@stacksjs/ts-cloud 0.7.64 → 0.7.66

package/dist/{chunk-3c6pp063.js → chunk-tzqng3ae.js}

@@ -45,7 +45,7 @@ import {
   resolveSiteKind,
   resolveUiSource,
   siteInstallBase
-} from "./chunk-0z7ry8fm.js";
+} from "./chunk-xawdhj7z.js";
 import {
   artifactKey,
   buildCloudFormationTemplate,
@@ -36946,7 +36946,7 @@ var SECRET_PATTERNS = [
   },
   {
     name: "AWS Secret Access Key",
-    pattern: /(?:aws_secret_access_key|aws_secret_key|secret_access_key|secretAccessKey)\s*[=:]\s*['"]?([A-Za-z0-9/+=]{40})['"]?/gi,
+    pattern: /(?:aws_secret_access_key|aws_secret_key|secret_access_key|secretAccessKey)['"]?\s*[=:]\s*['"]?([A-Za-z0-9/+=]{40})['"]?/gi,
     severity: "critical",
     description: "AWS Secret Access Key detected"
   },
@@ -37289,7 +37289,11 @@ class PreDeployScanner {
         if (this.isLikelyPlaceholder(match[0], contextLine)) {
           continue;
         }
-        if (this.isLowEntropy(match[1] || match[0])) {
+        const candidate2 = match[1] || match[0];
+        if (pattern.name === "AWS Secret Key (Generic)" && /^[a-f0-9]{40}$/i.test(candidate2)) {
+          continue;
+        }
+        if (this.isLowEntropy(candidate2)) {
           continue;
         }
         findings.push({

package/dist/{chunk-0z7ry8fm.js → chunk-xawdhj7z.js}

@@ -4925,10 +4925,7 @@ function truthy(v) {
 function liveStageDir() {
   return statePath("dashboard-release");
 }
-function resolveDashboardVersion() {
-  const explicit = process.env.TS_CLOUD_UI_VERSION?.trim();
-  if (explicit)
-    return explicit;
+function resolvePackagedDashboardVersion() {
   const here = dirname(fileURLToPath(import.meta.url));
   for (const candidate of [join5(here, "..", "..", "package.json"), join5(here, "..", "package.json")]) {
     try {
@@ -4939,6 +4936,10 @@ function resolveDashboardVersion() {
   }
   return "latest";
 }
+function resolveDashboardVersion() {
+  const explicit = process.env.TS_CLOUD_UI_VERSION?.trim();
+  return explicit || resolvePackagedDashboardVersion();
+}
 function stageLiveDashboardRoot(config, cwd, logger) {
   if (!config?.project?.slug) {
     logger.warn("Management dashboard: the cloud config has no project slug — skipping the live dashboard.");
@@ -4953,13 +4954,15 @@ function stageLiveDashboardRoot(config, cwd, logger) {
       const requested = dependency.slice("file:".length);
       const source = isAbsolute(requested) ? requested : resolve(cwd, requested);
       if (!existsSync2(source) || !statSync(source).isFile()) {
-        throw new Error(`TS_CLOUD_UI_VERSION points to a missing package file: ${source}`);
+        dependency = resolvePackagedDashboardVersion();
+        logger.warn(`Management dashboard: TS_CLOUD_UI_VERSION points to a missing package file (${source}); using the deploying ts-cloud version ${dependency} instead.`);
+      } else {
+        const name = basename(source);
+        const destination = join5(stage, name);
+        if (source !== destination)
+          copyFileSync(source, destination);
+        dependency = `file:./${name}`;
       }
-      const name = basename(source);
-      const destination = join5(stage, name);
-      if (source !== destination)
-        copyFileSync(source, destination);
-      dependency = `file:./${name}`;
     }
     const pkg = {
       name: "ts-cloud-dashboard",

package/dist/deploy/index.js

@@ -32,7 +32,7 @@ import {
   synchronizeDashboardUsers,
   trackDashboardOperation,
   verifyStaticApiOrigin
-} from "../chunk-3c6pp063.js";
+} from "../chunk-tzqng3ae.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -65,7 +65,7 @@ import {
   shipsARelease,
   siteInstallBase,
   validateDeploymentConfig
-} from "../chunk-0z7ry8fm.js";
+} from "../chunk-xawdhj7z.js";
 import"../chunk-ecsyc3p0.js";
 import"../chunk-703nkybg.js";
 import"../chunk-4cjrg98a.js";

package/dist/deploy/management-dashboard.d.ts

@@ -65,11 +65,6 @@ export interface EnsureDashboardLogger {
 }
 /** Where the live dashboard's release is staged, inside the project checkout. */
 export declare function liveStageDir(): string;
-/**
- * The ts-cloud version the box should install. Reads this package's own version
- * so a box runs a dashboard matching the CLI that deployed it, rather than
- * drifting to whatever `latest` happens to be mid-deploy.
- */
 export declare function resolveDashboardVersion(): string;
 /**
  * Stage the live dashboard's release: the RESOLVED cloud config inlined as a

package/dist/drivers/index.js

@@ -68,7 +68,7 @@ import {
   waitForSsh,
   wrapCloudInitUserData,
   writeResizeCheckpoint
-} from "../chunk-0z7ry8fm.js";
+} from "../chunk-xawdhj7z.js";
 import"../chunk-ecsyc3p0.js";
 import"../chunk-703nkybg.js";
 import"../chunk-4cjrg98a.js";

package/dist/index.js

@@ -285,7 +285,7 @@ import {
   volumeCapabilities,
   webhookEndpoint,
   zeroCapacity
-} from "./chunk-3c6pp063.js";
+} from "./chunk-tzqng3ae.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -398,7 +398,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "./chunk-0z7ry8fm.js";
+} from "./chunk-xawdhj7z.js";
 import {
   ABTestManager,
   AI,

package/dist/security/pre-deploy-scanner.test.d.ts

@@ -0,0 +1 @@
+export {};