@basaltkit/cli 1.2.3 → 1.2.5

package/README.md

@@ -95,10 +95,10 @@ Without registering anything, `runCli` always provides:
 | `basalt schedule:list` | Lists scheduled tasks and their cron expressions (read from the `schedule:entries` bucket, populated by `@basaltkit/scheduler`) |
 | `basalt dev [--entry] [--worker] [--queue] [--no-routes]` | Runs the app with watch + restart, **prints the route table on boot**, and with `--worker` also starts a watched `queue:work` alongside it (server + worker in one command). Delegates watching to `tsx watch` / `node --watch`. |
 | `basalt upgrade [--dry] [--only=<id>]` | Applies framework upgrade codemods (ships the `@machize/*` → `@basaltkit/*` scope rename; `--dry` previews) |
-| `basalt publish [<id>] [--force]` | Copies a bundled stub group into the app — `dockerfile`, `ci`, `editorconfig` (run with no id to list) |
+| `basalt publish [<id>] [--force]` | Copies a bundled stub group into the app — `dockerfile` (plus a `.dockerignore` keeping `.env` and keys out of the image), `ci`, `editorconfig` (run with no id to list) |
 
 If you also install `@basaltkit/generator`, you gain the `make:*` commands. Feature
-plugins register their own: `queue:work|stats|retry` (`@basaltkit/queue`),
+plugins register their own: `queue:work|stats|retry|jobs` (`@basaltkit/queue`),
 `tenant:list|create|migrate|seed|run` (`@basaltkit/tenancy`), `generate:docs`
 (`@basaltkit/http`), and `mail:preview` (`@basaltkit/mailer`).
 

package/dist/publish.js

@@ -14,6 +14,26 @@ COPY . .
 EXPOSE 3000
 CMD ["node", "dist/main.js"]
 `;
+/**
+ * Published with the Dockerfile: its \`COPY . .\` would otherwise bake \`.env\`,
+ * private keys and VCS metadata into an image layer. Every rule is \`**\/\`-prefixed:
+ * .dockerignore patterns are anchored at the context root, so a bare \`.env\`
+ * or \`*.pem\` would still let \`prisma/.env\` or \`certs/server.key\` through.
+ */
+const DOCKERIGNORE = `**/.env
+**/.env.*
+!**/.env.example
+**/.npmrc
+**/.git
+**/node_modules
+**/coverage
+**/*.log
+**/*.pem
+**/*.key
+**/*.p12
+**/*.pfx
+**/.DS_Store
+`;
 const CI_WORKFLOW = `name: ci
 on:
   push: { branches: [main] }
@@ -42,7 +62,14 @@ trim_trailing_whitespace = true
 `;
 /** Stubs bundled with the CLI. Apps can register more via the metadata bucket. */
 export const PUBLISHABLES = [
-    { id: 'dockerfile', description: 'Production multi-stage Dockerfile', files: () => [{ path: 'Dockerfile', content: DOCKERFILE }] },
+    {
+        id: 'dockerfile',
+        description: 'Production multi-stage Dockerfile (+ .dockerignore keeping secrets out of the image)',
+        files: () => [
+            { path: 'Dockerfile', content: DOCKERFILE },
+            { path: '.dockerignore', content: DOCKERIGNORE },
+        ],
+    },
     { id: 'ci', description: 'GitHub Actions CI workflow', files: () => [{ path: '.github/workflows/ci.yml', content: CI_WORKFLOW }] },
     { id: 'editorconfig', description: 'Shared .editorconfig', files: () => [{ path: '.editorconfig', content: EDITORCONFIG }] },
 ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@basaltkit/cli",
-  "version": "1.2.3",
+  "version": "1.2.5",
   "engines": {
     "node": ">=22.5.0"
   },
@@ -21,9 +21,9 @@
     "@basaltkit/core": "^1.3.1"
   },
   "devDependencies": {
-    "@types/node": "^26.3.0",
+    "@types/node": "^26.5.1",
     "typescript": "^7.0.2",
-    "vitest": "^4.1.11",
+    "vitest": "^5.0.0",
     "@basaltkit/tsconfig": "^0.24.0"
   },
   "publishConfig": {