@shipstatic/ship 3.4.0-beta.2 → 3.4.0-beta.21

package/dist/index.d.ts

@@ -724,7 +724,7 @@ type AccountPlanType = (typeof AccountPlan)[keyof typeof AccountPlan];
  * than the 403 uses.
  *
  * All three are counts plans SELL, and every plan publishes a number for each.
- * A platform subdomain (`my-app.shipstatic.com`) is among them: the namespace
+ * A platform domain (`my-app.shipstatic.com`) is among them: the namespace
  * is the platform's, so every plan bounds how many names one account may take
  * from it — which is not the address every deployment gets by construction
  * (`happy-cat-abc1234.shipstatic.com`), one per deployment and bounded by
@@ -734,8 +734,9 @@ type AccountPlanType = (typeof AccountPlan)[keyof typeof AccountPlan];
  * "unlimited" — so no consumer needs an "is it bounded?" branch. A cap of `0`
  * means the plan does not have the feature at all; a cap of `N` bounds
  * creation, and what an account already holds above a cap stays until a plan
- * TRANSITION fits it (excess paused, newest first — a domain is the only kind
- * that pauses).
+ * TRANSITION fits it: excess domains are paused, newest first, and members
+ * are paused together while the account holds more than its cap. Deployments
+ * never pause; above their cap they only block creation.
  *
  * A count is an aggregate over a collection, so it lives on the summary
  * resource that owns the collection: `GET /account` for one caller, `GET
@@ -1266,11 +1267,12 @@ interface ErrorResponse {
 /**
  * `details` of an `ErrorType.Build` error: the evidence behind the verdict.
  *
- * The one `details` shape this file names, because it is the one a HUMAN
- * surface renders rather than a machine reads. The sentence in `message`
- * says what went wrong; the log is how the person fixing the project sees
- * where. A surface that builds shows both, the log as a block rather than
- * as prose.
+ * Named, like {@link PlanChangeRefusalDetails}, because a surface reads it:
+ * `ErrorResponse.details` stays `unknown`, and a shape a client narrows to is
+ * owned here rather than restated at its read site. The sentence in
+ * `message` says what went wrong; the log is how the person fixing the
+ * project sees where. A surface that builds shows both, the log as a block
+ * rather than as prose.
  */
 interface BuildFailureDetails {
     /**
@@ -1476,7 +1478,27 @@ interface PlatformLimits {
      * retire with it (tracked in root `backlog.md`).
      */
     readonly blockedExtensions?: readonly string[];
+    /**
+     * The way forward past each limit, in the API's own words, for the account
+     * that asked: `"Upgrade to Pro for more."` where a sold plan allows more,
+     * `"Please contact support if you need more."` where none does. The API
+     * writes it with the same function its own refusals use, so a client that
+     * refuses a file before uploading it appends this sentence to its refusal
+     * verbatim and says exactly what the server would have said. Which plans
+     * exist, which are sold and what an account's grant raises are the server's
+     * to know; a client never learns a plan name from this field, only a
+     * sentence. An anonymous caller is answered the free plan's sentence, as it
+     * is the free plan's numbers.
+     *
+     * **Optional, and the absence is load-bearing**, as `blockedExtensions`
+     * above: an API deployed before this field existed sends nothing, and a
+     * client then appends nothing. It hardens to required at the entity's next
+     * natural break, with the blocklist.
+     */
+    readonly suggestions?: Readonly<Record<PlatformLimitKey, string>>;
 }
+/** The three request limits, named as `PlatformLimits` names them. */
+type PlatformLimitKey = 'maxFileSize' | 'maxFilesCount' | 'maxTotalSize';
 /**
  * Whether a file is one the platform refuses to host.
  *
@@ -1824,15 +1846,17 @@ declare const SPA_DEFAULT_CONFIG: {
  * "100KB". `INDEX_FILE` is the selection rule (the file whose content rides
  * `SPACheckRequest.index`), restated by every client that builds the request.
  *
- * Neither member is a validation boundary: a client over the cap simply
- * skips the pre-flight, because the server answers an oversized index
- * `isSPA: false` anyway. A consumer that cannot import this (n8n) needs no
- * size copy at all — outcome parity is the server's, not the client's.
+ * Neither member is a validation boundary: a client over the cap skips the
+ * pre-flight and answers "no" itself, which is the answer the server gives an
+ * oversized index. Every client holds the cap, in bytes: the server's own
+ * route refuses a body over the JSON intake cap, so a client that asked about
+ * any index would fail a deploy whose upload succeeds. The n8n node, which
+ * cannot import this, restates the number under its contract fence.
  */
 declare const SPA_CHECK_CONSTRAINTS: {
     /** The file whose content is the check's subject. */
     readonly INDEX_FILE: "index.html";
-    /** Skip the pre-flight above this size — the server would answer false. */
+    /** Skip the pre-flight above this many UTF-8 bytes: the server answers no. */
     readonly MAX_INDEX_BYTES: number;
 };
 /**
@@ -1957,28 +1981,19 @@ interface SPACheckRequest {
     index: string;
 }
 /**
- * Response from SPA check endpoint
- */
-/**
- * Which of the classifier's tiers reached the verdict, and why. Named rather
- * than inline so the API's own `checkSPA` can return `SPACheckResponse`
- * instead of restating its shape.
- */
-interface SPACheckDebug {
-    /** Which tier made the detection */
-    tier: 'exclusions' | 'inclusions' | 'scoring' | 'ai' | 'fallback';
-    /** The reason for the detection result */
-    reason: string;
-}
-/**
- * A report: it answers a question and carries only the answer (`CLAUDE.md`,
- * "A report answers a question").
+ * The `/spa-check` answer: whether the upload is a single-page app, and the
+ * one sentence saying why it was or was not detected.
+ *
+ * `reason` is there so anyone can ask the open route about an upload and
+ * read the answer. It is human-readable text under the message authoring law:
+ * clients branch on `isSPA`, never on the sentence, so its wording is not a
+ * contract.
  */
 interface SPACheckResponse {
-    /** Whether the project is detected as a Single Page Application */
+    /** Whether the upload is detected as a single-page app */
     isSPA: boolean;
-    /** Debugging information about detection */
-    debug: SPACheckDebug;
+    /** Why it was or was not detected, for a person to read */
+    reason: string;
 }
 /**
  * Represents a file that has been processed and is ready for deploy.
@@ -2014,10 +2029,12 @@ interface StaticFile {
  * console: under `/<account>/` and at the root.
  *
  * `owner` marks a section that means the person's OWN account: a bare path
- * into it opens the person's own account rather than the one entered last,
- * since a pricing link's `/upgrade/pro` and the published API-key link speak
- * about the reader's plan and key. Modals inside a section carry their own
- * owner rule in the console; this flag is the section's alone.
+ * into it opens the person's own account rather than the one entered last.
+ * A pricing link's `/upgrade/pro` and the published API-key link speak about
+ * the reader's plan and key, and `/success` is where a purchase lands: only
+ * an owner buys, and a person owns exactly one account. Modals inside a
+ * section carry their own owner rule in the console; this flag is the
+ * section's alone.
  */
 declare const SECTIONS: {
     readonly new: {
@@ -2036,7 +2053,7 @@ declare const SECTIONS: {
         readonly owner: true;
     };
     readonly success: {
-        readonly owner: false;
+        readonly owner: true;
     };
     readonly 'api-key': {
         readonly owner: true;
@@ -2484,11 +2501,29 @@ interface PlansResponse {
  * consent), and a billed account moving down gets a Stripe Subscription
  * Schedule that applies the change at period end. The answer says which
  * happened ({@link PlanChangeResponse}).
+ *
+ * A move down a tier is booked only by an account that fits it: until it
+ * does, the door refuses (400) with a sentence naming what to remove, and
+ * the same counts as {@link PlanChangeRefusalDetails}.
  */
 interface PlanChangeRequest {
     readonly plan: AccountPlanType;
     readonly interval: BillingInterval;
 }
+/**
+ * `details` of the change door's refusal of a move down a tier the account
+ * does not fit: the account holds more members, custom domains or platform
+ * domains than the destination allows.
+ *
+ * `excess` counts what to REMOVE before asking again, per kind, keyed like
+ * {@link Caps}; only the kinds over the destination's caps appear. The
+ * door's `message` names the same counts in a sentence, and that sentence is
+ * what a surface shows; the counts are for a client that acts on the
+ * refusal.
+ */
+interface PlanChangeRefusalDetails {
+    readonly excess: Partial<Caps>;
+}
 /**
  * The pending plan change — a Stripe Subscription Schedule, mirrored onto the
  * account. `at` is when it applies (the current period's end, Unix seconds).
@@ -2755,7 +2790,7 @@ interface UploadedFile {
  */
 declare function isPlatformDomain(domain: string, platformDomain: string): boolean;
 /**
- * Check if a domain is a custom domain (not a platform subdomain).
+ * Check if a domain is a custom domain (not a platform domain).
  * Custom domains are billable and require DNS verification.
  *
  * @example isCustomDomain("example.com", "shipstatic.com") → true
@@ -2901,8 +2936,11 @@ declare function validatePassword(value: unknown): string | undefined;
 interface DeploymentOptions extends DeploymentUploadOptions {
     /**
      * An AbortSignal to allow cancellation of the deploy operation. The one
-     * cancellation mechanism — abort the signal and the request rejects with
-     * a typed `Cancelled` error. Request timeouts are a client concern
+     * cancellation mechanism: it reaches every request the deploy makes (the
+     * limits it validates against, the SPA question and the upload itself),
+     * and aborting it rejects the deploy with a typed `Cancelled` error
+     * wherever it stands. A deploy the server had already committed stays
+     * committed. Request timeouts are a client concern
      * (`ShipClientOptions.timeout`), not a per-deploy one.
      */
     signal?: AbortSignal;
@@ -3391,9 +3429,12 @@ declare abstract class Ship$1 {
     /**
      * Get the platform limits the server states now (max file size, file count,
      * total size, and the blocked extensions). Asked every time and never held,
-     * since a plan move or an operator's grant changes them.
+     * since a plan move or an operator's grant changes them. A `signal` aborts
+     * the request, rejecting with the typed `Cancelled` error.
      */
-    getLimits(): Promise<PlatformLimits>;
+    getLimits(options?: {
+        signal?: AbortSignal;
+    }): Promise<PlatformLimits>;
     on<K extends keyof ShipEvents>(event: K, handler: (...args: ShipEvents[K]) => void): void;
     off<K extends keyof ShipEvents>(event: K, handler: (...args: ShipEvents[K]) => void): void;
     /**
@@ -3500,6 +3541,9 @@ declare function getENV(): ExecutionEnvironment;
  * Everything else is allowed — browser percent-encodes, Worker decodes, R2 matches.
  *
  * Additional checks: path traversal, reserved names, leading/trailing dots or spaces.
+ *
+ * The reason is a complete sentence naming the file, so every surface shows it
+ * as it is (`file-rules.ts` on why).
  */
 declare function validateFileName(filename: string): {
     valid: boolean;
@@ -3628,35 +3672,40 @@ declare function calculateMD5(input: Blob | Buffer | string): Promise<MD5Result>
  * @file One ordered table of deploy-file rules, and the single evaluation two
  * renderers share.
  *
- * **The defect this closes:** one rule was rendering as three sentences. A
- * file over the size cap said `File x is too large. Maximum allowed size is
- * 20MB.` from the deploy pipelines, `File size (21 MB) exceeds limit of 20 MB`
- * from `validateFiles`, and `File too large. Maximum 20971520 bytes allowed`
- * from the API — against the dual-validation doctrine that an error reads the
- * same wherever it was caught (root `CLAUDE.md`). Both pipelines also restated
- * the whole ordered check, so node/browser parity was a comment.
- *
  * **A rule states a predicate and a sentence; a renderer chooses only how to
  * DELIVER it.** That is the `SHAPES`-table move (`cli/formatters.ts`) applied
  * to validation: the throwing renderer raises the first broken rule, the
  * collecting renderer records it, and neither authors prose. Adding a rule is
- * a row, and both surfaces get it in the same position by construction.
- *
- * **Wording follows the API where a choice existed**, so the deferred Phase B
- * — promoting this table to `@shipstatic/types` with the API consuming it —
- * has less to move. Two deliberate deviations, recorded rather than silent:
- *
- * - **Sizes are formatted, not raw bytes.** The API says `20971520 bytes`;
- *   a browser upload UI showing that is worse for the person reading it, and
- *   the unit is the smaller half of the sentence to reconcile later.
- * - **The path is named.** The API has no path to name; the throwing renderer
- *   has nothing BUT the message, so dropping it would leave a CLI user asking
- *   which file.
+ * a row, and both surfaces get it in the same position by construction. One
+ * table is also what keeps a rule from reading three ways: the deploy
+ * pipelines, `validateFiles` and the API once each worded the size cap
+ * differently, against the dual-validation doctrine that an error reads the
+ * same wherever it is caught (root `CLAUDE.md`).
+ *
+ * **Every sentence is complete on its own.** The SDK is where a refusal is
+ * worded; drop, the console, the CLI and the MCPs show the sentence verbatim
+ * and add nothing, so a sentence names its file exactly once and states the
+ * limit, and reads without a prefix. The family is subject first: `File
+ * "<path>" <verdict>. Maximum <limit> allowed.`, and `File name "<path>" …`
+ * where the name is the subject. The two rules about the SET, the count and
+ * the total, name no path. A limit's sentence ends with the suggestion the
+ * API delivered for it (`withSuggestion`), so the whole reads `File "x" is
+ * too large. Maximum 20 MB allowed. Upgrade to Pro for more.`
+ *
+ * **The API words the same rules the same way, in the same order**
+ * (`cloudflare/api/src/lib/validation.ts`), so a refusal reads alike whether
+ * the SDK made it before uploading or the boundary made it after. Sizes are
+ * formatted on both sides, and the path is named on both. That is a
+ * restatement, and it is fenced from the API's side: a test there imports
+ * this package's `validateFiles` and compares every shared rule's sentence to
+ * `validateUpload`'s. The fence dies the day the table is promoted to
+ * `@shipstatic/types` and the API imports it (Phase B, `CLAUDE.md`).
  *
  * Out of scope, and left where they are: `validateDeployPath` (a rule about
  * the deploy PATH rather than the file, and pipelines-only), and
- * `validateFiles`' UI-tier pre-checks — empty, negative, count, unbuilt
- * marker, processing error — which have one holder each and no drift.
+ * `validateFiles`' UI-tier pre-checks (empty, negative, unbuilt marker,
+ * processing error), which have one holder each and no drift, and word their
+ * sentences by the same family.
  */
 
 /** What a rule is asked about: one file, and the deploy so far. */
@@ -3708,6 +3757,15 @@ declare function validateDeployPath(deployPath: string, sourceIdentifier: string
  * @throws {ShipError} The first broken rule's sentence
  */
 declare function validateDeployFile(input: FileRuleInput, limits: PlatformLimits): void;
+/**
+ * The throwing renderer of `COUNT_RULE`: the deploy's file count, judged over
+ * the files the pipeline will send.
+ *
+ * @param count - How many files the deploy carries
+ * @param limits - The platform's limits, from `/limits`
+ * @throws {ShipError} The count rule's sentence
+ */
+declare function validateDeployCount(count: number, limits: PlatformLimits): void;
 
 /**
  * Utility functions for string manipulation.
@@ -3796,4 +3854,4 @@ declare class Ship extends Ship$1 {
     protected processInput(input: DeployInput, options: DeploymentOptions, limits: PlatformLimits): Promise<StaticFile[]>;
 }
 
-export { ACCOUNT_HEADER, API_KEY, API_PATHS, AUTH_BASE_PATH, type Account, type AccountAccess, type AccountDeleteResponse, type AccountKeyResponse, AccountPlan, type AccountPlanType, AccountRefusal, type AccountRefusalType, type AccountResource, type AccountRole, type Activity, type ActivityEvent, type ActivityListResponse, type ActivityMeta, type ApiDeployOptions, ApiHttp, type ApiHttpOptions, AuthMethod, type AuthMethodType, BUILD_SETTINGS, type BillingInterval, type BillingPortalSession, type BillingSyncResponse, type BuildFailureDetails, CALLER, type Caps, type ConsoleErrand, type ConsolePaths, type ConsoleSection, DEFAULT_API, DEPLOYMENT_CONFIG_FILENAME, DEPLOY_FIELDS, DEPLOY_FILE_GRAMMAR, DEPLOY_TOKEN, type DeployBodyContext, type DeployFile, type DeployFileEncoding, type DeployFileSpec, type DeployInput, type DeployTransport, type Deployment, type DeploymentCreateResponse, type DeploymentDeleteResponse, type DeploymentListResponse, type DeploymentOptions, type DeploymentResource, type DeploymentResourceContext, type DeploymentSetOptions, DeploymentStatus, type DeploymentStatusType, type DeploymentUploadOptions, DeploymentVia, type DeploymentViaType, type DnsLookup, type DnsProvider, type DnsRecord, type DnsRecordType, type Domain, type DomainDeleteResponse, type DomainDnsResponse, type DomainListResponse, type DomainRecordsResponse, type DomainResource, type DomainSetOptions, type DomainSetResult, type DomainShareResponse, DomainStatus, type DomainStatusType, type DomainValidateResponse, DomainVerification, type DomainVerificationType, type DomainVerifyResponse, type ErrorResponse, ErrorType, type ExecutionEnvironment, FileValidationStatus as FILE_VALIDATION_STATUS, type Fetch, type FileValidationResult, FileValidationStatus, type FileValidationStatusType, IDEMPOTENCY_KEY_CONSTRAINTS, JUNK_DIRECTORIES, LABEL_CONSTRAINTS, LABEL_PATTERN, type LabelsResponse, type ListOptions, type ListResponse, type MD5Result, MY_API_KEY_URL, OAUTH_TOKEN, OAuthScope, type OAuthScopeType, PASSWORD_CONSTRAINTS, PUBLIC_DEPLOYMENT_TTL_SECONDS, type PingResponse, type Plan, type PlanChangeRequest, type PlanChangeResponse, type PlanDestination, type PlansResponse, type PlatformLimits, type RequestResult, type ResourceContext, SECTIONS, SETUP_TROUBLESHOOTING_ANCHOR, SHIP_ENV, SHIP_VIA_ENV, SIGN_IN_RETURN_PARAM, type SPACheckDebug, type SPACheckRequest, type SPACheckResponse, SPA_CHECK_CONSTRAINTS, SPA_DEFAULT_CONFIG, type ScheduledChange, type SettingsFragment, type SetupInstructionsResponse, Ship, type ShipClientOptions, ShipError, type ShipEvents, type ShipRequestInit, type StaticFile, TTL_CONSTRAINTS, type Token, type TokenCreateOptions, type TokenCreateResponse, type TokenDeleteResponse, TokenKind, type TokenKindType, type TokenListResponse, type TokenProvider, type TokenResource, type Transport, UNBUILT_PROJECT_MARKERS, UNSAFE_FILENAME_CHARS, USER_VISIBLE_EVENTS, type UploadedFile, type UserVisibleActivityEvent, type ValidatableFile, type ValidationIssue, WEB_FILE_ACCEPT, __setTestEnvironment, accountOfPath, allValidFilesReady, assertShipJsonSyntax, billingReturnOf, calculateMD5, classifyToken, consolePaths, createAccountResource, createDeploymentResource, createDomainResource, createTokenResource, Ship as default, deserializeLabels, doors, errandOf, extractSubdomain, filterJunk, formatDuration, formatFileSize, formatTimeRemaining, generateDeploymentUrl, generateDomainUrl, getENV, getValidFiles, hasUnbuiltMarker, hasUnsafeChars, isBlockedExtension, isClaimPath, isCustomDomain, isDeployment, isInvitationPath, isPlatformDomain, isShipError, isUpgradePath, normalizeVia, optimizeDeployPaths, personName, personShortName, pluralize, processFilesForNode, readBearerValue, serializeLabels, validateApiKey, validateApiUrl, validateBuildCommand, validateCaller, validateDeployFile, validateDeployPath, validateDeployToken, validateFileName, validateFiles, validateIdempotencyKey, validateOAuthToken, validateOutputDir, validatePassword, validateToken, validateTtl };
+export { ACCOUNT_HEADER, API_KEY, API_PATHS, AUTH_BASE_PATH, type Account, type AccountAccess, type AccountDeleteResponse, type AccountKeyResponse, AccountPlan, type AccountPlanType, AccountRefusal, type AccountRefusalType, type AccountResource, type AccountRole, type Activity, type ActivityEvent, type ActivityListResponse, type ActivityMeta, type ApiDeployOptions, ApiHttp, type ApiHttpOptions, AuthMethod, type AuthMethodType, BUILD_SETTINGS, type BillingInterval, type BillingPortalSession, type BillingSyncResponse, type BuildFailureDetails, CALLER, type Caps, type ConsoleErrand, type ConsolePaths, type ConsoleSection, DEFAULT_API, DEPLOYMENT_CONFIG_FILENAME, DEPLOY_FIELDS, DEPLOY_FILE_GRAMMAR, DEPLOY_TOKEN, type DeployBodyContext, type DeployFile, type DeployFileEncoding, type DeployFileSpec, type DeployInput, type DeployTransport, type Deployment, type DeploymentCreateResponse, type DeploymentDeleteResponse, type DeploymentListResponse, type DeploymentOptions, type DeploymentResource, type DeploymentResourceContext, type DeploymentSetOptions, DeploymentStatus, type DeploymentStatusType, type DeploymentUploadOptions, DeploymentVia, type DeploymentViaType, type DnsLookup, type DnsProvider, type DnsRecord, type DnsRecordType, type Domain, type DomainDeleteResponse, type DomainDnsResponse, type DomainListResponse, type DomainRecordsResponse, type DomainResource, type DomainSetOptions, type DomainSetResult, type DomainShareResponse, DomainStatus, type DomainStatusType, type DomainValidateResponse, DomainVerification, type DomainVerificationType, type DomainVerifyResponse, type ErrorResponse, ErrorType, type ExecutionEnvironment, FileValidationStatus as FILE_VALIDATION_STATUS, type Fetch, type FileValidationResult, FileValidationStatus, type FileValidationStatusType, IDEMPOTENCY_KEY_CONSTRAINTS, JUNK_DIRECTORIES, LABEL_CONSTRAINTS, LABEL_PATTERN, type LabelsResponse, type ListOptions, type ListResponse, type MD5Result, MY_API_KEY_URL, OAUTH_TOKEN, OAuthScope, type OAuthScopeType, PASSWORD_CONSTRAINTS, PUBLIC_DEPLOYMENT_TTL_SECONDS, type PingResponse, type Plan, type PlanChangeRefusalDetails, type PlanChangeRequest, type PlanChangeResponse, type PlanDestination, type PlansResponse, type PlatformLimitKey, type PlatformLimits, type RequestResult, type ResourceContext, SECTIONS, SETUP_TROUBLESHOOTING_ANCHOR, SHIP_ENV, SHIP_VIA_ENV, SIGN_IN_RETURN_PARAM, type SPACheckRequest, type SPACheckResponse, SPA_CHECK_CONSTRAINTS, SPA_DEFAULT_CONFIG, type ScheduledChange, type SettingsFragment, type SetupInstructionsResponse, Ship, type ShipClientOptions, ShipError, type ShipEvents, type ShipRequestInit, type StaticFile, TTL_CONSTRAINTS, type Token, type TokenCreateOptions, type TokenCreateResponse, type TokenDeleteResponse, TokenKind, type TokenKindType, type TokenListResponse, type TokenProvider, type TokenResource, type Transport, UNBUILT_PROJECT_MARKERS, UNSAFE_FILENAME_CHARS, USER_VISIBLE_EVENTS, type UploadedFile, type UserVisibleActivityEvent, type ValidatableFile, type ValidationIssue, WEB_FILE_ACCEPT, __setTestEnvironment, accountOfPath, allValidFilesReady, assertShipJsonSyntax, billingReturnOf, calculateMD5, classifyToken, consolePaths, createAccountResource, createDeploymentResource, createDomainResource, createTokenResource, Ship as default, deserializeLabels, doors, errandOf, extractSubdomain, filterJunk, formatDuration, formatFileSize, formatTimeRemaining, generateDeploymentUrl, generateDomainUrl, getENV, getValidFiles, hasUnbuiltMarker, hasUnsafeChars, isBlockedExtension, isClaimPath, isCustomDomain, isDeployment, isInvitationPath, isPlatformDomain, isShipError, isUpgradePath, normalizeVia, optimizeDeployPaths, personName, personShortName, pluralize, processFilesForNode, readBearerValue, serializeLabels, validateApiKey, validateApiUrl, validateBuildCommand, validateCaller, validateDeployCount, validateDeployFile, validateDeployPath, validateDeployToken, validateFileName, validateFiles, validateIdempotencyKey, validateOAuthToken, validateOutputDir, validatePassword, validateToken, validateTtl };

package/dist/index.js

@@ -1,2 +1,2 @@
-var rt=Object.defineProperty;var A=(e,t)=>()=>(e&&(t=e(e=0)),t);var ot=(e,t)=>{for(var n in t)rt(e,n,{get:t[n],enumerable:!0})};function on(e){if(!e||typeof e!="string")return;let t=e.trim().toLowerCase();return Object.values(it).includes(t)?t:void 0}function Ae(e){if(e==null)return;if(typeof e!="string")throw s.validation("Idempotency key must be a string.");let t=e.trim();if(!t)throw s.validation("Idempotency key must not be empty.");if(t.length>N.MAX_LENGTH)throw s.validation(`Idempotency key must be at most ${N.MAX_LENGTH} characters.`);return t}function ln(e){return e.name?.trim()||e.email}function cn(e){return e.name?.trim().split(" ")[0]||e.email}function ct(e){let t=e.code;return t==="ERR_INVALID_URL"?!1:typeof t=="string"?!0:e instanceof TypeError?!/\burl\b/i.test(e.message):!1}function F(e){return e!==null&&typeof e=="object"&&"name"in e&&e.name==="ShipError"&&"status"in e}function pt(e){let t=e.replace(/\\/g,"/").split("/").pop()??"",n=t.lastIndexOf(".");return n<=0||n===t.length-1?null:t.slice(n+1).toLowerCase()}function Se(e,t){let n=pt(e);return n===null?!1:Array.isArray(t)?t.includes(n):t.has(n)}function De(e){return dt.test(e)}function M(e){return e.replace(/\\/g,"/").split("/").filter(Boolean).some(n=>Z.has(n))}function mt(e){return e.startsWith(Re.PREFIX)?R.API_KEY:e.startsWith(Ie.PREFIX)?R.DEPLOY_TOKEN:e.startsWith(Ne.PREFIX)?R.OAUTH:R.OPAQUE}function hn(e){return e.slice(0,J.length).toLowerCase()!==J?null:e.slice(J.length)||null}function Oe(e){let t=e.charCodeAt(0)===65279?e.slice(1):e,n;try{n=JSON.parse(t)}catch(r){throw s.config(`invalid JSON format in config: ${r.message}`,{filePath:S})}if(n===null||typeof n!="object"||Array.isArray(n))throw s.config(`${S} must contain a JSON object`,{filePath:S})}function ee(e,t,n){if(!e.startsWith(t.PREFIX))throw s.validation(`${n} must start with "${t.PREFIX}"`);if(e.length!==t.TOTAL_LENGTH)throw s.validation(`${n} must be ${t.TOTAL_LENGTH} characters total (${t.PREFIX} + ${t.HEX_LENGTH} hex chars)`);let r=e.slice(t.PREFIX.length);if(!new RegExp(`^[a-f0-9]{${t.HEX_LENGTH}}$`,"i").test(r))throw s.validation(`${n} must contain ${t.HEX_LENGTH} hexadecimal characters after "${t.PREFIX}" prefix`)}function ft(e){ee(e,Re,"API key")}function ht(e){ee(e,Ie,"Deploy token")}function yt(e){ee(e,Ne,"OAuth access token")}function te(e){switch(mt(e)){case R.API_KEY:ft(e);return;case R.DEPLOY_TOKEN:ht(e);return;case R.OAUTH:yt(e);return;case R.OPAQUE:if(!e)throw s.validation("Token must be a non-empty string")}}function be(e){if(!e||e.length>O.MAX_LENGTH||!O.PATTERN.test(e))throw s.validation(`Caller must be 1-${O.MAX_LENGTH} characters: letters, digits, dots, underscores, or hyphens`)}function En(e){try{let t=new URL(e);if(!["http:","https:"].includes(t.protocol))throw s.validation("API URL must use http:// or https:// protocol");if(t.pathname!=="/"&&t.pathname!=="")throw s.validation("API URL must not contain a path");if(t.search||t.hash)throw s.validation("API URL must not contain query parameters or fragments")}catch(t){throw F(t)?t:s.validation("API URL must be a valid URL")}}function gn(e){return/^[a-z]+-[a-z]+-[a-z0-9]{7}(\.[a-z0-9.-]+)?$/i.test(e)}function ne(e){if(e!=null){if(typeof e!="number"||!Number.isFinite(e))throw s.validation("TTL must be a number of seconds");if(!Number.isInteger(e))throw s.validation("TTL must be a whole number of seconds");if(e<C.MIN_SECONDS||e>C.MAX_SECONDS)throw s.validation(`TTL must be between ${C.MIN_SECONDS} and ${C.MAX_SECONDS} seconds`);return e}}function At(e){let t=e?`/${e}`:"",n=r=>`${t}${r}`;return{dashboard:()=>t||"/",newSite:()=>n("/new"),deployments:Object.assign(()=>n("/deployments"),{upload:()=>n("/deployments/upload")}),domains:Object.assign(()=>n("/domains"),{connect:r=>n(`/domains/${r}/connect`),deployment:r=>n(`/domains/${r}/deployment`)}),settings:r=>n(r?`/settings#${r}`:"/settings"),settingsAfterBilling:()=>n(`/settings?${Ee("portal")}`),upgrade:r=>n(r?`/upgrade/${r}`:"/upgrade"),success:()=>n("/success"),successAfterCheckout:()=>n(`/success?${Ee("checkout")}`),apiKey:()=>n("/api-key")}}function An(e){let t=new URLSearchParams(e);for(let[n,[r,o]]of Object.entries(Pe))if(t.get(r)===o)return n;return null}function k(e){let t=e.split(/[?#]/)[0].toLowerCase(),[n="",r=""]=t.split("/").filter(Boolean);return St(n)?{kind:"door",door:n}:n===Tt?{kind:"admin"}:n===""||Te(n)?{kind:"account",account:null,section:n===""?null:n}:{kind:"account",account:n,section:Te(r)?r:null}}function Sn(e){let t=k(e);return t.kind==="account"?t.account:null}function Dn(e){return Dt(e)?"claim":Rt(e)?"invite":It(e)?"upgrade":null}function Nt(e){let t=Math.round(e/60);if(!(t>=1))return"less than a minute";if(t<120)return Q(t,"minute");let n=Math.round(e/3600);return n<48?Q(n,"hour"):Q(Math.round(e/86400),"day")}function Ln(e,t=Date.now()/1e3){let n=e-t;return n>0?Nt(n):null}function Q(e,t){return`${e} ${t}${e===1?"":"s"}`}function x(e,t=1){if(e===0)return"0 Bytes";let n=1024,r=["Bytes","KB","MB","GB"],o=Math.floor(Math.log(e)/Math.log(n));return`${Number.parseFloat((e/n**o).toFixed(t))} ${r[o]}`}function xe(e,t){return e.endsWith(`.${t}`)}function bn(e,t){return!xe(e,t)}function Pn(e,t){return xe(e,t)?e.slice(0,-(t.length+1)):null}function xn(e){return`https://${e}`}function _n(e){return`https://${e}`}function wn(e){return!e||e.length===0?null:JSON.stringify(e)}function Cn(e){if(!e)return[];try{let t=JSON.parse(e);return Array.isArray(t)?t:[]}catch{return[]}}function we(e){if(e==null||e==="")return;if(typeof e!="string")throw s.validation("Build command must be a string");let t=e.trim();if(t.length===0||t.length>b.COMMAND_MAX_LENGTH)throw s.validation(`Build command must be between 1 and ${b.COMMAND_MAX_LENGTH} characters`);if(/[\x00-\x1f\x7f]/.test(t))throw s.validation("Build command must be a single line");return t}function Ce(e){if(e==null||e==="")return;if(typeof e!="string")throw s.validation("Output folder must be a string");let t=e.trim().replace(/\/+$/,"");if(t.length===0||t.length>b.OUTPUT_DIR_MAX_LENGTH)throw s.validation(`Output folder must be between 1 and ${b.OUTPUT_DIR_MAX_LENGTH} characters`);if(!b.OUTPUT_DIR_PATTERN.test(t)||t.split("/").some(n=>n===".."||n==="."))throw s.validation("Output folder must be a relative path inside the project, like dist or dist/site");return t}function oe(e){if(e==null)return;if(typeof e!="string")throw s.validation("Password must be a string");let t=e.trim();if(t.length<v.MIN_LENGTH||t.length>v.MAX_LENGTH)throw s.validation(`Password must be between ${v.MIN_LENGTH} and ${v.MAX_LENGTH} characters`);return t}var en,it,tn,nn,rn,N,sn,an,m,E,pn,d,st,Y,at,lt,s,ut,un,dt,Z,dn,mn,W,Re,Ie,Ne,O,fn,R,J,yn,S,Le,U,C,Et,gt,Tt,Pe,Ee,ge,Tn,St,Te,Dt,Rt,It,re,P,Rn,In,Nn,On,h,I,_e,b,v,f=A(()=>{"use strict";en={PENDING:"pending",SUCCESS:"success",FAILED:"failed",DELETING:"deleting"},it={WEB:"web",SDK:"sdk",CLI:"cli",MCP:"mcp",GIT:"git",N8N:"n8n",GPT:"gpt",VSC:"vsc",CLD:"cld",CRS:"crs",GMN:"gmn",API:"api"},tn={LIVE:"live",UNLINKED:"unlinked",UNVERIFIED:"unverified",PAUSED:"paused"},nn={PENDING:"pending",PARTIAL:"partial",VERIFIED:"verified"},rn="troubleshooting",N={HEADER:"Idempotency-Key",MAX_LENGTH:256,WINDOW_SECONDS:1440*60};sn={FREE:"free",PRO:"pro",TEAM:"team",SCALE:"scale",SPONSORED:"sponsored"},an={PAUSED:"paused",UNKNOWN:"unknown"};m={DEPLOYMENTS:"/deployments",DEPLOYMENT:e=>`/deployments/${e}`,DEPLOYMENT_CONFIG:e=>`/deployments/${e}/config`,DOMAINS:"/domains",DOMAIN:e=>`/domains/${e}`,DOMAIN_VERIFY:e=>`/domains/${e}/verify`,DOMAIN_DNS:e=>`/domains/${e}/dns`,DOMAIN_RECORDS:e=>`/domains/${e}/records`,DOMAIN_SHARE:e=>`/domains/${e}/share`,DOMAIN_PROPAGATION:e=>`/domains/${e}/propagation`,DOMAINS_VALIDATE:"/domains/validate",TOKENS:"/tokens",TOKEN:e=>`/tokens/${e}`,ACCOUNT:"/account",ACCOUNT_KEY:"/account/key",ACCOUNT_CLAIM:"/account/claim",ACTIVITIES:"/activities",LABELS:"/labels",LIMITS:"/limits",PLANS:"/plans",PING:"/ping",SETUP:"/setup",SPA_CHECK:"/spa-check",UPLOAD:"/upload"},E={FILES:"files[]",CHECKSUMS:"checksums",LABELS:"labels",VIA:"via",PASSWORD:"password",TTL:"ttl",BUILD:"build",PRERENDER:"prerender",SPA:"spa",BUILD_COMMAND:"buildCommand",OUTPUT_DIR:"outputDir",CAPTCHA:"captcha"},pn={PATH:"path",CONTENT:"content",ENCODING:"encoding",DEFAULT_ENCODING:"utf-8",ENCODINGS:["utf-8","base64"]},d={Validation:"validation_failed",NotFound:"not_found",Forbidden:"forbidden",RateLimit:"rate_limit_exceeded",Authentication:"authentication_failed",Business:"business_logic_error",Api:"internal_server_error",Maintenance:"maintenance",Build:"build_failed",Network:"network_error",Timeout:"timeout_error",Cancelled:"operation_cancelled",File:"file_error",Config:"config_error"},st=new Set([d.Network,d.Timeout,d.Cancelled,d.File,d.Config]),Y={client:new Set([d.Build,d.Business,d.Cancelled,d.Config,d.File,d.Forbidden,d.NotFound,d.RateLimit,d.Validation]),network:new Set([d.Network,d.Timeout]),auth:new Set([d.Authentication])},at=new Set(Object.values(d).filter(e=>!st.has(e))),lt=200;s=class e extends Error{type;status;details;constructor(t,n,r,o){super(n),this.type=t,this.status=r,this.details=o,this.name="ShipError"}toResponse(){let t=this.details,n=this.type===d.Authentication&&t?.internal?void 0:this.details;return{error:this.type,message:this.message,status:this.status,details:n}}static async fromHttpResponse(t,n){let r,o,i;try{if(t.headers.get("content-type")?.includes("application/json")){let u=await t.json();if(u&&typeof u=="object"){let c=u;typeof c.message=="string"?r=c.message:typeof c.error=="string"&&(r=c.error),o=c.details,typeof c.error=="string"&&at.has(c.error)&&(i=c.error)}}else{let u=(await t.text()).trim();u&&!u.startsWith("<")&&u.length<=lt&&(r=u)}}catch{}let l=t.headers.get("retry-after");if(l!==null){let a=l.trim(),u=/^\d+$/.test(a)?Number(a):Math.ceil((Date.parse(a)-Date.now())/1e3);if(Number.isFinite(u)&&u>=0){let c=o&&typeof o=="object"?o:{};c.retryAfter===void 0&&(o={...c,retryAfter:u})}}r=r||`${n||"Request"} failed with status ${t.status}`;let p=i??(t.status===401?d.Authentication:t.status===403?d.Forbidden:t.status===429?d.RateLimit:d.Api);return new e(p,r,t.status,o)}static fromFetchError(t,n){if(F(t))return t;let r=n||"Request",o=t?.name;return o==="AbortError"?e.cancelled(`${r} was cancelled`):o==="TimeoutError"?e.timeout(`${r} timed out`,{cause:t}):t instanceof Error?ct(t)?e.network(`${r} failed: ${t.message}`,{cause:t}):new e(d.Api,`${r} failed: ${t.message}`):new e(d.Api,`${r} failed: Unknown error`)}static validation(t,n){return new e(d.Validation,t,400,n)}static notFound(t,n){let r=n?`${t} ${n} not found`:`${t} not found`;return new e(d.NotFound,r,404)}static forbidden(t,n){return new e(d.Forbidden,t,403,n)}static rateLimit(t="Too many requests",n){return new e(d.RateLimit,t,429,n)}static authentication(t="Authentication required",n){return new e(d.Authentication,t,401,n)}static business(t,n=400,r){return new e(d.Business,t,n,r)}static network(t,n){return new e(d.Network,t,void 0,n)}static timeout(t,n){return new e(d.Timeout,t,void 0,n)}static cancelled(t,n){return new e(d.Cancelled,t,void 0,n)}static file(t,n){return new e(d.File,t,void 0,n)}static config(t,n){return new e(d.Config,t,void 0,n)}static api(t,n=500,r){return new e(d.Api,t,n,r)}static maintenance(t,n){return new e(d.Maintenance,t,503,n)}static build(t,n){return new e(d.Build,t,422,n)}isClientError(){return Y.client.has(this.type)?!0:this.status!==void 0&&this.status>=400&&this.status<500}isNetworkError(){return Y.network.has(this.type)}isAuthError(){return Y.auth.has(this.type)}isType(t){return this.type===t}};ut=["html","htm","xhtml","xml","txt","md","markdown","pdf","csv","json","jsonc","webmanifest","map","toml","yaml","yml","rss","atom","css","scss","sass","less","js","mjs","cjs","jsx","ts","tsx","wasm","vue","svelte","png","jpg","jpeg","gif","webp","avif","svg","ico","bmp","tif","tiff","heic","heif","woff","woff2","ttf","otf","eot","mp3","wav","ogg","oga","opus","m4a","aac","flac","weba","mp4","webm","ogv","mov","m4v","avi","glb","gltf","usdz","vtt","srt","zip"],un=ut.map(e=>`.${e}`).join(","),dt=/[\x00-\x1f\x7f#?%\\<>"]/;Z=new Set(["node_modules","package.json"]);dn="/auth",mn="signing-in",W={SESSION:"session",API_KEY:"apiKey",TOKEN:"token",AGENT:"agent",OAUTH:"oauth",SYSTEM:"system"},Re={PREFIX:"ship-",HEX_LENGTH:32,TOTAL_LENGTH:37,HINT_LENGTH:4},Ie={PREFIX:"deploy-",HEX_LENGTH:32,TOTAL_LENGTH:39},Ne={PREFIX:"oauth-",HEX_LENGTH:32,TOTAL_LENGTH:38},O={HEADER:"X-Caller",MAX_LENGTH:128,PATTERN:/^[a-zA-Z0-9._-]+$/},fn="X-Account",R={API_KEY:W.API_KEY,DEPLOY_TOKEN:W.TOKEN,OAUTH:W.OAUTH,OPAQUE:"opaque"};J="bearer ";yn={ACCOUNT_READ:"account:read",DEPLOYMENTS_READ:"deployments:read",DEPLOYMENTS_WRITE:"deployments:write",DOMAINS_READ:"domains:read",DOMAINS_WRITE:"domains:write"},S="ship.json",Le={rewrites:[{source:"/(.*)",destination:"/index.html"}]},U={INDEX_FILE:"index.html",MAX_INDEX_BYTES:100*1024};C={MIN_SECONDS:1,MAX_SECONDS:365*24*60*60};Et={new:{owner:!1},deployments:{owner:!1},domains:{owner:!1},settings:{owner:!1},upgrade:{owner:!0},success:{owner:!1},"api-key":{owner:!0}},gt=["login","register","logout","invitations","claim","consent"],Tt="admin",Pe={checkout:["upgrading","true"],portal:["billing","returned"]},Ee=e=>Pe[e].join("="),ge=(e,t)=>t?`${e}?next=${encodeURIComponent(t)}`:e;Tn={login:e=>ge("/login",e),register:e=>ge("/register",e),logout:()=>"/logout",invitation:e=>`/invitations/${e}`,claim:e=>`/claim/${e}`,consent:()=>"/consent"};St=e=>gt.includes(e),Te=e=>Object.hasOwn(Et,e);Dt=e=>{let t=k(e);return t.kind==="door"&&t.door==="claim"},Rt=e=>{let t=k(e);return t.kind==="door"&&t.door==="invitations"},It=e=>{let t=k(e);return t.kind==="account"&&t.section==="upgrade"};re="https://api.shipstatic.com",P={TOKEN:"SHIP_TOKEN",API_URL:"SHIP_API_URL"},Rn="SHIP_VIA",In=`https://my.shipstatic.com${At().apiKey()}`,Nn=4320*60;On=["account.create","account.update","account.delete","account.key.generate","account.plan.transition","deployment.create","deployment.update","deployment.delete","deployment.claim","domain.create","domain.update","domain.delete","domain.verify","token.create","token.consume","token.delete","member.join","member.leave","consent.grant"],h={PENDING:"pending",PROCESSING_ERROR:"processing_error",EXCLUDED:"excluded",VALIDATION_FAILED:"validation_failed",READY:"ready"};I={MIN_LENGTH:3,MAX_LENGTH:25,MAX_COUNT:10,SEPARATORS:"._-"},_e=/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;b={COMMAND_MAX_LENGTH:200,OUTPUT_DIR_MAX_LENGTH:100,OUTPUT_DIR_PATTERN:/^[A-Za-z0-9._-]+(\/[A-Za-z0-9._-]+)*$/};v={MIN_LENGTH:6,MAX_LENGTH:128}});async function vt(e){let t=(await import("spark-md5")).default,n=new t.ArrayBuffer,r=2097152;for(let o=0;o<e.size;o+=r){let i=Math.min(o+r,e.size);n.append(await e.slice(o,i).arrayBuffer())}return{md5:n.end()}}async function Ft(e){let{createHash:t}=await import("crypto"),n=t("md5");return n.update(e),{md5:n.digest("hex")}}async function Mt(e){let{createHash:t}=await import("crypto"),{createReadStream:n}=await import("fs");return new Promise((r,o)=>{let i=t("md5"),l=n(e);l.on("error",p=>o(s.file(`Failed to read file for MD5: ${p.message}`,{filePath:e}))),l.on("data",p=>i.update(p)),l.on("end",()=>r({md5:i.digest("hex")}))})}async function G(e){if(e instanceof Blob)return vt(e);if(typeof Buffer<"u"&&Buffer.isBuffer(e))return Ft(e);if(typeof e=="string")return Mt(e);throw s.business("Invalid input for MD5 calculation")}var B=A(()=>{"use strict";f()});function or(e){se=e}function Ht(){return typeof process<"u"&&process.versions&&process.versions.node?"node":typeof window<"u"||typeof self<"u"?"browser":"unknown"}function L(){return se||Ht()}var se,w=A(()=>{"use strict";se=null});function je(e){if(!e||e.length===0)return"";let t=e.filter(i=>i&&typeof i=="string").map(i=>i.replace(/\\/g,"/"));if(t.length===0)return"";if(t.length===1)return t[0];let n=t.map(i=>i.split("/").filter(Boolean)),r=[],o=Math.min(...n.map(i=>i.length));for(let i=0;i<o;i++){let l=n[0][i];if(n.every(p=>p[i]===l))r.push(l);else break}return r.join("/")}function K(e){return e.replace(/\\/g,"/").replace(/\/+/g,"/").replace(/^\/+/,"")}var ae=A(()=>{"use strict"});function qe(e,t={}){if(t.flatten===!1)return e.map(r=>({path:K(r),name:le(r)}));let n=Vt(e);return e.map(r=>{let o=K(r);if(n){let i=n.endsWith("/")?n:`${n}/`;o.startsWith(i)&&(o=o.substring(i.length))}return o||(o=le(r)),{path:o,name:le(r)}})}function Vt(e){if(!e.length)return"";let n=e.map(i=>K(i)).map(i=>i.split("/")),r=[],o=Math.min(...n.map(i=>i.length));for(let i=0;i<o-1;i++){let l=n[0][i];if(n.every(p=>p[i]===l))r.push(l);else break}return r.join("/")}function le(e){return e.split(/[/\\]/).pop()||e}var ce=A(()=>{"use strict";ae()});function j(e,t){return zt.find(n=>n.broken(e,t))}var zt,ue=A(()=>{"use strict";f();de();zt=[{name:"name",broken:({path:e})=>!pe(e).valid,sentence:({path:e})=>pe(e).reason??"Invalid file name"},{name:"extension",broken:({path:e},t)=>Se(e,t.blockedExtensions??[]),sentence:({path:e})=>`File extension not allowed: "${e}"`},{name:"fileSize",broken:({size:e},t)=>e>t.maxFileSize,sentence:({path:e},t)=>`File "${e}" too large. Maximum ${x(t.maxFileSize)} allowed`},{name:"totalSize",broken:({totalSize:e},t)=>e>t.maxTotalSize,sentence:({totalSize:e},t)=>`Total upload size too large. ${x(e)} exceeds maximum of ${x(t.maxTotalSize)}`}]});function pe(e){if(De(e))return{valid:!1,reason:"File name contains unsafe characters"};if(e.startsWith(" ")||e.endsWith(" "))return{valid:!1,reason:"File name cannot start/end with spaces"};if(e.endsWith("."))return{valid:!1,reason:"File name cannot end with dots"};let t=/^(CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])(\.|$)/i,n=e.split("/").pop()||e;return t.test(n)?{valid:!1,reason:"File name uses a reserved system name"}:e.includes("..")?{valid:!1,reason:"File name contains path traversal pattern"}:{valid:!0}}function Rr(e,t){let n=[],r=[],o=[];if(e.length===0){let a={file:"(no files)",message:"At least one file must be provided"};return n.push(a),{files:[],validFiles:[],errors:n,warnings:[],canDeploy:!1}}for(let a of e)if(M(a.name))return n.push({file:a.name,message:"Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder"}),{files:e.map(u=>({...u,status:h.VALIDATION_FAILED,statusMessage:"Unbuilt project detected"})),validFiles:[],errors:n,warnings:[],canDeploy:!1};if(e.length>t.maxFilesCount){let a={file:`(${e.length} files)`,message:`File count (${e.length}) exceeds limit of ${t.maxFilesCount}`};return n.push(a),{files:e.map(u=>({...u,status:h.VALIDATION_FAILED,statusMessage:a.message})),validFiles:[],errors:n,warnings:[],canDeploy:!1}}let i=0;for(let a of e){let u=h.READY,c="Ready for upload";if(a.status===h.PROCESSING_ERROR)u=h.VALIDATION_FAILED,c=a.statusMessage||"File failed during processing",n.push({file:a.name,message:c});else if(a.size===0){u=h.EXCLUDED,c="File is empty (0 bytes) and cannot be deployed due to storage limitations",r.push({file:a.name,message:c}),o.push({...a,status:u,statusMessage:c});continue}else if(a.size<0)u=h.VALIDATION_FAILED,c="File size must be positive",n.push({file:a.name,message:c});else if(!a.name||a.name.trim().length===0)u=h.VALIDATION_FAILED,c="File name cannot be empty",n.push({file:a.name||"(empty)",message:c});else if(a.name.includes("\0"))u=h.VALIDATION_FAILED,c="File name contains invalid characters (null byte)",n.push({file:a.name,message:c});else{let y={path:a.name,size:a.size,totalSize:i+a.size},D=j(y,t);D?(u=h.VALIDATION_FAILED,c=D.sentence(y,t),n.push({file:D.name==="totalSize"?`(${e.length} files)`:a.name,message:c})):i=y.totalSize}o.push({...a,status:u,statusMessage:c})}n.length>0&&(o=o.map(a=>a.status===h.EXCLUDED?a:{...a,status:h.VALIDATION_FAILED,statusMessage:a.status===h.VALIDATION_FAILED?a.statusMessage:"Deployment failed due to validation errors in bundle"}));let l=n.length===0?o.filter(a=>a.status===h.READY):[],p=n.length===0;return{files:o,validFiles:l,errors:n,warnings:r,canDeploy:p}}function Kt(e){return e.filter(t=>t.status===h.READY)}function Ir(e){return Kt(e).length>0}var de=A(()=>{"use strict";f();ue();f()});import{isJunk as jt}from"junk";function Xe(e,t){if(!e||e.length===0)return[];if(!t?.allowUnbuilt&&e.find(r=>r&&M(r)))throw s.business("Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder");return e.filter(n=>{if(!n)return!1;let r=n.replace(/\\/g,"/").split("/").filter(Boolean);if(r.length===0)return!0;let o=r[r.length-1];if(jt(o))return!1;for(let l of r)if(l!==".well-known"&&(l.startsWith(".")||l.length>255))return!1;let i=r.slice(0,-1);for(let l of i)if(qt.some(p=>l.toLowerCase()===p.toLowerCase()))return!1;return!0})}var qt,me=A(()=>{"use strict";f();qt=["__MACOSX",".Trashes",".fseventsd",".Spotlight-V100"]});function Ye(e,t){if(e.includes("\0")||e.includes("/../")||e.startsWith("../")||e.endsWith("/.."))throw s.business(`Security error: Unsafe file path "${e}" for file: ${t}`)}function We(e,t){let n=j(e,t);if(n)throw s.business(n.sentence(e,t))}var fe=A(()=>{"use strict";f();ue()});async function Je(e,t={},n){let r=!!(t.build||t.prerender),o=qe(e.map(c=>c.path),{flatten:t.pathDetect!==!1}).map(c=>c.path),i=new Set(Xe(o,{allowUnbuilt:r})),l=e.map((c,y)=>({source:c,deployPath:o[y]})).filter(({deployPath:c})=>i.has(c));if(l.length===0)return[];let p=r?null:Xt(n),a=[],u=0;for(let{source:c,deployPath:y}of l){if(p&&Ye(y,c.origin),c.size===0)continue;p&&(u+=c.size,We({path:y,size:c.size,totalSize:u},p));let D=await c.read(),{md5:q}=await G(D);a.push({path:y,content:D,size:c.size,md5:q})}if(p&&a.length>p.maxFilesCount)throw s.business(`Too many files to deploy. Maximum allowed is ${p.maxFilesCount} files.`);return a}function Xt(e){if(!e)throw s.config("Platform limits not provided. Deploy-mode validation requires the limits argument \u2014 pass `ship.getLimits()` result.");return e}var Qe=A(()=>{"use strict";f();ce();me();B();fe()});var tt={};ot(tt,{processFilesForNode:()=>et});import*as T from"fs";import*as g from"path";function Ze(e,t=new Set){let n=[],r=T.realpathSync(e);if(t.has(r))return n;t.add(r);for(let o of T.readdirSync(e)){let i=g.join(e,o),l=T.statSync(i);l.isDirectory()?n.push(...Ze(i,t)):l.isFile()&&n.push({absPath:i,size:l.size})}return n}async function Yt(e){try{return T.readFileSync(e)}catch(t){let n=t instanceof Error?t.message:String(t);throw s.file(`Failed to read file "${e}": ${n}`,{filePath:e})}}function Wt(e){for(let t of e){let n=g.resolve(t);try{if(T.statSync(n).isDirectory()){let r=T.readdirSync(n).find(o=>Z.has(o));if(r)throw s.business(`"${r}" detected \u2014 deploy your build output (dist/, build/, out/), not the project folder`)}}catch(r){if(F(r))throw r}}}async function et(e,t={},n){if(L()!=="node")throw s.business("processFilesForNode can only be called in Node.js environment.");Wt(e);let r=e.flatMap(p=>{let a=g.resolve(p);try{let u=T.statSync(a);return u.isDirectory()?Ze(a):[{absPath:a,size:u.size}]}catch{throw s.file(`Path does not exist: ${p}`,{filePath:p})}}),o=new Map(r.map(p=>[p.absPath,p.size])),i=je(e.map(p=>g.resolve(p)).map(p=>{try{return T.statSync(p).isDirectory()?p:g.dirname(p)}catch{return g.dirname(p)}})),l=[...o].map(([p,a])=>({path:Jt(p,i),origin:p,size:a,read:()=>Yt(p)}));return Je(l,t,n)}function Jt(e,t){if(t&&t.length>0){let n=g.relative(t,e);if(n&&typeof n=="string"&&!n.startsWith(".."))return n.replace(/\\/g,"/")}return g.basename(e)}var he=A(()=>{"use strict";f();Qe();w();ae()});f();f();f();var $=class{constructor(){this.handlers=new Map}on(t,n){this.handlers.has(t)||this.handlers.set(t,new Set),this.handlers.get(t)?.add(n)}off(t,n){let r=this.handlers.get(t);r&&(r.delete(n),r.size===0&&this.handlers.delete(t))}emit(t,...n){let r=this.handlers.get(t);if(!r)return;let o=Array.from(r);for(let i of o)try{i(...n)}catch(l){r.delete(i),t!=="error"&&setTimeout(()=>{let p=l instanceof Error?l:new Error(String(l));this.emit("error",p,String(t))},0)}}};var Lt=3e4,Ot=2,bt=300,Pt=2e3,xt=new Set([500,502,503,504]);function _t(e,t){return new Promise((n,r)=>{if(t?.aborted){r(t.reason);return}let o=()=>{clearTimeout(l),t?.removeEventListener("abort",i)},i=()=>{o(),r(t?.reason)},l=setTimeout(()=>{o(),n()},e);t?.addEventListener("abort",i)})}var ve=3e5,wt=3e5,Ct=ve+wt,H=class extends ${constructor(n){super();this.globalHeaders={};this.apiUrl=n.apiUrl||re,this.getAuthHeadersCallback=n.getAuthHeaders,this.session=n.session??!1,this.caller=n.caller,this.timeout=n.timeout??Lt,this.maxRetries=Math.max(0,n.maxRetries??Ot),this.fetch=n.fetch??globalThis.fetch.bind(globalThis),this.deploy={endpoint:n.deployEndpoint||m.DEPLOYMENTS,timeout:n.timeout??ve,buildTimeout:n.timeout??Ct}}setGlobalHeaders(n){this.globalHeaders=n}async executeRequest(n,r,o,i=this.timeout){for(let l=0;;l++)try{return await this.attemptOnce(n,r,o,i)}catch(p){let a=s.fromFetchError(p,o);if(l>=this.maxRetries||!this.isRetryable(a,r))throw this.emit("error",a,n),a;this.emit("retry",a,n,l+1);let u=Math.min(Pt,bt*2**l);try{await _t(Math.random()*u,r.signal)}catch(c){let y=s.fromFetchError(c,o);throw this.emit("error",y,n),y}}}isRetryable(n,r){if(r.signal?.aborted||n.isType(d.Maintenance)||n.isType(d.Cancelled)||!(n.isNetworkError()||n.status!==void 0&&xt.has(n.status)))return!1;let i=(r.method??"GET").toUpperCase();return i==="GET"||i==="HEAD"?!0:i==="PUT"||i==="DELETE"?!1:this.hasIdempotencyKey(r.headers)}hasIdempotencyKey(n){if(!n)return!1;let r=N.HEADER.toLowerCase();return Object.keys(n).some(o=>o.toLowerCase()===r)}async attemptOnce(n,r,o,i=this.timeout){let l=()=>{};try{let p=await this.mergeHeaders(r.headers),a=this.createTimeoutSignal(r.signal,i);l=a.cleanup;let u={...r,headers:p,credentials:this.session&&!p.Authorization?"include":void 0,signal:a.signal};this.emit("request",n,u);let c=await this.fetch(n,u);if(l(),!c.ok)throw await s.fromHttpResponse(c,o);return this.emit("response",this.safeClone(c),n),{data:await this.parseResponse(this.safeClone(c)),status:c.status}}catch(p){throw l(),s.fromFetchError(p,o)}}async request(n,r,o,i){let{data:l}=await this.executeRequest(`${this.apiUrl}${n}`,r,o,i);return l}async requestWithStatus(n,r,o){return this.executeRequest(`${this.apiUrl}${n}`,r,o)}async mergeHeaders(n={}){return{...this.globalHeaders,...this.caller?{[O.HEADER]:this.caller}:{},...await this.getAuthHeadersCallback(),...n}}createTimeoutSignal(n,r=this.timeout){let o=new AbortController,i=setTimeout(()=>o.abort(new DOMException(`Timed out after ${r}ms`,"TimeoutError")),r),l=n?()=>o.abort(n.reason):void 0;return n&&l&&(n.addEventListener("abort",l),n.aborted&&o.abort(n.reason)),{signal:o.signal,cleanup:()=>{clearTimeout(i),n&&l&&n.removeEventListener("abort",l)}}}safeClone(n){try{return n.clone()}catch{return n}}async parseResponse(n){if(!(n.headers.get("Content-Length")==="0"||n.status===204))return n.json()}};f();f();async function Fe(e,t={}){let{labels:n,via:r,password:o,ttl:i,flags:l,captcha:p}=t,a=new FormData,u=[];for(let c of e){if(typeof c.content=="string"||c.content===null||c.content===void 0)throw s.file(`Unsupported file.content type: ${c.path}`,{filePath:c.path});if(!c.md5)throw s.file(`File missing md5 checksum: ${c.path}`,{filePath:c.path});a.append(E.FILES,new File([c.content],c.path,{type:"application/octet-stream"})),u.push(c.md5)}return a.append(E.CHECKSUMS,JSON.stringify(u)),n&&n.length>0&&a.append(E.LABELS,JSON.stringify(n)),r&&a.append(E.VIA,r),o&&a.append(E.PASSWORD,o),i!==void 0&&a.append(E.TTL,String(i)),l?.build&&a.append(E.BUILD,"true"),l?.prerender&&a.append(E.PRERENDER,"true"),l?.spa&&a.append(E.SPA,"true"),l?.buildCommand&&a.append(E.BUILD_COMMAND,l.buildCommand),l?.outputDir&&a.append(E.OUTPUT_DIR,l.outputDir),p&&a.append(E.CAPTCHA,p),a}f();B();async function Ut(){let e=JSON.stringify(Le,null,2),t;typeof Buffer<"u"?t=Buffer.from(e,"utf-8"):t=new Blob([e],{type:"application/json"});let{md5:n}=await G(t);return{path:S,content:t,size:e.length,md5:n}}async function kt(e,t){let n=e.find(l=>l.path===U.INDEX_FILE||l.path===`/${U.INDEX_FILE}`);if(!n||n.size>U.MAX_INDEX_BYTES)return!1;let r;if(typeof Buffer<"u"&&Buffer.isBuffer(n.content))r=n.content.toString("utf-8");else if(typeof Blob<"u"&&n.content instanceof Blob)r=await n.content.text();else if(typeof File<"u"&&n.content instanceof File)r=await n.content.text();else return!1;let o={files:e.map(l=>l.path),index:r};return(await t.request(m.SPA_CHECK,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(o)},"SPA check")).isSPA}async function Me(e,t,n){if(n.spaDetect===!1||n.spa||n.build||n.prerender||e.some(r=>r.path===S))return e;try{if(await kt(e,t)){let o=await Ut();return[...e,o]}}catch{}return e}f();f();function _(e){if(e==null)return;if(e.length===0)return e;if(e.length>I.MAX_COUNT)throw s.validation(`Maximum ${I.MAX_COUNT} labels allowed`);let t=e.map((r,o)=>{if(typeof r!="string")throw s.validation(`Label at index ${o} must be a string`);let i=r.trim().toLowerCase();if(i.length<I.MIN_LENGTH)throw s.validation(`Labels must be at least ${I.MIN_LENGTH} characters long`);if(i.length>I.MAX_LENGTH)throw s.validation(`Labels must be no more than ${I.MAX_LENGTH} characters long`);if(!_e.test(i))throw s.validation(`Labels must start and end with alphanumeric characters, with optional separators (${I.SEPARATORS}) between segments`);return i}),n=[...new Set(t)];if(n.length!==t.length)throw s.validation("Duplicate labels are not allowed");return n}async function Ue(e){let t=e.find(o=>o.path===S||o.path===`/${S}`);if(!t)return;let n=t.content,r=typeof n.text=="function"?await n.text():t.content.toString("utf8");Oe(r)}var V={"Content-Type":"application/json"},$t="sdk";function ie(e){let t=new URLSearchParams;e?.limit!==void 0&&t.set("limit",String(e.limit)),e?.cursor!==void 0&&t.set("cursor",e.cursor);let n=t.toString();return n?`?${n}`:""}function ke(e){let{getApi:t,processInput:n}=e;return{upload:async(r,o={})=>{if(!n)throw s.config("processInput function is not provided.");let i=t(),l=await n(r,o),p=await Me(l,i,o);if(!p.length)throw s.business("No files to deploy");for(let X of p)if(!X.md5)throw s.file(`MD5 checksum missing for file: ${X.path}`,{filePath:X.path});oe(o.password);let a=ne(o.ttl),u=Ae(o.idempotencyKey),c=_(o.labels);await Ue(p);let y=we(o.buildCommand),D=Ce(o.outputDir),q=o.build||o.prerender||o.spa?{build:o.build,prerender:o.prerender,spa:o.spa,buildCommand:y,outputDir:D}:void 0,nt=await Fe(p,{labels:c,via:o.via??$t,password:o.password,ttl:a,flags:q,captcha:o.captcha});return i.request(i.deploy.endpoint,{method:"POST",body:nt,...u?{headers:{[N.HEADER]:u}}:{},signal:o.signal||null},"Deploy",o.build||o.prerender?i.deploy.buildTimeout:i.deploy.timeout)},list:async r=>t().request(`${m.DEPLOYMENTS}${ie(r)}`,{method:"GET"},"List deployments"),get:async r=>t().request(m.DEPLOYMENT(encodeURIComponent(r)),{method:"GET"},"Get deployment"),set:async(r,o)=>t().request(m.DEPLOYMENT(encodeURIComponent(r)),{method:"PATCH",headers:V,body:JSON.stringify({labels:_(o.labels)})},"Update deployment labels"),delete:async r=>t().request(m.DEPLOYMENT(encodeURIComponent(r)),{method:"DELETE"},"Delete deployment")}}function $e(e){let{getApi:t}=e;return{set:async(n,r={})=>{let o=_(r.labels),i={};r.deployment&&(i.deployment=r.deployment),o!==void 0&&(i.labels=o);let{data:l,status:p}=await t().requestWithStatus(m.DOMAIN(encodeURIComponent(n)),{method:"PUT",headers:V,body:JSON.stringify(i)},"Set domain");return{...l,isCreate:p===201}},list:async n=>t().request(`${m.DOMAINS}${ie(n)}`,{method:"GET"},"List domains"),get:async n=>t().request(m.DOMAIN(encodeURIComponent(n)),{method:"GET"},"Get domain"),delete:async n=>t().request(m.DOMAIN(encodeURIComponent(n)),{method:"DELETE"},"Delete domain"),verify:async n=>t().request(m.DOMAIN_VERIFY(encodeURIComponent(n)),{method:"POST"},"Verify domain"),validate:async n=>t().request(m.DOMAINS_VALIDATE,{method:"POST",headers:V,body:JSON.stringify({domain:n})},"Validate domain"),dns:async n=>t().request(m.DOMAIN_DNS(encodeURIComponent(n)),{method:"GET"},"Get domain DNS"),records:async n=>t().request(m.DOMAIN_RECORDS(encodeURIComponent(n)),{method:"GET"},"Get domain records"),share:async n=>t().request(m.DOMAIN_SHARE(encodeURIComponent(n)),{method:"GET"},"Get domain share")}}function He(e){let{getApi:t}=e;return{get:async()=>t().request(m.ACCOUNT,{method:"GET"},"Get account")}}function Ge(e){let{getApi:t}=e;return{create:async(n={})=>{let r=ne(n.ttl),o=_(n.labels),i={};return r!==void 0&&(i.ttl=r),o!==void 0&&(i.labels=o),t().request(m.TOKENS,{method:"POST",headers:V,body:JSON.stringify(i)},"Create token")},list:async n=>t().request(`${m.TOKENS}${ie(n)}`,{method:"GET"},"List tokens"),get:async n=>t().request(m.TOKEN(encodeURIComponent(n)),{method:"GET"},"Get token"),delete:async n=>t().request(m.TOKEN(encodeURIComponent(n)),{method:"DELETE"},"Delete token")}}var z=class{constructor(t={}){this.credential=null;if(t={...t,apiUrl:t.apiUrl||void 0,token:t.token||void 0,caller:t.caller||void 0},this.clientOptions=t,t.caller!==void 0&&be(t.caller),t.token&&t.session)throw s.config("Provide either `token` or `session`, not both.");typeof t.token=="string"?(te(t.token),this.credential=t.token):t.token&&(this.credential=t.token),this.http=new H({...t,getAuthHeaders:()=>this.getAuthHeaders()});let n={getApi:()=>this.http};this.deployments=ke({...n,processInput:async(r,o)=>this.processInput(r,o,await this.getLimits())}),this.domains=$e(n),this.account=He(n),this.tokens=Ge(n)}async ping(){return this.http.request(m.PING,{method:"GET"},"Ping")}async deploy(t,n){return this.deployments.upload(t,n)}async whoami(){return this.account.get()}async getLimits(){return this.http.request(m.LIMITS,{method:"GET"},"Get limits")}on(t,n){this.http.on(t,n)}off(t,n){this.http.off(t,n)}setHeaders(t){this.http.setGlobalHeaders(t)}clearHeaders(){this.http.setGlobalHeaders({})}setToken(t){if(this.clientOptions.session)throw s.config("Provide either `token` or `session`, not both.");if(typeof t=="string"){if(!t)throw s.business("Invalid token provided. Token must be a non-empty string.");te(t),this.credential=t;return}if(typeof t!="function")throw s.business("Invalid token provided. Token must be a non-empty string or a provider function.");this.credential=t}async getAuthHeaders(){if(this.credential===null)return{};let t=typeof this.credential=="function"?await this.credential():this.credential;if(!t)throw s.authentication("Token provider returned no token.");if(typeof t!="string")throw s.authentication("Token provider returned a non-string value.");return{Authorization:`Bearer ${t}`}}};w();f();import{z as ze}from"zod";import{z as Be}from"zod";var Ve={apiUrl:Be.string().url().optional(),token:Be.string().min(1).optional()};w();var Gt=ze.object(Ve).strict(),Bt={apiUrl:P.API_URL,token:P.TOKEN};function Ke(){if(L()!=="node")return{};let e={apiUrl:process.env[P.API_URL]||void 0,token:process.env[P.TOKEN]||void 0};try{return Gt.parse(e)}catch(t){if(t instanceof ze.ZodError){let n=t.issues[0],r=n.path[0],o=(r&&Bt[r])??"SHIP environment configuration";throw s.config(`Invalid ${o}: ${n.message}`)}throw s.config("Invalid environment configuration")}}f();f();ce();w();de();me();B();fe();function Cr(e,t,n,r=!0){let o=e===1?t:n;return r?`${e} ${o}`:o}he();var ye=class extends z{constructor(t={}){if(L()!=="node")throw s.business("Node.js Ship class can only be used in Node.js environment.");let n=Ke();super({...t,apiUrl:t.apiUrl||n.apiUrl,token:t.token||(t.session?void 0:n.token)})}async deploy(t,n){return super.deploy(t,n)}async processInput(t,n,r){let o=typeof t=="string"?[t]:t;if(!Array.isArray(o)||!o.every(l=>typeof l=="string"))throw s.business("Invalid input type for Node.js environment. Expected string or string[].");if(o.length===0)throw s.business("No files to deploy.");let{processFilesForNode:i}=await Promise.resolve().then(()=>(he(),tt));return i(o,n,r)}},Qt=ye;export{fn as ACCOUNT_HEADER,Re as API_KEY,m as API_PATHS,dn as AUTH_BASE_PATH,sn as AccountPlan,an as AccountRefusal,H as ApiHttp,W as AuthMethod,b as BUILD_SETTINGS,O as CALLER,re as DEFAULT_API,S as DEPLOYMENT_CONFIG_FILENAME,E as DEPLOY_FIELDS,pn as DEPLOY_FILE_GRAMMAR,Ie as DEPLOY_TOKEN,en as DeploymentStatus,it as DeploymentVia,tn as DomainStatus,nn as DomainVerification,d as ErrorType,h as FILE_VALIDATION_STATUS,h as FileValidationStatus,N as IDEMPOTENCY_KEY_CONSTRAINTS,qt as JUNK_DIRECTORIES,I as LABEL_CONSTRAINTS,_e as LABEL_PATTERN,In as MY_API_KEY_URL,Ne as OAUTH_TOKEN,yn as OAuthScope,v as PASSWORD_CONSTRAINTS,Nn as PUBLIC_DEPLOYMENT_TTL_SECONDS,Et as SECTIONS,rn as SETUP_TROUBLESHOOTING_ANCHOR,P as SHIP_ENV,Rn as SHIP_VIA_ENV,mn as SIGN_IN_RETURN_PARAM,U as SPA_CHECK_CONSTRAINTS,Le as SPA_DEFAULT_CONFIG,ye as Ship,s as ShipError,C as TTL_CONSTRAINTS,R as TokenKind,Z as UNBUILT_PROJECT_MARKERS,dt as UNSAFE_FILENAME_CHARS,On as USER_VISIBLE_EVENTS,un as WEB_FILE_ACCEPT,or as __setTestEnvironment,Sn as accountOfPath,Ir as allValidFilesReady,Oe as assertShipJsonSyntax,An as billingReturnOf,G as calculateMD5,mt as classifyToken,At as consolePaths,He as createAccountResource,ke as createDeploymentResource,$e as createDomainResource,Ge as createTokenResource,Qt as default,Cn as deserializeLabels,Tn as doors,Dn as errandOf,Pn as extractSubdomain,Xe as filterJunk,Nt as formatDuration,x as formatFileSize,Ln as formatTimeRemaining,xn as generateDeploymentUrl,_n as generateDomainUrl,L as getENV,Kt as getValidFiles,M as hasUnbuiltMarker,De as hasUnsafeChars,Se as isBlockedExtension,Dt as isClaimPath,bn as isCustomDomain,gn as isDeployment,Rt as isInvitationPath,xe as isPlatformDomain,F as isShipError,It as isUpgradePath,on as normalizeVia,qe as optimizeDeployPaths,ln as personName,cn as personShortName,Cr as pluralize,et as processFilesForNode,hn as readBearerValue,wn as serializeLabels,ft as validateApiKey,En as validateApiUrl,we as validateBuildCommand,be as validateCaller,We as validateDeployFile,Ye as validateDeployPath,ht as validateDeployToken,pe as validateFileName,Rr as validateFiles,Ae as validateIdempotencyKey,yt as validateOAuthToken,Ce as validateOutputDir,oe as validatePassword,te as validateToken,ne as validateTtl};
+var st=Object.defineProperty;var A=(e,t)=>()=>(e&&(t=e(e=0)),t);var at=(e,t)=>{for(var n in t)st(e,n,{get:t[n],enumerable:!0})};function ln(e){if(!e||typeof e!="string")return;let t=e.trim().toLowerCase();return Object.values(lt).includes(t)?t:void 0}function De(e){if(e==null)return;if(typeof e!="string")throw a.validation("Idempotency key must be a string.");let t=e.trim();if(!t)throw a.validation("Idempotency key must not be empty.");if(t.length>N.MAX_LENGTH)throw a.validation(`Idempotency key must be at most ${N.MAX_LENGTH} characters.`);return t}function un(e){return e.name?.trim()||e.email}function dn(e){return e.name?.trim().split(" ")[0]||e.email}function dt(e){let t=e.code;return t==="ERR_INVALID_URL"?!1:typeof t=="string"?!0:e instanceof TypeError?!/\burl\b/i.test(e.message):!1}function M(e){return e!==null&&typeof e=="object"&&"name"in e&&e.name==="ShipError"&&"status"in e}function mt(e){let t=e.replace(/\\/g,"/").split("/").pop()??"",n=t.lastIndexOf(".");return n<=0||n===t.length-1?null:t.slice(n+1).toLowerCase()}function Re(e,t){let n=mt(e);return n===null?!1:Array.isArray(t)?t.includes(n):t.has(n)}function Ie(e){return ht.test(e)}function U(e){return e.replace(/\\/g,"/").split("/").filter(Boolean).some(n=>ee.has(n))}function yt(e){return e.startsWith(Ne.PREFIX)?R.API_KEY:e.startsWith(Le.PREFIX)?R.DEPLOY_TOKEN:e.startsWith(be.PREFIX)?R.OAUTH:R.OPAQUE}function gn(e){return e.slice(0,Q.length).toLowerCase()!==Q?null:e.slice(Q.length)||null}function xe(e){let t=e.charCodeAt(0)===65279?e.slice(1):e,n;try{n=JSON.parse(t)}catch(r){throw a.config(`invalid JSON format in config: ${r.message}`,{filePath:S})}if(n===null||typeof n!="object"||Array.isArray(n))throw a.config(`${S} must contain a JSON object`,{filePath:S})}function te(e,t,n){if(!e.startsWith(t.PREFIX))throw a.validation(`${n} must start with "${t.PREFIX}"`);if(e.length!==t.TOTAL_LENGTH)throw a.validation(`${n} must be ${t.TOTAL_LENGTH} characters total (${t.PREFIX} + ${t.HEX_LENGTH} hex chars)`);let r=e.slice(t.PREFIX.length);if(!new RegExp(`^[a-f0-9]{${t.HEX_LENGTH}}$`,"i").test(r))throw a.validation(`${n} must contain ${t.HEX_LENGTH} hexadecimal characters after "${t.PREFIX}" prefix`)}function Et(e){te(e,Ne,"API key")}function gt(e){te(e,Le,"Deploy token")}function Tt(e){te(e,be,"OAuth access token")}function ne(e){switch(yt(e)){case R.API_KEY:Et(e);return;case R.DEPLOY_TOKEN:gt(e);return;case R.OAUTH:Tt(e);return;case R.OPAQUE:if(!e)throw a.validation("Token must be a non-empty string")}}function Pe(e){if(!e||e.length>O.MAX_LENGTH||!O.PATTERN.test(e))throw a.validation(`Caller must be 1-${O.MAX_LENGTH} characters: letters, digits, dots, underscores, or hyphens`)}function An(e){try{let t=new URL(e);if(!["http:","https:"].includes(t.protocol))throw a.validation("API URL must use http:// or https:// protocol");if(t.pathname!=="/"&&t.pathname!=="")throw a.validation("API URL must not contain a path");if(t.search||t.hash)throw a.validation("API URL must not contain query parameters or fragments")}catch(t){throw M(t)?t:a.validation("API URL must be a valid URL")}}function Sn(e){return/^[a-z]+-[a-z]+-[a-z0-9]{7}(\.[a-z0-9.-]+)?$/i.test(e)}function re(e){if(e!=null){if(typeof e!="number"||!Number.isFinite(e))throw a.validation("TTL must be a number of seconds");if(!Number.isInteger(e))throw a.validation("TTL must be a whole number of seconds");if(e<v.MIN_SECONDS||e>v.MAX_SECONDS)throw a.validation(`TTL must be between ${v.MIN_SECONDS} and ${v.MAX_SECONDS} seconds`);return e}}function Rt(e){let t=e?`/${e}`:"",n=r=>`${t}${r}`;return{dashboard:()=>t||"/",newSite:()=>n("/new"),deployments:Object.assign(()=>n("/deployments"),{upload:()=>n("/deployments/upload")}),domains:Object.assign(()=>n("/domains"),{connect:r=>n(`/domains/${r}/connect`),deployment:r=>n(`/domains/${r}/deployment`)}),settings:r=>n(r?`/settings#${r}`:"/settings"),settingsAfterBilling:()=>n(`/settings?${Te("portal")}`),upgrade:r=>n(r?`/upgrade/${r}`:"/upgrade"),success:()=>n("/success"),successAfterCheckout:()=>n(`/success?${Te("checkout")}`),apiKey:()=>n("/api-key")}}function Rn(e){let t=new URLSearchParams(e);for(let[n,[r,o]]of Object.entries(_e))if(t.get(r)===o)return n;return null}function $(e){let t=e.split(/[?#]/)[0].toLowerCase(),[n="",r=""]=t.split("/").filter(Boolean);return It(n)?{kind:"door",door:n}:n===Dt?{kind:"admin"}:n===""||Se(n)?{kind:"account",account:null,section:n===""?null:n}:{kind:"account",account:n,section:Se(r)?r:null}}function In(e){let t=$(e);return t.kind==="account"?t.account:null}function Nn(e){return Nt(e)?"claim":Lt(e)?"invite":bt(e)?"upgrade":null}function Ot(e){let t=Math.round(e/60);if(!(t>=1))return"less than a minute";if(t<120)return Z(t,"minute");let n=Math.round(e/3600);return n<48?Z(n,"hour"):Z(Math.round(e/86400),"day")}function xn(e,t=Date.now()/1e3){let n=e-t;return n>0?Ot(n):null}function Z(e,t){return`${e} ${t}${e===1?"":"s"}`}function _(e,t=1){if(e===0)return"0 Bytes";let n=1024,r=["Bytes","KB","MB","GB"],o=Math.floor(Math.log(e)/Math.log(n));return`${Number.parseFloat((e/n**o).toFixed(t))} ${r[o]}`}function we(e,t){return e.endsWith(`.${t}`)}function _n(e,t){return!we(e,t)}function wn(e,t){return we(e,t)?e.slice(0,-(t.length+1)):null}function Cn(e){return`https://${e}`}function vn(e){return`https://${e}`}function Fn(e){return!e||e.length===0?null:JSON.stringify(e)}function Mn(e){if(!e)return[];try{let t=JSON.parse(e);return Array.isArray(t)?t:[]}catch{return[]}}function ve(e){if(e==null||e==="")return;if(typeof e!="string")throw a.validation("Build command must be a string");let t=e.trim();if(t.length===0||t.length>x.COMMAND_MAX_LENGTH)throw a.validation(`Build command must be between 1 and ${x.COMMAND_MAX_LENGTH} characters`);if(/[\x00-\x1f\x7f]/.test(t))throw a.validation("Build command must be a single line");return t}function Fe(e){if(e==null||e==="")return;if(typeof e!="string")throw a.validation("Output folder must be a string");let t=e.trim().replace(/\/+$/,"");if(t.length===0||t.length>x.OUTPUT_DIR_MAX_LENGTH)throw a.validation(`Output folder must be between 1 and ${x.OUTPUT_DIR_MAX_LENGTH} characters`);if(!x.OUTPUT_DIR_PATTERN.test(t)||t.split("/").some(n=>n===".."||n==="."))throw a.validation("Output folder must be a relative path inside the project, like dist or dist/site");return t}function ie(e){if(e==null)return;if(typeof e!="string")throw a.validation("Password must be a string");let t=e.trim();if(t.length<F.MIN_LENGTH||t.length>F.MAX_LENGTH)throw a.validation(`Password must be between ${F.MIN_LENGTH} and ${F.MAX_LENGTH} characters`);return t}var rn,lt,on,sn,an,N,cn,pn,m,E,mn,d,ct,W,pt,ut,a,ft,fn,ht,ee,hn,yn,J,Ne,Le,be,O,En,R,Q,Tn,S,Oe,k,v,At,St,Dt,_e,Te,Ae,Dn,It,Se,Nt,Lt,bt,oe,P,Ln,bn,On,Pn,h,I,Ce,x,F,f=A(()=>{"use strict";rn={PENDING:"pending",SUCCESS:"success",FAILED:"failed",DELETING:"deleting"},lt={WEB:"web",SDK:"sdk",CLI:"cli",MCP:"mcp",GIT:"git",N8N:"n8n",GPT:"gpt",VSC:"vsc",CLD:"cld",CRS:"crs",GMN:"gmn",API:"api"},on={LIVE:"live",UNLINKED:"unlinked",UNVERIFIED:"unverified",PAUSED:"paused"},sn={PENDING:"pending",PARTIAL:"partial",VERIFIED:"verified"},an="troubleshooting",N={HEADER:"Idempotency-Key",MAX_LENGTH:256,WINDOW_SECONDS:1440*60};cn={FREE:"free",PRO:"pro",TEAM:"team",SCALE:"scale",SPONSORED:"sponsored"},pn={PAUSED:"paused",UNKNOWN:"unknown"};m={DEPLOYMENTS:"/deployments",DEPLOYMENT:e=>`/deployments/${e}`,DEPLOYMENT_CONFIG:e=>`/deployments/${e}/config`,DOMAINS:"/domains",DOMAIN:e=>`/domains/${e}`,DOMAIN_VERIFY:e=>`/domains/${e}/verify`,DOMAIN_DNS:e=>`/domains/${e}/dns`,DOMAIN_RECORDS:e=>`/domains/${e}/records`,DOMAIN_SHARE:e=>`/domains/${e}/share`,DOMAIN_PROPAGATION:e=>`/domains/${e}/propagation`,DOMAINS_VALIDATE:"/domains/validate",TOKENS:"/tokens",TOKEN:e=>`/tokens/${e}`,ACCOUNT:"/account",ACCOUNT_KEY:"/account/key",ACCOUNT_CLAIM:"/account/claim",ACTIVITIES:"/activities",LABELS:"/labels",LIMITS:"/limits",PLANS:"/plans",PING:"/ping",SETUP:"/setup",SPA_CHECK:"/spa-check",UPLOAD:"/upload"},E={FILES:"files[]",CHECKSUMS:"checksums",LABELS:"labels",VIA:"via",PASSWORD:"password",TTL:"ttl",BUILD:"build",PRERENDER:"prerender",SPA:"spa",BUILD_COMMAND:"buildCommand",OUTPUT_DIR:"outputDir",CAPTCHA:"captcha"},mn={PATH:"path",CONTENT:"content",ENCODING:"encoding",DEFAULT_ENCODING:"utf-8",ENCODINGS:["utf-8","base64"]},d={Validation:"validation_failed",NotFound:"not_found",Forbidden:"forbidden",RateLimit:"rate_limit_exceeded",Authentication:"authentication_failed",Business:"business_logic_error",Api:"internal_server_error",Maintenance:"maintenance",Build:"build_failed",Network:"network_error",Timeout:"timeout_error",Cancelled:"operation_cancelled",File:"file_error",Config:"config_error"},ct=new Set([d.Network,d.Timeout,d.Cancelled,d.File,d.Config]),W={client:new Set([d.Build,d.Business,d.Cancelled,d.Config,d.File,d.Forbidden,d.NotFound,d.RateLimit,d.Validation]),network:new Set([d.Network,d.Timeout]),auth:new Set([d.Authentication])},pt=new Set(Object.values(d).filter(e=>!ct.has(e))),ut=200;a=class e extends Error{type;status;details;constructor(t,n,r,o){super(n),this.type=t,this.status=r,this.details=o,this.name="ShipError"}toResponse(){let t=this.details,n=this.type===d.Authentication&&t?.internal?void 0:this.details;return{error:this.type,message:this.message,status:this.status,details:n}}static async fromHttpResponse(t,n){let r,o,i;try{if(t.headers.get("content-type")?.includes("application/json")){let u=await t.json();if(u&&typeof u=="object"){let c=u;typeof c.message=="string"?r=c.message:typeof c.error=="string"&&(r=c.error),o=c.details,typeof c.error=="string"&&pt.has(c.error)&&(i=c.error)}}else{let u=(await t.text()).trim();u&&!u.startsWith("<")&&u.length<=ut&&(r=u)}}catch{}let l=t.headers.get("retry-after");if(l!==null){let s=l.trim(),u=/^\d+$/.test(s)?Number(s):Math.ceil((Date.parse(s)-Date.now())/1e3);if(Number.isFinite(u)&&u>=0){let c=o&&typeof o=="object"?o:{};c.retryAfter===void 0&&(o={...c,retryAfter:u})}}r=r||`${n||"Request"} failed with status ${t.status}`;let p=i??(t.status===401?d.Authentication:t.status===403?d.Forbidden:t.status===429?d.RateLimit:d.Api);return new e(p,r,t.status,o)}static fromFetchError(t,n){if(M(t))return t;let r=n||"Request",o=t?.name;return o==="AbortError"?e.cancelled(`${r} was cancelled`):o==="TimeoutError"?e.timeout(`${r} timed out`,{cause:t}):t instanceof Error?dt(t)?e.network(`${r} failed: ${t.message}`,{cause:t}):new e(d.Api,`${r} failed: ${t.message}`):new e(d.Api,`${r} failed: Unknown error`)}static validation(t,n){return new e(d.Validation,t,400,n)}static notFound(t,n){let r=n?`${t} ${n} not found`:`${t} not found`;return new e(d.NotFound,r,404)}static forbidden(t,n){return new e(d.Forbidden,t,403,n)}static rateLimit(t="Too many requests",n){return new e(d.RateLimit,t,429,n)}static authentication(t="Authentication required",n){return new e(d.Authentication,t,401,n)}static business(t,n=400,r){return new e(d.Business,t,n,r)}static network(t,n){return new e(d.Network,t,void 0,n)}static timeout(t,n){return new e(d.Timeout,t,void 0,n)}static cancelled(t,n){return new e(d.Cancelled,t,void 0,n)}static file(t,n){return new e(d.File,t,void 0,n)}static config(t,n){return new e(d.Config,t,void 0,n)}static api(t,n=500,r){return new e(d.Api,t,n,r)}static maintenance(t,n){return new e(d.Maintenance,t,503,n)}static build(t,n){return new e(d.Build,t,422,n)}isClientError(){return W.client.has(this.type)?!0:this.status!==void 0&&this.status>=400&&this.status<500}isNetworkError(){return W.network.has(this.type)}isAuthError(){return W.auth.has(this.type)}isType(t){return this.type===t}};ft=["html","htm","xhtml","xml","txt","md","markdown","pdf","csv","json","jsonc","webmanifest","map","toml","yaml","yml","rss","atom","css","scss","sass","less","js","mjs","cjs","jsx","ts","tsx","wasm","vue","svelte","png","jpg","jpeg","gif","webp","avif","svg","ico","bmp","tif","tiff","heic","heif","woff","woff2","ttf","otf","eot","mp3","wav","ogg","oga","opus","m4a","aac","flac","weba","mp4","webm","ogv","mov","m4v","avi","glb","gltf","usdz","vtt","srt","zip"],fn=ft.map(e=>`.${e}`).join(","),ht=/[\x00-\x1f\x7f#?%\\<>"]/;ee=new Set(["node_modules","package.json"]);hn="/auth",yn="signing-in",J={SESSION:"session",API_KEY:"apiKey",TOKEN:"token",AGENT:"agent",OAUTH:"oauth",SYSTEM:"system"},Ne={PREFIX:"ship-",HEX_LENGTH:32,TOTAL_LENGTH:37,HINT_LENGTH:4},Le={PREFIX:"deploy-",HEX_LENGTH:32,TOTAL_LENGTH:39},be={PREFIX:"oauth-",HEX_LENGTH:32,TOTAL_LENGTH:38},O={HEADER:"X-Caller",MAX_LENGTH:128,PATTERN:/^[a-zA-Z0-9._-]+$/},En="X-Account",R={API_KEY:J.API_KEY,DEPLOY_TOKEN:J.TOKEN,OAUTH:J.OAUTH,OPAQUE:"opaque"};Q="bearer ";Tn={ACCOUNT_READ:"account:read",DEPLOYMENTS_READ:"deployments:read",DEPLOYMENTS_WRITE:"deployments:write",DOMAINS_READ:"domains:read",DOMAINS_WRITE:"domains:write"},S="ship.json",Oe={rewrites:[{source:"/(.*)",destination:"/index.html"}]},k={INDEX_FILE:"index.html",MAX_INDEX_BYTES:100*1024};v={MIN_SECONDS:1,MAX_SECONDS:365*24*60*60};At={new:{owner:!1},deployments:{owner:!1},domains:{owner:!1},settings:{owner:!1},upgrade:{owner:!0},success:{owner:!0},"api-key":{owner:!0}},St=["login","register","logout","invitations","claim","consent"],Dt="admin",_e={checkout:["upgrading","true"],portal:["billing","returned"]},Te=e=>_e[e].join("="),Ae=(e,t)=>t?`${e}?next=${encodeURIComponent(t)}`:e;Dn={login:e=>Ae("/login",e),register:e=>Ae("/register",e),logout:()=>"/logout",invitation:e=>`/invitations/${e}`,claim:e=>`/claim/${e}`,consent:()=>"/consent"};It=e=>St.includes(e),Se=e=>Object.hasOwn(At,e);Nt=e=>{let t=$(e);return t.kind==="door"&&t.door==="claim"},Lt=e=>{let t=$(e);return t.kind==="door"&&t.door==="invitations"},bt=e=>{let t=$(e);return t.kind==="account"&&t.section==="upgrade"};oe="https://api.shipstatic.com",P={TOKEN:"SHIP_TOKEN",API_URL:"SHIP_API_URL"},Ln="SHIP_VIA",bn=`https://my.shipstatic.com${Rt().apiKey()}`,On=4320*60;Pn=["account.create","account.update","account.delete","account.key.generate","account.plan.transition","deployment.create","deployment.update","deployment.delete","deployment.claim","domain.create","domain.update","domain.delete","domain.verify","token.create","token.consume","token.delete","member.join","member.leave","consent.grant"],h={PENDING:"pending",PROCESSING_ERROR:"processing_error",EXCLUDED:"excluded",VALIDATION_FAILED:"validation_failed",READY:"ready"};I={MIN_LENGTH:3,MAX_LENGTH:25,MAX_COUNT:10,SEPARATORS:"._-"},Ce=/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;x={COMMAND_MAX_LENGTH:200,OUTPUT_DIR_MAX_LENGTH:100,OUTPUT_DIR_PATTERN:/^[A-Za-z0-9._-]+(\/[A-Za-z0-9._-]+)*$/};F={MIN_LENGTH:6,MAX_LENGTH:128}});async function Ut(e){let t=(await import("spark-md5")).default,n=new t.ArrayBuffer,r=2097152;for(let o=0;o<e.size;o+=r){let i=Math.min(o+r,e.size);n.append(await e.slice(o,i).arrayBuffer())}return{md5:n.end()}}async function kt(e){let{createHash:t}=await import("crypto"),n=t("md5");return n.update(e),{md5:n.digest("hex")}}async function $t(e){let{createHash:t}=await import("crypto"),{createReadStream:n}=await import("fs");return new Promise((r,o)=>{let i=t("md5"),l=n(e);l.on("error",p=>o(a.file(`Failed to read file for MD5: ${p.message}`,{filePath:e}))),l.on("data",p=>i.update(p)),l.on("end",()=>r({md5:i.digest("hex")}))})}async function B(e){if(e instanceof Blob)return Ut(e);if(typeof Buffer<"u"&&Buffer.isBuffer(e))return kt(e);if(typeof e=="string")return $t(e);throw a.business("Invalid input for MD5 calculation")}var z=A(()=>{"use strict";f()});function ar(e){ae=e}function zt(){return typeof process<"u"&&process.versions&&process.versions.node?"node":typeof window<"u"||typeof self<"u"?"browser":"unknown"}function L(){return ae||zt()}var ae,C=A(()=>{"use strict";ae=null});function Xe(e){if(!e||e.length===0)return"";let t=e.filter(i=>i&&typeof i=="string").map(i=>i.replace(/\\/g,"/"));if(t.length===0)return"";if(t.length===1)return t[0];let n=t.map(i=>i.split("/").filter(Boolean)),r=[],o=Math.min(...n.map(i=>i.length));for(let i=0;i<o;i++){let l=n[0][i];if(n.every(p=>p[i]===l))r.push(l);else break}return r.join("/")}function j(e){return e.replace(/\\/g,"/").replace(/\/+/g,"/").replace(/^\/+/,"")}var le=A(()=>{"use strict"});function Ye(e,t={}){if(t.flatten===!1)return e.map(r=>({path:j(r),name:ce(r)}));let n=jt(e);return e.map(r=>{let o=j(r);if(n){let i=n.endsWith("/")?n:`${n}/`;o.startsWith(i)&&(o=o.substring(i.length))}return o||(o=ce(r)),{path:o,name:ce(r)}})}function jt(e){if(!e.length)return"";let n=e.map(i=>j(i)).map(i=>i.split("/")),r=[],o=Math.min(...n.map(i=>i.length));for(let i=0;i<o-1;i++){let l=n[0][i];if(n.every(p=>p[i]===l))r.push(l);else break}return r.join("/")}function ce(e){return e.split(/[/\\]/).pop()||e}var pe=A(()=>{"use strict";le()});function ue(e,t,n){let r=t.suggestions?.[n];return r?`${e} ${r}`:e}function q(e,t){return qt.find(n=>n.broken(e,t))}var qt,b,me=A(()=>{"use strict";f();fe();qt=[{name:"name",broken:({path:e})=>!de(e).valid,sentence:({path:e})=>de(e).reason??`File name "${e}" is invalid.`},{name:"extension",broken:({path:e},t)=>Re(e,t.blockedExtensions??[]),sentence:({path:e})=>`File "${e}" has an extension that is not allowed.`},{name:"fileSize",broken:({size:e},t)=>e>t.maxFileSize,sentence:({path:e},t)=>ue(`File "${e}" is too large. Maximum ${_(t.maxFileSize)} allowed.`,t,"maxFileSize")},{name:"totalSize",broken:({totalSize:e},t)=>e>t.maxTotalSize,sentence:({totalSize:e},t)=>ue(`Files add up to ${_(e)}. Maximum ${_(t.maxTotalSize)} allowed.`,t,"maxTotalSize")}],b={name:"filesCount",broken:(e,t)=>e>t.maxFilesCount,sentence:(e,t)=>ue(`Too many files (${e}). Maximum ${t.maxFilesCount} files allowed.`,t,"maxFilesCount")}});function de(e){let t=o=>({valid:!1,reason:`File name "${e}" ${o}.`});if(Ie(e))return t("contains unsafe characters");if(e.startsWith(" ")||e.endsWith(" "))return t("cannot start or end with spaces");if(e.endsWith("."))return t("cannot end with dots");let n=/^(CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])(\.|$)/i,r=e.split("/").pop()||e;return n.test(r)?t("uses a reserved system name"):e.includes("..")?t("contains a path traversal pattern"):{valid:!0}}function Lr(e,t){let n=[],r=[],o=[];if(e.length===0){let s={file:"(no files)",message:"At least one file must be provided."};return n.push(s),{files:[],validFiles:[],errors:n,warnings:[],canDeploy:!1}}for(let s of e)if(U(s.name))return n.push({file:s.name,message:"Unbuilt project detected. Deploy your build output (dist/, build/, out/), not the project folder."}),{files:e.map(u=>({...u,status:h.VALIDATION_FAILED,statusMessage:"Unbuilt project detected"})),validFiles:[],errors:n,warnings:[],canDeploy:!1};if(b.broken(e.length,t)){let s={file:`(${e.length} files)`,message:b.sentence(e.length,t)};return n.push(s),{files:e.map(u=>({...u,status:h.VALIDATION_FAILED,statusMessage:s.message})),validFiles:[],errors:n,warnings:[],canDeploy:!1}}let i=0;for(let s of e){let u=h.READY,c="Ready for upload";if(s.status===h.PROCESSING_ERROR)u=h.VALIDATION_FAILED,c=s.statusMessage||`File "${s.name}" could not be read.`,n.push({file:s.name,message:c});else if(s.size===0){u=h.EXCLUDED,c=`File "${s.name}" is empty, so it is excluded.`,r.push({file:s.name,message:c}),o.push({...s,status:u,statusMessage:c});continue}else if(s.size<0)u=h.VALIDATION_FAILED,c=`File "${s.name}" reports a negative size.`,n.push({file:s.name,message:c});else if(!s.name||s.name.trim().length===0)u=h.VALIDATION_FAILED,c="File name cannot be empty.",n.push({file:s.name||"(empty)",message:c});else if(s.name.includes("\0"))u=h.VALIDATION_FAILED,c=`File name "${s.name}" contains invalid characters (null byte).`,n.push({file:s.name,message:c});else{let y={path:s.name,size:s.size,totalSize:i+s.size},D=q(y,t);D?(u=h.VALIDATION_FAILED,c=D.sentence(y,t),n.push({file:D.name==="totalSize"?`(${e.length} files)`:s.name,message:c})):i=y.totalSize}o.push({...s,status:u,statusMessage:c})}n.length>0&&(o=o.map(s=>s.status===h.EXCLUDED?s:{...s,status:h.VALIDATION_FAILED,statusMessage:s.status===h.VALIDATION_FAILED?s.statusMessage:"Deployment failed due to validation errors in bundle"}));let l=n.length===0?o.filter(s=>s.status===h.READY):[],p=n.length===0;return{files:o,validFiles:l,errors:n,warnings:r,canDeploy:p}}function Xt(e){return e.filter(t=>t.status===h.READY)}function br(e){return Xt(e).length>0}var fe=A(()=>{"use strict";f();me();f()});import{isJunk as Yt}from"junk";function We(e,t){if(!e||e.length===0)return[];if(!t?.allowUnbuilt&&e.find(r=>r&&U(r)))throw a.business("Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder");return e.filter(n=>{if(!n)return!1;let r=n.replace(/\\/g,"/").split("/").filter(Boolean);if(r.length===0)return!0;let o=r[r.length-1];if(Yt(o))return!1;for(let l of r)if(l!==".well-known"&&(l.startsWith(".")||l.length>255))return!1;let i=r.slice(0,-1);for(let l of i)if(Wt.some(p=>l.toLowerCase()===p.toLowerCase()))return!1;return!0})}var Wt,he=A(()=>{"use strict";f();Wt=["__MACOSX",".Trashes",".fseventsd",".Spotlight-V100"]});function Je(e,t){if(e.includes("\0")||e.includes("/../")||e.startsWith("../")||e.endsWith("/.."))throw a.business(`Security error: Unsafe file path "${e}" for file: ${t}`)}function Qe(e,t){let n=q(e,t);if(n)throw a.business(n.sentence(e,t))}function Ze(e,t){if(b.broken(e,t))throw a.business(b.sentence(e,t))}var ye=A(()=>{"use strict";f();me()});async function et(e,t={},n){let r=!!(t.build||t.prerender),o=Ye(e.map(c=>c.path),{flatten:t.pathDetect!==!1}).map(c=>c.path),i=new Set(We(o,{allowUnbuilt:r})),l=e.map((c,y)=>({source:c,deployPath:o[y]})).filter(({deployPath:c})=>i.has(c));if(l.length===0)return[];let p=r?null:Jt(n),s=[],u=0;for(let{source:c,deployPath:y}of l){if(p&&Je(y,c.origin),c.size===0)continue;p&&(u+=c.size,Qe({path:y,size:c.size,totalSize:u},p));let D=await c.read(),{md5:X}=await B(D);s.push({path:y,content:D,size:c.size,md5:X})}return p&&Ze(s.length,p),s}function Jt(e){if(!e)throw a.config("Platform limits not provided. Deploy-mode validation requires the limits argument \u2014 pass `ship.getLimits()` result.");return e}var tt=A(()=>{"use strict";f();pe();he();z();ye()});var ot={};at(ot,{processFilesForNode:()=>rt});import*as T from"fs";import*as g from"path";function nt(e,t=new Set){let n=[],r=T.realpathSync(e);if(t.has(r))return n;t.add(r);for(let o of T.readdirSync(e)){let i=g.join(e,o),l=T.statSync(i);l.isDirectory()?n.push(...nt(i,t)):l.isFile()&&n.push({absPath:i,size:l.size})}return n}async function Qt(e){try{return T.readFileSync(e)}catch(t){let n=t instanceof Error?t.message:String(t);throw a.file(`Failed to read file "${e}": ${n}`,{filePath:e})}}function Zt(e){for(let t of e){let n=g.resolve(t);try{if(T.statSync(n).isDirectory()){let r=T.readdirSync(n).find(o=>ee.has(o));if(r)throw a.business(`"${r}" detected \u2014 deploy your build output (dist/, build/, out/), not the project folder`)}}catch(r){if(M(r))throw r}}}async function rt(e,t={},n){if(L()!=="node")throw a.business("processFilesForNode can only be called in Node.js environment.");Zt(e);let r=e.flatMap(p=>{let s=g.resolve(p);try{let u=T.statSync(s);return u.isDirectory()?nt(s):[{absPath:s,size:u.size}]}catch{throw a.file(`Path does not exist: ${p}`,{filePath:p})}}),o=new Map(r.map(p=>[p.absPath,p.size])),i=Xe(e.map(p=>g.resolve(p)).map(p=>{try{return T.statSync(p).isDirectory()?p:g.dirname(p)}catch{return g.dirname(p)}})),l=[...o].map(([p,s])=>({path:en(p,i),origin:p,size:s,read:()=>Qt(p)}));return et(l,t,n)}function en(e,t){if(t&&t.length>0){let n=g.relative(t,e);if(n&&typeof n=="string"&&!n.startsWith(".."))return n.replace(/\\/g,"/")}return g.basename(e)}var Ee=A(()=>{"use strict";f();tt();C();le()});f();f();f();var H=class{constructor(){this.handlers=new Map}on(t,n){this.handlers.has(t)||this.handlers.set(t,new Set),this.handlers.get(t)?.add(n)}off(t,n){let r=this.handlers.get(t);r&&(r.delete(n),r.size===0&&this.handlers.delete(t))}emit(t,...n){let r=this.handlers.get(t);if(!r)return;let o=Array.from(r);for(let i of o)try{i(...n)}catch(l){r.delete(i),t!=="error"&&setTimeout(()=>{let p=l instanceof Error?l:new Error(String(l));this.emit("error",p,String(t))},0)}}};var xt=3e4,Pt=2,_t=300,wt=2e3,Ct=new Set([500,502,503,504]);function vt(e,t){return new Promise((n,r)=>{if(t?.aborted){r(t.reason);return}let o=()=>{clearTimeout(l),t?.removeEventListener("abort",i)},i=()=>{o(),r(t?.reason)},l=setTimeout(()=>{o(),n()},e);t?.addEventListener("abort",i)})}var Me=3e5,Ft=3e5,Mt=Me+Ft,G=class extends H{constructor(n){super();this.globalHeaders={};this.apiUrl=n.apiUrl||oe,this.getAuthHeadersCallback=n.getAuthHeaders,this.session=n.session??!1,this.caller=n.caller,this.timeout=n.timeout??xt,this.maxRetries=Math.max(0,n.maxRetries??Pt),this.fetch=n.fetch??globalThis.fetch.bind(globalThis),this.deploy={endpoint:n.deployEndpoint||m.DEPLOYMENTS,timeout:n.timeout??Me,buildTimeout:n.timeout??Mt}}setGlobalHeaders(n){this.globalHeaders=n}async executeRequest(n,r,o,i=this.timeout){for(let l=0;;l++)try{return await this.attemptOnce(n,r,o,i)}catch(p){let s=a.fromFetchError(p,o);if(l>=this.maxRetries||!this.isRetryable(s,r))throw this.emit("error",s,n),s;this.emit("retry",s,n,l+1);let u=Math.min(wt,_t*2**l);try{await vt(Math.random()*u,r.signal)}catch(c){let y=a.fromFetchError(c,o);throw this.emit("error",y,n),y}}}isRetryable(n,r){if(r.signal?.aborted||n.isType(d.Maintenance)||n.isType(d.Cancelled)||!(n.isNetworkError()||n.status!==void 0&&Ct.has(n.status)))return!1;let i=(r.method??"GET").toUpperCase();return i==="GET"||i==="HEAD"?!0:i==="PUT"||i==="DELETE"?!1:this.hasIdempotencyKey(r.headers)}hasIdempotencyKey(n){if(!n)return!1;let r=N.HEADER.toLowerCase();return Object.keys(n).some(o=>o.toLowerCase()===r)}async attemptOnce(n,r,o,i=this.timeout){let l=()=>{};try{let p=await this.mergeHeaders(r.headers),s=this.createTimeoutSignal(r.signal,i);l=s.cleanup;let u={...r,headers:p,credentials:this.session&&!p.Authorization?"include":void 0,signal:s.signal};this.emit("request",n,u);let c=await this.fetch(n,u);if(l(),!c.ok)throw await a.fromHttpResponse(c,o);return this.emit("response",this.safeClone(c),n),{data:await this.parseResponse(this.safeClone(c)),status:c.status}}catch(p){throw l(),a.fromFetchError(p,o)}}async request(n,r,o,i){let{data:l}=await this.executeRequest(`${this.apiUrl}${n}`,r,o,i);return l}async requestWithStatus(n,r,o){return this.executeRequest(`${this.apiUrl}${n}`,r,o)}async mergeHeaders(n={}){return{...this.globalHeaders,...this.caller?{[O.HEADER]:this.caller}:{},...await this.getAuthHeadersCallback(),...n}}createTimeoutSignal(n,r=this.timeout){let o=new AbortController,i=setTimeout(()=>o.abort(new DOMException(`Timed out after ${r}ms`,"TimeoutError")),r),l=n?()=>o.abort(n.reason):void 0;return n&&l&&(n.addEventListener("abort",l),n.aborted&&o.abort(n.reason)),{signal:o.signal,cleanup:()=>{clearTimeout(i),n&&l&&n.removeEventListener("abort",l)}}}safeClone(n){try{return n.clone()}catch{return n}}async parseResponse(n){if(!(n.headers.get("Content-Length")==="0"||n.status===204))return n.json()}};f();f();async function Ue(e,t={}){let{labels:n,via:r,password:o,ttl:i,flags:l,captcha:p}=t,s=new FormData,u=[];for(let c of e){if(typeof c.content=="string"||c.content===null||c.content===void 0)throw a.file(`Unsupported file.content type: ${c.path}`,{filePath:c.path});if(!c.md5)throw a.file(`File missing md5 checksum: ${c.path}`,{filePath:c.path});s.append(E.FILES,new File([c.content],c.path,{type:"application/octet-stream"})),u.push(c.md5)}return s.append(E.CHECKSUMS,JSON.stringify(u)),n&&n.length>0&&s.append(E.LABELS,JSON.stringify(n)),r&&s.append(E.VIA,r),o&&s.append(E.PASSWORD,o),i!==void 0&&s.append(E.TTL,String(i)),l?.build&&s.append(E.BUILD,"true"),l?.prerender&&s.append(E.PRERENDER,"true"),l?.spa&&s.append(E.SPA,"true"),l?.buildCommand&&s.append(E.BUILD_COMMAND,l.buildCommand),l?.outputDir&&s.append(E.OUTPUT_DIR,l.outputDir),p&&s.append(E.CAPTCHA,p),s}f();z();async function Ht(){let e=JSON.stringify(Oe,null,2),t;typeof Buffer<"u"?t=Buffer.from(e,"utf-8"):t=new Blob([e],{type:"application/json"});let{md5:n}=await B(t);return{path:S,content:t,size:e.length,md5:n}}async function Gt(e,t,n){let r=e.find(p=>p.path===k.INDEX_FILE||p.path===`/${k.INDEX_FILE}`);if(!r||r.size>k.MAX_INDEX_BYTES)return!1;let o;if(typeof Buffer<"u"&&Buffer.isBuffer(r.content))o=r.content.toString("utf-8");else if(typeof Blob<"u"&&r.content instanceof Blob)o=await r.content.text();else if(typeof File<"u"&&r.content instanceof File)o=await r.content.text();else return!1;let i={files:e.map(p=>p.path),index:o};return(await t.request(m.SPA_CHECK,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(i),signal:n??null},"SPA check")).isSPA}async function ke(e,t,n){return n.spaDetect===!1||n.spa||n.build||n.prerender||e.some(r=>r.path===S)?e:await Gt(e,t,n.signal)?[...e,await Ht()]:e}f();f();function w(e){if(e==null)return;if(e.length===0)return e;if(e.length>I.MAX_COUNT)throw a.validation(`Maximum ${I.MAX_COUNT} labels allowed`);let t=e.map((r,o)=>{if(typeof r!="string")throw a.validation(`Label at index ${o} must be a string`);let i=r.trim().toLowerCase();if(i.length<I.MIN_LENGTH)throw a.validation(`Labels must be at least ${I.MIN_LENGTH} characters long`);if(i.length>I.MAX_LENGTH)throw a.validation(`Labels must be no more than ${I.MAX_LENGTH} characters long`);if(!Ce.test(i))throw a.validation(`Labels must start and end with alphanumeric characters, with optional separators (${I.SEPARATORS}) between segments`);return i}),n=[...new Set(t)];if(n.length!==t.length)throw a.validation("Duplicate labels are not allowed");return n}async function $e(e){let t=e.find(o=>o.path===S||o.path===`/${S}`);if(!t)return;let n=t.content,r=typeof n.text=="function"?await n.text():t.content.toString("utf8");xe(r)}var V={"Content-Type":"application/json"},Bt="sdk";function se(e){let t=new URLSearchParams;e?.limit!==void 0&&t.set("limit",String(e.limit)),e?.cursor!==void 0&&t.set("cursor",e.cursor);let n=t.toString();return n?`?${n}`:""}function He(e){let{getApi:t,processInput:n}=e;return{upload:async(r,o={})=>{if(!n)throw a.config("processInput function is not provided.");let i=t(),l=await n(r,o),p=await ke(l,i,o);if(!p.length)throw a.business("No files to deploy");for(let Y of p)if(!Y.md5)throw a.file(`MD5 checksum missing for file: ${Y.path}`,{filePath:Y.path});ie(o.password);let s=re(o.ttl),u=De(o.idempotencyKey),c=w(o.labels);await $e(p);let y=ve(o.buildCommand),D=Fe(o.outputDir),X=o.build||o.prerender||o.spa?{build:o.build,prerender:o.prerender,spa:o.spa,buildCommand:y,outputDir:D}:void 0,it=await Ue(p,{labels:c,via:o.via??Bt,password:o.password,ttl:s,flags:X,captcha:o.captcha});return i.request(i.deploy.endpoint,{method:"POST",body:it,...u?{headers:{[N.HEADER]:u}}:{},signal:o.signal||null},"Deploy",o.build||o.prerender?i.deploy.buildTimeout:i.deploy.timeout)},list:async r=>t().request(`${m.DEPLOYMENTS}${se(r)}`,{method:"GET"},"List deployments"),get:async r=>t().request(m.DEPLOYMENT(encodeURIComponent(r)),{method:"GET"},"Get deployment"),set:async(r,o)=>t().request(m.DEPLOYMENT(encodeURIComponent(r)),{method:"PATCH",headers:V,body:JSON.stringify({labels:w(o.labels)})},"Update deployment labels"),delete:async r=>t().request(m.DEPLOYMENT(encodeURIComponent(r)),{method:"DELETE"},"Delete deployment")}}function Ge(e){let{getApi:t}=e;return{set:async(n,r={})=>{let o=w(r.labels),i={};r.deployment&&(i.deployment=r.deployment),o!==void 0&&(i.labels=o);let{data:l,status:p}=await t().requestWithStatus(m.DOMAIN(encodeURIComponent(n)),{method:"PUT",headers:V,body:JSON.stringify(i)},"Set domain");return{...l,isCreate:p===201}},list:async n=>t().request(`${m.DOMAINS}${se(n)}`,{method:"GET"},"List domains"),get:async n=>t().request(m.DOMAIN(encodeURIComponent(n)),{method:"GET"},"Get domain"),delete:async n=>t().request(m.DOMAIN(encodeURIComponent(n)),{method:"DELETE"},"Delete domain"),verify:async n=>t().request(m.DOMAIN_VERIFY(encodeURIComponent(n)),{method:"POST"},"Verify domain"),validate:async n=>t().request(m.DOMAINS_VALIDATE,{method:"POST",headers:V,body:JSON.stringify({domain:n})},"Validate domain"),dns:async n=>t().request(m.DOMAIN_DNS(encodeURIComponent(n)),{method:"GET"},"Get domain DNS"),records:async n=>t().request(m.DOMAIN_RECORDS(encodeURIComponent(n)),{method:"GET"},"Get domain records"),share:async n=>t().request(m.DOMAIN_SHARE(encodeURIComponent(n)),{method:"GET"},"Get domain share")}}function Be(e){let{getApi:t}=e;return{get:async()=>t().request(m.ACCOUNT,{method:"GET"},"Get account")}}function ze(e){let{getApi:t}=e;return{create:async(n={})=>{let r=re(n.ttl),o=w(n.labels),i={};return r!==void 0&&(i.ttl=r),o!==void 0&&(i.labels=o),t().request(m.TOKENS,{method:"POST",headers:V,body:JSON.stringify(i)},"Create token")},list:async n=>t().request(`${m.TOKENS}${se(n)}`,{method:"GET"},"List tokens"),get:async n=>t().request(m.TOKEN(encodeURIComponent(n)),{method:"GET"},"Get token"),delete:async n=>t().request(m.TOKEN(encodeURIComponent(n)),{method:"DELETE"},"Delete token")}}var K=class{constructor(t={}){this.credential=null;if(t={...t,apiUrl:t.apiUrl||void 0,token:t.token||void 0,caller:t.caller||void 0},this.clientOptions=t,t.caller!==void 0&&Pe(t.caller),t.token&&t.session)throw a.config("Provide either `token` or `session`, not both.");typeof t.token=="string"?(ne(t.token),this.credential=t.token):t.token&&(this.credential=t.token),this.http=new G({...t,getAuthHeaders:()=>this.getAuthHeaders()});let n={getApi:()=>this.http};this.deployments=He({...n,processInput:async(r,o)=>this.processInput(r,o,await this.getLimits({signal:o.signal}))}),this.domains=Ge(n),this.account=Be(n),this.tokens=ze(n)}async ping(){return this.http.request(m.PING,{method:"GET"},"Ping")}async deploy(t,n){return this.deployments.upload(t,n)}async whoami(){return this.account.get()}async getLimits(t={}){return this.http.request(m.LIMITS,{method:"GET",signal:t.signal??null},"Get limits")}on(t,n){this.http.on(t,n)}off(t,n){this.http.off(t,n)}setHeaders(t){this.http.setGlobalHeaders(t)}clearHeaders(){this.http.setGlobalHeaders({})}setToken(t){if(this.clientOptions.session)throw a.config("Provide either `token` or `session`, not both.");if(typeof t=="string"){if(!t)throw a.business("Invalid token provided. Token must be a non-empty string.");ne(t),this.credential=t;return}if(typeof t!="function")throw a.business("Invalid token provided. Token must be a non-empty string or a provider function.");this.credential=t}async getAuthHeaders(){if(this.credential===null)return{};let t=typeof this.credential=="function"?await this.credential():this.credential;if(!t)throw a.authentication("Token provider returned no token.");if(typeof t!="string")throw a.authentication("Token provider returned a non-string value.");return{Authorization:`Bearer ${t}`}}};C();f();import{z as je}from"zod";import{z as Ve}from"zod";var Ke={apiUrl:Ve.string().url().optional(),token:Ve.string().min(1).optional()};C();var Vt=je.object(Ke).strict(),Kt={apiUrl:P.API_URL,token:P.TOKEN};function qe(){if(L()!=="node")return{};let e={apiUrl:process.env[P.API_URL]||void 0,token:process.env[P.TOKEN]||void 0};try{return Vt.parse(e)}catch(t){if(t instanceof je.ZodError){let n=t.issues[0],r=n.path[0],o=(r&&Kt[r])??"SHIP environment configuration";throw a.config(`Invalid ${o}: ${n.message}`)}throw a.config("Invalid environment configuration")}}f();f();pe();C();fe();he();z();ye();function Mr(e,t,n,r=!0){let o=e===1?t:n;return r?`${e} ${o}`:o}Ee();var ge=class extends K{constructor(t={}){if(L()!=="node")throw a.business("Node.js Ship class can only be used in Node.js environment.");let n=qe();super({...t,apiUrl:t.apiUrl||n.apiUrl,token:t.token||(t.session?void 0:n.token)})}async deploy(t,n){return super.deploy(t,n)}async processInput(t,n,r){let o=typeof t=="string"?[t]:t;if(!Array.isArray(o)||!o.every(l=>typeof l=="string"))throw a.business("Invalid input type for Node.js environment. Expected string or string[].");if(o.length===0)throw a.business("No files to deploy.");let{processFilesForNode:i}=await Promise.resolve().then(()=>(Ee(),ot));return i(o,n,r)}},tn=ge;export{En as ACCOUNT_HEADER,Ne as API_KEY,m as API_PATHS,hn as AUTH_BASE_PATH,cn as AccountPlan,pn as AccountRefusal,G as ApiHttp,J as AuthMethod,x as BUILD_SETTINGS,O as CALLER,oe as DEFAULT_API,S as DEPLOYMENT_CONFIG_FILENAME,E as DEPLOY_FIELDS,mn as DEPLOY_FILE_GRAMMAR,Le as DEPLOY_TOKEN,rn as DeploymentStatus,lt as DeploymentVia,on as DomainStatus,sn as DomainVerification,d as ErrorType,h as FILE_VALIDATION_STATUS,h as FileValidationStatus,N as IDEMPOTENCY_KEY_CONSTRAINTS,Wt as JUNK_DIRECTORIES,I as LABEL_CONSTRAINTS,Ce as LABEL_PATTERN,bn as MY_API_KEY_URL,be as OAUTH_TOKEN,Tn as OAuthScope,F as PASSWORD_CONSTRAINTS,On as PUBLIC_DEPLOYMENT_TTL_SECONDS,At as SECTIONS,an as SETUP_TROUBLESHOOTING_ANCHOR,P as SHIP_ENV,Ln as SHIP_VIA_ENV,yn as SIGN_IN_RETURN_PARAM,k as SPA_CHECK_CONSTRAINTS,Oe as SPA_DEFAULT_CONFIG,ge as Ship,a as ShipError,v as TTL_CONSTRAINTS,R as TokenKind,ee as UNBUILT_PROJECT_MARKERS,ht as UNSAFE_FILENAME_CHARS,Pn as USER_VISIBLE_EVENTS,fn as WEB_FILE_ACCEPT,ar as __setTestEnvironment,In as accountOfPath,br as allValidFilesReady,xe as assertShipJsonSyntax,Rn as billingReturnOf,B as calculateMD5,yt as classifyToken,Rt as consolePaths,Be as createAccountResource,He as createDeploymentResource,Ge as createDomainResource,ze as createTokenResource,tn as default,Mn as deserializeLabels,Dn as doors,Nn as errandOf,wn as extractSubdomain,We as filterJunk,Ot as formatDuration,_ as formatFileSize,xn as formatTimeRemaining,Cn as generateDeploymentUrl,vn as generateDomainUrl,L as getENV,Xt as getValidFiles,U as hasUnbuiltMarker,Ie as hasUnsafeChars,Re as isBlockedExtension,Nt as isClaimPath,_n as isCustomDomain,Sn as isDeployment,Lt as isInvitationPath,we as isPlatformDomain,M as isShipError,bt as isUpgradePath,ln as normalizeVia,Ye as optimizeDeployPaths,un as personName,dn as personShortName,Mr as pluralize,rt as processFilesForNode,gn as readBearerValue,Fn as serializeLabels,Et as validateApiKey,An as validateApiUrl,ve as validateBuildCommand,Pe as validateCaller,Ze as validateDeployCount,Qe as validateDeployFile,Je as validateDeployPath,gt as validateDeployToken,de as validateFileName,Lr as validateFiles,De as validateIdempotencyKey,Tt as validateOAuthToken,Fe as validateOutputDir,ie as validatePassword,ne as validateToken,re as validateTtl};
 //# sourceMappingURL=index.js.map