@shipstatic/ship 0.5.5 → 0.6.1

package/dist/browser.d.ts

@@ -536,11 +536,27 @@ declare function getENV(): ExecutionEnvironment;
  * Format file size to human-readable string
  */
 declare function formatFileSize(bytes: number, decimals?: number): string;
+/**
+ * Validate filename for deployment safety
+ * Rejects filenames that would cause issues in URLs, filesystems, or shells
+ *
+ * Rejected patterns:
+ * - URL-unsafe: ?, &, #, %, <, >, [, ], {, }, |, \, ^, ~, `
+ * - Path traversal: .. (already checked separately)
+ * - Shell dangerous: ; $ ( ) ' " *
+ * - Control characters: \0, \r, \n, \t
+ * - Reserved names: CON, PRN, AUX, NUL, COM1-9, LPT1-9 (Windows)
+ * - Leading/trailing dots or spaces
+ */
+declare function validateFileName(filename: string): {
+    valid: boolean;
+    reason?: string;
+};
 /**
  * Validate files against configuration limits with severity-based reporting
  *
  * Validation categorizes issues by severity:
- * - **Errors**: Block deployment (file too large, invalid type, etc.)
+ * - **Errors**: Block deployment (file too large, blocked extension, etc.)
  * - **Warnings**: Exclude files but allow deployment (empty files, etc.)
  *
  * @param files - Array of files to validate
@@ -593,11 +609,16 @@ declare function allValidFilesReady<T extends ValidatableFile>(files: T[]): bool
  * @throws {ShipError} If the path contains unsafe patterns
  */
 declare function validateDeployPath(deployPath: string, sourceIdentifier: string): void;
-
 /**
- * Get MIME type from file path (browser-compatible, no Node.js dependencies)
+ * Validate a deploy file's name and extension.
+ * Rejects unsafe filenames (shell/URL-dangerous chars, reserved names)
+ * and blocked file extensions (.exe, .msi, .dll, etc.).
+ *
+ * @param deployPath - The deployment path to validate
+ * @param sourceIdentifier - Human-readable identifier for error messages
+ * @throws {ShipError} If the filename is unsafe or extension is blocked
  */
-declare function getMimeType(path: string): string;
+declare function validateDeployFile(deployPath: string, sourceIdentifier: string): void;
 
 /**
  * @file Platform configuration management for the Ship SDK.
@@ -620,8 +641,8 @@ declare function getCurrentConfig(): ConfigResponse;
  *
  * Pipeline order matches Node.js (node-files.ts) for consistency:
  * 1. Extract paths → 2. Filter junk → 3. Optimize paths →
- * 4. Security validate → 5. Skip empties → 6. Size validate →
- * 7. Calculate MD5 → 8. Count validate
+ * 4. Security validate → 5. Skip empties → 6. Name & extension validate →
+ * 7. Size validate → 8. Calculate MD5 → 9. Count validate
  */
 
 /**
@@ -668,4 +689,4 @@ declare class Ship extends Ship$1 {
     protected getDeployBodyCreator(): DeployBodyCreator;
 }
 
-export { type ApiDeployOptions, ApiHttp, type ApiHttpOptions, type DeployBody, type DeployBodyCreator, type DeployFile, type DeploymentOptions, type DeploymentResourceContext, type DomainSetResult, type ExecutionEnvironment, JUNK_DIRECTORIES, type MD5Result, type ResourceContext, Ship, type ShipClientOptions, type ShipEvents, __setTestEnvironment, allValidFilesReady, calculateMD5, createAccountResource, createDeploymentResource, createDomainResource, createTokenResource, Ship as default, filterJunk, formatFileSize, getCurrentConfig, getENV, getMimeType, getValidFiles, mergeDeployOptions, optimizeDeployPaths, pluralize, processFilesForBrowser, resolveConfig, setConfig as setPlatformConfig, validateDeployPath, validateFiles };
+export { type ApiDeployOptions, ApiHttp, type ApiHttpOptions, type DeployBody, type DeployBodyCreator, type DeployFile, type DeploymentOptions, type DeploymentResourceContext, type DomainSetResult, type ExecutionEnvironment, JUNK_DIRECTORIES, type MD5Result, type ResourceContext, Ship, type ShipClientOptions, type ShipEvents, __setTestEnvironment, allValidFilesReady, calculateMD5, createAccountResource, createDeploymentResource, createDomainResource, createTokenResource, Ship as default, filterJunk, formatFileSize, getCurrentConfig, getENV, getValidFiles, mergeDeployOptions, optimizeDeployPaths, pluralize, processFilesForBrowser, resolveConfig, setConfig as setPlatformConfig, validateDeployFile, validateDeployPath, validateFileName, validateFiles };