nimblybase 0.1.11 → 0.1.12

package/README.md

@@ -226,6 +226,9 @@ credential configuration, private-key files, source maps, `.git` and
 `node_modules`. Symlinks and unsafe URL filenames are refused. An upload uses
 the byte snapshot that was scanned and hashed, even if a local file changes.
 
+CLI 0.1.12+ uses a linear JWT scan so repeated token-like text cannot trigger
+regex backtracking during preparation.
+
 Both site and function preparation refuse recognised management/provider
 credential patterns without printing their values. Public application keys
 remain allowed. Pattern scanning cannot detect every secret, encoded value or
@@ -235,8 +238,20 @@ private business datum; review what belongs in a public artifact.
 The preview proves local preparation only: it does not verify host installation,
 project authorization, provider runtime compatibility or live health. A
 cloud-only agent still needs a proven repository/build/upload path; connecting
-to MCP alone does not supply one. The checks here guard the CLI upload path;
-they do not add a server-side policy to direct HTTP or MCP uploads.
+to MCP alone does not supply one.
+
+The server independently refuses recognised credentials in function source
+before recording/uploading code. Site uploads reject those patterns too;
+manifest planning/commit refuses private paths, and commit/rollback rechecks
+the actual stored bytes, hashes and sizes before changing the serving site.
+Each publication reads each distinct blob once, sequentially (up to 100 MiB).
+The server allows at most 9,000 distinct blobs to leave room below the default
+Worker subrequest ceiling; up to 20,000 paths may share those blobs. A local
+preview is not server admission. Safe existing sites remain served; an unsafe
+historical release must be cleaned before it can be republished or restored.
+These are accidental-leak guards, not a complete audit, malware scanner,
+usage budget or protection against a project administrator rewriting R2
+through their own privileged code. Function environment secrets remain valid.
 
 ## When something is broken
 

package/dist/index.js

@@ -384,7 +384,7 @@ function when(iso) {
 
 // src/api.ts
 var DEFAULT_API_URL = "https://api-uat.nimblybase.com";
-var VERSION = "0.1.11";
+var VERSION = "0.1.12";
 function dashboardUrl(api) {
   const match = /^https:\/\/api(-[a-z0-9]+)?\.(.+)$/.exec(api);
   return match ? `https://app${match[1] ?? ""}.${match[2]}` : null;
@@ -8737,22 +8737,78 @@ import { build as bundle } from "esbuild";
 // src/artifact-safety.ts
 import { constants } from "node:fs";
 import { lstat, open as open2 } from "node:fs/promises";
+
+// ../../packages/contracts/dist/artifact-safety.js
 var CREDENTIALS = [
   { kind: "NimblyBase management credential", pattern: /nb_(?:svc|pat|oat|ort)_[A-Za-z0-9_-]{20,}|nb_plat_\d{1,12}_[0-9a-f]{64}/ },
   { kind: "provider secret key", pattern: /(?:sk|rk)_(?:test|live)_[A-Za-z0-9]{20,}/ },
   { kind: "AWS access key", pattern: /(?:AKIA|ASIA)[A-Z0-9]{16}/ },
   { kind: "GitHub credential", pattern: /gh[pousr]_[A-Za-z0-9]{20,}|github_pat_[A-Za-z0-9_]{20,}/ },
   { kind: "Slack credential", pattern: /xox[baprs]-[A-Za-z0-9-]{20,}/ },
-  { kind: "private key", pattern: /-----BEGIN (?:[A-Z0-9]+ )*PRIVATE KEY-----/ },
-  { kind: "signed JWT credential", pattern: /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{20,}/ }
+  { kind: "private key", pattern: /-----BEGIN (?:[A-Z0-9]+ )*PRIVATE KEY-----/ }
 ];
+function embeddedCredentialKind(content) {
+  return CREDENTIALS.find(({ pattern }) => pattern.test(content))?.kind ?? (findSignedJwt(content) ? "signed JWT credential" : null);
+}
+function redactArtifactLabel(label) {
+  const text = CREDENTIALS.reduce((text2, { pattern }) => text2.replace(new RegExp(pattern.source, "g"), "[redacted]"), label);
+  let offset = 0;
+  let result = "";
+  let found;
+  while (found = findSignedJwt(text, offset)) {
+    result += text.slice(offset, found.start) + "[redacted]";
+    offset = found.end;
+  }
+  return result + text.slice(offset);
+}
+function findSignedJwt(content, from = 0) {
+  const segments = /[A-Za-z0-9_-]{10,}/g;
+  segments.lastIndex = from;
+  let previous = null;
+  let header = null;
+  for (let match = segments.exec(content); match; match = segments.exec(content)) {
+    const start = match.index;
+    const value = match[0];
+    const end = start + value.length;
+    const adjacent = previous && start === previous.end + 1 && content[previous.end] === ".";
+    if (!adjacent)
+      header = null;
+    if (adjacent && header?.headerStart !== null && header?.headerStart !== void 0 && value.length >= 20) {
+      return { start: header.headerStart, end };
+    }
+    const index = value.indexOf("eyJ");
+    const current = { end, headerStart: index >= 0 && value.length - index >= 13 ? start + index : null };
+    header = adjacent ? previous : null;
+    previous = current;
+  }
+  return null;
+}
+var PRIVATE_ARTIFACT_NAMES = /* @__PURE__ */ new Set([
+  ".git",
+  "node_modules",
+  ".ds_store",
+  "thumbs.db",
+  ".npmrc",
+  ".netrc",
+  ".envrc",
+  ".aws",
+  ".ssh",
+  ".nimblybase",
+  "credentials.json"
+]);
+function excludedArtifactName(value) {
+  const name = value.toLowerCase();
+  return PRIVATE_ARTIFACT_NAMES.has(name) || name === ".env" || name.startsWith(".env.") || name.endsWith(".map") || /\.(?:pem|p12|pfx|key)$/.test(name) || /^id_(?:rsa|ed25519|ecdsa|dsa)$/.test(name);
+}
+
+// src/artifact-safety.ts
 function assertNoEmbeddedCredentials(bytes, label) {
   const content = Buffer.from(bytes).toString("latin1");
-  const found = CREDENTIALS.find(({ pattern }) => pattern.test(content));
+  const found = embeddedCredentialKind(content);
   if (found) {
-    const safeLabel = CREDENTIALS.reduce((text, { pattern }) => text.replace(new RegExp(pattern.source, "g"), "[redacted]"), label);
+    const safeLabel = redactArtifactLabel(label);
     throw new CliError(
-      `${safeLabel} contains a recognised ${found.kind}; no artifact was uploaded.`,
+      `${safeLabel} contains a recognised ${found}; no artifact was uploaded.`,
       EXIT.usage,
       "Remove credentials from the build. Use function environment secrets for private values. Public app keys are allowed; this pattern check does not detect every possible secret."
     );
@@ -9344,7 +9400,6 @@ import { readdir as readdir2, readFile as readFile6, lstat as lstat2 } from "nod
 import { createHash as createHash5 } from "node:crypto";
 import { spawn as spawn2 } from "node:child_process";
 import { join as join5, relative as relative2, resolve as resolve8, sep } from "node:path";
-var SKIP = /* @__PURE__ */ new Set([".git", "node_modules", ".ds_store", "thumbs.db", ".npmrc", ".netrc", ".envrc", ".aws", ".ssh", ".nimblybase", "credentials.json"]);
 var MAX_FILES = 2e4;
 var MAX_FILE_BYTES = 25 * 1024 * 1024;
 var MAX_SITE_BYTES = 100 * 1024 * 1024;
@@ -9591,7 +9646,7 @@ async function collect(dir) {
     for (const entry of await readdir2(current, { withFileTypes: true })) {
       const name = entry.name.toLowerCase();
       const path = toUrlPath(relative2(dir, join5(current, entry.name)));
-      if (SKIP.has(name) || name === ".env" || name.startsWith(".env.") || name.endsWith(".map") || /\.(?:pem|p12|pfx|key)$/.test(name) || /^id_(?:rsa|ed25519|ecdsa|dsa)$/.test(name)) {
+      if (excludedArtifactName(name)) {
         omitted.push(path);
         continue;
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nimblybase",
-  "version": "0.1.11",
+  "version": "0.1.12",
   "description": "The NimblyBase command line - projects, keys and backends from a terminal.",
   "license": "UNLICENSED",
   "repository": {