@stacksjs/actions 0.70.23 → 0.70.26

package/dist/src/deploy/index.js

@@ -0,0 +1,307 @@
+// @bun
+import{gb as W}from"../../chunk-96b7fcmd.js";import{existsSync as YJ,readFileSync as EJ,statSync as wJ}from"fs";import F from"process";import{runCommand as WJ,spinner as g}from"@stacksjs/cli";import{config as OJ}from"@stacksjs/config";import{path as V}from"@stacksjs/path";import{storage as FJ}from"@stacksjs/storage";import{ExitCode as NJ}from"@stacksjs/types";var z={debug:(...J)=>{if(F.argv.includes("--verbose")||F.argv.includes("-v"))console.log("\uD83D\uDD0D",...J)},success:(...J)=>console.log("\u2713",...J),error:(...J)=>console.error("\u2717",...J)},TJ="github.com/mail-os/mail",DJ=`${TJ}@0.1.0`,jJ="linux-x86_64",_J=["mail","mail-x86_64-linux","mail-x86_64-linux-gnu"],$=F.argv.includes("--verbose")||F.argv.includes("-v");async function xJ(J,U,K=8){let{existsSync:Q,readdirSync:T,statSync:C}=await import("fs"),{join:j,basename:d}=await import("path"),a=new Set(U),v=[];if(!Q(J))return v;function f(KJ,zJ){if(zJ>K)return;for(let UJ of T(KJ)){if(UJ===".git"||UJ==="node_modules")continue;let n=j(KJ,UJ),t=C(n);if(t.isDirectory())f(n,zJ+1);else if(t.isFile()&&a.has(d(n)))v.push(n)}}return f(J,0),v}async function AJ(J){let{readFileSync:U}=await import("fs"),K=U(J).slice(0,4);return K[0]===127&&K[1]===69&&K[2]===76&&K[3]===70}async function IJ(){let{existsSync:J}=await import("fs"),U=`${F.env.HOME}/Code/Tools/pantry/packages/ts-pantry/bin/cli.ts`;if(J(U))return{command:"bun",args:[U]};let K=V.projectPath("pantry/.bin/pantry");if(J(K))return{command:K,args:[]};let Q=`${F.env.HOME}/.local/share/pantry/global/bin/pantry`;if(J(Q))return{command:Q,args:[]};return{command:"pantry",args:[]}}async function fJ(){let{execFileSync:J}=await import("child_process"),U=V.projectPath("pantry"),K=await IJ();J(K.command,[...K.args,"install",DJ,"--install-dir",U,"--platform",jJ,"--quiet"],{cwd:V.projectPath(),stdio:$?"inherit":"pipe",env:F.env})}async function PJ(){let{existsSync:J}=await import("fs"),{join:U}=await import("path"),K=[V.projectPath("pantry"),`${F.env.HOME}/.local/share/pantry`],Q=[..._J.map((T)=>V.projectPath(`pantry/.bin/${T}`)),..._J.map((T)=>U(`${F.env.HOME}/.local/share/pantry/global/bin`,T))];for(let T of Q)if(J(T)&&await AJ(T))return T;for(let T of K){let C=await xJ(T,_J);for(let j of C)if(await AJ(j))return j}return null}var bJ={".html":"text/html",".css":"text/css",".js":"application/javascript",".json":"application/json",".png":"image/png",".jpg":"image/jpeg",".jpeg":"image/jpeg",".gif":"image/gif",".svg":"image/svg+xml",".ico":"image/x-icon",".woff":"font/woff",".woff2":"font/woff2",".ttf":"font/ttf",".eot":"application/vnd.ms-fontobject",".otf":"font/otf",".webp":"image/webp",".mp4":"video/mp4",".webm":"video/webm",".mp3":"audio/mpeg",".wav":"audio/wav",".pdf":"application/pdf",".xml":"application/xml",".txt":"text/plain"};function VJ(J){let U=J.lastIndexOf("."),K=U>=0?J.slice(U).toLowerCase():"";return bJ[K]||"application/octet-stream"}async function XJ(J,U,K="",Q=[".DS_Store"]){let{readdirSync:T,statSync:C}=await import("fs"),{join:j}=await import("path"),d=T(J);for(let a of d){if(Q.includes(a))continue;let v=j(J,a),f=K?`${K}/${a}`:a;if(C(v).isDirectory())await XJ(v,U,f,Q);else await U(v,f)}}async function hJ(){try{let{generateSignalsRuntime:J}=await import("@stacksjs/stx/signals");return`<script>
+${J()}
+</script>`}catch{return console.warn("Could not load STX signals runtime"),""}}async function e(J,U="s3 operation"){for(let Q=0;Q<=3;Q++)try{return await J()}catch(T){if(Q>=3)throw T;let C=Math.min(500*2**Q+Math.random()*200,5000);if($)z.debug(`  Retrying ${U} (attempt ${Q+2}/4) in ${Math.round(C)}ms...`);await new Promise((j)=>setTimeout(j,C))}throw Error(`${U} failed after 4 attempts`)}function RJ(J){if(!J)return[];return Array.isArray(J)?J:[J]}function MJ(J,U,K=""){if(U===null||U===void 0)return"";if(typeof U==="boolean")return`${K}<${J}>${U}</${J}>
+`;if(typeof U==="number"||typeof U==="string")return`${K}<${J}>${U}</${J}>
+`;if(Array.isArray(U))return U.map((Q)=>MJ(J,Q,K)).join("");if(typeof U==="object"){if(J.startsWith("@_")||J==="?xml")return"";let Q="";for(let[T,C]of Object.entries(U))if(!T.startsWith("@_")&&T!=="#text")Q+=MJ(T,C,`${K}  `);if(U["#text"]!==void 0)return`${K}<${J}>${U["#text"]}</${J}>
+`;return`${K}<${J}>
+${Q}${K}</${J}>
+`}return""}function kJ(J){return`<?xml version="1.0" encoding="UTF-8"?>
+<DistributionConfig xmlns="http://cloudfront.amazonaws.com/doc/2020-05-31/">
+${Object.entries(J).filter(([U])=>!U.startsWith("@_")).map(([U,K])=>MJ(U,K,"  ")).join("")}</DistributionConfig>
+`}function LJ(J){let U=[...new Set(J)].filter((Q)=>Number.isFinite(Q)&&Q>0).sort((Q,T)=>Q-T);if(U.length===0)return"true";return`if command -v firewall-cmd >/dev/null 2>&1; then firewall-cmd --permanent ${U.map((Q)=>`--add-port=${Q}/tcp`).join(" ")} && firewall-cmd --reload; fi`}async function CJ(J,U,K){if(!U)return;if(((await J.describeSecurityGroups({GroupIds:[U]}))?.SecurityGroups?.[0]?.IpPermissions||[]).some((j)=>{return j.IpProtocol==="tcp"&&Number(j.FromPort)<=K&&Number(j.ToPort)>=K&&RJ(j.IpRanges).some((d)=>d.CidrIp==="0.0.0.0/0")}))return;try{await J.authorizeSecurityGroupIngress({GroupId:U,IpPermissions:[{IpProtocol:"tcp",FromPort:K,ToPort:K,IpRanges:[{CidrIp:"0.0.0.0/0",Description:`Stacks API port ${K}`}]}]})}catch(j){if(!String(j?.message||"").includes("InvalidPermission.Duplicate"))throw j}}async function SJ(J,U,K){if(!U)return;let Q=await J.request({service:"cloudfront",region:"us-east-1",method:"GET",path:`/2020-05-31/distribution/${U}/config`,returnHeaders:!0}),T=Q.headers?.etag||Q.headers?.ETag||"",C=Q.body?.DistributionConfig||Q.DistributionConfig||Q.body;if(!T||!C?.Origins?.Items)return;let d=RJ(C.Origins.Items.Origin).find((a)=>String(a.Id||"").includes("-api"));if(!d?.CustomOriginConfig)return;if(Number(d.CustomOriginConfig.HTTPPort)===K)return;d.CustomOriginConfig.HTTPPort=K,await J.request({service:"cloudfront",region:"us-east-1",method:"PUT",path:`/2020-05-31/distribution/${U}/config`,body:kJ(C),headers:{"Content-Type":"application/xml","If-Match":T}})}var BJ=g("Building framework...");BJ.start();await WJ("bun run build",{cwd:V.frameworkPath("core"),quiet:!1});BJ.succeed("Framework built");var GJ=V.projectPath("docs"),vJ=V.projectPath("dist/docs/.bunpress");if(FJ.hasFiles(GJ)){let J=g("Building documentation with BunPress...");J.start();try{let{rm:U}=await import("fs/promises"),K=`${F.env.HOME}/Code/Tools/bunpress/packages/bunpress/bin/cli.ts`,Q=V.projectPath("node_modules/@stacksjs/bunpress/dist/bin/cli.js"),T=await Bun.file(K).exists(),C=await Bun.file(Q).exists(),j=T?`bun ${K} build --dir ${GJ} --outdir ${V.projectPath("dist/docs")}`:C?`bun ${Q} build --dir ${GJ} --outdir ${V.projectPath("dist/docs")}`:"bunx @stacksjs/bunpress@0.1.5 build --dir ./docs --outdir ./dist/docs";await U(vJ,{recursive:!0,force:!0}),await WJ(j,{cwd:V.projectPath(),quiet:!$}),J.succeed(`Documentation built with BunPress${T?" (local checkout)":""}`)}catch(U){if(J.stop(),console.log(`\u26A0 Documentation build skipped: ${U.message}`),$)z.debug("To build docs manually: cd ~/Code/Tools/bunpress && bun packages/bunpress/bin/cli.ts build --dir /path/to/docs --outdir /path/to/dist/docs")}}else if($)z.debug("No docs directory found, skipping documentation build");var yJ=FJ.hasFiles(V.projectPath("dist/blog")),gJ=["CampmateScript-Regular.woff2","SequoiaSans-Regular.woff2","Switchback-Regular.woff2"].every((J)=>YJ(V.projectPath(`dist/blog/assets/fonts/nps/${J}`))),cJ=["topography.svg","park-ridge.svg"].every((J)=>YJ(V.projectPath(`dist/blog/assets/images/${J}`))),HJ=V.projectPath("dist/blog/index.html"),JJ=YJ(HJ)?EJ(HJ,"utf8"):"",dJ=JJ.length>0&&!JJ.includes("woff2-variations"),mJ=JJ.includes("--on-primary")&&JJ.includes("--newsletter-bg"),pJ=JJ.includes("topography.svg")&&JJ.includes("park-ridge.svg"),uJ=!JJ.includes("stamp-trail")&&!JJ.includes("blog-sign-tree.svg"),sJ=V.frameworkPath("core/cms/src/build.ts"),lJ=V.projectPath("config/blog.ts"),aJ=YJ(HJ)&&[sJ,lJ].filter((J)=>YJ(J)).every((J)=>wJ(HJ).mtimeMs>=wJ(J).mtimeMs);if(!yJ||!gJ||!cJ||!dJ||!mJ||!pJ||!uJ||!aJ){let J=g("Building blog...");J.start();try{let U=(await import(V.projectPath("config/blog"))).default,{buildBlogSite:K}=await import(V.frameworkPath("core/cms/src/build"));await K({config:U,outDir:V.projectPath("dist/blog")}),J.succeed("Blog built successfully")}catch(U){if(J.stop(),console.log(`\u26A0 Blog build skipped: ${U.message}`),$)z.debug(`Blog build error: ${U.stack}`)}}else if($)z.debug("Pre-built blog found at dist/blog, skipping build");if($)z.debug("Skipping views build (vite-config not configured)");var iJ=await import(V.projectPath("config/cloud")),oJ=iJ?.tsCloud?.mode||"server";if(oJ==="serverless"){let J=g("Building server...");J.start(),await WJ("bun build.ts",{cwd:V.frameworkPath("server"),quiet:!$}),J.succeed("Server built");let U=g("Packaging for deployment...");U.start(),await WJ("bun zip.ts",{cwd:V.corePath("cloud"),quiet:!$}),U.succeed("Package ready")}else if($)z.debug("Skipping server build and packaging (server mode)");if(!F.env.AWS_ACCESS_KEY_ID||!F.env.AWS_SECRET_ACCESS_KEY){let{existsSync:J,readFileSync:U}=await import("fs"),K=F.env.APP_ENV||F.env.NODE_ENV||"production",Q=[V.projectPath(`.env.${K}`),V.projectPath(".env")];for(let T of Q)if(J(T)){let C=U(T,"utf-8");for(let j of C.split(`
+`)){let d=j.trim();if(d.startsWith("#")||!d.includes("="))continue;let a=d.indexOf("="),v=d.slice(0,a).trim(),f=d.slice(a+1).trim();if(f.startsWith('"')&&f.endsWith('"')||f.startsWith("'")&&f.endsWith("'"))f=f.slice(1,-1);if(v==="AWS_ACCESS_KEY_ID"&&f)F.env.AWS_ACCESS_KEY_ID=f;else if(v==="AWS_SECRET_ACCESS_KEY"&&f)F.env.AWS_SECRET_ACCESS_KEY=f;else if(v==="AWS_REGION"&&f&&!F.env.AWS_REGION)F.env.AWS_REGION=f;else if(v==="AWS_ACCOUNT_ID"&&f&&!F.env.AWS_ACCOUNT_ID)F.env.AWS_ACCOUNT_ID=f;else if(v.startsWith("MAIL_PASSWORD_")&&f&&!F.env[v])F.env[v]=f}if($)z.debug(`Loaded AWS credentials from ${T}`);break}}try{let{deployStack:J,deployFrontend:U}=await import("../../chunk-tc935b45.js"),K=F.env.APP_ENV||F.env.NODE_ENV||"production",Q=F.env.AWS_REGION||"us-east-1",T=await import(V.projectPath("config/cloud")),C=T?.tsCloud?.mode||"server",j=T?.tsCloud?.project?.name||T?.tsCloud?.project?.slug||"stacks";if(C==="serverless"){console.log(""),console.log("Serverless deployment mode detected"),console.log("Building and pushing container image..."),console.log("");let Y=F.env.AWS_ACCOUNT_ID||await d(Q);if(!Y||Y.length<10)throw Error(`Invalid AWS Account ID: "${Y||"(empty)"}"
+Set AWS_ACCOUNT_ID in your .env file or ensure valid AWS credentials are configured.`);let H=`${Y}.dkr.ecr.${Q}.amazonaws.com/${j}-${K}-api`,M=`${H}:latest`;if($)z.debug(`ECR repository: ${H}`);if($)z.debug("ECR credentials will be validated before push...");let O=g("Building Docker image...");O.start();try{let{exec:q}=await import("child_process"),{promisify:D}=await import("util"),B=D(q),A=`docker build --platform linux/amd64 -t ${M} -f Dockerfile .`,{stdout:w,stderr:E}=await B(A,{cwd:V.projectPath(),env:F.env,maxBuffer:10485760,timeout:900000});if($&&w)z.debug(w);if($&&E)z.debug(E);O.succeed(`Docker image built: ${M}`)}catch(q){if(O.fail("Docker build failed"),$)z.debug(`Docker build error: ${q.message}`);throw q}let X=g("Checking ECR repository...");X.start();try{let{ECRClient:q}=await import("@stacksjs/ts-cloud"),D=new q(Q),B=`${j}-${K}-api`;try{await D.describeRepositories({repositoryNames:[B]}),X.succeed(`ECR repository exists: ${B}`)}catch(A){if(A.code==="RepositoryNotFoundException"||A.message?.includes("RepositoryNotFoundException"))X.text=`Creating ECR repository: ${B}...`,await D.createRepository({repositoryName:B,imageScanningConfiguration:{scanOnPush:!0},imageTagMutability:"MUTABLE"}),X.succeed(`ECR repository created: ${B}`);else throw A}}catch(q){if(X.fail("ECR repository check failed"),$)z.debug(`ECR repository error: ${q.message}`);throw q}let N=g("Authenticating to ECR...");N.start();try{let{ECRClient:q}=await import("@stacksjs/ts-cloud"),A=(await new q(Q).getAuthorizationToken()).authorizationData?.[0];if(!A?.authorizationToken)throw Error("No authorization token received from ECR");let w=Buffer.from(A.authorizationToken,"base64").toString("utf-8"),E=w.indexOf(":");if(E===-1)throw Error("ECR authorization token has unexpected format (missing colon separator)");let R=w.slice(E+1),G=Bun.spawnSync(["docker","login","--username","AWS","--password-stdin",`${Y}.dkr.ecr.${Q}.amazonaws.com`],{stdin:new TextEncoder().encode(R),stdout:"pipe",stderr:"pipe"});if(G.exitCode!==0){let P=new TextDecoder().decode(G.stderr);throw Error(`Docker login failed: ${P}`)}N.succeed("Authenticated to ECR")}catch(q){if(N.fail("ECR authentication failed"),$)z.debug(`ECR auth error: ${q.message}`);throw q}console.log("");let S=g("Pushing image to ECR...");S.start();try{let{exec:q}=await import("child_process"),{promisify:D}=await import("util"),B=D(q),A=`docker push ${M}`;await B(A,{env:F.env}),S.succeed(`Image pushed: ${M}`)}catch(q){if(S.fail("Docker push failed"),$)z.debug(`Push error: ${q.message}`);throw q}console.log(""),console.log("Container image ready in ECR. CloudFormation will use this image."),console.log("")}else console.log(""),console.log("Server deployment mode detected"),console.log("Deploying EC2 infrastructure via CloudFormation..."),console.log("");async function d(Y){try{let{STSClient:H}=await import("@stacksjs/ts-cloud"),X=(await new H(Y).getCallerIdentity()).Account||F.env.AWS_ACCOUNT_ID||"";if($)z.debug(`Retrieved AWS Account ID: ${X||"(empty)"}`);return X}catch(H){if($)z.debug(`Failed to get AWS Account ID: ${H.message}`);return F.env.AWS_ACCOUNT_ID||""}}try{let Y=await import(V.projectPath("cloud/deploy-script"));if(typeof Y.beforeDeploy==="function")await Y.beforeDeploy({environment:K,region:Q})}catch(Y){if(Y.code==="ERR_MODULE_NOT_FOUND"||Y.code==="MODULE_NOT_FOUND"){if($)z.debug("No beforeDeploy hook found (cloud/deploy-script not found)")}else if(console.warn(`\u26A0 beforeDeploy hook failed: ${Y.message}`),$)z.debug(`beforeDeploy error stack: ${Y.stack}`)}await J({environment:K,region:Q,waitForCompletion:!0,verbose:$});try{let Y=await import(V.projectPath("cloud/deploy-script"));if(typeof Y.afterDeploy==="function"){let{CloudFormationClient:H}=await import("@stacksjs/ts-cloud"),M=new H(Q),O=`${j}-cloud`,X={};try{X=await M.getStackOutputs(O)}catch(N){if($)z.debug(`Failed to get stack outputs: ${N instanceof Error?N.message:String(N)}`)}await Y.afterDeploy({environment:K,region:Q,outputs:X})}}catch(Y){if(Y.code==="ERR_MODULE_NOT_FOUND"||Y.code==="MODULE_NOT_FOUND"){if($)z.debug("No afterDeploy hook found (cloud/deploy-script not found)")}else if(console.warn(`\u26A0 afterDeploy hook failed: ${Y.message}`),$)z.debug(`afterDeploy error stack: ${Y.stack}`)}let a=g("Running database migrations...");a.start();try{let{generateMigrations:Y,runDatabaseMigration:H}=await import("@stacksjs/database");await Y(),await H(),a.succeed("Database migrations completed")}catch(Y){if(a.stop(),console.log(`\u26A0 Database migrations skipped: ${Y.message}`),$)z.debug(`Migration error: ${Y.stack}`)}if(C==="server"){let Y=g("Retrieving server instance details...");Y.start();try{let{CloudFormationClient:O}=await import("@stacksjs/ts-cloud"),X=new O(Q),N=`${j}-cloud`,S=await X.getStackOutputs(N);Y.succeed("Server instances deployed"),console.log(""),console.log("Server instances:");for(let[q,D]of Object.entries(S)){if(q.endsWith("PublicIp"))console.log(`  ${q}: ${D}`);if(q.endsWith("InstanceId"))console.log(`  ${q}: ${D}`)}console.log("")}catch(O){if(Y.stop(),console.log(`\u26A0 Could not retrieve server details: ${O.message}`),$)z.debug(`Output retrieval error: ${O.stack}`)}let H=g("Deploying API server to EC2...");H.start();try{let{S3Client:O,CloudFormationClient:X,AWSClient:N}=await import("@stacksjs/ts-cloud"),{readFileSync:S,existsSync:q}=await import("fs"),{resolve:D}=await import("path"),B=new O(Q),A=new X(Q),w=new N,E=`${j}-cloud`,R=await A.getStackOutputs(E),G=R.FrontendBucketName,P=Number(OJ.ports?.api||3008),b;for(let[c,m]of Object.entries(R))if(c.endsWith("InstanceId")&&typeof m==="string"){b=m;break}let h;if(b){let{EC2Client:c}=await import("@stacksjs/ts-cloud"),m=new c(Q);h=(await m.describeInstances({Filters:[{Name:"instance-id",Values:[b]}]}))?.Reservations?.[0]?.Instances?.[0]?.SecurityGroups?.[0]?.GroupId,await CJ(m,h,P)}if(!b||!G){if(H.stop(),!b)console.log("\u26A0 No EC2 instance found in stack outputs, skipping server deploy");if(!G)console.log("\u26A0 No S3 bucket found for staging server artifacts")}else{let c=R.publicCloudFrontDistributionId||R.CloudFrontDistributionId;await SJ(w,c,P);let m=D(V.projectPath("node_modules/@stacksjs/ts-cloud/dist/index.js"));if(q(m)){let _=S(m);if(await e(()=>B.putObject({bucket:G,key:"_deploy/ts-cloud-dist.js",body:_,contentType:"application/javascript"}),"upload ts-cloud dist"),$)z.debug("  Uploaded ts-cloud dist to S3")}let p=`import { Database } from "bun:sqlite";
+import { SESClient } from "./ts-cloud-dist.js";
+
+const db = new Database("/var/www/api/stacks.db");
+db.run(\`CREATE TABLE IF NOT EXISTS subscribers (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  email TEXT NOT NULL UNIQUE,
+  status TEXT DEFAULT 'subscribed',
+  source TEXT DEFAULT 'homepage',
+  created_at TEXT DEFAULT CURRENT_TIMESTAMP
+)\`);
+
+const CORS_HEADERS = {
+  "Access-Control-Allow-Origin": "*",
+  "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
+  "Access-Control-Allow-Headers": "Content-Type",
+};
+
+const ses = new SESClient("${Q}");
+
+async function readBody(req) {
+  const contentType = req.headers.get("content-type") || "";
+
+  if (contentType.includes("application/json")) {
+    return await req.json();
+  }
+
+  if (contentType.includes("application/x-www-form-urlencoded") || contentType.includes("multipart/form-data")) {
+    const form = await req.formData();
+    return Object.fromEntries(form.entries());
+  }
+
+  const text = await req.text();
+  return Object.fromEntries(new URLSearchParams(text));
+}
+
+async function sendWelcomeEmail(email) {
+  try {
+    await ses.sendSimpleEmail({
+      from: "hello@stacksjs.com",
+      to: email,
+      subject: "Welcome to Stacks!",
+      html: \`<!DOCTYPE html>
+<html>
+<head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"></head>
+<body style="margin:0;padding:0;background-color:#0e0e0e;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,sans-serif;">
+  <table role="presentation" width="100%" cellspacing="0" cellpadding="0" style="max-width:600px;margin:0 auto;padding:40px 20px;">
+    <tr><td style="text-align:center;padding-bottom:32px;"><h1 style="color:#ececec;font-size:28px;font-weight:600;margin:0;">Stacks</h1></td></tr>
+    <tr><td style="background-color:#1a1a1a;border-radius:12px;padding:32px;">
+      <h2 style="color:#ececec;font-size:22px;font-weight:600;margin:0 0 16px;">Welcome aboard!</h2>
+      <p style="color:#a0a0a0;font-size:16px;line-height:1.6;margin:0 0 16px;">Thanks for subscribing to Stacks. You will be the first to know about new releases, features, and updates.</p>
+      <p style="color:#a0a0a0;font-size:16px;line-height:1.6;margin:0 0 24px;">Stacks is a rapid application development framework that helps you build type-safe web apps, APIs, and cloud infrastructure with ease.</p>
+      <a href="https://stacksjs.com" style="display:inline-block;background-color:#6366f1;color:#ffffff;text-decoration:none;padding:12px 24px;border-radius:8px;font-size:14px;font-weight:500;">Visit Stacks</a>
+    </td></tr>
+    <tr><td style="text-align:center;padding-top:32px;"><p style="color:#666;font-size:13px;margin:0;">You received this email because you subscribed at stacksjs.com</p></td></tr>
+  </table>
+</body>
+</html>\`,
+      text: "Welcome to Stacks! Thanks for subscribing. You will be the first to know about new releases, features, and updates. Visit us at https://stacksjs.com",
+    });
+    console.log(\`Welcome email sent to \${email}\`);
+  } catch (err) {
+    console.error(\`Failed to send welcome email to \${email}:\`, err.message);
+  }
+}
+
+const server = Bun.serve({
+  port: ${P},
+  hostname: "0.0.0.0",
+  async fetch(req) {
+    const url = new URL(req.url);
+
+    if (req.method === "OPTIONS") {
+      return new Response(null, { status: 204, headers: CORS_HEADERS });
+    }
+
+    if (url.pathname === "/health" || url.pathname === "/api/health") {
+      return Response.json({ status: "ok" }, { headers: CORS_HEADERS });
+    }
+
+    if (url.pathname === "/api/email/subscribe" && req.method === "POST") {
+      try {
+        const body = await readBody(req);
+        const email = (body.email || "").trim().toLowerCase();
+        if (!email || !email.includes("@")) {
+          return Response.json(
+            { success: false, message: "A valid email is required" },
+            { status: 400, headers: CORS_HEADERS },
+          );
+        }
+
+        const existing = db.query("SELECT id FROM subscribers WHERE email = ?").get(email);
+        if (existing) {
+          return Response.json(
+            { success: true, message: "Already subscribed" },
+            { headers: CORS_HEADERS },
+          );
+        }
+
+        db.run("INSERT INTO subscribers (email, source) VALUES (?, ?)", [email, body.source || "homepage"]);
+
+        // Send welcome email asynchronously (do not block the response)
+        sendWelcomeEmail(email);
+
+        return Response.json(
+          { success: true, message: "Thanks for subscribing!" },
+          { headers: CORS_HEADERS },
+        );
+      } catch (e) {
+        return Response.json(
+          { success: false, message: "Server error" },
+          { status: 500, headers: CORS_HEADERS },
+        );
+      }
+    }
+
+    return Response.json({ error: "Not found" }, { status: 404, headers: CORS_HEADERS });
+  },
+});
+
+console.log(\`Stacks API server running on port \${server.port}\`);
+`;if(await e(()=>B.putObject({bucket:G,key:"_deploy/server.ts",body:Buffer.from(p),contentType:"application/typescript"}),"upload server.ts"),$)z.debug("  Uploaded server.ts to S3");let i=["mkdir -p /var/www/api",`aws s3 cp s3://${G}/_deploy/ts-cloud-dist.js /var/www/api/ts-cloud-dist.js`,`aws s3 cp s3://${G}/_deploy/server.ts /var/www/api/server.ts`,LJ([P]),`cat > /etc/systemd/system/stacks-api.service << 'SERVICEFILE'
+[Unit]
+Description=Stacks Bun API Server
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/var/www/api
+ExecStart=/root/.bun/bin/bun server.ts
+Restart=on-failure
+RestartSec=5
+Environment=NODE_ENV=production
+
+[Install]
+WantedBy=multi-user.target
+SERVICEFILE
+systemctl daemon-reload
+systemctl enable stacks-api`,"systemctl reset-failed stacks-api || true","systemctl restart stacks-api",`for i in $(seq 1 20); do curl -fsS http://127.0.0.1:${P}/api/health && break; sleep 1; done`,`curl -fsS http://127.0.0.1:${P}/api/health`,`echo "API server deployed and restarted on port ${P}"`].join(" && "),x=(await w.request({service:"ssm",region:Q,method:"POST",path:"/",headers:{"Content-Type":"application/x-amz-json-1.1","X-Amz-Target":"AmazonSSM.SendCommand"},body:JSON.stringify({InstanceIds:[b],DocumentName:"AWS-RunShellScript",Parameters:{commands:[i]},TimeoutSeconds:120})}))?.Command?.CommandId;if(x){let _=0;while(_<30){await new Promise((L)=>setTimeout(L,3000));try{let L=await w.request({service:"ssm",region:Q,method:"POST",path:"/",headers:{"Content-Type":"application/x-amz-json-1.1","X-Amz-Target":"AmazonSSM.GetCommandInvocation"},body:JSON.stringify({CommandId:x,InstanceId:b})}),I=L?.Status;if(I==="Success"){H.succeed("API server deployed to EC2");break}else if(I==="Failed"||I==="Cancelled"||I==="TimedOut"){let k=L?.StandardErrorContent||"Unknown error";H.fail(`API server deploy failed: ${k}`);break}}catch{}_++}if(_>=30)H.fail("API server deploy timed out waiting for SSM command")}else H.fail("Failed to send SSM command");try{await B.deleteObject({bucket:G,key:"_deploy/ts-cloud-dist.js"}),await B.deleteObject({bucket:G,key:"_deploy/server.ts"})}catch{}}}catch(O){if(H.fail(`API server deployment failed: ${O.message}`),$)z.debug(`Server deploy error: ${O.stack}`)}let M=OJ.email;if(M?.server?.enabled){let O=M?.server?.mode||"server",X=g(`Deploying mail server (${O} mode) to EC2...`);X.start();try{let{S3Client:N,AWSClient:S,EC2Client:q}=await import("@stacksjs/ts-cloud"),{readFileSync:D,existsSync:B}=await import("fs"),{resolve:A,join:w}=await import("path"),{execSync:E}=await import("child_process"),R=new N(Q),G=new S,P=new q(Q),b=`${j}-cloud`,h,c,m,p;try{let{AWSCloudFormationClient:i}=await import("@stacksjs/ts-cloud"),x=await new i(Q).getStackOutputs(b);for(let[_,L]of Object.entries(x)){if(_.endsWith("InstanceId")&&typeof L==="string")h=L;if(_==="FrontendBucketName"&&typeof L==="string")c=L;if(_==="emailBucketName"&&typeof L==="string")m=L}}catch{}if(!m)m=`${j}-production-s3-email`;if(h&&c){let i=[25,80,110,143,465,587,993,995];try{let L=(await P.describeInstances({Filters:[{Name:"instance-id",Values:[h]}]}))?.Reservations?.[0]?.Instances?.[0]?.SecurityGroups;if(L?.[0]?.GroupId)p=L[0].GroupId}catch{if($)z.debug("Could not get security group for instance")}if(p)for(let _ of i)try{if(await P.authorizeSecurityGroupIngress({GroupId:p,IpPermissions:[{IpProtocol:"tcp",FromPort:_,ToPort:_,IpRanges:[{CidrIp:"0.0.0.0/0",Description:`Mail port ${_}`}]}]}),$)z.debug(`  Opened port ${_} on security group ${p}`)}catch(L){if(!L.message?.includes("already exists")){if($)z.debug(`  Port ${_}: ${L.message}`)}}let Z=M.domain||"stacksjs.com",x=M?.server?.subdomain||"mail";if(O==="server"){if($)z.debug("Deploying Zig mail server binary...");try{await fJ()}catch(L){if($)z.debug(`  Pantry mail install failed: ${L.message}`)}let _=await PJ();if(_&&B(_)){if(!await AJ(_))throw X.fail(`Pantry installed ${TJ}, but the ${jJ} binary is not an ELF file.`),Error("Linux binary is not a valid ELF file");let L=D(_);if(await R.putObject({bucket:m,key:"mail-server/smtp-server",body:L,contentType:"application/octet-stream"}),$)z.debug(`  Uploaded Zig binary (${(L.length/1024/1024).toFixed(1)}MB) to S3`);let I=["systemctl stop stacks-mail 2>/dev/null || true","systemctl disable stacks-mail 2>/dev/null || true","systemctl stop stacks-smtp 2>/dev/null || true","systemctl disable stacks-smtp 2>/dev/null || true","systemctl stop smtp-server 2>/dev/null || true","mkdir -p /opt/smtp-server /var/lib/smtp-server /var/log/smtp-server /var/spool/mail /etc/smtp-server /var/lib/smtp-server/backups",`aws s3 cp s3://${m}/mail-server/smtp-server /opt/smtp-server/smtp-server --region ${Q}`,"chmod +x /opt/smtp-server/smtp-server",'file /opt/smtp-server/smtp-server | grep -q ELF || { echo "Binary is not ELF"; exit 1; }',LJ(i),`cat > /etc/smtp-server/smtp-server.env << 'ENVEOF'
+SMTP_PROFILE=production
+SMTP_HOST=0.0.0.0
+SMTP_PORT=25
+SMTP_HOSTNAME=${x}.${Z}
+SMTP_ENABLE_TLS=false
+SMTP_ENABLE_AUTH=true
+SMTP_DB_PATH=/var/lib/smtp-server/smtp.db
+AWS_S3_BUCKET=${m}
+AWS_REGION=${Q}
+SMTP_ENABLE_JSON_LOGGING=true
+SMTP_LOG_LEVEL=info
+SMTP_MAILBOX_PATH=/var/spool/mail
+SMTP_BACKUP_PATH=/var/lib/smtp-server/backups
+SMTP_MAX_CONNECTIONS=1000
+SMTP_MAX_MESSAGE_SIZE=52428800
+SMTP_MAX_RECIPIENTS=100
+SMTP_RATE_LIMIT_PER_IP=100
+SMTP_RATE_LIMIT_PER_USER=200
+SMTP_IO_MODE=epoll
+ENVEOF`,"chmod 600 /etc/smtp-server/smtp-server.env",`cat > /etc/systemd/system/smtp-server.service << 'SVCEOF'
+[Unit]
+Description=Stacks Mail Server (Zig)
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/smtp-server
+EnvironmentFile=/etc/smtp-server/smtp-server.env
+ExecStart=/opt/smtp-server/smtp-server
+Restart=always
+RestartSec=10
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=smtp-server
+
+[Install]
+WantedBy=multi-user.target
+SVCEOF`,"systemctl daemon-reload","systemctl enable smtp-server","systemctl restart smtp-server","sleep 3",'systemctl is-active smtp-server && echo "Mail server is running" || echo "Mail server failed to start"','ss -tlnp | grep -E "(25|143)" || echo "Warning: mail ports not listening yet"'].join(" && "),y=(await G.request({service:"ssm",region:Q,method:"POST",path:"/",headers:{"Content-Type":"application/x-amz-json-1.1","X-Amz-Target":"AmazonSSM.SendCommand"},body:JSON.stringify({InstanceIds:[h],DocumentName:"AWS-RunShellScript",Parameters:{commands:[I]},TimeoutSeconds:300})}))?.Command?.CommandId;if(y){let s=0;while(s<100){await new Promise((l)=>setTimeout(l,3000));try{let l=await G.request({service:"ssm",region:Q,method:"POST",path:"/",headers:{"Content-Type":"application/x-amz-json-1.1","X-Amz-Target":"AmazonSSM.GetCommandInvocation"},body:JSON.stringify({CommandId:y,InstanceId:h})}),r=l?.Status;if(r==="Success"){if(X.succeed("Zig mail server deployed to EC2"),$&&l?.StandardOutputContent)console.log(l.StandardOutputContent);break}else if(r==="Failed"||r==="Cancelled"||r==="TimedOut"){let QJ=l?.StandardErrorContent||l?.StandardOutputContent||"Unknown error";X.fail(`Zig mail server deploy failed: ${QJ.slice(0,500)}`);break}}catch{}s++}if(s>=100)X.fail("Zig mail server deploy timed out")}else X.fail("Failed to send SSM command for mail server")}else X.fail(`No Pantry-provided ${jJ} mail binary found. Release ${TJ}, then run the Pantry binary sync for that package.`)}else{let _=A(V.projectPath("storage/framework/core/cloud/src/imap/smtp-server.ts")),L=w(V.projectPath(),".stacks/tmp/smtp-bundle");E(`bun build ${_} --target=bun --outdir=${L}`,{stdio:"pipe"});let I=w(L,"smtp-server.js");if(B(I)){let k=D(I),y=M.mailboxes||["chris","blake","glenn"],s=y.map((o)=>{let u=`MAIL_PASSWORD_${o.toUpperCase()}`;return`  "${o}": { password: process.env["${u}"] || "", email: "${o}@${Z}" }`}).join(`,
+`),l=`import { SmtpServer } from "./smtp-server.js";
+import * as fs from "fs";
+const domain = "${Z}";
+const users = { ${s} };
+const certDir = \`/etc/letsencrypt/live/mail.\${domain}\`;
+let tlsConfig = undefined;
+if (fs.existsSync(\`\${certDir}/privkey.pem\`)) {
+  tlsConfig = { key: \`\${certDir}/privkey.pem\`, cert: \`\${certDir}/fullchain.pem\` };
+}
+const server = new SmtpServer({ port: 587, tlsPort: 465, host: "0.0.0.0", domain, users, tls: tlsConfig, sentBucket: "${j}-production-email", sentPrefix: "sent/" });
+await server.start();
+`;await R.putObject({bucket:c,key:"_deploy/smtp-server.js",body:k,contentType:"application/javascript"}),await R.putObject({bucket:c,key:"_deploy/smtp-entry.ts",body:Buffer.from(l),contentType:"application/typescript"});let r=y.map((o)=>{let u=`MAIL_PASSWORD_${o.toUpperCase()}`;return`Environment=${u}=${F.env[u]||""}`}).join(`
+`),QJ=["mkdir -p /var/www/smtp",`aws s3 cp s3://${c}/_deploy/smtp-server.js /var/www/smtp/smtp-server.js`,`aws s3 cp s3://${c}/_deploy/smtp-entry.ts /var/www/smtp/smtp-entry.ts`,LJ(i),"if ! command -v certbot &> /dev/null; then dnf install -y certbot || yum install -y certbot || apt-get install -y certbot || true; fi",`if [ ! -d /etc/letsencrypt/live/mail.${Z} ]; then certbot certonly --standalone --non-interactive --agree-tos --email admin@${Z} -d mail.${Z} --http-01-port 80 || echo "Certbot failed"; fi`,`cat > /etc/systemd/system/stacks-smtp.service << 'SERVICEFILE'
+[Unit]
+Description=Stacks SMTP Proxy Server
+After=network.target
+[Service]
+Type=simple
+WorkingDirectory=/var/www/smtp
+ExecStart=/root/.bun/bin/bun smtp-entry.ts
+Restart=on-failure
+RestartSec=5
+Environment=NODE_ENV=production
+Environment=AWS_REGION=${Q}
+${r}
+[Install]
+WantedBy=multi-user.target
+SERVICEFILE`,"systemctl daemon-reload","systemctl enable stacks-smtp","systemctl restart stacks-smtp"].join(" && "),ZJ=(await G.request({service:"ssm",region:Q,method:"POST",path:"/",headers:{"Content-Type":"application/x-amz-json-1.1","X-Amz-Target":"AmazonSSM.SendCommand"},body:JSON.stringify({InstanceIds:[h],DocumentName:"AWS-RunShellScript",Parameters:{commands:[QJ]},TimeoutSeconds:180})}))?.Command?.CommandId;if(ZJ){let o=0;while(o<60){await new Promise((u)=>setTimeout(u,3000));try{let u=await G.request({service:"ssm",region:Q,method:"POST",path:"/",headers:{"Content-Type":"application/x-amz-json-1.1","X-Amz-Target":"AmazonSSM.GetCommandInvocation"},body:JSON.stringify({CommandId:ZJ,InstanceId:h})}),qJ=u?.Status;if(qJ==="Success"){X.succeed("SMTP proxy deployed to EC2");break}else if(qJ==="Failed"||qJ==="Cancelled"||qJ==="TimedOut"){X.fail(`SMTP proxy deploy failed: ${u?.StandardErrorContent||"Unknown"}`);break}}catch{}o++}if(o>=60)X.fail("SMTP proxy deploy timed out")}else X.fail("Failed to send SSM command for SMTP proxy");try{await R.deleteObject({bucket:c,key:"_deploy/smtp-server.js"}),await R.deleteObject({bucket:c,key:"_deploy/smtp-entry.ts"})}catch{}}else if(X.stop(),$)z.debug("SMTP server bundle not found, skipping")}}else if(X.stop(),$)z.debug("No EC2 instance or bucket found, skipping mail server deploy")}catch(N){if(X.fail(`Mail server deployment failed: ${N.message}`),$)z.debug(`Mail server deploy error: ${N.stack}`)}}}let v=g("Deploying frontend to S3...");v.start();try{let{S3Client:Y,CloudFormationClient:H}=await import("@stacksjs/ts-cloud"),{existsSync:M,readdirSync:O,statSync:X,readFileSync:N,copyFileSync:S,mkdirSync:q,rmSync:D,writeFileSync:B}=await import("fs"),{join:A}=await import("path"),w=new Y(Q),E=new H(Q),R=`${j}-cloud`,G=await E.getStackOutputs(R),P=G.FrontendBucketName;if(!P)v.stop(),console.log("\u26A0 Frontend bucket not found in stack outputs (add storage.public to infrastructure config)");else{let b=V.storagePath("framework/frontend-dist");if(M(b))D(b,{recursive:!0});q(b,{recursive:!0}),q(A(b,"assets"),{recursive:!0});let h=V.resourcesPath("views/index.stx");if(M(h)){let Z=N(h,"utf-8"),x=Z.match(/<script server>([\s\S]*?)<\/script>/),_={};if(x){let I=x[1]??"";try{let k=[...I.matchAll(/(?:const|let|var)\s+(\w+)\s*=/g)].map((s)=>s[1]).filter((s)=>Boolean(s));_=Function(`${I}
+return { ${k.join(", ")} }`)()}catch(k){if($)z.debug(`  Server block evaluation failed: ${k}, falling back to regex`);let y=I.matchAll(/const\s+(\w+)\s*=\s*(?:'([^']*)'|"([^"]*)"|([\d.]+))/g);for(let s of y){let l=s[1];if(l)_[l]=s[2]??s[3]??s[4]}}Z=Z.replace(/<script server>[\s\S]*?<\/script>\s*/,"")}Z=Z.replace(/\{\{\s*(\w+)\s*\}\}/g,(I,k)=>{let y=_[k];return y!==void 0&&y!==null?String(y):""});let L=/@foreach\s*\((\w+)\s+as\s+(\w+)\)([\s\S]*?)@endforeach/g;if(Z=Z.replace(L,(I,k,y,s)=>{let l=_[k];if(!Array.isArray(l)||l.length===0)return"";let r="";for(let QJ of l){let $J=s;$J=$J.replace(new RegExp(`\\{\\{\\s*${y}\\.(\\w+)\\s*\\}\\}`,"g"),(ZJ,o)=>{let u=QJ[o];return u!==void 0&&u!==null?String(u):""}),$J=$J.replace(new RegExp(`\\{!!\\s*${y}\\.(\\w+)\\s*!!\\}`,"g"),(ZJ,o)=>{let u=QJ[o];return u!==void 0&&u!==null?String(u):""}),r+=$J}return r}),Z=Z.replace(/^\s*@extends\([^)]+\)\s*$/gm,"").replace(/^\s*@include\([^)]+\)\s*$/gm,"").replace(/^\s*@section\('title',\s*['"][^'"]*['"]\)\s*$/gm,"").replace(/^\s*@section\('(?:content|footer)'\)\s*$/gm,"").replace(/^\s*@endsection\s*$/gm,""),/data-stx-scope|@model|@show|@text|@class|@style|@bind:|@if=|@for=/.test(Z)){let I=await hJ();if(I){let k=Z.match(/<body[^>]*>/);if(k){let y=(Z.indexOf(k[0])??0)+k[0].length;Z=Z.slice(0,y)+`
+`+I+Z.slice(y)}else Z=I+`
+`+Z;if($)z.debug("  Injected STX signals runtime for client-side reactivity")}}if(B(A(b,"index.html"),Z),$)z.debug("  Built index.html from STX template")}else B(A(b,"index.html"),`<!DOCTYPE html>
+<html><head><title>Stacks</title></head>
+<body><h1>Welcome to Stacks</h1></body></html>`);let c=V.resourcesPath("assets");if(M(c)){let Z=(x,_)=>{if(!M(_))q(_,{recursive:!0});for(let L of O(x)){let I=A(x,L),k=A(_,L);if(X(I).isDirectory())Z(I,k);else S(I,k)}};if(Z(c,A(b,"assets")),$)z.debug("  Copied assets directory")}await(async(Z,x="")=>{await XJ(Z,async(_,L)=>{let I=N(_),k=VJ(_),y=L==="index.html"||L.endsWith("/index.html")?"no-cache, no-store, must-revalidate":"public, max-age=31536000, immutable";if(await e(()=>w.putObject({bucket:P,key:L,body:I,contentType:k,cacheControl:y}),`upload ${L}`),$)z.debug(`  Uploaded: ${L}`)})})(b);let p=V.projectPath("bootstrap");if(M(p)){let Z=N(p);if(await e(()=>w.putObject({bucket:P,key:"install",body:Z,contentType:"text/plain",cacheControl:"no-cache, no-store, must-revalidate"}),"upload bootstrap install script"),$)z.debug("  Uploaded bootstrap install script")}let i=G.publicCloudFrontDistributionId||G.CloudFrontDistributionId;if(i){if($)z.debug("  Invalidating CloudFront cache...");let{AWSClient:Z}=await import("@stacksjs/ts-cloud");await new Z().request({service:"cloudfront",region:"us-east-1",method:"POST",path:`/2020-05-31/distribution/${i}/invalidation`,headers:{"Content-Type":"application/xml"},body:`<?xml version="1.0" encoding="UTF-8"?>
+<InvalidationBatch xmlns="http://cloudfront.amazonaws.com/doc/2020-05-31/">
+  <CallerReference>${Date.now()}</CallerReference>
+  <Paths>
+    <Quantity>1</Quantity>
+    <Items>
+      <Path>/*</Path>
+    </Items>
+  </Paths>
+</InvalidationBatch>`})}v.succeed(`Frontend deployed to S3 (${P})`)}}catch(Y){if(v.fail(`Frontend deployment failed: ${Y.message}`),$)z.debug(`Frontend error: ${Y.stack}`)}let f=V.projectPath("dist/docs/.bunpress"),{existsSync:KJ}=await import("fs");if(KJ(f)){let Y=g("Deploying documentation to S3...");Y.start();try{let{S3Client:H,CloudFormationClient:M}=await import("@stacksjs/ts-cloud"),{readFileSync:O}=await import("fs"),X=new H(Q),N=new M(Q),S=`${j}-cloud`,q=await N.getStackOutputs(S),D=q.DocsBucketName;if(!D)Y.stop(),console.log("\u26A0 Docs bucket not found in stack outputs (infrastructure may not be updated yet)");else{await(async(w,E="")=>{await XJ(w,async(R,G)=>{let P=O(R),b=VJ(R),h=G.endsWith(".html")?"no-cache, no-store, must-revalidate":"public, max-age=31536000, immutable";if(await e(()=>X.putObject({bucket:D,key:G,body:P,contentType:b,cacheControl:h}),`upload docs ${G}`),$)z.debug(`  Uploaded docs: ${G}`)},"",[".DS_Store",".bunpress"])})(f);let A=q.docsCloudFrontDistributionId||q.publicCloudFrontDistributionId||q.CloudFrontDistributionId;if(A){if($)z.debug("  Invalidating CloudFront cache for docs...");let{AWSClient:w}=await import("@stacksjs/ts-cloud"),E=new w,R=q.docsCloudFrontDistributionId?["/*"]:["/docs","/docs/*"];await E.request({service:"cloudfront",region:"us-east-1",method:"POST",path:`/2020-05-31/distribution/${A}/invalidation`,headers:{"Content-Type":"application/xml"},body:`<?xml version="1.0" encoding="UTF-8"?>
+<InvalidationBatch xmlns="http://cloudfront.amazonaws.com/doc/2020-05-31/">
+  <CallerReference>docs-${Date.now()}</CallerReference>
+  <Paths>
+    <Quantity>${R.length}</Quantity>
+    <Items>
+      ${R.map((G)=>`<Path>${G}</Path>`).join(`
+      `)}
+    </Items>
+  </Paths>
+</InvalidationBatch>`})}Y.succeed(`Documentation deployed to S3 (${D})`)}}catch(H){if(Y.fail(`Documentation deployment failed: ${H.message}`),$)z.debug(`Docs deploy error: ${H.stack}`)}}else if($)z.debug("No docs build found at dist/docs, skipping docs deployment");let zJ=V.projectPath("dist/blog"),{existsSync:UJ}=await import("fs");if(UJ(zJ)){let Y=g("Deploying blog to S3...");Y.start();try{let{S3Client:H,CloudFormationClient:M}=await import("@stacksjs/ts-cloud"),{readFileSync:O}=await import("fs"),X=new H(Q),N=new M(Q),S=`${j}-cloud`,q=await N.getStackOutputs(S),D=q.BlogBucketName;if(!D)Y.stop(),console.log("\u26A0 Blog bucket not found in stack outputs");else{await XJ(zJ,async(A,w)=>{let E=O(A),R=VJ(A),G=w.endsWith(".html")?"no-cache, no-store, must-revalidate":"public, max-age=31536000, immutable";if(await e(()=>X.putObject({bucket:D,key:w,body:E,contentType:R,cacheControl:G}),`upload blog ${w}`),$)z.debug(`  Uploaded blog: ${w}`)},"",[".DS_Store"]);let B=q.blogCloudFrontDistributionId||q.publicCloudFrontDistributionId||q.CloudFrontDistributionId;if(B){if($)z.debug("  Invalidating CloudFront cache for blog...");let{AWSClient:A}=await import("@stacksjs/ts-cloud"),w=new A,E=q.blogCloudFrontDistributionId?["/*"]:["/blog","/blog/*"];await w.request({service:"cloudfront",region:"us-east-1",method:"POST",path:`/2020-05-31/distribution/${B}/invalidation`,headers:{"Content-Type":"application/xml"},body:`<?xml version="1.0" encoding="UTF-8"?>
+<InvalidationBatch xmlns="http://cloudfront.amazonaws.com/doc/2020-05-31/">
+  <CallerReference>blog-${Date.now()}</CallerReference>
+  <Paths>
+    <Quantity>${E.length}</Quantity>
+    <Items>
+      ${E.map((R)=>`<Path>${R}</Path>`).join(`
+      `)}
+    </Items>
+  </Paths>
+</InvalidationBatch>`})}Y.succeed(`Blog deployed to S3 (${D})`)}}catch(H){if(Y.fail(`Blog deployment failed: ${H.message}`),$)z.debug(`Blog deploy error: ${H.stack}`)}}else if($)z.debug("No blog build found at dist/blog, skipping blog deployment");let n=g("Configuring 404 error page...");n.start();try{let{S3Client:Y,CloudFormationClient:H,AWSClient:M}=await import("@stacksjs/ts-cloud"),{existsSync:O,readFileSync:X}=await import("fs"),N=new Y(Q),S=new H(Q),q=new M,D=`${j}-cloud`,B=await S.getStackOutputs(D),A=B.FrontendBucketName,w=B.DocsBucketName,E=B.publicCloudFrontDistributionId||B.CloudFrontDistributionId,R=V.projectPath("dist/docs/.bunpress/404.html"),G;if(O(R)){if(G=X(R,"utf-8"),$)z.debug("  Using BunPress-generated 404.html")}else if(G=`<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>404 - Page Not Found</title>
+  <meta name="robots" content="noindex">
+  <style>
+    :root {
+      --vp-c-bg: #ffffff;
+      --vp-c-divider: #e2e2e3;
+      --vp-c-text-1: rgba(60, 60, 67);
+      --vp-c-text-2: rgba(60, 60, 67, 0.78);
+      --vp-c-brand-1: #3451b2;
+      --vp-c-brand-2: #3a5ccc;
+    }
+    @media (prefers-color-scheme: dark) {
+      :root {
+        --vp-c-bg: #1b1b1f;
+        --vp-c-divider: #2e2e32;
+        --vp-c-text-1: rgba(255, 255, 245, 0.86);
+        --vp-c-text-2: rgba(235, 235, 245, 0.6);
+        --vp-c-brand-1: #a8b1ff;
+        --vp-c-brand-2: #5c73e7;
+      }
+    }
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body { min-height: 100vh; background: var(--vp-c-bg); color: var(--vp-c-text-1); font-family: Inter, ui-sans-serif, system-ui, sans-serif; }
+    .NotFound { padding: 96px 32px 168px; text-align: center; min-height: 100vh; display: flex; flex-direction: column; justify-content: center; align-items: center; }
+    .code { font-size: 64px; font-weight: 600; line-height: 64px; }
+    .title { padding-top: 12px; letter-spacing: 2px; font-size: 20px; font-weight: 700; }
+    .divider { margin: 24px auto 18px; width: 64px; height: 1px; background: var(--vp-c-divider); }
+    .quote { max-width: 256px; font-size: 14px; font-weight: 500; color: var(--vp-c-text-2); }
+    .action { padding-top: 20px; }
+    .link { display: inline-block; border: 1px solid var(--vp-c-brand-1); border-radius: 16px; padding: 3px 16px; font-size: 14px; font-weight: 500; color: var(--vp-c-brand-1); text-decoration: none; transition: border-color 0.25s, color 0.25s; }
+    .link:hover { border-color: var(--vp-c-brand-2); color: var(--vp-c-brand-2); }
+  </style>
+</head>
+<body>
+  <div class="NotFound">
+    <p class="code">404</p>
+    <h1 class="title">PAGE NOT FOUND</h1>
+    <div class="divider"></div>
+    <blockquote class="quote">But if you don't change your direction, and if you keep looking, you may end up where you are heading.</blockquote>
+    <div class="action"><a class="link" href="/docs/">Take me home</a></div>
+  </div>
+</body>
+</html>`,$)z.debug("  Using default 404.html template");if(A){if(await e(()=>N.putObject({bucket:A,key:"404.html",body:G,contentType:"text/html",cacheControl:"no-cache, no-store, must-revalidate"}),"upload 404.html to frontend bucket"),$)z.debug(`  Uploaded 404.html to frontend bucket: ${A}`)}if(w){if(await e(()=>N.putObject({bucket:w,key:"404.html",body:G,contentType:"text/html",cacheControl:"no-cache, no-store, must-revalidate"}),"upload 404.html to docs bucket"),$)z.debug(`  Uploaded 404.html to docs bucket: ${w}`)}if(E){if($)z.debug("  Configuring CloudFront custom error responses...");let P=await q.request({service:"cloudfront",region:"us-east-1",method:"GET",path:`/2020-05-31/distribution/${E}/config`,returnHeaders:!0}),b=P.headers?.etag||P.headers?.ETag||"",h=P.body?.DistributionConfig||P.DistributionConfig;if(h&&b){if(!((h.CustomErrorResponses?.Quantity||0)>0&&h.CustomErrorResponses?.Items?.CustomErrorResponse?.some?.((p)=>p.ErrorCode===404&&p.ResponsePagePath==="/404.html"))){h.CustomErrorResponses={Quantity:2,Items:{CustomErrorResponse:[{ErrorCode:403,ResponsePagePath:"/404.html",ResponseCode:404,ErrorCachingMinTTL:10},{ErrorCode:404,ResponsePagePath:"/404.html",ResponseCode:404,ErrorCachingMinTTL:10}]}};let p=(Z,x,_="")=>{if(x===null||x===void 0)return"";if(typeof x==="boolean")return`${_}<${Z}>${x}</${Z}>
+`;if(typeof x==="number"||typeof x==="string")return`${_}<${Z}>${x}</${Z}>
+`;if(Array.isArray(x))return x.map((L)=>p(Z,L,_)).join("");if(typeof x==="object"){if(Z.startsWith("@_")||Z==="?xml")return"";let L="";for(let[I,k]of Object.entries(x))if(!I.startsWith("@_")&&I!=="#text")L+=p(I,k,`${_}  `);if(x["#text"]!==void 0)return`${_}<${Z}>${x["#text"]}</${Z}>
+`;return`${_}<${Z}>
+${L}${_}</${Z}>
+`}return""},i=`<?xml version="1.0" encoding="UTF-8"?>
+<DistributionConfig xmlns="http://cloudfront.amazonaws.com/doc/2020-05-31/">
+${Object.entries(h).filter(([Z])=>!Z.startsWith("@_")).map(([Z,x])=>p(Z,x,"  ")).join("")}</DistributionConfig>
+`;if(await q.request({service:"cloudfront",region:"us-east-1",method:"PUT",path:`/2020-05-31/distribution/${E}/config`,body:i,headers:{"Content-Type":"application/xml","If-Match":b}}),$)z.debug("  CloudFront custom error responses configured")}else if($)z.debug("  CloudFront custom error responses already configured")}}n.succeed("404 error page configured")}catch(Y){if(n.stop(),console.log(`\u26A0 404 page configuration skipped: ${Y.message}`),$)z.debug(`Error page config error: ${Y.stack}`)}try{let Y=await import(V.projectPath("config/cloud")),H=Y?.tsCloud?.infrastructure?.tunnel;if(H?.enabled){let M=H.domain||"";if(!M||M==="localtunnel.dev"||M==="api.localtunnel.dev")console.log("\u2139 Tunnel: Using shared localtunnel.dev (no custom tunnel deployment needed)");else{let O=g(`Deploying tunnel server to ${M}...`);O.start();try{let{deployTunnelServer:X}=await import("@stacksjs/tunnel");await X({domain:M,region:H.region||Y?.tsCloud?.project?.region||"us-east-1",instanceType:H.instanceType,prefix:H.prefix,enableSsl:H.ssl?.enabled,porkbunApiKey:H.ssl?.porkbunApiKey,porkbunSecretKey:H.ssl?.porkbunSecretKey,verbose:$}),O.succeed(`Tunnel server deployed to ${M}`)}catch(X){if(O.stop(),console.log(`\u26A0 Tunnel deployment skipped: ${X.message}`),$)z.debug(`Tunnel deploy error: ${X.stack}`)}}}}catch{}let t=g("Reconciling DNS records...");t.start();try{let{Route53Client:Y,CloudFormationClient:H}=await import("@stacksjs/ts-cloud"),M=new H(Q),O=`${j}-cloud`,X=await M.getStackOutputs(O),N=await import(V.projectPath("config/cloud")),S=N?.tsCloud?.infrastructure?.dns?.hostedZoneId,q=N?.tsCloud?.infrastructure?.dns?.domain||"stacksjs.com";if(S){let D=new Y(Q),B="Z2FDTNDATAQYW2",A=[{domain:q,cfDomain:X.publicCloudFrontDomain},{domain:`www.${q}`,cfDomain:X.publicCloudFrontDomain},{domain:`docs.${q}`,cfDomain:X.docsCloudFrontDomain},{domain:`blog.${q}`,cfDomain:X.blogCloudFrontDomain}],w=0;for(let{domain:E,cfDomain:R}of A){if(!R)continue;try{if(!((await D.listResourceRecordSets({HostedZoneId:S,StartRecordName:E,StartRecordType:"A",MaxItems:"1"}))?.ResourceRecordSets||[]).some((h)=>h.Name===`${E}.`&&h.Type==="A")){if(await D.changeResourceRecordSets({HostedZoneId:S,ChangeBatch:{Changes:[{Action:"UPSERT",ResourceRecordSet:{Name:E,Type:"A",AliasTarget:{HostedZoneId:"Z2FDTNDATAQYW2",DNSName:R,EvaluateTargetHealth:!1}}},{Action:"UPSERT",ResourceRecordSet:{Name:E,Type:"AAAA",AliasTarget:{HostedZoneId:"Z2FDTNDATAQYW2",DNSName:R,EvaluateTargetHealth:!1}}}]}}),w++,$)z.debug(`  Created DNS records: ${E} -> ${R}`)}else if($)z.debug(`  DNS record exists: ${E}`)}catch(G){if($)z.debug(`  DNS check/create failed for ${E}: ${G.message}`)}}if(w>0)t.succeed(`DNS records reconciled (${w} created)`);else t.succeed("DNS records verified")}else if(t.stop(),$)z.debug("No hosted zone ID configured, skipping DNS reconciliation")}catch(Y){if(t.stop(),console.log(`\u26A0 DNS reconciliation skipped: ${Y.message}`),$)z.debug(`DNS error: ${Y.stack}`)}console.log(""),z.success("Deployment completed successfully!")}catch(J){z.error("Deployment failed:",J),F.exit(NJ.FatalError)}

package/dist/src/dev/api.d.ts

@@ -0,0 +1 @@
+

package/dist/src/dev/api.js

@@ -0,0 +1,6 @@
+// @bun
+import{gb as w}from"../../chunk-96b7fcmd.js";import{existsSync as X}from"fs";import N from"process";import{parseOptions as D}from"@stacksjs/cli";import{config as G,overridesReady as O}from"@stacksjs/config";import{path as Y}from"@stacksjs/path";import{cors as W,route as J}from"@stacksjs/router";import{generateAutoImportFiles as Q,injectGlobalAutoImports as T}from"@stacksjs/server";var v=D();await O;var M=Number(N.env.PORT_API)||G.ports?.api||3008,U=Y.storagePath("framework/auto-imports/models.ts");if(!X(U))await Q();await T();try{let z=Y.appPath("Listener.ts");if(X(z)){let B=await import(z);if(typeof B.handleEvents==="function")await B.handleEvents()}}catch(z){let{log:B}=await import("@stacksjs/cli");B.warn(`[api:dev] failed to bootstrap event listeners \u2014 dispatched events will be ignored: ${z.message}`)}J.use(W().handle.bind(W()));var F=/^[a-zA-Z0-9._-]{8,128}$/;J.use(async(z,B)=>{let K=z?.headers?.get?.("x-request-id")||z?.headers?.get?.("X-Request-ID")||"",L=typeof K==="string"&&F.test(K)?K:crypto.randomUUID();z._requestId=L,z._startNs=N.hrtime.bigint();let C=await B();if(C&&C.status===404&&(C.headers.get("content-type")||"").includes("json"))try{let H=await C.clone().json();if(H&&(H.message==="Not Found"||H.error==="Not Found")){let Z=new URL(z.url),$={...H,path:Z.pathname,method:z.method,request_id:L},V=new Headers(C.headers);return V.set("X-Request-ID",L),new Response(JSON.stringify($),{status:404,headers:V})}}catch{}return C});await J.importRoutes();try{await J.serve({port:M,hostname:"127.0.0.1"}),console.log(`
+  \u279C  API server ready: http://localhost:${M}
+`)}catch(z){if((z?.code||z?.errno)==="EADDRINUSE"||String(z?.message||"").includes("EADDRINUSE"))console.error(`
+[dev/api] Port ${M} is already in use. Kill the other process and re-run \`./buddy dev\`, or set PORT_API to another port.
+`),N.exit(1);throw z}

package/dist/src/dev/components.d.ts

@@ -0,0 +1 @@
+

package/dist/src/dev/components.js

@@ -0,0 +1,2 @@
+// @bun
+import{parseOptions as f,runCommand as q}from"@stacksjs/cli";import{libsPath as w}from"@stacksjs/path";var x=f();await q("bun run dev",{...x,cwd:w("components/vue")});

package/dist/src/dev/dashboard-globals.d.ts

@@ -0,0 +1,4 @@
+export declare function hoistDashboardGlobals(opts?: HoistOptions): Promise<void>;
+declare interface HoistOptions {
+  verbose?: boolean
+}

package/dist/src/dev/dashboard-globals.js

@@ -0,0 +1,3 @@
+// @bun
+import"../../chunk-96b7fcmd.js";import{existsSync as $,readdirSync as U,statSync as k}from"fs";import{join as V}from"path";import w from"process";import{projectPath as W,storagePath as D}from"@stacksjs/path";var H=[D("framework/defaults/resources/functions/dashboard"),W("resources/functions"),W("app/Helpers")];async function F(q={}){let B=globalThis,C=[],G=0;for(let J of H){if(!$(J))continue;let K;try{K=U(J)}catch{continue}for(let A of K){let z=V(J,A),M;try{M=k(z)}catch{continue}if(M.isDirectory()){let O;try{O=U(z)}catch{continue}for(let Q of O){if(!X(Q))continue;let Z=V(z,Q),T=await Y(Z,B,q.verbose);G+=T.added,C.push(...T.collisions)}continue}if(!X(A))continue;let N=await Y(z,B,q.verbose);G+=N.added,C.push(...N.collisions)}}if(q.verbose)w.stdout.write(`[dashboard] hoisted ${G} helper globals`+(C.length>0?` (skipped ${C.length} collisions: ${C.slice(0,5).join(", ")}\u2026)`:"")+`
+`)}function X(q){if(!/\.(?:ts|tsx|js|mjs)$/.test(q))return!1;if(q.startsWith("_"))return!1;if(q.endsWith(".test.ts")||q.endsWith(".spec.ts"))return!1;if(q.endsWith(".d.ts"))return!1;return!0}async function Y(q,B,C){let G;try{G=await import(q)}catch{return{added:0,collisions:[]}}let J=[],K=0;for(let[A,z]of Object.entries(G)){if(A==="default"||A.startsWith("_"))continue;if(typeof z==="function"||z&&typeof z==="object"){if(B[A]===void 0)B[A]=z,K++;else if(B[A]!==z)J.push(A)}}return{added:K,collisions:J}}export{F as hoistDashboardGlobals};

package/dist/src/dev/dashboard-utils.d.ts

@@ -0,0 +1,126 @@
+/** Convert PascalCase model name to kebab-case ID */
+export declare function modelNameToId(name: string): string;
+/** Get the icon for a model name, falling back to the default */
+export declare function getModelIcon(name: string): string;
+/** Scan a directory for model files and add them to the models array */
+export declare function scanModelsDir(dir: string, seenNames: Set<string>, models: DiscoveredModel[], defaultCategory?: ModelCategory): Promise<void>;
+/** Discover models from both user and default directories */
+export declare function discoverModels(userModelsPath: string, defaultModelsPath: string): Promise<DiscoveredModel[]>;
+/** Build the manifest array for discovered models */
+export declare function buildManifest(models: DiscoveredModel[]): Array<{ id: string, name: string, icon: string, hasDedicatedPage: boolean, category: ModelCategory }>;
+/** Check if a port is available by attempting to listen on it */
+export declare function isPortAvailable(port: number): Promise<boolean>;
+/** Find an available port starting from the preferred port */
+export declare function findAvailablePort(preferred: number, maxAttempts?: number): Promise<number>;
+/** Wait for STX server to accept connections */
+export declare function waitForServer(port: number, maxWait?: number): Promise<boolean>;
+/** Build sidebar config for native sidebar navigation */
+export declare function buildSidebarConfig(baseRoute: string, discoveredModels: DiscoveredModel[], toggles?: DashboardSectionToggles): void;
+/**
+ * Build the URL the Craft window opens to. The `native-sidebar=1` query
+ * param signals the layout that Craft is rendering the sidebar natively,
+ * so the layout can suppress its own HTML sidebar and let the macOS
+ * NSOutlineView own that 240px column.
+ */
+export declare function buildDashboardUrl(port: number): string;
+// Model name to icon mapping (SF Symbols)
+export declare const iconMap: {
+  user: 'person.fill';
+  team: 'person.2.fill';
+  subscriber: 'envelope.open.fill';
+  subscriberemail: 'envelope.fill';
+  post: 'doc.text.fill';
+  page: 'doc.fill';
+  product: 'cube.box.fill';
+  productvariant: 'cube.fill';
+  productunit: 'scalemass.fill';
+  order: 'list.clipboard.fill';
+  orderitem: 'list.bullet.clipboard.fill';
+  customer: 'person.crop.circle.fill';
+  payment: 'creditcard.fill';
+  paymentmethod: 'creditcard.and.123';
+  paymentproduct: 'creditcard.fill';
+  paymenttransaction: 'creditcard.fill';
+  category: 'tag.fill';
+  tag: 'tag';
+  comment: 'bubble.left.fill';
+  author: 'person.text.rectangle.fill';
+  notification: 'bell.fill';
+  job: 'briefcase.fill';
+  log: 'list.bullet.rectangle.portrait.fill';
+  campaign: 'megaphone.fill';
+  review: 'star.fill';
+  coupon: 'ticket.fill';
+  giftcard: 'giftcard.fill';
+  cart: 'cart.fill';
+  cartitem: 'cart.badge.plus';
+  taxrate: 'percent';
+  transaction: 'arrow.left.arrow.right.circle.fill';
+  subscription: 'repeat.circle.fill';
+  emaillist: 'envelope.badge.person.crop';
+  socialpost: 'bubble.left.and.bubble.right.fill';
+  manufacturer: 'building.2.fill';
+  shippingmethod: 'shippingbox.fill';
+  shippingzone: 'map.fill';
+  shippingrate: 'dollarsign.circle.fill';
+  deliveryroute: 'map.fill';
+  driver: 'car.fill';
+  digitaldelivery: 'arrow.down.doc.fill';
+  licensekey: 'key.fill';
+  loyaltypoint: 'star.circle.fill';
+  loyaltyreward: 'gift.fill';
+  printdevice: 'printer.fill';
+  receipt: 'doc.text.fill';
+  waitlistproduct: 'clock.fill';
+  waitlistrestaurant: 'clock.badge.checkmark.fill';
+  websocket: 'antenna.radiowaves.left.and.right';
+  default: 'tablecells.fill'
+};
+// Models excluded from sidebar (already have dedicated pages)
+export declare const excludeModels: Set<any>;
+// Models that have dedicated dashboard pages
+export declare const dedicatedPages: Set<any>;
+export declare interface DiscoveredModel {
+  name: string
+  icon: string
+  id: string
+  category?: ModelCategory
+}
+/**
+ * Per-section toggles. Read from the project's `config/dashboard.ts` (when
+ * present) and passed through buildSidebarConfig / buildSidebarNavHtml so the
+ * commerce / content / marketing sections collapse out of the sidebar entirely
+ * for projects that don't ship those features. Anything not specified is on.
+ *
+ * `data` is a per-row toggle map (instead of a single boolean) because the
+ * Data section is always relevant — projects just want to hide individual
+ * basic rows like Subscribers when they're not running a newsletter, while
+ * still seeing their userland models.
+ */
+export declare interface DashboardSectionToggles {
+  commerce?: boolean
+  content?: boolean
+  marketing?: boolean
+  analytics?: boolean
+  management?: boolean
+  utilities?: boolean
+  library?: boolean
+  data?: {
+    dashboard?: boolean
+    activity?: boolean
+    users?: boolean
+    teams?: boolean
+    subscribers?: boolean
+    allModels?: boolean
+  }
+}
+/**
+ * Sidebar category each discovered model gets surfaced under.
+ * - `userland`: model in the project's `app/Models/` (always shown in Data)
+ * - `data`: framework root-level model that belongs in Data
+ * - `commerce`: model in framework `commerce/` subdir or commerce-coded root model
+ * - `content`: model in framework `Content/` subdir or content-coded root model
+ * - `marketing`: outreach / subscriber-list models grouped under Marketing
+ * - `system`: framework-internal models (jobs, deployments, requests…) → App
+ */
+export type ModelCategory = 'userland' | 'data' | 'commerce' | 'content' | 'marketing' | 'system';

package/dist/src/dev/dashboard-utils.js

@@ -0,0 +1,2 @@
+// @bun
+import{Aa as i,Ba as j,Ca as k,Da as l,Ea as m,sa as a,ta as b,ua as c,va as d,wa as e,xa as f,ya as g,za as h}from"../../chunk-kzhgexj4.js";import"../../chunk-96b7fcmd.js";export{k as waitForServer,f as scanModelsDir,d as modelNameToId,i as isPortAvailable,a as iconMap,e as getModelIcon,j as findAvailablePort,b as excludeModels,g as discoverModels,c as dedicatedPages,l as buildSidebarConfig,h as buildManifest,m as buildDashboardUrl};

package/dist/src/dev/dashboard.d.ts

@@ -0,0 +1,12 @@
+// Load dashboard section toggles from `config/dashboard.ts` if present.
+// Falls back to "everything enabled" when the file is missing or fails to
+// parse, so a fresh project (no dashboard config) still gets the full
+// sidebar. Shape mirrors `DashboardSectionToggles` in dashboard-utils.ts.
+declare type DataRowToggles = {
+  dashboard: boolean
+  activity: boolean
+  users: boolean
+  teams: boolean
+  subscribers: boolean
+  allModels: boolean
+}

package/dist/src/dev/dashboard.js

@@ -0,0 +1,8 @@
+// @bun
+import{Ba as t,Ca as r,Da as o,ya as l,za as d}from"../../chunk-kzhgexj4.js";import{gb as U}from"../../chunk-96b7fcmd.js";import V from"process";import{existsSync as p,readFileSync as $E,writeFileSync as a}from"fs";import{bold as J,cyan as g,dim as _,green as f}from"@stacksjs/cli";import{projectPath as I,storagePath as S}from"@stacksjs/path";var c=V.argv.indexOf("--verbose"),A=c!==-1&&V.argv[c+1]!=="false",zE=Bun.nanoseconds(),s=console.log,GE=console.warn,h=[];console.log=(...X)=>{h.push(X.map(String).join(" "))};console.warn=(...X)=>{h.push(X.map(String).join(" "))};var q=S("framework/defaults/views/dashboard"),NE=I("resources/views/dashboard"),y=Number(V.env.PORT_ADMIN)||3002,R=await t(y),P=V.env.APP_URL||"",OE=P!==""&&P!=="localhost"&&!P.includes("localhost:"),n=OE?P.replace(/^https?:\/\//,""):null,C=n?`dashboard.${n}`:null,e=`${V.env.HOME}/.stacks/ssl`;function EE(){console.log=s,console.warn=(...X)=>{let N=X.map(String).join(" ");if(N.includes("[STX] DOM API violation")||N.includes("unsafe expression"))return;GE(...X)}}function F(X,N={}){let Y=new Headers(N.headers);return Y.set("content-type","application/json; charset=utf-8"),Y.set("cache-control","no-store"),new Response(JSON.stringify(X),{...N,headers:Y})}function WE(X){return X.trim().toLowerCase().replace(/['"]/g,"").replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"")}async function L(X){if(X.method==="GET"||X.method==="HEAD")return{};let N=X.headers.get("content-type")||"";if(N.includes("application/json"))return await X.json().catch(()=>({}));if(N.includes("form")){let Y=await X.formData();return Object.fromEntries(Y.entries())}return{}}var KE={posts:["title","poster","content","excerpt","views","published_at","status","is_featured","author_id","created_at","updated_at"],pages:["title","template","views","published_at","conversions","author_id","created_at","updated_at"],authors:["name","email","user_id","created_at","updated_at"],categories:["name","description","slug","image_url","is_active","parent_category_id","display_order","created_at","updated_at"],tags:["name","slug","description","post_count","color","created_at","updated_at"],comments:["title","body","content","status","author_name","author_email","post_title","is_approved","approved_at","rejected_at","updated_at"]};function b(){let X=V.env.DB_DATABASE_PATH||"database/stacks.sqlite";return X.startsWith("/")?X:I(X)}function D(X){if(!/^[a-z_][a-z0-9_]*$/i.test(X))throw Error(`Invalid CMS database identifier: ${X}`);return`"${X.replace(/"/g,'""')}"`}function i(X,N){let Y=KE[X];if(!Y)throw Error(`Unsupported CMS table: ${X}`);return Object.fromEntries(Object.entries(N).filter(([z,O])=>Y.includes(z)&&O!==void 0))}async function HE(){if((V.env.DB_CONNECTION||"sqlite")!=="sqlite"||!p(b()))return;let{Database:X}=await import("bun:sqlite"),N=new X(b());async function Y(z,O){return N.query(`select * from ${D(z)} where id = ? limit 1`).get(O)}return{async all(z,O="created_at"){return N.query(`select * from ${D(z)} order by ${D(O)} desc`).all()},async insert(z,O){let W=i(z,O),K=Object.keys(W),H=K.map(()=>"?").join(", "),Z=`insert into ${D(z)} (${K.map(D).join(", ")}) values (${H})`,E=N.query(Z).run(...K.map(($)=>W[$]));return await Y(z,Number(E.lastInsertRowid))},async update(z,O,W){let K=i(z,W),H=Object.keys(K);if(H.length){let Z=H.map((E)=>`${D(E)} = ?`).join(", ");N.query(`update ${D(z)} set ${Z} where id = ?`).run(...H.map((E)=>K[E]),O)}return await Y(z,O)},async delete(z,O){N.query(`delete from ${D(z)} where id = ?`).run(O)},find:Y,close(){N.close()}}}async function _E(){let X=await HE();if(X)return X;let{db:N}=await import("@stacksjs/database");return{async all(Y,z="created_at"){let O=N.selectFrom(Y).selectAll();if(z)O=O.orderBy(z,"desc");return await O.execute()},async insert(Y,z){let O=await N.insertInto(Y).values(z).returningAll().executeTakeFirst();if(!O||O.id==null){let W=z.email?["email",z.email]:z.name?["name",z.name]:["title",z.title];O=await N.selectFrom(Y).selectAll().where(W[0],"=",W[1]).orderBy("id","desc").executeTakeFirst()}return O},async update(Y,z,O){return await N.updateTable(Y).set(O).where("id","=",z).execute(),await N.selectFrom(Y).selectAll().where("id","=",z).executeTakeFirst()},async delete(Y,z){await N.deleteFrom(Y).where("id","=",z).execute()},async find(Y,z){return await N.selectFrom(Y).selectAll().where("id","=",z).executeTakeFirst()}}}async function B(X,N,Y="created_at"){try{return await X.all(N,Y)}catch{return[]}}async function FE(X){let N=new URL(X.url);if(!N.pathname.startsWith("/api/dashboard/cms"))return null;let Y;try{Y=await _E();let O=N.pathname.replace(/^\/api\/dashboard\/cms\/?/,"").split("/").filter(Boolean),W=O[0]||"",K=O[1]?Number(O[1]):void 0,H=new Date().toISOString().slice(0,19).replace("T"," ");if(X.method==="GET"&&!W){let[Z,E,$,G,T,M]=await Promise.all([B(Y,"posts"),B(Y,"pages"),B(Y,"authors"),B(Y,"categories"),B(Y,"tags"),B(Y,"comments")]);return F({ok:!0,posts:Z,pages:E,authors:$,categories:G,tags:T,comments:M,stats:{posts:Z.length,publishedPosts:Z.filter((j)=>j.status==="published").length,draftPosts:Z.filter((j)=>j.status==="draft").length,pages:E.length,categories:G.length,tags:T.length,comments:M.length}})}if(W==="posts"){if(X.method==="POST"){let Z=await L(X),E=String(Z.title||"").trim();if(!E)return F({ok:!1,error:"Title is required"},{status:422});let $=await Y.insert("posts",{title:E,poster:String(Z.poster||""),content:String(Z.content||Z.body||""),excerpt:String(Z.excerpt||""),views:Number(Z.views||0),published_at:Z.status==="published"?H:Z.published_at||null,status:String(Z.status||"draft").toLowerCase(),is_featured:Z.is_featured?1:0,author_id:Z.author_id?Number(Z.author_id):null,created_at:H,updated_at:H});return F({ok:!0,post:$},{status:201})}if(X.method==="PATCH"&&K){let Z=await L(X),E={updated_at:H};for(let G of["title","poster","content","excerpt","status","published_at"])if(Z[G]!==void 0)E[G]=G==="status"?String(Z[G]).toLowerCase():Z[G];if(Z.views!==void 0)E.views=Number(Z.views);if(Z.is_featured!==void 0)E.is_featured=Z.is_featured?1:0;let $=await Y.update("posts",K,E);if(!$)return F({ok:!1,error:"Post not found"},{status:404});return F({ok:!0,post:$})}if(X.method==="DELETE"&&K)return await Y.delete("posts",K),F({ok:!0})}if(W==="tags"||W==="categories"){let Z=W;if(X.method==="POST"){let E=await L(X),$=String(E.name||"").trim();if(!$)return F({ok:!1,error:"Name is required"},{status:422});let G={name:$,slug:String(E.slug||WE($)),description:String(E.description||""),created_at:H,updated_at:H};if(W==="categories")G.is_active=E.is_active===void 0?!0:Boolean(E.is_active);if(W==="tags")G.post_count=Number(E.post_count||0),G.color=String(E.color||"");let T=await Y.insert(Z,G);return F({ok:!0,[W==="categories"?"category":"tag"]:T},{status:201})}if(X.method==="PATCH"&&K){let E=await L(X),$={updated_at:H};for(let T of["name","slug","description","color","image_url","parent_category_id"])if(E[T]!==void 0)$[T]=E[T];if(E.post_count!==void 0)$.post_count=Number(E.post_count);if(E.display_order!==void 0)$.display_order=Number(E.display_order);if(E.is_active!==void 0)$.is_active=E.is_active?1:0;let G=await Y.update(Z,K,$);if(!G)return F({ok:!1,error:`${W==="categories"?"Category":"Tag"} not found`},{status:404});return F({ok:!0,[W==="categories"?"category":"tag"]:G})}if(X.method==="DELETE"&&K)return await Y.delete(Z,K),F({ok:!0})}if(W==="pages"){if(X.method==="POST"){let Z=await L(X),E=String(Z.title||"").trim();if(!E)return F({ok:!1,error:"Title is required"},{status:422});let $=await Y.insert("pages",{title:E,template:String(Z.template||"default"),views:0,conversions:0,published_at:Z.status==="published"?H:null,author_id:Z.author_id?Number(Z.author_id):null,created_at:H,updated_at:H});return F({ok:!0,page:$},{status:201})}if(X.method==="PATCH"&&K){let Z=await L(X),E={updated_at:H};for(let G of["title","template","published_at"])if(Z[G]!==void 0)E[G]=Z[G];if(Z.views!==void 0)E.views=Number(Z.views);if(Z.conversions!==void 0)E.conversions=Number(Z.conversions);if(Z.author_id!==void 0)E.author_id=Z.author_id?Number(Z.author_id):null;let $=await Y.update("pages",K,E);if(!$)return F({ok:!1,error:"Page not found"},{status:404});return F({ok:!0,page:$})}if(X.method==="DELETE"&&K)return await Y.delete("pages",K),F({ok:!0})}if(W==="authors"){if(X.method==="POST"){let Z=await L(X),E=String(Z.name||"").trim(),$=String(Z.email||"").trim();if(!E||!$)return F({ok:!1,error:"Name and email are required"},{status:422});let G=await Y.insert("authors",{name:E,email:$,created_at:H,updated_at:H});return F({ok:!0,author:G},{status:201})}if(X.method==="PATCH"&&K){let Z=await L(X),E={updated_at:H};for(let G of["name","email"])if(Z[G]!==void 0)E[G]=Z[G];if(Z.user_id!==void 0)E.user_id=Z.user_id?Number(Z.user_id):null;let $=await Y.update("authors",K,E);if(!$)return F({ok:!1,error:"Author not found"},{status:404});return F({ok:!0,author:$})}if(X.method==="DELETE"&&K)return await Y.delete("authors",K),F({ok:!0})}if(W==="comments"){if(X.method==="PATCH"&&K){let Z=await L(X),E={updated_at:H};if(Z.content!==void 0)E.content=Z.content,E.body=Z.content;if(Z.body!==void 0)E.content=Z.body,E.body=Z.body;for(let G of["status","author_name","author_email","post_title"])if(Z[G]!==void 0)E[G]=Z[G];if(E.status==="approved")E.is_approved=1;if(E.status&&E.status!=="approved")E.is_approved=0;let $=await Y.update("comments",K,E);if(!$)return F({ok:!1,error:"Comment not found"},{status:404});return F({ok:!0,comment:$})}if(X.method==="DELETE"&&K)return await Y.delete("comments",K),F({ok:!0})}return F({ok:!1,error:"CMS endpoint not found"},{status:404})}catch(z){return F({ok:!1,error:z?.message||String(z)},{status:500})}finally{Y?.close?.()}}async function TE(){try{await import("@stacksjs/orm")}catch(E){if(A)console.warn("[dashboard] orm preload failed:",E?.message||E)}try{let{hoistDashboardGlobals:E}=await import("./dashboard-globals.js");await E({verbose:A})}catch(E){if(A)console.warn("[dashboard] globals preload failed:",E?.message||E)}let X;try{X=(await import("../../chunk-wv5yb5wb.js")).serve}catch{X=(await import(I("pantry/bun-plugin-stx/dist/serve.js"))).serve}let N;try{let E=I("pantry/@stacksjs/stx/dist/index.js");if(await Bun.file(E).exists())N=await import(E)}catch{}let{listConfigFiles:Y,readConfig:z,updateConfigKey:O}=await import(S("framework/defaults/resources/functions/dashboard/config-io.ts")),W={"/__deps/charts.js":S("framework/core/charts/dist/index.js")},K={...Object.fromEntries(Object.entries(W).map(([E,$])=>[E,async()=>{let G=Bun.file($);if(!await G.exists())return new Response(`// dependency dist missing: ${$}
+// rebuild with: cd ${$.replace(/\/dist\/[^/]+$/,"")} && bun build.ts`,{status:500,headers:{"content-type":"text/javascript; charset=utf-8"}});return new Response(G,{headers:{"content-type":"text/javascript; charset=utf-8","cache-control":"no-cache"}})}])),"/api/config/list":async()=>{try{return Response.json({ok:!0,files:Y()})}catch(E){return Response.json({ok:!1,error:E?.message},{status:500})}},"/api/config/read":async(E)=>{try{let G=new URL(E.url).searchParams.get("name")||"";if(!/^[\w-]+$/.test(G))return Response.json({ok:!1,error:"Invalid config name"},{status:400});let T=await z(G);if(!T)return Response.json({ok:!1,error:"Not found"},{status:404});return Response.json({ok:!0,name:G,fields:T.fields,values:T.values})}catch($){return Response.json({ok:!1,error:$?.message},{status:500})}},"/api/config/source":async(E)=>{try{let G=new URL(E.url).searchParams.get("name")||"";if(!/^[\w-]+$/.test(G))return Response.json({ok:!1,error:"Invalid config name"},{status:400});let T=await z(G);if(!T)return Response.json({ok:!1,error:"Not found"},{status:404});return new Response(T.source,{headers:{"content-type":"text/plain; charset=utf-8"}})}catch($){return Response.json({ok:!1,error:$?.message},{status:500})}},"/api/config/update":async(E)=>{if(E.method!=="POST")return Response.json({ok:!1,error:"Method not allowed"},{status:405});try{let $=await E.json(),G=$.file?.replace(/\.ts$/,"");if(!G||!/^[\w-]+$/.test(G))return Response.json({ok:!1,error:"Invalid file"},{status:400});let T=[];if(Array.isArray($.updates))for(let Q of $.updates){let x=Q.key??Q.path;if(typeof x==="string")T.push({key:x,value:Q.value})}else if($.key)T.push({key:$.key,value:$.value});if(T.length===0)return Response.json({ok:!1,error:"No updates supplied"},{status:400});let M=[];for(let Q of T)try{let x=await O(G,Q.key,H(Q.value));M.push({key:Q.key,ok:!0,newValue:x.newValue})}catch(x){M.push({key:Q.key,ok:!1,error:x?.message})}let j=M.every((Q)=>Q.ok);return Response.json({ok:j,file:G,results:M})}catch($){return Response.json({ok:!1,error:$?.message},{status:500})}}};function H(E){if(typeof E==="boolean"||typeof E==="number")return E;if(E==="true")return!0;if(E==="false")return!1;if(E===""||E==null)return"";if(typeof E==="string"&&/^-?\d+(?:\.\d+)?$/.test(E))return Number(E);return String(E)}X({patterns:[NE,q],port:R,componentsDir:S("framework/defaults/resources/components/Dashboard"),layoutsDir:q,partialsDir:q,quiet:!0,routes:K,onRequest:FE,auth:!1,...N&&{stxModule:N}}).catch((E)=>{EE(),console.error(`
+  Failed to start dashboard server: ${E?.message||E}
+`),V.exit(1)})}async function VE(){if(!C)return!1;if(V.env.STACKS_PROXY_MANAGED)return!1;try{let{startProxies:X}=await import("@stacksjs/rpx");return await X({proxies:[{from:`localhost:${R}`,to:C,cleanUrls:!1}],https:{basePath:e,validityDays:825},regenerateUntrustedCerts:!1,verbose:A}),!0}catch(X){if(A)s(`  ${_(`Proxy: ${X}`)}`);return!1}}var QE=R+1;function k(X,N=200,Y={}){return new Response(JSON.stringify(X),{status:N,headers:{"Content-Type":"application/json","Access-Control-Allow-Origin":"*","Access-Control-Allow-Methods":"POST, OPTIONS","Access-Control-Allow-Headers":"Content-Type",...Y}})}function ME(){Bun.serve({port:QE,fetch:async(X)=>{if(X.method==="OPTIONS")return new Response(null,{headers:{"Access-Control-Allow-Origin":"*","Access-Control-Allow-Methods":"POST, OPTIONS","Access-Control-Allow-Headers":"Content-Type"}});if(new URL(X.url).pathname==="/api/config/update"&&X.method==="POST")try{let{file:Y,updates:z}=await X.json();if(!Y||Y.includes("..")||!Y.match(/^[\w.-]+\.ts$/))return k({error:"Invalid file name"},400);let O=I(`config/${Y}`),W=$E(O,"utf-8");for(let{path:K,value:H}of z){let E=K.split(".").pop().replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),$=new RegExp(`(${E}\\s*:\\s*)(?:'[^']*'|"[^"]*"|\\d+(?:\\.\\d+)?|true|false)`);if($.test(W)){let G=/^\d+(?:\.\d+)?$/.test(H),T=H==="true"||H==="false",M=H.replace(/'/g,"\\'").replace(/\$/g,"$$$$"),j=G||T?H:`'${M}'`;W=W.replace($,`$1${j}`)}}return a(O,W,"utf-8"),k({success:!0})}catch(Y){return k({error:Y.message},500)}return k({error:"Not found"},404)}})}ME();var[,u]=await Promise.all([TE(),l(I("app/Models"),S("framework/defaults/app/Models"))]);async function LE(){let X={library:!0,content:!0,commerce:!0,marketing:!0,analytics:!0,management:!0,utilities:!0,data:{dashboard:!0,activity:!0,users:!0,teams:!0,subscribers:!0,allModels:!0}};try{let Y=(await import(I("config/dashboard.ts"))).default?.sections??{},z=Y.data??{};return{library:Y.library?.enabled??!0,content:Y.content?.enabled??!0,commerce:Y.commerce?.enabled??!0,marketing:Y.marketing?.enabled??!0,analytics:Y.analytics?.enabled??!0,management:Y.management?.enabled??!0,utilities:Y.utilities?.enabled??!0,data:{dashboard:z.dashboard?.enabled??!0,activity:z.activity?.enabled??!0,users:z.users?.enabled??!0,teams:z.teams?.enabled??!0,subscribers:z.subscribers?.enabled??!0,allModels:z.allModels?.enabled??!0}}}catch{return X}}var XE=await LE(),RE=S("framework/defaults/views/dashboard/.discovered-models.json"),DE={models:d(u),sections:XE};a(RE,JSON.stringify(DE,null,2));var UE=await r(R);EE();var AE=!1;VE().then((X)=>{AE=X}).catch((X)=>{if(A)console.warn("[Dashboard] Reverse proxy failed:",X)});var m=C?`https://${C}`:null,v=`http://localhost:${R}`,IE=v,YE=o(IE,u,XE),ZE=`http://localhost:${R}/?native-sidebar=1`,jE=(Bun.nanoseconds()-zE)/1e6;console.log();console.log(`  ${J(g("stacks dashboard"))}`);console.log();if(m)console.log(`  ${f("\u279C")}  ${J("Local")}:   ${g(m)}`),console.log(`  ${_("\u279C")}  ${_("Origin")}:  ${_(v)}`);else console.log(`  ${f("\u279C")}  ${J("Local")}:   ${g(v)}`);console.log(`  ${f("\u279C")}  ${J("Window")}:  ${_("Stacks Dashboard")} ${_("1400\xD7900")}`);console.log(`  ${f("\u279C")}  ${J("Models")}:  ${_(`${u.length} discovered`)}`);if(R!==y)console.log(`  ${_("\u279C")}  ${_(`Port ${y} in use, using ${R}`)}`);if(!UE)console.log(`  ${_("\u26A0")}  ${_("Dev server may not be ready yet")}`);console.log();console.log(`  ${_(`ready in ${jE.toFixed(0)} ms`)}`);if(A){if(console.log(),console.log(`  ${_("\u279C")}  ${_("Sidebar")}:  ${_(`${YE.sections.length} sections, 240px`)}`),console.log(`  ${_("\u279C")}  ${_("URL")}:      ${_(ZE)}`),C)console.log(`  ${_("\u279C")}  ${_("SSL")}:      ${_(e)}`),console.log(`  ${_("\u279C")}  ${_("Proxy")}:    ${_(`localhost:${R} \u2192 ${C}`)}`);if(h.length>0){console.log();for(let X of h)console.log(`  ${_(X)}`)}}console.log();var w=null;try{({createApp:w}=await import("@stacksjs/ts-craft"))}catch{}if(w){let X=I("resources/assets/images/app-icon.png"),N=S("framework/defaults/resources/assets/images/app-icon.png"),Y=await Bun.file(X).exists()?X:await Bun.file(N).exists()?N:void 0,z=(()=>{let W=V.env.CRAFT_BIN;if(W&&p(W))return W;let K=`${V.env.HOME}/Documents/Projects/craft/packages/zig/zig-out/bin/craft`;if(p(K))return K;return})();if(!z)w=null;if(!w)console.log(`  ${_("Native window unavailable. Set CRAFT_BIN to a craft binary, or open the URL above in a browser.")}
+`),await new Promise(()=>{});let O=w({url:ZE,quiet:!A,...z&&{craftPath:z},window:{title:"Stacks Dashboard",width:1400,height:900,titlebarHidden:!0,nativeSidebar:!0,sidebarWidth:240,sidebarConfig:YE,...Y&&{icon:Y}}});V.on("SIGINT",()=>{O.close(),V.exit(0)}),V.on("SIGTERM",()=>{O.close(),V.exit(0)});try{await O.show(),V.exit(0)}catch{let W=m||v;console.log(`  ${_("Dashboard available at:")} ${g(W)}
+`),await new Promise(()=>{})}}else console.log(`  ${_("Native window unavailable. Set CRAFT_BIN to a craft binary, or open the URL above in a browser.")}
+`),V.on("SIGINT",()=>V.exit(0)),V.on("SIGTERM",()=>V.exit(0)),await new Promise(()=>{});