@topline-build/harness-mcp 0.1.0 → 0.1.1

package/dist/index.d.ts

@@ -70,5 +70,5 @@ export declare function openArtifact(opts: HarnessMcpStdioOptions, artifactId: s
     liveUrl: string | null;
     versionUrl: string | null;
 }>;
-export declare function packArtifactAppDirectory(appDir: string): Promise<PackedArtifactAppBundle>;
+export declare function packArtifactAppDirectory(appDir: string, archivePrefix?: string): Promise<PackedArtifactAppBundle>;
 export declare function getBearerToken(opts: HarnessMcpStdioOptions): Promise<string>;

package/dist/index.js

@@ -94,6 +94,7 @@ export async function callHarnessTool(opts, name, args) {
 export async function deployArtifactApp(opts, input) {
     const appDir = stringArg(input, "appDir");
     const absoluteAppDir = resolveWorkspacePath(opts.workspaceRoot, appDir);
+    const platformAppDir = workspaceRelativeAppDir(opts.workspaceRoot, absoluteAppDir);
     const manifest = await readManifest(absoluteAppDir);
     const created = await fetchJson(opts, artifactAppsPath(opts), {
         method: "POST",
@@ -111,7 +112,7 @@ export async function deployArtifactApp(opts, input) {
         throw new Error(`artifact_app_create_failed:${JSON.stringify(createdRecord)}`);
     const artifactId = stringValue(createdRecord.artifactId, "artifactId");
     const artifactVersionId = stringValue(createdRecord.artifactVersionId, "artifactVersionId");
-    const bundle = await packArtifactAppDirectory(absoluteAppDir);
+    const bundle = await packArtifactAppDirectory(absoluteAppDir, platformAppDir);
     const bearerToken = await getBearerToken(opts);
     const deployed = await fetchJson(opts, `${artifactAppsPath(opts)}/${encodeURIComponent(artifactId)}/deploy-bundle`, {
         method: "POST",
@@ -120,7 +121,7 @@ export async function deployArtifactApp(opts, input) {
             "content-type": "application/gzip",
             "MCP-Protocol-Version": opts.protocolVersion,
             "x-platform-artifact-version-id": artifactVersionId,
-            "x-platform-app-dir": "."
+            "x-platform-app-dir": platformAppDir
         },
         body: bundle.body
     });
@@ -195,8 +196,9 @@ export async function openArtifact(opts, artifactId) {
         versionUrl: typeof draft?.versionUrl === "string" ? draft.versionUrl : typeof live?.versionUrl === "string" ? live.versionUrl : null
     };
 }
-export async function packArtifactAppDirectory(appDir) {
+export async function packArtifactAppDirectory(appDir, archivePrefix = "") {
     const root = path.resolve(appDir);
+    const prefix = archivePrefix ? validateArchivePrefix(archivePrefix) : "";
     const files = [];
     const excluded = [];
     await walk(root, root, files, excluded);
@@ -209,7 +211,7 @@ export async function packArtifactAppDirectory(appDir) {
         if (byteCount > MAX_UNPACKED_BYTES)
             throw new Error(`artifact_app_bundle_unpacked_too_large:${MAX_UNPACKED_BYTES}`);
         const content = await readFile(file.absolute);
-        chunks.push(tarHeader(file.relative, content.length));
+        chunks.push(tarHeader(prefix ? `${prefix}/${file.relative}` : file.relative, content.length));
         chunks.push(content);
         chunks.push(Buffer.alloc(padSize(content.length)));
     }
@@ -262,11 +264,20 @@ function resolveWorkspacePath(workspaceRoot, inputPath) {
         throw new Error("appDir_must_be_inside_workspace_root");
     return resolved;
 }
+function workspaceRelativeAppDir(workspaceRoot, absoluteAppDir) {
+    const relative = toPosix(path.relative(path.resolve(workspaceRoot), path.resolve(absoluteAppDir)));
+    return validateArchivePrefix(relative);
+}
+function validateArchivePrefix(prefix) {
+    const normalized = toPosix(prefix).replace(/^\/+|\/+$/g, "");
+    validateRelativePath(normalized);
+    return normalized;
+}
 function validateRelativePath(relative) {
     if (!relative || relative.startsWith("/") || /^[A-Za-z]:\//.test(relative))
         throw new Error("artifact_app_bundle_path_invalid");
     const parts = relative.split("/").filter(Boolean);
-    if (parts.some((part) => part === ".."))
+    if (parts.some((part) => part === "." || part === ".."))
         throw new Error(`artifact_app_bundle_path_escape:${relative}`);
     if (parts.length > MAX_DEPTH)
         throw new Error(`artifact_app_bundle_depth_limit:${MAX_DEPTH}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@topline-build/harness-mcp",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Local stdio MCP connector for deploying Topline artifact app drafts.",
   "type": "module",
   "main": "./dist/index.js",