).sort((left, right) => left.localeCompare(right, "en"));
@@ -63,7 +68,7 @@ async function writeGeneratedFiles(targetDirectory, manifest, catalogue) {
         private: true,
         license: "UNLICENSED",
         type: "module",
-        packageManager: "npm@11.18.0",
+        packageManager: "npm@11.19.0",
         engines: { node: ">=24 <27", npm: ">=11" },
         scripts: {
             setup: "helyx setup",
@@ -177,7 +182,8 @@ function assertSafeTargetDirectory(targetDirectory) {
         throw new Error("Refusing to generate a self-host project at a filesystem root");
     }
 }
-async function runNpmCommand(arguments_, workingDirectory) {
+async function runNpmCommand(arguments_, workingDirectory, signal) {
+    signal.throwIfAborted();
     const npmCli = process.env.npm_execpath;
     const executable = npmCli ? process.execPath : "npm";
     const commandArguments = npmCli ? [npmCli, ...arguments_] : [...arguments_];
@@ -188,27 +194,66 @@ async function runNpmCommand(arguments_, workingDirectory) {
                 ? { ...process.env, npm_config_ignore_scripts: "true" }
                 : process.env,
             shell: process.platform === "win32" && npmCli === undefined,
+            detached: process.platform !== "win32",
             stdio: ["ignore", "pipe", "pipe"],
         });
         child.stdout.resume();
         child.stderr.resume();
-        const timeout = setTimeout(() => {
-            child.kill("SIGTERM");
-            reject(new Error("npm command exceeded the two-minute generation limit"));
-        }, 120_000);
+        let aborting = false;
+        const cleanup = () => {
+            signal.removeEventListener("abort", onAbort);
+        };
+        const onAbort = () => {
+            if (aborting)
+                return;
+            aborting = true;
+            if (process.platform === "win32" && child.pid) {
+                const killer = spawn("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore", windowsHide: true });
+                killer.once("error", () => child.kill("SIGTERM"));
+                killer.once("close", (code) => {
+                    if (code !== 0)
+                        child.kill("SIGTERM");
+                });
+            }
+            else {
+                killProcessGroup(child.pid, "SIGKILL", () => child.kill("SIGKILL"));
+            }
+        };
+        signal.addEventListener("abort", onAbort, { once: true });
         child.once("error", (error) => {
-            clearTimeout(timeout);
-            reject(error);
+            cleanup();
+            reject(aborting ? abortReason(signal) : error);
         });
         child.once("close", (code) => {
-            clearTimeout(timeout);
-            if (code === 0)
+            cleanup();
+            if (aborting)
+                reject(abortReason(signal));
+            else if (code === 0)
                 resolvePromise();
             else
                 reject(new Error(`npm command failed with exit code ${String(code)}; rerun it in the generated directory for detailed diagnostics`));
         });
+        if (signal.aborted)
+            onAbort();
     });
 }
+function abortReason(signal) {
+    return signal.reason instanceof Error
+        ? signal.reason
+        : new Error("Self-host generation aborted");
+}
+function killProcessGroup(pid, signal, fallback) {
+    if (!pid) {
+        fallback();
+        return;
+    }
+    try {
+        process.kill(-pid, signal);
+    }
+    catch {
+        fallback();
+    }
+}
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@helyx/cli",
-  "version": "0.4.35",
+  "version": "0.4.37",
   "description": "Command-line tools for running and generating self-hosted Helyx deployments.",
   "keywords": [
     "helyx",
@@ -54,7 +54,7 @@
   "dependencies": {
     "@helyx/bot": ">=0.4.0 <0.5.0",
     "@helyx/config": ">=0.5.0 <0.6.0",
-    "@helyx/database": ">=0.7.0 <0.8.0",
+    "@helyx/database": ">=0.8.0 <0.9.0",
     "semver": "7.8.5",
     "zod": "4.4.3"
   },

package/self-host-catalogue.json

@@ -1,14 +1,14 @@
 {
   "schemaVersion": 1,
-  "catalogueVersion": 31,
+  "catalogueVersion": 35,
   "core": {
     "package": "@helyx/bot",
-    "version": "0.4.27",
+    "version": "0.4.29",
     "availability": "published"
   },
   "generator": {
     "package": "@helyx/cli",
-    "version": "0.4.35",
+    "version": "0.4.37",
     "command": "helyx",
     "availability": "published"
   },
@@ -16,7 +16,7 @@
     {
       "id": "helyx.feedback",
       "package": "@helyx/module-feedback",
-      "version": "1.1.13",
+      "version": "1.1.14",
       "name": "Feedback",
       "description": "Collects simple feedback from Discord server members.",
       "category": "Community",
@@ -26,7 +26,7 @@
     {
       "id": "helyx.welcome",
       "package": "@helyx/module-welcome",
-      "version": "1.1.12",
+      "version": "1.1.13",
       "name": "Welcome",
       "description": "Greets new members and can give them a starting role.",
       "category": "Community",
@@ -36,7 +36,7 @@
     {
       "id": "helyx.suggestions",
       "package": "@helyx/module-suggestions",
-      "version": "1.1.13",
+      "version": "1.1.14",
       "name": "Suggestions",
       "description": "Collects community ideas with configurable reaction or button voting.",
       "category": "Community",
@@ -46,7 +46,7 @@
     {
       "id": "helyx.polls",
       "package": "@helyx/module-polls",
-      "version": "1.0.11",
+      "version": "1.0.12",
       "name": "Polls",
       "description": "Run clear single or multiple-choice polls.",
       "category": "Community",
@@ -66,7 +66,7 @@
     {
       "id": "helyx.levels",
       "package": "@helyx/module-levels",
-      "version": "1.0.8",
+      "version": "1.0.9",
       "name": "Levels",
       "description": "Optional participation levels and rewards.",
       "category": "Community",
@@ -146,7 +146,7 @@
     {
       "id": "helyx.account-gate",
       "package": "@helyx/module-account-gate",
-      "version": "1.0.10",
+      "version": "1.0.11",
       "name": "Access Control",
       "description": "Require new members to complete configurable Discord interaction checks before gaining access.",
       "category": "Safety",
@@ -176,12 +176,12 @@
     {
       "id": "helyx.forms",
       "package": "@helyx/module-forms",
-      "version": null,
+      "version": "1.0.1",
       "name": "Forms",
-      "description": "Collect structured requests through Discord modals.",
+      "description": "Collect reusable structured responses through Discord modals.",
       "category": "Support & Staff",
-      "availability": "planned",
-      "releaseStatus": "planned"
+      "availability": "published",
+      "releaseStatus": "live"
     },
     {
       "id": "helyx.faq",
@@ -296,7 +296,7 @@
     {
       "id": "helyx.reactionroles",
       "package": "@helyx/module-reactionroles",
-      "version": "1.0.9",
+      "version": "1.0.10",
       "name": "Reaction Roles",
       "description": "Let members select approved roles themselves.",
       "category": "Automation",
@@ -396,7 +396,7 @@
     {
       "id": "helyx.giveaways",
       "package": "@helyx/module-giveaways",
-      "version": "1.0.11",
+      "version": "1.0.12",
       "name": "Giveaways",
       "description": "Run auditable giveaways with eligibility rules.",
       "category": "Engagement",
@@ -416,7 +416,7 @@
     {
       "id": "helyx.counting",
       "package": "@helyx/module-counting",
-      "version": "1.0.1",
+      "version": "1.0.2",
       "name": "Counting",
       "description": "A focused, server-scoped Discord counting game.",
       "category": "Gaming",
@@ -426,7 +426,7 @@
     {
       "id": "helyx.trivia",
       "package": "@helyx/module-trivia",
-      "version": "1.0.1",
+      "version": "1.0.2",
       "name": "Trivia",
       "description": "Play private trivia rounds from a saved question catalogue.",
       "category": "Gaming",
@@ -486,7 +486,7 @@
     {
       "id": "helyx.achievements",
       "package": "@helyx/module-achievements",
-      "version": "1.0.1",
+      "version": "1.0.2",
       "name": "Achievements",
       "description": "Configurable member milestones, scores and optional rewards.",
       "category": "Gaming",
@@ -506,7 +506,7 @@
     {
       "id": "helyx.logging",
       "package": "@helyx/module-logging",
-      "version": "1.1.12",
+      "version": "1.1.13",
       "name": "Logging",
       "description": "Posts configurable activity records from enabled Helyx modules.",
       "category": "Insights",