dartapi 0.2.2

DartAPI is a CLI-driven project generator and toolset for building typed REST APIs in Dart.

0.2.2

Refresh-token reuse now actually terminates the session.

• Generated projects depend on dartapi_core ^0.6.0.
• The generated onRefreshTokenReuse handler previously only printed a warning (the comment said "revoke the whole session", but the framework had no API for it). It now calls the new jwtService.revokeAllForUser(sub) — every outstanding access and refresh token for the affected user, including any an attacker just minted, becomes invalid and a fresh login is required. Applies to both the --full and --with=auth scaffolds.
• Scaffold comments now spell out the multi-process caveat: behind --isolates=N or multiple instances, InMemoryTokenStore must be replaced with a shared backend overriding revokeIfActive and revokeSubject/subjectRevocationCutoff.

0.2.1

• Generated projects depend on dartapi_core ^0.5.0 (OpenAPI overhaul).
• Generated controllers use the new requestFields: pattern — the same FieldSet that validates the request now also produces its OpenAPI schema, and 422/400 error responses are documented automatically. Swagger UI/ReDoc assets are version-pinned, enableDocs ordering no longer matters, and every operation gets an operationId for clean client code generation.

0.2.0

Generated projects are production-deployable out of the box.

• Generated projects now depend on dartapi_core ^0.4.0 and dartapi_db ^0.1.0:
  • Graceful shutdown is built in — SIGTERM drains in-flight requests instead of aborting them (correct behaviour under Kubernetes/Cloud Run rolling deploys), with onShutdown hooks running after the drain.
  • Rate limiting keys by the real socket IP; the full template documents the trustProxy: true switch for deployments behind a proxy/load balancer.
• GET /health now checks the database: when a DB is configured, generated apps wire db.ping() into enableHealthCheck(checks: [...]) and report "degraded" when the database stops answering (both full and --with=db scaffolds).
• Every generated project ships a GitHub Actions CI workflow (.github/workflows/ci.yaml): format check, dart analyze --fatal-infos, and dart test on every push/PR.

0.1.52

• Update generated projects to dartapi_core ^0.3.0 (secure token revocation and refresh rotation):
  • auth_service.dart.tmpl: login and refresh now issue tokens via JwtService.generateTokenPair — the deprecated generateRefreshToken(accessToken: ...) (removal planned for dartapi_core 0.4.0) is no longer used.
  • Refresh endpoint returns a full new token pair: refresh tokens are single-use when a TokenStore is configured (verifyRefreshToken consumes them atomically), so the old token can no longer be re-issued unchanged.
  • Logout revokes both the access token and (when sent in the request body as {"refreshToken": "..."}) the refresh token; revokeToken now verifies the token signature and returns Future<bool>.
  • Wire the new JwtService.onRefreshTokenReuse callback in bootstrap.dart.tmpl and the generated main.dart with a comment explaining it fires when an already-consumed refresh token is presented again (token-theft signal).
  • TokenStore is now a base class: comments in generated code explain to extend it (not implement), that revoke() gained a {Duration? ttl} parameter, and that distributed backends should override revokeIfActive with an atomic operation (e.g. Redis SET NX EX).
  • Generated auth tests: JwtService is constructed with an InMemoryTokenStore (required for revocation and rotation), refresh tests assert a rotated (different) refresh token and that reuse of a consumed token throws 401, and logout tests cover revoking both tokens.
• Use new dartapi_core APIs in generated projects:
  • app.configureLogging(format: LogFormat.json, excludePaths: [...]) — structured JSON request logs with health/metrics probes excluded.
  • app.start(address: '0.0.0.0', ...) — bind address is now explicit/configurable, with a comment pointing at await app.stop() for graceful programmatic shutdown.
• Generated README documents the rotated refresh response, single-use semantics, and that invalid/missing tokens receive 401 with a WWW-Authenticate: Bearer header (was 403 before dartapi_core 0.2.0).

0.1.51

• Fix --full generated projects: add import 'package:shelf/shelf.dart' to auth_controller.dart, files_controller.dart, notifications_controller.dart, product_controller.dart, stats_controller.dart, and user_controller.dart templates — Request and Response are not re-exported by dartapi_core, causing undefined-class errors.
• Fix ws_controller.dart.tmpl: change bare catch (_) to on Object catch (_) to satisfy the avoid_catches_without_on_clauses lint.
• Fix bootstrap.dart.tmpl: remove redundant import 'package:<project>/src/core/dartapi.dart' — DartAPI is already provided by the dartapi_core import, making it an unnecessary import warning.

0.1.50

• Bump generated dartapi_core dependency to ^0.1.9 and dartapi_db to ^0.0.15.
• Add Dockerfile to every generated project (both --minimal and --full) — multi-stage build producing a slim Debian runtime image.
• Run dart analyze after dart pub get during project scaffolding — analyzer warnings are printed so issues are surfaced immediately after dartapi create.

0.1.49

• Bump generated dartapi_core dependency to ^0.1.8 and dartapi_db to ^0.0.14.
• Bump generated project SDK constraint from ^3.7.0 to ^3.7.2.
• Fix _buildMainContent: dart:io is now imported whenever any feature flag is active (was only imported for --with=db), fixing a compile error in projects generated with --with=auth, --with=files, or --with=ws but without --with=db (_loadEnv uses Platform.environment).
• Fix auth_service_test.dart.tmpl: remove duplicate import 'package:dartapi_core/dartapi_core.dart'.
• Fix stats_controller.dart.tmpl: replace DateTime.now() uptime with Stopwatch.elapsed — immune to system clock adjustments.
• Fix user_service_test.dart.tmpl: add const to UserDTO(...) constructor calls.
• Bump dartapi SDK constraint to ^3.7.2, shelf to ^1.4.2, test to ^1.24.0.
• Dependency upgrades: test 1.31.0 → 1.31.1 and related transitive dev bumps.

0.1.48

• Update DTO templates to use FieldSet from dartapi_core ^0.1.4:
  • user_dto.dart.tmpl, login_dto.dart.tmpl, product_dto.dart.tmpl, resource_dto.dart.tmpl
  • Replaced manual static const schema = {...} with static Map<String, dynamic> get schema => fields.toJsonSchema().
  • Replaced individual verifyKey calls in fromJson with fields.validate(json).
• Bump minimum dartapi_core dependency to ^0.1.4.

0.1.47

• Fix generated hello_controller.dart: replace non-existent ApiRoute.get() factory with ApiRoute(method: ApiMethod.get, typedHandler:)
• Fix bootstrap.dart ambiguous AppConfig import: hide AppConfig from dartapi_core so the project's own subclass takes precedence
• Remove duplicate dartapi_core imports in auth_controller, notifications_controller, stats_controller, auth_service, auth_service_test templates
• Fix UploadedFile.readBytes() call in files_controller: use .bytes property instead
• Remove unnecessary ! null-assertion on _jwtService inside guarded if (_jwtService != null) checks across files_controller, user_controller, product_controller, ws_controller
• Remove stray package:shelf/shelf.dart imports from controller templates; add shelf: ^1.4.2 as a direct dependency in the generated pubspec.yaml
• Add dart pub get after project scaffold in dartapi create

0.1.46

• Bump generated dartapi_core dep to ^0.1.2 (adds ServiceRegistry DI container)
• Update bootstrap.dart.tmpl to use the registry pattern: app.register<T>(), app.registerSingleton<T>(), app.get<T>() replace manual constructor threading

0.1.45

• Add --minimal (default), --full, and --with=<features> flags to dartapi create
  • dartapi create my_app — minimal scaffold: hello controller + bare server, one dep (dartapi_core)
  • dartapi create my_app --full — full kitchen-sink scaffold (current default behaviour)
  • dartapi create my_app --with=auth — minimal + JWT auth wiring
  • dartapi create my_app --with=db — minimal + database CRUD (user/product repositories, migrations)
  • dartapi create my_app --with=auth,db — minimal + both; JwtService wired into user/product controllers
  • dartapi create my_app --with=files — minimal + file upload controller
  • dartapi create my_app --with=ws — minimal + WebSocket echo controller
  • --with= features are composable: --with=auth,db,files,ws equals --full without stats/notifications
• Add Feature enum (auth, db, files, ws) and kAllFeatures constant
• Refactor CreateCommandConstants.directories() and .files() to accept {Set<Feature> features, bool full}
• Add hello_controller.dart.tmpl — single GET /hello endpoint used by the minimal scaffold
• Add readme_minimal.md.tmpl — short README for minimal projects
• Make JwtService optional (JwtService?) in UserController, ProductController, FilesController, and WsController templates — auth middleware only applied when a JwtService is provided
• pubspec.yaml for generated projects is now built programmatically based on features (no template duplication)
• 119 tests passing (30 new tests across all --with= combinations and cross-mode invariants)

0.1.44

• Replace dartapi_auth with dartapi_core ^0.1.1 in generated pubspec.yaml — auth is now part of dartapi_core
• Update all generated template imports from package:dartapi_auth/dartapi_auth.dart to package:dartapi_core/dartapi_core.dart

0.1.43

• Update templates to import DartAPI, RouterManager, AppConfig, loadEnvFile, and mergeEnv from dartapi_core ^0.1.0 instead of generating them as project files
• Remove router.dart generation — RouterManager is now in dartapi_core
• Generated AppConfig extends core.AppConfig (only overrides dbName with the project name)
• Generated env_loader.dart re-exports loadEnvFile/mergeEnv from dartapi_core
• Remove shelf_cors_headers and shelf_router from generated pubspec.yaml (now transitive via dartapi_core)

0.1.42

• Upgrade lints from ^5.1.1 to ^6.1.0
• Bump generated deps to latest: dartapi_auth ^0.0.10, dartapi_core ^0.0.27, dartapi_db ^0.0.12, shelf ^1.4.2, shelf_router ^1.1.4, test ^1.24.0, lints ^6.1.0
• Add shelf_web_socket ^3.0.0 and web_socket_channel ^3.0.3 to generated pubspec.yaml (required by WebSocket controller)
• Tighten generated SDK constraint to ^3.7.0

0.1.41

• Bump generated dartapi_core dep to ^0.0.26 (fix: /docs and other small responses crash with "read method can only be called once" when compression middleware is active)

0.1.40

• Add NotificationsController — GET /notifications/stream streams Server-Sent Events (SSE) via sseResponse()
• Add FilesController — POST /files/upload (multipart) and GET /files with background post-upload task
• Add WsController — WebSocket echo-chat at /ws/chat with JWT auth via webSocketRoutes
• Add StatsController — GET /admin/stats and GET /admin/info protected by apiKeyMiddleware (X-Admin-Key header)
• Add bootstrap.dart — createApp(AppConfig, {DartApiDB? db}) consolidates all wiring (JWT, token store, repos, services, middleware, controllers, built-in endpoints); generated main.dart is now ~60 lines
• Simplify generated main.dart: only env loading, port/isolates parsing, optional DB connection, createApp() call, shutdown hook, and app.start()
• Bump generated dartapi_core dep to ^0.0.25

0.1.39

• Generated project no longer crashes on dartapi run when no database is configured
• Add DB_ENABLED env var (default false in dev, true in staging/production); when false the app starts with in-memory repositories — no PostgreSQL needed
• Generated main.dart conditionally creates DB connection and runs migrations only when DB_ENABLED=true; falls back to InMemoryUserRepository / InMemoryProductRepository otherwise
• app.onShutdown uses db?.close() (db is now nullable)
• AppConfig.dbEnabled getter reads DB_ENABLED

0.1.38

• Fix generated bin/main.dart: MigrationRunner(db).run() → .migrate() (correct method name)
• Fix generated bin/main.dart: add // ignore: avoid_print on all startup debug print calls
• Fix generated lib/src/dto/user_dto.dart: validateAll now uses the correct Map<String, void Function()> signature; EmailValidator now receives its required message argument
• Fix generated test/services/user_service_test.dart: UserDTO(...) constructors are now const
• Fix generated lib/src/config/app_config.dart: wrap .env.<APP_ENV> in backticks in doc comment to suppress HTML angle-bracket warning

0.1.37

• Generated project upgraded to production-grade scaffold:
  • Full CRUD for Users and Products (GET list, GET by id, POST, PUT, DELETE) with 404 guards
  • Controller → Service → Repository enterprise architecture; InMemoryXxxRepository for dev/tests, DbXxxRepository for production
  • Multi-field validation in UserDTO.fromJson via validateAll (collects all errors before throwing 422)
  • Per-route 5-minute cache on GET /products with X-Cache: HIT/MISS header
  • Background task demo on POST /products (fires after 201 response is delivered)
  • POST /auth/logout endpoint that revokes the access token via InMemoryTokenStore
  • SQL migration files 0001_create_users_table.sql and 0002_create_products_table.sql generated in migrations/
  • Comprehensive README.md covering all features, full project structure, all running modes, complete API reference with request/response examples, middleware pipeline diagram, Prometheus metrics, production checklist, and extending guide
  • Full UserService test suite — getUsers (pagination, empty page), getUser (404), createUser, updateUser (success + reflect + 404), deleteUser (success + list + 404)
  • Auth test suite updated with logout group — verifies revoked token fails verification and logout completes without throw

0.1.36

• Add dartapi build [--output=<name>] [--docker] — AOT-compiles the project to a self-contained native binary via dart compile exe; --docker writes a multi-stage Dockerfile that produces a minimal debian:bookworm-slim runtime image
• Add dartapi run --isolates=N — spawns N Dart isolates all bound to the same port (HttpServer.bind shared: true), using every CPU core
• Generated DartAPI.start() gains a shared: bool parameter for multi-isolate mode
• Generated DartAPI.enableMetrics() — registers GET /metrics (Prometheus text format) and adds metricsMiddleware to the pipeline
• Generated main.dart reads ISOLATES env var, spawns N−1 extra isolates, and passes shared: true to app.start()
• Bump generated dartapi_core dep to ^0.0.24

0.1.35

• Bump generated dartapi_core dep to ^0.0.22 (multi-field validation)
• Bump generated dartapi_auth dep to ^0.0.9 (refresh token rotation)

0.1.34

• Add dartapi generate resource <Name> — scaffolds a full CRUD resource: controller (GET list, GET by id, POST, PUT, DELETE), DTO with fromJson/toMap, and model with Serializable
• Generated controller uses pathParam<int>, queryParam<int>, PaginatedResponse, and returns null on DELETE for automatic 204 response
• Prints wiring instructions and next steps after generation

0.1.33

• Add dartapi run --env=<environment> — injects APP_ENV into the server process (dartapi run --env=staging)
• Combine with --watch: dartapi run --env=dev --watch
• Bump generated dartapi_core dep to ^0.0.21

0.1.32

• Move generated env files from project root into env/ subdirectory — env/.env.dev, env/.env.staging, env/.env.uat, env/.env.production, env/.env.example
• Update generated main.dart to load from env/.env and env/.env.<APP_ENV>
• Update generated .gitignore to exclude env/.env* (keeps env/.env.example committed)
• Add dartapi run --watch — watches lib/ and bin/ for .dart file changes and auto-restarts the server (500 ms debounce)

0.1.31

• dartapi generate controller now prints wiring instructions — shows the import and app.addControllers([...]) call to add to bin/main.dart
• Bump generated dartapi_core dep to ^0.0.20 (fixes bool/num response serialization)

0.1.30

• Add generated README.md to scaffolded projects — covers project structure, per-environment run commands, environment variable reference, API endpoint table, migration and test commands
• Fix CORS: generated DartAPI class now accepts corsOrigin and uses config.corsOrigin instead of hardcoded '*'
• Add AppConfig.validateForProduction() — warns at startup when production runs with development JWT secrets

0.1.29

• Fix: replace dotenv external dependency with a built-in env_loader.dart (no version-resolution issues, zero extra deps)
• Generated lib/src/config/env_loader.dart provides loadEnvFile(path) and mergeEnv(sources) — handles comments, inline comments, and quoted values

0.1.28

• Fix: dartapi create now runs dart pub get automatically after scaffolding — packages are resolved immediately and IDEs show no missing-import errors

0.1.27

• Fix: generated AuthController test used username: 'admin' but controller checks [e-mail] — corrected to match
• Add multi-environment support to generated projects: .env.dev, .env.staging, .env.uat, .env.production each scaffolded with appropriate defaults
• Add .env.example (committed) documenting all available environment variables
• Add dotenv: ^4.2.1 to generated pubspec.yaml — .env and .env.<APP_ENV> are loaded at startup
• Generated main.dart now loads DotEnv before AppConfig, prints startup info in debug mode, and supports --port=N alongside --port N
• Generated AppConfig now has AppEnvironment enum, isDev/isStaging/isUat/isProduction helpers, per-env smart defaults for debug, logLevel, jwtAccessExpiry, dbPoolSize, and corsOrigin
• Add .gitignore to generated projects (excludes .env.* files, keeps .env.example)

0.1.26

• Bump generated dartapi_core dep to ^0.0.19, dartapi_auth to ^0.0.8, dartapi_db to ^0.0.10

0.1.25

• Add test/ suite: utils_test.dart, create_command_constants_test.dart, generate_controller_test.dart, generate_migration_test.dart
• Add dart_test.yaml with concurrency: 1 to prevent CWD conflicts across test files
• Tests cover: StringCasingExtension, template placeholder substitution, scaffolded file tree, controller generation, and migration numbering

0.1.24

• Add AppConfig (lib/src/config/app_config.dart) to generated projects — typed env var config via EnvConfig
• Generated main.dart reads DB and JWT credentials from AppConfig instead of hardcoded strings
• Generated DartAPI class now exposes enableHealthCheck() which registers GET /health
• Bump generated dartapi_core dep to ^0.0.18

0.1.23

• Fix: generated AuthController.refreshToken now parses request body as JSON instead of URL-encoded form data

0.1.22

• Fix: remove stale bin/<name>.dart and lib/<name>.dart generated by dart create (caused avoid_print warning)
• Fix: page and limit in generated UserController.getAllUsers are now commented out to avoid unused_local_variable warning
• Fix: add const to ApiException throws in generated AuthController and ProductController (prefer_const_constructors)

0.1.21

• Add onStartup/onShutdown lifecycle hooks to generated DartAPI class
• Shutdown hooks run on SIGINT and SIGTERM (SIGTERM skipped on Windows)
• Bump generated dartapi_core dep to ^0.0.16

0.1.20

• Extract all scaffolded file contents into .tmpl files under lib/templates/
• Add TemplateEngine for Isolate.resolvePackageUri-based template loading and {{placeholder}} substitution
• CreateCommandConstants.files() is now async; createProject and generateController are now async
• dartapi generate controller uses controller.dart.tmpl instead of an inline string

0.1.19

• Bump generated dartapi_core dep to ^0.0.14
• Generated RouterManager now registers controller.webSocketRoutes via shelf_router

0.1.18

• Bump generated dartapi_core dep to ^0.0.13

0.1.17

• Improve README: remove emojis, fix broken content, add MySQL example

0.1.16

• Fix generated AuthController: invalid credentials now returns 401 (was 500); missing/invalid refresh token now returns 400/401
• Bump generated dartapi_core dep to ^0.0.11

0.1.15

• Bump generated dartapi_core dep to ^0.0.10

0.1.14

• Bump generated dartapi_auth dep to ^0.0.6
• Bump generated dartapi_db dep to ^0.0.8
• Generated AuthController.refreshToken now correctly awaits jwtService.verifyRefreshToken()

0.1.13

• Add dartapi generate migration <name> — creates a numbered .sql file in migrations/
• Add dartapi db migrate [--dry-run] — runs bin/migrate.dart inside the project to apply pending migrations

0.1.12

• Bump generated dartapi_core dep to ^0.0.9
• Generated RouterManager now tracks all collected routes via collectedRoutes
• Generated DartAPI class now has enableDocs({title, version}) — call after addControllers() to serve /docs, /redoc, /openapi.json
• Generated main.dart now calls app.enableDocs(title: projectName, version: '1.0.0')
• Add dartapi docs [--port=<port>] [--out=<file>] CLI command to export OpenAPI spec from a running server

0.1.11

• Bump generated dartapi_core dep to ^0.0.7
• Generated UserController now demonstrates query params (page, limit) and statusCode: 201 on POST
• Generated ProductController now demonstrates path params (GET /products/<id>) and statusCode: 201 on POST

0.1.10

• Add step-by-step running instructions to README
• Add Postman testing guide for all generated endpoints (auth, users, products)

0.1.9

• Update generated project templates to use latest package versions (dartapi_db: ^0.0.7, dartapi_core: ^0.0.6, dartapi_auth: ^0.0.5)
• Generated main.dart now includes PoolConfig in DbConfig to enable connection pooling by default

0.1.8

• Fix dartapi run --port 8080 (space-separated) now works alongside --port=8080

0.1.7

• Add Documentation for Postgress for Generated Project
• Fixed issues related to Postgres parsing.

0.1.6

• upgrade Dartapi core

0.1.4

• Update Readme
• Fix Controller Generator

0.1.3

• Repo License Changes
• Fix Code Issues
• Add DartApi Core, Dartpi Db
• Improve Project scaffolding and structure.

0.1.1

• Add Stop and Reload Server Support.
• Add Demo test for controllers.

0.0.9

• Separate CORE logic to separeate DartApi_core package
• Add some linting rules

0.0.8

• Improve type safety for Api Request Response
• Implemented Common Serailization Validation
• Changed HTTP Methods.
• Add Meta Data for OpenAPi Implementation
• Add More logs

0.0.7

• CORS support

0.0.6

• dart format

0.0.5

✅ Auth Middleware Support - Add Auth Middleware support for each route. ✅ Auth Middleware Template - Add Auth Middleware template. ✅ Fix Middleware loggin - Fix a Middle ware logging issue which prevented logs on dartapi run ✅ Add Default to CLI

0.0.4

✅ Custom Middleware Support - Add Custom Middleware support for each route.

0.0.3

✅ Request Validation Middleware - Request Validation using MiddleWare support Added and template generated

0.0.2

✅ CLI Tool - Generate projects, controllers, and models using the dartapi CLI.

0.0.1

✅ Fast and lightweight - Minimal dependencies, optimized for speed.
✅ Easy to use - Simple setup and minimal boilerplate.
✅ Configurable port - Start the server with a custom port (--port=<number>).
✅ Dynamic routing - Automatically registers controllers and their routes.
✅ Middleware support - Includes logging and future authentication middleware.
✅ CLI Tool - Generate projects, controllers, and models using the dartapi CLI.