vercel 51.7.0 → 51.8.0

package/dist/chunks/{rm-EDOGYDVM.js → rm-HA373E4I.js}

@@ -9,10 +9,10 @@ import {
   handleRulesApiError,
   parseRulesFlagsAndScope,
   rulesItemPath
-} from "./chunk-IDDYXD6T.js";
-import "./chunk-YDCXNOCS.js";
+} from "./chunk-DQPDIHII.js";
+import "./chunk-UP2QQYRS.js";
 import "./chunk-HTOH3MSD.js";
-import "./chunk-V766LKN6.js";
+import "./chunk-CUCRUPRY.js";
 import {
   validateJsonOutput
 } from "./chunk-XPKWKPWA.js";
@@ -22,7 +22,7 @@ import {
 import {
   AGENT_REASON
 } from "./chunk-E3NE4SKN.js";
-import "./chunk-LOUKPRIS.js";
+import "./chunk-U7MQBM3F.js";
 import "./chunk-U3WLEFHU.js";
 import {
   buildCommandWithGlobalFlags,

package/dist/chunks/{rule-inspect-GW54LGXF.js → rule-inspect-WMR7SVJY.js}

@@ -9,10 +9,10 @@ import {
   handleRulesApiError,
   parseRulesFlagsAndScope,
   rulesItemPath
-} from "./chunk-IDDYXD6T.js";
-import "./chunk-YDCXNOCS.js";
+} from "./chunk-DQPDIHII.js";
+import "./chunk-UP2QQYRS.js";
 import "./chunk-HTOH3MSD.js";
-import "./chunk-V766LKN6.js";
+import "./chunk-CUCRUPRY.js";
 import {
   validateJsonOutput
 } from "./chunk-XPKWKPWA.js";
@@ -22,7 +22,7 @@ import {
 import {
   AGENT_REASON
 } from "./chunk-E3NE4SKN.js";
-import "./chunk-LOUKPRIS.js";
+import "./chunk-U7MQBM3F.js";
 import "./chunk-U3WLEFHU.js";
 import {
   buildCommandWithGlobalFlags,

package/dist/chunks/{rules-MCUCN322.js → rules-CPRD5HRH.js}

@@ -31,7 +31,7 @@ var RULES_CONFIG = {
 };
 async function rules(client, argv) {
   if (argv.length === 0) {
-    const lsFn = (await import("./ls-GRDKWPVP.js")).default;
+    const lsFn = (await import("./ls-7GZP6WNF.js")).default;
     return lsFn(client, []);
   }
   const { subcommand, args, subcommandOriginal } = getSubcommand(
@@ -64,15 +64,15 @@ async function rules(client, argv) {
   }
   switch (subcommand) {
     case "ls":
-      return (await import("./ls-GRDKWPVP.js")).default(client, args);
+      return (await import("./ls-7GZP6WNF.js")).default(client, args);
     case "add":
-      return (await import("./add-HLIPDOM3.js")).default(client, args);
+      return (await import("./add-6TAGTCM2.js")).default(client, args);
     case "inspect":
-      return (await import("./rule-inspect-GW54LGXF.js")).default(client, args);
+      return (await import("./rule-inspect-WMR7SVJY.js")).default(client, args);
     case "rm":
-      return (await import("./rm-EDOGYDVM.js")).default(client, args);
+      return (await import("./rm-HA373E4I.js")).default(client, args);
     case "update":
-      return (await import("./update-QHI4MJ6N.js")).default(client, args);
+      return (await import("./update-K5GTSDIT.js")).default(client, args);
     default:
       output_manager_default.error(`Unhandled rules subcommand: ${String(subcommandOriginal)}`);
       return 1;

package/dist/chunks/{schema-CZ7B2GTS.js → schema-AGVIOWAU.js}

@@ -17,7 +17,7 @@ import {
 } from "./chunk-G6RXZLQ2.js";
 import {
   getScope
-} from "./chunk-V766LKN6.js";
+} from "./chunk-CUCRUPRY.js";
 import {
   validateJsonOutput
 } from "./chunk-XPKWKPWA.js";
@@ -27,7 +27,7 @@ import {
 import "./chunk-GE6G37P4.js";
 import {
   require_pluralize
-} from "./chunk-LOUKPRIS.js";
+} from "./chunk-U7MQBM3F.js";
 import "./chunk-U3WLEFHU.js";
 import "./chunk-XKHLPA6V.js";
 import "./chunk-CO5D46AG.js";

package/dist/chunks/{update-QHI4MJ6N.js → update-K5GTSDIT.js}

@@ -9,10 +9,10 @@ import {
   handleRulesApiError,
   parseRulesFlagsAndScope,
   rulesItemPath
-} from "./chunk-IDDYXD6T.js";
-import "./chunk-YDCXNOCS.js";
+} from "./chunk-DQPDIHII.js";
+import "./chunk-UP2QQYRS.js";
 import "./chunk-HTOH3MSD.js";
-import "./chunk-V766LKN6.js";
+import "./chunk-CUCRUPRY.js";
 import {
   validateJsonOutput
 } from "./chunk-XPKWKPWA.js";
@@ -22,7 +22,7 @@ import {
 import {
   AGENT_REASON
 } from "./chunk-E3NE4SKN.js";
-import "./chunk-LOUKPRIS.js";
+import "./chunk-U7MQBM3F.js";
 import "./chunk-U3WLEFHU.js";
 import {
   buildCommandWithGlobalFlags,

package/dist/commands/build/index.js

@@ -10,27 +10,27 @@ import {
   isLambda,
   staticFiles,
   writeBuildResult
-} from "../../chunks/chunk-LKIVGPRE.js";
+} from "../../chunks/chunk-N5IS4YW4.js";
 import {
   require_semver
 } from "../../chunks/chunk-IB5L4LKZ.js";
 import {
   pullCommandLogic
-} from "../../chunks/chunk-BO7LOGQA.js";
+} from "../../chunks/chunk-IHOJDWAH.js";
 import {
   pickOverrides,
   readProjectSettings
-} from "../../chunks/chunk-L7AFYPER.js";
+} from "../../chunks/chunk-6WHQFFN2.js";
 import {
   ua_default
 } from "../../chunks/chunk-4PQA6H63.js";
-import "../../chunks/chunk-HYAMHBSF.js";
-import "../../chunks/chunk-6GTUL6VG.js";
-import "../../chunks/chunk-IS75MWZN.js";
-import "../../chunks/chunk-LGSOFQRC.js";
+import "../../chunks/chunk-AQ4L3FS4.js";
+import "../../chunks/chunk-5VQMJCHT.js";
+import "../../chunks/chunk-H2PHTCJL.js";
+import "../../chunks/chunk-KUY7VLTK.js";
 import {
   buildCommand
-} from "../../chunks/chunk-QO6J4DC7.js";
+} from "../../chunks/chunk-UBOSX7RM.js";
 import {
   AGENT_REASON,
   AGENT_STATUS
@@ -58,7 +58,7 @@ import {
   require_minimatch,
   resolveProjectCwd,
   validateConfig
-} from "../../chunks/chunk-LOUKPRIS.js";
+} from "../../chunks/chunk-U7MQBM3F.js";
 import {
   TelemetryClient
 } from "../../chunks/chunk-U3WLEFHU.js";

package/dist/commands/deploy/index.js

@@ -14,10 +14,10 @@ import {
   purchaseDomainIfAvailable,
   require_cjs,
   setupDomain
-} from "../../chunks/chunk-5QNVUXGF.js";
+} from "../../chunks/chunk-BQI2CW7A.js";
 import {
   readLocalConfig
-} from "../../chunks/chunk-T74PTRRA.js";
+} from "../../chunks/chunk-Y3HAJQCS.js";
 import {
   highlight
 } from "../../chunks/chunk-V5P25P7F.js";
@@ -29,7 +29,7 @@ import {
   getDeployment,
   mapCertError
 } from "../../chunks/chunk-N45K6NXC.js";
-import "../../chunks/chunk-V766LKN6.js";
+import "../../chunks/chunk-CUCRUPRY.js";
 import {
   validateJsonOutput
 } from "../../chunks/chunk-XPKWKPWA.js";
@@ -42,7 +42,7 @@ import {
   deprecatedArchiveSplitTgz,
   getCommandAliases,
   initSubcommand
-} from "../../chunks/chunk-QZ3UQIL3.js";
+} from "../../chunks/chunk-R4ZPBOD7.js";
 import "../../chunks/chunk-CRZM5WM2.js";
 import "../../chunks/chunk-BHDZCUTT.js";
 import "../../chunks/chunk-BJQTGP42.js";
@@ -52,17 +52,17 @@ import "../../chunks/chunk-DVQ4SIWF.js";
 import "../../chunks/chunk-VGWGLBUC.js";
 import {
   pickOverrides
-} from "../../chunks/chunk-L7AFYPER.js";
+} from "../../chunks/chunk-6WHQFFN2.js";
 import "../../chunks/chunk-4PQA6H63.js";
 import {
   ensureLink
-} from "../../chunks/chunk-6GTUL6VG.js";
+} from "../../chunks/chunk-5VQMJCHT.js";
 import {
   validatePaths,
   validateRootDirectory
-} from "../../chunks/chunk-IS75MWZN.js";
-import "../../chunks/chunk-LGSOFQRC.js";
-import "../../chunks/chunk-QO6J4DC7.js";
+} from "../../chunks/chunk-H2PHTCJL.js";
+import "../../chunks/chunk-KUY7VLTK.js";
+import "../../chunks/chunk-UBOSX7RM.js";
 import {
   AGENT_STATUS
 } from "../../chunks/chunk-E3NE4SKN.js";
@@ -78,7 +78,7 @@ import {
   parseTarget,
   require_dist as require_dist2,
   require_lib
-} from "../../chunks/chunk-LOUKPRIS.js";
+} from "../../chunks/chunk-U7MQBM3F.js";
 import {
   TelemetryClient
 } from "../../chunks/chunk-U3WLEFHU.js";

package/dist/commands/dev/index.js

@@ -9,7 +9,7 @@ import {
 } from "../../chunks/chunk-2HSQ7YUK.js";
 import {
   getUpdateCommand
-} from "../../chunks/chunk-WKRF7JKF.js";
+} from "../../chunks/chunk-SKXUP3WW.js";
 import {
   highlight
 } from "../../chunks/chunk-V5P25P7F.js";
@@ -25,20 +25,20 @@ import {
   require_mime_types,
   require_npa,
   staticFiles
-} from "../../chunks/chunk-LKIVGPRE.js";
+} from "../../chunks/chunk-N5IS4YW4.js";
 import "../../chunks/chunk-IB5L4LKZ.js";
 import {
   pickOverrides
-} from "../../chunks/chunk-L7AFYPER.js";
-import "../../chunks/chunk-HYAMHBSF.js";
+} from "../../chunks/chunk-6WHQFFN2.js";
+import "../../chunks/chunk-AQ4L3FS4.js";
 import {
   displayDetectedServices,
   readConfig,
   setupAndLink
-} from "../../chunks/chunk-IS75MWZN.js";
+} from "../../chunks/chunk-H2PHTCJL.js";
 import {
   getLocalPathConfig
-} from "../../chunks/chunk-LGSOFQRC.js";
+} from "../../chunks/chunk-KUY7VLTK.js";
 import {
   help
 } from "../../chunks/chunk-LDXYSGPZ.js";
@@ -66,7 +66,7 @@ import {
   resolveProjectCwd,
   tryDetectServices,
   validateConfig
-} from "../../chunks/chunk-LOUKPRIS.js";
+} from "../../chunks/chunk-U7MQBM3F.js";
 import {
   TelemetryClient
 } from "../../chunks/chunk-U3WLEFHU.js";
@@ -19858,7 +19858,7 @@ Please ensure that ${cmd(err.path)} is properly installed`;
     return void 0;
   }
   async _getVercelConfig() {
-    const { compileVercelConfig } = await import("../../chunks/compile-vercel-config-U4OJGTLE.js");
+    const { compileVercelConfig } = await import("../../chunks/compile-vercel-config-3LQ66C4J.js");
     await compileVercelConfig(this.cwd);
     const configPath = getLocalPathConfig(this.cwd);
     const [

package/dist/commands/env/index.js

@@ -19,7 +19,7 @@ import {
 import {
   formatEnvironment,
   validateLsArgs
-} from "../../chunks/chunk-BXSWMI6W.js";
+} from "../../chunks/chunk-45TDB64X.js";
 import {
   validateJsonOutput
 } from "../../chunks/chunk-XPKWKPWA.js";
@@ -28,7 +28,7 @@ import {
 } from "../../chunks/chunk-YPQSDAEW.js";
 import {
   getCommandAliases
-} from "../../chunks/chunk-QZ3UQIL3.js";
+} from "../../chunks/chunk-R4ZPBOD7.js";
 import "../../chunks/chunk-CRZM5WM2.js";
 import "../../chunks/chunk-BHDZCUTT.js";
 import "../../chunks/chunk-BJQTGP42.js";
@@ -38,10 +38,10 @@ import "../../chunks/chunk-DVQ4SIWF.js";
 import "../../chunks/chunk-VGWGLBUC.js";
 import {
   require_execa
-} from "../../chunks/chunk-HYAMHBSF.js";
+} from "../../chunks/chunk-AQ4L3FS4.js";
 import {
   autoInstallVercelPlugin
-} from "../../chunks/chunk-QO6J4DC7.js";
+} from "../../chunks/chunk-UBOSX7RM.js";
 import "../../chunks/chunk-E3NE4SKN.js";
 import {
   help
@@ -56,6 +56,7 @@ import {
   getEnvRecords,
   getEnvTargetPlaceholder,
   getLinkedProject,
+  getTeamById,
   listSubcommand,
   param,
   parseTarget,
@@ -66,7 +67,7 @@ import {
   require_frameworks,
   runSubcommand,
   updateSubcommand
-} from "../../chunks/chunk-LOUKPRIS.js";
+} from "../../chunks/chunk-U7MQBM3F.js";
 import {
   TelemetryClient,
   require_dist as require_dist2
@@ -371,6 +372,11 @@ var EnvAddTelemetryClient = class extends TelemetryClient {
       this.trackCliFlag("sensitive");
     }
   }
+  trackCliFlagNoSensitive(noSensitive) {
+    if (noSensitive) {
+      this.trackCliFlag("no-sensitive");
+    }
+  }
   trackCliFlagForce(force) {
     if (force) {
       this.trackCliFlag("force");
@@ -390,6 +396,18 @@ var EnvAddTelemetryClient = class extends TelemetryClient {
 
 // src/commands/env/add.ts
 import { determineAgent } from "@vercel/detect-agent";
+function resolveTypeForTarget(target, opts) {
+  if (target === "development") {
+    return "encrypted";
+  }
+  if (opts.forceEncrypted)
+    return "encrypted";
+  if (opts.forceSensitive)
+    return "sensitive";
+  if (opts.policyOn)
+    return "sensitive";
+  return "sensitive";
+}
 function valueForNextCommand(value) {
   if (!/[\s'"\\]/.test(value))
     return value;
@@ -439,6 +457,7 @@ async function add(client, argv) {
   telemetryClient.trackCliArgumentGitBranch(envGitBranch);
   telemetryClient.trackCliOptionValue(opts["--value"]);
   telemetryClient.trackCliFlagSensitive(opts["--sensitive"]);
+  telemetryClient.trackCliFlagNoSensitive(opts["--no-sensitive"]);
   telemetryClient.trackCliFlagForce(opts["--force"]);
   telemetryClient.trackCliFlagGuidance(opts["--guidance"]);
   telemetryClient.trackCliFlagYes(opts["--yes"]);
@@ -797,11 +816,8 @@ async function add(client, argv) {
     }
   }
   const choices = [
-    ...envTargetChoices.filter((c) => !existingTargets.has(c.value)),
-    ...customEnvironments.filter((c) => !existingCustomEnvs.has(c.id)).map((c) => ({
-      name: c.slug,
-      value: c.id
-    }))
+    ...envTargetChoices.filter((c) => !existingTargets.has(c.value)).map((c) => ({ name: c.name, value: c.value })),
+    ...customEnvironments.filter((c) => !existingCustomEnvs.has(c.id)).map((c) => ({ name: c.slug, value: c.id }))
   ];
   if (!envGitBranch && choices.length === 0 && !opts["--force"]) {
     output_manager_default.error(
@@ -813,7 +829,31 @@ async function add(client, argv) {
     );
     return 1;
   }
-  let type = opts["--sensitive"] ? "sensitive" : "encrypted";
+  const forceSensitive = Boolean(opts["--sensitive"]);
+  const forceEncrypted = Boolean(opts["--no-sensitive"]);
+  if (forceSensitive && forceEncrypted) {
+    output_manager_default.error(
+      `--sensitive and --no-sensitive cannot be used together. Pick one.`
+    );
+    return 1;
+  }
+  let policyOn = false;
+  if (link.org.type === "team") {
+    try {
+      const team = await getTeamById(client, link.org.id);
+      policyOn = team?.sensitiveEnvironmentVariablePolicy === "on";
+    } catch {
+    }
+  }
+  if (policyOn) {
+    for (const choice of choices) {
+      if (choice.value === "development") {
+        choice.disabled = "(disallowed)";
+      } else if (choice.value === "production" || choice.value === "preview") {
+        choice.checked = true;
+      }
+    }
+  }
   let envValue;
   if (stdInput) {
     envValue = stdInput;
@@ -835,15 +875,6 @@ async function add(client, argv) {
         ]
       });
     }
-    if (type === "encrypted") {
-      const isSensitive = await client.input.confirm(
-        `Your value will be encrypted. Mark as sensitive?`,
-        false
-      );
-      if (isSensitive) {
-        type = "sensitive";
-      }
-    }
     envValue = await client.input.password({
       message: `What's the value of ${envName}?`,
       mask: true
@@ -923,6 +954,88 @@ async function add(client, argv) {
       });
     }
   }
+  const hasDevelopment = envTargets.includes("development");
+  const hasSensitiveCapable = envTargets.some((t) => t !== "development");
+  if (policyOn && hasDevelopment) {
+    const msg = `Your team has enabled the Sensitive Environment Variables Policy and the Development Environment does not support sensitive values. https://vercel.com/docs/environment-variables/sensitive-environment-variables#environment-variables-policy`;
+    if (client.nonInteractive) {
+      outputAgentError(
+        client,
+        {
+          status: "error",
+          reason: "development_disallowed_by_team_policy",
+          message: msg
+        },
+        1
+      );
+    }
+    output_manager_default.error(msg);
+    return 1;
+  }
+  if (forceSensitive && hasDevelopment) {
+    const msg = `--sensitive is not allowed with the Development Environment. Sensitive Environment Variables are only supported on Production and Preview.`;
+    if (client.nonInteractive) {
+      outputAgentError(
+        client,
+        {
+          status: "error",
+          reason: "sensitive_not_allowed_on_development",
+          message: msg
+        },
+        1
+      );
+    }
+    output_manager_default.error(msg);
+    return 1;
+  }
+  if (hasDevelopment && hasSensitiveCapable) {
+    const msg = `Development cannot be combined with other Environments because Development does not support sensitive Environment Variables. Run ${getCommandName(
+      "env add"
+    )} separately for Development.`;
+    if (client.nonInteractive) {
+      outputAgentError(
+        client,
+        {
+          status: "error",
+          reason: "mixed_development_and_sensitive_capable_targets",
+          message: msg
+        },
+        1
+      );
+    }
+    output_manager_default.error(msg);
+    return 1;
+  }
+  let finalType = resolveTypeForTarget(
+    hasDevelopment ? "development" : "production",
+    { forceSensitive, forceEncrypted, policyOn }
+  );
+  const userWasExplicit = forceSensitive || forceEncrypted;
+  const canPromptForType = !client.nonInteractive && !userWasExplicit && !policyOn && hasSensitiveCapable && !skipConfirm;
+  if (canPromptForType) {
+    output_manager_default.log(
+      `Sensitive values cannot be retrieved later from the dashboard or CLI.`
+    );
+    const keepSensitive = await client.input.confirm(
+      `Make it sensitive?`,
+      true
+    );
+    if (!keepSensitive) {
+      finalType = "encrypted";
+    }
+  }
+  if (policyOn && hasSensitiveCapable) {
+    if (forceEncrypted) {
+      output_manager_default.warn(
+        `--no-sensitive is ignored: your team enforces sensitive Environment Variables for Production and Preview.`
+      );
+      finalType = "sensitive";
+    } else if (!userWasExplicit) {
+      output_manager_default.log(
+        `Your team requires sensitive Environment Variables for Production and Preview.`
+      );
+    }
+  }
   const upsert = opts["--force"] ? "true" : "";
   const addStamp = stamp_default();
   try {
@@ -931,7 +1044,7 @@ async function add(client, argv) {
       client,
       project.id,
       upsert,
-      type,
+      finalType,
       envName,
       finalValue,
       envTargets,

package/dist/commands/link/index.js

@@ -11,7 +11,7 @@ import {
   addSubcommand7 as addSubcommand,
   getCommandAliases,
   linkCommand
-} from "../../chunks/chunk-QZ3UQIL3.js";
+} from "../../chunks/chunk-R4ZPBOD7.js";
 import "../../chunks/chunk-CRZM5WM2.js";
 import "../../chunks/chunk-BHDZCUTT.js";
 import "../../chunks/chunk-BJQTGP42.js";
@@ -21,12 +21,12 @@ import "../../chunks/chunk-DVQ4SIWF.js";
 import "../../chunks/chunk-VGWGLBUC.js";
 import {
   ensureLink
-} from "../../chunks/chunk-6GTUL6VG.js";
-import "../../chunks/chunk-IS75MWZN.js";
-import "../../chunks/chunk-LGSOFQRC.js";
+} from "../../chunks/chunk-5VQMJCHT.js";
+import "../../chunks/chunk-H2PHTCJL.js";
+import "../../chunks/chunk-KUY7VLTK.js";
 import {
   autoInstallVercelPlugin
-} from "../../chunks/chunk-QO6J4DC7.js";
+} from "../../chunks/chunk-UBOSX7RM.js";
 import "../../chunks/chunk-E3NE4SKN.js";
 import {
   help
@@ -36,7 +36,7 @@ import {
   addRepoLink,
   ensureRepoLink,
   getTeams
-} from "../../chunks/chunk-LOUKPRIS.js";
+} from "../../chunks/chunk-U7MQBM3F.js";
 import {
   TelemetryClient
 } from "../../chunks/chunk-U3WLEFHU.js";

package/dist/commands/list/index.js

@@ -19,11 +19,11 @@ import {
 } from "../../chunks/chunk-N45K6NXC.js";
 import {
   getScope
-} from "../../chunks/chunk-V766LKN6.js";
+} from "../../chunks/chunk-CUCRUPRY.js";
 import {
   formatEnvironment,
   validateLsArgs
-} from "../../chunks/chunk-BXSWMI6W.js";
+} from "../../chunks/chunk-45TDB64X.js";
 import {
   validateJsonOutput
 } from "../../chunks/chunk-XPKWKPWA.js";
@@ -41,7 +41,7 @@ import {
   getLinkedProject,
   getProjectByNameOrId,
   parseTarget
-} from "../../chunks/chunk-LOUKPRIS.js";
+} from "../../chunks/chunk-U7MQBM3F.js";
 import {
   TelemetryClient
 } from "../../chunks/chunk-U3WLEFHU.js";