@shipstatic/ship 3.4.0 → 3.5.0

package/dist/index.d.ts

@@ -511,8 +511,7 @@ interface DomainShareResponse {
  * the console sends a stuck reader to it rather than to the general docs. If
  * the spellings ever diverged, nothing would fail: the link would open the page
  * at its top and nobody would be told, the silent-drift class this
- * constitution exists to delete ({@link SIGN_IN_RETURN_PARAM} is the same shape
- * one domain over).
+ * constitution exists to delete.
  */
 declare const SETUP_TROUBLESHOOTING_ANCHOR = "troubleshooting";
 /**
@@ -717,13 +716,13 @@ declare const AccountPlan: {
 };
 type AccountPlanType = (typeof AccountPlan)[keyof typeof AccountPlan];
 /**
- * The three things an account ACCUMULATES, and therefore the three things a
+ * The four things an account ACCUMULATES, and therefore the four things a
  * plan caps. One word for the count and for the ceiling: `Account.usage` and
  * `Account.caps` are the same shape, so a surface renders "2 of 3" by
  * dividing one by the other and can never divide by a different denominator
  * than the 403 uses.
  *
- * All three are counts plans SELL, and every plan publishes a number for each.
+ * All four are counts plans SELL, and every plan publishes a number for each.
  * A platform domain (`my-app.shipstatic.com`) is among them: the namespace
  * is the platform's, so every plan bounds how many names one account may take
  * from it — which is not the address every deployment gets by construction
@@ -763,12 +762,81 @@ interface Caps {
      */
     readonly customDomains: number;
     /**
-     * Members of the account, the owner included: one membership row each, so
-     * a pending invitation is not yet a member. As `usage` it is how many the
-     * account has, as `caps` how many its plan allows.
+     * Member places. As `caps` it is how many people the plan allows in the
+     * account, the owner included. As `usage` it is the members the account
+     * has: one membership row each. A pending invitation holds a place too,
+     * counted beside it as {@link AccountUsage.invitations}, so what stands
+     * against this cap is {@link placesTaken}, members and invitations
+     * together.
      */
     readonly members: number;
 }
+/**
+ * What the account holds: every cap's count, and the pending invitations.
+ *
+ * A member place is taken by a member or by a pending invitation, and an
+ * account never holds more of the two together than its plan's `members`
+ * cap: the invite door refuses a new invitation when the places are taken,
+ * and a move down a tier is booked only when the places fit the destination.
+ * The count has no cap of its own, which is why it is a field of the usage
+ * and not of {@link Caps}: the place it takes is a member's.
+ *
+ * Only a member pauses, though. An account over its members cap pauses every
+ * member while it does not fit; a pending invitation pauses nobody and
+ * counts toward no pause.
+ */
+interface AccountUsage extends Caps {
+    /**
+     * Invitations still open: pending, and not yet expired. An expired one
+     * holds nothing, whether or not a sweep has removed its row.
+     */
+    readonly invitations: number;
+}
+/** The member places an account has taken: its members, and its pending invitations. */
+declare function placesTaken(usage: Pick<AccountUsage, 'members' | 'invitations'>): number;
+/**
+ * The kind each count of {@link AccountUsage} names, as a person reads it:
+ * one and many. The one vocabulary every surface that says a count uses, the
+ * api's cap refusals and the console's room notes alike, so "custom domain"
+ * is one word wherever it is met. A person reads "ShipStatic domain" where
+ * the code says platform domain; the code's word never reaches them.
+ */
+declare const USAGE_KIND: Record<keyof AccountUsage, {
+    readonly one: string;
+    readonly many: string;
+}>;
+/**
+ * What an account holds beyond a set of caps, per kind, only the kinds that
+ * are over: what a move down a tier must shed before it is booked, and what
+ * the console notes on a cheaper card.
+ *
+ * Member places are read against `caps.members`: the places over the cap are
+ * counted once ({@link placesTaken} less the cap), members are named first,
+ * because a member over the cap has to go whatever else the account holds,
+ * and what is over after them is the invitations to cancel. So two members
+ * and one invitation against a cap of one is one member and one invitation,
+ * and five members against the same cap is four members and no invitation.
+ * The two domain kinds are read against their own caps. Deployments are not
+ * read at all: nothing pauses them, and above their cap they only block
+ * creation (see {@link Caps}).
+ */
+declare function excessOver(usage: AccountUsage, caps: Caps): Partial<AccountUsage>;
+/**
+ * Counts of kinds in words, people first: "4 members and 2 custom domains",
+ * or nothing. The order is {@link USAGE_KIND}'s minus the two kinds a count never
+ * names here, deployments and invitations, which have their own sentence
+ * ({@link fitPhrase}).
+ */
+declare function countPhrase(excess: Partial<AccountUsage>): string;
+/**
+ * What to do before an account fits a set of caps, in words: "remove 1
+ * member and cancel 1 invitation", "remove 2 custom domains", "cancel 2
+ * invitations", or nothing when it fits. Two verbs, because a member place is
+ * freed two ways: a member is removed, a pending invitation is cancelled. The
+ * api's change door and the console's room notes say this one phrase, so a
+ * refusal and the note that preceded it cannot differ.
+ */
+declare function fitPhrase(excess: Partial<AccountUsage>): string;
 /**
  * A person's standing in an account. `owner` founded it and alone manages
  * billing, credentials, members and deletion; `member` uses its resources
@@ -836,13 +904,17 @@ interface Account {
      * still work, every write is refused. The plan is unchanged underneath.
      */
     readonly suspended: boolean;
-    /** What the account currently holds — see {@link Caps}. */
-    readonly usage: Caps;
     /**
-     * What the account is allowed to hold, under the same keys as
-     * {@link usage}, so the pair divides. These are the account's EFFECTIVE
-     * caps: its plan's numbers, plus whatever the operator granted it
-     * individually.
+     * What the account currently holds: every cap's count, and the pending
+     * invitations beside them — see {@link AccountUsage}.
+     */
+    readonly usage: AccountUsage;
+    /**
+     * What the account is allowed to hold, under {@link usage}'s cap keys, so
+     * the pair divides. These are the account's EFFECTIVE caps: its plan's
+     * numbers, plus whatever the operator granted it individually. The one key
+     * of `usage` absent here is `invitations`, which has no cap of its own: a
+     * pending invitation takes a member place, so it counts against `members`.
      */
     readonly caps: Caps;
     /**
@@ -862,15 +934,16 @@ interface Account {
      */
     readonly access?: AccountAccess;
     /**
-     * Whether the account's MEMBERS are admitted today: `paused` while it holds
-     * more members than its plan allows, until the owner upgrades or removes
-     * members. It is {@link access} for everyone who is not the owner, published
-     * for the account so the one person it never pauses can be told; the API
-     * derives both from one rule, so a console reads the pause here rather than
-     * re-deriving it from the member counts. Optional by the additive-evolution
-     * law: a response that predates it is `active`.
+     * The account's own standing, beside the credential's ({@link access}):
+     * whether its MEMBERS are admitted today, `paused` while it holds more
+     * members than its plan allows, until the owner upgrades or removes
+     * members. It is {@link access} for everyone who is not the owner,
+     * published for the account so the one person it never pauses can be told;
+     * the API derives both from one rule, so a console reads the pause here
+     * rather than re-deriving it from the member counts. Optional by the
+     * additive-evolution law: a response that predates it is `active`.
      */
-    readonly members?: AccountAccess;
+    readonly membership?: AccountAccess;
     /** Unix timestamp (seconds) when account was created */
     readonly created: number;
     /** Unix timestamp (seconds) when account was activated (first deployment), null if not yet activated */
@@ -1613,20 +1686,6 @@ interface PingResponse {
  * already share the credential prefixes below.
  */
 declare const AUTH_BASE_PATH = "/auth";
-/**
- * The query marker a completed sign-in LANDS with.
- *
- * The API's magic-link verify leg stamps `?signing-in=1` onto its success
- * redirect, and the console boots into its wait screen on seeing it — two
- * repos, one spelling, which is why it lives here. Success is marked and the
- * error leg deliberately is NOT: the console gives the marker precedence, so
- * a marked error would render a wait that resolves to bare doors with the
- * error's sentence lost. If the spellings ever diverged the failure would be
- * invisible to every suite — email landings would flash the doors for one
- * round trip instead of waiting — which is exactly the silent-drift class
- * this constitution exists to delete.
- */
-declare const SIGN_IN_RETURN_PARAM = "signing-in";
 /**
  * How a request (or recorded activity) was authorized.
  *
@@ -2049,6 +2108,9 @@ declare const SECTIONS: {
     readonly settings: {
         readonly owner: false;
     };
+    readonly claim: {
+        readonly owner: false;
+    };
     readonly upgrade: {
         readonly owner: true;
     };
@@ -2061,6 +2123,10 @@ declare const SECTIONS: {
 };
 /** A section's first segment. */
 type ConsoleSection = keyof typeof SECTIONS;
+/** The pages that exist before an account is known, by first segment. */
+declare const DOOR_SEGMENTS: readonly ["login", "register", "logout", "invitation", "consent"];
+/** A door's first segment. */
+type DoorSegment = (typeof DOOR_SEGMENTS)[number];
 /** The two fragments of the settings page a link may name. */
 type SettingsFragment = 'members' | 'api-key';
 /**
@@ -2094,6 +2160,8 @@ declare function consolePaths(account?: string): {
         deployment: (domain: string) => string;
     };
     settings: (fragment?: SettingsFragment) => string;
+    /** The claim of an anonymous deployment into this account; the API mails the bare form. */
+    claim: (code: string) => string;
     /** Settings, marked as the landing of a Stripe Customer Portal return. */
     settingsAfterBilling: () => string;
     upgrade: (plan?: AccountPlanType) => string;
@@ -2104,13 +2172,31 @@ declare function consolePaths(account?: string): {
 };
 /** The builders `consolePaths` returns. */
 type ConsolePaths = ReturnType<typeof consolePaths>;
-/** The doors: the pages that exist before an account is known. */
+/** Where a sign-in door's journey goes on: the console path a `?next` carries. */
+interface Journey {
+    readonly next?: string;
+}
+/**
+ * The doors: the pages a PERSON stands on before an account is known, one
+ * builder per door segment and named for it: signing in and out, joining an
+ * account, granting an app access. A door's object rides its path (the
+ * sign-in link's token, the invitation's id), and the journey rides the
+ * query, so the three doors a sign-in moves through take it by name. What a
+ * person does IN an account is a section (`consolePaths`), the claim among
+ * them.
+ *
+ * ```ts
+ * doors.login({ token, next: '/claim/abc' })
+ * // '/login/<token>?next=%2Fclaim%2Fabc'
+ * ```
+ */
 declare const doors: {
-    readonly login: (next?: string) => string;
-    readonly register: (next?: string) => string;
-    readonly logout: () => string;
+    readonly login: ({ token, next }?: Journey & {
+        readonly token?: string;
+    }) => string;
+    readonly register: ({ next }?: Journey) => string;
+    readonly logout: ({ next }?: Journey) => string;
     readonly invitation: (invitation: string) => string;
-    readonly claim: (code: string) => string;
     readonly consent: () => string;
 };
 /**
@@ -2125,10 +2211,21 @@ declare function billingReturnOf(search: string): BillingReturn | null;
  * the account exists is the server's answer, never the path's.
  */
 declare function accountOfPath(path: string): string | null;
-/** Whether a path names a claim link (`/claim/:code`, a bearer credential). */
+/**
+ * The door a path names, or null for an account place or the operator
+ * partition. Every question about doors reads this one answer: which page is
+ * an auth page, which errand a destination carries, what a vendor must not
+ * see. `/login/<token>` is the login door, as `/invitation/<id>` is the
+ * invitation door: a door's object is the rest of its path.
+ */
+declare function doorOf(path: string): DoorSegment | null;
+/**
+ * Whether a path names the claim section, in either form: `/claim/:code`, and
+ * the same under `/<account>/`. The code is a bearer credential, which is why
+ * a reader asks about this section by name: the doors title their visitor by
+ * it, and analytics elides it.
+ */
 declare const isClaimPath: (path: string) => boolean;
-/** Whether a path names an invitation (`/invitations/:invitation`). */
-declare const isInvitationPath: (path: string) => boolean;
 /**
  * Whether a path names the upgrade section, in either form: `/upgrade`,
  * `/upgrade/:plan`, and the same under `/<account>/`.
@@ -2461,20 +2558,6 @@ interface Plan {
      * nothing (a plan sold by conversation publishes no numbers).
      */
     readonly caps: Caps | null;
-    /**
-     * Why this row cannot be ordered right now — the closed door's own sentence,
-     * verbatim — or absent when the way is open. A menu lists what can be
-     * ordered, and a row that is sold but not yet orderable (its door is closed:
-     * checkout unbuilt, a feature unfinished) SAYS SO on the menu instead of
-     * only at the order.
-     *
-     * Clients branch on PRESENCE and render the sentence unchanged — they know
-     * *that* the row is closed, never *which* door or *when it lifts*; the
-     * vocabulary of doors stays server-side. The same rule the refusal follows:
-     * `POST /billing/change` onto a closed row answers 400 with
-     * `details.closed`, and its `message` is this sentence.
-     */
-    readonly closed?: string;
 }
 /**
  * Response for `GET /plans` — the whole public menu, in display order.
@@ -2512,17 +2595,18 @@ interface PlanChangeRequest {
 }
 /**
  * `details` of the change door's refusal of a move down a tier the account
- * does not fit: the account holds more members, custom domains or platform
- * domains than the destination allows.
+ * does not fit: the account holds more members, pending invitations, custom
+ * domains or platform domains than the destination allows.
  *
  * `excess` counts what to REMOVE before asking again, per kind, keyed like
- * {@link Caps}; only the kinds over the destination's caps appear. The
- * door's `message` names the same counts in a sentence, and that sentence is
- * what a surface shows; the counts are for a client that acts on the
- * refusal.
+ * {@link AccountUsage}; only the kinds over the destination's caps appear
+ * ({@link excessOver}). Members and invitations are counted apart, since one
+ * is removed and the other cancelled. The door's `message` names the same
+ * counts in a sentence, and that sentence is what a surface shows; the
+ * counts are for a client that acts on the refusal.
  */
 interface PlanChangeRefusalDetails {
-    readonly excess: Partial<Caps>;
+    readonly excess: Partial<AccountUsage>;
 }
 /**
  * The pending plan change — a Stripe Subscription Schedule, mirrored onto the
@@ -3854,4 +3938,4 @@ declare class Ship extends Ship$1 {
     protected processInput(input: DeployInput, options: DeploymentOptions, limits: PlatformLimits): Promise<StaticFile[]>;
 }
 
-export { ACCOUNT_HEADER, API_KEY, API_PATHS, AUTH_BASE_PATH, type Account, type AccountAccess, type AccountDeleteResponse, type AccountKeyResponse, AccountPlan, type AccountPlanType, AccountRefusal, type AccountRefusalType, type AccountResource, type AccountRole, type Activity, type ActivityEvent, type ActivityListResponse, type ActivityMeta, type ApiDeployOptions, ApiHttp, type ApiHttpOptions, AuthMethod, type AuthMethodType, BUILD_SETTINGS, type BillingInterval, type BillingPortalSession, type BillingSyncResponse, type BuildFailureDetails, CALLER, type Caps, type ConsoleErrand, type ConsolePaths, type ConsoleSection, DEFAULT_API, DEPLOYMENT_CONFIG_FILENAME, DEPLOY_FIELDS, DEPLOY_FILE_GRAMMAR, DEPLOY_TOKEN, type DeployBodyContext, type DeployFile, type DeployFileEncoding, type DeployFileSpec, type DeployInput, type DeployTransport, type Deployment, type DeploymentCreateResponse, type DeploymentDeleteResponse, type DeploymentListResponse, type DeploymentOptions, type DeploymentResource, type DeploymentResourceContext, type DeploymentSetOptions, DeploymentStatus, type DeploymentStatusType, type DeploymentUploadOptions, DeploymentVia, type DeploymentViaType, type DnsLookup, type DnsProvider, type DnsRecord, type DnsRecordType, type Domain, type DomainDeleteResponse, type DomainDnsResponse, type DomainListResponse, type DomainRecordsResponse, type DomainResource, type DomainSetOptions, type DomainSetResult, type DomainShareResponse, DomainStatus, type DomainStatusType, type DomainValidateResponse, DomainVerification, type DomainVerificationType, type DomainVerifyResponse, type ErrorResponse, ErrorType, type ExecutionEnvironment, FileValidationStatus as FILE_VALIDATION_STATUS, type Fetch, type FileValidationResult, FileValidationStatus, type FileValidationStatusType, IDEMPOTENCY_KEY_CONSTRAINTS, JUNK_DIRECTORIES, LABEL_CONSTRAINTS, LABEL_PATTERN, type LabelsResponse, type ListOptions, type ListResponse, type MD5Result, MY_API_KEY_URL, OAUTH_TOKEN, OAuthScope, type OAuthScopeType, PASSWORD_CONSTRAINTS, PUBLIC_DEPLOYMENT_TTL_SECONDS, type PingResponse, type Plan, type PlanChangeRefusalDetails, type PlanChangeRequest, type PlanChangeResponse, type PlanDestination, type PlansResponse, type PlatformLimitKey, type PlatformLimits, type RequestResult, type ResourceContext, SECTIONS, SETUP_TROUBLESHOOTING_ANCHOR, SHIP_ENV, SHIP_VIA_ENV, SIGN_IN_RETURN_PARAM, type SPACheckRequest, type SPACheckResponse, SPA_CHECK_CONSTRAINTS, SPA_DEFAULT_CONFIG, type ScheduledChange, type SettingsFragment, type SetupInstructionsResponse, Ship, type ShipClientOptions, ShipError, type ShipEvents, type ShipRequestInit, type StaticFile, TTL_CONSTRAINTS, type Token, type TokenCreateOptions, type TokenCreateResponse, type TokenDeleteResponse, TokenKind, type TokenKindType, type TokenListResponse, type TokenProvider, type TokenResource, type Transport, UNBUILT_PROJECT_MARKERS, UNSAFE_FILENAME_CHARS, USER_VISIBLE_EVENTS, type UploadedFile, type UserVisibleActivityEvent, type ValidatableFile, type ValidationIssue, WEB_FILE_ACCEPT, __setTestEnvironment, accountOfPath, allValidFilesReady, assertShipJsonSyntax, billingReturnOf, calculateMD5, classifyToken, consolePaths, createAccountResource, createDeploymentResource, createDomainResource, createTokenResource, Ship as default, deserializeLabels, doors, errandOf, extractSubdomain, filterJunk, formatDuration, formatFileSize, formatTimeRemaining, generateDeploymentUrl, generateDomainUrl, getENV, getValidFiles, hasUnbuiltMarker, hasUnsafeChars, isBlockedExtension, isClaimPath, isCustomDomain, isDeployment, isInvitationPath, isPlatformDomain, isShipError, isUpgradePath, normalizeVia, optimizeDeployPaths, personName, personShortName, pluralize, processFilesForNode, readBearerValue, serializeLabels, validateApiKey, validateApiUrl, validateBuildCommand, validateCaller, validateDeployCount, validateDeployFile, validateDeployPath, validateDeployToken, validateFileName, validateFiles, validateIdempotencyKey, validateOAuthToken, validateOutputDir, validatePassword, validateToken, validateTtl };
+export { ACCOUNT_HEADER, API_KEY, API_PATHS, AUTH_BASE_PATH, type Account, type AccountAccess, type AccountDeleteResponse, type AccountKeyResponse, AccountPlan, type AccountPlanType, AccountRefusal, type AccountRefusalType, type AccountResource, type AccountRole, type AccountUsage, type Activity, type ActivityEvent, type ActivityListResponse, type ActivityMeta, type ApiDeployOptions, ApiHttp, type ApiHttpOptions, AuthMethod, type AuthMethodType, BUILD_SETTINGS, type BillingInterval, type BillingPortalSession, type BillingSyncResponse, type BuildFailureDetails, CALLER, type Caps, type ConsoleErrand, type ConsolePaths, type ConsoleSection, DEFAULT_API, DEPLOYMENT_CONFIG_FILENAME, DEPLOY_FIELDS, DEPLOY_FILE_GRAMMAR, DEPLOY_TOKEN, type DeployBodyContext, type DeployFile, type DeployFileEncoding, type DeployFileSpec, type DeployInput, type DeployTransport, type Deployment, type DeploymentCreateResponse, type DeploymentDeleteResponse, type DeploymentListResponse, type DeploymentOptions, type DeploymentResource, type DeploymentResourceContext, type DeploymentSetOptions, DeploymentStatus, type DeploymentStatusType, type DeploymentUploadOptions, DeploymentVia, type DeploymentViaType, type DnsLookup, type DnsProvider, type DnsRecord, type DnsRecordType, type Domain, type DomainDeleteResponse, type DomainDnsResponse, type DomainListResponse, type DomainRecordsResponse, type DomainResource, type DomainSetOptions, type DomainSetResult, type DomainShareResponse, DomainStatus, type DomainStatusType, type DomainValidateResponse, DomainVerification, type DomainVerificationType, type DomainVerifyResponse, type DoorSegment, type ErrorResponse, ErrorType, type ExecutionEnvironment, FileValidationStatus as FILE_VALIDATION_STATUS, type Fetch, type FileValidationResult, FileValidationStatus, type FileValidationStatusType, IDEMPOTENCY_KEY_CONSTRAINTS, JUNK_DIRECTORIES, LABEL_CONSTRAINTS, LABEL_PATTERN, type LabelsResponse, type ListOptions, type ListResponse, type MD5Result, MY_API_KEY_URL, OAUTH_TOKEN, OAuthScope, type OAuthScopeType, PASSWORD_CONSTRAINTS, PUBLIC_DEPLOYMENT_TTL_SECONDS, type PingResponse, type Plan, type PlanChangeRefusalDetails, type PlanChangeRequest, type PlanChangeResponse, type PlanDestination, type PlansResponse, type PlatformLimitKey, type PlatformLimits, type RequestResult, type ResourceContext, SECTIONS, SETUP_TROUBLESHOOTING_ANCHOR, SHIP_ENV, SHIP_VIA_ENV, type SPACheckRequest, type SPACheckResponse, SPA_CHECK_CONSTRAINTS, SPA_DEFAULT_CONFIG, type ScheduledChange, type SettingsFragment, type SetupInstructionsResponse, Ship, type ShipClientOptions, ShipError, type ShipEvents, type ShipRequestInit, type StaticFile, TTL_CONSTRAINTS, type Token, type TokenCreateOptions, type TokenCreateResponse, type TokenDeleteResponse, TokenKind, type TokenKindType, type TokenListResponse, type TokenProvider, type TokenResource, type Transport, UNBUILT_PROJECT_MARKERS, UNSAFE_FILENAME_CHARS, USAGE_KIND, USER_VISIBLE_EVENTS, type UploadedFile, type UserVisibleActivityEvent, type ValidatableFile, type ValidationIssue, WEB_FILE_ACCEPT, __setTestEnvironment, accountOfPath, allValidFilesReady, assertShipJsonSyntax, billingReturnOf, calculateMD5, classifyToken, consolePaths, countPhrase, createAccountResource, createDeploymentResource, createDomainResource, createTokenResource, Ship as default, deserializeLabels, doorOf, doors, errandOf, excessOver, extractSubdomain, filterJunk, fitPhrase, formatDuration, formatFileSize, formatTimeRemaining, generateDeploymentUrl, generateDomainUrl, getENV, getValidFiles, hasUnbuiltMarker, hasUnsafeChars, isBlockedExtension, isClaimPath, isCustomDomain, isDeployment, isPlatformDomain, isShipError, isUpgradePath, normalizeVia, optimizeDeployPaths, personName, personShortName, placesTaken, pluralize, processFilesForNode, readBearerValue, serializeLabels, validateApiKey, validateApiUrl, validateBuildCommand, validateCaller, validateDeployCount, validateDeployFile, validateDeployPath, validateDeployToken, validateFileName, validateFiles, validateIdempotencyKey, validateOAuthToken, validateOutputDir, validatePassword, validateToken, validateTtl };

package/dist/index.js

@@ -1,2 +1,2 @@
-var st=Object.defineProperty;var A=(e,t)=>()=>(e&&(t=e(e=0)),t);var at=(e,t)=>{for(var n in t)st(e,n,{get:t[n],enumerable:!0})};function ln(e){if(!e||typeof e!="string")return;let t=e.trim().toLowerCase();return Object.values(lt).includes(t)?t:void 0}function De(e){if(e==null)return;if(typeof e!="string")throw a.validation("Idempotency key must be a string.");let t=e.trim();if(!t)throw a.validation("Idempotency key must not be empty.");if(t.length>N.MAX_LENGTH)throw a.validation(`Idempotency key must be at most ${N.MAX_LENGTH} characters.`);return t}function un(e){return e.name?.trim()||e.email}function dn(e){return e.name?.trim().split(" ")[0]||e.email}function dt(e){let t=e.code;return t==="ERR_INVALID_URL"?!1:typeof t=="string"?!0:e instanceof TypeError?!/\burl\b/i.test(e.message):!1}function M(e){return e!==null&&typeof e=="object"&&"name"in e&&e.name==="ShipError"&&"status"in e}function mt(e){let t=e.replace(/\\/g,"/").split("/").pop()??"",n=t.lastIndexOf(".");return n<=0||n===t.length-1?null:t.slice(n+1).toLowerCase()}function Re(e,t){let n=mt(e);return n===null?!1:Array.isArray(t)?t.includes(n):t.has(n)}function Ie(e){return ht.test(e)}function U(e){return e.replace(/\\/g,"/").split("/").filter(Boolean).some(n=>ee.has(n))}function yt(e){return e.startsWith(Ne.PREFIX)?R.API_KEY:e.startsWith(Le.PREFIX)?R.DEPLOY_TOKEN:e.startsWith(be.PREFIX)?R.OAUTH:R.OPAQUE}function gn(e){return e.slice(0,Q.length).toLowerCase()!==Q?null:e.slice(Q.length)||null}function xe(e){let t=e.charCodeAt(0)===65279?e.slice(1):e,n;try{n=JSON.parse(t)}catch(r){throw a.config(`invalid JSON format in config: ${r.message}`,{filePath:S})}if(n===null||typeof n!="object"||Array.isArray(n))throw a.config(`${S} must contain a JSON object`,{filePath:S})}function te(e,t,n){if(!e.startsWith(t.PREFIX))throw a.validation(`${n} must start with "${t.PREFIX}"`);if(e.length!==t.TOTAL_LENGTH)throw a.validation(`${n} must be ${t.TOTAL_LENGTH} characters total (${t.PREFIX} + ${t.HEX_LENGTH} hex chars)`);let r=e.slice(t.PREFIX.length);if(!new RegExp(`^[a-f0-9]{${t.HEX_LENGTH}}$`,"i").test(r))throw a.validation(`${n} must contain ${t.HEX_LENGTH} hexadecimal characters after "${t.PREFIX}" prefix`)}function Et(e){te(e,Ne,"API key")}function gt(e){te(e,Le,"Deploy token")}function Tt(e){te(e,be,"OAuth access token")}function ne(e){switch(yt(e)){case R.API_KEY:Et(e);return;case R.DEPLOY_TOKEN:gt(e);return;case R.OAUTH:Tt(e);return;case R.OPAQUE:if(!e)throw a.validation("Token must be a non-empty string")}}function Pe(e){if(!e||e.length>O.MAX_LENGTH||!O.PATTERN.test(e))throw a.validation(`Caller must be 1-${O.MAX_LENGTH} characters: letters, digits, dots, underscores, or hyphens`)}function An(e){try{let t=new URL(e);if(!["http:","https:"].includes(t.protocol))throw a.validation("API URL must use http:// or https:// protocol");if(t.pathname!=="/"&&t.pathname!=="")throw a.validation("API URL must not contain a path");if(t.search||t.hash)throw a.validation("API URL must not contain query parameters or fragments")}catch(t){throw M(t)?t:a.validation("API URL must be a valid URL")}}function Sn(e){return/^[a-z]+-[a-z]+-[a-z0-9]{7}(\.[a-z0-9.-]+)?$/i.test(e)}function re(e){if(e!=null){if(typeof e!="number"||!Number.isFinite(e))throw a.validation("TTL must be a number of seconds");if(!Number.isInteger(e))throw a.validation("TTL must be a whole number of seconds");if(e<v.MIN_SECONDS||e>v.MAX_SECONDS)throw a.validation(`TTL must be between ${v.MIN_SECONDS} and ${v.MAX_SECONDS} seconds`);return e}}function Rt(e){let t=e?`/${e}`:"",n=r=>`${t}${r}`;return{dashboard:()=>t||"/",newSite:()=>n("/new"),deployments:Object.assign(()=>n("/deployments"),{upload:()=>n("/deployments/upload")}),domains:Object.assign(()=>n("/domains"),{connect:r=>n(`/domains/${r}/connect`),deployment:r=>n(`/domains/${r}/deployment`)}),settings:r=>n(r?`/settings#${r}`:"/settings"),settingsAfterBilling:()=>n(`/settings?${Te("portal")}`),upgrade:r=>n(r?`/upgrade/${r}`:"/upgrade"),success:()=>n("/success"),successAfterCheckout:()=>n(`/success?${Te("checkout")}`),apiKey:()=>n("/api-key")}}function Rn(e){let t=new URLSearchParams(e);for(let[n,[r,o]]of Object.entries(_e))if(t.get(r)===o)return n;return null}function $(e){let t=e.split(/[?#]/)[0].toLowerCase(),[n="",r=""]=t.split("/").filter(Boolean);return It(n)?{kind:"door",door:n}:n===Dt?{kind:"admin"}:n===""||Se(n)?{kind:"account",account:null,section:n===""?null:n}:{kind:"account",account:n,section:Se(r)?r:null}}function In(e){let t=$(e);return t.kind==="account"?t.account:null}function Nn(e){return Nt(e)?"claim":Lt(e)?"invite":bt(e)?"upgrade":null}function Ot(e){let t=Math.round(e/60);if(!(t>=1))return"less than a minute";if(t<120)return Z(t,"minute");let n=Math.round(e/3600);return n<48?Z(n,"hour"):Z(Math.round(e/86400),"day")}function xn(e,t=Date.now()/1e3){let n=e-t;return n>0?Ot(n):null}function Z(e,t){return`${e} ${t}${e===1?"":"s"}`}function _(e,t=1){if(e===0)return"0 Bytes";let n=1024,r=["Bytes","KB","MB","GB"],o=Math.floor(Math.log(e)/Math.log(n));return`${Number.parseFloat((e/n**o).toFixed(t))} ${r[o]}`}function we(e,t){return e.endsWith(`.${t}`)}function _n(e,t){return!we(e,t)}function wn(e,t){return we(e,t)?e.slice(0,-(t.length+1)):null}function Cn(e){return`https://${e}`}function vn(e){return`https://${e}`}function Fn(e){return!e||e.length===0?null:JSON.stringify(e)}function Mn(e){if(!e)return[];try{let t=JSON.parse(e);return Array.isArray(t)?t:[]}catch{return[]}}function ve(e){if(e==null||e==="")return;if(typeof e!="string")throw a.validation("Build command must be a string");let t=e.trim();if(t.length===0||t.length>x.COMMAND_MAX_LENGTH)throw a.validation(`Build command must be between 1 and ${x.COMMAND_MAX_LENGTH} characters`);if(/[\x00-\x1f\x7f]/.test(t))throw a.validation("Build command must be a single line");return t}function Fe(e){if(e==null||e==="")return;if(typeof e!="string")throw a.validation("Output folder must be a string");let t=e.trim().replace(/\/+$/,"");if(t.length===0||t.length>x.OUTPUT_DIR_MAX_LENGTH)throw a.validation(`Output folder must be between 1 and ${x.OUTPUT_DIR_MAX_LENGTH} characters`);if(!x.OUTPUT_DIR_PATTERN.test(t)||t.split("/").some(n=>n===".."||n==="."))throw a.validation("Output folder must be a relative path inside the project, like dist or dist/site");return t}function ie(e){if(e==null)return;if(typeof e!="string")throw a.validation("Password must be a string");let t=e.trim();if(t.length<F.MIN_LENGTH||t.length>F.MAX_LENGTH)throw a.validation(`Password must be between ${F.MIN_LENGTH} and ${F.MAX_LENGTH} characters`);return t}var rn,lt,on,sn,an,N,cn,pn,m,E,mn,d,ct,W,pt,ut,a,ft,fn,ht,ee,hn,yn,J,Ne,Le,be,O,En,R,Q,Tn,S,Oe,k,v,At,St,Dt,_e,Te,Ae,Dn,It,Se,Nt,Lt,bt,oe,P,Ln,bn,On,Pn,h,I,Ce,x,F,f=A(()=>{"use strict";rn={PENDING:"pending",SUCCESS:"success",FAILED:"failed",DELETING:"deleting"},lt={WEB:"web",SDK:"sdk",CLI:"cli",MCP:"mcp",GIT:"git",N8N:"n8n",GPT:"gpt",VSC:"vsc",CLD:"cld",CRS:"crs",GMN:"gmn",API:"api"},on={LIVE:"live",UNLINKED:"unlinked",UNVERIFIED:"unverified",PAUSED:"paused"},sn={PENDING:"pending",PARTIAL:"partial",VERIFIED:"verified"},an="troubleshooting",N={HEADER:"Idempotency-Key",MAX_LENGTH:256,WINDOW_SECONDS:1440*60};cn={FREE:"free",PRO:"pro",TEAM:"team",SCALE:"scale",SPONSORED:"sponsored"},pn={PAUSED:"paused",UNKNOWN:"unknown"};m={DEPLOYMENTS:"/deployments",DEPLOYMENT:e=>`/deployments/${e}`,DEPLOYMENT_CONFIG:e=>`/deployments/${e}/config`,DOMAINS:"/domains",DOMAIN:e=>`/domains/${e}`,DOMAIN_VERIFY:e=>`/domains/${e}/verify`,DOMAIN_DNS:e=>`/domains/${e}/dns`,DOMAIN_RECORDS:e=>`/domains/${e}/records`,DOMAIN_SHARE:e=>`/domains/${e}/share`,DOMAIN_PROPAGATION:e=>`/domains/${e}/propagation`,DOMAINS_VALIDATE:"/domains/validate",TOKENS:"/tokens",TOKEN:e=>`/tokens/${e}`,ACCOUNT:"/account",ACCOUNT_KEY:"/account/key",ACCOUNT_CLAIM:"/account/claim",ACTIVITIES:"/activities",LABELS:"/labels",LIMITS:"/limits",PLANS:"/plans",PING:"/ping",SETUP:"/setup",SPA_CHECK:"/spa-check",UPLOAD:"/upload"},E={FILES:"files[]",CHECKSUMS:"checksums",LABELS:"labels",VIA:"via",PASSWORD:"password",TTL:"ttl",BUILD:"build",PRERENDER:"prerender",SPA:"spa",BUILD_COMMAND:"buildCommand",OUTPUT_DIR:"outputDir",CAPTCHA:"captcha"},mn={PATH:"path",CONTENT:"content",ENCODING:"encoding",DEFAULT_ENCODING:"utf-8",ENCODINGS:["utf-8","base64"]},d={Validation:"validation_failed",NotFound:"not_found",Forbidden:"forbidden",RateLimit:"rate_limit_exceeded",Authentication:"authentication_failed",Business:"business_logic_error",Api:"internal_server_error",Maintenance:"maintenance",Build:"build_failed",Network:"network_error",Timeout:"timeout_error",Cancelled:"operation_cancelled",File:"file_error",Config:"config_error"},ct=new Set([d.Network,d.Timeout,d.Cancelled,d.File,d.Config]),W={client:new Set([d.Build,d.Business,d.Cancelled,d.Config,d.File,d.Forbidden,d.NotFound,d.RateLimit,d.Validation]),network:new Set([d.Network,d.Timeout]),auth:new Set([d.Authentication])},pt=new Set(Object.values(d).filter(e=>!ct.has(e))),ut=200;a=class e extends Error{type;status;details;constructor(t,n,r,o){super(n),this.type=t,this.status=r,this.details=o,this.name="ShipError"}toResponse(){let t=this.details,n=this.type===d.Authentication&&t?.internal?void 0:this.details;return{error:this.type,message:this.message,status:this.status,details:n}}static async fromHttpResponse(t,n){let r,o,i;try{if(t.headers.get("content-type")?.includes("application/json")){let u=await t.json();if(u&&typeof u=="object"){let c=u;typeof c.message=="string"?r=c.message:typeof c.error=="string"&&(r=c.error),o=c.details,typeof c.error=="string"&&pt.has(c.error)&&(i=c.error)}}else{let u=(await t.text()).trim();u&&!u.startsWith("<")&&u.length<=ut&&(r=u)}}catch{}let l=t.headers.get("retry-after");if(l!==null){let s=l.trim(),u=/^\d+$/.test(s)?Number(s):Math.ceil((Date.parse(s)-Date.now())/1e3);if(Number.isFinite(u)&&u>=0){let c=o&&typeof o=="object"?o:{};c.retryAfter===void 0&&(o={...c,retryAfter:u})}}r=r||`${n||"Request"} failed with status ${t.status}`;let p=i??(t.status===401?d.Authentication:t.status===403?d.Forbidden:t.status===429?d.RateLimit:d.Api);return new e(p,r,t.status,o)}static fromFetchError(t,n){if(M(t))return t;let r=n||"Request",o=t?.name;return o==="AbortError"?e.cancelled(`${r} was cancelled`):o==="TimeoutError"?e.timeout(`${r} timed out`,{cause:t}):t instanceof Error?dt(t)?e.network(`${r} failed: ${t.message}`,{cause:t}):new e(d.Api,`${r} failed: ${t.message}`):new e(d.Api,`${r} failed: Unknown error`)}static validation(t,n){return new e(d.Validation,t,400,n)}static notFound(t,n){let r=n?`${t} ${n} not found`:`${t} not found`;return new e(d.NotFound,r,404)}static forbidden(t,n){return new e(d.Forbidden,t,403,n)}static rateLimit(t="Too many requests",n){return new e(d.RateLimit,t,429,n)}static authentication(t="Authentication required",n){return new e(d.Authentication,t,401,n)}static business(t,n=400,r){return new e(d.Business,t,n,r)}static network(t,n){return new e(d.Network,t,void 0,n)}static timeout(t,n){return new e(d.Timeout,t,void 0,n)}static cancelled(t,n){return new e(d.Cancelled,t,void 0,n)}static file(t,n){return new e(d.File,t,void 0,n)}static config(t,n){return new e(d.Config,t,void 0,n)}static api(t,n=500,r){return new e(d.Api,t,n,r)}static maintenance(t,n){return new e(d.Maintenance,t,503,n)}static build(t,n){return new e(d.Build,t,422,n)}isClientError(){return W.client.has(this.type)?!0:this.status!==void 0&&this.status>=400&&this.status<500}isNetworkError(){return W.network.has(this.type)}isAuthError(){return W.auth.has(this.type)}isType(t){return this.type===t}};ft=["html","htm","xhtml","xml","txt","md","markdown","pdf","csv","json","jsonc","webmanifest","map","toml","yaml","yml","rss","atom","css","scss","sass","less","js","mjs","cjs","jsx","ts","tsx","wasm","vue","svelte","png","jpg","jpeg","gif","webp","avif","svg","ico","bmp","tif","tiff","heic","heif","woff","woff2","ttf","otf","eot","mp3","wav","ogg","oga","opus","m4a","aac","flac","weba","mp4","webm","ogv","mov","m4v","avi","glb","gltf","usdz","vtt","srt","zip"],fn=ft.map(e=>`.${e}`).join(","),ht=/[\x00-\x1f\x7f#?%\\<>"]/;ee=new Set(["node_modules","package.json"]);hn="/auth",yn="signing-in",J={SESSION:"session",API_KEY:"apiKey",TOKEN:"token",AGENT:"agent",OAUTH:"oauth",SYSTEM:"system"},Ne={PREFIX:"ship-",HEX_LENGTH:32,TOTAL_LENGTH:37,HINT_LENGTH:4},Le={PREFIX:"deploy-",HEX_LENGTH:32,TOTAL_LENGTH:39},be={PREFIX:"oauth-",HEX_LENGTH:32,TOTAL_LENGTH:38},O={HEADER:"X-Caller",MAX_LENGTH:128,PATTERN:/^[a-zA-Z0-9._-]+$/},En="X-Account",R={API_KEY:J.API_KEY,DEPLOY_TOKEN:J.TOKEN,OAUTH:J.OAUTH,OPAQUE:"opaque"};Q="bearer ";Tn={ACCOUNT_READ:"account:read",DEPLOYMENTS_READ:"deployments:read",DEPLOYMENTS_WRITE:"deployments:write",DOMAINS_READ:"domains:read",DOMAINS_WRITE:"domains:write"},S="ship.json",Oe={rewrites:[{source:"/(.*)",destination:"/index.html"}]},k={INDEX_FILE:"index.html",MAX_INDEX_BYTES:100*1024};v={MIN_SECONDS:1,MAX_SECONDS:365*24*60*60};At={new:{owner:!1},deployments:{owner:!1},domains:{owner:!1},settings:{owner:!1},upgrade:{owner:!0},success:{owner:!0},"api-key":{owner:!0}},St=["login","register","logout","invitations","claim","consent"],Dt="admin",_e={checkout:["upgrading","true"],portal:["billing","returned"]},Te=e=>_e[e].join("="),Ae=(e,t)=>t?`${e}?next=${encodeURIComponent(t)}`:e;Dn={login:e=>Ae("/login",e),register:e=>Ae("/register",e),logout:()=>"/logout",invitation:e=>`/invitations/${e}`,claim:e=>`/claim/${e}`,consent:()=>"/consent"};It=e=>St.includes(e),Se=e=>Object.hasOwn(At,e);Nt=e=>{let t=$(e);return t.kind==="door"&&t.door==="claim"},Lt=e=>{let t=$(e);return t.kind==="door"&&t.door==="invitations"},bt=e=>{let t=$(e);return t.kind==="account"&&t.section==="upgrade"};oe="https://api.shipstatic.com",P={TOKEN:"SHIP_TOKEN",API_URL:"SHIP_API_URL"},Ln="SHIP_VIA",bn=`https://my.shipstatic.com${Rt().apiKey()}`,On=4320*60;Pn=["account.create","account.update","account.delete","account.key.generate","account.plan.transition","deployment.create","deployment.update","deployment.delete","deployment.claim","domain.create","domain.update","domain.delete","domain.verify","token.create","token.consume","token.delete","member.join","member.leave","consent.grant"],h={PENDING:"pending",PROCESSING_ERROR:"processing_error",EXCLUDED:"excluded",VALIDATION_FAILED:"validation_failed",READY:"ready"};I={MIN_LENGTH:3,MAX_LENGTH:25,MAX_COUNT:10,SEPARATORS:"._-"},Ce=/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;x={COMMAND_MAX_LENGTH:200,OUTPUT_DIR_MAX_LENGTH:100,OUTPUT_DIR_PATTERN:/^[A-Za-z0-9._-]+(\/[A-Za-z0-9._-]+)*$/};F={MIN_LENGTH:6,MAX_LENGTH:128}});async function Ut(e){let t=(await import("spark-md5")).default,n=new t.ArrayBuffer,r=2097152;for(let o=0;o<e.size;o+=r){let i=Math.min(o+r,e.size);n.append(await e.slice(o,i).arrayBuffer())}return{md5:n.end()}}async function kt(e){let{createHash:t}=await import("crypto"),n=t("md5");return n.update(e),{md5:n.digest("hex")}}async function $t(e){let{createHash:t}=await import("crypto"),{createReadStream:n}=await import("fs");return new Promise((r,o)=>{let i=t("md5"),l=n(e);l.on("error",p=>o(a.file(`Failed to read file for MD5: ${p.message}`,{filePath:e}))),l.on("data",p=>i.update(p)),l.on("end",()=>r({md5:i.digest("hex")}))})}async function B(e){if(e instanceof Blob)return Ut(e);if(typeof Buffer<"u"&&Buffer.isBuffer(e))return kt(e);if(typeof e=="string")return $t(e);throw a.business("Invalid input for MD5 calculation")}var z=A(()=>{"use strict";f()});function ar(e){ae=e}function zt(){return typeof process<"u"&&process.versions&&process.versions.node?"node":typeof window<"u"||typeof self<"u"?"browser":"unknown"}function L(){return ae||zt()}var ae,C=A(()=>{"use strict";ae=null});function Xe(e){if(!e||e.length===0)return"";let t=e.filter(i=>i&&typeof i=="string").map(i=>i.replace(/\\/g,"/"));if(t.length===0)return"";if(t.length===1)return t[0];let n=t.map(i=>i.split("/").filter(Boolean)),r=[],o=Math.min(...n.map(i=>i.length));for(let i=0;i<o;i++){let l=n[0][i];if(n.every(p=>p[i]===l))r.push(l);else break}return r.join("/")}function j(e){return e.replace(/\\/g,"/").replace(/\/+/g,"/").replace(/^\/+/,"")}var le=A(()=>{"use strict"});function Ye(e,t={}){if(t.flatten===!1)return e.map(r=>({path:j(r),name:ce(r)}));let n=jt(e);return e.map(r=>{let o=j(r);if(n){let i=n.endsWith("/")?n:`${n}/`;o.startsWith(i)&&(o=o.substring(i.length))}return o||(o=ce(r)),{path:o,name:ce(r)}})}function jt(e){if(!e.length)return"";let n=e.map(i=>j(i)).map(i=>i.split("/")),r=[],o=Math.min(...n.map(i=>i.length));for(let i=0;i<o-1;i++){let l=n[0][i];if(n.every(p=>p[i]===l))r.push(l);else break}return r.join("/")}function ce(e){return e.split(/[/\\]/).pop()||e}var pe=A(()=>{"use strict";le()});function ue(e,t,n){let r=t.suggestions?.[n];return r?`${e} ${r}`:e}function q(e,t){return qt.find(n=>n.broken(e,t))}var qt,b,me=A(()=>{"use strict";f();fe();qt=[{name:"name",broken:({path:e})=>!de(e).valid,sentence:({path:e})=>de(e).reason??`File name "${e}" is invalid.`},{name:"extension",broken:({path:e},t)=>Re(e,t.blockedExtensions??[]),sentence:({path:e})=>`File "${e}" has an extension that is not allowed.`},{name:"fileSize",broken:({size:e},t)=>e>t.maxFileSize,sentence:({path:e},t)=>ue(`File "${e}" is too large. Maximum ${_(t.maxFileSize)} allowed.`,t,"maxFileSize")},{name:"totalSize",broken:({totalSize:e},t)=>e>t.maxTotalSize,sentence:({totalSize:e},t)=>ue(`Files add up to ${_(e)}. Maximum ${_(t.maxTotalSize)} allowed.`,t,"maxTotalSize")}],b={name:"filesCount",broken:(e,t)=>e>t.maxFilesCount,sentence:(e,t)=>ue(`Too many files (${e}). Maximum ${t.maxFilesCount} files allowed.`,t,"maxFilesCount")}});function de(e){let t=o=>({valid:!1,reason:`File name "${e}" ${o}.`});if(Ie(e))return t("contains unsafe characters");if(e.startsWith(" ")||e.endsWith(" "))return t("cannot start or end with spaces");if(e.endsWith("."))return t("cannot end with dots");let n=/^(CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])(\.|$)/i,r=e.split("/").pop()||e;return n.test(r)?t("uses a reserved system name"):e.includes("..")?t("contains a path traversal pattern"):{valid:!0}}function Lr(e,t){let n=[],r=[],o=[];if(e.length===0){let s={file:"(no files)",message:"At least one file must be provided."};return n.push(s),{files:[],validFiles:[],errors:n,warnings:[],canDeploy:!1}}for(let s of e)if(U(s.name))return n.push({file:s.name,message:"Unbuilt project detected. Deploy your build output (dist/, build/, out/), not the project folder."}),{files:e.map(u=>({...u,status:h.VALIDATION_FAILED,statusMessage:"Unbuilt project detected"})),validFiles:[],errors:n,warnings:[],canDeploy:!1};if(b.broken(e.length,t)){let s={file:`(${e.length} files)`,message:b.sentence(e.length,t)};return n.push(s),{files:e.map(u=>({...u,status:h.VALIDATION_FAILED,statusMessage:s.message})),validFiles:[],errors:n,warnings:[],canDeploy:!1}}let i=0;for(let s of e){let u=h.READY,c="Ready for upload";if(s.status===h.PROCESSING_ERROR)u=h.VALIDATION_FAILED,c=s.statusMessage||`File "${s.name}" could not be read.`,n.push({file:s.name,message:c});else if(s.size===0){u=h.EXCLUDED,c=`File "${s.name}" is empty, so it is excluded.`,r.push({file:s.name,message:c}),o.push({...s,status:u,statusMessage:c});continue}else if(s.size<0)u=h.VALIDATION_FAILED,c=`File "${s.name}" reports a negative size.`,n.push({file:s.name,message:c});else if(!s.name||s.name.trim().length===0)u=h.VALIDATION_FAILED,c="File name cannot be empty.",n.push({file:s.name||"(empty)",message:c});else if(s.name.includes("\0"))u=h.VALIDATION_FAILED,c=`File name "${s.name}" contains invalid characters (null byte).`,n.push({file:s.name,message:c});else{let y={path:s.name,size:s.size,totalSize:i+s.size},D=q(y,t);D?(u=h.VALIDATION_FAILED,c=D.sentence(y,t),n.push({file:D.name==="totalSize"?`(${e.length} files)`:s.name,message:c})):i=y.totalSize}o.push({...s,status:u,statusMessage:c})}n.length>0&&(o=o.map(s=>s.status===h.EXCLUDED?s:{...s,status:h.VALIDATION_FAILED,statusMessage:s.status===h.VALIDATION_FAILED?s.statusMessage:"Deployment failed due to validation errors in bundle"}));let l=n.length===0?o.filter(s=>s.status===h.READY):[],p=n.length===0;return{files:o,validFiles:l,errors:n,warnings:r,canDeploy:p}}function Xt(e){return e.filter(t=>t.status===h.READY)}function br(e){return Xt(e).length>0}var fe=A(()=>{"use strict";f();me();f()});import{isJunk as Yt}from"junk";function We(e,t){if(!e||e.length===0)return[];if(!t?.allowUnbuilt&&e.find(r=>r&&U(r)))throw a.business("Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder");return e.filter(n=>{if(!n)return!1;let r=n.replace(/\\/g,"/").split("/").filter(Boolean);if(r.length===0)return!0;let o=r[r.length-1];if(Yt(o))return!1;for(let l of r)if(l!==".well-known"&&(l.startsWith(".")||l.length>255))return!1;let i=r.slice(0,-1);for(let l of i)if(Wt.some(p=>l.toLowerCase()===p.toLowerCase()))return!1;return!0})}var Wt,he=A(()=>{"use strict";f();Wt=["__MACOSX",".Trashes",".fseventsd",".Spotlight-V100"]});function Je(e,t){if(e.includes("\0")||e.includes("/../")||e.startsWith("../")||e.endsWith("/.."))throw a.business(`Security error: Unsafe file path "${e}" for file: ${t}`)}function Qe(e,t){let n=q(e,t);if(n)throw a.business(n.sentence(e,t))}function Ze(e,t){if(b.broken(e,t))throw a.business(b.sentence(e,t))}var ye=A(()=>{"use strict";f();me()});async function et(e,t={},n){let r=!!(t.build||t.prerender),o=Ye(e.map(c=>c.path),{flatten:t.pathDetect!==!1}).map(c=>c.path),i=new Set(We(o,{allowUnbuilt:r})),l=e.map((c,y)=>({source:c,deployPath:o[y]})).filter(({deployPath:c})=>i.has(c));if(l.length===0)return[];let p=r?null:Jt(n),s=[],u=0;for(let{source:c,deployPath:y}of l){if(p&&Je(y,c.origin),c.size===0)continue;p&&(u+=c.size,Qe({path:y,size:c.size,totalSize:u},p));let D=await c.read(),{md5:X}=await B(D);s.push({path:y,content:D,size:c.size,md5:X})}return p&&Ze(s.length,p),s}function Jt(e){if(!e)throw a.config("Platform limits not provided. Deploy-mode validation requires the limits argument \u2014 pass `ship.getLimits()` result.");return e}var tt=A(()=>{"use strict";f();pe();he();z();ye()});var ot={};at(ot,{processFilesForNode:()=>rt});import*as T from"fs";import*as g from"path";function nt(e,t=new Set){let n=[],r=T.realpathSync(e);if(t.has(r))return n;t.add(r);for(let o of T.readdirSync(e)){let i=g.join(e,o),l=T.statSync(i);l.isDirectory()?n.push(...nt(i,t)):l.isFile()&&n.push({absPath:i,size:l.size})}return n}async function Qt(e){try{return T.readFileSync(e)}catch(t){let n=t instanceof Error?t.message:String(t);throw a.file(`Failed to read file "${e}": ${n}`,{filePath:e})}}function Zt(e){for(let t of e){let n=g.resolve(t);try{if(T.statSync(n).isDirectory()){let r=T.readdirSync(n).find(o=>ee.has(o));if(r)throw a.business(`"${r}" detected \u2014 deploy your build output (dist/, build/, out/), not the project folder`)}}catch(r){if(M(r))throw r}}}async function rt(e,t={},n){if(L()!=="node")throw a.business("processFilesForNode can only be called in Node.js environment.");Zt(e);let r=e.flatMap(p=>{let s=g.resolve(p);try{let u=T.statSync(s);return u.isDirectory()?nt(s):[{absPath:s,size:u.size}]}catch{throw a.file(`Path does not exist: ${p}`,{filePath:p})}}),o=new Map(r.map(p=>[p.absPath,p.size])),i=Xe(e.map(p=>g.resolve(p)).map(p=>{try{return T.statSync(p).isDirectory()?p:g.dirname(p)}catch{return g.dirname(p)}})),l=[...o].map(([p,s])=>({path:en(p,i),origin:p,size:s,read:()=>Qt(p)}));return et(l,t,n)}function en(e,t){if(t&&t.length>0){let n=g.relative(t,e);if(n&&typeof n=="string"&&!n.startsWith(".."))return n.replace(/\\/g,"/")}return g.basename(e)}var Ee=A(()=>{"use strict";f();tt();C();le()});f();f();f();var H=class{constructor(){this.handlers=new Map}on(t,n){this.handlers.has(t)||this.handlers.set(t,new Set),this.handlers.get(t)?.add(n)}off(t,n){let r=this.handlers.get(t);r&&(r.delete(n),r.size===0&&this.handlers.delete(t))}emit(t,...n){let r=this.handlers.get(t);if(!r)return;let o=Array.from(r);for(let i of o)try{i(...n)}catch(l){r.delete(i),t!=="error"&&setTimeout(()=>{let p=l instanceof Error?l:new Error(String(l));this.emit("error",p,String(t))},0)}}};var xt=3e4,Pt=2,_t=300,wt=2e3,Ct=new Set([500,502,503,504]);function vt(e,t){return new Promise((n,r)=>{if(t?.aborted){r(t.reason);return}let o=()=>{clearTimeout(l),t?.removeEventListener("abort",i)},i=()=>{o(),r(t?.reason)},l=setTimeout(()=>{o(),n()},e);t?.addEventListener("abort",i)})}var Me=3e5,Ft=3e5,Mt=Me+Ft,G=class extends H{constructor(n){super();this.globalHeaders={};this.apiUrl=n.apiUrl||oe,this.getAuthHeadersCallback=n.getAuthHeaders,this.session=n.session??!1,this.caller=n.caller,this.timeout=n.timeout??xt,this.maxRetries=Math.max(0,n.maxRetries??Pt),this.fetch=n.fetch??globalThis.fetch.bind(globalThis),this.deploy={endpoint:n.deployEndpoint||m.DEPLOYMENTS,timeout:n.timeout??Me,buildTimeout:n.timeout??Mt}}setGlobalHeaders(n){this.globalHeaders=n}async executeRequest(n,r,o,i=this.timeout){for(let l=0;;l++)try{return await this.attemptOnce(n,r,o,i)}catch(p){let s=a.fromFetchError(p,o);if(l>=this.maxRetries||!this.isRetryable(s,r))throw this.emit("error",s,n),s;this.emit("retry",s,n,l+1);let u=Math.min(wt,_t*2**l);try{await vt(Math.random()*u,r.signal)}catch(c){let y=a.fromFetchError(c,o);throw this.emit("error",y,n),y}}}isRetryable(n,r){if(r.signal?.aborted||n.isType(d.Maintenance)||n.isType(d.Cancelled)||!(n.isNetworkError()||n.status!==void 0&&Ct.has(n.status)))return!1;let i=(r.method??"GET").toUpperCase();return i==="GET"||i==="HEAD"?!0:i==="PUT"||i==="DELETE"?!1:this.hasIdempotencyKey(r.headers)}hasIdempotencyKey(n){if(!n)return!1;let r=N.HEADER.toLowerCase();return Object.keys(n).some(o=>o.toLowerCase()===r)}async attemptOnce(n,r,o,i=this.timeout){let l=()=>{};try{let p=await this.mergeHeaders(r.headers),s=this.createTimeoutSignal(r.signal,i);l=s.cleanup;let u={...r,headers:p,credentials:this.session&&!p.Authorization?"include":void 0,signal:s.signal};this.emit("request",n,u);let c=await this.fetch(n,u);if(l(),!c.ok)throw await a.fromHttpResponse(c,o);return this.emit("response",this.safeClone(c),n),{data:await this.parseResponse(this.safeClone(c)),status:c.status}}catch(p){throw l(),a.fromFetchError(p,o)}}async request(n,r,o,i){let{data:l}=await this.executeRequest(`${this.apiUrl}${n}`,r,o,i);return l}async requestWithStatus(n,r,o){return this.executeRequest(`${this.apiUrl}${n}`,r,o)}async mergeHeaders(n={}){return{...this.globalHeaders,...this.caller?{[O.HEADER]:this.caller}:{},...await this.getAuthHeadersCallback(),...n}}createTimeoutSignal(n,r=this.timeout){let o=new AbortController,i=setTimeout(()=>o.abort(new DOMException(`Timed out after ${r}ms`,"TimeoutError")),r),l=n?()=>o.abort(n.reason):void 0;return n&&l&&(n.addEventListener("abort",l),n.aborted&&o.abort(n.reason)),{signal:o.signal,cleanup:()=>{clearTimeout(i),n&&l&&n.removeEventListener("abort",l)}}}safeClone(n){try{return n.clone()}catch{return n}}async parseResponse(n){if(!(n.headers.get("Content-Length")==="0"||n.status===204))return n.json()}};f();f();async function Ue(e,t={}){let{labels:n,via:r,password:o,ttl:i,flags:l,captcha:p}=t,s=new FormData,u=[];for(let c of e){if(typeof c.content=="string"||c.content===null||c.content===void 0)throw a.file(`Unsupported file.content type: ${c.path}`,{filePath:c.path});if(!c.md5)throw a.file(`File missing md5 checksum: ${c.path}`,{filePath:c.path});s.append(E.FILES,new File([c.content],c.path,{type:"application/octet-stream"})),u.push(c.md5)}return s.append(E.CHECKSUMS,JSON.stringify(u)),n&&n.length>0&&s.append(E.LABELS,JSON.stringify(n)),r&&s.append(E.VIA,r),o&&s.append(E.PASSWORD,o),i!==void 0&&s.append(E.TTL,String(i)),l?.build&&s.append(E.BUILD,"true"),l?.prerender&&s.append(E.PRERENDER,"true"),l?.spa&&s.append(E.SPA,"true"),l?.buildCommand&&s.append(E.BUILD_COMMAND,l.buildCommand),l?.outputDir&&s.append(E.OUTPUT_DIR,l.outputDir),p&&s.append(E.CAPTCHA,p),s}f();z();async function Ht(){let e=JSON.stringify(Oe,null,2),t;typeof Buffer<"u"?t=Buffer.from(e,"utf-8"):t=new Blob([e],{type:"application/json"});let{md5:n}=await B(t);return{path:S,content:t,size:e.length,md5:n}}async function Gt(e,t,n){let r=e.find(p=>p.path===k.INDEX_FILE||p.path===`/${k.INDEX_FILE}`);if(!r||r.size>k.MAX_INDEX_BYTES)return!1;let o;if(typeof Buffer<"u"&&Buffer.isBuffer(r.content))o=r.content.toString("utf-8");else if(typeof Blob<"u"&&r.content instanceof Blob)o=await r.content.text();else if(typeof File<"u"&&r.content instanceof File)o=await r.content.text();else return!1;let i={files:e.map(p=>p.path),index:o};return(await t.request(m.SPA_CHECK,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(i),signal:n??null},"SPA check")).isSPA}async function ke(e,t,n){return n.spaDetect===!1||n.spa||n.build||n.prerender||e.some(r=>r.path===S)?e:await Gt(e,t,n.signal)?[...e,await Ht()]:e}f();f();function w(e){if(e==null)return;if(e.length===0)return e;if(e.length>I.MAX_COUNT)throw a.validation(`Maximum ${I.MAX_COUNT} labels allowed`);let t=e.map((r,o)=>{if(typeof r!="string")throw a.validation(`Label at index ${o} must be a string`);let i=r.trim().toLowerCase();if(i.length<I.MIN_LENGTH)throw a.validation(`Labels must be at least ${I.MIN_LENGTH} characters long`);if(i.length>I.MAX_LENGTH)throw a.validation(`Labels must be no more than ${I.MAX_LENGTH} characters long`);if(!Ce.test(i))throw a.validation(`Labels must start and end with alphanumeric characters, with optional separators (${I.SEPARATORS}) between segments`);return i}),n=[...new Set(t)];if(n.length!==t.length)throw a.validation("Duplicate labels are not allowed");return n}async function $e(e){let t=e.find(o=>o.path===S||o.path===`/${S}`);if(!t)return;let n=t.content,r=typeof n.text=="function"?await n.text():t.content.toString("utf8");xe(r)}var V={"Content-Type":"application/json"},Bt="sdk";function se(e){let t=new URLSearchParams;e?.limit!==void 0&&t.set("limit",String(e.limit)),e?.cursor!==void 0&&t.set("cursor",e.cursor);let n=t.toString();return n?`?${n}`:""}function He(e){let{getApi:t,processInput:n}=e;return{upload:async(r,o={})=>{if(!n)throw a.config("processInput function is not provided.");let i=t(),l=await n(r,o),p=await ke(l,i,o);if(!p.length)throw a.business("No files to deploy");for(let Y of p)if(!Y.md5)throw a.file(`MD5 checksum missing for file: ${Y.path}`,{filePath:Y.path});ie(o.password);let s=re(o.ttl),u=De(o.idempotencyKey),c=w(o.labels);await $e(p);let y=ve(o.buildCommand),D=Fe(o.outputDir),X=o.build||o.prerender||o.spa?{build:o.build,prerender:o.prerender,spa:o.spa,buildCommand:y,outputDir:D}:void 0,it=await Ue(p,{labels:c,via:o.via??Bt,password:o.password,ttl:s,flags:X,captcha:o.captcha});return i.request(i.deploy.endpoint,{method:"POST",body:it,...u?{headers:{[N.HEADER]:u}}:{},signal:o.signal||null},"Deploy",o.build||o.prerender?i.deploy.buildTimeout:i.deploy.timeout)},list:async r=>t().request(`${m.DEPLOYMENTS}${se(r)}`,{method:"GET"},"List deployments"),get:async r=>t().request(m.DEPLOYMENT(encodeURIComponent(r)),{method:"GET"},"Get deployment"),set:async(r,o)=>t().request(m.DEPLOYMENT(encodeURIComponent(r)),{method:"PATCH",headers:V,body:JSON.stringify({labels:w(o.labels)})},"Update deployment labels"),delete:async r=>t().request(m.DEPLOYMENT(encodeURIComponent(r)),{method:"DELETE"},"Delete deployment")}}function Ge(e){let{getApi:t}=e;return{set:async(n,r={})=>{let o=w(r.labels),i={};r.deployment&&(i.deployment=r.deployment),o!==void 0&&(i.labels=o);let{data:l,status:p}=await t().requestWithStatus(m.DOMAIN(encodeURIComponent(n)),{method:"PUT",headers:V,body:JSON.stringify(i)},"Set domain");return{...l,isCreate:p===201}},list:async n=>t().request(`${m.DOMAINS}${se(n)}`,{method:"GET"},"List domains"),get:async n=>t().request(m.DOMAIN(encodeURIComponent(n)),{method:"GET"},"Get domain"),delete:async n=>t().request(m.DOMAIN(encodeURIComponent(n)),{method:"DELETE"},"Delete domain"),verify:async n=>t().request(m.DOMAIN_VERIFY(encodeURIComponent(n)),{method:"POST"},"Verify domain"),validate:async n=>t().request(m.DOMAINS_VALIDATE,{method:"POST",headers:V,body:JSON.stringify({domain:n})},"Validate domain"),dns:async n=>t().request(m.DOMAIN_DNS(encodeURIComponent(n)),{method:"GET"},"Get domain DNS"),records:async n=>t().request(m.DOMAIN_RECORDS(encodeURIComponent(n)),{method:"GET"},"Get domain records"),share:async n=>t().request(m.DOMAIN_SHARE(encodeURIComponent(n)),{method:"GET"},"Get domain share")}}function Be(e){let{getApi:t}=e;return{get:async()=>t().request(m.ACCOUNT,{method:"GET"},"Get account")}}function ze(e){let{getApi:t}=e;return{create:async(n={})=>{let r=re(n.ttl),o=w(n.labels),i={};return r!==void 0&&(i.ttl=r),o!==void 0&&(i.labels=o),t().request(m.TOKENS,{method:"POST",headers:V,body:JSON.stringify(i)},"Create token")},list:async n=>t().request(`${m.TOKENS}${se(n)}`,{method:"GET"},"List tokens"),get:async n=>t().request(m.TOKEN(encodeURIComponent(n)),{method:"GET"},"Get token"),delete:async n=>t().request(m.TOKEN(encodeURIComponent(n)),{method:"DELETE"},"Delete token")}}var K=class{constructor(t={}){this.credential=null;if(t={...t,apiUrl:t.apiUrl||void 0,token:t.token||void 0,caller:t.caller||void 0},this.clientOptions=t,t.caller!==void 0&&Pe(t.caller),t.token&&t.session)throw a.config("Provide either `token` or `session`, not both.");typeof t.token=="string"?(ne(t.token),this.credential=t.token):t.token&&(this.credential=t.token),this.http=new G({...t,getAuthHeaders:()=>this.getAuthHeaders()});let n={getApi:()=>this.http};this.deployments=He({...n,processInput:async(r,o)=>this.processInput(r,o,await this.getLimits({signal:o.signal}))}),this.domains=Ge(n),this.account=Be(n),this.tokens=ze(n)}async ping(){return this.http.request(m.PING,{method:"GET"},"Ping")}async deploy(t,n){return this.deployments.upload(t,n)}async whoami(){return this.account.get()}async getLimits(t={}){return this.http.request(m.LIMITS,{method:"GET",signal:t.signal??null},"Get limits")}on(t,n){this.http.on(t,n)}off(t,n){this.http.off(t,n)}setHeaders(t){this.http.setGlobalHeaders(t)}clearHeaders(){this.http.setGlobalHeaders({})}setToken(t){if(this.clientOptions.session)throw a.config("Provide either `token` or `session`, not both.");if(typeof t=="string"){if(!t)throw a.business("Invalid token provided. Token must be a non-empty string.");ne(t),this.credential=t;return}if(typeof t!="function")throw a.business("Invalid token provided. Token must be a non-empty string or a provider function.");this.credential=t}async getAuthHeaders(){if(this.credential===null)return{};let t=typeof this.credential=="function"?await this.credential():this.credential;if(!t)throw a.authentication("Token provider returned no token.");if(typeof t!="string")throw a.authentication("Token provider returned a non-string value.");return{Authorization:`Bearer ${t}`}}};C();f();import{z as je}from"zod";import{z as Ve}from"zod";var Ke={apiUrl:Ve.string().url().optional(),token:Ve.string().min(1).optional()};C();var Vt=je.object(Ke).strict(),Kt={apiUrl:P.API_URL,token:P.TOKEN};function qe(){if(L()!=="node")return{};let e={apiUrl:process.env[P.API_URL]||void 0,token:process.env[P.TOKEN]||void 0};try{return Vt.parse(e)}catch(t){if(t instanceof je.ZodError){let n=t.issues[0],r=n.path[0],o=(r&&Kt[r])??"SHIP environment configuration";throw a.config(`Invalid ${o}: ${n.message}`)}throw a.config("Invalid environment configuration")}}f();f();pe();C();fe();he();z();ye();function Mr(e,t,n,r=!0){let o=e===1?t:n;return r?`${e} ${o}`:o}Ee();var ge=class extends K{constructor(t={}){if(L()!=="node")throw a.business("Node.js Ship class can only be used in Node.js environment.");let n=qe();super({...t,apiUrl:t.apiUrl||n.apiUrl,token:t.token||(t.session?void 0:n.token)})}async deploy(t,n){return super.deploy(t,n)}async processInput(t,n,r){let o=typeof t=="string"?[t]:t;if(!Array.isArray(o)||!o.every(l=>typeof l=="string"))throw a.business("Invalid input type for Node.js environment. Expected string or string[].");if(o.length===0)throw a.business("No files to deploy.");let{processFilesForNode:i}=await Promise.resolve().then(()=>(Ee(),ot));return i(o,n,r)}},tn=ge;export{En as ACCOUNT_HEADER,Ne as API_KEY,m as API_PATHS,hn as AUTH_BASE_PATH,cn as AccountPlan,pn as AccountRefusal,G as ApiHttp,J as AuthMethod,x as BUILD_SETTINGS,O as CALLER,oe as DEFAULT_API,S as DEPLOYMENT_CONFIG_FILENAME,E as DEPLOY_FIELDS,mn as DEPLOY_FILE_GRAMMAR,Le as DEPLOY_TOKEN,rn as DeploymentStatus,lt as DeploymentVia,on as DomainStatus,sn as DomainVerification,d as ErrorType,h as FILE_VALIDATION_STATUS,h as FileValidationStatus,N as IDEMPOTENCY_KEY_CONSTRAINTS,Wt as JUNK_DIRECTORIES,I as LABEL_CONSTRAINTS,Ce as LABEL_PATTERN,bn as MY_API_KEY_URL,be as OAUTH_TOKEN,Tn as OAuthScope,F as PASSWORD_CONSTRAINTS,On as PUBLIC_DEPLOYMENT_TTL_SECONDS,At as SECTIONS,an as SETUP_TROUBLESHOOTING_ANCHOR,P as SHIP_ENV,Ln as SHIP_VIA_ENV,yn as SIGN_IN_RETURN_PARAM,k as SPA_CHECK_CONSTRAINTS,Oe as SPA_DEFAULT_CONFIG,ge as Ship,a as ShipError,v as TTL_CONSTRAINTS,R as TokenKind,ee as UNBUILT_PROJECT_MARKERS,ht as UNSAFE_FILENAME_CHARS,Pn as USER_VISIBLE_EVENTS,fn as WEB_FILE_ACCEPT,ar as __setTestEnvironment,In as accountOfPath,br as allValidFilesReady,xe as assertShipJsonSyntax,Rn as billingReturnOf,B as calculateMD5,yt as classifyToken,Rt as consolePaths,Be as createAccountResource,He as createDeploymentResource,Ge as createDomainResource,ze as createTokenResource,tn as default,Mn as deserializeLabels,Dn as doors,Nn as errandOf,wn as extractSubdomain,We as filterJunk,Ot as formatDuration,_ as formatFileSize,xn as formatTimeRemaining,Cn as generateDeploymentUrl,vn as generateDomainUrl,L as getENV,Xt as getValidFiles,U as hasUnbuiltMarker,Ie as hasUnsafeChars,Re as isBlockedExtension,Nt as isClaimPath,_n as isCustomDomain,Sn as isDeployment,Lt as isInvitationPath,we as isPlatformDomain,M as isShipError,bt as isUpgradePath,ln as normalizeVia,Ye as optimizeDeployPaths,un as personName,dn as personShortName,Mr as pluralize,rt as processFilesForNode,gn as readBearerValue,Fn as serializeLabels,Et as validateApiKey,An as validateApiUrl,ve as validateBuildCommand,Pe as validateCaller,Ze as validateDeployCount,Qe as validateDeployFile,Je as validateDeployPath,gt as validateDeployToken,de as validateFileName,Lr as validateFiles,De as validateIdempotencyKey,Tt as validateOAuthToken,Fe as validateOutputDir,ie as validatePassword,ne as validateToken,re as validateTtl};
+var ct=Object.defineProperty;var S=(e,t)=>()=>(e&&(t=e(e=0)),t);var ut=(e,t)=>{for(var n in t)ct(e,n,{get:t[n],enumerable:!0})};function mn(e){if(!e||typeof e!="string")return;let t=e.trim().toLowerCase();return Object.values(pt).includes(t)?t:void 0}function Re(e){if(e==null)return;if(typeof e!="string")throw a.validation("Idempotency key must be a string.");let t=e.trim();if(!t)throw a.validation("Idempotency key must not be empty.");if(t.length>N.MAX_LENGTH)throw a.validation(`Idempotency key must be at most ${N.MAX_LENGTH} characters.`);return t}function dt(e){return e.members+e.invitations}function hn(e,t){let n=Math.max(0,dt(e)-t.members),r=Math.max(0,e.members-t.members),o={members:r,invitations:n-r,customDomains:e.customDomains-t.customDomains,platformDomains:e.platformDomains-t.platformDomains};return Object.fromEntries(Object.entries(o).filter(([,i])=>i>0))}function mt(e){return Ne(["members","customDomains","platformDomains"].filter(t=>(e[t]??0)>0).map(t=>Ie(t,e[t]??0)))}function yn(e){let t=mt(e),n=e.invitations??0;return Ne([...t?[`remove ${t}`]:[],...n>0?[`cancel ${Ie("invitations",n)}`]:[]])}function gn(e){return e.name?.trim()||e.email}function Tn(e){return e.name?.trim().split(" ")[0]||e.email}function Et(e){let t=e.code;return t==="ERR_INVALID_URL"?!1:typeof t=="string"?!0:e instanceof TypeError?!/\burl\b/i.test(e.message):!1}function M(e){return e!==null&&typeof e=="object"&&"name"in e&&e.name==="ShipError"&&"status"in e}function gt(e){let t=e.replace(/\\/g,"/").split("/").pop()??"",n=t.lastIndexOf(".");return n<=0||n===t.length-1?null:t.slice(n+1).toLowerCase()}function Le(e,t){let n=gt(e);return n===null?!1:Array.isArray(t)?t.includes(n):t.has(n)}function be(e){return St.test(e)}function U(e){return e.replace(/\\/g,"/").split("/").filter(Boolean).some(n=>te.has(n))}function Dt(e){return e.startsWith(Oe.PREFIX)?R.API_KEY:e.startsWith(xe.PREFIX)?R.DEPLOY_TOKEN:e.startsWith(Pe.PREFIX)?R.OAUTH:R.OPAQUE}function In(e){return e.slice(0,Q.length).toLowerCase()!==Q?null:e.slice(Q.length)||null}function we(e){let t=e.charCodeAt(0)===65279?e.slice(1):e,n;try{n=JSON.parse(t)}catch(r){throw a.config(`invalid JSON format in config: ${r.message}`,{filePath:D})}if(n===null||typeof n!="object"||Array.isArray(n))throw a.config(`${D} must contain a JSON object`,{filePath:D})}function ne(e,t,n){if(!e.startsWith(t.PREFIX))throw a.validation(`${n} must start with "${t.PREFIX}"`);if(e.length!==t.TOTAL_LENGTH)throw a.validation(`${n} must be ${t.TOTAL_LENGTH} characters total (${t.PREFIX} + ${t.HEX_LENGTH} hex chars)`);let r=e.slice(t.PREFIX.length);if(!new RegExp(`^[a-f0-9]{${t.HEX_LENGTH}}$`,"i").test(r))throw a.validation(`${n} must contain ${t.HEX_LENGTH} hexadecimal characters after "${t.PREFIX}" prefix`)}function At(e){ne(e,Oe,"API key")}function Rt(e){ne(e,xe,"Deploy token")}function It(e){ne(e,Pe,"OAuth access token")}function re(e){switch(Dt(e)){case R.API_KEY:At(e);return;case R.DEPLOY_TOKEN:Rt(e);return;case R.OAUTH:It(e);return;case R.OPAQUE:if(!e)throw a.validation("Token must be a non-empty string")}}function ve(e){if(!e||e.length>O.MAX_LENGTH||!O.PATTERN.test(e))throw a.validation(`Caller must be 1-${O.MAX_LENGTH} characters: letters, digits, dots, underscores, or hyphens`)}function Ln(e){try{let t=new URL(e);if(!["http:","https:"].includes(t.protocol))throw a.validation("API URL must use http:// or https:// protocol");if(t.pathname!=="/"&&t.pathname!=="")throw a.validation("API URL must not contain a path");if(t.search||t.hash)throw a.validation("API URL must not contain query parameters or fragments")}catch(t){throw M(t)?t:a.validation("API URL must be a valid URL")}}function bn(e){return/^[a-z]+-[a-z]+-[a-z0-9]{7}(\.[a-z0-9.-]+)?$/i.test(e)}function oe(e){if(e!=null){if(typeof e!="number"||!Number.isFinite(e))throw a.validation("TTL must be a number of seconds");if(!Number.isInteger(e))throw a.validation("TTL must be a whole number of seconds");if(e<C.MIN_SECONDS||e>C.MAX_SECONDS)throw a.validation(`TTL must be between ${C.MIN_SECONDS} and ${C.MAX_SECONDS} seconds`);return e}}function Ot(e){let t=e?`/${e}`:"",n=r=>`${t}${r}`;return{dashboard:()=>t||"/",newSite:()=>n("/new"),deployments:Object.assign(()=>n("/deployments"),{upload:()=>n("/deployments/upload")}),domains:Object.assign(()=>n("/domains"),{connect:r=>n(`/domains/${r}/connect`),deployment:r=>n(`/domains/${r}/deployment`)}),settings:r=>n(r?`/settings#${r}`:"/settings"),claim:r=>n(`/claim/${r}`),settingsAfterBilling:()=>n(`/settings?${De("portal")}`),upgrade:r=>n(r?`/upgrade/${r}`:"/upgrade"),success:()=>n("/success"),successAfterCheckout:()=>n(`/success?${De("checkout")}`),apiKey:()=>n("/api-key")}}function xn(e){let t=new URLSearchParams(e);for(let[n,[r,o]]of Object.entries(Ce))if(t.get(r)===o)return n;return null}function $(e){let t=e.split(/[?#]/)[0].toLowerCase(),[n="",r=""]=t.split("/").filter(Boolean);return xt(n)?{kind:"door",door:n}:n===bt?{kind:"admin"}:n===""||Ae(n)?{kind:"account",account:null,section:n===""?null:n}:{kind:"account",account:n,section:Ae(r)?r:null}}function Pn(e){let t=$(e);return t.kind==="account"?t.account:null}function Pt(e){let t=$(e);return t.kind==="door"?t.door:null}function _n(e){return _t(e)?"claim":Pt(e)==="invitation"?"invite":wt(e)?"upgrade":null}function vt(e){let t=Math.round(e/60);if(!(t>=1))return"less than a minute";if(t<120)return ee(t,"minute");let n=Math.round(e/3600);return n<48?ee(n,"hour"):ee(Math.round(e/86400),"day")}function Fn(e,t=Date.now()/1e3){let n=e-t;return n>0?vt(n):null}function ee(e,t){return`${e} ${t}${e===1?"":"s"}`}function _(e,t=1){if(e===0)return"0 Bytes";let n=1024,r=["Bytes","KB","MB","GB"],o=Math.floor(Math.log(e)/Math.log(n));return`${Number.parseFloat((e/n**o).toFixed(t))} ${r[o]}`}function Fe(e,t){return e.endsWith(`.${t}`)}function Un(e,t){return!Fe(e,t)}function kn(e,t){return Fe(e,t)?e.slice(0,-(t.length+1)):null}function $n(e){return`https://${e}`}function Hn(e){return`https://${e}`}function Gn(e){return!e||e.length===0?null:JSON.stringify(e)}function Bn(e){if(!e)return[];try{let t=JSON.parse(e);return Array.isArray(t)?t:[]}catch{return[]}}function Ue(e){if(e==null||e==="")return;if(typeof e!="string")throw a.validation("Build command must be a string");let t=e.trim();if(t.length===0||t.length>x.COMMAND_MAX_LENGTH)throw a.validation(`Build command must be between 1 and ${x.COMMAND_MAX_LENGTH} characters`);if(/[\x00-\x1f\x7f]/.test(t))throw a.validation("Build command must be a single line");return t}function ke(e){if(e==null||e==="")return;if(typeof e!="string")throw a.validation("Output folder must be a string");let t=e.trim().replace(/\/+$/,"");if(t.length===0||t.length>x.OUTPUT_DIR_MAX_LENGTH)throw a.validation(`Output folder must be between 1 and ${x.OUTPUT_DIR_MAX_LENGTH} characters`);if(!x.OUTPUT_DIR_PATTERN.test(t)||t.split("/").some(n=>n===".."||n==="."))throw a.validation("Output folder must be a relative path inside the project, like dist or dist/site");return t}function se(e){if(e==null)return;if(typeof e!="string")throw a.validation("Password must be a string");let t=e.trim();if(t.length<F.MIN_LENGTH||t.length>F.MAX_LENGTH)throw a.validation(`Password must be between ${F.MIN_LENGTH} and ${F.MAX_LENGTH} characters`);return t}var cn,pt,un,pn,dn,N,fn,Se,Ie,Ne,En,m,E,Sn,d,ft,W,ht,yt,a,Tt,Dn,St,te,An,J,Oe,xe,Pe,O,Rn,R,Q,Nn,D,_e,k,C,Nt,Lt,bt,Ce,De,Z,On,xt,Ae,_t,wt,ie,P,wn,vn,Cn,Mn,h,I,Me,x,F,f=S(()=>{"use strict";cn={PENDING:"pending",SUCCESS:"success",FAILED:"failed",DELETING:"deleting"},pt={WEB:"web",SDK:"sdk",CLI:"cli",MCP:"mcp",GIT:"git",N8N:"n8n",GPT:"gpt",VSC:"vsc",CLD:"cld",CRS:"crs",GMN:"gmn",API:"api"},un={LIVE:"live",UNLINKED:"unlinked",UNVERIFIED:"unverified",PAUSED:"paused"},pn={PENDING:"pending",PARTIAL:"partial",VERIFIED:"verified"},dn="troubleshooting",N={HEADER:"Idempotency-Key",MAX_LENGTH:256,WINDOW_SECONDS:1440*60};fn={FREE:"free",PRO:"pro",TEAM:"team",SCALE:"scale",SPONSORED:"sponsored"};Se={deployments:{one:"deployment",many:"deployments"},platformDomains:{one:"ShipStatic domain",many:"ShipStatic domains"},customDomains:{one:"custom domain",many:"custom domains"},members:{one:"member",many:"members"},invitations:{one:"invitation",many:"invitations"}};Ie=(e,t)=>`${t} ${t===1?Se[e].one:Se[e].many}`,Ne=e=>e.length>1?`${e.slice(0,-1).join(", ")} and ${e[e.length-1]}`:e[0]??"",En={PAUSED:"paused",UNKNOWN:"unknown"};m={DEPLOYMENTS:"/deployments",DEPLOYMENT:e=>`/deployments/${e}`,DEPLOYMENT_CONFIG:e=>`/deployments/${e}/config`,DOMAINS:"/domains",DOMAIN:e=>`/domains/${e}`,DOMAIN_VERIFY:e=>`/domains/${e}/verify`,DOMAIN_DNS:e=>`/domains/${e}/dns`,DOMAIN_RECORDS:e=>`/domains/${e}/records`,DOMAIN_SHARE:e=>`/domains/${e}/share`,DOMAIN_PROPAGATION:e=>`/domains/${e}/propagation`,DOMAINS_VALIDATE:"/domains/validate",TOKENS:"/tokens",TOKEN:e=>`/tokens/${e}`,ACCOUNT:"/account",ACCOUNT_KEY:"/account/key",ACCOUNT_CLAIM:"/account/claim",ACTIVITIES:"/activities",LABELS:"/labels",LIMITS:"/limits",PLANS:"/plans",PING:"/ping",SETUP:"/setup",SPA_CHECK:"/spa-check",UPLOAD:"/upload"},E={FILES:"files[]",CHECKSUMS:"checksums",LABELS:"labels",VIA:"via",PASSWORD:"password",TTL:"ttl",BUILD:"build",PRERENDER:"prerender",SPA:"spa",BUILD_COMMAND:"buildCommand",OUTPUT_DIR:"outputDir",CAPTCHA:"captcha"},Sn={PATH:"path",CONTENT:"content",ENCODING:"encoding",DEFAULT_ENCODING:"utf-8",ENCODINGS:["utf-8","base64"]},d={Validation:"validation_failed",NotFound:"not_found",Forbidden:"forbidden",RateLimit:"rate_limit_exceeded",Authentication:"authentication_failed",Business:"business_logic_error",Api:"internal_server_error",Maintenance:"maintenance",Build:"build_failed",Network:"network_error",Timeout:"timeout_error",Cancelled:"operation_cancelled",File:"file_error",Config:"config_error"},ft=new Set([d.Network,d.Timeout,d.Cancelled,d.File,d.Config]),W={client:new Set([d.Build,d.Business,d.Cancelled,d.Config,d.File,d.Forbidden,d.NotFound,d.RateLimit,d.Validation]),network:new Set([d.Network,d.Timeout]),auth:new Set([d.Authentication])},ht=new Set(Object.values(d).filter(e=>!ft.has(e))),yt=200;a=class e extends Error{type;status;details;constructor(t,n,r,o){super(n),this.type=t,this.status=r,this.details=o,this.name="ShipError"}toResponse(){let t=this.details,n=this.type===d.Authentication&&t?.internal?void 0:this.details;return{error:this.type,message:this.message,status:this.status,details:n}}static async fromHttpResponse(t,n){let r,o,i;try{if(t.headers.get("content-type")?.includes("application/json")){let p=await t.json();if(p&&typeof p=="object"){let c=p;typeof c.message=="string"?r=c.message:typeof c.error=="string"&&(r=c.error),o=c.details,typeof c.error=="string"&&ht.has(c.error)&&(i=c.error)}}else{let p=(await t.text()).trim();p&&!p.startsWith("<")&&p.length<=yt&&(r=p)}}catch{}let l=t.headers.get("retry-after");if(l!==null){let s=l.trim(),p=/^\d+$/.test(s)?Number(s):Math.ceil((Date.parse(s)-Date.now())/1e3);if(Number.isFinite(p)&&p>=0){let c=o&&typeof o=="object"?o:{};c.retryAfter===void 0&&(o={...c,retryAfter:p})}}r=r||`${n||"Request"} failed with status ${t.status}`;let u=i??(t.status===401?d.Authentication:t.status===403?d.Forbidden:t.status===429?d.RateLimit:d.Api);return new e(u,r,t.status,o)}static fromFetchError(t,n){if(M(t))return t;let r=n||"Request",o=t?.name;return o==="AbortError"?e.cancelled(`${r} was cancelled`):o==="TimeoutError"?e.timeout(`${r} timed out`,{cause:t}):t instanceof Error?Et(t)?e.network(`${r} failed: ${t.message}`,{cause:t}):new e(d.Api,`${r} failed: ${t.message}`):new e(d.Api,`${r} failed: Unknown error`)}static validation(t,n){return new e(d.Validation,t,400,n)}static notFound(t,n){let r=n?`${t} ${n} not found`:`${t} not found`;return new e(d.NotFound,r,404)}static forbidden(t,n){return new e(d.Forbidden,t,403,n)}static rateLimit(t="Too many requests",n){return new e(d.RateLimit,t,429,n)}static authentication(t="Authentication required",n){return new e(d.Authentication,t,401,n)}static business(t,n=400,r){return new e(d.Business,t,n,r)}static network(t,n){return new e(d.Network,t,void 0,n)}static timeout(t,n){return new e(d.Timeout,t,void 0,n)}static cancelled(t,n){return new e(d.Cancelled,t,void 0,n)}static file(t,n){return new e(d.File,t,void 0,n)}static config(t,n){return new e(d.Config,t,void 0,n)}static api(t,n=500,r){return new e(d.Api,t,n,r)}static maintenance(t,n){return new e(d.Maintenance,t,503,n)}static build(t,n){return new e(d.Build,t,422,n)}isClientError(){return W.client.has(this.type)?!0:this.status!==void 0&&this.status>=400&&this.status<500}isNetworkError(){return W.network.has(this.type)}isAuthError(){return W.auth.has(this.type)}isType(t){return this.type===t}};Tt=["html","htm","xhtml","xml","txt","md","markdown","pdf","csv","json","jsonc","webmanifest","map","toml","yaml","yml","rss","atom","css","scss","sass","less","js","mjs","cjs","jsx","ts","tsx","wasm","vue","svelte","png","jpg","jpeg","gif","webp","avif","svg","ico","bmp","tif","tiff","heic","heif","woff","woff2","ttf","otf","eot","mp3","wav","ogg","oga","opus","m4a","aac","flac","weba","mp4","webm","ogv","mov","m4v","avi","glb","gltf","usdz","vtt","srt","zip"],Dn=Tt.map(e=>`.${e}`).join(","),St=/[\x00-\x1f\x7f#?%\\<>"]/;te=new Set(["node_modules","package.json"]);An="/auth",J={SESSION:"session",API_KEY:"apiKey",TOKEN:"token",AGENT:"agent",OAUTH:"oauth",SYSTEM:"system"},Oe={PREFIX:"ship-",HEX_LENGTH:32,TOTAL_LENGTH:37,HINT_LENGTH:4},xe={PREFIX:"deploy-",HEX_LENGTH:32,TOTAL_LENGTH:39},Pe={PREFIX:"oauth-",HEX_LENGTH:32,TOTAL_LENGTH:38},O={HEADER:"X-Caller",MAX_LENGTH:128,PATTERN:/^[a-zA-Z0-9._-]+$/},Rn="X-Account",R={API_KEY:J.API_KEY,DEPLOY_TOKEN:J.TOKEN,OAUTH:J.OAUTH,OPAQUE:"opaque"};Q="bearer ";Nn={ACCOUNT_READ:"account:read",DEPLOYMENTS_READ:"deployments:read",DEPLOYMENTS_WRITE:"deployments:write",DOMAINS_READ:"domains:read",DOMAINS_WRITE:"domains:write"},D="ship.json",_e={rewrites:[{source:"/(.*)",destination:"/index.html"}]},k={INDEX_FILE:"index.html",MAX_INDEX_BYTES:100*1024};C={MIN_SECONDS:1,MAX_SECONDS:365*24*60*60};Nt={new:{owner:!1},deployments:{owner:!1},domains:{owner:!1},settings:{owner:!1},claim:{owner:!1},upgrade:{owner:!0},success:{owner:!0},"api-key":{owner:!0}},Lt=["login","register","logout","invitation","consent"],bt="admin",Ce={checkout:["upgrading","true"],portal:["billing","returned"]},De=e=>Ce[e].join("="),Z=(e,t)=>t?`${e}?next=${encodeURIComponent(t)}`:e;On={login:({token:e,next:t}={})=>Z(e?`/login/${e}`:"/login",t),register:({next:e}={})=>Z("/register",e),logout:({next:e}={})=>Z("/logout",e),invitation:e=>`/invitation/${e}`,consent:()=>"/consent"};xt=e=>Lt.includes(e),Ae=e=>Object.hasOwn(Nt,e);_t=e=>{let t=$(e);return t.kind==="account"&&t.section==="claim"},wt=e=>{let t=$(e);return t.kind==="account"&&t.section==="upgrade"};ie="https://api.shipstatic.com",P={TOKEN:"SHIP_TOKEN",API_URL:"SHIP_API_URL"},wn="SHIP_VIA",vn=`https://my.shipstatic.com${Ot().apiKey()}`,Cn=4320*60;Mn=["account.create","account.update","account.delete","account.key.generate","account.plan.transition","deployment.create","deployment.update","deployment.delete","deployment.claim","domain.create","domain.update","domain.delete","domain.verify","token.create","token.consume","token.delete","member.join","member.leave","consent.grant"],h={PENDING:"pending",PROCESSING_ERROR:"processing_error",EXCLUDED:"excluded",VALIDATION_FAILED:"validation_failed",READY:"ready"};I={MIN_LENGTH:3,MAX_LENGTH:25,MAX_COUNT:10,SEPARATORS:"._-"},Me=/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;x={COMMAND_MAX_LENGTH:200,OUTPUT_DIR_MAX_LENGTH:100,OUTPUT_DIR_PATTERN:/^[A-Za-z0-9._-]+(\/[A-Za-z0-9._-]+)*$/};F={MIN_LENGTH:6,MAX_LENGTH:128}});async function Bt(e){let t=(await import("spark-md5")).default,n=new t.ArrayBuffer,r=2097152;for(let o=0;o<e.size;o+=r){let i=Math.min(o+r,e.size);n.append(await e.slice(o,i).arrayBuffer())}return{md5:n.end()}}async function zt(e){let{createHash:t}=await import("crypto"),n=t("md5");return n.update(e),{md5:n.digest("hex")}}async function Vt(e){let{createHash:t}=await import("crypto"),{createReadStream:n}=await import("fs");return new Promise((r,o)=>{let i=t("md5"),l=n(e);l.on("error",u=>o(a.file(`Failed to read file for MD5: ${u.message}`,{filePath:e}))),l.on("data",u=>i.update(u)),l.on("end",()=>r({md5:i.digest("hex")}))})}async function B(e){if(e instanceof Blob)return Bt(e);if(typeof Buffer<"u"&&Buffer.isBuffer(e))return zt(e);if(typeof e=="string")return Vt(e);throw a.business("Invalid input for MD5 calculation")}var z=S(()=>{"use strict";f()});function mr(e){le=e}function Xt(){return typeof process<"u"&&process.versions&&process.versions.node?"node":typeof window<"u"||typeof self<"u"?"browser":"unknown"}function L(){return le||Xt()}var le,v=S(()=>{"use strict";le=null});function Je(e){if(!e||e.length===0)return"";let t=e.filter(i=>i&&typeof i=="string").map(i=>i.replace(/\\/g,"/"));if(t.length===0)return"";if(t.length===1)return t[0];let n=t.map(i=>i.split("/").filter(Boolean)),r=[],o=Math.min(...n.map(i=>i.length));for(let i=0;i<o;i++){let l=n[0][i];if(n.every(u=>u[i]===l))r.push(l);else break}return r.join("/")}function j(e){return e.replace(/\\/g,"/").replace(/\/+/g,"/").replace(/^\/+/,"")}var ce=S(()=>{"use strict"});function Qe(e,t={}){if(t.flatten===!1)return e.map(r=>({path:j(r),name:ue(r)}));let n=Jt(e);return e.map(r=>{let o=j(r);if(n){let i=n.endsWith("/")?n:`${n}/`;o.startsWith(i)&&(o=o.substring(i.length))}return o||(o=ue(r)),{path:o,name:ue(r)}})}function Jt(e){if(!e.length)return"";let n=e.map(i=>j(i)).map(i=>i.split("/")),r=[],o=Math.min(...n.map(i=>i.length));for(let i=0;i<o-1;i++){let l=n[0][i];if(n.every(u=>u[i]===l))r.push(l);else break}return r.join("/")}function ue(e){return e.split(/[/\\]/).pop()||e}var pe=S(()=>{"use strict";ce()});function de(e,t,n){let r=t.suggestions?.[n];return r?`${e} ${r}`:e}function q(e,t){return Qt.find(n=>n.broken(e,t))}var Qt,b,fe=S(()=>{"use strict";f();he();Qt=[{name:"name",broken:({path:e})=>!me(e).valid,sentence:({path:e})=>me(e).reason??`File name "${e}" is invalid.`},{name:"extension",broken:({path:e},t)=>Le(e,t.blockedExtensions??[]),sentence:({path:e})=>`File "${e}" has an extension that is not allowed.`},{name:"fileSize",broken:({size:e},t)=>e>t.maxFileSize,sentence:({path:e},t)=>de(`File "${e}" is too large. Maximum ${_(t.maxFileSize)} allowed.`,t,"maxFileSize")},{name:"totalSize",broken:({totalSize:e},t)=>e>t.maxTotalSize,sentence:({totalSize:e},t)=>de(`Files add up to ${_(e)}. Maximum ${_(t.maxTotalSize)} allowed.`,t,"maxTotalSize")}],b={name:"filesCount",broken:(e,t)=>e>t.maxFilesCount,sentence:(e,t)=>de(`Too many files (${e}). Maximum ${t.maxFilesCount} files allowed.`,t,"maxFilesCount")}});function me(e){let t=o=>({valid:!1,reason:`File name "${e}" ${o}.`});if(be(e))return t("contains unsafe characters");if(e.startsWith(" ")||e.endsWith(" "))return t("cannot start or end with spaces");if(e.endsWith("."))return t("cannot end with dots");let n=/^(CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])(\.|$)/i,r=e.split("/").pop()||e;return n.test(r)?t("uses a reserved system name"):e.includes("..")?t("contains a path traversal pattern"):{valid:!0}}function wr(e,t){let n=[],r=[],o=[];if(e.length===0){let s={file:"(no files)",message:"At least one file must be provided."};return n.push(s),{files:[],validFiles:[],errors:n,warnings:[],canDeploy:!1}}for(let s of e)if(U(s.name))return n.push({file:s.name,message:"Unbuilt project detected. Deploy your build output (dist/, build/, out/), not the project folder."}),{files:e.map(p=>({...p,status:h.VALIDATION_FAILED,statusMessage:"Unbuilt project detected"})),validFiles:[],errors:n,warnings:[],canDeploy:!1};if(b.broken(e.length,t)){let s={file:`(${e.length} files)`,message:b.sentence(e.length,t)};return n.push(s),{files:e.map(p=>({...p,status:h.VALIDATION_FAILED,statusMessage:s.message})),validFiles:[],errors:n,warnings:[],canDeploy:!1}}let i=0;for(let s of e){let p=h.READY,c="Ready for upload";if(s.status===h.PROCESSING_ERROR)p=h.VALIDATION_FAILED,c=s.statusMessage||`File "${s.name}" could not be read.`,n.push({file:s.name,message:c});else if(s.size===0){p=h.EXCLUDED,c=`File "${s.name}" is empty, so it is excluded.`,r.push({file:s.name,message:c}),o.push({...s,status:p,statusMessage:c});continue}else if(s.size<0)p=h.VALIDATION_FAILED,c=`File "${s.name}" reports a negative size.`,n.push({file:s.name,message:c});else if(!s.name||s.name.trim().length===0)p=h.VALIDATION_FAILED,c="File name cannot be empty.",n.push({file:s.name||"(empty)",message:c});else if(s.name.includes("\0"))p=h.VALIDATION_FAILED,c=`File name "${s.name}" contains invalid characters (null byte).`,n.push({file:s.name,message:c});else{let y={path:s.name,size:s.size,totalSize:i+s.size},A=q(y,t);A?(p=h.VALIDATION_FAILED,c=A.sentence(y,t),n.push({file:A.name==="totalSize"?`(${e.length} files)`:s.name,message:c})):i=y.totalSize}o.push({...s,status:p,statusMessage:c})}n.length>0&&(o=o.map(s=>s.status===h.EXCLUDED?s:{...s,status:h.VALIDATION_FAILED,statusMessage:s.status===h.VALIDATION_FAILED?s.statusMessage:"Deployment failed due to validation errors in bundle"}));let l=n.length===0?o.filter(s=>s.status===h.READY):[],u=n.length===0;return{files:o,validFiles:l,errors:n,warnings:r,canDeploy:u}}function Zt(e){return e.filter(t=>t.status===h.READY)}function vr(e){return Zt(e).length>0}var he=S(()=>{"use strict";f();fe();f()});import{isJunk as en}from"junk";function Ze(e,t){if(!e||e.length===0)return[];if(!t?.allowUnbuilt&&e.find(r=>r&&U(r)))throw a.business("Unbuilt project detected \u2014 deploy your build output (dist/, build/, out/), not the project folder");return e.filter(n=>{if(!n)return!1;let r=n.replace(/\\/g,"/").split("/").filter(Boolean);if(r.length===0)return!0;let o=r[r.length-1];if(en(o))return!1;for(let l of r)if(l!==".well-known"&&(l.startsWith(".")||l.length>255))return!1;let i=r.slice(0,-1);for(let l of i)if(tn.some(u=>l.toLowerCase()===u.toLowerCase()))return!1;return!0})}var tn,ye=S(()=>{"use strict";f();tn=["__MACOSX",".Trashes",".fseventsd",".Spotlight-V100"]});function et(e,t){if(e.includes("\0")||e.includes("/../")||e.startsWith("../")||e.endsWith("/.."))throw a.business(`Security error: Unsafe file path "${e}" for file: ${t}`)}function tt(e,t){let n=q(e,t);if(n)throw a.business(n.sentence(e,t))}function nt(e,t){if(b.broken(e,t))throw a.business(b.sentence(e,t))}var Ee=S(()=>{"use strict";f();fe()});async function rt(e,t={},n){let r=!!(t.build||t.prerender),o=Qe(e.map(c=>c.path),{flatten:t.pathDetect!==!1}).map(c=>c.path),i=new Set(Ze(o,{allowUnbuilt:r})),l=e.map((c,y)=>({source:c,deployPath:o[y]})).filter(({deployPath:c})=>i.has(c));if(l.length===0)return[];let u=r?null:nn(n),s=[],p=0;for(let{source:c,deployPath:y}of l){if(u&&et(y,c.origin),c.size===0)continue;u&&(p+=c.size,tt({path:y,size:c.size,totalSize:p},u));let A=await c.read(),{md5:X}=await B(A);s.push({path:y,content:A,size:c.size,md5:X})}return u&&nt(s.length,u),s}function nn(e){if(!e)throw a.config("Platform limits not provided. Deploy-mode validation requires the limits argument \u2014 pass `ship.getLimits()` result.");return e}var ot=S(()=>{"use strict";f();pe();ye();z();Ee()});var at={};ut(at,{processFilesForNode:()=>st});import*as T from"fs";import*as g from"path";function it(e,t=new Set){let n=[],r=T.realpathSync(e);if(t.has(r))return n;t.add(r);for(let o of T.readdirSync(e)){let i=g.join(e,o),l=T.statSync(i);l.isDirectory()?n.push(...it(i,t)):l.isFile()&&n.push({absPath:i,size:l.size})}return n}async function rn(e){try{return T.readFileSync(e)}catch(t){let n=t instanceof Error?t.message:String(t);throw a.file(`Failed to read file "${e}": ${n}`,{filePath:e})}}function on(e){for(let t of e){let n=g.resolve(t);try{if(T.statSync(n).isDirectory()){let r=T.readdirSync(n).find(o=>te.has(o));if(r)throw a.business(`"${r}" detected \u2014 deploy your build output (dist/, build/, out/), not the project folder`)}}catch(r){if(M(r))throw r}}}async function st(e,t={},n){if(L()!=="node")throw a.business("processFilesForNode can only be called in Node.js environment.");on(e);let r=e.flatMap(u=>{let s=g.resolve(u);try{let p=T.statSync(s);return p.isDirectory()?it(s):[{absPath:s,size:p.size}]}catch{throw a.file(`Path does not exist: ${u}`,{filePath:u})}}),o=new Map(r.map(u=>[u.absPath,u.size])),i=Je(e.map(u=>g.resolve(u)).map(u=>{try{return T.statSync(u).isDirectory()?u:g.dirname(u)}catch{return g.dirname(u)}})),l=[...o].map(([u,s])=>({path:sn(u,i),origin:u,size:s,read:()=>rn(u)}));return rt(l,t,n)}function sn(e,t){if(t&&t.length>0){let n=g.relative(t,e);if(n&&typeof n=="string"&&!n.startsWith(".."))return n.replace(/\\/g,"/")}return g.basename(e)}var ge=S(()=>{"use strict";f();ot();v();ce()});f();f();f();var H=class{constructor(){this.handlers=new Map}on(t,n){this.handlers.has(t)||this.handlers.set(t,new Set),this.handlers.get(t)?.add(n)}off(t,n){let r=this.handlers.get(t);r&&(r.delete(n),r.size===0&&this.handlers.delete(t))}emit(t,...n){let r=this.handlers.get(t);if(!r)return;let o=Array.from(r);for(let i of o)try{i(...n)}catch(l){r.delete(i),t!=="error"&&setTimeout(()=>{let u=l instanceof Error?l:new Error(String(l));this.emit("error",u,String(t))},0)}}};var Ct=3e4,Ft=2,Mt=300,Ut=2e3,kt=new Set([500,502,503,504]);function $t(e,t){return new Promise((n,r)=>{if(t?.aborted){r(t.reason);return}let o=()=>{clearTimeout(l),t?.removeEventListener("abort",i)},i=()=>{o(),r(t?.reason)},l=setTimeout(()=>{o(),n()},e);t?.addEventListener("abort",i)})}var $e=3e5,Ht=3e5,Gt=$e+Ht,G=class extends H{constructor(n){super();this.globalHeaders={};this.apiUrl=n.apiUrl||ie,this.getAuthHeadersCallback=n.getAuthHeaders,this.session=n.session??!1,this.caller=n.caller,this.timeout=n.timeout??Ct,this.maxRetries=Math.max(0,n.maxRetries??Ft),this.fetch=n.fetch??globalThis.fetch.bind(globalThis),this.deploy={endpoint:n.deployEndpoint||m.DEPLOYMENTS,timeout:n.timeout??$e,buildTimeout:n.timeout??Gt}}setGlobalHeaders(n){this.globalHeaders=n}async executeRequest(n,r,o,i=this.timeout){for(let l=0;;l++)try{return await this.attemptOnce(n,r,o,i)}catch(u){let s=a.fromFetchError(u,o);if(l>=this.maxRetries||!this.isRetryable(s,r))throw this.emit("error",s,n),s;this.emit("retry",s,n,l+1);let p=Math.min(Ut,Mt*2**l);try{await $t(Math.random()*p,r.signal)}catch(c){let y=a.fromFetchError(c,o);throw this.emit("error",y,n),y}}}isRetryable(n,r){if(r.signal?.aborted||n.isType(d.Maintenance)||n.isType(d.Cancelled)||!(n.isNetworkError()||n.status!==void 0&&kt.has(n.status)))return!1;let i=(r.method??"GET").toUpperCase();return i==="GET"||i==="HEAD"?!0:i==="PUT"||i==="DELETE"?!1:this.hasIdempotencyKey(r.headers)}hasIdempotencyKey(n){if(!n)return!1;let r=N.HEADER.toLowerCase();return Object.keys(n).some(o=>o.toLowerCase()===r)}async attemptOnce(n,r,o,i=this.timeout){let l=()=>{};try{let u=await this.mergeHeaders(r.headers),s=this.createTimeoutSignal(r.signal,i);l=s.cleanup;let p={...r,headers:u,credentials:this.session&&!u.Authorization?"include":void 0,signal:s.signal};this.emit("request",n,p);let c=await this.fetch(n,p);if(l(),!c.ok)throw await a.fromHttpResponse(c,o);return this.emit("response",this.safeClone(c),n),{data:await this.parseResponse(this.safeClone(c)),status:c.status}}catch(u){throw l(),a.fromFetchError(u,o)}}async request(n,r,o,i){let{data:l}=await this.executeRequest(`${this.apiUrl}${n}`,r,o,i);return l}async requestWithStatus(n,r,o){return this.executeRequest(`${this.apiUrl}${n}`,r,o)}async mergeHeaders(n={}){return{...this.globalHeaders,...this.caller?{[O.HEADER]:this.caller}:{},...await this.getAuthHeadersCallback(),...n}}createTimeoutSignal(n,r=this.timeout){let o=new AbortController,i=setTimeout(()=>o.abort(new DOMException(`Timed out after ${r}ms`,"TimeoutError")),r),l=n?()=>o.abort(n.reason):void 0;return n&&l&&(n.addEventListener("abort",l),n.aborted&&o.abort(n.reason)),{signal:o.signal,cleanup:()=>{clearTimeout(i),n&&l&&n.removeEventListener("abort",l)}}}safeClone(n){try{return n.clone()}catch{return n}}async parseResponse(n){if(!(n.headers.get("Content-Length")==="0"||n.status===204))return n.json()}};f();f();async function He(e,t={}){let{labels:n,via:r,password:o,ttl:i,flags:l,captcha:u}=t,s=new FormData,p=[];for(let c of e){if(typeof c.content=="string"||c.content===null||c.content===void 0)throw a.file(`Unsupported file.content type: ${c.path}`,{filePath:c.path});if(!c.md5)throw a.file(`File missing md5 checksum: ${c.path}`,{filePath:c.path});s.append(E.FILES,new File([c.content],c.path,{type:"application/octet-stream"})),p.push(c.md5)}return s.append(E.CHECKSUMS,JSON.stringify(p)),n&&n.length>0&&s.append(E.LABELS,JSON.stringify(n)),r&&s.append(E.VIA,r),o&&s.append(E.PASSWORD,o),i!==void 0&&s.append(E.TTL,String(i)),l?.build&&s.append(E.BUILD,"true"),l?.prerender&&s.append(E.PRERENDER,"true"),l?.spa&&s.append(E.SPA,"true"),l?.buildCommand&&s.append(E.BUILD_COMMAND,l.buildCommand),l?.outputDir&&s.append(E.OUTPUT_DIR,l.outputDir),u&&s.append(E.CAPTCHA,u),s}f();z();async function Kt(){let e=JSON.stringify(_e,null,2),t;typeof Buffer<"u"?t=Buffer.from(e,"utf-8"):t=new Blob([e],{type:"application/json"});let{md5:n}=await B(t);return{path:D,content:t,size:e.length,md5:n}}async function jt(e,t,n){let r=e.find(u=>u.path===k.INDEX_FILE||u.path===`/${k.INDEX_FILE}`);if(!r||r.size>k.MAX_INDEX_BYTES)return!1;let o;if(typeof Buffer<"u"&&Buffer.isBuffer(r.content))o=r.content.toString("utf-8");else if(typeof Blob<"u"&&r.content instanceof Blob)o=await r.content.text();else if(typeof File<"u"&&r.content instanceof File)o=await r.content.text();else return!1;let i={files:e.map(u=>u.path),index:o};return(await t.request(m.SPA_CHECK,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(i),signal:n??null},"SPA check")).isSPA}async function Ge(e,t,n){return n.spaDetect===!1||n.spa||n.build||n.prerender||e.some(r=>r.path===D)?e:await jt(e,t,n.signal)?[...e,await Kt()]:e}f();f();function w(e){if(e==null)return;if(e.length===0)return e;if(e.length>I.MAX_COUNT)throw a.validation(`Maximum ${I.MAX_COUNT} labels allowed`);let t=e.map((r,o)=>{if(typeof r!="string")throw a.validation(`Label at index ${o} must be a string`);let i=r.trim().toLowerCase();if(i.length<I.MIN_LENGTH)throw a.validation(`Labels must be at least ${I.MIN_LENGTH} characters long`);if(i.length>I.MAX_LENGTH)throw a.validation(`Labels must be no more than ${I.MAX_LENGTH} characters long`);if(!Me.test(i))throw a.validation(`Labels must start and end with alphanumeric characters, with optional separators (${I.SEPARATORS}) between segments`);return i}),n=[...new Set(t)];if(n.length!==t.length)throw a.validation("Duplicate labels are not allowed");return n}async function Be(e){let t=e.find(o=>o.path===D||o.path===`/${D}`);if(!t)return;let n=t.content,r=typeof n.text=="function"?await n.text():t.content.toString("utf8");we(r)}var V={"Content-Type":"application/json"},qt="sdk";function ae(e){let t=new URLSearchParams;e?.limit!==void 0&&t.set("limit",String(e.limit)),e?.cursor!==void 0&&t.set("cursor",e.cursor);let n=t.toString();return n?`?${n}`:""}function ze(e){let{getApi:t,processInput:n}=e;return{upload:async(r,o={})=>{if(!n)throw a.config("processInput function is not provided.");let i=t(),l=await n(r,o),u=await Ge(l,i,o);if(!u.length)throw a.business("No files to deploy");for(let Y of u)if(!Y.md5)throw a.file(`MD5 checksum missing for file: ${Y.path}`,{filePath:Y.path});se(o.password);let s=oe(o.ttl),p=Re(o.idempotencyKey),c=w(o.labels);await Be(u);let y=Ue(o.buildCommand),A=ke(o.outputDir),X=o.build||o.prerender||o.spa?{build:o.build,prerender:o.prerender,spa:o.spa,buildCommand:y,outputDir:A}:void 0,lt=await He(u,{labels:c,via:o.via??qt,password:o.password,ttl:s,flags:X,captcha:o.captcha});return i.request(i.deploy.endpoint,{method:"POST",body:lt,...p?{headers:{[N.HEADER]:p}}:{},signal:o.signal||null},"Deploy",o.build||o.prerender?i.deploy.buildTimeout:i.deploy.timeout)},list:async r=>t().request(`${m.DEPLOYMENTS}${ae(r)}`,{method:"GET"},"List deployments"),get:async r=>t().request(m.DEPLOYMENT(encodeURIComponent(r)),{method:"GET"},"Get deployment"),set:async(r,o)=>t().request(m.DEPLOYMENT(encodeURIComponent(r)),{method:"PATCH",headers:V,body:JSON.stringify({labels:w(o.labels)})},"Update deployment labels"),delete:async r=>t().request(m.DEPLOYMENT(encodeURIComponent(r)),{method:"DELETE"},"Delete deployment")}}function Ve(e){let{getApi:t}=e;return{set:async(n,r={})=>{let o=w(r.labels),i={};r.deployment&&(i.deployment=r.deployment),o!==void 0&&(i.labels=o);let{data:l,status:u}=await t().requestWithStatus(m.DOMAIN(encodeURIComponent(n)),{method:"PUT",headers:V,body:JSON.stringify(i)},"Set domain");return{...l,isCreate:u===201}},list:async n=>t().request(`${m.DOMAINS}${ae(n)}`,{method:"GET"},"List domains"),get:async n=>t().request(m.DOMAIN(encodeURIComponent(n)),{method:"GET"},"Get domain"),delete:async n=>t().request(m.DOMAIN(encodeURIComponent(n)),{method:"DELETE"},"Delete domain"),verify:async n=>t().request(m.DOMAIN_VERIFY(encodeURIComponent(n)),{method:"POST"},"Verify domain"),validate:async n=>t().request(m.DOMAINS_VALIDATE,{method:"POST",headers:V,body:JSON.stringify({domain:n})},"Validate domain"),dns:async n=>t().request(m.DOMAIN_DNS(encodeURIComponent(n)),{method:"GET"},"Get domain DNS"),records:async n=>t().request(m.DOMAIN_RECORDS(encodeURIComponent(n)),{method:"GET"},"Get domain records"),share:async n=>t().request(m.DOMAIN_SHARE(encodeURIComponent(n)),{method:"GET"},"Get domain share")}}function Ke(e){let{getApi:t}=e;return{get:async()=>t().request(m.ACCOUNT,{method:"GET"},"Get account")}}function je(e){let{getApi:t}=e;return{create:async(n={})=>{let r=oe(n.ttl),o=w(n.labels),i={};return r!==void 0&&(i.ttl=r),o!==void 0&&(i.labels=o),t().request(m.TOKENS,{method:"POST",headers:V,body:JSON.stringify(i)},"Create token")},list:async n=>t().request(`${m.TOKENS}${ae(n)}`,{method:"GET"},"List tokens"),get:async n=>t().request(m.TOKEN(encodeURIComponent(n)),{method:"GET"},"Get token"),delete:async n=>t().request(m.TOKEN(encodeURIComponent(n)),{method:"DELETE"},"Delete token")}}var K=class{constructor(t={}){this.credential=null;if(t={...t,apiUrl:t.apiUrl||void 0,token:t.token||void 0,caller:t.caller||void 0},this.clientOptions=t,t.caller!==void 0&&ve(t.caller),t.token&&t.session)throw a.config("Provide either `token` or `session`, not both.");typeof t.token=="string"?(re(t.token),this.credential=t.token):t.token&&(this.credential=t.token),this.http=new G({...t,getAuthHeaders:()=>this.getAuthHeaders()});let n={getApi:()=>this.http};this.deployments=ze({...n,processInput:async(r,o)=>this.processInput(r,o,await this.getLimits({signal:o.signal}))}),this.domains=Ve(n),this.account=Ke(n),this.tokens=je(n)}async ping(){return this.http.request(m.PING,{method:"GET"},"Ping")}async deploy(t,n){return this.deployments.upload(t,n)}async whoami(){return this.account.get()}async getLimits(t={}){return this.http.request(m.LIMITS,{method:"GET",signal:t.signal??null},"Get limits")}on(t,n){this.http.on(t,n)}off(t,n){this.http.off(t,n)}setHeaders(t){this.http.setGlobalHeaders(t)}clearHeaders(){this.http.setGlobalHeaders({})}setToken(t){if(this.clientOptions.session)throw a.config("Provide either `token` or `session`, not both.");if(typeof t=="string"){if(!t)throw a.business("Invalid token provided. Token must be a non-empty string.");re(t),this.credential=t;return}if(typeof t!="function")throw a.business("Invalid token provided. Token must be a non-empty string or a provider function.");this.credential=t}async getAuthHeaders(){if(this.credential===null)return{};let t=typeof this.credential=="function"?await this.credential():this.credential;if(!t)throw a.authentication("Token provider returned no token.");if(typeof t!="string")throw a.authentication("Token provider returned a non-string value.");return{Authorization:`Bearer ${t}`}}};v();f();import{z as Ye}from"zod";import{z as qe}from"zod";var Xe={apiUrl:qe.string().url().optional(),token:qe.string().min(1).optional()};v();var Yt=Ye.object(Xe).strict(),Wt={apiUrl:P.API_URL,token:P.TOKEN};function We(){if(L()!=="node")return{};let e={apiUrl:process.env[P.API_URL]||void 0,token:process.env[P.TOKEN]||void 0};try{return Yt.parse(e)}catch(t){if(t instanceof Ye.ZodError){let n=t.issues[0],r=n.path[0],o=(r&&Wt[r])??"SHIP environment configuration";throw a.config(`Invalid ${o}: ${n.message}`)}throw a.config("Invalid environment configuration")}}f();f();pe();v();he();ye();z();Ee();function Br(e,t,n,r=!0){let o=e===1?t:n;return r?`${e} ${o}`:o}ge();var Te=class extends K{constructor(t={}){if(L()!=="node")throw a.business("Node.js Ship class can only be used in Node.js environment.");let n=We();super({...t,apiUrl:t.apiUrl||n.apiUrl,token:t.token||(t.session?void 0:n.token)})}async deploy(t,n){return super.deploy(t,n)}async processInput(t,n,r){let o=typeof t=="string"?[t]:t;if(!Array.isArray(o)||!o.every(l=>typeof l=="string"))throw a.business("Invalid input type for Node.js environment. Expected string or string[].");if(o.length===0)throw a.business("No files to deploy.");let{processFilesForNode:i}=await Promise.resolve().then(()=>(ge(),at));return i(o,n,r)}},an=Te;export{Rn as ACCOUNT_HEADER,Oe as API_KEY,m as API_PATHS,An as AUTH_BASE_PATH,fn as AccountPlan,En as AccountRefusal,G as ApiHttp,J as AuthMethod,x as BUILD_SETTINGS,O as CALLER,ie as DEFAULT_API,D as DEPLOYMENT_CONFIG_FILENAME,E as DEPLOY_FIELDS,Sn as DEPLOY_FILE_GRAMMAR,xe as DEPLOY_TOKEN,cn as DeploymentStatus,pt as DeploymentVia,un as DomainStatus,pn as DomainVerification,d as ErrorType,h as FILE_VALIDATION_STATUS,h as FileValidationStatus,N as IDEMPOTENCY_KEY_CONSTRAINTS,tn as JUNK_DIRECTORIES,I as LABEL_CONSTRAINTS,Me as LABEL_PATTERN,vn as MY_API_KEY_URL,Pe as OAUTH_TOKEN,Nn as OAuthScope,F as PASSWORD_CONSTRAINTS,Cn as PUBLIC_DEPLOYMENT_TTL_SECONDS,Nt as SECTIONS,dn as SETUP_TROUBLESHOOTING_ANCHOR,P as SHIP_ENV,wn as SHIP_VIA_ENV,k as SPA_CHECK_CONSTRAINTS,_e as SPA_DEFAULT_CONFIG,Te as Ship,a as ShipError,C as TTL_CONSTRAINTS,R as TokenKind,te as UNBUILT_PROJECT_MARKERS,St as UNSAFE_FILENAME_CHARS,Se as USAGE_KIND,Mn as USER_VISIBLE_EVENTS,Dn as WEB_FILE_ACCEPT,mr as __setTestEnvironment,Pn as accountOfPath,vr as allValidFilesReady,we as assertShipJsonSyntax,xn as billingReturnOf,B as calculateMD5,Dt as classifyToken,Ot as consolePaths,mt as countPhrase,Ke as createAccountResource,ze as createDeploymentResource,Ve as createDomainResource,je as createTokenResource,an as default,Bn as deserializeLabels,Pt as doorOf,On as doors,_n as errandOf,hn as excessOver,kn as extractSubdomain,Ze as filterJunk,yn as fitPhrase,vt as formatDuration,_ as formatFileSize,Fn as formatTimeRemaining,$n as generateDeploymentUrl,Hn as generateDomainUrl,L as getENV,Zt as getValidFiles,U as hasUnbuiltMarker,be as hasUnsafeChars,Le as isBlockedExtension,_t as isClaimPath,Un as isCustomDomain,bn as isDeployment,Fe as isPlatformDomain,M as isShipError,wt as isUpgradePath,mn as normalizeVia,Qe as optimizeDeployPaths,gn as personName,Tn as personShortName,dt as placesTaken,Br as pluralize,st as processFilesForNode,In as readBearerValue,Gn as serializeLabels,At as validateApiKey,Ln as validateApiUrl,Ue as validateBuildCommand,ve as validateCaller,nt as validateDeployCount,tt as validateDeployFile,et as validateDeployPath,Rt as validateDeployToken,me as validateFileName,wr as validateFiles,Re as validateIdempotencyKey,It as validateOAuthToken,ke as validateOutputDir,se as validatePassword,re as validateToken,oe as validateTtl};
 //# sourceMappingURL=index.js.map