onepaste 1.3.1__tar.gz → 1.3.2__tar.gz

{onepaste-1.3.1 → onepaste-1.3.2}/.github/workflows/publish.yml

@@ -3,6 +3,8 @@ name: Publish to PyPI
 on:
   release:
     types: [published]
+  push:
+    tags: ["v*"]
   workflow_dispatch:
 
 jobs:
@@ -35,3 +37,8 @@ jobs:
 
       - name: Publish to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          # Primary path: OIDC trusted publishing (no secret needed).
+          # Optional fallback: add a repo secret named PYPI_API_TOKEN and it
+          # takes precedence automatically; leave it unset for pure OIDC.
+          password: ${{ secrets.PYPI_API_TOKEN }}

{onepaste-1.3.1 → onepaste-1.3.2}/.gitignore

@@ -13,13 +13,13 @@ __pycache__/
 
 # Distribution / packaging
 .Python
-build/
+/build/
 develop-eggs/
-dist/
+/dist/
 downloads/
 eggs/
 .eggs/
-lib/
+/lib/
 lib64/
 parts/
 sdist/
@@ -52,7 +52,7 @@ coverage.xml
 *.py,cover
 .hypothesis/
 .pytest_cache/
-cover/
+/cover/
 
 # Translations
 *.mo
@@ -76,7 +76,7 @@ docs/_build/
 
 # PyBuilder
 .pybuilder/
-target/
+/target/
 
 # Jupyter Notebook
 .ipynb_checkpoints
@@ -111,9 +111,9 @@ celerybeat.pid
 # Environments
 .env
 .venv
-env/
-venv/
-ENV/
+/env/
+/venv/
+/ENV/
 env.bak/
 venv.bak/
 
@@ -225,12 +225,12 @@ code_collection*.md
 code_collection*.manifest.json
 *.collection.txt
 *.collection.md
-output/
-collected_code/
+/output/
+/collected_code/
 
 # 临时文件
-tmp/
-temp/
+/tmp/
+/temp/
 *.tmp
 *.temp
 
@@ -251,7 +251,7 @@ config.local.json
 
 # 日志文件
 *.log
-logs/
+/logs/
 
 # --- Environment ---
 # Conda
@@ -262,10 +262,10 @@ Anaconda*/
 
 # NPM (如果项目中有前端部分)
 node_modules/
-package-lock.json
-yarn.lock
+/package-lock.json/
+/yarn.lock/
 .npm
-.npmrc
+/.npmrc/
 
 # --- Docker ---
 # (如果将来添加 Docker 支持)
@@ -274,7 +274,7 @@ docker-compose.override.yml
 
 # --- Documentation ---
 # 生成的文档
-site/
+/site/
 docs/_build/
 
 # --- Security ---
@@ -302,8 +302,8 @@ collected_*.txt
 !collected_example.txt
 
 # 测试输出
-test_output/
-test_results/
+/test_output/
+/test_results/
 
 # 性能分析
 *.prof
@@ -312,4 +312,6 @@ test_results/
 # 数据库
 *.db
 *.sqlite
-*.sqlite3
+*.sqlite3
+# Website lockfile MUST be tracked (reproducible Vercel builds)
+!website/package-lock.json

{onepaste-1.3.1 → onepaste-1.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: onepaste
-Version: 1.3.1
+Version: 1.3.2
 Summary: Collect project code files into a single output for AI assistants
 Project-URL: Homepage, https://github.com/emVisible/codecollector
 Project-URL: Repository, https://github.com/emVisible/codecollector.git
@@ -40,6 +40,7 @@ Description-Content-Type: text/markdown
 [![PyPI](https://img.shields.io/pypi/v/onepaste)](https://pypi.org/project/onepaste/)
 [![Python](https://img.shields.io/pypi/pyversions/onepaste)](https://pypi.org/project/onepaste/)
 [![License](https://img.shields.io/pypi/l/onepaste)](LICENSE)
+[![Publish](https://github.com/emVisible/onepaste/actions/workflows/publish.yml/badge.svg)](https://github.com/emVisible/onepaste/actions/workflows/publish.yml)
 
 Collect project code into LLM-ready Markdown. Select a directory, press Enter, copy and paste.
 

{onepaste-1.3.1 → onepaste-1.3.2}/PUBLISHING.md

@@ -31,6 +31,7 @@ Uses PyPI Trusted Publishing (OIDC) — no secrets stored in GitHub.
    - Workflow filename: `publish.yml`
    - Environment name: `pypi`
 2. Release: create a GitHub *Release* (or run the workflow manually via `workflow_dispatch`).
+   Alternatively: `git tag vX.Y.Z && git push origin vX.Y.Z` triggers the same workflow.
 
 The workflow runs tests, builds, twine-checks, then publishes.
 

{onepaste-1.3.1 → onepaste-1.3.2}/README.md

@@ -3,6 +3,7 @@
 [![PyPI](https://img.shields.io/pypi/v/onepaste)](https://pypi.org/project/onepaste/)
 [![Python](https://img.shields.io/pypi/pyversions/onepaste)](https://pypi.org/project/onepaste/)
 [![License](https://img.shields.io/pypi/l/onepaste)](LICENSE)
+[![Publish](https://github.com/emVisible/onepaste/actions/workflows/publish.yml/badge.svg)](https://github.com/emVisible/onepaste/actions/workflows/publish.yml)
 
 Collect project code into LLM-ready Markdown. Select a directory, press Enter, copy and paste.
 

{onepaste-1.3.1 → onepaste-1.3.2}/onepaste/__init__.py

@@ -1,6 +1,6 @@
 """OnePaste - Collect project code files for AI assistants."""
 
-__version__ = "1.3.1"
+__version__ = "1.3.2"
 __author__ = "thawn"
 __license__ = "MIT"
 

{onepaste-1.3.1 → onepaste-1.3.2}/onepaste/collector.py

@@ -150,16 +150,28 @@ class FileCollector:
 
     def _path_in_excluded_dir(self, file_path: Path) -> bool:
         try:
-            parts = file_path.resolve().relative_to(self.config.root_path.resolve()).parts
+            rel = file_path.relative_to(self.config.root_path)
         except ValueError:
-            parts = file_path.parts
-        return any(part in self.config.all_exclude_dirs for part in parts[:-1])
+            try:
+                rel = file_path.resolve().relative_to(self.config.root_path.resolve())
+            except ValueError:
+                return False
+        return any(part in self.config.all_exclude_dirs for part in rel.parts[:-1])
 
     def _should_exclude_dir(self, dir_path: Path) -> bool:
-        """Check if a directory should be excluded."""
-        for part in dir_path.parts:
-            if part in self.config.all_exclude_dirs:
-                return True
+        """Check if a directory should be excluded.
+
+        Exclusion names match path segments *relative to the collection root*
+        only — never absolute ancestors (e.g. a /tmp-based temp dir must not
+        trip the "tmp" rule).
+        """
+        try:
+            segments = dir_path.relative_to(self.config.root_path).parts
+        except ValueError:
+            segments = (dir_path.name,)
+
+        if any(part in self.config.all_exclude_dirs for part in segments):
+            return True
 
         if self._git_files is None and self._gitignore:
             if self._gitignore.is_ignored(dir_path, is_dir=True):

{onepaste-1.3.1 → onepaste-1.3.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "onepaste"
-version = "1.3.1"
+version = "1.3.2"
 description = "Collect project code files into a single output for AI assistants"
 readme = "README.md"
 license = "MIT"

{onepaste-1.3.1 → onepaste-1.3.2}/tests/test_collector.py

@@ -92,6 +92,28 @@ class TestGitignoreFiltering:
         assert "secret_key.txt" in names
 
 
+class TestExcludesAreRootScoped:
+    def test_suspicious_ancestor_names_do_not_prune(self, tmp_path: Path):
+        """Regression: exclusion names must match segments relative to the
+        collection root, never absolute ancestors (CI runs under /tmp)."""
+        root = tmp_path / "tmp" / "build" / "env" / "proj"
+        (root / "src").mkdir(parents=True)
+        (root / "a.py").write_text("x = 1\n")
+        (root / "src" / "b.py").write_text("y = 2\n")
+        (root / "build").mkdir()  # a REAL excluded dir inside the project
+        (root / "build" / "junk.py").write_text("junk\n")
+
+        names = _rel_names(_collect(root), root)
+
+        assert "a.py" in names
+        assert "src/b.py" in names
+        assert not any(n.startswith("build/") for n in names)
+
+    def test_real_excluded_dirs_inside_root_still_pruned(self, project_dir: Path):
+        fc = _collect(project_dir)
+        assert all("node_modules" not in fp.parts for fp in fc.collected_files)
+
+
 class TestGlobPatterns:
     def test_include_overrides_extension_whitelist(self, project_dir: Path):
         names = _rel_names(