@shipstatic/ship 2.3.2 → 2.3.3

package/THIRD-PARTY-LICENSES.md

@@ -5,7 +5,7 @@ Their copyright notices travel with that copy, and are reproduced here in
 full. This file is GENERATED from the build's own metafile — edit the
 bundle, not this list.
 
-## @shipstatic/types 2.9.0
+## @shipstatic/types 2.10.0
 
 License: MIT
 

package/dist/browser.d.ts

@@ -73,12 +73,14 @@ declare const DeploymentVia: {
      * A deploy that reached the REST API naming no origin at all — the
      * platform-wide fallback, one altitude below `mcp`'s family fallback.
      *
-     * **Declared ahead of its emitter, deliberately.** Nothing sends it yet and
-     * the server still records an unattributed deploy as `null`. Vocabulary must
-     * exist before a consumer can adopt it, and adding a member costs a full
-     * constellation convoy — so the word ships first and the API adopts it as a
-     * default whenever that decision is taken, with no convoy standing between
-     * the decision and the deploy.
+     * **The API stamps it, since 2026-08-15.** A deploy that names no origin —
+     * or names one this vocabulary does not know — is stored as `api`, so a
+     * stored `null` now means only that the row predates attribution.
+     *
+     * It was declared one wave ahead of that decision, deliberately: vocabulary
+     * must exist before a consumer can adopt it, and adding a member costs a
+     * full constellation convoy, so the word shipped first and the server
+     * adopted it with no convoy standing between the decision and the deploy.
      */
     readonly API: "api";
 };
@@ -104,7 +106,10 @@ interface Deployment {
     /** Labels for categorization and filtering (lowercase, alphanumeric with separators). Always present, empty array when none. */
     labels: string[];
     /**
-     * The client/tool that created this deployment, null if unknown.
+     * The client/tool that created this deployment. Every deployment created
+     * today names one — {@link DeploymentVia.API} when the caller named nothing
+     * the vocabulary knows — so `null` is historical: the row predates
+     * attribution.
      *
      * Deliberately wider than {@link DeploymentViaType}: this is stored data,
      * and rows predate the vocabulary being closed. Narrowing the ENTITY would
@@ -1793,6 +1798,17 @@ interface ActivityMeta {
     hasConfig?: boolean;
     /** Whether deployment has a password set */
     hasPassword?: boolean;
+    /**
+     * The client/tool that created the deployment.
+     *
+     * Narrower than {@link Deployment.via}, deliberately: the entity is
+     * `string | null` because stored rows predate the vocabulary, while an
+     * activity is only ever written by code that names one. It is here rather
+     * than read off the deployment because the deployment row is deleted at
+     * expiry or on request and the activity is not — this is where a deploy's
+     * origin stays answerable afterwards.
+     */
+    via?: DeploymentViaType;
     /** Whether this was an update (vs create) */
     isUpdate?: boolean;
     /** Whether domain was already verified */