@stacksjs/ts-cloud 0.12.14 → 0.12.15

package/dist/{chunk-e7ds04wb.js → chunk-rbem58rx.js}

@@ -1,4 +1,4 @@
-import{eh}from"./chunk-e0919h5g.js";var wQ=eh(function(qA,nI){/*!
+import{eh}from"./chunk-hnkw6pde.js";var wQ=eh(function(qA,nI){/*!
  * hash-wasm (https://www.npmjs.com/package/hash-wasm)
  * (c) Dani Biro
  * @license MIT

package/dist/chunk-v46b25w9.js

@@ -0,0 +1 @@
+import{ln,Lm}from"./chunk-cy6qh4ea.js";import"./chunk-wjgnfg6q.js";import"./chunk-yq3pdbz7.js";import"./chunk-30h9rgfn.js";export{ln as EmailClient,Lm as email};

package/dist/{chunk-7hy9p6xr.js → chunk-w495x89g.js}

@@ -1,4 +1,4 @@
-import{Ws,_r,pd,Ai,to,ro}from"./chunk-xxbvjq8g.js";import{Pe}from"./chunk-r5emv4x8.js";import{execFileSync as C}from"node:child_process";import{mkdirSync as S,mkdtempSync as U,rmSync as L,writeFileSync as d}from"node:fs";import{tmpdir as O}from"node:os";import{dirname as j,join as s}from"node:path";var r={reset:"\x1B[0m",bright:"\x1B[1m",dim:"\x1B[2m",red:"\x1B[31m",green:"\x1B[32m",yellow:"\x1B[33m",blue:"\x1B[34m",magenta:"\x1B[35m",cyan:"\x1B[36m",white:"\x1B[37m",gray:"\x1B[90m"};function I(t,e){return`${r[e]}${t}${r.reset}`}function tn(t){console.log(`${r.green}✓${r.reset} ${t}`)}function Ul(t){console.error(`${r.red}✗${r.reset} ${t}`)}function Vi(t){console.warn(`${r.yellow}⚠${r.reset} ${t}`)}function P(t){console.log(`${r.blue}ℹ${r.reset} ${t}`)}function v(t){console.log(`${r.cyan}→${r.reset} ${t}`)}function ji(t){console.log(`
+import{Ws,_r,pd,Ai,to,ro}from"./chunk-jvqcw0b4.js";import{Pe}from"./chunk-r5emv4x8.js";import{execFileSync as C}from"node:child_process";import{mkdirSync as S,mkdtempSync as U,rmSync as L,writeFileSync as d}from"node:fs";import{tmpdir as O}from"node:os";import{dirname as j,join as s}from"node:path";var r={reset:"\x1B[0m",bright:"\x1B[1m",dim:"\x1B[2m",red:"\x1B[31m",green:"\x1B[32m",yellow:"\x1B[33m",blue:"\x1B[34m",magenta:"\x1B[35m",cyan:"\x1B[36m",white:"\x1B[37m",gray:"\x1B[90m"};function I(t,e){return`${r[e]}${t}${r.reset}`}function tn(t){console.log(`${r.green}✓${r.reset} ${t}`)}function Ul(t){console.error(`${r.red}✗${r.reset} ${t}`)}function Vi(t){console.warn(`${r.yellow}⚠${r.reset} ${t}`)}function P(t){console.log(`${r.blue}ℹ${r.reset} ${t}`)}function v(t){console.log(`${r.cyan}→${r.reset} ${t}`)}function ji(t){console.log(`
 ${r.bright}${r.cyan}${t}${r.reset}
 `)}var F=!!(process.env.CI||process.env.GITHUB_ACTIONS||process.env.BUILDKITE||process.env.CIRCLECI||process.env.GITLAB_CI);function Ql(t,e="cyan"){let n=t.split(`
 `),i=Math.max(...n.map((l)=>l.length)),a="─".repeat(i+2);console.log(I(`┌${a}┐`,e)),n.forEach((l)=>{console.log(I(`│ ${l.padEnd(i)} │`,e))}),console.log(I(`└${a}┘`,e))}function A(t,e){for(let n of e){let i=s(t,n.name);S(j(i),{recursive:!0}),d(i,n.data,n.mode?{mode:n.mode}:void 0)}}async function Aa(t){let{app:e,projectRoot:n,region:i,repository:a}=t,l=e.architecture??"x86_64",R=l==="arm64"?"linux/arm64":"linux/amd64",E=e.kind==="php",c=t.onStep??(()=>{}),p=U(s(O(),"tscloud-img-"));try{let f=s(p,"app");S(f,{recursive:!0});let y,w;if(E){to({projectRoot:n,app:e,skipBuild:t.skipBuild,onStep:c}),c("staging application tree");let o=ro(n);A(f,o),A(s(p,"runtime"),Ai().map((g)=>({name:g.path,data:g.contents,mode:g.mode})));let b=e.handlers?.http??"public/index.php";y={http:b,queue:e.handlers?.queue??b,cli:e.handlers?.cli??b},w=Ws(o.map((g)=>`${g.name}:${g.data.length}`).join("|"))}else{c("bundling application");let o=await _r({projectRoot:n,app:e,skipBuild:t.skipBuild,onStep:c});d(s(f,"index.mjs"),o.bundle),y=o.handlers,w=o.sha256}let k=w.slice(0,16);d(s(p,"Dockerfile"),pd({kind:e.kind??"node",phpVersion:e.phpVersion,architecture:l}));let x=new Pe(i),u;try{u=(await x.describeRepositories({repositoryNames:[a]})).repositories?.[0]?.repositoryUri??""}catch{u=""}if(!u)c(`creating ECR repository ${a}`),u=(await x.createRepository({repositoryName:a,imageScanningConfiguration:{scanOnPush:!0}})).repository?.repositoryUri??"";if(!u)throw Error(`could not resolve ECR repository URI for ${a}`);let m=`${u}:${k}`;c("docker build"),C("docker",["build","--platform",R,"--provenance=false","--sbom=false","-t",m,p],{stdio:"inherit"}),c("ecr auth + push");let h=(await x.getAuthorizationToken()).authorizationData?.[0];if(!h?.authorizationToken||!h.proxyEndpoint)throw Error("failed to get an ECR authorization token");let T=h.proxyEndpoint.replace(/^https?:\/\//,""),B=s(p,".docker");return S(B,{recursive:!0}),d(s(B,"config.json"),JSON.stringify({auths:{[T]:{auth:h.authorizationToken}}})),C("docker",["push",m],{stdio:"inherit",env:{...process.env,DOCKER_CONFIG:B}}),P(`Image: ${m}`),{imageUri:m,tag:k,handlers:y}}finally{L(p,{recursive:!0,force:!0})}}

package/dist/{chunk-vva43vnp.js → chunk-x07tpsv0.js}

@@ -1,4 +1,4 @@
-import{ge,ne,T,ie,rr}from"./chunk-pkan6evc.js";import{a}from"./chunk-3kapcdpn.js";import{y}from"./chunk-6g81m01r.js";import{h}from"./chunk-wjgnfg6q.js";import{f}from"./chunk-jb8em9ba.js";function ma(t){let{bucketName:s,domain:u,aliases:e,certificateArn:p,defaultRootObject:i="index.html",errorDocument:r="404.html",passthroughUrls:c=!1,singlePageApp:g=!1,dynamicApp:C=!1,computeOriginDomain:w,computeOriginPort:x=3008,computeOriginId:E="app-compute",retainOnStackDelete:M=!1}=t,S=M?{DeletionPolicy:"Retain",UpdateReplacePolicy:"Retain"}:{},N=C&&!!w,j=N?["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"]:["GET","HEAD"],v=N?["GET","HEAD"]:["GET","HEAD"],O={},B={};O.S3Bucket={Type:"AWS::S3::Bucket",...S,Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},B.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},B.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},O.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",...S,Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}};let I;if(c&&N)I="InstallRootRedirectFunction",O[I]={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-install-root-redirect"},AutoPublish:!0,FunctionConfig:{Comment:"Redirect curl pantry.dev | bash (GET /) to /install.sh on S3",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
+import{me,ie,T,se,rr}from"./chunk-6t9tjvpy.js";import{a}from"./chunk-yq3pdbz7.js";import{y}from"./chunk-6g81m01r.js";import{h}from"./chunk-wjgnfg6q.js";import{f}from"./chunk-jb8em9ba.js";function ma(t){let{bucketName:s,domain:u,aliases:e,certificateArn:p,defaultRootObject:i="index.html",errorDocument:r="404.html",passthroughUrls:c=!1,singlePageApp:g=!1,dynamicApp:C=!1,computeOriginDomain:w,computeOriginPort:x=3008,computeOriginId:E="app-compute",retainOnStackDelete:M=!1}=t,S=M?{DeletionPolicy:"Retain",UpdateReplacePolicy:"Retain"}:{},N=C&&!!w,j=N?["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"]:["GET","HEAD"],v=N?["GET","HEAD"]:["GET","HEAD"],O={},B={};O.S3Bucket={Type:"AWS::S3::Bucket",...S,Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},B.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},B.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},O.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",...S,Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}};let I;if(c&&N)I="InstallRootRedirectFunction",O[I]={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-install-root-redirect"},AutoPublish:!0,FunctionConfig:{Comment:"Redirect curl pantry.dev | bash (GET /) to /install.sh on S3",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
   var request = event.request;
   if (request.uri === '/' || request.uri === '') {
     return {
@@ -24,7 +24,7 @@ import{ge,ne,T,ie,rr}from"./chunk-pkan6evc.js";import{a}from"./chunk-3kapcdpn.js
   }
 
   return request;
-}`}};let R={Id:`S3-${s}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}},d=N?{Id:E,DomainName:w,CustomOriginConfig:{HTTPPort:x,HTTPSPort:443,OriginProtocolPolicy:"http-only",OriginSSLProtocols:["TLSv1.2"]}}:null,k=N?E:`S3-${s}`,A={Enabled:!0,DefaultRootObject:i,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:d?[d,R]:[R],DefaultCacheBehavior:{TargetOriginId:k,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:j,CachedMethods:v,Compress:!0,...N?{CachePolicyId:"4135ea2d-6df8-44a3-9df3-4b5a84be39ad",OriginRequestPolicyId:"b689b0a8-53d0-40ab-baf2-68738e2966ac",...c&&I?{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":[I,"FunctionARN"]}}]}:{}}:{CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",...!c&&{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]}}},...N&&c?{CacheBehaviors:[{PathPattern:"/install.sh",TargetOriginId:`S3-${s}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD","OPTIONS"],CachedMethods:["GET","HEAD","OPTIONS"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6"}]}:{},CustomErrorResponses:g?[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300}]:[{ErrorCode:403,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300}]};if(u&&p)A.Aliases=e&&e.length>0?e:[u],A.ViewerCertificate={AcmCertificateArn:p,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else A.ViewerCertificate={CloudFrontDefaultCertificate:!0};return O.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",...S,DependsOn:["S3Bucket","CloudFrontOAC",...c&&N&&I?[I]:[],...!c?["UrlRewriteFunction"]:[]],Properties:{DistributionConfig:A}},B.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},B.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},O.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",...S,DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},B.SiteUrl={Description:"Site URL",Value:u?`https://${u}`:{"Fn::Sub":"https://${CloudFrontDistribution.DomainName}"}},{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${u||s} (External DNS)`,Resources:O,Outputs:B}}async function Zr(t){let s=t.region||"us-east-1",u="us-east-1",e=t.domain,p=t.bucket||e.replace(/\./g,"-"),i=t.stackName||`${t.siteName}-static-site`,r=new f("us-east-1"),c=new ie("us-east-1"),g=null;if(!t.skipDnsVerification){g=T(t.dnsProvider),console.log(`Verifying DNS provider can manage ${e}...`);let o=await g.listRecords(e);if(!o.success){let n=o.message||"unknown error — check API credentials and domain ownership";return{success:!1,stackName:i,bucket:p,message:`DNS provider '${g.name}' cannot manage domain ${e}: ${n}`}}console.log(`DNS provider '${g.name}' verified for ${e}`)}else console.log(`Skipping DNS verification for ${e}`);let C=t.certificateArn,E=e.split(".").length===2?`www.${e}`:void 0;if(!C){console.log(`Checking for existing SSL certificate for ${e}...`);let o=await c.findCertificateByDomain(e),n=!1;if(o&&o.Status==="ISSUED"){if(E&&o.SubjectAlternativeNames)n=o.SubjectAlternativeNames.includes(E)||o.SubjectAlternativeNames.some((m)=>m===`*.${e}`);else n=!0;if(n)C=o.CertificateArn,console.log(`Found existing certificate with www coverage: ${C}`);else console.log(`Existing certificate doesn't cover ${E}, requesting new one...`)}if(!C){if(!g)return{success:!1,stackName:i,bucket:p,message:`No DNS provider available to validate SSL certificate for ${e}. Provide a certificateArn or enable DNS verification.`};console.log(`Requesting new SSL certificate for ${e}${E?` (including ${E})`:""}...`);let b=await new ne(g,"us-east-1").findOrCreateCertificate({domainName:e,subjectAlternativeNames:E?[E]:void 0,waitForValidation:!0,maxWaitMinutes:10});if(b.status!=="issued")return{success:!1,stackName:i,bucket:p,message:`SSL certificate validation failed. Status: ${b.status}`};C=b.certificateArn,console.log(`Certificate issued: ${C}`)}}let M=!1,S;try{let o=await r.describeStacks({stackName:i});if(o.Stacks.length>0){let n=o.Stacks[0],m=n.StackStatus;if(m==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await r.waitForStack(i,"stack-delete-complete"),M=!1;else if(m==="DELETE_COMPLETE")M=!1;else M=!0,S=(n.Outputs||[]).find((l)=>l.OutputKey==="BucketName")?.OutputValue}}catch(o){if(o.message?.includes("does not exist")||o.code==="ValidationError")M=!1;else throw o}let N=S||p;if(!M){let o=new a(s),n=new y,m=!1;if(e)try{console.log(`Checking for existing CloudFront distributions with alias ${e}...`);let b=await n.listDistributions();for(let l of b){let D=[];if(l.Aliases?.Items){if(Array.isArray(l.Aliases.Items))D=l.Aliases.Items;else if(typeof l.Aliases.Items==="object"){let F=l.Aliases.Items.CNAME;if(typeof F==="string")D=[F];else if(Array.isArray(F))D=F}}if(D.includes(e)){m=!0,console.log(`Found existing CloudFront distribution ${l.Id} with alias ${e}`),console.log("Reusing existing infrastructure for updates...");let P=(await n.getDistributionConfig(l.Id)).DistributionConfig?.Origins?.Items,V;if(P){let U=[];if(Array.isArray(P))U=P;else if(P.Origin)U=Array.isArray(P.Origin)?P.Origin:[P.Origin];else U=[P];for(let L of U){let W=(L.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(W){V=W[1];break}}}if(V)return console.log(`Using existing S3 bucket: ${V}`),{success:!0,stackName:`existing-${l.Id}`,bucket:V,distributionId:l.Id,distributionDomain:l.DomainName,domain:e,certificateArn:C,message:"Using existing CloudFront distribution",_existingInfrastructure:!0}}}}catch{}if(!m)try{if((await o.headBucket(p)).exists){console.log(`Found orphaned S3 bucket ${p}, cleaning up...`);try{let l=o.emptyBucket(p).then(()=>o.deleteBucket(p)),D=new Promise((F,P)=>setTimeout(()=>P(Error("Bucket cleanup timeout")),30000));await Promise.race([l,D]),console.log(`Deleted orphaned S3 bucket ${p}`)}catch(l){console.log(`Note: Could not clean up S3 bucket: ${l.message}`);let D=Date.now().toString(36);N=`${p}-${D}`,console.log(`Using alternative bucket name: ${N}`)}}}catch{}}let v=ma({bucketName:N,domain:e,aliases:E?[e,E]:[e],certificateArn:C,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument,passthroughUrls:t.passthroughUrls,singlePageApp:t.singlePageApp,dynamicApp:t.dynamicApp,computeOriginDomain:t.computeOriginDomain,computeOriginPort:t.computeOriginPort,computeOriginId:t.computeOriginId}),O=Object.entries(t.tags||{}).map(([o,n])=>({Key:o,Value:n}));if(O.push({Key:"ManagedBy",Value:"ts-cloud"}),O.push({Key:"Application",Value:t.siteName}),g)O.push({Key:"DnsProvider",Value:g.name});let B,I=!1;if(M){I=!0,console.log(`Updating CloudFormation stack: ${i}`);try{B=(await r.updateStack({stackName:i,templateBody:JSON.stringify(v),capabilities:["CAPABILITY_IAM"],tags:O})).StackId,console.log(`Update initiated, stack ID: ${B}`)}catch(o){if(o.message?.includes("No updates are to be performed")){let n=await r.describeStacks({stackName:i});B=n.Stacks[0].StackId;let m=n.Stacks[0]?.Outputs||[],b=(D)=>m.find((F)=>F.OutputKey===D)?.OutputValue,l=b("DistributionDomain");if(l)await H(g,e,l);return{success:!0,stackId:B,stackName:i,bucket:b("BucketName")||N,distributionId:b("DistributionId"),distributionDomain:l,domain:e,certificateArn:C,message:"Static site infrastructure is already up to date"}}else throw o}}else console.log(`Creating CloudFormation stack: ${i}`),console.log(`Bucket name: ${N}`),console.log(`Domain: ${e}`),console.log(`Certificate ARN: ${C}`),B=(await r.createStack({stackName:i,templateBody:JSON.stringify(v),capabilities:["CAPABILITY_IAM"],tags:O,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${B}`);console.log(`Waiting for stack to reach ${I?"stack-update-complete":"stack-create-complete"}...`);try{await r.waitForStack(i,I?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(o){if(o.message?.includes("must be verified")||o.message?.includes("Access denied for operation")){console.log("CloudFront account verification required - checking for existing infrastructure...");try{let m=new y,b=await m.listDistributions();for(let l of b){let D=[];if(l.Aliases?.Items){if(Array.isArray(l.Aliases.Items))D=l.Aliases.Items;else if(typeof l.Aliases.Items==="object"){let F=l.Aliases.Items.CNAME;if(typeof F==="string")D=[F];else if(Array.isArray(F))D=F}}if(D.includes(e)){console.log(`Found existing CloudFront distribution ${l.Id} with alias ${e}`),console.log("Using existing infrastructure despite account verification requirement...");let P=(await m.getDistributionConfig(l.Id)).DistributionConfig?.Origins?.Items,V;if(P){let U=[];if(Array.isArray(P))U=P;else if(P.Origin)U=Array.isArray(P.Origin)?P.Origin:[P.Origin];else U=[P];for(let L of U){let W=(L.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(W){V=W[1];break}}}if(V){console.log(`Using existing S3 bucket: ${V}`);let U=l.DomainName;if(U)await H(g,e,U);return{success:!0,stackName:`existing-${l.Id}`,bucket:V,distributionId:l.Id,distributionDomain:l.DomainName,domain:e,certificateArn:C,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}}}catch{}return console.log(`
+}`}};let R={Id:`S3-${s}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}},d=N?{Id:E,DomainName:w,CustomOriginConfig:{HTTPPort:x,HTTPSPort:443,OriginProtocolPolicy:"http-only",OriginSSLProtocols:["TLSv1.2"]}}:null,k=N?E:`S3-${s}`,A={Enabled:!0,DefaultRootObject:i,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:d?[d,R]:[R],DefaultCacheBehavior:{TargetOriginId:k,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:j,CachedMethods:v,Compress:!0,...N?{CachePolicyId:"4135ea2d-6df8-44a3-9df3-4b5a84be39ad",OriginRequestPolicyId:"b689b0a8-53d0-40ab-baf2-68738e2966ac",...c&&I?{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":[I,"FunctionARN"]}}]}:{}}:{CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",...!c&&{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]}}},...N&&c?{CacheBehaviors:[{PathPattern:"/install.sh",TargetOriginId:`S3-${s}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD","OPTIONS"],CachedMethods:["GET","HEAD","OPTIONS"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6"}]}:{},CustomErrorResponses:g?[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300}]:[{ErrorCode:403,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300}]};if(u&&p)A.Aliases=e&&e.length>0?e:[u],A.ViewerCertificate={AcmCertificateArn:p,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else A.ViewerCertificate={CloudFrontDefaultCertificate:!0};return O.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",...S,DependsOn:["S3Bucket","CloudFrontOAC",...c&&N&&I?[I]:[],...!c?["UrlRewriteFunction"]:[]],Properties:{DistributionConfig:A}},B.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},B.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},O.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",...S,DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},B.SiteUrl={Description:"Site URL",Value:u?`https://${u}`:{"Fn::Sub":"https://${CloudFrontDistribution.DomainName}"}},{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${u||s} (External DNS)`,Resources:O,Outputs:B}}async function Zr(t){let s=t.region||"us-east-1",u="us-east-1",e=t.domain,p=t.bucket||e.replace(/\./g,"-"),i=t.stackName||`${t.siteName}-static-site`,r=new f("us-east-1"),c=new se("us-east-1"),g=null;if(!t.skipDnsVerification){g=T(t.dnsProvider),console.log(`Verifying DNS provider can manage ${e}...`);let o=await g.listRecords(e);if(!o.success){let n=o.message||"unknown error — check API credentials and domain ownership";return{success:!1,stackName:i,bucket:p,message:`DNS provider '${g.name}' cannot manage domain ${e}: ${n}`}}console.log(`DNS provider '${g.name}' verified for ${e}`)}else console.log(`Skipping DNS verification for ${e}`);let C=t.certificateArn,E=e.split(".").length===2?`www.${e}`:void 0;if(!C){console.log(`Checking for existing SSL certificate for ${e}...`);let o=await c.findCertificateByDomain(e),n=!1;if(o&&o.Status==="ISSUED"){if(E&&o.SubjectAlternativeNames)n=o.SubjectAlternativeNames.includes(E)||o.SubjectAlternativeNames.some((m)=>m===`*.${e}`);else n=!0;if(n)C=o.CertificateArn,console.log(`Found existing certificate with www coverage: ${C}`);else console.log(`Existing certificate doesn't cover ${E}, requesting new one...`)}if(!C){if(!g)return{success:!1,stackName:i,bucket:p,message:`No DNS provider available to validate SSL certificate for ${e}. Provide a certificateArn or enable DNS verification.`};console.log(`Requesting new SSL certificate for ${e}${E?` (including ${E})`:""}...`);let b=await new ie(g,"us-east-1").findOrCreateCertificate({domainName:e,subjectAlternativeNames:E?[E]:void 0,waitForValidation:!0,maxWaitMinutes:10});if(b.status!=="issued")return{success:!1,stackName:i,bucket:p,message:`SSL certificate validation failed. Status: ${b.status}`};C=b.certificateArn,console.log(`Certificate issued: ${C}`)}}let M=!1,S;try{let o=await r.describeStacks({stackName:i});if(o.Stacks.length>0){let n=o.Stacks[0],m=n.StackStatus;if(m==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await r.waitForStack(i,"stack-delete-complete"),M=!1;else if(m==="DELETE_COMPLETE")M=!1;else M=!0,S=(n.Outputs||[]).find((l)=>l.OutputKey==="BucketName")?.OutputValue}}catch(o){if(o.message?.includes("does not exist")||o.code==="ValidationError")M=!1;else throw o}let N=S||p;if(!M){let o=new a(s),n=new y,m=!1;if(e)try{console.log(`Checking for existing CloudFront distributions with alias ${e}...`);let b=await n.listDistributions();for(let l of b){let D=[];if(l.Aliases?.Items){if(Array.isArray(l.Aliases.Items))D=l.Aliases.Items;else if(typeof l.Aliases.Items==="object"){let F=l.Aliases.Items.CNAME;if(typeof F==="string")D=[F];else if(Array.isArray(F))D=F}}if(D.includes(e)){m=!0,console.log(`Found existing CloudFront distribution ${l.Id} with alias ${e}`),console.log("Reusing existing infrastructure for updates...");let P=(await n.getDistributionConfig(l.Id)).DistributionConfig?.Origins?.Items,V;if(P){let U=[];if(Array.isArray(P))U=P;else if(P.Origin)U=Array.isArray(P.Origin)?P.Origin:[P.Origin];else U=[P];for(let L of U){let W=(L.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(W){V=W[1];break}}}if(V)return console.log(`Using existing S3 bucket: ${V}`),{success:!0,stackName:`existing-${l.Id}`,bucket:V,distributionId:l.Id,distributionDomain:l.DomainName,domain:e,certificateArn:C,message:"Using existing CloudFront distribution",_existingInfrastructure:!0}}}}catch{}if(!m)try{if((await o.headBucket(p)).exists){console.log(`Found orphaned S3 bucket ${p}, cleaning up...`);try{let l=o.emptyBucket(p).then(()=>o.deleteBucket(p)),D=new Promise((F,P)=>setTimeout(()=>P(Error("Bucket cleanup timeout")),30000));await Promise.race([l,D]),console.log(`Deleted orphaned S3 bucket ${p}`)}catch(l){console.log(`Note: Could not clean up S3 bucket: ${l.message}`);let D=Date.now().toString(36);N=`${p}-${D}`,console.log(`Using alternative bucket name: ${N}`)}}}catch{}}let v=ma({bucketName:N,domain:e,aliases:E?[e,E]:[e],certificateArn:C,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument,passthroughUrls:t.passthroughUrls,singlePageApp:t.singlePageApp,dynamicApp:t.dynamicApp,computeOriginDomain:t.computeOriginDomain,computeOriginPort:t.computeOriginPort,computeOriginId:t.computeOriginId}),O=Object.entries(t.tags||{}).map(([o,n])=>({Key:o,Value:n}));if(O.push({Key:"ManagedBy",Value:"ts-cloud"}),O.push({Key:"Application",Value:t.siteName}),g)O.push({Key:"DnsProvider",Value:g.name});let B,I=!1;if(M){I=!0,console.log(`Updating CloudFormation stack: ${i}`);try{B=(await r.updateStack({stackName:i,templateBody:JSON.stringify(v),capabilities:["CAPABILITY_IAM"],tags:O})).StackId,console.log(`Update initiated, stack ID: ${B}`)}catch(o){if(o.message?.includes("No updates are to be performed")){let n=await r.describeStacks({stackName:i});B=n.Stacks[0].StackId;let m=n.Stacks[0]?.Outputs||[],b=(D)=>m.find((F)=>F.OutputKey===D)?.OutputValue,l=b("DistributionDomain");if(l)await H(g,e,l);return{success:!0,stackId:B,stackName:i,bucket:b("BucketName")||N,distributionId:b("DistributionId"),distributionDomain:l,domain:e,certificateArn:C,message:"Static site infrastructure is already up to date"}}else throw o}}else console.log(`Creating CloudFormation stack: ${i}`),console.log(`Bucket name: ${N}`),console.log(`Domain: ${e}`),console.log(`Certificate ARN: ${C}`),B=(await r.createStack({stackName:i,templateBody:JSON.stringify(v),capabilities:["CAPABILITY_IAM"],tags:O,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${B}`);console.log(`Waiting for stack to reach ${I?"stack-update-complete":"stack-create-complete"}...`);try{await r.waitForStack(i,I?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(o){if(o.message?.includes("must be verified")||o.message?.includes("Access denied for operation")){console.log("CloudFront account verification required - checking for existing infrastructure...");try{let m=new y,b=await m.listDistributions();for(let l of b){let D=[];if(l.Aliases?.Items){if(Array.isArray(l.Aliases.Items))D=l.Aliases.Items;else if(typeof l.Aliases.Items==="object"){let F=l.Aliases.Items.CNAME;if(typeof F==="string")D=[F];else if(Array.isArray(F))D=F}}if(D.includes(e)){console.log(`Found existing CloudFront distribution ${l.Id} with alias ${e}`),console.log("Using existing infrastructure despite account verification requirement...");let P=(await m.getDistributionConfig(l.Id)).DistributionConfig?.Origins?.Items,V;if(P){let U=[];if(Array.isArray(P))U=P;else if(P.Origin)U=Array.isArray(P.Origin)?P.Origin:[P.Origin];else U=[P];for(let L of U){let W=(L.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(W){V=W[1];break}}}if(V){console.log(`Using existing S3 bucket: ${V}`);let U=l.DomainName;if(U)await H(g,e,U);return{success:!0,stackName:`existing-${l.Id}`,bucket:V,distributionId:l.Id,distributionDomain:l.DomainName,domain:e,certificateArn:C,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}}}catch{}return console.log(`
 ┌─────────────────────────────────────────────────────────────────────────────┐
 │  AWS ACCOUNT VERIFICATION REQUIRED                                          │
 ├─────────────────────────────────────────────────────────────────────────────┤
@@ -42,7 +42,7 @@ import{ge,ne,T,ie,rr}from"./chunk-pkan6evc.js";import{a}from"./chunk-3kapcdpn.js
 │                                                                             │
 │  Verification typically takes 1-2 business days.                            │
 │  After verification, re-run: bunx bunpress deploy                           │
-└─────────────────────────────────────────────────────────────────────────────┘`),{success:!1,stackId:B,stackName:i,bucket:N,message:"CloudFront account verification required. Please contact AWS Support."}}return{success:!1,stackId:B,stackName:i,bucket:N,message:`Stack deployment failed: ${o.message}`}}let d=(await r.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],k=(o)=>d.find((n)=>n.OutputKey===o)?.OutputValue,A=k("DistributionDomain");if(A&&g)console.log(`Creating DNS records via ${g.name}...`),await H(g,e,A);else if(A&&!g)console.log("Skipping DNS record creation (DNS verification was skipped)");return{success:!0,stackId:B,stackName:i,bucket:k("BucketName")||N,distributionId:k("DistributionId"),distributionDomain:A,domain:e,certificateArn:C,message:"Static site infrastructure deployed successfully with external DNS"}}async function H(t,s,u){if(!t){console.log("Skipping DNS record creation (DNS verification was skipped)");return}if(s.split(".").length===2)if(t instanceof ge){console.log(`Creating Route53 alias record for apex domain ${s} -> ${u}`);let i=await t.createCloudFrontAlias({domain:s,name:s,cloudFrontDomainName:u});if(!i.success)console.warn(`Warning: Could not create Route53 alias record: ${i.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created Route53 alias record: ${s} -> ${u}`);let r=`www.${s}`;console.log(`Creating Route53 alias record for ${r} -> ${u}`);let c=await t.createCloudFrontAlias({domain:s,name:r,cloudFrontDomainName:u});if(!c.success)console.warn(`Warning: Could not create www Route53 alias: ${c.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${r} -> ${u}`);else console.log(`Created Route53 alias record: ${r} -> ${u}`)}else{try{let g=await t.listRecords(s,"A");if(g.success)for(let C of g.records){let w=C.name.replace(/\.$/,"");if(w===s||w==="")console.log(`Removing existing root A record (${C.content}) to make room for ALIAS...`),await t.deleteRecord(s,{name:s,type:"A",content:C.content})}}catch(g){console.log(`Note: Could not check for conflicting A records: ${g instanceof Error?g.message:g}`)}console.log(`Creating ALIAS record for apex domain ${s} -> ${u}`);let i=await t.upsertRecord(s,{name:s,type:"ALIAS",content:u,ttl:600});if(!i.success)console.warn(`Warning: Could not create ALIAS record: ${i.message}`),console.warn("Please manually create an ALIAS record in your DNS provider:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created ALIAS record: ${s} -> ${u}`);let r=`www.${s}`;console.log(`Creating CNAME record for ${r} -> ${u}`);let c=await t.upsertRecord(s,{name:r,type:"CNAME",content:u,ttl:600});if(!c.success)console.warn(`Warning: Could not create www DNS record: ${c.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${r} -> ${u}`);else console.log(`Created CNAME record: ${r} -> ${u}`)}else{console.log(`Creating CNAME record for ${s} -> ${u}`);let i=await t.upsertRecord(s,{name:s,type:"CNAME",content:u,ttl:600});if(!i.success)console.warn(`Warning: Could not create DNS record: ${i.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created CNAME record: ${s} -> ${u}`)}}async function en(t){let{sourceDir:s,cleanBucket:u=!1,onProgress:e,...p}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await Zr(p);if(!i.success)return i;if(u){e?.("clean","Cleaning old files from S3...");try{await new a(p.region||"us-east-1").emptyBucket(i.bucket)}catch(C){console.log(`Note: Could not clean bucket: ${C.message}`)}}e?.("upload","Uploading files to S3...");let{uploadStaticFiles:r}=await import("./chunk-vpy3zjqv.js"),c=await r({sourceDir:s,bucket:i.bucket,region:p.region||"us-east-1",cacheControl:p.cacheControl,onProgress:(C,w,x)=>{e?.("upload",`${C}/${w}: ${x}`)}});if(c.errors.length>0)return{...i,success:!1,message:`Upload errors: ${c.errors.join(", ")}`,filesUploaded:c.uploaded};if(i.distributionId&&c.uploaded>0){e?.("invalidate","Invalidating CloudFront cache...");let{invalidateCache:C}=await import("./chunk-vpy3zjqv.js");await C(i.distributionId)}e?.("complete","Deployment complete!");let g=c.skipped>0?`Deployed ${c.uploaded} files (${c.skipped} unchanged) with external DNS`:`Deployed ${c.uploaded} files successfully with external DNS`;return{...i,filesUploaded:c.uploaded,filesSkipped:c.skipped,message:g}}function Qi(t){let{bucketName:s,domain:u,certificateArn:e,hostedZoneId:p,defaultRootObject:i="index.html",errorDocument:r="404.html"}=t,c={},g={};c.S3Bucket={Type:"AWS::S3::Bucket",Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},g.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},g.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},c.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}},c.UrlRewriteFunction={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-url-rewrite"},AutoPublish:!0,FunctionConfig:{Comment:"Append .html extension to URLs without extensions",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
+└─────────────────────────────────────────────────────────────────────────────┘`),{success:!1,stackId:B,stackName:i,bucket:N,message:"CloudFront account verification required. Please contact AWS Support."}}return{success:!1,stackId:B,stackName:i,bucket:N,message:`Stack deployment failed: ${o.message}`}}let d=(await r.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],k=(o)=>d.find((n)=>n.OutputKey===o)?.OutputValue,A=k("DistributionDomain");if(A&&g)console.log(`Creating DNS records via ${g.name}...`),await H(g,e,A);else if(A&&!g)console.log("Skipping DNS record creation (DNS verification was skipped)");return{success:!0,stackId:B,stackName:i,bucket:k("BucketName")||N,distributionId:k("DistributionId"),distributionDomain:A,domain:e,certificateArn:C,message:"Static site infrastructure deployed successfully with external DNS"}}async function H(t,s,u){if(!t){console.log("Skipping DNS record creation (DNS verification was skipped)");return}if(s.split(".").length===2)if(t instanceof me){console.log(`Creating Route53 alias record for apex domain ${s} -> ${u}`);let i=await t.createCloudFrontAlias({domain:s,name:s,cloudFrontDomainName:u});if(!i.success)console.warn(`Warning: Could not create Route53 alias record: ${i.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created Route53 alias record: ${s} -> ${u}`);let r=`www.${s}`;console.log(`Creating Route53 alias record for ${r} -> ${u}`);let c=await t.createCloudFrontAlias({domain:s,name:r,cloudFrontDomainName:u});if(!c.success)console.warn(`Warning: Could not create www Route53 alias: ${c.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${r} -> ${u}`);else console.log(`Created Route53 alias record: ${r} -> ${u}`)}else{try{let g=await t.listRecords(s,"A");if(g.success)for(let C of g.records){let w=C.name.replace(/\.$/,"");if(w===s||w==="")console.log(`Removing existing root A record (${C.content}) to make room for ALIAS...`),await t.deleteRecord(s,{name:s,type:"A",content:C.content})}}catch(g){console.log(`Note: Could not check for conflicting A records: ${g instanceof Error?g.message:g}`)}console.log(`Creating ALIAS record for apex domain ${s} -> ${u}`);let i=await t.upsertRecord(s,{name:s,type:"ALIAS",content:u,ttl:600});if(!i.success)console.warn(`Warning: Could not create ALIAS record: ${i.message}`),console.warn("Please manually create an ALIAS record in your DNS provider:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created ALIAS record: ${s} -> ${u}`);let r=`www.${s}`;console.log(`Creating CNAME record for ${r} -> ${u}`);let c=await t.upsertRecord(s,{name:r,type:"CNAME",content:u,ttl:600});if(!c.success)console.warn(`Warning: Could not create www DNS record: ${c.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${r} -> ${u}`);else console.log(`Created CNAME record: ${r} -> ${u}`)}else{console.log(`Creating CNAME record for ${s} -> ${u}`);let i=await t.upsertRecord(s,{name:s,type:"CNAME",content:u,ttl:600});if(!i.success)console.warn(`Warning: Could not create DNS record: ${i.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created CNAME record: ${s} -> ${u}`)}}async function en(t){let{sourceDir:s,cleanBucket:u=!1,onProgress:e,...p}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await Zr(p);if(!i.success)return i;if(u){e?.("clean","Cleaning old files from S3...");try{await new a(p.region||"us-east-1").emptyBucket(i.bucket)}catch(C){console.log(`Note: Could not clean bucket: ${C.message}`)}}e?.("upload","Uploading files to S3...");let{uploadStaticFiles:r}=await import("./chunk-atny1wp9.js"),c=await r({sourceDir:s,bucket:i.bucket,region:p.region||"us-east-1",cacheControl:p.cacheControl,onProgress:(C,w,x)=>{e?.("upload",`${C}/${w}: ${x}`)}});if(c.errors.length>0)return{...i,success:!1,message:`Upload errors: ${c.errors.join(", ")}`,filesUploaded:c.uploaded};if(i.distributionId&&c.uploaded>0){e?.("invalidate","Invalidating CloudFront cache...");let{invalidateCache:C}=await import("./chunk-atny1wp9.js");await C(i.distributionId)}e?.("complete","Deployment complete!");let g=c.skipped>0?`Deployed ${c.uploaded} files (${c.skipped} unchanged) with external DNS`:`Deployed ${c.uploaded} files successfully with external DNS`;return{...i,filesUploaded:c.uploaded,filesSkipped:c.skipped,message:g}}function Qi(t){let{bucketName:s,domain:u,certificateArn:e,hostedZoneId:p,defaultRootObject:i="index.html",errorDocument:r="404.html"}=t,c={},g={};c.S3Bucket={Type:"AWS::S3::Bucket",Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},g.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},g.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},c.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}},c.UrlRewriteFunction={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-url-rewrite"},AutoPublish:!0,FunctionConfig:{Comment:"Append .html extension to URLs without extensions",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
   const request = event.request;
   var uri = request.uri;
 
@@ -56,5 +56,5 @@ import{ge,ne,T,ie,rr}from"./chunk-pkan6evc.js";import{a}from"./chunk-3kapcdpn.js
   }
 
   return request;
-}`}};let C={Enabled:!0,DefaultRootObject:i,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:[{Id:`S3-${s}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}}],DefaultCacheBehavior:{TargetOriginId:`S3-${s}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD"],CachedMethods:["GET","HEAD"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]},CustomErrorResponses:[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300}]};if(u&&e)C.Aliases=[u],C.ViewerCertificate={AcmCertificateArn:e,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else C.ViewerCertificate={CloudFrontDefaultCertificate:!0};if(c.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",DependsOn:["S3Bucket","CloudFrontOAC","UrlRewriteFunction"],Properties:{DistributionConfig:C}},g.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},g.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},c.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},u&&p)c.DNSRecord={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:p,Name:u,Type:"A",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},c.DNSRecordIPv6={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:p,Name:u,Type:"AAAA",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},g.SiteUrl={Description:"Site URL",Value:{"Fn::Sub":"https://${DNSRecord}"}};return{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${u||s}`,Resources:c,Outputs:g}}async function Hi(t){if(t.dnsProvider&&t.dnsProvider.provider!=="route53"){let d=t.domain||(t.subdomain&&t.baseDomain?`${t.subdomain}.${t.baseDomain}`:void 0);if(!d)return{success:!1,stackName:t.stackName||`${t.siteName}-static-site`,bucket:t.bucket||`${t.siteName}-${Date.now()}`,message:"Domain is required when using external DNS provider"};return Zr({siteName:t.siteName,region:t.region,domain:d,bucket:t.bucket,certificateArn:t.certificateArn,stackName:t.stackName,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument,cacheControl:t.cacheControl,tags:t.tags,dnsProvider:t.dnsProvider})}let s=t.region||"us-east-1",u="us-east-1",e;if(t.domain)e=t.domain;else if(t.subdomain&&t.baseDomain)e=`${t.subdomain}.${t.baseDomain}`;let p=t.bucket||(e?e.replace(/\./g,"-"):`${t.siteName}-${Date.now()}`),i=t.stackName||`${t.siteName}-static-site`,r=new f(u),c=new h,g=new ie("us-east-1"),C=new rr("us-east-1"),{hostedZoneId:w,certificateArn:x}=t;if(e&&!w){let d=await c.findHostedZoneForDomain(e);if(d)w=d.Id.replace("/hostedzone/","");else return{success:!1,stackName:i,bucket:p,message:`No Route53 hosted zone found for ${t.baseDomain||e}. Please create one first.`}}if(e&&!x&&w){let d=await g.findCertificateByDomain(e);if(d&&d.Status==="ISSUED")x=d.CertificateArn;else x=(await C.requestAndValidate({domainName:e,hostedZoneId:w,waitForValidation:!0,maxWaitMinutes:10})).certificateArn}let E=!1,M;try{let d=await r.describeStacks({stackName:i});if(d.Stacks.length>0){let k=d.Stacks[0],A=k.StackStatus;if(A==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await r.waitForStack(i,"stack-delete-complete"),E=!1;else if(A==="DELETE_COMPLETE")E=!1;else E=!0,M=(k.Outputs||[]).find((n)=>n.OutputKey==="BucketName")?.OutputValue}}catch(d){if(d.message?.includes("does not exist")||d.code==="ValidationError")E=!1;else throw d}let S=M||p;if(!E){let d=new a(s),k=new y,A=!1;if(e){try{console.log(`Checking for existing CloudFront distribution for ${e}...`);let o=await k.listDistributions();for(let n of o){let m=[];if(n.Aliases?.Items){if(Array.isArray(n.Aliases.Items))m=n.Aliases.Items;else if(typeof n.Aliases.Items==="object"){let b=n.Aliases.Items.CNAME;if(typeof b==="string")m=[b];else if(Array.isArray(b))m=b}}if(m.includes(e)){A=!0,console.log(`Found existing CloudFront distribution ${n.Id} for ${e}`);let l=(await k.getDistributionConfig(n.Id)).DistributionConfig?.Origins?.Items,D;if(l){let F=[];if(Array.isArray(l))F=l;else if(l.Origin)F=Array.isArray(l.Origin)?l.Origin:[l.Origin];else F=[l];for(let P of F){let U=(P.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(U){D=U[1];break}}}if(D){let F=e.replace(/\./g,"-");if(!D.startsWith(F)&&!D.includes(t.siteName)){console.log(`Warning: Found distribution with mismatched bucket ${D}, skipping...`);continue}if(console.log(`Using existing S3 bucket: ${D}`),w&&n.DomainName)try{console.log(`Ensuring Route53 records exist for ${e}...`),await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"A",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:n.DomainName,EvaluateTargetHealth:!1}),await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"AAAA",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:n.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records ensured for ${e}`)}catch(P){console.log(`Note: Could not update Route53 records: ${P.message}`)}return{success:!0,stackName:`existing-${n.Id}`,bucket:D,distributionId:n.Id,distributionDomain:n.DomainName,domain:e,certificateArn:x,message:"Using existing CloudFront distribution"}}}}}catch{}if(w)try{let n=(await c.listResourceRecordSets({HostedZoneId:w})).ResourceRecordSets||[];for(let m of n)if(m.Name===`${e}.`&&(m.Type==="A"||m.Type==="AAAA")){if(m.AliasTarget){console.log(`Found orphaned Route53 ${m.Type} record for ${e}, cleaning up...`);try{await c.deleteRecord({HostedZoneId:w,RecordSet:m}),console.log(`Deleted orphaned Route53 ${m.Type} record for ${e}`)}catch(b){console.log(`Note: Could not delete Route53 record: ${b.message}`)}}}}catch{}}if(!A)try{if((await d.headBucket(p)).exists){console.log(`Found orphaned S3 bucket ${p}, cleaning up...`);try{let n=d.emptyBucket(p).then(()=>d.deleteBucket(p)),m=new Promise((b,l)=>setTimeout(()=>l(Error("Bucket cleanup timeout")),30000));await Promise.race([n,m]),console.log(`Deleted orphaned S3 bucket ${p}`)}catch(n){console.log(`Note: Could not clean up S3 bucket: ${n.message}`);let m=Date.now().toString(36);S=`${p}-${m}`,console.log(`Using alternative bucket name: ${S}`)}}}catch{}}let N=Qi({bucketName:S,domain:e,certificateArn:x,hostedZoneId:w,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument}),j=Object.entries(t.tags||{}).map(([d,k])=>({Key:d,Value:k}));j.push({Key:"ManagedBy",Value:"ts-cloud"}),j.push({Key:"Application",Value:t.siteName});let v,O=!1;if(E){O=!0,console.log(`Updating CloudFormation stack: ${i}`),console.log(`Using existing bucket: ${S}`),console.log(`Domain: ${e||"not specified"}`),console.log(`Certificate ARN: ${x||"not specified"}`);try{v=(await r.updateStack({stackName:i,templateBody:JSON.stringify(N),capabilities:["CAPABILITY_IAM"],tags:j})).StackId,console.log(`Update initiated, stack ID: ${v}`)}catch(d){if(d.message?.includes("No updates are to be performed")){let k=await r.describeStacks({stackName:i});v=k.Stacks[0].StackId;let A=k.Stacks[0]?.Outputs||[],o=(n)=>A.find((m)=>m.OutputKey===n)?.OutputValue;return{success:!0,stackId:v,stackName:i,bucket:o("BucketName")||S,distributionId:o("DistributionId"),distributionDomain:o("DistributionDomain"),domain:e,certificateArn:x,message:"Static site infrastructure is already up to date"}}else throw d}}else console.log(`Creating CloudFormation stack: ${i}`),console.log(`Bucket name: ${S}`),console.log(`Domain: ${e||"not specified"}`),console.log(`Certificate ARN: ${x||"not specified"}`),console.log("Stack does not exist, creating..."),v=(await r.createStack({stackName:i,templateBody:JSON.stringify(N),capabilities:["CAPABILITY_IAM"],tags:j,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${v}`);console.log(`Waiting for stack to reach ${O?"stack-update-complete":"stack-create-complete"}...`);try{await r.waitForStack(i,O?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(d){if(d.message?.includes("must be verified")||d.message?.includes("Access denied for operation")||d.message?.includes("failed")){console.log("CloudFormation deployment failed, trying direct API creation...");let k=new y;if(e)try{let A=await k.listDistributions();for(let o of A){let n=[];if(o.Aliases?.Items){if(Array.isArray(o.Aliases.Items))n=o.Aliases.Items;else if(typeof o.Aliases.Items==="object"){let m=o.Aliases.Items.CNAME;if(typeof m==="string")n=[m];else if(Array.isArray(m))n=m}}if(n.includes(e)){console.log(`Found existing CloudFront distribution ${o.Id} with alias ${e}`);let b=(await k.getDistributionConfig(o.Id)).DistributionConfig?.Origins?.Items,l;if(b){let D=[];if(Array.isArray(b))D=b;else if(b.Origin)D=Array.isArray(b.Origin)?b.Origin:[b.Origin];else D=[b];for(let F of D){let V=(F.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(V){l=V[1];break}}}if(l)return console.log(`Using existing S3 bucket: ${l}`),{success:!0,stackName:`existing-${o.Id}`,bucket:l,distributionId:o.Id,distributionDomain:o.DomainName,domain:e,certificateArn:x,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}}catch{}console.log("No existing infrastructure found, creating via direct API calls...");try{let A=new a(s);if((await A.headBucket(S)).exists)console.log(`Using existing S3 bucket: ${S}`);else console.log(`Creating S3 bucket: ${S}...`),await A.createBucket(S);await A.putBucketWebsite(S,{IndexDocument:t.defaultRootObject||"index.html",ErrorDocument:t.errorDocument||"404.html"}),await A.putPublicAccessBlock(S,{BlockPublicAcls:!0,IgnorePublicAcls:!0,BlockPublicPolicy:!1,RestrictPublicBuckets:!1}),console.log(`S3 bucket ${S} configured`);let n=`OAC-${S}`;console.log(`Creating Origin Access Control: ${n}...`);let m=await k.findOrCreateOriginAccessControl(n);console.log(`Origin Access Control ${m.Id} ready`),console.log("Creating CloudFront distribution...");let b=await k.createDistributionForS3({bucketName:S,bucketRegion:s,originAccessControlId:m.Id,aliases:e?[e]:[],certificateArn:x,defaultRootObject:t.defaultRootObject||"index.html",comment:`Distribution for ${e||S}`});console.log(`CloudFront distribution ${b.Id} created`),console.log("Updating S3 bucket policy...");let l=y.getS3BucketPolicyForCloudFront(S,b.ARN);if(await A.putBucketPolicy(S,l),console.log("S3 bucket policy updated"),e&&w){console.log(`Creating Route53 records for ${e}...`);try{await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"A",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:b.DomainName,EvaluateTargetHealth:!1}),await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"AAAA",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:b.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records created for ${e}`)}catch(D){console.log(`Note: Could not create Route53 records: ${D.message}`)}}return{success:!0,stackName:`direct-${b.Id}`,bucket:S,distributionId:b.Id,distributionDomain:b.DomainName,domain:e,certificateArn:x,message:"Static site infrastructure created via direct API calls"}}catch(A){return console.log(`Direct API creation failed: ${A.message}`),{success:!1,stackId:v,stackName:i,bucket:S,message:`Deployment failed: ${A.message}`}}}return{success:!1,stackId:v,stackName:i,bucket:S,message:`Stack deployment failed: ${d.message}`}}let I=(await r.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],R=(d)=>I.find((k)=>k.OutputKey===d)?.OutputValue;return{success:!0,stackId:v,stackName:i,bucket:R("BucketName")||S,distributionId:R("DistributionId"),distributionDomain:R("DistributionDomain"),domain:e,certificateArn:x,message:"Static site infrastructure deployed successfully"}}async function Gi(t){let{sourceDir:s,bucket:u,region:e,cacheControl:p="max-age=31536000, public",onProgress:i}=t,r=new a(e),{readdir:c}=await import("node:fs/promises"),{join:g,relative:C}=await import("node:path"),{createHash:w}=await import("node:crypto");async function x(I){let R=[],d=await c(I,{withFileTypes:!0});for(let k of d){let A=g(I,k.name);if(k.isDirectory())R.push(...await x(A));else R.push(A)}return R}function E(I){let R=I.split(".").pop()?.toLowerCase();return{html:"text/html; charset=utf-8",css:"text/css; charset=utf-8",js:"application/javascript; charset=utf-8",json:"application/json; charset=utf-8",png:"image/png",jpg:"image/jpeg",jpeg:"image/jpeg",gif:"image/gif",svg:"image/svg+xml",ico:"image/x-icon",webp:"image/webp",woff:"font/woff",woff2:"font/woff2",ttf:"font/ttf",xml:"application/xml",txt:"text/plain; charset=utf-8",sh:"text/plain; charset=utf-8",bash:"text/plain; charset=utf-8",ps1:"text/plain; charset=utf-8"}[R||""]||"application/octet-stream"}function M(I){return w("md5").update(I).digest("hex")}async function S(){let I=new Map,R;do{let d=await r.listObjects({bucket:u,maxKeys:1000,continuationToken:R});for(let k of d.objects){let A=k.ETag?.replace(/"/g,"")||"";I.set(k.Key,A)}R=d.nextContinuationToken}while(R);return I}let N=await x(s),j=[],v=0,O=0,B=await S();for(let I of N){let R=C(s,I),d=E(I),k=I.endsWith(".html")?"max-age=3600, public":p;try{let A=Buffer.from(await Bun.file(I).arrayBuffer()),o=M(A),n=B.get(R);if(n&&n===o){O++,i?.(v+O,N.length,R);continue}await r.putObject({bucket:u,key:R,body:A,contentType:d,cacheControl:k}),v++,i?.(v+O,N.length,R)}catch(A){j.push(`Failed to upload ${R}: ${A.message}`)}}return{uploaded:v,skipped:O,errors:j}}async function qi(t){return{invalidationId:(await new y().invalidateAll(t)).Id}}async function ha(t,s="us-east-1"){let u=new f(s);try{let r=((await u.describeStacks({stackName:t})).Stacks[0]?.Outputs||[]).find((c)=>c.OutputKey==="BucketName")?.OutputValue;if(r)await new a(s).emptyBucket(r)}catch{}await u.deleteStack(t);let e=await u.waitForStackComplete(t,60,1e4);return{success:e.success||e.status==="DELETE_COMPLETE",message:e.success?"Static site deleted successfully":`Deletion failed: ${e.status}`}}async function fa(t){let{sourceDir:s,cleanBucket:u=!1,onProgress:e,...p}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await Hi(p);if(!i.success)return i;if(u){e?.("clean","Cleaning old files from S3...");try{await new a(p.region||"us-east-1").emptyBucket(i.bucket)}catch(g){console.log(`Note: Could not clean bucket: ${g.message}`)}}e?.("upload","Uploading files to S3...");let r=await Gi({sourceDir:s,bucket:i.bucket,region:p.region||"us-east-1",cacheControl:p.cacheControl,onProgress:(g,C,w)=>{e?.("upload",`${g}/${C}: ${w}`)}});if(r.errors.length>0)return{...i,success:!1,message:`Upload errors: ${r.errors.join(", ")}`,filesUploaded:r.uploaded};if(i.distributionId&&r.uploaded>0)e?.("invalidate","Invalidating CloudFront cache..."),await qi(i.distributionId);e?.("complete","Deployment complete!");let c=r.skipped>0?`Deployed ${r.uploaded} files (${r.skipped} unchanged)`:`Deployed ${r.uploaded} files successfully`;return{...i,filesUploaded:r.uploaded,filesSkipped:r.skipped,message:c}}
+}`}};let C={Enabled:!0,DefaultRootObject:i,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:[{Id:`S3-${s}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}}],DefaultCacheBehavior:{TargetOriginId:`S3-${s}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD"],CachedMethods:["GET","HEAD"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]},CustomErrorResponses:[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300}]};if(u&&e)C.Aliases=[u],C.ViewerCertificate={AcmCertificateArn:e,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else C.ViewerCertificate={CloudFrontDefaultCertificate:!0};if(c.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",DependsOn:["S3Bucket","CloudFrontOAC","UrlRewriteFunction"],Properties:{DistributionConfig:C}},g.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},g.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},c.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},u&&p)c.DNSRecord={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:p,Name:u,Type:"A",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},c.DNSRecordIPv6={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:p,Name:u,Type:"AAAA",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},g.SiteUrl={Description:"Site URL",Value:{"Fn::Sub":"https://${DNSRecord}"}};return{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${u||s}`,Resources:c,Outputs:g}}async function Hi(t){if(t.dnsProvider&&t.dnsProvider.provider!=="route53"){let d=t.domain||(t.subdomain&&t.baseDomain?`${t.subdomain}.${t.baseDomain}`:void 0);if(!d)return{success:!1,stackName:t.stackName||`${t.siteName}-static-site`,bucket:t.bucket||`${t.siteName}-${Date.now()}`,message:"Domain is required when using external DNS provider"};return Zr({siteName:t.siteName,region:t.region,domain:d,bucket:t.bucket,certificateArn:t.certificateArn,stackName:t.stackName,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument,cacheControl:t.cacheControl,tags:t.tags,dnsProvider:t.dnsProvider})}let s=t.region||"us-east-1",u="us-east-1",e;if(t.domain)e=t.domain;else if(t.subdomain&&t.baseDomain)e=`${t.subdomain}.${t.baseDomain}`;let p=t.bucket||(e?e.replace(/\./g,"-"):`${t.siteName}-${Date.now()}`),i=t.stackName||`${t.siteName}-static-site`,r=new f(u),c=new h,g=new se("us-east-1"),C=new rr("us-east-1"),{hostedZoneId:w,certificateArn:x}=t;if(e&&!w){let d=await c.findHostedZoneForDomain(e);if(d)w=d.Id.replace("/hostedzone/","");else return{success:!1,stackName:i,bucket:p,message:`No Route53 hosted zone found for ${t.baseDomain||e}. Please create one first.`}}if(e&&!x&&w){let d=await g.findCertificateByDomain(e);if(d&&d.Status==="ISSUED")x=d.CertificateArn;else x=(await C.requestAndValidate({domainName:e,hostedZoneId:w,waitForValidation:!0,maxWaitMinutes:10})).certificateArn}let E=!1,M;try{let d=await r.describeStacks({stackName:i});if(d.Stacks.length>0){let k=d.Stacks[0],A=k.StackStatus;if(A==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await r.waitForStack(i,"stack-delete-complete"),E=!1;else if(A==="DELETE_COMPLETE")E=!1;else E=!0,M=(k.Outputs||[]).find((n)=>n.OutputKey==="BucketName")?.OutputValue}}catch(d){if(d.message?.includes("does not exist")||d.code==="ValidationError")E=!1;else throw d}let S=M||p;if(!E){let d=new a(s),k=new y,A=!1;if(e){try{console.log(`Checking for existing CloudFront distribution for ${e}...`);let o=await k.listDistributions();for(let n of o){let m=[];if(n.Aliases?.Items){if(Array.isArray(n.Aliases.Items))m=n.Aliases.Items;else if(typeof n.Aliases.Items==="object"){let b=n.Aliases.Items.CNAME;if(typeof b==="string")m=[b];else if(Array.isArray(b))m=b}}if(m.includes(e)){A=!0,console.log(`Found existing CloudFront distribution ${n.Id} for ${e}`);let l=(await k.getDistributionConfig(n.Id)).DistributionConfig?.Origins?.Items,D;if(l){let F=[];if(Array.isArray(l))F=l;else if(l.Origin)F=Array.isArray(l.Origin)?l.Origin:[l.Origin];else F=[l];for(let P of F){let U=(P.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(U){D=U[1];break}}}if(D){let F=e.replace(/\./g,"-");if(!D.startsWith(F)&&!D.includes(t.siteName)){console.log(`Warning: Found distribution with mismatched bucket ${D}, skipping...`);continue}if(console.log(`Using existing S3 bucket: ${D}`),w&&n.DomainName)try{console.log(`Ensuring Route53 records exist for ${e}...`),await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"A",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:n.DomainName,EvaluateTargetHealth:!1}),await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"AAAA",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:n.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records ensured for ${e}`)}catch(P){console.log(`Note: Could not update Route53 records: ${P.message}`)}return{success:!0,stackName:`existing-${n.Id}`,bucket:D,distributionId:n.Id,distributionDomain:n.DomainName,domain:e,certificateArn:x,message:"Using existing CloudFront distribution"}}}}}catch{}if(w)try{let n=(await c.listResourceRecordSets({HostedZoneId:w})).ResourceRecordSets||[];for(let m of n)if(m.Name===`${e}.`&&(m.Type==="A"||m.Type==="AAAA")){if(m.AliasTarget){console.log(`Found orphaned Route53 ${m.Type} record for ${e}, cleaning up...`);try{await c.deleteRecord({HostedZoneId:w,RecordSet:m}),console.log(`Deleted orphaned Route53 ${m.Type} record for ${e}`)}catch(b){console.log(`Note: Could not delete Route53 record: ${b.message}`)}}}}catch{}}if(!A)try{if((await d.headBucket(p)).exists){console.log(`Found orphaned S3 bucket ${p}, cleaning up...`);try{let n=d.emptyBucket(p).then(()=>d.deleteBucket(p)),m=new Promise((b,l)=>setTimeout(()=>l(Error("Bucket cleanup timeout")),30000));await Promise.race([n,m]),console.log(`Deleted orphaned S3 bucket ${p}`)}catch(n){console.log(`Note: Could not clean up S3 bucket: ${n.message}`);let m=Date.now().toString(36);S=`${p}-${m}`,console.log(`Using alternative bucket name: ${S}`)}}}catch{}}let N=Qi({bucketName:S,domain:e,certificateArn:x,hostedZoneId:w,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument}),j=Object.entries(t.tags||{}).map(([d,k])=>({Key:d,Value:k}));j.push({Key:"ManagedBy",Value:"ts-cloud"}),j.push({Key:"Application",Value:t.siteName});let v,O=!1;if(E){O=!0,console.log(`Updating CloudFormation stack: ${i}`),console.log(`Using existing bucket: ${S}`),console.log(`Domain: ${e||"not specified"}`),console.log(`Certificate ARN: ${x||"not specified"}`);try{v=(await r.updateStack({stackName:i,templateBody:JSON.stringify(N),capabilities:["CAPABILITY_IAM"],tags:j})).StackId,console.log(`Update initiated, stack ID: ${v}`)}catch(d){if(d.message?.includes("No updates are to be performed")){let k=await r.describeStacks({stackName:i});v=k.Stacks[0].StackId;let A=k.Stacks[0]?.Outputs||[],o=(n)=>A.find((m)=>m.OutputKey===n)?.OutputValue;return{success:!0,stackId:v,stackName:i,bucket:o("BucketName")||S,distributionId:o("DistributionId"),distributionDomain:o("DistributionDomain"),domain:e,certificateArn:x,message:"Static site infrastructure is already up to date"}}else throw d}}else console.log(`Creating CloudFormation stack: ${i}`),console.log(`Bucket name: ${S}`),console.log(`Domain: ${e||"not specified"}`),console.log(`Certificate ARN: ${x||"not specified"}`),console.log("Stack does not exist, creating..."),v=(await r.createStack({stackName:i,templateBody:JSON.stringify(N),capabilities:["CAPABILITY_IAM"],tags:j,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${v}`);console.log(`Waiting for stack to reach ${O?"stack-update-complete":"stack-create-complete"}...`);try{await r.waitForStack(i,O?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(d){if(d.message?.includes("must be verified")||d.message?.includes("Access denied for operation")||d.message?.includes("failed")){console.log("CloudFormation deployment failed, trying direct API creation...");let k=new y;if(e)try{let A=await k.listDistributions();for(let o of A){let n=[];if(o.Aliases?.Items){if(Array.isArray(o.Aliases.Items))n=o.Aliases.Items;else if(typeof o.Aliases.Items==="object"){let m=o.Aliases.Items.CNAME;if(typeof m==="string")n=[m];else if(Array.isArray(m))n=m}}if(n.includes(e)){console.log(`Found existing CloudFront distribution ${o.Id} with alias ${e}`);let b=(await k.getDistributionConfig(o.Id)).DistributionConfig?.Origins?.Items,l;if(b){let D=[];if(Array.isArray(b))D=b;else if(b.Origin)D=Array.isArray(b.Origin)?b.Origin:[b.Origin];else D=[b];for(let F of D){let V=(F.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(V){l=V[1];break}}}if(l)return console.log(`Using existing S3 bucket: ${l}`),{success:!0,stackName:`existing-${o.Id}`,bucket:l,distributionId:o.Id,distributionDomain:o.DomainName,domain:e,certificateArn:x,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}}catch{}console.log("No existing infrastructure found, creating via direct API calls...");try{let A=new a(s);if((await A.headBucket(S)).exists)console.log(`Using existing S3 bucket: ${S}`);else console.log(`Creating S3 bucket: ${S}...`),await A.createBucket(S);await A.putBucketWebsite(S,{IndexDocument:t.defaultRootObject||"index.html",ErrorDocument:t.errorDocument||"404.html"}),await A.putPublicAccessBlock(S,{BlockPublicAcls:!0,IgnorePublicAcls:!0,BlockPublicPolicy:!1,RestrictPublicBuckets:!1}),console.log(`S3 bucket ${S} configured`);let n=`OAC-${S}`;console.log(`Creating Origin Access Control: ${n}...`);let m=await k.findOrCreateOriginAccessControl(n);console.log(`Origin Access Control ${m.Id} ready`),console.log("Creating CloudFront distribution...");let b=await k.createDistributionForS3({bucketName:S,bucketRegion:s,originAccessControlId:m.Id,aliases:e?[e]:[],certificateArn:x,defaultRootObject:t.defaultRootObject||"index.html",comment:`Distribution for ${e||S}`});console.log(`CloudFront distribution ${b.Id} created`),console.log("Updating S3 bucket policy...");let l=y.getS3BucketPolicyForCloudFront(S,b.ARN);if(await A.putBucketPolicy(S,l),console.log("S3 bucket policy updated"),e&&w){console.log(`Creating Route53 records for ${e}...`);try{await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"A",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:b.DomainName,EvaluateTargetHealth:!1}),await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"AAAA",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:b.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records created for ${e}`)}catch(D){console.log(`Note: Could not create Route53 records: ${D.message}`)}}return{success:!0,stackName:`direct-${b.Id}`,bucket:S,distributionId:b.Id,distributionDomain:b.DomainName,domain:e,certificateArn:x,message:"Static site infrastructure created via direct API calls"}}catch(A){return console.log(`Direct API creation failed: ${A.message}`),{success:!1,stackId:v,stackName:i,bucket:S,message:`Deployment failed: ${A.message}`}}}return{success:!1,stackId:v,stackName:i,bucket:S,message:`Stack deployment failed: ${d.message}`}}let I=(await r.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],R=(d)=>I.find((k)=>k.OutputKey===d)?.OutputValue;return{success:!0,stackId:v,stackName:i,bucket:R("BucketName")||S,distributionId:R("DistributionId"),distributionDomain:R("DistributionDomain"),domain:e,certificateArn:x,message:"Static site infrastructure deployed successfully"}}async function Gi(t){let{sourceDir:s,bucket:u,region:e,cacheControl:p="max-age=31536000, public",onProgress:i}=t,r=new a(e),{readdir:c}=await import("node:fs/promises"),{join:g,relative:C}=await import("node:path"),{createHash:w}=await import("node:crypto");async function x(I){let R=[],d=await c(I,{withFileTypes:!0});for(let k of d){let A=g(I,k.name);if(k.isDirectory())R.push(...await x(A));else R.push(A)}return R}function E(I){let R=I.split(".").pop()?.toLowerCase();return{html:"text/html; charset=utf-8",css:"text/css; charset=utf-8",js:"application/javascript; charset=utf-8",json:"application/json; charset=utf-8",png:"image/png",jpg:"image/jpeg",jpeg:"image/jpeg",gif:"image/gif",svg:"image/svg+xml",ico:"image/x-icon",webp:"image/webp",woff:"font/woff",woff2:"font/woff2",ttf:"font/ttf",xml:"application/xml",txt:"text/plain; charset=utf-8",sh:"text/plain; charset=utf-8",bash:"text/plain; charset=utf-8",ps1:"text/plain; charset=utf-8"}[R||""]||"application/octet-stream"}function M(I){return w("md5").update(I).digest("hex")}async function S(){let I=new Map,R;do{let d=await r.listObjects({bucket:u,maxKeys:1000,continuationToken:R});for(let k of d.objects){let A=k.ETag?.replace(/"/g,"")||"";I.set(k.Key,A)}R=d.nextContinuationToken}while(R);return I}let N=await x(s),j=[],v=0,O=0,B=await S();for(let I of N){let R=C(s,I),d=E(I),k=I.endsWith(".html")?"max-age=3600, public":p;try{let A=Buffer.from(await Bun.file(I).arrayBuffer()),o=M(A),n=B.get(R);if(n&&n===o){O++,i?.(v+O,N.length,R);continue}await r.putObject({bucket:u,key:R,body:A,contentType:d,cacheControl:k}),v++,i?.(v+O,N.length,R)}catch(A){j.push(`Failed to upload ${R}: ${A.message}`)}}return{uploaded:v,skipped:O,errors:j}}async function qi(t){return{invalidationId:(await new y().invalidateAll(t)).Id}}async function ha(t,s="us-east-1"){let u=new f(s);try{let r=((await u.describeStacks({stackName:t})).Stacks[0]?.Outputs||[]).find((c)=>c.OutputKey==="BucketName")?.OutputValue;if(r)await new a(s).emptyBucket(r)}catch{}await u.deleteStack(t);let e=await u.waitForStackComplete(t,60,1e4);return{success:e.success||e.status==="DELETE_COMPLETE",message:e.success?"Static site deleted successfully":`Deletion failed: ${e.status}`}}async function fa(t){let{sourceDir:s,cleanBucket:u=!1,onProgress:e,...p}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await Hi(p);if(!i.success)return i;if(u){e?.("clean","Cleaning old files from S3...");try{await new a(p.region||"us-east-1").emptyBucket(i.bucket)}catch(g){console.log(`Note: Could not clean bucket: ${g.message}`)}}e?.("upload","Uploading files to S3...");let r=await Gi({sourceDir:s,bucket:i.bucket,region:p.region||"us-east-1",cacheControl:p.cacheControl,onProgress:(g,C,w)=>{e?.("upload",`${g}/${C}: ${w}`)}});if(r.errors.length>0)return{...i,success:!1,message:`Upload errors: ${r.errors.join(", ")}`,filesUploaded:r.uploaded};if(i.distributionId&&r.uploaded>0)e?.("invalidate","Invalidating CloudFront cache..."),await qi(i.distributionId);e?.("complete","Deployment complete!");let c=r.skipped>0?`Deployed ${r.uploaded} files (${r.skipped} unchanged)`:`Deployed ${r.uploaded} files successfully`;return{...i,filesUploaded:r.uploaded,filesSkipped:r.skipped,message:c}}
 export{ma,Zr,en,Qi,Hi,Gi,qi,ha,fa};

package/dist/{chunk-3kapcdpn.js → chunk-yq3pdbz7.js}

@@ -1,4 +1,4 @@
-import{mr,n}from"./chunk-30h9rgfn.js";import{_e}from"./chunk-e0919h5g.js";import*as l from"node:crypto";import{readFileSync as D}from"node:fs";import{readdir as U}from"node:fs/promises";import{join as L}from"node:path";function Nt(e){if(e){let i=R(e);if(!i)throw Error(`AWS profile '${e}' not found in ~/.aws/credentials`);return i}let t=process.env.AWS_ACCESS_KEY_ID,s=process.env.AWS_SECRET_ACCESS_KEY;if(t&&s)return{accessKeyId:t,secretAccessKey:s,sessionToken:process.env.AWS_SESSION_TOKEN};return R(process.env.AWS_PROFILE||"default")??{accessKeyId:"",secretAccessKey:""}}function R(e){let{existsSync:t,readFileSync:s}=_e("node:fs"),{homedir:i}=_e("node:os"),{join:r}=_e("node:path"),o=process.env.AWS_SHARED_CREDENTIALS_FILE||r(i(),".aws","credentials");if(!t(o))return null;let c=s(o,"utf-8"),g=null,d,u,y;for(let h of c.split(`
+import{mr,n}from"./chunk-30h9rgfn.js";import{Oe}from"./chunk-hnkw6pde.js";import*as l from"node:crypto";import{readFileSync as D}from"node:fs";import{readdir as U}from"node:fs/promises";import{join as L}from"node:path";function Nt(e){if(e){let i=R(e);if(!i)throw Error(`AWS profile '${e}' not found in ~/.aws/credentials`);return i}let t=process.env.AWS_ACCESS_KEY_ID,s=process.env.AWS_SECRET_ACCESS_KEY;if(t&&s)return{accessKeyId:t,secretAccessKey:s,sessionToken:process.env.AWS_SESSION_TOKEN};return R(process.env.AWS_PROFILE||"default")??{accessKeyId:"",secretAccessKey:""}}function R(e){let{existsSync:t,readFileSync:s}=Oe("node:fs"),{homedir:i}=Oe("node:os"),{join:r}=Oe("node:path"),o=process.env.AWS_SHARED_CREDENTIALS_FILE||r(i(),".aws","credentials");if(!t(o))return null;let c=s(o,"utf-8"),g=null,d,u,y;for(let h of c.split(`
 `)){let m=h.trim();if(!m||m.startsWith("#")||m.startsWith(";"))continue;let p=m.match(/^\[([^\]]+)\]$/);if(p){if(g===e&&d&&u)return{accessKeyId:d,secretAccessKey:u,sessionToken:y};g=p[1],d=void 0,u=void 0,y=void 0;continue}if(g===e){let[b,...S]=m.split("="),f=S.join("=").trim();switch(b.trim().toLowerCase()){case"aws_access_key_id":d=f;break;case"aws_secret_access_key":u=f;break;case"aws_session_token":y=f;break}}}if(g===e&&d&&u)return{accessKeyId:d,secretAccessKey:u,sessionToken:y};return null}function B(e){let{buffer:t,byteOffset:s,byteLength:i}=e;if(t instanceof ArrayBuffer)return t.slice(s,s+i);let r=new ArrayBuffer(i);return new Uint8Array(r).set(new Uint8Array(e)),r}class a{client;region;explicitProfile;endpoint;endpointProtocol="https";forcePathStyle;explicitCredentials;constructor(e="us-east-1",t,s){let i=typeof e==="string"?s:e,r=typeof e==="string"?e:e.region??"us-east-1",o=typeof e==="string"?t:e.profile,c=i?.endpoint?mr({region:r,path:"/",endpoint:i.endpoint}):void 0;this.region=r,this.explicitProfile=o,this.endpoint=c?.host,this.endpointProtocol=c?.protocol??"https",this.forcePathStyle=i?.forcePathStyle,this.explicitCredentials=i?.credentials,this.client=new n(i?.credentials,{profile:o,endpoint:i?.endpoint,forcePathStyle:i?.forcePathStyle})}getCredentials(){if(this.explicitCredentials?.accessKeyId&&this.explicitCredentials.secretAccessKey)return this.explicitCredentials;let e=Nt(this.explicitProfile);if(e.accessKeyId&&e.secretAccessKey)return e;throw Error("S3 credentials not found. Set AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY (or pass explicit credentials/profile), or configure ~/.aws/credentials.")}s3BaseHost(){return this.endpoint||`s3.${this.region}.amazonaws.com`}s3VirtualHost(e){return this.forcePathStyle?this.s3BaseHost():`${e}.${this.s3BaseHost()}`}objectPath(e,t){return this.forcePathStyle?`/${e}/${t}`:`/${t}`}objectUrl(e,t){return`${this.endpointProtocol}://${this.s3VirtualHost(e)}${this.objectPath(e,t)}`}async listBuckets(){let e=await this.client.request({service:"s3",region:this.region,method:"GET",path:"/"}),t=[],i=(e?.ListAllMyBucketsResult??e)?.Buckets?.Bucket;if(i){let r=Array.isArray(i)?i:[i];for(let o of r)t.push({Name:o.Name,CreationDate:o.CreationDate})}return{Buckets:t}}async createBucket(e,t){let s={};if(t?.acl)s["x-amz-acl"]=t.acl;let i;if(this.region!=="us-east-1"&&!this.endpoint)i=`<?xml version="1.0" encoding="UTF-8"?>
 <CreateBucketConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/">
   <LocationConstraint>${this.region}</LocationConstraint>

package/dist/deploy/index.js

@@ -1 +1 @@
-import{jr,zr,Sl,_i,Cl,bl,El,Xo,vl,Tl,fm,wl,S,Rl,Oi,we,Dl,Pl,bA,Nl,Am,EA,vA,TA,ym,Im,wA,RA,Sm,Cm,DA,Li,Kt,Yo,Kr,Wr,Wt,je,ht,$i,bm,Jr,kl,Bl,Zo,Fi,Yr,Ui,ga}from"../chunk-djd9xgkz.js";import{ma,Zr,en,Qi,Hi,Gi,qi,ha,fa}from"../chunk-vva43vnp.js";import{Aa}from"../chunk-7hy9p6xr.js";import"../chunk-5ww7kc5z.js";import"../chunk-thpce63q.js";import"../chunk-6g81m01r.js";import"../chunk-r5emv4x8.js";import"../chunk-zftpjxkr.js";import"../chunk-pkan6evc.js";import"../chunk-wjgnfg6q.js";import{Kl,ka,me,Ba,mn,Wl,xa,rc,ps,nc,Pt,Gn,gs}from"../chunk-7kwha0fw.js";import"../chunk-6nvn041c.js";import"../chunk-jb8em9ba.js";import"../chunk-3kapcdpn.js";import"../chunk-30h9rgfn.js";import{rt,wh,dc,Kn,Wn,Jn,zu}from"../chunk-5g1hsrab.js";import{B,hr,fr,lc,fs,u,Rh,Ku,Wu,sy,oy}from"../chunk-bqaqkmtr.js";import"../chunk-6j8f4ahv.js";import"../chunk-xxbvjq8g.js";export{wh as DEFAULT_SITE_PORT_RANGE,rt as HOST_SITES_DIR,Ba as IPV6_EXCLUDED_HOST_LABELS,rc as MANAGEMENT_DASHBOARD_SITE,jr as addSiteToCloudConfig,zu as allocateSitePorts,DA as buildAndPushContainerImage,Aa as buildAndPushServerlessImage,Kt as buildFunctionEnv,Wn as buildHostSitePortsScript,gs as buildManagementDashboardArtifact,ht as buildServerTopology,$i as buildServerlessTopology,bm as buildTopology,Zo as collectEgressMetrics,Kl as collectServerDnsDomains,Cm as createContainerImageDependencies,ym as createExistingStaticFullStackDependencies,Am as createStaticApiOriginDependencies,Yr as dashboardActions,ps as dashboardCredentialsFile,Dl as dashboardPageRoutes,ha as deleteStaticSite,wA as deployExistingStaticFullStack,Yo as deployServerlessApp,oy as deployShipsFiles,Nl as deploySite,EA as deployStaticApiOrigin,Hi as deployStaticSite,fa as deployStaticSiteFull,Zr as deployStaticSiteWithExternalDns,en as deployStaticSiteWithExternalDnsFull,kl as egressReportMetrics,S as ensureDashboardActor,Gn as ensureManagementDashboard,RA as estimateExistingStaticFullStackMonthlyCost,TA as estimateStaticApiOriginMonthlyCost,Bl as fetchEgressReport,Im as generateExistingStaticFullStackTemplate,ma as generateExternalDnsStaticSiteTemplate,Qi as generateStaticSiteTemplate,Rh as hasComputeConfigured,lc as hasProxyUpstream,Sm as hashContainerContext,mn as hostAcceptsIpv6,Li as infraEnvFromOutputs,Rl as initializeDashboardControlPlane,qi as invalidateCache,hr as isPhpSite,Xo as isValidHostname,me as normalizePublicIpv6,Kn as occupiedHostPorts,Jn as parseHostSiteFragments,dc as parseUpstreamPort,Wl as reconcileAddressRecords,Kr as redeployServerlessApp,zr as removeSiteFromCloudConfig,ka as removeStaleServerAddressRecords,vl as renderAliasesValue,El as renderEnvValue,Tl as renderRedirectsValue,fm as renderSiteSnippet,Cl as renderSslValue,bl as renderStringValue,Ui as resolveDashboardAction,nc as resolveDashboardAuth,Jr as resolveDashboardData,Pl as resolveLegacyDashboardRoute,fr as resolveProxyUpstreams,fs as resolveSiteDeployTarget,u as resolveSiteKind,Pt as resolveUiSource,Wr as rollbackServerlessApp,bA as routesForDashboard,je as runRemoteCommand,Fi as sanitizeCloudConfig,wl as setAttachToInCloudConfig,Wt as setMaintenance,_i as setSitePropertyInCloudConfig,Wu as shipsARelease,sy as shipsToBucket,B as siteInstallBase,ga as startLocalDashboardServer,Oi as synchronizeDashboardUsers,we as trackDashboardOperation,Sl as updateSiteInCloudConfig,Gi as uploadStaticFiles,Ku as validateDeploymentConfig,xa as verifyAddressRecord,vA as verifyStaticApiOrigin};
+import{jr,zr,Sl,_i,Cl,bl,El,Xo,vl,Tl,fm,wl,S,Rl,Oi,we,Dl,Pl,bA,Nl,Am,EA,vA,TA,ym,Im,wA,RA,Sm,Cm,DA,Li,Kt,Yo,Kr,Wr,Wt,ze,ft,$i,bm,Jr,kl,Bl,Zo,Fi,Yr,Ui,ga}from"../chunk-2knc1zyy.js";import{ma,Zr,en,Qi,Hi,Gi,qi,ha,fa}from"../chunk-x07tpsv0.js";import{Aa}from"../chunk-w495x89g.js";import"../chunk-88nxsyry.js";import"../chunk-cy6qh4ea.js";import"../chunk-6g81m01r.js";import"../chunk-r5emv4x8.js";import"../chunk-zftpjxkr.js";import"../chunk-6t9tjvpy.js";import"../chunk-wjgnfg6q.js";import{Kl,ka,he,Ba,mn,Wl,xa,rc,ps,nc,Pt,Gn,gs}from"../chunk-678rwkz8.js";import"../chunk-6nvn041c.js";import"../chunk-jb8em9ba.js";import"../chunk-yq3pdbz7.js";import"../chunk-30h9rgfn.js";import{nt,wh,dc,Kn,Wn,Jn,zu}from"../chunk-83p688yv.js";import{B,hr,fr,lc,fs,u,Rh,Ku,Wu,sy,oy}from"../chunk-g9mnmddy.js";import"../chunk-a6k322xc.js";import"../chunk-jvqcw0b4.js";export{wh as DEFAULT_SITE_PORT_RANGE,nt as HOST_SITES_DIR,Ba as IPV6_EXCLUDED_HOST_LABELS,rc as MANAGEMENT_DASHBOARD_SITE,jr as addSiteToCloudConfig,zu as allocateSitePorts,DA as buildAndPushContainerImage,Aa as buildAndPushServerlessImage,Kt as buildFunctionEnv,Wn as buildHostSitePortsScript,gs as buildManagementDashboardArtifact,ft as buildServerTopology,$i as buildServerlessTopology,bm as buildTopology,Zo as collectEgressMetrics,Kl as collectServerDnsDomains,Cm as createContainerImageDependencies,ym as createExistingStaticFullStackDependencies,Am as createStaticApiOriginDependencies,Yr as dashboardActions,ps as dashboardCredentialsFile,Dl as dashboardPageRoutes,ha as deleteStaticSite,wA as deployExistingStaticFullStack,Yo as deployServerlessApp,oy as deployShipsFiles,Nl as deploySite,EA as deployStaticApiOrigin,Hi as deployStaticSite,fa as deployStaticSiteFull,Zr as deployStaticSiteWithExternalDns,en as deployStaticSiteWithExternalDnsFull,kl as egressReportMetrics,S as ensureDashboardActor,Gn as ensureManagementDashboard,RA as estimateExistingStaticFullStackMonthlyCost,TA as estimateStaticApiOriginMonthlyCost,Bl as fetchEgressReport,Im as generateExistingStaticFullStackTemplate,ma as generateExternalDnsStaticSiteTemplate,Qi as generateStaticSiteTemplate,Rh as hasComputeConfigured,lc as hasProxyUpstream,Sm as hashContainerContext,mn as hostAcceptsIpv6,Li as infraEnvFromOutputs,Rl as initializeDashboardControlPlane,qi as invalidateCache,hr as isPhpSite,Xo as isValidHostname,he as normalizePublicIpv6,Kn as occupiedHostPorts,Jn as parseHostSiteFragments,dc as parseUpstreamPort,Wl as reconcileAddressRecords,Kr as redeployServerlessApp,zr as removeSiteFromCloudConfig,ka as removeStaleServerAddressRecords,vl as renderAliasesValue,El as renderEnvValue,Tl as renderRedirectsValue,fm as renderSiteSnippet,Cl as renderSslValue,bl as renderStringValue,Ui as resolveDashboardAction,nc as resolveDashboardAuth,Jr as resolveDashboardData,Pl as resolveLegacyDashboardRoute,fr as resolveProxyUpstreams,fs as resolveSiteDeployTarget,u as resolveSiteKind,Pt as resolveUiSource,Wr as rollbackServerlessApp,bA as routesForDashboard,ze as runRemoteCommand,Fi as sanitizeCloudConfig,wl as setAttachToInCloudConfig,Wt as setMaintenance,_i as setSitePropertyInCloudConfig,Wu as shipsARelease,sy as shipsToBucket,B as siteInstallBase,ga as startLocalDashboardServer,Oi as synchronizeDashboardUsers,we as trackDashboardOperation,Sl as updateSiteInCloudConfig,Gi as uploadStaticFiles,Ku as validateDeploymentConfig,xa as verifyAddressRecord,vA as verifyStaticApiOrigin};

package/dist/dns/index.js

@@ -1 +1 @@
-import{un,Ne,Ct,bt,Et,pn,Yi,Zi,ge,es,ts,rs,ns,ne,is,ss,os,T,Pa,gn,Na}from"../chunk-pkan6evc.js";import"../chunk-wjgnfg6q.js";import"../chunk-30h9rgfn.js";export{bt as CloudflareProvider,gn as DnsProviderFactory,Ct as GoDaddyProvider,un as PROXIABLE_RECORD_TYPES,Ne as PorkbunProvider,ge as Route53Provider,ne as UnifiedDnsValidator,rs as applyZoneMigration,T as createDnsProvider,ss as createGoDaddyValidator,is as createPorkbunValidator,os as createRoute53Validator,Pa as detectDnsProvider,Na as dnsProviders,es as exportRoute53Zone,ts as planZoneMigration,Et as policyTag,pn as qualifyName,Zi as reconcileDeclaredRecords,Yi as resolveDeclaredRecords,ns as verifyZoneParity};
+import{un,Ne,bt,Et,vt,pn,Yi,Zi,me,es,ts,rs,ns,ie,is,ss,os,T,Pa,gn,Na}from"../chunk-6t9tjvpy.js";import"../chunk-wjgnfg6q.js";import"../chunk-30h9rgfn.js";export{Et as CloudflareProvider,gn as DnsProviderFactory,bt as GoDaddyProvider,un as PROXIABLE_RECORD_TYPES,Ne as PorkbunProvider,me as Route53Provider,ie as UnifiedDnsValidator,rs as applyZoneMigration,T as createDnsProvider,ss as createGoDaddyValidator,is as createPorkbunValidator,os as createRoute53Validator,Pa as detectDnsProvider,Na as dnsProviders,es as exportRoute53Zone,ts as planZoneMigration,vt as policyTag,pn as qualifyName,Zi as reconcileDeclaredRecords,Yi as resolveDeclaredRecords,ns as verifyZoneParity};

package/dist/drivers/index.js

@@ -1 +1 @@
-import{hn,vt,nr,Tt,fn,An,yn,In,Zl,_a,he,or,Mm,Sn,Oa,Xe,fe,Rt,N,ar,Cn,cr,se,La,bn,$a,En,Ma,dr,Ua,ke,z,Qa,Ye,Be,xe,Ze,Ae,ds,Ha,eu,tu,Ga,ru,et,vn,qa,nu,iu,Va,lr,ye,ja,su,ou,ls,Tn,tt,au,cu,du,lu,uu,pu,gu,mu,hu,wn,Rn,Dn,Pn,Nn,kn,Bn,fu,Au,ur,k,us,yu,Iu,Su,za,Cu,bu,Fm,Ka,Um,Qm,Eu,vu,Hm,Gm,qm,Wa,Tu,Vm,jm,zm,xn,_n,On,Ln,Ja,Xa,Ya,Za,Km,$n,Mn,Un,Qn,ec,tc,Hn,ms,ic,qn,sc,Wm,Jm,Xm,Ym}from"../chunk-7kwha0fw.js";import"../chunk-6nvn041c.js";import"../chunk-jb8em9ba.js";import"../chunk-3kapcdpn.js";import"../chunk-30h9rgfn.js";import"../chunk-bqaqkmtr.js";import"../chunk-xxbvjq8g.js";export{Za as AwsBoxProvisioner,ar as AwsDriver,Su as BOOT_PARTITION_LABEL,us as CloudDriverFactory,An as DEFAULT_RPX_CERTS_DIR,Iu as FIRST_BOOT_SCRIPT_PATH,Ya as HetznerBoxProvisioner,dr as HetznerClient,Ae as HetznerDriver,Qa as LEGACY_DRIVER_STATE_DIR,ds as LocalBoxDriver,Jm as MANAGED_CACHE_POLICY_DISABLED,Wm as MANAGED_CACHE_POLICY_OPTIMIZED,Xm as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,ou as RASPBERRY_PI_DEFAULT_SWAP_GB,Ma as REMOTE_SCRIPT_RUNNER,Sn as RPX_DIR,Oa as RPX_LAUNCHER_PATH,Xe as RPX_SERVICE_NAME,ja as SSH_BOOTSTRAP_MARKER_DIR,ye as SSH_BOOTSTRAP_VERSION,tt as SSH_DEFAULTS,Bn as SSH_DEPLOY_STORAGE_PATH,eu as SSH_INSECURE_HOST_KEY_OPTS,tu as SSH_KEEPALIVE_OPTS,Rn as SSH_PREFLIGHT_SCRIPT,fu as SSH_SKIP_BOOTSTRAP_ENV,ur as SshDriver,lr as SystemSshTransport,Ja as UBUNTU_2404_AMI_PARAM,zm as acquireResizeLock,Hm as applyHetznerHostOptimization,ls as assertArchSupported,Au as assertSshComputeConfig,ec as buildAwsArtifactFetch,Xa as buildBoxUserData,Ym as buildCloudFrontOriginConfig,za as buildCloudInitFirstBoot,vu as buildHetznerHostOptimizationScript,Hn as buildHostCleanupScript,tc as buildLocalArtifactFetch,he as buildRpxConfig,Rt as buildRpxFragmentRefreshScript,or as buildRpxLbConfig,fe as buildRpxProvisionScript,ru as buildScpArgsFor,Mn as buildSiteDeployScript,Cn as buildSshArgs,Ga as buildSshArgsFor,Tn as buildSshBootstrapScript,Un as buildStaticSiteDeployScript,yu as cloudDrivers,Gm as collectHetznerHostOptimizationReport,Ka as collectHetznerResizeManifest,Km as createBoxProvisioner,k as createCloudDriver,ic as deployAllComputeSites,ms as deploySiteRelease,_a as deriveRouteId,hn as describeScriptSyntaxError,Ye as driverStateDir,Be as driverStatePath,_n as ensureFirewall,On as ensureServer,xn as ensureSshKey,Pn as evaluatePreflight,Fm as executeHetznerServerResize,iu as findKnownHostKey,kn as formatPreflightFindings,vt as formatSshFailure,In as gatewayHostnames,N as generateUbuntuAppCloudInit,yn as hasAutoWwwVariant,Ha as isBoxMode,bu as isHetznerCapacityError,fn as isLocalDatabase,nu as knownHostsLine,qa as knownHostsToken,Zl as normalizeRoutePath,ke as normalizeSshPublicKey,Dn as parsePreflightFacts,Cu as planHetznerServerResize,Nn as preflightFailed,Um as prepareHetznerResize,xe as readDriverState,Vm as readResizeCheckpoint,Qn as releaseTarballTmpPath,qn as reloadRpxGateway,En as remoteScriptRunner,Mm as renderRpxLauncher,sc as renewRpxCertificates,Wa as resizeCheckpointPath,Tu as resizeLockPath,$n as resolveExecStart,Ua as resolveHetznerApiToken,Eu as resolveHetznerHostOptimizationPlan,uu as resolveSshHostKeyPolicy,au as resolveSshHosts,hu as resolveSshLan,du as resolveSshPort,lu as resolveSshPrivateKeyPath,gu as resolveSshProfile,mu as resolveSshPublicIp,wn as resolveSshSettings,pu as resolveSshSudo,cu as resolveSshUser,vn as scanHostKey,La as scpUpload,Ln as serverPublicIpv4,su as sshBootstrapMarkerPath,cr as sshExec,se as sshExecOrThrow,et as sshHostKeyFingerprint,Va as sshKnownHostsPath,Tt as summarizeRemoteFailures,nr as surfaceRemoteNotices,qm as verifyHetznerHostOptimization,Qm as verifyHetznerResize,$a as waitForCloudInit,bn as waitForSsh,z as wrapCloudInitUserData,Ze as writeDriverState,jm as writeResizeCheckpoint};
+import{hn,Tt,nr,wt,fn,An,yn,In,Zl,_a,z,or,Mm,Sn,Oa,Ye,fe,ke,N,ar,Cn,cr,oe,La,bn,$a,En,Ma,dr,Ua,Be,K,Qa,Ze,xe,_e,et,Ae,ds,Ha,eu,tu,Ga,ru,tt,vn,qa,nu,iu,Va,lr,ye,ja,su,ou,ls,Tn,rt,au,cu,du,lu,uu,pu,gu,mu,hu,wn,Rn,Dn,Pn,Nn,kn,Bn,fu,Au,ur,k,us,yu,Iu,Su,za,Cu,bu,Fm,Ka,Um,Qm,Eu,vu,Hm,Gm,qm,Wa,Tu,Vm,jm,zm,xn,_n,On,Ln,Ja,Xa,Ya,Za,Km,$n,Mn,Un,Qn,ec,tc,Hn,ms,ic,qn,sc,Wm,Jm,Xm,Ym}from"../chunk-678rwkz8.js";import"../chunk-6nvn041c.js";import"../chunk-jb8em9ba.js";import"../chunk-yq3pdbz7.js";import"../chunk-30h9rgfn.js";import"../chunk-g9mnmddy.js";import"../chunk-jvqcw0b4.js";export{Za as AwsBoxProvisioner,ar as AwsDriver,Su as BOOT_PARTITION_LABEL,us as CloudDriverFactory,An as DEFAULT_RPX_CERTS_DIR,Iu as FIRST_BOOT_SCRIPT_PATH,Ya as HetznerBoxProvisioner,dr as HetznerClient,Ae as HetznerDriver,Qa as LEGACY_DRIVER_STATE_DIR,ds as LocalBoxDriver,Jm as MANAGED_CACHE_POLICY_DISABLED,Wm as MANAGED_CACHE_POLICY_OPTIMIZED,Xm as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,ou as RASPBERRY_PI_DEFAULT_SWAP_GB,Ma as REMOTE_SCRIPT_RUNNER,Sn as RPX_DIR,Oa as RPX_LAUNCHER_PATH,Ye as RPX_SERVICE_NAME,ja as SSH_BOOTSTRAP_MARKER_DIR,ye as SSH_BOOTSTRAP_VERSION,rt as SSH_DEFAULTS,Bn as SSH_DEPLOY_STORAGE_PATH,eu as SSH_INSECURE_HOST_KEY_OPTS,tu as SSH_KEEPALIVE_OPTS,Rn as SSH_PREFLIGHT_SCRIPT,fu as SSH_SKIP_BOOTSTRAP_ENV,ur as SshDriver,lr as SystemSshTransport,Ja as UBUNTU_2404_AMI_PARAM,zm as acquireResizeLock,Hm as applyHetznerHostOptimization,ls as assertArchSupported,Au as assertSshComputeConfig,ec as buildAwsArtifactFetch,Xa as buildBoxUserData,Ym as buildCloudFrontOriginConfig,za as buildCloudInitFirstBoot,vu as buildHetznerHostOptimizationScript,Hn as buildHostCleanupScript,tc as buildLocalArtifactFetch,z as buildRpxConfig,ke as buildRpxFragmentRefreshScript,or as buildRpxLbConfig,fe as buildRpxProvisionScript,ru as buildScpArgsFor,Mn as buildSiteDeployScript,Cn as buildSshArgs,Ga as buildSshArgsFor,Tn as buildSshBootstrapScript,Un as buildStaticSiteDeployScript,yu as cloudDrivers,Gm as collectHetznerHostOptimizationReport,Ka as collectHetznerResizeManifest,Km as createBoxProvisioner,k as createCloudDriver,ic as deployAllComputeSites,ms as deploySiteRelease,_a as deriveRouteId,hn as describeScriptSyntaxError,Ze as driverStateDir,xe as driverStatePath,_n as ensureFirewall,On as ensureServer,xn as ensureSshKey,Pn as evaluatePreflight,Fm as executeHetznerServerResize,iu as findKnownHostKey,kn as formatPreflightFindings,Tt as formatSshFailure,In as gatewayHostnames,N as generateUbuntuAppCloudInit,yn as hasAutoWwwVariant,Ha as isBoxMode,bu as isHetznerCapacityError,fn as isLocalDatabase,nu as knownHostsLine,qa as knownHostsToken,Zl as normalizeRoutePath,Be as normalizeSshPublicKey,Dn as parsePreflightFacts,Cu as planHetznerServerResize,Nn as preflightFailed,Um as prepareHetznerResize,_e as readDriverState,Vm as readResizeCheckpoint,Qn as releaseTarballTmpPath,qn as reloadRpxGateway,En as remoteScriptRunner,Mm as renderRpxLauncher,sc as renewRpxCertificates,Wa as resizeCheckpointPath,Tu as resizeLockPath,$n as resolveExecStart,Ua as resolveHetznerApiToken,Eu as resolveHetznerHostOptimizationPlan,uu as resolveSshHostKeyPolicy,au as resolveSshHosts,hu as resolveSshLan,du as resolveSshPort,lu as resolveSshPrivateKeyPath,gu as resolveSshProfile,mu as resolveSshPublicIp,wn as resolveSshSettings,pu as resolveSshSudo,cu as resolveSshUser,vn as scanHostKey,La as scpUpload,Ln as serverPublicIpv4,su as sshBootstrapMarkerPath,cr as sshExec,oe as sshExecOrThrow,tt as sshHostKeyFingerprint,Va as sshKnownHostsPath,wt as summarizeRemoteFailures,nr as surfaceRemoteNotices,qm as verifyHetznerHostOptimization,Qm as verifyHetznerResize,$a as waitForCloudInit,bn as waitForSsh,K as wrapCloudInitUserData,et as writeDriverState,jm as writeResizeCheckpoint};

package/dist/index.d.ts

@@ -39,7 +39,7 @@ export { collectServerDnsDomains, hostAcceptsIpv6, IPV6_EXCLUDED_HOST_LABELS, no
 export type { AddressRecordReport } from './deploy/server-dns';
 export * from './cdn';
 export type { EnsureDashboardLogger, ResolvedDashboardAuth, StaticSiteConfig, DeployResult, UploadOptions, ExternalDnsStaticSiteConfig, ExternalDnsDeployResult, DeploySiteConfig, DeploySiteResult, StaticSiteDnsProvider, SiteDeployKind, DeploymentValidationResult, BuildImageOptions, BuiltImage, CodeSource, DeployServerlessOptions, ResolvedContext, } from './deploy';
-export { createCloudDriver, CloudDriverFactory, cloudDrivers, AwsDriver, HetznerDriver, SshDriver, SystemSshTransport, resolveSshSettings, buildSshBootstrapScript, SSH_BOOTSTRAP_VERSION, evaluatePreflight, formatPreflightFindings, parsePreflightFacts, preflightFailed, SSH_PREFLIGHT_SCRIPT, buildCloudInitFirstBoot, driverStatePath, readDriverState, writeDriverState, HetznerClient, resolveHetznerApiToken, normalizeSshPublicKey, ensureFirewall, ensureServer, ensureSshKey, serverPublicIpv4, sshExec, sshExecOrThrow, scpUpload, waitForSsh, waitForCloudInit, buildSshArgs, generateUbuntuAppCloudInit, wrapCloudInitUserData, buildHostCleanupScript, buildSiteDeployScript, buildStaticSiteDeployScript, resolveExecStart, deployAllComputeSites, deploySiteRelease, isLocalDatabase, reloadRpxGateway, renewRpxCertificates, gatewayHostnames, hasAutoWwwVariant, DEFAULT_RPX_CERTS_DIR, } from './drivers';
+export { createCloudDriver, CloudDriverFactory, cloudDrivers, AwsDriver, HetznerDriver, SshDriver, SystemSshTransport, resolveSshSettings, buildSshBootstrapScript, SSH_BOOTSTRAP_VERSION, evaluatePreflight, formatPreflightFindings, parsePreflightFacts, preflightFailed, SSH_PREFLIGHT_SCRIPT, buildCloudInitFirstBoot, driverStatePath, readDriverState, writeDriverState, HetznerClient, resolveHetznerApiToken, normalizeSshPublicKey, ensureFirewall, ensureServer, ensureSshKey, serverPublicIpv4, sshExec, sshExecOrThrow, scpUpload, waitForSsh, waitForCloudInit, buildSshArgs, generateUbuntuAppCloudInit, wrapCloudInitUserData, buildHostCleanupScript, buildSiteDeployScript, buildStaticSiteDeployScript, resolveExecStart, deployAllComputeSites, deploySiteRelease, isLocalDatabase, reloadRpxGateway, renewRpxCertificates, gatewayHostnames, hasAutoWwwVariant, DEFAULT_RPX_CERTS_DIR, buildRpxConfig, buildRpxFragmentRefreshScript, } from './drivers';
 export type { CreateCloudDriverOptions } from './drivers/factory';
 export type { DriverState, FirstBootBundle, FirstBootIdentity, FirstBootOs, ResolvedSshSettings, SshDriverOptions, SshDriverState, SshPreflightFacts, SshTransport, SshTransportOptions, } from './drivers';
 export { dashboardActions, resolveDashboardAction, sanitizeCloudConfig, startLocalDashboardServer, } from './deploy/local-dashboard-server';