create-nextly-app 0.0.2-alpha.35 → 0.0.2-alpha.39

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { createRequire } from 'module';
-export { createNextly } from './chunk-C5CWOU22.mjs';
+export { createNextly } from './chunk-DDQB5KOQ.mjs';
 
 createRequire(import.meta.url);
 //# sourceMappingURL=index.mjs.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-nextly-app",
-  "version": "0.0.2-alpha.35",
+  "version": "0.0.2-alpha.39",
   "description": "CLI to scaffold Nextly in your Next.js project",
   "license": "MIT",
   "type": "module",
@@ -29,22 +29,22 @@
     "fs-extra": "^11.3.0",
     "ora": "^9.0.0",
     "picocolors": "^1.1.1",
-    "tar": "^7.4.0"
+    "tar": "^7.5.19"
   },
   "devDependencies": {
     "@types/fs-extra": "^11.0.4",
     "@types/node": "^20.19.17",
     "@types/tar": "^6.1.13",
-    "@vitest/coverage-v8": "^4.0.8",
-    "@vitest/ui": "^4.0.8",
+    "@vitest/coverage-v8": "^4.1.0",
+    "@vitest/ui": "^4.1.0",
     "eslint": "^9.39.1",
     "tsup": "^8.5.0",
     "typescript": "^5.9.3",
     "vite-tsconfig-paths": "^5.1.4",
-    "vitest": "^4.0.8",
-    "@nextlyhq/eslint-config": "0.0.2-alpha.35",
-    "@nextlyhq/telemetry": "0.0.2-alpha.35",
-    "@nextlyhq/tsconfig": "0.0.2-alpha.35"
+    "vitest": "^4.1.0",
+    "@nextlyhq/eslint-config": "0.0.2-alpha.39",
+    "@nextlyhq/telemetry": "0.0.2-alpha.39",
+    "@nextlyhq/tsconfig": "0.0.2-alpha.39"
   },
   "engines": {
     "node": ">=20.0.0"

package/templates/base/src/app/admin/api/media/[[...path]]/route.ts

@@ -0,0 +1,26 @@
+/**
+ * Admin Media API — permission-gated management surface.
+ *
+ * The admin's session cookie is scoped to `/admin`, so it reaches here but not
+ * the public `/api/media`. Every operation is checked against a media
+ * permission (read/create/update/delete-media) and the acting identity is
+ * taken from the session/API key, never a request field. This is the only
+ * place media can be uploaded, edited, moved or deleted.
+ *
+ * Supported (all gated):
+ * - GET/POST/PATCH/DELETE /admin/api/media/*  (files, folders, bulk delete)
+ */
+
+import { createMediaHandlers } from "nextly/api/media-handlers";
+
+import config from "@nextly-config";
+
+const handlers = createMediaHandlers({
+  config,
+  requireAuth: true,
+});
+
+export const GET = handlers.GET;
+export const POST = handlers.POST;
+export const PATCH = handlers.PATCH;
+export const DELETE = handlers.DELETE;

package/templates/base/tsconfig.json

@@ -20,6 +20,7 @@
     ],
     "paths": {
       "@/*": ["./src/*"],
+      "@/components/*": ["./src/app/(frontend)/components/*"],
       "@nextly-config": ["./nextly.config.ts"]
     }
   },