exp-node-server 2.0.0 → 2.1.0

package/dist/cli.js

@@ -1,13 +1,18 @@
 #!/usr/bin/env node
-var c=class extends Error{exitCode;constructor(t,r=1){super(t),this.name="CliError",this.exitCode=r}};import T from"chalk";var a={info:e=>console.log(e),success:e=>console.log(`${T.green("\u2714")} ${e}`),warn:e=>console.warn(`${T.yellow("\u26A0")} ${e}`),error:e=>console.error(`${T.red("\u2716")} ${e}`)};import S from"chalk";import{parseArgs as xe}from"util";import de from"@inquirer/select";import g from"chalk";import m from"fs";import h from"path";import pe from"ora";import j from"path";import{fileURLToPath as ce}from"url";var B=j.dirname(ce(import.meta.url)),C=j.basename(B)==="lib"?j.resolve(B,"../../templates"):j.resolve(B,"../templates");var le={_gitignore:".gitignore"},ue=new Set(["node_modules","dist","coverage",".env"]);async function k(e,{template:t,cwd:r=process.cwd()}={}){let s=h.join(r,e);if(m.existsSync(s))throw new c(`Folder '${e}' already exists.`);let n=t??await me(),i=h.join(C,n);if(!m.existsSync(i))throw new c(`Template '${n}' not found at ${i}.`);let o=pe(`Creating ${n} project...`).start();try{await m.promises.cp(i,s,{recursive:!0,filter:d=>!ue.has(h.basename(d))});for(let[d,f]of Object.entries(le)){let p=h.join(s,d);m.existsSync(p)&&await m.promises.rename(p,h.join(s,f))}await fe(s,e)}catch(d){throw o.fail("Failed to create project"),await m.promises.rm(s,{recursive:!0,force:!0}),d}o.succeed(`Project '${e}' created`),a.info(g.green(`
-Next steps:`)),a.info(g.cyan(`  cd ${e}`)),a.info(g.cyan("  npm install")),a.info(g.cyan("  cp .env.example .env    # then fill in the secrets")),a.info(g.cyan("  docker compose up -d    # starts the database")),n==="prisma"&&a.info(g.cyan("  npm run db:migrate")),a.info(g.cyan("  npm run dev")),a.info(g.cyan("  npm test"))}async function me(){return de({message:"Select a project template:",choices:[{name:"Mongoose (MongoDB)",value:"mongoose"},{name:"Prisma (PostgreSQL)",value:"prisma"}]})}async function fe(e,t){let r=h.join(e,"package.json");if(!m.existsSync(r))return;let s=JSON.parse(await m.promises.readFile(r,"utf-8"));s.name=t,await m.promises.writeFile(r,`${JSON.stringify(s,null,2)}
-`)}import y from"chalk";import $ from"fs";import l from"path";var _=(e,t)=>{let r=`await ${e}_service.${t}(req);`,s=`  const result = ${r}`;return s.length<=100?s:`  const result =
-    ${r}`},D=e=>`import catchAsync from '../../utils/catch_async.js';
+var p=class extends Error{exitCode;constructor(t,r=1){super(t),this.name="CliError",this.exitCode=r}};import U from"chalk";var d={info:e=>console.log(e),success:e=>console.log(`${U.green("\u2714")} ${e}`),warn:e=>console.warn(`${U.yellow("\u26A0")} ${e}`),error:e=>console.error(`${U.red("\u2716")} ${e}`)};import B from"chalk";import{parseArgs as Ge}from"util";import Se from"@inquirer/select";import x from"chalk";import $ from"fs";import b from"path";import je from"ora";import T from"path";import{fileURLToPath as be}from"url";var M=T.dirname(be(import.meta.url)),J=T.basename(M)==="lib"?T.resolve(M,"../../templates"):T.resolve(M,"../templates");var Ee={_gitignore:".gitignore"},ve=new Set(["node_modules","dist","coverage",".env"]);async function K(e,{template:t,cwd:r=process.cwd()}={}){let s=b.join(r,e);if($.existsSync(s))throw new p(`Folder '${e}' already exists.`);let o=t??await Re(),i=b.join(J,o);if(!$.existsSync(i))throw new p(`Template '${o}' not found at ${i}.`);let n=je(`Creating ${o} project...`).start();try{await $.promises.cp(i,s,{recursive:!0,filter:a=>!ve.has(b.basename(a))});for(let[a,l]of Object.entries(Ee)){let h=b.join(s,a);$.existsSync(h)&&await $.promises.rename(h,b.join(s,l))}await Pe(s,e)}catch(a){throw n.fail("Failed to create project"),await $.promises.rm(s,{recursive:!0,force:!0}),a}n.succeed(`Project '${e}' created`),d.info(x.green(`
+Next steps:`)),d.info(x.cyan(`  cd ${e}`)),d.info(x.cyan("  npm install")),d.info(x.cyan("  cp .env.example .env    # then fill in the secrets")),d.info(x.cyan("  docker compose up -d    # starts the database")),o==="prisma"&&d.info(x.cyan("  npm run db:migrate")),d.info(x.cyan("  npm run dev")),d.info(x.cyan("  npm test"))}async function Re(){return Se({message:"Select a project template:",choices:[{name:"Mongoose (MongoDB)",value:"mongoose"},{name:"Prisma (PostgreSQL)",value:"prisma"}]})}async function Pe(e,t){let r=b.join(e,"package.json");if(!$.existsSync(r))return;let s=JSON.parse(await $.promises.readFile(r,"utf-8"));s.name=t,await $.promises.writeFile(r,`${JSON.stringify(s,null,2)}
+`);let o=b.join(e,"package-lock.json");if(!$.existsSync(o))return;let i=JSON.parse(await $.promises.readFile(o,"utf-8"));i.name=t;let n=i.packages?.[""];n&&(n.name=t),await $.promises.writeFile(o,`${JSON.stringify(i,null,2)}
+`)}import v from"chalk";import w from"fs";import g from"path";var j=(e,t,r)=>{let s=`typeof ${t}_validations.${r}`,o=`type ${e} = z.infer<${s}>;`;return o.length<=100?o:`type ${e} = z.infer<
+  ${s}
+>;`},R=(e,t)=>{let r=`  const result = await ${e}${t.join("")};`;return r.length<=100?r:`  const result = await ${e}
+${t.map(s=>`    ${s}`).join(`
+`)};`};var P=(e,t)=>{let r=`await ${e}_service.${t}(req);`,s=`  const result = ${r}`;return s.length<=100?s:`  const result =
+    ${r}`},Z=e=>`import catchAsync from '../../utils/catch_async.js';
 import manageResponse from '../../utils/manage_response.js';
 import { ${e}_service } from './${e}.service.js';
 
 const get_all_${e} = catchAsync(async (req, res) => {
-${_(e,`get_all_${e}_from_db`)}
+${P(e,`get_all_${e}_from_db`)}
   manageResponse(res, {
     success: true,
     statusCode: 200,
@@ -18,7 +23,7 @@ ${_(e,`get_all_${e}_from_db`)}
 });
 
 const get_single_${e} = catchAsync(async (req, res) => {
-${_(e,`get_single_${e}_from_db`)}
+${P(e,`get_single_${e}_from_db`)}
   manageResponse(res, {
     success: true,
     statusCode: 200,
@@ -29,7 +34,7 @@ ${_(e,`get_single_${e}_from_db`)}
 });
 
 const create_${e} = catchAsync(async (req, res) => {
-${_(e,`create_${e}_into_db`)}
+${P(e,`create_${e}_into_db`)}
   manageResponse(res, {
     success: true,
     statusCode: 201,
@@ -40,7 +45,7 @@ ${_(e,`create_${e}_into_db`)}
 });
 
 const update_${e} = catchAsync(async (req, res) => {
-${_(e,`update_${e}_into_db`)}
+${P(e,`update_${e}_into_db`)}
   manageResponse(res, {
     success: true,
     statusCode: 200,
@@ -51,7 +56,7 @@ ${_(e,`update_${e}_into_db`)}
 });
 
 const delete_${e} = catchAsync(async (req, res) => {
-${_(e,`delete_${e}_from_db`)}
+${P(e,`delete_${e}_from_db`)}
   manageResponse(res, {
     success: true,
     statusCode: 200,
@@ -68,29 +73,32 @@ export const ${e}_controller = {
   update_${e},
   delete_${e},
 };
-`;var x=(e,t)=>{let r=`router.${e}(${t.join(", ")});`;return r.length<=100?r:`router.${e}(
+`;var q=(e,t)=>{let r=`router.${e}(${t.join(", ")});`;return r.length<=100?r:`router.${e}(
 ${t.map(s=>`  ${s},`).join(`
 `)}
-);`},G=e=>`import { Router } from 'express';
-import RequestValidator from '../../middlewares/request_validator.js';
+);`},Q=(e,{auth:t=!1}={})=>{let r=t?["auth()"]:[],s=a=>`RequestValidator(${e}_validations.${a}_${e})`,o=a=>`${e}_controller.${a}_${e}`;return`import { Router } from 'express';
+${t?`import auth from '../../middlewares/auth.js';
+`:""}import RequestValidator from '../../middlewares/request_validator.js';
 import { ${e}_controller } from './${e}.controller.js';
 import { ${e}_validations } from './${e}.validation.js';
 
 const router = Router();
 
-${x("get",["'/'",`${e}_controller.get_all_${e}`])}
-${x("post",["'/'",`RequestValidator(${e}_validations.create_${e})`,`${e}_controller.create_${e}`])}
-${x("get",["'/:id'",`${e}_controller.get_single_${e}`])}
-${x("patch",["'/:id'",`RequestValidator(${e}_validations.update_${e})`,`${e}_controller.update_${e}`])}
-${x("delete",["'/:id'",`${e}_controller.delete_${e}`])}
+${t?"// every route needs a signed-in user; use auth('ADMIN') to allow admins only":`// public routes: protect them with auth() from '../../middlewares/auth.js', e.g.
+// router.post('/', auth('ADMIN'), ...), or generate the module with --auth`}
+${q("get",["'/'",...r,o("get_all")])}
+${q("post",["'/'",...r,s("create"),o("create")])}
+${q("get",["'/:id'",...r,o("get_single")])}
+${q("patch",["'/:id'",...r,s("update"),o("update")])}
+${q("delete",["'/:id'",...r,o("delete")])}
 
 export default router;
-`;var A=`{
+`};var L=`{
           name: 'id',
           in: 'path',
           required: true,
           schema: { type: 'string' },
-        }`,F=e=>`export const ${e}SwaggerDocs = {
+        }`,X=e=>`export const ${e}SwaggerDocs = {
   '/api/${e}': {
     post: {
       tags: ['${e}'],
@@ -100,7 +108,7 @@ export default router;
         required: true,
         content: {
           'application/json': {
-            example: JSON.stringify({}), // put your request body
+            example: JSON.stringify({ name: 'Example ${e}' }),
           },
         },
       },
@@ -140,7 +148,7 @@ export default router;
       summary: 'Get single ${e}',
       description: '',
       parameters: [
-        ${A},
+        ${L},
       ],
       responses: {
         200: { description: '${e} fetched successfully' },
@@ -152,13 +160,13 @@ export default router;
       summary: 'Update ${e}',
       description: '',
       parameters: [
-        ${A},
+        ${L},
       ],
       requestBody: {
         required: true,
         content: {
           'application/json': {
-            example: JSON.stringify({}), // put your request body
+            example: JSON.stringify({ name: 'Example ${e}' }),
           },
         },
       },
@@ -172,7 +180,7 @@ export default router;
       summary: 'Delete ${e}',
       description: '',
       parameters: [
-        ${A},
+        ${L},
       ],
       responses: {
         200: { description: '${e} deleted successfully' },
@@ -181,56 +189,75 @@ export default router;
     },
   },
 };
-`;var O=e=>`import { z } from 'zod';
+`;var Y=e=>`import { z } from 'zod';
 
-const create_${e} = z.object({});
-const update_${e} = z.object({});
+// \`name\` is an example field: rename it or add yours here, in the database schema
+// and in tests/routes/${e}.test.ts. Fields that aren't listed here are removed
+// from req.body before it reaches the service.
+const create_${e} = z.object({
+  name: z.string('Name is required').trim().min(1).max(200),
+});
+
+const update_${e} = create_${e}.partial();
 
 export const ${e}_validations = {
   create_${e},
   update_${e},
 };
-`;var N=e=>`// add the fields of a ${e} here
-// eslint-disable-next-line @typescript-eslint/no-empty-object-type
-export type T_${e} = {};
-`;var M=e=>`import { Schema, model } from 'mongoose';
+`;var ee=e=>`// the fields of a ${e}; \`name\` is an example, keep it in sync with ${e}.validation.ts
+export type T_${e} = {
+  name: string;
+};
+`;var te=e=>`import { Schema, model } from 'mongoose';
 import type { T_${e} } from './${e}.interface.js';
 
-const schema = new Schema<T_${e}>({}, { timestamps: true, versionKey: false });
+const schema = new Schema<T_${e}>(
+  {
+    name: { type: String, required: true, trim: true },
+  },
+  { timestamps: true, versionKey: false },
+);
 
 export const ${e}_model = model('${e}', schema);
-`;var L=e=>`import type { Request } from 'express';
+`;var re=e=>`import type { Request } from 'express';
+import type { z } from 'zod';
 import { AppError } from '../../utils/app_error.js';
 import { ${e}_model } from './${e}.schema.js';
+import type { ${e}_validations } from './${e}.validation.js';
+
+// req.body was already parsed by RequestValidator (see ${e}.route.ts), so it only
+// holds the fields of these schemas: add a field there before the service can use it
+${j("CreatePayload",e,`create_${e}`)}
+${j("UpdatePayload",e,`update_${e}`)}
 
 const notFound = () => new AppError('${e} not found', 404);
 
 const get_all_${e}_from_db = async (_req: Request) => {
   // define your own logic here
-  const result = await ${e}_model.find().lean();
+${R(`${e}_model`,[".find()",".lean()"])}
   return result;
 };
 
 const get_single_${e}_from_db = async (req: Request) => {
   // define your own logic here
   const { id } = req.params;
-  const result = await ${e}_model.findById(id).lean();
+${R(`${e}_model`,[".findById(id)",".lean()"])}
   if (!result) throw notFound();
   return result;
 };
 
 const create_${e}_into_db = async (req: Request) => {
   // define your own logic here
-  const result = await ${e}_model.create(req.body);
+  const payload: CreatePayload = req.body;
+  const result = await ${e}_model.create(payload);
   return result;
 };
 
 const update_${e}_into_db = async (req: Request) => {
   // define your own logic here
   const { id } = req.params;
-  const result = await ${e}_model
-    .findByIdAndUpdate(id, req.body, { returnDocument: 'after' })
-    .lean();
+  const payload: UpdatePayload = req.body;
+${R(`${e}_model`,[".findByIdAndUpdate(id, payload, { returnDocument: 'after' })",".lean()"])}
   if (!result) throw notFound();
   return result;
 };
@@ -238,7 +265,7 @@ const update_${e}_into_db = async (req: Request) => {
 const delete_${e}_from_db = async (req: Request) => {
   // define your own logic here
   const { id } = req.params;
-  const result = await ${e}_model.findByIdAndDelete(id).lean();
+${R(`${e}_model`,[".findByIdAndDelete(id)",".lean()"])}
   if (!result) throw notFound();
   return result;
 };
@@ -250,34 +277,53 @@ export const ${e}_service = {
   update_${e}_into_db,
   delete_${e}_from_db,
 };
-`;var U=e=>`import { Types } from 'mongoose';
+`;var se=(e,{auth:t=!1}={})=>`import { Types } from 'mongoose';
 import request from 'supertest';
-import { describe, expect, it } from 'vitest';
+import { ${t?"beforeEach, describe, expect, it":"describe, expect, it"} } from 'vitest';
 import app from '../../src/app.js';
 import { ${e}_model } from '../../src/app/modules/${e}/${e}.schema.js';
-
+${t?`import { bearer, createAccount } from '../helpers/fixtures.js';
+`:""}
+// Starter tests for the generated CRUD routes: extend them with your own rules.
 const BASE = '/api/${e}';
+const missingId = new Types.ObjectId().toString();
+
+// Valid request bodies, matching ${e}.validation.ts. Update them with your fields.
+const createPayload = { name: 'Example ${e}' };
+const updatePayload = { name: 'Updated ${e}' };
 
-// Valid request bodies. Fill them in as you add fields to ${e}.schema.ts and
-// ${e}.validation.ts (and protect the routes with auth() once they need it).
-const createPayload = {};
-const updatePayload = {};
+${t?`let token = '';
 
-/** Inserts a ${e} directly in the database, for the read / update / delete tests. */
+beforeEach(async () => {
+  token = bearer(await createAccount());
+});
+
+/** Requests as a signed-in user. */
+const api = () => request.agent(app).set('Authorization', token);`:"const api = () => request(app);"}
+
+/** Inserts one directly in the database, for the read / update / delete tests. */
 const insert = () => ${e}_model.create(createPayload);
 
-describe(BASE, () => {
+describe(BASE, () => {${t?"\n  it.each([\n    ['get', BASE],\n    ['post', BASE],\n    ['get', `${BASE}/${missingId}`],\n    ['patch', `${BASE}/${missingId}`],\n    ['delete', `${BASE}/${missingId}`],\n  ] as const)('%s %s needs a signed-in user', async (method, url) => {\n    const res = await request(app)[method](url);\n\n    expect(res.status).toBe(401);\n  });\n":""}
   it('POST / creates one', async () => {
-    const res = await request(app).post(BASE).send(createPayload);
+    const res = await api().post(BASE).send(createPayload);
 
     expect(res.status).toBe(201);
+    expect(res.body.data).toMatchObject(createPayload);
     expect(await ${e}_model.countDocuments()).toBe(1);
   });
 
+  it('POST / rejects an invalid body', async () => {
+    const res = await api().post(BASE).send({});
+
+    expect(res.status).toBe(400);
+    expect(await ${e}_model.countDocuments()).toBe(0);
+  });
+
   it('GET / lists them', async () => {
     await insert();
 
-    const res = await request(app).get(BASE);
+    const res = await api().get(BASE);
 
     expect(res.status).toBe(200);
     expect(res.body.data).toHaveLength(1);
@@ -286,20 +332,20 @@ describe(BASE, () => {
   it('GET /:id returns one', async () => {
     const doc = await insert();
 
-    const res = await request(app).get(\`\${BASE}/\${doc._id}\`);
+    const res = await api().get(\`\${BASE}/\${doc._id}\`);
 
     expect(res.status).toBe(200);
-    expect(res.body.data._id).toBe(String(doc._id));
+    expect(res.body.data).toMatchObject({ _id: String(doc._id), ...createPayload });
   });
 
   it('GET /:id is 404 when it does not exist', async () => {
-    const res = await request(app).get(\`\${BASE}/\${new Types.ObjectId()}\`);
+    const res = await api().get(\`\${BASE}/\${missingId}\`);
 
     expect(res.status).toBe(404);
   });
 
   it('GET /:id is 400 for a malformed id', async () => {
-    const res = await request(app).get(\`\${BASE}/not-an-id\`);
+    const res = await api().get(\`\${BASE}/not-an-id\`);
 
     expect(res.status).toBe(400);
   });
@@ -307,7 +353,7 @@ describe(BASE, () => {
   it('PATCH /:id updates it', async () => {
     const doc = await insert();
 
-    const res = await request(app).patch(\`\${BASE}/\${doc._id}\`).send(updatePayload);
+    const res = await api().patch(\`\${BASE}/\${doc._id}\`).send(updatePayload);
 
     expect(res.status).toBe(200);
     const stored = await ${e}_model.findById(doc._id).lean();
@@ -315,7 +361,7 @@ describe(BASE, () => {
   });
 
   it('PATCH /:id is 404 when it does not exist', async () => {
-    const res = await request(app).patch(\`\${BASE}/\${new Types.ObjectId()}\`).send(updatePayload);
+    const res = await api().patch(\`\${BASE}/\${missingId}\`).send(updatePayload);
 
     expect(res.status).toBe(404);
   });
@@ -323,7 +369,7 @@ describe(BASE, () => {
   it('DELETE /:id deletes it', async () => {
     const doc = await insert();
 
-    const res = await request(app).delete(\`\${BASE}/\${doc._id}\`);
+    const res = await api().delete(\`\${BASE}/\${doc._id}\`);
 
     expect(res.status).toBe(200);
     const stillThere = await ${e}_model.exists({ _id: doc._id });
@@ -331,19 +377,28 @@ describe(BASE, () => {
   });
 
   it('DELETE /:id is 404 when it does not exist', async () => {
-    const res = await request(app).delete(\`\${BASE}/\${new Types.ObjectId()}\`);
+    const res = await api().delete(\`\${BASE}/\${missingId}\`);
 
     expect(res.status).toBe(404);
   });
 });
-`;var V=e=>e.charAt(0).toUpperCase()+e.slice(1);var H=e=>`model ${V(e)} {
+`;var oe=e=>e.charAt(0).toUpperCase()+e.slice(1);var ne=e=>`model ${oe(e)} {
     id        String   @id @default(uuid())
+    // example field, keep it in sync with ${e}.validation.ts
+    name      String
     createdAt DateTime @default(now())
     updatedAt DateTime @updatedAt
 }
-`;var z=e=>`import type { Request } from 'express';
+`;var ie=e=>`import type { Request } from 'express';
+import type { z } from 'zod';
 import { prisma } from '../../lib/prisma.js';
 import { AppError } from '../../utils/app_error.js';
+import type { ${e}_validations } from './${e}.validation.js';
+
+// req.body was already parsed by RequestValidator (see ${e}.route.ts), so it only
+// holds the fields of these schemas: add a field there before the service can use it
+${j("CreatePayload",e,`create_${e}`)}
+${j("UpdatePayload",e,`update_${e}`)}
 
 const get_all_${e}_from_db = async (_req: Request) => {
   // define your own logic here
@@ -354,14 +409,19 @@ const get_all_${e}_from_db = async (_req: Request) => {
 const get_single_${e}_from_db = async (req: Request) => {
   // define your own logic here
   const { id } = req.params as { id: string };
-  const result = await prisma.${e}.findUnique({ where: { id } });
+  const result = await prisma.${e}.findUnique({
+    where: { id },
+  });
   if (!result) throw new AppError('${e} not found', 404);
   return result;
 };
 
 const create_${e}_into_db = async (req: Request) => {
   // define your own logic here
-  const result = await prisma.${e}.create({ data: req.body });
+  const payload: CreatePayload = req.body;
+  const result = await prisma.${e}.create({
+    data: payload,
+  });
   return result;
 };
 
@@ -370,14 +430,20 @@ const create_${e}_into_db = async (req: Request) => {
 const update_${e}_into_db = async (req: Request) => {
   // define your own logic here
   const { id } = req.params as { id: string };
-  const result = await prisma.${e}.update({ where: { id }, data: req.body });
+  const payload: UpdatePayload = req.body;
+  const result = await prisma.${e}.update({
+    where: { id },
+    data: payload,
+  });
   return result;
 };
 
 const delete_${e}_from_db = async (req: Request) => {
   // define your own logic here
   const { id } = req.params as { id: string };
-  const result = await prisma.${e}.delete({ where: { id } });
+  const result = await prisma.${e}.delete({
+    where: { id },
+  });
   return result;
 };
 
@@ -388,19 +454,20 @@ export const ${e}_service = {
   update_${e}_into_db,
   delete_${e}_from_db,
 };
-`;var J=e=>`import { Prisma } from '@prisma/client';
+`;var ae=(e,{auth:t=!1}={})=>`import { Prisma } from '@prisma/client';
 import request from 'supertest';
-import { describe, expect, it } from 'vitest';
+import { ${t?"beforeEach, describe, expect, it":"describe, expect, it"} } from 'vitest';
 import app from '../../src/app.js';
-import { prismaMock } from '../helpers/prisma.js';
+${t?`import { bearer, makeAccount } from '../helpers/fixtures.js';
+`:""}import { prismaMock } from '../helpers/prisma.js';
 
+// Starter tests for the generated CRUD routes: extend them with your own rules.
 const BASE = '/api/${e}';
 const db = prismaMock.${e};
 
-// Valid request bodies. Fill them in as you add fields to prisma/schema/${e}.prisma
-// and ${e}.validation.ts (and protect the routes with auth() once they need it).
-const createPayload = {};
-const updatePayload = {};
+// Valid request bodies, matching ${e}.validation.ts. Update them with your fields.
+const createPayload = { name: 'Example ${e}' };
+const updatePayload = { name: 'Updated ${e}' };
 
 // a row as the database would return it
 const row = {
@@ -418,21 +485,38 @@ const recordNotFound = () =>
     clientVersion: 'test',
   });
 
-describe(BASE, () => {
+${t?`const account = makeAccount();
+
+beforeEach(() => {
+  // the auth middleware looks the signed-in account up
+  prismaMock.account.findUnique.mockResolvedValue(account);
+});
+
+/** Requests as a signed-in user. */
+const api = () => request.agent(app).set('Authorization', bearer(account));`:"const api = () => request(app);"}
+
+describe(BASE, () => {${t?"\n  it.each([\n    ['get', BASE],\n    ['post', BASE],\n    ['get', `${BASE}/${row.id}`],\n    ['patch', `${BASE}/${row.id}`],\n    ['delete', `${BASE}/${row.id}`],\n  ] as const)('%s %s needs a signed-in user', async (method, url) => {\n    const res = await request(app)[method](url);\n\n    expect(res.status).toBe(401);\n  });\n":""}
   it('POST / creates one', async () => {
     db.create.mockResolvedValue(row);
 
-    const res = await request(app).post(BASE).send(createPayload);
+    const res = await api().post(BASE).send(createPayload);
 
     expect(res.status).toBe(201);
     expect(res.body.data).toEqual(json);
     expect(db.create).toHaveBeenCalledWith({ data: createPayload });
   });
 
+  it('POST / rejects an invalid body', async () => {
+    const res = await api().post(BASE).send({});
+
+    expect(res.status).toBe(400);
+    expect(db.create).not.toHaveBeenCalled();
+  });
+
   it('GET / lists them', async () => {
     db.findMany.mockResolvedValue([row]);
 
-    const res = await request(app).get(BASE);
+    const res = await api().get(BASE);
 
     expect(res.status).toBe(200);
     expect(res.body.data).toEqual([json]);
@@ -441,7 +525,7 @@ describe(BASE, () => {
   it('GET /:id returns one', async () => {
     db.findUnique.mockResolvedValue(row);
 
-    const res = await request(app).get(\`\${BASE}/\${row.id}\`);
+    const res = await api().get(\`\${BASE}/\${row.id}\`);
 
     expect(res.status).toBe(200);
     expect(res.body.data).toEqual(json);
@@ -451,15 +535,15 @@ describe(BASE, () => {
   it('GET /:id is 404 when it does not exist', async () => {
     db.findUnique.mockResolvedValue(null);
 
-    const res = await request(app).get(\`\${BASE}/\${row.id}\`);
+    const res = await api().get(\`\${BASE}/\${row.id}\`);
 
     expect(res.status).toBe(404);
   });
 
   it('PATCH /:id updates it', async () => {
-    db.update.mockResolvedValue(row);
+    db.update.mockResolvedValue({ ...row, ...updatePayload });
 
-    const res = await request(app).patch(\`\${BASE}/\${row.id}\`).send(updatePayload);
+    const res = await api().patch(\`\${BASE}/\${row.id}\`).send(updatePayload);
 
     expect(res.status).toBe(200);
     expect(db.update).toHaveBeenCalledWith({ where: { id: row.id }, data: updatePayload });
@@ -468,7 +552,7 @@ describe(BASE, () => {
   it('PATCH /:id is 404 when it does not exist', async () => {
     db.update.mockRejectedValue(recordNotFound());
 
-    const res = await request(app).patch(\`\${BASE}/\${row.id}\`).send(updatePayload);
+    const res = await api().patch(\`\${BASE}/\${row.id}\`).send(updatePayload);
 
     expect(res.status).toBe(404);
   });
@@ -476,7 +560,7 @@ describe(BASE, () => {
   it('DELETE /:id deletes it', async () => {
     db.delete.mockResolvedValue(row);
 
-    const res = await request(app).delete(\`\${BASE}/\${row.id}\`);
+    const res = await api().delete(\`\${BASE}/\${row.id}\`);
 
     expect(res.status).toBe(200);
     expect(db.delete).toHaveBeenCalledWith({ where: { id: row.id } });
@@ -485,41 +569,45 @@ describe(BASE, () => {
   it('DELETE /:id is 404 when it does not exist', async () => {
     db.delete.mockRejectedValue(recordNotFound());
 
-    const res = await request(app).delete(\`\${BASE}/\${row.id}\`);
+    const res = await api().delete(\`\${BASE}/\${row.id}\`);
 
     expect(res.status).toBe(404);
   });
 });
-`;var ge=/^import\s[\s\S]*?from\s*(['"])[^'"]+\1;?[ \t]*$|^import\s*(['"])[^'"]+\2;?[ \t]*$/gm;function E(e){return{quote:e.match(/^import[\s\S]*?(['"])/m)?.[1]==="'"?"'":'"',jsExtension:/from\s*['"]\.{1,2}\/[^'"]+\.js['"]/.test(e)}}function q(e,t){let r=-1;for(let s of e.matchAll(ge))r=s.index+s[0].length;return r===-1?`${t}
+`;var qe=/^import\s[\s\S]*?from\s*(['"])[^'"]+\1;?[ \t]*$|^import\s*(['"])[^'"]+\2;?[ \t]*$/gm;function I(e){return{quote:e.match(/^import[\s\S]*?(['"])/m)?.[1]==="'"?"'":'"',jsExtension:/from\s*['"]\.{1,2}\/[^'"]+\.js['"]/.test(e)}}function C(e,t){let r=-1;for(let s of e.matchAll(qe))r=s.index+s[0].length;return r===-1?`${t}
 ${e}`:`${e.slice(0,r)}
-${t}${e.slice(r)}`}function v(e,t,r,s){let n=e.match(t);if(n?.index===void 0)return null;let i=n.index+n[0].length,o=e.indexOf(r,i);if(o===-1)return null;let d=e.slice(i,o),f=d.match(/\n([ \t]*)$/)?.[1]??"",p=d.match(/\n([ \t]+)\S/)?.[1]??`${f}  `,w=d.trimEnd(),ie=w.length>0&&!/[,[{]$/.test(w),ae=`${w}${ie?",":""}
-${p}${s}
-${f}`;return e.slice(0,i)+ae+e.slice(o)}function R(e,t){let r=e.includes(`\r
+${t}${e.slice(r)}`}var k={"[":"]","{":"}","(":")"};function ce(e,t){let r=e[t],s=e[t+1];if(r==="/"&&s==="/"){let o=e.indexOf(`
+`,t);return o===-1?e.length-1:o}if(r==="/"&&s==="*"){let o=e.indexOf("*/",t+2);return o===-1?-1:o+1}if(r==="'"||r==='"'){let o=t+1;for(;o<e.length&&e[o]!==r&&e[o]!==`
+`;)o+=e[o]==="\\"?2:1;return e[o]===r?o:-1}if(r==="`"){let o=t+1;for(;o<e.length;)if(e[o]==="\\")o+=2;else{if(e[o]==="`")return o;if(e[o]==="$"&&e[o+1]==="{"){let i=D(e,o+2,["}"],!0);if(i===-1)return-1;o=i+1}else o++}return-1}return null}function D(e,t,r,s){for(let o=t;o<e.length;o++){let i=ce(e,o);if(i!==null){if(i===-1)return-1;o=i;continue}let n=e[o];if(n in k)r.push(k[n]);else if(n==="]"||n==="}"||n===")"){if(r.pop()!==n)return-1;if(s&&r.length===0)return o}}return!s&&r.length===0?e.length:-1}function V(e,t,r){return D(e,t,[r],!0)}function E(e){return D(e,0,[],!1)===e.length}function de(e,t,r){let s=[];for(let o=t;o<r;o++){let i=ce(e,o);if(i!==null){if(i===-1)return s;o=i;continue}let n=e[o];if(n in k){let a=D(e,o+1,[k[n]],!0);if(a===-1)return s;n==="{"&&s.push(e.slice(o,a+1)),o=a}}return s}function O(e,t,r,s){let o=e.match(t);if(o?.index===void 0)return null;let i=o.index+o[0].length,n=V(e,i,r);if(n===-1)return null;let a=e.slice(i,n),l=a.match(/\n([ \t]*)$/)?.[1]??"",h=a.match(/\n([ \t]+)\S/)?.[1]??`${l}  `,c=a.trimEnd(),_=c.length>0&&!/[,[{]$/.test(c),f=`${c}${_?",":""}
+${h}${s}
+${l}`;return e.slice(0,i)+f+e.slice(n)}function F(e,t){let r=e.includes(`\r
 `),s=t(r?e.replace(/\r\n/g,`
 `):e);return!r||s.status!=="updated"?s:{status:"updated",content:s.content.replace(/\n/g,`\r
-`)}}function W(e,t){return R(e,r=>$e(r,t))}function $e(e,t){let{quote:r,jsExtension:s}=E(e),n=`./app/modules/${t}/${t}.route`,i=`${t}Route`,o=e;if(o.includes(n)||(o=q(o,`import ${i} from ${r}${n}${s?".js":""}${r};`)),!new RegExp(`route:\\s*${i}\\b`).test(o)){let d=v(o,/const moduleRoutes\s*=\s*\[/,"]",`{ path: ${r}/${t}${r}, route: ${i} },`);if(d===null)return{status:"failed",reason:"could not find `const moduleRoutes = [...]`"};o=d}return o===e?{status:"unchanged"}:{status:"updated",content:o}}function K(e,t){return R(e,r=>he(r,t))}function he(e,t){let{quote:r,jsExtension:s}=E(e),n=`./app/modules/${t}/${t}.swagger`,i=`${t}SwaggerDocs`,o=e;if(o.includes(n)||(o=q(o,`import { ${i} } from ${r}${n}${s?".js":""}${r};`)),!o.includes(`...${i}`)){let d=v(o,/paths:\s*\{/,"}",`...${i},`);if(d===null)return{status:"failed",reason:"could not find `paths: { ... }`"};o=d}return o===e?{status:"unchanged"}:{status:"updated",content:o}}import Q from"fs";import X from"path";function Y(e,t){for(let r of e)Q.mkdirSync(X.dirname(r.path),{recursive:!0}),Q.writeFileSync(r.path,r.content),a.success(`${X.relative(t,r.path)} created`)}import Z from"fs";import ye from"path";var b=["mongoose","prisma"],P=".projectrc.json",I=e=>typeof e=="string"&&b.includes(e);function ee(e){let t=ye.join(e,P);if(!Z.existsSync(t))throw new c(`${P} not found. Run this command from the root of a project created with exp-node-server.`);let r;try{r=JSON.parse(Z.readFileSync(t,"utf-8"))}catch{throw new c(`${P} is not valid JSON.`)}let s=r?.database;if(!I(s))throw new c(`Invalid "database" in ${P}. Expected one of: ${b.join(", ")}.`);return s}async function re(e,{cwd:t=process.cwd(),force:r=!1}={}){let s=ee(t),n=l.join(t,"src/app/modules",e);if($.existsSync(n)&&!r)throw new c(`Module '${e}' already exists at ${l.relative(t,n)}. Use --force to overwrite it.`);_e(l.join(t,"src/routes.ts"),e);let i=(p,w)=>({path:l.join(n,`${e}.${p}`),content:w}),o=[i("controller.ts",D(e)),i("route.ts",G(e)),i("validation.ts",O(e)),i("swagger.ts",F(e))];s==="mongoose"?o.push(i("interface.ts",N(e)),i("schema.ts",M(e)),i("service.ts",L(e))):o.push(i("service.ts",z(e)),{path:l.join(t,"prisma/schema",`${e}.prisma`),content:H(e)});let d=l.join(t,"tests/routes",`${e}.test.ts`),f=we.some(p=>$.existsSync(l.join(t,p)));f&&o.push({path:d,content:s==="mongoose"?U(e):J(e)}),Y(o,t),f||a.info(y.dim("  no vitest config found, skipped tests/routes test")),te(l.join(t,"src/routes.ts"),p=>W(p,e),"Route registered"),te(l.join(t,"src/swaggerOptions.ts"),p=>K(p,e),"Swagger docs registered"),s==="prisma"&&(a.info(y.blue(`
-Next, run:`)),a.info(y.yellow("  npx prisma generate && npx prisma migrate dev"))),f&&a.info(y.blue(`
-Test it with: npm test -- tests/routes/${e}.test.ts`)),a.info(y.green(`
-Module '${e}' created successfully`))}var we=["vitest.config.ts","vitest.config.mts","vitest.config.js"];function _e(e,t){if(!$.existsSync(e))return;let r=$.readFileSync(e,"utf-8"),s=new RegExp(`path:\\s*['"]/${t}['"]\\s*,\\s*route:\\s*(\\w+)`).exec(r);if(s&&s[1]!==`${t}Route`)throw new c(`The path '/${t}' is already used by ${s[1]} in src/routes.ts. Pick another module name.`)}function te(e,t,r){let s=l.basename(e);if(!$.existsSync(e)){a.warn(`${s} not found, skipping registration`);return}let n=t($.readFileSync(e,"utf-8"));switch(n.status){case"updated":$.writeFileSync(e,n.content),a.success(`${r} in ${s}`);break;case"unchanged":a.info(y.dim(`  already registered in ${s}`));break;case"failed":a.warn(`Couldn't update ${s} (${n.reason}). Register it manually.`);break}}function se(e){if(!e)return null;let t=e.trim().toLowerCase().replace(/[-\s]+/g,"_");return/^[a-z][a-z_]*$/.test(t)?t:null}function oe(e){if(!e)return null;let t=e.trim().toLowerCase().replace(/\s+/g,"-");return/^[a-z0-9][a-z0-9-]*$/.test(t)?t:null}var u="exp-node-server",be=`
-${S.bold(u)} - scaffold Express + TypeScript APIs with Mongoose or Prisma
+`)}}var pe=/const moduleRoutes\s*=\s*\[/;function H(e){let t=[],r=e.match(pe);if(r?.index!==void 0){let s=r.index+r[0].length,o=V(e,s,"]");if(o!==-1)for(let i of de(e,s,o)){let n=/\bpath\s*:\s*(['"`])([^'"`]*)\1/.exec(i)?.[2];if(n===void 0)continue;let a=/\broute\s*:\s*([A-Za-z_$][\w$]*)\s*[,}]/.exec(i)?.[1]??null;t.push({path:n,route:a})}}for(let s of e.matchAll(/\.use\(\s*(['"`])(\/[^'"`]*)\1\s*,\s*([A-Za-z_$][\w$]*)?/g))t.push({path:s[2],route:s[3]??null});return t}function le(e,t){return F(e,r=>Ae(r,t))}function Ae(e,t){let{quote:r,jsExtension:s}=I(e),o=`./app/modules/${t}/${t}.route`,i=`${t}Route`,n=l=>H(l).filter(h=>h.route===i).length,a=e;if(a.includes(o)||(a=C(a,`import ${i} from ${r}${o}${s?".js":""}${r};`)),n(a)===0){let l=O(a,pe,"]",`{ path: ${r}/${t}${r}, route: ${i} },`);if(l===null)return{status:"failed",reason:"could not find `const moduleRoutes = [...]`"};a=l}return a===e?{status:"unchanged"}:E(e)&&!E(a)||n(a)!==1?{status:"failed",reason:"the edited file didn't look right"}:{status:"updated",content:a}}function ue(e,t){return F(e,r=>Be(r,t))}function Be(e,t){let{quote:r,jsExtension:s}=I(e),o=`./app/modules/${t}/${t}.swagger`,i=`${t}SwaggerDocs`,n=e;if(n.includes(o)||(n=C(n,`import { ${i} } from ${r}${o}${s?".js":""}${r};`)),!n.includes(`...${i}`)){let l=O(n,/paths:\s*\{/,"}",`...${i},`);if(l===null)return{status:"failed",reason:"could not find `paths: { ... }`"};n=l}if(n===e)return{status:"unchanged"};let a=n.match(new RegExp(`\\.\\.\\.${i}\\b`,"g"))?.length??0;return E(e)&&!E(n)||a!==1?{status:"failed",reason:"the edited file didn't look right"}:{status:"updated",content:n}}import{randomBytes as Te}from"crypto";import u from"fs";import S from"path";function me(e,t,r={}){let s=new Map,o=[],i=[],n=e.filter(c=>!u.existsSync(c.path)||u.readFileSync(c.path,"utf-8")!==c.content);for(let c of n)u.existsSync(c.path)&&s.set(c.path,u.readFileSync(c.path,"utf-8"));let a=ke(s,t,r.backupDir),l=[];try{for(let c of n)s.has(c.path)||(i.push(...Ie(S.dirname(c.path))),u.mkdirSync(S.dirname(c.path),{recursive:!0}),o.push(c.path)),fe(c.path,c.content),s.has(c.path)&&l.push(c.path)}catch(c){let _=f=>{try{f()}catch{}};for(let f of l)_(()=>fe(f,s.get(f)));for(let f of o)_(()=>u.rmSync(f,{force:!0}));for(let f of[...new Set(i)].sort((m,N)=>N.length-m.length))_(()=>{u.existsSync(f)&&u.readdirSync(f).length===0&&u.rmdirSync(f)});throw c}let h=c=>S.relative(t,c);for(let c of o)d.success(`${h(c)} created`);for(let c of s.keys())d.success(`${h(c)} updated`);return{created:o,updated:[...s.keys()],backupDir:a}}function fe(e,t){let r=u.existsSync(e)?u.statSync(e):null;r&&u.accessSync(e,u.constants.W_OK);let s=`${e}.${Te(6).toString("hex")}.tmp`;try{u.writeFileSync(s,t,r?{mode:r.mode}:{}),u.renameSync(s,e)}catch(o){throw u.rmSync(s,{force:!0}),o}}function ke(e,t,r){if(!r||e.size===0)return null;for(let[s,o]of e){let i=S.join(r,S.relative(t,s));u.mkdirSync(S.dirname(i),{recursive:!0}),u.writeFileSync(i,o)}return r}function Ie(e){let t=[],r=e;for(;!u.existsSync(r);){t.unshift(r);let s=S.dirname(r);if(s===r)break;r=s}return t}import ge from"fs";import Ce from"path";var A=["mongoose","prisma"],G=".projectrc.json",W=e=>typeof e=="string"&&A.includes(e);function he(e){let t=Ce.join(e,G);if(!ge.existsSync(t))throw new p(`${G} not found. Run this command from the root of a project created with exp-node-server.`);let r;try{r=JSON.parse(ge.readFileSync(t,"utf-8"))}catch{throw new p(`${G} is not valid JSON.`)}let s=r?.database;if(!W(s))throw new p(`Invalid "database" in ${G}. Expected one of: ${A.join(", ")}.`);return s}async function ye(e,{cwd:t=process.cwd(),force:r=!1,auth:s=!1}={}){let o=he(t),i=g.join(t,"src/app/modules",e);if(w.existsSync(i)&&!r)throw new p(`Module '${e}' already exists at ${g.relative(t,i)}. Use --force to overwrite it.`);Fe(t,e);let n=(m,N)=>({path:g.join(i,`${e}.${m}`),content:N}),a=[n("controller.ts",Z(e)),n("route.ts",Q(e,{auth:s})),n("validation.ts",Y(e)),n("swagger.ts",X(e))];o==="mongoose"?a.push(n("interface.ts",ee(e)),n("schema.ts",te(e)),n("service.ts",re(e))):a.push(n("service.ts",ie(e)),{path:g.join(t,"prisma/schema",`${e}.prisma`),content:ne(e)});let l=g.join(t,"tests/routes",`${e}.test.ts`),h=De.some(m=>w.existsSync(g.join(t,m)));h&&a.push({path:l,content:o==="mongoose"?se(e,{auth:s}):ae(e,{auth:s})});let c=[$e(g.join(t,"src/routes.ts"),m=>le(m,e),"Route registered"),$e(g.join(t,"src/swaggerOptions.ts"),m=>ue(m,e),"Swagger docs registered")];for(let{file:m}of c)m&&a.push(m);let _=r?g.join(t,Oe,new Date().toISOString().replace(/[:.]/g,"-")):void 0,f=me(a,t,{backupDir:_});for(let{report:m}of c)m();h||d.info(v.dim("  no vitest config found, skipped tests/routes test")),f.backupDir&&d.warn(`${f.updated.length} existing file(s) were overwritten. Previous versions: ${g.relative(t,f.backupDir)}`),o==="prisma"&&(d.info(v.blue(`
+Next, run:`)),d.info(v.yellow("  npx prisma generate && npx prisma migrate dev"))),h&&d.info(v.blue(`
+Test it with: npm test -- tests/routes/${e}.test.ts`)),d.info(v.green(`
+Module '${e}' created successfully`))}var De=["vitest.config.ts","vitest.config.mts","vitest.config.js"],Oe=".exp-node-server/backups";function Fe(e,t){let r=g.join(e,"src/routes.ts");if(w.existsSync(r)){let i=H(w.readFileSync(r,"utf-8")).find(n=>n.path===`/${t}`&&n.route!==`${t}Route`);if(i)throw new p(`The path '/${t}' is already used by ${i.route??"another router"} in src/routes.ts. Pick another module name.`)}let s=g.join(e,"src/app/modules");if(!w.existsSync(s))return;let o=new RegExp(`['"\`]/api/${t}(/[^'"\`]*)?['"\`]\\s*:`);for(let i of w.readdirSync(s)){if(i===t)continue;let n=g.join(s,i,`${i}.swagger.ts`);if(w.existsSync(n)&&o.test(w.readFileSync(n,"utf-8")))throw new p(`The path '/api/${t}' is already documented by the '${i}' module. Pick another module name.`)}}function $e(e,t,r){let s=g.basename(e);if(!w.existsSync(e))return{file:null,report:()=>d.warn(`${s} not found, skipping registration`)};let o=t(w.readFileSync(e,"utf-8"));switch(o.status){case"updated":return{file:{path:e,content:o.content},report:()=>d.success(`${r} in ${s}`)};case"unchanged":return{file:null,report:()=>d.info(v.dim(`  already registered in ${s}`))};case"failed":return{file:null,report:()=>d.warn(`Couldn't update ${s} (${o.reason}). Register it manually.`)}}}function we(e){if(!e)return null;let t=e.trim().toLowerCase().replace(/[-\s]+/g,"_");return/^[a-z][a-z_]*$/.test(t)?t:null}function xe(e){if(!e)return null;let t=e.trim().toLowerCase().replace(/\s+/g,"-");return/^[a-z0-9][a-z0-9-]*$/.test(t)?t:null}var y="exp-node-server",Ne=`
+${B.bold(y)} - scaffold Express + TypeScript APIs with Mongoose or Prisma
 
-${S.bold("Usage")}
-  npx ${u} create <project-name> [--template <mongoose|prisma>]
-  npx ${u} generate <module-name> [--force]
+${B.bold("Usage")}
+  npx ${y} create <project-name> [--template <mongoose|prisma>]
+  npx ${y} generate <module-name> [--auth] [--force]
 
-${S.bold("Commands")}
+${B.bold("Commands")}
   create, -c <name>      Create a new project from a template
   generate, -g <name>    Generate a module in the current project
 
-${S.bold("Options")}
-  -t, --template <name>  Template to use with create (${b.join(" | ")})
+${B.bold("Options")}
+  -t, --template <name>  Template to use with create (${A.join(" | ")})
+  -a, --auth             Generated routes require a signed-in user (default: public)
   -f, --force            Overwrite an existing module when generating
   -h, --help             Show this help
   -v, --version          Show version
 
-${S.bold("Examples")}
-  npx ${u} -c my-api
-  npx ${u} create my-api --template prisma
-  npx ${u} -g order
-`;async function ne(e){let{values:t,positionals:r}=Se(e);if(t.version){console.log("2.0.0");return}let s=je(t,r);if(t.help||!s){console.log(be);return}if(s.kind==="create"){let i=oe(s.name);if(!i)throw new c(s.name?`Invalid project name '${s.name}'. Use letters, numbers and dashes.`:"Project name required. Example: exp-node-server -c my-api");let{template:o}=t;if(o!==void 0&&!I(o))throw new c(`Unknown template '${o}'. Use one of: ${b.join(", ")}.`);await k(i,{template:o});return}let n=se(s.name);if(!n)throw new c(s.name?`Invalid module name '${s.name}'. Use letters and underscores, starting with a letter.`:"Module name required. Example: exp-node-server -g order");await re(n,{force:t.force??!1})}function Se(e){try{return xe({args:e,allowPositionals:!0,strict:!0,options:{create:{type:"string",short:"c"},generate:{type:"string",short:"g"},template:{type:"string",short:"t"},force:{type:"boolean",short:"f"},help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"}}})}catch(t){let r=t instanceof Error?t.message:String(t);throw new c(`${r}
-Run '${u} --help' for usage.`)}}function je(e,t){if(e.create!==void 0&&e.generate!==void 0)throw new c("Use either -c (create) or -g (generate), not both.");if((e.create!==void 0||e.generate!==void 0)&&t.length>0)throw new c(`Unexpected argument '${t[0]}'. Run '${u} --help' for usage.`);if(e.create!==void 0)return{kind:"create",name:e.create};if(e.generate!==void 0)return{kind:"generate",name:e.generate};let[r,s,...n]=t;if(r===void 0)return null;if(n.length>0)throw new c(`Unexpected argument '${n[0]}'. Run '${u} --help' for usage.`);switch(r){case"create":case"c":return{kind:"create",name:s};case"generate":case"g":return{kind:"generate",name:s};default:throw new c(`Unknown command '${r}'. Run '${u} --help' for usage.`)}}try{await ne(process.argv.slice(2))}catch(e){e instanceof c?(a.error(e.message),process.exitCode=e.exitCode):e instanceof Error&&e.name==="ExitPromptError"?process.exitCode=130:(a.error("Unexpected error:"),console.error(e),process.exitCode=1)}
+${B.bold("Examples")}
+  npx ${y} -c my-api
+  npx ${y} create my-api --template prisma
+  npx ${y} -g order
+  npx ${y} -g order --auth
+`;async function _e(e){let{values:t,positionals:r}=Ue(e);if(t.version){console.log("2.1.0");return}let s=Me(t,r);if(t.help||!s){console.log(Ne);return}if(s.kind==="create"){if(t.auth||t.force)throw new p("--auth and --force only apply to generate.");let i=xe(s.name);if(!i)throw new p(s.name?`Invalid project name '${s.name}'. Use letters, numbers and dashes.`:"Project name required. Example: exp-node-server -c my-api");let{template:n}=t;if(n!==void 0&&!W(n))throw new p(`Unknown template '${n}'. Use one of: ${A.join(", ")}.`);await K(i,{template:n});return}let o=we(s.name);if(!o)throw new p(s.name?`Invalid module name '${s.name}'. Use letters and underscores, starting with a letter.`:"Module name required. Example: exp-node-server -g order");await ye(o,{force:t.force??!1,auth:t.auth??!1})}function Ue(e){try{return Ge({args:e,allowPositionals:!0,strict:!0,options:{create:{type:"string",short:"c"},generate:{type:"string",short:"g"},template:{type:"string",short:"t"},force:{type:"boolean",short:"f"},auth:{type:"boolean",short:"a"},help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"}}})}catch(t){let r=t instanceof Error?t.message:String(t);throw new p(`${r}
+Run '${y} --help' for usage.`)}}function Me(e,t){if(e.create!==void 0&&e.generate!==void 0)throw new p("Use either -c (create) or -g (generate), not both.");if((e.create!==void 0||e.generate!==void 0)&&t.length>0)throw new p(`Unexpected argument '${t[0]}'. Run '${y} --help' for usage.`);if(e.create!==void 0)return{kind:"create",name:e.create};if(e.generate!==void 0)return{kind:"generate",name:e.generate};let[r,s,...o]=t;if(r===void 0)return null;if(o.length>0)throw new p(`Unexpected argument '${o[0]}'. Run '${y} --help' for usage.`);switch(r){case"create":case"c":return{kind:"create",name:s};case"generate":case"g":return{kind:"generate",name:s};default:throw new p(`Unknown command '${r}'. Run '${y} --help' for usage.`)}}try{await _e(process.argv.slice(2))}catch(e){e instanceof p?(d.error(e.message),process.exitCode=e.exitCode):e instanceof Error&&e.name==="ExitPromptError"?process.exitCode=130:(d.error("Unexpected error:"),console.error(e),process.exitCode=1)}