@shipstatic/ship 2.2.0-beta.1 → 2.2.0-beta.5

package/dist/index.d.cts

@@ -788,12 +788,30 @@ declare class ShipError extends Error {
      *
      * Routing:
      * - Already a `ShipError` → returned as-is (caller's intent preserved)
-     * - `AbortError` → `ShipError.cancelled(...)`
+     * - `AbortError` → `ShipError.cancelled(...)` — someone stopped it on purpose
+     * - `TimeoutError` → `ShipError.network(...)` — a deadline expired, so
+     *   nothing was exchanged; the message names the timeout
      * - A transport failure → `ShipError.network(...)` — see `isTransportFailure`
      *   for what each runtime offers as evidence
      * - Any other `Error` → `ShipError(Api, ...)` (no HTTP status — fetch never reached the server)
      * - Anything else (string, undefined, etc.) → `ShipError(Api, ...)`
      *
+     * **Abort and timeout are read from `name` BEFORE any `instanceof Error`
+     * gate.** A `DOMException` satisfies that gate in every runtime measured
+     * (Node, Bun, Chromium, Firefox, WebKit, workerd — all six), but the
+     * inheritance is a comparatively recent spec change and this classification
+     * has no reason to depend on it: `name` is where the meaning lives, and
+     * reading it first costs nothing. The suite plants a non-`Error`
+     * `DOMException` shape to hold the arm, since no runtime on the table
+     * produces one.
+     *
+     * A caller's own `AbortSignal.timeout()` is the reachable source of
+     * `TimeoutError` — and the two are NOT interchangeable per runtime: WebKit
+     * reports a fired `AbortSignal.timeout()` as `AbortError`, so on Safari a
+     * deadline is indistinguishable from a cancellation and lands on
+     * `Cancelled`. Recorded rather than worked around; `Cancelled` is honest
+     * there, since the caller's signal is what stopped it.
+     *
      * The optional `operationName` is composed into the message for context:
      * `"Get account was cancelled"`, `"Get account failed: ..."`. Defaults to
      * `"Request"` when omitted.
@@ -1865,8 +1883,31 @@ interface ShipClientOptions {
     /**
      * Timeout in milliseconds for every API request made by this client
      * instance. Defaults to 30 seconds.
+     *
+     * With retries, this is the ceiling on an ATTEMPT rather than on the wall
+     * clock — each attempt is an honest request and deserves the ceiling you
+     * named, and {@link ShipClientOptions.maxRetries} is the lever on the total.
+     * For a hard overall deadline, pass your own `signal`
+     * (`AbortSignal.timeout(ms)`): the client never retries past a signal you
+     * supplied.
      */
     timeout?: number | undefined;
+    /**
+     * How many times to retry a failed request. Defaults to 2 (three attempts);
+     * `0` disables retrying entirely.
+     *
+     * Retried: transport failures (including a timeout — nothing was exchanged
+     * either way) and 500/502/503/504, with full-jitter exponential backoff.
+     *
+     * NOT retried, each deliberately: a maintenance 503 (a state, not a fault —
+     * its message says when to come back), 429 (the rate limiter has just
+     * answered), anything stopped by a `signal` you supplied, and any request
+     * that cannot be safely repeated — `PUT`/`DELETE` are excluded outright, and
+     * other non-`GET` methods retry only when they carry an `Idempotency-Key`,
+     * which is what lets a deploy replay its stored result instead of creating a
+     * second one.
+     */
+    maxRetries?: number | undefined;
     /**
      * When true, the client authenticates with the first-party cookie session
      * (`AuthMethod.SESSION`) — requests are sent with `credentials: 'include'`
@@ -1991,6 +2032,7 @@ declare class ApiHttp extends SimpleEvents {
     private readonly session;
     private readonly caller;
     private readonly timeout;
+    private readonly maxRetries;
     private readonly deployTimeout;
     private readonly deployBuildTimeout;
     private readonly fetch;
@@ -2004,9 +2046,36 @@ declare class ApiHttp extends SimpleEvents {
      */
     setGlobalHeaders(headers: Record<string, string>): void;
     /**
-     * Execute HTTP request with timeout, events, and error handling
+     * Execute an HTTP request, retrying the failures that are worth retrying.
+     *
+     * The loop lives here because `attemptOnce` is already the single wrap point
+     * for headers, the timeout signal, the events and error normalization — so
+     * an attempt is a whole request and nothing has to be undone between two.
+     *
+     * **Events stay honest across attempts**: `request` and `error` fire per
+     * attempt, so a consumer counting requests sees what actually went out;
+     * `response` fires once, on the one that worked.
+     *
+     * **The caller's `timeout` governs an ATTEMPT, not the wall clock.** Each
+     * attempt is an honest request and deserves the ceiling the caller named;
+     * `maxRetries` is the lever on the total. A caller who wants a hard overall
+     * deadline passes their own `signal` — see `isRetryable` for why that ends
+     * the loop even when it is a timeout.
      */
     private executeRequest;
+    /**
+     * Is this failure worth another attempt?
+     *
+     * Two axes, and both must say yes: what went wrong, and whether the request
+     * is one that may be sent twice.
+     */
+    private isRetryable;
+    /** Did this request carry the header that makes a repeat safe? */
+    private hasIdempotencyKey;
+    /**
+     * One attempt: headers, timeout signal, events, and error normalization.
+     */
+    private attemptOnce;
     /**
      * Simple request - returns data only
      */

package/dist/index.d.ts

@@ -788,12 +788,30 @@ declare class ShipError extends Error {
      *
      * Routing:
      * - Already a `ShipError` → returned as-is (caller's intent preserved)
-     * - `AbortError` → `ShipError.cancelled(...)`
+     * - `AbortError` → `ShipError.cancelled(...)` — someone stopped it on purpose
+     * - `TimeoutError` → `ShipError.network(...)` — a deadline expired, so
+     *   nothing was exchanged; the message names the timeout
      * - A transport failure → `ShipError.network(...)` — see `isTransportFailure`
      *   for what each runtime offers as evidence
      * - Any other `Error` → `ShipError(Api, ...)` (no HTTP status — fetch never reached the server)
      * - Anything else (string, undefined, etc.) → `ShipError(Api, ...)`
      *
+     * **Abort and timeout are read from `name` BEFORE any `instanceof Error`
+     * gate.** A `DOMException` satisfies that gate in every runtime measured
+     * (Node, Bun, Chromium, Firefox, WebKit, workerd — all six), but the
+     * inheritance is a comparatively recent spec change and this classification
+     * has no reason to depend on it: `name` is where the meaning lives, and
+     * reading it first costs nothing. The suite plants a non-`Error`
+     * `DOMException` shape to hold the arm, since no runtime on the table
+     * produces one.
+     *
+     * A caller's own `AbortSignal.timeout()` is the reachable source of
+     * `TimeoutError` — and the two are NOT interchangeable per runtime: WebKit
+     * reports a fired `AbortSignal.timeout()` as `AbortError`, so on Safari a
+     * deadline is indistinguishable from a cancellation and lands on
+     * `Cancelled`. Recorded rather than worked around; `Cancelled` is honest
+     * there, since the caller's signal is what stopped it.
+     *
      * The optional `operationName` is composed into the message for context:
      * `"Get account was cancelled"`, `"Get account failed: ..."`. Defaults to
      * `"Request"` when omitted.
@@ -1865,8 +1883,31 @@ interface ShipClientOptions {
     /**
      * Timeout in milliseconds for every API request made by this client
      * instance. Defaults to 30 seconds.
+     *
+     * With retries, this is the ceiling on an ATTEMPT rather than on the wall
+     * clock — each attempt is an honest request and deserves the ceiling you
+     * named, and {@link ShipClientOptions.maxRetries} is the lever on the total.
+     * For a hard overall deadline, pass your own `signal`
+     * (`AbortSignal.timeout(ms)`): the client never retries past a signal you
+     * supplied.
      */
     timeout?: number | undefined;
+    /**
+     * How many times to retry a failed request. Defaults to 2 (three attempts);
+     * `0` disables retrying entirely.
+     *
+     * Retried: transport failures (including a timeout — nothing was exchanged
+     * either way) and 500/502/503/504, with full-jitter exponential backoff.
+     *
+     * NOT retried, each deliberately: a maintenance 503 (a state, not a fault —
+     * its message says when to come back), 429 (the rate limiter has just
+     * answered), anything stopped by a `signal` you supplied, and any request
+     * that cannot be safely repeated — `PUT`/`DELETE` are excluded outright, and
+     * other non-`GET` methods retry only when they carry an `Idempotency-Key`,
+     * which is what lets a deploy replay its stored result instead of creating a
+     * second one.
+     */
+    maxRetries?: number | undefined;
     /**
      * When true, the client authenticates with the first-party cookie session
      * (`AuthMethod.SESSION`) — requests are sent with `credentials: 'include'`
@@ -1991,6 +2032,7 @@ declare class ApiHttp extends SimpleEvents {
     private readonly session;
     private readonly caller;
     private readonly timeout;
+    private readonly maxRetries;
     private readonly deployTimeout;
     private readonly deployBuildTimeout;
     private readonly fetch;
@@ -2004,9 +2046,36 @@ declare class ApiHttp extends SimpleEvents {
      */
     setGlobalHeaders(headers: Record<string, string>): void;
     /**
-     * Execute HTTP request with timeout, events, and error handling
+     * Execute an HTTP request, retrying the failures that are worth retrying.
+     *
+     * The loop lives here because `attemptOnce` is already the single wrap point
+     * for headers, the timeout signal, the events and error normalization — so
+     * an attempt is a whole request and nothing has to be undone between two.
+     *
+     * **Events stay honest across attempts**: `request` and `error` fire per
+     * attempt, so a consumer counting requests sees what actually went out;
+     * `response` fires once, on the one that worked.
+     *
+     * **The caller's `timeout` governs an ATTEMPT, not the wall clock.** Each
+     * attempt is an honest request and deserves the ceiling the caller named;
+     * `maxRetries` is the lever on the total. A caller who wants a hard overall
+     * deadline passes their own `signal` — see `isRetryable` for why that ends
+     * the loop even when it is a timeout.
      */
     private executeRequest;
+    /**
+     * Is this failure worth another attempt?
+     *
+     * Two axes, and both must say yes: what went wrong, and whether the request
+     * is one that may be sent twice.
+     */
+    private isRetryable;
+    /** Did this request carry the header that makes a repeat safe? */
+    private hasIdempotencyKey;
+    /**
+     * One attempt: headers, timeout signal, events, and error normalization.
+     */
+    private attemptOnce;
     /**
      * Simple request - returns data only
      */

package/dist/index.js

@@ -1,2 +1,2 @@
-var Ke=Object.defineProperty;var P=(n,t)=>()=>(n&&(t=n(n=0)),t);var je=(n,t)=>{for(var e in t)Ke(n,e,{get:t[e],enumerable:!0})};function Rt(n){if(!n||typeof n!="string")return;let t=n.trim().toLowerCase();return Object.values(Ye).includes(t)?t:void 0}function fe(n){if(n==null)return;if(typeof n!="string")throw a.validation("Idempotency key must be a string.");let t=n.trim();if(!t)throw a.validation("Idempotency key must not be empty.");if(t.length>B.MAX_LENGTH)throw a.validation(`Idempotency key must be at most ${B.MAX_LENGTH} characters.`);return t}function Je(n){return typeof n.code=="string"?!0:n instanceof TypeError&&n.message.includes("fetch")}function F(n){return n!==null&&typeof n=="object"&&"name"in n&&n.name==="ShipError"&&"status"in n}function Qe(n){let t=n.replace(/\\/g,"/").split("/").pop()??"",e=t.lastIndexOf(".");return e<=0||e===t.length-1?null:t.slice(e+1).toLowerCase()}function H(n,t){let e=Qe(n);return e===null?!1:Array.isArray(t)?t.includes(e):t.has(e)}function he(n){return et.test(n)}function G(n){return n.replace(/\\/g,"/").split("/").filter(Boolean).some(e=>J.has(e))}function tt(n){return n.startsWith(ye.PREFIX)?b.API_KEY:n.startsWith(ge.PREFIX)?b.DEPLOY_TOKEN:b.OPAQUE}function De(n){let t=n.charCodeAt(0)===65279?n.slice(1):n,e;try{e=JSON.parse(t)}catch(i){throw a.config(`invalid JSON format in config: ${i.message}`,{filePath:N})}if(e===null||typeof e!="object"||Array.isArray(e))throw a.config(`${N} must contain a JSON object`,{filePath:N})}function Ae(n,t,e){if(!n.startsWith(t.PREFIX))throw a.validation(`${e} must start with "${t.PREFIX}"`);if(n.length!==t.TOTAL_LENGTH)throw a.validation(`${e} must be ${t.TOTAL_LENGTH} characters total (${t.PREFIX} + ${t.HEX_LENGTH} hex chars)`);let i=n.slice(t.PREFIX.length);if(!new RegExp(`^[a-f0-9]{${t.HEX_LENGTH}}$`,"i").test(i))throw a.validation(`${e} must contain ${t.HEX_LENGTH} hexadecimal characters after "${t.PREFIX}" prefix`)}function nt(n){Ae(n,ye,"API key")}function it(n){Ae(n,ge,"Deploy token")}function Q(n){switch(tt(n)){case b.API_KEY:nt(n);return;case b.DEPLOY_TOKEN:it(n);return;case b.OPAQUE:if(!n)throw a.validation("Token must be a non-empty string")}}function Te(n){if(!n||n.length>_.MAX_LENGTH||!_.PATTERN.test(n))throw a.validation(`Caller must be 1-${_.MAX_LENGTH} characters: letters, digits, dots, underscores, or hyphens`)}function wt(n){try{let t=new URL(n);if(!["http:","https:"].includes(t.protocol))throw a.validation("API URL must use http:// or https:// protocol");if(t.pathname!=="/"&&t.pathname!=="")throw a.validation("API URL must not contain a path");if(t.search||t.hash)throw a.validation("API URL must not contain query parameters or fragments")}catch(t){throw F(t)?t:a.validation("API URL must be a valid URL")}}function xt(n){return/^[a-z]+-[a-z]+-[a-z0-9]{7}(\.[a-z0-9.-]+)?$/i.test(n)}function Se(n,t){return n.endsWith(`.${t}`)}function vt(n,t){return!Se(n,t)}function Ct(n,t){return Se(n,t)?n.slice(0,-(t.length+1)):null}function _t(n){return`https://${n}`}function Ft(n){return`https://${n}`}function $t(n){return!n||n.length===0?null:JSON.stringify(n)}function kt(n){if(!n)return[];try{let t=JSON.parse(n);return Array.isArray(t)?t:[]}catch{return[]}}function ee(n){if(n==null)return;if(typeof n!="string")throw a.validation("Password must be a string");let t=n.trim();if(t.length<M.MIN_LENGTH||t.length>M.MAX_LENGTH)throw a.validation(`Password must be between ${M.MIN_LENGTH} and ${M.MAX_LENGTH} characters`);return t}var Tt,Ye,St,B,It,f,I,d,qe,W,Xe,We,a,Ze,Pt,et,J,Nt,me,ye,ge,_,b,Lt,N,Ee,z,Z,$,bt,Ot,y,w,Re,M,g=P(()=>{"use strict";Tt={PENDING:"pending",SUCCESS:"success",FAILED:"failed",DELETING:"deleting"},Ye={WEB:"web",SDK:"sdk",CLI:"cli",MCP:"mcp",GIT:"git",N8N:"n8n",GPT:"gpt",VSC:"vsc"},St={PENDING:"pending",PARTIAL:"partial",SUCCESS:"success",PAUSED:"paused"},B={HEADER:"Idempotency-Key",MAX_LENGTH:256,WINDOW_SECONDS:1440*60};It={FREE:"free",STANDARD:"standard",SPONSORED:"sponsored",ENTERPRISE:"enterprise",SUSPENDED:"suspended",TERMINATING:"terminating",TERMINATED:"terminated"},f={DEPLOYMENTS:"/deployments",DEPLOYMENT:n=>`/deployments/${n}`,DEPLOYMENT_CONFIG:n=>`/deployments/${n}/config`,DOMAINS:"/domains",DOMAIN:n=>`/domains/${n}`,DOMAIN_VERIFY:n=>`/domains/${n}/verify`,DOMAIN_DNS:n=>`/domains/${n}/dns`,DOMAIN_RECORDS:n=>`/domains/${n}/records`,DOMAIN_SHARE:n=>`/domains/${n}/share`,DOMAIN_PROPAGATION:n=>`/domains/${n}/propagation`,DOMAINS_VALIDATE:"/domains/validate",TOKENS:"/tokens",TOKEN:n=>`/tokens/${n}`,ACCOUNT:"/account",ACCOUNT_KEY:"/account/key",ACCOUNT_CLAIM:"/account/claim",ACTIVITIES:"/activities",LABELS:"/labels",LIMITS:"/limits",PING:"/ping",SETUP:"/setup",SPA_CHECK:"/spa-check",UPLOAD:"/upload"},I={FILES:"files[]",CHECKSUMS:"checksums",LABELS:"labels",VIA:"via",PASSWORD:"password",BUILD:"build",PRERENDER:"prerender",SPA:"spa",CAPTCHA:"captcha"},d={Validation:"validation_failed",NotFound:"not_found",Forbidden:"forbidden",RateLimit:"rate_limit_exceeded",Authentication:"authentication_failed",Business:"business_logic_error",Api:"internal_server_error",Maintenance:"maintenance",Network:"network_error",Cancelled:"operation_cancelled",File:"file_error",Config:"config_error"},qe=new Set([d.Network,d.Cancelled,d.File,d.Config]),W={client:new Set([d.Business,d.Cancelled,d.Config,d.File,d.Forbidden,d.NotFound,d.RateLimit,d.Validation]),network:new Set([d.Network]),auth:new Set([d.Authentication])},Xe=new Set(Object.values(d).filter(n=>!qe.has(n))),We=200;a=class n extends Error{type;status;details;constructor(t,e,i,s){super(e),this.type=t,this.status=i,this.details=s,this.name="ShipError"}toResponse(){let t=this.details,e=this.type===d.Authentication&&t?.internal?void 0:this.details;return{error:this.type,message:this.message,status:this.status,details:e}}static async fromHttpResponse(t,e){let i,s,r;try{if(t.headers.get("content-type")?.includes("application/json")){let c=await t.json();if(c&&typeof c=="object"){let p=c;typeof p.message=="string"?i=p.message:typeof p.error=="string"&&(i=p.error),s=p.details,typeof p.error=="string"&&Xe.has(p.error)&&(r=p.error)}}else{let c=(await t.text()).trim();c&&!c.startsWith("<")&&c.length<=We&&(i=c)}}catch{}let l=t.headers.get("retry-after");if(l!==null){let o=l.trim(),c=/^\d+$/.test(o)?Number(o):Math.ceil((Date.parse(o)-Date.now())/1e3);if(Number.isFinite(c)&&c>=0){let p=s&&typeof s=="object"?s:{};p.retryAfter===void 0&&(s={...p,retryAfter:c})}}i=i||`${e||"Request"} failed with status ${t.status}`;let u=r??(t.status===401?d.Authentication:t.status===403?d.Forbidden:t.status===429?d.RateLimit:d.Api);return new n(u,i,t.status,s)}static fromFetchError(t,e){if(F(t))return t;let i=e||"Request";return t instanceof Error?t.name==="AbortError"?n.cancelled(`${i} was cancelled`):Je(t)?n.network(`${i} failed: ${t.message}`,{cause:t}):new n(d.Api,`${i} failed: ${t.message}`):new n(d.Api,`${i} failed: Unknown error`)}static validation(t,e){return new n(d.Validation,t,400,e)}static notFound(t,e){let i=e?`${t} ${e} not found`:`${t} not found`;return new n(d.NotFound,i,404)}static forbidden(t,e){return new n(d.Forbidden,t,403,e)}static rateLimit(t="Too many requests",e){return new n(d.RateLimit,t,429,e)}static authentication(t="Authentication required",e){return new n(d.Authentication,t,401,e)}static business(t,e=400,i){return new n(d.Business,t,e,i)}static network(t,e){return new n(d.Network,t,void 0,e)}static cancelled(t,e){return new n(d.Cancelled,t,void 0,e)}static file(t,e){return new n(d.File,t,void 0,e)}static config(t,e){return new n(d.Config,t,void 0,e)}static api(t,e=500,i){return new n(d.Api,t,e,i)}static maintenance(t,e){return new n(d.Maintenance,t,503,e)}isClientError(){return W.client.has(this.type)?!0:this.status!==void 0&&this.status>=400&&this.status<500}isNetworkError(){return W.network.has(this.type)}isAuthError(){return W.auth.has(this.type)}isType(t){return this.type===t}};Ze=["html","htm","xhtml","xml","txt","md","markdown","pdf","csv","json","jsonc","webmanifest","map","toml","yaml","yml","rss","atom","css","scss","sass","less","js","mjs","cjs","jsx","ts","tsx","wasm","vue","svelte","png","jpg","jpeg","gif","webp","avif","svg","ico","bmp","tif","tiff","heic","heif","woff","woff2","ttf","otf","eot","mp3","wav","ogg","oga","opus","m4a","aac","flac","weba","mp4","webm","ogv","mov","m4v","avi","glb","gltf","usdz","vtt","srt","zip"],Pt=Ze.map(n=>`.${n}`).join(","),et=/[\x00-\x1f\x7f#?%\\<>"]/;J=new Set(["node_modules","package.json"]);Nt="/auth",me={SESSION:"session",API_KEY:"apiKey",TOKEN:"token",AGENT:"agent",OAUTH:"oauth",WEBHOOK:"webhook",SYSTEM:"system"},ye={PREFIX:"ship-",HEX_LENGTH:32,TOTAL_LENGTH:37,HINT_LENGTH:4},ge={PREFIX:"deploy-",HEX_LENGTH:32,TOTAL_LENGTH:39},_={HEADER:"X-Caller",MAX_LENGTH:128,PATTERN:/^[a-zA-Z0-9._-]+$/},b={API_KEY:me.API_KEY,DEPLOY_TOKEN:me.TOKEN,OPAQUE:"opaque"};Lt={ACCOUNT_READ:"account:read",DEPLOYMENTS_READ:"deployments:read",DEPLOYMENTS_WRITE:"deployments:write",DOMAINS_READ:"domains:read",DOMAINS_WRITE:"domains:write"},N="ship.json",Ee={rewrites:[{source:"/(.*)",destination:"/index.html"}]},z={INDEX_FILE:"index.html",MAX_INDEX_BYTES:100*1024};Z="https://api.shipstatic.com",$={TOKEN:"SHIP_TOKEN",API_URL:"SHIP_API_URL"},bt="https://my.shipstatic.com/api-key",Ot=4320*60,y={PENDING:"pending",PROCESSING_ERROR:"processing_error",EXCLUDED:"excluded",VALIDATION_FAILED:"validation_failed",READY:"ready"};w={MIN_LENGTH:3,MAX_LENGTH:25,MAX_COUNT:10,SEPARATORS:"._-"},Re=/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;M={MIN_LENGTH:6,MAX_LENGTH:128}});async function lt(n){let t=(await import("spark-md5")).default,e=new t.ArrayBuffer,i=2097152;for(let s=0;s<n.size;s+=i){let r=Math.min(s+i,n.size);e.append(await n.slice(s,r).arrayBuffer())}return{md5:e.end()}}async function pt(n){let{createHash:t}=await import("crypto"),e=t("md5");return e.update(n),{md5:e.digest("hex")}}async function ct(n){let{createHash:t}=await import("crypto"),{createReadStream:e}=await import("fs");return new Promise((i,s)=>{let r=t("md5"),l=e(n);l.on("error",u=>s(a.file(`Failed to read file for MD5: ${u.message}`,{filePath:n}))),l.on("data",u=>r.update(u)),l.on("end",()=>i({md5:r.digest("hex")}))})}async function j(n){if(n instanceof Blob)return lt(n);if(typeof Buffer<"u"&&Buffer.isBuffer(n))return pt(n);if(typeof n=="string")return ct(n);throw a.business("Invalid input for MD5 calculation")}var Y=P(()=>{"use strict";g()});function on(n){ne=n}function dt(){return typeof process<"u"&&process.versions&&process.versions.node?"node":typeof window<"u"||typeof self<"u"?"browser":"unknown"}function O(){return ne||dt()}var ne,U=P(()=>{"use strict";ne=null});function $e(n){if(!n||n.length===0)return"";let t=n.filter(r=>r&&typeof r=="string").map(r=>r.replace(/\\/g,"/"));if(t.length===0)return"";if(t.length===1)return t[0];let e=t.map(r=>r.split("/").filter(Boolean)),i=[],s=Math.min(...e.map(r=>r.length));for(let r=0;r<s;r++){let l=e[0][r];if(e.every(u=>u[r]===l))i.push(l);else break}return i.join("/")}function X(n){return n.replace(/\\/g,"/").replace(/\/+/g,"/").replace(/^\/+/,"")}var ie=P(()=>{"use strict"});function ke(n,t={}){if(t.flatten===!1)return n.map(i=>({path:X(i),name:se(i)}));let e=ht(n);return n.map(i=>{let s=X(i);if(e){let r=e.endsWith("/")?e:`${e}/`;s.startsWith(r)&&(s=s.substring(r.length))}return s||(s=se(i)),{path:s,name:se(i)}})}function ht(n){if(!n.length)return"";let e=n.map(r=>X(r)).map(r=>r.split("/")),i=[],s=Math.min(...e.map(r=>r.length));for(let r=0;r<s-1;r++){let l=e[0][r];if(e.every(u=>u[r]===l))i.push(l);else break}return i.join("/")}function se(n){return n.split(/[/\\]/).pop()||n}var re=P(()=>{"use strict";ie()});function oe(n,t=1){if(n===0)return"0 Bytes";let e=1024,i=["Bytes","KB","MB","GB"],s=Math.floor(Math.log(n)/Math.log(e));return`${parseFloat((n/e**s).toFixed(t))} ${i[s]}`}function ae(n){if(he(n))return{valid:!1,reason:"File name contains unsafe characters"};if(n.startsWith(" ")||n.endsWith(" "))return{valid:!1,reason:"File name cannot start/end with spaces"};if(n.endsWith("."))return{valid:!1,reason:"File name cannot end with dots"};let t=/^(CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])(\.|$)/i,e=n.split("/").pop()||n;return t.test(e)?{valid:!1,reason:"File name uses a reserved system name"}:n.includes("..")?{valid:!1,reason:"File name contains path traversal pattern"}:{valid:!0}}function Rn(n,t){let e=[],i=[],s=[];if(n.length===0){let o={file:"(no files)",message:"At least one file must be provided"};return e.push(o),{files:[],validFiles:[],errors:e,warnings:[],canDeploy:!1}}for(let o of n)if(G(o.name))return e.push({file:o.name,message:"Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder"}),{files:n.map(c=>({...c,status:y.VALIDATION_FAILED,statusMessage:"Unbuilt project detected"})),validFiles:[],errors:e,warnings:[],canDeploy:!1};if(n.length>t.maxFilesCount){let o={file:`(${n.length} files)`,message:`File count (${n.length}) exceeds limit of ${t.maxFilesCount}`};return e.push(o),{files:n.map(c=>({...c,status:y.VALIDATION_FAILED,statusMessage:o.message})),validFiles:[],errors:e,warnings:[],canDeploy:!1}}let r=0;for(let o of n){let c=y.READY,p="Ready for upload",R=o.name?ae(o.name):{valid:!1,reason:"File name cannot be empty"};if(o.status===y.PROCESSING_ERROR)c=y.VALIDATION_FAILED,p=o.statusMessage||"File failed during processing",e.push({file:o.name,message:p});else if(o.size===0){c=y.EXCLUDED,p="File is empty (0 bytes) and cannot be deployed due to storage limitations",i.push({file:o.name,message:p}),s.push({...o,status:c,statusMessage:p});continue}else o.size<0?(c=y.VALIDATION_FAILED,p="File size must be positive",e.push({file:o.name,message:p})):!o.name||o.name.trim().length===0?(c=y.VALIDATION_FAILED,p="File name cannot be empty",e.push({file:o.name||"(empty)",message:p})):o.name.includes("\0")?(c=y.VALIDATION_FAILED,p="File name contains invalid characters (null byte)",e.push({file:o.name,message:p})):R.valid?H(o.name,t.blockedExtensions??[])?(c=y.VALIDATION_FAILED,p=`File extension not allowed: "${o.name}"`,e.push({file:o.name,message:p})):o.size>t.maxFileSize?(c=y.VALIDATION_FAILED,p=`File size (${oe(o.size)}) exceeds limit of ${oe(t.maxFileSize)}`,e.push({file:o.name,message:p})):(r+=o.size,r>t.maxTotalSize&&(c=y.VALIDATION_FAILED,p=`Total size would exceed limit of ${oe(t.maxTotalSize)}`,e.push({file:o.name,message:p}))):(c=y.VALIDATION_FAILED,p=R.reason||"Invalid file name",e.push({file:o.name,message:p}));s.push({...o,status:c,statusMessage:p})}e.length>0&&(s=s.map(o=>o.status===y.EXCLUDED?o:{...o,status:y.VALIDATION_FAILED,statusMessage:o.status===y.VALIDATION_FAILED?o.statusMessage:"Deployment failed due to validation errors in bundle"}));let l=e.length===0?s.filter(o=>o.status===y.READY):[],u=e.length===0;return{files:s,validFiles:l,errors:e,warnings:i,canDeploy:u}}function yt(n){return n.filter(t=>t.status===y.READY)}function In(n){return yt(n).length>0}var le=P(()=>{"use strict";g()});import{isJunk as gt}from"junk";function Ue(n,t){if(!n||n.length===0)return[];if(!t?.allowUnbuilt&&n.find(i=>i&&G(i)))throw a.business("Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder");return n.filter(e=>{if(!e)return!1;let i=e.replace(/\\/g,"/").split("/").filter(Boolean);if(i.length===0)return!0;let s=i[i.length-1];if(gt(s))return!1;for(let l of i)if(l!==".well-known"&&(l.startsWith(".")||l.length>255))return!1;let r=i.slice(0,-1);for(let l of r)if(Et.some(u=>l.toLowerCase()===u.toLowerCase()))return!1;return!0})}var Et,pe=P(()=>{"use strict";g();Et=["__MACOSX",".Trashes",".fseventsd",".Spotlight-V100"]});function Me(n,t){if(n.includes("\0")||n.includes("/../")||n.startsWith("../")||n.endsWith("/.."))throw a.business(`Security error: Unsafe file path "${n}" for file: ${t}`)}function Be(n,t,e){let i=ae(n);if(!i.valid)throw a.business(i.reason||"Invalid file name");if(H(n,e))throw a.business(`File extension not allowed: "${t}"`)}var ce=P(()=>{"use strict";g();le()});var ze={};je(ze,{processFilesForNode:()=>Ge});import*as D from"fs";import*as A from"path";function He(n,t=new Set){let e=[],i=D.realpathSync(n);if(t.has(i))return e;t.add(i);let s=D.readdirSync(n);for(let r of s){let l=A.join(n,r),u=D.statSync(l);if(u.isDirectory()){let o=He(l,t);e.push(...o)}else u.isFile()&&e.push(l)}return e}async function Ge(n,t={},e){if(O()!=="node")throw a.business("processFilesForNode can only be called in Node.js environment.");for(let m of n){let h=A.resolve(m);try{if(D.statSync(h).isDirectory()){let T=D.readdirSync(h).find(S=>J.has(S));if(T)throw a.business(`"${T}" detected \u2014 deploy your build output (dist/, build/, out/), not the project folder`)}}catch(T){if(F(T))throw T}}let i=n.flatMap(m=>{let h=A.resolve(m);try{return D.statSync(h).isDirectory()?He(h):[h]}catch{throw a.file(`Path does not exist: ${m}`,{filePath:m})}}),s=[...new Set(i)],r=n.map(m=>A.resolve(m)),l=$e(r.map(m=>{try{return D.statSync(m).isDirectory()?m:A.dirname(m)}catch{return A.dirname(m)}})),u=s.map(m=>{if(l&&l.length>0){let h=A.relative(l,m);if(h&&typeof h=="string"&&!h.startsWith(".."))return h.replace(/\\/g,"/")}return A.basename(m)}),c=ke(u,{flatten:t.pathDetect!==!1}).map(m=>m.path),p=new Set(Ue(c));if(p.size===0)return[];let R=[],v=[];for(let m=0;m<s.length;m++)p.has(c[m])&&(R.push(s[m]),v.push(c[m]));let x=[],L=0;if(!e)throw a.config("Platform limits not provided. processFilesForNode requires the limits argument \u2014 pass `ship.getLimits()` result.");let E=e.blockedExtensions??[];for(let m=0;m<R.length;m++){let h=R[m],T=v[m];try{Me(T,h);let S=D.statSync(h);if(S.size===0)continue;if(Be(T,h,E),S.size>e.maxFileSize)throw a.business(`File ${h} is too large. Maximum allowed size is ${e.maxFileSize/(1024*1024)}MB.`);if(L+=S.size,L>e.maxTotalSize)throw a.business(`Total deploy size is too large. Maximum allowed is ${e.maxTotalSize/(1024*1024)}MB.`);let C=D.readFileSync(h),{md5:Ve}=await j(C);x.push({path:T,content:C,size:C.length,md5:Ve})}catch(S){if(F(S))throw S;let C=S instanceof Error?S.message:String(S);throw a.file(`Failed to read file "${h}": ${C}`,{filePath:h})}}if(x.length>e.maxFilesCount)throw a.business(`Too many files to deploy. Maximum allowed is ${e.maxFilesCount} files.`);return x}var ue=P(()=>{"use strict";g();re();U();pe();Y();ie();ce()});g();g();g();var V=class{constructor(){this.handlers=new Map}on(t,e){this.handlers.has(t)||this.handlers.set(t,new Set),this.handlers.get(t)?.add(e)}off(t,e){let i=this.handlers.get(t);i&&(i.delete(e),i.size===0&&this.handlers.delete(t))}emit(t,...e){let i=this.handlers.get(t);if(!i)return;let s=Array.from(i);for(let r of s)try{r(...e)}catch(l){i.delete(r),t!=="error"&&setTimeout(()=>{let u=l instanceof Error?l:new Error(String(l));this.emit("error",u,String(t))},0)}}};g();g();function k(n){if(n==null)return;if(n.length===0)return n;if(n.length>w.MAX_COUNT)throw a.validation(`Maximum ${w.MAX_COUNT} labels allowed`);let t=n.map((i,s)=>{if(typeof i!="string")throw a.validation(`Label at index ${s} must be a string`);let r=i.trim().toLowerCase();if(r.length<w.MIN_LENGTH)throw a.validation(`Labels must be at least ${w.MIN_LENGTH} characters long`);if(r.length>w.MAX_LENGTH)throw a.validation(`Labels must be no more than ${w.MAX_LENGTH} characters long`);if(!Re.test(r))throw a.validation(`Labels must start and end with alphanumeric characters, with optional separators (${w.SEPARATORS}) between segments`);return r}),e=[...new Set(t)];if(e.length!==t.length)throw a.validation("Duplicate labels are not allowed");return e}async function Ie(n){let t=n.find(s=>s.path===N||s.path===`/${N}`);if(!t)return;let e=t.content,i=typeof e.text=="function"?await e.text():t.content.toString("utf8");De(i)}var st=3e4,Pe=3e5,rt=3e5,ot=Pe+rt,at="sdk";function te(n){let t=new URLSearchParams;n?.limit!==void 0&&t.set("limit",String(n.limit)),n?.cursor!==void 0&&t.set("cursor",n.cursor);let e=t.toString();return e?`?${e}`:""}var K=class extends V{constructor(e){super();this.globalHeaders={};this.apiUrl=e.apiUrl||Z,this.getAuthHeadersCallback=e.getAuthHeaders,this.session=e.session??!1,this.caller=e.caller,this.timeout=e.timeout??st,this.deployTimeout=e.timeout??Pe,this.deployBuildTimeout=e.timeout??ot,this.fetch=e.fetch??globalThis.fetch.bind(globalThis),this.createDeployBody=e.createDeployBody,this.deployEndpoint=e.deployEndpoint||f.DEPLOYMENTS}setGlobalHeaders(e){this.globalHeaders=e}async executeRequest(e,i,s,r=this.timeout){let l=()=>{};try{let u=await this.mergeHeaders(i.headers),o=this.createTimeoutSignal(i.signal,r);l=o.cleanup;let c={...i,headers:u,credentials:this.session&&!u.Authorization?"include":void 0,signal:o.signal};this.emit("request",e,c);let p=await this.fetch(e,c);if(l(),!p.ok)throw await a.fromHttpResponse(p,s);return this.emit("response",this.safeClone(p),e),{data:await this.parseResponse(this.safeClone(p)),status:p.status}}catch(u){l();let o=a.fromFetchError(u,s);throw this.emit("error",o,e),o}}async request(e,i,s,r){let{data:l}=await this.executeRequest(e,i,s,r);return l}async requestWithStatus(e,i,s){return this.executeRequest(e,i,s)}async mergeHeaders(e={}){return{...this.globalHeaders,...this.caller?{[_.HEADER]:this.caller}:{},...await this.getAuthHeadersCallback(),...e}}createTimeoutSignal(e,i=this.timeout){let s=new AbortController,r=setTimeout(()=>s.abort(),i);if(e){let l=()=>s.abort();e.addEventListener("abort",l),e.aborted&&s.abort()}return{signal:s.signal,cleanup:()=>clearTimeout(r)}}safeClone(e){try{return e.clone()}catch{return e}}async parseResponse(e){if(!(e.headers.get("Content-Length")==="0"||e.status===204))return e.json()}async deploy(e,i={}){if(!e.length)throw a.business("No files to deploy");for(let c of e)if(!c.md5)throw a.file(`MD5 checksum missing for file: ${c.path}`,{filePath:c.path});ee(i.password);let s=fe(i.idempotencyKey),r=k(i.labels);await Ie(e);let l=i.build||i.prerender||i.spa?{build:i.build,prerender:i.prerender,spa:i.spa}:void 0,{body:u,headers:o}=await this.createDeployBody(e,{labels:r,via:i.via??at,password:i.password,flags:l,captcha:i.captcha});return this.request(`${this.apiUrl}${this.deployEndpoint}`,{method:"POST",body:u,headers:s?{...o,[B.HEADER]:s}:o,signal:i.signal||null},"Deploy",i.build||i.prerender?this.deployBuildTimeout:this.deployTimeout)}async listDeployments(e){return this.request(`${this.apiUrl}${f.DEPLOYMENTS}${te(e)}`,{method:"GET"},"List deployments")}async getDeployment(e){return this.request(`${this.apiUrl}${f.DEPLOYMENT(encodeURIComponent(e))}`,{method:"GET"},"Get deployment")}async updateDeploymentLabels(e,i){let s=k(i);return this.request(`${this.apiUrl}${f.DEPLOYMENT(encodeURIComponent(e))}`,{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({labels:s})},"Update deployment labels")}async deleteDeployment(e){return this.request(`${this.apiUrl}${f.DEPLOYMENT(encodeURIComponent(e))}`,{method:"DELETE"},"Delete deployment")}async setDomain(e,i,s){let r=k(s),l={};i&&(l.deployment=i),r!==void 0&&(l.labels=r);let{data:u,status:o}=await this.requestWithStatus(`${this.apiUrl}${f.DOMAIN(encodeURIComponent(e))}`,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify(l)},"Set domain");return{...u,isCreate:o===201}}async listDomains(e){return this.request(`${this.apiUrl}${f.DOMAINS}${te(e)}`,{method:"GET"},"List domains")}async getDomain(e){return this.request(`${this.apiUrl}${f.DOMAIN(encodeURIComponent(e))}`,{method:"GET"},"Get domain")}async deleteDomain(e){return this.request(`${this.apiUrl}${f.DOMAIN(encodeURIComponent(e))}`,{method:"DELETE"},"Delete domain")}async verifyDomain(e){return this.request(`${this.apiUrl}${f.DOMAIN_VERIFY(encodeURIComponent(e))}`,{method:"POST"},"Verify domain")}async getDomainDns(e){return this.request(`${this.apiUrl}${f.DOMAIN_DNS(encodeURIComponent(e))}`,{method:"GET"},"Get domain DNS")}async getDomainRecords(e){return this.request(`${this.apiUrl}${f.DOMAIN_RECORDS(encodeURIComponent(e))}`,{method:"GET"},"Get domain records")}async getDomainShare(e){return this.request(`${this.apiUrl}${f.DOMAIN_SHARE(encodeURIComponent(e))}`,{method:"GET"},"Get domain share")}async validateDomain(e){return this.request(`${this.apiUrl}${f.DOMAINS_VALIDATE}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({domain:e})},"Validate domain")}async createToken(e,i){let s=k(i),r={};return e!==void 0&&(r.ttl=e),s!==void 0&&(r.labels=s),this.request(`${this.apiUrl}${f.TOKENS}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(r)},"Create token")}async listTokens(e){return this.request(`${this.apiUrl}${f.TOKENS}${te(e)}`,{method:"GET"},"List tokens")}async deleteToken(e){return this.request(`${this.apiUrl}${f.TOKEN(encodeURIComponent(e))}`,{method:"DELETE"},"Delete token")}async getToken(e){return this.request(`${this.apiUrl}${f.TOKEN(encodeURIComponent(e))}`,{method:"GET"},"Get token")}async getAccount(){return this.request(`${this.apiUrl}${f.ACCOUNT}`,{method:"GET"},"Get account")}async getLimits(){return this.request(`${this.apiUrl}${f.LIMITS}`,{method:"GET"},"Get limits")}async ping(){return this.request(`${this.apiUrl}${f.PING}`,{method:"GET"},"Ping")}async checkSPA(e,i={}){let s=e.find(o=>o.path===z.INDEX_FILE||o.path===`/${z.INDEX_FILE}`);if(!s||s.size>z.MAX_INDEX_BYTES)return!1;let r;if(typeof Buffer<"u"&&Buffer.isBuffer(s.content))r=s.content.toString("utf-8");else if(typeof Blob<"u"&&s.content instanceof Blob)r=await s.content.text();else if(typeof File<"u"&&s.content instanceof File)r=await s.content.text();else return!1;let l={files:e.map(o=>o.path),index:r};return(await this.request(`${this.apiUrl}${f.SPA_CHECK}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(l)},"SPA check")).isSPA}};g();g();Y();async function ut(){let n=JSON.stringify(Ee,null,2),t;typeof Buffer<"u"?t=Buffer.from(n,"utf-8"):t=new Blob([n],{type:"application/json"});let{md5:e}=await j(t);return{path:N,content:t,size:n.length,md5:e}}async function Ne(n,t,e){if(e.spaDetect===!1||e.spa||e.build||e.prerender||n.some(i=>i.path===N))return n;try{if(await t.checkSPA(n,e)){let s=await ut();return[...n,s]}}catch{}return n}function Le(n){let{getApi:t,ensureInit:e,processInput:i}=n;return{upload:async(s,r={})=>{if(await e(),!i)throw a.config("processInput function is not provided.");let l=t(),u=await i(s,r);return u=await Ne(u,l,r),l.deploy(u,r)},list:async s=>(await e(),t().listDeployments(s)),get:async s=>(await e(),t().getDeployment(s)),set:async(s,r)=>(await e(),t().updateDeploymentLabels(s,r.labels)),delete:async s=>(await e(),t().deleteDeployment(s))}}function we(n){let{getApi:t,ensureInit:e}=n;return{set:async(i,s={})=>(await e(),t().setDomain(i,s.deployment,s.labels)),list:async i=>(await e(),t().listDomains(i)),get:async i=>(await e(),t().getDomain(i)),delete:async i=>(await e(),t().deleteDomain(i)),verify:async i=>(await e(),t().verifyDomain(i)),validate:async i=>(await e(),t().validateDomain(i)),dns:async i=>(await e(),t().getDomainDns(i)),records:async i=>(await e(),t().getDomainRecords(i)),share:async i=>(await e(),t().getDomainShare(i))}}function xe(n){let{getApi:t,ensureInit:e}=n;return{get:async()=>(await e(),t().getAccount())}}function be(n){let{getApi:t,ensureInit:e}=n;return{create:async(i={})=>(await e(),t().createToken(i.ttl,i.labels)),list:async i=>(await e(),t().listTokens(i)),get:async i=>(await e(),t().getToken(i)),delete:async i=>(await e(),t().deleteToken(i))}}var q=class{constructor(t={}){this.initPromise=null;this.platformLimits=null;this.credential=null;if(t={...t,apiUrl:t.apiUrl||void 0,token:t.token||void 0,caller:t.caller||void 0},this.clientOptions=t,t.caller!==void 0&&Te(t.caller),t.token&&t.session)throw a.config("Provide either `token` or `session`, not both.");typeof t.token=="string"?(Q(t.token),this.credential=t.token):t.token&&(this.credential=t.token),this.http=new K({...t,getAuthHeaders:()=>this.getAuthHeaders(),createDeployBody:this.getDeployBodyCreator()});let e={getApi:()=>this.http,ensureInit:()=>this.ensureInitialized()};this.deployments=Le({...e,processInput:(i,s)=>this.processInput(i,s)}),this.domains=we(e),this.account=xe(e),this.tokens=be(e)}async ensureInitialized(){return this.initPromise||(this.initPromise=this.fetchPlatformLimits()),this.initPromise}async fetchPlatformLimits(){try{this.platformLimits=await this.http.getLimits()}catch(t){throw this.initPromise=null,t}}async ping(){return await this.ensureInitialized(),this.http.ping()}async deploy(t,e){return this.deployments.upload(t,e)}async whoami(){return this.account.get()}async getLimits(){return this.platformLimits?this.platformLimits:(await this.ensureInitialized(),this.platformLimits)}on(t,e){this.http.on(t,e)}off(t,e){this.http.off(t,e)}setHeaders(t){this.http.setGlobalHeaders(t)}clearHeaders(){this.http.setGlobalHeaders({})}setToken(t){if(this.clientOptions.session)throw a.config("Provide either `token` or `session`, not both.");if(typeof t=="string"){if(!t)throw a.business("Invalid token provided. Token must be a non-empty string.");Q(t),this.credential=t;return}if(typeof t!="function")throw a.business("Invalid token provided. Token must be a non-empty string or a provider function.");this.credential=t}async getAuthHeaders(){if(this.credential===null)return{};let t=typeof this.credential=="function"?await this.credential():this.credential;if(!t)throw a.authentication("Token provider returned no token.");if(typeof t!="string")throw a.authentication("Token provider returned a non-string value.");return{Authorization:`Bearer ${t}`}}};U();g();import{z as Ce}from"zod";import{z as Oe}from"zod";var ve={apiUrl:Oe.string().url().optional(),token:Oe.string().min(1).optional()};U();var mt=Ce.object(ve).strict(),ft={apiUrl:$.API_URL,token:$.TOKEN};function _e(){if(O()!=="node")return{};let n={apiUrl:process.env[$.API_URL]||void 0,token:process.env[$.TOKEN]||void 0};try{return mt.parse(n)}catch(t){if(t instanceof Ce.ZodError){let e=t.issues[0],i=e.path[0],s=(i&&ft[i])??"SHIP environment configuration";throw a.config(`Invalid ${s}: ${e.message}`)}throw a.config("Invalid environment configuration")}}g();async function Fe(n,t={}){let{FormData:e,File:i}=await import("formdata-node"),{FormDataEncoder:s}=await import("form-data-encoder"),{labels:r,via:l,password:u,flags:o,captcha:c}=t,p=new e,R=[];for(let E of n){if(!Buffer.isBuffer(E.content)&&!(typeof Blob<"u"&&E.content instanceof Blob))throw a.file(`Unsupported file.content type for Node.js: ${E.path}`,{filePath:E.path});if(!E.md5)throw a.file(`File missing md5 checksum: ${E.path}`,{filePath:E.path});let m=new i([E.content],E.path,{type:"application/octet-stream"});p.append(I.FILES,m),R.push(E.md5)}p.append(I.CHECKSUMS,JSON.stringify(R)),r&&r.length>0&&p.append(I.LABELS,JSON.stringify(r)),l&&p.append(I.VIA,l),u&&p.append(I.PASSWORD,u),o?.build&&p.append(I.BUILD,"true"),o?.prerender&&p.append(I.PRERENDER,"true"),o?.spa&&p.append(I.SPA,"true"),c&&p.append(I.CAPTCHA,c);let v=new s(p),x=[];for await(let E of v.encode())x.push(Buffer.from(E));let L=Buffer.concat(x);return{body:L.buffer.slice(L.byteOffset,L.byteOffset+L.byteLength),headers:{"Content-Type":v.contentType,"Content-Length":Buffer.byteLength(L).toString()}}}g();g();re();U();le();pe();Y();ce();function vn(n,t,e,i=!0){let s=n===1?t:e;return i?`${n} ${s}`:s}ue();var de=class extends q{constructor(t={}){if(O()!=="node")throw a.business("Node.js Ship class can only be used in Node.js environment.");let e=_e();super({...t,apiUrl:t.apiUrl||e.apiUrl,token:t.token||(t.session?void 0:e.token)})}async deploy(t,e){return super.deploy(t,e)}async processInput(t,e){let i=typeof t=="string"?[t]:t;if(!Array.isArray(i)||!i.every(r=>typeof r=="string"))throw a.business("Invalid input type for Node.js environment. Expected string or string[].");if(i.length===0)throw a.business("No files to deploy.");let{processFilesForNode:s}=await Promise.resolve().then(()=>(ue(),ze));return s(i,e,this.platformLimits??void 0)}getDeployBodyCreator(){return Fe}},Dt=de;export{ye as API_KEY,f as API_PATHS,Nt as AUTH_BASE_PATH,It as AccountPlan,K as ApiHttp,me as AuthMethod,_ as CALLER,Z as DEFAULT_API,N as DEPLOYMENT_CONFIG_FILENAME,I as DEPLOY_FIELDS,ge as DEPLOY_TOKEN,Tt as DeploymentStatus,Ye as DeploymentVia,St as DomainStatus,d as ErrorType,y as FILE_VALIDATION_STATUS,y as FileValidationStatus,B as IDEMPOTENCY_KEY_CONSTRAINTS,Et as JUNK_DIRECTORIES,w as LABEL_CONSTRAINTS,Re as LABEL_PATTERN,bt as MY_API_KEY_URL,Lt as OAuthScope,M as PASSWORD_CONSTRAINTS,Ot as PUBLIC_DEPLOYMENT_TTL_SECONDS,$ as SHIP_ENV,z as SPA_CHECK_CONSTRAINTS,Ee as SPA_DEFAULT_CONFIG,de as Ship,a as ShipError,b as TokenKind,J as UNBUILT_PROJECT_MARKERS,et as UNSAFE_FILENAME_CHARS,Pt as WEB_FILE_ACCEPT,on as __setTestEnvironment,In as allValidFilesReady,De as assertShipJsonSyntax,j as calculateMD5,tt as classifyToken,xe as createAccountResource,Le as createDeploymentResource,we as createDomainResource,be as createTokenResource,Dt as default,kt as deserializeLabels,Ct as extractSubdomain,Ue as filterJunk,oe as formatFileSize,_t as generateDeploymentUrl,Ft as generateDomainUrl,O as getENV,yt as getValidFiles,G as hasUnbuiltMarker,he as hasUnsafeChars,H as isBlockedExtension,vt as isCustomDomain,xt as isDeployment,Se as isPlatformDomain,F as isShipError,Rt as normalizeVia,ke as optimizeDeployPaths,vn as pluralize,Ge as processFilesForNode,$t as serializeLabels,nt as validateApiKey,wt as validateApiUrl,Te as validateCaller,Be as validateDeployFile,Me as validateDeployPath,it as validateDeployToken,ae as validateFileName,Rn as validateFiles,fe as validateIdempotencyKey,ee as validatePassword,Q as validateToken};
+var Ke=Object.defineProperty;var P=(n,t)=>()=>(n&&(t=n(n=0)),t);var je=(n,t)=>{for(var e in t)Ke(n,e,{get:t[e],enumerable:!0})};function Nt(n){if(!n||typeof n!="string")return;let t=n.trim().toLowerCase();return Object.values(Ye).includes(t)?t:void 0}function fe(n){if(n==null)return;if(typeof n!="string")throw l.validation("Idempotency key must be a string.");let t=n.trim();if(!t)throw l.validation("Idempotency key must not be empty.");if(t.length>F.MAX_LENGTH)throw l.validation(`Idempotency key must be at most ${F.MAX_LENGTH} characters.`);return t}function Je(n){let t=n.code;return t==="ERR_INVALID_URL"?!1:typeof t=="string"?!0:n instanceof TypeError?!/\burl\b/i.test(n.message):!1}function k(n){return n!==null&&typeof n=="object"&&"name"in n&&n.name==="ShipError"&&"status"in n}function Qe(n){let t=n.replace(/\\/g,"/").split("/").pop()??"",e=t.lastIndexOf(".");return e<=0||e===t.length-1?null:t.slice(e+1).toLowerCase()}function H(n,t){let e=Qe(n);return e===null?!1:Array.isArray(t)?t.includes(e):t.has(e)}function he(n){return et.test(n)}function G(n){return n.replace(/\\/g,"/").split("/").filter(Boolean).some(e=>J.has(e))}function tt(n){return n.startsWith(ye.PREFIX)?x.API_KEY:n.startsWith(ge.PREFIX)?x.DEPLOY_TOKEN:x.OPAQUE}function De(n){let t=n.charCodeAt(0)===65279?n.slice(1):n,e;try{e=JSON.parse(t)}catch(r){throw l.config(`invalid JSON format in config: ${r.message}`,{filePath:L})}if(e===null||typeof e!="object"||Array.isArray(e))throw l.config(`${L} must contain a JSON object`,{filePath:L})}function Te(n,t,e){if(!n.startsWith(t.PREFIX))throw l.validation(`${e} must start with "${t.PREFIX}"`);if(n.length!==t.TOTAL_LENGTH)throw l.validation(`${e} must be ${t.TOTAL_LENGTH} characters total (${t.PREFIX} + ${t.HEX_LENGTH} hex chars)`);let r=n.slice(t.PREFIX.length);if(!new RegExp(`^[a-f0-9]{${t.HEX_LENGTH}}$`,"i").test(r))throw l.validation(`${e} must contain ${t.HEX_LENGTH} hexadecimal characters after "${t.PREFIX}" prefix`)}function nt(n){Te(n,ye,"API key")}function rt(n){Te(n,ge,"Deploy token")}function Q(n){switch(tt(n)){case x.API_KEY:nt(n);return;case x.DEPLOY_TOKEN:rt(n);return;case x.OPAQUE:if(!n)throw l.validation("Token must be a non-empty string")}}function Ae(n){if(!n||n.length>_.MAX_LENGTH||!_.PATTERN.test(n))throw l.validation(`Caller must be 1-${_.MAX_LENGTH} characters: letters, digits, dots, underscores, or hyphens`)}function Ct(n){try{let t=new URL(n);if(!["http:","https:"].includes(t.protocol))throw l.validation("API URL must use http:// or https:// protocol");if(t.pathname!=="/"&&t.pathname!=="")throw l.validation("API URL must not contain a path");if(t.search||t.hash)throw l.validation("API URL must not contain query parameters or fragments")}catch(t){throw k(t)?t:l.validation("API URL must be a valid URL")}}function _t(n){return/^[a-z]+-[a-z]+-[a-z0-9]{7}(\.[a-z0-9.-]+)?$/i.test(n)}function Se(n,t){return n.endsWith(`.${t}`)}function $t(n,t){return!Se(n,t)}function Ut(n,t){return Se(n,t)?n.slice(0,-(t.length+1)):null}function Mt(n){return`https://${n}`}function Bt(n){return`https://${n}`}function Ht(n){return!n||n.length===0?null:JSON.stringify(n)}function Gt(n){if(!n)return[];try{let t=JSON.parse(n);return Array.isArray(t)?t:[]}catch{return[]}}function ee(n){if(n==null)return;if(typeof n!="string")throw l.validation("Password must be a string");let t=n.trim();if(t.length<B.MIN_LENGTH||t.length>B.MAX_LENGTH)throw l.validation(`Password must be between ${B.MIN_LENGTH} and ${B.MAX_LENGTH} characters`);return t}var Lt,Ye,wt,F,bt,f,I,d,qe,W,Xe,We,l,Ze,xt,et,J,vt,me,ye,ge,_,x,Ot,L,Ee,z,Z,$,Ft,kt,y,N,Re,B,g=P(()=>{"use strict";Lt={PENDING:"pending",SUCCESS:"success",FAILED:"failed",DELETING:"deleting"},Ye={WEB:"web",SDK:"sdk",CLI:"cli",MCP:"mcp",GIT:"git",N8N:"n8n",GPT:"gpt",VSC:"vsc"},wt={PENDING:"pending",PARTIAL:"partial",SUCCESS:"success",PAUSED:"paused"},F={HEADER:"Idempotency-Key",MAX_LENGTH:256,WINDOW_SECONDS:1440*60};bt={FREE:"free",STANDARD:"standard",SPONSORED:"sponsored",ENTERPRISE:"enterprise",SUSPENDED:"suspended",TERMINATING:"terminating",TERMINATED:"terminated"},f={DEPLOYMENTS:"/deployments",DEPLOYMENT:n=>`/deployments/${n}`,DEPLOYMENT_CONFIG:n=>`/deployments/${n}/config`,DOMAINS:"/domains",DOMAIN:n=>`/domains/${n}`,DOMAIN_VERIFY:n=>`/domains/${n}/verify`,DOMAIN_DNS:n=>`/domains/${n}/dns`,DOMAIN_RECORDS:n=>`/domains/${n}/records`,DOMAIN_SHARE:n=>`/domains/${n}/share`,DOMAIN_PROPAGATION:n=>`/domains/${n}/propagation`,DOMAINS_VALIDATE:"/domains/validate",TOKENS:"/tokens",TOKEN:n=>`/tokens/${n}`,ACCOUNT:"/account",ACCOUNT_KEY:"/account/key",ACCOUNT_CLAIM:"/account/claim",ACTIVITIES:"/activities",LABELS:"/labels",LIMITS:"/limits",PING:"/ping",SETUP:"/setup",SPA_CHECK:"/spa-check",UPLOAD:"/upload"},I={FILES:"files[]",CHECKSUMS:"checksums",LABELS:"labels",VIA:"via",PASSWORD:"password",BUILD:"build",PRERENDER:"prerender",SPA:"spa",CAPTCHA:"captcha"},d={Validation:"validation_failed",NotFound:"not_found",Forbidden:"forbidden",RateLimit:"rate_limit_exceeded",Authentication:"authentication_failed",Business:"business_logic_error",Api:"internal_server_error",Maintenance:"maintenance",Network:"network_error",Cancelled:"operation_cancelled",File:"file_error",Config:"config_error"},qe=new Set([d.Network,d.Cancelled,d.File,d.Config]),W={client:new Set([d.Business,d.Cancelled,d.Config,d.File,d.Forbidden,d.NotFound,d.RateLimit,d.Validation]),network:new Set([d.Network]),auth:new Set([d.Authentication])},Xe=new Set(Object.values(d).filter(n=>!qe.has(n))),We=200;l=class n extends Error{type;status;details;constructor(t,e,r,i){super(e),this.type=t,this.status=r,this.details=i,this.name="ShipError"}toResponse(){let t=this.details,e=this.type===d.Authentication&&t?.internal?void 0:this.details;return{error:this.type,message:this.message,status:this.status,details:e}}static async fromHttpResponse(t,e){let r,i,s;try{if(t.headers.get("content-type")?.includes("application/json")){let p=await t.json();if(p&&typeof p=="object"){let c=p;typeof c.message=="string"?r=c.message:typeof c.error=="string"&&(r=c.error),i=c.details,typeof c.error=="string"&&Xe.has(c.error)&&(s=c.error)}}else{let p=(await t.text()).trim();p&&!p.startsWith("<")&&p.length<=We&&(r=p)}}catch{}let a=t.headers.get("retry-after");if(a!==null){let o=a.trim(),p=/^\d+$/.test(o)?Number(o):Math.ceil((Date.parse(o)-Date.now())/1e3);if(Number.isFinite(p)&&p>=0){let c=i&&typeof i=="object"?i:{};c.retryAfter===void 0&&(i={...c,retryAfter:p})}}r=r||`${e||"Request"} failed with status ${t.status}`;let u=s??(t.status===401?d.Authentication:t.status===403?d.Forbidden:t.status===429?d.RateLimit:d.Api);return new n(u,r,t.status,i)}static fromFetchError(t,e){if(k(t))return t;let r=e||"Request",i=t?.name;return i==="AbortError"?n.cancelled(`${r} was cancelled`):i==="TimeoutError"?n.network(`${r} timed out`,{cause:t}):t instanceof Error?Je(t)?n.network(`${r} failed: ${t.message}`,{cause:t}):new n(d.Api,`${r} failed: ${t.message}`):new n(d.Api,`${r} failed: Unknown error`)}static validation(t,e){return new n(d.Validation,t,400,e)}static notFound(t,e){let r=e?`${t} ${e} not found`:`${t} not found`;return new n(d.NotFound,r,404)}static forbidden(t,e){return new n(d.Forbidden,t,403,e)}static rateLimit(t="Too many requests",e){return new n(d.RateLimit,t,429,e)}static authentication(t="Authentication required",e){return new n(d.Authentication,t,401,e)}static business(t,e=400,r){return new n(d.Business,t,e,r)}static network(t,e){return new n(d.Network,t,void 0,e)}static cancelled(t,e){return new n(d.Cancelled,t,void 0,e)}static file(t,e){return new n(d.File,t,void 0,e)}static config(t,e){return new n(d.Config,t,void 0,e)}static api(t,e=500,r){return new n(d.Api,t,e,r)}static maintenance(t,e){return new n(d.Maintenance,t,503,e)}isClientError(){return W.client.has(this.type)?!0:this.status!==void 0&&this.status>=400&&this.status<500}isNetworkError(){return W.network.has(this.type)}isAuthError(){return W.auth.has(this.type)}isType(t){return this.type===t}};Ze=["html","htm","xhtml","xml","txt","md","markdown","pdf","csv","json","jsonc","webmanifest","map","toml","yaml","yml","rss","atom","css","scss","sass","less","js","mjs","cjs","jsx","ts","tsx","wasm","vue","svelte","png","jpg","jpeg","gif","webp","avif","svg","ico","bmp","tif","tiff","heic","heif","woff","woff2","ttf","otf","eot","mp3","wav","ogg","oga","opus","m4a","aac","flac","weba","mp4","webm","ogv","mov","m4v","avi","glb","gltf","usdz","vtt","srt","zip"],xt=Ze.map(n=>`.${n}`).join(","),et=/[\x00-\x1f\x7f#?%\\<>"]/;J=new Set(["node_modules","package.json"]);vt="/auth",me={SESSION:"session",API_KEY:"apiKey",TOKEN:"token",AGENT:"agent",OAUTH:"oauth",WEBHOOK:"webhook",SYSTEM:"system"},ye={PREFIX:"ship-",HEX_LENGTH:32,TOTAL_LENGTH:37,HINT_LENGTH:4},ge={PREFIX:"deploy-",HEX_LENGTH:32,TOTAL_LENGTH:39},_={HEADER:"X-Caller",MAX_LENGTH:128,PATTERN:/^[a-zA-Z0-9._-]+$/},x={API_KEY:me.API_KEY,DEPLOY_TOKEN:me.TOKEN,OPAQUE:"opaque"};Ot={ACCOUNT_READ:"account:read",DEPLOYMENTS_READ:"deployments:read",DEPLOYMENTS_WRITE:"deployments:write",DOMAINS_READ:"domains:read",DOMAINS_WRITE:"domains:write"},L="ship.json",Ee={rewrites:[{source:"/(.*)",destination:"/index.html"}]},z={INDEX_FILE:"index.html",MAX_INDEX_BYTES:100*1024};Z="https://api.shipstatic.com",$={TOKEN:"SHIP_TOKEN",API_URL:"SHIP_API_URL"},Ft="https://my.shipstatic.com/api-key",kt=4320*60,y={PENDING:"pending",PROCESSING_ERROR:"processing_error",EXCLUDED:"excluded",VALIDATION_FAILED:"validation_failed",READY:"ready"};N={MIN_LENGTH:3,MAX_LENGTH:25,MAX_COUNT:10,SEPARATORS:"._-"},Re=/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;B={MIN_LENGTH:6,MAX_LENGTH:128}});async function mt(n){let t=(await import("spark-md5")).default,e=new t.ArrayBuffer,r=2097152;for(let i=0;i<n.size;i+=r){let s=Math.min(i+r,n.size);e.append(await n.slice(i,s).arrayBuffer())}return{md5:e.end()}}async function ft(n){let{createHash:t}=await import("crypto"),e=t("md5");return e.update(n),{md5:e.digest("hex")}}async function ht(n){let{createHash:t}=await import("crypto"),{createReadStream:e}=await import("fs");return new Promise((r,i)=>{let s=t("md5"),a=e(n);a.on("error",u=>i(l.file(`Failed to read file for MD5: ${u.message}`,{filePath:n}))),a.on("data",u=>s.update(u)),a.on("end",()=>r({md5:s.digest("hex")}))})}async function j(n){if(n instanceof Blob)return mt(n);if(typeof Buffer<"u"&&Buffer.isBuffer(n))return ft(n);if(typeof n=="string")return ht(n);throw l.business("Invalid input for MD5 calculation")}var Y=P(()=>{"use strict";g()});function un(n){ne=n}function gt(){return typeof process<"u"&&process.versions&&process.versions.node?"node":typeof window<"u"||typeof self<"u"?"browser":"unknown"}function v(){return ne||gt()}var ne,M=P(()=>{"use strict";ne=null});function ke(n){if(!n||n.length===0)return"";let t=n.filter(s=>s&&typeof s=="string").map(s=>s.replace(/\\/g,"/"));if(t.length===0)return"";if(t.length===1)return t[0];let e=t.map(s=>s.split("/").filter(Boolean)),r=[],i=Math.min(...e.map(s=>s.length));for(let s=0;s<i;s++){let a=e[0][s];if(e.every(u=>u[s]===a))r.push(a);else break}return r.join("/")}function X(n){return n.replace(/\\/g,"/").replace(/\/+/g,"/").replace(/^\/+/,"")}var re=P(()=>{"use strict"});function $e(n,t={}){if(t.flatten===!1)return n.map(r=>({path:X(r),name:ie(r)}));let e=Tt(n);return n.map(r=>{let i=X(r);if(e){let s=e.endsWith("/")?e:`${e}/`;i.startsWith(s)&&(i=i.substring(s.length))}return i||(i=ie(r)),{path:i,name:ie(r)}})}function Tt(n){if(!n.length)return"";let e=n.map(s=>X(s)).map(s=>s.split("/")),r=[],i=Math.min(...e.map(s=>s.length));for(let s=0;s<i-1;s++){let a=e[0][s];if(e.every(u=>u[s]===a))r.push(a);else break}return r.join("/")}function ie(n){return n.split(/[/\\]/).pop()||n}var se=P(()=>{"use strict";re()});function oe(n,t=1){if(n===0)return"0 Bytes";let e=1024,r=["Bytes","KB","MB","GB"],i=Math.floor(Math.log(n)/Math.log(e));return`${parseFloat((n/e**i).toFixed(t))} ${r[i]}`}function ae(n){if(he(n))return{valid:!1,reason:"File name contains unsafe characters"};if(n.startsWith(" ")||n.endsWith(" "))return{valid:!1,reason:"File name cannot start/end with spaces"};if(n.endsWith("."))return{valid:!1,reason:"File name cannot end with dots"};let t=/^(CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])(\.|$)/i,e=n.split("/").pop()||n;return t.test(e)?{valid:!1,reason:"File name uses a reserved system name"}:n.includes("..")?{valid:!1,reason:"File name contains path traversal pattern"}:{valid:!0}}function Nn(n,t){let e=[],r=[],i=[];if(n.length===0){let o={file:"(no files)",message:"At least one file must be provided"};return e.push(o),{files:[],validFiles:[],errors:e,warnings:[],canDeploy:!1}}for(let o of n)if(G(o.name))return e.push({file:o.name,message:"Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder"}),{files:n.map(p=>({...p,status:y.VALIDATION_FAILED,statusMessage:"Unbuilt project detected"})),validFiles:[],errors:e,warnings:[],canDeploy:!1};if(n.length>t.maxFilesCount){let o={file:`(${n.length} files)`,message:`File count (${n.length}) exceeds limit of ${t.maxFilesCount}`};return e.push(o),{files:n.map(p=>({...p,status:y.VALIDATION_FAILED,statusMessage:o.message})),validFiles:[],errors:e,warnings:[],canDeploy:!1}}let s=0;for(let o of n){let p=y.READY,c="Ready for upload",D=o.name?ae(o.name):{valid:!1,reason:"File name cannot be empty"};if(o.status===y.PROCESSING_ERROR)p=y.VALIDATION_FAILED,c=o.statusMessage||"File failed during processing",e.push({file:o.name,message:c});else if(o.size===0){p=y.EXCLUDED,c="File is empty (0 bytes) and cannot be deployed due to storage limitations",r.push({file:o.name,message:c}),i.push({...o,status:p,statusMessage:c});continue}else o.size<0?(p=y.VALIDATION_FAILED,c="File size must be positive",e.push({file:o.name,message:c})):!o.name||o.name.trim().length===0?(p=y.VALIDATION_FAILED,c="File name cannot be empty",e.push({file:o.name||"(empty)",message:c})):o.name.includes("\0")?(p=y.VALIDATION_FAILED,c="File name contains invalid characters (null byte)",e.push({file:o.name,message:c})):D.valid?H(o.name,t.blockedExtensions??[])?(p=y.VALIDATION_FAILED,c=`File extension not allowed: "${o.name}"`,e.push({file:o.name,message:c})):o.size>t.maxFileSize?(p=y.VALIDATION_FAILED,c=`File size (${oe(o.size)}) exceeds limit of ${oe(t.maxFileSize)}`,e.push({file:o.name,message:c})):(s+=o.size,s>t.maxTotalSize&&(p=y.VALIDATION_FAILED,c=`Total size would exceed limit of ${oe(t.maxTotalSize)}`,e.push({file:o.name,message:c}))):(p=y.VALIDATION_FAILED,c=D.reason||"Invalid file name",e.push({file:o.name,message:c}));i.push({...o,status:p,statusMessage:c})}e.length>0&&(i=i.map(o=>o.status===y.EXCLUDED?o:{...o,status:y.VALIDATION_FAILED,statusMessage:o.status===y.VALIDATION_FAILED?o.statusMessage:"Deployment failed due to validation errors in bundle"}));let a=e.length===0?i.filter(o=>o.status===y.READY):[],u=e.length===0;return{files:i,validFiles:a,errors:e,warnings:r,canDeploy:u}}function At(n){return n.filter(t=>t.status===y.READY)}function bn(n){return At(n).length>0}var le=P(()=>{"use strict";g()});import{isJunk as St}from"junk";function Ue(n,t){if(!n||n.length===0)return[];if(!t?.allowUnbuilt&&n.find(r=>r&&G(r)))throw l.business("Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder");return n.filter(e=>{if(!e)return!1;let r=e.replace(/\\/g,"/").split("/").filter(Boolean);if(r.length===0)return!0;let i=r[r.length-1];if(St(i))return!1;for(let a of r)if(a!==".well-known"&&(a.startsWith(".")||a.length>255))return!1;let s=r.slice(0,-1);for(let a of s)if(Rt.some(u=>a.toLowerCase()===u.toLowerCase()))return!1;return!0})}var Rt,ce=P(()=>{"use strict";g();Rt=["__MACOSX",".Trashes",".fseventsd",".Spotlight-V100"]});function Me(n,t){if(n.includes("\0")||n.includes("/../")||n.startsWith("../")||n.endsWith("/.."))throw l.business(`Security error: Unsafe file path "${n}" for file: ${t}`)}function Be(n,t,e){let r=ae(n);if(!r.valid)throw l.business(r.reason||"Invalid file name");if(H(n,e))throw l.business(`File extension not allowed: "${t}"`)}var pe=P(()=>{"use strict";g();le()});var ze={};je(ze,{processFilesForNode:()=>Ge});import*as T from"fs";import*as A from"path";function He(n,t=new Set){let e=[],r=T.realpathSync(n);if(t.has(r))return e;t.add(r);let i=T.readdirSync(n);for(let s of i){let a=A.join(n,s),u=T.statSync(a);if(u.isDirectory()){let o=He(a,t);e.push(...o)}else u.isFile()&&e.push(a)}return e}async function Ge(n,t={},e){if(v()!=="node")throw l.business("processFilesForNode can only be called in Node.js environment.");for(let m of n){let h=A.resolve(m);try{if(T.statSync(h).isDirectory()){let S=T.readdirSync(h).find(R=>J.has(R));if(S)throw l.business(`"${S}" detected \u2014 deploy your build output (dist/, build/, out/), not the project folder`)}}catch(S){if(k(S))throw S}}let r=n.flatMap(m=>{let h=A.resolve(m);try{return T.statSync(h).isDirectory()?He(h):[h]}catch{throw l.file(`Path does not exist: ${m}`,{filePath:m})}}),i=[...new Set(r)],s=n.map(m=>A.resolve(m)),a=ke(s.map(m=>{try{return T.statSync(m).isDirectory()?m:A.dirname(m)}catch{return A.dirname(m)}})),u=i.map(m=>{if(a&&a.length>0){let h=A.relative(a,m);if(h&&typeof h=="string"&&!h.startsWith(".."))return h.replace(/\\/g,"/")}return A.basename(m)}),p=$e(u,{flatten:t.pathDetect!==!1}).map(m=>m.path),c=new Set(Ue(p));if(c.size===0)return[];let D=[],O=[];for(let m=0;m<i.length;m++)c.has(p[m])&&(D.push(i[m]),O.push(p[m]));let b=[],w=0;if(!e)throw l.config("Platform limits not provided. processFilesForNode requires the limits argument \u2014 pass `ship.getLimits()` result.");let E=e.blockedExtensions??[];for(let m=0;m<D.length;m++){let h=D[m],S=O[m];try{Me(S,h);let R=T.statSync(h);if(R.size===0)continue;if(Be(S,h,E),R.size>e.maxFileSize)throw l.business(`File ${h} is too large. Maximum allowed size is ${e.maxFileSize/(1024*1024)}MB.`);if(w+=R.size,w>e.maxTotalSize)throw l.business(`Total deploy size is too large. Maximum allowed is ${e.maxTotalSize/(1024*1024)}MB.`);let C=T.readFileSync(h),{md5:Ve}=await j(C);b.push({path:S,content:C,size:C.length,md5:Ve})}catch(R){if(k(R))throw R;let C=R instanceof Error?R.message:String(R);throw l.file(`Failed to read file "${h}": ${C}`,{filePath:h})}}if(b.length>e.maxFilesCount)throw l.business(`Too many files to deploy. Maximum allowed is ${e.maxFilesCount} files.`);return b}var ue=P(()=>{"use strict";g();se();M();ce();Y();re();pe()});g();g();g();var V=class{constructor(){this.handlers=new Map}on(t,e){this.handlers.has(t)||this.handlers.set(t,new Set),this.handlers.get(t)?.add(e)}off(t,e){let r=this.handlers.get(t);r&&(r.delete(e),r.size===0&&this.handlers.delete(t))}emit(t,...e){let r=this.handlers.get(t);if(!r)return;let i=Array.from(r);for(let s of i)try{s(...e)}catch(a){r.delete(s),t!=="error"&&setTimeout(()=>{let u=a instanceof Error?a:new Error(String(a));this.emit("error",u,String(t))},0)}}};g();g();function U(n){if(n==null)return;if(n.length===0)return n;if(n.length>N.MAX_COUNT)throw l.validation(`Maximum ${N.MAX_COUNT} labels allowed`);let t=n.map((r,i)=>{if(typeof r!="string")throw l.validation(`Label at index ${i} must be a string`);let s=r.trim().toLowerCase();if(s.length<N.MIN_LENGTH)throw l.validation(`Labels must be at least ${N.MIN_LENGTH} characters long`);if(s.length>N.MAX_LENGTH)throw l.validation(`Labels must be no more than ${N.MAX_LENGTH} characters long`);if(!Re.test(s))throw l.validation(`Labels must start and end with alphanumeric characters, with optional separators (${N.SEPARATORS}) between segments`);return s}),e=[...new Set(t)];if(e.length!==t.length)throw l.validation("Duplicate labels are not allowed");return e}async function Ie(n){let t=n.find(i=>i.path===L||i.path===`/${L}`);if(!t)return;let e=t.content,r=typeof e.text=="function"?await e.text():t.content.toString("utf8");De(r)}var it=3e4,st=2,ot=300,at=2e3,lt=new Set([500,502,503,504]);function ct(n,t){return new Promise((e,r)=>{if(t?.aborted){r(t.reason);return}let i=()=>{clearTimeout(a),t?.removeEventListener("abort",s)},s=()=>{i(),r(t?.reason)},a=setTimeout(()=>{i(),e()},n);t?.addEventListener("abort",s)})}var Pe=3e5,pt=3e5,ut=Pe+pt,dt="sdk";function te(n){let t=new URLSearchParams;n?.limit!==void 0&&t.set("limit",String(n.limit)),n?.cursor!==void 0&&t.set("cursor",n.cursor);let e=t.toString();return e?`?${e}`:""}var K=class extends V{constructor(e){super();this.globalHeaders={};this.apiUrl=e.apiUrl||Z,this.getAuthHeadersCallback=e.getAuthHeaders,this.session=e.session??!1,this.caller=e.caller,this.timeout=e.timeout??it,this.maxRetries=Math.max(0,e.maxRetries??st),this.deployTimeout=e.timeout??Pe,this.deployBuildTimeout=e.timeout??ut,this.fetch=e.fetch??globalThis.fetch.bind(globalThis),this.createDeployBody=e.createDeployBody,this.deployEndpoint=e.deployEndpoint||f.DEPLOYMENTS}setGlobalHeaders(e){this.globalHeaders=e}async executeRequest(e,r,i,s=this.timeout){for(let a=0;;a++)try{return await this.attemptOnce(e,r,i,s)}catch(u){let o=l.fromFetchError(u,i);if(a>=this.maxRetries||!this.isRetryable(o,r))throw o;let p=Math.min(at,ot*2**a);try{await ct(Math.random()*p,r.signal)}catch(c){let D=l.fromFetchError(c,i);throw this.emit("error",D,e),D}}}isRetryable(e,r){if(r.signal?.aborted||e.isType(d.Maintenance)||e.isType(d.Cancelled)||!(e.isNetworkError()||e.status!==void 0&&lt.has(e.status)))return!1;let s=(r.method??"GET").toUpperCase();return s==="GET"||s==="HEAD"?!0:s==="PUT"||s==="DELETE"?!1:this.hasIdempotencyKey(r.headers)}hasIdempotencyKey(e){if(!e)return!1;let r=F.HEADER.toLowerCase(),i=!1,s=a=>{a.toLowerCase()===r&&(i=!0)};if(e instanceof Headers)e.forEach((a,u)=>{s(u)});else if(Array.isArray(e))for(let[a]of e)s(a);else for(let a of Object.keys(e))s(a);return i}async attemptOnce(e,r,i,s=this.timeout){let a=()=>{};try{let u=await this.mergeHeaders(r.headers),o=this.createTimeoutSignal(r.signal,s);a=o.cleanup;let p={...r,headers:u,credentials:this.session&&!u.Authorization?"include":void 0,signal:o.signal};this.emit("request",e,p);let c=await this.fetch(e,p);if(a(),!c.ok)throw await l.fromHttpResponse(c,i);return this.emit("response",this.safeClone(c),e),{data:await this.parseResponse(this.safeClone(c)),status:c.status}}catch(u){a();let o=l.fromFetchError(u,i);throw this.emit("error",o,e),o}}async request(e,r,i,s){let{data:a}=await this.executeRequest(e,r,i,s);return a}async requestWithStatus(e,r,i){return this.executeRequest(e,r,i)}async mergeHeaders(e={}){return{...this.globalHeaders,...this.caller?{[_.HEADER]:this.caller}:{},...await this.getAuthHeadersCallback(),...e}}createTimeoutSignal(e,r=this.timeout){let i=new AbortController,s=setTimeout(()=>i.abort(new DOMException(`Timed out after ${r}ms`,"TimeoutError")),r),a=e?()=>i.abort(e.reason):void 0;return e&&a&&(e.addEventListener("abort",a),e.aborted&&i.abort(e.reason)),{signal:i.signal,cleanup:()=>{clearTimeout(s),e&&a&&e.removeEventListener("abort",a)}}}safeClone(e){try{return e.clone()}catch{return e}}async parseResponse(e){if(!(e.headers.get("Content-Length")==="0"||e.status===204))return e.json()}async deploy(e,r={}){if(!e.length)throw l.business("No files to deploy");for(let p of e)if(!p.md5)throw l.file(`MD5 checksum missing for file: ${p.path}`,{filePath:p.path});ee(r.password);let i=fe(r.idempotencyKey),s=U(r.labels);await Ie(e);let a=r.build||r.prerender||r.spa?{build:r.build,prerender:r.prerender,spa:r.spa}:void 0,{body:u,headers:o}=await this.createDeployBody(e,{labels:s,via:r.via??dt,password:r.password,flags:a,captcha:r.captcha});return this.request(`${this.apiUrl}${this.deployEndpoint}`,{method:"POST",body:u,headers:i?{...o,[F.HEADER]:i}:o,signal:r.signal||null},"Deploy",r.build||r.prerender?this.deployBuildTimeout:this.deployTimeout)}async listDeployments(e){return this.request(`${this.apiUrl}${f.DEPLOYMENTS}${te(e)}`,{method:"GET"},"List deployments")}async getDeployment(e){return this.request(`${this.apiUrl}${f.DEPLOYMENT(encodeURIComponent(e))}`,{method:"GET"},"Get deployment")}async updateDeploymentLabels(e,r){let i=U(r);return this.request(`${this.apiUrl}${f.DEPLOYMENT(encodeURIComponent(e))}`,{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify({labels:i})},"Update deployment labels")}async deleteDeployment(e){return this.request(`${this.apiUrl}${f.DEPLOYMENT(encodeURIComponent(e))}`,{method:"DELETE"},"Delete deployment")}async setDomain(e,r,i){let s=U(i),a={};r&&(a.deployment=r),s!==void 0&&(a.labels=s);let{data:u,status:o}=await this.requestWithStatus(`${this.apiUrl}${f.DOMAIN(encodeURIComponent(e))}`,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify(a)},"Set domain");return{...u,isCreate:o===201}}async listDomains(e){return this.request(`${this.apiUrl}${f.DOMAINS}${te(e)}`,{method:"GET"},"List domains")}async getDomain(e){return this.request(`${this.apiUrl}${f.DOMAIN(encodeURIComponent(e))}`,{method:"GET"},"Get domain")}async deleteDomain(e){return this.request(`${this.apiUrl}${f.DOMAIN(encodeURIComponent(e))}`,{method:"DELETE"},"Delete domain")}async verifyDomain(e){return this.request(`${this.apiUrl}${f.DOMAIN_VERIFY(encodeURIComponent(e))}`,{method:"POST"},"Verify domain")}async getDomainDns(e){return this.request(`${this.apiUrl}${f.DOMAIN_DNS(encodeURIComponent(e))}`,{method:"GET"},"Get domain DNS")}async getDomainRecords(e){return this.request(`${this.apiUrl}${f.DOMAIN_RECORDS(encodeURIComponent(e))}`,{method:"GET"},"Get domain records")}async getDomainShare(e){return this.request(`${this.apiUrl}${f.DOMAIN_SHARE(encodeURIComponent(e))}`,{method:"GET"},"Get domain share")}async validateDomain(e){return this.request(`${this.apiUrl}${f.DOMAINS_VALIDATE}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({domain:e})},"Validate domain")}async createToken(e,r){let i=U(r),s={};return e!==void 0&&(s.ttl=e),i!==void 0&&(s.labels=i),this.request(`${this.apiUrl}${f.TOKENS}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(s)},"Create token")}async listTokens(e){return this.request(`${this.apiUrl}${f.TOKENS}${te(e)}`,{method:"GET"},"List tokens")}async deleteToken(e){return this.request(`${this.apiUrl}${f.TOKEN(encodeURIComponent(e))}`,{method:"DELETE"},"Delete token")}async getToken(e){return this.request(`${this.apiUrl}${f.TOKEN(encodeURIComponent(e))}`,{method:"GET"},"Get token")}async getAccount(){return this.request(`${this.apiUrl}${f.ACCOUNT}`,{method:"GET"},"Get account")}async getLimits(){return this.request(`${this.apiUrl}${f.LIMITS}`,{method:"GET"},"Get limits")}async ping(){return this.request(`${this.apiUrl}${f.PING}`,{method:"GET"},"Ping")}async checkSPA(e,r={}){let i=e.find(o=>o.path===z.INDEX_FILE||o.path===`/${z.INDEX_FILE}`);if(!i||i.size>z.MAX_INDEX_BYTES)return!1;let s;if(typeof Buffer<"u"&&Buffer.isBuffer(i.content))s=i.content.toString("utf-8");else if(typeof Blob<"u"&&i.content instanceof Blob)s=await i.content.text();else if(typeof File<"u"&&i.content instanceof File)s=await i.content.text();else return!1;let a={files:e.map(o=>o.path),index:s};return(await this.request(`${this.apiUrl}${f.SPA_CHECK}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(a)},"SPA check")).isSPA}};g();g();Y();async function yt(){let n=JSON.stringify(Ee,null,2),t;typeof Buffer<"u"?t=Buffer.from(n,"utf-8"):t=new Blob([n],{type:"application/json"});let{md5:e}=await j(t);return{path:L,content:t,size:n.length,md5:e}}async function Le(n,t,e){if(e.spaDetect===!1||e.spa||e.build||e.prerender||n.some(r=>r.path===L))return n;try{if(await t.checkSPA(n,e)){let i=await yt();return[...n,i]}}catch{}return n}function we(n){let{getApi:t,ensureInit:e,processInput:r}=n;return{upload:async(i,s={})=>{if(await e(),!r)throw l.config("processInput function is not provided.");let a=t(),u=await r(i,s);return u=await Le(u,a,s),a.deploy(u,s)},list:async i=>(await e(),t().listDeployments(i)),get:async i=>(await e(),t().getDeployment(i)),set:async(i,s)=>(await e(),t().updateDeploymentLabels(i,s.labels)),delete:async i=>(await e(),t().deleteDeployment(i))}}function Ne(n){let{getApi:t,ensureInit:e}=n;return{set:async(r,i={})=>(await e(),t().setDomain(r,i.deployment,i.labels)),list:async r=>(await e(),t().listDomains(r)),get:async r=>(await e(),t().getDomain(r)),delete:async r=>(await e(),t().deleteDomain(r)),verify:async r=>(await e(),t().verifyDomain(r)),validate:async r=>(await e(),t().validateDomain(r)),dns:async r=>(await e(),t().getDomainDns(r)),records:async r=>(await e(),t().getDomainRecords(r)),share:async r=>(await e(),t().getDomainShare(r))}}function be(n){let{getApi:t,ensureInit:e}=n;return{get:async()=>(await e(),t().getAccount())}}function xe(n){let{getApi:t,ensureInit:e}=n;return{create:async(r={})=>(await e(),t().createToken(r.ttl,r.labels)),list:async r=>(await e(),t().listTokens(r)),get:async r=>(await e(),t().getToken(r)),delete:async r=>(await e(),t().deleteToken(r))}}var q=class{constructor(t={}){this.initPromise=null;this.platformLimits=null;this.credential=null;if(t={...t,apiUrl:t.apiUrl||void 0,token:t.token||void 0,caller:t.caller||void 0},this.clientOptions=t,t.caller!==void 0&&Ae(t.caller),t.token&&t.session)throw l.config("Provide either `token` or `session`, not both.");typeof t.token=="string"?(Q(t.token),this.credential=t.token):t.token&&(this.credential=t.token),this.http=new K({...t,getAuthHeaders:()=>this.getAuthHeaders(),createDeployBody:this.getDeployBodyCreator()});let e={getApi:()=>this.http,ensureInit:()=>this.ensureInitialized()};this.deployments=we({...e,processInput:(r,i)=>this.processInput(r,i)}),this.domains=Ne(e),this.account=be(e),this.tokens=xe(e)}async ensureInitialized(){return this.initPromise||(this.initPromise=this.fetchPlatformLimits()),this.initPromise}async fetchPlatformLimits(){try{this.platformLimits=await this.http.getLimits()}catch(t){throw this.initPromise=null,t}}async ping(){return await this.ensureInitialized(),this.http.ping()}async deploy(t,e){return this.deployments.upload(t,e)}async whoami(){return this.account.get()}async getLimits(){return this.platformLimits?this.platformLimits:(await this.ensureInitialized(),this.platformLimits)}on(t,e){this.http.on(t,e)}off(t,e){this.http.off(t,e)}setHeaders(t){this.http.setGlobalHeaders(t)}clearHeaders(){this.http.setGlobalHeaders({})}setToken(t){if(this.clientOptions.session)throw l.config("Provide either `token` or `session`, not both.");if(typeof t=="string"){if(!t)throw l.business("Invalid token provided. Token must be a non-empty string.");Q(t),this.credential=t;return}if(typeof t!="function")throw l.business("Invalid token provided. Token must be a non-empty string or a provider function.");this.credential=t}async getAuthHeaders(){if(this.credential===null)return{};let t=typeof this.credential=="function"?await this.credential():this.credential;if(!t)throw l.authentication("Token provider returned no token.");if(typeof t!="string")throw l.authentication("Token provider returned a non-string value.");return{Authorization:`Bearer ${t}`}}};M();g();import{z as Ce}from"zod";import{z as ve}from"zod";var Oe={apiUrl:ve.string().url().optional(),token:ve.string().min(1).optional()};M();var Et=Ce.object(Oe).strict(),Dt={apiUrl:$.API_URL,token:$.TOKEN};function _e(){if(v()!=="node")return{};let n={apiUrl:process.env[$.API_URL]||void 0,token:process.env[$.TOKEN]||void 0};try{return Et.parse(n)}catch(t){if(t instanceof Ce.ZodError){let e=t.issues[0],r=e.path[0],i=(r&&Dt[r])??"SHIP environment configuration";throw l.config(`Invalid ${i}: ${e.message}`)}throw l.config("Invalid environment configuration")}}g();async function Fe(n,t={}){let{FormData:e,File:r}=await import("formdata-node"),{FormDataEncoder:i}=await import("form-data-encoder"),{labels:s,via:a,password:u,flags:o,captcha:p}=t,c=new e,D=[];for(let E of n){if(!Buffer.isBuffer(E.content)&&!(typeof Blob<"u"&&E.content instanceof Blob))throw l.file(`Unsupported file.content type for Node.js: ${E.path}`,{filePath:E.path});if(!E.md5)throw l.file(`File missing md5 checksum: ${E.path}`,{filePath:E.path});let m=new r([E.content],E.path,{type:"application/octet-stream"});c.append(I.FILES,m),D.push(E.md5)}c.append(I.CHECKSUMS,JSON.stringify(D)),s&&s.length>0&&c.append(I.LABELS,JSON.stringify(s)),a&&c.append(I.VIA,a),u&&c.append(I.PASSWORD,u),o?.build&&c.append(I.BUILD,"true"),o?.prerender&&c.append(I.PRERENDER,"true"),o?.spa&&c.append(I.SPA,"true"),p&&c.append(I.CAPTCHA,p);let O=new i(c),b=[];for await(let E of O.encode())b.push(Buffer.from(E));let w=Buffer.concat(b);return{body:w.buffer.slice(w.byteOffset,w.byteOffset+w.byteLength),headers:{"Content-Type":O.contentType,"Content-Length":Buffer.byteLength(w).toString()}}}g();g();se();M();le();ce();Y();pe();function $n(n,t,e,r=!0){let i=n===1?t:e;return r?`${n} ${i}`:i}ue();var de=class extends q{constructor(t={}){if(v()!=="node")throw l.business("Node.js Ship class can only be used in Node.js environment.");let e=_e();super({...t,apiUrl:t.apiUrl||e.apiUrl,token:t.token||(t.session?void 0:e.token)})}async deploy(t,e){return super.deploy(t,e)}async processInput(t,e){let r=typeof t=="string"?[t]:t;if(!Array.isArray(r)||!r.every(s=>typeof s=="string"))throw l.business("Invalid input type for Node.js environment. Expected string or string[].");if(r.length===0)throw l.business("No files to deploy.");let{processFilesForNode:i}=await Promise.resolve().then(()=>(ue(),ze));return i(r,e,this.platformLimits??void 0)}getDeployBodyCreator(){return Fe}},It=de;export{ye as API_KEY,f as API_PATHS,vt as AUTH_BASE_PATH,bt as AccountPlan,K as ApiHttp,me as AuthMethod,_ as CALLER,Z as DEFAULT_API,L as DEPLOYMENT_CONFIG_FILENAME,I as DEPLOY_FIELDS,ge as DEPLOY_TOKEN,Lt as DeploymentStatus,Ye as DeploymentVia,wt as DomainStatus,d as ErrorType,y as FILE_VALIDATION_STATUS,y as FileValidationStatus,F as IDEMPOTENCY_KEY_CONSTRAINTS,Rt as JUNK_DIRECTORIES,N as LABEL_CONSTRAINTS,Re as LABEL_PATTERN,Ft as MY_API_KEY_URL,Ot as OAuthScope,B as PASSWORD_CONSTRAINTS,kt as PUBLIC_DEPLOYMENT_TTL_SECONDS,$ as SHIP_ENV,z as SPA_CHECK_CONSTRAINTS,Ee as SPA_DEFAULT_CONFIG,de as Ship,l as ShipError,x as TokenKind,J as UNBUILT_PROJECT_MARKERS,et as UNSAFE_FILENAME_CHARS,xt as WEB_FILE_ACCEPT,un as __setTestEnvironment,bn as allValidFilesReady,De as assertShipJsonSyntax,j as calculateMD5,tt as classifyToken,be as createAccountResource,we as createDeploymentResource,Ne as createDomainResource,xe as createTokenResource,It as default,Gt as deserializeLabels,Ut as extractSubdomain,Ue as filterJunk,oe as formatFileSize,Mt as generateDeploymentUrl,Bt as generateDomainUrl,v as getENV,At as getValidFiles,G as hasUnbuiltMarker,he as hasUnsafeChars,H as isBlockedExtension,$t as isCustomDomain,_t as isDeployment,Se as isPlatformDomain,k as isShipError,Nt as normalizeVia,$e as optimizeDeployPaths,$n as pluralize,Ge as processFilesForNode,Ht as serializeLabels,nt as validateApiKey,Ct as validateApiUrl,Ae as validateCaller,Be as validateDeployFile,Me as validateDeployPath,rt as validateDeployToken,ae as validateFileName,Nn as validateFiles,fe as validateIdempotencyKey,ee as validatePassword,Q as validateToken};
 //# sourceMappingURL=index.js.map