create-cloudinary-react 1.0.0-beta.10 → 1.0.0-beta.11

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+# [1.0.0-beta.11](https://github.com/cloudinary-devs/create-cloudinary-react/compare/v1.0.0-beta.10...v1.0.0-beta.11) (2026-01-30)
+
+
+### Features
+
+* put Inquirer inputs on a new, separate line ([ba4a26d](https://github.com/cloudinary-devs/create-cloudinary-react/commit/ba4a26d0a84321ef8461babbd0c42bbe1fb77e81))
+
 # [1.0.0-beta.10](https://github.com/cloudinary-devs/create-cloudinary-react/compare/v1.0.0-beta.9...v1.0.0-beta.10) (2026-01-30)
 
 

package/cli.js

@@ -31,7 +31,7 @@ async function main() {
     {
       type: 'input',
       name: 'projectName',
-      message: 'Project name:',
+      message: 'What’s your project’s name?\n',
       default: 'my-cloudinary-app',
       validate: (input) => {
         if (!input.trim()) {
@@ -50,14 +50,14 @@ async function main() {
       type: 'input',
       name: 'cloudName',
       message:
-        'Cloudinary Cloud Name:\n' +
-        chalk.gray('Dashboard: https://console.cloudinary.com/app/home/dashboard'),
+        'What’s your Cloudinary cloud name?\n' +
+        chalk.gray(' → Find your cloud name: https://console.cloudinary.com/app/home/dashboard') + '\n',
       validate: (input) => {
         if (!input.trim()) {
           return chalk.yellow(
             'Cloud name is required.\n' +
-            '  → Sign up: https://cloudinary.com/users/register/free\n' +
-            '  → Find your cloud name: https://console.cloudinary.com/app/home/dashboard'
+            ' → Sign up: https://cloudinary.com/users/register/free\n' +
+            ' → Find your cloud name: https://console.cloudinary.com/app/home/dashboard'
           );
         }
         if (!isValidCloudName(input)) {
@@ -70,14 +70,15 @@ async function main() {
       type: 'confirm',
       name: 'hasUploadPreset',
       message:
-        'Do you have an unsigned upload preset? (Required for uploads, optional for transformations)\n' +
-        chalk.gray('Create one: https://console.cloudinary.com/app/settings/upload/presets'),
+        'Do you have an unsigned upload preset?\n' +
+        chalk.gray(' → You’ll need one if you want to upload new images to Cloudinary,\n   but not if you only want to transform or deliver existing images.') + '\n' +
+        chalk.gray(' → Create one here: https://console.cloudinary.com/app/settings/upload/presets') + '\n',
       default: false,
     },
     {
       type: 'input',
       name: 'uploadPreset',
-      message: 'Upload Preset Name:',
+      message: 'What’s your unsigned upload preset’s name?\n',
       when: (answers) => answers.hasUploadPreset,
       validate: (input) => {
         if (!input.trim()) {
@@ -101,13 +102,13 @@ async function main() {
     {
       type: 'confirm',
       name: 'installDeps',
-      message: 'Install dependencies now?',
+      message: 'Install dependencies now?\n',
       default: true,
     },
     {
       type: 'confirm',
       name: 'startDev',
-      message: 'Start development server?',
+      message: 'Start development server?\n',
       default: false,
       when: (answers) => answers.installDeps,
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-cloudinary-react",
-  "version": "1.0.0-beta.10",
+  "version": "1.0.0-beta.11",
   "description": "Scaffold a Cloudinary React + Vite + TypeScript project with interactive setup",
   "type": "module",
   "bin": {

package/templates/.cursorrules.template

@@ -284,7 +284,7 @@ cld.image('id').overlay(
 - Client: Widget gets `api_key` (from your backend), `uploadPreset`, and an `uploadSignature` **function** that calls your backend for each upload. API secret stays on server only.
 - Trade-off: Requires a backend (Node/Express, Next.js API route, etc.) to sign requests. More secure; signature validates each upload.
 
-**Rule of thumb**: If the user asks for "secure" or "signed" uploads, or needs to restrict uploads, use **signed** with a backend. For simple demos or when preset exposure is acceptable, **unsigned** is fine.
+**Rule of thumb**: **Default to unsigned uploads** unless the user explicitly asks for "secure" or "signed" uploads. Do not default to signed — it requires a running backend and will fail out of the box. Use **signed** only when the user explicitly requests secure/signed uploads or needs to restrict who can upload.
 
 ## Secure (Signed) Uploads
 
@@ -818,6 +818,7 @@ When something isn't working, check:
 - [ ] **"createUploadWidget is not a function"?** → Wait until `typeof window.cloudinary?.createUploadWidget === 'function'` before calling it (script loads async; poll or use script onload)
 - [ ] **Video player?** → **Imperative element only**: createElement('video'), append to container ref, pass to videoPlayer(el, ...); player.source({ publicId }); cleanup: dispose then if (el.parentNode) el.parentNode.removeChild(el). CSS: cloudinary-video-player/cld-video-player.min.css. If init fails, fall back to AdvancedVideo (do not relax CSP).
 - [ ] **Upload fails (unsigned)?** → Is `VITE_CLOUDINARY_UPLOAD_PRESET` set? Preset exists and is Unsigned in dashboard?
+- [ ] **Upload default?** → Default to **unsigned** uploads (cloudName + uploadPreset); use signed only when the user explicitly asks for secure/signed uploads (signed requires a running backend)
 - [ ] **Secure uploads?** → Use `uploadSignature` as function (not `signatureEndpoint`); fetch `api_key` from server first; include `uploadPreset` in widget config; server includes `upload_preset` in signed params; use Cloudinary Node SDK v2 on server; never expose or commit API secret
 - [ ] **Where do API key/secret go?** → **Do not** put in root `.env`. Use **`server/.env`**; add to `.gitignore`; load only in server. **Never commit** API key or secret
 - [ ] Upload preset is unsigned (for simple client uploads)