@biznetgio/neo-app 0.4.9 → 0.4.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biznetgio/neo-app",
-  "version": "0.4.9",
+  "version": "0.4.11",
   "description": "NEO App CLI — one-command agent onboarding, MCP server, and project ops for coding agents (Codex, Claude Code).",
   "type": "module",
   "bin": {
@@ -15,7 +15,8 @@
     "node": ">=18"
   },
   "scripts": {
-    "test": "node --test"
+    "test": "node --test",
+    "prepublishOnly": "node --test"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0"

package/src/deploySource.js

@@ -200,7 +200,13 @@ export async function deploySource(api, { projectId, src, name, port, build, env
     if (buildType && app.buildType && app.buildType !== buildType) patch.buildType = buildType;
     if (Object.keys(patch).length) {
       plan.push(`update "${svc}": ${Object.keys(patch).join(', ')}`);
-      if (!dryRun) { await api.put(`/api/v1/apps/${app.id}`, patch); log(`updated source config (${Object.keys(patch).join(', ')})`); }
+      if (!dryRun) {
+        const upd = await api.put(`/api/v1/apps/${app.id}`, patch);
+        // If the source-config update needs approval, STOP — deploying now would ship
+        // the OLD config while the change is still pending (JNG #96 re-validation).
+        if (pending(upd)) return { pending: true, approvalId: upd.data.approvalId };
+        log(`updated source config (${Object.keys(patch).join(', ')})`);
+      }
     } else {
       log(`service ${svc} exists — redeploying`);
     }

package/src/index.js

@@ -1,19 +1,7 @@
 // CLI entrypoint: parse args and dispatch. Keep this thin — logic lives in commands/.
 
 import { parseArgs } from 'node:util';
-import { readFileSync } from 'node:fs';
-import { fileURLToPath } from 'node:url';
-import { dirname, join } from 'node:path';
-import { c, fail } from './util.js';
-
-function version() {
-  try {
-    const p = join(dirname(fileURLToPath(import.meta.url)), '..', 'package.json');
-    return JSON.parse(readFileSync(p, 'utf8')).version;
-  } catch {
-    return 'dev';
-  }
-}
+import { c, fail, pkgVersion as version } from './util.js';
 
 const HELP = `${c.bold('neo-app')} — NEO App CLI for coding agents
 

package/src/mcp/server.js

@@ -9,6 +9,7 @@ import { ListToolsRequestSchema, CallToolRequestSchema } from '@modelcontextprot
 import { resolveConfig } from '../config.js';
 import { getCredential } from '../creds.js';
 import { NeoApi } from '../api.js';
+import { pkgVersion } from '../util.js';
 import { TOOLS } from './tools.js';
 
 export async function runMcpServer() {
@@ -19,7 +20,9 @@ export async function runMcpServer() {
     console.error(`[neo-app mcp] no credential for ${cfg.baseUrl} — run 'neo-app login' or set NEO_APP_TOKEN`);
   }
 
-  const server = new Server({ name: 'neo-app', version: '0.3.0' }, { capabilities: { tools: {} } });
+  // serverInfo.version MUST equal the packed npm artifact version (handoff 3.1):
+  // derive it from package.json, never hard-code it.
+  const server = new Server({ name: 'neo-app', version: pkgVersion() }, { capabilities: { tools: {} } });
 
   server.setRequestHandler(ListToolsRequestSchema, async () => ({
     tools: TOOLS.map((t) => ({

package/src/util.js

@@ -1,9 +1,23 @@
 // Small shared helpers: colored status lines, a config-file backup, and a PATH check.
 
-import { existsSync, copyFileSync } from 'node:fs';
+import { existsSync, copyFileSync, readFileSync } from 'node:fs';
 import { execFileSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
 import readline from 'node:readline';
 
+// The installed package version — the single source for `--version`, the MCP
+// handshake (serverInfo.version), and any other place that must report it.
+// Derived from the packed package.json so it always matches the npm artifact.
+export function pkgVersion() {
+  try {
+    const p = join(dirname(fileURLToPath(import.meta.url)), '..', 'package.json');
+    return JSON.parse(readFileSync(p, 'utf8')).version;
+  } catch {
+    return 'dev';
+  }
+}
+
 const useColor = process.stdout.isTTY && !process.env.NO_COLOR;
 const paint = (code, s) => (useColor ? `\x1b[${code}m${s}\x1b[0m` : s);