@netlify/spark-ui 1.31.0-alpha.4 → 1.31.0-alpha.6

package/README.md

@@ -147,13 +147,13 @@ This repo includes a [Claude Code](https://claude.ai/code) skill for generating
 
 The skill is available automatically. Run:
 
-```text
+```
 /project:landing-page <describe the page you want>
 ```
 
 For example:
 
-```text
+```
 /project:landing-page A landing page for a new enterprise hosting product with a hero, feature cards, and a pricing comparison
 ```
 
@@ -185,7 +185,7 @@ When you’re ready to validate your component changes in a deploy preview, you
 >
 > Reach out to #internal-permissions in Slack
 
-### Steps to Publish an Alpha Release
+### Steps to Publish an Alpha Release:
 
 1. **Make sure you're logged into npm locally**
 
@@ -206,7 +206,6 @@ When you’re ready to validate your component changes in a deploy preview, you
    ```
 
 1. **Install the updated package:**
-
    ```bash
    npm install
    ```

package/dist/components/preact/DropZone/DropZone.d.ts

@@ -10,30 +10,17 @@ interface Props {
     client?: DropClient;
     /** Build the "claim this site" URL from the assigned site name (subdomain). */
     claimUrl?: (siteName: string) => string;
-    /**
-     * Where an authenticated static deploy sends the visitor — the site already
-     * lives in their account, so there is no claim step. Defaults to the new
-     * site's project overview on app.netlify.com.
-     */
+    /** Destination after an authenticated static deploy (no claim step). Default: the project overview. */
     siteDashboardUrl?: (siteName: string) => string;
     /**
-     * Where to send a build-required drop (framework source, build command,
-     * functions) that can't be built here — no `getUploadToken`/`buildClient`, or a
-     * visitor who isn't logged in. Such projects can't deploy through the anonymous
-     * static drop API, so by default the user is redirected here — the app signup
-     * page with `next=/drop` — to build on the authenticated Drop page. Override to
-     * point at your own destination.
+     * Signup hand-off for a build drop with no session. The drop is stashed on
+     * this origin first — return the visitor here and it deploys automatically.
      */
     buildSignupUrl?: string;
     /**
-     * Mint a short-lived bearer token for direct api.netlify.com uploads — pass it
-     * to switch on the whole authenticated path for logged-in visitors: static
-     * drops deploy straight into their account (then `siteDashboardUrl`), and
-     * build-required drops build in place instead of being handed off to the app.
-     * On netlify.com this reads `GET /access-control/generate-access-control-token`.
-     * Resolving `null` means "no session": static drops fall back to the anonymous
-     * claim flow, build drops to `buildSignupUrl`.
-     * See [Logged-in visitors](#logged-in-visitors).
+     * Mint the upload bearer — passing this switches on the whole authenticated
+     * path. `null` means "no session": static drops fall back to the anonymous
+     * claim flow; build drops stash and hand off. See the docs' Logged-in visitors.
      */
     getUploadToken?: () => Promise<string | null>;
     /**
@@ -41,111 +28,49 @@ interface Props {
      * Takes precedence over `getUploadToken` for the build path.
      */
     buildClient?: BuildClient;
-    /**
-     * Inject a custom authenticated `DropClient` for static drops (tests, staging,
-     * a different account flow). Takes precedence over `getUploadToken` for the
-     * static path. Distinct from `client`, which is the anonymous fallback.
-     */
+    /** Custom authenticated static-drop client; wins over `getUploadToken`. (`client` is the anonymous fallback.) */
     authenticatedDropClient?: DropClient;
-    /**
-     * API root for the authenticated paths' JSON calls, which go through your
-     * access-control rewrite so the session cookie authorizes them. Defaults to
-     * `/access-control/bb-api/api/v1`. (Uploads always go direct to
-     * `api.netlify.com` — the proxy can't carry bodies that large.)
-     */
+    /** Root for the session-cookie JSON calls, via your access-control rewrite. Uploads always go direct. */
     proxyBase?: string;
     /** Create the visitor's new project in this account. Omit for their default account. */
     accountSlug?: string;
-    /**
-     * Where an enqueued build sends the visitor. Defaults to the new site's
-     * project overview, same as a static deploy; `build.deployId` is available for
-     * consumers who want the deploy-log page instead.
-     */
+    /** Destination after a build is enqueued. Default: the project overview (`build.deployId` for the logs page). */
     buildDeployUrl?: (build: DeployedBuild) => string;
     /**
-     * Poll until the build finishes before handing off, instead of redirecting as
-     * soon as it's enqueued. The trade-off: waiting means a failing build surfaces
-     * its own error message here (via `onError` and the overlay) rather than the
-     * visitor discovering it on the deploy page — at the cost of holding them on a
-     * spinner for the length of the build, which is minutes. Off by default.
+     * Hold the visitor until the build finishes (off by default — builds take
+     * minutes). On is the only way a failing build's own message reaches `onError`.
      */
     waitForBuild?: boolean;
-    /**
-     * Called when a build-required drop is detected, instead of building it or
-     * redirecting. Use it to own the hand-off yourself (custom routing, persisting
-     * the drop, gating on auth). When set, the component neither builds nor
-     * redirects. The static drop path is unaffected either way.
-     */
+    /** Take over build-required drops entirely — when set, the component neither builds nor redirects. */
     onBuildRequired?: (info: BuildDetection) => void;
     /**
-     * Called instead of the `buildSignupUrl` redirect when a build-required drop
-     * can't be built here (no session). By this point the drop has been stashed
-     * on this origin (`stashed` says whether that succeeded) — own the hand-off
-     * however fits your auth flow, e.g. open a signup popup that keeps the
-     * visitor on the page. Once they're back authenticated, a remount of the
-     * zone deploys the stash automatically.
+     * Own the signup hand-off instead of the `buildSignupUrl` redirect (e.g. an
+     * auth popup). The drop is already stashed; a remount while authenticated
+     * deploys it.
      */
     onBuildSignupHandoff?: (info: {
         stashed: boolean;
         detection: BuildDetection;
     }) => void;
-    /**
-     * Deploy a previously stashed build drop automatically when the zone mounts
-     * with an authenticated visitor (default `true`). The stash is written when a
-     * logged-out build drop is handed to signup; see
-     * [Signup hand-off and auto-resume](#signup-hand-off-and-auto-resume).
-     */
+    /** Auto-deploy a stashed build drop on mount when authenticated (default true). */
     resumeStashedBuilds?: boolean;
     /** Called once the deploy is live. */
     onDeploy?: (result: DeployedSite) => void;
-    /**
-     * Called once a build-required drop has been zipped, uploaded and enqueued —
-     * before the redirect to `buildDeployUrl`. The site exists at this point but
-     * won't serve content until the build finishes.
-     */
+    /** Called once a build is enqueued, before the `buildDeployUrl` redirect. */
     onBuildDeploy?: (build: DeployedBuild) => void;
-    /**
-     * Called when a deploy fails, with a humanized `message` (ready to show a
-     * user — the same copy the built-in overlay uses) and the raw `reason`. Pair
-     * this with `showStatus={false}` to render your own error UI.
-     */
+    /** Deploy failures: humanized `message` (the overlay's copy) + raw `reason`. Pair with showStatus={false}. */
     onError?: (error: DeployError) => void;
     /**
-     * Render the built-in status overlay (drag tint, spinner, progress bar, error).
-     * Set to `false` to suppress it entirely and keep your children visible, then
-     * drive your own feedback from the `data-state` attribute on the root element.
-     * Note: in this mode you're responsible for surfacing errors yourself — use
-     * `onError` to get the message.
+     * Render the built-in overlay. `false` keeps children visible — drive your
+     * own feedback from `data-state`, and surface errors yourself via `onError`.
      */
     showStatus?: boolean;
     /**
-     * Analytics hook. Called at each tracked moment with an event name and
-     * properties. Stays provider-agnostic — wire it to Segment/Amplitude/GA in the
-     * consuming app, e.g. `onTrack={(name, props) => new Analytics().track(name, props)}`.
-     * Emitted events (all include `dropzone_id` when `analyticsId` is set):
-     * - `dropzone_files_dropped`  — files dropped via drag  ({ method: 'drag', file_count, file_types })
-     * - `dropzone_browse_opened`  — file picker opened       ({ method: 'keyboard' | 'click' })
-     * - `dropzone_build_required` — drop needs a build (built here, or handed off) ({ method, reason, file_count, file_types })
-     * - `dropzone_deploy_succeeded` — static deploy went live ({ method, site_name, file_count, authenticated, auth_fallback?, file_types })
-     * - `dropzone_build_deploy_succeeded` — build enqueued for a logged-in visitor ({ method, reason, site_name, file_count, framework?, file_types })
-     * - `dropzone_deploy_failed`  — deploy or build errored out ({ method, reason, file_count?, file_types })
-     *
-     * `authenticated` says whether the deploy landed in the visitor's account;
-     * `auth_fallback: true` is sent only when an authenticated attempt bounced
-     * (stale auth hint) and the drop completed anonymously — omitted otherwise.
-     * `file_types` is the sorted, de-duplicated list of MIME types in the
-     * selection, with `application/octet-stream` standing in wherever the browser
-     * reports none (a dragged folder, an `.exe`). It is omitted when the browser
-     * exposes no files at all. Note `dropzone_files_dropped` only fires for drag —
-     * a file-picker selection reports its types on the outcome events, as
-     * `dropzone_browse_opened` fires before any file exists.
+     * Provider-agnostic analytics hook. Event names and payload shapes live in
+     * DROPZONE_EVENTS / DropZoneEventProperties (drop-core/analytics.ts).
      */
     onTrack?: TrackFn;
-    /**
-     * Stable identifier for this instance, attached to every tracked event as
-     * `dropzone_id`. Set it when a page renders more than one Drop Zone so the
-     * events can be told apart in Amplitude.
-     */
+    /** Stamped on every event as `dropzone_id` — set when a page has more than one zone. */
     analyticsId?: string;
     className?: string;
 }

package/dist/components/preact/DropZone/DropZone.js

@@ -1,10 +1,10 @@
 import { u as e } from "../../../chunks/jsxRuntime.module.Bzuv3cXw.js";
 import { A as E, d as K, y as L } from "../../../chunks/hooks.module.DRcxknIz.js";
-import { readFileList as W, readDataTransfer as q } from "../../../drop-core/readFiles.js";
+import { DROPZONE_EVENTS as W } from "../../../drop-core/analytics.js";
+import { readFileList as q, readDataTransfer as H } from "../../../drop-core/readFiles.js";
 import { getFileTypes as z } from "../../../drop-core/fileTypes.js";
 import "../../../drop-core/detectBuild.js";
 import "../../../drop-core/zip.js";
-import { DROPZONE_EVENTS as H } from "../../../drop-core/analytics.js";
 import { useDropDeploy as J } from "./useDropDeploy.js";
 import { Fragment as w } from "preact";
 import '../../../assets/DropZone.css';const Q = 120, X = (r) => `https://app.netlify.com/drop/${r}`, Y = (r) => `https://app.netlify.com/projects/${r}`, ee = "https://app.netlify.com/signup?next=/drop&utm_campaign=drop", re = ({ siteName: r }) => `https://app.netlify.com/projects/${r}`;
@@ -55,7 +55,7 @@ function fe({
     track: m
   }), { active: p, keepActive: V, endDrag: M } = te(), h = E(null), v = (t) => {
     var n;
-    m(H.BROWSE_OPENED, { method: t }), (n = h.current) == null || n.click();
+    m(W.BROWSE_OPENED, { method: t }), (n = h.current) == null || n.click();
   }, Z = f && (p || i || s.kind === "error"), G = [
     "n-dropzone",
     p && "is-active",
@@ -78,7 +78,7 @@ function fe({
       onDrop: (t) => {
         if (t.preventDefault(), M(), i) return;
         const n = t.dataTransfer;
-        n && b(() => q(n), "drag", z(n.files));
+        n && b(() => H(n), "drag", z(n.files));
       },
       onClick: (t) => {
         !i && t.target === t.currentTarget && v("click");
@@ -102,7 +102,7 @@ function fe({
               const n = t.currentTarget;
               if ((D = n.files) != null && D.length) {
                 const k = n.files;
-                b(() => W(k), "browse", z(k));
+                b(() => q(k), "browse", z(k));
               }
               n.value = "";
             }

package/dist/components/preact/DropZone/index.js

@@ -1,33 +1,33 @@
 import { default as o } from "./DropZone.js";
-import { readDataTransfer as i, readFileList as p } from "../../../drop-core/readFiles.js";
-import { getFileTypes as l } from "../../../drop-core/fileTypes.js";
-import { detectBuild as a, inferBuildSettings as f } from "../../../drop-core/detectBuild.js";
-import { AnonymousDropClient as n } from "../../../drop-core/client.js";
-import { BuildCreateError as E, BuildFailedError as s, BuildTimeoutError as B, NotAuthenticatedError as D, SiteCreateError as C, UnsupportedDropError as F, humanizeDropError as c } from "../../../drop-core/errors.js";
-import { AuthenticatedDropClient as y } from "../../../drop-core/authedDropClient.js";
-import { AuthenticatedBuildClient as T } from "../../../drop-core/buildClient.js";
-import { zipFiles as S } from "../../../drop-core/zip.js";
-import { deployBuild as z, deployFiles as O } from "../../../drop-core/deploy.js";
-import { DROPZONE_EVENTS as L } from "../../../drop-core/analytics.js";
+import { BuildCreateError as i, BuildFailedError as p, BuildTimeoutError as d, NotAuthenticatedError as l, SiteCreateError as u, UnsupportedDropError as a, humanizeDropError as f } from "../../../drop-core/errors.js";
+import { DROPZONE_EVENTS as n } from "../../../drop-core/analytics.js";
+import { readDataTransfer as E, readFileList as s } from "../../../drop-core/readFiles.js";
+import { getFileTypes as D } from "../../../drop-core/fileTypes.js";
+import { detectBuild as F, inferBuildSettings as c } from "../../../drop-core/detectBuild.js";
+import { zipFiles as y } from "../../../drop-core/zip.js";
+import { AnonymousDropClient as T } from "../../../drop-core/client.js";
+import { AuthenticatedDropClient as S } from "../../../drop-core/authedDropClient.js";
+import { AuthenticatedBuildClient as z } from "../../../drop-core/buildClient.js";
+import { deployBuild as Z, deployFiles as L } from "../../../drop-core/deploy.js";
 export {
-  n as AnonymousDropClient,
-  T as AuthenticatedBuildClient,
-  y as AuthenticatedDropClient,
-  E as BuildCreateError,
-  s as BuildFailedError,
-  B as BuildTimeoutError,
-  L as DROPZONE_EVENTS,
+  T as AnonymousDropClient,
+  z as AuthenticatedBuildClient,
+  S as AuthenticatedDropClient,
+  i as BuildCreateError,
+  p as BuildFailedError,
+  d as BuildTimeoutError,
+  n as DROPZONE_EVENTS,
   o as DropZone,
-  D as NotAuthenticatedError,
-  C as SiteCreateError,
-  F as UnsupportedDropError,
-  z as deployBuild,
-  O as deployFiles,
-  a as detectBuild,
-  l as getFileTypes,
-  c as humanizeDropError,
-  f as inferBuildSettings,
-  i as readDataTransfer,
-  p as readFileList,
-  S as zipFiles
+  l as NotAuthenticatedError,
+  u as SiteCreateError,
+  a as UnsupportedDropError,
+  Z as deployBuild,
+  L as deployFiles,
+  F as detectBuild,
+  D as getFileTypes,
+  f as humanizeDropError,
+  c as inferBuildSettings,
+  E as readDataTransfer,
+  s as readFileList,
+  y as zipFiles
 };

package/dist/components/preact/DropZone/useDropDeploy.d.ts

@@ -57,7 +57,6 @@ export type DeployStatus = {
     kind: 'error';
     message: string;
 };
-/** Re-exported from the drop-core analytics contract, where the shape now lives. */
 export type { TrackFn };
 interface UseDropDeployOptions {
     apiBase?: string;

package/dist/components/preact/DropZone/useDropDeploy.js

@@ -1,14 +1,14 @@
 import { d as R, A as S, y as nt } from "../../../chunks/hooks.module.DRcxknIz.js";
-import { renameSingleNonIndexHtmlToIndex as rt, getSingleNonIndexHtmlFileName as at, hasMultipleHtmlFilesWithoutIndex as ot } from "../../../drop-core/readFiles.js";
-import { detectBuild as st } from "../../../drop-core/detectBuild.js";
-import { AnonymousDropClient as dt } from "../../../drop-core/client.js";
-import { humanizeDropError as lt, NotAuthenticatedError as O } from "../../../drop-core/errors.js";
-import { AuthenticatedDropClient as ut } from "../../../drop-core/authedDropClient.js";
-import { AuthenticatedBuildClient as ct } from "../../../drop-core/buildClient.js";
-import { zipFiles as mt } from "../../../drop-core/zip.js";
-import { hasDropStashMarker as ft, loadDropStash as gt, clearDropStash as E, saveDropStash as ht } from "../../../drop-core/buildStash.js";
-import { deployZippedBuild as pt, deployFiles as v } from "../../../drop-core/deploy.js";
+import { humanizeDropError as rt, isNotAuthenticatedError as O } from "../../../drop-core/errors.js";
 import { DROPZONE_EVENTS as c } from "../../../drop-core/analytics.js";
+import { renameSingleNonIndexHtmlToIndex as at, getSingleNonIndexHtmlFileName as ot, hasMultipleHtmlFilesWithoutIndex as st } from "../../../drop-core/readFiles.js";
+import { detectBuild as dt } from "../../../drop-core/detectBuild.js";
+import { zipFiles as lt } from "../../../drop-core/zip.js";
+import { AnonymousDropClient as ut } from "../../../drop-core/client.js";
+import { AuthenticatedDropClient as ct } from "../../../drop-core/authedDropClient.js";
+import { AuthenticatedBuildClient as mt } from "../../../drop-core/buildClient.js";
+import { deployZippedBuild as ft, deployFiles as v } from "../../../drop-core/deploy.js";
+import { hasDropStashMarker as gt, loadDropStash as ht, clearDropStash as E, saveDropStash as pt } from "../../../drop-core/buildStash.js";
 function I(l) {
   switch (l.phase) {
     case "zipping":
@@ -25,8 +25,8 @@ function I(l) {
   }
 }
 function wt(l) {
-  const m = at(l);
-  return m ? `No index.html found — "${m}" won’t be served at the site root.` : ot(l) ? "No index.html found — your site may not have a landing page." : null;
+  const m = ot(l);
+  return m ? `No index.html found — "${m}" won’t be served at the site root.` : st(l) ? "No index.html found — your site may not have a landing page." : null;
 }
 function St(l, m) {
   try {
@@ -56,18 +56,16 @@ function Pt({
   track: q
 }) {
   const u = (n, t) => (
-    // The cast bridges to TrackFn's loose record: the interfaces have no index
-    // signature (so payloads stay closed for consumers), and the checking that
-    // matters happened against DropZoneEventProperties[E] above.
+    // The event interfaces carry no index signature, hence the cast to TrackFn's record.
     q(n, t)
-  ), [b, a] = R({ kind: "idle" }), [U, _] = R(null), j = S(m ?? new dt(l)).current, w = S(
-    Y ?? (p ? new ct({ proxyBase: N, getUploadToken: p, accountSlug: A }) : null)
+  ), [b, a] = R({ kind: "idle" }), [U, _] = R(null), j = S(m ?? new ut(l)).current, w = S(
+    Y ?? (p ? new mt({ proxyBase: N, getUploadToken: p, accountSlug: A }) : null)
   ).current, y = S(
-    M ?? (p ? new ut({ proxyBase: N, getUploadToken: p, accountSlug: A }) : null)
+    M ?? (p ? new ct({ proxyBase: N, getUploadToken: p, accountSlug: A }) : null)
   ).current, J = b.kind !== "idle" && b.kind !== "error";
   async function x(n, t) {
     try {
-      const { site: i, build: r, buildSettings: o, url: e } = await pt(n, t, {
+      const { site: i, build: r, buildSettings: o, url: e } = await ft(n, t, {
         onProgress: (s) => a(I(s)),
         waitForBuild: Z
       });
@@ -80,7 +78,7 @@ function Pt({
         buildSettings: o
       };
     } catch (i) {
-      if (i instanceof O) return null;
+      if (O(i)) return null;
       throw i;
     }
   }
@@ -90,7 +88,7 @@ function Pt({
       a({ kind: "error", message: e }), u(c.DEPLOY_FAILED, { method: t, reason: s, ...r, ...d }), g == null || g({ message: e, reason: s });
     };
     try {
-      const e = rt(await n());
+      const e = at(await n());
       if (!e.length) {
         o("No files found to deploy.", "No files found to deploy.", { file_count: 0 });
         return;
@@ -100,11 +98,11 @@ function Pt({
         file_count: e.length,
         ...r
       });
-      const s = { source: t, fileCount: e.length, typeProps: r }, d = st(e);
+      const s = { source: t, fileCount: e.length, typeProps: r }, d = dt(e);
       d.buildRequired ? await T(e, d, s) : await G(e, s);
     } catch (e) {
       const s = e instanceof Error ? e.message : String(e);
-      o(lt(e), s);
+      o(rt(e), s);
     }
   }
   async function T(n, t, { source: i, fileCount: r, typeProps: o }) {
@@ -120,7 +118,7 @@ function Pt({
     let e = !1;
     if (w) {
       a({ kind: "zipping" });
-      const s = await mt(n), d = await x(w, s);
+      const s = await lt(n), d = await x(w, s);
       if (d) {
         a({ kind: "redirecting", target: "build" }), u(c.BUILD_DEPLOY_SUCCEEDED, {
           method: i,
@@ -132,7 +130,7 @@ function Pt({
         }), f == null || f(d), window.location.assign(C(d));
         return;
       }
-      e = await ht(s.file, s.buildSettings), e && u(c.PROJECT_STASHED, {
+      e = await pt(s.file, s.buildSettings), e && u(c.PROJECT_STASHED, {
         method: i,
         reason: t.reason,
         file_count: r,
@@ -151,7 +149,7 @@ function Pt({
         onProgress: (i) => a(I(i))
       });
     } catch (i) {
-      if (i instanceof O) return null;
+      if (O(i)) return null;
       throw i;
     }
   }
@@ -179,7 +177,7 @@ function Pt({
     n ? window.location.assign(H(t)) : window.location.assign(`${z(t)}#drop_token=${i}`);
   }
   async function X(n) {
-    const t = await gt();
+    const t = await ht();
     if (!t) {
       await E();
       return;
@@ -205,7 +203,7 @@ function Pt({
   }
   const F = S(!1);
   nt(() => {
-    F.current || !$ || !w || !ft() || (F.current = !0, X(w));
+    F.current || !$ || !w || !gt() || (F.current = !0, X(w));
   }, []);
   function tt() {
     _(null), a({ kind: "idle" });

package/dist/components/preact/index.js

@@ -9,19 +9,19 @@ import "preact";
 import "../../chunks/hooks.module.DRcxknIz.js";
 import { default as D } from "./SearchModal/components/SearchModal/SearchModal.js";
 import { default as N } from "./DropZone/DropZone.js";
+import { humanizeDropError as k } from "../../drop-core/errors.js";
+import { DROPZONE_EVENTS as K } from "../../drop-core/analytics.js";
 import "../../drop-core/readFiles.js";
-import { getFileTypes as k } from "../../drop-core/fileTypes.js";
+import { getFileTypes as O } from "../../drop-core/fileTypes.js";
 import "../../drop-core/detectBuild.js";
-import { humanizeDropError as K } from "../../drop-core/errors.js";
-import { AuthenticatedDropClient as O } from "../../drop-core/authedDropClient.js";
-import { AuthenticatedBuildClient as b } from "../../drop-core/buildClient.js";
 import "../../drop-core/zip.js";
-import { DROPZONE_EVENTS as B } from "../../drop-core/analytics.js";
+import { AuthenticatedDropClient as b } from "../../drop-core/authedDropClient.js";
+import { AuthenticatedBuildClient as B } from "../../drop-core/buildClient.js";
 export {
   y as AskNetlify,
-  b as AuthenticatedBuildClient,
-  O as AuthenticatedDropClient,
-  B as DROPZONE_EVENTS,
+  B as AuthenticatedBuildClient,
+  b as AuthenticatedDropClient,
+  K as DROPZONE_EVENTS,
   N as DropZone,
   x as Icon,
   m as KeyboardKey,
@@ -30,6 +30,6 @@ export {
   s as SearchLink,
   D as SearchModal,
   S as SearchToggle,
-  k as getFileTypes,
-  K as humanizeDropError
+  O as getFileTypes,
+  k as humanizeDropError
 };

package/dist/drop-core/analytics.d.ts

@@ -1,17 +1,10 @@
 import { BuildReason } from './detectBuild';
-/**
- * The Drop Zone's analytics contract — the canonical event names and property
- * shapes, exported so no consumer (this package's own component, a host site's
- * GTM wiring, or another Netlify surface implementing its own Drop UI over
- * drop-core) ever hand-writes the strings.
- */
+/** The analytics contract: canonical event names + property shapes, so no consumer hand-writes them. */
 /** How the files reached the zone — carried on every drop-initiated event as `method`. */
 export type DropMethod = 'drag' | 'browse';
 /**
- * Canonical Drop Zone lifecycle events. The values are the wire names:
- * analytics history in Amplitude/Segment keys off these exact strings, so
- * renaming a value silently forks every funnel built on it — treat them as
- * append-only.
+ * The wire names. Amplitude/Segment history keys off these exact strings —
+ * append-only, never rename.
  */
 export declare const DROPZONE_EVENTS: {
     /** Files arrived via drag — the picker path reports its files on outcome events instead. */
@@ -99,9 +92,5 @@ export interface DropZoneEventProperties {
     dropzone_project_stashed: ProjectStashedProps;
     dropzone_resumed: ResumedProps;
 }
-/**
- * Provider-agnostic analytics sink. Deliberately loose (string, not the event
- * union): hosts forward these to Segment/GA/GTM and often pipe their own
- * events through the same function.
- */
+/** Provider-agnostic sink — loose on purpose, since hosts pipe their own events through it too. */
 export type TrackFn = (event: string, properties?: Record<string, unknown>) => void;

package/dist/drop-core/authedApi.d.ts

@@ -1,30 +1,13 @@
 import { BuildSite } from './types';
 /**
- * The transport both authenticated clients share: JSON calls ride the
- * consumer's access-control rewrite on the session cookie, so nothing
- * credential-shaped lives in the browser and nothing can expire mid-deploy.
- * (Uploads are the exception — the proxy's Lambda caps request bodies at
- * ~6MB — and each client handles its own, bearer-authorized.)
+ * Transport shared by both authenticated clients: JSON rides the consumer's
+ * access-control rewrite on the session cookie. Uploads are each client's own
+ * (bearer-direct — the proxy can't carry them).
  */
 /**
- * Default root for proxied JSON calls. On netlify.com the `/access-control/*`
- * rewrite targets the app's access-control function, making this path the API
- * root. The paths a given origin may call are allowlisted server-side.
- */
-export declare const DEFAULT_PROXY_BASE = "/access-control/bb-api/api/v1";
-/** Direct api.netlify.com root for the uploads the proxy can't carry. */
-export declare const DEFAULT_API_BASE = "https://api.netlify.com/api/v1";
-export declare const DEFAULT_POLL_INTERVAL_MS = 1000;
-export declare const DEFAULT_TIMEOUT_MS: number;
-/**
- * Create a site in the visitor's account via `POST {proxyBase}/sites` (scoped
- * to `accountSlug` when given, else the user's default account), attributed
- * `created_via: 'drop'`.
- *
- * A logged-out visitor 401s here, before anything is created — the one
- * pre-mutation point where callers may still safely fall back to an anonymous
- * flow, which is why it maps to `NotAuthenticatedError`. Any other failure is
- * a `SiteCreateError` carrying the status.
+ * `POST {proxyBase}/sites`, attributed `created_via: 'drop'`. A logged-out
+ * visitor 401s here, before anything is created — the one point an anonymous
+ * fallback is still safe, hence NotAuthenticatedError.
  */
 export declare function createSiteInAccount(proxyBase: string, accountSlug?: string): Promise<BuildSite>;
 /** How a watched deploy ended. `errorMessage` is the API's own explanation, when it gave one. */
@@ -37,15 +20,9 @@ export type SettledDeploy = {
     outcome: 'timed-out';
 };
 /**
- * Poll `GET {proxyBase}/deploys/{deployId}` on the session cookie until the
- * deploy settles, and report how. Purely mechanical on purpose: each caller
- * maps the outcome onto its own error vocabulary (the drop client throws plain
- * errors `humanizeDropError` understands; the build client throws
- * `BuildFailedError`/`BuildTimeoutError`), so that knowledge stays next to the
- * class it belongs to.
- *
- * A non-ok poll response is skipped, not fatal — a transient proxy hiccup
- * shouldn't kill a deploy that is still progressing.
+ * Polls the deploy on the session cookie and reports the terminal outcome —
+ * callers map it onto their own error vocabulary. Non-ok reads are skipped,
+ * not fatal: a proxy hiccup shouldn't kill a progressing deploy.
  */
 export declare function pollDeployUntilSettled(options: {
     proxyBase: string;

package/dist/drop-core/authedApi.js

@@ -1,35 +1,30 @@
 import { NotAuthenticatedError as d, SiteCreateError as l } from "./errors.js";
-const f = "/access-control/bb-api/api/v1", y = "https://api.netlify.com/api/v1", T = 1e3, m = 10 * 60 * 1e3;
-async function A(s, o) {
-  const r = o ? `/${o}/sites` : "/sites", t = await fetch(`${s}${r}`, {
+async function f(r, o) {
+  const s = o ? `/${o}/sites` : "/sites", e = await fetch(`${r}${s}`, {
     method: "POST",
     credentials: "include",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify({ created_via: "drop" })
   });
-  if (t.status === 401 || t.status === 403) throw new d();
-  if (!t.ok) throw new l(t.status);
-  return t.json();
+  if (e.status === 401 || e.status === 403) throw new d();
+  if (!e.ok) throw new l(e.status);
+  return e.json();
 }
-const p = /* @__PURE__ */ new Set(["ready", "error", "rejected"]);
-async function E(s) {
-  const { proxyBase: o, deployId: r, pollIntervalMs: t, timeoutMs: i } = s, c = i / t;
+const u = /* @__PURE__ */ new Set(["ready", "error", "rejected"]);
+async function y(r) {
+  const { proxyBase: o, deployId: s, pollIntervalMs: e, timeoutMs: i } = r, c = i / e;
   for (let n = 0; n < c; n++) {
-    const a = await fetch(`${o}/deploys/${r}`, { credentials: "include" });
+    const a = await fetch(`${o}/deploys/${s}`, { credentials: "include" });
     if (a.ok) {
-      const e = await a.json();
-      if (e.state && p.has(e.state))
-        return e.state === "ready" ? { outcome: "ready" } : { outcome: "failed", errorMessage: e.error_message };
+      const t = await a.json();
+      if (t.state && u.has(t.state))
+        return t.state === "ready" ? { outcome: "ready" } : { outcome: "failed", errorMessage: t.error_message };
     }
-    await new Promise((e) => setTimeout(e, t));
+    await new Promise((t) => setTimeout(t, e));
   }
   return { outcome: "timed-out" };
 }
 export {
-  y as DEFAULT_API_BASE,
-  T as DEFAULT_POLL_INTERVAL_MS,
-  f as DEFAULT_PROXY_BASE,
-  m as DEFAULT_TIMEOUT_MS,
-  A as createSiteInAccount,
-  E as pollDeployUntilSettled
+  f as createSiteInAccount,
+  y as pollDeployUntilSettled
 };