@odla-ai/cli 0.16.4 → 0.16.6

package/README.md

@@ -29,8 +29,8 @@ For a project you keep working in, install it as a dev dependency so the
 shorter `npx odla-ai` form works and the version is pinned by your lockfile:
 
 ```bash
-npm view @odla-ai/cli@0.16.4 version
-npm i -D --save-exact @odla-ai/cli@0.16.4
+npm view @odla-ai/cli@0.16.6 version
+npm i -D --save-exact @odla-ai/cli@0.16.6
 ```
 
 ## Prerequisites

package/dist/bin.cjs

@@ -2023,7 +2023,7 @@ function encodeAgentInput(message2) {
 `;
 }
 
-// ../harness/dist/chunk-NOBK6PCT.js
+// ../harness/dist/chunk-PHXQH4YM.js
 var import_child_process = require("child_process");
 var import_fs = require("fs");
 var import_promises2 = require("fs/promises");
@@ -2260,7 +2260,7 @@ var SKIP_WORKSPACE_DIRS = /* @__PURE__ */ new Set([
   "dist",
   "coverage"
 ]);
-var SECRET_WORKSPACE_FILE = /^(?:\.env(?:\..+)?|\.dev\.vars|credentials(?:\..+)?\.json|dev-token(?:\..+)?\.json)$/i;
+var SECRET_WORKSPACE_FILE = /^(?:\.env(?:\..+)?|\.dev\.vars|\.dev-token(?:\..+)?|credentials(?:\..+)?\.json|dev-token(?:\..+)?(?:\.json)?)$/i;
 function allowedWorkspacePath(relativePath) {
   const parts = relativePath.split("/");
   return !(0, import_path3.isAbsolute)(relativePath) && !relativePath.includes("\\") && !relativePath.includes("\0") && !parts.some((part) => !part || part === "." || part === ".." || SKIP_WORKSPACE_DIRS.has(part)) && !SECRET_WORKSPACE_FILE.test(parts.at(-1) ?? "");
@@ -2481,7 +2481,7 @@ async function captureGitDiff(root, maxBytes) {
   if (code !== 0 && code !== 1) {
     throw new Error(`git diff failed: ${Buffer.concat(stderr).toString("utf8").slice(0, 1e3)}`);
   }
-  return Buffer.concat(stdout).toString("utf8").replaceAll("a/baseline/", "a/").replaceAll("b/workspace/", "b/").replaceAll("--- a/baseline", "--- a").replaceAll("+++ b/workspace", "+++ b");
+  return Buffer.concat(stdout).toString("utf8").replaceAll("a/baseline/", "a/").replaceAll("a/workspace/", "a/").replaceAll("b/baseline/", "b/").replaceAll("b/workspace/", "b/").replaceAll("--- a/baseline", "--- a").replaceAll("+++ b/workspace", "+++ b");
 }
 async function stageWorkspace(source, options = {}) {
   const sourceDir = await (0, import_promises4.realpath)((0, import_path4.resolve)(source));
@@ -2540,7 +2540,7 @@ async function stageWorkspacePair(baselineSource, workspaceSource, options = {})
   }
 }
 
-// ../harness/dist/chunk-6J2ZETST.js
+// ../harness/dist/chunk-GMVZ4LZH.js
 var import_crypto = require("crypto");
 var import_promises5 = require("fs/promises");
 var import_path5 = require("path");
@@ -2877,7 +2877,7 @@ function validateSnapshot(snapshot, limits) {
   }
 }
 
-// ../harness/dist/chunk-6J2ZETST.js
+// ../harness/dist/chunk-GMVZ4LZH.js
 var import_child_process4 = require("child_process");
 var import_promises6 = require("fs/promises");
 var import_path6 = require("path");
@@ -3170,7 +3170,7 @@ function looksLikeDestination(value) {
   return /^(?:[a-z][a-z0-9+.-]*:\/\/|\/|\\\\)/i.test(text) || /^[\w.-]+\.[a-z]{2,}(?:[/:]|$)/i.test(text);
 }
 
-// ../harness/dist/chunk-6J2ZETST.js
+// ../harness/dist/chunk-GMVZ4LZH.js
 var import_crypto4 = require("crypto");
 async function digestStagedWorkspace(root, limits) {
   const files = [];