@shipstatic/ship 3.3.2 → 3.4.0-beta.10

package/README.md

@@ -132,7 +132,7 @@ ship ping
 ```typescript
 ship.account.get()            // → whoami
 ship.ping()                   // → { timestamp } (server clock; reachability is the absence of a throw)
-ship.getLimits()              // → platform plan limits (cached)
+ship.getLimits()              // → the account's platform limits, read now
 ```
 
 ## CLI reference
@@ -246,8 +246,9 @@ const ship = new Ship({ token: accessToken });
 // Token provider — invoked per request; refresh lives with you
 const ship = new Ship({ token: () => mintToken() });
 
-// Cookie session — first-party browser apps
+// Cookie session: the platform's own apps, where every account request names its account
 const ship = new Ship({ session: true });
+ship.setHeaders({ 'X-Account': account });
 
 // Set or rotate the token after construction
 ship.setToken('ship-your-api-key');

package/SKILL.md

@@ -335,7 +335,7 @@ Exit code is non-zero on failure, and with `--json` the error goes to **stderr**
 ```json
 {
   "error": "validation_failed",
-  "message": "File \"index.html\" too large. Maximum 20 MB allowed.",
+  "message": "File \"setup.exe\" has an extension that is not allowed.",
   "status": 400
 }
 ```

package/THIRD-PARTY-LICENSES.md

@@ -5,7 +5,7 @@ Their copyright notices travel with that copy, and are reproduced here in
 full. This file is GENERATED from the build's own metafile — edit the
 bundle, not this list.
 
-## @shipstatic/types 3.7.0
+## @shipstatic/types 3.8.0-beta.9
 
 License: MIT
 

package/dist/browser.d.ts

@@ -724,7 +724,7 @@ type AccountPlanType = (typeof AccountPlan)[keyof typeof AccountPlan];
  * than the 403 uses.
  *
  * All three are counts plans SELL, and every plan publishes a number for each.
- * A platform subdomain (`my-app.shipstatic.com`) is among them: the namespace
+ * A platform domain (`my-app.shipstatic.com`) is among them: the namespace
  * is the platform's, so every plan bounds how many names one account may take
  * from it — which is not the address every deployment gets by construction
  * (`happy-cat-abc1234.shipstatic.com`), one per deployment and bounded by
@@ -734,8 +734,9 @@ type AccountPlanType = (typeof AccountPlan)[keyof typeof AccountPlan];
  * "unlimited" — so no consumer needs an "is it bounded?" branch. A cap of `0`
  * means the plan does not have the feature at all; a cap of `N` bounds
  * creation, and what an account already holds above a cap stays until a plan
- * TRANSITION fits it (excess paused, newest first — a domain is the only kind
- * that pauses).
+ * TRANSITION fits it: excess domains are paused, newest first, and members
+ * are paused together while the account holds more than its cap. Deployments
+ * never pause; above their cap they only block creation.
  *
  * A count is an aggregate over a collection, so it lives on the summary
  * resource that owns the collection: `GET /account` for one caller, `GET
@@ -786,18 +787,34 @@ type AccountRole = 'owner' | 'member';
  * account automation, not a person, and is always `active`.
  */
 type AccountAccess = 'active' | 'paused';
+/**
+ * The word a refusal about the account carries in `details.account`, so a
+ * client can tell the two apart without reading the sentence:
+ *
+ * - `paused`: a 403. The person is a member, and the account holds more
+ *   members than its plan allows (see {@link AccountAccess}).
+ * - `unknown`: a 404. The account the request names ({@link ACCOUNT_HEADER})
+ *   is one the person is not a member of, or one that does not exist; the
+ *   two are indistinguishable by design. A tab whose person was removed from
+ *   the account meets it on its next request.
+ */
+declare const AccountRefusal: {
+    readonly PAUSED: "paused";
+    readonly UNKNOWN: "unknown";
+};
+type AccountRefusalType = (typeof AccountRefusal)[keyof typeof AccountRefusal];
 /**
  * Core account object - used in both API responses and SDK
  * All fields are readonly to prevent accidental mutations
  */
 interface Account {
     /**
-     * The account this response describes, by id. A person may belong to
-     * several accounts and a browser session selects one, so a client names
-     * the one it means on every request (`X-Account`) and this is where it
-     * learns the name. Optional by the additive-evolution law.
+     * The account this response describes, by id: the name the console's URL
+     * carries (`/<account>/`) and a session request sends in
+     * {@link ACCOUNT_HEADER}. A machine credential IS its account, so the
+     * response names the account the credential belongs to.
      */
-    readonly account?: string;
+    readonly account: string;
     /** User email address */
     readonly email: string;
     /**
@@ -941,20 +958,6 @@ interface PlanDestination {
     readonly plan: AccountPlanType;
     readonly intervals: BillingInterval[];
 }
-/**
- * Account as returned by `GET /account` — the entity plus how the request
- * was authorized, so `whoami` can answer "what credential am I holding?".
- * Request-scoped fields live on the response type, never on the entity
- * (the `DeploymentCreateResponse` pattern).
- */
-interface AccountGetResponse extends Account {
-    /** How the request that produced this response was authorized. */
-    readonly authMethod: AuthMethodType;
-    /** Present (and true) only when the caller is an operator acting as themselves. */
-    readonly isAdmin?: true;
-    /** Present only during read-only admin impersonation: the operator's account id. */
-    readonly impersonatedBy?: string;
-}
 /**
  * Acknowledgement of `DELETE /account` (202). Termination is asynchronous —
  * a cleanup consumer finishes the job — so the account survives long enough
@@ -1264,11 +1267,12 @@ interface ErrorResponse {
 /**
  * `details` of an `ErrorType.Build` error: the evidence behind the verdict.
  *
- * The one `details` shape this file names, because it is the one a HUMAN
- * surface renders rather than a machine reads. The sentence in `message`
- * says what went wrong; the log is how the person fixing the project sees
- * where. A surface that builds shows both, the log as a block rather than
- * as prose.
+ * Named, like {@link PlanChangeRefusalDetails}, because a surface reads it:
+ * `ErrorResponse.details` stays `unknown`, and a shape a client narrows to is
+ * owned here rather than restated at its read site. The sentence in
+ * `message` says what went wrong; the log is how the person fixing the
+ * project sees where. A surface that builds shows both, the log as a block
+ * rather than as prose.
  */
 interface BuildFailureDetails {
     /**
@@ -1474,7 +1478,27 @@ interface PlatformLimits {
      * retire with it (tracked in root `backlog.md`).
      */
     readonly blockedExtensions?: readonly string[];
+    /**
+     * The way forward past each limit, in the API's own words, for the account
+     * that asked: `"Upgrade to Pro for more."` where a sold plan allows more,
+     * `"Please contact support if you need more."` where none does. The API
+     * writes it with the same function its own refusals use, so a client that
+     * refuses a file before uploading it appends this sentence to its refusal
+     * verbatim and says exactly what the server would have said. Which plans
+     * exist, which are sold and what an account's grant raises are the server's
+     * to know; a client never learns a plan name from this field, only a
+     * sentence. An anonymous caller is answered the free plan's sentence, as it
+     * is the free plan's numbers.
+     *
+     * **Optional, and the absence is load-bearing**, as `blockedExtensions`
+     * above: an API deployed before this field existed sends nothing, and a
+     * client then appends nothing. It hardens to required at the entity's next
+     * natural break, with the blocklist.
+     */
+    readonly suggestions?: Readonly<Record<PlatformLimitKey, string>>;
 }
+/** The three request limits, named as `PlatformLimits` names them. */
+type PlatformLimitKey = 'maxFileSize' | 'maxFilesCount' | 'maxTotalSize';
 /**
  * Whether a file is one the platform refuses to host.
  *
@@ -1703,16 +1727,18 @@ declare const CALLER: {
     readonly PATTERN: RegExp;
 };
 /**
- * The account a session request MEANS.
+ * The account a session request is about.
  *
- * A browser session selects one account for every tab at once, so a tab that
- * switched leaves its siblings acting for an account they no longer show. A
- * session caller may name the account it means in this header; the API
- * answers 409 `details.account: 'select'` when it differs from the account the
- * session resolves to, and the client re-selects. A precondition check the
- * client volunteers, never authority: a request without it resolves exactly as
- * before, and machine credentials never send it. One owner for the name, since
- * the API's CORS allowlist and every browser transport spell it.
+ * A person may belong to several accounts, so a request made with a browser
+ * session names the one it means, on every request to an account route; the
+ * console takes the value from its URL (`/<account>/`). The header names and
+ * membership authorizes: the API resolves the person's membership in the
+ * account named, answers 404 `details.account: 'unknown'` for an account the
+ * person is not in (or one that does not exist), and 400 when a session
+ * request names none. Machine credentials never send it, since a key, a
+ * deploy token or an OAuth grant already belongs to one account. One owner
+ * for the name, since the API's CORS allowlist and every browser transport
+ * spell it.
  */
 declare const ACCOUNT_HEADER = "X-Account";
 /**
@@ -2005,6 +2031,124 @@ interface StaticFile {
     /** The size of the file in bytes. */
     size: number;
 }
+/**
+ * The sections of an account, by first segment, each mounted twice by the
+ * console: under `/<account>/` and at the root.
+ *
+ * `owner` marks a section that means the person's OWN account: a bare path
+ * into it opens the person's own account rather than the one entered last.
+ * A pricing link's `/upgrade/pro` and the published API-key link speak about
+ * the reader's plan and key, and `/success` is where a purchase lands: only
+ * an owner buys, and a person owns exactly one account. Modals inside a
+ * section carry their own owner rule in the console; this flag is the
+ * section's alone.
+ */
+declare const SECTIONS: {
+    readonly new: {
+        readonly owner: false;
+    };
+    readonly deployments: {
+        readonly owner: false;
+    };
+    readonly domains: {
+        readonly owner: false;
+    };
+    readonly settings: {
+        readonly owner: false;
+    };
+    readonly upgrade: {
+        readonly owner: true;
+    };
+    readonly success: {
+        readonly owner: true;
+    };
+    readonly 'api-key': {
+        readonly owner: true;
+    };
+};
+/** A section's first segment. */
+type ConsoleSection = keyof typeof SECTIONS;
+/** The two fragments of the settings page a link may name. */
+type SettingsFragment = 'members' | 'api-key';
+/**
+ * The query markers a Stripe return lands with, each written by a builder
+ * below and read by `billingReturnOf`, so neither side spells one.
+ */
+declare const BILLING_RETURNS: {
+    readonly checkout: readonly ["upgrading", "true"];
+    readonly portal: readonly ["billing", "returned"];
+};
+type BillingReturn = keyof typeof BILLING_RETURNS;
+/**
+ * The paths inside one account, or, with no account, the bare form the
+ * console opens in the account entered last.
+ *
+ * ```ts
+ * consolePaths(account).domains.connect('www.example.com')
+ * // '/<account>/domains/www.example.com/connect'
+ * consolePaths().apiKey()
+ * // '/api-key'
+ * ```
+ */
+declare function consolePaths(account?: string): {
+    dashboard: () => string;
+    newSite: () => string;
+    deployments: (() => string) & {
+        upload: () => string;
+    };
+    domains: (() => string) & {
+        connect: (domain: string) => string;
+        deployment: (domain: string) => string;
+    };
+    settings: (fragment?: SettingsFragment) => string;
+    /** Settings, marked as the landing of a Stripe Customer Portal return. */
+    settingsAfterBilling: () => string;
+    upgrade: (plan?: AccountPlanType) => string;
+    success: () => string;
+    /** The success page, marked as the landing of a Stripe Checkout return. */
+    successAfterCheckout: () => string;
+    apiKey: () => string;
+};
+/** The builders `consolePaths` returns. */
+type ConsolePaths = ReturnType<typeof consolePaths>;
+/** The doors: the pages that exist before an account is known. */
+declare const doors: {
+    readonly login: (next?: string) => string;
+    readonly register: (next?: string) => string;
+    readonly logout: () => string;
+    readonly invitation: (invitation: string) => string;
+    readonly claim: (code: string) => string;
+    readonly consent: () => string;
+};
+/**
+ * Which Stripe return a query string marks: `checkout` for the success page
+ * after Checkout, `portal` for settings after the Customer Portal, or null.
+ */
+declare function billingReturnOf(search: string): BillingReturn | null;
+/**
+ * The account a path names, or null for a door, the operator partition, or
+ * the bare form. Any first segment that is not a section, a door or the
+ * partition is an account: the grammar has no other reading, and whether
+ * the account exists is the server's answer, never the path's.
+ */
+declare function accountOfPath(path: string): string | null;
+/** Whether a path names a claim link (`/claim/:code`, a bearer credential). */
+declare const isClaimPath: (path: string) => boolean;
+/** Whether a path names an invitation (`/invitations/:invitation`). */
+declare const isInvitationPath: (path: string) => boolean;
+/**
+ * Whether a path names the upgrade section, in either form: `/upgrade`,
+ * `/upgrade/:plan`, and the same under `/<account>/`.
+ */
+declare const isUpgradePath: (path: string) => boolean;
+/** The errand a destination path carries, as the sign-in doors read it. */
+type ConsoleErrand = 'claim' | 'invite' | 'upgrade';
+/**
+ * The errand a destination path carries, in specificity order: a pricing
+ * link is the broadest, and the narrower ones do not normally coexist with
+ * it.
+ */
+declare function errandOf(path: string): ConsoleErrand | null;
 /** Default API URL if not otherwise configured. */
 declare const DEFAULT_API = "https://api.shipstatic.com";
 /**
@@ -2044,15 +2188,15 @@ declare const SHIP_ENV: {
  */
 declare const SHIP_VIA_ENV = "SHIP_VIA";
 /**
- * Where a human creates an API key — the console deep link quoted by every
+ * Where a human creates an API key: the console deep link quoted by every
  * surface that teaches authentication (the CLI's config wizard, the VS Code
- * and n8n listings, the n8n rate-limit hint and credential copy). Written
- * out in five files across three repos until this export.
+ * and n8n listings, the n8n rate-limit hint and credential copy). The bare
+ * form of the path, which the console opens in the reader's own account.
  *
  * Production-branded by design: published artifacts name the product, never
  * an environment (root `CLAUDE.md`, "Environment-Aware URLs").
  */
-declare const MY_API_KEY_URL = "https://my.shipstatic.com/api-key";
+declare const MY_API_KEY_URL: string;
 /**
  * How long an anonymous deployment lives before it expires.
  *
@@ -2267,7 +2411,7 @@ interface DomainResource {
  * Account resource interface - the contract all implementations must follow
  */
 interface AccountResource {
-    get: () => Promise<AccountGetResponse>;
+    get: () => Promise<Account>;
 }
 /**
  * Token resource interface - the contract all implementations must follow
@@ -2364,11 +2508,29 @@ interface PlansResponse {
  * consent), and a billed account moving down gets a Stripe Subscription
  * Schedule that applies the change at period end. The answer says which
  * happened ({@link PlanChangeResponse}).
+ *
+ * A move down a tier is booked only by an account that fits it: until it
+ * does, the door refuses (400) with a sentence naming what to remove, and
+ * the same counts as {@link PlanChangeRefusalDetails}.
  */
 interface PlanChangeRequest {
     readonly plan: AccountPlanType;
     readonly interval: BillingInterval;
 }
+/**
+ * `details` of the change door's refusal of a move down a tier the account
+ * does not fit: the account holds more members, custom domains or platform
+ * domains than the destination allows.
+ *
+ * `excess` counts what to REMOVE before asking again, per kind, keyed like
+ * {@link Caps}; only the kinds over the destination's caps appear. The
+ * door's `message` names the same counts in a sentence, and that sentence is
+ * what a surface shows; the counts are for a client that acts on the
+ * refusal.
+ */
+interface PlanChangeRefusalDetails {
+    readonly excess: Partial<Caps>;
+}
 /**
  * The pending plan change — a Stripe Subscription Schedule, mirrored onto the
  * account. `at` is when it applies (the current period's end, Unix seconds).
@@ -2635,7 +2797,7 @@ interface UploadedFile {
  */
 declare function isPlatformDomain(domain: string, platformDomain: string): boolean;
 /**
- * Check if a domain is a custom domain (not a platform subdomain).
+ * Check if a domain is a custom domain (not a platform domain).
  * Custom domains are billable and require DNS verification.
  *
  * @example isCustomDomain("example.com", "shipstatic.com") → true
@@ -2781,8 +2943,11 @@ declare function validatePassword(value: unknown): string | undefined;
 interface DeploymentOptions extends DeploymentUploadOptions {
     /**
      * An AbortSignal to allow cancellation of the deploy operation. The one
-     * cancellation mechanism — abort the signal and the request rejects with
-     * a typed `Cancelled` error. Request timeouts are a client concern
+     * cancellation mechanism: it reaches every request the deploy makes (the
+     * limits it validates against, the SPA question and the upload itself),
+     * and aborting it rejects the deploy with a typed `Cancelled` error
+     * wherever it stands. A deploy the server had already committed stays
+     * committed. Request timeouts are a client concern
      * (`ShipClientOptions.timeout`), not a per-deploy one.
      */
     signal?: AbortSignal;
@@ -3246,17 +3411,9 @@ declare abstract class Ship$1 {
     readonly tokens: TokenResource;
     private readonly http;
     private readonly clientOptions;
-    private initPromise;
-    protected platformLimits: PlatformLimits | null;
     private credential;
     constructor(options?: ShipClientOptions);
-    protected abstract processInput(input: DeployInput, options: DeploymentOptions): Promise<StaticFile[]>;
-    /**
-     * Lazy initialization — fetches platform limits (file size / count caps) once,
-     * on the first API call. Subsequent calls reuse the resolved promise.
-     */
-    protected ensureInitialized(): Promise<void>;
-    private fetchPlatformLimits;
+    protected abstract processInput(input: DeployInput, options: DeploymentOptions, limits: PlatformLimits): Promise<StaticFile[]>;
     /**
      * Ping the API server, resolving its answer: `{ success, timestamp }`, where
      * `timestamp` is the server clock in unix SECONDS.
@@ -3275,13 +3432,16 @@ declare abstract class Ship$1 {
     /**
      * Get current account information (convenience shortcut to `ship.account.get()`).
      */
-    whoami(): Promise<AccountGetResponse>;
+    whoami(): Promise<Account>;
     /**
-     * Get platform limits (max file size, file count, total size).
-     * Reuses the response fetched during initialization. Per-instance state —
-     * does not leak between concurrent Ships against different API URLs.
+     * Get the platform limits the server states now (max file size, file count,
+     * total size, and the blocked extensions). Asked every time and never held,
+     * since a plan move or an operator's grant changes them. A `signal` aborts
+     * the request, rejecting with the typed `Cancelled` error.
      */
-    getLimits(): Promise<PlatformLimits>;
+    getLimits(options?: {
+        signal?: AbortSignal;
+    }): Promise<PlatformLimits>;
     on<K extends keyof ShipEvents>(event: K, handler: (...args: ShipEvents[K]) => void): void;
     off<K extends keyof ShipEvents>(event: K, handler: (...args: ShipEvents[K]) => void): void;
     /**
@@ -3388,6 +3548,9 @@ declare function getENV(): ExecutionEnvironment;
  * Everything else is allowed — browser percent-encodes, Worker decodes, R2 matches.
  *
  * Additional checks: path traversal, reserved names, leading/trailing dots or spaces.
+ *
+ * The reason is a complete sentence naming the file, so every surface shows it
+ * as it is (`file-rules.ts` on why).
  */
 declare function validateFileName(filename: string): {
     valid: boolean;
@@ -3516,35 +3679,40 @@ declare function calculateMD5(input: Blob | Buffer | string): Promise<MD5Result>
  * @file One ordered table of deploy-file rules, and the single evaluation two
  * renderers share.
  *
- * **The defect this closes:** one rule was rendering as three sentences. A
- * file over the size cap said `File x is too large. Maximum allowed size is
- * 20MB.` from the deploy pipelines, `File size (21 MB) exceeds limit of 20 MB`
- * from `validateFiles`, and `File too large. Maximum 20971520 bytes allowed`
- * from the API — against the dual-validation doctrine that an error reads the
- * same wherever it was caught (root `CLAUDE.md`). Both pipelines also restated
- * the whole ordered check, so node/browser parity was a comment.
- *
  * **A rule states a predicate and a sentence; a renderer chooses only how to
  * DELIVER it.** That is the `SHAPES`-table move (`cli/formatters.ts`) applied
  * to validation: the throwing renderer raises the first broken rule, the
  * collecting renderer records it, and neither authors prose. Adding a rule is
- * a row, and both surfaces get it in the same position by construction.
- *
- * **Wording follows the API where a choice existed**, so the deferred Phase B
- * — promoting this table to `@shipstatic/types` with the API consuming it —
- * has less to move. Two deliberate deviations, recorded rather than silent:
- *
- * - **Sizes are formatted, not raw bytes.** The API says `20971520 bytes`;
- *   a browser upload UI showing that is worse for the person reading it, and
- *   the unit is the smaller half of the sentence to reconcile later.
- * - **The path is named.** The API has no path to name; the throwing renderer
- *   has nothing BUT the message, so dropping it would leave a CLI user asking
- *   which file.
+ * a row, and both surfaces get it in the same position by construction. One
+ * table is also what keeps a rule from reading three ways: the deploy
+ * pipelines, `validateFiles` and the API once each worded the size cap
+ * differently, against the dual-validation doctrine that an error reads the
+ * same wherever it is caught (root `CLAUDE.md`).
+ *
+ * **Every sentence is complete on its own.** The SDK is where a refusal is
+ * worded; drop, the console, the CLI and the MCPs show the sentence verbatim
+ * and add nothing, so a sentence names its file exactly once and states the
+ * limit, and reads without a prefix. The family is subject first: `File
+ * "<path>" <verdict>. Maximum <limit> allowed.`, and `File name "<path>" …`
+ * where the name is the subject. The two rules about the SET, the count and
+ * the total, name no path. A limit's sentence ends with the suggestion the
+ * API delivered for it (`withSuggestion`), so the whole reads `File "x" is
+ * too large. Maximum 20 MB allowed. Upgrade to Pro for more.`
+ *
+ * **The API words the same rules the same way, in the same order**
+ * (`cloudflare/api/src/lib/validation.ts`), so a refusal reads alike whether
+ * the SDK made it before uploading or the boundary made it after. Sizes are
+ * formatted on both sides, and the path is named on both. That is a
+ * restatement, and it is fenced from the API's side: a test there imports
+ * this package's `validateFiles` and compares every shared rule's sentence to
+ * `validateUpload`'s. The fence dies the day the table is promoted to
+ * `@shipstatic/types` and the API imports it (Phase B, `CLAUDE.md`).
  *
  * Out of scope, and left where they are: `validateDeployPath` (a rule about
  * the deploy PATH rather than the file, and pipelines-only), and
- * `validateFiles`' UI-tier pre-checks — empty, negative, count, unbuilt
- * marker, processing error — which have one holder each and no drift.
+ * `validateFiles`' UI-tier pre-checks (empty, negative, unbuilt marker,
+ * processing error), which have one holder each and no drift, and word their
+ * sentences by the same family.
  */
 
 /** What a rule is asked about: one file, and the deploy so far. */
@@ -3596,6 +3764,15 @@ declare function validateDeployPath(deployPath: string, sourceIdentifier: string
  * @throws {ShipError} The first broken rule's sentence
  */
 declare function validateDeployFile(input: FileRuleInput, limits: PlatformLimits): void;
+/**
+ * The throwing renderer of `COUNT_RULE`: the deploy's file count, judged over
+ * the files the pipeline will send.
+ *
+ * @param count - How many files the deploy carries
+ * @param limits - The platform's limits, from `/limits`
+ * @throws {ShipError} The count rule's sentence
+ */
+declare function validateDeployCount(count: number, limits: PlatformLimits): void;
 
 /**
  * Utility functions for string manipulation.
@@ -3634,10 +3811,9 @@ declare function pluralize(count: number, singular: string, plural: string, incl
  *
  * @param browserFiles - File[] to process for deploy.
  * @param options - Processing options including pathDetect for automatic path optimization.
- * @param platformLimits - Per-instance platform limits (file-size / count / total-size caps)
- *   from the originating Ship's `GET /limits` fetch. Passed in rather than read from a
- *   module global so concurrent Ships against different API URLs cannot clobber each
- *   other's caps.
+ * @param platformLimits - The platform limits (file-size / count / total-size caps and
+ *   the blocked extensions) the deploy read from `GET /limits` at its start. Passed in,
+ *   never held, so a validation always meets the limits the server states now.
  * @returns Promise resolving to an array of StaticFile objects.
  * @throws {ShipError} If called outside a browser or with invalid input.
  */
@@ -3678,7 +3854,7 @@ declare class Ship extends Ship$1 {
      * contract stays platform-neutral.
      */
     deploy(input: File[], options?: DeploymentOptions): Promise<DeploymentCreateResponse>;
-    protected processInput(input: DeployInput, options: DeploymentOptions): Promise<StaticFile[]>;
+    protected processInput(input: DeployInput, options: DeploymentOptions, limits: PlatformLimits): Promise<StaticFile[]>;
 }
 
-export { ACCOUNT_HEADER, API_KEY, API_PATHS, AUTH_BASE_PATH, type Account, type AccountAccess, type AccountDeleteResponse, type AccountGetResponse, type AccountKeyResponse, AccountPlan, type AccountPlanType, type AccountResource, type AccountRole, type Activity, type ActivityEvent, type ActivityListResponse, type ActivityMeta, type ApiDeployOptions, ApiHttp, type ApiHttpOptions, AuthMethod, type AuthMethodType, BUILD_SETTINGS, type BillingInterval, type BillingPortalSession, type BillingSyncResponse, type BuildFailureDetails, CALLER, type Caps, DEFAULT_API, DEPLOYMENT_CONFIG_FILENAME, DEPLOY_FIELDS, DEPLOY_FILE_GRAMMAR, DEPLOY_TOKEN, type DeployBodyContext, type DeployFile, type DeployFileEncoding, type DeployFileSpec, type DeployInput, type DeployTransport, type Deployment, type DeploymentCreateResponse, type DeploymentDeleteResponse, type DeploymentListResponse, type DeploymentOptions, type DeploymentResource, type DeploymentResourceContext, type DeploymentSetOptions, DeploymentStatus, type DeploymentStatusType, type DeploymentUploadOptions, DeploymentVia, type DeploymentViaType, type DnsLookup, type DnsProvider, type DnsRecord, type DnsRecordType, type Domain, type DomainDeleteResponse, type DomainDnsResponse, type DomainListResponse, type DomainRecordsResponse, type DomainResource, type DomainSetOptions, type DomainSetResult, type DomainShareResponse, DomainStatus, type DomainStatusType, type DomainValidateResponse, DomainVerification, type DomainVerificationType, type DomainVerifyResponse, type ErrorResponse, ErrorType, type ExecutionEnvironment, FileValidationStatus as FILE_VALIDATION_STATUS, type Fetch, type FileValidationResult, FileValidationStatus, type FileValidationStatusType, IDEMPOTENCY_KEY_CONSTRAINTS, JUNK_DIRECTORIES, LABEL_CONSTRAINTS, LABEL_PATTERN, type LabelsResponse, type ListOptions, type ListResponse, type MD5Result, MY_API_KEY_URL, OAUTH_TOKEN, OAuthScope, type OAuthScopeType, PASSWORD_CONSTRAINTS, PUBLIC_DEPLOYMENT_TTL_SECONDS, type PingResponse, type Plan, type PlanChangeRequest, type PlanChangeResponse, type PlanDestination, type PlansResponse, type PlatformLimits, type RequestResult, type ResourceContext, SETUP_TROUBLESHOOTING_ANCHOR, SHIP_ENV, SHIP_VIA_ENV, SIGN_IN_RETURN_PARAM, type SPACheckDebug, type SPACheckRequest, type SPACheckResponse, SPA_CHECK_CONSTRAINTS, SPA_DEFAULT_CONFIG, type ScheduledChange, type SetupInstructionsResponse, Ship, type ShipClientOptions, ShipError, type ShipEvents, type ShipRequestInit, type StaticFile, TTL_CONSTRAINTS, type Token, type TokenCreateOptions, type TokenCreateResponse, type TokenDeleteResponse, TokenKind, type TokenKindType, type TokenListResponse, type TokenProvider, type TokenResource, type Transport, UNBUILT_PROJECT_MARKERS, UNSAFE_FILENAME_CHARS, USER_VISIBLE_EVENTS, type UploadedFile, type UserVisibleActivityEvent, type ValidatableFile, type ValidationIssue, WEB_FILE_ACCEPT, __setTestEnvironment, allValidFilesReady, assertShipJsonSyntax, calculateMD5, classifyToken, createAccountResource, createDeploymentResource, createDomainResource, createTokenResource, Ship as default, deserializeLabels, extractSubdomain, filterJunk, formatDuration, formatFileSize, formatTimeRemaining, generateDeploymentUrl, generateDomainUrl, getENV, getValidFiles, hasUnbuiltMarker, hasUnsafeChars, isBlockedExtension, isCustomDomain, isDeployment, isPlatformDomain, isShipError, normalizeVia, optimizeDeployPaths, personName, personShortName, pluralize, processFilesForBrowser, readBearerValue, serializeLabels, validateApiKey, validateApiUrl, validateBuildCommand, validateCaller, validateDeployFile, validateDeployPath, validateDeployToken, validateFileName, validateFiles, validateIdempotencyKey, validateOAuthToken, validateOutputDir, validatePassword, validateToken, validateTtl };
+export { ACCOUNT_HEADER, API_KEY, API_PATHS, AUTH_BASE_PATH, type Account, type AccountAccess, type AccountDeleteResponse, type AccountKeyResponse, AccountPlan, type AccountPlanType, AccountRefusal, type AccountRefusalType, type AccountResource, type AccountRole, type Activity, type ActivityEvent, type ActivityListResponse, type ActivityMeta, type ApiDeployOptions, ApiHttp, type ApiHttpOptions, AuthMethod, type AuthMethodType, BUILD_SETTINGS, type BillingInterval, type BillingPortalSession, type BillingSyncResponse, type BuildFailureDetails, CALLER, type Caps, type ConsoleErrand, type ConsolePaths, type ConsoleSection, DEFAULT_API, DEPLOYMENT_CONFIG_FILENAME, DEPLOY_FIELDS, DEPLOY_FILE_GRAMMAR, DEPLOY_TOKEN, type DeployBodyContext, type DeployFile, type DeployFileEncoding, type DeployFileSpec, type DeployInput, type DeployTransport, type Deployment, type DeploymentCreateResponse, type DeploymentDeleteResponse, type DeploymentListResponse, type DeploymentOptions, type DeploymentResource, type DeploymentResourceContext, type DeploymentSetOptions, DeploymentStatus, type DeploymentStatusType, type DeploymentUploadOptions, DeploymentVia, type DeploymentViaType, type DnsLookup, type DnsProvider, type DnsRecord, type DnsRecordType, type Domain, type DomainDeleteResponse, type DomainDnsResponse, type DomainListResponse, type DomainRecordsResponse, type DomainResource, type DomainSetOptions, type DomainSetResult, type DomainShareResponse, DomainStatus, type DomainStatusType, type DomainValidateResponse, DomainVerification, type DomainVerificationType, type DomainVerifyResponse, type ErrorResponse, ErrorType, type ExecutionEnvironment, FileValidationStatus as FILE_VALIDATION_STATUS, type Fetch, type FileValidationResult, FileValidationStatus, type FileValidationStatusType, IDEMPOTENCY_KEY_CONSTRAINTS, JUNK_DIRECTORIES, LABEL_CONSTRAINTS, LABEL_PATTERN, type LabelsResponse, type ListOptions, type ListResponse, type MD5Result, MY_API_KEY_URL, OAUTH_TOKEN, OAuthScope, type OAuthScopeType, PASSWORD_CONSTRAINTS, PUBLIC_DEPLOYMENT_TTL_SECONDS, type PingResponse, type Plan, type PlanChangeRefusalDetails, type PlanChangeRequest, type PlanChangeResponse, type PlanDestination, type PlansResponse, type PlatformLimitKey, type PlatformLimits, type RequestResult, type ResourceContext, SECTIONS, SETUP_TROUBLESHOOTING_ANCHOR, SHIP_ENV, SHIP_VIA_ENV, SIGN_IN_RETURN_PARAM, type SPACheckDebug, type SPACheckRequest, type SPACheckResponse, SPA_CHECK_CONSTRAINTS, SPA_DEFAULT_CONFIG, type ScheduledChange, type SettingsFragment, type SetupInstructionsResponse, Ship, type ShipClientOptions, ShipError, type ShipEvents, type ShipRequestInit, type StaticFile, TTL_CONSTRAINTS, type Token, type TokenCreateOptions, type TokenCreateResponse, type TokenDeleteResponse, TokenKind, type TokenKindType, type TokenListResponse, type TokenProvider, type TokenResource, type Transport, UNBUILT_PROJECT_MARKERS, UNSAFE_FILENAME_CHARS, USER_VISIBLE_EVENTS, type UploadedFile, type UserVisibleActivityEvent, type ValidatableFile, type ValidationIssue, WEB_FILE_ACCEPT, __setTestEnvironment, accountOfPath, allValidFilesReady, assertShipJsonSyntax, billingReturnOf, calculateMD5, classifyToken, consolePaths, createAccountResource, createDeploymentResource, createDomainResource, createTokenResource, Ship as default, deserializeLabels, doors, errandOf, extractSubdomain, filterJunk, formatDuration, formatFileSize, formatTimeRemaining, generateDeploymentUrl, generateDomainUrl, getENV, getValidFiles, hasUnbuiltMarker, hasUnsafeChars, isBlockedExtension, isClaimPath, isCustomDomain, isDeployment, isInvitationPath, isPlatformDomain, isShipError, isUpgradePath, normalizeVia, optimizeDeployPaths, personName, personShortName, pluralize, processFilesForBrowser, readBearerValue, serializeLabels, validateApiKey, validateApiUrl, validateBuildCommand, validateCaller, validateDeployCount, validateDeployFile, validateDeployPath, validateDeployToken, validateFileName, validateFiles, validateIdempotencyKey, validateOAuthToken, validateOutputDir, validatePassword, validateToken, validateTtl };