@tostudy-ai/cli 0.18.9 → 0.18.11

package/dist/main.js

@@ -1043,6 +1043,7 @@ var init_errors_pt_br = __esm({
       suggestReasonMatch: "combina com o seu perfil em",
       suggestReasonAnd: "e",
       suggestPaidHeader: "Pagos. A matr\xEDcula fica no navegador e nada \xE9 debitado por aqui:",
+      loginAccountOwnerManaged: "Esta conta agora \xE9 gerenciada por voc\xEA no ToStudy (senha ou login social), ent\xE3o c\xF3digos e magic-links da imers\xE3o n\xE3o funcionam mais. Rode `tostudy login` (sem --magic-link) para entrar pelo navegador.",
       enrollmentNotEntitled: "\u{1F6AB} Sua matr\xEDcula neste curso n\xE3o est\xE1 mais ativa (reembolso, cancelamento ou preview expirado).\nPara voltar a estudar, adquira o curso novamente em https://tostudy.ai.\n",
       creator: {
         loginBrowserOnly: "`--creator` s\xF3 funciona no login pelo browser. Rode `tostudy login --creator` sem --code, --magic-link ou --manual.",
@@ -1154,6 +1155,7 @@ var init_errors_en_us = __esm({
       suggestReasonMatch: "matches your profile on",
       suggestReasonAnd: "and",
       suggestPaidHeader: "Paid. Enrollment stays in the browser and nothing is charged here:",
+      loginAccountOwnerManaged: "You now manage this account on ToStudy (password or social login), so immersion codes and magic links no longer work. Run `tostudy login` (without --magic-link) to sign in through the browser.",
       enrollmentNotEntitled: "\u{1F6AB} Your enrollment in this course is no longer active (refund, cancellation, or expired preview).\nTo study again, purchase the course at https://tostudy.ai.\n",
       creator: {
         loginBrowserOnly: "`--creator` only works with the browser login. Run `tostudy login --creator` without --code, --magic-link or --manual.",
@@ -1691,6 +1693,7 @@ function formatLesson(data) {
     "",
     `\u{1F4D6} ${lesson.title}`,
     `   M\xF3dulo: ${lesson.moduleTitle}  |  Tipo: ${lesson.type}`,
+    ...data.channelWarning ? [`\u26A0 ${data.channelWarning}`] : [],
     "",
     exercise ? filterExerciseContent(lesson.content, exercise.index) : lesson.content,
     "",
@@ -1774,7 +1777,8 @@ function formatModuleStart(data) {
   const lines = [
     `\u2501\u2501\u2501 M\xF3dulo ${wayfinding.moduleOrder}/${wayfinding.totalModules} \u2501\u2501\u2501`,
     "",
-    `\u{1F5C2}  ${mod.title}`
+    `\u{1F5C2}  ${mod.title}`,
+    ...data.channelWarning ? [`\u26A0 ${data.channelWarning}`] : []
   ];
   if (mod.description) {
     lines.push("", mod.description);
@@ -3216,11 +3220,13 @@ var CliApiError = class extends Error {
   code;
 };
 async function cliApiFetch(url2, token, init) {
+  const nodeVersion = globalThis.process?.versions?.node;
   const response = await fetch(url2, {
     ...init,
     headers: {
       "Content-Type": "application/json",
       Authorization: `Bearer ${token}`,
+      ...nodeVersion ? { "X-Tostudy-Node-Version": nodeVersion } : {},
       ...init?.headers
     }
   });
@@ -3482,6 +3488,10 @@ async function persistSession(data, apiUrl) {
     apiUrl
   });
 }
+function exchangeErrorMessage(code) {
+  if (code === "account_owner_managed") return getErrors().loginAccountOwnerManaged;
+  return code ?? "Falha na autentica\xE7\xE3o";
+}
 async function loginWithCode(code, apiUrl) {
   assertTrustedApiUrl(apiUrl);
   const res = await fetch(`${apiUrl}/api/cli/auth/exchange`, {
@@ -3491,7 +3501,7 @@ async function loginWithCode(code, apiUrl) {
   });
   if (!res.ok) {
     const body = await res.json().catch(() => ({}));
-    throw new Error(body.error ?? "Falha na autentica\xE7\xE3o");
+    throw new Error(exchangeErrorMessage(body.error));
   }
   const data = await res.json();
   await persistSession(data, apiUrl);
@@ -3515,7 +3525,7 @@ async function loginWithMagicLink(magicLinkUrl, apiUrl) {
   });
   if (!res.ok) {
     const body = await res.json().catch(() => ({}));
-    throw new Error(body.error ?? "Falha na autentica\xE7\xE3o");
+    throw new Error(exchangeErrorMessage(body.error));
   }
   const data = await res.json();
   await persistSession(data, apiUrl);
@@ -3836,7 +3846,7 @@ init_workspace_state();
 init_formatter();
 
 // src/version.ts
-var CLI_VERSION = true ? "0.18.9" : "0.7.1";
+var CLI_VERSION = true ? "0.18.11" : "0.7.1";
 
 // src/update-checker.ts
 init_config_dir();
@@ -4600,6 +4610,7 @@ function formatBlock(ranked, lineFor) {
   const lines = [];
   for (const [index, row] of ranked.entries()) {
     lines.push(`${index + 1}. ${row.course.title}`);
+    if (row.course.channelWarning) lines.push(`\u26A0 ${row.course.channelWarning}`);
     lines.push(`${copy.suggestReason} ${reasonText(row.reason, copy)}`);
     lines.push(lineFor(row));
   }
@@ -4655,11 +4666,13 @@ function formatEnrollResult(result) {
     return `${copy.enrollPaid}
 ${result.enrollUrl}`;
   }
+  const warning = result.channelWarning ? `
+\u26A0 ${result.channelWarning}` : "";
   if (!result.cliChannel) {
     return `${copy.enrollDoneWebOnly}
-${result.courseUrl}`;
+${result.courseUrl}${warning}`;
   }
-  return copy.enrollDone;
+  return `${copy.enrollDone}${warning}`;
 }
 async function runEnroll(courseId, deps = {
   requireSession,
@@ -21150,9 +21163,11 @@ init_dist();
 import { Command as Command23 } from "commander";
 
 // ../../packages/tostudy-core/src/vault/generate-vault-files.ts
+init_dist();
 init_slug();
 
 // ../../packages/tostudy-core/src/vault/write-vault.ts
+init_dist();
 import fs17 from "node:fs/promises";
 import path21 from "node:path";
 
@@ -21162,10 +21177,20 @@ var VAULT_MARKER_VERSION = 1;
 
 // ../../packages/tostudy-core/src/vault/write-vault.ts
 async function writeVaultFiles(files, outputPath, courseId, courseSlug2) {
+  const root = path21.resolve(outputPath);
+  const skippedPaths = [];
+  let filesWritten = 0;
   for (const file2 of files) {
-    const fullPath = path21.join(outputPath, file2.relativePath);
+    const fullPath = path21.resolve(root, file2.relativePath);
+    const rel = path21.relative(root, fullPath);
+    if (!rel || rel.startsWith("..") || path21.isAbsolute(rel)) {
+      logger.warn("vault.write_outside_root_skipped", { relativePath: file2.relativePath });
+      skippedPaths.push(file2.relativePath);
+      continue;
+    }
     await fs17.mkdir(path21.dirname(fullPath), { recursive: true });
     await fs17.writeFile(fullPath, file2.content, "utf-8");
+    filesWritten++;
   }
   const vaultPath = path21.join(outputPath, courseSlug2);
   const marker = {
@@ -21180,7 +21205,7 @@ async function writeVaultFiles(files, outputPath, courseId, courseSlug2) {
     JSON.stringify(marker, null, 2),
     "utf-8"
   );
-  return { vaultPath, filesWritten: files.length };
+  return { vaultPath, filesWritten, skippedPaths };
 }
 
 // src/commands/vault.ts