@tenderprompt/cli 0.1.20 → 0.1.21

package/dist/index.js

@@ -5,7 +5,7 @@ import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { generateTenderAppEnvTypes, validateTenderApp, } from '@tenderprompt/tender-app-validator';
+import { generateTenderAppEnvTypes, isForbiddenTenderAppRepoPath, isForbiddenTenderAppSecretPath, validateTenderApp, } from '@tenderprompt/tender-app-validator';
 import { collectTenderAppFiles } from "./local-files.js";
 const CLI_PACKAGE_NAME = '@tenderprompt/cli';
 const UNKNOWN_CLI_VERSION = '0.0.0';
@@ -5865,6 +5865,30 @@ function readPreviewUrlFromJob(job) {
 function readPublishedUrlFromJob(job) {
     return readObjectString(job?.result, 'publishedUrl');
 }
+function readReleaseGitRefFromResult(result) {
+    const releaseGitRef = readObject(readObject(result)?.releaseGitRef);
+    if (releaseGitRef?.type !== 'tag') {
+        return null;
+    }
+    const tagName = readObjectString(releaseGitRef, 'name');
+    const commitSha = readObjectString(releaseGitRef, 'commitSha');
+    if (!tagName && !commitSha) {
+        return null;
+    }
+    return {
+        tagName,
+        commitSha,
+    };
+}
+function formatPublishResultLines(result) {
+    const record = readObject(result);
+    const releaseGitRef = readReleaseGitRefFromResult(result);
+    return [
+        ...(readObjectString(record, 'publishedUrl') ? [`published_url: ${readObjectString(record, 'publishedUrl')}`] : []),
+        ...(releaseGitRef?.tagName ? [`release_tag: ${releaseGitRef.tagName}`] : []),
+        ...(releaseGitRef?.commitSha ? [`source_commit: ${releaseGitRef.commitSha}`] : []),
+    ];
+}
 function normalizeContextFilePath(filePath) {
     const normalized = path.posix.normalize(filePath.replaceAll('\\', '/')).replace(/^\/+/, '');
     if (!normalized || normalized === '.' || normalized.startsWith('../') || normalized.includes('/../')) {
@@ -5872,6 +5896,9 @@ function normalizeContextFilePath(filePath) {
     }
     return normalized;
 }
+function isForbiddenSourceExportPath(filePath) {
+    return isForbiddenTenderAppRepoPath(filePath) || isForbiddenTenderAppSecretPath(filePath);
+}
 function resolveContextOutputPath(root, relativePath) {
     const absolutePath = path.resolve(root, relativePath);
     const relativeFromRoot = path.relative(root, absolutePath);
@@ -5971,6 +5998,9 @@ async function collectArtifactWorkspaceSourceFiles(input) {
             if (!normalizedPath) {
                 continue;
             }
+            if (isForbiddenSourceExportPath(normalizedPath)) {
+                continue;
+            }
             if (entry.type === 'directory') {
                 queue.push(entry.path);
                 continue;
@@ -5996,7 +6026,11 @@ async function collectArtifactWorkspaceSourceFiles(input) {
 async function planSourceFiles(input) {
     const planned = [];
     for (const file of input.files) {
-        const absolutePath = resolveContextOutputPath(input.root, file.path);
+        const relativePath = normalizeContextFilePath(file.path);
+        if (!relativePath || isForbiddenSourceExportPath(relativePath)) {
+            continue;
+        }
+        const absolutePath = resolveContextOutputPath(input.root, relativePath);
         if (!absolutePath) {
             throw new Error(`Source file path escapes the target directory: ${file.path}`);
         }
@@ -6012,7 +6046,7 @@ async function planSourceFiles(input) {
             action = input.force ? 'overwrite' : 'conflict';
         }
         planned.push({
-            path: file.path,
+            path: relativePath,
             absolutePath,
             action,
             content: file.content,
@@ -7717,7 +7751,12 @@ async function postLifecycle(input) {
         input.io.stdout(JSON.stringify(result, null, 2));
     }
     else {
-        input.io.stdout([`app_id: ${input.command.artifactId}`, `operation: ${result.operation}`, 'status: completed'].join('\n'));
+        input.io.stdout([
+            `app_id: ${input.command.artifactId}`,
+            `operation: ${result.operation}`,
+            'status: completed',
+            ...(input.operation === 'publish' ? formatPublishResultLines(result.result) : []),
+        ].join('\n'));
     }
     return 0;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@tenderprompt/cli",
-	"version": "0.1.20",
+	"version": "0.1.21",
 	"type": "module",
 	"bin": {
 		"tender": "bin/tender.js"