@shipstatic/ship 2.0.0-beta.15 → 2.0.0-beta.16

package/dist/index.js

@@ -1,2 +1,2 @@
-var He=Object.defineProperty;var R=(n,t)=>()=>(n&&(t=n(n=0)),t);var Ge=(n,t)=>{for(var e in t)He(n,e,{get:t[e],enumerable:!0})};function ce(n){if(n==null)return;if(typeof n!="string")throw a.validation("Idempotency key must be a string.");let t=n.trim();if(!t)throw a.validation("Idempotency key must not be empty.");if(t.length>le.MAX_LENGTH)throw a.validation(`Idempotency key must be at most ${le.MAX_LENGTH} characters.`);return t}function Ke(n){return typeof n.code=="string"?!0:n instanceof TypeError&&n.message.includes("fetch")}function O(n){return n!==null&&typeof n=="object"&&"name"in n&&n.name==="ShipError"&&"status"in n}function $(n){let t=n.lastIndexOf(".");if(t===-1||t===n.length-1)return!1;let e=n.slice(t+1).toLowerCase();return qe.has(e)}function ue(n){return Xe.test(n)}function k(n){return n.replace(/\\/g,"/").split("/").filter(Boolean).some(e=>K.has(e))}function We(n){return n.startsWith(de.PREFIX)?b.API_KEY:n.startsWith(me.PREFIX)?b.DEPLOY_TOKEN:b.OPAQUE}function he(n){let t=n.charCodeAt(0)===65279?n.slice(1):n,e;try{e=JSON.parse(t)}catch(i){throw a.config(`invalid JSON format in config: ${i.message}`,{filePath:I})}if(e===null||typeof e!="object"||Array.isArray(e))throw a.config(`${I} must contain a JSON object`,{filePath:I})}function ye(n,t,e){if(!n.startsWith(t.PREFIX))throw a.validation(`${e} must start with "${t.PREFIX}"`);if(n.length!==t.TOTAL_LENGTH)throw a.validation(`${e} must be ${t.TOTAL_LENGTH} characters total (${t.PREFIX} + ${t.HEX_LENGTH} hex chars)`);let i=n.slice(t.PREFIX.length);if(!new RegExp(`^[a-f0-9]{${t.HEX_LENGTH}}$`,"i").test(i))throw a.validation(`${e} must contain ${t.HEX_LENGTH} hexadecimal characters after "${t.PREFIX}" prefix`)}function Je(n){ye(n,de,"API key")}function Qe(n){ye(n,me,"Deploy token")}function q(n){switch(We(n)){case b.API_KEY:Je(n);return;case b.DEPLOY_TOKEN:Qe(n);return;case b.OPAQUE:if(!n)throw a.validation("Token must be a non-empty string")}}function ge(n){if(!n||n.length>j.MAX_LENGTH||!j.PATTERN.test(n))throw a.validation(`Caller must be 1-${j.MAX_LENGTH} characters: letters, digits, dots, underscores, or hyphens`)}function St(n){try{let t=new URL(n);if(!["http:","https:"].includes(t.protocol))throw a.validation("API URL must use http:// or https:// protocol");if(t.pathname!=="/"&&t.pathname!=="")throw a.validation("API URL must not contain a path");if(t.search||t.hash)throw a.validation("API URL must not contain query parameters or fragments")}catch(t){throw O(t)?t:a.validation("API URL must be a valid URL")}}function Rt(n){return/^[a-z]+-[a-z]+-[a-z0-9]{7}(\.[a-z0-9.-]+)?$/i.test(n)}function Ee(n,t){return n.endsWith(`.${t}`)}function It(n,t){return!Ee(n,t)}function wt(n,t){return Ee(n,t)?n.slice(0,-(t.length+1)):null}function Pt(n){return`https://${n}`}function Nt(n){return`https://${n}`}function bt(n){return!n||n.length===0?null:JSON.stringify(n)}function xt(n){if(!n)return[];try{let t=JSON.parse(n);return Array.isArray(t)?t:[]}catch{return[]}}function X(n){if(n==null)return;if(typeof n!="string")throw a.validation("Password must be a string");let t=n.trim();if(t.length<_.MIN_LENGTH||t.length>_.MAX_LENGTH)throw a.validation(`Password must be between ${_.MIN_LENGTH} and ${_.MAX_LENGTH} characters`);return t}var yt,f,gt,le,Et,m,ze,V,Ve,je,a,qe,Ye,Dt,Xe,K,Tt,pe,de,me,j,b,At,I,fe,Y,y,P,De,_,g=R(()=>{"use strict";yt={PENDING:"pending",SUCCESS:"success",FAILED:"failed",DELETING:"deleting"},f={DEPLOYMENTS:"/deployments",DEPLOYMENT:n=>`/deployments/${n}`,DEPLOYMENT_CONFIG:n=>`/deployments/${n}/config`,DOMAINS:"/domains",DOMAIN:n=>`/domains/${n}`,DOMAIN_VERIFY:n=>`/domains/${n}/verify`,DOMAIN_DNS:n=>`/domains/${n}/dns`,DOMAIN_RECORDS:n=>`/domains/${n}/records`,DOMAIN_SHARE:n=>`/domains/${n}/share`,DOMAIN_PROPAGATION:n=>`/domains/${n}/propagation`,DOMAINS_VALIDATE:"/domains/validate",TOKENS:"/tokens",TOKEN:n=>`/tokens/${n}`,ACCOUNT:"/account",ACCOUNT_KEY:"/account/key",ACCOUNT_CLAIM:"/account/claim",ACTIVITIES:"/activities",LABELS:"/labels",LIMITS:"/limits",PING:"/ping",SETUP:"/setup",SPA_CHECK:"/spa-check",UPLOAD:"/upload"},gt={PENDING:"pending",PARTIAL:"partial",SUCCESS:"success",PAUSED:"paused"},le={MAX_LENGTH:256,WINDOW_SECONDS:1440*60};Et={FREE:"free",STANDARD:"standard",SPONSORED:"sponsored",ENTERPRISE:"enterprise",SUSPENDED:"suspended",TERMINATING:"terminating",TERMINATED:"terminated"},m={Validation:"validation_failed",NotFound:"not_found",Forbidden:"forbidden",RateLimit:"rate_limit_exceeded",Authentication:"authentication_failed",Business:"business_logic_error",Api:"internal_server_error",Network:"network_error",Cancelled:"operation_cancelled",File:"file_error",Config:"config_error"},ze=new Set([m.Network,m.Cancelled,m.File,m.Config]),V={client:new Set([m.Business,m.Cancelled,m.Config,m.File,m.Forbidden,m.NotFound,m.RateLimit,m.Validation]),network:new Set([m.Network]),auth:new Set([m.Authentication])},Ve=new Set(Object.values(m).filter(n=>!ze.has(n))),je=200;a=class n extends Error{type;status;details;constructor(t,e,i,s){super(e),this.type=t,this.status=i,this.details=s,this.name="ShipError"}toResponse(){let t=this.details,e=this.type===m.Authentication&&t?.internal?void 0:this.details;return{error:this.type,message:this.message,status:this.status,details:e}}static async fromHttpResponse(t,e){let i,s,r;try{if(t.headers.get("content-type")?.includes("application/json")){let c=await t.json();if(c&&typeof c=="object"){let p=c;typeof p.message=="string"?i=p.message:typeof p.error=="string"&&(i=p.error),s=p.details,typeof p.error=="string"&&Ve.has(p.error)&&(r=p.error)}}else{let c=(await t.text()).trim();c&&!c.startsWith("<")&&c.length<=je&&(i=c)}}catch{}let l=t.headers.get("retry-after");if(l!==null){let o=l.trim(),c=/^\d+$/.test(o)?Number(o):Math.ceil((Date.parse(o)-Date.now())/1e3);if(Number.isFinite(c)&&c>=0){let p=s&&typeof s=="object"?s:{};p.retryAfter===void 0&&(s={...p,retryAfter:c})}}i=i||`${e||"Request"} failed with status ${t.status}`;let d=r??(t.status===401?m.Authentication:t.status===403?m.Forbidden:t.status===429?m.RateLimit:m.Api);return new n(d,i,t.status,s)}static fromFetchError(t,e){if(O(t))return t;let i=e||"Request";return t instanceof Error?t.name==="AbortError"?n.cancelled(`${i} was cancelled`):Ke(t)?n.network(`${i} failed: ${t.message}`,{cause:t}):new n(m.Api,`${i} failed: ${t.message}`):new n(m.Api,`${i} failed: Unknown error`)}static validation(t,e){return new n(m.Validation,t,400,e)}static notFound(t,e){let i=e?`${t} ${e} not found`:`${t} not found`;return new n(m.NotFound,i,404)}static forbidden(t,e){return new n(m.Forbidden,t,403,e)}static rateLimit(t="Too many requests",e){return new n(m.RateLimit,t,429,e)}static authentication(t="Authentication required",e){return new n(m.Authentication,t,401,e)}static business(t,e=400,i){return new n(m.Business,t,e,i)}static network(t,e){return new n(m.Network,t,void 0,e)}static cancelled(t,e){return new n(m.Cancelled,t,void 0,e)}static file(t,e){return new n(m.File,t,void 0,e)}static config(t,e){return new n(m.Config,t,void 0,e)}static api(t,e=500,i){return new n(m.Api,t,e,i)}isClientError(){return V.client.has(this.type)?!0:this.status!==void 0&&this.status>=400&&this.status<500}isNetworkError(){return V.network.has(this.type)}isAuthError(){return V.auth.has(this.type)}isType(t){return this.type===t}};qe=new Set(["exe","msi","dll","scr","bat","cmd","com","pif","app","deb","rpm","pkg","mpkg","dmg","iso","img","cab","cpl","chm","ps1","vbs","vbe","ws","wsf","wsc","wsh","reg","jar","jnlp","apk","crx","lnk","inf","hta"]);Ye=["html","htm","xhtml","xml","txt","md","markdown","pdf","csv","json","jsonc","webmanifest","map","toml","yaml","yml","rss","atom","css","scss","sass","less","js","mjs","cjs","jsx","ts","tsx","wasm","vue","svelte","png","jpg","jpeg","gif","webp","avif","svg","ico","bmp","tif","tiff","heic","heif","woff","woff2","ttf","otf","eot","mp3","wav","ogg","oga","opus","m4a","aac","flac","weba","mp4","webm","ogv","mov","m4v","avi","glb","gltf","usdz","vtt","srt","zip"],Dt=Ye.map(n=>`.${n}`).join(","),Xe=/[\x00-\x1f\x7f#?%\\<>"]/;K=new Set(["node_modules","package.json"]);Tt="/auth",pe={SESSION:"session",API_KEY:"apiKey",TOKEN:"token",AGENT:"agent",OAUTH:"oauth",WEBHOOK:"webhook",SYSTEM:"system"},de={PREFIX:"ship-",HEX_LENGTH:64,TOTAL_LENGTH:69,HINT_LENGTH:4},me={PREFIX:"deploy-",HEX_LENGTH:64,TOTAL_LENGTH:71},j={HEADER:"X-Caller",MAX_LENGTH:128,PATTERN:/^[a-zA-Z0-9._-]+$/},b={API_KEY:pe.API_KEY,DEPLOY_TOKEN:pe.TOKEN,OPAQUE:"opaque"};At={ACCOUNT_READ:"account:read",DEPLOYMENTS_READ:"deployments:read",DEPLOYMENTS_WRITE:"deployments:write",DOMAINS_READ:"domains:read",DOMAINS_WRITE:"domains:write"},I="ship.json",fe={rewrites:[{source:"/(.*)",destination:"/index.html"}]};Y="https://api.shipstatic.com",y={PENDING:"pending",PROCESSING_ERROR:"processing_error",EXCLUDED:"excluded",VALIDATION_FAILED:"validation_failed",READY:"ready"};P={MIN_LENGTH:3,MAX_LENGTH:25,MAX_COUNT:10,SEPARATORS:"._-"},De=/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;_={MIN_LENGTH:6,MAX_LENGTH:128}});async function it(n){let t=(await import("spark-md5")).default,e=new t.ArrayBuffer,i=2097152;for(let s=0;s<n.size;s+=i){let r=Math.min(s+i,n.size);e.append(await n.slice(s,r).arrayBuffer())}return{md5:e.end()}}async function st(n){let{createHash:t}=await import("crypto"),e=t("md5");return e.update(n),{md5:e.digest("hex")}}async function rt(n){let{createHash:t}=await import("crypto"),{createReadStream:e}=await import("fs");return new Promise((i,s)=>{let r=t("md5"),l=e(n);l.on("error",d=>s(a.file(`Failed to read file for MD5: ${d.message}`,{filePath:n}))),l.on("data",d=>r.update(d)),l.on("end",()=>i({md5:r.digest("hex")}))})}async function B(n){if(n instanceof Blob)return it(n);if(typeof Buffer<"u"&&Buffer.isBuffer(n))return st(n);if(typeof n=="string")return rt(n);throw a.business("Invalid input for MD5 calculation")}var H=R(()=>{"use strict";g()});function Jt(n){J=n}function at(){return typeof process<"u"&&process.versions&&process.versions.node?"node":typeof window<"u"||typeof self<"u"?"browser":"unknown"}function x(){return J||at()}var J,F=R(()=>{"use strict";J=null});function Oe(n){if(!n||n.length===0)return"";let t=n.filter(r=>r&&typeof r=="string").map(r=>r.replace(/\\/g,"/"));if(t.length===0)return"";if(t.length===1)return t[0];let e=t.map(r=>r.split("/").filter(Boolean)),i=[],s=Math.min(...e.map(r=>r.length));for(let r=0;r<s;r++){let l=e[0][r];if(e.every(d=>d[r]===l))i.push(l);else break}return i.join("/")}function z(n){return n.replace(/\\/g,"/").replace(/\/+/g,"/").replace(/^\/+/,"")}var Q=R(()=>{"use strict"});function Ce(n,t={}){if(t.flatten===!1)return n.map(i=>({path:z(i),name:Z(i)}));let e=ct(n);return n.map(i=>{let s=z(i);if(e){let r=e.endsWith("/")?e:`${e}/`;s.startsWith(r)&&(s=s.substring(r.length))}return s||(s=Z(i)),{path:s,name:Z(i)}})}function ct(n){if(!n.length)return"";let e=n.map(r=>z(r)).map(r=>r.split("/")),i=[],s=Math.min(...e.map(r=>r.length));for(let r=0;r<s-1;r++){let l=e[0][r];if(e.every(d=>d[r]===l))i.push(l);else break}return i.join("/")}function Z(n){return n.split(/[/\\]/).pop()||n}var ee=R(()=>{"use strict";Q()});function te(n,t=1){if(n===0)return"0 Bytes";let e=1024,i=["Bytes","KB","MB","GB"],s=Math.floor(Math.log(n)/Math.log(e));return`${parseFloat((n/e**s).toFixed(t))} ${i[s]}`}function ne(n){if(ue(n))return{valid:!1,reason:"File name contains unsafe characters"};if(n.startsWith(" ")||n.endsWith(" "))return{valid:!1,reason:"File name cannot start/end with spaces"};if(n.endsWith("."))return{valid:!1,reason:"File name cannot end with dots"};let t=/^(CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])(\.|$)/i,e=n.split("/").pop()||n;return t.test(e)?{valid:!1,reason:"File name uses a reserved system name"}:n.includes("..")?{valid:!1,reason:"File name contains path traversal pattern"}:{valid:!0}}function hn(n,t){let e=[],i=[],s=[];if(n.length===0){let o={file:"(no files)",message:"At least one file must be provided"};return e.push(o),{files:[],validFiles:[],errors:e,warnings:[],canDeploy:!1}}for(let o of n)if(k(o.name))return e.push({file:o.name,message:"Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder"}),{files:n.map(c=>({...c,status:y.VALIDATION_FAILED,statusMessage:"Unbuilt project detected"})),validFiles:[],errors:e,warnings:[],canDeploy:!1};if(n.length>t.maxFilesCount){let o={file:`(${n.length} files)`,message:`File count (${n.length}) exceeds limit of ${t.maxFilesCount}`};return e.push(o),{files:n.map(c=>({...c,status:y.VALIDATION_FAILED,statusMessage:o.message})),validFiles:[],errors:e,warnings:[],canDeploy:!1}}let r=0;for(let o of n){let c=y.READY,p="Ready for upload",S=o.name?ne(o.name):{valid:!1,reason:"File name cannot be empty"};if(o.status===y.PROCESSING_ERROR)c=y.VALIDATION_FAILED,p=o.statusMessage||"File failed during processing",e.push({file:o.name,message:p});else if(o.size===0){c=y.EXCLUDED,p="File is empty (0 bytes) and cannot be deployed due to storage limitations",i.push({file:o.name,message:p}),s.push({...o,status:c,statusMessage:p});continue}else o.size<0?(c=y.VALIDATION_FAILED,p="File size must be positive",e.push({file:o.name,message:p})):!o.name||o.name.trim().length===0?(c=y.VALIDATION_FAILED,p="File name cannot be empty",e.push({file:o.name||"(empty)",message:p})):o.name.includes("\0")?(c=y.VALIDATION_FAILED,p="File name contains invalid characters (null byte)",e.push({file:o.name,message:p})):S.valid?$(o.name)?(c=y.VALIDATION_FAILED,p=`File extension not allowed: "${o.name}"`,e.push({file:o.name,message:p})):o.size>t.maxFileSize?(c=y.VALIDATION_FAILED,p=`File size (${te(o.size)}) exceeds limit of ${te(t.maxFileSize)}`,e.push({file:o.name,message:p})):(r+=o.size,r>t.maxTotalSize&&(c=y.VALIDATION_FAILED,p=`Total size would exceed limit of ${te(t.maxTotalSize)}`,e.push({file:o.name,message:p}))):(c=y.VALIDATION_FAILED,p=S.reason||"Invalid file name",e.push({file:o.name,message:p}));s.push({...o,status:c,statusMessage:p})}e.length>0&&(s=s.map(o=>o.status===y.EXCLUDED?o:{...o,status:y.VALIDATION_FAILED,statusMessage:o.status===y.VALIDATION_FAILED?o.statusMessage:"Deployment failed due to validation errors in bundle"}));let l=e.length===0?s.filter(o=>o.status===y.READY):[],d=e.length===0;return{files:s,validFiles:l,errors:e,warnings:i,canDeploy:d}}function ut(n){return n.filter(t=>t.status===y.READY)}function yn(n){return ut(n).length>0}var ie=R(()=>{"use strict";g()});import{isJunk as dt}from"junk";function Fe(n,t){if(!n||n.length===0)return[];if(!t?.allowUnbuilt&&n.find(i=>i&&k(i)))throw a.business("Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder");return n.filter(e=>{if(!e)return!1;let i=e.replace(/\\/g,"/").split("/").filter(Boolean);if(i.length===0)return!0;let s=i[i.length-1];if(dt(s))return!1;for(let l of i)if(l!==".well-known"&&(l.startsWith(".")||l.length>255))return!1;let r=i.slice(0,-1);for(let l of r)if(mt.some(d=>l.toLowerCase()===d.toLowerCase()))return!1;return!0})}var mt,se=R(()=>{"use strict";g();mt=["__MACOSX",".Trashes",".fseventsd",".Spotlight-V100"]});function _e(n,t){if(n.includes("\0")||n.includes("/../")||n.startsWith("../")||n.endsWith("/.."))throw a.business(`Security error: Unsafe file path "${n}" for file: ${t}`)}function $e(n,t){let e=ne(n);if(!e.valid)throw a.business(e.reason||"Invalid file name");if($(n))throw a.business(`File extension not allowed: "${t}"`)}var re=R(()=>{"use strict";g();ie()});var Me={};Ge(Me,{processFilesForNode:()=>Ue});import*as E from"fs";import*as D from"path";function ke(n,t=new Set){let e=[],i=E.realpathSync(n);if(t.has(i))return e;t.add(i);let s=E.readdirSync(n);for(let r of s){let l=D.join(n,r),d=E.statSync(l);if(d.isDirectory()){let o=ke(l,t);e.push(...o)}else d.isFile()&&e.push(l)}return e}async function Ue(n,t={},e){if(x()!=="node")throw a.business("processFilesForNode can only be called in Node.js environment.");for(let u of n){let h=D.resolve(u);try{if(E.statSync(h).isDirectory()){let T=E.readdirSync(h).find(A=>K.has(A));if(T)throw a.business(`"${T}" detected \u2014 deploy your build output (dist/, build/, out/), not the project folder`)}}catch(T){if(O(T))throw T}}let i=n.flatMap(u=>{let h=D.resolve(u);try{return E.statSync(h).isDirectory()?ke(h):[h]}catch{throw a.file(`Path does not exist: ${u}`,{filePath:u})}}),s=[...new Set(i)],r=n.map(u=>D.resolve(u)),l=Oe(r.map(u=>{try{return E.statSync(u).isDirectory()?u:D.dirname(u)}catch{return D.dirname(u)}})),d=s.map(u=>{if(l&&l.length>0){let h=D.relative(l,u);if(h&&typeof h=="string"&&!h.startsWith(".."))return h.replace(/\\/g,"/")}return D.basename(u)}),c=Ce(d,{flatten:t.pathDetect!==!1}).map(u=>u.path),p=new Set(Fe(c));if(p.size===0)return[];let S=[],L=[];for(let u=0;u<s.length;u++)p.has(c[u])&&(S.push(s[u]),L.push(c[u]));let N=[],w=0;if(!e)throw a.config("Platform limits not provided. processFilesForNode requires the limits argument \u2014 pass `ship.getLimits()` result.");for(let u=0;u<S.length;u++){let h=S[u],T=L[u];try{_e(T,h);let A=E.statSync(h);if(A.size===0)continue;if($e(T,h),A.size>e.maxFileSize)throw a.business(`File ${h} is too large. Maximum allowed size is ${e.maxFileSize/(1024*1024)}MB.`);if(w+=A.size,w>e.maxTotalSize)throw a.business(`Total deploy size is too large. Maximum allowed is ${e.maxTotalSize/(1024*1024)}MB.`);let v=E.readFileSync(h),{md5:Be}=await B(v);N.push({path:T,content:v,size:v.length,md5:Be})}catch(A){if(O(A))throw A;let v=A instanceof Error?A.message:String(A);throw a.file(`Failed to read file "${h}": ${v}`,{filePath:h})}}if(N.length>e.maxFilesCount)throw a.business(`Too many files to deploy. Maximum allowed is ${e.maxFilesCount} files.`);return N}var oe=R(()=>{"use strict";g();ee();F();se();H();Q();re()});g();g();g();var U=class{constructor(){this.handlers=new Map}on(t,e){this.handlers.has(t)||this.handlers.set(t,new Set),this.handlers.get(t)?.add(e)}off(t,e){let i=this.handlers.get(t);i&&(i.delete(e),i.size===0&&this.handlers.delete(t))}emit(t,...e){let i=this.handlers.get(t);if(!i)return;let s=Array.from(i);for(let r of s)try{r(...e)}catch(l){i.delete(r),t!=="error"&&setTimeout(()=>{let d=l instanceof Error?l:new Error(String(l));this.emit("error",d,String(t))},0)}}};g();g();function C(n){if(n==null)return;if(n.length===0)return n;if(n.length>P.MAX_COUNT)throw a.validation(`Maximum ${P.MAX_COUNT} labels allowed`);let t=n.map((i,s)=>{if(typeof i!="string")throw a.validation(`Label at index ${s} must be a string`);let r=i.trim().toLowerCase();if(r.length<P.MIN_LENGTH)throw a.validation(`Labels must be at least ${P.MIN_LENGTH} characters long`);if(r.length>P.MAX_LENGTH)throw a.validation(`Labels must be no more than ${P.MAX_LENGTH} characters long`);if(!De.test(r))throw a.validation(`Labels must start and end with alphanumeric characters, with optional separators (${P.SEPARATORS}) between segments`);return r}),e=[...new Set(t)];if(e.length!==t.length)throw a.validation("Duplicate labels are not allowed");return e}async function Te(n){let t=n.find(s=>s.path===I||s.path===`/${I}`);if(!t)return;let e=t.content,i=typeof e.text=="function"?await e.text():t.content.toString("utf8");he(i)}var Ze=3e4,Ae=3e5,et=3e5,tt=Ae+et,nt="sdk";function W(n){let t=new URLSearchParams;n?.limit!==void 0&&t.set("limit",String(n.limit)),n?.cursor!==void 0&&t.set("cursor",n.cursor);let e=t.toString();return e?`?${e}`:""}var M=class extends U{constructor(e){super();this.globalHeaders={};this.apiUrl=e.apiUrl||Y,this.getAuthHeadersCallback=e.getAuthHeaders,this.session=e.session??!1,this.caller=e.caller,this.timeout=e.timeout??Ze,this.deployTimeout=e.timeout??Ae,this.deployBuildTimeout=e.timeout??tt,this.fetch=e.fetch??globalThis.fetch.bind(globalThis),this.createDeployBody=e.createDeployBody,this.deployEndpoint=e.deployEndpoint||f.DEPLOYMENTS}setGlobalHeaders(e){this.globalHeaders=e}async executeRequest(e,i,s,r=this.timeout){let l=()=>{};try{let d=await this.mergeHeaders(i.headers),o=this.createTimeoutSignal(i.signal,r);l=o.cleanup;let c={...i,headers:d,credentials:this.session&&!d.Authorization?"include":void 0,signal:o.signal};this.emit("request",e,c);let p=await this.fetch(e,c);if(l(),!p.ok)throw await a.fromHttpResponse(p,s);return this.emit("response",this.safeClone(p),e),{data:await this.parseResponse(this.safeClone(p)),status:p.status}}catch(d){l();let o=a.fromFetchError(d,s);throw this.emit("error",o,e),o}}async request(e,i,s,r){let{data:l}=await this.executeRequest(e,i,s,r);return l}async requestWithStatus(e,i,s){return this.executeRequest(e,i,s)}async mergeHeaders(e={}){return{...this.globalHeaders,...this.caller?{"X-Caller":this.caller}:{},...await this.getAuthHeadersCallback(),...e}}createTimeoutSignal(e,i=this.timeout){let s=new AbortController,r=setTimeout(()=>s.abort(),i);if(e){let l=()=>s.abort();e.addEventListener("abort",l),e.aborted&&s.abort()}return{signal:s.signal,cleanup:()=>clearTimeout(r)}}safeClone(e){try{return e.clone()}catch{return e}}async parseResponse(e){if(!(e.headers.get("Content-Length")==="0"||e.status===204))return e.json()}async deploy(e,i={}){if(!e.length)throw a.business("No files to deploy");for(let c of e)if(!c.md5)throw a.file(`MD5 checksum missing for file: ${c.path}`,{filePath:c.path});X(i.password);let s=ce(i.idempotencyKey),r=C(i.labels);await Te(e);let l=i.build||i.prerender||i.spa?{build:i.build,prerender:i.prerender,spa:i.spa}:void 0,{body:d,headers:o}=await this.createDeployBody(e,{labels:r,via:i.via??nt,password:i.password,flags:l,captcha:i.captcha});return this.request(`${this.apiUrl}${this.deployEndpoint}`,{method:"POST",body:d,headers:s?{...o,"Idempotency-Key":s}:o,signal:i.signal||null},"Deploy",i.build||i.prerender?this.deployBuildTimeout:this.deployTimeout)}async listDeployments(e){return this.request(`${this.apiUrl}${f.DEPLOYMENTS}${W(e)}`,{method:"GET"},"List deployments")}async getDeployment(e){return this.request(`${this.apiUrl}${f.DEPLOYMENT(encodeURIComponent(e))}`,{method:"GET"},"Get deployment")}async updateDeploymentLabels(e,i){let s=C(i);return this.request(`${this.apiUrl}${f.DEPLOYMENT(encodeURIComponent(e))}`,{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({labels:s})},"Update deployment labels")}async deleteDeployment(e){return this.request(`${this.apiUrl}${f.DEPLOYMENT(encodeURIComponent(e))}`,{method:"DELETE"},"Delete deployment")}async setDomain(e,i,s){let r=C(s),l={};i&&(l.deployment=i),r!==void 0&&(l.labels=r);let{data:d,status:o}=await this.requestWithStatus(`${this.apiUrl}${f.DOMAIN(encodeURIComponent(e))}`,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify(l)},"Set domain");return{...d,isCreate:o===201}}async listDomains(e){return this.request(`${this.apiUrl}${f.DOMAINS}${W(e)}`,{method:"GET"},"List domains")}async getDomain(e){return this.request(`${this.apiUrl}${f.DOMAIN(encodeURIComponent(e))}`,{method:"GET"},"Get domain")}async deleteDomain(e){return this.request(`${this.apiUrl}${f.DOMAIN(encodeURIComponent(e))}`,{method:"DELETE"},"Delete domain")}async verifyDomain(e){return this.request(`${this.apiUrl}${f.DOMAIN_VERIFY(encodeURIComponent(e))}`,{method:"POST"},"Verify domain")}async getDomainDns(e){return this.request(`${this.apiUrl}${f.DOMAIN_DNS(encodeURIComponent(e))}`,{method:"GET"},"Get domain DNS")}async getDomainRecords(e){return this.request(`${this.apiUrl}${f.DOMAIN_RECORDS(encodeURIComponent(e))}`,{method:"GET"},"Get domain records")}async getDomainShare(e){return this.request(`${this.apiUrl}${f.DOMAIN_SHARE(encodeURIComponent(e))}`,{method:"GET"},"Get domain share")}async validateDomain(e){return this.request(`${this.apiUrl}${f.DOMAINS_VALIDATE}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({domain:e})},"Validate domain")}async createToken(e,i){let s=C(i),r={};return e!==void 0&&(r.ttl=e),s!==void 0&&(r.labels=s),this.request(`${this.apiUrl}${f.TOKENS}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(r)},"Create token")}async listTokens(e){return this.request(`${this.apiUrl}${f.TOKENS}${W(e)}`,{method:"GET"},"List tokens")}async deleteToken(e){return this.request(`${this.apiUrl}${f.TOKEN(encodeURIComponent(e))}`,{method:"DELETE"},"Delete token")}async getToken(e){return this.request(`${this.apiUrl}${f.TOKEN(encodeURIComponent(e))}`,{method:"GET"},"Get token")}async getAccount(){return this.request(`${this.apiUrl}${f.ACCOUNT}`,{method:"GET"},"Get account")}async getLimits(){return this.request(`${this.apiUrl}${f.LIMITS}`,{method:"GET"},"Get limits")}async ping(){return this.request(`${this.apiUrl}${f.PING}`,{method:"GET"},"Ping")}async checkSPA(e,i={}){let s=e.find(o=>o.path==="index.html"||o.path==="/index.html");if(!s||s.size>100*1024)return!1;let r;if(typeof Buffer<"u"&&Buffer.isBuffer(s.content))r=s.content.toString("utf-8");else if(typeof Blob<"u"&&s.content instanceof Blob)r=await s.content.text();else if(typeof File<"u"&&s.content instanceof File)r=await s.content.text();else return!1;let l={files:e.map(o=>o.path),index:r};return(await this.request(`${this.apiUrl}${f.SPA_CHECK}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(l)},"SPA check")).isSPA}};g();g();H();async function ot(){let n=JSON.stringify(fe,null,2),t;typeof Buffer<"u"?t=Buffer.from(n,"utf-8"):t=new Blob([n],{type:"application/json"});let{md5:e}=await B(t);return{path:I,content:t,size:n.length,md5:e}}async function Se(n,t,e){if(e.spaDetect===!1||e.spa||e.build||e.prerender||n.some(i=>i.path===I))return n;try{if(await t.checkSPA(n,e)){let s=await ot();return[...n,s]}}catch{}return n}function Re(n){let{getApi:t,ensureInit:e,processInput:i}=n;return{upload:async(s,r={})=>{if(await e(),!i)throw a.config("processInput function is not provided.");let l=t(),d=await i(s,r);return d=await Se(d,l,r),l.deploy(d,r)},list:async s=>(await e(),t().listDeployments(s)),get:async s=>(await e(),t().getDeployment(s)),set:async(s,r)=>(await e(),t().updateDeploymentLabels(s,r.labels)),delete:async s=>(await e(),t().deleteDeployment(s))}}function Ie(n){let{getApi:t,ensureInit:e}=n;return{set:async(i,s={})=>(await e(),t().setDomain(i,s.deployment,s.labels)),list:async i=>(await e(),t().listDomains(i)),get:async i=>(await e(),t().getDomain(i)),delete:async i=>(await e(),t().deleteDomain(i)),verify:async i=>(await e(),t().verifyDomain(i)),validate:async i=>(await e(),t().validateDomain(i)),dns:async i=>(await e(),t().getDomainDns(i)),records:async i=>(await e(),t().getDomainRecords(i)),share:async i=>(await e(),t().getDomainShare(i))}}function we(n){let{getApi:t,ensureInit:e}=n;return{get:async()=>(await e(),t().getAccount())}}function Pe(n){let{getApi:t,ensureInit:e}=n;return{create:async(i={})=>(await e(),t().createToken(i.ttl,i.labels)),list:async i=>(await e(),t().listTokens(i)),get:async i=>(await e(),t().getToken(i)),delete:async i=>(await e(),t().deleteToken(i))}}var G=class{constructor(t={}){this.initPromise=null;this.platformLimits=null;this.credential=null;if(t={...t,apiUrl:t.apiUrl||void 0,token:t.token||void 0,caller:t.caller||void 0},this.clientOptions=t,t.caller!==void 0&&ge(t.caller),t.token&&t.session)throw a.config("Provide either `token` or `session`, not both.");typeof t.token=="string"?(q(t.token),this.credential=t.token):t.token&&(this.credential=t.token),this.http=new M({...t,getAuthHeaders:()=>this.getAuthHeaders(),createDeployBody:this.getDeployBodyCreator()});let e={getApi:()=>this.http,ensureInit:()=>this.ensureInitialized()};this.deployments=Re({...e,processInput:(i,s)=>this.processInput(i,s)}),this.domains=Ie(e),this.account=we(e),this.tokens=Pe(e)}async ensureInitialized(){return this.initPromise||(this.initPromise=this.fetchPlatformLimits()),this.initPromise}async fetchPlatformLimits(){try{this.platformLimits=await this.http.getLimits()}catch(t){throw this.initPromise=null,t}}async ping(){return await this.ensureInitialized(),this.http.ping()}async deploy(t,e){return this.deployments.upload(t,e)}async whoami(){return this.account.get()}async getLimits(){return this.platformLimits?this.platformLimits:(await this.ensureInitialized(),this.platformLimits)}on(t,e){this.http.on(t,e)}off(t,e){this.http.off(t,e)}setHeaders(t){this.http.setGlobalHeaders(t)}clearHeaders(){this.http.setGlobalHeaders({})}setToken(t){if(this.clientOptions.session)throw a.config("Provide either `token` or `session`, not both.");if(typeof t=="string"){if(!t)throw a.business("Invalid token provided. Token must be a non-empty string.");q(t),this.credential=t;return}if(typeof t!="function")throw a.business("Invalid token provided. Token must be a non-empty string or a provider function.");this.credential=t}async getAuthHeaders(){if(this.credential===null)return{};let t=typeof this.credential=="function"?await this.credential():this.credential;if(!t)throw a.authentication("Token provider returned no token.");if(typeof t!="string")throw a.authentication("Token provider returned a non-string value.");return{Authorization:`Bearer ${t}`}}};F();g();import{z as xe}from"zod";import{z as Ne}from"zod";var be={apiUrl:Ne.string().url().optional(),token:Ne.string().min(1).optional()};F();var lt=xe.object(be).strict(),pt={apiUrl:"SHIP_API_URL",token:"SHIP_TOKEN"};function Le(){if(x()!=="node")return{};let n={apiUrl:process.env.SHIP_API_URL||void 0,token:process.env.SHIP_TOKEN||void 0};try{return lt.parse(n)}catch(t){if(t instanceof xe.ZodError){let e=t.issues[0],i=e.path[0],s=(i&&pt[i])??"SHIP environment configuration";throw a.config(`Invalid ${s}: ${e.message}`)}throw a.config("Invalid environment configuration")}}g();async function ve(n,t={}){let{FormData:e,File:i}=await import("formdata-node"),{FormDataEncoder:s}=await import("form-data-encoder"),{labels:r,via:l,password:d,flags:o,captcha:c}=t,p=new e,S=[];for(let u of n){if(!Buffer.isBuffer(u.content)&&!(typeof Blob<"u"&&u.content instanceof Blob))throw a.file(`Unsupported file.content type for Node.js: ${u.path}`,{filePath:u.path});if(!u.md5)throw a.file(`File missing md5 checksum: ${u.path}`,{filePath:u.path});let h=new i([u.content],u.path,{type:"application/octet-stream"});p.append("files[]",h),S.push(u.md5)}p.append("checksums",JSON.stringify(S)),r&&r.length>0&&p.append("labels",JSON.stringify(r)),l&&p.append("via",l),d&&p.append("password",d),o?.build&&p.append("build","true"),o?.prerender&&p.append("prerender","true"),o?.spa&&p.append("spa","true"),c&&p.append("captcha",c);let L=new s(p),N=[];for await(let u of L.encode())N.push(Buffer.from(u));let w=Buffer.concat(N);return{body:w.buffer.slice(w.byteOffset,w.byteOffset+w.byteLength),headers:{"Content-Type":L.contentType,"Content-Length":Buffer.byteLength(w).toString()}}}g();g();ee();F();ie();se();H();re();function In(n,t,e,i=!0){let s=n===1?t:e;return i?`${n} ${s}`:s}oe();var ae=class extends G{constructor(t={}){if(x()!=="node")throw a.business("Node.js Ship class can only be used in Node.js environment.");let e=Le();super({...t,apiUrl:t.apiUrl||e.apiUrl,token:t.token||(t.session?void 0:e.token)})}async deploy(t,e){return super.deploy(t,e)}async processInput(t,e){let i=typeof t=="string"?[t]:t;if(!Array.isArray(i)||!i.every(r=>typeof r=="string"))throw a.business("Invalid input type for Node.js environment. Expected string or string[].");if(i.length===0)throw a.business("No files to deploy.");let{processFilesForNode:s}=await Promise.resolve().then(()=>(oe(),Me));return s(i,e,this.platformLimits??void 0)}getDeployBodyCreator(){return ve}},ft=ae;export{de as API_KEY,f as API_PATHS,Tt as AUTH_BASE_PATH,Et as AccountPlan,M as ApiHttp,pe as AuthMethod,qe as BLOCKED_EXTENSIONS,j as CALLER,Y as DEFAULT_API,I as DEPLOYMENT_CONFIG_FILENAME,me as DEPLOY_TOKEN,yt as DeploymentStatus,gt as DomainStatus,m as ErrorType,y as FILE_VALIDATION_STATUS,y as FileValidationStatus,le as IDEMPOTENCY_KEY_CONSTRAINTS,mt as JUNK_DIRECTORIES,P as LABEL_CONSTRAINTS,De as LABEL_PATTERN,At as OAuthScope,_ as PASSWORD_CONSTRAINTS,fe as SPA_DEFAULT_CONFIG,ae as Ship,a as ShipError,b as TokenKind,K as UNBUILT_PROJECT_MARKERS,Xe as UNSAFE_FILENAME_CHARS,Dt as WEB_FILE_ACCEPT,Jt as __setTestEnvironment,yn as allValidFilesReady,he as assertShipJsonSyntax,B as calculateMD5,We as classifyToken,we as createAccountResource,Re as createDeploymentResource,Ie as createDomainResource,Pe as createTokenResource,ft as default,xt as deserializeLabels,wt as extractSubdomain,Fe as filterJunk,te as formatFileSize,Pt as generateDeploymentUrl,Nt as generateDomainUrl,x as getENV,ut as getValidFiles,k as hasUnbuiltMarker,ue as hasUnsafeChars,$ as isBlockedExtension,It as isCustomDomain,Rt as isDeployment,Ee as isPlatformDomain,O as isShipError,Ce as optimizeDeployPaths,In as pluralize,Ue as processFilesForNode,bt as serializeLabels,Je as validateApiKey,St as validateApiUrl,ge as validateCaller,$e as validateDeployFile,_e as validateDeployPath,Qe as validateDeployToken,ne as validateFileName,hn as validateFiles,ce as validateIdempotencyKey,X as validatePassword,q as validateToken};
+var xe=Object.defineProperty;var We=Object.getOwnPropertyDescriptor;var Je=Object.getOwnPropertyNames;var Xe=Object.prototype.hasOwnProperty;var I=(n,t)=>()=>(n&&(t=n(n=0)),t);var Q=(n,t)=>{for(var e in t)xe(n,e,{get:t[e],enumerable:!0})},Ie=(n,t,e,i)=>{if(t&&typeof t=="object"||typeof t=="function")for(let s of Je(t))!Xe.call(n,s)&&s!==e&&xe(n,s,{get:()=>t[s],enumerable:!(i=We(t,s))||i.enumerable});return n},u=(n,t,e)=>(Ie(n,t,"default"),e&&Ie(e,t,"default"));import{ShipError as Oe}from"@shipstatic/types";async function lt(n){let t=(await import("spark-md5")).default,e=new t.ArrayBuffer,i=2097152;for(let s=0;s<n.size;s+=i){let r=Math.min(s+i,n.size);e.append(await n.slice(s,r).arrayBuffer())}return{md5:e.end()}}async function pt(n){let{createHash:t}=await import("crypto"),e=t("md5");return e.update(n),{md5:e.digest("hex")}}async function ct(n){let{createHash:t}=await import("crypto"),{createReadStream:e}=await import("fs");return new Promise((i,s)=>{let r=t("md5"),a=e(n);a.on("error",c=>s(Oe.file(`Failed to read file for MD5: ${c.message}`,{filePath:n}))),a.on("data",c=>r.update(c)),a.on("end",()=>i({md5:r.digest("hex")}))})}async function L(n){if(n instanceof Blob)return lt(n);if(typeof Buffer<"u"&&Buffer.isBuffer(n))return pt(n);if(typeof n=="string")return ct(n);throw Oe.business("Invalid input for MD5 calculation")}var te=I(()=>{"use strict"});function ce(n){pe=n}function ht(){return typeof process<"u"&&process.versions&&process.versions.node?"node":typeof window<"u"||typeof self<"u"?"browser":"unknown"}function A(){return pe||ht()}var pe,G=I(()=>{"use strict";pe=null});function qe(n){if(!n||n.length===0)return"";let t=n.filter(r=>r&&typeof r=="string").map(r=>r.replace(/\\/g,"/"));if(t.length===0)return"";if(t.length===1)return t[0];let e=t.map(r=>r.split("/").filter(Boolean)),i=[],s=Math.min(...e.map(r=>r.length));for(let r=0;r<s;r++){let a=e[0][r];if(e.every(c=>c[r]===a))i.push(a);else break}return i.join("/")}function ie(n){return n.replace(/\\/g,"/").replace(/\/+/g,"/").replace(/^\/+/,"")}var de=I(()=>{"use strict"});function j(n,t={}){if(t.flatten===!1)return n.map(i=>({path:ie(i),name:me(i)}));let e=Dt(n);return n.map(i=>{let s=ie(i);if(e){let r=e.endsWith("/")?e:`${e}/`;s.startsWith(r)&&(s=s.substring(r.length))}return s||(s=me(i)),{path:s,name:me(i)}})}function Dt(n){if(!n.length)return"";let e=n.map(r=>ie(r)).map(r=>r.split("/")),i=[],s=Math.min(...e.map(r=>r.length));for(let r=0;r<s-1;r++){let a=e[0][r];if(e.every(c=>c[r]===a))i.push(a);else break}return i.join("/")}function me(n){return n.split(/[/\\]/).pop()||n}var fe=I(()=>{"use strict";de()});import{FileValidationStatus as y,hasUnbuiltMarker as St,hasUnsafeChars as Et,isBlockedExtension as Tt}from"@shipstatic/types";function U(n,t=1){if(n===0)return"0 Bytes";let e=1024,i=["Bytes","KB","MB","GB"],s=Math.floor(Math.log(n)/Math.log(e));return`${parseFloat((n/e**s).toFixed(t))} ${i[s]}`}function B(n){if(Et(n))return{valid:!1,reason:"File name contains unsafe characters"};if(n.startsWith(" ")||n.endsWith(" "))return{valid:!1,reason:"File name cannot start/end with spaces"};if(n.endsWith("."))return{valid:!1,reason:"File name cannot end with dots"};let t=/^(CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])(\.|$)/i,e=n.split("/").pop()||n;return t.test(e)?{valid:!1,reason:"File name uses a reserved system name"}:n.includes("..")?{valid:!1,reason:"File name contains path traversal pattern"}:{valid:!0}}function he(n,t){let e=[],i=[],s=[];if(n.length===0){let o={file:"(no files)",message:"At least one file must be provided"};return e.push(o),{files:[],validFiles:[],errors:e,warnings:[],canDeploy:!1}}for(let o of n)if(St(o.name))return e.push({file:o.name,message:"Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder"}),{files:n.map(d=>({...d,status:y.VALIDATION_FAILED,statusMessage:"Unbuilt project detected"})),validFiles:[],errors:e,warnings:[],canDeploy:!1};if(n.length>t.maxFilesCount){let o={file:`(${n.length} files)`,message:`File count (${n.length}) exceeds limit of ${t.maxFilesCount}`};return e.push(o),{files:n.map(d=>({...d,status:y.VALIDATION_FAILED,statusMessage:o.message})),validFiles:[],errors:e,warnings:[],canDeploy:!1}}let r=0;for(let o of n){let d=y.READY,p="Ready for upload",b=o.name?B(o.name):{valid:!1,reason:"File name cannot be empty"};if(o.status===y.PROCESSING_ERROR)d=y.VALIDATION_FAILED,p=o.statusMessage||"File failed during processing",e.push({file:o.name,message:p});else if(o.size===0){d=y.EXCLUDED,p="File is empty (0 bytes) and cannot be deployed due to storage limitations",i.push({file:o.name,message:p}),s.push({...o,status:d,statusMessage:p});continue}else o.size<0?(d=y.VALIDATION_FAILED,p="File size must be positive",e.push({file:o.name,message:p})):!o.name||o.name.trim().length===0?(d=y.VALIDATION_FAILED,p="File name cannot be empty",e.push({file:o.name||"(empty)",message:p})):o.name.includes("\0")?(d=y.VALIDATION_FAILED,p="File name contains invalid characters (null byte)",e.push({file:o.name,message:p})):b.valid?Tt(o.name)?(d=y.VALIDATION_FAILED,p=`File extension not allowed: "${o.name}"`,e.push({file:o.name,message:p})):o.size>t.maxFileSize?(d=y.VALIDATION_FAILED,p=`File size (${U(o.size)}) exceeds limit of ${U(t.maxFileSize)}`,e.push({file:o.name,message:p})):(r+=o.size,r>t.maxTotalSize&&(d=y.VALIDATION_FAILED,p=`Total size would exceed limit of ${U(t.maxTotalSize)}`,e.push({file:o.name,message:p}))):(d=y.VALIDATION_FAILED,p=b.reason||"Invalid file name",e.push({file:o.name,message:p}));s.push({...o,status:d,statusMessage:p})}e.length>0&&(s=s.map(o=>o.status===y.EXCLUDED?o:{...o,status:y.VALIDATION_FAILED,statusMessage:o.status===y.VALIDATION_FAILED?o.statusMessage:"Deployment failed due to validation errors in bundle"}));let a=e.length===0?s.filter(o=>o.status===y.READY):[],c=e.length===0;return{files:s,validFiles:a,errors:e,warnings:i,canDeploy:c}}function se(n){return n.filter(t=>t.status===y.READY)}function ye(n){return se(n).length>0}var ge=I(()=>{"use strict"});import{hasUnbuiltMarker as Rt,ShipError as bt}from"@shipstatic/types";import{isJunk as At}from"junk";function K(n,t){if(!n||n.length===0)return[];if(!t?.allowUnbuilt&&n.find(i=>i&&Rt(i)))throw bt.business("Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder");return n.filter(e=>{if(!e)return!1;let i=e.replace(/\\/g,"/").split("/").filter(Boolean);if(i.length===0)return!0;let s=i[i.length-1];if(At(s))return!1;for(let a of i)if(a!==".well-known"&&(a.startsWith(".")||a.length>255))return!1;let r=i.slice(0,-1);for(let a of r)if(re.some(c=>a.toLowerCase()===c.toLowerCase()))return!1;return!0})}var re,De=I(()=>{"use strict";re=["__MACOSX",".Trashes",".fseventsd",".Spotlight-V100"]});import{isBlockedExtension as vt,ShipError as Se}from"@shipstatic/types";function Y(n,t){if(n.includes("\0")||n.includes("/../")||n.startsWith("../")||n.endsWith("/.."))throw Se.business(`Security error: Unsafe file path "${n}" for file: ${t}`)}function W(n,t){let e=B(n);if(!e.valid)throw Se.business(e.reason||"Invalid file name");if(vt(n))throw Se.business(`File extension not allowed: "${t}"`)}var Ee=I(()=>{"use strict";ge()});var Ke={};Q(Ke,{processFilesForNode:()=>oe});import*as S from"fs";import*as E from"path";import{isShipError as Ge,ShipError as x,UNBUILT_PROJECT_MARKERS as Pt}from"@shipstatic/types";function je(n,t=new Set){let e=[],i=S.realpathSync(n);if(t.has(i))return e;t.add(i);let s=S.readdirSync(n);for(let r of s){let a=E.join(n,r),c=S.statSync(a);if(c.isDirectory()){let o=je(a,t);e.push(...o)}else c.isFile()&&e.push(a)}return e}async function oe(n,t={},e){if(A()!=="node")throw x.business("processFilesForNode can only be called in Node.js environment.");for(let l of n){let f=E.resolve(l);try{if(S.statSync(f).isDirectory()){let T=S.readdirSync(f).find(R=>Pt.has(R));if(T)throw x.business(`"${T}" detected \u2014 deploy your build output (dist/, build/, out/), not the project folder`)}}catch(T){if(Ge(T))throw T}}let i=n.flatMap(l=>{let f=E.resolve(l);try{return S.statSync(f).isDirectory()?je(f):[f]}catch{throw x.file(`Path does not exist: ${l}`,{filePath:l})}}),s=[...new Set(i)],r=n.map(l=>E.resolve(l)),a=qe(r.map(l=>{try{return S.statSync(l).isDirectory()?l:E.dirname(l)}catch{return E.dirname(l)}})),c=s.map(l=>{if(a&&a.length>0){let f=E.relative(a,l);if(f&&typeof f=="string"&&!f.startsWith(".."))return f.replace(/\\/g,"/")}return E.basename(l)}),d=j(c,{flatten:t.pathDetect!==!1}).map(l=>l.path),p=new Set(K(d));if(p.size===0)return[];let b=[],$=[];for(let l=0;l<s.length;l++)p.has(d[l])&&(b.push(s[l]),$.push(d[l]));let C=[],P=0;if(!e)throw x.config("Platform limits not provided. processFilesForNode requires the limits argument \u2014 pass `ship.getLimits()` result.");for(let l=0;l<b.length;l++){let f=b[l],T=$[l];try{Y(T,f);let R=S.statSync(f);if(R.size===0)continue;if(W(T,f),R.size>e.maxFileSize)throw x.business(`File ${f} is too large. Maximum allowed size is ${e.maxFileSize/(1024*1024)}MB.`);if(P+=R.size,P>e.maxTotalSize)throw x.business(`Total deploy size is too large. Maximum allowed is ${e.maxTotalSize/(1024*1024)}MB.`);let _=S.readFileSync(f),{md5:Ye}=await L(_);C.push({path:T,content:_,size:_.length,md5:Ye})}catch(R){if(Ge(R))throw R;let _=R instanceof Error?R.message:String(R);throw x.file(`Failed to read file "${f}": ${_}`,{filePath:f})}}if(C.length>e.maxFilesCount)throw x.business(`Too many files to deploy. Maximum allowed is ${e.maxFilesCount} files.`);return C}var Ae=I(()=>{"use strict";fe();G();De();te();de();Ee()});var X={};Q(X,{ApiHttp:()=>F,DEFAULT_API:()=>ue,ErrorType:()=>Re,FILE_VALIDATION_STATUS:()=>y,JUNK_DIRECTORIES:()=>re,Ship:()=>J,ShipError:()=>be,__setTestEnvironment:()=>ce,allValidFilesReady:()=>ye,calculateMD5:()=>L,createAccountResource:()=>H,createDeploymentResource:()=>z,createDomainResource:()=>V,createTokenResource:()=>q,default:()=>Pe,filterJunk:()=>K,formatFileSize:()=>U,getENV:()=>A,getValidFiles:()=>se,optimizeDeployPaths:()=>j,pluralize:()=>Te,processFilesForNode:()=>oe,validateDeployFile:()=>W,validateDeployPath:()=>Y,validateFileName:()=>B,validateFiles:()=>he});var D={};Q(D,{ApiHttp:()=>F,DEFAULT_API:()=>ue,ErrorType:()=>Re,FILE_VALIDATION_STATUS:()=>y,JUNK_DIRECTORIES:()=>re,Ship:()=>J,ShipError:()=>be,__setTestEnvironment:()=>ce,allValidFilesReady:()=>ye,calculateMD5:()=>L,createAccountResource:()=>H,createDeploymentResource:()=>z,createDomainResource:()=>V,createTokenResource:()=>q,default:()=>Pe,filterJunk:()=>K,formatFileSize:()=>U,getENV:()=>A,getValidFiles:()=>se,optimizeDeployPaths:()=>j,pluralize:()=>Te,processFilesForNode:()=>oe,validateDeployFile:()=>W,validateDeployPath:()=>Y,validateFileName:()=>B,validateFiles:()=>he});import{ShipError as ve}from"@shipstatic/types";import{ShipError as N,validateCaller as ft,validateToken as Ue}from"@shipstatic/types";import{API_PATHS as h,CALLER as et,DEFAULT_API as tt,IDEMPOTENCY_KEY_CONSTRAINTS as nt,ShipError as ee,SPA_CHECK_CONSTRAINTS as ae,validateIdempotencyKey as it}from"@shipstatic/types";var Z=class{constructor(){this.handlers=new Map}on(t,e){this.handlers.has(t)||this.handlers.set(t,new Set),this.handlers.get(t)?.add(e)}off(t,e){let i=this.handlers.get(t);i&&(i.delete(e),i.size===0&&this.handlers.delete(t))}emit(t,...e){let i=this.handlers.get(t);if(!i)return;let s=Array.from(i);for(let r of s)try{r(...e)}catch(a){i.delete(r),t!=="error"&&setTimeout(()=>{let c=a instanceof Error?a:new Error(String(a));this.emit("error",c,String(t))},0)}}};import{assertShipJsonSyntax as Qe,DEPLOYMENT_CONFIG_FILENAME as we,LABEL_CONSTRAINTS as w,LABEL_PATTERN as Ze,ShipError as O}from"@shipstatic/types";import{validatePassword as Le}from"@shipstatic/types";function M(n){if(n==null)return;if(n.length===0)return n;if(n.length>w.MAX_COUNT)throw O.validation(`Maximum ${w.MAX_COUNT} labels allowed`);let t=n.map((i,s)=>{if(typeof i!="string")throw O.validation(`Label at index ${s} must be a string`);let r=i.trim().toLowerCase();if(r.length<w.MIN_LENGTH)throw O.validation(`Labels must be at least ${w.MIN_LENGTH} characters long`);if(r.length>w.MAX_LENGTH)throw O.validation(`Labels must be no more than ${w.MAX_LENGTH} characters long`);if(!Ze.test(r))throw O.validation(`Labels must start and end with alphanumeric characters, with optional separators (${w.SEPARATORS}) between segments`);return r}),e=[...new Set(t)];if(e.length!==t.length)throw O.validation("Duplicate labels are not allowed");return e}async function Fe(n){let t=n.find(s=>s.path===we||s.path===`/${we}`);if(!t)return;let e=t.content,i=typeof e.text=="function"?await e.text():t.content.toString("utf8");Qe(i)}var st=3e4,Ce=3e5,rt=3e5,ot=Ce+rt,at="sdk";function le(n){let t=new URLSearchParams;n?.limit!==void 0&&t.set("limit",String(n.limit)),n?.cursor!==void 0&&t.set("cursor",n.cursor);let e=t.toString();return e?`?${e}`:""}var F=class extends Z{constructor(e){super();this.globalHeaders={};this.apiUrl=e.apiUrl||tt,this.getAuthHeadersCallback=e.getAuthHeaders,this.session=e.session??!1,this.caller=e.caller,this.timeout=e.timeout??st,this.deployTimeout=e.timeout??Ce,this.deployBuildTimeout=e.timeout??ot,this.fetch=e.fetch??globalThis.fetch.bind(globalThis),this.createDeployBody=e.createDeployBody,this.deployEndpoint=e.deployEndpoint||h.DEPLOYMENTS}setGlobalHeaders(e){this.globalHeaders=e}async executeRequest(e,i,s,r=this.timeout){let a=()=>{};try{let c=await this.mergeHeaders(i.headers),o=this.createTimeoutSignal(i.signal,r);a=o.cleanup;let d={...i,headers:c,credentials:this.session&&!c.Authorization?"include":void 0,signal:o.signal};this.emit("request",e,d);let p=await this.fetch(e,d);if(a(),!p.ok)throw await ee.fromHttpResponse(p,s);return this.emit("response",this.safeClone(p),e),{data:await this.parseResponse(this.safeClone(p)),status:p.status}}catch(c){a();let o=ee.fromFetchError(c,s);throw this.emit("error",o,e),o}}async request(e,i,s,r){let{data:a}=await this.executeRequest(e,i,s,r);return a}async requestWithStatus(e,i,s){return this.executeRequest(e,i,s)}async mergeHeaders(e={}){return{...this.globalHeaders,...this.caller?{[et.HEADER]:this.caller}:{},...await this.getAuthHeadersCallback(),...e}}createTimeoutSignal(e,i=this.timeout){let s=new AbortController,r=setTimeout(()=>s.abort(),i);if(e){let a=()=>s.abort();e.addEventListener("abort",a),e.aborted&&s.abort()}return{signal:s.signal,cleanup:()=>clearTimeout(r)}}safeClone(e){try{return e.clone()}catch{return e}}async parseResponse(e){if(!(e.headers.get("Content-Length")==="0"||e.status===204))return e.json()}async deploy(e,i={}){if(!e.length)throw ee.business("No files to deploy");for(let d of e)if(!d.md5)throw ee.file(`MD5 checksum missing for file: ${d.path}`,{filePath:d.path});Le(i.password);let s=it(i.idempotencyKey),r=M(i.labels);await Fe(e);let a=i.build||i.prerender||i.spa?{build:i.build,prerender:i.prerender,spa:i.spa}:void 0,{body:c,headers:o}=await this.createDeployBody(e,{labels:r,via:i.via??at,password:i.password,flags:a,captcha:i.captcha});return this.request(`${this.apiUrl}${this.deployEndpoint}`,{method:"POST",body:c,headers:s?{...o,[nt.HEADER]:s}:o,signal:i.signal||null},"Deploy",i.build||i.prerender?this.deployBuildTimeout:this.deployTimeout)}async listDeployments(e){return this.request(`${this.apiUrl}${h.DEPLOYMENTS}${le(e)}`,{method:"GET"},"List deployments")}async getDeployment(e){return this.request(`${this.apiUrl}${h.DEPLOYMENT(encodeURIComponent(e))}`,{method:"GET"},"Get deployment")}async updateDeploymentLabels(e,i){let s=M(i);return this.request(`${this.apiUrl}${h.DEPLOYMENT(encodeURIComponent(e))}`,{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({labels:s})},"Update deployment labels")}async deleteDeployment(e){return this.request(`${this.apiUrl}${h.DEPLOYMENT(encodeURIComponent(e))}`,{method:"DELETE"},"Delete deployment")}async setDomain(e,i,s){let r=M(s),a={};i&&(a.deployment=i),r!==void 0&&(a.labels=r);let{data:c,status:o}=await this.requestWithStatus(`${this.apiUrl}${h.DOMAIN(encodeURIComponent(e))}`,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify(a)},"Set domain");return{...c,isCreate:o===201}}async listDomains(e){return this.request(`${this.apiUrl}${h.DOMAINS}${le(e)}`,{method:"GET"},"List domains")}async getDomain(e){return this.request(`${this.apiUrl}${h.DOMAIN(encodeURIComponent(e))}`,{method:"GET"},"Get domain")}async deleteDomain(e){return this.request(`${this.apiUrl}${h.DOMAIN(encodeURIComponent(e))}`,{method:"DELETE"},"Delete domain")}async verifyDomain(e){return this.request(`${this.apiUrl}${h.DOMAIN_VERIFY(encodeURIComponent(e))}`,{method:"POST"},"Verify domain")}async getDomainDns(e){return this.request(`${this.apiUrl}${h.DOMAIN_DNS(encodeURIComponent(e))}`,{method:"GET"},"Get domain DNS")}async getDomainRecords(e){return this.request(`${this.apiUrl}${h.DOMAIN_RECORDS(encodeURIComponent(e))}`,{method:"GET"},"Get domain records")}async getDomainShare(e){return this.request(`${this.apiUrl}${h.DOMAIN_SHARE(encodeURIComponent(e))}`,{method:"GET"},"Get domain share")}async validateDomain(e){return this.request(`${this.apiUrl}${h.DOMAINS_VALIDATE}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({domain:e})},"Validate domain")}async createToken(e,i){let s=M(i),r={};return e!==void 0&&(r.ttl=e),s!==void 0&&(r.labels=s),this.request(`${this.apiUrl}${h.TOKENS}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(r)},"Create token")}async listTokens(e){return this.request(`${this.apiUrl}${h.TOKENS}${le(e)}`,{method:"GET"},"List tokens")}async deleteToken(e){return this.request(`${this.apiUrl}${h.TOKEN(encodeURIComponent(e))}`,{method:"DELETE"},"Delete token")}async getToken(e){return this.request(`${this.apiUrl}${h.TOKEN(encodeURIComponent(e))}`,{method:"GET"},"Get token")}async getAccount(){return this.request(`${this.apiUrl}${h.ACCOUNT}`,{method:"GET"},"Get account")}async getLimits(){return this.request(`${this.apiUrl}${h.LIMITS}`,{method:"GET"},"Get limits")}async ping(){return this.request(`${this.apiUrl}${h.PING}`,{method:"GET"},"Ping")}async checkSPA(e,i={}){let s=e.find(o=>o.path===ae.INDEX_FILE||o.path===`/${ae.INDEX_FILE}`);if(!s||s.size>ae.MAX_INDEX_BYTES)return!1;let r;if(typeof Buffer<"u"&&Buffer.isBuffer(s.content))r=s.content.toString("utf-8");else if(typeof Blob<"u"&&s.content instanceof Blob)r=await s.content.text();else if(typeof File<"u"&&s.content instanceof File)r=await s.content.text();else return!1;let a={files:e.map(o=>o.path),index:r};return(await this.request(`${this.apiUrl}${h.SPA_CHECK}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(a)},"SPA check")).isSPA}};import{ShipError as mt}from"@shipstatic/types";te();import{DEPLOYMENT_CONFIG_FILENAME as Ne,SPA_DEFAULT_CONFIG as ut}from"@shipstatic/types";async function dt(){let n=JSON.stringify(ut,null,2),t;typeof Buffer<"u"?t=Buffer.from(n,"utf-8"):t=new Blob([n],{type:"application/json"});let{md5:e}=await L(t);return{path:Ne,content:t,size:n.length,md5:e}}async function ke(n,t,e){if(e.spaDetect===!1||e.spa||e.build||e.prerender||n.some(i=>i.path===Ne))return n;try{if(await t.checkSPA(n,e)){let s=await dt();return[...n,s]}}catch{}return n}function z(n){let{getApi:t,ensureInit:e,processInput:i}=n;return{upload:async(s,r={})=>{if(await e(),!i)throw mt.config("processInput function is not provided.");let a=t(),c=await i(s,r);return c=await ke(c,a,r),a.deploy(c,r)},list:async s=>(await e(),t().listDeployments(s)),get:async s=>(await e(),t().getDeployment(s)),set:async(s,r)=>(await e(),t().updateDeploymentLabels(s,r.labels)),delete:async s=>(await e(),t().deleteDeployment(s))}}function V(n){let{getApi:t,ensureInit:e}=n;return{set:async(i,s={})=>(await e(),t().setDomain(i,s.deployment,s.labels)),list:async i=>(await e(),t().listDomains(i)),get:async i=>(await e(),t().getDomain(i)),delete:async i=>(await e(),t().deleteDomain(i)),verify:async i=>(await e(),t().verifyDomain(i)),validate:async i=>(await e(),t().validateDomain(i)),dns:async i=>(await e(),t().getDomainDns(i)),records:async i=>(await e(),t().getDomainRecords(i)),share:async i=>(await e(),t().getDomainShare(i))}}function H(n){let{getApi:t,ensureInit:e}=n;return{get:async()=>(await e(),t().getAccount())}}function q(n){let{getApi:t,ensureInit:e}=n;return{create:async(i={})=>(await e(),t().createToken(i.ttl,i.labels)),list:async i=>(await e(),t().listTokens(i)),get:async i=>(await e(),t().getToken(i)),delete:async i=>(await e(),t().deleteToken(i))}}var k=class{constructor(t={}){this.initPromise=null;this.platformLimits=null;this.credential=null;if(t={...t,apiUrl:t.apiUrl||void 0,token:t.token||void 0,caller:t.caller||void 0},this.clientOptions=t,t.caller!==void 0&&ft(t.caller),t.token&&t.session)throw N.config("Provide either `token` or `session`, not both.");typeof t.token=="string"?(Ue(t.token),this.credential=t.token):t.token&&(this.credential=t.token),this.http=new F({...t,getAuthHeaders:()=>this.getAuthHeaders(),createDeployBody:this.getDeployBodyCreator()});let e={getApi:()=>this.http,ensureInit:()=>this.ensureInitialized()};this.deployments=z({...e,processInput:(i,s)=>this.processInput(i,s)}),this.domains=V(e),this.account=H(e),this.tokens=q(e)}async ensureInitialized(){return this.initPromise||(this.initPromise=this.fetchPlatformLimits()),this.initPromise}async fetchPlatformLimits(){try{this.platformLimits=await this.http.getLimits()}catch(t){throw this.initPromise=null,t}}async ping(){return await this.ensureInitialized(),this.http.ping()}async deploy(t,e){return this.deployments.upload(t,e)}async whoami(){return this.account.get()}async getLimits(){return this.platformLimits?this.platformLimits:(await this.ensureInitialized(),this.platformLimits)}on(t,e){this.http.on(t,e)}off(t,e){this.http.off(t,e)}setHeaders(t){this.http.setGlobalHeaders(t)}clearHeaders(){this.http.setGlobalHeaders({})}setToken(t){if(this.clientOptions.session)throw N.config("Provide either `token` or `session`, not both.");if(typeof t=="string"){if(!t)throw N.business("Invalid token provided. Token must be a non-empty string.");Ue(t),this.credential=t;return}if(typeof t!="function")throw N.business("Invalid token provided. Token must be a non-empty string or a provider function.");this.credential=t}async getAuthHeaders(){if(this.credential===null)return{};let t=typeof this.credential=="function"?await this.credential():this.credential;if(!t)throw N.authentication("Token provider returned no token.");if(typeof t!="string")throw N.authentication("Token provider returned a non-string value.");return{Authorization:`Bearer ${t}`}}};G();import{SHIP_ENV as ne,ShipError as _e}from"@shipstatic/types";import{z as Me}from"zod";import{z as Be}from"zod";var $e={apiUrl:Be.string().url().optional(),token:Be.string().min(1).optional()};G();var yt=Me.object($e).strict(),gt={apiUrl:ne.API_URL,token:ne.TOKEN};function ze(){if(A()!=="node")return{};let n={apiUrl:process.env[ne.API_URL]||void 0,token:process.env[ne.TOKEN]||void 0};try{return yt.parse(n)}catch(t){if(t instanceof Me.ZodError){let e=t.issues[0],i=e.path[0],s=(i&&gt[i])??"SHIP environment configuration";throw _e.config(`Invalid ${s}: ${e.message}`)}throw _e.config("Invalid environment configuration")}}import{DEPLOY_FIELDS as v,ShipError as Ve}from"@shipstatic/types";async function He(n,t={}){let{FormData:e,File:i}=await import("formdata-node"),{FormDataEncoder:s}=await import("form-data-encoder"),{labels:r,via:a,password:c,flags:o,captcha:d}=t,p=new e,b=[];for(let l of n){if(!Buffer.isBuffer(l.content)&&!(typeof Blob<"u"&&l.content instanceof Blob))throw Ve.file(`Unsupported file.content type for Node.js: ${l.path}`,{filePath:l.path});if(!l.md5)throw Ve.file(`File missing md5 checksum: ${l.path}`,{filePath:l.path});let f=new i([l.content],l.path,{type:"application/octet-stream"});p.append(v.FILES,f),b.push(l.md5)}p.append(v.CHECKSUMS,JSON.stringify(b)),r&&r.length>0&&p.append(v.LABELS,JSON.stringify(r)),a&&p.append(v.VIA,a),c&&p.append(v.PASSWORD,c),o?.build&&p.append(v.BUILD,"true"),o?.prerender&&p.append(v.PRERENDER,"true"),o?.spa&&p.append(v.SPA,"true"),d&&p.append(v.CAPTCHA,d);let $=new s(p),C=[];for await(let l of $.encode())C.push(Buffer.from(l));let P=Buffer.concat(C);return{body:P.buffer.slice(P.byteOffset,P.byteOffset+P.byteLength),headers:{"Content-Type":$.contentType,"Content-Length":Buffer.byteLength(P).toString()}}}var m={};Q(m,{ApiHttp:()=>F,DEFAULT_API:()=>ue,ErrorType:()=>Re,FILE_VALIDATION_STATUS:()=>y,JUNK_DIRECTORIES:()=>re,Ship:()=>k,ShipError:()=>be,__setTestEnvironment:()=>ce,allValidFilesReady:()=>ye,calculateMD5:()=>L,createAccountResource:()=>H,createDeploymentResource:()=>z,createDomainResource:()=>V,createTokenResource:()=>q,filterJunk:()=>K,formatFileSize:()=>U,getENV:()=>A,getValidFiles:()=>se,optimizeDeployPaths:()=>j,pluralize:()=>Te,validateDeployFile:()=>W,validateDeployPath:()=>Y,validateFileName:()=>B,validateFiles:()=>he});import{ErrorType as Re,ShipError as be}from"@shipstatic/types";import{DEFAULT_API as ue}from"@shipstatic/types";fe();G();ge();De();te();Ee();function Te(n,t,e,i=!0){let s=n===1?t:e;return i?`${n} ${s}`:s}var g={};u(g,Sn);import*as Sn from"@shipstatic/types";u(m,g);u(D,m);Ae();var J=class extends k{constructor(t={}){if(A()!=="node")throw ve.business("Node.js Ship class can only be used in Node.js environment.");let e=ze();super({...t,apiUrl:t.apiUrl||e.apiUrl,token:t.token||(t.session?void 0:e.token)})}async deploy(t,e){return super.deploy(t,e)}async processInput(t,e){let i=typeof t=="string"?[t]:t;if(!Array.isArray(i)||!i.every(r=>typeof r=="string"))throw ve.business("Invalid input type for Node.js environment. Expected string or string[].");if(i.length===0)throw ve.business("No files to deploy.");let{processFilesForNode:s}=await Promise.resolve().then(()=>(Ae(),Ke));return s(i,e,this.platformLimits??void 0)}getDeployBodyCreator(){return He}},Pe=J;u(X,D);export{F as ApiHttp,ue as DEFAULT_API,Re as ErrorType,y as FILE_VALIDATION_STATUS,re as JUNK_DIRECTORIES,J as Ship,be as ShipError,ce as __setTestEnvironment,ye as allValidFilesReady,L as calculateMD5,H as createAccountResource,z as createDeploymentResource,V as createDomainResource,q as createTokenResource,Pe as default,K as filterJunk,U as formatFileSize,A as getENV,se as getValidFiles,j as optimizeDeployPaths,Te as pluralize,oe as processFilesForNode,W as validateDeployFile,Y as validateDeployPath,B as validateFileName,he as validateFiles};
 //# sourceMappingURL=index.js.map