@veloxts/cli 0.6.88 → 0.6.90

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # @veloxts/cli
 
+## 0.6.90
+
+### Patch Changes
+
+- Dependencies updates – fix critical and high severity vulnerabilities
+- Updated dependencies
+  - @veloxts/auth@0.6.90
+  - @veloxts/core@0.6.90
+  - @veloxts/orm@0.6.90
+  - @veloxts/router@0.6.90
+  - @veloxts/validation@0.6.90
+
+## 0.6.89
+
+### Patch Changes
+
+- expand preset system with server config, auth presets, and security validation
+- Updated dependencies
+  - @veloxts/auth@0.6.89
+  - @veloxts/core@0.6.89
+  - @veloxts/orm@0.6.89
+  - @veloxts/router@0.6.89
+  - @veloxts/validation@0.6.89
+
 ## 0.6.88
 
 ### Patch Changes
@@ -223,7 +247,6 @@
 - ### feat(auth): Unified Adapter-Only Architecture
 
   **New Features:**
-
   - Add `JwtAdapter` implementing the `AuthAdapter` interface for unified JWT authentication
   - Add `jwtAuth()` convenience function for direct adapter usage with optional built-in routes (`/api/auth/refresh`, `/api/auth/logout`)
   - Add `AuthContext` discriminated union (`NativeAuthContext | AdapterAuthContext`) for type-safe auth mode handling
@@ -231,24 +254,20 @@
   - Add shared decoration utilities (`decorateAuth`, `setRequestAuth`, `checkDoubleRegistration`)
 
   **Architecture Changes:**
-
   - `authPlugin` now uses `JwtAdapter` internally - all authentication flows through the adapter pattern
   - Single code path for authentication (no more dual native/adapter modes)
   - `authContext.authMode` is now always `'adapter'` with `providerId='jwt'` when using `authPlugin`
 
   **Breaking Changes:**
-
   - Remove deprecated `LegacySessionConfig` interface (use `sessionMiddleware` instead)
   - Remove deprecated `session` field from `AuthConfig`
   - `User` interface no longer has index signature (extend via declaration merging)
 
   **Type Safety Improvements:**
-
   - `AuthContext` discriminated union enables exhaustive type narrowing based on `authMode`
   - Export `NativeAuthContext` and `AdapterAuthContext` types for explicit typing
 
   **Migration:**
-
   - Existing `authPlugin` usage remains backward-compatible
   - If checking `authContext.token`, use `authContext.session` instead (token stored in session for adapter mode)
 
@@ -270,12 +289,10 @@
   Addresses 9 user feedback items to improve DX, reduce boilerplate, and eliminate template duplications.
 
   ### Phase 1: Validation Helpers (`@veloxts/validation`)
-
   - Add `prismaDecimal()`, `prismaDecimalNullable()`, `prismaDecimalOptional()` for Prisma Decimal → number conversion
   - Add `dateToIso`, `dateToIsoNullable`, `dateToIsoOptional` aliases for consistency
 
   ### Phase 2: Template Deduplication (`@veloxts/auth`)
-
   - Export `createEnhancedTokenStore()` with token revocation and refresh token reuse detection
   - Export `parseUserRoles()` and `DEFAULT_ALLOWED_ROLES`
   - Fix memory leak: track pending timeouts for proper cleanup on `destroy()`
@@ -283,20 +300,17 @@
   - Fix jwtManager singleton pattern in templates
 
   ### Phase 3: Router Helpers (`@veloxts/router`)
-
   - Add `createRouter()` returning `{ collections, router }` for DRY setup
   - Add `toRouter()` for router-only use cases
   - Update all router templates to use `createRouter()`
 
   ### Phase 4: Guard Type Narrowing - Experimental (`@veloxts/auth`, `@veloxts/router`)
-
   - Add `NarrowingGuard` interface with phantom `_narrows` type
   - Add `authenticatedNarrow` and `hasRoleNarrow()` guards
   - Add `guardNarrow()` method to `ProcedureBuilder` for context narrowing
   - Enables `ctx.user` to be non-null after guard passes
 
   ### Phase 5: Documentation (`@veloxts/router`)
-
   - Document `.rest()` override patterns
   - Document `createRouter()` helper usage
   - Document `guardNarrow()` experimental API
@@ -1521,7 +1535,6 @@
 ### Patch Changes
 
 - Fix Prisma client generation in scaffolder
-
   - Added automatic Prisma client generation after dependency installation in create-velox-app
   - Fixed database template to validate DATABASE_URL environment variable
   - Added alpha release warning to all package READMEs

package/dist/generators/fields/prompts.js

@@ -125,6 +125,8 @@ async function collectSingleField(existingNames, fieldNumber, prefill) {
         placeholder: 'e.g., title, authorId, isPublished',
         initialValue: prefill?.name ?? '',
         validate: (value) => {
+            if (!value)
+                return 'Field name is required';
             const trimmed = value.trim();
             const error = validateFieldName(trimmed);
             if (error)
@@ -262,7 +264,7 @@ async function collectDefaultValue(fieldType, prefill) {
         placeholder,
         initialValue: prefill ?? '',
         validate: (value) => {
-            if (!value.trim())
+            if (!value || !value.trim())
                 return 'Default value is required';
             return validateDefaultValue(fieldType, value.trim());
         },
@@ -316,7 +318,7 @@ async function collectEnumDefinition(fieldName, prefill) {
         message: 'Enum type name (PascalCase)',
         placeholder: suggestedName,
         initialValue: prefill?.name ?? suggestedName,
-        validate: validateEnumName,
+        validate: (value) => (value ? validateEnumName(value) : 'Enum name is required'),
     });
     if (p.isCancel(nameResult)) {
         return { enumDef: undefined, cancelled: true };
@@ -327,6 +329,8 @@ async function collectEnumDefinition(fieldName, prefill) {
         placeholder: 'e.g., draft, published, archived',
         initialValue: prefill?.values?.join(', ') ?? '',
         validate: (value) => {
+            if (!value)
+                return 'At least one enum value is required';
             const parsed = parseEnumValues(value);
             return validateEnumValues(parsed);
         },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@veloxts/cli",
-  "version": "0.6.88",
+  "version": "0.6.90",
   "description": "Developer tooling and CLI commands for VeloxTS framework",
   "type": "module",
   "main": "dist/index.js",
@@ -32,33 +32,33 @@
     }
   },
   "dependencies": {
-    "@clack/prompts": "0.11.0",
-    "commander": "14.0.2",
+    "@clack/prompts": "1.0.0",
+    "commander": "14.0.3",
     "dotenv": "17.2.3",
     "hot-hook": "0.4.0",
-    "pg": "8.16.0",
+    "pg": "8.18.0",
     "picocolors": "1.1.1",
     "pluralize": "8.0.0",
     "tsx": "4.21.0",
-    "yaml": "2.8.0",
-    "@veloxts/validation": "0.6.88",
-    "@veloxts/auth": "0.6.88",
-    "@veloxts/core": "0.6.88",
-    "@veloxts/orm": "0.6.88",
-    "@veloxts/router": "0.6.88"
+    "yaml": "2.8.2",
+    "@veloxts/auth": "0.6.90",
+    "@veloxts/orm": "0.6.90",
+    "@veloxts/router": "0.6.90",
+    "@veloxts/core": "0.6.90",
+    "@veloxts/validation": "0.6.90"
   },
   "peerDependencies": {
     "@prisma/client": ">=7.0.0"
   },
   "devDependencies": {
-    "@prisma/client": "7.2.0",
-    "@types/node": "25.0.3",
-    "@types/pg": "8.15.4",
+    "@prisma/client": "7.3.0",
+    "@types/node": "25.1.0",
+    "@types/pg": "8.16.0",
     "@types/pluralize": "0.0.33",
-    "@vitest/coverage-v8": "4.0.16",
+    "@vitest/coverage-v8": "4.0.18",
     "tsd": "0.33.0",
     "typescript": "5.9.3",
-    "vitest": "4.0.16"
+    "vitest": "4.0.18"
   },
   "keywords": [
     "velox",