@shipstatic/ship 2.0.0-beta.17 → 2.0.0-beta.19

package/dist/browser.d.ts

@@ -79,97 +79,6 @@ interface DeploymentCreateResponse extends Deployment {
     /** Claim URL for public deployments. Present when deployed without credentials. */
     readonly claim?: string;
 }
-/**
- * Every path the public API answers on, declared once.
- *
- * The URL surface was written out in four places — the API's mounts, the
- * SDK's client, the dashboard's client, and the post-deploy smoke — so a
- * rename meant finding all four. The first three now read this table.
- *
- * The smoke (`cloudflare/api/smoke.mjs`) deliberately still spells its own:
- * five of its nine paths are `/admin/*`, which this table excludes by
- * design, and splitting one list between a registry and literals reads worse
- * than keeping it uniform.
- *
- * **What this guarantees, exactly.** Collection paths are mounted from here,
- * so producer and consumer cannot diverge. Item paths are declared here and
- * consumed by clients, but the API spells them relative to their mount
- * (`/:deployment/config`), so the table does not *generate* them — it is
- * held to them by `api/tests/architecture/api-paths.test.ts`, which fails if
- * any entry names a path no route answers. Some entries have no client yet
- * (`DEPLOYMENT_CONFIG`, `DOMAIN_PROPAGATION` — endpoints the SDK
- * deliberately does not reach); the fence is what keeps those honest rather
- * than merely asserted.
- *
- * **The operator surface is deliberately absent.** `/admin/*` paths belong
- * to `web/my`, for the same reason its row types do: this package is
- * published, and the operator surface is not public (see `CLAUDE.md`, "Admin
- * types"). A path here is a promise to every npm consumer; `/admin` is a
- * promise to one dashboard.
- *
- * Item paths are functions rather than templates so the key is interpolated
- * in one place, encoded the same way by every caller.
- */
-declare const API_PATHS: {
-    readonly DEPLOYMENTS: "/deployments";
-    readonly DEPLOYMENT: (deployment: string) => string;
-    readonly DEPLOYMENT_CONFIG: (deployment: string) => string;
-    readonly DOMAINS: "/domains";
-    readonly DOMAIN: (domain: string) => string;
-    readonly DOMAIN_VERIFY: (domain: string) => string;
-    readonly DOMAIN_DNS: (domain: string) => string;
-    readonly DOMAIN_RECORDS: (domain: string) => string;
-    readonly DOMAIN_SHARE: (domain: string) => string;
-    readonly DOMAIN_PROPAGATION: (domain: string) => string;
-    readonly DOMAINS_VALIDATE: "/domains/validate";
-    readonly TOKENS: "/tokens";
-    readonly TOKEN: (token: string) => string;
-    readonly ACCOUNT: "/account";
-    readonly ACCOUNT_KEY: "/account/key";
-    readonly ACCOUNT_CLAIM: "/account/claim";
-    readonly ACTIVITIES: "/activities";
-    readonly LABELS: "/labels";
-    readonly LIMITS: "/limits";
-    readonly PING: "/ping";
-    readonly SETUP: "/setup";
-    readonly SPA_CHECK: "/spa-check";
-    readonly UPLOAD: "/upload";
-};
-/**
- * The deploy request's multipart field names — the other half of the wire
- * surface beside {@link API_PATHS}. `POST /deployments` (and the first-party
- * `/upload`) is multipart/form-data, and these are the names the API reads.
- *
- * Declared once because the body has three independent WRITERS — the SDK's
- * Node and browser body builders, and the n8n community node's hand-rolled
- * client (which cannot import this under n8n Cloud's zero-dependency rule,
- * and fences its restated copy instead) — and until this export every writer
- * restated the strings the API parses, with nothing comparing them.
- *
- * `FILES` carries one entry per file (the API reads it with `getAll`); every
- * other field is single. The `@internal` flags are serialized as the literal
- * string `'true'` and belong to first-party surfaces only.
- */
-declare const DEPLOY_FIELDS: {
-    /** One entry per file — read with `getAll`. */
-    readonly FILES: "files[]";
-    /** JSON array of MD5 hex digests, index-aligned with `FILES`. */
-    readonly CHECKSUMS: "checksums";
-    /** JSON array of label strings. */
-    readonly LABELS: "labels";
-    /** The deploying surface's {@link DeploymentVia} member. */
-    readonly VIA: "via";
-    /** Plaintext password — the API hashes it server-side. */
-    readonly PASSWORD: "password";
-    /** @internal Server-processing flag — first-party `/upload` only. */
-    readonly BUILD: "build";
-    /** @internal Server-processing flag — first-party `/upload` only. */
-    readonly PRERENDER: "prerender";
-    /** @internal Server-processing flag — first-party `/upload` only. */
-    readonly SPA: "spa";
-    /** @internal reCAPTCHA proof — `web/www`'s public uploader only. */
-    readonly CAPTCHA: "captcha";
-};
 /**
  * The half of a list response that is identical on every list.
  *
@@ -188,6 +97,28 @@ interface ListResponse {
     /** Opaque cursor from this page; `null` on the last page. */
     cursor: string | null;
 }
+/**
+ * Pagination options for every list endpoint. The response's `cursor` feeds
+ * the next request; a `null` cursor means the last page. Omitting both
+ * returns the server's default first page.
+ *
+ * A list answers `{ <collection>, cursor }` and nothing else — `cursor`
+ * carries the entire has-more signal, so no redundant boolean, and no
+ * `total`. **A count is an aggregate over a collection, not a property of a
+ * page:** including one makes every read pay for a full scan it did not ask
+ * for, which is precisely the cost keyset pagination exists to avoid.
+ *
+ * Counts therefore live on the summary resource that owns them —
+ * `GET /account` (`usage`) for a caller's own totals, `GET /admin/stats` for
+ * platform-wide ones. Ask for a count when you want a count; ask for a page
+ * when you want a page.
+ */
+interface ListOptions {
+    /** Maximum number of items to return in one page. */
+    limit?: number;
+    /** Opaque cursor from the previous page's response. */
+    cursor?: string;
+}
 /**
  * Response for listing deployments
  */
@@ -658,6 +589,97 @@ interface AccountOverrides {
     /** Override for maximum total deployment size in bytes */
     totalSize?: number;
 }
+/**
+ * Every path the public API answers on, declared once.
+ *
+ * The URL surface was written out in four places — the API's mounts, the
+ * SDK's client, the dashboard's client, and the post-deploy smoke — so a
+ * rename meant finding all four. The first three now read this table.
+ *
+ * The smoke (`cloudflare/api/smoke.mjs`) deliberately still spells its own:
+ * five of its nine paths are `/admin/*`, which this table excludes by
+ * design, and splitting one list between a registry and literals reads worse
+ * than keeping it uniform.
+ *
+ * **What this guarantees, exactly.** Collection paths are mounted from here,
+ * so producer and consumer cannot diverge. Item paths are declared here and
+ * consumed by clients, but the API spells them relative to their mount
+ * (`/:deployment/config`), so the table does not *generate* them — it is
+ * held to them by `api/tests/architecture/api-paths.test.ts`, which fails if
+ * any entry names a path no route answers. Some entries have no client yet
+ * (`DEPLOYMENT_CONFIG`, `DOMAIN_PROPAGATION` — endpoints the SDK
+ * deliberately does not reach); the fence is what keeps those honest rather
+ * than merely asserted.
+ *
+ * **The operator surface is deliberately absent.** `/admin/*` paths belong
+ * to `web/my`, for the same reason its row types do: this package is
+ * published, and the operator surface is not public (see `CLAUDE.md`, "Admin
+ * types"). A path here is a promise to every npm consumer; `/admin` is a
+ * promise to one dashboard.
+ *
+ * Item paths are functions rather than templates so the key is interpolated
+ * in one place, encoded the same way by every caller.
+ */
+declare const API_PATHS: {
+    readonly DEPLOYMENTS: "/deployments";
+    readonly DEPLOYMENT: (deployment: string) => string;
+    readonly DEPLOYMENT_CONFIG: (deployment: string) => string;
+    readonly DOMAINS: "/domains";
+    readonly DOMAIN: (domain: string) => string;
+    readonly DOMAIN_VERIFY: (domain: string) => string;
+    readonly DOMAIN_DNS: (domain: string) => string;
+    readonly DOMAIN_RECORDS: (domain: string) => string;
+    readonly DOMAIN_SHARE: (domain: string) => string;
+    readonly DOMAIN_PROPAGATION: (domain: string) => string;
+    readonly DOMAINS_VALIDATE: "/domains/validate";
+    readonly TOKENS: "/tokens";
+    readonly TOKEN: (token: string) => string;
+    readonly ACCOUNT: "/account";
+    readonly ACCOUNT_KEY: "/account/key";
+    readonly ACCOUNT_CLAIM: "/account/claim";
+    readonly ACTIVITIES: "/activities";
+    readonly LABELS: "/labels";
+    readonly LIMITS: "/limits";
+    readonly PING: "/ping";
+    readonly SETUP: "/setup";
+    readonly SPA_CHECK: "/spa-check";
+    readonly UPLOAD: "/upload";
+};
+/**
+ * The deploy request's multipart field names — the other half of the wire
+ * surface beside {@link API_PATHS}. `POST /deployments` (and the first-party
+ * `/upload`) is multipart/form-data, and these are the names the API reads.
+ *
+ * Declared once because the body has three independent WRITERS — the SDK's
+ * Node and browser body builders, and the n8n community node's hand-rolled
+ * client (which cannot import this under n8n Cloud's zero-dependency rule,
+ * and fences its restated copy instead) — and until this export every writer
+ * restated the strings the API parses, with nothing comparing them.
+ *
+ * `FILES` carries one entry per file (the API reads it with `getAll`); every
+ * other field is single. The `@internal` flags are serialized as the literal
+ * string `'true'` and belong to first-party surfaces only.
+ */
+declare const DEPLOY_FIELDS: {
+    /** One entry per file — read with `getAll`. */
+    readonly FILES: "files[]";
+    /** JSON array of MD5 hex digests, index-aligned with `FILES`. */
+    readonly CHECKSUMS: "checksums";
+    /** JSON array of label strings. */
+    readonly LABELS: "labels";
+    /** The deploying surface's {@link DeploymentVia} member. */
+    readonly VIA: "via";
+    /** Plaintext password — the API hashes it server-side. */
+    readonly PASSWORD: "password";
+    /** @internal Server-processing flag — first-party `/upload` only. */
+    readonly BUILD: "build";
+    /** @internal Server-processing flag — first-party `/upload` only. */
+    readonly PRERENDER: "prerender";
+    /** @internal Server-processing flag — first-party `/upload` only. */
+    readonly SPA: "spa";
+    /** @internal reCAPTCHA proof — `web/www`'s public uploader only. */
+    readonly CAPTCHA: "captcha";
+};
 /**
  * All possible error types in the ShipStatic platform.
  *
@@ -1309,28 +1331,6 @@ interface DeploymentUploadOptions {
      */
     idempotencyKey?: string;
 }
-/**
- * Pagination options for every list endpoint. The response's `cursor` feeds
- * the next request; a `null` cursor means the last page. Omitting both
- * returns the server's default first page.
- *
- * A list answers `{ <collection>, cursor }` and nothing else — `cursor`
- * carries the entire has-more signal, so no redundant boolean, and no
- * `total`. **A count is an aggregate over a collection, not a property of a
- * page:** including one makes every read pay for a full scan it did not ask
- * for, which is precisely the cost keyset pagination exists to avoid.
- *
- * Counts therefore live on the summary resource that owns them —
- * `GET /account` (`usage`) for a caller's own totals, `GET /admin/stats` for
- * platform-wide ones. Ask for a count when you want a count; ask for a page
- * when you want a page.
- */
-interface ListOptions {
-    /** Maximum number of items to return in one page. */
-    limit?: number;
-    /** Opaque cursor from the previous page's response. */
-    cursor?: string;
-}
 /**
  * What a caller may change on an existing deployment.
  *

package/dist/browser.js

@@ -1,2 +1,2 @@
-var Je=Object.create;var B=Object.defineProperty;var Qe=Object.getOwnPropertyDescriptor;var Ze=Object.getOwnPropertyNames;var et=Object.getPrototypeOf,tt=Object.prototype.hasOwnProperty;var nt=(t,r,e)=>r in t?B(t,r,{enumerable:!0,configurable:!0,writable:!0,value:e}):t[r]=e;var P=(t,r)=>()=>(t&&(r=t(t=0)),r);var ye=(t,r)=>()=>(r||t((r={exports:{}}).exports,r),r.exports),rt=(t,r)=>{for(var e in r)B(t,e,{get:r[e],enumerable:!0})},it=(t,r,e,a)=>{if(r&&typeof r=="object"||typeof r=="function")for(let p of Ze(r))!tt.call(t,p)&&p!==e&&B(t,p,{get:()=>r[p],enumerable:!(a=Qe(r,p))||a.enumerable});return t};var H=(t,r,e)=>(e=t!=null?Je(et(t)):{},it(r||!t||!t.__esModule?B(e,"default",{value:t,enumerable:!0}):e,t));var G=(t,r,e)=>nt(t,typeof r!="symbol"?r+"":r,e);function Ft(t){if(!t||typeof t!="string")return;let r=t.trim().toLowerCase();return Object.values(st).includes(r)?r:void 0}function Ee(t){if(t==null)return;if(typeof t!="string")throw f.validation("Idempotency key must be a string.");let r=t.trim();if(!r)throw f.validation("Idempotency key must not be empty.");if(r.length>z.MAX_LENGTH)throw f.validation(`Idempotency key must be at most ${z.MAX_LENGTH} characters.`);return r}function pt(t){return typeof t.code=="string"?!0:t instanceof TypeError&&t.message.includes("fetch")}function Ae(t){return t!==null&&typeof t=="object"&&"name"in t&&t.name==="ShipError"&&"status"in t}function V(t){let r=t.lastIndexOf(".");if(r===-1||r===t.length-1)return!1;let e=t.slice(r+1).toLowerCase();return ut.has(e)}function De(t){return dt.test(t)}function K(t){return t.replace(/\\/g,"/").split("/").filter(Boolean).some(e=>ft.has(e))}function mt(t){return t.startsWith(Te.PREFIX)?F.API_KEY:t.startsWith(Se.PREFIX)?F.DEPLOY_TOKEN:F.OPAQUE}function Ie(t){let r=t.charCodeAt(0)===65279?t.slice(1):t,e;try{e=JSON.parse(r)}catch(a){throw f.config(`invalid JSON format in config: ${a.message}`,{filePath:x})}if(e===null||typeof e!="object"||Array.isArray(e))throw f.config(`${x} must contain a JSON object`,{filePath:x})}function be(t,r,e){if(!t.startsWith(r.PREFIX))throw f.validation(`${e} must start with "${r.PREFIX}"`);if(t.length!==r.TOTAL_LENGTH)throw f.validation(`${e} must be ${r.TOTAL_LENGTH} characters total (${r.PREFIX} + ${r.HEX_LENGTH} hex chars)`);let a=t.slice(r.PREFIX.length);if(!new RegExp(`^[a-f0-9]{${r.HEX_LENGTH}}$`,"i").test(a))throw f.validation(`${e} must contain ${r.HEX_LENGTH} hexadecimal characters after "${r.PREFIX}" prefix`)}function ht(t){be(t,Te,"API key")}function yt(t){be(t,Se,"Deploy token")}function ee(t){switch(mt(t)){case F.API_KEY:ht(t);return;case F.DEPLOY_TOKEN:yt(t);return;case F.OPAQUE:if(!t)throw f.validation("Token must be a non-empty string")}}function we(t){if(!t||t.length>$.MAX_LENGTH||!$.PATTERN.test(t))throw f.validation(`Caller must be 1-${$.MAX_LENGTH} characters: letters, digits, dots, underscores, or hyphens`)}function Bt(t){try{let r=new URL(t);if(!["http:","https:"].includes(r.protocol))throw f.validation("API URL must use http:// or https:// protocol");if(r.pathname!=="/"&&r.pathname!=="")throw f.validation("API URL must not contain a path");if(r.search||r.hash)throw f.validation("API URL must not contain query parameters or fragments")}catch(r){throw Ae(r)?r:f.validation("API URL must be a valid URL")}}function Ht(t){return/^[a-z]+-[a-z]+-[a-z0-9]{7}(\.[a-z0-9.-]+)?$/i.test(t)}function Pe(t,r){return t.endsWith(`.${r}`)}function Vt(t,r){return!Pe(t,r)}function Kt(t,r){return Pe(t,r)?t.slice(0,-(r.length+1)):null}function jt(t){return`https://${t}`}function Yt(t){return`https://${t}`}function qt(t){return!t||t.length===0?null:JSON.stringify(t)}function Xt(t){if(!t)return[];try{let r=JSON.parse(t);return Array.isArray(r)?r:[]}catch{return[]}}function ne(t){if(t==null)return;if(typeof t!="string")throw f.validation("Password must be a string");let r=t.trim();if(r.length<k.MIN_LENGTH||r.length>k.MAX_LENGTH)throw f.validation(`Password must be between ${k.MIN_LENGTH} and ${k.MAX_LENGTH} characters`);return r}var vt,st,T,L,Ot,z,Ct,A,ot,Z,at,lt,f,ut,ct,$t,dt,ft,Ut,ge,Te,Se,$,F,Mt,x,Re,j,te,Gt,kt,zt,S,v,Le,k,R=P(()=>{"use strict";vt={PENDING:"pending",SUCCESS:"success",FAILED:"failed",DELETING:"deleting"},st={WEB:"web",SDK:"sdk",CLI:"cli",MCP:"mcp",GIT:"git",N8N:"n8n",GPT:"gpt",VSC:"vsc"},T={DEPLOYMENTS:"/deployments",DEPLOYMENT:t=>`/deployments/${t}`,DEPLOYMENT_CONFIG:t=>`/deployments/${t}/config`,DOMAINS:"/domains",DOMAIN:t=>`/domains/${t}`,DOMAIN_VERIFY:t=>`/domains/${t}/verify`,DOMAIN_DNS:t=>`/domains/${t}/dns`,DOMAIN_RECORDS:t=>`/domains/${t}/records`,DOMAIN_SHARE:t=>`/domains/${t}/share`,DOMAIN_PROPAGATION:t=>`/domains/${t}/propagation`,DOMAINS_VALIDATE:"/domains/validate",TOKENS:"/tokens",TOKEN:t=>`/tokens/${t}`,ACCOUNT:"/account",ACCOUNT_KEY:"/account/key",ACCOUNT_CLAIM:"/account/claim",ACTIVITIES:"/activities",LABELS:"/labels",LIMITS:"/limits",PING:"/ping",SETUP:"/setup",SPA_CHECK:"/spa-check",UPLOAD:"/upload"},L={FILES:"files[]",CHECKSUMS:"checksums",LABELS:"labels",VIA:"via",PASSWORD:"password",BUILD:"build",PRERENDER:"prerender",SPA:"spa",CAPTCHA:"captcha"},Ot={PENDING:"pending",PARTIAL:"partial",SUCCESS:"success",PAUSED:"paused"},z={HEADER:"Idempotency-Key",MAX_LENGTH:256,WINDOW_SECONDS:1440*60};Ct={FREE:"free",STANDARD:"standard",SPONSORED:"sponsored",ENTERPRISE:"enterprise",SUSPENDED:"suspended",TERMINATING:"terminating",TERMINATED:"terminated"},A={Validation:"validation_failed",NotFound:"not_found",Forbidden:"forbidden",RateLimit:"rate_limit_exceeded",Authentication:"authentication_failed",Business:"business_logic_error",Api:"internal_server_error",Network:"network_error",Cancelled:"operation_cancelled",File:"file_error",Config:"config_error"},ot=new Set([A.Network,A.Cancelled,A.File,A.Config]),Z={client:new Set([A.Business,A.Cancelled,A.Config,A.File,A.Forbidden,A.NotFound,A.RateLimit,A.Validation]),network:new Set([A.Network]),auth:new Set([A.Authentication])},at=new Set(Object.values(A).filter(t=>!ot.has(t))),lt=200;f=class t extends Error{constructor(e,a,p,c){super(a);G(this,"type");G(this,"status");G(this,"details");this.type=e,this.status=p,this.details=c,this.name="ShipError"}toResponse(){let e=this.details,a=this.type===A.Authentication&&e?.internal?void 0:this.details;return{error:this.type,message:this.message,status:this.status,details:a}}static async fromHttpResponse(e,a){let p,c,h;try{if(e.headers.get("content-type")?.includes("application/json")){let m=await e.json();if(m&&typeof m=="object"){let E=m;typeof E.message=="string"?p=E.message:typeof E.error=="string"&&(p=E.error),c=E.details,typeof E.error=="string"&&at.has(E.error)&&(h=E.error)}}else{let m=(await e.text()).trim();m&&!m.startsWith("<")&&m.length<=lt&&(p=m)}}catch{}let y=e.headers.get("retry-after");if(y!==null){let g=y.trim(),m=/^\d+$/.test(g)?Number(g):Math.ceil((Date.parse(g)-Date.now())/1e3);if(Number.isFinite(m)&&m>=0){let E=c&&typeof c=="object"?c:{};E.retryAfter===void 0&&(c={...E,retryAfter:m})}}p=p||`${a||"Request"} failed with status ${e.status}`;let d=h??(e.status===401?A.Authentication:e.status===403?A.Forbidden:e.status===429?A.RateLimit:A.Api);return new t(d,p,e.status,c)}static fromFetchError(e,a){if(Ae(e))return e;let p=a||"Request";return e instanceof Error?e.name==="AbortError"?t.cancelled(`${p} was cancelled`):pt(e)?t.network(`${p} failed: ${e.message}`,{cause:e}):new t(A.Api,`${p} failed: ${e.message}`):new t(A.Api,`${p} failed: Unknown error`)}static validation(e,a){return new t(A.Validation,e,400,a)}static notFound(e,a){let p=a?`${e} ${a} not found`:`${e} not found`;return new t(A.NotFound,p,404)}static forbidden(e,a){return new t(A.Forbidden,e,403,a)}static rateLimit(e="Too many requests",a){return new t(A.RateLimit,e,429,a)}static authentication(e="Authentication required",a){return new t(A.Authentication,e,401,a)}static business(e,a=400,p){return new t(A.Business,e,a,p)}static network(e,a){return new t(A.Network,e,void 0,a)}static cancelled(e,a){return new t(A.Cancelled,e,void 0,a)}static file(e,a){return new t(A.File,e,void 0,a)}static config(e,a){return new t(A.Config,e,void 0,a)}static api(e,a=500,p){return new t(A.Api,e,a,p)}isClientError(){return Z.client.has(this.type)?!0:this.status!==void 0&&this.status>=400&&this.status<500}isNetworkError(){return Z.network.has(this.type)}isAuthError(){return Z.auth.has(this.type)}isType(e){return this.type===e}};ut=new Set(["exe","msi","dll","scr","bat","cmd","com","pif","app","deb","rpm","pkg","mpkg","dmg","iso","img","cab","cpl","chm","ps1","vbs","vbe","ws","wsf","wsc","wsh","reg","jar","jnlp","apk","crx","lnk","inf","hta"]);ct=["html","htm","xhtml","xml","txt","md","markdown","pdf","csv","json","jsonc","webmanifest","map","toml","yaml","yml","rss","atom","css","scss","sass","less","js","mjs","cjs","jsx","ts","tsx","wasm","vue","svelte","png","jpg","jpeg","gif","webp","avif","svg","ico","bmp","tif","tiff","heic","heif","woff","woff2","ttf","otf","eot","mp3","wav","ogg","oga","opus","m4a","aac","flac","weba","mp4","webm","ogv","mov","m4v","avi","glb","gltf","usdz","vtt","srt","zip"],$t=ct.map(t=>`.${t}`).join(","),dt=/[\x00-\x1f\x7f#?%\\<>"]/;ft=new Set(["node_modules","package.json"]);Ut="/auth",ge={SESSION:"session",API_KEY:"apiKey",TOKEN:"token",AGENT:"agent",OAUTH:"oauth",WEBHOOK:"webhook",SYSTEM:"system"},Te={PREFIX:"ship-",HEX_LENGTH:64,TOTAL_LENGTH:69,HINT_LENGTH:4},Se={PREFIX:"deploy-",HEX_LENGTH:64,TOTAL_LENGTH:71},$={HEADER:"X-Caller",MAX_LENGTH:128,PATTERN:/^[a-zA-Z0-9._-]+$/},F={API_KEY:ge.API_KEY,DEPLOY_TOKEN:ge.TOKEN,OPAQUE:"opaque"};Mt={ACCOUNT_READ:"account:read",DEPLOYMENTS_READ:"deployments:read",DEPLOYMENTS_WRITE:"deployments:write",DOMAINS_READ:"domains:read",DOMAINS_WRITE:"domains:write"},x="ship.json",Re={rewrites:[{source:"/(.*)",destination:"/index.html"}]},j={INDEX_FILE:"index.html",MAX_INDEX_BYTES:100*1024};te="https://api.shipstatic.com",Gt={TOKEN:"SHIP_TOKEN",API_URL:"SHIP_API_URL"},kt="https://my.shipstatic.com/api-key",zt=4320*60,S={PENDING:"pending",PROCESSING_ERROR:"processing_error",EXCLUDED:"excluded",VALIDATION_FAILED:"validation_failed",READY:"ready"};v={MIN_LENGTH:3,MAX_LENGTH:25,MAX_COUNT:10,SEPARATORS:"._-"},Le=/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;k={MIN_LENGTH:6,MAX_LENGTH:128}});var Oe=ye((Ne,ve)=>{"use strict";(function(t){if(typeof Ne=="object")ve.exports=t();else if(typeof define=="function"&&define.amd)define(t);else{var r;try{r=window}catch{r=self}r.SparkMD5=t()}})(function(t){"use strict";var r=function(u,l){return u+l&4294967295},e=["0","1","2","3","4","5","6","7","8","9","a","b","c","d","e","f"];function a(u,l,i,n,o,s){return l=r(r(l,u),r(n,s)),r(l<<o|l>>>32-o,i)}function p(u,l){var i=u[0],n=u[1],o=u[2],s=u[3];i+=(n&o|~n&s)+l[0]-680876936|0,i=(i<<7|i>>>25)+n|0,s+=(i&n|~i&o)+l[1]-389564586|0,s=(s<<12|s>>>20)+i|0,o+=(s&i|~s&n)+l[2]+606105819|0,o=(o<<17|o>>>15)+s|0,n+=(o&s|~o&i)+l[3]-1044525330|0,n=(n<<22|n>>>10)+o|0,i+=(n&o|~n&s)+l[4]-176418897|0,i=(i<<7|i>>>25)+n|0,s+=(i&n|~i&o)+l[5]+1200080426|0,s=(s<<12|s>>>20)+i|0,o+=(s&i|~s&n)+l[6]-1473231341|0,o=(o<<17|o>>>15)+s|0,n+=(o&s|~o&i)+l[7]-45705983|0,n=(n<<22|n>>>10)+o|0,i+=(n&o|~n&s)+l[8]+1770035416|0,i=(i<<7|i>>>25)+n|0,s+=(i&n|~i&o)+l[9]-1958414417|0,s=(s<<12|s>>>20)+i|0,o+=(s&i|~s&n)+l[10]-42063|0,o=(o<<17|o>>>15)+s|0,n+=(o&s|~o&i)+l[11]-1990404162|0,n=(n<<22|n>>>10)+o|0,i+=(n&o|~n&s)+l[12]+1804603682|0,i=(i<<7|i>>>25)+n|0,s+=(i&n|~i&o)+l[13]-40341101|0,s=(s<<12|s>>>20)+i|0,o+=(s&i|~s&n)+l[14]-1502002290|0,o=(o<<17|o>>>15)+s|0,n+=(o&s|~o&i)+l[15]+1236535329|0,n=(n<<22|n>>>10)+o|0,i+=(n&s|o&~s)+l[1]-165796510|0,i=(i<<5|i>>>27)+n|0,s+=(i&o|n&~o)+l[6]-1069501632|0,s=(s<<9|s>>>23)+i|0,o+=(s&n|i&~n)+l[11]+643717713|0,o=(o<<14|o>>>18)+s|0,n+=(o&i|s&~i)+l[0]-373897302|0,n=(n<<20|n>>>12)+o|0,i+=(n&s|o&~s)+l[5]-701558691|0,i=(i<<5|i>>>27)+n|0,s+=(i&o|n&~o)+l[10]+38016083|0,s=(s<<9|s>>>23)+i|0,o+=(s&n|i&~n)+l[15]-660478335|0,o=(o<<14|o>>>18)+s|0,n+=(o&i|s&~i)+l[4]-405537848|0,n=(n<<20|n>>>12)+o|0,i+=(n&s|o&~s)+l[9]+568446438|0,i=(i<<5|i>>>27)+n|0,s+=(i&o|n&~o)+l[14]-1019803690|0,s=(s<<9|s>>>23)+i|0,o+=(s&n|i&~n)+l[3]-187363961|0,o=(o<<14|o>>>18)+s|0,n+=(o&i|s&~i)+l[8]+1163531501|0,n=(n<<20|n>>>12)+o|0,i+=(n&s|o&~s)+l[13]-1444681467|0,i=(i<<5|i>>>27)+n|0,s+=(i&o|n&~o)+l[2]-51403784|0,s=(s<<9|s>>>23)+i|0,o+=(s&n|i&~n)+l[7]+1735328473|0,o=(o<<14|o>>>18)+s|0,n+=(o&i|s&~i)+l[12]-1926607734|0,n=(n<<20|n>>>12)+o|0,i+=(n^o^s)+l[5]-378558|0,i=(i<<4|i>>>28)+n|0,s+=(i^n^o)+l[8]-2022574463|0,s=(s<<11|s>>>21)+i|0,o+=(s^i^n)+l[11]+1839030562|0,o=(o<<16|o>>>16)+s|0,n+=(o^s^i)+l[14]-35309556|0,n=(n<<23|n>>>9)+o|0,i+=(n^o^s)+l[1]-1530992060|0,i=(i<<4|i>>>28)+n|0,s+=(i^n^o)+l[4]+1272893353|0,s=(s<<11|s>>>21)+i|0,o+=(s^i^n)+l[7]-155497632|0,o=(o<<16|o>>>16)+s|0,n+=(o^s^i)+l[10]-1094730640|0,n=(n<<23|n>>>9)+o|0,i+=(n^o^s)+l[13]+681279174|0,i=(i<<4|i>>>28)+n|0,s+=(i^n^o)+l[0]-358537222|0,s=(s<<11|s>>>21)+i|0,o+=(s^i^n)+l[3]-722521979|0,o=(o<<16|o>>>16)+s|0,n+=(o^s^i)+l[6]+76029189|0,n=(n<<23|n>>>9)+o|0,i+=(n^o^s)+l[9]-640364487|0,i=(i<<4|i>>>28)+n|0,s+=(i^n^o)+l[12]-421815835|0,s=(s<<11|s>>>21)+i|0,o+=(s^i^n)+l[15]+530742520|0,o=(o<<16|o>>>16)+s|0,n+=(o^s^i)+l[2]-995338651|0,n=(n<<23|n>>>9)+o|0,i+=(o^(n|~s))+l[0]-198630844|0,i=(i<<6|i>>>26)+n|0,s+=(n^(i|~o))+l[7]+1126891415|0,s=(s<<10|s>>>22)+i|0,o+=(i^(s|~n))+l[14]-1416354905|0,o=(o<<15|o>>>17)+s|0,n+=(s^(o|~i))+l[5]-57434055|0,n=(n<<21|n>>>11)+o|0,i+=(o^(n|~s))+l[12]+1700485571|0,i=(i<<6|i>>>26)+n|0,s+=(n^(i|~o))+l[3]-1894986606|0,s=(s<<10|s>>>22)+i|0,o+=(i^(s|~n))+l[10]-1051523|0,o=(o<<15|o>>>17)+s|0,n+=(s^(o|~i))+l[1]-2054922799|0,n=(n<<21|n>>>11)+o|0,i+=(o^(n|~s))+l[8]+1873313359|0,i=(i<<6|i>>>26)+n|0,s+=(n^(i|~o))+l[15]-30611744|0,s=(s<<10|s>>>22)+i|0,o+=(i^(s|~n))+l[6]-1560198380|0,o=(o<<15|o>>>17)+s|0,n+=(s^(o|~i))+l[13]+1309151649|0,n=(n<<21|n>>>11)+o|0,i+=(o^(n|~s))+l[4]-145523070|0,i=(i<<6|i>>>26)+n|0,s+=(n^(i|~o))+l[11]-1120210379|0,s=(s<<10|s>>>22)+i|0,o+=(i^(s|~n))+l[2]+718787259|0,o=(o<<15|o>>>17)+s|0,n+=(s^(o|~i))+l[9]-343485551|0,n=(n<<21|n>>>11)+o|0,u[0]=i+u[0]|0,u[1]=n+u[1]|0,u[2]=o+u[2]|0,u[3]=s+u[3]|0}function c(u){var l=[],i;for(i=0;i<64;i+=4)l[i>>2]=u.charCodeAt(i)+(u.charCodeAt(i+1)<<8)+(u.charCodeAt(i+2)<<16)+(u.charCodeAt(i+3)<<24);return l}function h(u){var l=[],i;for(i=0;i<64;i+=4)l[i>>2]=u[i]+(u[i+1]<<8)+(u[i+2]<<16)+(u[i+3]<<24);return l}function y(u){var l=u.length,i=[1732584193,-271733879,-1732584194,271733878],n,o,s,b,_,N;for(n=64;n<=l;n+=64)p(i,c(u.substring(n-64,n)));for(u=u.substring(n-64),o=u.length,s=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],n=0;n<o;n+=1)s[n>>2]|=u.charCodeAt(n)<<(n%4<<3);if(s[n>>2]|=128<<(n%4<<3),n>55)for(p(i,s),n=0;n<16;n+=1)s[n]=0;return b=l*8,b=b.toString(16).match(/(.*?)(.{0,8})$/),_=parseInt(b[2],16),N=parseInt(b[1],16)||0,s[14]=_,s[15]=N,p(i,s),i}function d(u){var l=u.length,i=[1732584193,-271733879,-1732584194,271733878],n,o,s,b,_,N;for(n=64;n<=l;n+=64)p(i,h(u.subarray(n-64,n)));for(u=n-64<l?u.subarray(n-64):new Uint8Array(0),o=u.length,s=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],n=0;n<o;n+=1)s[n>>2]|=u[n]<<(n%4<<3);if(s[n>>2]|=128<<(n%4<<3),n>55)for(p(i,s),n=0;n<16;n+=1)s[n]=0;return b=l*8,b=b.toString(16).match(/(.*?)(.{0,8})$/),_=parseInt(b[2],16),N=parseInt(b[1],16)||0,s[14]=_,s[15]=N,p(i,s),i}function g(u){var l="",i;for(i=0;i<4;i+=1)l+=e[u>>i*8+4&15]+e[u>>i*8&15];return l}function m(u){var l;for(l=0;l<u.length;l+=1)u[l]=g(u[l]);return u.join("")}m(y("hello"))!=="5d41402abc4b2a76b9719d911017c592"&&(r=function(u,l){var i=(u&65535)+(l&65535),n=(u>>16)+(l>>16)+(i>>16);return n<<16|i&65535}),typeof ArrayBuffer<"u"&&!ArrayBuffer.prototype.slice&&(function(){function u(l,i){return l=l|0||0,l<0?Math.max(l+i,0):Math.min(l,i)}ArrayBuffer.prototype.slice=function(l,i){var n=this.byteLength,o=u(l,n),s=n,b,_,N,he;return i!==t&&(s=u(i,n)),o>s?new ArrayBuffer(0):(b=s-o,_=new ArrayBuffer(b),N=new Uint8Array(_),he=new Uint8Array(this,o,b),N.set(he),_)}})();function E(u){return/[\u0080-\uFFFF]/.test(u)&&(u=unescape(encodeURIComponent(u))),u}function I(u,l){var i=u.length,n=new ArrayBuffer(i),o=new Uint8Array(n),s;for(s=0;s<i;s+=1)o[s]=u.charCodeAt(s);return l?o:n}function w(u){return String.fromCharCode.apply(null,new Uint8Array(u))}function C(u,l,i){var n=new Uint8Array(u.byteLength+l.byteLength);return n.set(new Uint8Array(u)),n.set(new Uint8Array(l),u.byteLength),i?n:n.buffer}function O(u){var l=[],i=u.length,n;for(n=0;n<i-1;n+=2)l.push(parseInt(u.substr(n,2),16));return String.fromCharCode.apply(String,l)}function D(){this.reset()}return D.prototype.append=function(u){return this.appendBinary(E(u)),this},D.prototype.appendBinary=function(u){this._buff+=u,this._length+=u.length;var l=this._buff.length,i;for(i=64;i<=l;i+=64)p(this._hash,c(this._buff.substring(i-64,i)));return this._buff=this._buff.substring(i-64),this},D.prototype.end=function(u){var l=this._buff,i=l.length,n,o=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],s;for(n=0;n<i;n+=1)o[n>>2]|=l.charCodeAt(n)<<(n%4<<3);return this._finish(o,i),s=m(this._hash),u&&(s=O(s)),this.reset(),s},D.prototype.reset=function(){return this._buff="",this._length=0,this._hash=[1732584193,-271733879,-1732584194,271733878],this},D.prototype.getState=function(){return{buff:this._buff,length:this._length,hash:this._hash.slice()}},D.prototype.setState=function(u){return this._buff=u.buff,this._length=u.length,this._hash=u.hash,this},D.prototype.destroy=function(){delete this._hash,delete this._buff,delete this._length},D.prototype._finish=function(u,l){var i=l,n,o,s;if(u[i>>2]|=128<<(i%4<<3),i>55)for(p(this._hash,u),i=0;i<16;i+=1)u[i]=0;n=this._length*8,n=n.toString(16).match(/(.*?)(.{0,8})$/),o=parseInt(n[2],16),s=parseInt(n[1],16)||0,u[14]=o,u[15]=s,p(this._hash,u)},D.hash=function(u,l){return D.hashBinary(E(u),l)},D.hashBinary=function(u,l){var i=y(u),n=m(i);return l?O(n):n},D.ArrayBuffer=function(){this.reset()},D.ArrayBuffer.prototype.append=function(u){var l=C(this._buff.buffer,u,!0),i=l.length,n;for(this._length+=u.byteLength,n=64;n<=i;n+=64)p(this._hash,h(l.subarray(n-64,n)));return this._buff=n-64<i?new Uint8Array(l.buffer.slice(n-64)):new Uint8Array(0),this},D.ArrayBuffer.prototype.end=function(u){var l=this._buff,i=l.length,n=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],o,s;for(o=0;o<i;o+=1)n[o>>2]|=l[o]<<(o%4<<3);return this._finish(n,i),s=m(this._hash),u&&(s=O(s)),this.reset(),s},D.ArrayBuffer.prototype.reset=function(){return this._buff=new Uint8Array(0),this._length=0,this._hash=[1732584193,-271733879,-1732584194,271733878],this},D.ArrayBuffer.prototype.getState=function(){var u=D.prototype.getState.call(this);return u.buff=w(u.buff),u},D.ArrayBuffer.prototype.setState=function(u){return u.buff=I(u.buff,!0),D.prototype.setState.call(this,u)},D.ArrayBuffer.prototype.destroy=D.prototype.destroy,D.ArrayBuffer.prototype._finish=D.prototype._finish,D.ArrayBuffer.hash=function(u,l){var i=d(new Uint8Array(u)),n=m(i);return l?O(n):n},D})});var X=ye((an,Fe)=>{"use strict";Fe.exports={}});async function Tt(t){let r=(await Promise.resolve().then(()=>H(Oe(),1))).default,e=new r.ArrayBuffer,a=2097152;for(let p=0;p<t.size;p+=a){let c=Math.min(p+a,t.size);e.append(await t.slice(p,c).arrayBuffer())}return{md5:e.end()}}async function St(t){let{createHash:r}=await Promise.resolve().then(()=>H(X(),1)),e=r("md5");return e.update(t),{md5:e.digest("hex")}}async function Rt(t){let{createHash:r}=await Promise.resolve().then(()=>H(X(),1)),{createReadStream:e}=await Promise.resolve().then(()=>H(X(),1));return new Promise((a,p)=>{let c=r("md5"),h=e(t);h.on("error",y=>p(f.file(`Failed to read file for MD5: ${y.message}`,{filePath:t}))),h.on("data",y=>c.update(y)),h.on("end",()=>a({md5:c.digest("hex")}))})}async function M(t){if(t instanceof Blob)return Tt(t);if(typeof Buffer<"u"&&Buffer.isBuffer(t))return St(t);if(typeof t=="string")return Rt(t);throw f.business("Invalid input for MD5 calculation")}var W=P(()=>{"use strict";R()});function Q(t){return t.replace(/\\/g,"/").replace(/\/+/g,"/").replace(/^\/+/,"")}var Ge=P(()=>{"use strict"});function ke(t,r={}){if(r.flatten===!1)return t.map(a=>({path:Q(a),name:ie(a)}));let e=bt(t);return t.map(a=>{let p=Q(a);if(e){let c=e.endsWith("/")?e:`${e}/`;p.startsWith(c)&&(p=p.substring(c.length))}return p||(p=ie(a)),{path:p,name:ie(a)}})}function bt(t){if(!t.length)return"";let e=t.map(c=>Q(c)).map(c=>c.split("/")),a=[],p=Math.min(...e.map(c=>c.length));for(let c=0;c<p-1;c++){let h=e[0][c];if(e.every(y=>y[c]===h))a.push(h);else break}return a.join("/")}function ie(t){return t.split(/[/\\]/).pop()||t}var se=P(()=>{"use strict";Ge()});function Pn(t){oe=t}function wt(){return typeof process<"u"&&process.versions&&process.versions.node?"node":typeof window<"u"||typeof self<"u"?"browser":"unknown"}function ze(){return oe||wt()}var oe,ae=P(()=>{"use strict";oe=null});function le(t,r=1){if(t===0)return"0 Bytes";let e=1024,a=["Bytes","KB","MB","GB"],p=Math.floor(Math.log(t)/Math.log(e));return`${parseFloat((t/e**p).toFixed(r))} ${a[p]}`}function pe(t){if(De(t))return{valid:!1,reason:"File name contains unsafe characters"};if(t.startsWith(" ")||t.endsWith(" "))return{valid:!1,reason:"File name cannot start/end with spaces"};if(t.endsWith("."))return{valid:!1,reason:"File name cannot end with dots"};let r=/^(CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])(\.|$)/i,e=t.split("/").pop()||t;return r.test(e)?{valid:!1,reason:"File name uses a reserved system name"}:t.includes("..")?{valid:!1,reason:"File name contains path traversal pattern"}:{valid:!0}}function xn(t,r){let e=[],a=[],p=[];if(t.length===0){let d={file:"(no files)",message:"At least one file must be provided"};return e.push(d),{files:[],validFiles:[],errors:e,warnings:[],canDeploy:!1}}for(let d of t)if(K(d.name))return e.push({file:d.name,message:"Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder"}),{files:t.map(g=>({...g,status:S.VALIDATION_FAILED,statusMessage:"Unbuilt project detected"})),validFiles:[],errors:e,warnings:[],canDeploy:!1};if(t.length>r.maxFilesCount){let d={file:`(${t.length} files)`,message:`File count (${t.length}) exceeds limit of ${r.maxFilesCount}`};return e.push(d),{files:t.map(g=>({...g,status:S.VALIDATION_FAILED,statusMessage:d.message})),validFiles:[],errors:e,warnings:[],canDeploy:!1}}let c=0;for(let d of t){let g=S.READY,m="Ready for upload",E=d.name?pe(d.name):{valid:!1,reason:"File name cannot be empty"};if(d.status===S.PROCESSING_ERROR)g=S.VALIDATION_FAILED,m=d.statusMessage||"File failed during processing",e.push({file:d.name,message:m});else if(d.size===0){g=S.EXCLUDED,m="File is empty (0 bytes) and cannot be deployed due to storage limitations",a.push({file:d.name,message:m}),p.push({...d,status:g,statusMessage:m});continue}else d.size<0?(g=S.VALIDATION_FAILED,m="File size must be positive",e.push({file:d.name,message:m})):!d.name||d.name.trim().length===0?(g=S.VALIDATION_FAILED,m="File name cannot be empty",e.push({file:d.name||"(empty)",message:m})):d.name.includes("\0")?(g=S.VALIDATION_FAILED,m="File name contains invalid characters (null byte)",e.push({file:d.name,message:m})):E.valid?V(d.name)?(g=S.VALIDATION_FAILED,m=`File extension not allowed: "${d.name}"`,e.push({file:d.name,message:m})):d.size>r.maxFileSize?(g=S.VALIDATION_FAILED,m=`File size (${le(d.size)}) exceeds limit of ${le(r.maxFileSize)}`,e.push({file:d.name,message:m})):(c+=d.size,c>r.maxTotalSize&&(g=S.VALIDATION_FAILED,m=`Total size would exceed limit of ${le(r.maxTotalSize)}`,e.push({file:d.name,message:m}))):(g=S.VALIDATION_FAILED,m=E.reason||"Invalid file name",e.push({file:d.name,message:m}));p.push({...d,status:g,statusMessage:m})}e.length>0&&(p=p.map(d=>d.status===S.EXCLUDED?d:{...d,status:S.VALIDATION_FAILED,statusMessage:d.status===S.VALIDATION_FAILED?d.statusMessage:"Deployment failed due to validation errors in bundle"}));let h=e.length===0?p.filter(d=>d.status===S.READY):[],y=e.length===0;return{files:p,validFiles:h,errors:e,warnings:a,canDeploy:y}}function Pt(t){return t.filter(r=>r.status===S.READY)}function Nn(t){return Pt(t).length>0}var ue=P(()=>{"use strict";R()});function Ve(t){return _t.test(t)}var Lt,_t,Ke=P(()=>{"use strict";Lt=["^npm-debug\\.log$","^\\..*\\.swp$","^\\.DS_Store$","^\\.AppleDouble$","^\\.LSOverride$","^Icon\\r$","^\\._.*","^\\.Spotlight-V100(?:$|\\/)","\\.Trashes","^__MACOSX$","~$","^Thumbs\\.db$","^ehthumbs\\.db$","^[Dd]esktop\\.ini$","@eaDir$"],_t=new RegExp(Lt.join("|"))});function je(t,r){if(!t||t.length===0)return[];if(!r?.allowUnbuilt&&t.find(a=>a&&K(a)))throw f.business("Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder");return t.filter(e=>{if(!e)return!1;let a=e.replace(/\\/g,"/").split("/").filter(Boolean);if(a.length===0)return!0;let p=a[a.length-1];if(Ve(p))return!1;for(let h of a)if(h!==".well-known"&&(h.startsWith(".")||h.length>255))return!1;let c=a.slice(0,-1);for(let h of c)if(xt.some(y=>h.toLowerCase()===y.toLowerCase()))return!1;return!0})}var xt,ce=P(()=>{"use strict";R();Ke();xt=["__MACOSX",".Trashes",".fseventsd",".Spotlight-V100"]});function Ye(t,r){if(t.includes("\0")||t.includes("/../")||t.startsWith("../")||t.endsWith("/.."))throw f.business(`Security error: Unsafe file path "${t}" for file: ${r}`)}function qe(t,r){let e=pe(t);if(!e.valid)throw f.business(e.reason||"Invalid file name");if(V(t))throw f.business(`File extension not allowed: "${r}"`)}var de=P(()=>{"use strict";R();ue()});var We={};rt(We,{processFilesForBrowser:()=>Xe});async function Xe(t,r={},e){if(ze()!=="browser")throw f.business("processFilesForBrowser can only be called in a browser environment.");let a=t.map(E=>E.webkitRelativePath||E.name),p=r.build||r.prerender,c=ke(a,{flatten:r.pathDetect!==!1}),h=c.map(E=>E.path),y=new Set(je(h,{allowUnbuilt:p})),d=[];for(let E=0;E<t.length;E++)y.has(h[E])&&d.push({file:t[E],deployPath:c[E].path});if(d.length===0)return[];if(p){let E=[];for(let I=0;I<d.length;I++){let{file:w,deployPath:C}=d[I];if(w.size===0)continue;let{md5:O}=await M(w);E.push({path:C,content:w,size:w.size,md5:O})}return E}if(!e)throw f.config("Platform limits not provided. processFilesForBrowser requires the limits argument for deploy-mode validation \u2014 pass `ship.getLimits()` result.");let g=[],m=0;for(let E=0;E<d.length;E++){let{file:I,deployPath:w}=d[E];if(Ye(w,I.name),I.size===0)continue;if(qe(w,I.name),I.size>e.maxFileSize)throw f.business(`File ${I.name} is too large. Maximum allowed size is ${e.maxFileSize/(1024*1024)}MB.`);if(m+=I.size,m>e.maxTotalSize)throw f.business(`Total deploy size is too large. Maximum allowed is ${e.maxTotalSize/(1024*1024)}MB.`);let{md5:C}=await M(I);g.push({path:w,content:I,size:I.size,md5:C})}if(g.length>e.maxFilesCount)throw f.business(`Too many files to deploy. Maximum allowed is ${e.maxFilesCount} files.`);return g}var fe=P(()=>{"use strict";R();se();ae();ce();W();de()});R();R();R();var Y=class{constructor(){this.handlers=new Map}on(r,e){this.handlers.has(r)||this.handlers.set(r,new Set),this.handlers.get(r)?.add(e)}off(r,e){let a=this.handlers.get(r);a&&(a.delete(e),a.size===0&&this.handlers.delete(r))}emit(r,...e){let a=this.handlers.get(r);if(!a)return;let p=Array.from(a);for(let c of p)try{c(...e)}catch(h){a.delete(c),r!=="error"&&setTimeout(()=>{let y=h instanceof Error?h:new Error(String(h));this.emit("error",y,String(r))},0)}}};R();R();function U(t){if(t==null)return;if(t.length===0)return t;if(t.length>v.MAX_COUNT)throw f.validation(`Maximum ${v.MAX_COUNT} labels allowed`);let r=t.map((a,p)=>{if(typeof a!="string")throw f.validation(`Label at index ${p} must be a string`);let c=a.trim().toLowerCase();if(c.length<v.MIN_LENGTH)throw f.validation(`Labels must be at least ${v.MIN_LENGTH} characters long`);if(c.length>v.MAX_LENGTH)throw f.validation(`Labels must be no more than ${v.MAX_LENGTH} characters long`);if(!Le.test(c))throw f.validation(`Labels must start and end with alphanumeric characters, with optional separators (${v.SEPARATORS}) between segments`);return c}),e=[...new Set(r)];if(e.length!==r.length)throw f.validation("Duplicate labels are not allowed");return e}async function _e(t){let r=t.find(p=>p.path===x||p.path===`/${x}`);if(!r)return;let e=r.content,a=typeof e.text=="function"?await e.text():r.content.toString("utf8");Ie(a)}var gt=3e4,xe=3e5,Et=3e5,At=xe+Et,Dt="sdk";function re(t){let r=new URLSearchParams;t?.limit!==void 0&&r.set("limit",String(t.limit)),t?.cursor!==void 0&&r.set("cursor",t.cursor);let e=r.toString();return e?`?${e}`:""}var q=class extends Y{constructor(e){super();this.globalHeaders={};this.apiUrl=e.apiUrl||te,this.getAuthHeadersCallback=e.getAuthHeaders,this.session=e.session??!1,this.caller=e.caller,this.timeout=e.timeout??gt,this.deployTimeout=e.timeout??xe,this.deployBuildTimeout=e.timeout??At,this.fetch=e.fetch??globalThis.fetch.bind(globalThis),this.createDeployBody=e.createDeployBody,this.deployEndpoint=e.deployEndpoint||T.DEPLOYMENTS}setGlobalHeaders(e){this.globalHeaders=e}async executeRequest(e,a,p,c=this.timeout){let h=()=>{};try{let y=await this.mergeHeaders(a.headers),d=this.createTimeoutSignal(a.signal,c);h=d.cleanup;let g={...a,headers:y,credentials:this.session&&!y.Authorization?"include":void 0,signal:d.signal};this.emit("request",e,g);let m=await this.fetch(e,g);if(h(),!m.ok)throw await f.fromHttpResponse(m,p);return this.emit("response",this.safeClone(m),e),{data:await this.parseResponse(this.safeClone(m)),status:m.status}}catch(y){h();let d=f.fromFetchError(y,p);throw this.emit("error",d,e),d}}async request(e,a,p,c){let{data:h}=await this.executeRequest(e,a,p,c);return h}async requestWithStatus(e,a,p){return this.executeRequest(e,a,p)}async mergeHeaders(e={}){return{...this.globalHeaders,...this.caller?{[$.HEADER]:this.caller}:{},...await this.getAuthHeadersCallback(),...e}}createTimeoutSignal(e,a=this.timeout){let p=new AbortController,c=setTimeout(()=>p.abort(),a);if(e){let h=()=>p.abort();e.addEventListener("abort",h),e.aborted&&p.abort()}return{signal:p.signal,cleanup:()=>clearTimeout(c)}}safeClone(e){try{return e.clone()}catch{return e}}async parseResponse(e){if(!(e.headers.get("Content-Length")==="0"||e.status===204))return e.json()}async deploy(e,a={}){if(!e.length)throw f.business("No files to deploy");for(let g of e)if(!g.md5)throw f.file(`MD5 checksum missing for file: ${g.path}`,{filePath:g.path});ne(a.password);let p=Ee(a.idempotencyKey),c=U(a.labels);await _e(e);let h=a.build||a.prerender||a.spa?{build:a.build,prerender:a.prerender,spa:a.spa}:void 0,{body:y,headers:d}=await this.createDeployBody(e,{labels:c,via:a.via??Dt,password:a.password,flags:h,captcha:a.captcha});return this.request(`${this.apiUrl}${this.deployEndpoint}`,{method:"POST",body:y,headers:p?{...d,[z.HEADER]:p}:d,signal:a.signal||null},"Deploy",a.build||a.prerender?this.deployBuildTimeout:this.deployTimeout)}async listDeployments(e){return this.request(`${this.apiUrl}${T.DEPLOYMENTS}${re(e)}`,{method:"GET"},"List deployments")}async getDeployment(e){return this.request(`${this.apiUrl}${T.DEPLOYMENT(encodeURIComponent(e))}`,{method:"GET"},"Get deployment")}async updateDeploymentLabels(e,a){let p=U(a);return this.request(`${this.apiUrl}${T.DEPLOYMENT(encodeURIComponent(e))}`,{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({labels:p})},"Update deployment labels")}async deleteDeployment(e){return this.request(`${this.apiUrl}${T.DEPLOYMENT(encodeURIComponent(e))}`,{method:"DELETE"},"Delete deployment")}async setDomain(e,a,p){let c=U(p),h={};a&&(h.deployment=a),c!==void 0&&(h.labels=c);let{data:y,status:d}=await this.requestWithStatus(`${this.apiUrl}${T.DOMAIN(encodeURIComponent(e))}`,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify(h)},"Set domain");return{...y,isCreate:d===201}}async listDomains(e){return this.request(`${this.apiUrl}${T.DOMAINS}${re(e)}`,{method:"GET"},"List domains")}async getDomain(e){return this.request(`${this.apiUrl}${T.DOMAIN(encodeURIComponent(e))}`,{method:"GET"},"Get domain")}async deleteDomain(e){return this.request(`${this.apiUrl}${T.DOMAIN(encodeURIComponent(e))}`,{method:"DELETE"},"Delete domain")}async verifyDomain(e){return this.request(`${this.apiUrl}${T.DOMAIN_VERIFY(encodeURIComponent(e))}`,{method:"POST"},"Verify domain")}async getDomainDns(e){return this.request(`${this.apiUrl}${T.DOMAIN_DNS(encodeURIComponent(e))}`,{method:"GET"},"Get domain DNS")}async getDomainRecords(e){return this.request(`${this.apiUrl}${T.DOMAIN_RECORDS(encodeURIComponent(e))}`,{method:"GET"},"Get domain records")}async getDomainShare(e){return this.request(`${this.apiUrl}${T.DOMAIN_SHARE(encodeURIComponent(e))}`,{method:"GET"},"Get domain share")}async validateDomain(e){return this.request(`${this.apiUrl}${T.DOMAINS_VALIDATE}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({domain:e})},"Validate domain")}async createToken(e,a){let p=U(a),c={};return e!==void 0&&(c.ttl=e),p!==void 0&&(c.labels=p),this.request(`${this.apiUrl}${T.TOKENS}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(c)},"Create token")}async listTokens(e){return this.request(`${this.apiUrl}${T.TOKENS}${re(e)}`,{method:"GET"},"List tokens")}async deleteToken(e){return this.request(`${this.apiUrl}${T.TOKEN(encodeURIComponent(e))}`,{method:"DELETE"},"Delete token")}async getToken(e){return this.request(`${this.apiUrl}${T.TOKEN(encodeURIComponent(e))}`,{method:"GET"},"Get token")}async getAccount(){return this.request(`${this.apiUrl}${T.ACCOUNT}`,{method:"GET"},"Get account")}async getLimits(){return this.request(`${this.apiUrl}${T.LIMITS}`,{method:"GET"},"Get limits")}async ping(){return this.request(`${this.apiUrl}${T.PING}`,{method:"GET"},"Ping")}async checkSPA(e,a={}){let p=e.find(d=>d.path===j.INDEX_FILE||d.path===`/${j.INDEX_FILE}`);if(!p||p.size>j.MAX_INDEX_BYTES)return!1;let c;if(typeof Buffer<"u"&&Buffer.isBuffer(p.content))c=p.content.toString("utf-8");else if(typeof Blob<"u"&&p.content instanceof Blob)c=await p.content.text();else if(typeof File<"u"&&p.content instanceof File)c=await p.content.text();else return!1;let h={files:e.map(d=>d.path),index:c};return(await this.request(`${this.apiUrl}${T.SPA_CHECK}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(h)},"SPA check")).isSPA}};R();R();W();async function It(){let t=JSON.stringify(Re,null,2),r;typeof Buffer<"u"?r=Buffer.from(t,"utf-8"):r=new Blob([t],{type:"application/json"});let{md5:e}=await M(r);return{path:x,content:r,size:t.length,md5:e}}async function Ce(t,r,e){if(e.spaDetect===!1||e.spa||e.build||e.prerender||t.some(a=>a.path===x))return t;try{if(await r.checkSPA(t,e)){let p=await It();return[...t,p]}}catch{}return t}function $e(t){let{getApi:r,ensureInit:e,processInput:a}=t;return{upload:async(p,c={})=>{if(await e(),!a)throw f.config("processInput function is not provided.");let h=r(),y=await a(p,c);return y=await Ce(y,h,c),h.deploy(y,c)},list:async p=>(await e(),r().listDeployments(p)),get:async p=>(await e(),r().getDeployment(p)),set:async(p,c)=>(await e(),r().updateDeploymentLabels(p,c.labels)),delete:async p=>(await e(),r().deleteDeployment(p))}}function Ue(t){let{getApi:r,ensureInit:e}=t;return{set:async(a,p={})=>(await e(),r().setDomain(a,p.deployment,p.labels)),list:async a=>(await e(),r().listDomains(a)),get:async a=>(await e(),r().getDomain(a)),delete:async a=>(await e(),r().deleteDomain(a)),verify:async a=>(await e(),r().verifyDomain(a)),validate:async a=>(await e(),r().validateDomain(a)),dns:async a=>(await e(),r().getDomainDns(a)),records:async a=>(await e(),r().getDomainRecords(a)),share:async a=>(await e(),r().getDomainShare(a))}}function Me(t){let{getApi:r,ensureInit:e}=t;return{get:async()=>(await e(),r().getAccount())}}function Be(t){let{getApi:r,ensureInit:e}=t;return{create:async(a={})=>(await e(),r().createToken(a.ttl,a.labels)),list:async a=>(await e(),r().listTokens(a)),get:async a=>(await e(),r().getToken(a)),delete:async a=>(await e(),r().deleteToken(a))}}var J=class{constructor(r={}){this.initPromise=null;this.platformLimits=null;this.credential=null;if(r={...r,apiUrl:r.apiUrl||void 0,token:r.token||void 0,caller:r.caller||void 0},this.clientOptions=r,r.caller!==void 0&&we(r.caller),r.token&&r.session)throw f.config("Provide either `token` or `session`, not both.");typeof r.token=="string"?(ee(r.token),this.credential=r.token):r.token&&(this.credential=r.token),this.http=new q({...r,getAuthHeaders:()=>this.getAuthHeaders(),createDeployBody:this.getDeployBodyCreator()});let e={getApi:()=>this.http,ensureInit:()=>this.ensureInitialized()};this.deployments=$e({...e,processInput:(a,p)=>this.processInput(a,p)}),this.domains=Ue(e),this.account=Me(e),this.tokens=Be(e)}async ensureInitialized(){return this.initPromise||(this.initPromise=this.fetchPlatformLimits()),this.initPromise}async fetchPlatformLimits(){try{this.platformLimits=await this.http.getLimits()}catch(r){throw this.initPromise=null,r}}async ping(){return await this.ensureInitialized(),this.http.ping()}async deploy(r,e){return this.deployments.upload(r,e)}async whoami(){return this.account.get()}async getLimits(){return this.platformLimits?this.platformLimits:(await this.ensureInitialized(),this.platformLimits)}on(r,e){this.http.on(r,e)}off(r,e){this.http.off(r,e)}setHeaders(r){this.http.setGlobalHeaders(r)}clearHeaders(){this.http.setGlobalHeaders({})}setToken(r){if(this.clientOptions.session)throw f.config("Provide either `token` or `session`, not both.");if(typeof r=="string"){if(!r)throw f.business("Invalid token provided. Token must be a non-empty string.");ee(r),this.credential=r;return}if(typeof r!="function")throw f.business("Invalid token provided. Token must be a non-empty string or a provider function.");this.credential=r}async getAuthHeaders(){if(this.credential===null)return{};let r=typeof this.credential=="function"?await this.credential():this.credential;if(!r)throw f.authentication("Token provider returned no token.");if(typeof r!="string")throw f.authentication("Token provider returned a non-string value.");return{Authorization:`Bearer ${r}`}}};R();async function He(t,r={}){let{labels:e,via:a,password:p,flags:c,captcha:h}=r,y=new FormData,d=[];for(let g of t){if(!(g.content instanceof File||g.content instanceof Blob))throw f.file(`Unsupported file.content type for browser: ${g.path}`,{filePath:g.path});if(!g.md5)throw f.file(`File missing md5 checksum: ${g.path}`,{filePath:g.path});let m=new File([g.content],g.path,{type:"application/octet-stream"});y.append(L.FILES,m),d.push(g.md5)}return y.append(L.CHECKSUMS,JSON.stringify(d)),e&&e.length>0&&y.append(L.LABELS,JSON.stringify(e)),a&&y.append(L.VIA,a),p&&y.append(L.PASSWORD,p),c?.build&&y.append(L.BUILD,"true"),c?.prerender&&y.append(L.PRERENDER,"true"),c?.spa&&y.append(L.SPA,"true"),h&&y.append(L.CAPTCHA,h),{body:y,headers:{}}}R();R();se();ae();ue();ce();W();de();function Hn(t,r,e,a=!0){let p=t===1?r:e;return a?`${t} ${p}`:p}fe();var me=class extends J{async deploy(r,e){return super.deploy(r,e)}async processInput(r,e){if(!Array.isArray(r)||!r.every(p=>p instanceof File))throw f.business("Invalid input type for browser environment. Expected File[].");if(r.length===0)throw f.business("No files to deploy.");let{processFilesForBrowser:a}=await Promise.resolve().then(()=>(fe(),We));return a(r,e,this.platformLimits??void 0)}getDeployBodyCreator(){return He}},ur=me;export{Te as API_KEY,T as API_PATHS,Ut as AUTH_BASE_PATH,Ct as AccountPlan,q as ApiHttp,ge as AuthMethod,ut as BLOCKED_EXTENSIONS,$ as CALLER,te as DEFAULT_API,x as DEPLOYMENT_CONFIG_FILENAME,L as DEPLOY_FIELDS,Se as DEPLOY_TOKEN,vt as DeploymentStatus,st as DeploymentVia,Ot as DomainStatus,A as ErrorType,S as FILE_VALIDATION_STATUS,S as FileValidationStatus,z as IDEMPOTENCY_KEY_CONSTRAINTS,xt as JUNK_DIRECTORIES,v as LABEL_CONSTRAINTS,Le as LABEL_PATTERN,kt as MY_API_KEY_URL,Mt as OAuthScope,k as PASSWORD_CONSTRAINTS,zt as PUBLIC_DEPLOYMENT_TTL_SECONDS,Gt as SHIP_ENV,j as SPA_CHECK_CONSTRAINTS,Re as SPA_DEFAULT_CONFIG,me as Ship,f as ShipError,F as TokenKind,ft as UNBUILT_PROJECT_MARKERS,dt as UNSAFE_FILENAME_CHARS,$t as WEB_FILE_ACCEPT,Pn as __setTestEnvironment,Nn as allValidFilesReady,Ie as assertShipJsonSyntax,M as calculateMD5,mt as classifyToken,Me as createAccountResource,$e as createDeploymentResource,Ue as createDomainResource,Be as createTokenResource,ur as default,Xt as deserializeLabels,Kt as extractSubdomain,je as filterJunk,le as formatFileSize,jt as generateDeploymentUrl,Yt as generateDomainUrl,ze as getENV,Pt as getValidFiles,K as hasUnbuiltMarker,De as hasUnsafeChars,V as isBlockedExtension,Vt as isCustomDomain,Ht as isDeployment,Pe as isPlatformDomain,Ae as isShipError,Ft as normalizeVia,ke as optimizeDeployPaths,Hn as pluralize,Xe as processFilesForBrowser,qt as serializeLabels,ht as validateApiKey,Bt as validateApiUrl,we as validateCaller,qe as validateDeployFile,Ye as validateDeployPath,yt as validateDeployToken,pe as validateFileName,xn as validateFiles,Ee as validateIdempotencyKey,ne as validatePassword,ee as validateToken};
+var Je=Object.create;var B=Object.defineProperty;var Qe=Object.getOwnPropertyDescriptor;var Ze=Object.getOwnPropertyNames;var et=Object.getPrototypeOf,tt=Object.prototype.hasOwnProperty;var nt=(t,r,e)=>r in t?B(t,r,{enumerable:!0,configurable:!0,writable:!0,value:e}):t[r]=e;var P=(t,r)=>()=>(t&&(r=t(t=0)),r);var ye=(t,r)=>()=>(r||t((r={exports:{}}).exports,r),r.exports),rt=(t,r)=>{for(var e in r)B(t,e,{get:r[e],enumerable:!0})},it=(t,r,e,a)=>{if(r&&typeof r=="object"||typeof r=="function")for(let p of Ze(r))!tt.call(t,p)&&p!==e&&B(t,p,{get:()=>r[p],enumerable:!(a=Qe(r,p))||a.enumerable});return t};var H=(t,r,e)=>(e=t!=null?Je(et(t)):{},it(r||!t||!t.__esModule?B(e,"default",{value:t,enumerable:!0}):e,t));var G=(t,r,e)=>nt(t,typeof r!="symbol"?r+"":r,e);function Ft(t){if(!t||typeof t!="string")return;let r=t.trim().toLowerCase();return Object.values(st).includes(r)?r:void 0}function Ee(t){if(t==null)return;if(typeof t!="string")throw f.validation("Idempotency key must be a string.");let r=t.trim();if(!r)throw f.validation("Idempotency key must not be empty.");if(r.length>z.MAX_LENGTH)throw f.validation(`Idempotency key must be at most ${z.MAX_LENGTH} characters.`);return r}function pt(t){return typeof t.code=="string"?!0:t instanceof TypeError&&t.message.includes("fetch")}function Ae(t){return t!==null&&typeof t=="object"&&"name"in t&&t.name==="ShipError"&&"status"in t}function V(t){let r=t.lastIndexOf(".");if(r===-1||r===t.length-1)return!1;let e=t.slice(r+1).toLowerCase();return ut.has(e)}function De(t){return dt.test(t)}function K(t){return t.replace(/\\/g,"/").split("/").filter(Boolean).some(e=>ft.has(e))}function mt(t){return t.startsWith(Te.PREFIX)?F.API_KEY:t.startsWith(Se.PREFIX)?F.DEPLOY_TOKEN:F.OPAQUE}function Ie(t){let r=t.charCodeAt(0)===65279?t.slice(1):t,e;try{e=JSON.parse(r)}catch(a){throw f.config(`invalid JSON format in config: ${a.message}`,{filePath:x})}if(e===null||typeof e!="object"||Array.isArray(e))throw f.config(`${x} must contain a JSON object`,{filePath:x})}function be(t,r,e){if(!t.startsWith(r.PREFIX))throw f.validation(`${e} must start with "${r.PREFIX}"`);if(t.length!==r.TOTAL_LENGTH)throw f.validation(`${e} must be ${r.TOTAL_LENGTH} characters total (${r.PREFIX} + ${r.HEX_LENGTH} hex chars)`);let a=t.slice(r.PREFIX.length);if(!new RegExp(`^[a-f0-9]{${r.HEX_LENGTH}}$`,"i").test(a))throw f.validation(`${e} must contain ${r.HEX_LENGTH} hexadecimal characters after "${r.PREFIX}" prefix`)}function ht(t){be(t,Te,"API key")}function yt(t){be(t,Se,"Deploy token")}function ee(t){switch(mt(t)){case F.API_KEY:ht(t);return;case F.DEPLOY_TOKEN:yt(t);return;case F.OPAQUE:if(!t)throw f.validation("Token must be a non-empty string")}}function we(t){if(!t||t.length>$.MAX_LENGTH||!$.PATTERN.test(t))throw f.validation(`Caller must be 1-${$.MAX_LENGTH} characters: letters, digits, dots, underscores, or hyphens`)}function Bt(t){try{let r=new URL(t);if(!["http:","https:"].includes(r.protocol))throw f.validation("API URL must use http:// or https:// protocol");if(r.pathname!=="/"&&r.pathname!=="")throw f.validation("API URL must not contain a path");if(r.search||r.hash)throw f.validation("API URL must not contain query parameters or fragments")}catch(r){throw Ae(r)?r:f.validation("API URL must be a valid URL")}}function Ht(t){return/^[a-z]+-[a-z]+-[a-z0-9]{7}(\.[a-z0-9.-]+)?$/i.test(t)}function Pe(t,r){return t.endsWith(`.${r}`)}function Vt(t,r){return!Pe(t,r)}function Kt(t,r){return Pe(t,r)?t.slice(0,-(r.length+1)):null}function jt(t){return`https://${t}`}function Yt(t){return`https://${t}`}function qt(t){return!t||t.length===0?null:JSON.stringify(t)}function Xt(t){if(!t)return[];try{let r=JSON.parse(t);return Array.isArray(r)?r:[]}catch{return[]}}function ne(t){if(t==null)return;if(typeof t!="string")throw f.validation("Password must be a string");let r=t.trim();if(r.length<k.MIN_LENGTH||r.length>k.MAX_LENGTH)throw f.validation(`Password must be between ${k.MIN_LENGTH} and ${k.MAX_LENGTH} characters`);return r}var vt,st,Ot,z,Ct,T,L,A,ot,Z,at,lt,f,ut,ct,$t,dt,ft,Ut,ge,Te,Se,$,F,Mt,x,Re,j,te,Gt,kt,zt,S,v,Le,k,R=P(()=>{"use strict";vt={PENDING:"pending",SUCCESS:"success",FAILED:"failed",DELETING:"deleting"},st={WEB:"web",SDK:"sdk",CLI:"cli",MCP:"mcp",GIT:"git",N8N:"n8n",GPT:"gpt",VSC:"vsc"},Ot={PENDING:"pending",PARTIAL:"partial",SUCCESS:"success",PAUSED:"paused"},z={HEADER:"Idempotency-Key",MAX_LENGTH:256,WINDOW_SECONDS:1440*60};Ct={FREE:"free",STANDARD:"standard",SPONSORED:"sponsored",ENTERPRISE:"enterprise",SUSPENDED:"suspended",TERMINATING:"terminating",TERMINATED:"terminated"},T={DEPLOYMENTS:"/deployments",DEPLOYMENT:t=>`/deployments/${t}`,DEPLOYMENT_CONFIG:t=>`/deployments/${t}/config`,DOMAINS:"/domains",DOMAIN:t=>`/domains/${t}`,DOMAIN_VERIFY:t=>`/domains/${t}/verify`,DOMAIN_DNS:t=>`/domains/${t}/dns`,DOMAIN_RECORDS:t=>`/domains/${t}/records`,DOMAIN_SHARE:t=>`/domains/${t}/share`,DOMAIN_PROPAGATION:t=>`/domains/${t}/propagation`,DOMAINS_VALIDATE:"/domains/validate",TOKENS:"/tokens",TOKEN:t=>`/tokens/${t}`,ACCOUNT:"/account",ACCOUNT_KEY:"/account/key",ACCOUNT_CLAIM:"/account/claim",ACTIVITIES:"/activities",LABELS:"/labels",LIMITS:"/limits",PING:"/ping",SETUP:"/setup",SPA_CHECK:"/spa-check",UPLOAD:"/upload"},L={FILES:"files[]",CHECKSUMS:"checksums",LABELS:"labels",VIA:"via",PASSWORD:"password",BUILD:"build",PRERENDER:"prerender",SPA:"spa",CAPTCHA:"captcha"},A={Validation:"validation_failed",NotFound:"not_found",Forbidden:"forbidden",RateLimit:"rate_limit_exceeded",Authentication:"authentication_failed",Business:"business_logic_error",Api:"internal_server_error",Network:"network_error",Cancelled:"operation_cancelled",File:"file_error",Config:"config_error"},ot=new Set([A.Network,A.Cancelled,A.File,A.Config]),Z={client:new Set([A.Business,A.Cancelled,A.Config,A.File,A.Forbidden,A.NotFound,A.RateLimit,A.Validation]),network:new Set([A.Network]),auth:new Set([A.Authentication])},at=new Set(Object.values(A).filter(t=>!ot.has(t))),lt=200;f=class t extends Error{constructor(e,a,p,c){super(a);G(this,"type");G(this,"status");G(this,"details");this.type=e,this.status=p,this.details=c,this.name="ShipError"}toResponse(){let e=this.details,a=this.type===A.Authentication&&e?.internal?void 0:this.details;return{error:this.type,message:this.message,status:this.status,details:a}}static async fromHttpResponse(e,a){let p,c,h;try{if(e.headers.get("content-type")?.includes("application/json")){let m=await e.json();if(m&&typeof m=="object"){let E=m;typeof E.message=="string"?p=E.message:typeof E.error=="string"&&(p=E.error),c=E.details,typeof E.error=="string"&&at.has(E.error)&&(h=E.error)}}else{let m=(await e.text()).trim();m&&!m.startsWith("<")&&m.length<=lt&&(p=m)}}catch{}let y=e.headers.get("retry-after");if(y!==null){let g=y.trim(),m=/^\d+$/.test(g)?Number(g):Math.ceil((Date.parse(g)-Date.now())/1e3);if(Number.isFinite(m)&&m>=0){let E=c&&typeof c=="object"?c:{};E.retryAfter===void 0&&(c={...E,retryAfter:m})}}p=p||`${a||"Request"} failed with status ${e.status}`;let d=h??(e.status===401?A.Authentication:e.status===403?A.Forbidden:e.status===429?A.RateLimit:A.Api);return new t(d,p,e.status,c)}static fromFetchError(e,a){if(Ae(e))return e;let p=a||"Request";return e instanceof Error?e.name==="AbortError"?t.cancelled(`${p} was cancelled`):pt(e)?t.network(`${p} failed: ${e.message}`,{cause:e}):new t(A.Api,`${p} failed: ${e.message}`):new t(A.Api,`${p} failed: Unknown error`)}static validation(e,a){return new t(A.Validation,e,400,a)}static notFound(e,a){let p=a?`${e} ${a} not found`:`${e} not found`;return new t(A.NotFound,p,404)}static forbidden(e,a){return new t(A.Forbidden,e,403,a)}static rateLimit(e="Too many requests",a){return new t(A.RateLimit,e,429,a)}static authentication(e="Authentication required",a){return new t(A.Authentication,e,401,a)}static business(e,a=400,p){return new t(A.Business,e,a,p)}static network(e,a){return new t(A.Network,e,void 0,a)}static cancelled(e,a){return new t(A.Cancelled,e,void 0,a)}static file(e,a){return new t(A.File,e,void 0,a)}static config(e,a){return new t(A.Config,e,void 0,a)}static api(e,a=500,p){return new t(A.Api,e,a,p)}isClientError(){return Z.client.has(this.type)?!0:this.status!==void 0&&this.status>=400&&this.status<500}isNetworkError(){return Z.network.has(this.type)}isAuthError(){return Z.auth.has(this.type)}isType(e){return this.type===e}};ut=new Set(["exe","msi","dll","scr","bat","cmd","com","pif","app","deb","rpm","pkg","mpkg","dmg","iso","img","cab","cpl","chm","ps1","vbs","vbe","ws","wsf","wsc","wsh","reg","jar","jnlp","apk","crx","lnk","inf","hta"]);ct=["html","htm","xhtml","xml","txt","md","markdown","pdf","csv","json","jsonc","webmanifest","map","toml","yaml","yml","rss","atom","css","scss","sass","less","js","mjs","cjs","jsx","ts","tsx","wasm","vue","svelte","png","jpg","jpeg","gif","webp","avif","svg","ico","bmp","tif","tiff","heic","heif","woff","woff2","ttf","otf","eot","mp3","wav","ogg","oga","opus","m4a","aac","flac","weba","mp4","webm","ogv","mov","m4v","avi","glb","gltf","usdz","vtt","srt","zip"],$t=ct.map(t=>`.${t}`).join(","),dt=/[\x00-\x1f\x7f#?%\\<>"]/;ft=new Set(["node_modules","package.json"]);Ut="/auth",ge={SESSION:"session",API_KEY:"apiKey",TOKEN:"token",AGENT:"agent",OAUTH:"oauth",WEBHOOK:"webhook",SYSTEM:"system"},Te={PREFIX:"ship-",HEX_LENGTH:64,TOTAL_LENGTH:69,HINT_LENGTH:4},Se={PREFIX:"deploy-",HEX_LENGTH:64,TOTAL_LENGTH:71},$={HEADER:"X-Caller",MAX_LENGTH:128,PATTERN:/^[a-zA-Z0-9._-]+$/},F={API_KEY:ge.API_KEY,DEPLOY_TOKEN:ge.TOKEN,OPAQUE:"opaque"};Mt={ACCOUNT_READ:"account:read",DEPLOYMENTS_READ:"deployments:read",DEPLOYMENTS_WRITE:"deployments:write",DOMAINS_READ:"domains:read",DOMAINS_WRITE:"domains:write"},x="ship.json",Re={rewrites:[{source:"/(.*)",destination:"/index.html"}]},j={INDEX_FILE:"index.html",MAX_INDEX_BYTES:100*1024};te="https://api.shipstatic.com",Gt={TOKEN:"SHIP_TOKEN",API_URL:"SHIP_API_URL"},kt="https://my.shipstatic.com/api-key",zt=4320*60,S={PENDING:"pending",PROCESSING_ERROR:"processing_error",EXCLUDED:"excluded",VALIDATION_FAILED:"validation_failed",READY:"ready"};v={MIN_LENGTH:3,MAX_LENGTH:25,MAX_COUNT:10,SEPARATORS:"._-"},Le=/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;k={MIN_LENGTH:6,MAX_LENGTH:128}});var Oe=ye((Ne,ve)=>{"use strict";(function(t){if(typeof Ne=="object")ve.exports=t();else if(typeof define=="function"&&define.amd)define(t);else{var r;try{r=window}catch{r=self}r.SparkMD5=t()}})(function(t){"use strict";var r=function(u,l){return u+l&4294967295},e=["0","1","2","3","4","5","6","7","8","9","a","b","c","d","e","f"];function a(u,l,i,n,o,s){return l=r(r(l,u),r(n,s)),r(l<<o|l>>>32-o,i)}function p(u,l){var i=u[0],n=u[1],o=u[2],s=u[3];i+=(n&o|~n&s)+l[0]-680876936|0,i=(i<<7|i>>>25)+n|0,s+=(i&n|~i&o)+l[1]-389564586|0,s=(s<<12|s>>>20)+i|0,o+=(s&i|~s&n)+l[2]+606105819|0,o=(o<<17|o>>>15)+s|0,n+=(o&s|~o&i)+l[3]-1044525330|0,n=(n<<22|n>>>10)+o|0,i+=(n&o|~n&s)+l[4]-176418897|0,i=(i<<7|i>>>25)+n|0,s+=(i&n|~i&o)+l[5]+1200080426|0,s=(s<<12|s>>>20)+i|0,o+=(s&i|~s&n)+l[6]-1473231341|0,o=(o<<17|o>>>15)+s|0,n+=(o&s|~o&i)+l[7]-45705983|0,n=(n<<22|n>>>10)+o|0,i+=(n&o|~n&s)+l[8]+1770035416|0,i=(i<<7|i>>>25)+n|0,s+=(i&n|~i&o)+l[9]-1958414417|0,s=(s<<12|s>>>20)+i|0,o+=(s&i|~s&n)+l[10]-42063|0,o=(o<<17|o>>>15)+s|0,n+=(o&s|~o&i)+l[11]-1990404162|0,n=(n<<22|n>>>10)+o|0,i+=(n&o|~n&s)+l[12]+1804603682|0,i=(i<<7|i>>>25)+n|0,s+=(i&n|~i&o)+l[13]-40341101|0,s=(s<<12|s>>>20)+i|0,o+=(s&i|~s&n)+l[14]-1502002290|0,o=(o<<17|o>>>15)+s|0,n+=(o&s|~o&i)+l[15]+1236535329|0,n=(n<<22|n>>>10)+o|0,i+=(n&s|o&~s)+l[1]-165796510|0,i=(i<<5|i>>>27)+n|0,s+=(i&o|n&~o)+l[6]-1069501632|0,s=(s<<9|s>>>23)+i|0,o+=(s&n|i&~n)+l[11]+643717713|0,o=(o<<14|o>>>18)+s|0,n+=(o&i|s&~i)+l[0]-373897302|0,n=(n<<20|n>>>12)+o|0,i+=(n&s|o&~s)+l[5]-701558691|0,i=(i<<5|i>>>27)+n|0,s+=(i&o|n&~o)+l[10]+38016083|0,s=(s<<9|s>>>23)+i|0,o+=(s&n|i&~n)+l[15]-660478335|0,o=(o<<14|o>>>18)+s|0,n+=(o&i|s&~i)+l[4]-405537848|0,n=(n<<20|n>>>12)+o|0,i+=(n&s|o&~s)+l[9]+568446438|0,i=(i<<5|i>>>27)+n|0,s+=(i&o|n&~o)+l[14]-1019803690|0,s=(s<<9|s>>>23)+i|0,o+=(s&n|i&~n)+l[3]-187363961|0,o=(o<<14|o>>>18)+s|0,n+=(o&i|s&~i)+l[8]+1163531501|0,n=(n<<20|n>>>12)+o|0,i+=(n&s|o&~s)+l[13]-1444681467|0,i=(i<<5|i>>>27)+n|0,s+=(i&o|n&~o)+l[2]-51403784|0,s=(s<<9|s>>>23)+i|0,o+=(s&n|i&~n)+l[7]+1735328473|0,o=(o<<14|o>>>18)+s|0,n+=(o&i|s&~i)+l[12]-1926607734|0,n=(n<<20|n>>>12)+o|0,i+=(n^o^s)+l[5]-378558|0,i=(i<<4|i>>>28)+n|0,s+=(i^n^o)+l[8]-2022574463|0,s=(s<<11|s>>>21)+i|0,o+=(s^i^n)+l[11]+1839030562|0,o=(o<<16|o>>>16)+s|0,n+=(o^s^i)+l[14]-35309556|0,n=(n<<23|n>>>9)+o|0,i+=(n^o^s)+l[1]-1530992060|0,i=(i<<4|i>>>28)+n|0,s+=(i^n^o)+l[4]+1272893353|0,s=(s<<11|s>>>21)+i|0,o+=(s^i^n)+l[7]-155497632|0,o=(o<<16|o>>>16)+s|0,n+=(o^s^i)+l[10]-1094730640|0,n=(n<<23|n>>>9)+o|0,i+=(n^o^s)+l[13]+681279174|0,i=(i<<4|i>>>28)+n|0,s+=(i^n^o)+l[0]-358537222|0,s=(s<<11|s>>>21)+i|0,o+=(s^i^n)+l[3]-722521979|0,o=(o<<16|o>>>16)+s|0,n+=(o^s^i)+l[6]+76029189|0,n=(n<<23|n>>>9)+o|0,i+=(n^o^s)+l[9]-640364487|0,i=(i<<4|i>>>28)+n|0,s+=(i^n^o)+l[12]-421815835|0,s=(s<<11|s>>>21)+i|0,o+=(s^i^n)+l[15]+530742520|0,o=(o<<16|o>>>16)+s|0,n+=(o^s^i)+l[2]-995338651|0,n=(n<<23|n>>>9)+o|0,i+=(o^(n|~s))+l[0]-198630844|0,i=(i<<6|i>>>26)+n|0,s+=(n^(i|~o))+l[7]+1126891415|0,s=(s<<10|s>>>22)+i|0,o+=(i^(s|~n))+l[14]-1416354905|0,o=(o<<15|o>>>17)+s|0,n+=(s^(o|~i))+l[5]-57434055|0,n=(n<<21|n>>>11)+o|0,i+=(o^(n|~s))+l[12]+1700485571|0,i=(i<<6|i>>>26)+n|0,s+=(n^(i|~o))+l[3]-1894986606|0,s=(s<<10|s>>>22)+i|0,o+=(i^(s|~n))+l[10]-1051523|0,o=(o<<15|o>>>17)+s|0,n+=(s^(o|~i))+l[1]-2054922799|0,n=(n<<21|n>>>11)+o|0,i+=(o^(n|~s))+l[8]+1873313359|0,i=(i<<6|i>>>26)+n|0,s+=(n^(i|~o))+l[15]-30611744|0,s=(s<<10|s>>>22)+i|0,o+=(i^(s|~n))+l[6]-1560198380|0,o=(o<<15|o>>>17)+s|0,n+=(s^(o|~i))+l[13]+1309151649|0,n=(n<<21|n>>>11)+o|0,i+=(o^(n|~s))+l[4]-145523070|0,i=(i<<6|i>>>26)+n|0,s+=(n^(i|~o))+l[11]-1120210379|0,s=(s<<10|s>>>22)+i|0,o+=(i^(s|~n))+l[2]+718787259|0,o=(o<<15|o>>>17)+s|0,n+=(s^(o|~i))+l[9]-343485551|0,n=(n<<21|n>>>11)+o|0,u[0]=i+u[0]|0,u[1]=n+u[1]|0,u[2]=o+u[2]|0,u[3]=s+u[3]|0}function c(u){var l=[],i;for(i=0;i<64;i+=4)l[i>>2]=u.charCodeAt(i)+(u.charCodeAt(i+1)<<8)+(u.charCodeAt(i+2)<<16)+(u.charCodeAt(i+3)<<24);return l}function h(u){var l=[],i;for(i=0;i<64;i+=4)l[i>>2]=u[i]+(u[i+1]<<8)+(u[i+2]<<16)+(u[i+3]<<24);return l}function y(u){var l=u.length,i=[1732584193,-271733879,-1732584194,271733878],n,o,s,b,_,N;for(n=64;n<=l;n+=64)p(i,c(u.substring(n-64,n)));for(u=u.substring(n-64),o=u.length,s=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],n=0;n<o;n+=1)s[n>>2]|=u.charCodeAt(n)<<(n%4<<3);if(s[n>>2]|=128<<(n%4<<3),n>55)for(p(i,s),n=0;n<16;n+=1)s[n]=0;return b=l*8,b=b.toString(16).match(/(.*?)(.{0,8})$/),_=parseInt(b[2],16),N=parseInt(b[1],16)||0,s[14]=_,s[15]=N,p(i,s),i}function d(u){var l=u.length,i=[1732584193,-271733879,-1732584194,271733878],n,o,s,b,_,N;for(n=64;n<=l;n+=64)p(i,h(u.subarray(n-64,n)));for(u=n-64<l?u.subarray(n-64):new Uint8Array(0),o=u.length,s=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],n=0;n<o;n+=1)s[n>>2]|=u[n]<<(n%4<<3);if(s[n>>2]|=128<<(n%4<<3),n>55)for(p(i,s),n=0;n<16;n+=1)s[n]=0;return b=l*8,b=b.toString(16).match(/(.*?)(.{0,8})$/),_=parseInt(b[2],16),N=parseInt(b[1],16)||0,s[14]=_,s[15]=N,p(i,s),i}function g(u){var l="",i;for(i=0;i<4;i+=1)l+=e[u>>i*8+4&15]+e[u>>i*8&15];return l}function m(u){var l;for(l=0;l<u.length;l+=1)u[l]=g(u[l]);return u.join("")}m(y("hello"))!=="5d41402abc4b2a76b9719d911017c592"&&(r=function(u,l){var i=(u&65535)+(l&65535),n=(u>>16)+(l>>16)+(i>>16);return n<<16|i&65535}),typeof ArrayBuffer<"u"&&!ArrayBuffer.prototype.slice&&(function(){function u(l,i){return l=l|0||0,l<0?Math.max(l+i,0):Math.min(l,i)}ArrayBuffer.prototype.slice=function(l,i){var n=this.byteLength,o=u(l,n),s=n,b,_,N,he;return i!==t&&(s=u(i,n)),o>s?new ArrayBuffer(0):(b=s-o,_=new ArrayBuffer(b),N=new Uint8Array(_),he=new Uint8Array(this,o,b),N.set(he),_)}})();function E(u){return/[\u0080-\uFFFF]/.test(u)&&(u=unescape(encodeURIComponent(u))),u}function I(u,l){var i=u.length,n=new ArrayBuffer(i),o=new Uint8Array(n),s;for(s=0;s<i;s+=1)o[s]=u.charCodeAt(s);return l?o:n}function w(u){return String.fromCharCode.apply(null,new Uint8Array(u))}function C(u,l,i){var n=new Uint8Array(u.byteLength+l.byteLength);return n.set(new Uint8Array(u)),n.set(new Uint8Array(l),u.byteLength),i?n:n.buffer}function O(u){var l=[],i=u.length,n;for(n=0;n<i-1;n+=2)l.push(parseInt(u.substr(n,2),16));return String.fromCharCode.apply(String,l)}function D(){this.reset()}return D.prototype.append=function(u){return this.appendBinary(E(u)),this},D.prototype.appendBinary=function(u){this._buff+=u,this._length+=u.length;var l=this._buff.length,i;for(i=64;i<=l;i+=64)p(this._hash,c(this._buff.substring(i-64,i)));return this._buff=this._buff.substring(i-64),this},D.prototype.end=function(u){var l=this._buff,i=l.length,n,o=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],s;for(n=0;n<i;n+=1)o[n>>2]|=l.charCodeAt(n)<<(n%4<<3);return this._finish(o,i),s=m(this._hash),u&&(s=O(s)),this.reset(),s},D.prototype.reset=function(){return this._buff="",this._length=0,this._hash=[1732584193,-271733879,-1732584194,271733878],this},D.prototype.getState=function(){return{buff:this._buff,length:this._length,hash:this._hash.slice()}},D.prototype.setState=function(u){return this._buff=u.buff,this._length=u.length,this._hash=u.hash,this},D.prototype.destroy=function(){delete this._hash,delete this._buff,delete this._length},D.prototype._finish=function(u,l){var i=l,n,o,s;if(u[i>>2]|=128<<(i%4<<3),i>55)for(p(this._hash,u),i=0;i<16;i+=1)u[i]=0;n=this._length*8,n=n.toString(16).match(/(.*?)(.{0,8})$/),o=parseInt(n[2],16),s=parseInt(n[1],16)||0,u[14]=o,u[15]=s,p(this._hash,u)},D.hash=function(u,l){return D.hashBinary(E(u),l)},D.hashBinary=function(u,l){var i=y(u),n=m(i);return l?O(n):n},D.ArrayBuffer=function(){this.reset()},D.ArrayBuffer.prototype.append=function(u){var l=C(this._buff.buffer,u,!0),i=l.length,n;for(this._length+=u.byteLength,n=64;n<=i;n+=64)p(this._hash,h(l.subarray(n-64,n)));return this._buff=n-64<i?new Uint8Array(l.buffer.slice(n-64)):new Uint8Array(0),this},D.ArrayBuffer.prototype.end=function(u){var l=this._buff,i=l.length,n=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],o,s;for(o=0;o<i;o+=1)n[o>>2]|=l[o]<<(o%4<<3);return this._finish(n,i),s=m(this._hash),u&&(s=O(s)),this.reset(),s},D.ArrayBuffer.prototype.reset=function(){return this._buff=new Uint8Array(0),this._length=0,this._hash=[1732584193,-271733879,-1732584194,271733878],this},D.ArrayBuffer.prototype.getState=function(){var u=D.prototype.getState.call(this);return u.buff=w(u.buff),u},D.ArrayBuffer.prototype.setState=function(u){return u.buff=I(u.buff,!0),D.prototype.setState.call(this,u)},D.ArrayBuffer.prototype.destroy=D.prototype.destroy,D.ArrayBuffer.prototype._finish=D.prototype._finish,D.ArrayBuffer.hash=function(u,l){var i=d(new Uint8Array(u)),n=m(i);return l?O(n):n},D})});var X=ye((an,Fe)=>{"use strict";Fe.exports={}});async function Tt(t){let r=(await Promise.resolve().then(()=>H(Oe(),1))).default,e=new r.ArrayBuffer,a=2097152;for(let p=0;p<t.size;p+=a){let c=Math.min(p+a,t.size);e.append(await t.slice(p,c).arrayBuffer())}return{md5:e.end()}}async function St(t){let{createHash:r}=await Promise.resolve().then(()=>H(X(),1)),e=r("md5");return e.update(t),{md5:e.digest("hex")}}async function Rt(t){let{createHash:r}=await Promise.resolve().then(()=>H(X(),1)),{createReadStream:e}=await Promise.resolve().then(()=>H(X(),1));return new Promise((a,p)=>{let c=r("md5"),h=e(t);h.on("error",y=>p(f.file(`Failed to read file for MD5: ${y.message}`,{filePath:t}))),h.on("data",y=>c.update(y)),h.on("end",()=>a({md5:c.digest("hex")}))})}async function M(t){if(t instanceof Blob)return Tt(t);if(typeof Buffer<"u"&&Buffer.isBuffer(t))return St(t);if(typeof t=="string")return Rt(t);throw f.business("Invalid input for MD5 calculation")}var W=P(()=>{"use strict";R()});function Q(t){return t.replace(/\\/g,"/").replace(/\/+/g,"/").replace(/^\/+/,"")}var Ge=P(()=>{"use strict"});function ke(t,r={}){if(r.flatten===!1)return t.map(a=>({path:Q(a),name:ie(a)}));let e=bt(t);return t.map(a=>{let p=Q(a);if(e){let c=e.endsWith("/")?e:`${e}/`;p.startsWith(c)&&(p=p.substring(c.length))}return p||(p=ie(a)),{path:p,name:ie(a)}})}function bt(t){if(!t.length)return"";let e=t.map(c=>Q(c)).map(c=>c.split("/")),a=[],p=Math.min(...e.map(c=>c.length));for(let c=0;c<p-1;c++){let h=e[0][c];if(e.every(y=>y[c]===h))a.push(h);else break}return a.join("/")}function ie(t){return t.split(/[/\\]/).pop()||t}var se=P(()=>{"use strict";Ge()});function Pn(t){oe=t}function wt(){return typeof process<"u"&&process.versions&&process.versions.node?"node":typeof window<"u"||typeof self<"u"?"browser":"unknown"}function ze(){return oe||wt()}var oe,ae=P(()=>{"use strict";oe=null});function le(t,r=1){if(t===0)return"0 Bytes";let e=1024,a=["Bytes","KB","MB","GB"],p=Math.floor(Math.log(t)/Math.log(e));return`${parseFloat((t/e**p).toFixed(r))} ${a[p]}`}function pe(t){if(De(t))return{valid:!1,reason:"File name contains unsafe characters"};if(t.startsWith(" ")||t.endsWith(" "))return{valid:!1,reason:"File name cannot start/end with spaces"};if(t.endsWith("."))return{valid:!1,reason:"File name cannot end with dots"};let r=/^(CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])(\.|$)/i,e=t.split("/").pop()||t;return r.test(e)?{valid:!1,reason:"File name uses a reserved system name"}:t.includes("..")?{valid:!1,reason:"File name contains path traversal pattern"}:{valid:!0}}function xn(t,r){let e=[],a=[],p=[];if(t.length===0){let d={file:"(no files)",message:"At least one file must be provided"};return e.push(d),{files:[],validFiles:[],errors:e,warnings:[],canDeploy:!1}}for(let d of t)if(K(d.name))return e.push({file:d.name,message:"Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder"}),{files:t.map(g=>({...g,status:S.VALIDATION_FAILED,statusMessage:"Unbuilt project detected"})),validFiles:[],errors:e,warnings:[],canDeploy:!1};if(t.length>r.maxFilesCount){let d={file:`(${t.length} files)`,message:`File count (${t.length}) exceeds limit of ${r.maxFilesCount}`};return e.push(d),{files:t.map(g=>({...g,status:S.VALIDATION_FAILED,statusMessage:d.message})),validFiles:[],errors:e,warnings:[],canDeploy:!1}}let c=0;for(let d of t){let g=S.READY,m="Ready for upload",E=d.name?pe(d.name):{valid:!1,reason:"File name cannot be empty"};if(d.status===S.PROCESSING_ERROR)g=S.VALIDATION_FAILED,m=d.statusMessage||"File failed during processing",e.push({file:d.name,message:m});else if(d.size===0){g=S.EXCLUDED,m="File is empty (0 bytes) and cannot be deployed due to storage limitations",a.push({file:d.name,message:m}),p.push({...d,status:g,statusMessage:m});continue}else d.size<0?(g=S.VALIDATION_FAILED,m="File size must be positive",e.push({file:d.name,message:m})):!d.name||d.name.trim().length===0?(g=S.VALIDATION_FAILED,m="File name cannot be empty",e.push({file:d.name||"(empty)",message:m})):d.name.includes("\0")?(g=S.VALIDATION_FAILED,m="File name contains invalid characters (null byte)",e.push({file:d.name,message:m})):E.valid?V(d.name)?(g=S.VALIDATION_FAILED,m=`File extension not allowed: "${d.name}"`,e.push({file:d.name,message:m})):d.size>r.maxFileSize?(g=S.VALIDATION_FAILED,m=`File size (${le(d.size)}) exceeds limit of ${le(r.maxFileSize)}`,e.push({file:d.name,message:m})):(c+=d.size,c>r.maxTotalSize&&(g=S.VALIDATION_FAILED,m=`Total size would exceed limit of ${le(r.maxTotalSize)}`,e.push({file:d.name,message:m}))):(g=S.VALIDATION_FAILED,m=E.reason||"Invalid file name",e.push({file:d.name,message:m}));p.push({...d,status:g,statusMessage:m})}e.length>0&&(p=p.map(d=>d.status===S.EXCLUDED?d:{...d,status:S.VALIDATION_FAILED,statusMessage:d.status===S.VALIDATION_FAILED?d.statusMessage:"Deployment failed due to validation errors in bundle"}));let h=e.length===0?p.filter(d=>d.status===S.READY):[],y=e.length===0;return{files:p,validFiles:h,errors:e,warnings:a,canDeploy:y}}function Pt(t){return t.filter(r=>r.status===S.READY)}function Nn(t){return Pt(t).length>0}var ue=P(()=>{"use strict";R()});function Ve(t){return _t.test(t)}var Lt,_t,Ke=P(()=>{"use strict";Lt=["^npm-debug\\.log$","^\\..*\\.swp$","^\\.DS_Store$","^\\.AppleDouble$","^\\.LSOverride$","^Icon\\r$","^\\._.*","^\\.Spotlight-V100(?:$|\\/)","\\.Trashes","^__MACOSX$","~$","^Thumbs\\.db$","^ehthumbs\\.db$","^[Dd]esktop\\.ini$","@eaDir$"],_t=new RegExp(Lt.join("|"))});function je(t,r){if(!t||t.length===0)return[];if(!r?.allowUnbuilt&&t.find(a=>a&&K(a)))throw f.business("Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder");return t.filter(e=>{if(!e)return!1;let a=e.replace(/\\/g,"/").split("/").filter(Boolean);if(a.length===0)return!0;let p=a[a.length-1];if(Ve(p))return!1;for(let h of a)if(h!==".well-known"&&(h.startsWith(".")||h.length>255))return!1;let c=a.slice(0,-1);for(let h of c)if(xt.some(y=>h.toLowerCase()===y.toLowerCase()))return!1;return!0})}var xt,ce=P(()=>{"use strict";R();Ke();xt=["__MACOSX",".Trashes",".fseventsd",".Spotlight-V100"]});function Ye(t,r){if(t.includes("\0")||t.includes("/../")||t.startsWith("../")||t.endsWith("/.."))throw f.business(`Security error: Unsafe file path "${t}" for file: ${r}`)}function qe(t,r){let e=pe(t);if(!e.valid)throw f.business(e.reason||"Invalid file name");if(V(t))throw f.business(`File extension not allowed: "${r}"`)}var de=P(()=>{"use strict";R();ue()});var We={};rt(We,{processFilesForBrowser:()=>Xe});async function Xe(t,r={},e){if(ze()!=="browser")throw f.business("processFilesForBrowser can only be called in a browser environment.");let a=t.map(E=>E.webkitRelativePath||E.name),p=r.build||r.prerender,c=ke(a,{flatten:r.pathDetect!==!1}),h=c.map(E=>E.path),y=new Set(je(h,{allowUnbuilt:p})),d=[];for(let E=0;E<t.length;E++)y.has(h[E])&&d.push({file:t[E],deployPath:c[E].path});if(d.length===0)return[];if(p){let E=[];for(let I=0;I<d.length;I++){let{file:w,deployPath:C}=d[I];if(w.size===0)continue;let{md5:O}=await M(w);E.push({path:C,content:w,size:w.size,md5:O})}return E}if(!e)throw f.config("Platform limits not provided. processFilesForBrowser requires the limits argument for deploy-mode validation \u2014 pass `ship.getLimits()` result.");let g=[],m=0;for(let E=0;E<d.length;E++){let{file:I,deployPath:w}=d[E];if(Ye(w,I.name),I.size===0)continue;if(qe(w,I.name),I.size>e.maxFileSize)throw f.business(`File ${I.name} is too large. Maximum allowed size is ${e.maxFileSize/(1024*1024)}MB.`);if(m+=I.size,m>e.maxTotalSize)throw f.business(`Total deploy size is too large. Maximum allowed is ${e.maxTotalSize/(1024*1024)}MB.`);let{md5:C}=await M(I);g.push({path:w,content:I,size:I.size,md5:C})}if(g.length>e.maxFilesCount)throw f.business(`Too many files to deploy. Maximum allowed is ${e.maxFilesCount} files.`);return g}var fe=P(()=>{"use strict";R();se();ae();ce();W();de()});R();R();R();var Y=class{constructor(){this.handlers=new Map}on(r,e){this.handlers.has(r)||this.handlers.set(r,new Set),this.handlers.get(r)?.add(e)}off(r,e){let a=this.handlers.get(r);a&&(a.delete(e),a.size===0&&this.handlers.delete(r))}emit(r,...e){let a=this.handlers.get(r);if(!a)return;let p=Array.from(a);for(let c of p)try{c(...e)}catch(h){a.delete(c),r!=="error"&&setTimeout(()=>{let y=h instanceof Error?h:new Error(String(h));this.emit("error",y,String(r))},0)}}};R();R();function U(t){if(t==null)return;if(t.length===0)return t;if(t.length>v.MAX_COUNT)throw f.validation(`Maximum ${v.MAX_COUNT} labels allowed`);let r=t.map((a,p)=>{if(typeof a!="string")throw f.validation(`Label at index ${p} must be a string`);let c=a.trim().toLowerCase();if(c.length<v.MIN_LENGTH)throw f.validation(`Labels must be at least ${v.MIN_LENGTH} characters long`);if(c.length>v.MAX_LENGTH)throw f.validation(`Labels must be no more than ${v.MAX_LENGTH} characters long`);if(!Le.test(c))throw f.validation(`Labels must start and end with alphanumeric characters, with optional separators (${v.SEPARATORS}) between segments`);return c}),e=[...new Set(r)];if(e.length!==r.length)throw f.validation("Duplicate labels are not allowed");return e}async function _e(t){let r=t.find(p=>p.path===x||p.path===`/${x}`);if(!r)return;let e=r.content,a=typeof e.text=="function"?await e.text():r.content.toString("utf8");Ie(a)}var gt=3e4,xe=3e5,Et=3e5,At=xe+Et,Dt="sdk";function re(t){let r=new URLSearchParams;t?.limit!==void 0&&r.set("limit",String(t.limit)),t?.cursor!==void 0&&r.set("cursor",t.cursor);let e=r.toString();return e?`?${e}`:""}var q=class extends Y{constructor(e){super();this.globalHeaders={};this.apiUrl=e.apiUrl||te,this.getAuthHeadersCallback=e.getAuthHeaders,this.session=e.session??!1,this.caller=e.caller,this.timeout=e.timeout??gt,this.deployTimeout=e.timeout??xe,this.deployBuildTimeout=e.timeout??At,this.fetch=e.fetch??globalThis.fetch.bind(globalThis),this.createDeployBody=e.createDeployBody,this.deployEndpoint=e.deployEndpoint||T.DEPLOYMENTS}setGlobalHeaders(e){this.globalHeaders=e}async executeRequest(e,a,p,c=this.timeout){let h=()=>{};try{let y=await this.mergeHeaders(a.headers),d=this.createTimeoutSignal(a.signal,c);h=d.cleanup;let g={...a,headers:y,credentials:this.session&&!y.Authorization?"include":void 0,signal:d.signal};this.emit("request",e,g);let m=await this.fetch(e,g);if(h(),!m.ok)throw await f.fromHttpResponse(m,p);return this.emit("response",this.safeClone(m),e),{data:await this.parseResponse(this.safeClone(m)),status:m.status}}catch(y){h();let d=f.fromFetchError(y,p);throw this.emit("error",d,e),d}}async request(e,a,p,c){let{data:h}=await this.executeRequest(e,a,p,c);return h}async requestWithStatus(e,a,p){return this.executeRequest(e,a,p)}async mergeHeaders(e={}){return{...this.globalHeaders,...this.caller?{[$.HEADER]:this.caller}:{},...await this.getAuthHeadersCallback(),...e}}createTimeoutSignal(e,a=this.timeout){let p=new AbortController,c=setTimeout(()=>p.abort(),a);if(e){let h=()=>p.abort();e.addEventListener("abort",h),e.aborted&&p.abort()}return{signal:p.signal,cleanup:()=>clearTimeout(c)}}safeClone(e){try{return e.clone()}catch{return e}}async parseResponse(e){if(!(e.headers.get("Content-Length")==="0"||e.status===204))return e.json()}async deploy(e,a={}){if(!e.length)throw f.business("No files to deploy");for(let g of e)if(!g.md5)throw f.file(`MD5 checksum missing for file: ${g.path}`,{filePath:g.path});ne(a.password);let p=Ee(a.idempotencyKey),c=U(a.labels);await _e(e);let h=a.build||a.prerender||a.spa?{build:a.build,prerender:a.prerender,spa:a.spa}:void 0,{body:y,headers:d}=await this.createDeployBody(e,{labels:c,via:a.via??Dt,password:a.password,flags:h,captcha:a.captcha});return this.request(`${this.apiUrl}${this.deployEndpoint}`,{method:"POST",body:y,headers:p?{...d,[z.HEADER]:p}:d,signal:a.signal||null},"Deploy",a.build||a.prerender?this.deployBuildTimeout:this.deployTimeout)}async listDeployments(e){return this.request(`${this.apiUrl}${T.DEPLOYMENTS}${re(e)}`,{method:"GET"},"List deployments")}async getDeployment(e){return this.request(`${this.apiUrl}${T.DEPLOYMENT(encodeURIComponent(e))}`,{method:"GET"},"Get deployment")}async updateDeploymentLabels(e,a){let p=U(a);return this.request(`${this.apiUrl}${T.DEPLOYMENT(encodeURIComponent(e))}`,{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({labels:p})},"Update deployment labels")}async deleteDeployment(e){return this.request(`${this.apiUrl}${T.DEPLOYMENT(encodeURIComponent(e))}`,{method:"DELETE"},"Delete deployment")}async setDomain(e,a,p){let c=U(p),h={};a&&(h.deployment=a),c!==void 0&&(h.labels=c);let{data:y,status:d}=await this.requestWithStatus(`${this.apiUrl}${T.DOMAIN(encodeURIComponent(e))}`,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify(h)},"Set domain");return{...y,isCreate:d===201}}async listDomains(e){return this.request(`${this.apiUrl}${T.DOMAINS}${re(e)}`,{method:"GET"},"List domains")}async getDomain(e){return this.request(`${this.apiUrl}${T.DOMAIN(encodeURIComponent(e))}`,{method:"GET"},"Get domain")}async deleteDomain(e){return this.request(`${this.apiUrl}${T.DOMAIN(encodeURIComponent(e))}`,{method:"DELETE"},"Delete domain")}async verifyDomain(e){return this.request(`${this.apiUrl}${T.DOMAIN_VERIFY(encodeURIComponent(e))}`,{method:"POST"},"Verify domain")}async getDomainDns(e){return this.request(`${this.apiUrl}${T.DOMAIN_DNS(encodeURIComponent(e))}`,{method:"GET"},"Get domain DNS")}async getDomainRecords(e){return this.request(`${this.apiUrl}${T.DOMAIN_RECORDS(encodeURIComponent(e))}`,{method:"GET"},"Get domain records")}async getDomainShare(e){return this.request(`${this.apiUrl}${T.DOMAIN_SHARE(encodeURIComponent(e))}`,{method:"GET"},"Get domain share")}async validateDomain(e){return this.request(`${this.apiUrl}${T.DOMAINS_VALIDATE}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({domain:e})},"Validate domain")}async createToken(e,a){let p=U(a),c={};return e!==void 0&&(c.ttl=e),p!==void 0&&(c.labels=p),this.request(`${this.apiUrl}${T.TOKENS}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(c)},"Create token")}async listTokens(e){return this.request(`${this.apiUrl}${T.TOKENS}${re(e)}`,{method:"GET"},"List tokens")}async deleteToken(e){return this.request(`${this.apiUrl}${T.TOKEN(encodeURIComponent(e))}`,{method:"DELETE"},"Delete token")}async getToken(e){return this.request(`${this.apiUrl}${T.TOKEN(encodeURIComponent(e))}`,{method:"GET"},"Get token")}async getAccount(){return this.request(`${this.apiUrl}${T.ACCOUNT}`,{method:"GET"},"Get account")}async getLimits(){return this.request(`${this.apiUrl}${T.LIMITS}`,{method:"GET"},"Get limits")}async ping(){return this.request(`${this.apiUrl}${T.PING}`,{method:"GET"},"Ping")}async checkSPA(e,a={}){let p=e.find(d=>d.path===j.INDEX_FILE||d.path===`/${j.INDEX_FILE}`);if(!p||p.size>j.MAX_INDEX_BYTES)return!1;let c;if(typeof Buffer<"u"&&Buffer.isBuffer(p.content))c=p.content.toString("utf-8");else if(typeof Blob<"u"&&p.content instanceof Blob)c=await p.content.text();else if(typeof File<"u"&&p.content instanceof File)c=await p.content.text();else return!1;let h={files:e.map(d=>d.path),index:c};return(await this.request(`${this.apiUrl}${T.SPA_CHECK}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(h)},"SPA check")).isSPA}};R();R();W();async function It(){let t=JSON.stringify(Re,null,2),r;typeof Buffer<"u"?r=Buffer.from(t,"utf-8"):r=new Blob([t],{type:"application/json"});let{md5:e}=await M(r);return{path:x,content:r,size:t.length,md5:e}}async function Ce(t,r,e){if(e.spaDetect===!1||e.spa||e.build||e.prerender||t.some(a=>a.path===x))return t;try{if(await r.checkSPA(t,e)){let p=await It();return[...t,p]}}catch{}return t}function $e(t){let{getApi:r,ensureInit:e,processInput:a}=t;return{upload:async(p,c={})=>{if(await e(),!a)throw f.config("processInput function is not provided.");let h=r(),y=await a(p,c);return y=await Ce(y,h,c),h.deploy(y,c)},list:async p=>(await e(),r().listDeployments(p)),get:async p=>(await e(),r().getDeployment(p)),set:async(p,c)=>(await e(),r().updateDeploymentLabels(p,c.labels)),delete:async p=>(await e(),r().deleteDeployment(p))}}function Ue(t){let{getApi:r,ensureInit:e}=t;return{set:async(a,p={})=>(await e(),r().setDomain(a,p.deployment,p.labels)),list:async a=>(await e(),r().listDomains(a)),get:async a=>(await e(),r().getDomain(a)),delete:async a=>(await e(),r().deleteDomain(a)),verify:async a=>(await e(),r().verifyDomain(a)),validate:async a=>(await e(),r().validateDomain(a)),dns:async a=>(await e(),r().getDomainDns(a)),records:async a=>(await e(),r().getDomainRecords(a)),share:async a=>(await e(),r().getDomainShare(a))}}function Me(t){let{getApi:r,ensureInit:e}=t;return{get:async()=>(await e(),r().getAccount())}}function Be(t){let{getApi:r,ensureInit:e}=t;return{create:async(a={})=>(await e(),r().createToken(a.ttl,a.labels)),list:async a=>(await e(),r().listTokens(a)),get:async a=>(await e(),r().getToken(a)),delete:async a=>(await e(),r().deleteToken(a))}}var J=class{constructor(r={}){this.initPromise=null;this.platformLimits=null;this.credential=null;if(r={...r,apiUrl:r.apiUrl||void 0,token:r.token||void 0,caller:r.caller||void 0},this.clientOptions=r,r.caller!==void 0&&we(r.caller),r.token&&r.session)throw f.config("Provide either `token` or `session`, not both.");typeof r.token=="string"?(ee(r.token),this.credential=r.token):r.token&&(this.credential=r.token),this.http=new q({...r,getAuthHeaders:()=>this.getAuthHeaders(),createDeployBody:this.getDeployBodyCreator()});let e={getApi:()=>this.http,ensureInit:()=>this.ensureInitialized()};this.deployments=$e({...e,processInput:(a,p)=>this.processInput(a,p)}),this.domains=Ue(e),this.account=Me(e),this.tokens=Be(e)}async ensureInitialized(){return this.initPromise||(this.initPromise=this.fetchPlatformLimits()),this.initPromise}async fetchPlatformLimits(){try{this.platformLimits=await this.http.getLimits()}catch(r){throw this.initPromise=null,r}}async ping(){return await this.ensureInitialized(),this.http.ping()}async deploy(r,e){return this.deployments.upload(r,e)}async whoami(){return this.account.get()}async getLimits(){return this.platformLimits?this.platformLimits:(await this.ensureInitialized(),this.platformLimits)}on(r,e){this.http.on(r,e)}off(r,e){this.http.off(r,e)}setHeaders(r){this.http.setGlobalHeaders(r)}clearHeaders(){this.http.setGlobalHeaders({})}setToken(r){if(this.clientOptions.session)throw f.config("Provide either `token` or `session`, not both.");if(typeof r=="string"){if(!r)throw f.business("Invalid token provided. Token must be a non-empty string.");ee(r),this.credential=r;return}if(typeof r!="function")throw f.business("Invalid token provided. Token must be a non-empty string or a provider function.");this.credential=r}async getAuthHeaders(){if(this.credential===null)return{};let r=typeof this.credential=="function"?await this.credential():this.credential;if(!r)throw f.authentication("Token provider returned no token.");if(typeof r!="string")throw f.authentication("Token provider returned a non-string value.");return{Authorization:`Bearer ${r}`}}};R();async function He(t,r={}){let{labels:e,via:a,password:p,flags:c,captcha:h}=r,y=new FormData,d=[];for(let g of t){if(!(g.content instanceof File||g.content instanceof Blob))throw f.file(`Unsupported file.content type for browser: ${g.path}`,{filePath:g.path});if(!g.md5)throw f.file(`File missing md5 checksum: ${g.path}`,{filePath:g.path});let m=new File([g.content],g.path,{type:"application/octet-stream"});y.append(L.FILES,m),d.push(g.md5)}return y.append(L.CHECKSUMS,JSON.stringify(d)),e&&e.length>0&&y.append(L.LABELS,JSON.stringify(e)),a&&y.append(L.VIA,a),p&&y.append(L.PASSWORD,p),c?.build&&y.append(L.BUILD,"true"),c?.prerender&&y.append(L.PRERENDER,"true"),c?.spa&&y.append(L.SPA,"true"),h&&y.append(L.CAPTCHA,h),{body:y,headers:{}}}R();R();se();ae();ue();ce();W();de();function Hn(t,r,e,a=!0){let p=t===1?r:e;return a?`${t} ${p}`:p}fe();var me=class extends J{async deploy(r,e){return super.deploy(r,e)}async processInput(r,e){if(!Array.isArray(r)||!r.every(p=>p instanceof File))throw f.business("Invalid input type for browser environment. Expected File[].");if(r.length===0)throw f.business("No files to deploy.");let{processFilesForBrowser:a}=await Promise.resolve().then(()=>(fe(),We));return a(r,e,this.platformLimits??void 0)}getDeployBodyCreator(){return He}},ur=me;export{Te as API_KEY,T as API_PATHS,Ut as AUTH_BASE_PATH,Ct as AccountPlan,q as ApiHttp,ge as AuthMethod,ut as BLOCKED_EXTENSIONS,$ as CALLER,te as DEFAULT_API,x as DEPLOYMENT_CONFIG_FILENAME,L as DEPLOY_FIELDS,Se as DEPLOY_TOKEN,vt as DeploymentStatus,st as DeploymentVia,Ot as DomainStatus,A as ErrorType,S as FILE_VALIDATION_STATUS,S as FileValidationStatus,z as IDEMPOTENCY_KEY_CONSTRAINTS,xt as JUNK_DIRECTORIES,v as LABEL_CONSTRAINTS,Le as LABEL_PATTERN,kt as MY_API_KEY_URL,Mt as OAuthScope,k as PASSWORD_CONSTRAINTS,zt as PUBLIC_DEPLOYMENT_TTL_SECONDS,Gt as SHIP_ENV,j as SPA_CHECK_CONSTRAINTS,Re as SPA_DEFAULT_CONFIG,me as Ship,f as ShipError,F as TokenKind,ft as UNBUILT_PROJECT_MARKERS,dt as UNSAFE_FILENAME_CHARS,$t as WEB_FILE_ACCEPT,Pn as __setTestEnvironment,Nn as allValidFilesReady,Ie as assertShipJsonSyntax,M as calculateMD5,mt as classifyToken,Me as createAccountResource,$e as createDeploymentResource,Ue as createDomainResource,Be as createTokenResource,ur as default,Xt as deserializeLabels,Kt as extractSubdomain,je as filterJunk,le as formatFileSize,jt as generateDeploymentUrl,Yt as generateDomainUrl,ze as getENV,Pt as getValidFiles,K as hasUnbuiltMarker,De as hasUnsafeChars,V as isBlockedExtension,Vt as isCustomDomain,Ht as isDeployment,Pe as isPlatformDomain,Ae as isShipError,Ft as normalizeVia,ke as optimizeDeployPaths,Hn as pluralize,Xe as processFilesForBrowser,qt as serializeLabels,ht as validateApiKey,Bt as validateApiUrl,we as validateCaller,qe as validateDeployFile,Ye as validateDeployPath,yt as validateDeployToken,pe as validateFileName,xn as validateFiles,Ee as validateIdempotencyKey,ne as validatePassword,ee as validateToken};
 //# sourceMappingURL=browser.js.map