@shipstatic/ship 2.2.0-beta.6 → 2.2.0-beta.8

package/README.md

@@ -48,6 +48,7 @@ const ship = new Ship({ token: 'ship-...' });
 ```bash
 ship ./dist                                        # Deploy (shortcut)
 ship ./dist --domain www.example.com               # Deploy and serve it there
+ship ./dist --ttl 1h                               # Expires in an hour
 ship ./dist --label production --label v1.0.0      # Deploy with labels
 ship deployments list
 ship deployments list --limit 20                   # Page size; a hint shows the next cursor
@@ -106,7 +107,7 @@ ship.domains.set('www.münchen.de');    // → Unicode supported
 ### Tokens
 
 ```bash
-ship tokens create --ttl 3600 --label ci
+ship tokens create --ttl 30d --label ci            # Or 3600, 90s, 1h — one grammar
 ship tokens list
 ship tokens get <token>
 ship tokens delete <token>
@@ -153,6 +154,27 @@ open https://$(ship ./dist -q)
 ship deployments list -q | xargs -I{} ship deployments delete {} -q
 ```
 
+### Ephemeral deployments
+
+```bash
+ship ./dist --ttl 1h          # gone in an hour
+ship ./dist --ttl 7d          # a week-long preview
+ship ./dist --ttl 3600        # bare seconds work too
+```
+
+The platform reclaims the deployment when the time is up. Seconds, or a
+`<n><unit>` duration (`s`/`m`/`h`/`d`) — the same grammar `ship tokens create
+--ttl` uses. Bounded at one year.
+
+Two rules, both refused before anything uploads. It **needs a token**: an
+anonymous deployment already expires on the platform's own schedule, so there
+is no deployer to choose a different one. And it **cannot be combined with
+`--domain`**: a domain is a commitment and a deadline is its opposite, so the
+API refuses to point a domain at a deployment that expires.
+
+To keep something longer, deploy it again — there is no way to extend a
+deployment's life, and no way to shorten it after the fact.
+
 `--domain` is the same two calls as one command:
 
 ```bash
@@ -192,6 +214,7 @@ Available on `ship <path>` and `ship deployments upload`:
 | `--domain <domain>` | Serve this deployment at that domain — creates or repoints it. Needs a token |
 | `--label <label>` | Add label (repeatable) |
 | `--password <password>` | Password-protect this deployment (6–128 chars) |
+| `--ttl <duration>` | Expire this deployment after that long — `3600`, `90s`, `30m`, `1h`, `7d`. Needs a token; cannot be combined with `--domain` |
 | `--no-path-detect` | Disable automatic path optimization |
 | `--no-spa-detect` | Disable automatic SPA detection |
 
@@ -255,6 +278,7 @@ own `signal` (`AbortSignal.timeout(ms)`), which is never retried past.
 ship.deploy(input, {
   labels?: string[],
   password?: string,          // Password-protect the deployment (6–128 chars)
+  ttl?: number,               // Seconds until it expires (needs a token; max 1 year)
   signal?: AbortSignal,       // Abort to cancel the deploy
   pathDetect?: boolean,       // Auto-optimize paths (default: true)
   spaDetect?: boolean,        // Auto-detect SPA (default: true)
@@ -262,6 +286,17 @@ ship.deploy(input, {
 });
 ```
 
+#### Expiring deployments
+
+Pass `ttl` in **seconds** and the platform reclaims the deployment when the time is up — 1 second to one year. The wire carries the duration and the API stamps `expires` against its own clock, so the answer says when:
+
+```typescript
+const result = await ship.deploy('./dist', { ttl: 3600 });
+// result.expires → unix seconds, one hour after result.created
+```
+
+Needs a credential — an anonymous deployment already expires on the platform's own schedule. And a deployment carrying a ttl cannot be linked to a domain: the API refuses, which is what stops a domain pointing at something that is about to be reclaimed. There is no way to extend or shorten a deployment after the fact; redeploy instead.
+
 #### Password protection
 
 Pass `password` (6–128 characters) to gate the deployment behind a prompt. Visitors are asked for the password before they can view the site, including on any custom domains pointing at it. To remove protection, redeploy without a password.
@@ -295,12 +330,17 @@ const deployment = await ship.deploy([
 ### Events
 
 ```javascript
-ship.on('request', (url, init) => {});
-ship.on('response', (response, url) => {});
-ship.on('error', (error, url) => {});
+ship.on('request', (url, init) => {});          // once per attempt
+ship.on('retry', (error, url, attempt) => {});  // an attempt failed, another is coming
+ship.on('response', (response, url) => {});     // the call succeeded
+ship.on('error', (error, url) => {});           // the call failed, terminally
 ship.off('request', handler);
 ```
 
+One call emits `retry* (error | response)` — every failure is announced, and
+the event name says whether it ended the call. `attempt` counts from 1, so it
+names both the attempt that failed and which retry is happening.
+
 ### Custom fetch
 
 Pass `fetch` to override the transport function used for every API call. Defaults to `globalThis.fetch`. Useful for wrapping requests with tracing, retries, or request signing, and for injecting a Cloudflare service-binding `Fetcher` from a Worker so calls reach a sibling Worker in-process instead of through the public hostname.
@@ -335,9 +375,10 @@ try {
 } catch (error) {
   if (isShipError(error)) {
     error.isAuthError();        // semantic category
-    error.isNetworkError();     // semantic category
+    error.isNetworkError();     // semantic category — nothing was exchanged
     error.isClientError();      // semantic category (Business | Config | File | Validation)
     error.type === ErrorType.Validation;  // specific-type check
+    error.type === ErrorType.Timeout;     // a deadline expired — inside isNetworkError()
     error.status === 429;       // status check
   }
 }

package/SKILL.md

@@ -43,6 +43,27 @@ Without credentials, deployments are public and expire in 3 days. **Always show
 
 The deployment ID **is** the URL hostname. Use the full ID (e.g. `happy-cat-abc1234.shipstatic.com`) as the argument to all other commands. The site lives at `https://<deployment>`.
 
+### Deployments that clean themselves up
+
+```bash
+ship ./dist --ttl 1h      # gone in an hour
+ship ./dist --ttl 7d      # a week-long preview
+```
+
+For a preview nobody needs to keep — a draft, a diff, a one-off render. The
+platform reclaims it when the time is up, so nothing accumulates in the user's
+account and nobody has to remember to delete it. Seconds or a `<n><unit>`
+duration (`s`/`m`/`h`/`d`), up to a year.
+
+**It needs a token.** Without one the deploy is anonymous and already expires
+in 3 days on the platform's own schedule — there is no deployer to choose a
+different lifetime, and the CLI refuses before uploading anything. **It cannot
+be combined with `--domain`**, because a domain must not point at something
+about to be reclaimed.
+
+The response's `expires` is the answer, in unix seconds — read it there rather
+than computing it, since the platform stamps it against its own clock.
+
 ### Parsing output
 
 ```bash
@@ -238,6 +259,7 @@ List commands return `{"<resource>s": [...], "cursor": null}`. A non-null `curso
 ```bash
 ship ./dist                          # Deploy (shortcut)
 ship ./dist --domain <name>          # Deploy and serve it at that domain
+ship ./dist --ttl 1h                 # Expires in an hour (needs a token)
 ship deployments upload <path>       # Deploy (explicit)
 ship deployments list                # List all
 ship deployments get <deployment>    # Details
@@ -265,7 +287,7 @@ ship domains delete <name>            # Delete
 ship whoami                           # Account info
 ship ping                             # Connectivity check
 ship tokens create                    # New deploy token (shown once)
-ship tokens create --ttl 3600         # With expiry (seconds)
+ship tokens create --ttl 30d          # With expiry — 3600, 90s, 1h, 30d
 ship tokens list                      # List tokens
 ship tokens get <token>               # Details for one token
 ship tokens delete <token>            # Delete (revokes immediately)
@@ -281,6 +303,7 @@ ship tokens delete <token>            # Delete (revokes immediately)
 | `--domain <domain>` | Deploy and serve it there — creates or repoints. Needs a token |
 | `--label <label>` | Set label (repeatable, replaces all) |
 | `--password <pwd>` | Password-protect deployment (6–128 chars) |
+| `--ttl <duration>` | Expire after that long — `3600`, `90s`, `1h`, `7d`. Needs a token; not with `--domain` |
 | `--no-path-detect` | Skip build output auto-detection |
 | `--no-spa-detect` | Skip SPA rewrite auto-configuration |
 | `--no-color` | Disable colors |
@@ -295,6 +318,8 @@ ship tokens delete <token>            # Delete (revokes immediately)
 | `not found` | No such resource | Verify the ID/name |
 | `path does not exist` | Bad deploy path | Check file/directory |
 | `invalid domain name` | Not a subdomain | Use `www.example.com`, not `example.com` |
+| `--ttl sets an expiry, which needs a token` | `--ttl` without credentials | Set an API key, or drop `--ttl` |
+| `--ttl and --domain cannot be combined` | Both flags given | A domain cannot point at an expiring deployment — pick one |
 | `<resource> limit reached` | Plan caps hit (deployments, domains) | Suggest upgrading the plan; do not retry |
 | `Account has been deleted` / `Account terminated` | Account is gone | Stop; the account cannot deploy |
 | `DNS information is only available for external domains` | DNS op on internal domain | Only custom domains need DNS |

package/THIRD-PARTY-LICENSES.md

@@ -5,7 +5,7 @@ Their copyright notices travel with that copy, and are reproduced here in
 full. This file is GENERATED from the build's own metafile — edit the
 bundle, not this list.
 
-## @shipstatic/types 2.7.0-beta.2
+## @shipstatic/types 2.7.0-beta.4
 
 License: MIT
 
@@ -160,62 +160,6 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.
 ```
 
-## form-data-encoder 4.1.0
-
-License: MIT
-
-```
-The MIT License (MIT)
-
-Copyright (c) 2021-present Nick K.
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-```
-
-## formdata-node 6.0.3
-
-License: MIT
-
-```
-The MIT License (MIT)
-
-Copyright (c) 2017-present Nick K.
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-```
-
 ## junk 4.0.1
 
 License: MIT