@vercel/static-build 2.11.4 → 2.11.6

package/dist/index.js

@@ -9036,6 +9036,52 @@ var require_frameworks = __commonJS({
         },
         getOutputDirName: async () => "dist"
       },
+      {
+        name: "TanStack Start",
+        slug: "tanstack-start-lovable",
+        logo: "https://api-frameworks.vercel.sh/framework-logos/tanstack-start.svg",
+        darkModeLogo: "https://api-frameworks.vercel.sh/framework-logos/tanstack-start-dark.svg",
+        platform: {
+          name: "lovable",
+          logo: "https://api-frameworks.vercel.sh/framework-logos/lovable.svg"
+        },
+        tagline: "Full-stack Framework powered by TanStack Router imported from Lovable",
+        description: "Full-document SSR, Streaming, Server Functions, bundling and more, imported from Lovable",
+        website: "https://lovable.dev/",
+        supersedes: ["tanstack-start", "ionic-react", "vite"],
+        detectors: {
+          every: [
+            {
+              matchPackage: "@lovable.dev/vite-tanstack-config"
+            }
+          ],
+          some: [
+            {
+              matchPackage: "@tanstack/react-start"
+            },
+            {
+              matchPackage: "@tanstack/solid-start"
+            }
+          ]
+        },
+        settings: {
+          installCommand: {
+            placeholder: "`yarn install`, `pnpm install`, `npm install`, or `bun install`"
+          },
+          buildCommand: {
+            placeholder: "`npm run build` or `vite build`",
+            value: "vite build"
+          },
+          devCommand: {
+            placeholder: "vite",
+            value: "vite --port $PORT"
+          },
+          outputDirectory: {
+            value: "dist"
+          }
+        },
+        getOutputDirName: async () => "dist"
+      },
       {
         name: "VitePress",
         slug: "vitepress",
@@ -9538,6 +9584,10 @@ var require_frameworks = __commonJS({
         website: "https://storybook.js.org",
         ignoreRuntimes: ["@vercel/next", "@vercel/node"],
         disableRootMiddleware: true,
+        // Storybook is a devDependency of many apps that deploy something else
+        // entirely, so detecting it is not evidence the user intends to deploy
+        // Storybook itself.
+        detectionConfidence: "weak",
         detectors: {
           every: [
             {
@@ -11449,7 +11499,7 @@ var require_frameworks = __commonJS({
         name: "Services",
         slug: "services",
         experimental: true,
-        logo: "https://api-frameworks.vercel.sh/framework-logos/other.svg",
+        logo: "https://api-frameworks.vercel.sh/framework-logos/services.svg",
         tagline: "Multiple services deployed as serverless functions within your project.",
         description: "Multiple services deployed as serverless functions within your project.",
         website: "https://vercel.com",
@@ -22917,6 +22967,9 @@ var require_utils4 = __commonJS({
         }
       }
       if (config.entrypoint) {
+        if (config.entrypoint === "pyproject.toml" || config.entrypoint.endsWith("/pyproject.toml")) {
+          return "python";
+        }
         for (const [ext, runtime] of Object.entries(import_types.ENTRYPOINT_EXTENSIONS)) {
           if (config.entrypoint.endsWith(ext)) {
             return runtime;
@@ -24202,7 +24255,14 @@ var require_resolve_v2 = __commonJS({
     var import_resolve = require_resolve();
     var import_utils = require_utils4();
     var frameworksBySlug = new Map(import_frameworks2.frameworkList.map((f) => [f.slug, f]));
-    var SERVICE_NAME_REGEX = /^[a-zA-Z]([a-zA-Z0-9_-]*[a-zA-Z0-9])?$/;
+    var MAX_SERVICE_NAME_LENGTH = 64;
+    var SERVICE_NAME_REGEX = /^[a-z]([a-z_-]*[a-z])?$/;
+    function isValidServiceName(name) {
+      return name.length <= MAX_SERVICE_NAME_LENGTH && SERVICE_NAME_REGEX.test(name);
+    }
+    function getInvalidServiceNameMessage(name) {
+      return `Service name "${name}" is invalid. Names must be 1-${MAX_SERVICE_NAME_LENGTH} characters, start and end with a lowercase letter, and contain only lowercase letters, hyphens, and underscores.`;
+    }
     var CONTAINER_ENTRYPOINT_CANDIDATES = [
       "Dockerfile.vercel",
       "Containerfile.vercel",
@@ -24294,10 +24354,10 @@ var require_resolve_v2 = __commonJS({
       };
     }
     function validateServiceConfigV22(name, config) {
-      if (!SERVICE_NAME_REGEX.test(name)) {
+      if (!isValidServiceName(name)) {
         return {
           code: "INVALID_SERVICE_NAME",
-          message: `Service name "${name}" is invalid. Names must start with a letter, end with an alphanumeric character, and contain only alphanumeric characters, hyphens, and underscores.`,
+          message: getInvalidServiceNameMessage(name),
           serviceName: name
         };
       }
@@ -24354,14 +24414,6 @@ var require_resolve_v2 = __commonJS({
           };
         }
       }
-      const isContainer = config.runtime === "container";
-      if (!config.framework && !config.entrypoint && !isContainer) {
-        return {
-          code: "MISSING_SERVICE_CONFIG",
-          message: `Service "${name}" must specify "framework" or "entrypoint".`,
-          serviceName: name
-        };
-      }
       return null;
     }
     async function resolveConfiguredServiceV22(name, config, fs5) {
@@ -24393,14 +24445,15 @@ var require_resolve_v2 = __commonJS({
         entrypointIsDirectory = Boolean(resolved.entrypoint?.isDirectory);
       }
       const entrypointFile = entrypointIsDirectory || !normalizedEntrypoint ? void 0 : normalizedEntrypoint;
-      const inferredRuntime = (0, import_utils.inferServiceRuntime)({
+      let inferredRuntime = (0, import_utils.inferServiceRuntime)({
         runtime: config.runtime,
         framework: config.framework,
         entrypoint: entrypointFile
       });
       let framework = config.framework;
-      if (!framework && normalizedEntrypoint) {
-        const workspace = entrypointIsDirectory ? normalizedEntrypoint : import_path7.posix.dirname(normalizedEntrypoint) || ".";
+      let detectedFramework = false;
+      if (!framework) {
+        const workspace = entrypointIsDirectory && normalizedEntrypoint ? normalizedEntrypoint : ".";
         const detection = await (0, import_resolve.detectFrameworkFromWorkspace)({
           fs: serviceFs,
           workspace,
@@ -24411,6 +24464,12 @@ var require_resolve_v2 = __commonJS({
           return { error: detection.error };
         }
         framework = detection.framework;
+        detectedFramework = Boolean(framework);
+        inferredRuntime = (0, import_utils.inferServiceRuntime)({
+          runtime: config.runtime,
+          framework,
+          entrypoint: entrypointFile
+        });
       }
       if (entrypointIsDirectory && !framework) {
         return {
@@ -24421,6 +24480,16 @@ var require_resolve_v2 = __commonJS({
           }
         };
       }
+      const frameworkRuntime = (0, import_utils.inferRuntimeFromFramework)(framework);
+      if (detectedFramework && frameworkRuntime && !entrypointFile) {
+        return {
+          error: {
+            code: "MISSING_SERVICE_CONFIG",
+            message: `Service "${name}" detected framework "${framework}" in "${normalizedRoot}" and must specify an "entrypoint" for runtime "${frameworkRuntime}".`,
+            serviceName: name
+          }
+        };
+      }
       const frameworkDefinition = framework ? frameworksBySlug.get(framework) : void 0;
       let builderUse;
       let builderSrc;
@@ -24429,16 +24498,26 @@ var require_resolve_v2 = __commonJS({
         builderSrc = entrypointFile || frameworkDefinition?.useRuntime?.src || "package.json";
       } else {
         if (!inferredRuntime) {
-          return {
-            error: {
-              code: "MISSING_SERVICE_CONFIG",
-              message: `Service "${name}" must specify "framework" or a runtime-resolvable "entrypoint".`,
-              serviceName: name
-            }
-          };
+          if (config.buildCommand) {
+            builderUse = "@vercel/static-build";
+            builderSrc = "package.json";
+          } else {
+            builderUse = "@vercel/static";
+            builderSrc = config.outputDirectory ? import_path7.posix.join(config.outputDirectory, "**") : "**";
+          }
+        } else {
+          if (!entrypointFile) {
+            return {
+              error: {
+                code: "MISSING_SERVICE_CONFIG",
+                message: `Service "${name}" must specify an "entrypoint" for runtime "${inferredRuntime}".`,
+                serviceName: name
+              }
+            };
+          }
+          builderUse = inferredRuntime === "node" ? "@vercel/backends" : (0, import_utils.getBuilderForRuntime)(inferredRuntime);
+          builderSrc = entrypointFile;
         }
-        builderUse = inferredRuntime === "node" ? "@vercel/backends" : (0, import_utils.getBuilderForRuntime)(inferredRuntime);
-        builderSrc = entrypointFile;
       }
       const isRoot = normalizedRoot === ".";
       const projectRelativeSrc = isRoot ? builderSrc : import_path7.posix.join(normalizedRoot, builderSrc);
@@ -24449,6 +24528,9 @@ var require_resolve_v2 = __commonJS({
       if (framework) {
         builderConfig.framework = framework;
       }
+      if (config.outputDirectory) {
+        builderConfig.outputDirectory = config.outputDirectory;
+      }
       if (!isRoot) {
         builderConfig.workspace = normalizedRoot;
       }
@@ -24511,6 +24593,14 @@ var require_resolve_v2 = __commonJS({
       const serviceNames = new Set(Object.keys(services));
       for (const service of resolved) {
         for (const binding of service.bindings ?? []) {
+          if (!isValidServiceName(binding.service)) {
+            errors.push({
+              code: "INVALID_SERVICE_BINDING_NAME",
+              message: `Service "${service.name}" declares an invalid binding service name "${binding.service}". ${getInvalidServiceNameMessage(binding.service)}`,
+              serviceName: service.name
+            });
+            continue;
+          }
           if (!serviceNames.has(binding.service)) {
             errors.push({
               code: "UNKNOWN_SERVICE_BINDING",
@@ -35759,6 +35849,15 @@ var build = async ({
 }) => {
   await (0, import_build_utils4.download)(files, workPath, meta);
   const routePrefix = config.routePrefix;
+  if (routePrefix) {
+    const mountpointCandidate = routePrefix.replace(/^\//, "") || ".";
+    if (mountpointCandidate.split(/[/\\]/).some((segment) => segment === "..")) {
+      throw new import_build_utils4.NowBuildError({
+        code: "STATIC_BUILD_UNSAFE_ROUTE_PREFIX",
+        message: `Invalid routePrefix "${routePrefix}": path traversal segments are not allowed.`
+      });
+    }
+  }
   const mountpoint = routePrefix ? routePrefix.replace(/^\//, "") || "." : import_path6.default.dirname(entrypoint);
   const entrypointDir = import_path6.default.join(workPath, import_path6.default.dirname(entrypoint));
   let distPath = import_path6.default.join(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vercel/static-build",
-  "version": "2.11.4",
+  "version": "2.11.6",
   "license": "Apache-2.0",
   "main": "./dist/index",
   "homepage": "https://vercel.com/docs/build-step",
@@ -14,9 +14,9 @@
   },
   "dependencies": {
     "ts-morph": "12.0.0",
-    "@vercel/static-config": "3.4.0",
-    "@vercel/gatsby-plugin-vercel-builder": "2.2.24",
-    "@vercel/gatsby-plugin-vercel-analytics": "1.0.11"
+    "@vercel/gatsby-plugin-vercel-analytics": "1.0.11",
+    "@vercel/gatsby-plugin-vercel-builder": "2.2.26",
+    "@vercel/static-config": "3.4.0"
   },
   "devDependencies": {
     "@types/aws-lambda": "8.10.64",
@@ -38,9 +38,9 @@
     "tree-kill": "1.2.2",
     "vitest": "2.0.3",
     "@vercel/error-utils": "2.2.0",
-    "@vercel/frameworks": "3.30.1",
-    "@vercel/build-utils": "13.32.2",
-    "@vercel/fs-detectors": "6.11.1",
+    "@vercel/build-utils": "13.33.0",
+    "@vercel/frameworks": "3.30.6",
+    "@vercel/fs-detectors": "6.13.0",
     "@vercel/routing-utils": "6.4.0"
   },
   "scripts": {