@stacksjs/ts-cloud 0.12.1 → 0.12.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (234) hide show
  1. package/dist/aws/index.js +1 -1
  2. package/dist/bin/chunk-0zwknfwp.js +1 -0
  3. package/dist/bin/chunk-33ct22z0.js +1 -0
  4. package/dist/bin/chunk-3aph4c1w.js +2 -0
  5. package/dist/bin/{chunk-5bhx3bsa.js → chunk-4q6tad44.js} +121 -121
  6. package/dist/bin/chunk-5nkqza92.js +1 -0
  7. package/dist/bin/chunk-64vczwwt.js +1 -0
  8. package/dist/bin/chunk-6tfwm33r.js +6 -0
  9. package/dist/bin/chunk-71t1gmsq.js +1 -0
  10. package/dist/bin/chunk-7g2ahkse.js +1 -0
  11. package/dist/bin/chunk-7zhgmp1s.js +3 -0
  12. package/dist/bin/chunk-82mj52xr.js +141 -0
  13. package/dist/bin/chunk-8ewncfce.js +37 -0
  14. package/dist/bin/chunk-9a88fp00.js +2 -0
  15. package/dist/bin/chunk-9kf0np8j.js +44 -0
  16. package/dist/bin/chunk-a7w13qfm.js +2 -0
  17. package/dist/bin/chunk-anx2a852.js +585 -0
  18. package/dist/bin/chunk-b4wt9jcg.js +60 -0
  19. package/dist/bin/chunk-btdq3w81.js +512 -0
  20. package/dist/bin/chunk-btsyjhk7.js +92 -0
  21. package/dist/bin/chunk-c0bdafbx.js +2 -0
  22. package/dist/bin/chunk-cd0ps58j.js +1 -0
  23. package/dist/bin/chunk-cxt74wsj.js +1 -0
  24. package/dist/bin/chunk-d7ke90zt.js +2 -0
  25. package/dist/bin/chunk-djg4zyqk.js +1 -0
  26. package/dist/bin/chunk-dkaz333b.js +1 -0
  27. package/dist/bin/chunk-dkf4qsp2.js +1 -0
  28. package/dist/bin/{chunk-scqmd4qv.js → chunk-dz1ec589.js} +30 -30
  29. package/dist/bin/chunk-e2bybahr.js +3 -0
  30. package/dist/bin/chunk-e5ab5twy.js +50 -0
  31. package/dist/bin/chunk-edvvx3hg.js +1 -0
  32. package/dist/bin/chunk-ehc63fvs.js +2 -0
  33. package/dist/bin/chunk-f06c5np9.js +1 -0
  34. package/dist/bin/chunk-gq8794k6.js +1 -0
  35. package/dist/bin/chunk-hq9x489e.js +70 -0
  36. package/dist/bin/chunk-ja1vjdn1.js +6 -0
  37. package/dist/bin/chunk-k3120rx6.js +1 -0
  38. package/dist/bin/chunk-kg61p5hw.js +3 -0
  39. package/dist/bin/chunk-mcr0r4at.js +2 -0
  40. package/dist/bin/chunk-mfrf9q4b.js +2 -0
  41. package/dist/bin/chunk-my3ewh3a.js +34 -0
  42. package/dist/bin/chunk-nw3d4k52.js +1 -0
  43. package/dist/bin/chunk-p70bc9yr.js +1 -0
  44. package/dist/bin/chunk-q5cmfpzt.js +1 -0
  45. package/dist/bin/chunk-rtecnmts.js +4 -0
  46. package/dist/bin/chunk-s4yzes15.js +2 -0
  47. package/dist/bin/chunk-sj5csg49.js +2 -0
  48. package/dist/bin/chunk-tfbs8k8v.js +111 -0
  49. package/dist/bin/chunk-tvz9c388.js +1 -0
  50. package/dist/bin/{chunk-9vdc7adf.js → chunk-w32xv8n4.js} +6 -6
  51. package/dist/bin/chunk-x6f61g36.js +9 -0
  52. package/dist/bin/chunk-xhwqpgwq.js +2 -0
  53. package/dist/bin/chunk-xk08030d.js +6 -0
  54. package/dist/bin/chunk-xkfrqqcs.js +1 -0
  55. package/dist/bin/chunk-y1h63vpm.js +1 -0
  56. package/dist/bin/chunk-zdt2rjk6.js +1 -0
  57. package/dist/bin/chunk-zh2d4704.js +1 -0
  58. package/dist/bin/chunk-zpe64t4r.js +1 -0
  59. package/dist/bin/cli.js +435 -444
  60. package/dist/bin/dashboard-server.js +1 -1
  61. package/dist/{chunk-rr1yaj55.js → chunk-13qjvbqh.js} +1 -1
  62. package/dist/chunk-152he7m3.js +92 -0
  63. package/dist/chunk-1qdne0bf.js +1 -0
  64. package/dist/chunk-3mgj3hrh.js +5 -0
  65. package/dist/chunk-6kpbveb8.js +5 -0
  66. package/dist/chunk-73ztr55z.js +2 -0
  67. package/dist/{chunk-y1dh3znq.js → chunk-86ss83s2.js} +52 -52
  68. package/dist/chunk-a84gmpyh.js +1 -0
  69. package/dist/chunk-aj025v2s.js +4 -0
  70. package/dist/chunk-by2bwzk6.js +141 -0
  71. package/dist/chunk-h42zck7h.js +60 -0
  72. package/dist/chunk-hn40z11p.js +37 -0
  73. package/dist/chunk-hvwbgcs7.js +704 -0
  74. package/dist/{chunk-6xcbfs2r.js → chunk-jm5mg890.js} +111 -111
  75. package/dist/chunk-kqnpprnh.js +445 -0
  76. package/dist/chunk-m8fs0233.js +34 -0
  77. package/dist/chunk-mz0dk78z.js +6 -0
  78. package/dist/chunk-nms5q44e.js +1 -0
  79. package/dist/chunk-qm32ytbr.js +1 -0
  80. package/dist/chunk-t0xgmhd6.js +114 -0
  81. package/dist/chunk-t3t9ymec.js +1 -0
  82. package/dist/chunk-tz9myq9a.js +2 -0
  83. package/dist/chunk-wavjkdb8.js +2 -0
  84. package/dist/chunk-x3hay61c.js +44 -0
  85. package/dist/chunk-xcj8zfmg.js +2 -0
  86. package/dist/chunk-y2v22hkv.js +1 -0
  87. package/dist/chunk-y4xkj2f1.js +50 -0
  88. package/dist/deploy/index.js +1 -1
  89. package/dist/dns/index.js +1 -1
  90. package/dist/drivers/index.js +1 -1
  91. package/dist/drivers/shared/deploy-script.d.ts +46 -0
  92. package/dist/index.js +90 -90
  93. package/dist/protection/index.js +1 -1
  94. package/dist/push/index.js +1 -1
  95. package/dist/spend/index.js +1 -1
  96. package/dist/ui/404.html +2 -2
  97. package/dist/ui/_stx/{router.fa5bc4dc.js → router.229f89ab.js} +1 -1
  98. package/dist/ui/_stx/runtime.dbee66d1.js +1 -0
  99. package/dist/ui/accept-invitation.html +2 -2
  100. package/dist/ui/access-denied.html +1 -1
  101. package/dist/ui/account/automation.html +6 -6
  102. package/dist/ui/account/security.html +2 -2
  103. package/dist/ui/applications/compose.html +6 -6
  104. package/dist/ui/applications/new.html +2 -2
  105. package/dist/ui/data/backups.html +80 -80
  106. package/dist/ui/data/services.html +77 -77
  107. package/dist/ui/data/volumes.html +50 -50
  108. package/dist/ui/index.html +50 -50
  109. package/dist/ui/infrastructure/topology.html +118 -118
  110. package/dist/ui/integrations.html +1 -1
  111. package/dist/ui/operations/alerts.html +47 -47
  112. package/dist/ui/operations/configuration.html +6 -6
  113. package/dist/ui/operations/jobs.html +75 -75
  114. package/dist/ui/operations/maintenance.html +6 -6
  115. package/dist/ui/operations/observability.html +82 -82
  116. package/dist/ui/operations/previews.html +6 -6
  117. package/dist/ui/operations/queue.html +6 -6
  118. package/dist/ui/operations/regions.html +6 -6
  119. package/dist/ui/operations/releases.html +6 -6
  120. package/dist/ui/operations/spend.html +54 -54
  121. package/dist/ui/operations/workloads.html +104 -104
  122. package/dist/ui/security.html +2 -2
  123. package/dist/ui/server/actions.html +56 -56
  124. package/dist/ui/server/activity.html +2 -2
  125. package/dist/ui/server/capacity.html +6 -6
  126. package/dist/ui/server/database.html +106 -106
  127. package/dist/ui/server/deployments.html +50 -50
  128. package/dist/ui/server/diagnostics.html +2 -2
  129. package/dist/ui/server/firewall.html +75 -75
  130. package/dist/ui/server/fleet.html +34 -34
  131. package/dist/ui/server/logs.html +24 -24
  132. package/dist/ui/server/metrics.html +112 -112
  133. package/dist/ui/server/security.html +1 -1
  134. package/dist/ui/server/services.html +27 -27
  135. package/dist/ui/server/sites.html +120 -120
  136. package/dist/ui/server/ssh-keys.html +52 -52
  137. package/dist/ui/server/team.html +144 -144
  138. package/dist/ui/server/terminal.html +16 -16
  139. package/dist/ui/serverless/alarms.html +52 -52
  140. package/dist/ui/serverless/assets.html +28 -28
  141. package/dist/ui/serverless/cost.html +2 -2
  142. package/dist/ui/serverless/data.html +36 -36
  143. package/dist/ui/serverless/deployments.html +28 -28
  144. package/dist/ui/serverless/firewall.html +2 -2
  145. package/dist/ui/serverless/functions.html +39 -39
  146. package/dist/ui/serverless/logs.html +24 -24
  147. package/dist/ui/serverless/metrics.html +2 -2
  148. package/dist/ui/serverless/queues.html +48 -48
  149. package/dist/ui/serverless/secrets.html +52 -52
  150. package/dist/ui/serverless/traces.html +6 -6
  151. package/dist/ui/serverless.html +54 -54
  152. package/dist/ui-src/src/charts.ts +4644 -16118
  153. package/dist/ui-src/src/topology.ts +2 -2
  154. package/package.json +6 -6
  155. package/dist/bin/chunk-0rtn6q5x.js +0 -3
  156. package/dist/bin/chunk-258ehp9s.js +0 -1
  157. package/dist/bin/chunk-2yctv06c.js +0 -1
  158. package/dist/bin/chunk-3276rveh.js +0 -37
  159. package/dist/bin/chunk-3m665jwp.js +0 -70
  160. package/dist/bin/chunk-3s2p9vxj.js +0 -1
  161. package/dist/bin/chunk-4esma5m9.js +0 -1
  162. package/dist/bin/chunk-4n0j3n3b.js +0 -2
  163. package/dist/bin/chunk-54bqchag.js +0 -92
  164. package/dist/bin/chunk-5zagqd20.js +0 -1
  165. package/dist/bin/chunk-7hw2js5h.js +0 -512
  166. package/dist/bin/chunk-8h1qr6x4.js +0 -50
  167. package/dist/bin/chunk-a1dd6sby.js +0 -1
  168. package/dist/bin/chunk-a4dw35gs.js +0 -1
  169. package/dist/bin/chunk-a9d55ker.js +0 -1
  170. package/dist/bin/chunk-awa1qade.js +0 -9
  171. package/dist/bin/chunk-b6by94pk.js +0 -2
  172. package/dist/bin/chunk-c8sypnbe.js +0 -2
  173. package/dist/bin/chunk-cx4e3d4w.js +0 -1
  174. package/dist/bin/chunk-d5a3vheh.js +0 -2
  175. package/dist/bin/chunk-e1fym2bd.js +0 -1
  176. package/dist/bin/chunk-ej4h0q2y.js +0 -1
  177. package/dist/bin/chunk-ett305ym.js +0 -4
  178. package/dist/bin/chunk-f11xf3n6.js +0 -2
  179. package/dist/bin/chunk-fq7ktvgy.js +0 -3
  180. package/dist/bin/chunk-fyq4th2m.js +0 -1
  181. package/dist/bin/chunk-g67qr8yf.js +0 -1
  182. package/dist/bin/chunk-gc82cx4h.js +0 -1
  183. package/dist/bin/chunk-hchtvpr9.js +0 -1
  184. package/dist/bin/chunk-hpe4jjce.js +0 -1
  185. package/dist/bin/chunk-k5vprsef.js +0 -6
  186. package/dist/bin/chunk-m22krd4z.js +0 -3
  187. package/dist/bin/chunk-mkppcwz8.js +0 -1
  188. package/dist/bin/chunk-mpjg0kc7.js +0 -2
  189. package/dist/bin/chunk-mrm4m4dk.js +0 -2
  190. package/dist/bin/chunk-nff46rxd.js +0 -1
  191. package/dist/bin/chunk-np1z3bgt.js +0 -1
  192. package/dist/bin/chunk-nskxkk6r.js +0 -1
  193. package/dist/bin/chunk-pez932b1.js +0 -111
  194. package/dist/bin/chunk-qsdf5kzk.js +0 -2
  195. package/dist/bin/chunk-r61qmhv1.js +0 -2
  196. package/dist/bin/chunk-r6gdcz5c.js +0 -1
  197. package/dist/bin/chunk-satwnr42.js +0 -2
  198. package/dist/bin/chunk-smbycpt5.js +0 -44
  199. package/dist/bin/chunk-sn7e0sn7.js +0 -2
  200. package/dist/bin/chunk-ss574pka.js +0 -1
  201. package/dist/bin/chunk-tj0xb2d8.js +0 -585
  202. package/dist/bin/chunk-v3rzf9d0.js +0 -141
  203. package/dist/bin/chunk-wnpma6t3.js +0 -34
  204. package/dist/bin/chunk-xan0e052.js +0 -5
  205. package/dist/bin/chunk-xbk2y43r.js +0 -60
  206. package/dist/bin/chunk-xjp3v95e.js +0 -6
  207. package/dist/bin/chunk-xyt490vp.js +0 -6
  208. package/dist/bin/chunk-yn9r02gy.js +0 -1
  209. package/dist/bin/chunk-zhkhn9cc.js +0 -1
  210. package/dist/chunk-0zf72ngj.js +0 -1
  211. package/dist/chunk-2hpjte1d.js +0 -704
  212. package/dist/chunk-4m6gwhwr.js +0 -5
  213. package/dist/chunk-5m29dhke.js +0 -34
  214. package/dist/chunk-6fzeemcs.js +0 -114
  215. package/dist/chunk-bpnhqb70.js +0 -6
  216. package/dist/chunk-ead1nkbr.js +0 -60
  217. package/dist/chunk-fea461tj.js +0 -141
  218. package/dist/chunk-fvjczc73.js +0 -1
  219. package/dist/chunk-gearw6rk.js +0 -4
  220. package/dist/chunk-j60hesb3.js +0 -2
  221. package/dist/chunk-pmgtmt3d.js +0 -1
  222. package/dist/chunk-prf2pkvq.js +0 -5
  223. package/dist/chunk-q0wffgw5.js +0 -37
  224. package/dist/chunk-qcemnt35.js +0 -50
  225. package/dist/chunk-qvbwsaay.js +0 -1
  226. package/dist/chunk-r2pbqcnz.js +0 -2
  227. package/dist/chunk-r6110zv2.js +0 -1
  228. package/dist/chunk-wcrj06cg.js +0 -44
  229. package/dist/chunk-wte9mh18.js +0 -92
  230. package/dist/chunk-y6e86wjs.js +0 -445
  231. package/dist/chunk-y8b7ht4v.js +0 -1
  232. package/dist/chunk-yf487g6e.js +0 -2
  233. package/dist/chunk-zmmc9j5f.js +0 -2
  234. package/dist/ui/_stx/runtime.c696d17a.js +0 -1
@@ -1,60 +0,0 @@
1
- import{md as c,rd as f,sd as a,td as r,ud as s}from"./chunk-mpjg0kc7.js";import{wd as p}from"./chunk-v3rzf9d0.js";import{jg as l}from"./chunk-f11xf3n6.js";import{og as D}from"./chunk-8h1qr6x4.js";import{qg as w}from"./chunk-54bqchag.js";import{pp as m}from"./chunk-c8sypnbe.js";function n(G){let{bucketName:Q,domain:z,aliases:q,certificateArn:F,defaultRootObject:J="index.html",errorDocument:_="404.html",passthroughUrls:$=!1,singlePageApp:W=!1,dynamicApp:j=!1,computeOriginDomain:S,computeOriginPort:B=3008,computeOriginId:x="app-compute",retainOnStackDelete:C=!1}=G,M=C?{DeletionPolicy:"Retain",UpdateReplacePolicy:"Retain"}:{},y=j&&!!S,R=y?["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"]:["GET","HEAD"],N=y?["GET","HEAD"]:["GET","HEAD"],I={},h={};I.S3Bucket={Type:"AWS::S3::Bucket",...M,Properties:{BucketName:Q,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:J,ErrorDocument:_}}},h.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},h.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},I.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",...M,Properties:{OriginAccessControlConfig:{Name:`OAC-${Q}`,Description:`OAC for ${Q}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}};let E;if($&&y)E="InstallRootRedirectFunction",I[E]={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-install-root-redirect"},AutoPublish:!0,FunctionConfig:{Comment:"Redirect curl pantry.dev | bash (GET /) to /install.sh on S3",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
2
- var request = event.request;
3
- if (request.uri === '/' || request.uri === '') {
4
- return {
5
- statusCode: 302,
6
- statusDescription: 'Found',
7
- headers: {
8
- location: { value: 'https://' + request.headers.host.value + '/install.sh' }
9
- }
10
- };
11
- }
12
- return request;
13
- }`}};if(!$)I.UrlRewriteFunction={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-url-rewrite"},AutoPublish:!0,FunctionConfig:{Comment:"Append .html extension to URLs without extensions",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
14
- const request = event.request;
15
- var uri = request.uri;
16
-
17
- // If URI ends with /, serve index.html
18
- if (uri.endsWith('/')) {
19
- request.uri = uri + 'index.html';
20
- }
21
- // If URI doesn't have an extension, append .html
22
- else if (!uri.includes('.')) {
23
- request.uri = uri + '.html';
24
- }
25
-
26
- return request;
27
- }`}};let O={Id:`S3-${Q}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}},K=y?{Id:x,DomainName:S,CustomOriginConfig:{HTTPPort:B,HTTPSPort:443,OriginProtocolPolicy:"http-only",OriginSSLProtocols:["TLSv1.2"]}}:null,Z=y?x:`S3-${Q}`,U={Enabled:!0,DefaultRootObject:J,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:K?[K,O]:[O],DefaultCacheBehavior:{TargetOriginId:Z,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:R,CachedMethods:N,Compress:!0,...y?{CachePolicyId:"4135ea2d-6df8-44a3-9df3-4b5a84be39ad",OriginRequestPolicyId:"b689b0a8-53d0-40ab-baf2-68738e2966ac",...$&&E?{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":[E,"FunctionARN"]}}]}:{}}:{CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",...!$&&{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]}}},...y&&$?{CacheBehaviors:[{PathPattern:"/install.sh",TargetOriginId:`S3-${Q}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD","OPTIONS"],CachedMethods:["GET","HEAD","OPTIONS"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6"}]}:{},CustomErrorResponses:W?[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${J}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:200,ResponsePagePath:`/${J}`,ErrorCachingMinTTL:300}]:[{ErrorCode:403,ResponseCode:404,ResponsePagePath:`/${_}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${_}`,ErrorCachingMinTTL:300}]};if(z&&F)U.Aliases=q&&q.length>0?q:[z],U.ViewerCertificate={AcmCertificateArn:F,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else U.ViewerCertificate={CloudFrontDefaultCertificate:!0};return I.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",...M,DependsOn:["S3Bucket","CloudFrontOAC",...$&&y&&E?[E]:[],...!$?["UrlRewriteFunction"]:[]],Properties:{DistributionConfig:U}},h.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},h.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},I.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",...M,DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},h.SiteUrl={Description:"Site URL",Value:z?`https://${z}`:{"Fn::Sub":"https://${CloudFrontDistribution.DomainName}"}},{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${z||Q} (External DNS)`,Resources:I,Outputs:h}}async function d(G){let Q=G.region||"us-east-1",z="us-east-1",q=G.domain,F=G.bucket||q.replace(/\./g,"-"),J=G.stackName||`${G.siteName}-static-site`,_=new l("us-east-1"),$=new f("us-east-1"),W=null;if(!G.skipDnsVerification){W=s(G.dnsProvider),console.log(`Verifying DNS provider can manage ${q}...`);let X=await W.listRecords(q);if(!X.success){let Y=X.message||"unknown error — check API credentials and domain ownership";return{success:!1,stackName:J,bucket:F,message:`DNS provider '${W.name}' cannot manage domain ${q}: ${Y}`}}console.log(`DNS provider '${W.name}' verified for ${q}`)}else console.log(`Skipping DNS verification for ${q}`);let j=G.certificateArn,x=q.split(".").length===2?`www.${q}`:void 0;if(!j){console.log(`Checking for existing SSL certificate for ${q}...`);let X=await $.findCertificateByDomain(q),Y=!1;if(X&&X.Status==="ISSUED"){if(x&&X.SubjectAlternativeNames)Y=X.SubjectAlternativeNames.includes(x)||X.SubjectAlternativeNames.some((V)=>V===`*.${q}`);else Y=!0;if(Y)j=X.CertificateArn,console.log(`Found existing certificate with www coverage: ${j}`);else console.log(`Existing certificate doesn't cover ${x}, requesting new one...`)}if(!j){if(!W)return{success:!1,stackName:J,bucket:F,message:`No DNS provider available to validate SSL certificate for ${q}. Provide a certificateArn or enable DNS verification.`};console.log(`Requesting new SSL certificate for ${q}${x?` (including ${x})`:""}...`);let T=await new r(W,"us-east-1").findOrCreateCertificate({domainName:q,subjectAlternativeNames:x?[x]:void 0,waitForValidation:!0,maxWaitMinutes:10});if(T.status!=="issued")return{success:!1,stackName:J,bucket:F,message:`SSL certificate validation failed. Status: ${T.status}`};j=T.certificateArn,console.log(`Certificate issued: ${j}`)}}let C=!1,M;try{let X=await _.describeStacks({stackName:J});if(X.Stacks.length>0){let Y=X.Stacks[0],V=Y.StackStatus;if(V==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await _.waitForStack(J,"stack-delete-complete"),C=!1;else if(V==="DELETE_COMPLETE")C=!1;else C=!0,M=(Y.Outputs||[]).find((H)=>H.OutputKey==="BucketName")?.OutputValue}}catch(X){if(X.message?.includes("does not exist")||X.code==="ValidationError")C=!1;else throw X}let y=M||F;if(!C){let X=new w(Q),Y=new p,V=!1;if(q)try{console.log(`Checking for existing CloudFront distributions with alias ${q}...`);let T=await Y.listDistributions();for(let H of T){let L=[];if(H.Aliases?.Items){if(Array.isArray(H.Aliases.Items))L=H.Aliases.Items;else if(typeof H.Aliases.Items==="object"){let v=H.Aliases.Items.CNAME;if(typeof v==="string")L=[v];else if(Array.isArray(v))L=v}}if(L.includes(q)){V=!0,console.log(`Found existing CloudFront distribution ${H.Id} with alias ${q}`),console.log("Reusing existing infrastructure for updates...");let A=(await Y.getDistributionConfig(H.Id)).DistributionConfig?.Origins?.Items,b;if(A){let P=[];if(Array.isArray(A))P=A;else if(A.Origin)P=Array.isArray(A.Origin)?A.Origin:[A.Origin];else P=[A];for(let g of P){let k=(g.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(k){b=k[1];break}}}if(b)return console.log(`Using existing S3 bucket: ${b}`),{success:!0,stackName:`existing-${H.Id}`,bucket:b,distributionId:H.Id,distributionDomain:H.DomainName,domain:q,certificateArn:j,message:"Using existing CloudFront distribution",_existingInfrastructure:!0}}}}catch{}if(!V)try{if((await X.headBucket(F)).exists){console.log(`Found orphaned S3 bucket ${F}, cleaning up...`);try{let H=X.emptyBucket(F).then(()=>X.deleteBucket(F)),L=new Promise((v,A)=>setTimeout(()=>A(Error("Bucket cleanup timeout")),30000));await Promise.race([H,L]),console.log(`Deleted orphaned S3 bucket ${F}`)}catch(H){console.log(`Note: Could not clean up S3 bucket: ${H.message}`);let L=Date.now().toString(36);y=`${F}-${L}`,console.log(`Using alternative bucket name: ${y}`)}}}catch{}}let N=n({bucketName:y,domain:q,aliases:x?[q,x]:[q],certificateArn:j,defaultRootObject:G.defaultRootObject,errorDocument:G.errorDocument,passthroughUrls:G.passthroughUrls,singlePageApp:G.singlePageApp,dynamicApp:G.dynamicApp,computeOriginDomain:G.computeOriginDomain,computeOriginPort:G.computeOriginPort,computeOriginId:G.computeOriginId}),I=Object.entries(G.tags||{}).map(([X,Y])=>({Key:X,Value:Y}));if(I.push({Key:"ManagedBy",Value:"ts-cloud"}),I.push({Key:"Application",Value:G.siteName}),W)I.push({Key:"DnsProvider",Value:W.name});let h,E=!1;if(C){E=!0,console.log(`Updating CloudFormation stack: ${J}`);try{h=(await _.updateStack({stackName:J,templateBody:JSON.stringify(N),capabilities:["CAPABILITY_IAM"],tags:I})).StackId,console.log(`Update initiated, stack ID: ${h}`)}catch(X){if(X.message?.includes("No updates are to be performed")){let Y=await _.describeStacks({stackName:J});h=Y.Stacks[0].StackId;let V=Y.Stacks[0]?.Outputs||[],T=(L)=>V.find((v)=>v.OutputKey===L)?.OutputValue,H=T("DistributionDomain");if(H)await u(W,q,H);return{success:!0,stackId:h,stackName:J,bucket:T("BucketName")||y,distributionId:T("DistributionId"),distributionDomain:H,domain:q,certificateArn:j,message:"Static site infrastructure is already up to date"}}else throw X}}else console.log(`Creating CloudFormation stack: ${J}`),console.log(`Bucket name: ${y}`),console.log(`Domain: ${q}`),console.log(`Certificate ARN: ${j}`),h=(await _.createStack({stackName:J,templateBody:JSON.stringify(N),capabilities:["CAPABILITY_IAM"],tags:I,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${h}`);console.log(`Waiting for stack to reach ${E?"stack-update-complete":"stack-create-complete"}...`);try{await _.waitForStack(J,E?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(X){if(X.message?.includes("must be verified")||X.message?.includes("Access denied for operation")){console.log("CloudFront account verification required - checking for existing infrastructure...");try{let V=new p,T=await V.listDistributions();for(let H of T){let L=[];if(H.Aliases?.Items){if(Array.isArray(H.Aliases.Items))L=H.Aliases.Items;else if(typeof H.Aliases.Items==="object"){let v=H.Aliases.Items.CNAME;if(typeof v==="string")L=[v];else if(Array.isArray(v))L=v}}if(L.includes(q)){console.log(`Found existing CloudFront distribution ${H.Id} with alias ${q}`),console.log("Using existing infrastructure despite account verification requirement...");let A=(await V.getDistributionConfig(H.Id)).DistributionConfig?.Origins?.Items,b;if(A){let P=[];if(Array.isArray(A))P=A;else if(A.Origin)P=Array.isArray(A.Origin)?A.Origin:[A.Origin];else P=[A];for(let g of P){let k=(g.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(k){b=k[1];break}}}if(b){console.log(`Using existing S3 bucket: ${b}`);let P=H.DomainName;if(P)await u(W,q,P);return{success:!0,stackName:`existing-${H.Id}`,bucket:b,distributionId:H.Id,distributionDomain:H.DomainName,domain:q,certificateArn:j,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}}}catch{}return console.log(`
28
- ┌─────────────────────────────────────────────────────────────────────────────┐
29
- │ AWS ACCOUNT VERIFICATION REQUIRED │
30
- ├─────────────────────────────────────────────────────────────────────────────┤
31
- │ Your AWS account must be verified before you can create CloudFront │
32
- │ distributions. This is a one-time requirement for new AWS accounts. │
33
- │ │
34
- │ To verify your account: │
35
- │ │
36
- │ 1. Go to: https://console.aws.amazon.com/support/home#/ │
37
- │ 2. Click "Create case" │
38
- │ 3. Select "Service limit increase" │
39
- │ 4. For Service: Select "CloudFront" │
40
- │ 5. For Request: "Please verify my account for CloudFront access" │
41
- │ 6. Submit the case │
42
- │ │
43
- │ Verification typically takes 1-2 business days. │
44
- │ After verification, re-run: bunx bunpress deploy │
45
- └─────────────────────────────────────────────────────────────────────────────┘`),{success:!1,stackId:h,stackName:J,bucket:y,message:"CloudFront account verification required. Please contact AWS Support."}}return{success:!1,stackId:h,stackName:J,bucket:y,message:`Stack deployment failed: ${X.message}`}}let K=(await _.describeStacks({stackName:J})).Stacks[0]?.Outputs||[],Z=(X)=>K.find((Y)=>Y.OutputKey===X)?.OutputValue,U=Z("DistributionDomain");if(U&&W)console.log(`Creating DNS records via ${W.name}...`),await u(W,q,U);else if(U&&!W)console.log("Skipping DNS record creation (DNS verification was skipped)");return{success:!0,stackId:h,stackName:J,bucket:Z("BucketName")||y,distributionId:Z("DistributionId"),distributionDomain:U,domain:q,certificateArn:j,message:"Static site infrastructure deployed successfully with external DNS"}}async function u(G,Q,z){if(!G){console.log("Skipping DNS record creation (DNS verification was skipped)");return}if(Q.split(".").length===2)if(G instanceof c){console.log(`Creating Route53 alias record for apex domain ${Q} -> ${z}`);let J=await G.createCloudFrontAlias({domain:Q,name:Q,cloudFrontDomainName:z});if(!J.success)console.warn(`Warning: Could not create Route53 alias record: ${J.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(` ${Q} -> ${z}`);else console.log(`Created Route53 alias record: ${Q} -> ${z}`);let _=`www.${Q}`;console.log(`Creating Route53 alias record for ${_} -> ${z}`);let $=await G.createCloudFrontAlias({domain:Q,name:_,cloudFrontDomainName:z});if(!$.success)console.warn(`Warning: Could not create www Route53 alias: ${$.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(` ${_} -> ${z}`);else console.log(`Created Route53 alias record: ${_} -> ${z}`)}else{try{let W=await G.listRecords(Q,"A");if(W.success)for(let j of W.records){let S=j.name.replace(/\.$/,"");if(S===Q||S==="")console.log(`Removing existing root A record (${j.content}) to make room for ALIAS...`),await G.deleteRecord(Q,{name:Q,type:"A",content:j.content})}}catch(W){console.log(`Note: Could not check for conflicting A records: ${W instanceof Error?W.message:W}`)}console.log(`Creating ALIAS record for apex domain ${Q} -> ${z}`);let J=await G.upsertRecord(Q,{name:Q,type:"ALIAS",content:z,ttl:600});if(!J.success)console.warn(`Warning: Could not create ALIAS record: ${J.message}`),console.warn("Please manually create an ALIAS record in your DNS provider:"),console.warn(` ${Q} -> ${z}`);else console.log(`Created ALIAS record: ${Q} -> ${z}`);let _=`www.${Q}`;console.log(`Creating CNAME record for ${_} -> ${z}`);let $=await G.upsertRecord(Q,{name:_,type:"CNAME",content:z,ttl:600});if(!$.success)console.warn(`Warning: Could not create www DNS record: ${$.message}`),console.warn("Please manually create a CNAME record:"),console.warn(` ${_} -> ${z}`);else console.log(`Created CNAME record: ${_} -> ${z}`)}else{console.log(`Creating CNAME record for ${Q} -> ${z}`);let J=await G.upsertRecord(Q,{name:Q,type:"CNAME",content:z,ttl:600});if(!J.success)console.warn(`Warning: Could not create DNS record: ${J.message}`),console.warn("Please manually create a CNAME record:"),console.warn(` ${Q} -> ${z}`);else console.log(`Created CNAME record: ${Q} -> ${z}`)}}async function Hq(G){let{sourceDir:Q,cleanBucket:z=!1,onProgress:q,...F}=G;q?.("infrastructure","Deploying CloudFormation stack...");let J=await d(F);if(!J.success)return J;if(z){q?.("clean","Cleaning old files from S3...");try{await new w(F.region||"us-east-1").emptyBucket(J.bucket)}catch(j){console.log(`Note: Could not clean bucket: ${j.message}`)}}q?.("upload","Uploading files to S3...");let{uploadStaticFiles:_}=await import("./chunk-cx4e3d4w.js"),$=await _({sourceDir:Q,bucket:J.bucket,region:F.region||"us-east-1",cacheControl:F.cacheControl,onProgress:(j,S,B)=>{q?.("upload",`${j}/${S}: ${B}`)}});if($.errors.length>0)return{...J,success:!1,message:`Upload errors: ${$.errors.join(", ")}`,filesUploaded:$.uploaded};if(J.distributionId&&$.uploaded>0){q?.("invalidate","Invalidating CloudFront cache...");let{invalidateCache:j}=await import("./chunk-cx4e3d4w.js");await j(J.distributionId)}q?.("complete","Deployment complete!");let W=$.skipped>0?`Deployed ${$.uploaded} files (${$.skipped} unchanged) with external DNS`:`Deployed ${$.uploaded} files successfully with external DNS`;return{...J,filesUploaded:$.uploaded,filesSkipped:$.skipped,message:W}}function t(G){let{bucketName:Q,domain:z,certificateArn:q,hostedZoneId:F,defaultRootObject:J="index.html",errorDocument:_="404.html"}=G,$={},W={};$.S3Bucket={Type:"AWS::S3::Bucket",Properties:{BucketName:Q,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:J,ErrorDocument:_}}},W.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},W.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},$.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",Properties:{OriginAccessControlConfig:{Name:`OAC-${Q}`,Description:`OAC for ${Q}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}},$.UrlRewriteFunction={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-url-rewrite"},AutoPublish:!0,FunctionConfig:{Comment:"Append .html extension to URLs without extensions",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
46
- const request = event.request;
47
- var uri = request.uri;
48
-
49
- // If URI ends with /, serve index.html
50
- if (uri.endsWith('/')) {
51
- request.uri = uri + 'index.html';
52
- }
53
- // If URI doesn't have an extension, append .html
54
- else if (!uri.includes('.')) {
55
- request.uri = uri + '.html';
56
- }
57
-
58
- return request;
59
- }`}};let j={Enabled:!0,DefaultRootObject:J,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:[{Id:`S3-${Q}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}}],DefaultCacheBehavior:{TargetOriginId:`S3-${Q}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD"],CachedMethods:["GET","HEAD"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]},CustomErrorResponses:[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${J}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${_}`,ErrorCachingMinTTL:300}]};if(z&&q)j.Aliases=[z],j.ViewerCertificate={AcmCertificateArn:q,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else j.ViewerCertificate={CloudFrontDefaultCertificate:!0};if($.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",DependsOn:["S3Bucket","CloudFrontOAC","UrlRewriteFunction"],Properties:{DistributionConfig:j}},W.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},W.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},$.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},z&&F)$.DNSRecord={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:F,Name:z,Type:"A",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},$.DNSRecordIPv6={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:F,Name:z,Type:"AAAA",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},W.SiteUrl={Description:"Site URL",Value:{"Fn::Sub":"https://${DNSRecord}"}};return{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${z||Q}`,Resources:$,Outputs:W}}async function o(G){if(G.dnsProvider&&G.dnsProvider.provider!=="route53"){let K=G.domain||(G.subdomain&&G.baseDomain?`${G.subdomain}.${G.baseDomain}`:void 0);if(!K)return{success:!1,stackName:G.stackName||`${G.siteName}-static-site`,bucket:G.bucket||`${G.siteName}-${Date.now()}`,message:"Domain is required when using external DNS provider"};return d({siteName:G.siteName,region:G.region,domain:K,bucket:G.bucket,certificateArn:G.certificateArn,stackName:G.stackName,defaultRootObject:G.defaultRootObject,errorDocument:G.errorDocument,cacheControl:G.cacheControl,tags:G.tags,dnsProvider:G.dnsProvider})}let Q=G.region||"us-east-1",z="us-east-1",q;if(G.domain)q=G.domain;else if(G.subdomain&&G.baseDomain)q=`${G.subdomain}.${G.baseDomain}`;let F=G.bucket||(q?q.replace(/\./g,"-"):`${G.siteName}-${Date.now()}`),J=G.stackName||`${G.siteName}-static-site`,_=new l(z),$=new D,W=new f("us-east-1"),j=new a("us-east-1"),S=G.hostedZoneId,B=G.certificateArn;if(q&&!S){let K=await $.findHostedZoneForDomain(q);if(K)S=K.Id.replace("/hostedzone/","");else return{success:!1,stackName:J,bucket:F,message:`No Route53 hosted zone found for ${G.baseDomain||q}. Please create one first.`}}if(q&&!B&&S){let K=await W.findCertificateByDomain(q);if(K&&K.Status==="ISSUED")B=K.CertificateArn;else B=(await j.requestAndValidate({domainName:q,hostedZoneId:S,waitForValidation:!0,maxWaitMinutes:10})).certificateArn}let x=!1,C;try{let K=await _.describeStacks({stackName:J});if(K.Stacks.length>0){let Z=K.Stacks[0],U=Z.StackStatus;if(U==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await _.waitForStack(J,"stack-delete-complete"),x=!1;else if(U==="DELETE_COMPLETE")x=!1;else x=!0,C=(Z.Outputs||[]).find((Y)=>Y.OutputKey==="BucketName")?.OutputValue}}catch(K){if(K.message?.includes("does not exist")||K.code==="ValidationError")x=!1;else throw K}let M=C||F;if(!x){let K=new w(Q),Z=new p,U=!1;if(q){try{console.log(`Checking for existing CloudFront distribution for ${q}...`);let X=await Z.listDistributions();for(let Y of X){let V=[];if(Y.Aliases?.Items){if(Array.isArray(Y.Aliases.Items))V=Y.Aliases.Items;else if(typeof Y.Aliases.Items==="object"){let T=Y.Aliases.Items.CNAME;if(typeof T==="string")V=[T];else if(Array.isArray(T))V=T}}if(V.includes(q)){U=!0,console.log(`Found existing CloudFront distribution ${Y.Id} for ${q}`);let H=(await Z.getDistributionConfig(Y.Id)).DistributionConfig?.Origins?.Items,L;if(H){let v=[];if(Array.isArray(H))v=H;else if(H.Origin)v=Array.isArray(H.Origin)?H.Origin:[H.Origin];else v=[H];for(let A of v){let P=(A.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(P){L=P[1];break}}}if(L){let v=q.replace(/\./g,"-");if(!L.startsWith(v)&&!L.includes(G.siteName)){console.log(`Warning: Found distribution with mismatched bucket ${L}, skipping...`);continue}if(console.log(`Using existing S3 bucket: ${L}`),S&&Y.DomainName)try{console.log(`Ensuring Route53 records exist for ${q}...`),await $.createAliasRecord({HostedZoneId:S,Name:q,Type:"A",TargetHostedZoneId:D.CloudFrontHostedZoneId,TargetDNSName:Y.DomainName,EvaluateTargetHealth:!1}),await $.createAliasRecord({HostedZoneId:S,Name:q,Type:"AAAA",TargetHostedZoneId:D.CloudFrontHostedZoneId,TargetDNSName:Y.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records ensured for ${q}`)}catch(A){console.log(`Note: Could not update Route53 records: ${A.message}`)}return{success:!0,stackName:`existing-${Y.Id}`,bucket:L,distributionId:Y.Id,distributionDomain:Y.DomainName,domain:q,certificateArn:B,message:"Using existing CloudFront distribution"}}}}}catch{}if(S)try{let Y=(await $.listResourceRecordSets({HostedZoneId:S})).ResourceRecordSets||[];for(let V of Y)if(V.Name===`${q}.`&&(V.Type==="A"||V.Type==="AAAA")){if(V.AliasTarget){console.log(`Found orphaned Route53 ${V.Type} record for ${q}, cleaning up...`);try{await $.deleteRecord({HostedZoneId:S,RecordSet:V}),console.log(`Deleted orphaned Route53 ${V.Type} record for ${q}`)}catch(T){console.log(`Note: Could not delete Route53 record: ${T.message}`)}}}}catch{}}if(!U)try{if((await K.headBucket(F)).exists){console.log(`Found orphaned S3 bucket ${F}, cleaning up...`);try{let Y=K.emptyBucket(F).then(()=>K.deleteBucket(F)),V=new Promise((T,H)=>setTimeout(()=>H(Error("Bucket cleanup timeout")),30000));await Promise.race([Y,V]),console.log(`Deleted orphaned S3 bucket ${F}`)}catch(Y){console.log(`Note: Could not clean up S3 bucket: ${Y.message}`);let V=Date.now().toString(36);M=`${F}-${V}`,console.log(`Using alternative bucket name: ${M}`)}}}catch{}}let y=t({bucketName:M,domain:q,certificateArn:B,hostedZoneId:S,defaultRootObject:G.defaultRootObject,errorDocument:G.errorDocument}),R=Object.entries(G.tags||{}).map(([K,Z])=>({Key:K,Value:Z}));R.push({Key:"ManagedBy",Value:"ts-cloud"}),R.push({Key:"Application",Value:G.siteName});let N,I=!1;if(x){I=!0,console.log(`Updating CloudFormation stack: ${J}`),console.log(`Using existing bucket: ${M}`),console.log(`Domain: ${q||"not specified"}`),console.log(`Certificate ARN: ${B||"not specified"}`);try{N=(await _.updateStack({stackName:J,templateBody:JSON.stringify(y),capabilities:["CAPABILITY_IAM"],tags:R})).StackId,console.log(`Update initiated, stack ID: ${N}`)}catch(K){if(K.message?.includes("No updates are to be performed")){let Z=await _.describeStacks({stackName:J});N=Z.Stacks[0].StackId;let U=Z.Stacks[0]?.Outputs||[],X=(Y)=>U.find((V)=>V.OutputKey===Y)?.OutputValue;return{success:!0,stackId:N,stackName:J,bucket:X("BucketName")||M,distributionId:X("DistributionId"),distributionDomain:X("DistributionDomain"),domain:q,certificateArn:B,message:"Static site infrastructure is already up to date"}}else throw K}}else console.log(`Creating CloudFormation stack: ${J}`),console.log(`Bucket name: ${M}`),console.log(`Domain: ${q||"not specified"}`),console.log(`Certificate ARN: ${B||"not specified"}`),console.log("Stack does not exist, creating..."),N=(await _.createStack({stackName:J,templateBody:JSON.stringify(y),capabilities:["CAPABILITY_IAM"],tags:R,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${N}`);console.log(`Waiting for stack to reach ${I?"stack-update-complete":"stack-create-complete"}...`);try{await _.waitForStack(J,I?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(K){if(K.message?.includes("must be verified")||K.message?.includes("Access denied for operation")||K.message?.includes("failed")){console.log("CloudFormation deployment failed, trying direct API creation...");let Z=new p;if(q)try{let U=await Z.listDistributions();for(let X of U){let Y=[];if(X.Aliases?.Items){if(Array.isArray(X.Aliases.Items))Y=X.Aliases.Items;else if(typeof X.Aliases.Items==="object"){let V=X.Aliases.Items.CNAME;if(typeof V==="string")Y=[V];else if(Array.isArray(V))Y=V}}if(Y.includes(q)){console.log(`Found existing CloudFront distribution ${X.Id} with alias ${q}`);let T=(await Z.getDistributionConfig(X.Id)).DistributionConfig?.Origins?.Items,H;if(T){let L=[];if(Array.isArray(T))L=T;else if(T.Origin)L=Array.isArray(T.Origin)?T.Origin:[T.Origin];else L=[T];for(let v of L){let b=(v.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(b){H=b[1];break}}}if(H)return console.log(`Using existing S3 bucket: ${H}`),{success:!0,stackName:`existing-${X.Id}`,bucket:H,distributionId:X.Id,distributionDomain:X.DomainName,domain:q,certificateArn:B,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}}catch{}console.log("No existing infrastructure found, creating via direct API calls...");try{let U=new w(Q);if((await U.headBucket(M)).exists)console.log(`Using existing S3 bucket: ${M}`);else console.log(`Creating S3 bucket: ${M}...`),await U.createBucket(M);await U.putBucketWebsite(M,{IndexDocument:G.defaultRootObject||"index.html",ErrorDocument:G.errorDocument||"404.html"}),await U.putPublicAccessBlock(M,{BlockPublicAcls:!0,IgnorePublicAcls:!0,BlockPublicPolicy:!1,RestrictPublicBuckets:!1}),console.log(`S3 bucket ${M} configured`);let Y=`OAC-${M}`;console.log(`Creating Origin Access Control: ${Y}...`);let V=await Z.findOrCreateOriginAccessControl(Y);console.log(`Origin Access Control ${V.Id} ready`),console.log("Creating CloudFront distribution...");let T=await Z.createDistributionForS3({bucketName:M,bucketRegion:Q,originAccessControlId:V.Id,aliases:q?[q]:[],certificateArn:B,defaultRootObject:G.defaultRootObject||"index.html",comment:`Distribution for ${q||M}`});console.log(`CloudFront distribution ${T.Id} created`),console.log("Updating S3 bucket policy...");let H=p.getS3BucketPolicyForCloudFront(M,T.ARN);if(await U.putBucketPolicy(M,H),console.log("S3 bucket policy updated"),q&&S){console.log(`Creating Route53 records for ${q}...`);try{await $.createAliasRecord({HostedZoneId:S,Name:q,Type:"A",TargetHostedZoneId:D.CloudFrontHostedZoneId,TargetDNSName:T.DomainName,EvaluateTargetHealth:!1}),await $.createAliasRecord({HostedZoneId:S,Name:q,Type:"AAAA",TargetHostedZoneId:D.CloudFrontHostedZoneId,TargetDNSName:T.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records created for ${q}`)}catch(L){console.log(`Note: Could not create Route53 records: ${L.message}`)}}return{success:!0,stackName:`direct-${T.Id}`,bucket:M,distributionId:T.Id,distributionDomain:T.DomainName,domain:q,certificateArn:B,message:"Static site infrastructure created via direct API calls"}}catch(U){return console.log(`Direct API creation failed: ${U.message}`),{success:!1,stackId:N,stackName:J,bucket:M,message:`Deployment failed: ${U.message}`}}}return{success:!1,stackId:N,stackName:J,bucket:M,message:`Stack deployment failed: ${K.message}`}}let E=(await _.describeStacks({stackName:J})).Stacks[0]?.Outputs||[],O=(K)=>E.find((Z)=>Z.OutputKey===K)?.OutputValue;return{success:!0,stackId:N,stackName:J,bucket:O("BucketName")||M,distributionId:O("DistributionId"),distributionDomain:O("DistributionDomain"),domain:q,certificateArn:B,message:"Static site infrastructure deployed successfully"}}async function i(G){let{sourceDir:Q,bucket:z,region:q,cacheControl:F="max-age=31536000, public",onProgress:J}=G,_=new w(q),{readdir:$}=await import("node:fs/promises"),{join:W,relative:j}=await import("node:path"),{createHash:S}=await import("node:crypto");async function B(E){let O=[],K=await $(E,{withFileTypes:!0});for(let Z of K){let U=W(E,Z.name);if(Z.isDirectory())O.push(...await B(U));else O.push(U)}return O}function x(E){let O=E.split(".").pop()?.toLowerCase();return{html:"text/html; charset=utf-8",css:"text/css; charset=utf-8",js:"application/javascript; charset=utf-8",json:"application/json; charset=utf-8",png:"image/png",jpg:"image/jpeg",jpeg:"image/jpeg",gif:"image/gif",svg:"image/svg+xml",ico:"image/x-icon",webp:"image/webp",woff:"font/woff",woff2:"font/woff2",ttf:"font/ttf",xml:"application/xml",txt:"text/plain; charset=utf-8",sh:"text/plain; charset=utf-8",bash:"text/plain; charset=utf-8",ps1:"text/plain; charset=utf-8"}[O||""]||"application/octet-stream"}function C(E){return S("md5").update(E).digest("hex")}async function M(){let E=new Map,O;do{let K=await _.listObjects({bucket:z,maxKeys:1000,continuationToken:O});for(let Z of K.objects){let U=Z.ETag?.replace(/"/g,"")||"";E.set(Z.Key,U)}O=K.nextContinuationToken}while(O);return E}let y=await B(Q),R=[],N=0,I=0,h=await M();for(let E of y){let O=j(Q,E),K=x(E),Z=E.endsWith(".html")?"max-age=3600, public":F;try{let U=Buffer.from(await Bun.file(E).arrayBuffer()),X=C(U),Y=h.get(O);if(Y&&Y===X){I++,J?.(N+I,y.length,O);continue}await _.putObject({bucket:z,key:O,body:U,contentType:K,cacheControl:Z}),N++,J?.(N+I,y.length,O)}catch(U){R.push(`Failed to upload ${O}: ${U.message}`)}}return{uploaded:N,skipped:I,errors:R}}async function qq(G){return{invalidationId:(await new p().invalidateAll(G)).Id}}async function jq(G,Q="us-east-1"){let z=new l(Q);try{let _=((await z.describeStacks({stackName:G})).Stacks[0]?.Outputs||[]).find(($)=>$.OutputKey==="BucketName")?.OutputValue;if(_)await new w(Q).emptyBucket(_)}catch{}await z.deleteStack(G);let q=await z.waitForStackComplete(G,60,1e4);return{success:q.success||q.status==="DELETE_COMPLETE",message:q.success?"Static site deleted successfully":`Deletion failed: ${q.status}`}}async function Mq(G){let{sourceDir:Q,cleanBucket:z=!1,onProgress:q,...F}=G;q?.("infrastructure","Deploying CloudFormation stack...");let J=await o(F);if(!J.success)return J;if(z){q?.("clean","Cleaning old files from S3...");try{await new w(F.region||"us-east-1").emptyBucket(J.bucket)}catch(W){console.log(`Note: Could not clean bucket: ${W.message}`)}}q?.("upload","Uploading files to S3...");let _=await i({sourceDir:Q,bucket:J.bucket,region:F.region||"us-east-1",cacheControl:F.cacheControl,onProgress:(W,j,S)=>{q?.("upload",`${W}/${j}: ${S}`)}});if(_.errors.length>0)return{...J,success:!1,message:`Upload errors: ${_.errors.join(", ")}`,filesUploaded:_.uploaded};if(J.distributionId&&_.uploaded>0)q?.("invalidate","Invalidating CloudFront cache..."),await qq(J.distributionId);q?.("complete","Deployment complete!");let $=_.skipped>0?`Deployed ${_.uploaded} files (${_.skipped} unchanged)`:`Deployed ${_.uploaded} files successfully`;return{...J,filesUploaded:_.uploaded,filesSkipped:_.skipped,message:$}}
60
- export{t as p,o as q,i as r,qq as s,jq as t,Mq as u,Hq as v};
@@ -1,6 +0,0 @@
1
- import{op as M,pp as O}from"./chunk-c8sypnbe.js";var b={};M(b,{warning:()=>$,warn:()=>_,table:()=>W,success:()=>Y,step:()=>L,select:()=>S,prompt:()=>U,info:()=>T,header:()=>k,getAwsRegions:()=>V,getAwsAccountId:()=>C,formatDuration:()=>z,formatBytes:()=>v,error:()=>Z,confirm:()=>I,colors:()=>B,colorize:()=>K,checkAwsCredentials:()=>y,checkAwsCli:()=>R,box:()=>A,Spinner:()=>D,ProgressBar:()=>G});var B={reset:"\x1B[0m",bright:"\x1B[1m",dim:"\x1B[2m",red:"\x1B[31m",green:"\x1B[32m",yellow:"\x1B[33m",blue:"\x1B[34m",magenta:"\x1B[35m",cyan:"\x1B[36m",white:"\x1B[37m",gray:"\x1B[90m"};function K(j,q){return`${B[q]}${j}${B.reset}`}function Y(j){console.log(`${B.green}✓${B.reset} ${j}`)}function Z(j){console.error(`${B.red}✗${B.reset} ${j}`)}function _(j){console.warn(`${B.yellow}⚠${B.reset} ${j}`)}var $=_;function T(j){console.log(`${B.blue}ℹ${B.reset} ${j}`)}function L(j){console.log(`${B.cyan}→${B.reset} ${j}`)}function k(j){console.log(`
2
- ${B.bright}${B.cyan}${j}${B.reset}
3
- `)}var Q=!!(process.env.CI||process.env.GITHUB_ACTIONS||process.env.BUILDKITE||process.env.CIRCLECI||process.env.GITLAB_CI);class D{frames=["⠋","⠙","⠹","⠸","⠼","⠴","⠦","⠧","⠇","⠏"];interval=null;currentFrame=0;message;constructor(j){this.message=j}get text(){return this.message}set text(j){if(this.message=j,Q&&this.interval)console.log(` ${j}`)}start(){if(Q){console.log(` ${this.message}`),this.interval=!0;return}this.interval=setInterval(()=>{process.stdout.write(`\r${B.cyan}${this.frames[this.currentFrame]}${B.reset} ${this.message}`),this.currentFrame=(this.currentFrame+1)%this.frames.length},80)}succeed(j){this.stop(),Y(j||this.message)}fail(j){this.stop(),Z(j||this.message)}warn(j){this.stop(),$(j||this.message)}stop(){if(this.interval){if(!Q)process.stdout.write("\r");if(typeof this.interval==="object")clearInterval(this.interval);this.interval=null}}}class G{total;current=0;width=40;constructor(j){this.total=j}update(j){this.current=j,this.render()}increment(){this.current++,this.render()}render(){let j=Math.floor(this.current/this.total*100),q=Math.floor(this.current/this.total*this.width),E=this.width-q,F=`${"█".repeat(q)}${"░".repeat(E)}`;if(process.stdout.write(`\r${B.cyan}${F}${B.reset} ${j}% (${this.current}/${this.total})`),this.current>=this.total)process.stdout.write(`
4
- `)}}async function U(j,q){let F=(await import("node:readline")).createInterface({input:process.stdin,output:process.stdout});return new Promise((J)=>{let H=q?`${B.cyan}?${B.reset} ${j} ${B.gray}(${q})${B.reset}: `:`${B.cyan}?${B.reset} ${j}: `;F.question(H,(N)=>{F.close(),J(N||q||"")})})}async function I(j,q=!1){let E=await U(`${j} (y/n)`,q?"y":"n");return E.toLowerCase()==="y"||E.toLowerCase()==="yes"}async function S(j,q){console.log(`${B.cyan}?${B.reset} ${j}`),q.forEach((J,H)=>{console.log(` ${B.gray}${H+1}.${B.reset} ${J}`)});let E=await U("Select","1"),F=Number.parseInt(E)-1;if(F>=0&&F<q.length)return q[F];return q[0]}function W(j,q){let E=j.map((J,H)=>{let N=Math.max(...q.map((P)=>(P[H]||"").length));return Math.max(J.length,N)}),F=j.map((J,H)=>J.padEnd(E[H])).join(" ");console.log(K(F,"bright")),console.log(K("─".repeat(F.length),"gray")),q.forEach((J)=>{let H=J.map((N,P)=>(N||"").padEnd(E[P])).join(" ");console.log(H)})}function v(j){if(j===0)return"0 B";let q=1024,E=["B","KB","MB","GB","TB"],F=Math.floor(Math.log(j)/Math.log(q));return`${Number.parseFloat((j/q**F).toFixed(2))} ${E[F]}`}function z(j){if(j<1000)return`${j}ms`;let q=Math.floor(j/1000);if(q<60)return`${q}s`;let E=Math.floor(q/60),F=q%60;if(E<60)return`${E}m ${F}s`;let J=Math.floor(E/60),H=E%60;return`${J}h ${H}m`}function A(j,q="cyan"){let E=j.split(`
5
- `),F=Math.max(...E.map((H)=>H.length)),J="─".repeat(F+2);console.log(K(`┌${J}┐`,q)),E.forEach((H)=>{console.log(K(`│ ${H.padEnd(F)} │`,q))}),console.log(K(`└${J}┘`,q))}async function R(){return!0}async function y(){try{let{AWSClient:j}=await import("./chunk-gc82cx4h.js");return await new j().request({service:"sts",region:"us-east-1",method:"POST",path:"/",body:new URLSearchParams({Action:"GetCallerIdentity",Version:"2011-06-15"}).toString()}),!0}catch{return!1}}async function C(){try{let{AWSClient:j}=await import("./chunk-gc82cx4h.js"),E=await new j().request({service:"sts",region:"us-east-1",method:"POST",path:"/",body:new URLSearchParams({Action:"GetCallerIdentity",Version:"2011-06-15"}).toString()});return E.Account||E.GetCallerIdentityResult?.Account||null}catch{return null}}async function V(){try{let{AWSClient:j}=await import("./chunk-gc82cx4h.js"),E=await new j().request({service:"ec2",region:"us-east-1",method:"POST",path:"/",body:new URLSearchParams({Action:"DescribeRegions",Version:"2016-11-15"}).toString()}),F=[];if(E.regionInfo){let J=Array.isArray(E.regionInfo)?E.regionInfo:[E.regionInfo];F.push(...J.map((H)=>H.regionName))}return F.length>0?F:X()}catch{return X()}}function X(){return["us-east-1","us-east-2","us-west-1","us-west-2","eu-west-1","eu-central-1","ap-southeast-1","ap-northeast-1"]}
6
- export{B as Jg,K as Kg,Y as Lg,Z as Mg,_ as Ng,$ as Og,T as Pg,L as Qg,k as Rg,D as Sg,U as Tg,I as Ug,S as Vg,W as Wg,v as Xg,A as Yg,R as Zg,y as _g,C as $g,V as ah,b as bh};
@@ -1,6 +0,0 @@
1
- import*as O from"node:crypto";import{existsSync as U,readFileSync as Q}from"node:fs";import{homedir as G}from"node:os";import{join as y}from"node:path";var W={amp:"&",lt:"<",gt:">",quot:'"',apos:"'"},L={nbsp:" ",copy:"©",reg:"®",trade:"™",euro:"€",pound:"£",yen:"¥",cent:"¢",deg:"°",micro:"µ",middot:"·",bull:"•",hellip:"…",prime:"′",Prime:"″",laquo:"«",raquo:"»",lsquo:"‘",rsquo:"’",ldquo:"“",rdquo:"”",ndash:"–",mdash:"—",iexcl:"¡",iquest:"¿",sect:"§",para:"¶",dagger:"†",Dagger:"‡",lsaquo:"‹",rsaquo:"›",oline:"‾",frasl:"⁄",ensp:" ",emsp:" ",thinsp:" ",zwnj:"‌",zwj:"‍",lrm:"‎",rlm:"‏",times:"×",divide:"÷",plusmn:"±",ne:"≠",le:"≤",ge:"≥",infin:"∞",fnof:"ƒ",Alpha:"Α",Beta:"Β",Gamma:"Γ",Delta:"Δ",Epsilon:"Ε",Zeta:"Ζ",Eta:"Η",Theta:"Θ",Iota:"Ι",Kappa:"Κ",Lambda:"Λ",Mu:"Μ",Nu:"Ν",Xi:"Ξ",Omicron:"Ο",Pi:"Π",Rho:"Ρ",Sigma:"Σ",Tau:"Τ",Upsilon:"Υ",Phi:"Φ",Chi:"Χ",Psi:"Ψ",Omega:"Ω",alpha:"α",beta:"β",gamma:"γ",delta:"δ",epsilon:"ε",zeta:"ζ",eta:"η",theta:"θ",iota:"ι",kappa:"κ",lambda:"λ",mu:"μ",nu:"ν",xi:"ξ",omicron:"ο",pi:"π",rho:"ρ",sigmaf:"ς",sigma:"σ",tau:"τ",upsilon:"υ",phi:"φ",chi:"χ",psi:"ψ",omega:"ω",thetasym:"ϑ",upsih:"ϒ",piv:"ϖ",larr:"←",uarr:"↑",rarr:"→",darr:"↓",harr:"↔",crarr:"↵",lArr:"⇐",uArr:"⇑",rArr:"⇒",dArr:"⇓",hArr:"⇔",forall:"∀",part:"∂",exist:"∃",empty:"∅",nabla:"∇",isin:"∈",notin:"∉",ni:"∋",prod:"∏",sum:"∑",minus:"−",lowast:"∗",radic:"√",prop:"∝",ang:"∠",and:"∧",or:"∨",cap:"∩",cup:"∪",int:"∫",there4:"∴",sim:"∼",cong:"≅",asymp:"≈",equiv:"≡",sub:"⊂",sup:"⊃",nsub:"⊄",sube:"⊆",supe:"⊇",oplus:"⊕",otimes:"⊗",perp:"⊥",sdot:"⋅",lceil:"⌈",rceil:"⌉",lfloor:"⌊",rfloor:"⌋",lang:"〈",rang:"〉",loz:"◊",spades:"♠",clubs:"♣",hearts:"♥",diams:"♦",Agrave:"À",Aacute:"Á",Acirc:"Â",Atilde:"Ã",Auml:"Ä",Aring:"Å",AElig:"Æ",Ccedil:"Ç",Egrave:"È",Eacute:"É",Ecirc:"Ê",Euml:"Ë",Igrave:"Ì",Iacute:"Í",Icirc:"Î",Iuml:"Ï",ETH:"Ð",Ntilde:"Ñ",Ograve:"Ò",Oacute:"Ó",Ocirc:"Ô",Otilde:"Õ",Ouml:"Ö",Oslash:"Ø",Ugrave:"Ù",Uacute:"Ú",Ucirc:"Û",Uuml:"Ü",Yacute:"Ý",THORN:"Þ",szlig:"ß",agrave:"à",aacute:"á",acirc:"â",atilde:"ã",auml:"ä",aring:"å",aelig:"æ",ccedil:"ç",egrave:"è",eacute:"é",ecirc:"ê",euml:"ë",igrave:"ì",iacute:"í",icirc:"î",iuml:"ï",eth:"ð",ntilde:"ñ",ograve:"ò",oacute:"ó",ocirc:"ô",otilde:"õ",ouml:"ö",oslash:"ø",ugrave:"ù",uacute:"ú",ucirc:"û",uuml:"ü",yacute:"ý",thorn:"þ",yuml:"ÿ",OElig:"Œ",oelig:"œ",Scaron:"Š",scaron:"š",Yuml:"Ÿ",circ:"ˆ",tilde:"˜"};class ${customEntities={};useHtmlEntities;constructor(e=!1){this.useHtmlEntities=e}addEntity(e,t){this.customEntities[e]=t}decodeEntities(e){let t=e.indexOf("&");if(t===-1)return e;let i=e.length,n="",r=0;while(t!==-1&&t<i){if(t>r)n+=e.substring(r,t);let s=e.indexOf(";",t+1);if(s===-1||s-t>32){n+="&",r=t+1,t=e.indexOf("&",r);continue}let u=e.substring(t+1,s);if(u.charCodeAt(0)===35){let a=u.length,c=0,A=!1;if(a>2&&(u.charCodeAt(1)===120||u.charCodeAt(1)===88)){A=!0;for(let g=2;g<a;g++){let h=u.charCodeAt(g);if(h>=48&&h<=57)c=c<<4|h-48;else if(h>=65&&h<=70)c=c<<4|h-55;else if(h>=97&&h<=102)c=c<<4|h-87;else{A=!1;break}}}else if(a>1){A=!0;for(let g=1;g<a;g++){let h=u.charCodeAt(g);if(h>=48&&h<=57)c=c*10+(h-48);else{A=!1;break}}}if(A)n+=String.fromCodePoint(c);else n+=e.substring(t,s+1)}else{let a=this.customEntities[u];if(a===void 0){let c=u.length;if(c>=2&&c<=4){let A=u.charCodeAt(0);if(A===108&&c===2&&u.charCodeAt(1)===116)a="<";else if(A===103&&c===2&&u.charCodeAt(1)===116)a=">";else if(A===97&&c===3&&u.charCodeAt(1)===109&&u.charCodeAt(2)===112)a="&";else if(A===113&&c===4)a=u==="quot"?'"':void 0;else if(A===97&&c===4)a=u==="apos"?"'":void 0}if(a===void 0)a=W[u]??(this.useHtmlEntities?L[u]:void 0)}if(a!==void 0)n+=a;else n+=e.substring(t,s+1)}r=s+1,t=e.indexOf("&",r)}if(r<i)n+=e.substring(r);return n}}var p=[];p[38]="&amp;";p[60]="&lt;";p[62]="&gt;";p[34]="&quot;";p[39]="&apos;";var Y={attributeNamePrefix:"@_",attributesGroupName:!1,textNodeName:"#text",ignoreAttributes:!0,removeNSPrefix:!1,allowBooleanAttributes:!1,alwaysCreateTextNode:!1,trimValues:!0,parseTagValue:!0,parseAttributeValue:!1,processEntities:!0,htmlEntities:!1,commentPropName:!1,cdataPropName:!1,piPropName:!1,preserveOrder:!1,stopNodes:[],unpairedTags:[],isArray:void 0,tagValueProcessor:void 0,attributeValueProcessor:void 0,updateTag:void 0,numberParseOptions:{hex:!0,leadingZeros:!0,scientific:!0},ignorePiTags:!1,transformAttributeName:void 0,transformTagName:void 0,ignoreDeclaration:!1};function P(e){return e===32||e===9||e===10||e===13}function V(e){return e>=65&&e<=90||e>=97&&e<=122||e===95||e===58||e>=192&&e<=214||e>=216&&e<=246||e>=248&&e<=767||e>=880&&e<=893||e>=895&&e<=8191||e>=8204&&e<=8205||e>=8304&&e<=8591||e>=11264&&e<=12271||e>=12289&&e<=55295||e>=63744&&e<=64975||e>=65008&&e<=65533}function x(e){return V(e)||e===45||e===46||e>=48&&e<=57||e===183||e>=768&&e<=879||e>=8255&&e<=8256}var z=/^0x[\da-fA-F]+$/,Z=/^[+-]?\d+(\.\d+)?[eE][+-]?\d+$/,j=/^[+-]?(\d+\.?\d*|\.\d+)$/;function I(e,t){return e.charCodeAt(t)===91&&e.charCodeAt(t+1)===67&&e.charCodeAt(t+2)===68&&e.charCodeAt(t+3)===65&&e.charCodeAt(t+4)===84&&e.charCodeAt(t+5)===65&&e.charCodeAt(t+6)===91}function D(e,t){let i=e.charCodeAt(t),n=e.charCodeAt(t+1),r=e.charCodeAt(t+2),s=e.charCodeAt(t+3),u=e.charCodeAt(t+4),a=e.charCodeAt(t+5),c=e.charCodeAt(t+6);return(i===68||i===100)&&(n===79||n===111)&&(r===67||r===99)&&(s===84||s===116)&&(u===89||u===121)&&(a===80||a===112)&&(c===69||c===101)}function M(e,t,i){if(t>=i||!V(e.charCodeAt(t)))return t;t++;while(t<i&&x(e.charCodeAt(t)))t++;return t}class B{options;entityDecoder;unpairedSet;exactStopNodes;wildcardStopSuffixes;needsJPath;_ignoreAttributes=!0;_textNodeName="#text";_commentPropName=!1;_cdataPropName=!1;_piPropName=!1;_alwaysCreateTextNode=!1;_trimValues=!0;_processEntities=!0;_parseTagValue=!0;_parseAttributeValue=!1;_removeNSPrefix=!1;_attrPrefix="@_";_attrsGroupName=!1;_ignorePiTags=!1;_ignoreDeclaration=!1;constructor(e){this.options={...Y,...e},this.entityDecoder=new $(this.options.htmlEntities),this.unpairedSet=new Set(this.options.unpairedTags),this.exactStopNodes=new Set,this.wildcardStopSuffixes=[];for(let t of this.options.stopNodes)if(t.startsWith("*."))this.wildcardStopSuffixes.push(t.substring(2));else this.exactStopNodes.add(t);this._ignoreAttributes=this.options.ignoreAttributes,this._textNodeName=this.options.textNodeName,this._commentPropName=this.options.commentPropName,this._cdataPropName=this.options.cdataPropName,this._piPropName=this.options.piPropName,this._alwaysCreateTextNode=this.options.alwaysCreateTextNode,this._trimValues=this.options.trimValues,this._processEntities=this.options.processEntities,this._parseTagValue=this.options.parseTagValue,this._parseAttributeValue=this.options.parseAttributeValue,this._removeNSPrefix=this.options.removeNSPrefix,this._attrPrefix=this.options.attributeNamePrefix,this._attrsGroupName=this.options.attributesGroupName,this._ignorePiTags=this.options.ignorePiTags,this._ignoreDeclaration=this.options.ignoreDeclaration,this.needsJPath=this.options.stopNodes.length>0||this.options.isArray!==void 0||this.options.updateTag!==void 0||this.options.tagValueProcessor!==void 0||this.options.attributeValueProcessor!==void 0}addEntity(e,t){this.entityDecoder.addEntity(e,t)}parse(e){if(e instanceof Uint8Array)e=new TextDecoder().decode(e);let t=e;if(this.options.preserveOrder)return this.parseOrdered(t);return this.parseUnordered(t)}parseUnordered(e){let t={},i=e.length,n=0;if(i>0&&e.charCodeAt(0)===65279)n=1;return n=this.parseChildren(e,n,i,t,"",[]),t}parseOrdered(e){let t=e.length,i=0;if(t>0&&e.charCodeAt(0)===65279)i=1;let n=[];return this.parseChildrenOrdered(e,i,t,n,""),n}readTagName(e,t,i){return M(e,t,i)}extractTagName(e,t,i){let n=e.substring(t,i);if(this._removeNSPrefix){let r=n.indexOf(":");if(r!==-1)n=n.substring(r+1)}if(this.options.transformTagName)n=this.options.transformTagName(n);return n}parseAttributes(e,t,i,n,r){let s=0,u=this._removeNSPrefix,a=this.options.transformAttributeName,c=this._trimValues,A=this._processEntities,g=this.options.attributeValueProcessor;while(t<i){let h=e.charCodeAt(t);while(h===32||h===9||h===10||h===13){if(t++,t>=i)break;h=e.charCodeAt(t)}if(t>=i)break;if(h===62||h===47)break;let N=t;if(!V(h))break;t++;while(t<i&&x(e.charCodeAt(t)))t++;let d=e.substring(N,t);if(u){let C=d.indexOf(":");if(C!==-1)d=d.substring(C+1)}if(a)d=a(d);while(t<i&&P(e.charCodeAt(t)))t++;if(t<i&&e.charCodeAt(t)===61){t++;while(t<i&&P(e.charCodeAt(t)))t++;if(t>=i)break;let C=e.charCodeAt(t);if(C===34||C===39){t++;let _=t;while(t<i&&e.charCodeAt(t)!==C)t++;let f=e.substring(_,t);if(c&&f.length>0){let o=f.charCodeAt(0),l=f.charCodeAt(f.length-1);if(o<=32||l<=32)f=f.trim()}if(A)f=this.entityDecoder.decodeEntities(f);if(g)f=g(d,f,n)??f;if(r[d]=f,s++,t<i)t++}}else r[d]="true",s++}return s>0?-t-1:t}processTagValue(e,t,i,n,r){if(this._trimValues){let s=e.length;if(s>0){let u=e.charCodeAt(0),a=e.charCodeAt(s-1);if(u<=32||a<=32)e=e.trim()}}if(this._processEntities)e=this.entityDecoder.decodeEntities(e);if(this.options.tagValueProcessor){let s=this.options.tagValueProcessor(t,e,i,n,r);if(s!==void 0)e=s}if(!e)return e;if(this._parseTagValue)return this.parseValue(e);return e}parseValue(e){if(e==="true")return!0;if(e==="false")return!1;if(!e)return e;let t=e.charCodeAt(0);if(!(t>=48&&t<=57||t===43||t===45||t===46))return e;let n=this.options.numberParseOptions;if(n.skipLike?.test(e))return e;if(n.hex&&t===48&&z.test(e))return Number.parseInt(e,16);if(e.length>1&&t===48&&e.charCodeAt(1)!==46){if(n.leadingZeros)return e}if(n.scientific&&Z.test(e)){let r=Number(e);if(!Number.isNaN(r))return r}if(j.test(e)){let r=Number(e);if(!Number.isNaN(r))return r}return e}parseAttributeValue(e){if(!this._parseAttributeValue)return e;return this.parseValue(e)}isStopNode(e){if(this.exactStopNodes.has(e))return!0;for(let t of this.wildcardStopSuffixes)if(e.endsWith(`.${t}`)||e===t)return!0;return!1}readStopNodeContent(e,t,i,n){let r=`</${n}`,s=e.indexOf(r,t);if(s===-1)return{content:e.substring(t),pos:i};let u=e.substring(t,s),a=s+r.length;while(a<i&&e.charCodeAt(a)!==62)a++;if(a<i)a++;return{content:u,pos:a}}addToObj(e,t,i,n,r,s){let u=e[t];if(u!==void 0)if(!Array.isArray(u))e[t]=[u,i];else u.push(i);else if(this.options.isArray?.(t,n,r,s))e[t]=[i];else e[t]=i}flushText(e,t,i,n){if(!e&&!t)return;let r=this._textNodeName;if(t){let s=e;if(s&&this._processEntities)s=this.entityDecoder.decodeEntities(s);let u=t+s;if(this._trimValues&&u.length>0){let a=u.charCodeAt(0),c=u.charCodeAt(u.length-1);if(a<=32||c<=32)u=u.trim()}if(this.options.tagValueProcessor){let a=this.options.tagValueProcessor(r,u,i,!1,!0);if(a!==void 0)u=a}if(u){let a=this._parseTagValue?this.parseValue(u):u;if(a!==void 0&&a!=="")this.addToObj(n,r,a,i,!0,!1)}}else{let s=this.processTagValue(e,r,i,!1,!0);if(s!==void 0&&s!=="")this.addToObj(n,r,s,i,!0,!1)}}parseChildren(e,t,i,n,r,s){let u="",a="",c=this.needsJPath;while(t<i){if(e.charCodeAt(t)!==60){let o=t;t++;while(t<i&&e.charCodeAt(t)!==60)t++;if(!u)u=e.substring(o,t);else u+=e.substring(o,t);continue}if(t+1>=i)break;let g=e.charCodeAt(t+1);if(g===33&&t+3<i&&e.charCodeAt(t+2)===45&&e.charCodeAt(t+3)===45){if(u||a)this.flushText(u,a,r,n),u="",a="";t+=4;let o=e.indexOf("-->",t);if(o===-1){t=i;break}if(this._commentPropName){let l=e.substring(t,o);this.addToObj(n,this._commentPropName,l,r,!0,!1)}t=o+3;continue}if(g===33&&t+8<i&&I(e,t+2)){t+=9;let o=e.indexOf("]]>",t);if(o===-1){t=i;break}let l=e.substring(t,o);if(this._cdataPropName)this.flushText(u,a,r,n),u="",a="",this.addToObj(n,this._cdataPropName,l,r,!0,!1);else{if(u){let b=u;if(this._processEntities)b=this.entityDecoder.decodeEntities(b);a+=b,u=""}a+=l}t=o+3;continue}if(g===33&&t+9<i&&D(e,t+2)){t+=9;let o=1;while(t<i&&o>0){let l=e.charCodeAt(t);if(l===60)o++;else if(l===62)o--;t++}continue}if(g===63){t+=2;let o=t;while(t<i&&!P(e.charCodeAt(t))&&e.charCodeAt(t)!==63)t++;let l=e.substring(o,t),b=e.indexOf("?>",t);if(b===-1){t=i;break}let m=e.substring(t,b).trim();if(l==="xml"){if(!this._ignoreDeclaration&&this._piPropName){let T=this.parsePiAttributes(m);this.addToObj(n,this._piPropName,{[l]:T},r,!0,!1)}}else if(!this._ignorePiTags&&this._piPropName)this.addToObj(n,this._piPropName,{[l]:m},r,!0,!1);t=b+2;continue}if(g===47){if(u||a)this.flushText(u,a,r,n),u="",a="";t+=2;let o=t,l=this.readTagName(e,t,i),b=this.extractTagName(e,o,l);t=l;while(t<i&&P(e.charCodeAt(t)))t++;if(t<i&&e.charCodeAt(t)===62)t++;if(s.length>0&&s[s.length-1]===b){s.pop();continue}return t}if(u||a)this.flushText(u,a,r,n),u="",a="";t++;let h=t,N=this.readTagName(e,t,i),d=this.extractTagName(e,h,N);if(!d){t=N+1;continue}t=N;let C=c?r?`${r}.${d}`:d:"",_={},f=!1;if(!this._ignoreAttributes){let o=this.parseAttributes(e,t,i,C,_);if(o<0)t=-o-1,f=!0;else t=o}else while(t<i){let o=e.charCodeAt(t);if(o===62||o===47)break;if(o===34||o===39){t++;while(t<i&&e.charCodeAt(t)!==o)t++}t++}if(this.options.updateTag){if(this.options.updateTag(d,C,_)===!1){while(t<i&&P(e.charCodeAt(t)))t++;if(t<i&&e.charCodeAt(t)===47)t+=2;else if(t<i&&e.charCodeAt(t)===62){t++;let l=`</${d}>`,b=e.indexOf(l,t);if(b!==-1)t=b+l.length}continue}}while(t<i&&P(e.charCodeAt(t)))t++;if(t<i&&e.charCodeAt(t)===47){if(t+=2,f||this._alwaysCreateTextNode){let o={};if(f)this.applyAttributes(o,_,C);if(this._alwaysCreateTextNode)o[this._textNodeName]="";this.addToObj(n,d,o,C,!0,!1)}else this.addToObj(n,d,"",C,!0,!1);continue}if(t<i&&e.charCodeAt(t)===62){if(t++,this.unpairedSet.has(d)){if(f){let m={};this.applyAttributes(m,_,C),this.addToObj(n,d,m,C,!0,!1)}else this.addToObj(n,d,"",C,!0,!1);s.push(d);continue}if(this.exactStopNodes.size>0||this.wildcardStopSuffixes.length>0){if(this.isStopNode(C)){let m=this.readStopNodeContent(e,t,i,d),T={};if(f)this.applyAttributes(T,_,C);if(m.content)T[this._textNodeName]=m.content;this.addToObj(n,d,T,C,!0,!1),t=m.pos;continue}}let o={};if(f)this.applyAttributes(o,_,C);t=this.parseChildren(e,t,i,o,C,s);let l=this._textNodeName,b=o[l];if(!f&&!this._alwaysCreateTextNode){let m=!0;for(let T in o)if(T!==l){m=!1;break}if(m){this.addToObj(n,d,b!==void 0?b:"",C,!0,!1);continue}}this.addToObj(n,d,o,C,!1,!1)}}if(u||a)this.flushText(u,a,r,n);return t}parseChildrenOrdered(e,t,i,n,r){let s="",u=this.needsJPath;while(t<i){if(e.charCodeAt(t)!==60){let f=t;t++;while(t<i&&e.charCodeAt(t)!==60)t++;if(!s)s=e.substring(f,t);else s+=e.substring(f,t);continue}if(t+1>=i)break;let c=e.charCodeAt(t+1);if(c===33&&t+3<i&&e.charCodeAt(t+2)===45&&e.charCodeAt(t+3)===45){if(s){let o=this.processTagValue(s,this._textNodeName,r,!1,!0);if(o!==void 0&&o!=="")n.push({[this._textNodeName]:o});s=""}t+=4;let f=e.indexOf("-->",t);if(f===-1){t=i;break}if(this._commentPropName)n.push({[this._commentPropName]:[{[this._textNodeName]:e.substring(t,f)}]});t=f+3;continue}if(c===33&&t+8<i&&I(e,t+2)){t+=9;let f=e.indexOf("]]>",t);if(f===-1){t=i;break}let o=e.substring(t,f);if(this._cdataPropName){if(s){let l=this.processTagValue(s,this._textNodeName,r,!1,!0);if(l!==void 0&&l!=="")n.push({[this._textNodeName]:l});s=""}n.push({[this._cdataPropName]:[{[this._textNodeName]:o}]})}else s+=o;t=f+3;continue}if(c===33&&t+9<i&&D(e,t+2)){t+=9;let f=1;while(t<i&&f>0){let o=e.charCodeAt(t);if(o===60)f++;else if(o===62)f--;t++}continue}if(c===63){t+=2;let f=e.indexOf("?>",t);if(f===-1){t=i;break}t=f+2;continue}if(c===47){if(s){let o=this.processTagValue(s,this._textNodeName,r,!1,!0);if(o!==void 0&&o!=="")n.push({[this._textNodeName]:o});s=""}t+=2,t=this.readTagName(e,t,i);while(t<i&&P(e.charCodeAt(t)))t++;if(t<i&&e.charCodeAt(t)===62)t++;return t}if(s){let f=this.processTagValue(s,this._textNodeName,r,!1,!0);if(f!==void 0&&f!=="")n.push({[this._textNodeName]:f});s=""}t++;let A=t,g=this.readTagName(e,t,i),h=this.extractTagName(e,A,g);if(!h){t=g+1;continue}t=g;let N=u?r?`${r}.${h}`:h:"",d={},C=!1;if(!this._ignoreAttributes){let f=this.parseAttributes(e,t,i,N,d);if(f<0)t=-f-1,C=!0;else t=f}else while(t<i){let f=e.charCodeAt(t);if(f===62||f===47)break;if(f===34||f===39){t++;while(t<i&&e.charCodeAt(t)!==f)t++}t++}while(t<i&&P(e.charCodeAt(t)))t++;let _={[h]:[]};if(C){_[":@"]={};for(let o in d)_[":@"][this._attrPrefix+o]=this.parseAttributeValue(d[o])}if(t<i&&e.charCodeAt(t)===47){t+=2,n.push(_);continue}if(t<i&&e.charCodeAt(t)===62)t++,t=this.parseChildrenOrdered(e,t,i,_[h],N),n.push(_)}if(s){let a=this.processTagValue(s,this._textNodeName,r,!1,!0);if(a!==void 0&&a!=="")n.push({[this._textNodeName]:a})}return t}applyAttributes(e,t,i){let n=this._attrPrefix;if(this._attrsGroupName){let r={};for(let s in t)r[n+s]=this.parseAttributeValue(t[s]);e[this._attrsGroupName]=r}else for(let r in t)e[n+r]=this.parseAttributeValue(t[r])}parsePiAttributes(e){let t={},i=0,n=e.length;while(i<n){while(i<n&&P(e.charCodeAt(i)))i++;if(i>=n)break;let r=i;while(i<n&&!P(e.charCodeAt(i))&&e.charCodeAt(i)!==61)i++;let s=e.substring(r,i);if(!s)break;while(i<n&&P(e.charCodeAt(i)))i++;if(i<n&&e.charCodeAt(i)===61){i++;while(i<n&&P(e.charCodeAt(i)))i++;if(i<n){let u=e.charCodeAt(i);if(u===34||u===39){i++;let a=i;while(i<n&&e.charCodeAt(i)!==u)i++;if(t[s]=e.substring(a,i),i<n)i++}}}}return t}}function F(e){let t=e.endpoint||`s3.${e.region}.amazonaws.com`,i=new URL(/^https?:\/\//i.test(t)?t:`https://${t}`);if(i.protocol!=="http:"&&i.protocol!=="https:"||i.pathname!=="/"&&i.pathname!==""||i.search||i.hash||i.username||i.password)throw Error("S3 endpoint must be an HTTP(S) origin without a path");let n=i.protocol.slice(0,-1),r=i.host;if(!e.bucket)return{protocol:n,host:r,path:e.path};if(e.forcePathStyle){let s=e.path==="/"?`/${e.bucket}`:`/${e.bucket}${e.path}`;return{protocol:n,host:r,path:s}}return{protocol:n,host:`${e.bucket}.${r}`,path:e.path}}class H{credentials;config;cache;xmlParser;constructor(e,t){this.config={maxRetries:3,retryDelay:1000,cacheEnabled:!0,defaultCacheTTL:60000,...t},this.credentials=e||this.loadCredentials(),this.cache=new Map,this.xmlParser=new B({ignoreAttributes:!1,attributeNamePrefix:"@_",textNodeName:"#text",parseAttributeValue:!0,trimValues:!0})}loadCredentials(){let e=process.env.AWS_ACCESS_KEY_ID,t=process.env.AWS_SECRET_ACCESS_KEY,i=process.env.AWS_SESSION_TOKEN;if(e&&t)return{accessKeyId:e,secretAccessKey:t,sessionToken:i};let n=this.loadCredentialsFromFile();if(n)return n;return{accessKeyId:"",secretAccessKey:""}}loadCredentialsFromFile(){let e=this.config?.profile||process.env.AWS_PROFILE||"default",t=process.env.AWS_SHARED_CREDENTIALS_FILE||y(G(),".aws","credentials");if(!U(t))return null;try{let i=Q(t,"utf-8"),n=this.parseCredentialsFile(i,e);if(n.accessKeyId&&n.secretAccessKey)return n}catch{}return null}parseCredentialsFile(e,t){let i=e.split(`
2
- `),n="",r="",s="",u;for(let a of i){let c=a.trim();if(!c||c.startsWith("#"))continue;let A=c.match(/^\[([^\]]+)\]$/);if(A){n=A[1];continue}if(n===t){let[g,...h]=c.split("="),N=h.join("=").trim();if(g.trim()==="aws_access_key_id")r=N;else if(g.trim()==="aws_secret_access_key")s=N;else if(g.trim()==="aws_session_token")u=N}}return{accessKeyId:r,secretAccessKey:s,sessionToken:u}}ec2CredentialsCache;async getCredentials(){let e=process.env.AWS_ACCESS_KEY_ID,t=process.env.AWS_SECRET_ACCESS_KEY;if(e&&t)return{accessKeyId:e,secretAccessKey:t,sessionToken:process.env.AWS_SESSION_TOKEN};let i=this.loadCredentialsFromFile();if(i)return i;if(this.ec2CredentialsCache){let n=Date.now();if(this.ec2CredentialsCache.expiration>n+300000)return this.ec2CredentialsCache.credentials}try{let r=await(await fetch("http://169.254.169.254/latest/api/token",{method:"PUT",headers:{"X-aws-ec2-metadata-token-ttl-seconds":"21600"}})).text(),u=await(await fetch("http://169.254.169.254/latest/meta-data/iam/security-credentials/",{headers:{"X-aws-ec2-metadata-token":r}})).text(),c=await(await fetch(`http://169.254.169.254/latest/meta-data/iam/security-credentials/${u}`,{headers:{"X-aws-ec2-metadata-token":r}})).json(),A={accessKeyId:c.AccessKeyId,secretAccessKey:c.SecretAccessKey,sessionToken:c.Token};return this.ec2CredentialsCache={credentials:A,expiration:new Date(c.Expiration).getTime()},A}catch(n){throw Error("AWS credentials not found. Set AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY environment variables, or run on an EC2 instance with an IAM role.")}}async request(e){if(e.method==="GET"&&this.config.cacheEnabled&&e.cacheKey){let n=this.getFromCache(e.cacheKey);if(n!==null)return n}let t=e.retries??this.config.maxRetries??3,i=null;for(let n=0;n<=t;n++)try{let r=await this.makeRequest(e);if(e.method==="GET"&&this.config.cacheEnabled&&e.cacheKey)this.setInCache(e.cacheKey,r,e.cacheTTL??this.config.defaultCacheTTL??60000);return r}catch(r){if(i=r,!this.shouldRetry(r))throw r;if(n===t)throw r;let u=this.calculateRetryDelay(n);await this.sleep(u)}throw i||Error("Request failed after retries")}async makeRequest(e){let t=e.credentials||(this.credentials?.accessKeyId?this.credentials:await this.getCredentials());if(!t||!t.accessKeyId||!t.secretAccessKey)throw Error("AWS credentials not provided");let i=this.buildUrl(e),n=this.signRequest(e,t),r=await fetch(i,{method:e.method,headers:n,body:e.body}),s=await r.text();if(!r.ok)throw this.parseError(s,r.status,r.headers);if(!s||s.trim()===""){if(e.returnHeaders)return{body:null,headers:this.headersToObject(r.headers)};return null}if(e.rawResponse){if(e.returnHeaders)return{body:s,headers:this.headersToObject(r.headers)};return s}let u;if(s.startsWith("<"))u=this.parseXmlResponse(s);else try{u=JSON.parse(s)}catch{u=s}if(e.returnHeaders)return{body:u,headers:this.headersToObject(r.headers)};return u}headersToObject(e){let t={};return e.forEach((i,n)=>{t[n]=i}),t}buildUrl(e){let{service:t,region:i,queryParams:n}=e,{path:r}=e,s,u="https";if(t==="s3"){let c=F({region:i,path:r,bucket:e.bucket,endpoint:this.config.endpoint,forcePathStyle:this.config.forcePathStyle});u=c.protocol,s=c.host,r=c.path}else if(t==="cloudfront")s="cloudfront.amazonaws.com";else if(t==="iam")s="iam.amazonaws.com";else if(t==="route53")s="route53.amazonaws.com";else if(t==="route53domains")s="route53domains.us-east-1.amazonaws.com";else if(t==="ecr")s=`api.ecr.${i}.amazonaws.com`;else if(t==="ses")s=`email.${i}.amazonaws.com`;else s=`${t}.${i}.amazonaws.com`;let a=`${u}://${s}${r}`;if(n&&Object.keys(n).length>0){let c=Object.keys(n).map((A)=>`${this.uriEncode(A)}=${this.uriEncode(n[A])}`).join("&");a+=`?${c}`}return a}signRequest(e,t){let{service:i,region:n,method:r,queryParams:s,body:u}=e,{path:a}=e,c=new Date,A=this.getAmzDate(c),g=this.getDateStamp(c),h;if(i==="s3"){let E=F({region:n,path:a,bucket:e.bucket,endpoint:this.config.endpoint,forcePathStyle:this.config.forcePathStyle});h=E.host,a=E.path}else if(i==="cloudfront")h="cloudfront.amazonaws.com";else if(i==="iam")h="iam.amazonaws.com";else if(i==="route53")h="route53.amazonaws.com";else if(i==="route53domains")h="route53domains.us-east-1.amazonaws.com";else if(i==="ecr")h=`api.ecr.${n}.amazonaws.com`;else if(i==="ses")h=`email.${n}.amazonaws.com`;else h=`${i}.${n}.amazonaws.com`;let N={host:h,"x-amz-date":A,...e.headers||{}};if(t.sessionToken)N["x-amz-security-token"]=t.sessionToken;if(u){if(!Object.keys(N).some((w)=>w.toLowerCase()==="content-type"))N["content-type"]="application/x-www-form-urlencoded";N["content-length"]=Buffer.byteLength(u).toString()}let d=this.sha256(u||"");N["x-amz-content-sha256"]=d;let C=a,_=s?Object.keys(s).sort().map((E)=>`${this.uriEncode(E)}=${this.uriEncode(s[E])}`).join("&"):"",f=Object.keys(N).sort((E,w)=>E.toLowerCase().localeCompare(w.toLowerCase())),o=f.map((E)=>`${E.toLowerCase()}:${N[E].trim()}
3
- `).join(""),l=f.map((E)=>E.toLowerCase()).join(";"),b=[r,C,_,o,l,d].join(`
4
- `),m="AWS4-HMAC-SHA256",T=i;if(i==="email")T="ses";let S=`${g}/${n}/${T}/aws4_request`,X=[m,A,S,this.sha256(b)].join(`
5
- `),R=this.getSignatureKey(t.secretAccessKey,g,n,T),q=this.hmac(R,X),J=`${m} Credential=${t.accessKeyId}/${S}, SignedHeaders=${l}, Signature=${q}`;return{...N,Authorization:J}}getAmzDate(e){return e.toISOString().replace(/[:-]|\.\d{3}/g,"")}getDateStamp(e){return e.toISOString().slice(0,10).replace(/-/g,"")}uriEncode(e){return encodeURIComponent(e).replace(/[!'()*]/g,(t)=>`%${t.charCodeAt(0).toString(16).toUpperCase()}`)}sha256(e){return O.createHash("sha256").update(e,"utf8").digest("hex")}hmac(e,t){return O.createHmac("sha256",e).update(t,"utf8").digest("hex")}getSignatureKey(e,t,i,n){let r=O.createHmac("sha256",`AWS4${e}`).update(t).digest(),s=O.createHmac("sha256",r).update(i).digest(),u=O.createHmac("sha256",s).update(n).digest();return O.createHmac("sha256",u).update("aws4_request").digest()}parseXmlResponse(e){try{let t=this.xmlParser.parse(e);if(t.ErrorResponse)throw this.createErrorFromXml(t.ErrorResponse.Error);let i=Object.keys(t);if(i.length===1)return t[i[0]];return t}catch(t){if(t.code||t.statusCode)throw t;return{}}}parseError(e,t,i){let n=Error();if(n.statusCode=t,n.requestId=i.get("x-amzn-requestid")||i.get("x-amz-request-id")||void 0,e.startsWith("<"))try{let r=this.xmlParser.parse(e);if(r.ErrorResponse?.Error){let s=r.ErrorResponse.Error;return n.code=s.Code,n.message=`AWS Error [${s.Code}]: ${s.Message||"Unknown error"}`,n.type=s.Type,n}if(r.Error)return n.code=r.Error.Code,n.message=`AWS Error [${r.Error.Code}]: ${r.Error.Message||"Unknown error"}`,n}catch{}try{let r=JSON.parse(e);if(r.__type||r.code)return n.code=r.__type||r.code,n.message=`AWS Error [${n.code}]: ${r.message||r.Message||"Unknown error"}`,n}catch{}return n.message=`AWS API Error (${t}): ${e}`,n}createErrorFromXml(e){let t=Error();return t.code=e.Code,t.message=`AWS Error [${e.Code}]: ${e.Message||"Unknown error"}`,t.type=e.Type,t}isRetryableError(e){return["RequestTimeout","RequestTimeoutException","PriorRequestNotComplete","ConnectionError","ThrottlingException","Throttling","TooManyRequestsException","ProvisionedThroughputExceededException","RequestLimitExceeded","BandwidthLimitExceeded","SlowDown","ServiceUnavailable","ServiceUnavailableException","InternalError","InternalFailure","InternalServerError","InternalServiceException","TransientError","TransientFailure","IDPCommunicationErrorException","NetworkError","ConnectionRefusedException","EC2ThrottledException","503 Slow Down","500 InternalError"].includes(e)}isRetryableStatusCode(e){return e>=500||e===429}shouldRetry(e){if(e.name==="FetchError"||e.name==="TypeError"||e.code==="ECONNRESET")return!0;if(e.code&&this.isRetryableError(e.code))return!0;if(e.statusCode&&this.isRetryableStatusCode(e.statusCode))return!0;if(e.statusCode&&e.statusCode>=400&&e.statusCode<500&&e.statusCode!==429)return!1;if(e.statusCode)return!1;return!0}calculateRetryDelay(e){let t=this.config.retryDelay??1000,i=30000,n=Math.min(t*2**e,30000),r=Math.random()*0.3*n;return n+r}sleep(e){return new Promise((t)=>setTimeout(t,e))}getFromCache(e){let t=this.cache.get(e);if(!t)return null;if(Date.now()>t.expires)return this.cache.delete(e),null;return t.data}setInCache(e,t,i){this.cache.set(e,{data:t,expires:Date.now()+i})}clearCache(){this.cache.clear()}clearExpiredCache(){let e=Date.now();for(let[t,i]of this.cache.entries())if(e>i.expires)this.cache.delete(t)}}function it(e){let t={};for(let[i,n]of Object.entries(e)){if(n===void 0||n===null)continue;if(Array.isArray(n))n.forEach((r,s)=>{t[`${i}.${s+1}`]=String(r)});else if(typeof n==="object")for(let[r,s]of Object.entries(n))t[`${i}.${r}`]=String(s);else t[i]=String(n)}return t}function nt(){let e=process.env.AWS_ACCESS_KEY_ID,t=process.env.AWS_SECRET_ACCESS_KEY,i=e==="",n=t==="";if(e&&t)return{source:"env",emptyEnvKey:i,emptyEnvSecret:n,description:"environment variables (AWS_ACCESS_KEY_ID + AWS_SECRET_ACCESS_KEY)"};let r=process.env.AWS_PROFILE||"default",s=process.env.AWS_SHARED_CREDENTIALS_FILE||y(G(),".aws","credentials");if(U(s))return{source:"file",profile:r,emptyEnvKey:i,emptyEnvSecret:n,description:`~/.aws/credentials (profile: ${r})`};return{source:"ec2",emptyEnvKey:i,emptyEnvSecret:n,description:"EC2 instance metadata service (IMDSv2)"}}
6
- export{F as ch,H as dh,it as eh,nt as fh};
@@ -1 +0,0 @@
1
- import{ef as L}from"./chunk-smbycpt5.js";var _="\x00";function X(R,E){if(R==="*"||R==="**")return!0;let D=R.replace(/[.+^${}()|[\]\\]/g,"\\$&").replace(/\*\*/g,"\x01").replace(/\*/g,"[^/]*").replace(/\u0001/g,".*");return new RegExp(`^${D}$`).test(E)}function A(R,E){if(R.startsWith("*.")){let D=R.slice(1);return E.endsWith(D)&&E.length>D.length}return R===E}function W(R,E){if(R.enabled===!1)return!1;if(R.methods?.length&&!R.methods.some((D)=>D.toUpperCase()===E.method.toUpperCase()))return!1;if(R.path&&!X(R.path,E.path))return!1;if(R.host&&!A(R.host,E.host??""))return!1;return!0}function Z(R,E){let D=R.key??{source:"ip"},F=D.fallbackToIp!==!1,H;if(D.source==="ip")H=E.ip;else if(D.source==="global")H="global";else if(D.source==="host")H=E.host??"";else if(D.source==="path")H=E.path;else if(D.source==="header")H=D.name?E.headers?.[D.name.toLowerCase()]:void 0;else if(D.source==="cookie")H=D.name?E.cookies?.[D.name]:void 0;if(!H&&D.source!=="global")H=F?E.ip:"__missing__";return`${R.id}\x00${H}`}class C{clock;maxTrackedKeys;buckets=new Map;windows=new Map;rules;constructor(R,E=()=>Date.now(),D=1e5){this.clock=E;this.maxTrackedKeys=D;this.rules=[...R].sort((F,H)=>(F.priority??0)-(H.priority??0))}check(R){let E=this.clock(),D=this.rules.filter((j)=>W(j,R)),F;for(let j of D){let z=this.test(j,R,E);if(z.allowed)continue;if(!F||$(z.action)>$(F.action))F=z}if(F)return F;let H={action:"allow",allowed:!0};for(let j of D){let z=this.consume(j,R,E);if(z.remaining!=null&&(H.remaining??1/0)>z.remaining)H=z}return H}test(R,E,D){let F=Z(R,E);if((R.algorithm??"token_bucket")==="token_bucket"){let j=R.burst??R.limit,z=this.buckets.get(F),B=z?Math.min(j,z.tokens+this.refill(R,D-z.updatedAt)):j;if(B>=1)return{action:"allow",allowed:!0};return this.blocked(R,F,0,this.msPerToken(R)*(1-B),D)}let H=(this.windows.get(F)?.hits??[]).filter((j)=>j>D-R.windowMs);if(H.length<R.limit)return{action:"allow",allowed:!0};return this.blocked(R,F,0,H[0]+R.windowMs-D,D)}peek(R){let E=this.clock();for(let D of this.rules){if(!W(D,R))continue;let F=this.test(D,R,E);if(!F.allowed)return F}return{action:"allow",allowed:!0}}msPerToken(R){return R.windowMs/Math.max(1,R.limit)}refill(R,E){return Math.max(0,E)/this.msPerToken(R)}blocked(R,E,D,F,H){let j=R.action??"deny";return{action:j,allowed:j==="allow"||j==="log",ruleId:R.id,limit:R.limit,remaining:D,retryAfterMs:Math.max(0,Math.ceil(F)),resetAt:H+Math.max(0,F),key:E}}consume(R,E,D){let F=Z(R,E);if((R.algorithm??"token_bucket")==="token_bucket"){let J=R.burst??R.limit,V=this.buckets.get(F)??{tokens:J,updatedAt:D},Q=Math.min(J,V.tokens+this.refill(R,D-V.updatedAt));if(Q<1)return this.buckets.set(F,{tokens:Q,updatedAt:D}),this.blocked(R,F,0,this.msPerToken(R)*(1-Q),D);return this.evictIfNeeded(this.buckets),this.buckets.set(F,{tokens:Q-1,updatedAt:D}),{action:"allow",allowed:!0,ruleId:R.id,limit:J,remaining:Math.floor(Q-1),resetAt:D+this.msPerToken(R)*(J-(Q-1)),key:F}}let j=this.windows.get(F)??{hits:[]},z=D-R.windowMs,B=j.hits.filter((J)=>J>z);if(B.length>=R.limit)return this.windows.set(F,{hits:B}),this.blocked(R,F,0,B[0]+R.windowMs-D,D);return B.push(D),this.evictIfNeeded(this.windows),this.windows.set(F,{hits:B}),{action:"allow",allowed:!0,ruleId:R.id,limit:R.limit,remaining:R.limit-B.length,resetAt:B[0]+R.windowMs,key:F}}evictIfNeeded(R){if(R.size<this.maxTrackedKeys)return;let E=R.size-this.maxTrackedKeys+1,D=0;for(let F of R.keys())if(R.delete(F),++D>=E)break}sweep(){let R=this.clock(),E=0;for(let[D,F]of this.windows){let H=D.split("\x00")[0],j=this.rules.find((z)=>z.id===H);if(!j){this.windows.delete(D),E++;continue}if(F.hits.every((z)=>z<=R-j.windowMs))this.windows.delete(D),E++}for(let[D,F]of this.buckets){let H=D.split("\x00")[0],j=this.rules.find((z)=>z.id===H);if(!j||R-F.updatedAt>j.windowMs*2)this.buckets.delete(D),E++}return E}get trackedKeys(){return this.buckets.size+this.windows.size}}function $(R){return{allow:0,log:1,throttle:2,challenge:3,deny:4}[R]}function O(R){let E={};if(R.limit!=null)E["ratelimit-limit"]=String(R.limit);if(R.remaining!=null)E["ratelimit-remaining"]=String(R.remaining);if(R.resetAt!=null)E["ratelimit-reset"]=String(Math.max(0,Math.ceil((R.resetAt-Date.now())/1000)));if(!R.allowed&&R.retryAfterMs!=null)E["retry-after"]=String(Math.max(1,Math.ceil(R.retryAfterMs/1000)));return E}function T(){return[{id:"global-ip",limit:600,windowMs:60000,burst:100,key:{source:"ip"},action:"deny",priority:100},{id:"api-ip",limit:120,windowMs:60000,burst:30,path:"/api/**",key:{source:"ip"},action:"deny",priority:50},{id:"auth-ip",limit:10,windowMs:60000,algorithm:"sliding_window",path:"/auth/**",methods:["POST"],key:{source:"ip"},action:"challenge",priority:10}]}var G="protection.controls",U=24,N=4,P={ipRules:{allow:[],block:[]}};function Y(R,E){if(!R?.enabled)return;return new Date(R.expiresAt).getTime()>E.getTime()?R:void 0}function I(R,E){let D=Number.isFinite(R)?Number(R):E;return Math.min(U,Math.max(0.25,D))}var K=500;class S{controlPlane;options;constructor(R,E={}){this.controlPlane=R;this.options=E}now(){return this.options.now?.()??new Date}read(){let R=this.controlPlane.getSetting(G);if(!R||typeof R!=="object"||Array.isArray(R))return{...P,ipRules:{allow:[],block:[]}};let E=R;return{attackMode:E.attackMode,mitigationPause:E.mitigationPause,ipRules:{allow:Array.isArray(E.ipRules?.allow)?E.ipRules.allow:[],block:Array.isArray(E.ipRules?.block)?E.ipRules.block:[]},updatedAt:E.updatedAt}}write(R){let E={...R,updatedAt:this.now().toISOString()};return this.controlPlane.setSetting(G,E),E}raw(){return this.read()}current(){let R=this.now(),E=this.read();return{attackMode:Y(E.attackMode,R),mitigationPause:Y(E.mitigationPause,R),ipRules:E.ipRules}}enableAttackMode(R){let E=this.now(),D={enabled:!0,startedAt:E.toISOString(),expiresAt:new Date(E.getTime()+I(R.hours,N)*3600000).toISOString(),reason:R.reason.trim()||"Attack mode enabled by an operator.",actorId:R.actorId};return this.write({...this.read(),attackMode:D}),D}disableAttackMode(){let R=this.read();if(!R.attackMode?.enabled)return!1;return this.write({...R,attackMode:{...R.attackMode,enabled:!1}}),!0}pauseMitigations(R){let E=R.reason.trim();if(!E)throw Error("Pausing mitigations requires a reason: you are liable for the traffic it admits.");let D=this.now(),F={enabled:!0,startedAt:D.toISOString(),expiresAt:new Date(D.getTime()+I(R.hours,U)*3600000).toISOString(),reason:E,actorId:R.actorId};return this.write({...this.read(),mitigationPause:F}),F}resumeMitigations(){let R=this.read();if(!R.mitigationPause?.enabled)return!1;return this.write({...R,mitigationPause:{...R.mitigationPause,enabled:!1}}),!0}addIpRule(R,E){let D=E.trim();if(!L(D))throw Error(`Not a valid IP or CIDR: ${E}`);let F=this.read(),H={...F.ipRules,[R]:[...new Set([...F.ipRules[R],D])]};if(H[R].length>K)throw Error(`At most ${K} ${R} rules are supported.`);let j=R==="allow"?"block":"allow";return H[j]=H[j].filter((z)=>z!==D),this.write({...F,ipRules:H}),H}removeIpRule(R,E){let D=this.read(),F={...D.ipRules,[R]:D.ipRules[R].filter((H)=>H!==E.trim())};return this.write({...D,ipRules:F}),F}}function b(R){if(R.mitigationPause)return{attackMode:!!R.attackMode,mitigationPaused:!0,summary:`Automatic mitigation is paused until ${R.mitigationPause.expiresAt}. All traffic is being served and billed.`,expiresAt:R.mitigationPause.expiresAt};if(R.attackMode)return{attackMode:!0,mitigationPaused:!1,summary:`Attack mode is on until ${R.attackMode.expiresAt}. Every visitor is being challenged.`,expiresAt:R.attackMode.expiresAt};return{attackMode:!1,mitigationPaused:!1,summary:"Protection is in its normal posture."}}function m(R,E){if(E.mitigationPause)return R.map((D)=>({...D,enabled:!1}));if(!E.attackMode)return[...R];return R.map((D)=>({...D,action:D.action==="deny"?"deny":"challenge",burst:Math.max(1,Math.min(D.burst??D.limit,5))}))}function x(R,E){let D=[...new Set([...R.allowlist??[],...E.ipRules.allow])],F=[...new Set([...R.blocklist??[],...E.ipRules.block])];if(E.mitigationPause)return{...R,allowlist:D,blocklist:F,monitorOnly:!0};if(!E.attackMode)return{...R,allowlist:D,blocklist:F};let H=R.thresholds??{};return{...R,allowlist:D,blocklist:F,thresholds:{...H,newConnectionsPerSecond:Math.max(1,Math.floor((H.newConnectionsPerSecond??50)/5)),concurrentPerSource:Math.max(1,Math.floor((H.concurrentPerSource??100)/5))}}}function f(R,E){let D=R?.infrastructure?.compute;if(!D||D.ddos===!1)return R;let F=typeof D.ddos==="object"&&D.ddos!==null?D.ddos:{};return{...R,infrastructure:{...R.infrastructure,compute:{...D,ddos:x(F,E)}}}}export{_ as a,X as b,W as c,Z as d,C as e,O as f,T as g,G as h,U as i,N as j,S as k,b as l,m,x as n,f as o};
@@ -1 +0,0 @@
1
- import{Jd as a,Kd as b,Ld as c,Md as d,Nd as e,Od as f,Pd as g,Qd as h,Rd as i,Sd as j,Td as k,Ud as l,Vd as m,Wd as n,Xd as o,Yd as p,Zd as q}from"./chunk-fq7ktvgy.js";import"./chunk-r61qmhv1.js";import"./chunk-f11xf3n6.js";import"./chunk-54bqchag.js";import"./chunk-xjp3v95e.js";import"./chunk-xyt490vp.js";import"./chunk-5bhx3bsa.js";import"./chunk-c8sypnbe.js";export{i as setMaintenance,o as serverlessInfo,p as scaleServerlessDatabase,j as runRemoteCommand,n as runDbQuery,k as runAndRecordCommand,h as rollbackServerlessApp,q as restoreServerlessDatabase,a as resolveServerlessFunctions,b as resolveSecrets,g as redeployServerlessApp,l as listCommandHistory,c as infraEnvFromOutputs,m as getCommandRecord,f as deployServerlessApp,d as buildFunctionEnv,e as assertEnvWithinLimit};
@@ -1 +0,0 @@
1
- import{Ad as f,vd as a,wd as b,xd as c,yd as d,zd as e}from"./chunk-ead1nkbr.js";import"./chunk-fea461tj.js";import"./chunk-yf487g6e.js";import"./chunk-qcemnt35.js";import"./chunk-r2pbqcnz.js";import"./chunk-wte9mh18.js";import"./chunk-bpnhqb70.js";import"./chunk-rr1yaj55.js";export{c as uploadStaticFiles,d as invalidateCache,a as generateStaticSiteTemplate,f as deployStaticSiteFull,b as deployStaticSite,e as deleteStaticSite};