@ctxo/cli 0.11.2 → 0.11.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.js CHANGED
@@ -112,8 +112,10 @@ import { fileURLToPath } from "url";
112
112
  var DEFAULT_PATTERNS = [
113
113
  // AWS Access Key IDs (AKIA...)
114
114
  { regex: /AKIA[0-9A-Z]{16}/g, label: "AWS_KEY" },
115
- // AWS Secret Access Keys (40 char base64 containing / or + — excludes hex-only git hashes)
116
- { regex: /(?<![A-Za-z0-9/+])(?=[A-Za-z0-9/+=]{40}(?![A-Za-z0-9/+=]))(?=.*[/+])[A-Za-z0-9/+=]{40}/g, label: "AWS_SECRET" },
115
+ // AWS Secret Access Keys (40 char base64 containing / or +). The `[A-Za-z0-9=]*[/+]`
116
+ // lookahead is scoped to the token itself (not `.*`, which would reach a later `/` in
117
+ // the surrounding text, e.g. a file path in JSON, and wrongly redact hex-only git SHAs).
118
+ { regex: /(?<![A-Za-z0-9/+])(?=[A-Za-z0-9/+=]{40}(?![A-Za-z0-9/+=]))(?=[A-Za-z0-9=]*[/+])[A-Za-z0-9/+=]{40}/g, label: "AWS_SECRET" },
117
119
  // JWT tokens (eyJ...)
118
120
  { regex: /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g, label: "JWT" },
119
121
  // Private IPv4 (10.x.x.x, 172.16-31.x.x, 192.168.x.x)
@@ -2661,7 +2663,7 @@ async function main() {
2661
2663
  const args = process.argv.slice(2);
2662
2664
  const httpPortStr = process.env.CTXO_HTTP_PORT || (args.includes("--http") ? args[args.indexOf("--port") + 1] || "3001" : null);
2663
2665
  if (!httpPortStr && args.length > 0) {
2664
- const { CliRouter } = await import("./cli-router-2JVPBW4S.js");
2666
+ const { CliRouter } = await import("./cli-router-T6OCTM43.js");
2665
2667
  const router = new CliRouter(process.cwd());
2666
2668
  await router.route(args);
2667
2669
  return;