@nearform/fling 0.1.1 → 0.1.2

package/dist/cli.js

@@ -23,14 +23,198 @@ var MAX_FILE_BYTES = 25 * 1024 * 1024;
 var MAX_FILES = 5e3;
 var MAX_PATH_LENGTH = 1024;
 
+// ../../packages/shared/src/secrets.ts
+var SECRET_SCAN_MAX_FILE_BYTES = 5 * 1024 * 1024;
+var BINARY_SNIFF_BYTES = 8192;
+var SECRET_EXTENSIONS = [
+  ".pem",
+  ".key",
+  ".p12",
+  ".pfx",
+  ".jks",
+  ".keystore",
+  ".tfstate",
+  ".tfstate.backup",
+  ".tfvars",
+  ".tfvars.json",
+  ".kdbx"
+];
+var SECRET_NAMES = /* @__PURE__ */ new Set([
+  "credentials",
+  "credentials.json",
+  "secrets.json",
+  "secrets.yml",
+  "secrets.yaml",
+  "wp-config.php",
+  ".htpasswd"
+]);
+var SSH_KEY_RE = /^id_(?:rsa|dsa|ecdsa|ed25519)(?:[._-]|$)/;
+function isSecretPath(path) {
+  const name = (path.split(/[\\/]/).at(-1) ?? "").toLowerCase();
+  if (!name) return false;
+  if (SECRET_NAMES.has(name)) return true;
+  if (SECRET_EXTENSIONS.some((ext) => name.endsWith(ext) && name.length > ext.length)) return true;
+  if (/service[-_]account.*\.json$/.test(name)) return true;
+  if (SSH_KEY_RE.test(name) && !name.endsWith(".pub")) return true;
+  return false;
+}
+var PLACEHOLDER_RE = /example|xxxx/i;
+var isPlaceholder = (m) => PLACEHOLDER_RE.test(m[0]);
+var DB_PASSWORD_PLACEHOLDER = /^(?:password|passw(?:or)?d|pass|pwd|secret|changeme|example|test|admin|root|postgres|mysql|redis|guest|user|\*+|x+|\.+)$/i;
+var LOCAL_HOST = /^(?:localhost|127\.0\.0\.1|0\.0\.0\.0|\[::1\]|db|host|hostname)(?::\d+)?$/i;
+var RULES = [
+  {
+    id: "private-key",
+    label: "private key",
+    // The header, optional RFC 1421 headers (Proc-Type, DEK-Info, Version), then key material.
+    re: /-----BEGIN (?:RSA |EC |DSA |OPENSSH |ENCRYPTED |PGP )?PRIVATE KEY(?: BLOCK)?-----[ \t]*\r?\n(?:[A-Za-z-]+:[^\n]*\r?\n)*(?:[ \t]*\r?\n)?[ \t]*[A-Za-z0-9+/=]{40,}/g
+  },
+  {
+    id: "aws-access-key-id",
+    label: "AWS access key ID",
+    re: /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/g,
+    allow: isPlaceholder
+  },
+  {
+    id: "aws-secret-access-key",
+    label: "AWS secret access key",
+    re: /\b(?:aws_?)?secret_?access_?key["']?\s*[:=]\s*["']?[A-Za-z0-9/+=]{40}(?![A-Za-z0-9/+=])/gi,
+    allow: isPlaceholder
+  },
+  {
+    id: "github-token",
+    label: "GitHub token",
+    re: /\b(?:gh[pousr]_[A-Za-z0-9]{36,}|github_pat_[A-Za-z0-9_]{80,})/g,
+    allow: isPlaceholder
+  },
+  { id: "npm-token", label: "npm token", re: /\bnpm_[A-Za-z0-9]{36}\b/g, allow: isPlaceholder },
+  {
+    id: "slack-token",
+    label: "Slack token",
+    re: /\bxox[abposr]-[0-9]{6,}-[A-Za-z0-9-]{10,}/g,
+    allow: isPlaceholder
+  },
+  {
+    id: "slack-webhook",
+    label: "Slack webhook URL",
+    re: /https:\/\/hooks\.slack\.com\/services\/T[A-Z0-9]{6,}\/B[A-Z0-9]{6,}\/[A-Za-z0-9]{20,}/g,
+    allow: isPlaceholder
+  },
+  {
+    id: "stripe-live-key",
+    label: "Stripe live key",
+    re: /\b[sr]k_live_[0-9a-zA-Z]{24,}\b/g,
+    allow: isPlaceholder
+  },
+  {
+    id: "google-oauth-client-secret",
+    label: "Google OAuth client secret",
+    re: /\bGOCSPX-[A-Za-z0-9_-]{28}(?![A-Za-z0-9_-])/g,
+    allow: isPlaceholder
+  },
+  {
+    id: "openai-api-key",
+    label: "OpenAI API key",
+    re: /\bsk-(?:(?:proj|svcacct|admin)-[A-Za-z0-9_-]{40,}|[A-Za-z0-9]{20}T3BlbkFJ[A-Za-z0-9]{20})/g,
+    allow: isPlaceholder
+  },
+  {
+    id: "anthropic-api-key",
+    label: "Anthropic API key",
+    re: /\bsk-ant-[A-Za-z0-9_-]{80,}/g,
+    allow: isPlaceholder
+  },
+  {
+    id: "sendgrid-api-key",
+    label: "SendGrid API key",
+    re: /\bSG\.[A-Za-z0-9_-]{22}\.[A-Za-z0-9_-]{43}(?![A-Za-z0-9_-])/g,
+    allow: isPlaceholder
+  },
+  {
+    id: "azure-storage-key",
+    label: "Azure storage account key",
+    re: /\bAccountKey=[A-Za-z0-9+/]{80,}={0,2}/g,
+    allow: isPlaceholder
+  },
+  {
+    id: "database-url-password",
+    label: "database URL with a password",
+    re: /\b(?:postgres(?:ql)?|mysql|mariadb|mongodb(?:\+srv)?|rediss?|amqps?):\/\/[^:\s/@"'`<>]+:([^@\s/"'`<>]{3,})@([^\s/?#"'`<>]+)/g,
+    allow: (m) => {
+      const password = m[1] ?? "";
+      const host = m[2] ?? "";
+      return DB_PASSWORD_PLACEHOLDER.test(password) || /[${}%]/.test(password) || PLACEHOLDER_RE.test(password) || LOCAL_HOST.test(host) || /(?:^|\.)example(?:\.[a-z]+)?(?::\d+)?$/i.test(host);
+    }
+  }
+];
+var SECRET_RULE_LABELS = Object.fromEntries(
+  RULES.map((r) => [r.id, r.label])
+);
+function lineAt(starts, index) {
+  let lo = 0;
+  let hi = starts.length - 1;
+  while (lo < hi) {
+    const mid = lo + hi + 1 >> 1;
+    if (starts[mid] <= index) lo = mid;
+    else hi = mid - 1;
+  }
+  return lo + 1;
+}
+function scanForSecrets(text, path) {
+  let starts;
+  const findings = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const rule of RULES) {
+    rule.re.lastIndex = 0;
+    for (let m = rule.re.exec(text); m !== null; m = rule.re.exec(text)) {
+      if (m[0].length === 0) rule.re.lastIndex++;
+      if (rule.allow?.(m)) continue;
+      if (!starts) {
+        starts = [0];
+        for (let i = text.indexOf("\n"); i !== -1; i = text.indexOf("\n", i + 1)) starts.push(i + 1);
+      }
+      const line = lineAt(starts, m.index);
+      const key = `${rule.id}:${line}`;
+      if (seen.has(key)) continue;
+      seen.add(key);
+      findings.push({ path, line, rule: rule.id });
+    }
+  }
+  return findings.sort((a, b) => a.line - b.line || a.rule.localeCompare(b.rule));
+}
+var BINARY_EXTENSIONS = new Set(
+  "png jpg jpeg gif webp avif ico bmp tif tiff heic psd woff woff2 ttf otf eot mp3 mp4 m4a m4v mov webm ogg oga ogv wav flac aac avi mkv zip gz tgz br zst bz2 xz 7z rar wasm pdf glb gltf-binary bin dat".split(/\s+/).filter(Boolean)
+);
+function isScannablePath(path) {
+  const name = path.split("/").at(-1) ?? "";
+  const dot = name.lastIndexOf(".");
+  return dot <= 0 || !BINARY_EXTENSIONS.has(name.slice(dot + 1).toLowerCase());
+}
+function looksBinary(bytes) {
+  const end = Math.min(bytes.length, BINARY_SNIFF_BYTES);
+  for (let i = 0; i < end; i++) if (bytes[i] === 0) return true;
+  return false;
+}
+function scanBytesForSecrets(bytes, path) {
+  if (!isScannablePath(path) || bytes.length > SECRET_SCAN_MAX_FILE_BYTES || looksBinary(bytes))
+    return [];
+  return scanForSecrets(new TextDecoder("utf-8").decode(bytes), path);
+}
+function describeSecretFindings(findings, max = 20) {
+  const lines = findings.slice(0, max).map((f) => `${f.path} line ${f.line}: ${SECRET_RULE_LABELS[f.rule] ?? f.rule}`);
+  if (findings.length > max) lines.push(`\u2026 and ${findings.length - max} more`);
+  return lines;
+}
+var NEVER_PUBLISHED_NOTE = "Fling never publishes dotfiles, gitignored files, secret files (keys, certificates, credentials) or files that contain secrets.";
+
 // ../../packages/shared/src/manifest.ts
 function isValidSitePath(path) {
   if (!path || path.length > MAX_PATH_LENGTH) return false;
   if (path.startsWith("/") || path.includes("\\") || path.includes("\0")) return false;
-  return path.split("/").every((seg) => seg !== "" && seg !== "." && seg !== "..");
+  return path.split("/").every((seg) => seg !== "" && !seg.startsWith("."));
 }
 var ManifestFileSchema = z.object({
-  path: z.string().refine(isValidSitePath, "invalid path"),
+  path: z.string().refine(isValidSitePath, "invalid path (dotfiles are never published)").refine((p) => !isSecretPath(p), "secret file (keys, certificates, credentials) never published"),
   sha256: z.string().regex(/^[a-f0-9]{64}$/),
   size: z.number().int().min(0).max(MAX_FILE_BYTES),
   contentType: z.string().min(1).max(255)
@@ -279,6 +463,7 @@ var NAME_RULES = `Site names are 1-${SITE_NAME_MAX} chars of lowercase letters,
 var NAME_REQUIRED = 'Publishing needs a name: if the user did not give one, propose a short descriptive one (e.g. "q3-report") and confirm it with them first (fling_check_name tells you whether it is free). If the name is taken by someone else the call fails with free suggestions \u2014 offer those to the user and retry with the one they pick.';
 var VISIBILITY = "Sites are private by default (only signed-in Nearformers can open them); pass `public: true` only if the user asks for a public site. Share links (fling_share) are public to anyone who has them.";
 var INLINE_ONLY = "If you created the content in this conversation, pass it directly \u2014 never pass file paths from your sandbox (this server cannot read them) and never try to curl/upload from your sandbox.";
+var NEVER_PUBLISHED = "Fling never publishes dotfiles, gitignored files, secret files (keys, certs, credentials) or files that contain secrets (API keys, tokens, private keys, passwords in database URLs); it stops and tells you which file and line. Remove the secret (or leave the file out) and retry \u2014 there is no way to override this.";
 var ENCODING = '`encoding` is "utf8" (default, for text: HTML, CSS, JS, SVG, JSON, Markdown\u2026) or "base64" (binary: images, fonts, PDFs).';
 var LIST_HTML = "If the files have no root index.html but do include HTML pages, the call does not publish: it reports how many HTML pages there are and asks you to check with the user. Ask them whether to generate an index.html listing those pages (retry with `listHtml: true`) or to publish without one (`listHtml: false` \u2014 the site root will 404, the pages still work at their own paths), then retry.";
 var listHtml = z4.boolean().optional().describe(
@@ -286,7 +471,7 @@ var listHtml = z4.boolean().optional().describe(
 );
 var siteName = z4.string().min(1).max(200).describe('Site name, e.g. "q3-report"');
 var sitePath = z4.string().min(1).max(1024).describe(
-  'Site-relative path with forward slashes, e.g. "index.html", "css/app.css", "img/logo.png". The root page must be "index.html".'
+  'Site-relative path with forward slashes, e.g. "index.html", "css/app.css", "img/logo.png". The root page must be "index.html". No dotfiles (".env", ".well-known/\u2026")'
 );
 var encoding = z4.enum(["utf8", "base64"]).optional().describe('How `content` is encoded: "utf8" (default) for text, "base64" for binary files');
 var spa = z4.boolean().optional().describe(
@@ -339,7 +524,7 @@ var mcpTools = {
   publish: tool({
     name: "fling_publish",
     title: "Publish a site",
-    description: `Publish a static site to Fling in one call and get back its URL. Pass every file of the site inline in \`files\` (whole site, up to ${MCP_PUBLISH_MAX_BYTES / 1024 / 1024} MB decoded in total; bigger sites: fling_upload_begin / fling_upload_file / fling_upload_finish). ${INLINE_ONLY} ${ENCODING} Publishing replaces the whole site with exactly these files (it is not a patch: include unchanged files too); publishing identical content again is a no-op. ${NAME_REQUIRED} ${NAME_RULES} ${VISIBILITY} ${LIST_HTML} The result includes \`warnings\`. Share the returned URL with the user; fling_files shows exactly which files the site has.`,
+    description: `Publish a static site to Fling in one call and get back its URL. Pass every file of the site inline in \`files\` (whole site, up to ${MCP_PUBLISH_MAX_BYTES / 1024 / 1024} MB decoded in total; bigger sites: fling_upload_begin / fling_upload_file / fling_upload_finish). ${INLINE_ONLY} ${ENCODING} Publishing replaces the whole site with exactly these files (it is not a patch: include unchanged files too); publishing identical content again is a no-op. ${NAME_REQUIRED} ${NAME_RULES} ${VISIBILITY} ${LIST_HTML} ${NEVER_PUBLISHED} The result includes \`warnings\`. Share the returned URL with the user; fling_files shows exactly which files the site has.`,
     inputSchema: {
       name: siteName,
       files: z4.array(
@@ -365,7 +550,7 @@ var mcpTools = {
   uploadFile: tool({
     name: "fling_upload_file",
     title: "Upload a file (chunked)",
-    description: `Add one file to a chunked upload started with fling_upload_begin. Sending the same path again replaces it. A file larger than ${MCP_UPLOAD_CHUNK_MAX_CHARS / 1024 / 1024} MB of content can span calls: send the first part normally, then the following parts in order with \`append: true\` (same path and encoding; send appends one at a time, not in parallel). ${ENCODING}`,
+    description: `Add one file to a chunked upload started with fling_upload_begin. Sending the same path again replaces it. A file larger than ${MCP_UPLOAD_CHUNK_MAX_CHARS / 1024 / 1024} MB of content can span calls: send the first part normally, then the following parts in order with \`append: true\` (same path and encoding; send appends one at a time, not in parallel). ${ENCODING} ${NEVER_PUBLISHED}`,
     inputSchema: {
       uploadId: z4.string().min(1).max(100).describe("From fling_upload_begin"),
       path: sitePath,
@@ -440,6 +625,7 @@ var MCP_REMOTE_INSTRUCTIONS = [
   "Every site needs a name. If the user did not give one, propose a short descriptive name and confirm it before publishing (fling_check_name shows whether it is free). Names are global and first come, first served; when a name is taken, offer the returned suggestions.",
   "Sites are private (Nearformers only) by default. Only make one public if asked; to show a private site to someone outside Nearform, create a share link with fling_share.",
   "If a site has HTML pages but no root index.html, fling_publish / fling_upload_finish stop and ask: check with the user whether to generate an index.html listing the pages (`listHtml: true`) or publish without one (`listHtml: false`, the root URL will 404), then retry.",
+  NEVER_PUBLISHED,
   `For sites over ${MCP_PUBLISH_MAX_BYTES / 1024 / 1024} MB use fling_upload_begin, fling_upload_file (repeat, \`append\` for big files) and fling_upload_finish.`,
   "Always give the user the URL that comes back. Use fling_list / fling_info to find existing sites, fling_rollback to restore a version, fling_archive rather than fling_delete unless the user insists. Use fling_files to see exactly which files a site has (e.g. when the user reports a 404)."
 ].join("\n\n");
@@ -543,7 +729,7 @@ function exitCodeFor(error) {
 // package.json
 var package_default = {
   name: "@nearform/fling",
-  version: "0.1.1",
+  version: "0.1.2",
   license: "MIT",
   description: "Fling a folder of static files at fling.labs.nearform.com and get a link back. CLI + MCP server.",
   type: "module",
@@ -718,15 +904,26 @@ async function readBody(response) {
 function errorFromResponse(status, body, method, path) {
   const envelope = ErrorEnvelopeSchema.safeParse(body);
   if (envelope.success) {
-    return new CliApiError({
+    const { code } = envelope.data.error;
+    const error = new CliApiError({
       status,
-      code: envelope.data.error.code,
+      code,
       body,
-      message: envelope.data.error.message
+      message: envelope.data.error.message,
+      hint: code ? NEVER_PUBLISHED_HINTS[code] : void 0
     });
+    const extra = body.error;
+    if (Array.isArray(extra?.findings)) Object.assign(error, { findings: extra.findings });
+    if (Array.isArray(extra?.paths)) Object.assign(error, { paths: extra.paths });
+    return error;
   }
   return new CliApiError({ status, body, message: `${method} ${path} failed with HTTP ${status}` });
 }
+var NEVER_PUBLISHED_HINTS = {
+  secret_detected: "Remove the secret from the file (and rotate it if it was ever shared), or add the file to .flingignore if the site does not need it.",
+  secret_file: "Move the secret files out of the folder, or add them to .flingignore if the site does not need them.",
+  dotfile: `Dotfiles are never flung. Update the CLI (\`npm i -g @nearform/fling@latest\`), which skips them.`
+};
 function describeCause(cause) {
   if (cause instanceof Error) {
     const inner = cause.cause;
@@ -1320,18 +1517,121 @@ async function runWhoami(ctx) {
 import chalk5 from "chalk";
 
 // src/deploy.ts
-import { readFile as readFile3 } from "node:fs/promises";
+import { readFile as readFile4 } from "node:fs/promises";
 
 // src/manifest.ts
 import { createHash } from "node:crypto";
 import { createReadStream } from "node:fs";
-import { readdir, readFile as readFile2, realpath, stat as stat2 } from "node:fs/promises";
-import { join as join2, sep } from "node:path";
-import ignore from "ignore";
+import { readdir, readFile as readFile3, realpath as realpath2, stat as stat2 } from "node:fs/promises";
+import { join as join3, relative as relative2, sep as sep2 } from "node:path";
+import ignore2 from "ignore";
 import mime from "mime";
+
+// src/gitignore.ts
+import { execFile } from "node:child_process";
+import { readFile as readFile2, realpath } from "node:fs/promises";
+import { join as join2, relative, sep } from "node:path";
+import ignore from "ignore";
+var GIT_TIMEOUT_MS = 2e4;
+function git(cwd, args, input) {
+  return new Promise((resolve3) => {
+    try {
+      const child = execFile(
+        "git",
+        ["-C", cwd, ...args],
+        { timeout: GIT_TIMEOUT_MS, maxBuffer: 256 * 1024 * 1024, encoding: "utf8" },
+        (error, stdout) => {
+          const code = error?.code;
+          if (error && !(args[0] === "check-ignore" && code === 1)) resolve3(null);
+          else resolve3(stdout);
+        }
+      );
+      child.on("error", () => resolve3(null));
+      if (input !== void 0) child.stdin?.end(input);
+    } catch {
+      resolve3(null);
+    }
+  });
+}
+async function rootIsIgnored(top, root) {
+  const rel = relative(top, root);
+  if (!rel || rel.startsWith("..")) return false;
+  const segments = rel.split(sep);
+  const candidates = segments.map((_, i) => `${segments.slice(0, i + 1).join("/")}/`);
+  const out = await git(top, ["check-ignore", "--stdin", "-z"], `${candidates.join("\0")}\0`);
+  return out !== null && out.split("\0").some(Boolean);
+}
+function gitMode(entries) {
+  const files = /* @__PURE__ */ new Set();
+  const dirs = [];
+  for (const e of entries) {
+    if (!e) continue;
+    if (e.endsWith("/")) dirs.push(e);
+    else files.add(e);
+  }
+  const dirSet = new Set(dirs);
+  return {
+    mode: "git",
+    ignores(rel, isDir) {
+      if (isDir ? dirSet.has(`${rel}/`) : files.has(rel)) return true;
+      let i = rel.indexOf("/");
+      while (i !== -1) {
+        if (dirSet.has(rel.slice(0, i + 1))) return true;
+        i = rel.indexOf("/", i + 1);
+      }
+      return false;
+    },
+    async enterDir() {
+    }
+  };
+}
+function nestedMode() {
+  const levels = [];
+  return {
+    mode: "nested",
+    ignores(rel, isDir) {
+      for (const { base, ig } of levels) {
+        if (base && !rel.startsWith(`${base}/`)) continue;
+        const sub = base ? rel.slice(base.length + 1) : rel;
+        if (sub && ig.ignores(isDir ? `${sub}/` : sub)) return true;
+      }
+      return false;
+    },
+    async enterDir(absDir, relDir) {
+      let text;
+      try {
+        text = await readFile2(join2(absDir, ".gitignore"), "utf8");
+      } catch {
+        return;
+      }
+      levels.push({ base: relDir, ig: ignore().add(text) });
+    }
+  };
+}
+async function loadGitIgnore(root) {
+  const topOut = await git(root, ["rev-parse", "--show-toplevel"]);
+  const topRaw = topOut?.trim();
+  if (!topRaw) return nestedMode();
+  const top = await realpath(topRaw).catch(() => topRaw);
+  if (await rootIsIgnored(top, root)) return nestedMode();
+  const listed = await git(root, [
+    "ls-files",
+    "--others",
+    "--ignored",
+    "--exclude-standard",
+    "--directory",
+    "-z"
+  ]);
+  if (listed === null) return nestedMode();
+  return gitMode(listed.split("\0"));
+}
+
+// src/manifest.ts
 var IGNORE_FILE = ".flingignore";
 var NO_INDEX_WARNING = "No index.html at the top of the folder \u2014 the site root will 404.";
 var ALWAYS_SKIP = /* @__PURE__ */ new Set(["node_modules"]);
+var QUIET_DOT_ENTRIES = /* @__PURE__ */ new Set([".git", ".DS_Store"]);
+var SKIPPED_SHOWN = 5;
 var CHARSET_TYPES = /* @__PURE__ */ new Set([
   "application/javascript",
   "application/json",
@@ -1339,6 +1639,45 @@ var CHARSET_TYPES = /* @__PURE__ */ new Set([
   "application/xml",
   "image/svg+xml"
 ]);
+var SecretFilesError = class extends CliError {
+  constructor(paths) {
+    const shown = paths.slice(0, 20);
+    super(
+      `Not flung: ${paths.length === 1 ? "this is a secret file" : `these are ${paths.length} secret files`} (keys, certificates, credentials): ${shown.join(", ")}${paths.length > shown.length ? ` (+${paths.length - shown.length} more)` : ""}. ${NEVER_PUBLISHED_NOTE}`,
+      {
+        hint: `Move ${paths.length === 1 ? "it" : "them"} out of the folder, or add ${paths.length === 1 ? "it" : "them"} to ${IGNORE_FILE} if the site does not need ${paths.length === 1 ? "it" : "them"}.`
+      }
+    );
+    this.paths = paths;
+    this.name = "SecretFilesError";
+  }
+  code = "secret_file";
+};
+var SecretsFoundError = class extends CliError {
+  constructor(findings) {
+    const files = new Set(findings.map((f) => f.path)).size;
+    super(
+      `Not flung: found secrets in ${files} file${files === 1 ? "" : "s"}:
+  ${describeSecretFindings(findings).join("\n  ")}
+${NEVER_PUBLISHED_NOTE}`,
+      {
+        hint: `Remove the secret (and rotate it if it was ever shared), or add the file to ${IGNORE_FILE} if the site does not need it.`
+      }
+    );
+    this.findings = findings;
+    this.name = "SecretsFoundError";
+  }
+  code = "secret_detected";
+};
+function describeSkipped(skipped) {
+  const line = (n, what, names) => `Skipped ${n} ${what}${n === 1 ? "" : "s"} (${names.slice(0, SKIPPED_SHOWN).join(", ")}${n > SKIPPED_SHOWN ? ", \u2026" : ""}) \u2014 ${what}s are never flung`;
+  const lines = [];
+  if (skipped.dotfiles.length)
+    lines.push(line(skipped.dotfiles.length, "dotfile", skipped.dotfiles));
+  if (skipped.gitignored.length)
+    lines.push(line(skipped.gitignored.length, "gitignored file", skipped.gitignored));
+  return lines;
+}
 function contentTypeFor(path) {
   const type = mime.getType(path) ?? "application/octet-stream";
   return type.startsWith("text/") || CHARSET_TYPES.has(type) ? `${type}; charset=utf-8` : type;
@@ -1361,29 +1700,38 @@ function toManifest(local) {
 async function buildManifest(dir) {
   let root;
   try {
-    root = await realpath(dir);
+    root = await realpath2(dir);
   } catch {
     throw new CliError(`Folder not found: ${dir}`);
   }
   if (!(await stat2(root)).isDirectory()) throw new CliError(`Not a folder: ${dir}`);
   const ig = await loadIgnore(root);
+  const gitIgnore = await loadGitIgnore(root);
   const warnings = [];
+  const skipped = { dotfiles: [], gitignored: [] };
+  const secretFiles = [];
   const found = [];
   const visitedDirs = /* @__PURE__ */ new Set([root]);
-  const inside = (real) => real === root || real.startsWith(root + sep);
+  const inside = (real) => real === root || real.startsWith(root + sep2);
   async function walk2(realDir, relDir) {
+    await gitIgnore.enterDir(realDir, relDir);
     const entries = await readdir(realDir, { withFileTypes: true });
     entries.sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
     for (const entry of entries) {
-      if (entry.name.startsWith(".") || ALWAYS_SKIP.has(entry.name)) continue;
       const rel = relDir ? `${relDir}/${entry.name}` : entry.name;
-      let abs = join2(realDir, entry.name);
+      if (entry.name.startsWith(".")) {
+        if (!QUIET_DOT_ENTRIES.has(entry.name))
+          skipped.dotfiles.push(entry.isDirectory() ? `${rel}/` : rel);
+        continue;
+      }
+      if (ALWAYS_SKIP.has(entry.name)) continue;
+      let abs = join3(realDir, entry.name);
       let isDir = entry.isDirectory();
       let isFile = entry.isFile();
       if (entry.isSymbolicLink()) {
         let target;
         try {
-          target = await realpath(abs);
+          target = await realpath2(abs);
         } catch {
           warnings.push(`Skipped broken symlink: ${rel}`);
           continue;
@@ -1393,17 +1741,38 @@ async function buildManifest(dir) {
           continue;
         }
         const info = await stat2(target);
+        const targetRel = relative2(root, target).split(sep2).join("/");
+        if (targetRel.split("/").some((seg) => seg.startsWith("."))) {
+          skipped.dotfiles.push(rel);
+          continue;
+        }
+        if (targetRel && gitIgnore.ignores(targetRel, info.isDirectory())) {
+          skipped.gitignored.push(rel);
+          continue;
+        }
         abs = target;
         isDir = info.isDirectory();
         isFile = info.isFile();
       }
       if (isDir) {
+        if (gitIgnore.ignores(rel, true)) {
+          skipped.gitignored.push(`${rel}/`);
+          continue;
+        }
         if (ig.ignores(`${rel}/`)) continue;
         if (visitedDirs.has(abs)) continue;
         visitedDirs.add(abs);
         await walk2(abs, rel);
       } else if (isFile) {
+        if (gitIgnore.ignores(rel, false)) {
+          skipped.gitignored.push(rel);
+          continue;
+        }
         if (ig.ignores(rel)) continue;
+        if (isSecretPath(rel)) {
+          secretFiles.push(rel);
+          continue;
+        }
         const { size } = await stat2(abs);
         found.push({ path: rel, absPath: abs, size });
         if (found.length > MAX_FILES) {
@@ -1415,21 +1784,34 @@ async function buildManifest(dir) {
     }
   }
   await walk2(root, "");
+  if (secretFiles.length > 0) throw new SecretFilesError(secretFiles);
   if (found.length === 0) {
     throw new CliError(
-      `Nothing to deploy: ${dir} has no files (dotfiles and node_modules are skipped)`
+      `Nothing to deploy: ${dir} has no files (dotfiles, gitignored files and node_modules are skipped)`
     );
   }
   checkLimits(found, dir);
   if (!found.some((f) => f.path === "index.html")) {
     warnings.push(NO_INDEX_WARNING);
   }
-  const files = await mapLimit(found, 16, async (f) => ({
-    ...f,
-    sha256: await sha256File(f.absPath),
-    contentType: contentTypeFor(f.path)
-  }));
-  return { root, files, totalBytes: files.reduce((n, f) => n + f.size, 0), warnings };
+  const findings = [];
+  const files = await mapLimit(found, 16, async (f) => {
+    let sha256;
+    if (f.size <= SECRET_SCAN_MAX_FILE_BYTES && isScannablePath(f.path)) {
+      const bytes = await readFile3(f.absPath);
+      sha256 = createHash("sha256").update(bytes).digest("hex");
+      findings.push(...scanBytesForSecrets(bytes, f.path));
+    } else sha256 = await sha256File(f.absPath);
+    return { ...f, sha256, contentType: contentTypeFor(f.path) };
+  });
+  if (findings.length > 0) {
+    throw new SecretsFoundError(
+      findings.sort(
+        (a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : a.line - b.line || a.rule.localeCompare(b.rule)
+      )
+    );
+  }
+  return { root, files, totalBytes: files.reduce((n, f) => n + f.size, 0), warnings, skipped };
 }
 function checkLimits(files, dir) {
   for (const f of files) {
@@ -1493,9 +1875,9 @@ async function withHtmlListing(local, siteName2) {
   };
 }
 async function loadIgnore(root) {
-  const ig = ignore();
+  const ig = ignore2();
   try {
-    ig.add(await readFile2(join2(root, IGNORE_FILE), "utf8"));
+    ig.add(await readFile3(join3(root, IGNORE_FILE), "utf8"));
   } catch (error) {
     if (error.code !== "ENOENT") throw error;
   }
@@ -1517,7 +1899,7 @@ async function mapLimit(items, limit, fn) {
 // src/naming.ts
 import { existsSync } from "node:fs";
 import { homedir as homedir2 } from "node:os";
-import { basename, dirname, isAbsolute, relative, resolve, sep as sep2 } from "node:path";
+import { basename, dirname, isAbsolute, relative as relative3, resolve, sep as sep3 } from "node:path";
 var PROJECT_MARKERS = ["package.json", "pyproject.toml", "Cargo.toml", "go.mod"];
 var BUILD_OUTPUT_DIRS = /* @__PURE__ */ new Set([
   "dist",
@@ -1549,23 +1931,23 @@ function findProjectRoot(dir, env = {}) {
   const home = resolve(env.home ?? homedir2());
   const candidates = [];
   for (let d = resolve(dir); d !== home && dirname(d) !== d; d = dirname(d)) candidates.push(d);
-  return candidates.find((d) => exists(`${d}${sep2}.git`)) ?? candidates.find((d) => PROJECT_MARKERS.some((m) => exists(`${d}${sep2}${m}`))) ?? null;
+  return candidates.find((d) => exists(`${d}${sep3}.git`)) ?? candidates.find((d) => PROJECT_MARKERS.some((m) => exists(`${d}${sep3}${m}`))) ?? null;
 }
 var isGeneric = (segment) => segment.startsWith(".") || BUILD_OUTPUT_DIRS.has(segment.toLowerCase());
 function nameParts(dir, env = {}) {
   const abs = resolve(dir);
   const root = findProjectRoot(abs, env);
   if (!root) {
-    const fromHome = relative(resolve(env.home ?? homedir2()), abs);
+    const fromHome = relative3(resolve(env.home ?? homedir2()), abs);
     if (fromHome === "") return [];
     const underHome = fromHome && !fromHome.startsWith("..") && !isAbsolute(fromHome);
-    const segments = (underHome ? fromHome : abs).split(sep2).filter(Boolean);
+    const segments = (underHome ? fromHome : abs).split(sep3).filter(Boolean);
     const pick = [...segments].reverse().find((s) => !isGeneric(s)) ?? segments.at(-1);
     return pick ? [pick] : [];
   }
   const parts = [basename(root)];
-  const rel = relative(root, abs);
-  for (const raw of rel ? rel.split(sep2) : []) {
+  const rel = relative3(root, abs);
+  for (const raw of rel ? rel.split(sep3) : []) {
     if (isGeneric(raw) || CONTAINER_DIRS.has(raw.toLowerCase())) continue;
     const segment = raw.replace(BUILD_SUFFIX_RE, "");
     const slug = slugify(segment, 200);
@@ -1696,7 +2078,7 @@ async function deploy(deps, opts) {
 }
 async function uploadWithRetry(deps, file, url, headers) {
   const sleep = deps.sleep ?? defaultSleep2;
-  const body = file.content ?? await readFile3(file.absPath);
+  const body = file.content ?? await readFile4(file.absPath);
   for (let attempt = 0; ; attempt++) {
     try {
       await putUpload(deps.fetch, url, headers, body);
@@ -1714,9 +2096,9 @@ async function uploadWithRetry(deps, file, url, headers) {
 }
 
 // src/inputs.ts
-import { copyFile, mkdir as mkdir2, mkdtemp, readFile as readFile4, rm, stat as stat3, writeFile as writeFile2 } from "node:fs/promises";
+import { copyFile, mkdir as mkdir2, mkdtemp, readFile as readFile5, rm, stat as stat3, writeFile as writeFile2 } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { basename as basename2, extname, join as join3, resolve as resolve2, sep as sep3 } from "node:path";
+import { basename as basename2, extname, join as join4, resolve as resolve2, sep as sep4 } from "node:path";
 import { unzipSync } from "fflate";
 function inputKind(path, isDirectory) {
   if (isDirectory) return "folder";
@@ -1734,7 +2116,7 @@ function defaultNameFor(path, isDirectory) {
   return isDirectory ? defaultSiteName(path) : fileSiteName(path);
 }
 async function tempFolder() {
-  const dir = await mkdtemp(join3(tmpdir(), "fling-"));
+  const dir = await mkdtemp(join4(tmpdir(), "fling-"));
   return { dir, cleanup: () => rm(dir, { recursive: true, force: true }) };
 }
 async function prepareInput(path) {
@@ -1747,32 +2129,44 @@ async function prepareInput(path) {
   const kind = inputKind(path, info.isDirectory());
   const defaultName = defaultNameFor(path, info.isDirectory());
   if (kind === "folder")
-    return { kind, source: path, dir: path, defaultName, cleanup: async () => {
-    } };
+    return {
+      kind,
+      source: path,
+      dir: path,
+      defaultName,
+      skippedDotfiles: [],
+      cleanup: async () => {
+      }
+    };
+  const file = basename2(path);
+  if (file.startsWith("."))
+    throw new CliError(`Not flung: ${file} is a dotfile. ${NEVER_PUBLISHED_NOTE}`);
+  if (kind === "file" && isSecretPath(file)) throw new SecretFilesError([file]);
   if (info.size > MAX_DEPLOY_BYTES)
     throw new CliError(
       `${basename2(path)} is ${formatBytes(info.size)}; the limit is ${formatBytes(MAX_DEPLOY_BYTES)}`
     );
   const tmp = await tempFolder();
+  const skippedDotfiles = [];
   try {
     if (kind === "html") {
       if (info.size > MAX_FILE_BYTES)
         throw new CliError(
           `${basename2(path)} is ${formatBytes(info.size)}; the limit is ${formatBytes(MAX_FILE_BYTES)} per file`
         );
-      await copyFile(path, join3(tmp.dir, "index.html"));
+      await copyFile(path, join4(tmp.dir, "index.html"));
     } else if (kind === "zip") {
-      await extractZip(await readFile4(path), tmp.dir);
+      await extractZip(await readFile5(path), tmp.dir, skippedDotfiles);
     } else {
       const name = basename2(path);
-      await copyFile(path, join3(tmp.dir, name));
-      await writeFile2(join3(tmp.dir, "index.html"), wrapperPage(name));
+      await copyFile(path, join4(tmp.dir, name));
+      await writeFile2(join4(tmp.dir, "index.html"), wrapperPage(name));
     }
   } catch (error) {
     await tmp.cleanup();
     throw error;
   }
-  return { kind, source: path, dir: tmp.dir, defaultName, cleanup: tmp.cleanup };
+  return { kind, source: path, dir: tmp.dir, defaultName, skippedDotfiles, cleanup: tmp.cleanup };
 }
 var JUNK_FILES = /* @__PURE__ */ new Set(["thumbs.db", "desktop.ini"]);
 function zipEntryPath(name) {
@@ -1795,7 +2189,16 @@ function unwrapSingleFolder(paths) {
     current = current.map((p) => p.slice(first.length + 1));
   }
 }
-async function extractZip(data, dest) {
+function zipDotEntry(name) {
+  const segments = name.replace(/\\/g, "/").split("/").filter((s) => s !== "" && s !== ".");
+  if (segments[0] === "__MACOSX") return null;
+  const i = segments.findIndex((s) => s.startsWith("."));
+  if (i === -1) return null;
+  const seg = segments[i];
+  if (seg === ".DS_Store" || seg === ".git" || seg.startsWith("._")) return null;
+  return i < segments.length - 1 ? `${segments.slice(0, i + 1).join("/")}/` : segments.join("/");
+}
+async function extractZip(data, dest, skippedDotfiles = []) {
   const unsafe = [];
   let declared = 0;
   let count = 0;
@@ -1808,7 +2211,11 @@ async function extractZip(data, dest) {
           unsafe.push(file.name);
           return false;
         }
-        if (path === null) return false;
+        if (path === null) {
+          const dot = zipDotEntry(file.name);
+          if (dot && !skippedDotfiles.includes(dot)) skippedDotfiles.push(dot);
+          return false;
+        }
         count++;
         declared += file.originalSize;
         if (file.originalSize > MAX_FILE_BYTES)
@@ -1849,8 +2256,8 @@ async function extractZip(data, dest) {
       throw new CliError(`The zip expands to more than the limits allow`);
     const rel = paths.get(name);
     const target = resolve2(root, ...rel.split("/"));
-    if (!target.startsWith(root + sep3)) throw new CliError(`Unsafe path in the zip: ${name}`);
-    await mkdir2(join3(target, ".."), { recursive: true });
+    if (!target.startsWith(root + sep4)) throw new CliError(`Unsafe path in the zip: ${name}`);
+    await mkdir2(join4(target, ".."), { recursive: true });
     await writeFile2(target, content);
     written.push(rel);
   }
@@ -1891,7 +2298,7 @@ function wrapperPage(file) {
 }
 
 // src/locate.ts
-import { lstat, readdir as readdir2, readFile as readFile5, realpath as realpath2, stat as stat4 } from "node:fs/promises";
+import { lstat, readdir as readdir2, readFile as readFile6, realpath as realpath3, stat as stat4 } from "node:fs/promises";
 import { posix, win32 } from "node:path";
 import { fileURLToPath } from "node:url";
 var DOWNLOADS_DIR_ENV = "FLING_DOWNLOADS_DIR";
@@ -1926,12 +2333,12 @@ var nodeFs = {
     }
   },
   async realpath(path) {
-    return realpath2(path).catch(() => null);
+    return realpath3(path).catch(() => null);
   },
   async readText(path) {
     try {
       if (!(await lstat(path)).isFile()) return null;
-      return await readFile5(path, "utf8");
+      return await readFile6(path, "utf8");
     } catch {
       return null;
     }
@@ -2200,6 +2607,8 @@ async function runDeploy(ctx, input, opts) {
 }
 async function deployPrepared(ctx, client, base, prepared, opts, ask) {
   let local = await buildManifest(prepared.dir);
+  local.skipped.dotfiles.unshift(...prepared.skippedDotfiles);
+  for (const line of describeSkipped(local.skipped)) ctx.log.info(line);
   let name = opts.name !== void 0 ? resolveSiteName(prepared.dir, opts.name) : prepared.defaultName;
   if (opts.name === void 0 && ask) name = await confirmSiteName(ctx, client, name, base);
   if (!hasRootIndex(local)) {
@@ -2247,7 +2656,7 @@ async function deployPrepared(ctx, client, base, prepared, opts, ask) {
     local.files.map((f) => f.path),
     { progress: ctx.progress, warn: (m) => ctx.log.warn(m) }
   )).ready;
-  ctx.out.data({ status: result.status, site: result.site, ready }, () => {
+  ctx.out.data({ status: result.status, site: result.site, ready, skipped: local.skipped }, () => {
     const lines = [chalk5.bold(result.url)];
     if (result.site.visibility === "private")
       lines.push(
@@ -2454,7 +2863,7 @@ async function runRemove(ctx, name, opts) {
 // src/mcp.ts
 import { mkdir as mkdir3, mkdtemp as mkdtemp2, rm as rm2, writeFile as writeFile3 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { basename as basename3, dirname as dirname2, join as join4 } from "node:path";
+import { basename as basename3, dirname as dirname2, join as join5 } from "node:path";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z as z7 } from "zod";
@@ -2465,6 +2874,7 @@ var MCP_LOCAL_INSTRUCTIONS = [
   'A file or folder the user has on this computer (a downloaded .html, a .zip, a build folder): call fling_deploy with its path, or just its file name (e.g. "Pitch Deck.html") \u2014 it is looked up in Downloads, Desktop, Documents/Claude and Claude Desktop output folders. Use fling_find_files to see recent candidates when unsure which file the user means.',
   "Confirm the site name with the user before publishing (fling_check_name shows whether it is free and, for a path, the generated name). Names are global, first come first served; when one is taken, offer the suggestions.",
   "When there is no index.html but there are HTML pages, fling_deploy and fling_publish do not publish: ask the user whether to generate an index page listing the pages (`listHtml: true`) or publish without one (`listHtml: false`, the root URL 404s), then retry.",
+  NEVER_PUBLISHED,
   "Not logged in? Call fling_login, let the user finish signing in in the browser, then retry.",
   "Sites are private (Nearformers only) by default; only make one public if asked. Use fling_share for a link people outside Nearform can open. Always give the user the URL that comes back."
 ].join("\n\n");
@@ -2505,6 +2915,9 @@ ${JSON.stringify(data, null, 2)}` }] };
   }
   async function deployFolder(c, dir, opts) {
     let local = await buildManifest(dir);
+    local.skipped.dotfiles.unshift(...opts.skippedDotfiles ?? []);
+    const skippedNote = describeSkipped(local.skipped).map((l) => `
+${l}.`).join("");
     let generatedIndex = false;
     if (!hasRootIndex(local)) {
       const pages = htmlPages(local).map((f) => f.path);
@@ -2547,7 +2960,7 @@ Warnings:
     );
     return {
       kind: "deployed",
-      summary: `${what}: ${result.url} (${result.site.visibility})${generatedIndex ? " \u2014 with a generated index.html listing the HTML pages" : ""}${warnings}${edge.note}
+      summary: `${what}: ${result.url} (${result.site.visibility})${generatedIndex ? " \u2014 with a generated index.html listing the HTML pages" : ""}${warnings}${skippedNote}${edge.note}
 To check exactly which files the site has, call fling_files with name "${result.name}".`,
       data: {
         status: result.status,
@@ -2557,7 +2970,8 @@ To check exactly which files the site has, call fling_files with name "${result.
         versionId: result.versionId,
         site: result.site,
         generatedIndex,
-        warnings: result.warnings
+        warnings: result.warnings,
+        skipped: local.skipped
       }
     };
   }
@@ -2570,7 +2984,7 @@ To check exactly which files the site has, call fling_files with name "${result.
     "fling_deploy",
     {
       title: "Deploy a file or folder from this computer",
-      description: 'Fling something that is on the user\'s computer and return its stable URL (https://<name>.fling.labs.nearform.com): a folder of static files (e.g. a build output like dist/), a single .html file (served as the site\'s index.html), a .zip of a site (extracted; a single top-level folder is unwrapped), or any other single file (.pdf, .svg, .png\u2026, served next to a generated page that shows it). `path` can be absolute, relative to the working directory, or just a file name ("Pitch Deck.html"): names are looked up, newest first, in Downloads, Desktop, Documents/Claude and Claude Desktop output folders, and the result says where the file was found. Never pass paths from your own sandbox (/mnt/user-data/\u2026, /sessions/\u2026): for content you created, use fling_publish. Without `name`, a name is generated: from the file name for files ("Pitch Deck (1).html" \u2192 pitch-deck), from the project and folder for folders (~/work/rocketpod/docs \u2192 rocketpod-docs). Site names are one global namespace, first come first served \u2014 confirm the name with the user first (fling_check_name with `path` shows the generated one). If the name is taken it fails with free suggestions \u2014 ask the user to pick one, then retry with `name`. If there is no index.html but there are HTML pages, it does not deploy: ask the user whether to generate an index page listing them (`listHtml: true`) or deploy without one (`listHtml: false`), then retry. Re-deploying identical content is a no-op. Sites are private to signed-in Nearformers unless `public` is set.',
+      description: 'Fling something that is on the user\'s computer and return its stable URL (https://<name>.fling.labs.nearform.com): a folder of static files (e.g. a build output like dist/), a single .html file (served as the site\'s index.html), a .zip of a site (extracted; a single top-level folder is unwrapped), or any other single file (.pdf, .svg, .png\u2026, served next to a generated page that shows it). `path` can be absolute, relative to the working directory, or just a file name ("Pitch Deck.html"): names are looked up, newest first, in Downloads, Desktop, Documents/Claude and Claude Desktop output folders, and the result says where the file was found. Never pass paths from your own sandbox (/mnt/user-data/\u2026, /sessions/\u2026): for content you created, use fling_publish. Without `name`, a name is generated: from the file name for files ("Pitch Deck (1).html" \u2192 pitch-deck), from the project and folder for folders (~/work/rocketpod/docs \u2192 rocketpod-docs). Site names are one global namespace, first come first served \u2014 confirm the name with the user first (fling_check_name with `path` shows the generated one). If the name is taken it fails with free suggestions \u2014 ask the user to pick one, then retry with `name`. If there is no index.html but there are HTML pages, it does not deploy: ask the user whether to generate an index page listing them (`listHtml: true`) or deploy without one (`listHtml: false`), then retry. Re-deploying identical content is a no-op. Sites are private to signed-in Nearformers unless `public` is set. ' + NEVER_PUBLISHED,
       inputSchema: {
         path: z7.string().min(1).describe(
           "File or folder on this computer: absolute, relative to the working directory, or just its name (looked up in Downloads, Desktop and Claude output folders)"
@@ -2596,7 +3010,8 @@ To check exactly which files the site has, call fling_files with name "${result.
           spa: args.spa,
           public: args.public,
           listHtml: args.listHtml,
-          retryWith: "fling_deploy"
+          retryWith: "fling_deploy",
+          skippedDotfiles: prepared.skippedDotfiles
         });
         const where = located.foundIn === FOUND_AS_GIVEN ? "" : `Found "${basename3(located.path)}" in ${located.foundIn}: ${located.path}
 `;
@@ -2665,10 +3080,11 @@ ${JSON.stringify(data, null, 2)}` }]
     },
     (args) => run(async (c) => {
       const name = resolveSiteName(".", args.name);
-      const tmp = await mkdtemp2(join4(tmpdir2(), "fling-publish-"));
+      const tmp = await mkdtemp2(join5(tmpdir2(), "fling-publish-"));
       try {
-        await writeInlineFiles(tmp, args.files);
+        const { skippedDotfiles } = await writeInlineFiles(tmp, args.files);
         const outcome = await deployFolder(c, tmp, {
+          skippedDotfiles,
           name,
           nameGiven: true,
           spa: args.spa,
@@ -2885,20 +3301,33 @@ ${JSON.stringify(data, null, 2)}` }]
 var textResult = (text) => ({ content: [{ type: "text", text }] });
 async function writeInlineFiles(dir, files) {
   const seen = /* @__PURE__ */ new Set();
+  const skippedDotfiles = [];
+  const secretFiles = [];
   let total = 0;
   for (const f of files) {
     const path = f.path.replace(/^(\.\/)+/, "").replace(/^\/+/, "");
+    const segments = path.split("/");
+    if (path && !path.includes("\\") && segments.every((s) => s !== "" && s !== "." && s !== "..") && segments.some((s) => s.startsWith("."))) {
+      skippedDotfiles.push(path);
+      continue;
+    }
     if (!isValidSitePath(path)) throw new CliError(`Invalid file path: "${f.path}"`);
+    if (isSecretPath(path)) {
+      secretFiles.push(path);
+      continue;
+    }
     if (seen.has(path)) throw new CliError(`"${path}" is listed twice`);
     seen.add(path);
     const bytes = Buffer.from(f.content, f.encoding === "base64" ? "base64" : "utf8");
     total += bytes.length;
     if (total > MAX_DEPLOY_BYTES)
       throw new CliError(`The site is larger than ${formatBytes(MAX_DEPLOY_BYTES)}`);
-    const target = join4(dir, ...path.split("/"));
+    const target = join5(dir, ...path.split("/"));
     await mkdir3(dirname2(target), { recursive: true });
     await writeFile3(target, bytes);
   }
+  if (secretFiles.length > 0) throw new SecretFilesError(secretFiles);
+  return { skippedDotfiles };
 }
 function describeError(error) {
   if (error instanceof CliError && error.exitCode === EXIT_NOT_LOGGED_IN) return LOGIN_HINT;
@@ -2953,9 +3382,17 @@ function report(error, ctx) {
   if (error instanceof CliError && error.hint) log.hint(error.hint);
   if (ctx?.config.debug && error instanceof Error && error.stack) log.hint(error.stack);
   if (ctx?.json) {
-    const code = error.code;
+    const { code, findings, paths } = error;
     process.stdout.write(
-      `${formatJson({ error: { message, exitCode: exitCodeFor(error), ...typeof code === "string" ? { code } : {} } })}
+      `${formatJson({
+        error: {
+          message,
+          exitCode: exitCodeFor(error),
+          ...typeof code === "string" ? { code } : {},
+          ...Array.isArray(findings) ? { findings } : {},
+          ...Array.isArray(paths) ? { paths } : {}
+        }
+      })}
 `
     );
   }