deploylog 0.2.1 → 0.2.2

package/dist/api.js

@@ -23,11 +23,25 @@ async function request(path, options = {}) {
             ...options.headers,
         },
     });
-    const json = await res.json();
+    const raw = await res.text();
+    let body = null;
+    if (raw) {
+        try {
+            body = JSON.parse(raw);
+        }
+        catch {
+            body = null;
+        }
+    }
     if (!res.ok) {
-        throw new ApiError(res.status, json.error?.code ?? 'UNKNOWN', json.error?.message ?? `Request failed (${res.status})`);
+        throw new ApiError(res.status, body?.error?.code ?? 'UNKNOWN', body?.error?.message ?? `Request failed (${res.status})`);
+    }
+    // Reject non-JSON bodies and well-formed JSON that's missing `data` — both
+    // violate the response contract and would otherwise return undefined.
+    if (!body || body.data === undefined) {
+        throw new ApiError(res.status, 'INVALID_RESPONSE', `Server returned an unexpected response (${res.status})`);
     }
-    return json.data;
+    return body.data;
 }
 export async function listProjects() {
     return request('/projects');

package/dist/config.js

@@ -13,10 +13,12 @@ export function setApiKey(key) {
     config.set('apiKey', key);
 }
 export function getApiUrl() {
-    return config.get('apiUrl') ?? 'https://deploylog.dev';
+    return (config.get('apiUrl') ?? 'https://deploylog.dev').replace(/\/+$/, '');
 }
 export function setApiUrl(url) {
-    config.set('apiUrl', url);
+    // Normalize so request building (`${apiUrl}/api/cli${path}`) never produces a
+    // double slash from a trailing-slash paste. (BUG-012)
+    config.set('apiUrl', url.trim().replace(/\/+$/, ''));
 }
 export function clearConfig() {
     config.clear();

package/dist/index.js

@@ -18,6 +18,20 @@ program
     .option('--api-url <url>', 'API base URL (default: https://deploylog.dev)')
     .action(async (opts) => {
     if (opts.apiUrl) {
+        let parsed;
+        try {
+            parsed = new URL(opts.apiUrl.trim());
+        }
+        catch {
+            console.error(chalk.red('Invalid API URL. Provide a valid absolute URL.'));
+            process.exit(1);
+        }
+        // Require http(s) and a real host — a scheme-only value like "https://"
+        // parses but would break request URL construction.
+        if (!/^https?:$/.test(parsed.protocol) || !parsed.hostname) {
+            console.error(chalk.red('Invalid API URL. Must use http(s) and include a host.'));
+            process.exit(1);
+        }
         setApiUrl(opts.apiUrl);
     }
     if (opts.key) {
@@ -175,11 +189,19 @@ program
                     return;
                 }
             }
+            else if (!opts.yes) {
+                // Non-interactive shell (CI, piped stdin): there's no prompt to show,
+                // so make the unreviewed auto-proceed explicit. (BUG-019)
+                console.log(chalk.yellow('Non-interactive shell: proceeding with the AI-generated entry without confirmation.'));
+            }
         }
         if (!title || !body) {
             console.error(chalk.red('Entry requires --title and --body (or --from-git / --ai-summarize to derive them).'));
             process.exit(1);
         }
+        if (opts.publish && opts.draft) {
+            console.log(chalk.yellow('Both --publish and --draft passed; saving as a draft.'));
+        }
         const entry = await createEntry(slug, {
             title,
             body_markdown: body,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deploylog",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Push changelog entries from the terminal",
   "type": "module",
   "bin": {