@marcusrbrown/infra 0.24.0 → 0.25.0

package/dist/cli.js

@@ -6950,7 +6950,7 @@ import { goke } from "goke";
 // package.json
 var package_default = {
   name: "@marcusrbrown/infra",
-  version: "0.24.0",
+  version: "0.25.0",
   description: "Infrastructure management CLI \u2014 deploy automation, health checks, and MCP bridge",
   keywords: [
     "infra",
@@ -6993,7 +6993,7 @@ var package_default = {
   },
   devDependencies: {
     "@marcusrbrown/infra-shared": "workspace:*",
-    "@modelcontextprotocol/sdk": "1.31.0",
+    "@modelcontextprotocol/sdk": "1.32.1",
     yaml: "2.9.1"
   },
   engines: {
@@ -8406,7 +8406,7 @@ var CONTENT_EVENTS = new Set([
   "discussion_comment"
 ]);
 var VERIFIED_ACTION_SHA_BY_LAYOUT = {
-  "fro-bot/agent@v0.96.0": "c29ac295b8da06768b140c32e5bd0ae3aff45dc6"
+  "fro-bot/agent@v0.118.2": "77f2bad7d68ac38279cd0fa28f38b26a0cd15dfb"
 };
 var REQUIRED_S3_INPUTS = {
   "s3-backup": undefined,
@@ -8849,9 +8849,16 @@ function hasHandoff(job) {
   const serialized = stringifyUnknown(job);
   return /needs\.[\w-]+\.outputs\./.test(serialized) || /actions\/(?:download-artifact|upload-artifact|cache|cache\/restore|cache\/save)@/.test(serialized);
 }
+var STATIC_AWS_CREDENTIAL_PATTERN = /AWS_ACCESS_KEY_ID|AWS_SECRET_ACCESS_KEY|aws-access-key-id|aws-secret-access-key/;
+function withoutBlankedCredentialKeys(value) {
+  if (Array.isArray(value))
+    return value.map(withoutBlankedCredentialKeys);
+  if (!isMapping(value))
+    return value;
+  return Object.fromEntries(Object.entries(value).filter(([key, entry]) => !(entry === "" && STATIC_AWS_CREDENTIAL_PATTERN.test(key))).map(([key, entry]) => [key, withoutBlankedCredentialKeys(entry)]));
+}
 function hasStaticAwsCredentials(job) {
-  const serialized = stringifyUnknown(job);
-  return /AWS_ACCESS_KEY_ID|AWS_SECRET_ACCESS_KEY|aws-access-key-id|aws-secret-access-key/.test(serialized);
+  return STATIC_AWS_CREDENTIAL_PATTERN.test(stringifyUnknown(withoutBlankedCredentialKeys(job)));
 }
 function ancestors(jobId, analyses) {
   const visited = new Set;
@@ -8910,7 +8917,7 @@ function formatStorageWorkflowSnippet() {
         with:
           role-to-assume: \${{ vars.FRO_BOT_S3_ROLE_TO_ASSUME }}
           aws-region: \${{ vars.FRO_BOT_S3_REGION }}
-      - uses: fro-bot/agent@c29ac295b8da06768b140c32e5bd0ae3aff45dc6
+      - uses: fro-bot/agent@77f2bad7d68ac38279cd0fa28f38b26a0cd15dfb
         with:
           s3-backup: true
           s3-bucket: \${{ vars.FRO_BOT_S3_BUCKET }}
@@ -8946,10 +8953,6 @@ function environmentResult(environmentValue, branchPoliciesValue) {
     violations.push("GitHub Environment fro-bot-storage is missing or returned an invalid response.");
     return { verified: false, violations };
   }
-  const protectionRules = Array.isArray(environmentValue.protection_rules) ? environmentValue.protection_rules : [];
-  const hasReviewer = protectionRules.some((rule) => isMapping(rule) && rule.type === "required_reviewers" && Array.isArray(rule.reviewers) && rule.reviewers.length > 0);
-  if (!hasReviewer)
-    violations.push("GitHub Environment fro-bot-storage has no required reviewer protection rule.");
   const branchPolicy = environmentValue.deployment_branch_policy;
   if (!isMapping(branchPolicy) || branchPolicy.protected_branches !== false || branchPolicy.custom_branch_policies !== true) {
     violations.push("GitHub Environment fro-bot-storage does not use a custom deployment-branch policy.");
@@ -9135,7 +9138,7 @@ var STORAGE_VARIABLE_NAMES = {
   prefix: "FRO_BOT_S3_PREFIX",
   expectedBucketOwner: "FRO_BOT_S3_EXPECTED_BUCKET_OWNER"
 };
-var KNOWN_KEY_LAYOUT_VERSION = "fro-bot/agent@v0.96.0";
+var KNOWN_KEY_LAYOUT_VERSION = "fro-bot/agent@v0.118.2";
 var manifestSchema = z6.object({
   owner: z6.string().min(1),
   repo: z6.string().min(1),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@marcusrbrown/infra",
-  "version": "0.24.0",
+  "version": "0.25.0",
   "description": "Infrastructure management CLI — deploy automation, health checks, and MCP bridge",
   "keywords": [
     "infra",
@@ -43,7 +43,7 @@
   },
   "devDependencies": {
     "@marcusrbrown/infra-shared": "workspace:*",
-    "@modelcontextprotocol/sdk": "1.31.0",
+    "@modelcontextprotocol/sdk": "1.32.1",
     "yaml": "2.9.1"
   },
   "engines": {