@depup/vercel 59.5.0-depup.0 → 59.11.7-depup.0

package/README.md

@@ -13,8 +13,8 @@ npm install @depup/vercel
 
 | Field | Value |
 |-------|-------|
-| Original | [vercel](https://www.npmjs.com/package/vercel) @ 59.5.0 |
-| Processed | 2026-08-23 |
+| Original | [vercel](https://www.npmjs.com/package/vercel) @ 59.11.7 |
+| Processed | 2026-09-06 |
 | Smoke test | failed |
 | Deps updated | 11 |
 
@@ -26,13 +26,13 @@ npm install @depup/vercel
 | @vercel/prepare-flags-definitions | 0.3.0 | ^0.4.0 |
 | chokidar | 4.0.0 | ^5.0.0 |
 | esbuild | 0.27.0 | ^0.28.2 |
-| jose | 5.9.6 | ^6.2.10 |
+| jose | 5.9.6 | ^6.2.12 |
 | luxon | ^3.4.0 | ^3.7.2 |
-| sandbox | 4.0.0 | ^4.1.0 |
+| sandbox | 4.1.0 | ^4.2.1 |
 | smol-toml | 1.5.2 | ^1.8.0 |
-| undici | 5.29.0 | ^8.10.0 |
+| undici | 5.29.0 | ^8.10.2 |
 | uuid | 14.0.1 | ^14.0.2 |
-| zod | 4.1.11 | ^4.4.3 |
+| zod | 4.1.11 | ^4.5.4 |
 
 ---
 

package/changes.json

@@ -18,15 +18,15 @@
     },
     "jose": {
       "from": "5.9.6",
-      "to": "^6.2.10"
+      "to": "^6.2.12"
     },
     "luxon": {
       "from": "^3.4.0",
       "to": "^3.7.2"
     },
     "sandbox": {
-      "from": "4.0.0",
-      "to": "^4.1.0"
+      "from": "4.1.0",
+      "to": "^4.2.1"
     },
     "smol-toml": {
       "from": "1.5.2",
@@ -34,7 +34,7 @@
     },
     "undici": {
       "from": "5.29.0",
-      "to": "^8.10.0"
+      "to": "^8.10.2"
     },
     "uuid": {
       "from": "14.0.1",
@@ -42,9 +42,9 @@
     },
     "zod": {
       "from": "4.1.11",
-      "to": "^4.4.3"
+      "to": "^4.5.4"
     }
   },
-  "timestamp": "2026-08-23T00:28:28.506Z",
+  "timestamp": "2026-09-06T01:01:07.921Z",
   "totalUpdated": 11
 }

package/dist/chunks/{add-MH3WV6PV.js → add-KSJQYR5C.js}

@@ -17,44 +17,49 @@ import {
   emitVcrArgParseError,
   resolveVcrScope,
   validateVcrJsonOutput
-} from "./chunk-M3OSDZPY.js";
-import "./chunk-G75NFPIT.js";
+} from "./chunk-FVNJTRCE.js";
+import "./chunk-TO7QZGYK.js";
 import {
   outputError
-} from "./chunk-KQRVZWJU.js";
+} from "./chunk-KFWQ3EFH.js";
 import "./chunk-KXDWXXJH.js";
 import {
   permissionsAddSubcommand
 } from "./chunk-EZKW5YJ2.js";
-import "./chunk-R6IGDGX3.js";
-import "./chunk-E6LFKMI2.js";
-import "./chunk-OHER4DGX.js";
-import "./chunk-CYNB6LL4.js";
-import {
-  AGENT_REASON,
-  buildCommandWithGlobalFlags,
-  outputAgentError
-} from "./chunk-L7CEMAJG.js";
+import "./chunk-5NF5HOBJ.js";
+import "./chunk-ZDU2NODC.js";
+import "./chunk-PEC3CQSK.js";
 import "./chunk-GGP5R3FU.js";
+import {
+  AGENT_REASON
+} from "./chunk-VUS2JQB2.js";
+import "./chunk-4IVSM24H.js";
+import "./chunk-XNIZGCN5.js";
 import {
   printError
-} from "./chunk-CQJRLNTX.js";
+} from "./chunk-3VM7HWF6.js";
 import {
   parseArguments
 } from "./chunk-57RHXXXG.js";
-import "./chunk-RKDCNQ4S.js";
+import "./chunk-2TSBB22D.js";
+import "./chunk-G5FBSUL4.js";
+import {
+  buildCommandWithGlobalFlags,
+  outputAgentError
+} from "./chunk-26CU4Q3C.js";
+import "./chunk-XPJLPUKO.js";
 import {
   isAPIError
-} from "./chunk-AWCID36T.js";
+} from "./chunk-CV5YC2EN.js";
 import {
   getFlagsSpecification,
   packageName
 } from "./chunk-Q2DGFCO7.js";
-import "./chunk-P4QNYOFB.js";
-import "./chunk-52QYYTM5.js";
 import {
   output_manager_default
-} from "./chunk-OX7KI3LF.js";
+} from "./chunk-2JIX6UMI.js";
+import "./chunk-P4QNYOFB.js";
+import "./chunk-ZW6HETRE.js";
 import "./chunk-S7KYDPEM.js";
 import {
   __toESM

package/dist/chunks/{add-Z5FM6TFI.js → add-PERLOALD.js}

@@ -4,61 +4,75 @@ import { dirname as __dirname_ } from 'node:path';
 const require = __createRequire(import.meta.url);
 const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
+import {
+  isCustomAlertRule
+} from "./chunk-ARU7VBKR.js";
 import {
   parseCustomAlertQueryBody,
   resolveCustomAlertProjectName,
   setMissingCustomAlertProjectScope
-} from "./chunk-CSCSGSQG.js";
+} from "./chunk-QKX7WKIN.js";
 import {
   emitRulesArgParseError,
   handleRulesApiError,
   parseRulesFlagsAndScope,
   rulesCollectionPath
-} from "./chunk-PBHBX6UL.js";
-import {
-  isCustomAlertRule
-} from "./chunk-26XDDLXM.js";
-import "./chunk-NSU2BTRS.js";
+} from "./chunk-KEKR7OCB.js";
+import "./chunk-N4QHMXOO.js";
 import "./chunk-A3NYPUKZ.js";
-import "./chunk-KQRVZWJU.js";
+import "./chunk-KFWQ3EFH.js";
 import "./chunk-FGDKMNEN.js";
-import "./chunk-4JTF6RD7.js";
+import "./chunk-GUU4Z2AQ.js";
 import "./chunk-AINIBIP4.js";
-import "./chunk-XRWOTCDO.js";
+import "./chunk-Z7JWYFOY.js";
+import "./chunk-ND5CF2H3.js";
 import {
   validateJsonOutput
 } from "./chunk-KXDWXXJH.js";
+import "./chunk-V4RMJKQP.js";
 import {
   rulesAddSubcommand
 } from "./chunk-XM3LOQIX.js";
-import "./chunk-E6LFKMI2.js";
-import "./chunk-OHER4DGX.js";
-import "./chunk-CYNB6LL4.js";
-import {
-  AGENT_REASON,
-  buildCommandWithGlobalFlags,
-  outputAgentError
-} from "./chunk-L7CEMAJG.js";
+import "./chunk-G3PXSXIB.js";
+import "./chunk-P7VSBDR4.js";
+import "./chunk-QOPTXV4G.js";
+import "./chunk-ZDU2NODC.js";
+import "./chunk-PEC3CQSK.js";
 import "./chunk-GGP5R3FU.js";
+import {
+  AGENT_REASON
+} from "./chunk-VUS2JQB2.js";
+import "./chunk-DBYHS3CK.js";
+import "./chunk-HRXRELD3.js";
+import "./chunk-B5XLQKHI.js";
+import "./chunk-NW34PW6V.js";
+import "./chunk-4IVSM24H.js";
+import "./chunk-XNIZGCN5.js";
 import {
   printError
-} from "./chunk-CQJRLNTX.js";
+} from "./chunk-3VM7HWF6.js";
 import {
   parseArguments
 } from "./chunk-57RHXXXG.js";
-import "./chunk-RKDCNQ4S.js";
+import "./chunk-2TSBB22D.js";
+import "./chunk-G5FBSUL4.js";
+import {
+  buildCommandWithGlobalFlags,
+  outputAgentError
+} from "./chunk-26CU4Q3C.js";
+import "./chunk-XPJLPUKO.js";
 import {
   isAPIError
-} from "./chunk-AWCID36T.js";
+} from "./chunk-CV5YC2EN.js";
 import {
   getFlagsSpecification,
   packageName
 } from "./chunk-Q2DGFCO7.js";
-import "./chunk-P4QNYOFB.js";
-import "./chunk-52QYYTM5.js";
 import {
   output_manager_default
-} from "./chunk-OX7KI3LF.js";
+} from "./chunk-2JIX6UMI.js";
+import "./chunk-P4QNYOFB.js";
+import "./chunk-ZW6HETRE.js";
 import "./chunk-S7KYDPEM.js";
 import "./chunk-TZ2YI2VH.js";
 

package/dist/chunks/{add-W3FFMTX4.js → add-WU2QYHYL.js}

@@ -9,11 +9,11 @@ import {
   handleVcrApiError,
   resolveVcrScope,
   validateVcrJsonOutput
-} from "./chunk-M3OSDZPY.js";
-import "./chunk-G75NFPIT.js";
+} from "./chunk-FVNJTRCE.js";
+import "./chunk-TO7QZGYK.js";
 import {
   outputError
-} from "./chunk-KQRVZWJU.js";
+} from "./chunk-KFWQ3EFH.js";
 import "./chunk-KXDWXXJH.js";
 import {
   addSubcommand
@@ -21,35 +21,40 @@ import {
 import "./chunk-EZKW5YJ2.js";
 import "./chunk-NFU4XJIR.js";
 import "./chunk-3HZLXCVL.js";
-import "./chunk-R6IGDGX3.js";
-import "./chunk-E6LFKMI2.js";
-import "./chunk-OHER4DGX.js";
-import "./chunk-CYNB6LL4.js";
-import {
-  AGENT_REASON,
-  buildCommandWithGlobalFlags,
-  outputAgentError
-} from "./chunk-L7CEMAJG.js";
+import "./chunk-5NF5HOBJ.js";
+import "./chunk-ZDU2NODC.js";
+import "./chunk-PEC3CQSK.js";
 import "./chunk-GGP5R3FU.js";
+import {
+  AGENT_REASON
+} from "./chunk-VUS2JQB2.js";
+import "./chunk-4IVSM24H.js";
+import "./chunk-XNIZGCN5.js";
 import {
   printError
-} from "./chunk-CQJRLNTX.js";
+} from "./chunk-3VM7HWF6.js";
 import {
   parseArguments
 } from "./chunk-57RHXXXG.js";
-import "./chunk-RKDCNQ4S.js";
+import "./chunk-2TSBB22D.js";
+import "./chunk-G5FBSUL4.js";
+import {
+  buildCommandWithGlobalFlags,
+  outputAgentError
+} from "./chunk-26CU4Q3C.js";
+import "./chunk-XPJLPUKO.js";
 import {
   isAPIError
-} from "./chunk-AWCID36T.js";
+} from "./chunk-CV5YC2EN.js";
 import {
   getFlagsSpecification,
   packageName
 } from "./chunk-Q2DGFCO7.js";
-import "./chunk-P4QNYOFB.js";
-import "./chunk-52QYYTM5.js";
 import {
   output_manager_default
-} from "./chunk-OX7KI3LF.js";
+} from "./chunk-2JIX6UMI.js";
+import "./chunk-P4QNYOFB.js";
+import "./chunk-ZW6HETRE.js";
 import "./chunk-S7KYDPEM.js";
 import "./chunk-TZ2YI2VH.js";
 

package/dist/chunks/{build-VYYFBJL7.js → build-F3J6FLPD.js}

@@ -23,11 +23,11 @@ import {
   runEngine,
   splitPassthrough,
   validateVcrChoice
-} from "./chunk-M3OSDZPY.js";
-import "./chunk-G75NFPIT.js";
+} from "./chunk-FVNJTRCE.js";
+import "./chunk-TO7QZGYK.js";
 import {
   outputError
-} from "./chunk-KQRVZWJU.js";
+} from "./chunk-KFWQ3EFH.js";
 import "./chunk-KXDWXXJH.js";
 import {
   buildSubcommand
@@ -35,32 +35,37 @@ import {
 import "./chunk-EZKW5YJ2.js";
 import "./chunk-NFU4XJIR.js";
 import "./chunk-3HZLXCVL.js";
-import "./chunk-R6IGDGX3.js";
-import "./chunk-E6LFKMI2.js";
-import "./chunk-OHER4DGX.js";
-import "./chunk-CYNB6LL4.js";
-import {
-  AGENT_REASON,
-  buildCommandWithGlobalFlags,
-  outputAgentError
-} from "./chunk-L7CEMAJG.js";
+import "./chunk-5NF5HOBJ.js";
+import "./chunk-ZDU2NODC.js";
+import "./chunk-PEC3CQSK.js";
 import "./chunk-GGP5R3FU.js";
+import {
+  AGENT_REASON
+} from "./chunk-VUS2JQB2.js";
+import "./chunk-4IVSM24H.js";
+import "./chunk-XNIZGCN5.js";
 import {
   printError
-} from "./chunk-CQJRLNTX.js";
+} from "./chunk-3VM7HWF6.js";
 import {
   parseArguments
 } from "./chunk-57RHXXXG.js";
-import "./chunk-RKDCNQ4S.js";
-import "./chunk-AWCID36T.js";
+import "./chunk-2TSBB22D.js";
+import "./chunk-G5FBSUL4.js";
+import {
+  buildCommandWithGlobalFlags,
+  outputAgentError
+} from "./chunk-26CU4Q3C.js";
+import "./chunk-XPJLPUKO.js";
+import "./chunk-CV5YC2EN.js";
 import {
   getFlagsSpecification
 } from "./chunk-Q2DGFCO7.js";
-import "./chunk-P4QNYOFB.js";
-import "./chunk-52QYYTM5.js";
 import {
   output_manager_default
-} from "./chunk-OX7KI3LF.js";
+} from "./chunk-2JIX6UMI.js";
+import "./chunk-P4QNYOFB.js";
+import "./chunk-ZW6HETRE.js";
 import "./chunk-S7KYDPEM.js";
 import "./chunk-TZ2YI2VH.js";
 

package/dist/chunks/{chunk-L7CEMAJG.js → chunk-26CU4Q3C.js}

@@ -8,7 +8,7 @@ import {
   LinkRequiredError,
   ProjectNotFound,
   isAPIError
-} from "./chunk-AWCID36T.js";
+} from "./chunk-CV5YC2EN.js";
 import {
   getGlobalFlagsFromArgs,
   packageName,
@@ -17,11 +17,19 @@ import {
 } from "./chunk-Q2DGFCO7.js";
 import {
   require_dist
-} from "./chunk-OX7KI3LF.js";
+} from "./chunk-ZW6HETRE.js";
 import {
   __toESM
 } from "./chunk-TZ2YI2VH.js";
 
+// src/util/flags/quote-arg.ts
+function quoteArg(value) {
+  if (/^[A-Za-z0-9_./@:-]+$/.test(value)) {
+    return value;
+  }
+  return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+
 // src/util/agent-output.ts
 var import_error_utils = __toESM(require_dist(), 1);
 function buildCommandWithYes(argv, pkgName = packageName) {
@@ -30,6 +38,18 @@ function buildCommandWithYes(argv, pkgName = packageName) {
   const out = hasYes ? args : [...args, "--yes"];
   return `${pkgName} ${out.join(" ")}`.trim();
 }
+function redactEnvValueArgs(argv) {
+  const redacted = [...argv];
+  for (let i = 0; i < redacted.length; i++) {
+    if (redacted[i] === "--value" && i + 1 < redacted.length) {
+      redacted[i + 1] = '"<value>"';
+      i++;
+    } else if (redacted[i].startsWith("--value=")) {
+      redacted[i] = '--value="<value>"';
+    }
+  }
+  return redacted;
+}
 var GLOBAL_FLAG_NAMES = /* @__PURE__ */ new Set([
   "--cwd",
   "--config",
@@ -212,7 +232,7 @@ function buildEnvAddCommandWithPreservedArgs(argv, commandTemplate, pkgName = pa
   const base = `${pkgName} ${commandTemplate}`;
   if (preserved.length === 0)
     return base;
-  return `${base} ${preserved.join(" ")}`;
+  return `${base} ${preserved.map(quoteArg).join(" ")}`;
 }
 function getPreservedArgsForEnvPull(argv) {
   return getPreservedArgsAfterEnvSubcommand(argv, ["pull"], 1);
@@ -228,7 +248,7 @@ function buildEnvRmCommandWithPreservedArgs(argv, commandTemplate, pkgName = pac
   const base = `${pkgName} ${commandTemplate}`;
   if (preserved.length === 0)
     return base;
-  return `${base} ${preserved.join(" ")}`;
+  return `${base} ${preserved.map(quoteArg).join(" ")}`;
 }
 function getPreservedArgsForEnvUpdate(argv) {
   return getPreservedArgsAfterEnvSubcommand(argv, ["update"], 3);
@@ -241,7 +261,7 @@ function buildEnvUpdateCommandWithPreservedArgs(argv, commandTemplate, pkgName =
   const base = `${pkgName} ${commandTemplate}`;
   if (preserved.length === 0)
     return base;
-  return `${base} ${preserved.join(" ")}`;
+  return `${base} ${preserved.map(quoteArg).join(" ")}`;
 }
 function buildCommandWithScope(argv, scopeSlug, pkgName = packageName) {
   const args = stripSensitiveAuthArgs(argv.slice(2));
@@ -553,117 +573,10 @@ function openUrlInBrowserCommand(url) {
   return `xdg-open '${url}'`;
 }
 
-// src/util/agent-output-constants.ts
-var AGENT_STATUS = {
-  ERROR: "error",
-  ACTION_REQUIRED: "action_required",
-  OK: "ok"
-};
-var AGENT_REASON = {
-  // Common (use across dns, flags, routes, env, domains, link)
-  MISSING_ARGUMENTS: "missing_arguments",
-  INVALID_ARGUMENTS: "invalid_arguments",
-  CONFIRMATION_REQUIRED: "confirmation_required",
-  INTERACTIVE_CONFIRMATION_REQUIRED: "interactive_confirmation_required",
-  LOGIN_REQUIRED: "login_required",
-  PROJECT_SETTINGS_REQUIRED: "project_settings_required",
-  NOT_LINKED: "not_linked",
-  NOT_FOUND: "not_found",
-  PROJECT_NOT_FOUND: "project_not_found",
-  MISSING_SCOPE: "missing_scope",
-  SCOPE_NOT_ACCESSIBLE: "scope_not_accessible",
-  API_ERROR: "api_error",
-  // Flags
-  SEGMENT_IN_USE: "segment_in_use",
-  // Env
-  MISSING_REQUIREMENTS: "missing_requirements",
-  MISSING_NAME: "missing_name",
-  MISSING_VALUE: "missing_value",
-  MISSING_ENVIRONMENT: "missing_environment",
-  ENV_NOT_FOUND: "env_not_found",
-  MULTIPLE_ENVS: "multiple_envs",
-  ENV_FILE_EXISTS: "env_file_exists",
-  GIT_BRANCH_REQUIRED: "git_branch_required",
-  ENV_KEY_SENSITIVE: "env_key_sensitive",
-  // Routes
-  AMBIGUOUS_ROUTE: "ambiguous_route",
-  ROUTE_CREATE_FAILED: "route_create_failed",
-  ROUTE_GENERATION_FAILED: "route_generation_failed",
-  // DNS
-  DOMAIN_NOT_FOUND: "domain_not_found",
-  DNS_RECORD_NOT_FOUND: "dns_record_not_found",
-  INCOMPLETE_RECORD: "incomplete_record",
-  PERMISSION_DENIED: "permission_denied",
-  INVALID_PORT: "invalid_port",
-  INVALID_DNS_TYPE: "invalid_dns_type",
-  DNS_ADD_FAILED: "dns_add_failed",
-  INVALID_DOMAIN: "invalid_domain",
-  CONFIGURED_CORRECTLY: "configured_correctly",
-  VERIFICATION_NEEDED: "verification_needed",
-  INVALID_CONFIGURATION: "invalid_configuration",
-  DNS_CHANGE_REQUIRED: "dns_change_required",
-  DNS_CHANGE_RECOMMENDED: "dns_change_recommended",
-  DNSSEC_NEEDS_TO_BE_DISABLED: "dnssec_needs_to_be_disabled",
-  PROJECT_ATTACHMENT_RECOMMENDED: "project_attachment_recommended",
-  PROJECT_DOMAIN_MISSING: "project_domain_missing",
-  /** User must accept marketplace integration terms in the browser before install can continue. */
-  INTEGRATION_TERMS_ACCEPTANCE_REQUIRED: "integration_terms_acceptance_required",
-  /** Integration uninstall blocked because team-scoped resources still exist. */
-  HAS_RESOURCES: "has_resources",
-  /** User must claim a sandbox marketplace resource (e.g. Stripe, Shopify) in the browser. */
-  INTEGRATION_SANDBOX_CLAIM_REQUIRED: "integration_sandbox_claim_required",
-  // Tokens
-  CLASSIC_TOKEN_REQUIRED: "classic_token_required",
-  /** Classic token lacks full user/account scope (e.g. team- or product-scoped token). */
-  TOKEN_USER_SCOPE_REQUIRED: "token_user_scope_required",
-  // Webhooks
-  MISSING_URL: "missing_url",
-  MISSING_EVENTS: "missing_events",
-  INVALID_URL: "invalid_url",
-  INVALID_EVENT: "invalid_event",
-  // AI Gateway
-  INVALID_BUDGET: "invalid_budget",
-  INVALID_REFRESH_PERIOD: "invalid_refresh_period",
-  INVALID_EXPIRATION: "invalid_expiration",
-  INVALID_ALERT_THRESHOLDS: "invalid_alert_thresholds",
-  /**
-   * Every selected agent needs explicit `--agent`/`--all` consent (see the
-   * payload's skipped[]). `--yes` does not grant it, so this is deliberately
-   * not `confirmation_required` — re-running with --yes would loop forever.
-   */
-  REQUIRES_CONSENT: "requires_consent",
-  // KMS
-  MISSING_ISSUER_ID: "missing_issuer_id",
-  MISSING_KEY: "missing_key",
-  MISSING_KEY_ID: "missing_key_id",
-  MISSING_PROJECT: "missing_project",
-  ISSUER_NOT_FOUND: "issuer_not_found",
-  /** The issuer is provisioned by another Vercel service and is read-only here. */
-  ISSUER_MANAGED: "issuer_managed",
-  /** Keys for an imported issuer must be imported too, so `add-key` cannot serve it. */
-  ISSUER_REQUIRES_IMPORTED_KEY: "issuer_requires_imported_key",
-  /** Vercel generates the keys for this issuer, so `import-key` cannot serve it. */
-  ISSUER_REQUIRES_GENERATED_KEY: "issuer_requires_generated_key",
-  /** Immediate revocation only applies to a key already scheduled for revocation. */
-  KEY_NOT_REVOKING: "key_not_revoking",
-  NO_CHANGES_REQUESTED: "no_changes_requested",
-  // Redirects
-  REDIRECT_NOT_FOUND: "redirect_not_found",
-  VERSION_NOT_FOUND: "version_not_found",
-  VERSION_ALREADY_LIVE: "version_already_live",
-  VERSION_IS_STAGING: "version_is_staging",
-  PLAN_UPGRADE_REQUIRED: "plan_upgrade_required",
-  NOT_TEAM_MEMBER: "not_team_member",
-  INVALID_ROLE_COMBINATION: "invalid_role_combination"
-};
-var AGENT_ACTION = {
-  MISSING_ARGUMENTS: "missing_arguments",
-  CONFIRMATION_REQUIRED: "confirmation_required",
-  LOGIN_REQUIRED: "login_required"
-};
-
 export {
+  quoteArg,
   buildCommandWithYes,
+  redactEnvValueArgs,
   omitGlobalFlagsFromArgs,
   buildIntegrationCommandTailFromArgv,
   buildCommandWithGlobalFlags,
@@ -681,8 +594,5 @@ export {
   outputAgentError,
   outputAgentSuccess,
   exitWithNonInteractiveError,
-  openUrlInBrowserCommand,
-  AGENT_STATUS,
-  AGENT_REASON,
-  AGENT_ACTION
+  openUrlInBrowserCommand
 };