@agentrules/cli 0.2.0 → 0.2.1

package/dist/index.js

@@ -162,6 +162,21 @@ function getInstallPath({ platform, type, name, scope = "project" }) {
 	if (template.includes("{name}") && !name) throw new Error(`Missing name for install path: platform="${platform}" type="${type}" scope="${scope}"`);
 	return template.replace("{platformDir}", rootDir).replace("{name}", name ?? "");
 }
+/**
+* Get the relative install path for a type (without the root directory prefix).
+* Returns the path relative to the platform's root directory.
+*
+* Example: For codex instruction with scope="global", returns "AGENTS.md"
+* (not "~/.codex/AGENTS.md")
+*/
+function getRelativeInstallPath({ platform, type, name, scope = "project" }) {
+	const typeConfig = getTypeConfig(platform, type);
+	if (!typeConfig) return null;
+	const template = scope === "project" ? typeConfig.project : typeConfig.global;
+	if (!template) return null;
+	if (template.includes("{name}") && !name) throw new Error(`Missing name for install path: platform="${platform}" type="${type}" scope="${scope}"`);
+	return template.replace("{platformDir}/", "").replace("{platformDir}", "").replace("{name}", name ?? "");
+}
 
 //#endregion
 //#region ../core/src/platform/utils.ts
@@ -3757,7 +3772,7 @@ function normalizeBundleBase(base) {
 }
 function getBundlePath(base, slug, platform, version$2) {
 	const prefix = base ? `${base}/` : "";
-	return `${prefix}${STATIC_BUNDLE_DIR}/${slug}/${platform}/${version$2}`;
+	return `${prefix}${STATIC_BUNDLE_DIR}/${slug}/${version$2}/${platform}.json`;
 }
 function ensureKnownPlatform(platform, slug) {
 	if (!isSupportedPlatform(platform)) throw new Error(`Unknown platform "${platform}" in ${slug}. Supported: ${PLATFORM_IDS.join(", ")}`);
@@ -5534,7 +5549,7 @@ function resolveInstallTarget(platform, type, name, options) {
 			mode: "global",
 			platform,
 			platformDir,
-			globalDir,
+			globalDir: globalRoot,
 			type,
 			name,
 			label: `global path ${globalRoot}`
@@ -5558,17 +5573,20 @@ function resolveInstallTarget(platform, type, name, options) {
 *
 * - Project scope: use file.path directly
 * - Global scope:
-*   - If path starts with platformDir: transform to globalDir
-*   - If type is "multi" and path doesn't start with platformDir: skip (return null)
-*   - Otherwise: use getInstallPath for root-level files (e.g., instruction)
+*   - If path starts with platformDir: strip prefix (target.root is already globalDir)
+*   - If typed bundle and root file: use type template to get relative path
+*   - If freeform bundle and root file: use path as-is (relative to globalDir)
+*
+* IMPORTANT: For global scope, this returns RELATIVE paths only.
+* The caller combines with target.root (which is the expanded globalDir).
 */
 function resolvePath(filePath, target) {
-	const { platform, platformDir, globalDir, type, name, mode } = target;
+	const { platform, platformDir, type, name, mode } = target;
 	if (mode === "project") return filePath;
 	const platformDirPrefix = `${platformDir}/`;
-	if (filePath.startsWith(platformDirPrefix)) return `${globalDir}/${filePath.slice(platformDirPrefix.length)}`;
-	if (!type) return null;
-	return getInstallPath({
+	if (filePath.startsWith(platformDirPrefix)) return filePath.slice(platformDirPrefix.length);
+	if (!type) return filePath;
+	return getRelativeInstallPath({
 		platform,
 		type,
 		name,
@@ -5578,12 +5596,22 @@ function resolvePath(filePath, target) {
 function computeDestinationPath(pathInput, target) {
 	const normalized = normalizeBundlePath(pathInput);
 	if (!normalized) throw new Error(`Unable to derive destination for ${pathInput}. The computed relative path is empty.`);
+	validateBundlePath(normalized, pathInput);
 	const resolvedPath = resolvePath(normalized, target);
 	if (resolvedPath === null) return null;
 	const destination = resolve(target.root, resolvedPath);
 	ensureWithinRoot(destination, target.root);
 	return destination;
 }
+/**
+* Validate bundle path for dangerous patterns.
+* Throws if path contains traversal or home directory references.
+*/
+function validateBundlePath(normalized, original) {
+	if (normalized.includes("..")) throw new Error(`Refusing to install file with path traversal: ${original}`);
+	if (normalized.startsWith("~")) throw new Error(`Refusing to install file with home directory reference: ${original}`);
+	if (normalized.includes("/~/") || normalized.includes("\\~\\")) throw new Error(`Refusing to install file with embedded home directory reference: ${original}`);
+}
 function parseInput(input, explicitPlatform, explicitVersion) {
 	let normalized = input.toLowerCase().trim();
 	let parsedVersion;
@@ -6563,11 +6591,13 @@ async function buildRegistry(options) {
 	await mkdir(outputDir, { recursive: true });
 	const indent$1 = compact ? void 0 : 2;
 	for (const bundle of result.bundles) {
-		const bundleDir = join(outputDir, STATIC_BUNDLE_DIR, bundle.slug, bundle.platform);
-		await mkdir(bundleDir, { recursive: true });
 		const bundleJson = JSON.stringify(bundle, null, indent$1);
-		await writeFile(join(bundleDir, bundle.version), bundleJson);
-		await writeFile(join(bundleDir, LATEST_VERSION), bundleJson);
+		const versionedDir = join(outputDir, STATIC_BUNDLE_DIR, bundle.slug, bundle.version);
+		await mkdir(versionedDir, { recursive: true });
+		await writeFile(join(versionedDir, `${bundle.platform}.json`), bundleJson);
+		const latestDir = join(outputDir, STATIC_BUNDLE_DIR, bundle.slug, LATEST_VERSION);
+		await mkdir(latestDir, { recursive: true });
+		await writeFile(join(latestDir, `${bundle.platform}.json`), bundleJson);
 	}
 	for (const rule of result.rules) {
 		const ruleJson = JSON.stringify(rule, null, indent$1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentrules/cli",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "author": "Brian Cheung <bcheung.dev@gmail.com> (https://github.com/bcheung)",
   "license": "MIT",
   "homepage": "https://agentrules.directory",
@@ -53,7 +53,7 @@
     "clean": "rm -rf node_modules dist .turbo"
   },
   "dependencies": {
-    "@agentrules/core": "0.2.0",
+    "@agentrules/core": "0.2.1",
     "@clack/prompts": "^0.11.0",
     "chalk": "^5.4.1",
     "commander": "^12.1.0",